[Official] Note 3 Verizon Bootloader Unlock

[ryanbg]

Enjoy. Don't forget to thank @beaups too, he discovered the eMMC backdoor and exploited it!

UPDATE: [8/2/16] I have recompiled the binary with some fixes beaups made. These fixes should take care of the "samsung device only" error some are getting on 4.4 roms.

Disclosure: I do not own a Note 3. The exploit happened to be applicable to the Note 3, and we compiled it for your devices rather than not release it at all. This seems like a reasonable and friendly thing to do for the community. I can't help you root or teach you how to use ADB. It's important you have the ability to do these things or research them a bit before blindly using this. I am very familiar with Samsung however, and time permitting, will do my best to help anyone having issues.

You should not run this if you don't understand it.

ROOT REQUIRED, we aren't responsible for anything you do with this.
You NEED a MicroSD, and it WILL be formatted during this process.

YOU MUST DISABLE REACTIVATION LOCK OR YOU WILL HAVE ISSUES!!!!!!!!!
You can download the eMMC brick bug check app on the Play Store to verify your CID starts with 15. If it does, you are good. If not, it will not work.

The code below is NOT a script, you must enter the commands manually.

You must unzip the file first.

Download

adb push unlock_n3 /data/local/tmp/
adb shell
su
cd /data/local/tmp/
chmod 777 unlock_n3
chown root.root unlock_n3
./unlock_n3

Allow device to reboot. After full reboot, run

adb shell
su
cd /data/local/tmp/
./unlock_n3

again, power down and pull battery. May need to run it again if it doesn't work after the battery pull.

Paypal: [email protected] [COMPLETELY VOLUNTARY AND OPTIONAL]

 

[davekaz]

Your the best. Trying it right now

Sent from my SM-N900V using Tapatalk

---------- Post added at 02:10 PM ---------- Previous post was at 01:58 PM ----------

Enjoy. Don't forget to thank @beaups too, he discovered the eMMC backdoor and exploited it!

Disclosure: I do not own a Note 3. The exploit happened to be applicable to the Note 3, and we compiled it for your devices rather than not release it at all. This seems like a reasonable and friendly thing to do for the community. I can't help you root or teach you how to use ADB. It's important you have the ability to do these things or research them a bit before blindly using this. I am very familiar with Samsung however, and time permitting, will do my best to help anyone having issues.

You should not run this if you don't understand it.

ROOT REQUIRED, we aren't responsible for anything you do with this.
You NEED a MicroSD, and it WILL be formatted during this process.

YOU MUST DISABLE REACTIVATION LOCK OR YOU WILL HAVE ISSUES!!!!!!!!!
You can download the eMMC brick bug check app on the Play Store to verify your CID starts with 15. If it does, you are good. If not, it will not work.

The code below is NOT a script, you must enter the commands manually.

adb push samsung_unlock_n3 /data/local/tmp/
adb shell
su
cd /data/local/tmp/
chmod 777 samsung_unlock_n3
chown root.root samsung_unlock_n3
./samsung_unlock_n3

Allow device to reboot. After full reboot, run

adb shell
su
cd /data/local/tmp/
./samsung_unlock_n3

again, power down and pull battery. May need to run it again if it doesn't work after the battery pull.

Paypal: [email protected] [COMPLETELY VOLUNTARY AND OPTIONAL]

Perfect thanks so much ..this is tremendous [emoji120] [emoji120] donations are required. Donate to whom just breathed life into a great phone..Flashify idea by @alexp1289 was great idea to install recovery..this is f### ING awesome

Sent from my SM-N900V using Tapatalk

 

[BostonDan]

Awesome! Trying this now!

Cheers,
B.D.

 

[dreyeth]

God you are a life saver, I've been trying to get my uncle hooked up with a phone with a unlocked bootloader for awhile,
now he can use his current phone for it.

 

[jellyhead]

Does this work for v4.4.4 and 5.0?

 

[BackCheck]

Any idea how long it takes on the first reboot? I assume it formats the SD card and that takes some time and I only have a 64gb card so I'm guessing I'll be looking at the Verizon logo a while.

 

[Gl17ch]

Do the commands HAVE to be entered via adb? If I downloaded the zip to my phone, could I enter the commands through a terminal editor possibly?

 

[ryanbg]

Does this work for v4.4.4 and 5.0?

Yes.

Any idea how long it takes on the first reboot? I assume it formats the SD card and that takes some time and I only have a 64gb card so I'm guessing I'll be looking at the Verizon logo a while.

Try removing your SDCARD, boot up, and put it back in before you do it the second time.

Do the command HAVE to be entered via adb? If I downloaded the zip to my phone, could I enter the commands through a terminal editor possibly?

You should do it with adb instead of terminal emulator. You could do it with terminal emulator, but I don't recommend it.

 

[tomixnscale89]

I'm confused. It asked me to run the binary again to finish the process, but when i did that, it tried to change the CID again. Am i doing something wrong? The CID has changed to the one it displays on cmd.

 

[devildog9999]

I'm confused. It asked me to run the binary again to finish the process, but when i did that, it tried to change the CID again. Am i doing something wrong? The CID has changed to the one it displays on cmd.

Do a battery pull and run the second step again. It will say "backing up loaders" when it is actually done.

 

[BackCheck]

Yes.


Try removing your SDCARD, boot up, and put it back in before you do it the second time.


You should do it with adb instead of terminal emulator. You could do it with terminal emulator, but I don't recommend it.

It works, I have TWRP installed. I'll be divvying out donations come payday.

 

[dreyeth]

It works, I have TWRP installed. I'll be divvying out donations come payday.

Where did you get your TWRP build from?
The Note 3 Verizon hasn't had a unlocked bootloader until now, so I can't imagine there was a TWRP build ready for it.
Was there something close enough to be compatible, like a TWRP build for the developer edition?

 

[BackCheck]

Yes.


Try removing your SDCARD, boot up, and put it back in before you do it the second time.


You should do it with adb instead of terminal emulator. You could do it with terminal emulator, but I don't recommend it.

Where did you get your TWRP build from?
The Note 3 Verizon hasn't had a unlocked bootloader until now, so I can't imagine there was a TWRP build ready for it.
Was there something close enough to be compatible, like a TWRP build for the developer edition?

Flashify. It didn't look like they had much trouble getting it ported quickly for us. Now to get CM13 going but that'll be a little longer.

 

[dreyeth]

Flashify. It didn't look like they had much trouble getting it ported quickly for us. Now to get CM13 going but that'll be a little longer.

Sweet so that app auto flashes the recovery of your choice? and they have a TWRP port already for this?

I've always done it the manual way.

Thanks for the information.

 

[alexp1289]

Sweet so that app auto flashes the recovery of your choice? and they have a TWRP port already for this?

I've always done it the manual way.

Thanks for the information.

Yep just download the app and select the one in the pictures.

Download link for Flashify--

https://play.google.com/store/apps/details?id=com.cgollner.flashify




Sent from my SM-N900V using Tapatalk

 

[BackCheck]

Sweet so that app auto flashes the recovery of your choice? and they have a TWRP port already for this?

I've always done it the manual way.

Thanks for the information.

I got sick of using dd to reinstall recoveries on my LG V500. There are one or two other apps I've seen that do this but this one always worked for me.

 

[alphahere]

Sweet so that app auto flashes the recovery of your choice? and they have a TWRP port already for this?

I've always done it the manual way.

Thanks for the information.

https://twrp.me/devices/samsunggalaxynote3qualcomm.html

You still can download it manually. Read the notes and it shows the verizon note 3 supported.

Just confirmed good old "dd" method works fine and recovery boots nicely. Make sure you pick the correct version at the twrp website.

Now on to bigger and better things! Will donate!

 

[BostonDan]

I tried this, and no change to my CID... It's still starts with 15...... I'm expecting it to start with 11 when it works.... Any ideas? I'm using an 8GB sd card, and the card was erased as expected....

My output was:
<begin output>
Do you understand the implications of these warnings?

(Yes/No)
Y
Type "Yes" or "No"
(Yes/No)
yes
[+] CID at boot time is/was: 15------------------------------
[+] dev CID matching, proceding to unlock
[+] backing up loaders, this will take a few minutes
[+] loaders successfully backed up
[+] success! powering off device, hopefully its not bricked!
<end output>

I obfuscated the actual CID in the above output message. Is there any way to verify that this worked before I flash TWRP and possibly brick my device?

EDIT: Nevermind, I booted into download mode and found out that my device is seen as a "developer device". Anybody flash TWRP and CM13 yet?

Cheers,
B.D.

 

[Gl17ch]

Where did you get your TWRP build from?
The Note 3 Verizon hasn't had a unlocked bootloader until now, so I can't imagine there was a TWRP build ready for it.
Was there something close enough to be compatible, like a TWRP build for the developer edition?

I'm supposing that if I am running 5.0 the 4.4 TWRP will not work...

Once I get this to work will I be able to downgrade to 4.4/install a custom recovery/etc. ?

I tried this, and no change to my CID... It's still starts with 15...... I'm expecting it to start with 11 when it works.... Any ideas? I'm using an 8GB sd card, and the card was erased as expected....

My output was:
<begin output>
Do you understand the implications of these warnings?

(Yes/No)
Y
Type "Yes" or "No"
(Yes/No)
yes
[+] CID at boot time is/was: 15------------------------------
[+] dev CID matching, proceding to unlock
[+] backing up loaders, this will take a few minutes
[+] loaders successfully backed up
[+] success! powering off device, hopefully its not bricked!
<end output>

I obfuscated the actual CID in the above output message. Is there any way to verify that this worked before I flash TWRP and possibly brick my device?

EDIT: Nevermind, I booted into download mode and found out that my device is seen as a "developer device". Anybody flash TWRP and CM13 yet?

Cheers,
B.D.

Sent from my SM-N900V using XDA-Developers mobile app

 

[davekaz]

I tried this, and no change to my CID... It's still starts with 15...... I'm expecting it to start with 11 when it works.... Any ideas? I'm using an 8GB sd card, and the card was erased as expected....

My output was:
<begin output>
Do you understand the implications of these warnings?

(Yes/No)
Y
Type "Yes" or "No"
(Yes/No)
yes
[+] CID at boot time is/was: 15------------------------------
[+] dev CID matching, proceding to unlock
[+] backing up loaders, this will take a few minutes
[+] loaders successfully backed up
[+] success! powering off device, hopefully its not bricked!
<end output>

I obfuscated the actual CID in the above output message. Is there any way to verify that this worked before I flash TWRP and possibly brick my device?

EDIT: Nevermind, I booted into download mode and found out that my device is seen as a "developer device". Anybody flash TWRP and CM13 yet?

Cheers,
B.D.

App flashify installs Twrp easy. All there no searching works beatiful

Sent from my SM-N900V using Tapatalk