Oukitel WP5 Pro

Search This thread

Toutlibre

Senior Member
Jan 1, 2022
121
13
Of couse.
Now only a lazy Chinese does not release smartphones, but not many people have the required qualifications...
That's why the Project Treble was created (IMHO)
But we won't take oukitel seriously... They are not up to us

- I suppose when one Chinese worker have in front of the screen the open code from his Company that's more easy
to understand and set it up when asked to ..

I'm a bit worry only SwedishForenger gave a try and far away from his home.
- This tool made by a Reverse Engineer and Data/Cryptanalyst is more complicated than I thought, especially on how to.
- Some explanations here but that's short.
- I watched entirely his 1 hour stage, still trying to figure out his engineer words, might be clearer for some of you.
- At this point, the one I understood, there are several securities. If one is changed then the others must match and so on.
- Unfortunately I'm not having enough skills to use it :/
 

2mkl

Senior Member
Jan 2, 2011
161
19
In fact, data encryption and protection against unauthorized changes to OS software elements are two different things.
We should be interested in protection...
 

df_ni

Member
Feb 15, 2021
17
0
"Did you guys check in one of your init*.rc scripts why sim card makes problems when phone is booted as RW with fstab? Maybe sim card itself is mounted as ro or something?
Hi.
IMHO. To check any init.rc script we need to know what device ( in /dev ) responsible for sim card.
Is it one of /dev/tty...?
And if you get an error vith sim card after boot then you can try to get information about it from `dmesg`
 

SwedishForenger

Senior Member
Mar 26, 2021
260
49
.

Everything that is interesting, like the system-dump etc is encrypted. Have been sitting for hours trying to decrypt the files, but to no avail. But I found out that systems were unencrypted R/W during the flashing state, and was encrypted during first boot. In practice, this means that we must find a way DIRECTLY after flashing stock firmware, to prevent the system to enable encryption during the first boot. if we can disable the encryption flag in some way maybe. Ore flash a file directly after stock firmware, like no-verity-opt-encrypt.zip. Put this file on your SD card, after flashing stock, boot directly in to STOCK-recovery and flash this file as UPDATE.

And then boot the phone, install root explorer and check the system, Is it R/W now ?!.

DeepinScreenshot_select-area_20220117132550.png


.
 

Attachments

  • no-verity-opt-encrypt-6.1.zip
    655.5 KB · Views: 1
Last edited:

SwedishForenger

Senior Member
Mar 26, 2021
260
49
https://github.com/bkerler/android_universal
- From the same Author.
I am not having currently on my phone stock rom
Enjoy
.

This script has internal Python problems .... Debugging this project can take weeks.

DeepinScreenshot_select-area_20220117161617.png


Others have already come to terms with this problems as well:


.
 

Toutlibre

Senior Member
Jan 1, 2022
121
13
.

Everything that is interesting, like the system-dump etc is encrypted. Have been sitting for hours trying to decrypt the files, but to no avail. But I found out that systems were unencrypted R/W during the flashing state, and was encrypted during first boot. In practice, this means that we must find a way DIRECTLY after flashing stock firmware, to prevent the system to enable encryption during the first boot. if we can disable the encryption flag in some way maybe. Ore flash a file directly after stock firmware, like no-verity-opt-encrypt.zip. Put this file on your SD card, after flashing stock, boot directly in to STOCK-recovery and flash this file as UPDATE.

And then boot the phone, install root explorer and check the system, Is it R/W now ?!.

Very interesting yes, seems the preloader must be intact before to start anything.
I flashed back to Stock then I started to process following Bkerler "dires".
Ended up "red state" and "bootloop"
I am still thinking that I badly used this program.
I wanted to start the process in preloader mode but handshaking always failed (?) could you try ? you maybe more lucky.
I let here the full log in case that could help.
 

Attachments

  • mtkclient-log.txt
    91.8 KB · Views: 4

Toutlibre

Senior Member
Jan 1, 2022
121
13
.

This script has internal Python problems .... Debugging this project can take weeks.



Others have already come to terms with this problems as well:


.
Have you tried without using su - ?
But perhaps more with or without sudo ?
Sorry I posted this one but didn't use it.
 

SwedishForenger

Senior Member
Mar 26, 2021
260
49
Very interesting yes, seems the preloader must be intact before to start anything.
I flashed back to Stock then I started to process following Bkerler "dires".
Ended up "red state" and "bootloop"
I am still thinking that I badly used this program.
I wanted to start the process in preloader mode but handshaking always failed (?) could you try ? you maybe more lucky.
I let here the full log in case that could help.
.

Do you sign the files before flashing them back?. The files are signed with cryp-google keys.

.
 

Toutlibre

Senior Member
Jan 1, 2022
121
13
The only "error" which is not one in this log is about the preloader.
- That annoys me because I can't start to it, "handshaking failed", I can only start in BROM mode.
- I think it could only miss this first step before to enter in BROM mode to make the full clean process.
 

SwedishForenger

Senior Member
Mar 26, 2021
260
49
Nope, I just followed the Bkerler instructions. Have you had a look on the log I sent above ?
.

Yes, the script disconnects the handshake, fails to reconnect and upload and execute commands.
I have read lots of comments online that experience the same problem as you, and for those who have managed to create a new boot, it provides RED state.


I think the best option we have right now, is to find a custom MTK kernel.
.
 

Toutlibre

Senior Member
Jan 1, 2022
121
13
.

Yes, the script disconnects the handshake, fails to reconnect and upload and execute commands.
I have read lots of comments online that experience the same problem as you, and for those who have managed to create a new boot, it provides RED state.


I think the best option we have right now, is to find a custom MTK kernel.
.

I flashed back to stock rom.
So we are still hanging on this issue
https://github.com/bkerler/mtkclient/issues/52
If reading a bit what they wrote about it, there is still maybe this to try
https://github.com/MTK-bypass/bypass_utility
 

2mkl

Senior Member
Jan 2, 2011
161
19
.

Everything that is interesting, like the system-dump etc is encrypted. Have been sitting for hours trying to decrypt the files, but to no avail. But I found out that systems were unencrypted R/W during the flashing state, and was encrypted during first boot. In practice, this means that we must find a way DIRECTLY after flashing stock firmware, to prevent the system to enable encryption during the first boot. if we can disable the encryption flag in some way maybe. Ore flash a file directly after stock firmware, like no-verity-opt-encrypt.zip. Put this file on your SD card, after flashing stock, boot directly in to STOCK-recovery and flash this file as UPDATE.

And then boot the phone, install root explorer and check the system, Is it R/W now ?!.

.
From our friend:
"no-verity-opt-encrypt-6.0.zip => used in A9
In A10 the enc/dec is more than you only install zip. Super partition is ro and if you want change/copy some file in the System,Vendor,Product partitions so you need change Super.img the ro mode to rw mode."
 

2mkl

Senior Member
Jan 2, 2011
161
19
We already got rw there. Only the phone does not see the SIM card, but this is not important yet
I have been looking for a custom rom whith custom kernel for our processor for a long time, but have not yet found it.
From other MTKs, the kernel may simply not be suitable
 

SwedishForenger

Senior Member
Mar 26, 2021
260
49
We already got rw there. Only the phone does not see the SIM card, but this is not important yet
I have been looking for a custom rom whith custom kernel for our processor for a long time, but have not yet found it.
From other MTKs, the kernel may simply not be suitable
.

I'm thinking of something that works for android 11/12 roms.

.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 4
    Hi all... Until we get ROOT to this phone.

    I have been using WP5 Pro as my daily driver for 9 months now, and am super happy with it.
    However... After 3 months, the large 8000Ah battery didn't last as long as it should.
    So I opened it up in ADB :
    adb shell 'pm list packages -f' | sed -e 's/.*=//' | sort
    ore
    adb shell pm list packages
    and took a closer look at the pre installed crap on the phone. And I was shocked by all the unnecessary s*it i found. com.mediatek.atmwifimeta : Why is all my Wifi traffic logged and sent to a remote server !!!.

    To you who are interested in removing bloatware on your phone.
    I put together a list of crap you can delete without affecting your daily use of the phone.

    Just Copy & Paste in terminal and restart the phone.

    adb shell pm uninstall -k --user 0 com.ssui.chdmodel adb shell pm uninstall -k --user 0 com.android.companiondevicemanager adb shell pm uninstall -k --user 0 com.android.dynsystem adb shell pm uninstall -k --user 0 com.android.wallpaper.livepicker adb shell pm uninstall -k --user 0 com.google.android.apps.tachyon adb shell pm uninstall -k --user 0 com.google.android.apps.docs adb shell pm uninstall -k --user 0 com.google.android.apps.googleassistant adb shell pm uninstall -k --user 0 com.google.android.apps.wellbeing adb shell pm uninstall -k --user 0 com.google.android.apps.youtube.music adb shell pm uninstall -k --user 0 com.elephanttek.faceunlock adb shell pm uninstall -k --user 0 com.android.emergency adb shell pm uninstall -k --user 0 com.android.nfc adb shell pm uninstall -k --user 0 com.elephanttek.faceunlock adb shell pm uninstall -k --user 0 com.adups.privacypolicy adb shell pm uninstall -k --user 0 com.android.backupconfirm adb shell pm uninstall -k --user 0 com.adups.fota adb shell pm uninstall -k --user 0 com.android.bips adb shell pm uninstall -k --user 0 com.android.cts.ctsshim adb shell pm uninstall -k --user 0 com.android.cts.priv.ctsshim adb shell pm uninstall -k --user 0 com.android.localtransport adb shell pm uninstall -k --user 0 com.android.partnerbrowsercustomizations.example adb shell pm uninstall -k --user 0 com.android.printspooler adb shell pm uninstall -k --user 0 com.android.sharedstoragebackup adb shell pm uninstall -k --user 0 com.android.wallpaperbackup adb shell pm uninstall -k --user 0 com.debug.loggerui adb shell pm uninstall -k --user 0 com.android.traceur adb shell pm uninstall -k --user 0 com.android.htmlviewer adb shell pm uninstall -k --user 0 com.google.android.apps.restore adb shell pm uninstall -k --user 0 com.google.android.apps.restore adb shell pm uninstall -k --user 0 com.google.android.feedback adb shell pm uninstall -k --user 0 com.google.android.onetimeinitializer adb shell pm uninstall -k --user 0 com.google.android.gms.location.history adb shell pm uninstall -k --user 0 com.google.android.videos adb shell pm uninstall -k --user 0 com.mediatek.atmwifimeta adb shell pm uninstall -k --user 0 com.android.calllogbackup adb shell pm uninstall -k --user 0 com.ssui.setupwizard adb shell pm uninstall -k --user 0 com.ssui.sos

    You can Reinstall one or all apps again by putting:
    adb shell cmd package install-existing com.app name

    With USB Debugging enabled on your phone.....
    There is a lot to copy and paste, so I created a script that cleans your phone in 10 seconds from all this bloatware. Download it at the bottom of this post to your desktop, unzip it to your desktop, connect phone and double-click the Claning file.


    The default launcher on this phone is terrible. Here is a good alternative...
    Using Mod SMART LAUNCHER 5 PRO
    You can download it here: here.... here.... ore here..... just incase here too......

    photo_2021-03-26_04-47-14.jpgphoto_2021-03-26_04-47-19.jpgphoto_2021-03-26_04-48-57.jpg

    2.png
    3

    SOLUTION: DISSAPPEARING NOTIFICATIONS AFTER APPS UPDATES THROUGH THE GOOGLE STORE


    I do not understand what was the reason to make such a ****ty software by Oukitel, but finally i found a way to fix this. It was so annoying, when You have to check if notifications settings are all right every few days.

    Quick tutorial:
    1. You need root privileges. Installing Magisk was described some many times that i will skip this part.
    2. You need list of packages names for the apps, where You want to keep notifications settings all the time. You can obtain it for example through the shell:
    adb shell "pm list packages|cut -f 2 -d ":""
    You can also use some 3rd party app manager, which shows installed package names or check it via Google store. It does not matter.
    3. Now it is time to pull & edit /data/system/ssui_notification file.
    This is content of my ssui_notification:
    {packageName='com.ssui.keyguard', mainSwitch=1, lockScreenSwitch=0, showDetailSwitch=0, handsupSwitch=0, cornerSwitch=2, userOptSwitch=1, listType=1, status=1, userOperated=0}
    {packageName='com.ssui.launcher3', mainSwitch=0, lockScreenSwitch=0, showDetailSwitch=0, handsupSwitch=0, cornerSwitch=2, userOptSwitch=1, listType=1, status=1, userOperated=0}
    {packageName='com.android.music', mainSwitch=1, lockScreenSwitch=0, showDetailSwitch=0, handsupSwitch=0, cornerSwitch=1, userOptSwitch=1, listType=1, status=1, userOperated=0}
    *
    *
    *
    {packageName='com.twitter.android', mainSwitch=1, lockScreenSwitch=0, showDetailSwitch=0, handsupSwitch=1, cornerSwitch=1, userOptSwitch=1, listType=1, status=1, userOperated=0}
    {packageName='com.android.email', mainSwitch=1, lockScreenSwitch=0, showDetailSwitch=0, handsupSwitch=1, cornerSwitch=1, userOptSwitch=1, listType=1, status=1, userOperated=0}
    {packageName='com.linkedin.android', mainSwitch=1, lockScreenSwitch=0, showDetailSwitch=0, handsupSwitch=1, cornerSwitch=1, userOptSwitch=1, listType=1, status=1, userOperated=0}

    All You have to do is copy one line for example:
    {packageName='com.facebook.orca', mainSwitch=1, lockScreenSwitch=0, showDetailSwitch=0, handsupSwitch=1, cornerSwitch=1, userOptSwitch=1, listType=1, status=1, userOperated=0}
    and past it on the bottom with changed package name:
    {packageName='YOUR.APP.PACKAGE.NAME', mainSwitch=1, lockScreenSwitch=0, showDetailSwitch=0, handsupSwitch=1, cornerSwitch=1, userOptSwitch=1, listType=1, status=1, userOperated=0}
    This is example for Signal messenger:
    {packageName='org.thoughtcrime.securesms', mainSwitch=1, lockScreenSwitch=0, showDetailSwitch=0, handsupSwitch=1, cornerSwitch=1, userOptSwitch=1, listType=1, status=1, userOperated=0}
    Repeat this for all apps with disappearing notifications and save the file.
    4. After that You have to overwrite stock ssui_notification with just modified file. If You can not do this because of permission denied error, try to first delete stock file and after that copy modified file to the /data/system. It works for me.
    5. Reboot your phone*
    * I do not know if it is necessary step, but i did it to make sure that it will work.

    Voila, your notifications should not disappear anymore after apps update. I have checked it on few apps and so far it works!

    Unfortunately, this is not the best solution and You have to repeat this procedure after installing new apps, but probably most of people do not install new apps very often. I think it will be not a problem to make easy script to add automatically every installed app to the ssui_notification file, but the best solution will be if we will find which exactly process is responsible for this and just kill it. Maybe somebody will find that.

    I hope that it will be helpful for the rest of frustrated Oukitel users ;) Good Luck!
    3
    Ok.
    You need the latest stock firmware (v15) with unlocked bootloader. Install all drivers.
    To unlock bootloader you need to do this:
    1. In setting - About Phone - tap several times on Build number (developer options)
    2. In Satting - System - Developer options set OEM unlocking and USB debbuging.
    Reboot to bootloader -Vol UP+ Power and select fastboot (Vol Up- select, Vol Down -confirmation)
    In platform-tools ( I copyed cmd.exe to this folder)
    Code:
    fastboot flashing unlock
    Code:
    fastboot flashing unlock_critical
    (Every time you need confirm with Vol UP)
    !WARNING! All data will be lost.
    Reboot to system.
    Repeat steps 1 and 2.
    Then we install GSI (with TWRP or without).
    Boot.img must be from stock firmware.
    You must have vbmetaAndroidSC_mod.img and Havoc-OS-v3.12-20201230-Official-GApps-arm64-ab.img in platform-tool folder.
    Link for Havos 3.12 - https://sourceforge.net/projects/havoc-os/files/arm64-ab/ ( second with Gapps). Extract img from zip.
    Reboot to fastboot.
    In fastboot mode
    Code:
    fastboot --disable-verification flash vbmeta vbmetaAndroidSC_mod.img
    Code:
    fastboot -w
    Reboot to fastbootd
    Code:
    fastboot reboot fastboot
    In fastbootd
    Code:
    fastboot erase system
    Code:
    fastboot delete-logical-partition product
    Code:
    fastboot --disable-verity --disable-verification flash system Havoc-OS-v3.12-20201230-Official-GApps-arm64-ab.img
    Code:
    fastboot -w
    Return to normal fastboot
    Code:
    fastboot reboot bootloader
    In fastboot
    Code:
    fastboot erase userdata
    Code:
    fastboot reboot

    The system will boot in a few minutes
    But your phone won't have a Googl Play certificate.
    To fix this problem I did this:
    Install Magisk-v23.0.apk (disabled Check Updates and in Update Chanel set Custom Channel)
    Reflash boot.img to magisk_patched_boot.img by @xmucio
    In fastboot
    Code:
    fastboot flash boot magisk_patched_boot.img
    Code:
    fastboot --disable-verification flash vbmeta vbmetaAndroidSC_mod.img
    In Magisk set MagiskHide.
    From Magisk repository I installed Riru, BusyBox, MagiskHide Props Config and manualy SafetyNet Fix 2.1.1 (via Install from storage). Then I dissabled all Googl apps (Play market and so on).
    With help from MagiskHide Props Config I made a substitution of the phone and installed the certificate.
    In Termix I done this:
    Code:
    su
    Code:
    props
    You will seen like on picture.
    At first I done 2 (Forse BASIC key attestation)
    2
    d - (pick value from device list)
    3 - (Ulefone, becouse I have it)
    All confirmed.
    Then I done 1 (Edit device fingerprint
    1
    f
    3 - Ulefone
    Then enabled Google apps
    SafetyNet passed. The device is certified.
    2
    Runing on old Android 10?

    WP5 pro are being shipped with Android 10 V3 and V4 version of the firmware.
    However, ther is a new release of Android 10 V5 available for this phone!.

    Android 10 V5 can be downloaded here

    And all the tools needed to make the upgrade possible, you can find it here
    If you are wondering if it is difficult to do the update, you can watch a video on how to do it in this tool folder to.

    photo_2021-04-02_13-28-28.jpg
    2
    OUKITEL IMEI recovery
    1,1.jpg
    Had trouble making calls after flashing the Oukitel firmware to the phone.
    and daild *#06# and discovered that I had lost my IMEI number, which is used to register my phone on the carrier network. Without an IMEI number, you can either call, text or surf the internet. So it's crucial that you restore that number. Here is a small guide on how to reset your IMEI number on ALL smart phones, As long as you have USB drivers for that specific phon.
    I will use Windows 10 in this example, as this is the most common operating system to date. If linux users want a guide too, send me a pm.
    Ok, that out of the way, let's begin....

    Drivers...
    Is the key component for your phone to communicate with a computer, and for communicating with the different chipsets in your phone.

    Oukitel uses Mediatek drivers and can be downloaded here..…
    Extract the folder to your desktop. You will need a copy of the OUKITEL firmware.

    Oukitel WP5 here... and Oukitel WP5 pro here...


    Right click on windows taskbar icon, and click on Device manager.

    1.png


    Click on Action and on Add legacy hardware.
    2.png


    Click on install ....
    3.png


    Click on Brows...
    5.png

    Go in to the Mediatek folder you downloaded earlier and double-click on the android driver.
    You can do this for one or all the drivers, and the drivers in the 64 folder to.
    Reboot the computer....

    Now it's time to fix the missing IMEI number issue....
    To make this job as easy as possible for us, we will use the SN Write Tool.
    There are a lot of versions and editions of this tool for different phones, but for WP5 and WP5 pro we use v1-1924 which can be downloaded here ....
    Ok, let's begin....

    Open the SN_Write_Tool_v1.2020.00 folder and open the SN_Writ program.
    6.png


    Click on System Config.
    0Ww25wWsuT.png


    Onely IMEI and Dule IMEI is checkt.
    Now we need to tell the program to retrieve all the necessary information about your phone from the firmware databases. Now click on the MD1_DB button, and go in to the download OUKITEL firmware folder and in to the database folder.

    7.png

    8.png


    Double click on the MDDB file. Go to the next button AP_DB and add the next database file APDB file. Click the SAVE button.
    9.png


    Now we are ready to write the IMEI number to the phone. Click on the STRT button.
    Now enter your IMEI number. If you have not written it down, you can find it on the packaging the phone came with. Turn off your phone and prepare the USB-c cable.
    11.png


    Ckick OK button , and plug the USB cable into the computer and phone and wait a few seconds. A small text is displayed on the phone screen at the bottom left.
    12.jpg


    The program will verify with the database, before writing the IMEI number to the phone, This may take up to 1 min. If the program finds errors in your IMEI number, you will receive an error message. you can check your number or click OK.
    13.png


    When everything is ready, you will get a green light from the program.
    14.png


    Restart the phone and you now have a new IMEI numbers.....
    1,2.jpg