Root for all models that don't have it...

[andriasmelianus]

I sold this H870DS unrootable $hit, there are plenty of awesome devices with superior hardware for ultra-cheat price now, like Redmi Note 7, Honor V10, Honor Play

I think people are coming here because this device has some rare abilities in its class.
For me IP68 certificate & MIL-STD-810G are the things (which i didn't find on your list).
Too bad, some greedy f-ing companies secured this device terribly tight, so that we cannot get the best of this device.
CMIIW
Let's hope that someday, some geniuses like @runningnak3d, could break this "great-wall"

 

[badmaan]

I think people are coming here because this device has some rare abilities in its class.
For me IP68 certificate & MIL-STD-810G are the things (which i didn't find on your list).
Too bad, some greedy f-ing companies secured this device terribly tight, so that we cannot get the best of this device.
CMIIW
Let's hope that some day, some geniuses like @runningnak3d, could break this "great-wall"

It won't happen.

 

[badmaan]

This is so sad. @runningnak3d

---------- Post added at 06:18 PM ---------- Previous post was at 06:17 PM ----------

This is so sad. @runningnak3d

 

[ChazzMatt]

This is so sad. @runningnak3d

---------- Post added at 06:18 PM ---------- Previous post was at 06:17 PM ----------

This is so sad. @runningnak3d

V30 has everything specs-wise the G6 has and more. Every V30 in the world has bootloader unlock and root, and @runningnak3d helped tremendously with that.

That's your only choice.

Sent via open market LG US998 V30/V30+

 

[runningnak3d]

I think people are coming here because this device has some rare abilities in its class.
For me IP68 certificate & MIL-STD-810G are the things (which i didn't find on your list).
Too bad, some greedy f-ing companies secured this device terribly tight, so that we cannot get the best of this device.
CMIIW
Let's hope that someday, some geniuses like @runningnak3d, could break this "great-wall"

It won't happen.

This is so sad. @runningnak3d

---------- Post added at 06:18 PM ---------- Previous post was at 06:17 PM ----------

This is so sad. @runningnak3d

If you guys bothered to read the thread, I figured out how to root the rest of the G6s.. Unfortunately it requires a US997 to be sacrificed, and *I* am not going to be paying for it.

There was someone that said they would donate theirs to the cause, but they never got in touch with me.

-- Brian

 

[JEANRIVERA]

If you guys bothered to read the thread, I figured out how to root the rest of the G6s.. Unfortunately it requires a US997 to be sacrificed, and *I* am not going to be paying for it.

There was someone that said they would donate theirs to the cause, but they never got in touch with me.

-- Brian

In what way sacrifice? Will it become a brick?

 

[runningnak3d]

In what way sacrifice? Will it become a brick?

Need to clone it, so it could never be used as a phone again.

-- Brian

 

[Muadh09]

If you guys bothered to read the thread, I figured out how to root the rest of the G6s.. Unfortunately it requires a US997 to be sacrificed, and *I* am not going to be paying for it.

There was someone that said they would donate theirs to the cause, but they never got in touch with me.

-- Brian

Is there a paypal donation where we can contribute for the money to get even a used US997?

 

[runningnak3d]

Is there a paypal donation where we can contribute for the money to get even a used US997?

That is against XDA policy. You can start a donation thread, but at the end of the day, if no one pays up -- you are boned, and I am just not shelling out more cash on a phone that I don't own.

If you can find someone willing to make the purchase, and start a donation thread for them, that would be great.

It needs to be a US997 that either already has an unlock.bin that they will ship with the phone, or is eligible for an unlock.bin. If you buy a used phone, and someone had already requested the unlock.bin, but didn't include it, you can't get another one from LG.

Just a heads up, this is NOT an easy procedure:

* I dump some partitions from the US997 and package them up
* You pull your SIM card
* You dump those same partitions from your phone before starting
* You flash your phone to H930 with H933 laf (this gets you temp root)
* You run a script that I will write that will dump the partitions from the US997 to your phone (this effectively clones it)
* Reboot to fastboot and flash the unlock.bin
* Flash TWRP
* Restore the partitions backed up in step 2.

This process has been tested, but it was tested by two people that trust each other, so the person with the US997 isn't willing to just give up those partitions to anyone

EDIT: LOL - I had the V30 on the brain hence the strike-through above. Bottom line there are two models -- H870 and H873 maybe? I know it is in this thread somewhere.

-- Brian

 

[ChazzMatt]

It needs to be a US997 that either already has an unlock.bin that they will ship with the phone, or is eligible for an unlock.bin. If you buy a used phone, and someone had already requested the unlock.bin, but didn't include it, you can't get another one from LG.

To get LG official unlock_bin code, has to be new purchase from authorized "open market" retailer -- like B&H Photo. You have to submit screenshot of sales receipt as well as the IMEI and Device-ID.

Can't be used phone bought off eBay.

If you pass all the requirements, LG then emails you unlock_bin code which will only work with the one phone.

I jumped through all those hoops for one of my US998 V30 phones.

Sent via open market LG US998 V30/V30+

 

[badmaan]

Can a H870 be used for this procedure? @runningnak3d

 

[Muadh09]

To get LG official unlock_bin code, has to be new purchase from authorized "open market" retailer -- like B&H Photo. You have to submit screenshot of sales receipt as well as the IMEI and Device-ID.

Can't be used phone bought off eBay.

If you pass all the requirements, LG then emails you unlock_bin code which will only work with the one phone.

I jumped through all those hoops for one of my US998 V30 phones.

Sent via open market LG US998 V30/V30+

Then maybe the only way to ask seller if it comes with unlock_bin code (if it a used phone)

 

[runningnak3d]

Can a H870 be used for this procedure? @runningnak3d

I dunno. I did all the work on the US997, I would need to pull apart the H870 aboot to know for sure.

I can tell you that when cross flashing aboot, that you usually want to stick with a given region -- so US997 for North American carriers, and H870 for EU, otherwise you can run into issues. Some of those can be solved with custom kernels, but some are just problems that you would have to tolerate.

If you guys are going to do this, I would highly recommend going the US997 route for North American carriers.

-- Brian

 

[badmaan]

I dunno. I did all the work on the US997, I would need to pull apart the H870 aboot to know for sure.

I can tell you that when cross flashing aboot, that you usually want to stick with a given region -- so US997 for North American carriers, and H870 for EU, otherwise you can run into issues. Some of those can be solved with custom kernels, but some are just problems that you would have to tolerate.

If you guys are going to do this, I would highly recommend going the US997 route for North American carriers.

-- Brian

There is H870 aboot file dumped from my phone.

https://transfernow.net/19352222s84a

 

[DrewDaPilot]

Hello @runningnak3d ,

I currently am running a US997 firmware on a H871 device. According to your instructions, if the ARB (anti-rollback) version is 0, I should be completing the steps using LG UP to flash the exploitable LAF file. I am currently running completely stock, US997 Unlocked variant of the kdz. My original device was an H871, so I cannot issue any unlock.bin file. According to your research, I should be able to already exploit my laf file, since I currently have ARB 1. I am going to try to experiment with your exploit tool on github to get root shell access. If I am successful, I will let you know and request further instructions for unlocking the bootloader. Thanks, Drew.

 

[DrewDaPilot]

Completed steps provided!

Hello @runningnak3d ,

I have successfully flashed the H933 10h LAF file. The download mode shows the LG logo, but does not show 'firmware update'. It is still recognized by LG UP, so I am currently flashing regular android for the device. I have also installed the Linux based Android development kit to a USB device for further testing. The LAF file has been flashed to my H871 device without any hiccups or problems, and as far as I can tell still functions as normal Download Mode, without the screen output on the device. If you could instruct me how to unlock the bootloader, and from there, actually install TWRP from the MicroSD card that I have already flashed. Once again, any further clarification much appreciated.

UPDATE:

Currently Running US997, with the Download Mode being the H91510e as demonstrated in the original instructions. Further instructions much appreciated.

 

[runningnak3d]

Hello @runningnak3d ,

I have successfully flashed the H933 10h LAF file. The download mode shows the LG logo, but does not show 'firmware update'. It is still recognized by LG UP, so I am currently flashing regular android for the device. I have also installed the Linux based Android development kit to a USB device for further testing. The LAF file has been flashed to my H871 device without any hiccups or problems, and as far as I can tell still functions as normal Download Mode, without the screen output on the device. If you could instruct me how to unlock the bootloader, and from there, actually install TWRP from the MicroSD card that I have already flashed. Once again, any further clarification much appreciated.

UPDATE:

Currently Running US997, with the Download Mode being the H91510e as demonstrated in the original instructions. Further instructions much appreciated.

Glad you made it through considering the instructions were spread across this thread. What you are missing now, is what everyone is missing .. a donor US997 that has an unlock.bin.

Without a donor US997 to dump the partitions from, you can't go any further.

-- Brian

 

[JeOZ]

Hello @runningnak3d ,

I currently am running a US997 firmware on a H871 device. According to your instructions, if the ARB (anti-rollback) version is 0, I should be completing the steps using LG UP to flash the exploitable LAF file. I am currently running completely stock, US997 Unlocked variant of the kdz. My original device was an H871, so I cannot issue any unlock.bin file. According to your research, I should be able to already exploit my laf file, since I currently have ARB 1. I am going to try to experiment with your exploit tool on github to get root shell access. If I am successful, I will let you know and request further instructions for unlocking the bootloader. Thanks, Drew.

Did you get a "factory reset is disabled by Killswitch" message when flashing the US997 firmware on the H871?

 

[DrewDaPilot]

Kill switch Message

Did you get a "factory reset is disabled by Killswitch" message when flashing the US997 firmware on the H871?

I have not gotten that factory reset message. I have flashed US 997 multiple times on the following device. First, I flashed US997 in attempt to unlock boot-loader, with ignorance in how all of this works. I then proceeded to flash T-Mobile G6, which bricked the device since the signature could not be verified. The following Qualcomm 9008 mode was resolved, and I re-flashed to US997 7.0. I then followed the instructions on this forum to upgrade back to US997 8.0 to have the latest Android 8 improvements. I hope that answers your question!

Thanks, Drew.

 

[runningnak3d]

I have not gotten that factory reset message. I have flashed US 997 multiple times on the following device. First, I flashed US997 in attempt to unlock boot-loader, with ignorance in how all of this works. I then proceeded to flash T-Mobile G6, which bricked the device since the signature could not be verified. The following Qualcomm 9008 mode was resolved, and I re-flashed to US997 7.0. I then followed the instructions on this forum to upgrade back to US997 8.0 to have the latest Android 8 improvements. I hope that answers your question!

Thanks, Drew.

What firehose did you use to solve the QDL 9008 brick?

-- Brian