ROOT Mediatek devices [ New Method ][ Works for IMEI erased phones too! ]

[NinjaChunks]

Guide for flashing GSI on mediatek devices is uploaded- checkout [ Works on IMEI erased phones too! ]

This method is for mediatek chipset devices only

Spoiler: Jump to rooting

• Open python directory and open mtkclient folder inside it
• Run cmd inside mtkclient folder by typing cmd inside address bar of file explorer and press Enter
• Turn off your phone and connect to PC with usb cable while holding Vol up and Vol down together
• Run these commands inside cmd one by one

python mtk r boot,vbmeta boot.img,vbmeta.img python mtk reset

Your phone will reboot now

There will two files created inside mtkclient folder called boot.img and vbmeta.img
Copy boot.img file to your phone

• Download this masigk app only and install on phone
• Open magisk and patch the boot.img file, a new file will be created inside Downloads folder named magisk_patched.img
• Rename this file to boot.patched and copy it to your PC
• Move this file into mtkclient folder inside python directory and replace old boot.img
• Open cmd inside mtkclient folder by typing cmd inside address bar of file manager and press Enter
• Now run the following command inside cmd

python mtk w boot,vbmeta boot.patched,vbmeta.img.empty

• Turn off your phone and connect to PC with usb cable while holding Vol up and Vol down together

python mtk reset

Your phone will reboot now

Your device is rooted now ╰(*°▽°*)╯

Spoiler: Rooting files for devices on C.12 [ RMX2117 ]

Rooting files for devices on C.12: Download here
Place the downloaded files into mtkclient folder inside python directory and execute
python mtk w boot,vbmeta boot.patched,vbmeta.img.empty
python mtk reset

Prerequisite :

1. Mediatek drivers

• Extract the zip and open Driver folder
• Run the exe files, after the installation process is complete restart your PC
• To check if drivers were installed and are working, turn off your phone and connect it to PC using USB Cable while holding both volume up and down buttons
• There will be a prompt sound if device is connected

If your device still isn't detected, open MTK_USB_All_v1.0.8 folder and run MTK_USB_All_v1.0.8.exe
After the installation process is complete, restart your PC


2. Python Download and install python.

Go to python directory

• Search python in start menu, right click python and click on open file location, again right click on python and click open file location | This is the python directory.

Open cmd inside it by typing cmd at the address bar of file explorer and press Enter
Inside cmd exectue following commands one by one

Thanks Bjoern Kerler
git clone https://github.com/bkerler/mtkclient cd mtkclient pip3 install -r requirements.txt


3. Unlocked Bootloader [ User data will be formatted ]

• Turn off your phone
• Open mtkclient folder inside python directory and open cmd inside folder by typing cmd inside address bar of file manager
• Now run below command

python mtk e metadata,userdata,md_udc

• Connect phone to PC with USB Cable while holding Vol+ and Vol- together
• Now run below commands one by one

python mtk da seccfg unlock python mtk reset

• After the script completes, disconnect phone and reboot by holding power button

Your device's bootloader is unlcoked now ╰(*°▽°*)╯
Note: Bootloader can't be used whatsoever but 'unlocked bootloader' is a requirement before flashing any partition to your phone

Now comes actual rooting part

• Open python directory and open mtkclient folder inside it
• Run cmd inside mtkclient folder by typing cmd inside address bar of file explorer and press Enter
• Turn off your phone and connect to PC with usb cable while holding Vol up and Vol down together
• Run these commands inside cmd one by one

python mtk r boot,vbmeta boot.img,vbmeta.img python mtk reset

Your phone will reboot now

There will two files created inside mtkclient folder called boot.img and vbmeta.img
Copy boot.img file to your phone

• Download this masigk app only and install on phone
• Open magisk and patch the boot.img file, a new file will be created inside Downloads folder named magisk_patched.img
• Rename this file to boot.patched and copy it to your PC
• Move this file into mtkclient folder inside python directory and replace old boot.img
• Open cmd inside mtkclient folder by typing cmd inside address bar of file manager and press Enter
• Now run the following command inside cmd

python mtk w boot,vbmeta boot.patched,vbmeta.img.empty

• Turn off your phone and connect to PC with usb cable while holding Vol up and Vol down together

python mtk reset

Your phone will reboot now

Your device is rooted now ╰(*°▽°*)╯

Rooting files for devices on C.12: Download here
Place the downloaded files into mtkclient folder inside python directory and execute
python mtk w boot,vbmeta boot.patched,vbmeta.img.empty
python mtk reset

 

[alecxs]

why are you linking your own github? why alpha build?

 

[NinjaChunks]

why are you linking your own github? why alpha build?

its patched magisk for mediatek devices, using other version of magisk for patching boot file results in bootloop

 

[alecxs]

hm.. I have Xiaomi Redmi 6 it doesn't boot-loop. but I have other issue. will try...

nope! same issue as on any magisk. but this one does not even give root. Do not link that apk without note what exactly is "patched" - it's not recommended!

cereus:/ $ su
No daemon is currently running!

 

[NinjaChunks]

hm.. I have Xiaomi Redmi 6 it doesn't boot-loop. but I have other issue. will try...

nope! same issue as on any magisk. but this one does not even give root. Do not link that apk without note what exactly is "patched" - it's not recommended!

cereus:/ $ su
No daemon is currently running!

You have missed something, it definitely works and the issue you have mentioned isn't related to this thread, if its caused by magisk then try other rooting solutions.

 

[alecxs]

I just proofed that (outdated) patched alpha apk isn't working for my mediatek device (doesn't give root), furthermore the official stable apk doesn't boot-loop my mediatek device.
https://github.com/topjohnwu/Magisk

yes, my linked issue is unrelated. but you can find magisk logs there, proof that canary is working.

So if Magisk boot-loop for you, obviously you are the one who has missed something (maybe checkbox for preserving encryption?)

 

[NinjaChunks]

Did you tried with steps mentioned in this thread ?
If yes then, if you read this command,

python mtk w boot,vbmeta boot.patched,vbmeta.img.empty

Here the boot.img is named boot.patched to avoid unpatched boot image to be flashed on device
Did you renamed patched boot.img as boot.patched ?

 

[alecxs]

my bootloader is unlocked already, so I just flashed magisk_patched_23001.img from fastboot. as you can see in post #4 su respond with No daemon is currently running! so obviously magisk is somehow present.

Maybe I should delete /data/adb next time trying older Magisk. but baseband unknown occurred regardless of su daemon was not running, therefore I have no interest in this v23 alpha build anyway.

But thx for trying to help me

 

[Anonymous V]

my bootloader is unlocked already, so I just flashed magisk_patched_23001.img from fastboot. as you can see in post #4 su respond with No daemon is currently running! so obviously magisk is somehow present.

Maybe I should delete /data/adb next time trying older Magisk. but baseband unknown occurred regardless of su daemon was not running, therefore I have no interest in this v23 alpha build anyway.

But thx for trying to help me

you can easily fix unknown baseband using twrp

 

[alecxs]

you mean patching fstab with nvram nvdata nvcfg? how can I do this systemless? or do you mean I should patch twrp.fstab? thought that is only used for recovery mode.

 

[Anonymous V]

you mean patching fstab with nvram nvdata nvcfg? how can I do this systemless? or do you mean I should patch twrp.fstab? thought that is only used for recovery mode.

You need to delete a certain files in a directory in root file system it works well in android 10 and above

 

[alecxs]

what? magisk is systemless-root method. I won't touch anything inside system partition for sure (I would just use Magisk systemless REPLACE function if you tell me what exactly files must deleted?) But my baseband is working fine on normal boot, just when booted into Magisk baseband disappears. Have you even read my issue on github (linked in post #4)?

 

[Anonymous V]

Bro i know what circumstances you have here regarding magisk, but why are u using alpha build if you can use the normal apk? And what android are yoi?

Regarding in unknown baseband you can try this method to fix it android 9 and up root/nvdata/nvram then delete all files inside for android 8 and lower root/nvram delete all files inside

 

[alecxs]

I am using latest magisk. what is root/nvram? do you mean (rootdir) / namely /nvram? that is just a mountpoint for nvram partition. why should I delete nvram partition, as I stated baseband is working? please read the github issue first...
https://github.com/topjohnwu/Magisk/issues/6570

 

[Anonymous V]

I am using latest magisk. what is root/nvram? do you mean (rootdir) / namely /nvram? that is just a mountpoint for nvram partition. why should I delete nvram partition, as I stated baseband is working? please read the github issue first...
https://github.com/topjohnwu/Magisk/issues/6570

Look bro your phone has dm-verity right and you know how it works right? I meant to delete the files inside thay folder you cant easily delete partition in twrp file manager you know that is only the mount point but not the actual partition thos files might be duplicate or blocking something that might be the cause of the error in baseband if you delete that files inside it moght fix your phone and u dont need to worry if you have dm verity its ok because it will restore your deleted files in root folder

 

[NinjaChunks]

Look bro your phone has dm-verity right and you know how it works right? I meant to delete the files inside thay folder you cant easily delete partition in twrp file manager you know that is only the mount point but not the actual partition thos files might be duplicate or blocking something that might be the cause of the error in baseband if you delete that files inside it moght fix your phone and u dont need to worry if you have dm verity its ok because it will restore your deleted files in root folder


You know im just suggesting you a solution just try it might help

.

 

[AK_8K]

• I just installed mentioned drivers and python .​
• After that I cloned the github repo mentioned in tutorial.​
• Then I did execute cmd in mtkclient folder.​

​

Now I am stucked on this step where I have to connect my phone through USB with pressing vol+ & vol- buttons.

Just give me some idea about how to get through this error,

please suggest me solutions for this error.

 

[AK_8K]

Please help me with the preloader error.
While Pressing Vol+ with Vol- Buttons the Handshake failed error pops on screen.

Please Help me to fix this error.
I just want to unlock the bootloader of my rmx2117.

 

[NinjaChunks]

Please specify Android version of your phone. If drivers are installed correctly, there must COM port displayed in Device Manger on your PC

 

[alecxs]

and most important, device must powered off for the handshake. if you miss it, it will powered on by usb (which is too late)