[UNLOCK][ROOT][TWRP][UNBRICK] Fire HD 8 2017 (douglas)

Search This thread

danzew

Member
Feb 5, 2023
5
0
I recently tried to root my fire hd8. but when I tried to boot into twrp using advanced restart, it shows recovery mode, then exits and boots normally. Please help bro
Neel, did everything go per instruction up until the attempt to boot into TWRP? that might just require a couple more attempts at running the steps from 4 I believe.... I'm unable to get a finger on my issue, but have read al 40 pages, so just passing what other, wiser folks have shared
 

NeelFromYT

Member
Jun 20, 2022
8
0
Vivo X70 Pro+
Neel, did everything go per instruction up until the attempt to boot into TWRP? that might just require a couple more attempts at running the steps from 4 I believe.... I'm unable to get a finger on my issue, but have read al 40 pages, so just passing what other, wiser folks have shared
Yeah everything worked fine up until TWRP. Technically I even got into Lineage OS, but when I tried to get into recovery to flash Magisk I wasn't able to even boot into recovery
 

chaosl0rd

New member
Jan 27, 2023
3
0
can you point me at this offline root? So i read thru the whole thread, there was someone back in october with same issue but OP had already stopped replying to the thread. want to give your attempt a try because you had the impressive log to share... I attempted using the brick shell scripts (both independently, both fail to create the temp root shell to get TWRP installed. other then the other fellow who was successful on satuday, I'd say missing something.

Edit: i'm going to try the hardware root option, as that does still seem to have the most success. I'll try and find or will create if succssful a tutortial where the pictures haven't expired https://forum.xda-developers.com/t/...-fire-hd-8-2017-douglas.3962846/post-80287339
Hi again,

the offline root i mentioned is this one:
 

NeelFromYT

Member
Jun 20, 2022
8
0
Vivo X70 Pro+
Neel, did everything go per instruction up until the attempt to boot into TWRP? that might just require a couple more attempts at running the steps from 4 I believe.... I'm unable to get a finger on my issue, but have read al 40 pages, so just passing what other, wiser folks have shared
mate how long does running step 4 usually take?
 

Caffeine81

Senior Member
Oct 1, 2010
61
5
First of all thank you @k4y0z very much for this unlock/root method! 🫶 I had to use the brick method because I had a newer Fire OS but all worked nicely! 👍🏼 I just have a problem with Magisk. I tried to install Magisk 25.2 with the custom recovery method via TWRP. The installation went through but I was stuck in a boot loop afterwards, seeing the Amazon logo over and over. I had to flash LineageOS again to fix the boot loop and ended up using SuperSU for root but I would prefer Magisk. Any idea why it's not working?
 

VladimirMoskalenko

New member
Apr 21, 2022
3
1
Recently there was a sale on this Fire hd 8 gen 7 for $20 at Woot so I brought it so I tried to hack. It is hard to find a one with the firmware 5.6.4.0 or lower so this is how I got it to work. Honorable mention to Opec who actually got the instructions right so I modified his instructions a little to fit everything in.

A) amonet-douglas-v1.2.zip from first Page of this Thread:
https://forum.xda-developers.com/...p.4845269/
Unpack the Archive to a separate Folder.
B) brick-douglas.zip from first Page of this Thread:
https://forum.xda-developers.com/...p.4825253/
Unpack the Archive to a separate Folder.

1) Boot from a live version of linux (I used Ubuntu mate Lts 20.04) or you can install linux in your computer.
2) Run the following commands to install tools;
sudo apt update
sudo add-apt-repository universe
sudo apt install python3 python3-serial adb fastboot dos2unix
3) Disable modem manager
sudo systemctl stop ModemManager
sudo systemctl disable ModemManager
4) Reboot FireHD8 to Recovery (Power Off device, then hold VolUp + Power)
5) Select Factory Reset then Wipe Cache
6) Reboot to Bootloader. You will see the black screen with "Fastboot" in the lower corner.
7) Connect your usb cable to the tablet.
8) Open Terminal from "brick-douglas" folder an enter "sudo ./brick.sh (note that you are actually bricking your fire tablet in order to recover)
9) Check Display output for the "Disconnect USB and Powerdown" Message and do so when prompted. Proceed to step 10 if there no problems, but it didn't work for me.
*** Note if you see an error and the FireHD Reboot and do the "Apps and Data Optimization" at the Welcome Install Screen Powerdown the FireHD and enter Bootloader again.
a) repeat steps 4-7
b) Enter "sudo ./brick-8920.sh" instead of brick.sh
c) You should see Display output for the "Disconnect usb and powerdown" message and do so when prompted.
10) Open Terminal from "amonet-douglas-v1.2" foder.
11) Enter "sudo ./bootrom-step.sh"
12) Reconnect USB while your tablet is off.
13) Wait until the bootrom step is finished
14) Enter "sudo ./fastboot-step.sh"
15) You will end up in TWRP
16) Prepare a microsd card with Lineage OS 15.1 or 14.1 with the rom and gapps and install Lineage OS.
https://forum.xda-developers.com/...1.4328503/
https://forum.xda-developers.com/...1.4195349/
After following the guise, I got stuck on step 9 with this in my console:
Brick preloader to continue via bootrom-exploit? (Type "YES" to continue) YES Bricking PL Header Check instructions on device Sending sparse 'brick' 1/1 (484 KB) OKAY [ 0.034s] Writing 'brick' FAILED (remote: 'the command you input is restricted on locked hw') fastboot: error: Command failed
 
  • Like
Reactions: antim8

bequest333

New member
Mar 26, 2023
1
0
Hi
I became <waiting for device> in fastboot-step.sh, but it was solved by the following method.

Edit <fastboot-step.sh> (-i 0x1949)x4

#!/bin/bash

set -e

echo "Your device will be reset to factory defaults..."
echo "Press Enter to Continue..."
read

fastboot -i 0x1949 flash recovery_x bin/twrp.img
fastboot -i 0x1949 erase userdata
#fastboot format userdata
fastboot -i 0x1949 flash MISC bin/boot-recovery.bin
fastboot -i 0x1949 reboot

echo ""
echo "Your device will now reboot into TWRP."
echo ""
 

cmskipsey

Member
Feb 24, 2016
8
1
Been trying to do this for my Fire HD 8 (2017) but when I run step-1.sh I get this

Failed critical init step 4 Firmware support not implemented

I've done a bit of investigating - tablet has USB debugging enabled in developer options, adb can see the device and force it to reboot into the bootloader. Even when it goes into fastboot - when I run fastboot devices its listed...

Firmware is Fire OS 5.7.0.0

What am I missing? What else can I try?
 
  • Like
Reactions: ApathyImp
Been trying to do this for my Fire HD 8 (2017) but when I run step-1.sh I get this

Failed critical init step 4 Firmware support not implemented

I've done a bit of investigating - tablet has USB debugging enabled in developer options, adb can see the device and force it to reboot into the bootloader. Even when it goes into fastboot - when I run fastboot devices its listed...

Firmware is Fire OS 5.7.0.0

What am I missing? What else can I try?
i'm having the same problem, the tablet auto-installed OTA updates to 5.3.7.0 and has another update queued. i just turned the power off completely since stock doesn't let you turn off updates (eff you so much amazon).

@k4y0z are we just completely stuck at this point, or is there a workaround? really appreciate all the work you've done on this!
 

CuF

Senior Member
Aug 29, 2015
152
39
I ran into this too. IIRC, when it tries to connect to wifi, select a wifi, but don't log in. It will then give you the option to cancel the update since there is no internet.
Otherwise, if the firmware is newer than 5.6.4.0, you have to brick the unit and roll back the firmware.
 
I ran into this too. IIRC, when it tries to connect to wifi, select a wifi, but don't log in. It will then give you the option to cancel the update since there is no internet.
Otherwise, if the firmware is newer than 5.6.4.0, you have to brick the unit and roll back the firmware.
right, but isn’t the tool supposed to do that for us? maybe i misunderstood but that’s definitely how i interpreted the instructions.
 
...NOTE: If you are on a firmware newer than 5.6.4.0, a downgrade is necessary, this requires bricking the device temporarily. (The screen won't come on at all)
If you chose the brick option, you don't need to run step-2.sh below...
...Your device should reboot into Amazon Recovery. Use adb sideload to install stock image from there. (Make sure to use FireOS 5.6.4.0 or newer, otherwise you may brick your device)...

How exactly would I downgrade the device or is it an automated part of the scripts?

My device is a Douglas (right one for this guide) on "Fire OS 5.7.0.0" if that affects anything.
 
  • Like
Reactions: ApathyImp
I still have problem in twrp restore my device now stock on amazon logo please help me
thank you Rortiz2 i will try

---------- Post added at 03:36 PM ---------- Previous post was at 03:30 PM ----------



I do this method on windows 10 with linux shell and i get success thank you very much

If these two messages are the same attempt, it means process failed because you are a Linux shell for Windows, which is basically a stripped-down virtual machine.
Virtual machines cannot use exploits such as this (and the Checkm8 exploit for iOS) because of problems with the passthrough.
All you need to do, if you can recover your device, is to use a usb or other storage medium to create a live bootable system of a Linux repo and do this tutorial on there as this has direct access to the device instead of through some sort of windows driver.
 

rredbeard

New member
May 7, 2023
1
0
Anyone attempted from Fire OS 5.7.0.0?
Just did mine yesterday with 5.7.0.0. Follow this from earlier in the thread as it worked for me: https://forum.xda-developers.com/t/...-fire-hd-8-2017-douglas.3962846/post-86043773

Just as a side note, I used brick-9820.sh

Also, after flashing I installed LineageOS 17.1. Having an issue with that, as the file manager is unable to unzip files from within LineageOS. Like I can’t extract files or move them from one folder to another. Anyone else had anything like that happen?
 
I bought a "for parts only" pair of what I thought were supposed to be two fire 7 5th gen tablets from eBay for $20. To my surprise one of these fire hd8 7th gen showed up. SD card reader burnt, unresponsive, wouldn't charge or show signs of life (heavily water damaged). I just needed to get this all out in public forum I guess, but I've been battling addiction for the last two years, my wife attempted suicide in feb of this year and three of our kids moved out. I lost my job, I'm about to be homeless with my now even further damaged disabled wife- but reading all these threads here on XDA and elsewhere deeply inspired me (the amphetamines helped too) to take this water-damaged piece of poo tablet and make a proper, working, usable tablet that I JUST got working 100% at 0420 on this 12th day of May, 2023. Fully functional, speakers, bluetooth, headphone jack, buttons, screen- everything but the SD slot (I can solder, but this **** is TINY and kinda intimidating, plus where the heck do you but a replacement MOLEX micro-SD card reader for a 2017 Amacrap tablet??)

If I can take a piece of junk and make it shine, anybody can do this if they READ AS INSTRUCTED and never give up.
 
  • Love
Reactions: braveheartleo

hayabusa777

Member
Aug 16, 2015
20
2
Hello, I managed to flash my Fire Hd 8 2017 5.7.0.0 with Lineag 17.1 without opening the device to make a short circuit, it was enough with the software method, thanks to the developers, great work, I have on a small laptop Linux installed, I always got hacked up to recovery, when trying to use sudo ./fastboot.sh, the command was not found. I then read that Fastboot was not installed in Linux. Installed and it worked, reboot and got into Trwp.Maybe it will help someone with the same problem, small mistake, big effect.With open gapps I deleted the app size.txt file in the zip file and then I was able to install gapps in trwp, otherwise the error 70 came up, rezize file system didn't help.The only thing that doesn't work right for me now is whatsapp, the message comes with a delay, the call comes in very briefly and then I can't make a call
 
Last edited:

CuF

Senior Member
Aug 29, 2015
152
39
Hello, I managed to flash my Fire Hd 8 2017 5.7.0.0 with Lineag 17.1 without opening the device to make a short circuit, it was enough with the software method, thanks to the developers, great work, I have on a small laptop Linux installed, I always got hacked up to recovery, when trying to use sudo ./fastboot.sh, the command was not found. I then read that Fastboot was not installed in Linux. Installed and it worked, reboot and got into Trwp.Maybe it will help someone with the same problem, small mistake, big effect.With open gapps I deleted the app size.txt file in the zip file and then I was able to install gapps in trwp, otherwise the error 70 came up, rezize file system didn't help.The only thing that doesn't work right for me now is whatsapp, the message comes with a delay, the call comes in very briefly and then I can't make a call
You didn't need to double post across two threads. If you read the first post here...
Known issues:
  • Front camera and video recording
 

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    I bought a "for parts only" pair of what I thought were supposed to be two fire 7 5th gen tablets from eBay for $20. To my surprise one of these fire hd8 7th gen showed up. SD card reader burnt, unresponsive, wouldn't charge or show signs of life (heavily water damaged). I just needed to get this all out in public forum I guess, but I've been battling addiction for the last two years, my wife attempted suicide in feb of this year and three of our kids moved out. I lost my job, I'm about to be homeless with my now even further damaged disabled wife- but reading all these threads here on XDA and elsewhere deeply inspired me (the amphetamines helped too) to take this water-damaged piece of poo tablet and make a proper, working, usable tablet that I JUST got working 100% at 0420 on this 12th day of May, 2023. Fully functional, speakers, bluetooth, headphone jack, buttons, screen- everything but the SD slot (I can solder, but this **** is TINY and kinda intimidating, plus where the heck do you but a replacement MOLEX micro-SD card reader for a 2017 Amacrap tablet??)

    If I can take a piece of junk and make it shine, anybody can do this if they READ AS INSTRUCTED and never give up.
  • 59
    Read this whole guide before starting.

    This is for the 7th gen Fire HD8 (douglas).

    Current version: amonet-douglas-v1.2.zip


    NOTE: This process does not require you to open your device, but should something go horribly wrong, be prepared to do so.


    NOTE: This process will modify the partition-table (GPT) of your device.



    NOTE: Your device will be reset to factory defaults (including internal storage) during this process.


    What you need:
    • A Linux installation or live-system
    • A micro-USB cable

    Install python3, PySerial, adb, fastboot dos2unix. For Debian/Ubuntu something like this should work:
    Code:
    sudo apt update
    sudo add-apt-repository universe
    sudo apt install python3 python3-serial adb fastboot dos2unix

    1. Extract the attached zip-file "amonet-douglas-v1.1.zip" and open a terminal in that directory.


    NOTE: If you are already rooted, continue with the next step, otherwise get mtk-su by @diplomatic from here and place (the unpacked binary) into amonet/bin folder


    2. Enable ADB in Developer Settings

    3. Start the script:
    Code:
    sudo ./step-1.sh

    Your device will now reboot into recovery and perform a factory reset.

    NOTE: If you are on a firmware newer than 5.6.4.0, a downgrade is necessary, this requires bricking the device temporarily. (The screen won't come on at all)
    If you chose the brick option, you don't need to run step-2.sh below:



    Make sure ModemManager is disabled or uninstalled:
    Code:
    sudo systemctl stop ModemManager
    sudo systemctl disable ModemManager


    WARNING: Do not use bootrom-step-minimal.sh if you bricked using brick(-9820).sh!
    You will need to use bootrom-step.sh.


    After you have confirmed the bricking by typing "YES", you will need disconnect the device and run
    Code:
    sudo ./bootrom-step-minimal.sh
    Then plug the device back in.

    It will then boot into "hacked fastboot" mode.
    Then run
    Code:
    sudo ./fastboot-step.sh



    NOTE: When you are back at initial setup, you can skip registration by selecting a WiFi-Network, then pressing "Cancel" and then "Not Now"
    NOTE: Make sure you re-enable ADB after Factory Reset.



    4. Start the script:
    Code:
    sudo ./step-2.sh

    The exploit will now be flashed and your device will reboot into TWRP.

    You can now install Magisk from there.


    Going back to stock
    Extract the attached zip-file "amonet-douglas-return-to-stock.zip" into the same folder where you extracted "amonet-douglas-v1.0.zip" and open a terminal in that directory.
    You can go back to stock without restoring the original partition-table, so you can go back to unlocked without wiping data.
    Just use hacked fastboot to
    Code:
    sudo fastboot flash recovery bin/recovery.img

    If you want to go back completely (including restoring your GPT):
    Code:
    sudo ./return-to-stock.sh

    Your device should reboot into Amazon Recovery. Use adb sideload to install stock image from there. (Make sure to use FireOS 5.6.4.0 or newer, otherwise you may brick your device)

    Important information

    In the new partitioning scheme your boot/recovery-images will be in boot_x/recovery_x respectively, while boot/recovery will hold the exploit.
    TWRP takes care of remapping these for you, so installing zips/images from TWRP will work as expected.

    Don't flash boot/recovery images from FireOS (FlashFire, MagiskManager etc.) (If you do anyway, make sure you flash them to boot_x/recovery_x)

    Should you accidentally overwrite the wrong boot, but your TWRP is still working, rebooting into TWRP will fix that automatically.

    TWRP will prevent updates from overwriting LK/Preloader/TZ, so generally installing an update should work without issues (only full updates, incremental updates won't work).

    For ROM developers there is still an option to overwrite these, which should only be done after thorough testing and if needed (LK should never be updated).

    It is still advised to disable OTA.


    Very special thanks to @xyz` for making all this possible and putting up with the countless questions I have asked, helping me finish this.
    Special thanks also to @diplomatic for his wonderfull mtk-su, allowing you to unlock without opening the device.
    Thanks to @t0x1cSH and @breakfastofsecrets for testing.
    18
    Yesterday i managed to root updated FireOS and install Lineage 12.1, so, here's my story :D

    Version 5.6.6.0 build 654620620,
    on Linux KDE Neon.

    1. Installed python3, PySerial, adb, fastboot dos2unix as described in this and other posts.
      Code:
      sudo apt update
      sudo add-apt-repository universe
      sudo apt install python3 python3-serial adb fastboot dos2unix
    2. Downloaded the following attachments from the first post : amonet-douglas-v1.2.zip and brick-douglas.zip
    3. Extract both files to the same folder
    4. Enable Developer options and enable ADB (inside debugging options) on Amazon tablet
    5. Plug in the tablet (has to be turned on)
    6. Now comes the commands execution part. So, open the terminal in Linux (lines that start with // are comments and should not be run from command line - if you copy paste)

      Code:
      sudo systemctl stop ModemManager && sudo systemctl disable ModemManager
      Code:
      adb devices
      // there should be an item listed
      // to be sure, you can unplug and run it again, if it's empty, 
      // ou know tablet can connect, so plug in the tablet back
      Code:
      adb reboot bootloader
      // reboots the tablet and awaits commands
      Code:
      sudo ./brick.sh
      // type YES, hit enter
      // it will take a couple of minutes (around 3-5min in my case)
      // watch the tablet for success message, it should be displayed there if everything works
      // but also, watch your terminal...if it gives you error message similiar to:
      // ==> [I][U]failed with error message that it can't write somewhere[/U][/I]
      // you have to try with brick-9820 script
      Code:
      sudo ./brick-9820.sh
      // it will take a couple of minutes, similar to above step

      NOTE : after either of the above commands (which one succeeds) POWER OFF THE TABLET and DO NOT try to turn it back on. It should stay powered off!!

      Code:
      sudo ./bootrom-step.sh
      // this will take some time (in my case around 5-10 minutes)
      // will give you message similar to "awaiting device connection" and nothing else...
      // although nothing seems to happen, just wait a bit and watch the terminal, it will soon start displaying the process
      // it should then reboot the tablet, but in my case, that did not happen, so i had to do it manually...
      // NOTE that althought tablet seems to be "off", it isn't, so press power btn and hold for 5 sec to turn it off
      // after that click and hold volume up button (when in portrait mode it is the right one, the one closest to power btn)
      // and immediately after that press and hold the power btn until amazon logo shows itself
      // it should then show in bottom left corner HACKED FASTBOOT after a few seconds

      Code:
      sudo fastboot devices
      // there should be a device listed
      // if not, you should run (in the extracted directory that you are in):
      ./bin/fastboot devices
      // if sudo fastboot devices does not show your device but ./bin/fastboot works, you have to edit the fastboot-step.sh file and change the fastboot commands to ./bin/fastboot
      Code:
      sudo ./fastboot-step.sh
      // takes a couple of minutes (1-3 min in my case)
      // reboots the device

    after that you should be in TWRP :)

    NOTE when in TWRP:

    DO NOT RESTART tablet before the following
    (or amazon fire os will overwrite TWRP and you will be reset to factory default with fireOS, losing everything you've done and starting from scratch...
    when it happened to me, the brick-9820.sh didn't work anymore and had to use brick.sh script)

    -allow modifications
    -format data,system,cache partitions, go to wipe->advanced wipe-> repair/format (something like that), select each of the 3 partitions aformentioned and format to ext4
    -if you've done it correctly, there should not be any red warnings
    -after that go to wipe, select all partitions and wipe them (just to be sure)

    -tablet should be connected and TWRP should be left on

    on PC
    -download Lineage 12.1 ROM from https://forum.xda-developers.com/hd8-hd10/general/discussion-root-progress-fire-hd-8-t3743024
    -download opengapps from https://opengapps.org/
    - put them inside amonet-douglas-v1.2 folder where you've extracted the prior ZIP files (just to be clear, you can put them anywhere, but i like to keep it all inside the working directory)

    -go to terminal
    Code:
    adb push lineage-12.1-20200614-UNOFFICIAL-douglas.zip /sdcard
    adb push open_gapps-arm64-5.1-nano-20200624.zip /sdcard

    now the files are on the tablet
    - in TWRP go to INSTALL, go to /sdcard folder if not in it
    - first install Lineage ROM from zip
    - then install GApps from zip

    hope it works!
    I'm glad i've finally rooted it, thank you all for the great content here! :)
    13
    Wire root process

    after updating my tablet to the latest version Fire OS 5.6.4.0 (build 636559820) which does not have SW root I have decided to open up the unit and use hardware method which works on all versions of firmware

    What you will need

    1. wire
    2. plastic tool as in the picture below to open the unit.
    3. linux machine, I used Raspberry Pi 3+ and Raspbian.
    MVIMG_20190920_171046.jpg


    Process:

    1. remove SD card from the fire HD to avoid breaking it during the opening process ( yes it happened to me, luckily just 16GB card )
    2. use plastic tool to detach display from plastic rear chassis. It is very easy and safe process.
    MVIMG_20190920_171059.jpg

    3. Remove 4 screws from the motherboard.
    4. detach digitizer ( yellow ) cable and rear camera using plastic tool.
    MVIMG_20190920_171327.jpg

    5. You can leave display flex cable, battery and speaker ( soldered ) connected.
    6. turn montherboard on the other side so it lays on the battery. There is a small adhesive pad on the left side of PCA, use plastic tool to start lifting the board from that side.

    MVIMG_20190920_171508.jpg

    MVIMG_20190920_171533.jpg


    7. find pad TP28 and prepare you Linux PC now

    8. DOwnload amonet-douglas-v1.1.zip from OP of the thread , extract.
    9. run, it will take a while to update your linux distribution to the latest version.
    Code:
     sudo apt update
           sudo add-apt-repository universe
           sudo apt install python3 python3-serial adb fastboot dos2unix
    10. Get your self into the Amonet folder ( most licely Downloads/Amonet ) folder where you extracted ZIP from OP.
    11. run
    Code:
     sudo ./bootrom-step.sh
    12. you should see this msg on the screen
    Code:
    [2019-02-07 14:35:59.478924] Waiting for bootrom

    13 Now here is the tricky part which will require some practice. You have to short TP28 with grond ( the big pad neer TP28 ) and while doing it connect USB cable to the PC. Here is how I did it.
    IMG_20190920_171622.jpg

    IMG_20190920_171659.jpg

    14. So I was holding the wire in the left hand and used right hand to plug slowly USB cable into the montherboard. ( not easy I know, but you will get there )
    15. If you did it right you will see a message on the screen to Release the short wire and hit ENTER.
    16. wait till the scripts does its think and when you see this you are in fasboot. Look at the scrren, you should see AMAZON logo and small text on the bottom "fastboot xyz etc..." Don1t unplug table, keep going.
    Code:
    [2019-02-07 12:11:05.621357] Reboot to unlocked fastboot.
    17. run this script
    Code:
    sudo ./fastboot-step.sh
    18. Your unit should boot into TWRP
    19. Assemble back the unit so digitizer will work.
    20 boot into TWRP and install Lieage, GAPPS and Magisk. Install Lineage ZIP file from here. https://forum.xda-developers.com/hd8-hd10/orig-development/rom-lineage-12-1-t3953677
    7
    I was definitely on 9920 (exactly:FireOS 5.6.4.0 (636559920)). Was thinking I was stuck without an unlock method. I did the brick.sh script, then (and here's where my "some problems" comes in - my own error) without paying attention ran the wrong script as the next step after intentionally bricking my tablet. I don't know what state my table was in after doing that, but it wasn't booting into FireOS and I didn't have TWRP. So, not knowing what else to do, I tried flashing the latest official FireOS from the site I linked above. When I rebooted after doing that, I had a working FireOS and going into settings showed me on FireOS 5.6.4.0 (636558520).

    At this point, since I was on a TWRP-able OS, I just started over with step-1.sh and step-2.sh and was able to get where I ultimately wanted to be. I'm running SlimLP. Thanks to everyone who has worked through how to make this happen.

    Thank you sir! I thought 9920 was beyond saving so I did not bother. But after reading your post I decided to give it a try and the process was actually easier than I thought!

    Here's exactly what I did

    1. Code:
      adb reboot bootloader
      to put into fastboot
    2. Run
      Code:
      brick-9820.sh
      (yes, 9820. I tried brick.sh and it didn't work). In this step I actually got an error message on my computer, but it's OK as long as the DEVICE itself tells you to power off on the tablet screen. Power off and unplug the cable.
    3. Run
      Code:
      bootrom-step.sh
      , NOT the minimal one. Plug in the cable again. It'll reboot at the end but your screen would stay blank.
    4. Run
      Code:
      fastboot-step.sh
      , that's it I'm in TWRP !

    As a side note other than the brick step I actually ran the rest (1, 3 and 4) on a Mac (since I already got adb on it and did not want to setup the whole Android SDK on my Linux box again). The brick step I guess you have to be on Linux since the hacked fastboot only came as ELF in the zip. To run bootrom-step on Mac, simply comment out the modemanager check in main.py.
    7
    @willgaj did you enter bootloader mode on the Fire ? Powerdown and then Press VolUp + Power, wait until you see "Enter Recovery" , then select "Bootloader".

    Heres how it worked out for me:

    Files I used:

    amonet-douglas-v1.2.zip from first Page of this Thread:
    https://forum.xda-developers.com/attachments/amonet-douglas-v1-2-zip.4845269/
    Unpack the Archive to a separate Folder.

    brick-douglas.zip from first Page of this Thread:
    https://forum.xda-developers.com/attachments/brick-douglas-zip.4825253/
    Unpack the Archive to a separate Folder.


    MTK-su (i used te 64 bit) from here:
    https://forum.xda-developers.com/t/rapid-temporary-root-for-hd-8-hd-10.3904595/
    Unpack and copy to the MTK-su from the 64 Bit folder to the “bin” folders of the previous unpacked folders.


    Unlock steps:

    1. Reboot FireHD8 to Recovery (Power Off device, then hold VolUp + Power)

    2. Select Facotry Reset then Wipe Cache

    3. Reboot to Bootloader

    4. You will see the balck screen with “Fastboot” in the lower corner.

    5. Open Terminal from “brick-douglas” folder an enter “sudo ./brick.sh
    6. Check Display output for the “Disconnect USB and Powerdown” Message and do so when prompted
      (If theres an Error see below Step 12)

    7. Open Terminal from “amonet-douglas-v1.2” foder.

    8. Enter “sudo ./bootrom-step.sh"

    9. Reconnet USB

    10. Wait until the bootrom step is finished

    11. Enter “sudo ./fastboot-step.sh”

    12. You will end up in TWRP

    If theres an error let the FireHD Reboot and do the “Apps and Data Optimization” at the Welcome Install Screen Powerdown the FireHD and enter Bootloader again.
    • Open Terminal from “brick-douglas” folder
    • Enter “sudo ./brick-8920.sh”
    • Check Display output for the “Disconnect usb and powerdown” message and do so when prompted.
    • Enter “sudo ./bootrom-step.sh
    • Reconnet USB
    • Wait until the bootrom step is finished.
    • Enter “sudo ./fastboot-step.sh"
    • You will end up in TWRP


    Lineage OS installation:

    Prepare a Micro SD Card with: Lineage OS (Search the forum for the douglas (FireHD 8 7.Gen) or suez (FireHD 10 7Gen) Version, Gapps (ARM64, 7.1, nano) and Magisk and insert in FireHD.

    In TWRP Format Data and Wipe data, system, cache.

    Install Rom, gapps and magisk

    Reboot to Lineage OS



    Hardware Method:

    If you got stuck somewhere in the middle or the Exploit doesn’t work try the hardware method.

    I somehow bricked my HD10 , I think I disconnected the USB because I was to unpatient.

    For the Hardware method, you need to open the Tablet, use a prytool or a Creditcars / Knife to remove the backcover, just gently pry around the bezel until the screen pops out.

    You need to unscrew the mainboard and gently flip it over , on the HD10 I didn’t had to remove any wire , just be carefull with the speakers and put a piece of cardboard or plastic on the back between the mainboard and battery so it will not shorten or puncture the battery.

    Find the CLK pin (theres several pictures on the forum for your specific device) use a piece of wire or paperclip to shorten from a ground plane or the SD Card slot housing to the clock pin. This works best if you got someone that will help you.

    • Connect USB to the Tablet, but leave it unplugged on the Computer side.
    • Make sure the Tablet is powered down (Press and hold Power button for 30 seconds)
    • Open Terminal from “amonet-douglas-v1.2” foder.
    • Enter “sudo ./bootrom-step.sh”
    • Now shorten CLK to ground and hold it.
    • Ask a kind person to plug in the USB cable on the Computer now.
    • The Terminal will tell you to remove the wire when ready.
    • Press enter and wait for bootrom-step.sh to finish.
    • If an error during bootrom step occurs , just retry
    • After bootrom step is finished, enter “sudo ./fastboot-step.sh”
    • You will end up in TWRP

    PS: I directly installed LOS 14.1 on the HD8 , on the HD10 i i used LOS 12.1 because LOS 14.1 is missing Camera Support on the HD10 in fact loosing the camera shouldnt trouble too much as the picture quality is horrible anyways. As for now I am happy to have a running Android on the tabs and don´t need to worry amazon giving me headaches every few weeks when updating CrapOS and redndering my configuration unuseable , i got 14 HD8/10 deloyed around the house as input devices for Homeautomation (running Habpannel).

    One thing to mention when switching to LOS, is that you can´t use apps that need to be certified anymore, like Netflix, Banking etc.

    Good luck!

    PPS: Thanks a lot to k4y0z and his fellas for the great job!


    opec