[UNLOCK][ROOT][TWRP][UNBRICK] Fire TV Stick 4K (mantis)

[HarmfulMushroom]

Looking forward to testing this out later on, thanks for the share!

Coincidentally, looks like they're back on sale on Amazon, just in time for this release!

 

[kigba]

I didn't ask if it loads TWRP, but if it loads "HACKED FASTBOOT".
.

no Unfortunately. No HACKED FASTBOOT on TV. Yes, I connect the stick to the TV with the power supply. But the TV writes - "there is no signal." In the menu for selecting inputs, TV hdmi active, if you remove the stick, the hdmi input becomes inactive. As a result, the type of "classic" brick.
connected the stick in windows - the Mediatek com port appeared. Periodically falls off and connects again with a frequency of less than 1 minute. Connected Putty - nothing in the console, black window. A space on the keyboard causes a "!" And nothing happens.

 

[LuCkyCn]

Can't believe that so many people rip off components.

That shorting procedere is really easy, please don't use sharp tools, no steel or something like that.

A small snippet of tinfoil, maybe two or three times pleated, does the job fine. Simply shove it carefully about a millimeter under the heatshield, goal is to short one of the components right by the edge of the shield. Please use no pressure at all, don't force it... the slightest short will work.

I made a picture for better understanding:

I did the same thing. I used a paper clip and it sorted right away. Not sure why people are cutting it ?

 

[puppinoo]

Amazing

Just to say thanks. Rooted my 2 Sticks 4k. Quick question: I live in Italy and one of the sticks is imported from US. Can I turn it into an italian one (Actually everything seems to work except alexa).

Thanks again for this excellent job.
Pino.

 

[hyperblu]

I literally snipped back a small notch to get a straight shot down to the test point. Nothing was damaged nor did it affect the shield snapping back on. Everything went back together as it should.

 

[GabbyWC]

This is some great work happening here. Is anyone willing to film and upload a video of the full unlocking procedure for this device on to YouTube? The pictures of the less risky shorting methods are helpful but a high definition video that shows how best to open the device and perform the shorting procedure would be even better.

 

[hyperblu]

This is some great work happening here. Is anyone willing to film and upload a video of the full unlocking procedure for this device on to YouTube? The pictures of the less risky shorting methods are helpful but a high definition video that shows how best to open the device and perform the shorting procedure would be even better.

The cover pops off with just your fingernail. The heatsink snaps on to the shield that is soldered to the board. To remove the heatsink, you want to gently pry back the metal tabs that mesh with the shielding to hold it in place.

I found the best access was toward the HDMI port. Once you have some of the heatsink tabs pried outward, you can simply lift up and pry the heatsink off with your fingers. Bend the heatsink tabs back in their original position after removal so they will snap back over the shield that is attached to the board.

---------- Post added at 02:56 AM ---------- Previous post was at 02:50 AM ----------

Just to say thanks. Rooted my 2 Sticks 4k. Quick question: I live in Italy and one of the sticks is imported from US. Can I turn it into an italian one (Actually everything seems to work except alexa).

Thanks again for this excellent job.
Pino.

If the other stick is the 4k version, you should be able to create a backup image of the Italian one and load that image to the US version using twrp. Assuming the internal components are the same, I don't see why that wouldn't work.

---------- Post added at 03:45 AM ---------- Previous post was at 02:56 AM ----------

This is not my lucky day. Couldn't find my OTG cable for TWRP. Found it, dug out my Rii keyboard, battery is dead, look for ancient mini USB wire, don't have one, dig out my Anker wireless keyboard, no adapter... FML.

 

[rbox]

@rbox
Thank you for all you work with Amazon devices
Can i kindly ask you repack/update TWRP for Stick 4K with mouse emulator like for Fire TV 2 Gen?
Its very usefull and maybe integrate it into kamakiri?

I'll look in to it.

 

[vetmike]

Does anyone have a stock image available?

I bricked my Firestick 4k installing Magisk the wrong way (DO NOT install the boot patch from Magisk Manager!). I had to reinstall recovery/TWRP and need to reinstall the OS next I believe.

 

[rbox]

Does anyone have a stock image available?

I bricked my Firestick 4k installing Magisk the wrong way (DO NOT install the boot patch from Magisk Manager!). I had to reinstall recovery/TWRP and need to reinstall the OS next I believe.

I hope to have a ROM up this weekend.

 

[vetmike]

Great to hear, thanks for your work @rbox! I used your ROMs on the tank Firestick and they worked flawlessly.

 

[GabbyWC]

The cover pops off with just your fingernail. The heatsink snaps on to the shield that is soldered to the board. To remove the heatsink, you want to gently pry back the metal tabs that mesh with the shielding to hold it in place.

I found the best access was toward the HDMI port. Once you have some of the heatsink tabs pried outward, you can simply lift up and pry the heatsink off with your fingers. Bend the heatsink tabs back in their original position after removal so they will snap back over the shield that is attached to the board.

Thank you for the detailed instructions. I think I can visualize what you've described here but having a video as a guide to disassemble the unit would still be ideal.

 

[Sus_i]

This is not my lucky day. Couldn't find my OTG cable for TWRP. Found it, dug out my Rii keyboard, battery is dead, look for ancient mini USB wire, don't have one, dig out my Anker wireless keyboard, no adapter... FML.

me too found my logitech k400 keyboard with dead batteries, one of them leaked out, ruined the internals...

I bricked my Firestick 4k installing Magisk the wrong way (DO NOT install the boot patch from Magisk Manager!). I had to reinstall recovery/TWRP and need to reinstall the OS next I believe.

Remember that warning from OP:

Don't flash boot/recovery images from FireOS (FlashFire, MagiskManager etc.)

You may do the shorting/unlock with the two scripts again, i.e. restore the kamakiri patched boot.img.

That will fix your stick, no need to flash a new system :good:

 

[Vency77]

Sorry if I missed it but does this work for the non 4k version of the latest stick?

 

[CFKod]

After the old bootrom-exploit (amonet) we've been using for unlocking all these Fire-gadgets is closed in more recent Mediatek SOCs like the one used in the FireTV Stick 4K, @xyz` has done it again and found another bootrom-exploit.
Together we proudly present kamakiri for the FireTV Stick 4K.

About to purchase one of these, thanks for your hard work.

Do you know of anything similar for Amazon Fire TV 2 box (Sloane)
Mine froze in TWRP as system was formatted and a new rom installing.....
I have the updated preloader, which isn't allowing @rbox unbrick img.
so hangs on the white amazon fire tv logo as nothing to boot into.
Its now a brick, so I don't mind soldering/desoldering just not sure where to start and if it's even possible in this situation...

 

[Sus_i]

Sorry if I missed it but does this work for the non 4k version of the latest stick?

You may take a look here :good:

About to purchase one of these, thanks for your hard work.

Do you know of anything similar for Amazon Fire TV 2 box (Sloane)
Mine froze in TWRP as system was formatted and a new rom installing.....
I have the updated preloader, which isn't allowing @rbox unbrick img.
so hangs on the white amazon fire tv logo as nothing to boot into.
Its now a brick, so I don't mind soldering/desoldering just not sure where to start and if it's even possible in this situation...

I asked something similar

 

[k4y0z]

About to purchase one of these, thanks for your hard work.

Do you know of anything similar for Amazon Fire TV 2 box (Sloane)
Mine froze in TWRP as system was formatted and a new rom installing.....
I have the updated preloader, which isn't allowing @rbox unbrick img.
so hangs on the white amazon fire tv logo as nothing to boot into.
Its now a brick, so I don't mind soldering/desoldering just not sure where to start and if it's even possible in this situation...

There is nothing ready to use, but since it's the same SOC as suez the bootrom-part from amonet-suez should work:
https://forum.xda-developers.com/hd8-hd10/orig-development/unlock-fire-hd-10-2017-suez-t3913639

You will need to find the right spot for shorting and modify the scripts to flash the proper LK,PL and TZ.
You can use it to downgrade to an earlier version.

 

[CFKod]

There is nothing ready to use, but since it's the same SOC as suez the bootrom-part from amonet-suez should work:
https://forum.xda-developers.com/hd8-hd10/orig-development/unlock-fire-hd-10-2017-suez-t3913639

You will need to find the right spot for shorting and modify the scripts to flash the proper LK,PL and TZ.
You can use it to downgrade to an earlier version.

Awesome. Hopefully try it this evening. Will let you know how I get on

 

[Rortiz2]

@k4y0z I could not take it anymore. You and xyz done an excellent work to the Fire devices community. Without you guys, this would be dead xD.
I donated, you deserve it.
Thanks you and keep unlocking more Fire Devices!
Regards!

 

[c3po_droid]

Just FYI,

I rooted my FireStick 4K, which was already updated to the latest FireOS, following these fine instructions on the top of this forum! (Many many many Thanks! ) A little trick I did for shorting the pin and not having to "cut" away any of the shielding was to take a pin and stick it between the two capacitors that are right next to each other, slightly underneath the shielding, then angle the pin so that it touched the shield at the same time (which would be GND). Worked like a charm!

After I had completed installing TWRP, I used ADB and transferred and install Magisk 19.4 Zip ( from Magisk.me). Once that was completed I used ADB to install the Magisk Manager APK. Booted everything up and worked like a hot damn.

My final step was to get the system to notice and use NTFS file systems. Using ADB I looked through some of the files on the FireStick, trying to see if I could find some script which was launched when a USB stick was inserted into the OTG cable and how the OS was handling it. I gave up quickly. Haha. If anyone knows what files/code that the FireOS uses for checking and mounting external USB drive please let me know. Instead I used ADB and installed StickMount 3.5, which works perfectly.

In summary,
I was easily able to root ( Thank you, @xyz @k4y0z), install Magisk, Install StickMount, and now I can mount NTFS, and watch my own files greater that 4GB on Kodi!

Thank you!

Very helpful and interesting post, thank you very much!

So... since you had some ntfs success by using StickMount, this implies that FireOS has actually the ntfs-3G library included, if I'm not mistaken. Reading a bit about StickMount it seems to me that it uses the systems ntfs-3G driver, instead of prividing its own. If that is correct, than a simple mount script might work for ntfs, as soon as somebody figures out how to initialize it automatically. But is it actually a fact that FireOS has (a dorming) ntfs capability out of the box then?