• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

[UNLOCK][ROOT][TWRP][UNBRICK] Fire TV Stick 4K (mantis)

Search This thread

0815hoffi

Senior Member
Dec 22, 2019
446
134
Munich
github.com
There is a Label at the buttom....

Like this...

20200210_183659-scaled.jpg
 
  • Like
Reactions: Skel40

bo0gietrain

Senior Member
Nov 6, 2013
67
9
So is the conclusion that any hardware revision with FireTV OS 6.2.8.0 or later installed is unable to be used anymore with this this tool?
 
Last edited:

m1s73r

Member
Dec 11, 2012
22
6
I can confirm this is still working as of today - Just went to my local store which had hundreds of Fire TV 4k sticks. All different kinds of serial numbers from VM071 to VM170, VM190, VM202 etc. I just picked up a VM170 and without ever plugging it in, I started to disassemble the device and root it. It worked flawlessly (used a jumper wire to short), then I just booted it, connected it to WiFi, let it run a bunch of updates and that's it. Works perfectly. Thank you so much for this!
 
  • Like
Reactions: gabardal

m1s73r

Member
Dec 11, 2012
22
6
I've got another question, like I mentioned previously I rooted without updating first, applied Magisk and everything, THEN started the stick and updated all the way to 6.2.8.1 (official OTA). Root is still there, as well as TWRP, but I was wondering if I did blow my e-fuse this way?
 

SweenWolf

Senior Member
Mar 18, 2016
532
373
Paradise
Amazon Fire TV
I've got another question, like I mentioned previously I rooted without updating first, applied Magisk and everything, THEN started the stick and updated all the way to 6.2.8.1 (official OTA). Root is still there, as well as TWRP, but I was wondering if I did blow my e-fuse this way?
you said you rooted your stick first then you updated your stick via OTA, so TWRP was there when the update happened, which prevented the update to TZ causing Netflix and prime to not work.
if you updated the TZ at that point then on next reboot your efuse would have blown.
but TZ wasn't updated so efuse wasn't blown
then you flashed my TZ update zip, which updated TZ and removed the efuse related files.

Your efuse is not blown.

[EDIT]
forget what i told you, I have no idea if your TZ was updated or not, i assumed it wasn't updated because your prime wasn't working, other devs will help you further, wolf out.
 
Last edited:
  • Like
Reactions: m1s73r

3941

New member
Jun 19, 2016
3
0
I just got my first Fire TV Stick 4k, and it's a VM081. I guess I'm lucky?
Can I update this thing without worrying about being able to unlock it later?

EDIT: Apparently I can't.... Got that from a bit of reading this thread. This section is a bit of a mess, though. Could use some useful stickies.
 
Last edited:

m1s73r

Member
Dec 11, 2012
22
6
I just got my first Fire TV Stick 4k, and it's a VM081. I guess I'm lucky?
Can I update this thing without worrying about being able to unlock it later?

EDIT: Apparently I can't.... Got that from a bit of reading this thread. This section is a bit of a mess, though. Could use some useful stickies.
I got a VM170 and did not update. Would not even plug it in because you never know what it does. I just opened it straight away and went to rooting. Worked for me. Furthermore, if you start it the problem is that you need to connect it to a working WiFi otherwise it won't let you finish the setup. Updating before doesn't make sense anyways. Just root it and then you can update and finish setup.
 
  • Like
Reactions: kozmo2k4 and 3941

griff14

New member
Aug 23, 2021
4
0
I've got a vanilla Firestick 4K from 2019 with VM1493 in the serial. Only thing I did to it was sideload some emulators and roms. Never rooted, which I was interested in doing now to add more controller options. But it looks like I'm too late to the game and my stick is fully updated with 6.2.8.1. I was trying the short for hours before realizing that the jig was up and read more of this thread :p Doh! Doesn't boot at all when shorted. Guess we're our of luck until a new solution comes out that can somehow deal with the efuse situation. Let the patience game begin!
 

sylvestor2013

Member
Dec 15, 2012
48
4
I'm a newbie. I've read for the past 3 hours and I'm just as lost as when I first started.

I have a 4K stick that I bought 2 years ago. It worked perfectly for 2 years. A couple days ago, I sideloaded an app. The next day, the only thing I see on my TV is the initial white FireStick logo. After about 10 seconds I see a bigger FireStick logo with an occasional orange glow going through it. I've left it for 12 hours and the orange glow through the FireStick logo continues.

I've tried the back + right select button the remote, but that doesn't do anything.

I've tried hooking up the OTG cable with my keyboard and trying the ctrl + alt +menu + prtscrn + i with numerous tries and key length presses.

I followed instructions online to get Twrp installed. But I was never successful with the shorting procedure. After reading most of this thread and finding post # 1517 "
The only way to root the device is to get a device that has:

A - Not been patched
B - Not been upgraded to 6.2.8.0"

I never enabled ADB and I don't think I turned off automatic updates from Amazon. So I assume I received the 6.2.8.0 update. Is it fair to assume my attempts at shorting my Stick will not work at this time ?

Any other suggestions to get my Stick working ? I don't need root or anything fancy. I just want to be able to use my Stick for regular usage.
 

Top Liked Posts

  • 1
    I don't know what I will do with my firestick 4k now... this is a piece of junk .. even more after the update .. probably the ****tiest android device I have ever bought
    I guess we all know what amaz. can do via OTA updates and it was always advised to disable updates (even in the OP), valid from the first fireTV ever, till now... If you want to root it sometime, disable or block updates. Amaz. simply fix every vulnerable, that's only a matter of time.

    So you may use the stick... or put it in a drawer instead and wait for an update of the OP. You know, developing needs time... :)
    1
    man it'

    it's a shame there is no warning on the first post of this thread; guess it has not been updated for a while...
    I have read some latest comments and I now see it's not possible to root 6.2.8.1 (latest firmware)... :(
    I don't know what I will do with my firestick 4k now... this is a piece of junk .. even more after the update .. probably the ****tiest android device I have ever bought (I had Chinese tv sticks before that and they worked better than this piece of junk as they were all rooted).
    What's the problem of using it without root? Nobody cancelled sideloading yet.
    1
    yeah thank god sideloading is still possible.
    how can I block my firetv from auto update again without root?
    Go to your router and set static DNS to 127.0.0.1 for:
    d1s31zyz7dcc2d.cloudfront.net
    amzdigital-a.akamaihd.net
    amzdigitaldownloads.edgesuite.net
    softwareupdates.amazon.com
    updates.amazon.com

    Make sure your router DHCP gives out it's own IP as DNS server.
    Also Stick wont update without USB power adapter.

    So is stock FW 6.2.7.7 rootable? I can't find answer in here.
  • 1
    Thank you for the reply.

    I don't think I enabled ADB debugging. When I ran "adb devices" I got a message saying "unauthorized"

    I've never installed Launcher manager. So I'm out of luck for now :(
    There's a pad below cap 4 and 5 which you have to ground, if you "short" that pad to ground then it will not cause any heat, maybe you shoeted something else, and this stick does NOT heats up that easily.
    If your short is successful then it will only result in your stick not booting up (will show nothing), remove the short and power and your stick will start bootlooping again

    About you saying you haven't enabled ADB debugging (you have enabled it) that's why it saying unauthorized, otherwise it would have returned nothing.
    What else have you done to the stick.
    There are two reasons i know which could have cause this issue
    1. You tried to install an app (sideloaded) which caused the stick to not boot because that app is crashing in loop. (One major example is Google Play Services, NOT TALKING ABOUT MAGISK)
    2. You tried to disable apps, and used a script / app to debloat the stick or to replace the launcher, and you somehow managed to disable 3 of the launchers on this stick (maybe you also has disabled the system itself)
    1
    I'm assuming there is a left and right side of the shiny surface in #4 and I should short the right side of the shiny surface to the metal frame (or I could short the left side of #3 to the frame) ?
    Yeah, one of the sides between #3 and #4 :)
    But as i said, you're very late, your stick is probably brom patched...

    You may put the stick in a drawer and wait, developing needs time and if you're lucky there will be an update of the OP.
    1
    ...

    If you see "RuntimeError: ERROR: Serial protocol mismatch, expected 0001 got 0000" that means your short is no good and you need to try again (unplug Firestick, reposition short, restart script, plug back in)

    If you plug it in and the script just hangs at "Waiting for bootrom" without any further messages, it means the short was successful but the boot has been blocked due to the blown e-fuse. That's how you can tell if your stick is on 6.8.2.0 or 6.8.2.1. If that's the case, then unfortunately you can't install TWRP at this point or go any further.

    Thank you for the reply. I did try the shorting again. The shorting was successful, but I was still seeing "Waiting for bootrom" So now I know the e-fuse is blown :(

    I guess this Firestick goes into a drawer until a new exploit is found.
    1
    Is there a problem with passthrough?
    Thanks for the reply, I'll check the link you posted even though I did it this morning and it only refers to the fw 6.2.8.1.

    Starting from the fw 6.2.7.7 the stick doesn't process any longer the DTS audio and since I also use it with Kodi for watching movies I've on the NAS, I'm trying to avoid any fw update
    1
    Thanks for the reply, I'll check the link you posted even though I did it this morning and it only refers to the fw 6.2.8.1.
    You're right, sry, the updated apk was in this thread here:
  • 60
    NOTE: There have been multiple reports of devices with serial numbers containing VM190 or higher being shipped with DL-Mode disabled in BROM.
    These devices cannot be unlocked using kamakiri.
    These devices do not show up at all on USB when shorted.


    After the old bootrom-exploit (amonet) we've been using for unlocking all these Fire-gadgets is closed in more recent Mediatek SOCs like the one used in the FireTV Stick 4K, @xyz` has done it again and found another bootrom-exploit.
    Together we proudly present kamakiri for the FireTV Stick 4K.

    Before proceeding make sure to read and understand this entire post.

    Running this exploit requires a patched linux-kernel on the PC you are using.
    We have put together a Live-ISO that already contains all prerequisites required for running kamakiri.
    You can find the current version of the ISO at:
    https://github.com/amonet-kamakiri/fireiso/releases

    It can be burned to a CD or to a USB-flashdrive.

    Current Version: kamakiri-mantis-v1.2.zip

    You will need to open the device and remove the heatshield on the side without the antennas (2 square bricks).
    NOTE: It is not required to desolder or force the shield off, it is just clipped onto a frame. (The attached picture may be a bit misleading, since it also has the frame removed)

    You will need something for shorting (wire, aluminum foil etc.)

    1. Boot the ISO
    2. Download and extract the exploit package.
    3. Open a terminal in the kamakiri directory
    4. Run
      Code:
      ./bootrom-step.sh
    5. Short one of the points in the attached photo to ground (the cage of the shielding).
      Ideally you want to use DAT0, since that is tiny it might be easier to short the point marked CLK instead.
      It is very important that you use a piece of soft wire or aluminum foil or something similar for shorting. Don't use tweezers as that makes it incredibly easy to knock of the capacitor off the PCB and kill the board!
    6. Connect the stick to your computer (while keeping it shorted)
    7. The script should tell you to release the short and hit enter
    8. Once finished run
      Code:
      ./fastboot-step.sh
    9. Your device will now reboot into TWRP

    Important information

    Don't flash boot/recovery images from FireOS (FlashFire, MagiskManager etc.)

    TWRP will prevent updates from overwriting LK/Preloader/TZ, so generally installing an update should work without issues (only full updates, incremental updates won't work).

    For ROM developers there is still an option to overwrite these, which should only be done after thorough testing and if needed (LK should never be updated).

    It is still advised to disable OTA.

    thanks to @hwmod for the picture
    thanks to @Sus_i for providing an update.bin
    thanks to @zeroepoch for developing aftv2-tools

    XDA:DevDB Information
    kamakiri, Tool/Utility for the Amazon Fire TV

    Contributors
    k4y0z, xyz`
    Source Code: https://github.com/amonet-kamakiri/


    Version Information
    Status:
    Stable
    Current Stable Version: 1.0.0
    Stable Release Date: 2019-10-05

    Created 2019-10-05
    Last Updated 2019-10-14
    14
    There are three options for interacting with TWRP:
    1. A mouse via USB-OTG
    2. TWRP commandline via adb: https://twrp.me/faq/openrecoveryscript.html
    3. Via /cache/recovery/command

    Example for /cache/recovery/command:
    Code:
    echo "--update_package=/path/to/zipfile" > /cache/recovery/command
    echo "--wipe_cache" >> /cache/recovery/command
    reboot recovery

    Should you somehow end in a bootloop, TWRP contains a special boot menu that will be displayed when you boot the stick with an OTG-cable connected.
    It will give you 5 seconds to hit cancel and stay in TWRP or reboot into the OS otherwise.

    NOTE:This will only work if the boot-exploit is still there.
    12
    Well that was easy! And my stick isn't on the latest version, so I'll be able to get some update URLs and make a prerooted ROM hopefully this weekend.
    11
    Is this something that Amazon can fix with future updates? I am holding off until we have a more refined rom..

    No, the only way they can fix it is with a new hardware revision.
    10
    Can you tell us how to disable Ota update on the fire tv stick 4k after a successful root.
    And since there is no superuser installed how can this be done.
    ota can be disabled with root by following commands:
    Code:
    adb shell
    su
    pm disable com.amazon.tv.forcedotaupdater.v2
    pm disable com.amazon.device.software.ota
    pm disable com.amazon.device.software.ota.override