Unlocking bootloader/ rebooting in edl without testpoint Vivo Y31 2021

[Pervokur]

Unlocked models with this method:
Vivo Y31 PD2050F 2021 A12 6.7.20
Vivo V21e PD2107F A12 6.6.19

I did it from rooted Samsung J120F, I didn't try from PC///bc no PC =(

My guide in Russian {Mod edit: Link removed}

Custom fastboot for vivo in ubu.zip is from here https://forum.xda-developers.com/t/how-to-unlock-bootloader-of-vivo-phones.3686690/

Video of a double terminal attack. After I came up with such an idea, I succeeded on the first try. To reboot in edl just use

fastboot oem reboot-edl

instead of

fastboot vivo_bsp unlock_vivo

REMINDER! Rebooting into edl from fastboot returning locked state, so you should unlock again if you need it.


My setup
rooted Sumsung J120F with A10 custom rom from this forum
custom fastboot for vivo v2 (Linux x86_64) from this forum (for vivo_bsp command)
Termux from f-droid
Ubuntu CLI from here https://github.com/tuanpham-dev/termux-ubuntu

So there is nothing from mother Russia=) Well... only sources list with officials servers with tag arch=amd64, you can create your own in order to download x86_64 libs.

You can use any .img, big enough.

Vivo Y31 <
qemu + fastboot , so i could run x86_64 on my 32 bit arm phone
Ubuntu to run qemu
Termux to run Ubuntu
Magisk to grant root

All commands with root, otherwise fastboot will not see device.

If you can copy-paste commands, then you will understand this

Spoiler: guide in Russian

Подготовка
#
1. ставим termux с f-droid

https://f-droid.org/repo/com.termux_118.apk

скачиваем кастомный fastboot для виво и источники пакетов для ubuntu Прикрепленный файлubu.zip ( 362.4 КБ )Кол-во скачиваний: 10
и распакуем в обычную стандартную папку Download, она же Загрузки

скачиваем vendor.img , хотя наверное может подойти любой vendor.img или даже любой *.img

Яндекс

Найдётся всё

disk.yandex.ru

2. запускаем termux

3. вводим
termux-setup-storage
соглашаемся

4. вводим
pkg update
на вопросы отвечаем
y
ввод

5 ставим сюда ubuntu, копируем-вставляем всю строчку

pkg install tsu wget curl proot tar -y && wget https://raw.githubusercontent.com/tuanpham-dev/termux-ubuntu/master/ubuntu.sh && chmod +x ubuntu.sh && bash ubuntu.sh nde


соглашаемся на все

задаем пользователя и пароли(пользователь маленькими буквами, пароль минимум 6 знаков!!!), я задал
user
user
mmmmmm
mmmmmm

6 мы внутри ubuntu, но давайте выйдем и зайдем

exit

заходим в убунту с рут

sudo ./start-ubuntu20.sh

7 получаем рут и переходим в корень

su
вводим пароль, который вы задали, у меня mmmmmm

cd

копируем из загрузок файлы фастбут и источники, чтоб можно было скачать x86_64 либы

cp ../sdcard/download/amd64.list ../etc/apt/sources.list.d
cp ../sdcard/download/fastboot ~/

8 добавляем целевую архитектуру x86_64

dpkg --add-architecture amd64

9 все обновляем

apt-get update

10 ставим qemu

apt install qemu-user

11 устанавливаем x86_64 fastboot ради библиотек(может и не надо)

apt install fastboot:amd64


Атака
#
12 В ubuntu запускаем наш фастбут через эмулятор

qemu-x86_64 /root/../lib/x86_64-linux-gnu/ld-linux-x86-64.so.2 --library-path /root/../lib/x86_64-linux-gnu/ ./fastboot --help

жмем стрелочку вверх , стираем --help и вводим vivo_bsp unlock_vivo

выполняем и получаем fail

13 в термуксе свайпаем с левой верхней части экрана для показа меню и жмем new session, это нужно для второго терминала
#


14 выбираем второй инстанс и также заходим в убунту

sudo ./start-ubuntu20.sh

далее

su

вводим пароль, который вы задавали

перходим в корень

cd

теперь можно сразу две команды посылать

15 В новом терминале вставляем

qemu-x86_64 /root/../lib/x86_64-linux-gnu/ld-linux-x86-64.so.2 --library-path /root/../lib/x86_64-linux-gnu/ ./fastboot flash vendor /sdcard/download/vendor.img

файл vendor.img должен быть в загрузках

Пойдет загрузка файла в телефон, но не прошивка. Её без анлока и полного скачивания не будет

16 Переходим в первый терминал и выполняем команду повторно

стрелочка вверх - ввод

qemu-x86_64 /root/../lib/x86_64-linux-gnu/ld-linux-x86-64.so.2 --library-path /root/../lib/x86_64-linux-gnu/ ./fastboot vivo_bsp unlock_vivo

 

[Oswald Boelcke]

My guide in Russian {Mod edit: Link removed}

@Pervokur

Welcome to XDA! We're greatful that you share your knowledge.

However; I've removed the references to 4pda! Same applies to your post here.

4pda is not only another phone related website (and not at all affiliated with xda-developers) but also well known for the distribution of malware and warez. Links to 4pda are not accepted on XDA.
XDA Forum Rules (excerpt):

...
6. Do not post or request warez.

If a piece of software requires you to pay to use it, then pay for it. We do not accept warez nor do we permit members to request, post, promote or describe ways in which warez, cracks, serial codes or other means of avoiding payment, can be obtained or used. This is a site of developers, i.e. the sort of people who create such software. When you cheat a software developer, you cheat us as a community.

(...)

11. Don’t post with the intention of selling something.

• Don’t use XDA to advertise your product or service. Proprietors of for-pay products or services, may use XDA to get feedback, provide beta access, or a free version of their product for XDA users and to offer support, but not to post with the intention of selling. This includes promoting sites similar / substantially similar to XDA-Developers.com.
• Do not post press releases, announcements, links to trial software or commercial services, unless you’re posting an exclusive release for XDA-Developers.com.
• Encouraging members to participate in forum activities on other phone related sites is prohibited.
• Off-site downloads are permitted if the site is non-commercial and does not require registration.
• Off-site downloads from sites requiring registration are NOT encouraged but may be permitted if both of the following conditions are met:
  A) The site belongs to a member of XDA-Developers with at least 1500 posts and 2 years membership, who actively maintains an XDA-Developers support thread(s) / posts, related to the download.
  B) The site is a relatively small, personal website without commercial advertising / links (i.e. not a competitor forum-based site with purposes and aims similar to those of XDA-Developers.com.)

...

Regards
Oswald Boelcke
Senior Moderator

 

[Killuminati91]

OMG! You did it you mad man! I did this on windows, unlocked the bootloader on the Vivo x70 pro plus.

 

[Pervokur]

OMG! You did it you mad man! I did this on windows, unlocked the bootloader on the Vivo x70 pro plus.

del

 

[domineus]

I must ask
is this tested on the x fold???

 

[Pervokur]

I must ask
is this tested on the x fold???

Maybe, but do you really want to become 1st with unlocked x fold?

 

[domineus]

Maybe, but do you really want to become 1st with unlocked x fold?

tempting as it is there's not too much reason to do it besides sideloading android 13 beta...which could be problematic as i don't have the original firmware. Plus you lose the really sweet fingerprint sensor

 

[AndroPlus]

I must ask
is this tested on the x fold???

I did it!

These feature works even after BLU:
Fingerprint sensor
Face ID
OTA install

and Magisk works too!
You have to use DSU Loader to get boot.img though.

Here's full firmware dump of PD2178_A_12.0.14.5.W10 (contains all partitions for research purpose):

PD2178_A_12.0.14.5.W10 - Google Drive

drive.google.com

 

[domineus]

I did it!
Fingerprint sensor can be used even after BLU.
View attachment 5618781

Impressive. Does face ID work too? I assume this resulted in wiping your memory which means I would have to set things up again...

But one big bonus is that we could run Android 13 beta 2 on the device.

Does anyone have a backup to the vivo stock rom? I received an update this morning and I wanted to make sure if anything went side ways I can still flash stock.

 

[AndroPlus]

Impressive. Does face ID work too? I assume this resulted in wiping your memory which means I would have to set things up again...

But one big bonus is that we could run Android 13 beta 2 on the device.

Does anyone have a backup to the vivo stock rom? I received an update this morning and I wanted to make sure if anything went side ways I can still flash stock.

Yes, Face ID works too.

 

[domineus]

Dsu loader? Where's that?

 

[yxsef.7i]

@Pervokur I think the 4pda links are the links to a custom vendor.img, how would I get my own vendor.img?

 

[domineus]

Okay it worked I am OEM unlocked on the x fold. Massive update coming on the device (6.82 gb). I haven't decided if I want to root the device (I may but don't we need TWRP)?

I could in theory throw android 13 beta 2 on the device but I also need a pathway to flash stock if I do...eh we will see

 

[Pervokur]

Okay it worked I am OEM unlocked on the x fold. Massive update coming on the device (6.82 gb). I haven't decided if I want to root the device (I may but don't we need TWRP)?

I could in theory throw android 13 beta 2 on the device but I also need a pathway to flash stock if I do...eh we will see

you can try dsu https://github.com/VegaBobo/DSU-Sideloader to boot into los19.1 gsi (from andy Yan , bvS, not!!! vndklite) with integrated root. Then use dd if= ... to backup all partitions (around 70, except "sda" and "userdata", don't backup them)

) in /dev/block/by-name/


or use magisk 24306 canary to get root on stock, but it's more risky,



more info here

Vivo x70 Pro+ Bootloader Unlock - HOW TO GUIDE

WARNING! THIS IS EXPERIMENTAL, I HAVE NO IDEA WHERE WE CAN GO FROM HERE. THIS MIGHT BREAK YOUR DEVICE!!! UNLOCKING THE BOOTLOADER REQUIRES A WIPE AFTERWARDS! UNLOCKING THE BOOTLOADER WILL DISABLE YOUR FINGERPRINT READER! (FIXED BY RELOCKING)...

forum.xda-developers.com

 

[AndroPlus]

@Pervokur I think the 4pda links are the links to a custom vendor.img, how would I get my own vendor.img?

You can use any file, as all flashing commands will fail on locked bootloader.
It's important to execute the unlock command in a separate command window before the flashing command starts and fails.

So you can also use random movie file like this:
fastboot boot movie.mp4
then immediately run
.\fastboot.exe vivo_bsp unlock_vivo
on other command prompt

 

[yxsef.7i]

HAHAHA LOL. what a big exploit this is. thank you btw. will reply again once i can get it to unlock. will also ask about magisk later on, if there's some sort of specific steps for these devices.

 

[yxsef.7i]

You can use any file, as all flashing commands will fail on locked bootloader.
It's important to execute the unlock command in a separate command window before the flashing command starts and fails.

So you can also use random movie file like this:
fastboot boot movie.mp4
then immediately run
.\fastboot.exe vivo_bsp unlock_vivo
on other command prompt

hey, fastboot isn't detecting my device, but adb does detect my device. any idea why? bit confused sorry

 

[AndroPlus]

hey, fastboot isn't detecting my device, but adb does detect my device. any idea why? bit confused sorry

Did you install Google USB driver?

Get the Google USB Driver | Android Developers

The Google USB Driver is required for Windows if you want to perform adb debugging with Google devices.

developer.android.com

Also check device manager to see if the driver is loaded:

Fastboot Not Detecting Device on Windows 10/ 11? Fix for OnePlus, Xiaomi, Realme & More

If Fastboot is not detecting devices on Windows 10/11, follow our guide and install the fastboot drivers for OnePlus, Xiaomi, Realme & more.

beebom.com

 

[yxsef.7i]

You can use any file, as all flashing commands will fail on locked bootloader.
It's important to execute the unlock command in a separate command window before the flashing command starts and fails.

So you can also use random movie file like this:
fastboot boot movie.mp4
then immediately run
.\fastboot.exe vivo_bsp unlock_vivo
on other command prompt

this se

hey, fastboot isn't detecting my device, but adb does detect my device. any idea why? bit confused sorry

even with the official Google adb+fastboot, its the same thing. no fastboot, but there's adb

 

[yxsef.7i]

Did you install Google USB driver?

Get the Google USB Driver | Android Developers

The Google USB Driver is required for Windows if you want to perform adb debugging with Google devices.

developer.android.com

Also check device manager to see if the driver is loaded:

Fastboot Not Detecting Device on Windows 10/ 11? Fix for OnePlus, Xiaomi, Realme & More

If Fastboot is not detecting devices on Windows 10/11, follow our guide and install the fastboot drivers for OnePlus, Xiaomi, Realme & more.

beebom.com

this is what im looking for. hold on