Unlocking bootloader/ rebooting in edl without testpoint Vivo Y31 2021

Search This thread

Pervokur

Senior Member
Feb 15, 2022
147
44
Unlocked models with this method:
Vivo Y31 PD2050F 2021 A12 6.7.20
Vivo V21e PD2107F A12 6.6.19

I did it from rooted Samsung J120F, I didn't try from PC///bc no PC =(



My guide in Russian {Mod edit: Link removed}

Custom fastboot for vivo in ubu.zip is from here https://forum.xda-developers.com/t/how-to-unlock-bootloader-of-vivo-phones.3686690/

Video of a double terminal attack. After I came up with such an idea, I succeeded on the first try. To reboot in edl just use

fastboot oem reboot-edl

instead of

fastboot vivo_bsp unlock_vivo

REMINDER! Rebooting into edl from fastboot returning locked state, so you should unlock again if you need it.


My setup
rooted Sumsung J120F with A10 custom rom from this forum
custom fastboot for vivo v2 (Linux x86_64) from this forum (for vivo_bsp command)
Termux from f-droid
Ubuntu CLI from here https://github.com/tuanpham-dev/termux-ubuntu

So there is nothing from mother Russia=) Well... only sources list with officials servers with tag arch=amd64, you can create your own in order to download x86_64 libs.

You can use any .img, big enough.

Vivo Y31 <
qemu + fastboot , so i could run x86_64 on my 32 bit arm phone
Ubuntu to run qemu
Termux to run Ubuntu
Magisk to grant root

All commands with root, otherwise fastboot will not see device.

If you can copy-paste commands, then you will understand this

Подготовка
#
1. ставим termux с f-droid

скачиваем кастомный fastboot для виво и источники пакетов для ubuntu Прикрепленный файлubu.zip ( 362.4 КБ )Кол-во скачиваний: 10
и распакуем в обычную стандартную папку Download, она же Загрузки

скачиваем vendor.img , хотя наверное может подойти любой vendor.img или даже любой *.img

2. запускаем termux

3. вводим
termux-setup-storage
соглашаемся

4. вводим
pkg update
на вопросы отвечаем
y
ввод

5 ставим сюда ubuntu, копируем-вставляем всю строчку

pkg install tsu wget curl proot tar -y && wget https://raw.githubusercontent.com/tuanpham-dev/termux-ubuntu/master/ubuntu.sh && chmod +x ubuntu.sh && bash ubuntu.sh nde


соглашаемся на все

задаем пользователя и пароли(пользователь маленькими буквами, пароль минимум 6 знаков!!!), я задал
user
user
mmmmmm
mmmmmm

6 мы внутри ubuntu, но давайте выйдем и зайдем

exit

заходим в убунту с рут

sudo ./start-ubuntu20.sh

7 получаем рут и переходим в корень

su
вводим пароль, который вы задали, у меня mmmmmm

cd

копируем из загрузок файлы фастбут и источники, чтоб можно было скачать x86_64 либы

cp ../sdcard/download/amd64.list ../etc/apt/sources.list.d
cp ../sdcard/download/fastboot ~/

8 добавляем целевую архитектуру x86_64

dpkg --add-architecture amd64

9 все обновляем

apt-get update

10 ставим qemu

apt install qemu-user

11 устанавливаем x86_64 fastboot ради библиотек(может и не надо)

apt install fastboot:amd64


Атака
#
12 В ubuntu запускаем наш фастбут через эмулятор

qemu-x86_64 /root/../lib/x86_64-linux-gnu/ld-linux-x86-64.so.2 --library-path /root/../lib/x86_64-linux-gnu/ ./fastboot --help

жмем стрелочку вверх , стираем --help и вводим vivo_bsp unlock_vivo

выполняем и получаем fail

13 в термуксе свайпаем с левой верхней части экрана для показа меню и жмем new session, это нужно для второго терминала
#


14 выбираем второй инстанс и также заходим в убунту

sudo ./start-ubuntu20.sh

далее

su

вводим пароль, который вы задавали

перходим в корень

cd

теперь можно сразу две команды посылать

15 В новом терминале вставляем

qemu-x86_64 /root/../lib/x86_64-linux-gnu/ld-linux-x86-64.so.2 --library-path /root/../lib/x86_64-linux-gnu/ ./fastboot flash vendor /sdcard/download/vendor.img

файл vendor.img должен быть в загрузках

Пойдет загрузка файла в телефон, но не прошивка. Её без анлока и полного скачивания не будет

16 Переходим в первый терминал и выполняем команду повторно

стрелочка вверх - ввод

qemu-x86_64 /root/../lib/x86_64-linux-gnu/ld-linux-x86-64.so.2 --library-path /root/../lib/x86_64-linux-gnu/ ./fastboot vivo_bsp unlock_vivo
 

Attachments

  • amd64.zip
    520 bytes · Views: 408
Last edited:

Oswald Boelcke

Senior Moderator / Moderator & RC-RT Committees
Staff member
My guide in Russian {Mod edit: Link removed}
@Pervokur

Welcome to XDA! We're greatful that you share your knowledge.

However; I've removed the references to 4pda! Same applies to your post here.

4pda is not only another phone related website (and not at all affiliated with xda-developers) but also well known for the distribution of malware and warez. Links to 4pda are not accepted on XDA.
XDA Forum Rules (excerpt):
...
6. Do not post or request warez.

If a piece of software requires you to pay to use it, then pay for it. We do not accept warez nor do we permit members to request, post, promote or describe ways in which warez, cracks, serial codes or other means of avoiding payment, can be obtained or used. This is a site of developers, i.e. the sort of people who create such software. When you cheat a software developer, you cheat us as a community.

(...)

11. Don’t post with the intention of selling something.
  • Don’t use XDA to advertise your product or service. Proprietors of for-pay products or services, may use XDA to get feedback, provide beta access, or a free version of their product for XDA users and to offer support, but not to post with the intention of selling. This includes promoting sites similar / substantially similar to XDA-Developers.com.
  • Do not post press releases, announcements, links to trial software or commercial services, unless you’re posting an exclusive release for XDA-Developers.com.
  • Encouraging members to participate in forum activities on other phone related sites is prohibited.
  • Off-site downloads are permitted if the site is non-commercial and does not require registration.
  • Off-site downloads from sites requiring registration are NOT encouraged but may be permitted if both of the following conditions are met:
    A) The site belongs to a member of XDA-Developers with at least 1500 posts and 2 years membership, who actively maintains an XDA-Developers support thread(s) / posts, related to the download.
    B) The site is a relatively small, personal website without commercial advertising / links (i.e. not a competitor forum-based site with purposes and aims similar to those of XDA-Developers.com.)
...

Regards
Oswald Boelcke
Senior Moderator
 

domineus

Senior Member
Jun 16, 2007
2,228
172
Maybe, but do you really want to become 1st with unlocked x fold?

tempting as it is there's not too much reason to do it besides sideloading android 13 beta...which could be problematic as i don't have the original firmware. Plus you lose the really sweet fingerprint sensor
 

AndroPlus

Senior Member
I must ask
is this tested on the x fold???
I did it!

These feature works even after BLU:
Fingerprint sensor
Face ID
OTA install

and Magisk works too!
You have to use DSU Loader to get boot.img though.

Here's full firmware dump of PD2178_A_12.0.14.5.W10 (contains all partitions for research purpose):
xfoldblu.jpg
 
Last edited:

domineus

Senior Member
Jun 16, 2007
2,228
172
I did it!
Fingerprint sensor can be used even after BLU.
View attachment 5618781
Impressive. Does face ID work too? I assume this resulted in wiping your memory which means I would have to set things up again...

But one big bonus is that we could run Android 13 beta 2 on the device.

Does anyone have a backup to the vivo stock rom? I received an update this morning and I wanted to make sure if anything went side ways I can still flash stock.
 

AndroPlus

Senior Member
Impressive. Does face ID work too? I assume this resulted in wiping your memory which means I would have to set things up again...

But one big bonus is that we could run Android 13 beta 2 on the device.

Does anyone have a backup to the vivo stock rom? I received an update this morning and I wanted to make sure if anything went side ways I can still flash stock.
Yes, Face ID works too.
 

domineus

Senior Member
Jun 16, 2007
2,228
172
Okay it worked I am OEM unlocked on the x fold. Massive update coming on the device (6.82 gb). I haven't decided if I want to root the device (I may but don't we need TWRP)?

I could in theory throw android 13 beta 2 on the device but I also need a pathway to flash stock if I do...eh we will see
 

Pervokur

Senior Member
Feb 15, 2022
147
44
Okay it worked I am OEM unlocked on the x fold. Massive update coming on the device (6.82 gb). I haven't decided if I want to root the device (I may but don't we need TWRP)?

I could in theory throw android 13 beta 2 on the device but I also need a pathway to flash stock if I do...eh we will see
you can try dsu https://github.com/VegaBobo/DSU-Sideloader to boot into los19.1 gsi (from andy Yan , bvS, not!!! vndklite) with integrated root. Then use dd if= ... to backup all partitions (around 70, except "sda" and "userdata", don't backup them)

) in /dev/block/by-name/


or use magisk 24306 canary to get root on stock, but it's more risky,



more info here
 

AndroPlus

Senior Member
@Pervokur I think the 4pda links are the links to a custom vendor.img, how would I get my own vendor.img?
You can use any file, as all flashing commands will fail on locked bootloader.
It's important to execute the unlock command in a separate command window before the flashing command starts and fails.

So you can also use random movie file like this:
fastboot boot movie.mp4
then immediately run
.\fastboot.exe vivo_bsp unlock_vivo
on other command prompt
 

yxsef.7i

Member
May 20, 2022
14
0
HAHAHA LOL. what a big exploit this is. thank you btw. will reply again once i can get it to unlock. will also ask about magisk later on, if there's some sort of specific steps for these devices.
 

yxsef.7i

Member
May 20, 2022
14
0
You can use any file, as all flashing commands will fail on locked bootloader.
It's important to execute the unlock command in a separate command window before the flashing command starts and fails.

So you can also use random movie file like this:
fastboot boot movie.mp4
then immediately run
.\fastboot.exe vivo_bsp unlock_vivo
on other command prompt
hey, fastboot isn't detecting my device, but adb does detect my device. any idea why? bit confused sorry
 

AndroPlus

Senior Member
hey, fastboot isn't detecting my device, but adb does detect my device. any idea why? bit confused sorry
Did you install Google USB driver?
Also check device manager to see if the driver is loaded:
 

yxsef.7i

Member
May 20, 2022
14
0
You can use any file, as all flashing commands will fail on locked bootloader.
It's important to execute the unlock command in a separate command window before the flashing command starts and fails.

So you can also use random movie file like this:
fastboot boot movie.mp4
then immediately run
.\fastboot.exe vivo_bsp unlock_vivo
on other command prompt
this se
hey, fastboot isn't detecting my device, but adb does detect my device. any idea why? bit confused sorry

even with the official Google adb+fastboot, its the same thing. no fastboot, but there's adb
 

yxsef.7i

Member
May 20, 2022
14
0
Did you install Google USB driver?
Also check device manager to see if the driver is loaded:
this is what im looking for. hold on
 

Top Liked Posts

  • There are no posts matching your filters.
  • 2
    Unlocked models with this method:
    Vivo Y31 PD2050F 2021 A12 6.7.20
    Vivo V21e PD2107F A12 6.6.19

    I did it from rooted Samsung J120F, I didn't try from PC///bc no PC =(



    My guide in Russian {Mod edit: Link removed}

    Custom fastboot for vivo in ubu.zip is from here https://forum.xda-developers.com/t/how-to-unlock-bootloader-of-vivo-phones.3686690/

    Video of a double terminal attack. After I came up with such an idea, I succeeded on the first try. To reboot in edl just use

    fastboot oem reboot-edl

    instead of

    fastboot vivo_bsp unlock_vivo

    REMINDER! Rebooting into edl from fastboot returning locked state, so you should unlock again if you need it.


    My setup
    rooted Sumsung J120F with A10 custom rom from this forum
    custom fastboot for vivo v2 (Linux x86_64) from this forum (for vivo_bsp command)
    Termux from f-droid
    Ubuntu CLI from here https://github.com/tuanpham-dev/termux-ubuntu

    So there is nothing from mother Russia=) Well... only sources list with officials servers with tag arch=amd64, you can create your own in order to download x86_64 libs.

    You can use any .img, big enough.

    Vivo Y31 <
    qemu + fastboot , so i could run x86_64 on my 32 bit arm phone
    Ubuntu to run qemu
    Termux to run Ubuntu
    Magisk to grant root

    All commands with root, otherwise fastboot will not see device.

    If you can copy-paste commands, then you will understand this

    Подготовка
    #
    1. ставим termux с f-droid

    скачиваем кастомный fastboot для виво и источники пакетов для ubuntu Прикрепленный файлubu.zip ( 362.4 КБ )Кол-во скачиваний: 10
    и распакуем в обычную стандартную папку Download, она же Загрузки

    скачиваем vendor.img , хотя наверное может подойти любой vendor.img или даже любой *.img

    2. запускаем termux

    3. вводим
    termux-setup-storage
    соглашаемся

    4. вводим
    pkg update
    на вопросы отвечаем
    y
    ввод

    5 ставим сюда ubuntu, копируем-вставляем всю строчку

    pkg install tsu wget curl proot tar -y && wget https://raw.githubusercontent.com/tuanpham-dev/termux-ubuntu/master/ubuntu.sh && chmod +x ubuntu.sh && bash ubuntu.sh nde


    соглашаемся на все

    задаем пользователя и пароли(пользователь маленькими буквами, пароль минимум 6 знаков!!!), я задал
    user
    user
    mmmmmm
    mmmmmm

    6 мы внутри ubuntu, но давайте выйдем и зайдем

    exit

    заходим в убунту с рут

    sudo ./start-ubuntu20.sh

    7 получаем рут и переходим в корень

    su
    вводим пароль, который вы задали, у меня mmmmmm

    cd

    копируем из загрузок файлы фастбут и источники, чтоб можно было скачать x86_64 либы

    cp ../sdcard/download/amd64.list ../etc/apt/sources.list.d
    cp ../sdcard/download/fastboot ~/

    8 добавляем целевую архитектуру x86_64

    dpkg --add-architecture amd64

    9 все обновляем

    apt-get update

    10 ставим qemu

    apt install qemu-user

    11 устанавливаем x86_64 fastboot ради библиотек(может и не надо)

    apt install fastboot:amd64


    Атака
    #
    12 В ubuntu запускаем наш фастбут через эмулятор

    qemu-x86_64 /root/../lib/x86_64-linux-gnu/ld-linux-x86-64.so.2 --library-path /root/../lib/x86_64-linux-gnu/ ./fastboot --help

    жмем стрелочку вверх , стираем --help и вводим vivo_bsp unlock_vivo

    выполняем и получаем fail

    13 в термуксе свайпаем с левой верхней части экрана для показа меню и жмем new session, это нужно для второго терминала
    #


    14 выбираем второй инстанс и также заходим в убунту

    sudo ./start-ubuntu20.sh

    далее

    su

    вводим пароль, который вы задавали

    перходим в корень

    cd

    теперь можно сразу две команды посылать

    15 В новом терминале вставляем

    qemu-x86_64 /root/../lib/x86_64-linux-gnu/ld-linux-x86-64.so.2 --library-path /root/../lib/x86_64-linux-gnu/ ./fastboot flash vendor /sdcard/download/vendor.img

    файл vendor.img должен быть в загрузках

    Пойдет загрузка файла в телефон, но не прошивка. Её без анлока и полного скачивания не будет

    16 Переходим в первый терминал и выполняем команду повторно

    стрелочка вверх - ввод

    qemu-x86_64 /root/../lib/x86_64-linux-gnu/ld-linux-x86-64.so.2 --library-path /root/../lib/x86_64-linux-gnu/ ./fastboot vivo_bsp unlock_vivo
    2
    I must ask
    is this tested on the x fold???
    I did it!

    These feature works even after BLU:
    Fingerprint sensor
    Face ID
    OTA install

    and Magisk works too!
    You have to use DSU Loader to get boot.img though.

    Here's full firmware dump of PD2178_A_12.0.14.5.W10 (contains all partitions for research purpose):
    xfoldblu.jpg
    2
    This is a tool from our QQ group.

    I think it is necessary to remind those of you who use the sm8250 device that the sm8250 is not applicable to this method.

    fingerprint unlocking can also be used normally on x70pro+. You only need to use version 1.5 factory test to calibrate the fingerprint
    1
    OMG! You did it you mad man! I did this on windows, unlocked the bootloader on the Vivo x70 pro plus.
    1
    How would I do that? Edit: Nvm, its in your files. Thanks!
    It's not in my file. It's here.

    Next, my expression may be incomprehensible to you because my English is not good. In order to facilitate understanding, I will provide Chinese for your reference

    1. You need a black and flesh rubber
    2. Installation factory test 1.5
    3. Enter phone input * #558# enter factory test
    4. Find the quality test
    5. Find the fingerprint test
    6. Photoelectric fingerprint calibration
    7. Use flesh colored rubber for calibration
    8. Use black rubber for calibration

    Now, you can enjoy root and fingerprints.

    Chinese
    1.你需要一块黑色和肉色橡皮
    2.安装工厂测试1.5
    3.进入Phone输入*#558#进入工厂测试
    4.找到品质测试
    5.找到指纹测试
    6.选择第一个光电指纹校准
    7.使用肉色橡皮进行校准
    8.使用黑色橡皮进行校准