How To Guide Vivo x70 Pro+ Bootloader Unlock - HOW TO GUIDE

[Pervokur]

how can you root your vivo phone? i've already unlock the bootloader and flash the magisk canary boot.img, it succes. But when i reboot to system, nothing happened, still no root and the magisk installed status is N/A. Can you help me?

sorry for bad english
device vivo y12s mtk a11

use userdebug gsi like los

 

[azrrfif]

use userdebug gsi like los

which version?

 

[azrrfif]

In theory it should be possible to return to OriginOS but we need an OTA update that is newer than 5.13.12.
Can anyone help out? I want to write a comprehensive guide to transform the phone in both directions.

Signal problem on FunTouch is not solved currently. No signal in LineageOS either.

Edit: Magisk Canary 24306 working on FunTouch OS.

Magisk 24.3 still not working on Funtouch OS. I flashed the patched boot, but the installed status on Magisk app is N/A

My device is y12s mtk ver

 

[Shawnki91]

Coming a bit late to the party here...
Spent a few hours reading through the various forums on how to unlock the bootloader on my Vivo X Fold and then root (I had great success on my XIaomi Mix Fold 2, and would love to replicate the process):

Model: V2178A
Software: PD2178B_A_12.0.17.4.W10.V000L1
Android Security Update: 2022-08-01

In ADB setting, I have the OEM unlock toggle that I can switch on. I downloaded the script provided by @tohanov and the vendor.img from @lilddd. When running in powershell, I got the same error as @frcraig:

[*] waiting for a device in bootloader mode (might take a min)
[*] found, beginning process
[*] running unlocking
[*] done with commands, rebooting to bootloader for changes to take effect
[*] waiting for the device to come back to bootloader mode to check unlocking status (might take a min)
[!] seems to have failed unlocking

I attempted to use the Vivo downgrader tool and like @frcraig said, there are no downgrades for the X Fold.

Question: Am I missing anything thus far, or is the agreement that the current android security update version preventing the bootloader unlock? This is not my main device so I do not mind fiddling around if there are any other sugegstions.

@AndroPlus, I read you guide on using DSU Loader to pull boot.img and then install with Magisk. I am correct in believing that without unlocked BL, I cannot boot a GSI image?

Thanks in advance team!

 

[lilddd]

Coming a bit late to the party here...
Spent a few hours reading through the various forums on how to unlock the bootloader on my Vivo X Fold and then root (I had great success on my XIaomi Mix Fold 2, and would love to replicate the process):

Model: V2178A
Software: PD2178B_A_12.0.17.4.W10.V000L1
Android Security Update: 2022-08-01

In ADB setting, I have the OEM unlock toggle that I can switch on. I downloaded the script provided by @tohanov and the vendor.img from @lilddd. When running in powershell, I got the same error as @frcraig:

[*] waiting for a device in bootloader mode (might take a min)
[*] found, beginning process
[*] running unlocking
[*] done with commands, rebooting to bootloader for changes to take effect
[*] waiting for the device to come back to bootloader mode to check unlocking status (might take a min)
[!] seems to have failed unlocking

I attempted to use the Vivo downgrader tool and like @frcraig said, there are no downgrades for the X Fold.

Question: Am I missing anything thus far, or is the agreement that the current android security update version preventing the bootloader unlock? This is not my main device so I do not mind fiddling around if there are any other sugegstions.

@AndroPlus, I read you guide on using DSU Loader to pull boot.img and then install with Magisk. I am correct in believing that without unlocked BL, I cannot boot a GSI image?

Thanks in advance team!

Hi
if your VIVO X FOLD s android security version is over than 2022/04/01
ex) 2022/05/01
than you can not unlock your BL right now.

it was available when android security venrsion is 2022/04/01
when version is over than 2022/05/01 , error code is appear when you try to unlock BL
time out, max size , etc
there are lot of log of fail.

so if you want to unlock your BL, wait for a moment.

one of the user of X FOLD said
VIVO will allow to unlock BL again.

but everyone don't know when they will allow again

sorry for my bad ENG.

 

[Shawnki91]

Hi
if your VIVO X FOLD s android security version is over than 2022/04/01
ex) 2022/05/01
than you can not unlock your BL right now.

it was available when android security venrsion is 2022/04/01
when version is over than 2022/05/01 , error code is appear when you try to unlock BL
time out, max size , etc
there are lot of log of fail.

so if you want to unlock your BL, wait for a moment.

one of the user of X FOLD said
VIVO will allow to unlock BL again.

but everyone don't know when they will allow again

sorry for my bad ENG.

Thanks for the reply! We will wait patiently then.

 

[frcraig]

I can confirm that if you updated your firmware after June 1st, the exploit to unlock the bootloader was removed with June's security patch. Unfortunately we can't roll back to the earlier firmware because Vivo hasn't added files for the Vivo X Note or Vivo X Fold to its official downgrader tool.

 

[Pervokur]

I can confirm that if you updated your firmware after June 1st, the exploit to unlock the bootloader was removed with June's security patch. Unfortunately we can't roll back to the earlier firmware because Vivo hasn't added files for the Vivo X Note or Vivo X Fold to its official downgrader tool.

theoretically possible to do things with uid1000 by exploiting .rc scripts through setprop

with these lines maybe it's possible to replace system files, then force android to execute scripts with root privileges(like flashing old partitions xbl abl tz, etc...)

on property:sys.cota_vgc.mount_to=* && property:sys.cota_vgc.mount_cota_img_path=*
mount ext4 [email protected]${sys.cota_vgc.mount_cota_img_path} ${sys.cota_vgc.mount_to} ro nodev noatime

[CLOSED] How to become uid 1000 (system) Vivo y31 2021

(I'm not responsible for anything, this will wipe data) Requirements 2 usb flash drivers, usb otg adapter Full ota zip of current or older(?) firmware. A11 full ota. A12 ota firmwares for my phone have vgc_test partition with uid 1000...

forum.xda-developers.com

but no one is interested in this exploit( including me), so there's no development right now

 

[Shawnki91]

I just downloaded the new update for the Vivo X Fold today which was supposed to restore the bootloader unlock and no luck. I tried with Fastbootd modified fastboot, and the two CMD window method, the script, etc. and no luck.

 

[Pervokur]

I was able to downgrade vivo Y31 with uid 1000. (6.8.1 october security patch)

[CLOSED] How to become uid 1000 (system) Vivo y31 2021

(I'm not responsible for anything, this will wipe data) Requirements 2 usb flash drivers, usb otg adapter Full ota zip of current or older(?) firmware. A11 full ota. A12 ota firmwares for my phone have vgc_test partition with uid 1000...

forum.xda-developers.com

After getting uid 1000 I placed 3 files in root directory, like in the link above.

setprop persist.sys.factory.mode yes

com.iqoo.engineermode - activity - factory mode-3rd tab - upgrade/degrade sw

 

[Anurag3100]

Is there any unofficial way to unlock bootloader of iqoo z3 5g or how to create and flash custom recovery and get magisk root btw i wanna devloper a custom rom for it also any suggestions or support would be appreciated tenks in advance anyways i haven't done any single update still running a11

 

[Pervokur]

misc partition after "upgrade/degrade sw" in com.iqoo.engineermode

boot-recoveryrecovery
--update_package=/sdcard/PD2050F_EX_A_6.7.20-update-full.zip
--mode=update_engineermode_app
--locale=ru-RU

such 'mode' should help to suppress "upgrade limited" package error

 

[Pervokur]

if you can install this vivo apk, then there is hope... it's uid1000 debuggable app from vivo

how to use this https://forum.xda-developers.com/t/...t-not-root-how-to-escalate-privilege.3417498/

commad to activate factory mode in order to run "upgrade/downgrade sw" in activity from com.iqoo

engineermode

print new java.lang.Runtime().exec("setprop persist.sys.factory.mode yes")

Of anyone able to do this, then I can try help with others things

 

[BadAssBeach772]

does this work for X70Pro??
currently on nov patch funtouch 12
international variant (mdk)

 

[arzuakay]

THIS GLITCH HAS BEEN FIXED AS OF MAY 2022. IF YOUR FIRMWARE IS PAST THAT SECURITY LEVEL YOU CAN NOT OPEN THE BOOTLOADER ANYMORE.​

WARNING! THIS IS EXPERIMENTAL, I HAVE NO IDEA WHERE WE CAN GO FROM HERE.
THIS MIGHT BREAK YOUR DEVICE!!!

UNLOCKING THE BOOTLOADER REQUIRES A WIPE AFTERWARDS!
UNLOCKING THE BOOTLOADER WILL DISABLE YOUR FINGERPRINT READER! (FIXED BY RELOCKING)
UNLOCKING THE BOOTLOADER MIGHT REMOVE BOKEH MODES FROM PORTRAIT. (NOT SURE)

This is a breakthrough! Thanks to our crazy russian friend in this thread I succeeded in opening the bootloader. (Origin OS)

Unlocking bootloader/ rebooting in edl without testpoint Vivo Y31 2021

Unlocked models with this method: Vivo Y31 PD2050F 2021 A12 6.7.20 Vivo V21e PD2107F A12 6.6.19 I did it from rooted Samsung J120F, I didn't try from PC///bc no PC =( My guide in Russian {Mod edit: Link removed} Custom fastboot for vivo in...

forum.xda-developers.com

--------------------------------------------------------------------

Long Tutorial:
Download 1: https://forum.xda-developers.com/t/guide-how-to-reboot-to-edl-from-fastboot.3394292/
Download 2 vivo fastboot_v2: https://forum.xda-developers.com/t/how-to-unlock-bootloader-of-vivo-phones.3686690/
Download 3 vendor.img: https://forum.xda-developers.com/t/...hers-new-vivo-oppo-models-check-list.4440801/

NEEDED: Vivo USB Driver
NEEDED: ADB and Fastboot (Added to PATH)

1. Enable OEM Unlock in Developer Options
2. Connect your device via ADB
3. Use "adb reboot fastboot"
4. Use "fastboot reboot bootloader" -> This fastboot now looks different
5. Copy the vendor.img into the folder of Download 2
6. Open two cmd's in Download 2
7. Type in "fastboot vivo_bsp unlock_vivo" into the first one, hit enter
8. Type in "fastboot flash vendor vendor.img" into the second one, hit enter
9. Immediately switch back to the first one, press up and enter many times
10. If you time this right your bootloader is unlocked
11. Press the power button to restart the phone and see your bootloader warning
12. Let the phone restart a few times until it asks you to wipe
13. Select the first option, then select the one on the right to proceed

I unlocked, relocked and unlocked again to be sure, this seems to be a safe method!

Much thanks to @Naveen Singh and @Pervokur

vivo-x70-pro plus unlock problem.
Downgrade to OriginOS PD2145_A_1.8.20

i see OKAY [ 4.158s] but not unlock,
do you help me?

i test two cmd window and one window.
i test manual and this this powershell files: https://drive.google.com/file/d/1Ekth8EZUODcJGGTwHFQFRWl8u0mdv097/view?usp=sharing

 

[Bwhite...]

hello, I have a problem with my VIVO X NOTE, after unlocking the bootloader, i have using the method of x70 pro plus and is working for me. After flashing a gsi rom, my phone remains stuck on fastboot. I would flash the original firmware any help would be welcome. Thanks to anyone who can help me.

 

[jtizzle34]

I just downloaded the new update for the Vivo X Fold today which was supposed to restore the bootloader unlock and no luck. I tried with Fastbootd modified fastboot, and the two CMD window method, the script, etc. and no luck.

Any luck since then? Im on android security update 2022-10-01, so i dont know which version was supposed to allow bootloader unlock again or if it ever did? Really want to unlock this for root but doesnt seem like if you updated the phone anyone is having any luck!

 

[Skorpion96]

i wanted to try on my zte blade A5 2019, seems that zte devices are not vulnerable, i hope someone can unlock bootloader on them also

 

[bitwarden]

thank you. can you also send a link to the device drivers you used? mine's not working properly, the vivo_bsp command doesn't work so most likely a driver issue

Tell me please if you succeed

 

[ko_hi]

As far as i can tell, i can't use the *vivo* fastboot files to recognize the phone, regular fastboot exe works but not this one shared. Anything specific I'm missing or have vivo just patched it?