[Question] MT6737M - Readback Root, Recovery and Unlock Bootloader

[lilngu]

Thank you VERY VERY much.

Is there a particular version of SuperSU that is recommended?

Also, may I post your directions (giving you credit) on other ASUS forums?

In my case, I use

Code:

BETA-SuperSU-v2.74-2-20160519174328-forced-systemless.zip

because many rooting tutorial for mt6737 use it.
I have no idea about this.

[tcaudill01]

Thank you VERY VERY much.

Is there a particular version of SuperSU that is recommended?

Also, may I post your directions (giving you credit) on other ASUS forums?

In my case, I use

Code:

BETA-SuperSU-v2.74-2-20160519174328-forced-systemless.zip

because many rooting tutorial for mt6737 use it.
I have no idea about this.

Well, I've installed Ubuntu 16, Android SDK, NDK, Java 7 and 8 and ....... nothing.
I finally got the script to run, but it doesn't "build" anything on screen like the video you posted. I don't get errors or crashes and it goes to the Adb Shell. From the shell, when I try to access any of the normally blocked directories I still get "permission denied".
Either I have done something wrong, or it will not work on my phone.
I'm not an Ubuntu/Linux guy so i could have done something incorrectly.
Any help or advice is appreciated.

[lilngu]

Well, I've installed Ubuntu 16, Android SDK, NDK, Java 7 and 8 and ....... nothing.
I finally got the script to run, but it doesn't "build" anything on screen like the video you posted. I don't get errors or crashes and it goes to the Adb Shell. From the shell, when I try to access any of the normally blocked directories I still get "permission denied".
Either I have done something wrong, or it will not work on my phone.
I'm not an Ubuntu/Linux guy so i could have done something incorrectly.
Any help or advice is appreciated.

Hmm... I have really have no idea for your case...
I use Ubuntu for my main framework. So, I simply run the script with terminal

Code:

$ ./root

The process will download Dirty Cow and install it to your phone via adb.
Remember you need to type

Code:

$ adb devices

in terminal for ADB detection. If your Linux not detect yet (unsuccessfully) , you need install udev and android tool adb
Google search for Udev. and Android Tool Adb can install with

Code:

sudo apt-get install android-tools-adb android-tools-fastboot

Then, you need to restart udev service and adb sevice.

Code:

sudo service udev restart

Code:

sudo adb kill-server && adb start-server

Type again

Code:

adb devices

If terminal show like this

Code:

# adb devices
List of devices attached
015d2d426d640c1a      device

Ok! it's detected. You need to grant adb permission on your phone. Then, you run script via terminal.
If anything work. You have

Code:

root@[device_name] $

You just mount /system and push file into.

[dandymanz]

I also own a X008D that i've been trying to root. Following the same steps of dirty cow, i get to the point where i should be getting root, but i'm still seeing shell@[device_name]. From what i read in other places, it could be that selinux is blocking me from getting root. Very sad.

[tcaudill01]

I also own a X008D that i've been trying to root. Following the same steps of dirty cow, i get to the point where i should be getting root, but i'm still seeing shell@[device_name]. From what i read in other places, it could be that selinux is blocking me from getting root. Very sad.

Yes, very sad. For whatever reason, Asus (and MTK) seem to have made this phone extremely difficult to do anything with. I have a CS-Tool dongle that should be arriving today or tomorrow that I hope will allow me to pull data from the phone. I am hoping that data can be used by someone smarter than me to help develop root/recovery for this thing.

UPDATE: CS-Tool arrived and........................... It can't read dRam on a locked bootloader phone! Wasted $50.00 >

[mozartmozart]

i have 2 a Orange's phones "Tecno N9", they are the same , but the one is dead (i've flashed it with wrong firmware, and his preloader is dead) and the one another is in live, here is info :

Hardware:mt6735
Chipset:mt6737m
Board:wq500t_tecno_n9
CPU ABI:armeabi-v7a
Manufacturer:tecno
Model:tecno-n9
Android Ver:6.0
bootloader ver:unknown
USB config:mtp,adb
User:master
FS:unknown
Baseband ver:moly.lr9.w1444.md.lwtg.mp.
v90.p12, 2016/09/29 18:48
Build number:n9-wq500t-a1-m-orange-v007-sku1-20161020
ID:mra58k
-- i can't find firmware from anywhere, and also can't root or find twrp or cwm recovery compatible with this phone, Do you have an idea , thank you

[btiu]

Just to add some info I discovered,

I got the same error message the OP did when he tried flashing the recovery.img using SP flash tools, even if I had unlocked bootloader already, so it's not a matter of the bootloader. (I am unrooted though, on stock rom. My VOLUP button worked during unlocking).

My phone is a 6737m as well, running 7.0. I actually used your modified scatter file (exactly the same, no modifications on my end) to read back my boot, recov, and system img. Boot and recov img seem to be correct after I unpacked them both. No Idea yet for system.img if its correct. I have yet to flash them back to my phone to verify if they all work.

While I have yet to try the dirtycow, I am looking first into flashing a modified boot.img that didnt reflash recovery.img every boot, then flashing a twrp image that I ported, and then using supersu.zip through twrp to root it.

[MeWondr]

Can somebody help me port twrp for Leagoo M6 (MT6737M) ?

[Daniel9999]

Any help ??? plsssssss
The only thing I need now that HOW TO UNLOCK BOOTLOADER? I've already enable OEM Unlocking in Developer Option. But when I try fastboot oem unlock in fastboot mode. I cannot be able to press Vol+ button to say Yes. I only allow press Vol- to say NO... my god ... I gonna mad...

Hai Bro,mine is mtk6737T & also try all but fail to root.May i know how you use the miracle box ,what function to obtain the scatter file out ?Thank in advance. my email [email protected]