Legitunlocks.com
Martview MS-2D 2D Screwdriver

New UnlockTool 2021.08.25.0 Released Update | Huawei MTK & More added

TATAISONA

TATAISONA

Friend's Martview
Jul 5, 2019
2,551
4,944
India



UnlockTool 2021.08.25.0 Released Update

MTK Universal Supported Just Click
CPU's Supported All Brands Models: MT6739, MT6739W, MT6750, MT6755,MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6785, MT6779, MT6873 MT6875, MT6883, MT6885, MT6889, MT6833, MT6853, MT6877, MT6891Z, MT6893
- Unlock | Relock Bootloader | PERM
- Oppo | Realme Erase ID
- Huawei Remove ID
- Huawei Change Oem
- Oppo | Realme fix error Download Code 0x992566
- Read | Write | Erase RPMB
- Format data | Erase FRP
- Fix Orange MSG
- Patch Dm-Verify
- Backup | Restore | Erase NV (imei)
- Read Back | Write Dump Full File Region Emmc, UFS(Boot1, Boot2, Userarea)
- Samsung MTK Reset KG Locked
- Vivo Remove Demo
- Vivo Change | Repair Imei
- Read gpt | Write Format all Partition
- Reset Micloud

Huawei: MTK Remove ID One Click | Change Oeminfo | Backup Oeminfo
- Huawei Enjoy 20 Pro | Changxiang 20 Pro 5G DVC-AN20
- Huawei Enjoy 20 Plus 5G FRL-AN00a
- Huawei Honor X20 SE CHL AN00
- Huawei Honor 8S KSE-TL00 | KSE-LX9 | KSE-LXX
- Huawei Honor 8S / Pro KSA-AL00 | KSA-TL00 | KSA-XXX
- Huawei Enjoy 10E MED-AL00
- Huawei Honor Play 9A MOA-AL00
- Huawei MatePad T8 KOB2-L09
- Huawei Honor X20 SE CHL-AN00
- Huawei Honor 9S DUA-LX9
- Huawei Enjoy 20s | Maimang 9 5G TNN-AN00
- Huawei Enjoy 20 5G WKG-TN00 | WKG-AN00
- Huawei Honor 50 SE JLH-AN00
- Huawei Nova 8 SE 5G JSC-AN00
- Huawei Nova 7 SE 5G CND-AN00
- Huawei Honor X10 Max 5G KKG-AN00 | KKG-AN10
- Huawei Honor Play4 5G TNNH-AN00
- Honor Play 5 HJC-AN90
- Huawei Honor 30 Lite | 30 Youth 5G MXW-AN00 | MXW-TN00
- Huawei Enjoy Z 5G DVC-AN00
- Huawei Y6 2019 MRD-LX3
- Huawei Enjoy 9E MRD-TL00 | MRD-AL00
- Huawei Y5 Lite (2018) DRA-LX5 DRA-LX9
- Huawei Y5 Prime (2018) DRA-L22 | DRA-LX2 | DRA-LX3
- Huawei Y9A FRL-L23 | FRL-L22
- Huawei Honor 9A MOA-LX9 | MOA-LX9N
- Huawei Y6P MED-LX9N
- Huawei Honor 8A JAT-AL00 | JAT-ALxx
- Huawei Honor 7S DUA-L22
- Huawei Enjoy 9E MRD-TL00 | MRD-AL00
- Huawei Enjoy 6 Nice-AL00 | Nice-TL10
- Huawei Y6 2019 MRD-LX1N | MRD-LXX

Samsung MTK: Factory Reset | FRP | Read Flash Scatter
- Samsung Galaxy A03s SM-A037M
- Samsung Galaxy Tab A7 Lite SM-T227
- Samsung Galaxy Tab A7 Lite SM-T225N | SM-T225C
- Samsung Galaxy Tab A7 Lite Lte SM-T225
- Samsung Galaxy Tab A7 Lite Wifi SM-T220

LG MTK: Flash/Backup File Scatter | Factory Reset | FRP
- LG W41 Pro
- LG W41
- LG Stylo 7
- LG W11
- LG Q63S
- LG Q43
- LG Q83
- LG Q31
- LG K42
- LG K31
- LG K31s
- LG Aristo 5
- LG K8X
- LG Harmony 4
- LG Q61
- LG Stylo 6
- LG K51
- LG X400
- LG Q51

Motorola: Flash/Backup File Scatter | Factory Reset | FRP
- Motorola Moto G60s
- Motorola Moto E20
- Motorola Edge 20 Lite
- Motorola Moto E7 Power
- Motorola Moto E7
- Motorola Moto G8 Power Lite
- Motorola Moto E6s

Tecno: Flash/Backup File Scatter | Factory Reset | FRP
- Tecno Spark 7
- Tecno Pova 2
- Tecno Spark Go 2021
- Tecno Spark 7T
- Tecno Pova
- Tecno Spark Power 2 Air
- Tecno Spark Go 2020
- Tecno Spark Go Plus
- Tecno Spark Power
- Tecno Camon i4
- Tecno Camon IClick2
- Tecno Camon iAce 2X
- Tecno Camon iAce
- Tecno Camon iClick
- Tecno i7
- Tecno Camon i Sky
- Tecno Spark 7P

Bugfixes and improvements:
- Improved Mediatek Boot Auth Bypass All Cpu's New Method
- Add Download UnlockTool Drivers Tab "Config"



Download UnlockTool
Link Download MediaFire

 
  • Like
Reactions: FAROK, kevin sijenyi, lpservice and 3 others
koushik12

koushik12

Member
Jun 11, 2019
6
5
TATAISONA said:



UnlockTool 2021.08.25.0 Released Update

MTK Universal Supported Just Click
CPU's Supported All Brands Models: MT6739, MT6739W, MT6750, MT6755,MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6785, MT6779, MT6873 MT6875, MT6883, MT6885, MT6889, MT6833, MT6853, MT6877, MT6891Z, MT6893
- Unlock | Relock Bootloader | PERM
- Oppo | Realme Erase ID
- Huawei Remove ID
- Huawei Change Oem
- Oppo | Realme fix error Download Code 0x992566
- Read | Write | Erase RPMB
- Format data | Erase FRP
- Fix Orange MSG
- Patch Dm-Verify
- Backup | Restore | Erase NV (imei)
- Read Back | Write Dump Full File Region Emmc, UFS(Boot1, Boot2, Userarea)
- Samsung MTK Reset KG Locked
- Vivo Remove Demo
- Vivo Change | Repair Imei
- Read gpt | Write Format all Partition
- Reset Micloud

Huawei: MTK Remove ID One Click | Change Oeminfo | Backup Oeminfo
- Huawei Enjoy 20 Pro | Changxiang 20 Pro 5G DVC-AN20
- Huawei Enjoy 20 Plus 5G FRL-AN00a
- Huawei Honor X20 SE CHL AN00
- Huawei Honor 8S KSE-TL00 | KSE-LX9 | KSE-LXX
- Huawei Honor 8S / Pro KSA-AL00 | KSA-TL00 | KSA-XXX
- Huawei Enjoy 10E MED-AL00
- Huawei Honor Play 9A MOA-AL00
- Huawei MatePad T8 KOB2-L09
- Huawei Honor X20 SE CHL-AN00
- Huawei Honor 9S DUA-LX9
- Huawei Enjoy 20s | Maimang 9 5G TNN-AN00
- Huawei Enjoy 20 5G WKG-TN00 | WKG-AN00
- Huawei Honor 50 SE JLH-AN00
- Huawei Nova 8 SE 5G JSC-AN00
- Huawei Nova 7 SE 5G CND-AN00
- Huawei Honor X10 Max 5G KKG-AN00 | KKG-AN10
- Huawei Honor Play4 5G TNNH-AN00
- Honor Play 5 HJC-AN90
- Huawei Honor 30 Lite | 30 Youth 5G MXW-AN00 | MXW-TN00
- Huawei Enjoy Z 5G DVC-AN00
- Huawei Y6 2019 MRD-LX3
- Huawei Enjoy 9E MRD-TL00 | MRD-AL00
- Huawei Y5 Lite (2018) DRA-LX5 DRA-LX9
- Huawei Y5 Prime (2018) DRA-L22 | DRA-LX2 | DRA-LX3
- Huawei Y9A FRL-L23 | FRL-L22
- Huawei Honor 9A MOA-LX9 | MOA-LX9N
- Huawei Y6P MED-LX9N
- Huawei Honor 8A JAT-AL00 | JAT-ALxx
- Huawei Honor 7S DUA-L22
- Huawei Enjoy 9E MRD-TL00 | MRD-AL00
- Huawei Enjoy 6 Nice-AL00 | Nice-TL10
- Huawei Y6 2019 MRD-LX1N | MRD-LXX

Samsung MTK: Factory Reset | FRP | Read Flash Scatter
- Samsung Galaxy A03s SM-A037M
- Samsung Galaxy Tab A7 Lite SM-T227
- Samsung Galaxy Tab A7 Lite SM-T225N | SM-T225C
- Samsung Galaxy Tab A7 Lite Lte SM-T225
- Samsung Galaxy Tab A7 Lite Wifi SM-T220

LG MTK: Flash/Backup File Scatter | Factory Reset | FRP
- LG W41 Pro
- LG W41
- LG Stylo 7
- LG W11
- LG Q63S
- LG Q43
- LG Q83
- LG Q31
- LG K42
- LG K31
- LG K31s
- LG Aristo 5
- LG K8X
- LG Harmony 4
- LG Q61
- LG Stylo 6
- LG K51
- LG X400
- LG Q51

Motorola: Flash/Backup File Scatter | Factory Reset | FRP
- Motorola Moto G60s
- Motorola Moto E20
- Motorola Edge 20 Lite
- Motorola Moto E7 Power
- Motorola Moto E7
- Motorola Moto G8 Power Lite
- Motorola Moto E6s

Tecno: Flash/Backup File Scatter | Factory Reset | FRP
- Tecno Spark 7
- Tecno Pova 2
- Tecno Spark Go 2021
- Tecno Spark 7T
- Tecno Pova
- Tecno Spark Power 2 Air
- Tecno Spark Go 2020
- Tecno Spark Go Plus
- Tecno Spark Power
- Tecno Camon i4
- Tecno Camon IClick2
- Tecno Camon iAce 2X
- Tecno Camon iAce
- Tecno Camon iClick
- Tecno i7
- Tecno Camon i Sky
- Tecno Spark 7P

Bugfixes and improvements:
- Improved Mediatek Boot Auth Bypass All Cpu's New Method
- Add Download UnlockTool Drivers Tab "Config"



Download UnlockTool
Link Download MediaFire

Click to expand...
Nice update
 
  • Like
Reactions: TATAISONA
Exynothious

Exynothious

Active Member
Jun 18, 2020
53
25
PAKISTAN
TATAISONA said:



UnlockTool 2021.08.25.0 Released Update

MTK Universal Supported Just Click
CPU's Supported All Brands Models: MT6739, MT6739W, MT6750, MT6755,MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6785, MT6779, MT6873 MT6875, MT6883, MT6885, MT6889, MT6833, MT6853, MT6877, MT6891Z, MT6893
- Unlock | Relock Bootloader | PERM
- Oppo | Realme Erase ID
- Huawei Remove ID
- Huawei Change Oem
- Oppo | Realme fix error Download Code 0x992566
- Read | Write | Erase RPMB
- Format data | Erase FRP
- Fix Orange MSG
- Patch Dm-Verify
- Backup | Restore | Erase NV (imei)
- Read Back | Write Dump Full File Region Emmc, UFS(Boot1, Boot2, Userarea)
- Samsung MTK Reset KG Locked
- Vivo Remove Demo
- Vivo Change | Repair Imei
- Read gpt | Write Format all Partition
- Reset Micloud

Huawei: MTK Remove ID One Click | Change Oeminfo | Backup Oeminfo
- Huawei Enjoy 20 Pro | Changxiang 20 Pro 5G DVC-AN20
- Huawei Enjoy 20 Plus 5G FRL-AN00a
- Huawei Honor X20 SE CHL AN00
- Huawei Honor 8S KSE-TL00 | KSE-LX9 | KSE-LXX
- Huawei Honor 8S / Pro KSA-AL00 | KSA-TL00 | KSA-XXX
- Huawei Enjoy 10E MED-AL00
- Huawei Honor Play 9A MOA-AL00
- Huawei MatePad T8 KOB2-L09
- Huawei Honor X20 SE CHL-AN00
- Huawei Honor 9S DUA-LX9
- Huawei Enjoy 20s | Maimang 9 5G TNN-AN00
- Huawei Enjoy 20 5G WKG-TN00 | WKG-AN00
- Huawei Honor 50 SE JLH-AN00
- Huawei Nova 8 SE 5G JSC-AN00
- Huawei Nova 7 SE 5G CND-AN00
- Huawei Honor X10 Max 5G KKG-AN00 | KKG-AN10
- Huawei Honor Play4 5G TNNH-AN00
- Honor Play 5 HJC-AN90
- Huawei Honor 30 Lite | 30 Youth 5G MXW-AN00 | MXW-TN00
- Huawei Enjoy Z 5G DVC-AN00
- Huawei Y6 2019 MRD-LX3
- Huawei Enjoy 9E MRD-TL00 | MRD-AL00
- Huawei Y5 Lite (2018) DRA-LX5 DRA-LX9
- Huawei Y5 Prime (2018) DRA-L22 | DRA-LX2 | DRA-LX3
- Huawei Y9A FRL-L23 | FRL-L22
- Huawei Honor 9A MOA-LX9 | MOA-LX9N
- Huawei Y6P MED-LX9N
- Huawei Honor 8A JAT-AL00 | JAT-ALxx
- Huawei Honor 7S DUA-L22
- Huawei Enjoy 9E MRD-TL00 | MRD-AL00
- Huawei Enjoy 6 Nice-AL00 | Nice-TL10
- Huawei Y6 2019 MRD-LX1N | MRD-LXX

Samsung MTK: Factory Reset | FRP | Read Flash Scatter
- Samsung Galaxy A03s SM-A037M
- Samsung Galaxy Tab A7 Lite SM-T227
- Samsung Galaxy Tab A7 Lite SM-T225N | SM-T225C
- Samsung Galaxy Tab A7 Lite Lte SM-T225
- Samsung Galaxy Tab A7 Lite Wifi SM-T220

LG MTK: Flash/Backup File Scatter | Factory Reset | FRP
- LG W41 Pro
- LG W41
- LG Stylo 7
- LG W11
- LG Q63S
- LG Q43
- LG Q83
- LG Q31
- LG K42
- LG K31
- LG K31s
- LG Aristo 5
- LG K8X
- LG Harmony 4
- LG Q61
- LG Stylo 6
- LG K51
- LG X400
- LG Q51

Motorola: Flash/Backup File Scatter | Factory Reset | FRP
- Motorola Moto G60s
- Motorola Moto E20
- Motorola Edge 20 Lite
- Motorola Moto E7 Power
- Motorola Moto E7
- Motorola Moto G8 Power Lite
- Motorola Moto E6s

Tecno: Flash/Backup File Scatter | Factory Reset | FRP
- Tecno Spark 7
- Tecno Pova 2
- Tecno Spark Go 2021
- Tecno Spark 7T
- Tecno Pova
- Tecno Spark Power 2 Air
- Tecno Spark Go 2020
- Tecno Spark Go Plus
- Tecno Spark Power
- Tecno Camon i4
- Tecno Camon IClick2
- Tecno Camon iAce 2X
- Tecno Camon iAce
- Tecno Camon iClick
- Tecno i7
- Tecno Camon i Sky
- Tecno Spark 7P

Bugfixes and improvements:
- Improved Mediatek Boot Auth Bypass All Cpu's New Method
- Add Download UnlockTool Drivers Tab "Config"



Download UnlockTool
Link Download MediaFire

Click to expand...

Read | Write | Erase RPMB
What is RPMB? And whats function of rpmb partition? Why/when we need to erase this partition for what?
 
TATAISONA

TATAISONA

Friend's Martview
Jul 5, 2019
2,551
4,944
India
Exynothious said:
Read | Write | Erase RPMB
What is RPMB? And whats function of rpmb partition? Why/when we need to erase this partition for what?
Click to expand...
The paper presents the use case of Replay Protected Memory Block (RPMB) partition in eMMC to store the phone's critical modem data, network operator billing information and/or application data in a secured manner which is protected from the attackers/hackers. In current software architecture, User Area partition stores the modem critical data which is known as modem EFS partition, but EFS partition doesn't guarantee memory protection against REPLAY attacks. So in this paper we are proposing the RPMB block to store the secure data which will give additional protection against the REPLAY attacks. We have developed the RPMB driver interface in Android OS, Jelly Bean (JB) software. The functionality of RPMB has been verified successfully and results indicate the proposed mechanism guarantees a secured data storage.
Click to expand...
The eMMC and UFS memory chips have an access protected section called the RPMB (Replay Protect Memory Block).
The picture from the Samsung presentation shows how it works.



How it works in more detail:

If the key (Key) is absent, then the device (processor) programs the key into the microchip.
The key is generated from the processor SN and the eMMC CID, and thus the key is different for different processors and different eMMCs. Further work occurs in the mode as with the programmed key. The programmed key cannot be changed.

If the key (Key) already exists, then, as a rule, the counter has a value greater than 0.
With a microcircuit that already has a key (16 bytes), the device (processor) can work only through data encoded with a key (Key) and a counter.



Read mode: the device (processor) receives the counter value from the eMMC, requests reading data (in blocks of 256 bytes), receives the data encoded by the counter and key, decrypts it using the stored key and counter value, checks the validity of the data.

Write mode: the device (processor) receives the counter value from the eMMC, encodes the data using a key and a counter (in blocks of 256 bytes) and sends it to the microchip. The chip decrypts them using the stored key and the value of the counter, checks the validity of the data. If the data is valid, the block is written, and the value of the record counter (Counter) is incremented by 1.

Thus, the value of the write counter (Counter) shows how many blocks of 256 bytes (or how many times) were written into the RPMB area.

In order to write to the RPMB section, you need to know the key that is stored in the microchip (eMMC).


In order to read, you can try to apply a certain method of obtaining data. Although it is impossible to guarantee their validity, but experiments conducted by the Z3x Easy JTAG team show that the data read in this way is valid in more than 90% of cases.


In the latest versions of the Z3x EasyJTAG Classic program (3.4.4.0 and above), the output has been added to the log of the status bar of the RPMB area (did it ever write to the data or not).

An example of a line in the program log:
EMMC RPMB is not yet programmed (clear) or NO Error
or
EMMC RPMB is programmed and written 12 times

At the same time, the ability to read RPMB experimentally is available through the choice of the RPMB partition (in the ROM select box).


Important:
1) when the Firmware is written to the eMMC, the internal NAND memory of the eMMC is re-initialized, erasing the key, the counter and the RPMB data
2) it is not possible to remove the key from the RPMB or change the counter other than increasing the counter value by writing data encoded with a valid key.
 
  • Like
Reactions: lpservice, kevin sijenyi and cellbhai
You must log in or register to reply here.
Top