[G8/V50]Unlock bootloader and root after temp root

KamioRinn 2020-5-18 14753

Points for attention

  • Unlock bootloader will clean all userdata

  • Never disconnect the USB cable until finish all setp

  • Keep battery more than 80% power

  • The devices that have been tested :

    • V50(KOR version) with Android 10
    • G8(USA version,CAN version and KOR version) with Android 10
    • Prudent to try with other version
  • The rootboot in package only for rooting. It may cause some bug like audio error. Please use the boot which match with system version after rooting.


Setp 1

  • Allow the device to be OEM unlocked

    • Settings-System-Developer options-Enable OEM unlock
  • Download G8/V50 package and unzip the file to a folder on your computer

  • Copy the unlock file to /sdcard

    • Make sure you have abl_p.image, xbl_p.image, xbl_config_p.image in /sdcard

    • The rootboot for V50 is base on V500N20m fw, it may cause some kernel module errors in other fw. It would be fix in Setp 4

    • But the rootboot for G8, almost all the G8 can use it as normal

Setp 2

  • How to get a temp root

  • Run the temp root exploit

    • If it worked, you should see something like this:
    root_by_cve-2020-0041:/data/local/tmp #
  • Input commands in privileged shell:

    dd if=/sdcard/abl_p.image of=/dev/block/bootdevice/by-name/abl_a
    dd if=/sdcard/xbl_p.image of=/dev/block/bootdevice/by-name/xbl_a
    dd if=/sdcard/xbl_config_p.image of=/dev/block/bootdevice/by-name/xbl_config_a
    dd if=/sdcard/abl_p.image of=/dev/block/bootdevice/by-name/abl_b
    dd if=/sdcard/xbl_p.image of=/dev/block/bootdevice/by-name/xbl_b
    dd if=/sdcard/xbl_config_p.image of=/dev/block/bootdevice/by-name/xbl_config_b
    • If successful, you should see something like this:
  • Hold down power button and select ‘Power off and restart'

Setp 3

  • Now,you are already in fastboot mode

  • If you are Verizon G8. You need to input this command:

    fastboot flash frp frp
  • Use volume button to select 'Restart bootloader' then press the power button

    • It must to be done!!!
  • Input commands in shell:

    fastboot oem unlock
  • Select 'UNLOCK THE BOOTLOADER' then press the power button

  • If successful, you should see 'DEVICE STATE - unlocked' after auto reboot

    • If you see 'DEVICE STATE - locked', please try Setp 3 again

Setp 4

  • Input commands in shell:

    fastboot flash abl_a abl_q.image
    fastboot flash xbl_a xbl_q.image
    fastboot flash xbl_config_a xbl_config_q.image
    fastboot flash abl_b abl_q.image
    fastboot flash xbl_b xbl_q.image
    fastboot flash xbl_config_b xbl_config_q.image
    fastboot flash boot_a rootboot.img
    fastboot flash boot_b rootboot.img
    fastboot reboot
  • If the phone ask you to reset, just do it

  • Install Magisk Manager and enjoy it.

Fix boot

  • You can use Magisk Manager to patch the boot which extract from kdz.

  • Or get the rootboot which match with system version from kdz.gresslg.tk

  • Rename the boot to 'rootboot.img'

  • Then input commands in shell to flash it:

    adb shell
    dd if=/storage/emulated/0/Download/rootboot.img of=/dev/block/bootdevice/by-name/boot_a
    dd if=/storage/emulated/0/Download/rootboot.img of=/dev/block/bootdevice/by-name/boot_b


  • If you want to update the phone. Use LGUP's PARTITION DL and untick boot_a,boot_b. Then use Magisk Manager to patch the boot which extract from new kdz and flash it.


  • XDA j4nn & Telegram@Inherent

  • Donors who participated in the crowdfunding

  • CoolAPK@LGG7玩家 Afternoon docking test

  • CoolAPK@清太 Korean original LG V50 provided

  • CoolAPK@漠云 do a lot of work

  • Warriors who become bricks by participating in the test

最新回复 (0)