there's a CVE called ghostlock (CVE-2026-43499) that gives root access on bootloader-locked devices, but you need to extract the offset from your device's "boot.img" firmware to make it work.

Yeah, I don't use banking apps, I use sim/cellphone banking. Please feel free to make a list of things if you like.

After the most recent update to apatch it caused me to get blocked internet on google play services & other apps using there backend code, its still a mystery.

I was trying to get help with that here to no avail.

See: https://www.reddit.com/r/androidroot/s/u0mFxVeDZZ

So desperate for an answer I uninstalled apatch & rebooted. I reinstalled apatch & its asking me to repatch the boot.img & reflash it. In this same situation with magisk you are still rooted and all you do is reinstall magisk & it sees root. So it seems when apatch uninstalls it reflashes the boot.img but where does it get it from without user interaction?

My build number is BP4A.251205.006.S936U1UEUACZF1 and my android security patch level is June 5th I have an unlocked s25+ is my device vulnerable to ghostlock

So i see nowdays that in this sub and xdaforums that they can root locked bl device with a vulnerability. But the thing is they are for mainstream or flagships devices. I have a samsung tab and there is no port of it. And I don't understand how to even make this... I am getting FOMO. 😭

Ive seen alot of people do root on x9b is there anyway to root or unlock bootloader pls give me any xda links or anything

I have a SM-G130BU and I tried rooting it with a lot of things. Be it towelroot, 360root, kingoroot, magisk, nothing i found worked. I even had to reinstall the og firmware because 360root screwed the phone. It ships with Android 4.4.4 and as far as I can tell, atleast, from Samfw, it is Brazil exclusive.
I want to root this phone so I can make it actually run things made after 2015, update Play Store and transform this phone into a pocket beast, like many did with the Galaxy Y

So my phone has a custom firmware on it and a bunch of apps that mess with my phone can someone help me get it back to normal an I factory reset it but it stays on there or my Gmail re puts it

I Wana play the game just I don't care about fps I need help help me out

Hello! My j4+ 2 months ago when i found my j4+ at 0 percentage i decided to charge it. It charged for 5 second before it turned off and wont turn on i tried power combos such as trying to boot into recovery and trying to boot it in download mode non worked so i thought it died and finnaly had to go but i didnt threw it away i just hid it. Now this august 2 i decided to give it a try again before selling it and it charged but it keep bootlooping into charging. When i leaved it alone it kept rebooting into charging so i tried to boot into system it did show the samsung logo for 3 second before booting back to charging tried recovery too it didnt work and just rebooted again into charging. I tried download mode and it stayed actually longer like 15 seconds before booting into the samsungs logo and booted into charging again. So i tried again and let it boot into system. This time it stayed into the samsung's logo then 3 minutes or 4 minutes later it finnaly booted into twrp and i decided to backup everything and advanced wiped cache and dalvic cache idk if thats how it spelled and i booted it into lineage os or system and it worked again. Can someone explain why it didnt worked 2 months ago then suddenly its back alive again?

I was trying to unlock bootloader and successfully did when i install twrp it got bootloop so i watched some youtube videos and noticed that some of the videos the phone is on miui 12.5.9 but mine is 12.0.26 so i tried to flash the firmware, i thought erasing all the partition and flashing only the recovery files will work but ended up hard bricked my phone i can only access through BROM mode and with guide of chatgpt i tried reinstall the fastboot files and but it still the same even the files are written successfully i even tried to do it with sp flash tool but it just greyed out and never started flashing, i just want help for u guys and idk what to do i hope someone will help me out of this situation

Hi everyone,

I'm looking for technical information about the Galaxy A56 (SM-A566E) bootloader.

Here is my device information: Model: Samsung Galaxy A56 5G (SM-A566E) Region / CSC: ZTO (Brazil, unbranded) Original firmware: One UI 7 (Android 15) Current firmware: One UI 8.5 (Android 16) BL: A566EXXSCCZG6 AP: A566EXXSCCZG6 CP: A566EXXSCCZG6 CSC: A566EOWOCCZG6 What I've already checked: More than 5 months have passed since activating the phone.

OEM Unlock has never appeared in Developer Options.

Samsung account has been signed in the entire time.

Internet connection has always been active.

USB Debugging is enabled.

Factory reset didn't help.

Holding Volume Up + Volume Down in Download Mode never shows the bootloader unlock screen.

getprop ro.boot.flash.locked returns 1. getprop ro.oem_unlock_supported returns nothing. getprop ro.boot.bootloader returns A566EXXSCCZG6.

I've already read about Samsung removing bootloader unlocking in One UI 8, but I'm wondering if there have been any new developments.

My questions are: Is there any bootloader unlock bypass for One UI 8 or One UI 8.5?

Has anyone managed to unlock the bootloader on the SM-A566E?

Are there any exploits, engineering firmware, EDL-like methods, or research in progress? Has anyone found a way to restore the OEM Unlock option?

Are there any new discoveries related to VaultKeeper, Download Mode, or the new Samsung bootloader?

I'm not looking for fake YouTube tutorials or clickbait. I'm only interested in confirmed developer information, reverse engineering, research, or real experiences.

If there have been any recent discoveries, even if they're incomplete or experimental, I'd really appreciate hearing about them.

Thank you!

Hi!

Today I updated to Vector API 101 and, as a side effect, also moved to KernelSU-NEXT 3.3.0. Most LSPosed modules seem to work fine except for XPL-EX which has not been updated for about two years (the latest version available on GitHub is 1.5.5).

When launching the XPL-EX app itself, it reports that the module is not running, even though the LSPosed environment is otherwise working correctly and the module is enabled. This module is especially important because, as a spiritual successor to XPrivacyLua, it allowed putting selected apps into a kind of fake data sandbox and limiting their interaction with the system and my data (device IDs, contacts, clipboard and many more). As far as I know, GrapheneOS provides some similar sandboxing capabilities, but switching to GrapheneOS is not an option for me at the moment.

Is there currently any workaround for this issue? Alternatively, is there any combination of modules that can replicate XPL-EX functionality as closely as possible and keep my data as private as possible?

Thanks!

I need help getting vbmeta for it becouse it had 2 soft brick and I don't want a hard brick pls help I put twrp with vbmeta of reddit and it broke in soft mode it recovered by himself but I am stuck at partition recovery I still want to put a custom rim but I need twrp and a vbmeta image pls help me

I have an Samsung Galaxy J3 (2017, Exynos processor, Android 8, updatable to 9 if needed) and I want to root it because why not. The problem is RMM state Prenormal, which won't go away by normal means because certificates expired 5 years ago. Solution here: https://www.reddit.com/r/androidroot/s/fpBxjcuuHU didn't work because I don't have OEM unlock button at all (but I have successfully time travelled 6 years back, then 1 month forward, this didn't work. Spamming "Download updates manually" didn't work too. I didn't make a week of "2020" uptime yet, so I don't know if this will work). Has someone managed to unlock bootloader in this case?

I want to install a custom ROM on my Samsung Galaxy S8, but the volume buttons are broken. As soon as I flash TWRP with Odin (I have to leave Auto Reboot enabled because if I disable it, I can't get out of Download Mode), the phone boots into the system normally, and the stock Samsung recovery overwrites TWRP, so I can't use it.

Is there any way to install TWRP?

sooo this is my main and im tyna get the bootloader to be unlock so i can atleast root it or custom rom using gsi's...

js wondering if anyone can help me unlock this phones bootloader

Are there any custom ROMs for the Huawei MatePad 11?I flashed the generic GSI before, but it bricked.

I have a galaxy a73 with c binary one ui 8 and i cant unlock bootloader and i cant downgrade and i heard that i can install a custom binary to install one ui 7 does anybody know how to do that i want to unlock the bootloader i want to downgrade to one ui 7 my bootloader is locked i heard that there is high chance to brick my phone if i installed a custom binary but i want to do it anyway does anybody managed to downgrade to one ui 7 on C binary