View Single Post
Old 08-13-2020, 01:52 PM   #1
Dra_w
Night Owl
Dra_w rocks like Gibraltar!Dra_w rocks like Gibraltar!Dra_w rocks like Gibraltar!Dra_w rocks like Gibraltar!Dra_w rocks like Gibraltar!Dra_w rocks like Gibraltar!Dra_w rocks like Gibraltar!Dra_w rocks like Gibraltar!Dra_w rocks like Gibraltar!Dra_w rocks like Gibraltar!Dra_w rocks like Gibraltar!
 
Dra_w's Avatar
 
Posts: 37
Karma: 100000
Join Date: Aug 2013
Device: Kindle 3; Kindle Voyage
Arrow Kindle Oasis Gen 1 fw 5.13.1 (or older) - Serial Jailbreaking Step by Step

Good day Oasis 1 owner!
Finally there is a guy! I know I also happy to bring this tutorial to all of you.

Disclamer: I am not responsible for bricked devices. Good luck!

Before doing anything, I strongly recommend you should take a look at below instructions:
1. Kindle Oasis 1 back cover removal from iFix
2. Serial Jailbreaking your fw >= 5.6.x Kindle for Dummies

You'll need:
- A computer
- Your kindle oasis
- USB-TTL serial adapter
- Solder
- Tool to open your kindle
- Python
- PuTTY
- Be patient!

Ok. I believe you have understood basics of serial jailbreaking a kindle.
Let's move to the fun part.

Step 1: Discover kindle diag mode root password
I'm doing this tutorial in Windows environment.
Firstly, please install python from python.org
Then open windows command prompt, input below code
Code:
python
import hashlib
print("fiona%s"%hashlib.md5("your kindle serial number with no spaces and all capital letters\n".encode('utf-8')).hexdigest()[13:16])
Your kindle password should be like fionaxxx, write it down somewhere.

Step 1.1: Connect kindle to the computer. Copy all files in the kindle-5.4-jailbreak.zip to kindle. You can find it in Snapshot topic by NiLuJe (kindle-jailbreak-1.16.N-r17396.tar.xz)

Step 2: R̶i̶p̶ ̶y̶o̶u̶r̶ ̶d̶e̶v̶i̶c̶e̶ ̶a̶p̶a̶r̶t̶ Open the back cover to access to the mainboard.
If you look closely in the lower right of the display connection port, you'll see 3 tiny round copper connectors which are Tx, Rx and GND. But wait, you need to disconnect the battery first.
Now wire these connectors with any USB TTL adapter that you have.
Kindle Tx --- Rx
Kindle Rx --- Tx
Kindle GND --- GND (you can also connect with the screw as I do)
Click image for larger version

Name:	01.jpg
Views:	1178
Size:	133.9 KB
ID:	181308

Step 3: Prepare the software
Connect to USB TTL adapter to computer.
Open Device Manager and set up variable like below
Click image for larger version

Name:	02.png
Views:	821
Size:	51.5 KB
ID:	181309

Open PuTYY and setup like this
Click image for larger version

Name:	03.png
Views:	719
Size:	21.6 KB
ID:	181310

Click image for larger version

Name:	04.png
Views:	652
Size:	17.5 KB
ID:	181311

Then press Open, leave the blank window as it is
Click image for larger version

Name:	05.png
Views:	681
Size:	3.4 KB
ID:	181312

Step 4: Jailbreaking!
OK. This is important. As soon as you reconnect the battery, the blank PuTYY window above will begin to display some text. Please press any key quickly to interupt the normal boot and to access uboot.
Click image for larger version

Name:	06.png
Views:	876
Size:	17.1 KB
ID:	181315

Now, input below code. It's quite different from original K5 instruction:

Code:
run bootcmd_FB
bootm 0xE41000
You're now access to the system diags:
Click image for larger version

Name:	09.png
Views:	760
Size:	26.0 KB
ID:	181314

Back to your kindle screen.
Choose Reboot or Disable Diags
then
Exit to login prompt

On PuTYY screen, input username and password
login: root
password: fionaxxx (as you remember on the first step)

Click image for larger version

Name:	11.png
Views:	644
Size:	16.2 KB
ID:	181316

Edit the password file, input below code:
Code:
mkdir /tmp/main
mount /dev/mmcblk0p1 /tmp/main
vi /tmp/main/etc/passwd
on vi editor, use your arrow buttons to move the hightlight cursor to the character "x"
Click image for larger version

Name:	12.png
Views:	677
Size:	14.8 KB
ID:	181317
Press X to delete the x character
Input :w to save
Input :q! to quit vi editor
Input reboot to reboot kindle.

Let's the kindle fully boot to your familiar home screen.

On PuTTY windows, press Enter and login with root.
Click image for larger version

Name:	14.png
Views:	632
Size:	24.7 KB
ID:	181318
Input below commands to jailbreak:
Code:
cd /mnt/us
sh jb.sh
If you find the text ****JAILBREAK**** on your kindle screen,
Congratulation!

You also can create the folder name "update.bin.tmp.partial" on kindle to help prevent OTA update and protect the jailbreak.

Bonus. I'll help you install KUAL on your now jailbroken kindle.
You can find everything in snapshot.
Copy KUAL-KDK-2.0.azw2 (KUAL) to document folder and Update_KUALBooklet_hotfix_44a61b6_install.bin (KUAL coplate) to the kindle root directory.
Update your kindle.
Now, you have KUAL and free to install other plug-in such as helper+, screensaver, KOreader, etc.

Thank NiLuJe, grant2 and other contributors. Your work have helped me a lot.

Cheer!

Last edited by pdurrant; 08-14-2020 at 04:49 AM.
Dra_w is offline   Reply With Quote