Quote:
Originally Posted by Renate
I don't see any name for Tab Ultra under DeBooxUpd.
Does anybody know what it's called? I tried "TabUltra", "Tab Ultra", "Ultra".
Has anybody routed this?
Has anybody found a Firehose loader for the Leaf2 or the TabUltra?
Has anybody done a "fastboot getvar all" and seen what "secure" says?
|
I’ve rooted the Tab Ultra (with your help in the other thread). As you suggested, I used the loader
Code:
qualcomm/factory/sdm662/0014d0e100000000_d40eee56f3194665_FHPRG.bin
On my Leaf 2 this didn’t work, so I rooted the Leaf 2 by decrypting the firmware for which there was a download link in some thread. I’ve also rooted a friend’s Nova Air 2 which was introduced at the same time as the Leaf 2 and TabUltra with the loader
Code:
xiaomi/001360e100720000_1bebe3863a6781db_fhprg_redmi9t.bin
I had to try multiple times because it sometimes said “device disconnected” or something like that, but in the end I was able to download the boot image.
When I extracted the fingerprints from the device using the apk on GitHub, the fingerprint weirdly was
Code:
# fingerprint: ONYX/BOOX/BOOX:11/RKQ1.210614.002/200:userdebug/release-keys
However, since I’ve blocked almost all apps from accessing the internet using AFWall, I can see that the device tries to open the following domain when I click on “Update History” in “System Settings / System Update”
Code:
https://en-data.boox.com/api/firmware/update/list?where={"buildNumber":36840,"buildType":"user","deviceMAC":"","fingerprint":"Onyx/TabUltra/TabUltra:11/2022-11-23_15-20_3.3.1_c1227659ca/36840:user/dev-keys","fwType":"release","lang":"en_US","model":"TabUltra","size":0,"submodel":""}
So it seems, the model is indeed called “TabUltra”.
I also just ran the fastboot command which gives
Code:
(bootloader) secure:yes