Tools Serial Jailbreaking your fw >= 5.6.x Kindle for Dummies

[thoriki]

Originally Posted by Junket

That appears to be the exact same model, it should work fine. When you go to use it, you should set the VCC jumper to 1.8 volts (not 5 or 3.3v)

Ty very for u help

[indiecognition]

thoriki,
I used the same serial port connector to jailbreak my Kindle Voyage, and it worked fine with the jumper set on the 1.8v pins. (DSD TECH SH-U09C2 USB to TTL Adapter Built-in FTDI FT232RL)

I did not have any issues with the adapter, and it was easy to set the jumper and connect to the Kindle.

good luck!

[Raex-D]

Originally Posted by domx

Hello, I'm new of the e-readers world and I've learned a bit about jailbreak just after that my kindle KT4 was updated to 5.12.2. Do I have any chance now to jailbreak my device by the serial port? I say this because in [link out of date] chinese page they talk about serial jailbreak for KT3 (if the translation of google is good enough).

Thanks in advanced!

You could try this perhaps. https://www.mobileread.com/forums/sh...ht=KT3&page=27

Found this while searching for KT3 myself. Although, the newer androidized devices haven't been hacked that much or so I am unaware. But, peeps here haven't done much about the models which are somewhat "androidized".

KT3 is one such device, and according to most of the geniuses here the chances are slim. I haven't tried it myself yet either, but I am on a lower firmware. It could work for you too.

I'd also like to say to knc1 and others, that xda might not be a good place for kindle e-readers. It's mostly full of fire hd tablets and I saw no mention about a e-reader. Hardly anyone would notice or come to help (or would be of much help if they don't own the device) so you guys might be the only saviors for anyone who has such a device.

[thoriki]

Hi, have error in step bootm 0xE41000
Look image plz, what is the problem?


https://ibb.co/y6nWFMN

[knc1]

Originally Posted by thoriki

Hi, have error in step bootm 0xE41000
Look image plz, what is the problem?


https://ibb.co/y6nWFMN

Please identify your:
Device using our device nicknames ;
The current firmware version of your device ;
If known, the firmware version of the diags ;
A complete log made with the "file capture" feature of PuTTY (just compress the file and attach to your next post).

[thoriki]

Originally Posted by knc1

Please identify your:
Device using our device nicknames ;
The current firmware version of your device ;
If known, the firmware version of the diags ;
A complete log made with the "file capture" feature of PuTTY (just compress the file and attach to your next post).

hi, my device is pw3, fw is 5.12.3 and putty log is this

Hit any key to stop autoboot: 0
uboot > bootm 0xE41000
## Booting kernel from Legacy Image at 80800000 ...
Image Name: Linux-3.0.35-lab126
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 2634732 Bytes = 2.5 MB
Load Address: 80008000
Entry Point: 80008000
Verifying Checksum ... OK
Loading Kernel Image ... OK
OK

Starting kernel ...

[ 0.098636] boot: C def:bcut:batterycut=1
[ 0.285559] LPDDR2 MfgId: 0x1 [Samsung]
[ 0.289636]
[ 0.289640] just text: vaddr c0150d44, va 0xc0150200 pa 0x801000c3 attr 0x6
[ 0.302189]
[ 0.302193] nmx6sl_wfi_iram: vaddr e084e000, va 0xe084e200 pa 0x904043 attr 0x2
[ 0.311040]
[ 0.311043] mx6sl_ddr: vaddr e0856000, va 0xe0856200 pa 0x905043 attr 0x2
[ 0.319373]
[ 0.319375] mx6sl_iomux: vaddr f40e0000, va 0xf40e0200 pa 0x20110c3 attr 0x149
[ 0.330210]
[ 0.330213] ANATOP: vaddr f40c8000, va 0xf40c8200 pa 0x20110c3 attr 0x149
[ 0.344560]
[ 0.344563] CCM: vaddr f40c4000, va 0xf40c4200 pa 0x20110c3 attr 0x149
[ 0.356704]
[ 0.356707] MMDC_P0: vaddr f41b0000, va 0xf41b0200 pa 0x21110c3 attr 0x149
[ 0.367116]
[ 0.367119] L2: vaddr f2a02000, va 0xf2a02200 pa 0xa02043 attr 0x149
[ 0.377020]
[ 0.377023] arm perif: vaddr f2a00000, va 0xf2a00200 pa 0xa00043 attr 0x149
3.0.35-lab126 #1 PREEMPT Mon Mar 21 19:16:25 PDT 2016 armv7l
Press [ENTER] for recovery menu... 0 //dev/mmcblk0p4:
CHS=4/16/99776 size=3269459968 bytes
flag type first last lba first lba size
Partition p1:
0x00 0x0b 16 <large> 16 6385648
CHS: 0/1/1 - <large>
Partition p2:
Partition p3:
Partition p4:
BOOTING DEFAULT.
IP-Config: no devices to configure
kinit: Mounted root (ext3 filesystem) readonly.
init started: BusyBox v1.17.1 (2016-03-21 19:09:42 PDT)
starting pid 625, tty '': '/etc/init.d/rcS'
/etc/init.d/rcS: line 85: boot_milestone: not found
system: I rcS:def:starting /etc/rcS.d/S50diags
USER=root
prevlevel=N
HOME=/
runlevel=S
TERM=vt102
PATH=/sbin:/bin:/usr/sbin:/usr/bin
SHELL=/bin/sh
PWD=/
VERBOSE=no
READ_AHEAD=4
USER=root
prevlevel=N
HOME=/
runlevel=S
TERM=vt102
PATH=/sbin:/bin:/usr/sbin:/usr/bin
SHELL=/bin/sh
PWD=/
VERBOSE=no
IO_SCHED=anticipatory
USER=root
prevlevel=N
HOME=/
runlevel=S
TERM=vt102
PATH=/sbin:/bin:/usr/sbin:/usr/bin
SHELL=/bin/sh
PWD=/
VERBOSE=no
TMP_SIZE=32M
info firsttime:mount_rw:time=6930:Mounting root RW for first boot
info firsttime:cursor:Linking Xorg cursor:
ln: /usr/share/fonts/X11/misc/cursor.pcf: No such file or directory
info firsttime:mount_ro:time=6950:Mounting root RO
[ 7.023401] elevator: type
[ 7.023406] not found
[ 7.028626] elevator: switch to
[ 7.028630] failed
[ 7.042461] elevator: type
[ 7.042465] not found
[ 7.047679] elevator: switch to
[ 7.047684] failed
[ 7.061469] elevator: type
[ 7.061473] not found
[ 7.066676] elevator: switch to
[ 7.066681] failed
info system:start:time=7060:
/etc/rcS.d/S50diags: line 500: f_proto: not found
info hardware:no_wan::WiFi only device. No WAN found
info system:configlatform=wario,board=muscat,rev=3,pr oto=N,wifi=Y,wan=N:
info system:done:time=7450:
ls: /lib/firmware/cyttsp4/muscat*.bin: No such file or directory
info cyttsp4:update:cyttsp4 fw ver=00D3 file version=.bin:
/etc/upstart/cyttsp: line 49: syntax error: 0x.bin
crit modules:modprobe_failed:failed to load touch module:
/etc/rcS.d/S50diags: line 500: iptables-restore: not found
/opt/ar6k/include/dbglog.h.save: No such file or directory
info userstore:run:time=8820,action=start:
info userstore:start:found_bootup_flag:Found BOOTUP flag file
dosfsck 2.11 (12 Mar 2005)
dosfsck 2.11, 12 Mar 2005, FAT32, LFN
Checking we can access the last sector of the filesystem
Boot sector contents:
System ID "mkdosfs"
Media byte 0xf8 (hard disk)
512 bytes per logical sector
8192 bytes per cluster
2134 reserved sectors
First FAT starts at byte 1092608 (sector 2134)
2 FATs, 32 bit entries
1594880 bytes per FAT (= 3115 sectors)
Root directory start at cluster 2 (arbitrary size)
Data area starts at byte 4282368 (sector 8364)
398580 data clusters (3265167360 bytes)
32 sectors/track, 64 heads
0 hidden sectors
6385648 sectors total
Checking for unused clusters.
Checking free cluster summary.
/dev/loop/0: 1510 files, 110773/398580 clusters
Wifi cal bin symbolic link AR6003_calfile.bin is already created
system: I mntroot:def:Making root filesystem writeable
ln: /usr/local/sbin/dropbear: File exists
ln: /usr/local/sbin/dropbearkey: File exists
/etc/rcS.d/S50diags: line 13: /usr/local/sbin/dropbearkey: not found
system: I mntroot:def:Making root filesystem read-only
/etc/rcS.d/S50diags: line 13: /usr/local/sbin/dropbear: not found
mounting waveform filesystem
waveform filesystem already mounted
info display:update:Checking '/opt/eink/images/R094_ED060KD1C2' for overrides:
umounting waveform filesystem
drawing default
cannot find image: /opt/amazon/low_level_screens/splash.png
info display:started:time=11330:
/etc/upstart/battery-diags: line 91: f_proto: not found
info battery:charged:cap=94,mV=4125,mAH=1373:
USER=root
prevlevel=N
OLDPWD=/
HOME=/
runlevel=S
TERM=vt102
PATH=/sbin:/bin:/usr/sbin:/usr/bin
SHELL=/bin/sh
PWD=/dev
VERBOSE=no
LD_LIBRARY_PATH=/usr/lib/tts/speech/components/common/:/usr/lib/tts
/etc/rcS.d/S50diags: line 13: kb: not found
diags : /opt/factory/rootfs_md5_list not found.
Change list is: [291999]
Sending: mkdir -p /mnt/base-us/diagnostic_logs/
PostMode len = 6 of 16
Ignoring PostMode
DiscoveryObjectImpl:getDeviceDiagsInfo FOUND: MUSCAT_WFO: [067] [103] with 06703091630701WD
Device found: MUSCAT_WFO [067] [103]
GlobalHalImpl: found DeviceType: 0x67
found: cyttsp4_i2c
found: cyttsp4_core
found: cyttsp4_mt_b
[ 11.552801] cyttsp4_device_access_init: Registering device access device for core_id: main_ttsp_core
[ 11.562944] cyttsp4_device_access cyttsp4_device_access.main_ttsp_core: cyttsp4_device_access_probe
[ 11.572912] cyttsp4_device_access_init: Cypress TTSP Device Access (Built 20121109) rc=0
Input driver version is 1.0.1
Input device ID: bus 0x0 vendor 0x0 product 0x0 version 0x0
Input device name: "max77696-onkey"
Supported events:
Input driver version is 1.0.1
Input device ID: bus 0x0 vendor 0x0 product 0x0 version 0x0
Input device name: "cyttsp4_mt"
Supported events:
failed to open /dev/input/event2
failed to open /dev/input/event3
failed to open /dev/input/event4
failed to open /dev/input/event5
failed to open /dev/input/event6
failed to open /dev/input/event7
Ignoring PostMode
diag>open_device m_vsInfo.xres: 1072
get_m_test_xmlFile wfo.xml
device type = 0x67
PCBID: 06703091630701WD
TCP_IP_Server_Handler:start_USBnet Enabling USB net
Cannot open xmlFile /mnt/base-us/USBnet.xml
NOT Found NFS path
[ 11.776814] unregistered gadget driver 'g_file_storage'
ERROR: Module g_serial does not exist in /proc/modules
[ 11.836106] usb0: MAC ee:59:00:00:00:15
[ 11.839950] usb0: HOST MAC ee:29:00:00:00:15
[ 11.844227] g_ether gadget: controller 'fsl-usb2-udc' not recognized; trying CDC Ethernet (ECM)
[ 11.875776] g_ether gadget: Ethernet Gadget, version: Memorial Day 2008
[ 11.882410] g_ether gadget: g_ether ready
[ 11.891696] fsl-usb2-udc: bind to driver g_ether
system: I mntroot:def:Making root filesystem writeable
[ 11.946228] EXT3-fs (mmcblk0p2): using internal journal
sock_init 1888

[Junket]

compress the file and attach to your next post

Nah, sounds like too much work

[thoriki]

Originally Posted by Junket

Nah, sounds like too much work

I'm sorry I don't know how to do it, and I can't edit.

I've ever seen a button for that, (spoilet) but I don't know how to do it

Sorry my english is very badly

[thoriki]

can anybody help me? please

[Junket]

I am sure that someone will try to help you. But you are more than a little impatient. It's been less than one day and you complaining. Does that seem reasonable?

[anaemic]

Just registered to say a huge thank you to you all for this excellent guide and for writing this software.

I followed the guide in this thread and just wanted to add, that as a user of a recently patched paperwhite (5.12.3), I got to the end of the installation guide and KUAL was not visible.

But by following the instructions from this thread and running a search on my kindle for ";mrpi" while having Update_KUALBooklet_v*_install.bin in my mrpackages folder things worked if anyone is having a similar problem!

[knc1]

Originally Posted by anaemic

Just registered to say a huge thank you to you all for this excellent guide and for writing this software.

I followed the guide in this thread and just wanted to add, that as a user of a recently patched paperwhite (5.12.3), I got to the end of the installation guide and KUAL was not visible.

But by following the instructions from this thread and running a search on my kindle for ";mrpi" while having Update_KUALBooklet_v*_install.bin in my mrpackages folder things worked if anyone is having a similar problem!

And a big "thank you" from everyone.
Many people with many, many hours have made this site what it is.
So Thank You again.

[Tejjy]

I know I am probably late to the party, but want to Jailbreak my paperwhite 3, currently on 5.12.3 and finding it difficult to find the Jim board in the UK, but have come across this if anyone knows if it would work?

https://www.ebay.co.uk/itm/Arduino-G...0AAOSwTGVbtg15

[knc1]

Originally Posted by Tejjy

I know I am probably late to the party, but want to Jailbreak my paperwhite 3, currently on 5.12.3 and finding it difficult to find the Jim board in the UK, but have come across this if anyone knows if it would work?

https://www.ebay.co.uk/itm/Arduino-G...0AAOSwTGVbtg15

I do not see any specification(s) such as the interface voltage (1.8v) on that one.
Plus that "we might send you anything at all" in the advertising. And the "we will take it back if your device smokes too much".
If the Chinese don't know what they are selling, you can't know what you are buying.


Find a listing that does exactly what you need done.

[Tejjy]

Originally Posted by knc1

I do not see any specification(s) such as the interface voltage (1.8v) on that one.
Plus that "we might send you anything at all" in the advertising. And the "we will take it back if your device smokes too much".
If the Chinese don't know what they are selling, you can't know what you are buying.


Find a listing that does exactly what you need done.

I'm glad you saw that, doesn't sound very good, I have found a couple similar, these any better?

https://www.ebay.co.uk/itm/6-Pin-CP2...AAAOSwhQhY38j3

https://www.ebay.co.uk/itm/FT232-Mod...gAAOSwgENd7svc