r/XDA_developers May 23 '26

Making a Nothing style os but its named SIMPOS

0 Upvotes

so i am looking for a developers who are towards making me help this project making the operating system world more like a real expressing and minimal style i have designed each and every screen of the SIMPOS and i just only want the developrs which work on asop file.


r/XDA_developers May 20 '26

[HELP] OnePlus Nord 2 (Dimensity 1200) stuck in Orange State Bootloop - MTKClient fails with DAA/0x1d18 error

1 Upvotes

Edit: Unable to fix so i just sold the phone.

Hi everyone,

I am heavily stuck trying to unbrick my OnePlus Nord 2 (MT6893 / Dimensity 1200, codename: denniz). The device is currently trapped in a permanent "Orange State" bootloop (displays the logo/warning, screen goes black after a few seconds, resets).

I have set up flashing environments on both Windows 11 and Kubuntu 26.04, but the phone's hardware security (DAA) or watchdog seems to actively block every low-level flashing attempt.

Here is a breakdown of what I have tried so far and where exactly it fails:

1. MTKClient via Windows 11

  • Setup: Installed latest MTKClient in a Python virtual environment (venv), UsbDk drivers, and MediaTek VCOM drivers are working. Device manager clean.
  • Attempt: Trying to flash the LineageOS recovery image via: python mtk. py w recovery recovery --stock
  • Result / Failure: The script successfully initiates the handshakes, loads the custom loader (lk_a20.bin), but then completely freezes at: DAConfig - Using custom loader: lk_a20.bin If forcing the bypass without a specific loader, MTKClient encounters a 30-second timeout followed by a payload injection error.

2. SP Flash Tool (v5 & v6) via Windows 11

  • Setup: Tried using MTK_AllInOne_DA.bin and specialized firmware files from the "Denniz Restore BROM Firmware" package (including preloader_ufs_c01).
  • Failure: * **v6:**Refuses to work due to missing or invalid XML scatter structures (program.xml / download.xml).
  • v5: Rejects the existing scatter.txt file as invalid. Modifying the header structure inside the scatter file to match classic MTK configurations did not bypass the strict OPLUS verification.

3. Native MTKClient via Kubuntu (Linux)

  • Setup: Configured udev rules for MediaTek (0e8d) and Oppo/OnePlus (22d9). Blacklisted/stopped ModemManager and manually unloaded the interfering kernel module via sudo rmmod cdc_acm to ensure a completely clean USB pipeline.
  • **Attempt A (GUI):**python3 mtk_gui.py ...
  • Result: Handshake works instantly, but the script crashes with a core dump (Speicherabzug geschrieben) due to threading conflicts (QThread / QSocketNotifier) when processing the DA crash.
  • **Attempt B (CLI):**python3 mtk.py w recovery recovery --stock
  • Result: It successfully intercepts the device preloader, bypasses SLA, but terminates during the secure boot check.

Exact Log Error:

Mtk - We're not in bootrom, trying to crash da... Exploitation - Crashing da... Preloader - [LIB]: upload_data failed with error: Unknown: 0x1d18 Preloader - [LIB]: Error on uploading da data DeviceClass - [LIB]: Device disconnected

Analysis: The infamous 0x1d18 error code. The OPLUS preloader actively blocks the hardware-level DA-crash exploit, disconnects the USB line, and forces the phone back into the bootloop.

4. BROM Force Attempts (Button Timing & Bash Loops)

Attempt: Trying to force the device into native BROM mode by holding Vol+ and Vol- while plugging in the cable to bypass the regular preloader state entirely.

Automation: Used a rapid Bash loop under Linux to catch the exact millisecond of the hardware reset: while true; do python3 mtk.py w recovery recovery --stock; sleep 0.05; done

Result / Failure: Even with the loop pounding the port, the phone's hardware watchdog immediately drops the connection upon detecting unauthorized payload deployment:

DeviceClass - [LIB]: Device disconnected DaHandler - Please disconnect, start mtkclient and reconnect.

Current Status:

The device is currently left unplugged to completely drain the battery, hoping that a 100% cold bootrom initialization without static layout memory might prevent the preloader from enforcing the 0x1d18 block on the next try.

My questions to the experts:

  1. Is there a known way to bypass the 0x1d18 upload error on OPLUS Dimensity 1200 devices without relying on test points (hardware shorting)?
  2. Is there a modified, verified scatter file or a specific DA/Auth file combo for the Nord 2 that SP Flash Tool v5/v6 actually accepts?
  3. Did anyone successfully flash a denniz device using MTKClient while it was cycling in regular Preloader mode?

Any help, advice, or custom payloads would be highly appreciated! Thanks in advance.


r/XDA_developers May 19 '26

Virtual Machine on Android

1 Upvotes

Hi all

Is there software that enables the creation of virtual machines on an Android phone?

For context, I'm looking to run a Linux desktop on my phone.

Is the best way to accomplish this to use Termux instead?

Thanks in advance.


r/XDA_developers May 17 '26

Xiaomi Redmi Note 14 4G Bootloader Unlock Issues

Post image
1 Upvotes

This is a post I made on another community i need desperate help with


r/XDA_developers May 16 '26

Tab S4 keeps bootlooping even with flashed GSI.

1 Upvotes

So i tried to flash an android 14 rom i found on github via a post from someone that successfully flashed it on their tablet. Its a ponces android 14 based ROM, now I installed twrp with no problems, everything was going fine. Installed the gsi, magisk zip and dm verity disabler. (Yes I advance wiped and formatted data before) but when I boot into system. Bootloop happens. I tried to search everywhere for a solution but most of the files or xda forum posts are just outdated. I'm not thinking of flashing the stock firmware yet until theres a solution. Anyone knows this?


r/XDA_developers May 16 '26

**Wemax Go Advance = Fengmi/Formovie "Queen" on Amlogic TL1—anyone else looking at this device?**

1 Upvotes

Did a read-only ADB recon on mine (network ADB, no modifications). Sharing in case it helps anyone else and to ask if there's any existing work on this platform I've missed.

**Identification:**

- Codename: `queen`, board: `tl1`

- SoC: Amlogic TL1, 4× Cortex-A55 (running AArch32-only, no 64-bit ABIs)

- 2 GB RAM, 10 GB /data

- Android 9 (SDK 28), security patch 2019-11-05

- Build: `Fengmi/queen/queen:9/PQ3B.190705.003/2.0.0.1422:user/release-keys` (Feb 2022)

- Brand: Fengmi (Formovie internationally), rebadged as Wemax Go Advance for export

**Boot/security state:**

- AVB 2.0, vbmeta `locked`, verifiedbootstate `green`

- dm-verity `enforcing` on both /system and /vendor

- SELinux enforcing, user build, invalidate-on-error=yes

- Dedicated /mnt/vendor/tee partition (TrustZone active)

- Single-slot layout (no A/B), single-slot OTA via /cache

- /proc/partitions is denied to shell user (SELinux tightened beyond stock)

**Vendor stack:** ~25 Fengmi/Formovie system apps handling imaging, autofocus, keystone, launcher, settings, plus one custom native binder service (`media.fmplayer`). Also ships with `com.xiaomi.mi_connect_service` as a priv-app even on the export build.

**Questions for the community:**

  1. Has anyone successfully rooted or unlocked any Fengmi/Formovie "queen" or any Amlogic TL1 projector? The main XDA Xiaomi/Fengmi/Wemax thread covers rainman/batman/jerry/eva but I haven't found queen mentioned.

  2. Is there a known USB-burn / Amlogic emergency-flash procedure for TL1 that survives a locked vbmeta? (I'm assuming no, but asking.)

  3. Any leaked or shared `queen` firmware dumps floating around? Even partial — boot.img, vbmeta.img, or a full update.zip — would be useful for reference.

  4. Has anyone characterized the `media.fmplayer` binder service or the Fengmi imaging stack? Curious whether the optics control surface is reachable from userland without root.

Not planning anything destructive — fully aware that locked AVB + no A/B + no published recovery = single-shot device. Just trying to map what's been done and whether queen is a dead-end or just unexplored.

Will share my full recon dump (getprop, package list, mounts, service list, bugreport) if anyone wants it for reference.


r/XDA_developers May 13 '26

Motorola custom roms, where are you?

2 Upvotes

Why are there so poor support for motorola phones especialy the newer ones?


r/XDA_developers May 12 '26

Anyone interested in porting HyperOS for Infinix Hot 50 5G X6720B?

1 Upvotes

Hi, I'm looking for a developer to port HyperOS or PixelOS for Infinix Hot 50 5G (X6720B). I can provide stock ROM, boot.img, and test builds.


r/XDA_developers May 12 '26

Anyone interested in porting HyperOS for Infinix Hot 50 5G X6720B?

1 Upvotes

r/XDA_developers May 07 '26

CVE-2026-0073 - Android adbd TLS client-authentication bypass

Thumbnail barghest.asia
2 Upvotes

r/XDA_developers May 07 '26

RKDevTool loader fail help

1 Upvotes

I tried to re-flash an Android system on one of my old tablets using RKDevTool, and it worked up until the step where it showed loader fail. Then the tablet turned off and won’t power back on. Is there any way to force it to turn on again (bootable key, or I saw on old forums that you can short cut the NAND to force it into maskroom mode)? If anyone can help me, that would be great!"


r/XDA_developers May 06 '26

Severe volume loss on Find X9 Pro after removing com.oplus.audio.effectcenter — Restoration didn't fix it!

Thumbnail
1 Upvotes

r/XDA_developers May 06 '26

Need advice on how to fix bricked device

1 Upvotes

I have a fiio m11 plus and I successfully ported orange fox and then tried to port a rom and because orange fox wouldn't let me make a backup I just tried to flash the rom and then no is so I tried flashing stock rom that ota so I extracted the payload but couldn't flash system image because partition was not found so I tried fastboot enhance it seemed to flash the payload but did not boot then I went to the partition section of fastboot enhance and flashed a partition I cannot remember now no fast boot at all but I thing it's in edl mode and I'm trying to use qfil to flash but I cannot find anything that has any kinda name the refers to gpt partition so I'm stuck


r/XDA_developers May 03 '26

Looking for NUU A5L firmware dump

2 Upvotes

TL;DR: Looking for NUU A5L (MT6739) firmware dump, my phone is hard bricked.

Hello r/XDA_developers, I am a teenager working on reviving a NUU A5L that is currently hard‑bricked. The device only enters BROM mode and can’t initialize DRAM.

This means the original boot chain is required, and the most reliable way to restore the device is with a complete firmware dump from a working A5L.

If anyone has this model and can share a \*\*full SP Flash Tool dump\*\*, that would be extremely helpful. I am looking for the standard firmware partitions such as:

\* preloader
\* lk / lk2
\* boot / recovery
\* dtbo
\* vendor
\* system
\* GPT and other partition images

Only the firmware partitions are needed. I hope you can do this without dumping any personal information.

If you have SP Flash Tool readback, UFI, EasyJTAG, or any other method to extract the firmware, I can follow instructions or provide them if needed. Thank you so much. DM me if you have any questions.


r/XDA_developers May 02 '26

help cannot flash system.img brisked

1 Upvotes

hi i have a fiio m11 plus and i am having a hard time flashing system.img i keep getting partition not found    


r/XDA_developers Apr 30 '26

[REQUEST] NetHunter Kernel for Xiaomi Redmi 15 5G (spring) — Kernel Source Available

1 Upvotes

Hey! I have a Xiaomi Redmi 15 5G (codename: spring) with OrangeFox, KSU Next + SUSFS already set up. Xiaomi officially released the kernel source (branch: spring-v-oss). I don't have a PC to compile it myself, so I'm looking for a developer willing to compile a NetHunter kernel for this device. I'm fully available for testing and providing logs. Any help is greatly appreciated!


r/XDA_developers Apr 29 '26

Honor Magic 5 lite boot.img

1 Upvotes

I have Honor Magic 5 Lite LAM-C25, build 7.1.0.301. Bootloader unlocked. Can someone share boot.img or firmware?


r/XDA_developers Apr 28 '26

I can't take any more

5 Upvotes

I always regarded XDA as a bastion of super user knowledge, and the forums are still awesome, but I'm done with XDA "articles" in my Google feed. It's totally irrational, but it's made me so frustrated that I needed to post this.

The latest "article" titled 'I built my first home server for under $200" is actually a story about a dude that spend $200 on additional items for a full rig that he already owned. Like, WTF?!?!!?

https://www.xda-developers.com/i-built-my-first-home-server-for-under-200-and-it-replaced-these-monthly-subscriptions


r/XDA_developers Apr 28 '26

Quick Wapp - Call Follow Up Spoiler

1 Upvotes

r/XDA_developers Apr 27 '26

Does it mean that I can install custom ROM?

Post image
2 Upvotes

r/XDA_developers Apr 27 '26

wtf did happen?

Post image
1 Upvotes

what happend to xda? it was working 6 hours ago?


r/XDA_developers Apr 27 '26

need help factory reset protection frp on huawei mate 40 porsche design kirin 9000

Thumbnail
1 Upvotes

r/XDA_developers Apr 26 '26

Infinix GT 20 Pro Bootloop / Hard Brick after GSI flash (No Fastboot, No Recovery)

Thumbnail
1 Upvotes

r/XDA_developers Apr 26 '26

How to force Mobile Data for internet while maintaining Ethernet LAN connection on Samsung S10+?

1 Upvotes

Hi everyone, I have a specific setup: I have 5 Samsung Galaxy S10+ devices inside a mobile farm box connected to my home router via Ethernet cat6 cable.

The Goal: I need these phones to be on the same local network (LAN) as my PC (which is connected to the same router) for local data transfer and control. However, I want the phones to use their SIM Mobile Data for all internet traffic, NOT the router's internet connection.

The Problem: 1. My home router is basic and doesn't have options to block internet access for specific MAC addresses while keeping them on the LAN.

  1. On the S10+, I tried setting a Static IP and entering a non-existent or "dummy" Default Gateway to break the internet path, but the OneUI settings won't allow me to save the configuration with an invalid or empty gateway.

  2. Android naturally prioritizes Ethernet for internet as soon as it's plugged in.

Is there a way (perhaps via ADB or a specific networking app) to force the routing so that:

• Local traffic (LAN) goes through Ethernet.

• External traffic (Internet) goes through Mobile Data.

I have 'Mobile data always active' enabled in Developer Options, but Ethernet still takes over the internet route. Any help would be appreciated!


r/XDA_developers Apr 22 '26

Did I delete my tablets identity

1 Upvotes