Online
cuenta google Revvl 4, Alcatel 1v 2020 (5007z), frp con nck
01- Abrir el software: NCK AndroidMTK Module v2.7.7 o superior
02- En la pestaña Main mantener en Phone setting 0-By CPU y en modelo ELBRUS
03- Activar el checkbox Bypass security [flash mode]
04- Accionar el botón Read phone info in flash mode en el apartado FLASH MODE
05- Conectar el dispositivo apagado presionando VOL+&VOL- simultáneamente (Lectura del dispositivo)
Action : Boot Info.
Selected 0-By CPU:MT6737T
Exe version: NCKDongle AndroidMTK 2.7.7
Phone must be off with battery inside.
Battery must be charged
Please connect phone in brom mode
For some phones need to keep "VOL-" button untill inserting USB cable.
For some phones need to keep "VOL+ and VOL-" button untill inserting USB cable.
For some phones need to keep "VOL+" button untill inserting USB cable.
Detected(39) : MediaTek USB Port (COM39)
[39] \\?\usb#vid_0e8d&pid_0003#5&d27efef&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
CPU: MT6761 CPU code: 717 Target config: e7
***********************
Secure boot enabled: true
Need serial link authorization: true
Need download agent authorization: true
SWJTAG enabled: true
EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: false
Root cert required: false
Memory read authorization: true
Memory write authorization: true
Cmd 0xC8 blocked: true
***********************
Executing exploit, do not disconnect phone
Exploit has been executed successfully.
[3ac00]Dumping phone preloader.
Preloader: C:\ProgramData\Android_MTK_Backup_Folder\preloader_backup\preloader_tokyo_lite_tmo.bin
Waiting for handle to become active......
Reseived active handle repply from phone......
Booting phone
Detected(39) : MediaTek USB Port (COM39)
[39] \\?\usb#vid_0e8d&pid_0003#5&d27efef&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
Boot mode: Brom
Phone detected...Please wait
BBCHIP: 6761 200 ca01
Using Algo 1.
Helio MT6761 phone detected, swithing to helio api
Helio enabled DRAM in First Da: FALSE
Sending loader.....
BBCHIP MT6761
[1]Storage EMMC
Block size: 512
EMMC FW VERSION: 00:00:00:00:00:00:00:00
EMMC CID: 1501003458364B : 000000000000000000
EMMC UA SIZE: 0x747c00000
BOOT STYLE: EMMC BOOT
FULL LENGTH: 0x748800000 [29.133 GB]
Build Date: Tue Aug 31 15:20:37 CST 2021
Build ID: QP1A.190711.020
Version: 10
Mediatek Version Release: 10
Brand: T-Mobile
Device: Tokyo_Lite_4G
Manufacturer: TCL
Model: 5007Z
Model: 5007Z
Brand: T-Mobile
Device: Tokyo_Lite_4G
Brand: TCL
Region: US
This phone have FRP partition.
Phone have OTP partition.
MODEL FROM PROINFO: 5007Z-2ATBUS1
SECRO FROM PROINFO: 27H9UPI1DC00
OTP IMEI: XXXXXXXXXXXXXXX
Modem version: MOLY.LR12A.R3.TC5.PR2.SP.V2.P17
[helio]Wait untill phone will start charging.
[0]All done.
06- Ir a la pestaña FRP-PATTERN-PRIVACY y en FRP reset mode marcar Wipe userdata
07- Verificar que se encuentre marcado el checkbox Bypass security [flash mode]
08- Accionar el botón Reset FRP
09- Conectar el dispositivo apagado presionando los botones VOL+&VOL- simultáneamente
Exe version: NCKDongle AndroidMTK 2.7.7
Selected model: 0-By CPU ELBRUS
[auto]Action: Reset FRP
Phone must be off with battery inside.
Battery must be charged
Please connect phone in brom mode
For some phones need to keep "VOL-" button untill inserting USB cable.
For some phones need to keep "VOL+ and VOL-" button untill inserting USB cable.
For some phones need to keep "VOL+" button untill inserting USB cable.
Detected(39) : MediaTek USB Port (COM39)
[39] \\?\usb#vid_0e8d&pid_0003#5&d27efef&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
CPU: MT6761 CPU code: 717 Target config: e7
***********************
Secure boot enabled: true
Need serial link authorization: true
Need download agent authorization: true
SWJTAG enabled: true
EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: false
Root cert required: false
Memory read authorization: true
Memory write authorization: true
Cmd 0xC8 blocked: true
***********************
Executing exploit, do not disconnect phone
Exploit has been executed successfully.
[3ac00]Dumping phone preloader.
Preloader: C:\ProgramData\Android_MTK_Backup_Folder\preloader_backup\preloader_tokyo_lite_tmo.bin
Waiting for handle to become active......
Reseived active handle repply from phone......
Booting phone
Detected(39) : MediaTek USB Port (COM39)
[39] \\?\usb#vid_0e8d&pid_0003#5&d27efef&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
Boot mode: Brom
Phone detected...Please wait
BBCHIP: 6761 200 ca01
Using Algo 1.
Helio MT6761 phone detected, swithing to helio api
Helio enabled DRAM in First Da: FALSE
Sending loader.....
BBCHIP MT6761
[1]Storage EMMC
Block size: 512
EMMC FW VERSION: 00:00:00:00:00:00:00:00
EMMC CID: 1501003458364B : 000000000000000000
EMMC UA SIZE: 0x747c00000
BOOT STYLE: EMMC BOOT
FULL LENGTH: 0x748800000 [29.133 GB]
Resetting userdata.
Phone have OTP partition.
MODEL FROM PROINFO: 5007Z-2ATBUS1
SECRO FROM PROINFO: 27H9UPI1DC00
OTP IMEI: XXXXXXXXXXXXXXX
Modem version: MOLY.LR12A.R3.TC5.PR2.SP.V2.P17
Starting alcatel helio frp, not disconnect phone untill done
[HELIO][frp]Format partition, please wait...
[0]FRP Reset Done.
[helio]Wait untill phone will start charging.
[0]All done.
01- Abrir el software: NCK AndroidMTK Module v2.7.7 o superior
02- En la pestaña Main mantener en Phone setting 0-By CPU y en modelo ELBRUS
03- Activar el checkbox Bypass security [flash mode]
04- Accionar el botón Read phone info in flash mode en el apartado FLASH MODE
05- Conectar el dispositivo apagado presionando VOL+&VOL- simultáneamente (Lectura del dispositivo)
Action : Boot Info.
Selected 0-By CPU:MT6737T
Exe version: NCKDongle AndroidMTK 2.7.7
Phone must be off with battery inside.
Battery must be charged
Please connect phone in brom mode
For some phones need to keep "VOL-" button untill inserting USB cable.
For some phones need to keep "VOL+ and VOL-" button untill inserting USB cable.
For some phones need to keep "VOL+" button untill inserting USB cable.
Detected(39) : MediaTek USB Port (COM39)
[39] \\?\usb#vid_0e8d&pid_0003#5&d27efef&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
CPU: MT6761 CPU code: 717 Target config: e7
***********************
Secure boot enabled: true
Need serial link authorization: true
Need download agent authorization: true
SWJTAG enabled: true
EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: false
Root cert required: false
Memory read authorization: true
Memory write authorization: true
Cmd 0xC8 blocked: true
***********************
Executing exploit, do not disconnect phone
Exploit has been executed successfully.
[3ac00]Dumping phone preloader.
Preloader: C:\ProgramData\Android_MTK_Backup_Folder\preloader_backup\preloader_tokyo_lite_tmo.bin
Waiting for handle to become active......
Reseived active handle repply from phone......
Booting phone
Detected(39) : MediaTek USB Port (COM39)
[39] \\?\usb#vid_0e8d&pid_0003#5&d27efef&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
Boot mode: Brom
Phone detected...Please wait
BBCHIP: 6761 200 ca01
Using Algo 1.
Helio MT6761 phone detected, swithing to helio api
Helio enabled DRAM in First Da: FALSE
Sending loader.....
BBCHIP MT6761
[1]Storage EMMC
Block size: 512
EMMC FW VERSION: 00:00:00:00:00:00:00:00
EMMC CID: 1501003458364B : 000000000000000000
EMMC UA SIZE: 0x747c00000
BOOT STYLE: EMMC BOOT
FULL LENGTH: 0x748800000 [29.133 GB]
Build Date: Tue Aug 31 15:20:37 CST 2021
Build ID: QP1A.190711.020
Version: 10
Mediatek Version Release: 10
Brand: T-Mobile
Device: Tokyo_Lite_4G
Manufacturer: TCL
Model: 5007Z
Model: 5007Z
Brand: T-Mobile
Device: Tokyo_Lite_4G
Brand: TCL
Region: US
This phone have FRP partition.
Phone have OTP partition.
MODEL FROM PROINFO: 5007Z-2ATBUS1
SECRO FROM PROINFO: 27H9UPI1DC00
OTP IMEI: XXXXXXXXXXXXXXX
Modem version: MOLY.LR12A.R3.TC5.PR2.SP.V2.P17
[helio]Wait untill phone will start charging.
[0]All done.
06- Ir a la pestaña FRP-PATTERN-PRIVACY y en FRP reset mode marcar Wipe userdata
07- Verificar que se encuentre marcado el checkbox Bypass security [flash mode]
08- Accionar el botón Reset FRP
09- Conectar el dispositivo apagado presionando los botones VOL+&VOL- simultáneamente
Exe version: NCKDongle AndroidMTK 2.7.7
Selected model: 0-By CPU ELBRUS
[auto]Action: Reset FRP
Phone must be off with battery inside.
Battery must be charged
Please connect phone in brom mode
For some phones need to keep "VOL-" button untill inserting USB cable.
For some phones need to keep "VOL+ and VOL-" button untill inserting USB cable.
For some phones need to keep "VOL+" button untill inserting USB cable.
Detected(39) : MediaTek USB Port (COM39)
[39] \\?\usb#vid_0e8d&pid_0003#5&d27efef&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
CPU: MT6761 CPU code: 717 Target config: e7
***********************
Secure boot enabled: true
Need serial link authorization: true
Need download agent authorization: true
SWJTAG enabled: true
EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: false
Root cert required: false
Memory read authorization: true
Memory write authorization: true
Cmd 0xC8 blocked: true
***********************
Executing exploit, do not disconnect phone
Exploit has been executed successfully.
[3ac00]Dumping phone preloader.
Preloader: C:\ProgramData\Android_MTK_Backup_Folder\preloader_backup\preloader_tokyo_lite_tmo.bin
Waiting for handle to become active......
Reseived active handle repply from phone......
Booting phone
Detected(39) : MediaTek USB Port (COM39)
[39] \\?\usb#vid_0e8d&pid_0003#5&d27efef&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
Boot mode: Brom
Phone detected...Please wait
BBCHIP: 6761 200 ca01
Using Algo 1.
Helio MT6761 phone detected, swithing to helio api
Helio enabled DRAM in First Da: FALSE
Sending loader.....
BBCHIP MT6761
[1]Storage EMMC
Block size: 512
EMMC FW VERSION: 00:00:00:00:00:00:00:00
EMMC CID: 1501003458364B : 000000000000000000
EMMC UA SIZE: 0x747c00000
BOOT STYLE: EMMC BOOT
FULL LENGTH: 0x748800000 [29.133 GB]
Resetting userdata.
Phone have OTP partition.
MODEL FROM PROINFO: 5007Z-2ATBUS1
SECRO FROM PROINFO: 27H9UPI1DC00
OTP IMEI: XXXXXXXXXXXXXXX
Modem version: MOLY.LR12A.R3.TC5.PR2.SP.V2.P17
Starting alcatel helio frp, not disconnect phone untill done
[HELIO][frp]Format partition, please wait...
[0]FRP Reset Done.
[helio]Wait untill phone will start charging.
[0]All done.
