[Tutorial] How to root the Doogee S88 Pro using OEM keys
[Tutorial] How to root the Doogee S88 Pro using OEM keys
24-07-2020, 03:39 PM
This guide will explain how to root the Doogee S88 Pro (Mediatek Helio P70 MT6771T Android 10) by signing a Magisk-patched boot using OEM keys. This technique only works when you have the OEM's keys used to sign the images. Luckily, we do for the Doogee S88 Pro.
Requirements
- Unlock the bootloader . The commands to use are
fastboot flashing unlock and fastboot flashing unlock_critical
Steps to root the Doogee S88 Pro
Follow the steps below to root the Doogee S88 Pro
- Download rsa2048_vbmeta.pem @ https://mega.nz/file/RmwTCIoa#UABBUOsERY...thIu9jtc0g
- Get a Linux based PC. Windows PC users should install python and openssl and ensure to add both to PATH or use LinuxLive USB Creator
- Get stock boot.img from firmware or WWR backup and patch the boot.img using Magisk manager (don't flash yet)
- Sign the patched boot.img (magisk_patched.img) using the command:
Code:python avbtool add_hash_footer --image magisk_patched.img --partition_name boot --partition_size 33554432 --key rsa2048_vbmeta.pem --algorithm SHA256_RSA2048 - Flash the signed patched boot using fastboot
Code:fastboot flash boot magisk_patched.img
Extra
You can generate a vbmeta.img for the Doogee S88 Pro from scratch by running this avb command
Code:
python avbtool make_vbmeta_image --key rsa2048_vbmeta.pem --algorithm SHA256_RSA2048 --flag 0 --chain_partition recovery:1:keys/key_recovery.bin --chain_partition vbmeta_system:2:keys/key_vbmeta_system.bin --chain_partition vbmeta_vendor:4:keys/key_vbmeta_vendor.bin --chain_partition boot:3:keys/key_boot.bin --padding_size 8388608 --include_descriptors_from_image phone/dtbo.img --output vbmeta.imgThis is only for those looking to tweak the vbmeta and isn't required to gain root.
Important Notice
- You're to extract the public keys from stock vbmeta and name them to match the command above
- dtbo.img used in the command is from the firmware or wwr dump
- Information like partition size, algorithm etc can be read from the corresponding stock image using this guide
![[Image: root-doogee-s88-pro.jpg]](https://www.hovatek.com/blog/bpyeki/uploads/2020/07/root-doogee-s88-pro.jpg)
This post was last modified: 25-01-2021, 08:10 AM by hovatek.
Learn MediaTek, Unisoc / Spreadtrum (SPD) and Qualcomm Software Repairs @ https://www.hovatek.com/training
Note!
We have a reply schedule for Forum Support. Please try Private Support if you can't wait.
21-09-2020, 09:05 AM
(20-09-2020, 07:50 PM)Maha63 Hi, i tried to root mine, and now it's stuck in a loop. The phone just bootloop and i can't access to recovery or connect to my pc with flashtool.... Can someone help me with this?
you need to power off the phone either by waiting for the battery to drain then charge OR disassemble then disconnect / reconnect the battery then you can flash the affected partitions using sp flash tool
if you still have problems then create a new thread for your device issue by clicking "Ask Question" at the top
Learn MediaTek, Unisoc / Spreadtrum (SPD) and Qualcomm Software Repairs @ https://www.hovatek.com/training
Note!
We have a reply schedule for Forum Support. Please try Private Support if you can't wait.
23-09-2020, 06:44 AM
(21-09-2020, 09:16 AM)Maha63 disassemble??? no,i won't do that, the phone is ip68 and brand new...
Lets hope you don't. Create a new thread for this issue as advised. SP flash tool should be able to detect the phone once it goes off
Learn MediaTek, Unisoc / Spreadtrum (SPD) and Qualcomm Software Repairs @ https://www.hovatek.com/training
Note!
We have a reply schedule for Forum Support. Please try Private Support if you can't wait.
26-10-2020, 06:40 AM
26-10-2020, 09:03 AM
(26-10-2020, 06:40 AM)JordanV-Qc hi i have the same probleme but need a signed img , seems like the one linked here doesnt work for me .
stick to your thread @ https://www.hovatek.com/forum/thread-37021.html and stop posting the same issue everywhere
Learn MediaTek, Unisoc / Spreadtrum (SPD) and Qualcomm Software Repairs @ https://www.hovatek.com/training
Note!
We have a reply schedule for Forum Support. Please try Private Support if you can't wait.
28-10-2020, 06:29 PM
After using magisk I've let the phone discharge. After recharging it, I've started android for about 5s until it turned off again, presumably from low battery charge. Now, however, the phone behaves as if it were at 0% battery. It doesn't start and the only feedback I have is the red LED turning on when I charge it. Any advice?
29-10-2020, 12:22 AM
(28-10-2020, 06:29 PM)LukyKuki2000 Hey, so I've followed the lazy / faint hearted steps and all went well up until the third step, which I might have misunderstood.
After using magisk I've let the phone discharge. After recharging it, I've started android for about 5s until it turned off again, presumably from low battery charge. Now, however, the phone behaves as if it were at 0% battery. It doesn't start and the only feedback I have is the red LED turning on when I charge it. Any advice?
create a new thread for your device issue by clicking "Ask Question" at the top
Learn MediaTek, Unisoc / Spreadtrum (SPD) and Qualcomm Software Repairs @ https://www.hovatek.com/training
Note!
We have a reply schedule for Forum Support. Please try Private Support if you can't wait.
Users browsing this thread:
1 Guest(s)
1 Guest(s)
Users browsing this thread:
1 Guest(s)
1 Guest(s)
