Unlock Firestick Bootloader

Download as docx, pdf, or txt
Download as docx, pdf, or txt
You are on page 1of 2

DISCLAIMER: BE WARNED THAT YOU HAVE TO OPEN YOUR FIRE STICK AND

IT WILL VOID YOUR WARRANTY, THIS IS NOT FOR THE FAINT OF HEART AND
NEITHER THE DEVELOPERS OR MYSELF ARE RESPONSIBLE IF YOU BRICK
YOUR DEVICE OR VOID YOUR WARRANTY

Ok, now let's begin:

UPDATE: Per Sus_i, this makes perfect sense:

"Since the exploit can't be patched, it's in my opinion the best to do the setup at the beginning, pair the
remote, then update to the latest over fireOS. That way you avoid a pending update nag setup screen after
doing the exploit. Then enable ADB and unknown sources. After kamakiri I would flash only magisk.zip +
sideload the manager app with adb... and avoid any prerooted rom flashing until there is an update to a
somewhat higher version (and the current 6.2.6.8v1 has that contact manufacturer error screen)."

First very important, I wish I would have known this before but make sure you have a Laptop and a
Monitor to Connect the FS to, so basically the USB Power cable from the FS connect it to your laptop and
connect the HDMI portion to a monitor or TV
I also strongly recommend to have your FS deregistered before continuing as this will prevent your FS
from automatically updating after rooting

In order to unlock the bootloader follow "THIS GUIDE"

I made a quick video on how to open your device and how to Short it using Aluminum Foil:
https://www.youtube.com/watch?v=h4I6ifBLWJ4

Process is pretty self explanitory, make a USB ISO from the image provided on that thread, boot into it and
open terminal, make sure you put the file he provides on a RW location, my mistake was that I put it inside
a RO folder and it would not load the script, so I mounted the kamakiri-mantis-v1.2.zip unto the /mnt
directory of the usb and I was able to run the script successfully, make sure to run the commands quickly
as the first time that I it finished the ./bootrom-step.sh script and I left it sitting for 10 minutes to grab a
bite, I couldn't run the second script and had to start all over. After the second ./fastboot-step.sh script, your
device will be on the TWRP recovery, now on the same terminal page or a new one enter these commands:

Code:

adb devices

adb shell

exit

You should see your device's serial number from the first command with "device" to the right of it and the
second command will basically put you inside the device's directory assuming you have established a
successful connection. The last command just put you back to your starting point, now open the firefox
browser on the FireOS USB and navigate to the URL below

Download the Pre-Rooted Image from "HERE" This image contains Magisk already so you don't have to
worry about installing it separately, the image is larger than the available partition on this USB so this is a
good time to either get a second USB or if you want to download the file to your local hdd and pull them
from there its up to you, then run these commands:

Code:

adb push <your download location you decided earlier here>/mantis-6.2.6.8-rooted_r1.zip / sdcard/ adb
reboot recovery adb shell twrp install /sdcard/mantis-6.2.6.8-rooted_r1.zip twrp wipe cache twrp wipe
dalvik reboot -p

This basically installs the pre-rooted image to your device, after the last command, you should see on your
monitor the Fire Stick Reboot and boot to the Amazon GUI Splash Screen, now very important if you
followed my previous instructions of deregistering your device before performing all these steps, it should
bring you up to the Amazon Initial Setup Screen, now what you want to do is do the following commands
before continuing on terminal:

Code:

adb devices *you should see something your screen where the FS is connected to, click accept or enter
can't remember*

Now it should show you in terminal your serial number and "device" next to it, meaning you can run adb
commands in which you will run the following to disable OTA updates:

Code:

adb shell su *after this command you should see something again on your screen, click the check the box
"Always Remember" and click ok" * if "su" was successful, you should see something like this: mantis:/ $
su mantis:/ # *the hash means you're running as root, if you don't have a "#" you are not running as root"
Than continue with these commands and should get the following results: pm disable
com.amazon.tv.forcedotaupdater.v2 ***Package com.amazon.tv.forcedotaupdater.v2 new state:
disabled*** pm disable com.amazon.device.software.ota ***Package om.amazon.device.software.ota new
state: disabled*** pm disable com.amazon.device.software.ota.override ***Package
com.amazon.device.software.ota.override new state: disabled***

After running all these commands exit adb and continue with the normal Amazon Setup including adding
your amazon account. After you get to the screen where you can see all the apps, open a new web page
browser in firefox and download "This Add-On" , this one is less than 200MB so it should fit on the Fire
OS USB, so I would download it and copy it to /mnt for ease of access, go back to terminal and type this:

Code:

adb devices adb push <your download location you decided earlier here>/AFTV-MM-1.7-6.2.6.8.zip/
sdcard/ adb reboot recovery *it will boot into TWRP* adb shell twrp install /sdcard/AFTV-MM-1.7-
6.2.6.8.zip twrp wipe cache twrp wipe dalvik reboot -p

Your device will reboot and if everything went smoothly, you should have a rooted amazon fire stick 4k,

Congrats

You might also like