| Saleem Rashid | b2e8a51 | 2016-05-02 17:29:27 +0100 | [diff] [blame] | 1 | --- |
| 2 | layout: device |
| 3 | title: "Amazon Kindle Fire HD (3rd Generation)" |
| 4 | codename: soho |
| 5 | downloadfolder: soho |
| 6 | supportstatus: Current |
| 7 | maintainer: spudowiar |
| 8 | oem: Amazon |
| 9 | devicetree: https://github.com/TeamWin/android_device_amazon_soho |
| 10 | xdathread: "http://forum.xda-developers.com/kindle-fire-hd/7-development/unlock-kfsowi-bootloader-unlock-t3262770/" |
| 11 | --- |
| 12 | |
| 13 | {% include disclaimer.html %} |
| 14 | |
| 15 | {% include supportstatus.html %} |
| 16 | |
| 17 | {% include download.html %} |
| 18 | |
| 19 | {% include twrpinstall.html %} |
| 20 | |
| 21 | <html> |
| 22 | <div class='page-heading'>Fastboot Install Method (Root Required, No Fastboot Cable Required):</div> |
| 23 | <hr /> |
| 24 | <p class="text"><b>WARNING: this method isn't supported</b></p> |
| 25 | <p class="text">Follow the instructions for using a fastboot cable but after enabling ADB run:</p> |
| 26 | <p class="text">adb shell su -c "dd if=/dev/zero of=/dev/block/platform/omap_hsmmc.1/by-name/boot bs=1 count=1 seek=848"</p> |
| 27 | </html> |
| 28 | |
| 29 | <html> |
| 30 | <div class='page-heading' id='fastboot-install'>Fastboot Install Method (No Root Required, Fastboot Cable Required):</div> |
| 31 | <a id='fastboot'></a> |
| 32 | <hr /> |
| 33 | <p class="text"><a href="http://developer.android.com/sdk/index.html">You will need the platform-tools from the Android SDK on your computer.</a> Find the SDK Only section on the page linked and install the SDK and download only the platform-tools to get adb and fastboot binaries.</p> |
| 34 | <p class="text">Windows users will need proper drivers installed on your computer. You can try the <a href="http://www.xda-developers.com/universal-naked-driver-solves-your-adb-driver-problems-on-windows/">Naked ADB drivers</a> or the <a href="http://www.koushikdutta.com/post/universal-adb-driver">Universal ADB drivers</a> if you don't already have a working driver installed</p> |
| 35 | <p class="text">On your device, go into Settings -> Device Options and find the Serial Number and tap on it 7 times to enable developer settings. Go into Developer Options and enable ADB. From your computer, open a command prompt and type:</p> |
| 36 | <p class="text">adb reboot bootloader</p> |
| 37 | <p class="text">Download <a href="http://www.amazon.co.uk/gp/help/customer/display.html?nodeId=201357170">the latest software update</a> and rename it to 'update.bin' in the same folder as your adb and fastboot binaries</p> |
| 38 | <p class="text">You should now be in fastboot mode. Download the correct exploit file and unzip the file into the same folder as your adb and fastboot binaries. Then run:</p> |
| 39 | <pre class="text"> |
| 40 | fastboot -i 0x1949 oem format |
| 41 | fastboot -i 0x1949 flash boot hijack.img |
| 42 | fastboot -i 0x1949 flash system system.img |
| 43 | fastboot -i 0x1949 continue |
| 44 | </pre> |
| 45 | <p class="text">You should now see an Amazon logo with an orange underline. Now run:</p> |
| 46 | <pre class="text"> |
| 47 | fastboot -i 0x1949 flash boot recovery.img |
| 48 | fastboot -i 0x1949 oem format |
| 49 | fastboot -i 0x1949 continue |
| 50 | </pre> |
| 51 | <p class="text">You should now see TWRP load up. Run:</p> |
| 52 | <pre class="text"> |
| 53 | adb shell twrp wipe cache |
| 54 | adb shell twrp wipe dalvik |
| 55 | adb shell twrp sideload |
| 56 | </pre> |
| 57 | <p class="text">You should now be in sideload mode. Now run:</p> |
| 58 | <pre class="text"> |
| 59 | adb sideload update.bin |
| 60 | adb reboot |
| 61 | adb wait-for-device |
| 62 | adb shell su -c 'mount -o remount,rw /system && rm /system/etc/install-recovery.sh && mount -o remount,ro /system' |
| 63 | adb push recovery.img /sdcard/recovery.img |
| bigbiff | 067f492 | 2020-01-08 19:03:30 -0500 | [diff] [blame] | 64 | adb shell su -c "dd if=/sdcard/recovery.img of=/dev/block/platform/omap\_hsmmc.1/by-name/recovery" |
| Saleem Rashid | b2e8a51 | 2016-05-02 17:29:27 +0100 | [diff] [blame] | 65 | adb push exploit.img /sdcard/exploit.img |
| bigbiff | 067f492 | 2020-01-08 19:03:30 -0500 | [diff] [blame] | 66 | adb shell su -c "dd if=/sdcard/exploit.img of=/dev/block/platform/omap\_hsmmc.1/by-name/exploit" |
| Saleem Rashid | b2e8a51 | 2016-05-02 17:29:27 +0100 | [diff] [blame] | 67 | adb shell rm /sdcard/recovery.img /sdcard/exploit.img |
| 68 | </pre> |
| 69 | <p class="text">TWRP can now be accessed holding the volume down button when powering on the device</p> |
| 70 | </html> |