Skip to content

Latest commit

 

History

History
183 lines (174 loc) · 9.21 KB

X96Mini_MXQ_S905W.md

File metadata and controls

183 lines (174 loc) · 9.21 KB
Raw

X96 Mini S905W / MXQ S905W Configuration

This is for X96 Mini / MXQ S905W Chip Configuration. ROM flashed in this instruction is Android 9, 32bit mode and wifi available.

Requirements

Steps

  1. Flash rom using USB BURNING TOOL (Amlogic_USB_Burning_Tool_v2.2.4)
    • X96 mini : Most left USB port (white USB port)
    • MXQ : Most right USB port
    1. Import ROM image downloaded.
    2. Click Start before connecting USB between PC to Device
    3. I recommand everything (Keyboard, mouse and power cable) is disconnected from device before start. Push button inside AV hole(One type of MXQ has R hole between USB). You need very small screw driver to push the button inside hole. While pushing the button, connect USB to device. Then burning tool detects the device and starts flashing. You can remove screw driver once flashing started and progress bar is like 4%.
    4. Once successfully flashed. Push stop button and now you can disconnect USB.

  1. Connect Keyboard, Mouse and Display then plugin power cable.
  2. Connect wifi or ethernet and remember IP address.
  3. Install Magisk 25.2 by 
    adb connect 192.168.1.201

    adb -s 192.168.1.201 install Magisk-v25.2.apk
  4. adb into the ATV and 
    adb -s 192.168.1.201 shell
    then 
    su
    When you type su, grant superuser will pop up on ATV display and need to push grant.
  5. Pull boot image 
    dd if=/dev/block/boot of=/sdcard/boot.img
  6. Open Magisk app. Grant superuser if permission pup up when open Magisk app.
  7. Press the Install button in the Magisk App.
  8. Choose "Select and Patch a File" in method, and select the boot.img in /sdcard/ directory.
  9. Press Let's go, then you will see
- Device platform: armeabi-v7a
- Installing: 25.2 (25200)
- Copying image to cache
- Unpacking boot image
- Checking ramdisk status
- Stock boot image detected
- Patching ramdisk
- Repacking boot image

****************************
Output file is written to
/storage/emulated/0/Download/magisk_patched-25200_xxxxx.img
****************************
- All done!
  1. Go to Linux terminal. Copy patched image magisk_patched-25200_xxxxx.img in /sdcard/Download/ 
    adb -s 192.168.1.201 pull /sdcard/Download/magisk_patched-25200_xxxxx.img
    you can use this patched img for device with same model and no need to patch again
  2. Push patched.img to /sdcard/ 
    adb -s 192.168.86.201 push magisk_patched-25200_xxxxx.img /sdcard/
  3. adb into the device 
    adb -s 192.168.1.201 shell

    dd if=/sdcard/magisk_patched-25200_xxxxx.img of=/dev/block/boot
  4. Reboot
  5. Open Magisk app. Then you should get Abnormal state warning. If you don't get abnormal warning, try 13 again and reboot and open Magisk app again to make sure you get Abnormal state warning. If still you don't get the warning even retry 6-13.
  6. If you get warning. adb into the device remove /system/xbin/su
adb -s 192.168.1.201 shell
su
mount -o rw,remount /
rm /system/xbin/su
reboot
  1. Open Magisk app and now you should not get abnormal state warning.
  2. Open Magisk App. Go to settings (Gear Icon). Enable Zygisk and Configure DenyList to add Google Play Service (Need to Show system apps by clicking top right ... )
  3. reboot
  4. Install magisk safetynet-fix module
user@linuxpc:~/Atlas$ adb connect 192.168.1.201
connected to 192.168.1.201:5555
user@linuxpc:~/Atlas$ adb -s 192.168.1.201 push safetynet-fix-v2.4.0.zip /data/local/tmp
safetynet-fix-v2.3.1.zip: 1 file pushed. 0.2 MB/s (95201 bytes in 0.586s)
user@linuxpc:~/Atlas$ adb -s 192.168.1.201 shell
atvX:/ $ su
atvX:/ # cd /data/local/tmp/
atvX:/data/local/tmp # magisk --install-module safetynet-fix-v2.4.0.zip
- Device is system-as-root
*************************
 Universal SafetyNet Fix
 by kdrag0n
*************************
*******************
 Powered by Magisk
*******************
- Extracting module files
- Done
atvX:/data/local/tmp #
  1. Install pokemongo, Atlas, yasnac(optional) app and push atlas_config.json.
user@linuxpc:~/Atlas$ adb -s 192.168.1.201 install pokemongo_0.283.1.apk
Success
user@linuxpc:~/Atlas$ adb -s 192.168.1.201 install PokemodAtlas-Public-v22071801.apk
Success
user@linuxpc:~/Atlas$ adb -s 192.168.1.201 install yasnac-v1.1.5.r65.15110ef310-release.apk
Success
user@linuxpc:~/Atlas$ nano atlas_config.json
user@linuxpc:~/Atlas$ adb -s 192.168.1.201 push atlas_config.json /data/local/tmp
atlas_config.json: 1 file pushed. 0.0 MB/s (182 bytes in 0.014s)
user@linuxpc:~/Atlas$
  1. Configure Denylist and add pokemongo and yasnac and Atlas(optional).
  2. reboot
  3. Open yasnac and check if safetynet pass or not. It should show Basic/CTS profile match both Pass.
  4. Start Atlas and check name/endpoint and start.

Done!

Update (1/16/2024)

It requires to pass PlayIntegrity for BASIC and DEVICE now. You need to update play store and valid fingerprint to pass DEVICE integrity.

  1. Get play store from apkmirror.com. I use Google Play Store (Android TV) 38.7.30 universal.
  2. Rename downloaded play store apk to Tubesky.apk
  3. Copy to ATV and replace with current Tubesky.apk. Delete Tubesky.apk in /system/priv-app/Tubesky/ and copy from /data/local/tmp/Tubesky.apk. 
    adb -s 192.168.1.129 push Tubesky.apk /data/local/tmp
adb -s 192.168.1.129 shell
su
mount -o rw,remount /
rm /system/priv-app/Tubesky/Tubesky.apk
cp Tubesky.apk /system/priv-app/Tubesky.apk
  4. Download PlayIntegrityFix.zip or PlayIntegrityFork-v5.zip and install. Both modules won't provide valid fingerprint out of box as of 1/16 and you need to find valid fingerprint yourself. 
    adb -s 192.168.1.129 push PlayIntegrityFix.zip /data/local/tmp
adb -s 192.168.1.129 shell
su
magisk --install-module PlayIntegrityFix.zip
  5. Reboot the ATV
  6. Install Play Integrity Checker like Play Integrity API Checker or Simple Play Integrity Checker but these could be throtted due to too many API call.
  7. Find valid fingerprint
    • Option 1: Use Play Integrity Fix Props Collection to get a valid fingerprint from collection of fingerprints(These files aren't tested - They're just a sample of device profiles available online). You might be able to find a valid fingerprint if you are luckey. Even you could find good fingerprint, they won't last permanently since many people will use the script and use the same valid fingerprints. To use PIFS correctly, I needed to use older commit to properly download profile/fingerprint collection from GitHub.
    adb -s 192.168.1.100 shell
cd /data/local/tmp
su
/data/adb/magisk/busybox wget -O pickaprint.sh "https://raw.githubusercontent.com/TheFreeman193/PIFS/3bea229861257ded018769b48b64adcce0d4150e/pickaprint.sh"
chmod 755 ./pickaprint.sh
./pickaprint.sh
    It will download json files and randomly select a fingerprint from collections and ask to check PlayIntegrity. Run PlayIntegrity checker to get result. If it passes both BASIC and DEVICE integrity type y, if it passes only BASIC, type n and keep going until it passes DEVICE integrity. If you are luckey, you will find a vlid one very quick. Good luck!

Warnings

If you want to re-flash after installing this rom, then be aware that the usb burn tool might not recognize the device automatically. You need to do adb reboot update in order to flash.

by plinytheelder

References/Credits