تجارب الاعضاء فى تفليش وعمل ريبير وفك الشفرة على NckBox

[فيصل16]

Condor Allure M3 Lite Reset FRP


​

[Reset FRP]
Waiting for device...Found
Port Info    :    MediaTek USB Port_V1633 (COM46) [\\?\usb#vid_0e8d&pid_0003#5&21e739f&0&3#{86e0d1e0-8089-11d0-9ce4-08003e301f73}]
     :    MediaTek Inc., 3.0.1504.0 [usb2ser.sys]
     :    BROM PORT
Hw ID    :    MT6765 [0766] Helio P35/G35
Details    :    8A00,CA00,0000
Sec. Cfg    :    [SBA Active] [SLA Inactive] [DAA Active]
MEID    :    767256725AE2F5C806BB26BE0E6A192A
SoC ID[0]    :    EFF20E08AAF1051AE246A877B0A772BC
SoC ID[1]    :    97EA2B3CABE3E5B92A0E73EE5480368A
Executing Exploit...Done
Reading Preloader...OK
Saved as    :    preloader_k62v1_64_bsp.bin
Loading EMI Config from Preloader...OK
Sec. Cfg    :    [SBA Inactive] [SLA Inactive] [DAA Inactive]
Sending DA1...OK
Running DA1...OK
Waiting DA SYNC Signal...OK
Setting Checksum Level...Done [Storage]
Connection    :    brom
Speed    :    HIGH-SPEED
Reading EMI Configuration...OK
EMMC CID    :    150100474436424D4201F016CE4D2519
Sending EMI Config...OK
Sending 2nd DA...OK
Activating DA Extension...OK
Int. RAM    :    0x0000000000038000 [224.00 KB]
Ext. RAM    :    0x00000000C0000000 [3.00 GB]
Flash ID    :    GD6BMB
CID    :    150100474436424D4201F016CE4D2519
BOOT1    :    0x0000000000400000 [4.00 MB]
BOOT2    :    0x0000000000400000 [4.00 MB]
RPMB    :    0x0000000000400000 [4.00 MB]
USERAREA    :    0x0000000747C00000 [29.12 GB]
Reading Parititon Info...OK
Brand    :    Condor
Manufacturer    :    SPA Condor Electronics
Model    :    Allure M3 Lite
Device    :    Allure_M3_Lite
And. Ver.    :    8.1.0
Prod. Name    :    Allure_M3_Lite
Build Dt.    :    Wed Apr 17 18:41:20 CST 2019
Display ID    :    Allure_M3_Lite
Ver. Inc.    :    1555497684
Locale    :    en-US
Patch    :    2019-04-05
Reset FRP Data...Done
Process finished
[NCK MTK Exploit Tool v1.0]
LOG TXT    :    20240225_155611.txt

 

[فيصل16]

Xiaomi Redmi A2+ Reset FRP


​

[Reset FRP]
Waiting for device...Found
Port Info    :    MediaTek USB Port_V1633 (COM112) [\\?\usb#vid_0e8d&pid_0003#5&21e739f&0&4#{86e0d1e0-8089-11d0-9ce4-08003e301f73}]
     :    MediaTek Inc., 3.0.1504.0 [usb2ser.sys]
     :    BROM PORT
Hw ID    :    MT6765 [0766] Helio P35/G35
Details    :    8A00,CA00,0000
Sec. Cfg    :    [SBA Active] [SLA Active] [DAA Active]
MEID    :    BA69F8B92985798AE266298E286D9377
SoC ID[0]    :    EC599B2A9FC36C0EDCA5C9FF52B50BF2
SoC ID[1]    :    BB259D51433922BC0A334404CCAAFDEA
Executing Exploit...Done
Reading Preloader...OK
Saved as    :    preloader_water.bin
Loading EMI Config from Preloader...OK
Sec. Cfg    :    [SBA Inactive] [SLA Inactive] [DAA Inactive]
Sending DA1...OK
Running DA1...OK
Waiting DA SYNC Signal...OK
Setting Checksum Level...Done [Storage]
Connection    :    brom
Speed    :    HIGH-SPEED
Reading EMI Configuration...OK
EMMC CID    :    9B0100593250303332004AFB224F9923
Sending EMI Config...OK
Sending 2nd DA...OK
Activating DA Extension...OK
Int. RAM    :    0x0000000000038000 [224.00 KB]
Ext. RAM    :    0x0000000080000000 [2.00 GB]
Flash ID    :    Y2P032
CID    :    9B0100593250303332004AFB224F9923
BOOT1    :    0x0000000000400000 [4.00 MB]
BOOT2    :    0x0000000000400000 [4.00 MB]
RPMB    :    0x0000000001000000 [16.00 MB]
USERAREA    :    0x0000000747C00000 [29.12 GB]
Reading Parititon Info...OK
Reset FRP Data...Done
Process finished
[NCK MTK Exploit Tool v1.0]
LOG TXT    :    20240227_174354.txt

 

[فيصل16]

Oppo A94 (cph2203) Reset FRP

​

[Reset FRP]
Waiting for device...Found
Port Info    :    MediaTek USB Port_V1633 (COM46) [\\?\usb#vid_0e8d&pid_0003#5&21e739f&0&3#{86e0d1e0-8089-11d0-9ce4-08003e301f73}]
     :    MediaTek Inc., 3.0.1504.0 [usb2ser.sys]
     :    BROM PORT
Hw ID    :    MT6779 [0725] Helio P90 k79v1
Details    :    8A00,CA01,0000
Sec. Cfg    :    [SBA Active] [SLA Inactive] [DAA Active]
MEID    :    09A4A795C4574229B834422C386F1B20
SoC ID[0]    :    13EFBBB00EE529895D2C63496217EA58
SoC ID[1]    :    BA33B7C73A6D927BED3A7E43E61B28B0
Executing Exploit...Done
Reading Preloader...OK
Saved as    :    preloader_k79v1_64.bin
Loading EMI Config from Preloader...OK
Sec. Cfg    :    [SBA Inactive] [SLA Inactive] [DAA Inactive]
Sending DA1...OK
Running DA1...OK
Waiting DA SYNC Signal...OK
Setting Checksum Level...Done [Storage]
Connection    :    brom
Speed    :    HIGH-SPEED
Reading EMI Configuration...OK
UFS CID    :    CE014B4D3856383030314A4D2D423831
Sending EMI Config...OK
Sending 2nd DA...OK
Activating DA Extension...OK
Int. RAM    :    0x0000000000080000 [512.00 KB]
Ext. RAM    :    0x0000000200000000 [8.00 GB]
Flash ID    :    KM8V8001JM-B81
CID    :    CE014B4D3856383030314A4D2D423831
BOOT1    :    0x0000000000400000 [4.00 MB]
BOOT2    :    0x0000000000400000 [4.00 MB]
RPMB    :    0x0000000000400000 [4.00 MB]
USERAREA    :    0x0000001DCB000000 [119.17 GB]
Reading Parititon Info...OK
Reset FRP Data...Done
Process finished
[NCK MTK Exploit Tool v1.0]
LOG TXT    :    20240302_154246.txt

 

[فيصل16]

Realme C11 (2021) Wipe Userdata(misc) & Erase FRP




​

First 16 bytes from public rsa key.
D1F7C96DA0D8B4E54A27307039E61823
***************
Phone Storage: EMMC
SELECTED: RMX3231
ACTION: Wipe Userdata(misc)
Loader format:NEW
Start Detect phone.
Phone must be off(you can service this phone without battery also).
Long press "VOL -"+ "VOL +" key while inserting usb cable.
Keep key untill boot complete.
Detected: SPRD U2S Diag (COM133)
Sending loader, keep boot key untill loader start.
Loader send OK
Changing bautrate OK.
Send Second Loader.
Length RSA: 256
RET RSA: 256
Rsa autorization: Tecno S6301 - success
New flash metod detected.
FileSystem: EMMC
Read partition info is supported by loader.
Build product name: RMX3231
Build description: RMX3231-user 11 RP1A.201005.001 464 release-keys
Build Id: RP1A.201005.001
Android Release: 11
Android Version: RMX3231_11.A.121
Security patch: 2023-12-05
[misc]Formating userdata, wait...
[can take 0-10 sec]Wait untill phone restart.
Exe version: Unisoc Module 2.2.8
Log saved:
C:\nckdongle\spreadtrum_module\spreadtrum_module_backup_folder\Saved_Logs\RMX3231_11_A_121_format_userdata_misc.txt
Total Time: 00:00:22
Done.

First 16 bytes from public rsa key.
D1F7C96DA0D8B4E54A27307039E61823
***************
Phone Storage: EMMC
SELECTED: RMX3231
ACTION: Erase FRP
Loader format:NEW
Start Detect phone.
Phone must be off(you can service this phone without battery also).
Long press "VOL -"+ "VOL +" key while inserting usb cable.
Keep key untill boot complete.
Detected: SPRD U2S Diag (COM133)
Sending loader, keep boot key untill loader start.
Loader send OK
Changing bautrate OK.
Send Second Loader.
Length RSA: 256
RET RSA: 256
Rsa autorization: Tecno S6301 - success
New flash metod detected.
FileSystem: EMMC
Read partition info is supported by loader.
***************
[S]Manufacturer: realme
[S]Brand: realme
[S]Device: RMX3231
[S]Model: RMX3231
Build ID: RP1A.201005.001
CPU arhitecture: armeabi-v7a
Build product name: RMX3231
Build description: RMX3231-user 11 RP1A.201005.001 464 release-keys
Build Id: RP1A.201005.001
Android Release: 11
Android Version: RMX3231_11.A.121
Security patch: 2023-12-05
CPU NAME: SC9863A
Removing frp, wait...
[1]FRP: persist
Format OK.
[can take 0-10 sec]Wait untill phone restart.
Exe version: Unisoc Module 2.2.8
Log saved:
C:\nckdongle\spreadtrum_module\spreadtrum_module_backup_folder\Saved_Logs\realme_RMX3231_11_A_121_erase_frp.txt
Total Time: 00:00:23
Done.

 

[فيصل16]

Realme C31 (RMX3501) Wipe Userdata(misc) + Erase FRP ​

​

SELECTED: RMX3501
ACTION: Wipe Userdata(misc)
Start Detect phone...
Phone must be off with battery inside.
Long press "VOL -" key and insert usb cable.
For some phones need to
Long press "VOL -"+ "VOL +" key and insert usb cable.
Detected: SPRD U2S Diag (COM133)
Sending payload, keep boot key untill loader start.
Exploiting phone.....
Sending preloader 1
Sending preloader 2
Sending FDL 1.....
Sending FDL 2.....
New flash metod detected.
[5f] 741888 [5e] 2110904
UID: M1R812_4_18_4
FileSystem: UFS
Read partition info is supported by loader.
Build product name: ums9230_nico
Build description: ums9230_nico_Natv-user 11 RP1A.201005.001 699 release-keys
Build Id: RP1A.201005.001
Android Release: 11
Android Version: RMX3501EU_11_A.26
Security patch: 2022-05-05
[misc]Formating userdata, wait...
[can take 0-10 sec]Wait untill phone restart.
Exe version: Unisoc Module 2.2.9
Log saved:
C:\nckdongle\spreadtrum_module\spreadtrum_module_backup_folder\Saved_Logs\RMX3501EU_11_A_26_format_userdata_misc.txt
Total Time: 00:00:34
Done.

SELECTED: RMX3501
ACTION: Erase FRP
Start Detect phone...
Phone must be off with battery inside.
Long press "VOL -" key and insert usb cable.
For some phones need to
Long press "VOL -"+ "VOL +" key and insert usb cable.
Detected: SPRD U2S Diag (COM133)
Sending payload, keep boot key untill loader start.
Exploiting phone.....
Sending preloader 1
Sending preloader 2
Sending FDL 1.....
Sending FDL 2.....
New flash metod detected.
[5f] 741888 [5e] 2110904
UID: M1R812_4_18_4
FileSystem: UFS
Read partition info is supported by loader.
***************
[S]Manufacturer: realme
[S]Brand: realme
[S]Device: ums9230_nico
[S]Model: RMX3501
Build ID: RP1A.201005.001
CPU arhitecture: arm64-v8a
Build product name: ums9230_nico
Build description: ums9230_nico_Natv-user 11 RP1A.201005.001 699 release-keys
Build Id: RP1A.201005.001
Android Release: 11
Android Version: RMX3501EU_11_A.26
Security patch: 2022-05-05
CPU NAME: T612
Removing frp, wait...
[1]FRP: persist
Done.
[can take 0-10 sec]Wait untill phone restart.
Exe version: Unisoc Module 2.2.9
Log saved:
C:\nckdongle\spreadtrum_module\spreadtrum_module_backup_folder\Saved_Logs\realme_RMX3501EU_11_A_26_erase_frp.txt
Total Time: 00:00:37
Done.

 

[فيصل16]

itel A70 (A665L) Erase Userdata + Erase FRP ​

​

SELECTED: A70(A665L)
ACTION: Erase Userdata
If phone will stuck on logo, perform factory reset from diag mode tab.
Start Detect phone.
Phone must be off(you can service this phone without battery also).
Long press "VOL -"+ "VOL +" key while inserting usb cable.
Keep key untill boot complete.
Detected: SPRD U2S Diag (COM133)
Sending payload, keep boot key untill loader start.
Exploiting phone.....
Sending preloader 1
Sending preloader 2
Sending FDL 1.....
Sending FDL 2.....
New flash metod detected.
[5f] 121C4B03 [5e] 7434C8
UID: M3C893_17_22_3
FileSystem: EMMC
Read partition info is supported by loader.
[misc]Format OK.
[metadata]Format OK.
[userdata]Format OK.
[cache]Format OK.
[can take 0-10 sec]Wait untill phone restart.
Exe version: Unisoc Module 2.2.9
Log saved:
C:\nckdongle\spreadtrum_module\spreadtrum_module_backup_folder\Saved_Logs\_format_userdata_emmc.txt
Total Time: 00:00:31

SELECTED: A70(A665L)
ACTION: Erase FRP
Start Detect phone.
Phone must be off(you can service this phone without battery also).
Long press "VOL -"+ "VOL +" key while inserting usb cable.
Keep key untill boot complete.
Detected: SPRD U2S Diag (COM133)
Sending payload, keep boot key untill loader start.
Exploiting phone.....
Sending preloader 1
Sending preloader 2
Sending FDL 1.....
Sending FDL 2.....
New flash metod detected.
[5f] 121C4B03 [5e] 7434C8
UID: M3C893_17_22_3
FileSystem: EMMC
Read partition info is supported by loader.
CPU NAME: SC9863A
Removing frp, wait...
[1]FRP: persist
Done.
[can take 0-10 sec]Wait untill phone restart.
Exe version: Unisoc Module 2.2.9
Log saved:
C:\nckdongle\spreadtrum_module\spreadtrum_module_backup_folder\Saved_Logs\_erase_frp_10.txt
Total Time: 00:00:37
Done.

 

[فيصل16]

Tecno Spark 6 (KE7) [Userdata + FRP] Reset​

​

[Userdata + FRP]
Waiting for device...Found
Port Info    :    MediaTek USB Port_V1633 (COM137) [\\?\usb#vid_0e8d&pid_0003#5&21e739f&0&3#{86e0d1e0-8089-11d0-9ce4-08003e301f73}]
     :    MediaTek Inc., 3.0.1504.0 [usb2ser.sys]
     :    BROM PORT
Hw ID    :    MT6768 [0707] Helio P65/G85 k68v1
Details    :    8A00,CA00,0000
Sec. Cfg    :    [SBA Active] [SLA Inactive] [DAA Active]
MEID    :    F6A26CF586C960DA3E717175B09C2F08
SoC ID[0]    :    150F9EB6FA4D71A4A31520F7637F66AC
SoC ID[1]    :    6921FF63B0639BDA027663D49C92F3BE
Executing Exploit...Done
Reading Preloader...OK
Saved as    :    preloader_ke7_h693.bin
Loading EMI Config from Preloader...OK
Sec. Cfg    :    [SBA Inactive] [SLA Inactive] [DAA Inactive]
Sending DA1...OK
Running DA1...OK
Waiting DA SYNC Signal...OK
Setting Checksum Level...Done [Storage]
Connection    :    brom
Speed    :    HIGH-SPEED
Reading EMI Configuration...OK
EMMC CID    :    90014A684339615033011069E61D8747
Sending EMI Config...OK
Sending 2nd DA...OK
Activating DA Extension...OK
Int. RAM    :    0x0000000000070000 [448.00 KB]
Ext. RAM    :    0x0000000100000000 [4.00 GB]
Flash ID    :    hC9aP3
CID    :    90014A684339615033011069E61D8747
BOOT1    :    0x0000000000400000 [4.00 MB]
BOOT2    :    0x0000000000400000 [4.00 MB]
RPMB    :    0x0000000001000000 [16.00 MB]
USERAREA    :    0x0000000E8F800000 [58.24 GB]
Reading Parititon Info...OK
Manufacturer    :    TECNO MOBILE LIMITED
Vendor Model    :    TECNO KE7
Platform    :    mt6768
Ven. Date    :    Tue Aug 31 16:47:40 CST 2021
Ver. Inc.    :    210831V375
Formating Userdata...Done
Reset FRP Data...Done
Process finished
[NCK MTK Exploit Tool v1.0]
LOG TXT    :    20240428_112838.txt

 

[فيصل16]

Xiaomi Redmi 9C NFC [Reset FRP]​

​

[Reset FRP]
Waiting for device...Found
Port Info    :    MediaTek USB Port_V1633 (COM137) [\\?\usb#vid_0e8d&pid_0003#5&21e739f&0&3#{86e0d1e0-8089-11d0-9ce4-08003e301f73}]
     :    MediaTek Inc., 3.0.1504.0 [usb2ser.sys]
     :    BROM PORT
Hw ID    :    MT6765 [0766] Helio P35/G35
Details    :    8A00,CA00,0000
Sec. Cfg    :    [SBA Active] [SLA Active] [DAA Active]
MEID    :    300359A14A1FE71405D1548DB1C7A156
SoC ID[0]    :    CF2B9BC32CB37C29B8F7F2F07B14C0E1
SoC ID[1]    :    227751464A32DD9B588272BDB16EE6CD
Executing Exploit...Done
Reading Preloader...OK
Saved as    :    preloader_k65v1_64_bsp.bin
Loading EMI Config from Preloader...OK
Sec. Cfg    :    [SBA Inactive] [SLA Inactive] [DAA Inactive]
Sending DA1...OK
Running DA1...OK
Waiting DA SYNC Signal...OK
Setting Checksum Level...Done [Storage]
Connection    :    brom
Speed    :    HIGH-SPEED
Reading EMI Configuration...OK
EMMC CID    :    150100434A544434520414464CB2C703
Sending EMI Config...OK
Sending 2nd DA...OK
Activating DA Extension...OK
Int. RAM    :    0x0000000000038000 [224.00 KB]
Ext. RAM    :    0x00000000C0000000 [3.00 GB]
Flash ID    :    CJTD4R
CID    :    150100434A544434520414464CB2C703
BOOT1    :    0x0000000000400000 [4.00 MB]
BOOT2    :    0x0000000000400000 [4.00 MB]
RPMB    :    0x0000000000400000 [4.00 MB]
USERAREA    :    0x0000000E8F800000 [58.24 GB]
Reading Parititon Info...OK
Manufacturer    :    Xiaomi
And. Ver.    :    10
Build Dt.    :    Tue Aug 16 11:39:38 CST 2022
Display ID    :    QP1A.190711.020
Ver. Inc.    :    V12.0.14.0.QCREUXM
Locale    :    en-GB
Mod. Dev.    :    angelica_eea_global
Patch    :    2022-07-01
Reset FRP Data...Done
Process finished
[NCK MTK Exploit Tool v1.0]
LOG TXT    :    20240429_123602.txt

 

[فيصل16]

Oppo A5s (CPH1909) [Userdata + FRP] Reset​

​

[Userdata + FRP]
Waiting for device...Found
Port Info    :    MediaTek USB Port_V1633 (COM137) [\\?\usb#vid_0e8d&pid_0003#5&21e739f&0&3#{86e0d1e0-8089-11d0-9ce4-08003e301f73}]
     :    MediaTek Inc., 3.0.1504.0 [usb2ser.sys]
     :    BROM PORT
Hw ID    :    MT6765 [0766] Helio P35/G35
Details    :    8A00,CA00,0000
Sec. Cfg    :    [SBA Active] [SLA Inactive] [DAA Active]
MEID    :    423F0EA371473BAA04D0BEA0110B3E3A
SoC ID[0]    :    75AA5D5A9CE44666659A76CB89F8D05D
SoC ID[1]    :    A9FFD12E4C74CEEC05FD4A221C0E5BBA
Executing Exploit...Done
Reading Preloader...OK
Saved as    :    preloader_oppo6765_18511.bin
Loading EMI Config from Preloader...OK
Sec. Cfg    :    [SBA Inactive] [SLA Inactive] [DAA Inactive]
Sending DA1...OK
Running DA1...OK
Waiting DA SYNC Signal...OK
Setting Checksum Level...Done [Storage]
Connection    :    brom
Speed    :    HIGH-SPEED
Reading EMI Configuration...OK
EMMC CID    :    90014A68423861503E036DD61E2A56BF
Sending EMI Config...OK
Sending 2nd DA...OK
Activating DA Extension...OK
Int. RAM    :    0x0000000000038000 [224.00 KB]
Ext. RAM    :    0x00000000C0000000 [3.00 GB]
Flash ID    :    hB8aP>
CID    :    90014A68423861503E036DD61E2A56BF
BOOT1    :    0x0000000000400000 [4.00 MB]
BOOT2    :    0x0000000000400000 [4.00 MB]
RPMB    :    0x0000000001000000 [16.00 MB]
USERAREA    :    0x0000000747C00000 [29.12 GB]
Reading Parititon Info...OK
Manufacturer    :    OPPO
And. Ver.    :    8.1.0
Locale    :    en-US
Patch    :    2021-04-05
Formating Userdata...Done
Reset FRP Data...Done
Process finished
[NCK MTK Exploit Tool v1.0]
LOG TXT    :    20240504_201646.txt

 

[فيصل16]

Oppo A17k (CPH2471) [Reset FRP]​

​

​

[Reset FRP]
Waiting for device...Found
Port Info    :    MediaTek PreLoader USB VCOM_V1633 (Android) (COM190)
     :    MediaTek Inc., 3.0.1504.0 [usb2ser.sys]
     :    PRELOADER PORT
Preloader port found, need BROM!
Trying to crash preloader...OK
Hw ID    :    MT6765 [0766] Helio P35/G35
Details    :    8A00,CA00,0000
Sec. Cfg    :    [SBA Active] [SLA Inactive] [DAA Active]
MEID    :    6012D512D84F9871F30EB33BBBE24106
SoC ID[0]    :    C7BA4571AC1189551ECDD385D6973D9E
SoC ID[1]    :    41FBC5E916AAD5731E51D856D66DEEBF
Executing Exploit...Done
Reading Preloader...OK
Saved as    :    preloader_k65v1_64_bsp.bin
Loading EMI Config from Preloader...OK
Sec. Cfg    :    [SBA Inactive] [SLA Inactive] [DAA Inactive]
Sending DA1...OK
Running DA1...OK
Waiting DA SYNC Signal...OK
Setting Checksum Level...Done [Storage]
Connection    :    brom
Speed    :    HIGH-SPEED
Reading EMI Configuration...OK
EMMC CID    :    9B01005932503036340084EB02466ABF
Sending EMI Config...OK
Sending 2nd DA...OK
Activating DA Extension...OK
Int. RAM    :    0x0000000000038000 [224.00 KB]
Ext. RAM    :    0x00000000C0000000 [3.00 GB]
Flash ID    :    Y2P064
CID    :    9B01005932503036340084EB02466ABF
BOOT1    :    0x0000000000400000 [4.00 MB]
BOOT2    :    0x0000000000400000 [4.00 MB]
RPMB    :    0x0000000001000000 [16.00 MB]
USERAREA    :    0x0000000E8F800000 [58.24 GB]
Reading Parititon Info...OK
Brand    :    oplus
Prod. Model    :    ossi
And. Ver.    :    12
Ven. Date    :    Fri Jan 26 14:27:14 CST 2024
Build ID    :    SP1A.210812.016
F. Print    :    oplus/ossi/ossi:12/SP1A.210812.016/1706250434761:user/release-keys
Reset FRP Data...Done
Process finished
[NCK MTK Exploit Tool v1.0]
LOG TXT    :    20240507_170641.txt

​

 

[فيصل16]

Oppo A16s (CPH2271) [Userdata + FRP] Reset


​

[Userdata + FRP]
Waiting for device...Found
Port Info    :    MediaTek PreLoader USB VCOM_V1633 (Android) (COM190) [\\?\usb#vid_22d9&pid_0006#5&21e739f&0&3#{86e0d1e0-8089-11d0-9ce4-08003e301f73}]
     :    MediaTek Inc., 3.0.1504.0 [usb2ser.sys]
     :    PRELOADER PORT
Preloader port found, need BROM!
Trying to crash preloader...OK
Hw ID    :    MT6765 [0766] Helio P35/G35
Details    :    8A00,CA00,0000
Sec. Cfg    :    [SBA Active] [SLA Inactive] [DAA Active]
MEID    :    27204A0BACC0DF131F2B1A8B531557F6
SoC ID[0]    :    53BA84C86B664760333B66ECC96BE66B
SoC ID[1]    :    E3CCD568E1BA29208D8A2F977805A91F
Executing Exploit...Done
Reading Preloader...OK
Saved as    :    preloader_k65v1_64_bsp.bin
Loading EMI Config from Preloader...OK
Sec. Cfg    :    [SBA Inactive] [SLA Inactive] [DAA Inactive]
Sending DA1...OK
Running DA1...OK
Waiting DA SYNC Signal...OK
Setting Checksum Level...Done [Storage]
Connection    :    brom
Speed    :    HIGH-SPEED
Reading EMI Configuration...OK
EMMC CID    :    90014A68433861503E0300132C93C829
Sending EMI Config...OK
Sending 2nd DA...OK
Activating DA Extension...OK
Int. RAM    :    0x0000000000038000 [224.00 KB]
Ext. RAM    :    0x0000000100000000 [4.00 GB]
Flash ID    :    hC8aP>
CID    :    90014A68433861503E0300132C93C829
BOOT1    :    0x0000000000400000 [4.00 MB]
BOOT2    :    0x0000000000400000 [4.00 MB]
RPMB    :    0x0000000001000000 [16.00 MB]
USERAREA    :    0x0000000E8F800000 [58.24 GB]
Reading Parititon Info...OK
Formating Userdata...Done
Reset FRP Data...Done
Process finished
[NCK MTK Exploit Tool v1.0]
LOG TXT    :    20240518_093514.txt

 

[فيصل16]

Realme C55 (RMX3710) [Userdata + FRP] Reset​

​

[Userdata + FRP]
Waiting for device...Found
Port Info    :    MediaTek PreLoader USB VCOM_V1633 (Android) (COM190) [\\?\usb#vid_22d9&pid_0006#5&21e739f&0&3#{86e0d1e0-8089-11d0-9ce4-08003e301f73}]
     :    MediaTek Inc., 3.0.1504.0 [usb2ser.sys]
     :    PRELOADER PORT
Preloader port found, need BROM!
Trying to crash preloader...OK
Hw ID    :    MT6768 [0707] Helio P65/G85 k68v1
Details    :    8A00,CA00,0000
Sec. Cfg    :    [SBA Active] [SLA Inactive] [DAA Active]
MEID    :    E186A9A56447C49FE1148B4EA9767C9F
SoC ID[0]    :    C0108F87C64580C7E131D8200029D77B
SoC ID[1]    :    088D91170212AABF23C53DCCFBF9FD29
Executing Exploit...Done
Reading Preloader...OK
Saved as    :    preloader_k69v1_64_k419.bin
Loading EMI Config from Preloader...OK
Sec. Cfg    :    [SBA Inactive] [SLA Inactive] [DAA Inactive]
Sending DA1...OK
Running DA1...OK
Waiting DA SYNC Signal...OK
Setting Checksum Level...Done [Storage]
Connection    :    brom
Speed    :    HIGH-SPEED
Reading EMI Configuration...OK
EMMC CID    :    150100445554423432026627F41C4A17
Sending EMI Config...OK
Sending 2nd DA...OK
Activating DA Extension...OK
Int. RAM    :    0x0000000000070000 [448.00 KB]
Ext. RAM    :    0x0000000100000000 [4.00 GB]
Flash ID    :    DUTB42
CID    :    150100445554423432026627F41C4A17
BOOT1    :    0x0000000000400000 [4.00 MB]
BOOT2    :    0x0000000000400000 [4.00 MB]
RPMB    :    0x0000000001000000 [16.00 MB]
USERAREA    :    0x0000001D1EC00000 [116.48 GB]
Reading Parititon Info...OK
Formating Userdata...Done
Reset FRP Data...Done
Process finished
[NCK MTK Exploit Tool v1.0]
LOG TXT    :    20240518_171904.txt

 

[فيصل16]

Infinix HOT 40i (X6528) Factory Reset & Erase FRP

(First Test By NCK Box)




​

SELECTED: Tiger T606 Ver2
ACTION: Erase FRP
Start Detect phone...
Phone must be off with battery inside.
Long press "VOL -" key and insert usb cable.
For some phones need to
Long press "VOL -"+ "VOL +" key and insert usb cable.
Detected: SPRD U2S Diag (COM210)
Sending payload, keep boot key untill loader start.
Exploiting phone.....
Sending preloader 1
Sending preloader 2
Sending FDL 1.....
Sending FDL 2.....
New flash metod detected.
[5f] 7434C2 [5e] 1011D50B
UID: M3C282_7_42_11
FileSystem: UFS
Read partition info is supported by loader.
CPU NAME: T606
Removing frp, wait...
[1]FRP: persist
Done.
[can take 0-10 sec]Wait untill phone restart.
Exe version: Unisoc Module 2.3.1
Log saved:
C:\nckdongle\spreadtrum_module\spreadtrum_module_backup_folder\Saved_Logs\_erase_frp_11.txt
Total Time: 00:00:40
Done.

 

[فيصل16]

Oppo A31 (CPH2015) [Userdata + FRP]


​

[Userdata + FRP]
Waiting for device...Found
Port Info    :    MediaTek USB Port_V1633 (COM137) [\\?\usb#vid_0e8d&pid_0003#5&21e739f&0&3#{86e0d1e0-8089-11d0-9ce4-08003e301f73}]
     :    MediaTek Inc., 3.0.1504.0 [usb2ser.sys]
     :    BROM PORT
Hw ID    :    MT6765 [0766] Helio P35/G35
Details    :    8A00,CA00,0000
Sec. Cfg    :    [SBA Active] [SLA Inactive] [DAA Active]
MEID    :    3BA4CC238FE764ACFDD2649C47145A9A
SoC ID[0]    :    0C6D08A74DB04BE272EDBD0A92BC947B
SoC ID[1]    :    C6910BAF7B2E10FBC5A838457C69ACDC
Executing Exploit...Done
Reading Preloader...OK
Saved as    :    preloader_oppo6765_19581.bin
Loading EMI Config from Preloader...OK
Sec. Cfg    :    [SBA Inactive] [SLA Inactive] [DAA Inactive]
Sending DA1...OK
Running DA1...OK
Waiting DA SYNC Signal...OK
Setting Checksum Level...Done [Storage]
Connection    :    brom
Speed    :    HIGH-SPEED
Reading EMI Configuration...OK
EMMC CID    :    90014A68433961503301C3246E3B779F
Sending EMI Config...OK
Sending 2nd DA...OK
Activating DA Extension...OK
Int. RAM    :    0x0000000000038000 [224.00 KB]
Ext. RAM    :    0x0000000100000000 [4.00 GB]
Flash ID    :    hC9aP3
CID    :    90014A68433961503301C3246E3B779F
BOOT1    :    0x0000000000400000 [4.00 MB]
BOOT2    :    0x0000000000400000 [4.00 MB]
RPMB    :    0x0000000001000000 [16.00 MB]
USERAREA    :    0x0000000E8F800000 [58.24 GB]
Reading Parititon Info...OK
Manufacturer    :    OPPO
And. Ver.    :    9
Locale    :    en-US
Patch    :    2021-11-05
Formating Userdata...Done
Reset FRP Data...Done
Process finished
[NCK MTK Exploit Tool v1.0]
LOG TXT    :    20240601_203204.txt

 

[فيصل16]

ACE (Buzz 4 Lite) Erase FRP (First Test)​

​

SELECTED: SC9832E
ACTION: Erase FRP
Start Detect phone.
Phone must be off with battery inside.
Long press "VOL -" key while inserting usb cable.
Keep key untill boot complete.
Detected: SPRD U2S Diag (COM210)
Sending payload, keep boot key untill loader start.
Exploiting phone.....
Sending preloader 1
Sending preloader 2
Sending FDL 1.....
Sending FDL 2.....
New flash metod detected.
[5f] 91D458 [5e] 2E05A5
UID: TMAH05_24_11_37
FileSystem: EMMC
Read partition info is supported by loader.
CPU NAME: SC9832E
Removing frp, wait...
[1]FRP: persist
Done.
[can take 0-10 sec]Wait untill phone restart.
Exe version: Unisoc Module 2.3.1
Log saved:
C:\nckdongle\spreadtrum_module\spreadtrum_module_backup_folder\Saved_Logs\_erase_frp_13.txt
Total Time: 00:00:48
Done.

 

[فيصل16]

itel (A16Plus) Factory Reset & FRP Erase Via Diag Mode




​

Action: Reset Phone.
Detecting phone, wait...
Using connection mode 1
Detected: SPRD U2S Diag (COM245)

Platform Version: MOCORTM_17C_W20.32.1_P2_Debug
Project Version:   pike2_pub
BASE  Version:    FM_BASE_17C_W20.32.1_P2
HW Version:        sc7731e_modem
06-08-2021 15:23:55
Build number: A16Plus-SA332Q-10-OP-V017-20220111
EMMC DDR SIZE :8.00 GB+1.00 GB
UID: d1165a2c921b0760d0d79a8d641d3a43cc47230e54e17ef88c87155aed3a2a03

IMEI 1: 350000000000048
IMEI 2: 35000000000055
IMEI 3: 86000000000038
IMEI 4: 86000000000046
DONE
DONE
DONE
DONE
Done.
Exe version: Unisoc Module 2.3.1
Log saved:
C:\nckdongle\spreadtrum_module\spreadtrum_module_backup_folder\Saved_Logs\A16Plus-SA332Q-10-OP-V017-20220111_350000000000048_diag_reset_phone.txt

First 16 bytes from public rsa key.
AD7E67E09F57F0A391493DE4F96FDFBC
***************
Phone Storage: EMMC
SELECTED: A16 Plus
ACTION: Erase FRP
Loader format:NEW
Start Detect phone.
Phone must be off with battery inside.
Long press "VOL -" key while inserting usb cable.
Keep key untill boot complete.
Detected: SPRD U2S Diag (COM210)
Sending loader, keep boot key untill loader start.
Loader send OK
Changing bautrate OK.
Send Second Loader.
New flash metod detected.
UID: TCRY16_17_20_34
***************
[S]Manufacturer: ITEL MOBILE LIMITED
[S]Brand: Itel
[S]Device: itel-A16-Plus
[S]Model: itel A16 Plus
Build ID: QP1A.190711.020
CPU arhitecture: armeabi-v7a
Manufacturer: ITEL MOBILE LIMITED
Hardware: sc7731e_1h10_v1.1.0
Hardware version: SC7731e_2_IRD_K_V1.1.0
Build product name: SA332Q
Build description: A16Plus-SA332Q-10-OP-V017-20220111
Product name: SA332Q
Transsion device name: itel A16 Plus
Build Id: QP1A.190711.020
Model: itel A16 Plus
Android Release: 10
Android Version: A16Plus-SA332Q-10-OP-V017-20220111
Security patch: 2022-01-05
This phone have frp partition.
CPU NAME: SC7731E
Removing frp, wait...
[0]FRP: persist
Done.
[can take 0-10 sec]Wait untill phone restart.
Exe version: Unisoc Module 2.3.1
Log saved:
C:\nckdongle\spreadtrum_module\spreadtrum_module_backup_folder\Saved_Logs\Itel_sc7731e_1h10_v1_1_0_A16Plus-SA332Q-10-OP-V017-20220111_erase_frp.txt
Total Time: 00:00:25
Done.

 

[فيصل16]

REALME C53 (RMX3760) Erase Userdata

Long press "VOL -" key and insert usb cable


​

SELECTED: C53
ACTION: Erase Userdata
If phone will stuck on logo, perform factory reset from diag mode tab.
Start Detect phone...
Phone must be off with battery inside.
Long press "VOL -" key and insert usb cable.
For some phones need to
Long press "VOL -"+ "VOL +" key and insert usb cable.
Detected: SPRD U2S Diag (COM277)
Sending payload, keep boot key untill loader start.
Exploiting phone.....
Sending preloader 1
Sending preloader 2
Sending FDL 1.....
Sending FDL 2.....
New flash metod detected.
[5f] 742489 [5e] C410386
UID: M2B968_4_7_6
FileSystem: EMMC
Read partition info is supported by loader.
[misc]Format OK.
[metadata]Format OK.
[userdata]Format OK.
[cache]Format OK.
[can take 0-10 sec]Wait untill phone restart.
Exe version: Unisoc Module 2.3.1
Log saved:
C:\nckdongle\spreadtrum_module\spreadtrum_module_backup_folder\Saved_Logs\_format_userdata_emmc_26.txt
Total Time: 00:00:39
Done.

 

[فيصل16]

Ace Buzz 4 Erase Userdata & Erase FRP & Backup Firmware






​

SELECTED: SC9863A_64
ACTION: Erase Userdata
If phone will stuck on logo, perform factory reset from diag mode tab.
Start Detect phone.
Phone must be off(you can service this phone without battery also).
Long press "VOL -"+ "VOL +" key while inserting usb cable.
Keep key untill boot complete.
Detected: SPRD U2S Diag (COM277)
Sending payload, keep boot key untill loader start.
Exploiting phone.....
Sending preloader 1
Sending preloader 2
Sending FDL 1.....
Sending FDL 2.....
New flash metod detected.
[5f] 100DC096 [5e] 91B764
UID: TKMT81_23_1_22
FileSystem: EMMC
Read partition info is supported by loader.
[misc]Format OK.
[metadata]Format OK.
[userdata]Format OK.
[cache]Format OK.
[can take 0-10 sec]Wait untill phone restart.
Exe version: Unisoc Module 2.3.1
Log saved:
C:\nckdongle\spreadtrum_module\spreadtrum_module_backup_folder\Saved_Logs\_format_userdata_emmc_28.txt
Total Time: 00:00:39
Done.

SELECTED: SC9863A_64
ACTION: Erase FRP
Start Detect phone.
Phone must be off(you can service this phone without battery also).
Long press "VOL -"+ "VOL +" key while inserting usb cable.
Keep key untill boot complete.
Detected: SPRD U2S Diag (COM277)
Sending payload, keep boot key untill loader start.
Exploiting phone.....
Sending preloader 1
Sending preloader 2
Sending FDL 1.....
Sending FDL 2.....
New flash metod detected.
[5f] 100DC096 [5e] 91B764
UID: TKMT81_23_1_22
FileSystem: EMMC
Read partition info is supported by loader.
CPU NAME: SC9863A
Removing frp, wait...
[1]FRP: persist
Done.
[can take 0-10 sec]Wait untill phone restart.
Exe version: Unisoc Module 2.3.1
Log saved:
C:\nckdongle\spreadtrum_module\spreadtrum_module_backup_folder\Saved_Logs\_erase_frp_14.txt
Total Time: 00:00:32
Done.

SELECTED: SC9863A_64
ACTION: Backup Firmware
Start Detect phone.
Phone must be off(you can service this phone without battery also).
Long press "VOL -"+ "VOL +" key while inserting usb cable.
Keep key untill boot complete.
Detected: SPRD U2S Diag (COM277)
Sending payload, keep boot key untill loader start.
Exploiting phone.....
Sending preloader 1
Sending preloader 2
Sending FDL 1.....
Sending FDL 2.....
New flash metod detected.
[5f] 100DC096 [5e] 91B764
UID: TKMT81_23_1_22
FileSystem: EMMC
Read partition info is supported by loader.
CPU NAME: SC9863A
Found [l_fixnv1_a] [l_fixnv1_a] Size to download: 2 MB
Reading: l_fixnv1_a 200000
Length: 100000 chk: 7F1F calculated chk: 7F1E calculated chk_32: 7F1F
IMEI: 35***********39
[A]Reading: prodnv
[6]Reading: trustos_a
[1]Reading: sml_a
Reading: uboot_a
[6]Reading: logo
[6]Reading: fbootlogo
Reading: l_fixnv1_a
Reading: l_fixnv2_a
Reading: l_fixnv1_b
Reading: l_fixnv2_b
[1]Reading: gpsgl_a
[1]Reading: gpsbd_a
[A]Reading: wcnmodem_a
Reading: persist
[19]Reading: l_modem_a
[1]Reading: l_deltanv_a
[A]Reading: l_gdsp_a
[14]Reading: l_ldsp_a
[1]Reading: pm_sys_a
Reading: teecfg_a
[40]Reading: boot_a
[40]Reading: vendor_boot_a
[8]Reading: dtb_a
[8]Reading: dtbo_a
[B1D]Reading: super
[1]Reading: vbmeta_a
[1]Reading: vbmeta_system_a
[1]Reading: vbmeta_vendor_a
[1]Reading: vbmeta_system_ext_a
[1]Reading: vbmeta_product_a
Reading: splloader
[can take 0-10 sec]Wait untill phone restart.
Exe version: Unisoc Module 2.3.1
Log saved:
C:\nckdongle\spreadtrum_module\spreadtrum_module_backup_folder\Saved_Logs\SC9863A_35***********39_35***********39_backup_firmware.txt
Total Time: 00:35:55
Done.

 

[فيصل16]

G-Tab (F2) Erase FRP


​

SELECTED: SC7731E
ACTION: Erase FRP
Start Detect phone.
Phone must be off with battery inside.
Long press "VOL -" key while inserting usb cable.
Keep key untill boot complete.
Detected: SPRD U2S Diag (COM301)
Sending payload, keep boot key untill loader start.
Exploiting phone.....
Sending preloader 1
Sending preloader 2
Sending FDL 1.....
Sending FDL 2.....
New flash metod detected.
[5f] 9125E3 [5e] 9125E3
FileSystem: EMMC
Read partition info is supported by loader.
***************
[S]Manufacturer: Innovatech
[S]Brand: G-Tab
[S]Device: F2
[S]Model: F2
Build ID: QP1A.190711.020
CPU arhitecture: armeabi-v7a
Manufacturer: Innovatech
Hardware: sc7731e_1h10_v1.1.0
Hardware version: SC7731e_2_IRD_K_V1.1.0
Build product name: F2
Build description: F2-G-Tab-20210507
Product name: F2
Build Id: QP1A.190711.020
Model: F2
Android Release: 10
Android Version: F2-G-Tab-20210507
Security patch: 2021-03-05
This phone have frp partition.
CPU NAME: SC7731E
Removing frp, wait...
[0]FRP: persist
Done.
[can take 0-10 sec]Wait untill phone restart.
Exe version: Unisoc Module 2.3.1
Log saved:
C:\nckdongle\spreadtrum_module\spreadtrum_module_backup_folder\Saved_Logs\G-Tab_sc7731e_1h10_v1_1_0_F2-G-Tab-20210507_erase_frp.txt
Total Time: 00:00:43
Done.