Motorola Nexus 6 FRP (All patch supported till April 2017) - GSM-Forum

..::Angel::.. · 11-07-2017, 17:50

Hi, use below commands on fastboot mode to tethered ROOT Motorola Nexus 6(shamu).
These commands will also enable ADB (Yes, will NOT ask authorization).
So, we can either wipe "frp" partition with "adb shell" and "dd" or we can load favorite FRP bypass command:

ROOT and Enable ADB on Nexus 6 via fastboot mode:

Quote:

First root/enable ADB command:

fastboot oem config fsg-id "a initrd=0x11000000,1519997"
fastboot flash foo initroot-shamu-aosp-nmf26f.cpio.gz
fastboot continue

Second command, only if first one fails:

fastboot oem config fsg-id "a initrd=0x11000000,1518172"
fastboot flash foo initroot-shamu-aosp-nmf26f.cpio.gz
fastboot continue

FRP partition wipe command:

Code:

dd if=/dev/zero of=/dev/block/mmcblk0p18

This block p18 is FRP partition in Nexus 6 (shamu).

Our favorite FRP bypass command:

Code:

adb shell content insert --uri content://settings/secure --bind name:s:user_setup_complete --bind value:s:1

Since this is tethered root, phone will boot loop after every restart and we have to send root command
again in order phone to work again or we can just unroot the device with this command:

Code:

fastboot oem config fsg-id ""
fastboot reboot

All credit goes to: @roeehay - exploit, intiramfs, padding all by him.
Roee Hay (@roeehay) of Aleph Research, HCL Technologies
I did NOTHING in fact. I just put all this here because people were selling others' work

Here is a video demonstration of successfully tethered root Nexus 6, Video by aleph security:

Here is a batch to make things easy:

https://mega.nz/#!cBwCBbCY!grH6T-xQq...dKEEMX56bP3dDg

PS: This will NOT work on newest security patch, if anything goes wrong,
you can always restore to initial state by sending simple "unroot fastboot command" I posted above.

If you have security patch older than April and if this is not working.
You can flash it to 7.1.1 (N6F26Y, Apr 2017) or 7.1.1 (N6F26U, Mar 2017)

BR

atiqmalik · 11-10-2017, 21:08

Here is a batch to make things easy:

https://mega.nz/#!cBwCBbCY!grH6T-xQq...dKEEMX56bP3dDg

zip file is corrupted .cant extract

truwrxtacy · 12-06-2017, 22:43

i downloaded the file, ran both the 1 and 2 bat and just goes to google and reboots, does not boot all the way, how do i install the N6F26Y into the phone via fastboot?

I am on the January security patch

target reported max download size of 536870912 bytes
sending 'bootloader' (4071 KB)...
OKAY [ 0.138s]
writing 'bootloader'...
(bootloader) Not allowed in LOCKED state!
FAILED (remote failure)
finished. total time: 0.138s
rebooting into bootloader...
OKAY [ -0.000s]
finished. total time: -0.000s
target reported max download size of 536870912 bytes
sending 'radio' (115507 KB)...
OKAY [ 3.649s]
writing 'radio'...
(bootloader) Not allowed in LOCKED state!
FAILED (remote failure)
finished. total time: 3.649s
rebooting into bootloader...
OKAY [ -0.000s]
finished. total time: -0.000s
target reported max download size of 536870912 bytes
archive does not contain 'boot.sig'
archive does not contain 'recovery.sig'
failed to allocate 1619770564 bytes
error: update package missing system.img
Press any key to exit...

..::Angel::.. · 12-07-2017, 11:30

@truwrxtacy

Search Google for how to update this to April firmware and then use these batch files. It will be OK.

..::Angel::.. · 12-07-2017, 11:40

Quote:

Originally Posted by atiqmalik

Here is a batch to make things easy:

https://mega.nz/#!cBwCBbCY!grH6T-xQq...dKEEMX56bP3dDg

zip file is corrupted .cant extract

I checked zip file - it seems OK to me.

Ak bhandare · 12-07-2017, 13:18

Quote:

Originally Posted by atiqmalik

here is a batch to make things easy:

https://mega.nz/#!cbwcbbcy!grh6t-xqq...dkeemx56bp3ddg

zip file is corrupted .cant extract

try 7zip and extract

truwrxtacy · 12-07-2017, 18:33

Quote:

Originally Posted by ..::Angel::..

@truwrxtacy

Search Google for how to update this to April firmware and then use these batch files. It will be OK.

I have google it already but nothing works, I cannot adb sideload because I dont have a recovery in the phone, and i cannot fastboot load it because it says my bootloader is locked.

Slim Inc. · 01-24-2018, 10:49

hello google and download MOTO FOS V6 100% for latest security pact

engdearlex · 02-20-2018, 21:37

Quote:

Originally Posted by truwrxtacy

i downloaded the file, ran both the 1 and 2 bat and just goes to google and reboots, does not boot all the way, how do i install the N6F26Y into the phone via fastboot?

I am on the January security patch

target reported max download size of 536870912 bytes
sending 'bootloader' (4071 KB)...
OKAY [ 0.138s]
writing 'bootloader'...
(bootloader) Not allowed in LOCKED state!
FAILED (remote failure)
finished. total time: 0.138s
rebooting into bootloader...
OKAY [ -0.000s]
finished. total time: -0.000s
target reported max download size of 536870912 bytes
sending 'radio' (115507 KB)...
OKAY [ 3.649s]
writing 'radio'...
(bootloader) Not allowed in LOCKED state!
FAILED (remote failure)
finished. total time: 3.649s
rebooting into bootloader...
OKAY [ -0.000s]
finished. total time: -0.000s
target reported max download size of 536870912 bytes
archive does not contain 'boot.sig'
archive does not contain 'recovery.sig'
failed to allocate 1619770564 bytes
error: update package missing system.img
Press any key to exit...

see here http://forum.gsmhosting.com/vbb/f783...-tool-2315998/

Mobile-Lab · 07-12-2018, 01:22

Motorola Nexus 6 October Security Patch FRP bypass Android 7.1.1
FRP/Google account was removed without PC/Device/Credits...

Basically, this video will remove FRP from ANY Nexus 6 Security Patch released by Google.

i_seeque · 10-12-2018, 15:52

video is perfect - but only one step is missing else you can not disable google play services.

All you have to do is to go to settings - security - device administrators - disable android device manger. Then Go to apps and disable Google Account Manager and Google Play Services. And then install...

Mobile-Lab · 10-27-2018, 21:14

Quote:

Originally Posted by i_seeque

video is perfect - but only one step is missing else you can not disable google play services.

All you have to do is to go to settings - security - device administrators - disable android device manger. Then Go to apps and disable Google Account Manager and Google Play Services. And then install...

with my phone it was off(Find My Device) already, which is why it allowed me to disable Google Play service. But yeah, if it isn't, you must disable it first.

11-10-2017, 21:08	#2 (permalink)
atiqmalik Freak Poster Join Date: Jan 2014 Location: pakistan Posts: 235 Member: 2114397 Status: Offline Thanks Meter: 157	Here is a batch to make things easy: https://mega.nz/#!cBwCBbCY!grH6T-xQq...dKEEMX56bP3dDg zip file is corrupted .cant extract

12-06-2017, 22:43	#3 (permalink)
truwrxtacy No Life Poster Join Date: May 2014 Posts: 522 Member: 2188956 Status: Offline Thanks Meter: 29	i downloaded the file, ran both the 1 and 2 bat and just goes to google and reboots, does not boot all the way, how do i install the N6F26Y into the phone via fastboot? I am on the January security patch target reported max download size of 536870912 bytes sending 'bootloader' (4071 KB)... OKAY [ 0.138s] writing 'bootloader'... (bootloader) Not allowed in LOCKED state! FAILED (remote failure) finished. total time: 0.138s rebooting into bootloader... OKAY [ -0.000s] finished. total time: -0.000s target reported max download size of 536870912 bytes sending 'radio' (115507 KB)... OKAY [ 3.649s] writing 'radio'... (bootloader) Not allowed in LOCKED state! FAILED (remote failure) finished. total time: 3.649s rebooting into bootloader... OKAY [ -0.000s] finished. total time: -0.000s target reported max download size of 536870912 bytes archive does not contain 'boot.sig' archive does not contain 'recovery.sig' failed to allocate 1619770564 bytes error: update package missing system.img Press any key to exit...

12-07-2017, 11:30	#4 (permalink)
..::Angel::.. No Life Poster Join Date: Dec 2006 Location: Karachi, Pakistan Age: 33 Posts: 16,237 Member: 643472 Status: Offline Sonork: 100.96901 Thanks Meter: 16,589	@truwrxtacy Search Google for how to update this to April firmware and then use these batch files. It will be OK.

01-24-2018, 10:49	#8 (permalink)
Slim Inc. Junior Member Join Date: Dec 2017 Posts: 23 Member: 2787248 Status: Offline Thanks Meter: 7	hello google and download MOTO FOS V6 100% for latest security pact

07-12-2018, 01:22	#10 (permalink)
Mobile-Lab No Life Poster Join Date: Mar 2002 Location: Samsung Posts: 738 Member: 10028 Status: Offline Sonork: n/a Thanks Meter: 840	Motorola Nexus 6 October Security Patch FRP bypass Android 7.1.1 FRP/Google account was removed without PC/Device/Credits... Basically, this video will remove FRP from ANY Nexus 6 Security Patch released by Google.

10-12-2018, 15:52	#11 (permalink)
i_seeque No Life Poster Join Date: Sep 2002 Location: India Posts: 786 Member: 15238 Status: Offline Thanks Meter: 128	video is perfect - but only one step is missing else you can not disable google play services. All you have to do is to go to settings - security - device administrators - disable android device manger. Then Go to apps and disable Google Account Manager and Google Play Services. And then install...