Root any mediatek Device

How To root any Mediatek device

Hello everyone, I was having an old phone which I am not using so i wanted to use it for pentesting and do some cool stuff, The Phone was Gionee X1S Let’s go!

What is Root

Rooting your device is giving your self access to every thing by attain privileged control over the System read more here Root

Why Would we need it

In my case i wanted to install subsystems and do ssl unpining and get to know more about device, You can also use your rooted phone as Wifi Repeater, also here is many things you can do with rooted device: https://lifehacker.com/top-10-reasons-to-root-your-android-phone-1079161983

Steps

First approach is easy try one of these applications: KingoRoot farmaroot Kingroot

Second way is using TWRP and magisk

To do that first we need to prepare some things:

1) Stock rom for device or using (spflash tool or Miracle box) to read your installed rom and get recovery & boot from it 2) Mediatek USB VCOM DRIVERS 3) adb and fastboot and it’s usb drivers

OEM Unlocking

OEM stands for original equipment manufacturer. In the smartphone industry, this term refers to companies who manufacture their own phones in their own factories, you can read more here OEM unlocking

so first we need to enter developer options and switch on USB Debugging and OEM unlocking here is a video with Drivers and tools provided OEM unlocking Note the this may void your warranty

after anlocking the bootloader let’s start rooting

Using Get TWRP

to install TWRP you can download an recovery image from here Devices If your Device is not listed you can use this amazing tool TWRP Porter

Follow the steps using your original recovery image (from Step 1) above

Disable dm_verity

While you are getting your TWRP you if you faced dm_verity to know more about it read this DM Verity

to disable it in my case i used Magisk First i Opened Magisk (with my boot.img from step 1) copied in my device then i choosed my boot.img file to patch and copied the output to my laptop

Now i booted my Device into Bootloader and then used these command: fastboot flash boot patched_boot.img

here is a Full tut with video: patch boot.img

then is flashed my recovery image (from above step) using fastboot flash recovery twrp.img

now I can finally install my SuperSu

Install SuperSu

The su or “substitute user” binary allows users to be root user. Download the Stable Version from here

then flash it using the TWRP recovery which you already installed

after that install the apk from here

and congratulations You Got your Device Rooted

I want to tell that their is many ways maybe harder or easier, it depends on the devices you can root your devices without TWRP recovery here but it didn’t work for me, Thanks for reading and I hope it can help you.