Updated on 2019-12-17

ADB

https://dl.google.com/android/repository/repository2-1.xml

curl -k https://dl.google.com/android/repository/platform-tools_r36.0.2-win.zip | busybox unzip -

Bootloader Driver

https://dl.google.com/android/repository/addon2-1.xml

curl -k https://dl.google.com/android/repository/usb_driver_r13-windows.zip | busybox unzip -

TWRP (Deprecated)

adb devices -l
adb reboot bootloader

fastboot devices -l
fastboot oem unlock
fastboot flash recovery twrp.img
fastboot reboot bootloader

Magisk

获取 Root 权限，不需要刷全量包，只需要解锁并刷入修改后的 Bootloader。优先级： init_boot.img > boot.img > recovery.img

fastboot flash init_boot magisk_patched-25200_OIUkx.img # patched init_boot.img
or
fastboot flash boot magisk_patched-25200_OIUkx.img # patched boot.img
or
fastboot flash recovery magisk_patched-25200_OIUkx.img # patched recovery.img

fastboot flash vbmeta --disable-verity --disable-verification vbmeta.img
fastboot reboot

EdXposed (Deprecated)

adb push Magisk-v20.3.zip magisk-riru-core-v19.7.zip EdXposed-YAHFA-v0.4.6.1.4510.zip /sdcard/Download/

adb install -r EdXposedManager-4.5.4-45401-org.meowcat.edxposed.manager-release.apk

LSPosed

KernelSU

  • https://github.com/tiann/KernelSU
  • https://github.com/Dr-TSNG/ZygiskNext
  • GKI 模式 (Generic Kernel Image)：修补 boot 分区，模拟器、虚拟机使用。
  • LKM 模式 (Loadable Kernel Module)：修补 init_boot 分区，真实设备（手机）使用。
    • 使用 fastboot boot 命令临时启动 KernelSU 提供的 GKI 内核（获得临时 root）-> 安装管理器 -> 在管理器中选择直接安装，修补 init_boot 分区（无需下载官方全量包，无需提取固件镜像）
adb devices -l
adb reboot bootloader

# 解压 android15-6.6.66_2025-02-boot.img.gz
fastboot boot android15-6.6.66_2025-02-boot.img

Non-root

Stock ROM

Motorola Edge S pro

PSTAR XT2153-1

更改 OTA 软件通道

adb devices -l
adb reboot bootloader

fastboot oem config carrier reteu

OnePlus 13

PJZ110

payload.bin dumper

payload-dumper-go --partitions init_boot,boot payload.bin

pip install git+https://github.com/5ec1cff/payload-dumper
payload_dumper --partitions init_boot,boot payload.bin

Reference