Post here Successfully Unlocked/Calculated/Flashed/Repaired Phones via NCK Premium v2

MEIZU M3 Max FRP reset and user code Done

Code:
Detected(27) : MediaTek USB Port (COM27)
[27] \\?\usb#vid_0e8d&pid_0003#6&205ab8d&0&3#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
Boot mode: Brom
Phone detected...Please wait
BBCHIP: 6755 1 cb00
Using Algo 3.
Helio MT6755 phone detected, swithing to helio api
Helio enabled DRAM in First Da: FALSE
Sending loader.....
BBCHIP MT6755
[1]Storage EMMC
Block size: 512
EMMC FW VERSION: 00:00:00:00:00:00:00:00
EMMC CID: 15010052433142 : 000000000000000000
EMMC UA SIZE: 0xe8f800000
BOOT STYLE: EMMC BOOT
FULL LENGTH: 0xe90400000 [58.254 GB]
Resetting userdata.
[EMMC]FORMAT
[0]FRP Reset Done.
[helio]Wait untill phone will star
 
Code:
Samsung A12 MT6765 FRP bypass
Exe version: NCKBox AndroidMTK 2.9.9
Selected model: 0-By CPU MT6765
[samsung]Action: Reset FRP
Phone must be off with battery inside.
Battery must be charged
Please insert USB cable now...
Keep "VOL-" button untill inserting USB cable.
For some phones need to keep "VOL+ and VOL-" button untill inserting USB cable.
For some phones need to keep "VOL+" button untill inserting USB cable.
Detected(30) : MediaTek USB Port (COM30)
[30] \\?\usb#vid_0e8d&pid_0003#5&521a615&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
CPU: MT6765 CPU code: 766 Target config: e5
***********************
Secure boot enabled: true
Need serial link authorization: false
Need download agent authorization: true
SWJTAG enabled: true
EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: false
Root cert required: false
Memory read authorization: true
Memory write authorization: true
Cmd 0xC8 blocked: true
***********************
Executing exploit, do not disconnect phone
Exploit has been executed successfully.
[39000]Dumping phone preloader.
Preloader: C:\ProgramData\Android_MTK_Backup_Folder\preloader _backup\preloader_k65v1_64_bsp_titan_rat.bin
Waiting for handle to become active......
Reseived active handle repply from phone......
Booting phone
Detected(30) : MediaTek USB Port (COM30)
[30] \\?\usb#vid_0e8d&pid_0003#5&521a615&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
Boot mode: Brom
Phone detected...Please wait
BBCHIP: 6765 0 ca00
Using Algo 1.
Helio MT6765 phone detected, swithing to helio api
Helio enabled DRAM in First Da: FALSE
Sending loader.....
BBCHIP MT6765
[1]Storage EMMC
Block size: 512
EMMC FW VERSION: 00:00:00:00:00:00:00:00
EMMC CID: 15010044583638 : 000000000000000000
EMMC UA SIZE: 0x747c00000
BOOT STYLE: EMMC BOOT
FULL LENGTH: 0x749400000 [29.145 GB]
-Reading GPT Drive OK
[EMMC]FORMAT
[EMMC]FORMAT
[0]FRP Reset Done.
[helio]Wait untill phone will start charging.
[0]All done.
 
Konrrow FRP reset Done

Exe version: NCKBox AndroidMTK 3.0.1
Selected model: 0-By CPU AUTO
[auto]Action: Reset FRP
Keep "VOL-" button untill inserting USB cable.
For some phones need to keep "VOL+ and VOL-" button untill inserting USB cable.
For some phones need to keep "VOL+" button untill inserting USB cable.
Detected(4) : PreLoader USB VCOM Port (COM4)
[4] \\?\usb#vid_0e8d&pid_2000#6&205ab8d&0&3#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
Boot mode: Preloader
Phone detected...Please wait
BBCHIP: 6739 0 ca00
Using Algo 1.
Helio MT6739 phone detected, swithing to helio api
Helio enabled DRAM in First Da: FALSE
Sending loader.....
BBCHIP MT6739
[1]Storage EMMC
Block size: 512
EMMC FW VERSION: 00:00:00:00:00:00:00:00
EMMC CID: 70010045484143 : 000000000000000000
EMMC UA SIZE: 0x390000000
BOOT STYLE: EMMC BOOT
FULL LENGTH: 0x390c00000 [14.262 GB]
[EMMC]FORMAT
[0]FRP Reset Done.
[helio]Wait untill phone will start ch
 
Tecno rise 32 frp reset done

Exe version: NCKBox AndroidMTK 3.0.1
Selected model: 0-By CPU AUTO
[auto]Action: Reset FRP
Keep "VOL-" button untill inserting USB cable.
For some phones need to keep "VOL+ and VOL-" button untill inserting USB cable.
For some phones need to keep "VOL+" button untill inserting USB cable.
Detected(4) : PreLoader USB VCOM Port (COM4)
[4] \\?\usb#vid_0e8d&pid_2000#6&205ab8d&0&3#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
Boot mode: Preloader
BBCHIP: 6580 0 ca00
Using Algo 1.
Phone detected...Please wait
Sending DA agent, please wait...
----------------------------------------------------
BaseBand CPU :MT6580
BaseBand CPU Secure Version : FF
BaseBand CPU Bootloader Version : 01
----------------------------------------------------
INT RAM: 128 KB SDRAM
EXT RAM: 512 MB DRAM
----------------------------------------------------
EMMC: (57Gb+4096Mb) KSI 0x454838454434
EMMC FW VERSION: 01:00:00:00:00:00:00:00
EMMC CID: 700100454838454434 : 00000000000000
EMMC UA SIZE: 0x1c8000000
BOOT STYLE: EMMC BOOT
FULL LENGTH: 0x1c8c00000 [7.137 GB]
Checking data, wait...

Writing FRP, wait...
FRP Reset Done.
Wait untill phone will start charging
[0]All done.
 
Blackberry Curve 8320 UNLOCK DONE

166746546371831.png


Code:
[B]IMEI:358281016XXXXXX is ok
Result: MEP-07723-001
Calculating, wait.
-------------------------- 
MEP1 :53674824
MEP2 :36216743
MEP3 :14833495
MEP4 :81564046
MEP5 :51499307
-------------------------- 
All done
-------------------------- 
-------------------------- 
Log saved to:
C:\Users\Ahmed GsM\Documents\NckMain\Exe_Logs\358281016XXXXXX_MEP-07723-0011.txt
[/B]
 
CONDOR PLUME P8 Lite (PGN610) Flash Firmware Done By NCKBOX

166938674518871.png


Code:
[B]Flash files count is :12
 Action : Firmware update.
 Selected Model: 0-By CPU: AUTO
 Exe version: NCKBox AndroidMTK 3.0.0
 Scenario: [0]Safe Flash
 Keep "VOL-" button untill inserting USB cable.
 For some phones need to keep "VOL+ and VOL-" button untill inserting USB cable.
 For some phones need to keep "VOL+" button untill inserting USB cable.
 Detected(33) : MediaTek PreLoader USB VCOM_V1633 (Android) (COM33) 
 [33] \\?\usb#vid_0e8d&pid_2000#6tscv8rwts7thigm#{a5dcbf10-6530-11d2-901f-00c04fb951ed} 
 Boot mode: Preloader
 BBCHIP: 321 0 ca00
 Using Algo 2.
 Phone detected...Please wait
 Sending DA agent, please wait...
 ----------------------------------------------------
 BaseBand CPU :MT6737T
 BaseBand CPU Secure Version : FF
 BaseBand CPU Bootloader Version : 01
 ----------------------------------------------------
 INT RAM: 128 KB SDRAM
 EXT RAM: 3 GB  DRAM
 ----------------------------------------------------
 EMMC: (116Gb+24576Mb) SAMSUNG 0x524531424d42 
 EMMC FW VERSION: 07:00:00:00:00:00:00:00
 EMMC CID: 150100524531424D42 : 00000000000000
 EMMC UA SIZE: 0x3a3e00000     
 BOOT STYLE: EMMC BOOT
 FULL LENGTH: 0x3a4a00000      [14.572 GB]
 Status: USB_HIGH_SPEED
 Detecting high speed port, wait......
 If driver not installed, install high speed port driver.
 If not need high speed port, disable it.
 After repeat opperation.
 Detected(6) : MediaTek DA USB VCOM (Android) (COM6) 
 [6] \\?\usb#vid_0e8d&pid_2001#5&15c311e1&0&9#{a5dcbf10-6530-11d2-901f-00c04fb951ed} 
 Backup preloader saved in firmware directory.
 Warning, flashing preloader disabled! 
 If you change android version, preloader must be flashed.
 Starting flash.
 HINT:
 If phone stuck on logo, for some phones help factory reset.
 Select factory reset tab/reset to factory default.
 Wait untill phone will start charging.
 [0]All done.[/B]
 
Infinix Smart 5 (X657C) Flash Firmware Done

166979916840082.png


Code:
[B] Flash files count is :26
 Action : Firmware update.
 Selected Model: 0-By CPU: MT6761
 Exe version: NCKBox AndroidMTK 3.0.1
 Scenario: [0]Safe Flash
 Phone must be off with battery inside. 
 Battery must be charged 
 Please insert USB cable now...
 Keep "VOL-" button untill inserting USB cable.
 For some phones need to keep "VOL+ and VOL-" button untill inserting USB cable.
 For some phones need to keep "VOL+" button untill inserting USB cable.
 Detected(5) : MediaTek USB Port_V1632 (COM5) 
 [5] \\?\usb#vid_0e8d&pid_0003#5&15c311e1&0&9#{a5dcbf10-6530-11d2-901f-00c04fb951ed} 
 CPU: MT6761 CPU code: 717 Target config: e5
***********************
 Secure boot enabled: true
 Need serial link authorization: false
 Need download agent authorization: true
 SWJTAG enabled: true
 EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: false
 Root cert required: false
 Memory read authorization: true
 Memory write authorization: true
 Cmd 0xC8 blocked: true
***********************
 Executing exploit, do not disconnect phone
 Exploit has been executed successfully.
 [39000]Dumping phone preloader.
 Preloader: C:\ProgramData\Android_MTK_Backup_Folder\preloader_backup\preloader_x657c_h6117.bin
 Waiting for handle to become active......
 Reseived active handle repply from phone......
 Booting phone
 Detected(5) : MediaTek USB Port_V1632 (COM5) 
 [5] \\?\usb#vid_0e8d&pid_0003#5&15c311e1&0&9#{a5dcbf10-6530-11d2-901f-00c04fb951ed} 
 Boot mode: Brom
 Phone detected...Please wait
 BBCHIP: 6761 200 ca01
 Using Algo 1.
 Helio MT6761 phone detected, swithing to helio api
 Helio enabled DRAM in First Da: FALSE
 Sending loader.....
 BBCHIP MT6761
 [1]Storage EMMC
 Block size: 512
 EMMC FW VERSION: 00:00:00:00:00:00:00:00
 EMMC CID: 70010044323630 : 000000000000000000
 EMMC UA SIZE: 0x750000000     
 BOOT STYLE: EMMC BOOT
 FULL LENGTH: 0x750c00000      [29.262 GB]
 Status: USB_HIGH_SPEED
 Detecting high speed port, wait......
 If driver not installed, install high speed port driver.
 If not need high speed port, disable it.
 After repeat opperation.
 Detected(7) : MediaTek DA USB VCOM (Android) (COM7) 
 [7] \\?\usb#vid_0e8d&pid_2001#5&15c311e1&0&9#{a5dcbf10-6530-11d2-901f-00c04fb951ed} 
 Starting flash helio.
  [14] WRITE TO PARTITION [ tkv ] 
  [15] WRITE TO PARTITION [ recovery ] 
  [18] WRITE TO PARTITION [ md1img ] 
  [19] WRITE TO PARTITION [ spmfw ] 
  [20] WRITE TO PARTITION [ scp1 ] 
  [21] WRITE TO PARTITION [ scp2 ] 
  [22] WRITE TO PARTITION [ sspm_1 ] 
  [23] WRITE TO PARTITION [ sspm_2 ] 
  [27] WRITE TO PARTITION [ lk ] 
  [28] WRITE TO PARTITION [ lk2 ] 
  [29] WRITE TO PARTITION [ boot ] 
  [30] WRITE TO PARTITION [ logo ] 
  [31] WRITE TO PARTITION [ dtbo ] 
  [32] WRITE TO PARTITION [ tee1 ] 
  [33] WRITE TO PARTITION [ tee2 ] 
  [34] WRITE TO PARTITION [ vbmeta ] 
  [35] WRITE TO PARTITION [ vbmeta_system ] 
  [36] WRITE TO PARTITION [ vbmeta_vendor ] 
  [37] WRITE TO PARTITION [ super ] 
  [38] WRITE TO PARTITION [ cache ] 
  [39] WRITE TO PARTITION [ tranfs ] 
  [40] WRITE TO PARTITION [ userdata ] 
 HINT:
 If phone stuck on logo, for some phones help factory reset.
 Select factory reset tab/reset to factory default.
 [helio]Wait untill phone will start charging.
 [0]All done.[/B]
 
Read Info
Code:
First 16 bytes from public rsa key.
AD7E67E09F57F0A391493DE4F96FDFBC
***************
Phone Storage: EMMC
SELECTED: BC2C
[0]ACTION: Boot Info
Loader format:NEW
Start Detect phone.
Phone must be off with battery inside.
Long press "VOL -" key while inserting usb cable.
Keep key untill boot complete.
Detected: SPRD U2S Diag (COM7)
Sending loader, keep boot key untill loader start.
Loader OK: Spreadtrum Boot Block version 1.1
Changing bautrate OK.
Send Second Loader.
New flash metod detected.
Read partition info is supported by loader.
Build product name: sp7731e_1h10
Build description: BD1-SP575AB-RGo-OP-211111V8
Transsion device name: TECNO POP 5 Go
Board: BD1
Build Id: RP1A.201005.001
Android Release: 11
Android Version: BD1-SP575AB-RGo-OP-211111V8
Security patch: 2021-11-05
CPU NAME: SC7731E
[can take 0-10 sec]Wait untill phone restart.
Exe version: NckBox Spreadtrum Module 2.1.6
Log saved:
C:\Users\JO\Documents\spreadtrum_module\Saved_Logs\BD1-SP575AB-RGo-OP-211111V8_boot_info.txt
Total Time: 00:00:18
Done.

FRP RESET
Code:
First 16 bytes from public rsa key.
AD7E67E09F57F0A391493DE4F96FDFBC
***************
Phone Storage: EMMC
SELECTED: BC2C
ACTION: Erase FRP
Loader format:NEW
Start Detect phone.
Phone must be off with battery inside.
Long press "VOL -" key while inserting usb cable.
Keep key untill boot complete.
Detected: SPRD U2S Diag (COM7)
Sending loader, keep boot key untill loader start.
Loader OK: Spreadtrum Boot Block version 1.1
Changing bautrate OK.
Send Second Loader.
New flash metod detected.
Read partition info is supported by loader.
***************
[S]Manufacturer: TECNO MOBILE LIMITED
[S]Brand: TECNO
[S]Device: TECNO-BD1
[S]Model: TECNO BD1
Build ID: RP1A.201005.001
CPU arhitecture: armeabi-v7a
Build product name: sp7731e_1h10
Build description: BD1-SP575AB-RGo-OP-211111V8
Transsion device name: TECNO POP 5 Go
Board: BD1
Build Id: RP1A.201005.001
Android Release: 11
Android Version: BD1-SP575AB-RGo-OP-211111V8
Security patch: 2021-11-05
Removing frp, wait...
Format OK.
[can take 0-10 sec]Wait untill phone restart.
Exe version: NckBox Spreadtrum Module 2.1.6
Log saved:
C:\Users\JO\Documents\spreadtrum_module\Saved_Logs\BD1-SP575AB-RGo-OP-211111V8_erase_frp.txt
Total Time: 00:00:34
Done.
 
Code:
Exe version: NCKBox AndroidMTK 3.0.1
 Selected model: 0-By CPU  MT6755
 [auto]Action: Reset FRP
 Phone must be off with battery inside. 
 Battery must be charged 
 Please insert USB cable now...
 Keep "VOL-" button untill inserting USB cable.
 For some phones need to keep "VOL+ and VOL-" button untill inserting USB cable.
 For some phones need to keep "VOL+" button untill inserting USB cable.
 Detected(3) : Périphérique série USB (COM3) 
 [3] \\?\usb#vid_0e8d&pid_0003#5&218cecbb&0&5#{a5dcbf10-6530-11d2-901f-00c04fb951ed} 
 CPU: MT6755 CPU code: 326 Target config: 5
***********************
 Secure boot enabled: true
 Need serial link authorization: false
 Need download agent authorization: true
 SWJTAG enabled: true
 EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: false
 Root cert required: false
 Memory read authorization: false
 Memory write authorization: false
 Cmd 0xC8 blocked: false
***********************
 Executing exploit, do not disconnect phone
 Exploit has been executed successfully.
 [29e00]Dumping phone preloader.
 Preloader: C:\ProgramData\Android_MTK_Backup_Folder\preloader_backup\preloader_huawei6750_66_n.bin
 Waiting for handle to become active......
 Reseived active handle repply from phone......
 Booting phone
 Detected(3) : Périphérique série USB (COM3) 
 [3] \\?\usb#vid_0e8d&pid_0003#5&218cecbb&0&5#{a5dcbf10-6530-11d2-901f-00c04fb951ed} 
 Boot mode: Brom
 Phone detected...Please wait
 BBCHIP: 6755 1 cb00
 Using Algo 3.
 Helio MT6755 phone detected, swithing to helio api
 Helio enabled DRAM in First Da: FALSE
 Sending loader.....
 BBCHIP MT6755
 [1]Storage EMMC
 Block size: 512
 EMMC FW VERSION: 00:00:00:00:00:00:00:00
 EMMC CID: 45010044463430 : 000000000000000000
 EMMC UA SIZE: 0x747c00000     
 BOOT STYLE: EMMC BOOT
 FULL LENGTH: 0x748800000      [29.133 GB]
 [EMMC]FORMAT
 [0]FRP Reset Done.
 [helio]Wait untill phone will start charging.
 [0]All done.
 
Back
Top