└── README.md /README.md: -------------------------------------------------------------------------------- 1 | # LG-G6-FRP-BYPASS 2 | 3 | 4 | _This wiki is for private usage and as a reminder if I will get another LG G6._ 5 | 6 | This device has been by far the most difficult phone to hack all categories, probably spent over 100 hours to finally break it. 7 | No wiki's out there actually work and they all who made them are kinda idiots and just scammers and some tutorials even may brick your device, not even xda forum have legit tutorial for this device so hopefully someone will enjoy this wiki that have a LG G6 and probably the newer versions aswell. 8 | 9 | Also posted this on ![XDA-Developers](https://forum.xda-developers.com/lg-g6/how-to/lg-g6-h870-frp-bypassing-limited-t3963642/post80168797#post80168797) 10 | 11 | # HOWTO - ANDROID 7.0 12 | 13 | If you got Android 8.0 Oreo then you must re-flash your firmware to Android 7.0, it wont matter what firmware you choose from https://lg-firmwares.com/ until we really hacked the device, just pick one and download the file and flash your device with LGUP tool, go grab the tool + dll file from here: https://www.mylgphones.com/download-lg-up-software but for fun, let me provide you how you will be able to install apk files on the limited android 8.0 firmware that has all settings disabled and due permissions you are not allowed to launch them because selinux is enable, but you can install applications by a miss I haven't been able to find anywhere. This is possible cause LG have forgot to disable permissions for install 'un-secured' applications outside playstore: 14 | 15 | # INSTALL APKS ON ANDROID 8.0 LOCKED BY FRP 16 | 17 | NOTICE: This is NOT allowed on Android 7.0 so don't bother to try, it will just bring you to the limited settings panel with netowrk settings only and you wont be able to move on to developer settings or overide apps settings: 18 | 19 | Start your device 20 | 21 | On welcome screen press next button 22 | 23 | Press on skip in lower right corner 24 | 25 | Turn wifi on and login on your wifi 26 | 27 | Go back to welcome screen 28 | 29 | Press on Accessibility 30 | 31 | Press on settings 32 | 33 | Press on Switch Access 34 | 35 | Press on settings in down right corner 36 | 37 | Press on Help & Feedback 38 | 39 | Press on About Switch Access for Android 40 | 41 | Touch the youtube video once 42 | 43 | Click on the clock icon beside the share icon 44 | 45 | Youtube is starting quickly and taking you to google chrome browser 46 | 47 | Now click on Accept & Continue 48 | 49 | In down left corner click on No Thanks 50 | 51 | Now browse to ![Screenshot](https://nr1.nu/i/archive/lg-g6/terminal.apk 52 | 53 | Click on update permissions 54 | 55 | Click on Allow 56 | 57 | Wait until file has been downloaded -) Now to the problem, you won't be able to install this application since the settings and hiddenmenu are disabled and you will just get redirected to the limited settings, it wont help to use quickshortcutmaker or similiar tools for launch development settings, why? Duh! Cause it's not even installed! And cause selinux you wont be able to overide the current settings neither so you are stuck, just give up! 58 | 59 | Go back to the youtube screen by pressing arrow back 60 | 61 | Start a video, choose the share button 62 | 63 | Choose E-mail application provided by LG the white icon with a blue E 64 | 65 | Allow the permissions for access contacts + E-Mail address 66 | 67 | Choose to sign in with your email (NOT A GMAIL ACCOUNT IT IS NOT VALID AND WONT WORK AND WILL REDIRECT YOU TO THE LOGIN SCREEN WERE YOU MUST LOGIN WITH THE OLD MAIL ACCOUNT) 68 | 69 | Wait until you get's connected and just hit next followed by done 70 | 71 | Now you are on "Send Message" in your e-mail application 72 | 73 | Choose the the add file button, upper right behind your e-mail address 74 | 75 | Now press on the terminal.apk file that you added 76 | 77 | You will now be allowed to install the application without enabling any permissions since they forgot to add permission denied on this one 78 | 79 | After you installed the application, you can choose to open terminal in lower down corner 80 | 81 | Now you will notice EVERYTHING is locked due to selinux enforcing and you wont even be allowed to list applications by pm list applications 82 | 83 | 84 | # Bypassing FRP! 85 | 86 | Sorry for the extremely big pictures, no idea how to fix and I am to lazy to search. 87 | 88 | ### Press arrow next button: 89 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-00-28-51.png) 90 | 91 | ### Press on skip: 92 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-00-28-55.png) 93 | 94 | ### As you can see, next button is grayyed out so connect to wifi (you can bypass this if you pressing quick on wifi and pressing next) 95 | ![Screenshot]![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-00-29-01.png) 96 | 97 | ### Now hit next 98 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-00-29-23.png) 99 | 100 | ### Press Setup as new: 101 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-00-29-29.png) 102 | 103 | ### Probably this is what you gonna see, so let's bypass this: 104 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-29-57.png) 105 | 106 | ### Go back to main screen (wifi must be connected): 107 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-30-03.png) 108 | 109 | ### Press on settings: 110 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-30-07.png) 111 | 112 | ### Press on switch access: (This is why wifi connection must be added, otherwise there is no settings here) 113 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-30-12.png) 114 | 115 | ### Press on settings: 116 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-30-15.png) 117 | 118 | ### Press on Help & Feedback 119 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-30-20.png) 120 | 121 | ### Press on about switch access for Android 122 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-30-28.png) 123 | 124 | ### Press fast on top at the video, now you see the clock and press on it (no need some annoying accesibilitys on with a annoying voice) 125 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-30-39.png) 126 | 127 | ### Youtube getting started for 1 second you wont even notice: 128 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-30-43.png) 129 | 130 | ### Now you're at google chrome 131 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-30-49.png) 132 | 133 | ### Press on No Thanks: 134 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-30-53.png) 135 | 136 | ### Download any apk file if you wanna see that settings are limited by your own: 137 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-31-14.png) 138 | 139 | ### Just hit Allow 140 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-31-18.png) 141 | 142 | ### Press on Open: 143 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-31-23.png) 144 | 145 | ### Once done, you will see: 146 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-31-43.png) 147 | 148 | Press on Settings (and fuck you scammers, this is what you will get to) 149 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-31-47.png) 150 | 151 | ### No worries, browse to any site that allowing you to press a number (here is a link to the page I was using) 152 | Feel free here to press on mail and try install your apk as we did on android 8.0 its not possible you will be redirected to the settings above: 153 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-32-18.png) 154 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-32-22.png) 155 | 156 | ### However, once pressed on the phone number you get into call application, now enter the uusd code for secret menu (this code is ńot accepted on android 8.0, hence why we using android 7.0) 157 | *#546368#*870# 158 | 159 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-32-54.png) 160 | 161 | #### And now you're in hidden menu wich you wasnt allowed to open in android 8.0, browse to SVC MENU: 162 | 163 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-32-58.png) 164 | 165 | ### Followed by pressing on LDB: 166 | 167 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-33-02.png) 168 | 169 | # Is the USB debugging button grayed out? 170 | 171 | ### This seems to be various for different firmwares have I noticed: 172 | 173 | ### Don't get panic! Then follow the below part, others can move on to next part: 174 | 175 | Turn off your LG device 176 | Re-do the flash process with LGUP 177 | Once the installation is complete and your device is erasing itself with the white background and the android logo on screen saying "DO NOT TURN OFF YOUR DEVICE" - That's exactly what you must do so turn off device by hold POWER + VOLUME DOWN (if you will be to late first time, you will succeed second time just press the buttons ~2-3 seconds before you know the screen will popup so you will poweroff the device during installation) - Now let the device be powered off for ~1 minute and then turn it on again and redo the process from step 1 until 22 and you will be enable to enable usb debugging if you wasn't to late when powering off the device, IF it's still inactive then just try again and try again until it will work, actually I figure out this after my third attempt and now I have tried this several times and you must turn it off while it's between 0% and 100% and since POWER + VOL DOWN takes ~7 seconds to power off device and the screen appears for around 4 seconds you must press the buttons few seconds before to turn it off exactly when it's needed. 178 | 179 | ### Enable usb debugging: 180 | 181 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-33-05.png) 182 | 183 | ### Here is a video what's required to uninstall, uninstall other applications on your own risk - I TAKE NO RESPONSIBILITYS AND I DONT RECOMMENDING THIS SINCE ITS NOT NEEDED AND IT IS JUST A RISK , PLAY WITH THIS WHEN YOU DONE) 184 | 185 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/lg-g6-bypassing.gif 186 | 187 | However, here is the oneliner you can copy and paste if you not wanna watch the video: 188 | 189 | for apps in "com.android.google.gms com.lge.setupwizard com.lge.hiddenmenu com.google.android.setupwizard com.lge.easyhome"; do pm uninstall --user 0 "${apps}"; done; am broadcast -a android.intent.action.MASTER_CLEAR;adb reboot 190 | 191 | ### Once you done the step in the video and rebooted your device, then wer'e back to main screen: 192 | 193 | ### Click next arrow button 194 | 195 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-39-02.png) 196 | 197 | ### And skip again. 198 | 199 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-39-06.png) 200 | 201 | ### Connect to wifi and hit next 202 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-39-25.png) 203 | 204 | ### Voila! You can accept documents now: 205 | 206 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-39-49.png) 207 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-02-39-56.png) 208 | 209 | And just continue until you will join the HOME screen, voila! :D 210 | 211 | Nah, just kidding. You will get your device formated, don't panic!!!! 212 | 213 | ### The device will reboot, erase itself and now the magic! Your'e done. 214 | 215 | ### Setup your device as usual: 216 | Third time hit arrow next button 217 | ![Screenshot](https://nr1.nu/archive/lg/after_device_was_reset/Screenshots/Screenshot_2019-09-01-23-58-04.png) 218 | 219 | ### Hit next: 220 | ![Screenshot](https://nr1.nu/archive/lg/after_device_was_reset/Screenshots/Screenshot_2019-09-01-23-58-13.png) 221 | 222 | ### Now you can continue without wifi connected, just move on to the next step without any wifi or sim-card: 223 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-01-23-58-19.png) 224 | 225 | ### Click skip internet connection 226 | 227 | ### Now you´re at google services, I allways unchecking this shit but this is optional ofc. 228 | ![Screenshot](https://nr1.nu/archive/lg/after_device_was_reset/Screenshots/Screenshot_2019-09-01-23-58-30.png) 229 | 230 | ### Next, setup your fingerprint if you wish I wont use this now during the wiki: 231 | ![Screenshot](https://nr1.nu/archive/lg/after_device_was_reset/Screenshots/Screenshot_2019-09-02-00-59-03.png) 232 | 233 | ### Okey, you're back at were you was started before, don't worry - It will work! ;) 234 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-00-59-08.png) 235 | 236 | ### You will see smart forward 237 | ![Screenshot](https://nr1.nu/archive/lg/screenshots/Screenshot_2019-09-02-00-59-15.png) 238 | 239 | ### Of course, enjoy your fully unlocked LG device with bypassed FRP, feel free to do anything you want now, it's 100% yours. 240 | ![Screenshot](https://nr1.nu/archive/lg/after_device_was_reset/Screenshots/Screenshot_2019-09-02-00-59-21.png) 241 | 242 | Device will erase itself, but don't worry! We have now reset the permissions for everything so just setup device again and this time it wont reboot again. 243 | 244 | 245 | # END 246 | --------------------------------------------------------------------------------