Database Develop

[Guide] How to Root OnePlus 7T Pro with TWRP

IMPORTANT: This guide will not work with A11; we do not have an official working TWRP for A11 (from the TWRP team) on the 7T Pro.
OVERVIEW
The following will guide you through rooting your OnePlus 7T Pro running stock OOS using TWRP by extracting the boot.img from your own device and patching it using Magisk using adb and fastboot. This is not the only method, but it is the method that I used to obtain Magisk/Root for my 7T Pro (HD1910) running stock OOS (10.0.12 HD01AA at the time of writing). It should work for all variants of 7T Pro running any of the stock OOS. If you can follow directions, there should be no harm to your device, but use at your own risk.
A little bit of introduction (if you care)
I’ve been a member of XDA for quite a while and go way back to the Sammy S3 days. I’ve done what I can to help others out on XDA (I’m just a user), and lately, I’ve noticed that the existing guide(s) hasn’t been updated since they were created, or the information on how to root is not easily found (buried deep inside a thread).
PRE-REQUISITES
An unlocked bootloader
Working adb and fastboot (Latest platform-tools). This step assumes that your PC and 7T Pro are set up correctly (i.e. USB drivers) and adb/fastboot commands are working correctly
Latest Magisk Manager (Latest Magisk Manager) installed on your 7T Pro
A copy of the latest TWRP in the platform-tools directory (TWRP for 7T Pro)
INSTRUCTIONS
Boot TWRP
Connect your device via USB
Open command prompt as administrator and navigate to the platform-tools folder
Reboot your phone into bootloader
Code:
adb reboot bootloader
Boot into TWRP (the entire twrp filename is required)
Code:
fastboot boot twrp-version.img
Once TWRP boots up, you can "Keep System Read only?" by selecting "Keep Read Only"
Extract boot.img
The following code copies the boot.img from your device to the platform-tools directory of your PC.
Code:
adb shell
dd if=/dev/block/bootdevice/by-name/boot of=/tmp/boot.img
exit
adb pull /tmp/boot.img
Reboot your phone
Code:
adb reboot
Patch the boot.img with Magisk Manager
Copy boot.img you just extracted to your 7T Pro internal storage using MTP or
Code:
adb push boot.img /sdcard/Download/boot.img
Open Magisk Manager and tap on Install (Magisk, not Manager). You can use stable or beta, but I would recommend beta if you're looking to fiddle around with custom kernels.
Choose "Select and Patch a File"
Select the boot.img you just placed on the internal storage. Magisk will patch the image to your device's sdcard/Download/ folder as magisk_patched.img
Copy the Magisk patched image to your PC
Code:
adb pull /sdcard/Download/magisk_patched.img
Install the magisk_patched.img
Reboot to bootloader
Code:
adb reboot bootloader
Reboot your phone using magisk_patched.img
Code:
fastboot boot magisk_patched.img
Open Magisk Manager and tap on Install (Magisk, not Manager)
Select "Direct Install (Recommended)"
Reboot
IMPORTANT NOTE: I noticed with 10.0.14HD01AA, Magisk 21.4 and Magisk Manager v8.0.7, the patched image name has changed to "magisk_patched_v5XCB.img" (at least for my device). I'm not sure if the 'v5XCB' is the same for anyone else trying to root for the first time. Just make sure you use the proper filename in full (i.e. "magisk_patched_xxxxx.img") in Step 5 of "Patch the boot.img with Magisk Manager" and Step 2 of "Install the magisk_patched.img"
Retain root/Magisk after OTA update
There's a pretty good guide written already by @daveuk87 so you can check that thread.
If there are any areas within these instructions that are not clear or flat out wrong, please let me know so I can make necessary edits/changes.
Guide created: November 24, 2020
Last updated: March 26, 2021

RESERVED

thanks for this detailed root process, I've been looking for this for around 3days. (my OP7t pro is coming today will try this root method)

Anyone tried it sucesfully already on A11?

Tribux said:
Anyone tried it sucesfully already on A11?
Click to expand...
Click to collapse
No. There is no working TWRP for A11 on the 7T Pro right now.
If you've already got Magisk on A10, then follow the retain root guide above after upgrading to 11 to keep root.

Hw4ng3r said:
No. There is no working TWRP for A11 on the 7T Pro right now.
If you've already got Magisk on A10, then follow the retain root guide above after upgrading to 11 to keep root.
Click to expand...
Click to collapse
I don't have a magisk, so I need to do rollback to A10 probably. Thaks for an answer

Hw4ng3r said:
No. There is no working TWRP for A11 on the 7T Pro right now.
Click to expand...
Click to collapse
It IS working TWRP from LR.TEAM
Can't be posted here as link to the source made as picture with Chinese letters on they site - don't have Chinese keyboard to type this.
And it working! I'm use it!

Tribux said:
I don't have a magisk, so I need to do rollback to A10 probably. Thaks for an answer
Click to expand...
Click to collapse
This method (start to finish) doesn't work on A11, but you can always grab the boot.img using payload dumper or the correct boot.img from here and patch/install using the patch and install steps in this guide.

Hw4ng3r said:
This method (start to finish) doesn't work on A11, but you can always grab the boot.img using payload dumper or the correct boot.img from here and patch/install using the patch and install steps in this guide.
Click to expand...
Click to collapse
Could you please provide full guide for rooting android 11, i managed to root but after reboot i loose the root

When I get to
Code:
adb shell
dd if=/dev/block/bootdevice/by-name/boot of=/tmp/boot.img
exit
adb pull /tmp/boot.img
the window just closes with no message after 2 minutes or so with a # under the command and there is no boot.img in my platforms folder.

Potatoman31 said:
When I get to
Code:
adb shell
dd if=/dev/block/bootdevice/by-name/boot of=/tmp/boot.img
exit
adb pull /tmp/boot.img
the window just closes with no message after 2 minutes or so with a # under the command and there is no boot.img in my platforms folder.
Click to expand...
Click to collapse
Download latest magisk apk, rename it to .zip instead of .apk.
Bot twrp
adb push magisk.zip /tmp
Go to twrp, tmp folder and flash zip.

Hi everyone,
Is it possible to have an explanation about how to root the OP7T Pro one OxygenOS 11.0.1.1.HD01BA ?
Because it sound like crazy, some of the topics are old, some say it work, some it doesn't, some are for the 7T, ect...
I'm feeling lost and would appreciate some help to clarify all of this, thank you very much.

The Magisk process is the same once you obtain the boot.img for the firmware you are using. Use payload dumper to extract the proper boot.img instead of TWRP/adb

Thanks. So this topic is right for the 7T Pro as well ?
=> https://forum.xda-developers.com/t/guide-android-11-how-to-root-oneplus-7t.4253183/
If no, could you kindly provide me a link were i could start ?

gd*T said:
Thanks. So this topic is right for the 7T Pro as well ?
=> https://forum.xda-developers.com/t/guide-android-11-how-to-root-oneplus-7t.4253183/
If no, could you kindly provide me a link were i could start ?
Click to expand...
Click to collapse
Use below as a guide:
(ROOT) Android 11 / Latest stock and patched img's / payload dumper / magisk_patched guides
Hi all, Have seen a lot of requests for patched boot images on these threads so thought i'd share a guide on how to get it yourself as well as all the files required, plus the patched boot.img if you just want to go ahead and boot/flash it...
forum.xda-developers.com

Nice, thank you very much !

Hi!
I am new to OnePlus 7T Pro. The device I have is on Oxygen 11.0.11.HD01BA
Via this howto https://www.droidwin.com/install-twrp-oneplus-7-pro-android-11/ I found a TWRP from @Nebrassy that works with "fastboot boot". But I am unable to flash it. (On Slot A there seems to be an OS, but Slot B says no OS installed.)
And I am also unable to find a support thread for Nebrassy's TWRP for 7T Pro!?
So that's why I am asking here.
If you have any hint for me, I'd really appreciate it.
Tnx in advance,
Enkidu

enkidu70 said:
Hi!
I am new to OnePlus 7T Pro. The device I have is on Oxygen 11.0.11.HD01BA
Via this howto https://www.droidwin.com/install-twrp-oneplus-7-pro-android-11/ I found a TWRP from @Nebrassy that works with "fastboot boot". But I am unable to flash it. (On Slot A there seems to be an OS, but Slot B says no OS installed.)
And I am also unable to find a support thread for Nebrassy's TWRP for 7T Pro!?
So that's why I am asking here.
If you have any hint for me, I'd really appreciate it.
Tnx in advance,
Enkidu
Click to expand...
Click to collapse
[CLOSED][No longer in development] [RECOVERY] [11] [OFFICIAL] TeamWin Recovery Project (7T / 7T Pro)
Status: development dropped. If you want to pick it up, sources are available in my or twrp's GitHub. Introduction: Team Win Recovery Project or TWRP for short, is a custom recovery built with ease of use and customization in mind. We...
forum.xda-developers.com
Nebrassy is not maintaining one for 7T/Pro, I am.

Hello @ all.
I need some help with my oneplus 7t pro and the new available twrp for the 7t pro.
I updated this phone now to Android 11 and stay on Oxigen OS 11.0.3.1 HD01BA now.
I loose my Root also with this update.
What I must to do for have the new version from this twrp and Root again on my phone?
The bootlocker in unlocked already.
I not find something on xda about some people do with android 11 and the new twrp for the One Plus 7t pro.
This one I hope someone can help me with this problem.

Quick magisk and twrp installer/restore executables beta2 and 10.3.8 Oxygen OSs

I Made both a fold with. Bat executable files to double click on and install boot.img files that have twrp and magisk preinstalled. Also a secondary executable that copy both magisk2.1.4 and a orangefox recovery zip files to your phone once in recovery or adb mode.
Just made them as quick installers and restoring root on The phone.
Installation
1. Extract zip file.
2. Goto bootloader mode or recovery mode. (bootloader mode to install root/twrp and recovery mode to send files to your phone.)
3. Just goto the folder and execute either. Bat files you want.
Enjoy
10.3.8
Beta2
{Mod edit: Links removed}

spheady said:
I Made both a fold with. Bat executable files to double click on and install boot.img files that have twrp and magisk preinstalled. Also a secondary executable that copy both magisk2.1.4 and a orangefox recovery zip files to your phone once in recovery or adb mode.
Just made them as quick installers and restoring root on The phone.
Installation
1. Extract zip file.
2. Goto bootloader mode or recovery mode. (bootloader mode to install root/twrp and recovery mode to send files to your phone.)
3. Just goto the folder and execute either. Bat files you want.
Enjoy
10.3.8
Beta2
Click to expand...
Click to collapse
Is this for oos 11 beta 2

spheady said:
Yeah. It just installs the Open beta 2 boot. Img with a batch file inside the folder i made. Make sure you don't run the other version I made for oxygen 10.3.8. Theirs another batch file I also included witch sends the orangefox recovery and a magisk zip file. It should help ad I just tested today before uploading it to my mega. Nz cloud.
Click to expand...
Click to collapse
Ok so i tried this last night it does install the orangefox recovery but still cant boot recovery without getting stuck on the screen flashing so i just flashed my own patched boot.img do you have a working recovery on your device
if so can you help me get it to flash to y device im on beta2 gm1917 8gb 256gb

I'd advise against using this. I received a virus message for Troj/Agent-ABZF.

@spheady THREAD CLOSED pending investigation! Download links removed.
Downloads checked by VirusTotal:
VirusTotal
VirusTotal
www.virustotal.com
VirusTotal
VirusTotal
www.virustotal.com
Please contact me or any other moderator and explain how these results are possible!

[OOS][ALL][Stock boot][Stock recovery] OxygenOS 11.0.0

Here are all the boot.img and recovery.img of OxygenOS 11.0.0. Since TWRP isn't ready yet, I guess a lot of people need it if they didn't keep their root permissions.
As I only have a EU device I can only provide a patched boot.img for that device. But with the original .img files it should be easy to patch and flash it yourself. To make it clear: boot.img and recovery.img are stock unless said otherwise. They've just been extracted from the payload.bin inside the respective OOS update zip file.
OOS 11.0.0 EU:
boot.img
boot.img (Magisk v22 patched)
recovery.img
OOS 11.0.0 GLOBAL:
boot.img
recovery.img
OOS 11.0.0 INDIA:
boot.img
recovery.img
Please note: I'm not responsible for anything you do to your device. You use these files at your own risk. I will not provide any further .img files nor ask me for patched files. Any contribution with patched boot.img files is welcome of course. Also note although I'm a moderator, this thread is neither official nor in any way more or less trustworthy than any other contribution by other awesome members!

Would I be able to keep my phone rooted with this after updating?

This is very useful
thanks

jman12311 said:
Would I be able to keep my phone rooted with this after updating?
Click to expand...
Click to collapse
No, unless you use the Magisk patched EU version. Otherwise always install the update, then use the Magisk Manager to patch the inactive slot and then (only then!) reboot. Then you'll keep root.
Otherwise use the stock boot.img and patch with Magisk Manager. Then flash the patched image via fastboot. There are plenty of tutorials on XDA

Hi i installed the update already but didn't reboot what is the solution to keep root ?

Janusk22 said:
Hi i installed the update already but didn't reboot what is the solution to keep root ?
Click to expand...
Click to collapse
1. Install Magisk manager app
2. Open the app and choose "Install to inactive slot (After OTA)"
3. Reboot!

already now i have a magisk module who is making bootloop i already have access to adb via recovery how to remove it

Janusk22 said:
already now i have a magisk module who is making bootloop i already have access to adb via recovery how to remove it
Click to expand...
Click to collapse
Use USB debugging and a PC with the code:
Code:
adb wait-for-device shell magisk --remove-modules
If USB debugging isn't enabled, flash the stock boot.img (without root), boot it, enable ADB debugging and allow the connection to the PC. Then flash the patched boot.img and execute the command above
That is assuming you have a OnePlus 7T Pro which doesn't have a decryptable recovery. Otherwise you can simply flash the Magisk uninstaller

But i have a error I think that i cannot write in system
I have always : cannot be accessible

Thanks i just had to run the command when i rebooted

Is just me or GPS takes more time to "fix" satellites?

FSadino said:
Is just me or GPS takes more time to "fix" satellites?
Click to expand...
Click to collapse
Not longer than usual. But I often had GPS fix issues with my 7T Pro where it takes 5-10 minutes despite using A-GPS.

Macusercom said:
Not longer than usual. But I often had GPS fix issues with my 7T Pro where it takes 5-10 minutes despite using A-GPS.
Click to expand...
Click to collapse
I calibrated the A-Gps again, let's see if that was it. Thank you

Hi I was wondering if you could possibly share the android 11 update file I have a Oneplus 7T Pro HD1910 currently on OOS 10.1.14 It would be awesome if you can PM me. I've tried downloading from Oygen Updater it fails at 98% also on XDA forum the download fails. I'd really appreciate it. Thanks

Macusercom said:
As I only have a EU device I can only provide a patched boot.img for that device. But with the original .img files it should be easy to patch and flash it yourself. To make it clear: boot.img and recovery.img are stock unless said otherwise. They've just been extracted from the payload.bin inside the respective OOS update zip file.
Click to expand...
Click to collapse
Hey, could you please share the payload.bin extract procedure?

Ia possible to use this files to back to stock rom from lineageos 18.1? If yes, can someone help me and give me the procedure how to do this?

For all the "EU" and "global" files, I get "fastboot: error: boot partition is smaller than boot image". The Magisk version can be installed, but then I get a Qualcomm crash screen when I try to actually start it.

How To Guide [MAGISK] Root your Realme GT 2

Pre requisites
• Unlocked Bootloader (probably only Indian variant?)
• ADB and Fastboot drivers (I'm assuming you've set that up since you unlocked bootloader)
• Python (used to extract boot image)
• Your stock rom (I found it here: https://realmefirmware.com/)
• time (need some time to download your stock rom and get a hold of your boot image)
Steps:
1) Download Oppo_Decrypt tool from here:
https://github.com/bkerler/oppo_decrypt
2) Extract the contents and place in a folder
3) go to that folder and open a command prompt/power shell in the folder
4) Use commands accordingly
If you've added pip to path:
pip install -r requirements.txt
If you've not added pip to path:
Python -m pip install -r requirements.txt
done? Everything installed?
now get your rom zip file, inside it you'll find a big .ofp file, extract that ofp file and place in the folder where you've extracted your tools
now inside this very folder where ur tools are, create another folder and name it "extract" (tbh u can name the folder anything you want but for the sake of explanation I named it that)
now open a command prompt in the folder where the tools are kept
type: Python
Press space
drag and drop the "ofp_qc_decrypt.py" file in the command prompt
Press space
Drag and drop the large .ofp file you extracted
Press space
Drag and drop the extract folder
Press enter
Wait for a while till there's a message saying
"Extracting super.img" or something along the lines
Exit out of command prompt
Go to the extract folder you'll see a file called "boot.img"
Send this boot.img file to your phone
(Also recommend keeping a copy of the boot.img on your PC for safety)
Install Magisk Manager Apk from the official website on your phone
Open Magisk manager
Click on Install
Click on select and patch a file
Choose the boot.img file you just sent from your PC
after done send the magisk_patched.img to your PC
Now boot your phone into Fastboot mode
(I'll assume you know how to since you've unlocked bootloader)
Connect your phone to your PC using USB cable
open a command prompt and check if your device is connected by typing:
fastboot devices
if it shows up then proceed
type:
fastboot flash boot magisk_patched.img
(Your file name can be different you can just drag and drop the file)
after it says success, type:
fastboot reboot
after reboot open Magisk manager app (might ask u to download?)
and reboot if it asks you to
Congratulations you now have root access!

How to extract images from OTA zip files:
Extract the OTA zip file
Download and extract payload-dumper-go
Drag and drop payload.bin on payload-dumper-go executable
Spoiler: Video instructions

//seems to work for others, i thought it's only for indian roms, because of other posts and EU was locked out for so long, seems to work for EU, too.
IMEI and Baseband only get lost if you unlock the bootloader with the wrong version or boot.img.

smashda said:
BEWARE:​Only Indian variant, you lose your IMEI and Baseband!
Click to expand...
Click to collapse
I test it on RMX3311 EU and work fine.

Deleted

Can we make a boot.IMG for the RMX3311 so we can flash in Magisk ?

Hello,
Is there a easy way to hide banking apps some function don't work because my device is unlocked.

karayemis said:
Can we make a boot.IMG for the RMX3311 so we can flash in Magisk ?
Click to expand...
Click to collapse
It is the same method to extract boot image just get your corresponding rom and either use oppo decrypt tool if on version the phone ships with otherwise use payload dumper with correct ota

karayemis said:
Hello,
Is there a easy way to hide banking apps some function don't work because my device is unlocked.
Click to expand...
Click to collapse
Safetynet fix may help but you need root

BR4UTAL said:
It is the same method to extract boot image just get your corresponding rom and either use oppo decrypt tool if on version the phone ships with otherwise use payload dumper with correct ota
Click to expand...
Click to collapse
Hi,
Thanks, worked for me my device it is rooted now and banking apps are working now.
Device: RMX3311 EU

2 more questions:
1. is there a module i can use to activate call recorder on google dialer ?
2. When there is a new OTA can I just install and repeat all above ?

karayemis said:
2 more questions:
1. is there a module i can use to activate call recorder on google dialer ?
2. When there is a new OTA can I just install and repeat all above ?
Click to expand...
Click to collapse
When there is an ota update download it from software update and wait for it to finish extracting
DO NOT CLICK ON INSTALL
Go into Magisk
Do Uninstall Magisk > Restore System Images
Now Click on Install Magisk > Click Install to Inactive slot (after ota)
click ok and let's go
DO NOT CLICK ON THE REBOOT BUTTON
Now go to software update and click Install, your phone will reboot with root available still and ota update applied

For the model 3311 (EU) is there a step by step guide for root? Please, if exists, drop it here. Thank you

geovision said:
For the model 3311 (EU) is there a step by step guide for root? Please, if exists, drop it here. Thank you
Click to expand...
Click to collapse
The process is the same but instead of IN rom you need to get boot image from EU rom

karayemis said:
Hi,
Thanks, worked for me my device it is rooted now and banking apps are working now.
Device: RMX3311 EU
Click to expand...
Click to collapse
Banking app stops working after a while, this is the second time it stopped working.

karayemis said:
Banking app stops working after a while, this is the second time it stopped working.
Click to expand...
Click to collapse
Here's the Thread for it, you can just use the search on top of the page for things you want to fix, the banking issues come with root and you can find the appropriate Threads when searching for Magisk.
MAGISK MODULE ❯ Universal SafetyNet Fix 2.4.0
Universal SafetyNet Fix Magisk module Magisk module to work around Google's SafetyNet attestation. This module works around hardware attestation and recent updates to SafetyNet CTS profile checks. You must already be able to pass basic CTS...
forum.xda-developers.com

Currently iam on this version rmx3312_11_A.20 of realme ui so how can i get the boot image of this version

_PsyDuck_ said:
Currently iam on this version rmx3312_11_A.20 of realme ui so how can i get the boot image of this version
Click to expand...
Click to collapse
The Ota server only offers the latest version of Android 12 with the A.22 software

How To Guide ROOT REALME GT2 (RMX3312) in 10 minutes

REQUIREMENTS - BL UNLOCKED
You need to be on VERSION : RMX3312_11.C.12_IN_202304230924
If not on RMX3312_11_C.12 version - download the entire OTA PACKAGE from the above link & LOCAL INSTALL
Reboot to Bootloader adb reboot bootloader or Power + Volume Down
Take the ROOT BOOT image from the zip file given below and PASTE it in platform tools folder
FLASH the ROOT BOOT IMAGE fastboot flash boot RMX3312_11.C.12_ROOTBOOT.img
Type - fastboot reboot
Finished - Now your Realme GT2 - RMX3312 is now ROOTED!
P.S. : FLASH ON BOTH SLOTS
To keep ROOT when you receive an OTA update
DOWNLOAD THE OTA UPDATE
Let it UNZIP
When it shows - INSTALL / REBOOT TO INSTALL option, put to recents - Open MAGISK
There in MAGISK - SELECT THE INSTALL OPTION on the TOP RIGHT
& then select INSTALL TO INACTIVE SLOT (AFTER OTA) OPTION
Click on OK on the POP-UP MENU in MAGISK
NOW THE DEVICE WILL REBOOT - UPDATE TO THE LATEST OTA & STILL KEEP ROOT!
DOWNLOADS : Both STOCK & ROOT boot images are attached below in one ZIP FILE!
Each Boot Image is 192MB & the compressed ZIP FILE below is 72.6MB.
NOTE : I'm NOT RESPONSIBLE FOR BRICKS, STONES, BLASTS, WIPES etc. of RMX3312

Thank you of the guide.
Just questions, what is meant by "P.S. : FLASH ON BOTH SLOTS"?
and What is the SafetyNet status?

gx7x said:
Thank you of the guide.
Just questions, what is meant by "P.S. : FLASH ON BOTH SLOTS"?
and What is the SafetyNet status?
Click to expand...
Click to collapse
He means you need to run the flash boot command for each slot
for instance your system runs on a slot, as soon as you type the
fastboot flash boot [boot image]
if it shows writing boot_a
then you need to type
fastboot flash boot_b [boot image]
to flash in the b slot also
if it shows writing boot_b
then you need to type
fastboot flash boot_a [boot image]
to flash in the a slot also
and you can pass the safteynet easily even when in root, u can use zygisk and magiskhide to pass the safteynet and you can run any banking app you want

Please do not use the boot images provided if you have not updated to the current latest version
Note: EU version boot image might be different so don't try
p.s you can extract boot images yourself from any version you want!

Stano36 said:
How to extract images from OTA zip files:
Extract the OTA zip file
Download and extract payload-dumper-go
Drag and drop payload.bin on payload-dumper-go executable
Spoiler: Video instructions
Click to expand...
Click to collapse
HIGHLY recommend to extract boot for your version, tnx to Stano36 we have well prepared collation of update. Thanks to Prajwal_Beast for this guide!
I have some questions about "a" and "b" partitions, where can I found some information why we have two partitions and all have two or some of them and etc..

b0nb0n3v said:
HIGHLY recommend to extract boot for your version, tnx to Stano36 we have well prepared collation of update. Thanks to Prajwal_Beast for this guide!
I have some questions about "a" and "b" partitions, where can I found some information why we have two partitions and all have two or some of them and etc..
Click to expand...
Click to collapse
We have two partitions so that if one fails the other can safely boot however most of us are careless and flash on both partitions so it's not really helpful for us

How to root gt 2 running on pixel os?

_PsyDuck_ said:
How to root gt 2 running on pixel os?
Click to expand...
Click to collapse
extract the pixel os file & patch the boot image using magisk & flash the magisk patched boot image

Thanks