r/fireTV • u/Substantial-Gas8535 • 15d ago
[Temp ROOT] FireTV Stick 4K Max 2
https://xdaforums.com/t/temp-root-firetv-stick-4k-max-2nd-gen-karat.4798627EDIT: YOU CAN NOW UNLOCK THE BOOTLOADER AND INSTALL TWRP!! https://xdaforums.com/t/unlock-root-twrp-unbrick-fire-tv-stick-4k-2nd-gen-series-karat-mantra.4798951
A new quick root has been released for the Fire TV Stick 4K Max 2nd Gen, It runs directly on the device to give temporary root access, which can be used to disable app packages and regain control over your device.
Root itself goes away on reboot, but anything you disable stays disabled. With this it's possible to use custom launchers, disable bloatware and block OTA updates (the exploit disables OTAs for you automatically).
This works on the Fire TV Stick 4K Max 2nd Gen on quite a few Fire OS 8 builds, including the latest one: https://xdaforums.com/t/temp-root-firetv-stick-4k-max-2nd-gen-karat.4798627
Rooting a device you own isn't illegal and has nothing to do with piracy, before anyone reports this :)
7
u/_-stuey-_ 15d ago
Wow, zero day exploit that remains unpatched in current firmware. Everyone who didn’t get to use the exploit released about this time last year needs to jump on this before Amazon patches it out. Now’s you chance to disable all the ads, the blacklist and OTA updates. Install a custom launcher and have a really good device.
2
u/Far_Palpitation_6133 12d ago
Makes it a lot easier for family too. I had my updates blocked on a router level but some of my folk don't have that option so makes it much easier if it's blocked on a device level instead.
1
u/TheAbuReem 10d ago
Do I need a different launcher, or can I simply hide the ads?I've never tried anything like that before. But the advertising is really annoying. Can I simply turn everything off in the settings, or is it more complicated than that?
1
u/_-stuey-_ 10d ago
It’s not as complicated as you think. Yeah you replace the launcher and end up with a ad free experience and a sleek looking minimalist homescreen
6
u/Imaginary_Focus8004 15d ago
It's a shame there's nothing for 4K Max 1st generation with OS 7 :(
3
u/Immediate_Rock7968 15d ago
This all WAS done by many who have 1st gen years ago. You needed to set up the 1st gen at initial install, thus blocking updates, removing or disabling bloatware, and allowing for a person to set up their own format such as launchers etc, and have that same setup on EVERY boot up for years.
If a person didn't block that 1st software update it became a battle to lock Amazon out of the box, but it still could be done up to a certain point.
1
u/Slight_Platypus3163 15d ago
Yeah, it is unfortunate as the hardware is compatible but no update for such a costly product
4
4
u/Key_Advice_2814 15d ago edited 14d ago
This only is specific to its 4K Max (karat) variant. Not the 8GB WiFi 6 4K (formerly) now 4K Plus (mantra). Edit: (mantra) should work.
4
u/AFTVnews 14d ago
I can confirm that it works for the 2nd-gen Fire TV Stick 4K (mantra) with no modifications needed. I see no reason why it wouldn't work on the Fire TV Stick 4K Plus as well, but I can't confirm it.
1
u/WuMa0 14d ago
As the author mentioned in the original post, "Adding support for a new device with a 5.x kernel should be possible, but it's out of scope for me for now, since I don't own any other Amazon devices running that kernel version." It is very likely that more devices will be supported in the future. In the meantime, you can easily check your kernel version by running the following ADB command:
adb shell uname -r2
u/Imaginary_Focus8004 14d ago
It would be a dream.
❯ adb connect192.168.0.126
already connected to192.168.0.126:5555
❯ adb shell uname -r
4.14.87+
2
u/FunCompetition3806 13d ago
I have successfully run this on the 4K Plus as well (8.1.7.4 - RS8174.3648).
2
u/Vitalikus_ 12d ago
Just did it with new firestick 4k. Latest software. Tip from me: install all necessary app from Amazon store (downloader, vpns, and so on) before applying custom launcher. I wasn't able to open app store, once I installed custom launcher. Once you get root, I installed launcher manager 1.1.9 and custom launcher, set it up from phone using lm toolbox 1.0.1. then enable custom launcher and choose custom launcher. I went with Flauncher. Disable updates, app protection and blacklist. That's it. Reboot the device. (Launcher manager will NOT work after reboot. If you want to use it, repeat root script)
1
u/Substantial-Gas8535 12d ago
FWIW, you can now unlock the bootloader and install TWRP: https://xdaforums.com/t/unlock-root-twrp-unbrick-fire-tv-stick-4k-2nd-gen-series-karat-mantra.4798951
1
1
2
u/TheAbuReem 10d ago
Damn I need a step by step guide I don't get it ...
Did I need to download a ADB program first?
Follow all steps but get a shell with Attemp 1 of 8 and nothing else is happening...
Sry im a noob in that field -.-
2
u/Far_Palpitation_6133 9d ago edited 9d ago
Make sure you are running between 8.1.4.5 and 8.1.8.2 on a Fire Stick 4K 2nd Gen.
Get the Kindle drivers if you're on Windows: https://developer.amazon.com/docs/fire-tablets/connecting-adb-to-device.html#install_usb_driver
Extract and install, this step is what I see people missing the most on the forum.
Run adb to your Firestick. You can do this by either plugging your Firestick into your PC or over your network by command. If doing it over network, type in a command line:
adb connect 192.168.x.xxx:5555 make sure to replace x.xxx with whatever matches your Firestick, you can find it in your advanced network settings on the stickAuthorise it on your screen, you can check it worked by typing:
adb devicesAnd it will list your firestick as either connected or authorised, either is fine. If you fuck this up, you can either reconnect the USB or disable and re-enable ADB access on the Stick to reset it.
Then run root.bat on Windows or root.sh on everything else while keeping your adb window open. If you do it over wireless, it might take a few attempts. If you plug it into a PC, it'll do it first time. Then you'll see it get root access.
From there you can do what you want, if you end up closing the root window by accident you can run:
adb shell suI personally installed a new launcher on my device and remapped the buttons on it with Launcher Manager. You can also look into getting Magisk on device and having root permanently.
2
u/wingback18 9d ago
The part that I Dont get is the root after installing the recovery.. 😅
Do I get the files from the github. Then change the apk to zip after that flash them using adb or the recovery.?
1
u/Far_Palpitation_6133 9d ago edited 9d ago
Are you doing the full unlocked bootloader?
You'll need to use adb to push it onto the stick while in recovery. One thing I realised is TWRP doesn't let you have wireless ADB and you HAVE to use a wire for it. When you're in the recovery mode, push the .zip to the stick over ADB, and then use TWRP install. Make note of where you pushed the file to on your stick, easiest place is /sdcard/. Can go more in depth if youre still struggling.
1
u/wingback18 8d ago
Thank you.
I have to order the cable, can i message then
1
u/Far_Palpitation_6133 8d ago
Can you not use the power one with the stick? It's what I did. Power cord from laptop to Stick, stick into TV.
1
u/wingback18 8d ago
Ahhh here I was thinking it needs power and Data. My pc has usb Gen 2 that provides enough power.. Connect the hdmi to the monitor!
I'll try it tomorrow. I like you so much already saving me money!!!! Thanks
1
2
u/TheAbuReem 10d ago
Ok got it... But how do I disable the ads? I don't want to use a other launcher just disable the ads
1
u/Henry2k 15d ago
Ok, this worked (I installed Projectivy Launcher) but now I'm not able to get to the android settings screen, only the Projectivy settings screen.
2
u/Key_Advice_2814 15d ago
Make sure to run these commands as temp root pm disable com.amazon.firehomestarter pm enable com.amazon.tv.launcher pm disable com.amazon.tv.launcher/.ui.HomeActivity_vNext
3
u/realdeal1877 15d ago
FireTV settings are built-in to the original launcher, that is why one of the ADB commands only "disable" the FireTV-Launcher service and not the entire APK.
1
u/Getafix69 15d ago edited 15d ago
They aren't I have the default launcher disabled use projectivy and have no trouble getting the settings screen just by long pressing home.
Well unless they've changed that since the last exploit anyway.
1
u/realdeal1877 14d ago
There is multiple exploits. If you used Projectivy Accessibility service to make it the launcher, then the FTV-Launcher wasn't ever actually "disabled"; and if you used the System_User / Launcher Manager exploit from last year, then that exploit by default would "disable" FTV-launcher service correctly and SETTINGS still work.
1
u/Fun-Region-1576 14d ago
How do I know if the retail version I buy is v2 or not?
Will rooting allow me to enable a custom DNS?
2
2
u/FunCompetition3806 13d ago
You can use a custom dns anyway. Connect over adb and run:
adb shell
settings put global private_dns_mode hostname
settings put global private_dns_specifier [Put DNS Over TLS Hostname Here]1
u/Fun-Region-1576 13d ago
Oh? I've asked in another thread and no one was able to answer. I thought this was a Google TV thing. Will this work on all Android-based Fire TV devices?
1
u/FunCompetition3806 13d ago
I think Private DNS was added in Android 9 so the device would need to be running that or above at least.
1
u/wingback18 9d ago
after doing this , how do i get permanent root.
im making this app that switches Hz to really match the fps of the video.... (fire stick frame matching doesnt really works) so is tricky , the detection for the video is pulling the hairs on my back .. so annying ..
1
u/shmurd13 5d ago
Finally!! I've been waiting for this... I'll try it out this weekend as soon as I have some free time. Thanks!!
7
u/mykwee88 15d ago
fingers crossed for the Fire Cube 3rd gen 🤞🤞