Revolutionary is a tool to give you S-OFF on your phone and optionally flash a custom recovery image to your Android phone. A custom recovery image allows you to perform advanced tasks on the system partition, such as flashing custom ROMs and taking a full backup of your phone (a “nandroid” backup). We recommend installing the custom recovery image for all users who want rooted phones.
The current version of Revolutionary, 0.4pre4, is a developer preview. We still haven't made it perfectly easy to use for everyone, but we want power users and developers to be able to get started. If you're not a developer, feel free to try it out anyway; but you'll have to be patient with us while we iron out the wrinkles.
You can download Revolutionary from our site, http://revolutionary.io/.
Windows users, please download and install these HTC fastboot drivers.
Revolutionary comes with NO WARRANTY (express or implied), and NO GUARANTEE OF FITNESS for any particular task. Although we have attempted to minimize the risk the best we can, the authors disclaim any chance of damage to your phone. The entire risk of running Revolutionary lies with you, the user.
Revolutionary currently supports the following Android phones and HBOOT versions:
HTC Desire (bravo) 0.93.0001, 1.02.0001
HTC Desire CDMA (bravoc) 1.06.0000
HTC Wildfire (buzz) 1.01.0001
HTC Aria (liberty) 1.02.0000
HTC Incredible S (vivo) 1.09.0000 and 1.13.0000
HTC Droid Incredible 2 (vivow) 0.97.0000 (Gingerbread only!)
HTC Desire S (saga) 0.98.0000 and 0.98.0002
HTC View (express) 1.09.0000 and 1.13.0000
HTC Flyer (flyer) 1.10.0000, 1.11.0003
HTC Sensation (pyramid) 1.17.0006, .0008, .0011 and .0012, 1.18.0000
HTC Evo 3D (shooter) 1.30.0000 and 1.40.0000
HTC EVO 3D GSM (shooteru) 1.49.0007, 1.49.0008
HTC Thunderbolt (mecha) 1.04.0000, 1.05.0000
HTC EVO 4G (supersonic) 2.15.0001, 2.16.0001
HTC myTouch Slide 4G (doubleshot) 1.44.0007
Revolutionary will permanently unlock NAND write protection by default on the following phones:
Revolutionary has been through the following iterations:
0.4pre4
- Fixed HTC Thunderbolt (mecha) 1.05, added support for HTC Evo 4G (supersonic) 2.15.0001 and HTC Evo 3D GSM (shooteru) 1.49.0008
0.4pre3
- Fixed support for HTC myTouch 4G Slide (doubleshot) 1.44.0007
0.4pre2
- Fixed support for HTC Incredible 2 (vivo_w) 0.97.0000, only works on Gingerbread now!
0.4pre1
- Added support for more devices and expanded/improved support for existing devices, including:
Bravo, 1.02.0001
Flyer, 1.11.0003
Pyramid, 1.18.0000
ShooterU, 1.49.0007
Doubleshot, 1.44.0007
Mecha, 1.04.0000
Supersonic, 2.16.0001
Mecha, 1.05.0000
0.3pre7
- Fixed support for HTC Sensation (pyramid) 1.17.0008
0.3pre6
- Initial public release.
Why do you need my serial number?
We use your serial number to generate your unique beta key to use revolutionary.
Why do I need a beta key?
We introduced the beta key mechanism so that if problems/bricks occur we can stop generating beta keys to prevent more people being affected.
I don't want to give you my serial number!
That's fine, stable releases will not require a beta key, however there may be significant time between a beta and the subsequent stable release.
Does Revolutionary give me root?
No. You will need to flash
this zipfile from recovery.
What does this do, then?
revolutionary will give you S-OFF either by a patched HBOOT or setting the secureflag to off on the device itself. This behaviour will depending on your particular device. Optionally it will also replace the stock Android recovery with a custom one, which adds many features including “nandroid” backups, the ability to use custom ROMs, and a greater amount of flexibility and customization of your Android phone.
Does this permanently unlock the NAND flash on my phone?
Yes. The default configuration of this tool disables the phone's security, which also disables the NAND locks placed on the storage by the bootloader.
Are any drivers required?
On Linux, the program is self-contained. For Windows users, please install the fastboot drivers
available here.
I'm running Linux and it won't detect my device!
Either run the program with root permissions, or add appropriate
udev rules to the file
/etc/rules.d/51-android.rules. Instructions are available at the
Android Developers website.
The program hangs when “waiting for the system to settle.” -OR- the program says “Communications with phone unexpectedly interrupted.”
Uninstall any programs that may connect to the phone over USB and automatically sync. Specifically, we have had interference from HTC Sync and Doubletwist in the past; other programs may also cause trouble. Try reinstalling the drivers, if all else fails (or use Linux, which has a 99% less sucky USB stack).
Titanium Backup says that I'm not rooted, even though I ran Revolutionary and flashed the root zip from recovery.
Install Busybox from the Market to fix this.
Will you release the source code?
At this time, we are not disclosing the vulnerability we have exploited.
That doesn't seem fair! Android is about open source.
In some senses, we agree; but at times, a tradeoff needs to be made. Releasing the source code for this, we believe, would compromise the greater ability to unlock devices like these in the future. Given the choice between sacrificing the liberty of running code on our handsets and the liberty of reading the code by which we unlock it, we feel that the millions of handsets are more important. It is unfortunate that we must make such a choice, and we look forward to the day in the future that no such decision need be made.
Where can I get support?
As an experiment, we'd like to redirect users to our
IRC channel for support. If you have an
IRC client already, connect to irc.freenode.net, channel #revolutionary – if you don't, then that's OK; you can use
Freenode's web IRC client. We'd love to hear from you!
Revolutionary was brought to you by (in no particular order):
Ryan Pearl
Joshua Wise
Eric Smaxwill
Matthew Fogle
Matt Mastracci
Koush Dutta
Michael Sullivan
Adam Glasgall
Kenny Millington
Sen Verbrugge
The mysterious 0xf4b
Special thanks (in no particular order):
-
-
-
Bumble-Bee for assisting with early eMMC device support.
attn1 for all-round amusement and building recoveries.
toastcfh for early testing on EVO 3D and general support.