Lesson 1Core ADB commands6 min
adb devices, adb reboot bootloader, adb shell, adb pull, adb logcat, adb sideload.
Unauthorised in the device list means the RSA prompt has not been accepted — a locked screen blocks it.
Module 06IntermediateWeek 5 · 17 min read
The three doors into an Android device
Welcome to Module 6. From here on you work at the command line. These three interfaces solve the majority of software faults without any paid tool.
If any of these are unfamiliar, review the Foundation level first.
A boot loop that logcat explains in thirty seconds is a repair. The same boot loop without logs is a guess that costs the customer their data.
adb devices, adb reboot bootloader, adb shell, adb pull, adb logcat, adb sideload.
Unauthorised in the device list means the RSA prompt has not been accepted — a locked screen blocks it.
fastboot devices, fastboot getvar all, fastboot flash boot boot.img, fastboot --set-active=b.
getvar all tells you the product, slot and unlock state before you write anything.
Stock recovery offers wipe cache, factory reset and sideload. Wipe cache first; it is non-destructive and fixes a surprising number of loops.
Device boots to Android? ── yes ──► ADB
│ no
▼
Reaches recovery? ── yes ──► sideload / wipe cache
│ no
▼
Reaches fastboot? ── yes ──► flash boot / switch slot
│ no
▼
EDL / download modeA customer says: “It reboots every 30 seconds after an update.”
First non-destructive action?
Boot recovery and wipe cache, then capture logcat during the next boot attempt.
Possible causes
Technician Tip
adb logcat > log.txt captures the crash even when the screen dies.
Technician Tip
Always run fastboot getvar all before flashing — it prevents wrong-device disasters.
Did You Know?
adb sideload can apply a full official OTA without unlocking the bootloader or losing data.
Common Mistakes
Safety Notice
Exercise 6 — Log a boot
Question 1 of 2
Which command reveals the active slot?
Today you learned:
Write a scenario-based command guide covering five real faults and the exact commands you would run.
Intermediate - Exploit and bypass utilities — stage assignment
Register a test device's ECID and bypass the hello screen on a supported iPhone model.
Now you work below the operating system: exploit loaders and account-bypass utilities used for Hello-screen and iCloud/FRP scenarios on eligible devices.
checkm8-class USB exploit loader for A7 to A11 iDevices
What it does. Loads an unpatchable bootROM exploit over USB on eligible chipsets to allow low-level operations such as passcode work, Hello-screen bypass and diagnostics that iTunes cannot perform.
Why it matters. It gives you a legitimate low-level entry point on supported models, which is often the only route to service a locked but customer-owned device.
Risks & precautions
Best practices
Assignment
Load the exploit on a supported test device, record ECID, and exit cleanly without changes.
Hello-screen and Google-account bypass on owner-verified devices
What it does. Automates the sequence of exploit load, ramdisk boot and account-state edit used to bypass Setup-Assistant lock screens on devices you have verified as customer-owned.
Why it matters. Locked screens after a legitimate reset are one of the most common bench requests. A single tool with a clear log removes guesswork.
Risks & precautions
Best practices
Assignment
On a customer-owned test device, complete a bypass and write the state (tethered / untethered, signal, iCloud) into your log.
Complete the 2-question knowledge check above plus the assignment. Passing score: 80%.
Device: Samsung Galaxy A15
Fault: Boot loop after a failed update