Unbrick or Downgrade Realme 6, 6i, and 6S using SP Flash Tool

Unbrick or Downgrade Realme 6, 6i, and 6S using SP Flash Tool

A big thanks to XDA’s Senior Member xyz and developers Dinolek & k4y0z for making it possible to easily bypass MediaTek’s authentication bypass as well as flashing in EDL with no Auth file for free. Thanks to daeSundae (XDA’s Senior Member) for sharing this guide. So, the exploit can easily keep both these SLA and DAA flags to false.

In that scenario, you can easily bypass the authentication level and flash the firmware file by yourself using MediaTek’s Download Mode.

Pre-Requisites:

There is a list of compatible MediaTek devices only. This specific guide and firmware are only applicable for Realme 6, 6i, and 6S models. Do not use the same firmware files or scatter files on any other MTK or Realme device models. Download all the required files/tools/drivers accordingly.

1. You Need a PC or Laptop and a USB cable

First of all, you’ll require a Windows desktop/laptop and a USB cable to easily connect your Realme 6 series handset with the computer. It’s important.

2. Charge Your Phone

Make sure to charge your device battery sufficiently (more than 50%) to avoid any kind of occasional shut down during the unbricking process.

Download Links:

• Download Python
• LibUSB Driver
• SP Flash Tool
• Mediatek USB Drivers
• MTK Bypass Utility Tool
• Payloads (Exploits collection)

Download Firmware:

• Decrypted OFP (OPPO FIRMWARE PACKAGE) Files: Full Firmware with User Data Partition
  • B.53 – Mega | Google Drive | Mirror3
  • B.37 – Mega | Google Drive | Google Drive 2
  • B.23 (First RUI Update for the device) – Mega | Google Drive | Mirror3
  • A.50 [EU] – Mega | Google Drive
  • A.42 [EU] – Google Drive | Mirror2
• NOU (NO User Data) Firmware
  • B.53 – Google Drive | Mirror 2
  • B.37 – Google Drive | Mirror 2
  • B.23 – Google Drive | Mirror 2
  • A.50 [EU] – Mega | Google Drive
  • A.42 [EU] – Google Drive | Mirror2

Warning: GetDroidTips won’t be held responsible for any kind of damage that may occur to your device while/after following this guide. You should know what you’re doing and do it at your own risk. All of your internal storage will be deleted completely after unbricking the handset.

Steps to Bypass Authentication

• First of all, make sure to download and install Python on your computer from the link above.
  • Double-click on the installer exe file > Select the Add Python x.x to PATH checkbox from the setup interface.
  • Then click on Install Now to start the installation process. [You can select ‘Customize installation’ if you want]
• Once installed, head over to the installed directory. If you’ve selected the default directory then the path should be like below: [Otherwise, head over to the custom directory]

C:\Users\UserName\AppData\Local\Programs\Python\Python37-32

• Keep in mind this path or note it down somewhere else.

Install Python Dependencies

Now, make sure to install the required Python dependencies on the computer using the pip command by following the steps below:

• So, head over to the same installation directory of Python.
• Now, press the Shift key + Right-click on the mouse to open up the context menu.
• Here select Open PowerShell Window here from the list.
• Then copy and paste the following command line and hit Enter to execute it:

pip install pyusb pyserial json5

• Once done, head over to the next method.

Install LibUSB-Win32 Drivers

This particular LibUSB Driver library allows the programs to access connected USB devices on your Windows PC.

• Just download and install it on your PC using the link given above.
• All you need is to open the setup file or installer and follow the on-screen instructions to complete the installation process as usual.
• You should also install the MediaTek USB Driver on the computer as usual.

Install MTK Bypass Utility Tool

• Make sure to download the MTK Bypass Utility Tool from the link above and extract the zip file on the PC.
• Now, transfer all the extracted utility tool files into the installed Python directory. [Important]

Boot Realme 6, 6i, and 6S to Download Mode

Now, connect your Realme 6, 6i, and 6S device to the Download Mode. To do so:

• First, switch off your device > Connect to PC while holding the Volume UP and DOWN buttons together.
• It should boot your device into the Download Mode (EDL).

Install SP Flash Tool on the PC

You’ll also need to install the SP Flash Tool on your PC. We’ve already covered a detailed guide on it. Once done, head over to the next method.

Steps to Bypass SP Flash Tool SLA DAA Authentication

Make sure that your Realme 6, 6i, and 6S device is connected to the PC via a USB cable and is booted to Download Mode. Obviously, you should have transferred the contents of the MTK Bypass Tool to the Python installation directory. Once done, proceed with the steps below:

• Go to the Python installation directory on your computer.
• Now, press the Shift key + Right-click on the mouse to open up the context menu.
• Here select Open PowerShell Window here from the list.
• Then copy and paste the following command line and hit Enter to run the main.py python file:

python main.py

• Once done, you should receive a notice or popup “Protection Disabled, Press any key to continue”.
• Just press any key to continue and then you’re ready to proceed.

Note: You can also run the brom.bat file inside the Bypass folder on your PC that you’ve downloaded.

Steps to Flash Firmware via SP Flash Tool (Unbrick Method)

• Open the SP Flash Tool on your PC > Choose the scatter file from the downloaded firmware folder.

• Select the Download Only mode from the drop-down menu. [You will lose your IMEIs, Serial Numbers, Capability of Hardware Attestation, etc; if you choose “Format data + Download”. So, select “Download Only”]
• Make sure to set your Download-Agent on the SP Flash Tool. [Don’t need to select auth file because the authorization is disabled]
• Once the download agent and scatter file are selected, go to Bypass Tools Pack.
• Here you’ll need to select Verified Boot Fix > Select the DA_6765_6785_6768_6873_6885_6853.bin file.
  • If in case, it’s giving an error then go to Options > Disable the Check LIB DA match option. Now, you’ll be able to choose a DA file easily.

• Now, click on the Download button on the SP Flash Tool.
• Once the firmware flashing process started, you’ll see the progress.
• Wait for the process to be completed.

• Finally, you’ll see a download success message on the screen.
• Restart your device into the system normally and wait for the boot.
• All the user data from the internal storage will be wiped out completely.
• So, go through the initial setup process, and start using your device again in the stock firmware.
• Enjoy!

That’s it, guys. We assume this guide was helpful to you. For further queries, you can comment below.

Via: XDA