Skip to content

Moonsploit/badsilver

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

130 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

If you arent keyrolled, use regular quicksilver instead.

badsilver - keyrolled kv6 unenrollment

What is this?

badsilver is quicksilver injected into badrecovery unverified, allowing for unenrollment on keyrolled kernver 6 ChromeOS devices.

If you would like the script to do everything for you:

git clone https://github.com/Moonsploit/badsilver
cd badsilver
sudo bash buildfull_badsilver.sh <board>

If you would like to use a local recovery image:

git clone https://github.com/Moonsploit/badsilver
cd badbr0ker
sudo ./build_badrecovery.sh -i image.bin -t unverified

If you are using badrecovery unverified:

Simply run the following in the shell to unenroll:

vpd -i RW_VPD -s re_enrollment_key="$(hexdump -e '1/1 "%02x"' -v -n 32 /dev/urandom)"

Or this to reenroll:

vpd -i RW_VPD -d "re_enrollment_key"

How do I flash it to a usb drive or sd card?

Download a prebuilt from dl.snerill.org/badsilver, or build an image yourself with the above commands. Flash it using the Chromebook Recovery Utility, or anything else that flashes images to USB drives and sd cards, such as balenaEtcher, dd or rufus

I have flashed a usb drive or sd card, what now?

Complete sh1ttyexec, then enter developer mode and recover to your usb, choose to unenroll or reenroll, then reboot and disable developer mode. When you setup it will be unenrolled.

Credits:

BinBashBanana - badrecovery

crosbreaker - badbr0ker

emery - finding quicksilver

About

keyrolled kv6 unenrollment

Resources

License

Stars

Watchers

Forks

Contributors

Languages