layout | title | codename | downloadfolder | supportstatus | maintainer | oem | devicetree | xdathread |
---|---|---|---|---|---|---|---|---|
device |
Amazon Kindle Fire HD (3rd Generation) |
soho |
soho |
Current |
spudowiar |
Amazon |
{% include disclaimer.html %}
{% include supportstatus.html %}
{% include download.html %}
{% include twrpinstall.html %}
WARNING: this method isn't supported
Follow the instructions for using a fastboot cable but after enabling ADB run:
adb shell su -c "dd if=/dev/zero of=/dev/block/platform/omap_hsmmc.1/by-name/boot bs=1 count=1 seek=848"
You will need the platform-tools from the Android SDK on your computer. Find the SDK Only section on the page linked and install the SDK and download only the platform-tools to get adb and fastboot binaries.
Windows users will need proper drivers installed on your computer. You can try the Naked ADB drivers or the Universal ADB drivers if you don't already have a working driver installed
On your device, go into Settings -> Device Options and find the Serial Number and tap on it 7 times to enable developer settings. Go into Developer Options and enable ADB. From your computer, open a command prompt and type:
adb reboot bootloader
Download the latest software update and rename it to 'update.bin' in the same folder as your adb and fastboot binaries
You should now be in fastboot mode. Download the correct exploit file and unzip the file into the same folder as your adb and fastboot binaries. Then run:
fastboot -i 0x1949 oem format fastboot -i 0x1949 flash boot hijack.img fastboot -i 0x1949 flash system system.img fastboot -i 0x1949 continue
You should now see an Amazon logo with an orange underline. Now run:
fastboot -i 0x1949 flash boot recovery.img fastboot -i 0x1949 oem format fastboot -i 0x1949 continue
You should now see TWRP load up. Run:
adb shell twrp wipe cache adb shell twrp wipe dalvik adb shell twrp sideload
You should now be in sideload mode. Now run:
adb sideload update.bin adb reboot adb wait-for-device adb shell su -c 'mount -o remount,rw /system && rm /system/etc/install-recovery.sh && mount -o remount,ro /system' adb push recovery.img /sdcard/recovery.img adb shell su -c "dd if=/sdcard/recovery.img of=/dev/block/platform/omap\_hsmmc.1/by-name/recovery" adb push exploit.img /sdcard/exploit.img adb shell su -c "dd if=/sdcard/exploit.img of=/dev/block/platform/omap\_hsmmc.1/by-name/exploit" adb shell rm /sdcard/recovery.img /sdcard/exploit.img
TWRP can now be accessed holding the volume down button when powering on the device