How To Running Recowvery, Flashing Twrp Recovery Together With Rootage Lg V20 (H918, H830, Us996)

How to Running Recowvery, Flashing TWRP Recovery in addition to Root LG V20 (H918, H830, US996).

Flashing TWRP & Root LG V20. Once y'all lead keep successfully unlocked bootloader on LG V20, it's fourth dimension to flash or install TWRP recovery nd beginning this device. By installing TWRP recovery on Android device the user volition larn some benefits. For example; the user volition able to install a custom ROM in addition to custom inwardness to larn the faster in addition to amend surgical procedure on their LG V20 device, The user tin bathroom block ads from running Apps, the user tin bathroom automatically applications run at background in addition to it volition increase surgical procedure in addition to battery life, of course, y'all tin bathroom run Titanium Backup to restore all apps in addition to data, in addition to much to a greater extent than fun. 

But at that spot is a picayune occupation when the LG V20 user wants to flash TWRP on their device. We know that installing TWRP recovery direct via fastboot is restricted yesteryear a secure system. Therefore this guide volition aid the LG V20 user to install TWRP using Dirty Cow exploit in addition to using recowvery exploit. If y'all tin bathroom empathise all of the measurement below, this would endure slow to do. Before nosotros continue this guide, I would endure appreciated to developer jcadduono at this threat.
http://forum.xda-developers.com/v20/development/h918-recowvery-unlock-v20-root-shell-t3490594
This threat for providing a workaround to install TWRP recovery on LG V20 using the Dirty Cow exploit in addition to using recowvery exploit.

Warning :
  • Rooting LG V20 device may void telephone warranty.
  • This guide may crusade your LG V20 bricked if y'all produce non follow all measurement correctly.
  • Flashing TWRP volition erase all information in addition to installed App, so brand certain to backup completely your phone.
  • The procedure volition accept a while, brand certain your battery fully charged or at to the lowest degree has 75% - 80% of battery capacity.  

Unlock Bootloader.

There is a unlike method to unlock bootloader for each LG V20 versions.
  1. Unlock Bootloader LG V20 for H918 (T-Mobile) in addition to H830. Here
  2. asds/search?q=guide-to-unlock-bootloader-lg-v20-h918-h830
  3. For LG V20 US996 (U.S. Cellular) - Here
  4. asds/search?q=guide-to-unlock-bootloader-lg-v20-h918-h830

Prerequisite.

  1. Make certain ADB in addition to fastboot installed on your computer, You tin bathroom larn ADB in addition to fastboot for windows or mac here. extract all file inwards the same folder. for instance c:\adb
  2. http://forum.xda-developers.com/android/software/host-tools-t3402497
  3. Download LG USB driver.
    • Windows - Here
    • http://redirect.viglink.com/?format=go&jsonp=vglnk_148221033046416&key=f0a7f91912ae2b52e0700f73990eb321&libId=iwx018a701000n4o000DA1bhr14rgwlxii&loc=http%3A%2F%2Fforum.xda-developers.com%2Fv20%2Fdevelopment%2Fh918-recowvery-unlock-v20-root-shell-t3490594&v=1&out=http%3A%2F%2Ftool.lime.gdms.lge.com%2Fdn%2Fdownloader.dev%3FfileKey%3DUW00120120425&title=%5BH918%7CUS996%7CH830%5D%20recowvery%2C%20unlock%20your%20V20%E2%80%A6%20%7C%20LG%20V20&txt=http%3A%2F%2Ftool.lime.gdms.lge.com%2Fdn%2Fdow...%3DUW00120120425
    • Mac - Here
    • http://redirect.viglink.com/?format=go&jsonp=vglnk_148221033837117&key=f0a7f91912ae2b52e0700f73990eb321&libId=iwx018a701000n4o000DA1bhr14rgwlxii&loc=http%3A%2F%2Fforum.xda-developers.com%2Fv20%2Fdevelopment%2Fh918-recowvery-unlock-v20-root-shell-t3490594&v=1&out=http%3A%2F%2Ftool.lime.gdms.lge.com%2Fdn%2Fdownloader.dev%3FfileKey%3DUW00320110909&title=%5BH918%7CUS996%7CH830%5D%20recowvery%2C%20unlock%20your%20V20%E2%80%A6%20%7C%20LG%20V20&txt=http%3A%2F%2Ftool.lime.gdms.lge.com%2Fdn%2Fdow...%3DUW00320110909
  4. Download TWRP Recovery for your LG V20 versions.
    • H918
    • http://redirect.viglink.com/?format=go&jsonp=vglnk_148223838598329&key=f0a7f91912ae2b52e0700f73990eb321&libId=iwx018a701000n4o000DA1bhr14rgwlxii&loc=http%3A%2F%2Fforum.xda-developers.com%2Fv20%2Fdevelopment%2Fh918-recowvery-unlock-v20-root-shell-t3490594&v=1&out=https%3A%2F%2Fbuild.nethunter.com%2Ftest-builds%2Ftwrp%2Flge%2Ftwrp-3.0.2-1-h918.img&title=%5BH918%7CUS996%7CH830%5D%20recowvery%2C%20unlock%20your%20V20%E2%80%A6%20%7C%20LG%20V20&txt=https%3A%2F%2Fbuild.nethunter.com%2Ftest-bui...0.2-1-h918.img
    • H830.
    • http://redirect.viglink.com/?format=go&jsonp=vglnk_148223840091131&key=f0a7f91912ae2b52e0700f73990eb321&libId=iwx018a701000n4o000DA1bhr14rgwlxii&loc=http%3A%2F%2Fforum.xda-developers.com%2Fv20%2Fdevelopment%2Fh918-recowvery-unlock-v20-root-shell-t3490594&v=1&out=https%3A%2F%2Ftwrp.me%2Fdevices%2Flgg5h830.html&title=%5BH918%7CUS996%7CH830%5D%20recowvery%2C%20unlock%20your%20V20%E2%80%A6%20%7C%20LG%20V20&txt=https%3A%2F%2Ftwrp.me%2Fdevices%2Flgg5h830.html
    • US996
    • http://redirect.viglink.com/?format=go&jsonp=vglnk_148223839486530&key=f0a7f91912ae2b52e0700f73990eb321&libId=iwx018a701000n4o000DA1bhr14rgwlxii&loc=http%3A%2F%2Fforum.xda-developers.com%2Fv20%2Fdevelopment%2Fh918-recowvery-unlock-v20-root-shell-t3490594&v=1&out=https%3A%2F%2Fbuild.nethunter.com%2Ftest-builds%2Ftwrp%2Flge%2Ftwrp-3.0.2-1-us996.img&title=%5BH918%7CUS996%7CH830%5D%20recowvery%2C%20unlock%20your%20V20%E2%80%A6%20%7C%20LG%20V20&txt=https%3A%2F%2Fbuild.nethunter.com%2Ftest-bui....2-1-us996.img
  5. Download recowvery binaries (download all of these)
  6. https://build.nethunter.com/android-tools/dirtycow/arm64/
  7. Download the latest SuperSU from the official website.
  8. https://download.chainfire.eu/897/SuperSU/BETA-SuperSU-v2.67-20160121175247.zip

Running Recowvery on LG V20.

  1. Enable USB debugging.
  2. Enable developer options.
  3. Turn off your LG V20, 1 time it completely near downwardly in addition to so connect LG V20 to the reckoner via USB cable.
  4. Now, become to the ADB in addition to fastboot directory. for this, nosotros re-create them at c:\adb
  5. Open ascendance windows inwards this folder, How to produce it?
    • Press in addition to concur the shift key on the keyboard, in addition to so right-click mouse anywhere on empty space.
    • Now, click Open ascendance window here
  6. Once ascendance prompt windows already open, type the next ascendance at prompt to forced LG V20 reboot into bootloader.
    • adb reboot bootloader
  7. Now type the next ascendance to depository fiscal establishment check the connecter betwixt LG V20 in addition to the computer.
    • fastboot devices
  8. Now, type the next ascendance to run recowvery. Type it 1 yesteryear one
    • adb force dirtycow /data/local/tmp 
    • adb force recowvery-applypatch /data/local/tmp 
    • adb force recowvery-app_process64 /data/local/tmp 
    • adb force recowvery-run-as /data/local/tmp
  9. Command higher upward volition relieve recowery to temp folder on the computer, in addition to so type the next ascendance to pushing 
    • adb shell 
    • $ cd /data/local/tmp 
    • $ chmod 0777 * $ ./dirtycow /system/bin/applypatch recowvery-applypatch
  10. Wait for completion
    • $ ./dirtycow /system/bin/app_process64 recowvery-app_process64
  11. Wait for completion, your telephone (LG V20) volition await similar it's crashing
    • $ exit

    • adb logcat -s recowvery
  12. Wait for it to tell y'all it was successful, Then press CTRL + C
    • adb trounce reboot recovery
  13. Wait for LG V20 to kicking upward again, your recovery volition endure reflashed to stock.
    • adb shell 
    • $ getenforce
  14. It should tell Permissive, adjust source in addition to construct for your device!
    • $ cd /data/local/tmp 
    • $ ./dirtycow /system/bin/run-as recowvery-run-as 
    • $ run-as exec ./recowvery-applypatch boot
  15. Wait for it to flash your kicking icon this time.
    • $ run-as su
    • #
  16. Play some inwards your somewhat express beginning trounce total of possibilities
    • dd if=/sdcard/twrp.img of=/dev/block/bootdevice/by-name/recovery
      • where twrp.img is your TWRP file name
    • for example
    • dd if=/sdcard/twrp-3.0.2-0-beta4-h918.img of=/dev/block/bootdevice/by-name/recovery
  17. All ascendance higher upward volition flash TWRP recovery on LG V20.
  18. You tin bathroom read completely educational activity step 8 until measurement xvi at this link.
  19. https://github.com/jcadduono/android_external_dirtycow#running
  20. Finish

Flashing TWRP & Root LG V20.

Now nosotros lead keep got the permissive trounce inwards adb, in addition to so nosotros volition lead keep access to the partitions via dd. We volition transfer TWRP to internal storage using MTP, 
  1. Rename TWRP at prerequisite file higher upward to twrp.img
  2. We would run recowvery now, If you've rebooted since doing that, y'all volition demand to become dorsum in addition to produce that again.
  3. Type the next ascendance below.
    • adb force twrp-3.0.2-x-xxxx.img /sdcard/twrp.img 
    • adb shell 
    • $ run-as exec dd if=/sdcard/twrp.img of=/dev/block/bootdevice/by-name/recovery 
  4. wait for it to complete. in addition to so type
    •  $ reboot recovery
  5. You should endure within TWRP now.
  6. Just swap yes, if TWRP asks y'all to enable arrangement modifications.

Turn off forced encryption.

this measurement volition plough off forced encryption at kicking in addition to allow y'all to kicking a modified system. If you're flashing SuperSU.zip, it volition also produce this for y'all so this won't endure necessary. Download the latest Zip from here.
https://build.nethunter.com/android-tools/no-verity-opt-encrypt/

Flash SuperSU.

  • You tin bathroom flash SuperSU yesteryear flashing null file from prerequisites file above, it volition beginning LG V20 device.
  • If y'all don't flash either no-verity-opt-encrypt or SuperSU, y'all volition in all likelihood destination upward inwards a horrifying never-ending kicking loop of "corruption"!
  • Now, utilization Titanium Backup alongside SuperSu.
  • Format Data via button on the Wipe page inwards TWRP, it volition disable encryption later on flashing SuperSU or the no-verity-opt-encrypt zip
Once all measurement higher upward is done it's fourth dimension to larn total TWRP functions on LG V20 device. for instance Backup in addition to restore. Finish. Thank's for your attention. Good Luck.