She didn’t flash a new firmware. She clicked , traced the userdata partition, and started pulling a raw binary image of the encrypted filesystem. Later, she’d crack the lock with hashcat. But first, she needed the raw clay.
Before starting, ensure you have the following components installed on your PC: sp flash auth bypass all mtk
MediaTek introduced a security mechanism starting with Android 8.0 (and strictly enforced on Android 10+) called . When enabled, the Boot ROM (BROM) requires a signed authentication file (usually auth_sv5.auth ) before allowing any preloader or DA (Download Agent) execution. She didn’t flash a new firmware