Can I reverse the process and re-enroll and make it look, as if I never used this? Will FakeMurk work with this?

[Su4o]

I want to use sh1mmer on ver Version 116.0.5845.120 (Official Build) (64-bit) (octopus stable-channel) but apparently "...the exploit has been patched, which may happen in ChromeOS v112+."

So i did some searching... and found this.

but then realized that in the post it says "VERY IMPORTANT: Reinstalling removes hardware id, so you cant re-enroll. Ill update to see if mrchromeboxe's HWID writer works"

now i want to use FakeMurk to re-enroll my computer to the school. Will it work? Here is some info of my chromebook.

Google Chrome: Version 116.0.5845.120 (Official Build) (64-bit) Platform: 15509.63.0 (Official Build) stable-channel octopus Channel: stable-channel Firmware Version: Google_Fleex.11297.296.0 ARC Enabled: true ARC: 10634276 Enterprise Enrolled: true Developer Mode: false

---

know anything?

[TheMemeSniper]

fakemurk doesn't edit your HWID

[Su4o]

Yeah, but that's not my problem. Here lemme explain...

So, to first get sh1mmer, we do the steps. but stupid me has updated to ChromeOS 116. and now..

"The Fog... (Google's response, and why this might not be working for you) Downgrading and unenrollment has been patched by google. If your chromebook has never updated to version 112 before (check in chrome://version), then you can ignore this and follow the normal instructions. If not, unenrollment will not work as normal. If you aren't willing to take apart your chromebook to unenroll, you can use an affiliated project, E-HALCYON to boot into a deprovisioned environment temporarily"

So I went to Halcyon, but i found out this while reading the instructions "Now, you'll need to boot into SH1MMER, and press the Un-Enroll option. It won't truly unenroll you if you've received the 112 update patching unenrollment and downgrading, but it is still a necessary step for the rest of this. If you've never used SH1MMER before or don't have an image lying around, make sure to follow all the instructions on sh1mmer.me for unenrollment before proceeding with the rest of the tutorial here

Next, you need a version 107 recovery image corresponding to your board, which you can pick up from chrome100.dev. Once you've downloaded the right image for your board and have confirmed it's for version 107, unzip it and save it to a safe place. Now open up a terminal and type in the following commands (make sure to replace /path/to/recovery/image.bin with the actual path)

git clone https://github.com/MercuryWorkshop/RecoMod cd RecoMod chmod +x recomod.sh sudo ./recomod.sh -i /path/to/recovery/image.bin --halcyon --rw_legacy"

here's the problem. Terminal would be blocked even if i used shimmer cause once again, i am on ChromeOS Ver 116 and if i try sh1mmer it wouldn't actually un-enroll my device. So I try finding a different way and i found this,
I can open bash. So if i'm right here is a way i can do it.

1. boot sh1mmer
2. get 107 board card (im octopus board) Screen recording 2023-10-17 18.37.00.webm
3. now get the image.bin to a safe place. For example: bin └── chromebin └── chromeos_15117.111.0_octopus_recovery_stable-channel_mp-v31.bin
4. boot up the terminal (aka, instead) boot up sh1mmer and choose the open bash option.
5. git clone https://github.com/MercuryWorkshop/RecoMod cd RecoMod chmod +x recomod.sh sudo ./recomod.sh -i /bin/chromebin/chromeos_15117.111.0_octopus_recovery_stable-channel_mp-v31.bin --halcyon --rw_legacy"
6. "The script will modify the image in place, and it can now be flashed with a standard recovery tool onto a USB of your choice.

Enable developer mode and get to the dev mode block screen similarly to how you would with SH1MMER, then plug in the USB. The recovery screen will show up, and at this point you need to start spamming the E key on your keyboard. It will begin a 5 minute wait sequence, and near the end of the 5 minutes start spamming E again. You will only have to wait 5 minutes once, subsequent boots will have the 5 minute wait omitted"

ok now, here is kinda the big issue "Enable developer mode and get to the dev mode block screen similarly to how you would with SH1MMER, then plug in the USB. The recovery screen will show up, and at this point you need to start spamming the E key on your keyboard. It will begin a 5 minute wait sequence, and near the end of the 5 minutes start spamming E again. You will only have to wait 5 minutes once, subsequent boots will have the 5 minute wait omitted"

How am i supposed to do that when im still on ChromeOS 116?!

And now comes this step... "The boot splash will show, and you will enter a special menu. Use arrow keys to navigate the cursor down to "activate halcyon environment" and press enter. Then navigate down to "Install halcyon semi-tethered" and wait for it to finish. Once it's finished, go back to "activate halcyon environment" and press "Boot halcyon semi-tethered". and you will be booted into a downgraded and unenrolled ChromeOS environment."

there's still more. aaaaaaaa

How am i supposed to go to E halcyon environment in the first place if i don't have access to dev mode?

then i realized this step, "6. "The script will modify the image in place, and it can now be flashed with a standard recovery tool onto a USB of your choice." so i think of the chromebook recovery tool (tell me if this is correct or not) now we got the bin file to a usb using the chromebook recovery tool. so now here we are... in a 107 board... but i checked your faq on e-halcyon,

Why is my Chromebook "Missing or damaged?"

After installing E-Halcyon, you won't be able to boot Chrome OS normally. You'll have to keep the usb around to jumpstart the booting process

that's kinda a problem. is there any way to fix that? (we'll get to this later onto the fakemurk part and why i told you about this.)

im also going to use fakemurk too. so here we goo.

In fakemurk you can do the usual of making a dev chromebook (un-enrolled) to look like it is enrolled. So i wanna do this too. And i realised that there is a feature in fakemurk too that is pretty helpful to us.

"Mush contains the following features:

Extension disabler - allows you to toggle on and off any extension Root shell - gives you a bash shell as root. If you don't know what bash is ignore this Pollen editor - allows you to enable disable certain "policies" that administrators apply to your chromebook. Note that any policies starting with "Device" cannot be modified by Pollen, and will require lilac instead. Emergency revert - will immediately reverse changes made by fakemurk and go back to a normal verified mode enrolled chromebook.

---

So to finalise everything here you go. (thank you for reading all this. ir was a lot..)

1. "The script will modify the image in place, and it can now be flashed with a standard recovery tool onto a USB of your choice." so i think of the chromebook recovery tool (tell me if this is correct or not) How do you flash the image into a usb? with what tool and is it a .bin file or should be a .img

2. "After installing E-Halcyon, you won't be able to boot Chrome OS normally. You'll have to keep the usb around to jumpstart the booting process"

that's kinda a problem. is there any way to fix that?

3. is there a specific tutorial to follow. i found one on reddit, but the tutorial (sh1mmer tut for ver 116) said to change the .bin to a .img and then i got stuck. so any tutorial for sh1mmer using the e-halcyon project?

4. (practically 3) is there any way to revert all the changes i made an make it an enrolled chromebook?

thanks.

[TheMemeSniper]

1. it doesn't matter if it's a .bin or a .img it'll work the same, flash the image with the Chromebook recovery tool, balenaetcher, dd, whatever

2. if we found one it would've already been implemented

3. https://fog.gay

4. i believe the tethered mode of halcyon does this, though you'll have to keep the usb in at all times, it'll also need to be decently fast to be usable, sd cards should work too and are what i recommend because they're discreet

[Su4o]

hm ok. but how am i supposed to revert everything to an un-enrolled computer tho. Like if i need to return it?

[TheMemeSniper]

you recover, sign in and everything should be normal

[Su4o]

ok then. ill see if this works and come back.