Requirements

1. DEBUG MODE, your device must be able to do this. Normally it is sufficient to dial the debug code *#*#33284#*#* (on Qualcomm), or in addition *#*#0574#*#* (Spreadtrum) to enable the USB debugging;

2. ADB, a versatile command-line tool that allows you to communicate with a device;

3. WEBIDE, the most common and complete of development tools. Choose an old version of Firefox (59 or earlier) or Pale Moon (28.6.1 or earlier), or use the official Kaios emulator (KaiOSRT). Alternatively to WebIDE you can use other command line development tools like Gdeploy, that uses NodeJS, or XPCshell, an XPConnect-enabled JavaScript Shell that lets you run JavaScript code.

Proceedings

1. Enable the debug mode on your device;

2. Connect the device to the PC using a USB cable;

3. Open WebIDE and connect to the "Remote runtime" (this should work on the official Kaiostr emulator), if not seen, start the "adb forward tcp:6000 localfilesystem:/data/local/debugger-socket" command and click again on "Remote runtime". If an error message about build date mismatch appears, you can safely ignore it. If the connection doesn't work, try rebooting the phone, running the "adb forward" command and connecting again.

4. Select the application's folder in the "Open packaged app" button of WebIDE.

5. With the triangular "Play button" at the top center of WebIDE, the app will be installed on your phone.

Difference between "normal sideload" and "Jailbreak"

The official jailbreak method differs from the normal sideload only in the fact that, after point 5, a "privileged factory reset" is required directly from the jailbreak application that we will install (OmniSD, Wallace or Wallace-Toolbox) by pressing the # key from it, in order to automatically activate all the "Developer" options. After the reset, you will need to repeat the whole procedure if you want to use these applications for a different use (sideload without PC or root permissions).

Difference between "Jailbreak" and "Root"

• Jailbreak is a process that enables the development menu and allows installing third-party apps.

• Rooting is a process that allows root-level of ADB console access (for more info visit the "ROOT" section).

Privileged mode

The privileged mode, as the word itself says, is a boot mode in which the user has full control over the development tools and hidden components of the device, such as the "Developer" menu in the "Settings" app, you can also debug on the pre-installed applications and access the "Device Preferences" from WebIDE.

This mode still allows you to obtain updates, and can be removed simply by performing a normal factory reset from the Settings app or from Recovery mode.

Developer menu

The "Developer" menu allows you to debug on a device, in addition to accessing ADB and DevTools, as well as various other utilities that can be consulted here. It is hidden inside the "Settings" app, and is visible only when the device is in "privileged mode".

How jailbreak works on KaiOS (diagram)

This new method was born on Discord from an idea of ​​Luxferre and Tbrrss on September 22, 2020 and is ideal for temporarily bringing up the Developer menu, so that you can enable easily ADB and DevTools.

This is probably the easiest and most versatile way of jailbreaking most existing KaiOS-based phones. We decided to call it W2D (web-to-dev) because it's based on the hidden but totally official (as confirmed by Fabrice, KaiOS architect) fact that MozActivity class is visible from the browser context.

It just calls a hidden activity in the Settings app that opens the developer menu directly:

new MozActivity({name: "configure", data: {target: "device", section: "developer"}})

As for usage, it's very simple for most KaiOS phones:

1. Go to https://w2d.bananahackers.net from the phone's browser and click "Launch Developer menu". Alternativelly use https://dorime.surge.sh/ and click on the "DORIME 2" button, in both cases this will open the hidden Developer Menu;

NOTE that for the Doro-branded KaiOS devices, all installation can currently only be done in FFBM mode because of the way ADB server is launched there.

Other applications similar to OmniSD

Luxferre has created various projects, including a custom privacy-oriented rom (GerdaOS) and a real library of extensions and various tools for KaiOS. Here are some applications developed by him, containing some features in common with OmniSD:

• GerdaOS File Manager, a modified version of the stock File Manager for KaiOS, that installs omnisd packages by not limiting itself to the "download" and "app" folders, unlike OmniSD;

• Wallace (see the "Temporary Root" page) is an application that enables root privileges and can perform "privileged reset". A classic version, a light version (without adbd binary file) and an optimized version for devices with Spreadtrum chipset are available for this app;

• Wallace-Toolbox (see the "Temporary Root" page) is the evolution of Wallace, which includes the same functions and various tools, such as the call recorder (KaiOS 2.5.2) and an IMEI repairer.

A safe jailbreak method consists in working exclusively on /cache or /userdata, the only two dynamic partitions, subject to various changes and events due to the use of the user from the first start. If these partitions are damaged, simply perform a factory reset to restore everything (when you perform "wipe data / factory reset" from recovery mode you are cleaning both /cache and /userdata).