DirtyRacun S-OFF Public Beta

DirtyRacun is the third release from Team Unlimited. It is a tool for gaining (radio) S-OFF and flashing a custom bootloader that supports full write/erase fastboot commands.

DirtyRacun does not provide root access, however with S-OFF this is a simple process of flashing superuser from recovery once you have finished this process.

DirtyRacun comes with NO WARRANTY (express or implied), and NO GUARANTEE OF FITNESS for any particular task. We have made every effort we can to make this a safe process for users however the authors disclaim any liability for damage to your phone or other materials or devices used during this process. The entire risk of running DirtyRacun lies with you, the user. By downloading and/or using any software, video file or text from this website you acknowledge and accept that the authors are not liable for any loss, material or otherwise howsoever caused.

DirtyRacun will permanently unlock NAND flash write protection on all supported devices.


Supported Devices:

This version of DirtyRacun supports the following device:

    HTC Evo 4G LTE (Jewel) - HBOOT 1.12 / 1.15 / 1.19 / 2.09

*If you have HBOOT 1.12 you must use the DirtyRacun process to upgrade your RUU to gain S-OFF. Please use the 1.15 or 1.19 RUU below, 1.12 is NOT compatible with 2.09.

WARNING: If you have previously downgraded your device with the HBOOT downgrade procedure then we cannot support your device for S-OFF.



  1. Supported Operating Systems:

    We only support Ubuntu 12.04 (and newer) 32bit, you may use a LiveCD if you have the wrong OS installed natively. LiveUSB will NOT work!

    Ubuntu 64bit, Ubuntu versions lower than 12.04, other Linux distros, Virtual Machines and Mac's will NOT work - we will not help you if you break your device!

  2. External SD card (2GB - 16GB) in your device.

  3. The original HTC USB cable for your device.

  4. Ensure that your battery is fully charged.

  5. You must be directly connected to a USB 2.0 port on your computer.
    USB 3.0 and USB hubs will NOT work!
    Unplug all USB devices if you are having trouble - USB Cameras, Wireless Mice, and other phones / mp3 players are known to cause problems.



  1. Backup the contents of your phone and external SD card before running this procedure. All data will be wiped from your device during the RUU process and there is small risk that data could be lost from your SD card.

  2. Download DirtyRacun:

  3. Untar ALL files from the download into /Downloads/DirtyRacun inside Ubuntu
    Do not put these files on your Windows partition if you are using a liveCD
    Do not unzip these files in Windows!

  4. cd into the folder where you extracted and run the following cmd:
    Note: This cmd returns a blank new line if you have done it correctly.

    • chmod 755 RabiesShot adb fastboot
  5. Check what mainver your phone is running

    • With your phone in Fastboot USB type the following:
    • sudo ./fastboot getvar mainver
  6. ONLY if you are running mainver 3.16.651.3 do Steps a - f below
    If you are running a mainver below 3.16.651.3 please continue to Step 7

    1. Install TWRP (other recoveries with working sudo ./adb might work) - We cannot help with this step!

    2. Download BabyRacun:

    3. Extract ALL files from the BabyRacun download into your DirtyRacun folder from Step 3

    4. Boot device into Recovery

    5. Open terminal and cd into your DirtyRacun folder, type:

      • sudo ./adb shell mount -o remount,rw /
      • sudo ./adb push babyracun /sbin
      • sudo ./adb shell
      • cd /sbin
      • chmod 755 babyracun
      • babyracun
      • exit
    6. If BabyRacun succeeds then type:
      • sudo ./adb reboot bootloader
  7. Relock your device (with your phone in fastboot):

    • Open terminal and cd into your DirtyRacun folder, type:
    • sudo ./fastboot oem lock
  8. Download the RUU for your current HBOOT and put it in your DirtyRacun folder:
    This step is REQUIRED even if you are on Stock RUU already!
    If you are on 1.12 please use RUU 1.15 or 1.19. 2.09 will not work if you are coming from 1.12!

  9. RUU your device (with your phone in fastboot):*
    Please note: After the second cmd your device should have a black background and silver HTC logo. When you see this screen proceed with the third cmd.

    • sudo ./fastboot erase cache
    • sudo ./fastboot oem rebootRUU
    • sudo ./fastboot flash zip RUU.zip

    If you get the following after you run RUU: "FAILED (remote: 90 hboot pre-update! please flush image again immediately)" then you need to rerun the sudo ./fastboot flash zip RUU.zip command again. Press the up arrow and enter.

  10. After you have verified that RUU completed sucessfully type the following cmd:

    • sudo ./fastboot reboot-bootloader
  11. HTC Dev Unlock your device:

    • Go to www.htcdev.com and choose "Unlock Bootloader"
    • Choose your device or "All Other Supported Models"
    • Open cmd from your unzipped DirtyRacun files
    • SKIP AHEAD to Step 8 on HTC Dev Instructions. DO NOT INSTALL ANY SOFTWARE!
    • Complete Steps 8 - Completion on Htc Dev site
    • Save your Unlock_code.bin file from your email to the DirtyRacun folder
    • Type the following in the cmd prompt:
      • sudo ./fastboot flash unlocktoken Unlock_code.bin
    • Select Yes on your phone when prompted.
      IMPORTANT If your phone does NOT prompt you to accept or decline the unlock DO NOT continue. You have missed a step and you need to go back and start over at the beginning of Step 9.
  12. DO NOT flash a custom recovery or superuser!!! If you do either of these go back to Step 6 and start over.

  13. Enable USB Debugging on your device

  14. Run RabiesShot from terminal

    • sudo ./RabiesShot
  15. Wait for the process to complete!


Troubleshooting / Errors:

If at any point during the process the phone turns of and is completely unresponsive for more than 5 minutes and the devices shows as QHSUSB_DLOAD proceed to the instructions for running RacunHunter.

Error: FAILED (remote: 22 loading zip info fail) while flashing 3.15.651.16 JellyBean RUU
Solution: Follow the directions on this XDA post. This fix is not supported in the IRC channel.


Linux DirtyRacun

DirtyRacun HBOOTs:

You must already be DirtyRacun S-OFF to use these HBOOTs.
With your phone in fastboot type the following cmds:

  • sudo ./fastboot erase cache
  • sudo ./fastboot oem rebootRUU
  • sudo ./fastboot flash zip RUU.zip
  • sudo ./fastboot reboot

HBOOT 1.15

HBOOT 1.19

HBOOT 2.09



Get the RacunHunter!

Support for DirtyRacun is on IRC channel #unlimited on freenode. If you do not have an IRC client you can use the link below.