This report is for authorized security testing, forensic research, and device recovery by the legitimate owner only. Unauthorized FRP bypass may violate local laws and terms of service. 2. Device & FRP Overview | Attribute | Details | |-------------------------|-------------------------------------------| | Device | Moto E4 Plus (XT1770, XT1773) | | Base OS | Android 7.1.1 Nougat | | Security Patch Level | Varies (critical for exploit viability) | | FRP Trigger | Google account removal after factory reset without prior removal | | Known Vulnerability | Accessibility menu + Add account activity bypass |
| Component | Weakness | |-----------|----------| | Settings app | The “Paste → Settings” entry point is not protected by FRP state. | | Accessibility Menu | Grants global system overlay permissions that escape FRP sandboxing. | | Add account flow | Generic account manager activity can be launched from Accessibility, bypassing Google’s FRP lock. | | Chrome Help section | Opens a fully functional browser outside the FRP-restricted activity stack. |
Technical Analysis Report: FRP Bypass on Moto E4 Plus (Model XT1770) Date: April 16, 2026 Classification: Security Research / Educational Use Only 1. Executive Summary The Motorola Moto E4 Plus (XT1770) is a budget smartphone originally shipped with Android 7.1.1 Nougat. Like all Android devices post-Android 5.0, it implements Factory Reset Protection (FRP) as a theft-deterrent mechanism. This report details a known, repeatable method to bypass FRP on this specific device using a combination of built-in Accessibility features and a third-party activity launcher.
