OPlus Tracker

Collection of tools for querying and resolving OTA / SOTA / OPEX / IOT / Downgrade update links for OPPO, OnePlus, Realme devices (ColorOS / OxygenOS).

Current scripts:

C16_transer.py → resolves dynamic download links (ColorOS 16+)
tomboy_pro.py → main OTA query tool (full / delta / gray / preview / anti-query bypass)
opex_query.py → dedicated OPEX query
opex_analyzer.py → analyse what OPEX fixed for
sota_query.py → SOTA (Software OTA / modular APK) query
sota_changelog_query.py → SOTA (Software OTA / modular APK) Changelog query
iot_query.py → legacy & IoT server query
iot_query_new.py → legacy & IoT server query (new api)
downgrade_query.py → query official downgrade packages (CN only)
realme_edl_query.py → query official EDL packages for Realme
changelog_query.py → query specific version changelog
desc_query.py → query specific version changelog url
config.py → configuration for public keys, server addresses, and API endpoints.

`C16_transer.py`

Features

Resolve dynamic links with downloadCheck?
Displays final download link + expiration time

Dependencies

requests

Install:

pip install requests

Usage

python C16_transer.py "https://gauss-componentotacostmanual-cn.allawnfs.com/.../downloadCheck?Expires=1767225599&..."

`tomboy_pro.py`

Main advanced OTA query tool — supports full ROM, delta updates, gray channel, preview builds, Genshin editions, anti-query bypass (post-Oct 2025), etc.

Main Features

Auto suffix completion (_11.A / _11.C / _11.F / _11.H / _11.J)
Modes: manual, client_auto, server_auto, taste
--anti 1 bypass for ColorOS 16 restricted models
Delta OTA via --components

Dependencies

requests
cryptography

pip install -r requirements.txt

Usage

python tomboy_pro.py <OTA_PREFIX> <REGION> [options]

Positional

<OTA_PREFIX> PJX110 / PJX110_11.A / PJX110_11.C.36_...
<REGION> cn cn_cmcc eu in sg ru tr th gl tw my vn id sa mea ph la br roe

Popular flags

Flag	Meaning	Example / Note
`--model`	Force model	`--model PJX110`
`--gray 1`	Test channel (mainly Realme, few OPlus)
`--mode taste`	Often used with `--anti 1`
`--genshin 1/2`	Genshin edition (YS / Ovt suffix)
`--pre 1`	Preview build (needs `--guid`)
`--guid 64hex`	64-char device GUID	Required for pre/taste
`--components`	Delta query (name:fullversion,...)	`--components System:PJX110_11...`
`--anti 1`	Bypass ColorOS 16 query restriction (~Oct 2025)	Usually + `--mode taste`
`--nvid 8digit`	Use custom NV Carrier ID to query
`--graynew 1`	Query FWs not in taste mode but in gray server
`--recruit 1`	Query for Beta Stage FWs which needs to apply
`--orginal_link 1`	Print Original Link & Resolved Link
`--pki 1`	For fix OS17 unable to query for Internal(Testing) Version

Examples

# Basic CN query
python tomboy_pro.py PJX110_11.A cn

# Anti-query bypass for ColorOS 16
python tomboy_pro.py PLA110_11.A cn --anti 1

# Delta OTA
python tomboy_pro.py PJX110_11.C.36_1360_20250814 cn --components System:PJX110_11.C.35_...

# Preview with GUID
python tomboy_pro.py PJX110_11.A cn --pre 1 --guid 0123456789abcdef... (64 chars)

# Custom NVID
python tomboy_pro.py RMX3301_11.H sg --nvid 00011011

Note: Get Delta OTA is pretty special, you may get the components info by run getprop | grep ro.oplus.version | sed -E 's/\[ro\.oplus\.version\.([^]]+)\]: \[([^]]+)\]/\1:\2/g' | tr '\n' ',' | sed 's/,$//' | sed 's/base/system_vendor/g' in your device, and make sure using the full OTA version and the same version as your component

`opex_query.py`

Dedicated tool to query OPEX.

Usage

python opex_query.py <FULL_OTA_VERSION> <REGION> --info <OS_VERSION>,<BRAND>

# Examples
python opex_query.py PJZ110_11.C.84_1840_202601060309 cn --info 16,oneplus
python opex_query.py RMX5200_11.A.63_... --info 16,realme

Note: Requires complete OTA version string (at least 3 _ segments).

`opex_analyzer.py`

Tool for analyse whay opex package fixed

Usage

python opex_analyzer.py <URL>

`sota_query.py`

Queries SOTA (Software OTA) — mainly for ColorOS System APPs updates.

Usage

python sota_query.py OTA_VERSION REGION --brand BRAND --coloros COLOROS

# Examples
python sota_query.py PJD110_11.F.43_2430_202603192242 cn --brand OnePlus --coloros ColorOS16.0.0

python sota_query.py CPH2573_11.F.43_2430_202603192142 in --brand OnePlus --coloros ColorOS16.0.0

Note: All parameters are required (check the example)

`sota_changelog_query.py`

Queries SOTA (Software OTA) changelog — mainly for ColorOS System APPs updates changelogs.

Usage

python sota_changelog_query.py OTA_VERSION REGION --brand BRAND --coloros COLOROS

# Examples
python sota_changelog_query.py PJD110_11.F.43_2430_202603192242 cn --brand OnePlus --coloros ColorOS16.0.0

python sota_changelog_query.py CPH2573_11.F.43_2430_202603192142 in --brand OnePlus --coloros ColorOS16.0.0

Note: The same as sota_query.py but query for changelog only

`iot_query.py`

Query tool using the old iota.coloros.com special server.
Often returns older or special builds no longer available through normal channels.

Usage

python iot_query.py <OTA_PREFIX> cn [options]

# Examples
python iot_query.py OWW221 cn
python iot_query.py OWW221_11.A cn --model OWW221

Note: Only supports region cn. Results may be outdated.

`iot_query_new.py`

Query tool for some legacy devices.

Usage

python iot_query_new.py OTA_PREFIX HARDWARE_VERSION REIGON

# Example
python iot_query_new.py M6763C A83 cn

Note: For devices using this API hardware_version is ro.product.name.

`downgrade_query.py` & `downgrade_query_old.py`

Query official downgrade packages from downgrade.coloros.com (CN only).
Useful when you need older official firmware versions that are still signed and allowed for downgrade.

Features

Uses AES-256-GCM + RSA-OAEP encryption (matches official downgrade server)
Requires real DUID (64-char SHA256 string from *#6776#)
Needs PrjNum (5-digit project number)
Returns download URL, changelog, version info, MD5, publish time

Dependencies

requests
cryptography

Install:

pip install requests cryptography

Usage of `downgrade_query.py`

python downgrade_query.py <OTA_PREFIX> <PrjNum> <snNum> <DUID> [--debug 0/1]

# Example
python downgrade_query.py PKX110_11.C 24821 a1b2c3e4 498A44DF1BEC4EB19FBCB3A870FCACB4EC7D424979CC9C517FE7B805A1937746

Constraints

<OTA_PREFIX> : Must contain at least one _ (e.g. PKX110_11.C)
<PrjNum> : Exactly 5 digits (e.g. 24821)
<snNum> : SN Number from phone
<DUID> : 64-character SHA256 string (get from dialer code *#6776#)
[--debug 0/1] : Get metadata for official downgrade process

Output example

Fetch Info:
• Link: https://...
• Changelog: ...
• Version: ColorOS 15.0 (Android 15)
• Ota Version: PKX110_11.C.12_...
• MD5: abcdef123456...

Usage of `downgrade_query_old.py`

python downgrade_query_old.py <OTA_PREFIX> <PrjNum>

# Example
python downgrade_query_old.py PKX110_11.C 24821

Constraints

<OTA_PREFIX> : Must contain at least one _ (e.g. PKX110_11.C)
<PrjNum> : Exactly 5 digits (e.g. 24821)

Output example

Fetch Info:
• Link: https://...
• Changelog: ...
• Version: ColorOS 15.0 (Android 15)
• Ota Version: PKX110_11.C.12_...
• MD5: abcdef123456...

Note: Only works for models/regions that support official downgrade. Server may reject invalid DUID or project number.

`realme_edl_query.py`

Query tool using REALME Server to query for EDL ROM.

Usage

python realme_edl_query.py <VERSION_NAME> <REGION> <DATE>

# Examples
python realme_edl_query.py "RMX3888_16.0.3.500(CN01)" CN 202601241320

Output example

Querying for RMX8899_16.0.3.532(CN01)

Fetch Info:
• Link: https://rms11.realme.net/sw/RMX8899domestic_11_16.0.3.532CN01_2026013016580190.zip

Note: You may get the date from full OTA Version, the third part in _

`changelog_query.py`

Query for specific version changelog

Constraints

<OTA_PREFIX> PJD110_11.F.39_2390
<REGION> cn cn_cmcc eu in sg ru tr th gl tw my vn id sa mea ph la br roe
[--pre 0/1] : Get Testing Version / Testing devices changelogs

Usage

python changelog_query.py <OTA_VERSION> <REGION>

# Examples
python changelog_query.py PJD110_11.F.39_2390 cn

python changelog_query.py PLP110_11.A.40_0400 cn --pre 1

Note: You are allow not to use full OTA Version, but needed two _ at least(include Version & Version Code)

`desc_query.py`

Query for specific version changelog url

Constraints

<OTA_PREFIX> PJD110_11.F.39_2390
<REGION> cn cn_cmcc eu in sg ru tr th gl tw my vn id sa mea ph la br roe

Usage

python desc_query.py <OTA_VERSION> <REGION>

# Examples
python desc_query.py PJD110_11.F.39_2390 cn

python desc_query.py PLP110PRE_11.A.40_0400 cn

Note: You are allow to use full OTA Version, but also supported two _ at least(include Version & Version Code)

Important Notes (2025–2026)

ColorOS 16 introduced strong anti-query restrictions (~Oct 2025). Use --anti 1 + taste mode + base version (e.g. 11.A) in tomboy_pro.py to bypass on many models.
Dynamic links from downloadCheck? usually expire in 10–30 minutes — use C16_transer.py immediately after getting them.
downgrade_query.py are CN-only at the moment.
All tools regenerate encryption keys / device IDs per request to reduce server-side blocking.

Name		Name	Last commit message	Last commit date
.gitignore		.gitignore
C16_transer.py		C16_transer.py
LICENSE		LICENSE
MAINTENANCE.md		MAINTENANCE.md
README.md		README.md
README_zh-cn.md		README_zh-cn.md
changelog_query.py		changelog_query.py
config.py		config.py
desc_query.py		desc_query.py
downgrade_query.py		downgrade_query.py
downgrade_query_old.py		downgrade_query_old.py
earbuds_query.py		earbuds_query.py
iot_changelog_query.py		iot_changelog_query.py
iot_query.py		iot_query.py
iot_query_new.py		iot_query_new.py
opex_analyzer.py		opex_analyzer.py
opex_query.py		opex_query.py
realme_edl_query.py		realme_edl_query.py
requirements.txt		requirements.txt
sota_changelog_query.py		sota_changelog_query.py
sota_query.py		sota_query.py
tomboy_pro.py		tomboy_pro.py

Latest commit

History

Folders and files

Repository files navigation

OPlus Tracker

C16_transer.py

Features

Dependencies

Usage

tomboy_pro.py

Main Features

Dependencies

Usage

Positional

Popular flags

Examples

opex_query.py

Usage

opex_analyzer.py

Usage

sota_query.py

Usage

sota_changelog_query.py

Usage

iot_query.py

Usage

iot_query_new.py

Usage

downgrade_query.py & downgrade_query_old.py

Features

Dependencies

Usage of downgrade_query.py

Constraints

Output example

Usage of downgrade_query_old.py

Constraints

Output example

realme_edl_query.py

Usage

Output example

changelog_query.py

Constraints

Usage

desc_query.py

Constraints

Usage

Important Notes (2025–2026)

About

Resources

Stars

Watchers

Forks

Releases

Packages

Contributors

Languages

`C16_transer.py`

`tomboy_pro.py`

`opex_query.py`

`opex_analyzer.py`

`sota_query.py`

`sota_changelog_query.py`

`iot_query.py`

`iot_query_new.py`

`downgrade_query.py` & `downgrade_query_old.py`

Usage of `downgrade_query.py`

Usage of `downgrade_query_old.py`

`realme_edl_query.py`

`changelog_query.py`

`desc_query.py`