Jio STB ADB Setup Guide (Windows 11 & 10)

A beginner-friendly, clutter-free walkthrough to enable network ADB debugging and sideload custom launchers/apps on supported Jio Set-Top Boxes using a Windows PC and your home Wi-Fi router.

adb install "filename.apk"

❤️ A quick note from Vishal Beniwal / Reddit u/ilikechocopies If you prefer me to do it for you, you can ship the box over—pay whatever your heart desires + shipping. Otherwise, just keep me in your blessings for future success!

Once you execute Stage 1, the script performs several handy quality-of-life modifications on your Jio STB:

• 🔓 ADB Enabled: Network ADB is activated (expires in 2037) so you can manage and sideload apps.
• 🚀 Monet Launcher Activated: Replaces the cluttered stock interface with a clean, customizable TV launcher. The stock launcher is suspended to prevent boot ad reversion.
• ⚡ Shevery (Shizuku-Compatible API) Installed: Standalone manager allowing supported apps to access privileged system APIs over ADB.
• 🛑 Automatic Firmware Updates Blocked: OTA auto-updates are disabled (com.jio.* on JMSC/JMSB and com.iwedia.* on JHS) so your setup doesn't get overwritten.
• 🚫 Startup Boot Ads Disabled: Annoying commercial promo and intro ads that display when powering on the STB are suppressed.

• Prerequisites
• Step-by-Step Guide
  • 1. Network Pairing
  • 2. Get Host IP
  • 3. Configure STB DNS via USB Bug
  • 4. Isolate Network & Temporarily Disable Firewall
  • 5. Run Docker
  • 6. Setup Technitium DNS
  • 7. Deploy TLS Containers
  • 8. Launch Proxy Listener (Model Specific)
  • 9. Initialize Git Bash & Health Check
  • 10. Execute Stage 1
  • 11. Verify ADB Connection
  • 12. Teardown & Reset
• How to Install Apps via ADB
• Advanced CLI & JHS Options
• Get Hands-On Help / Mail-In Setup
• Credits & Acknowledgments

Install these utilities on your Windows system before starting:

(Note: Android platform-tools ADB binaries are already bundled inside this folder).

• Connect your Windows PC to your primary home Wi-Fi.
• Connect your Jio STB to the same router (via standard Wi-Fi or Ethernet).
• Do not use Guest Wi-Fi (guest networks isolate connected devices from talking to each other).

Open Command Prompt (Win + R $\rightarrow$ cmd) and type:

ipconfig

Find Wireless LAN adapter Wi-Fi (or Ethernet if wired) and copy your IPv4 Address (example: 192.168.1.20).

1. Plug any USB thumb drive into the Jio STB.
2. Turn on the STB $\rightarrow$ Launch My Music $\rightarrow$ Settings $\rightarrow$ Select Eject USB.
3. Tap Internal Storage $\rightarrow$ Open Apps $\rightarrow$ Select the stock Settings app (gear icon).
4. Navigate to Network $\rightarrow$ Select your Wi-Fi network $\rightarrow$ Open Advanced IP Settings.
5. Change IP Settings from DHCP to Static.
6. Keep IP Address, Gateway, Subnet, and DNS 2 unchanged.
7. Set DNS 1 to your Windows PC's IPv4 Address from Step 2.
8. Save and ensure the STB reconnects to your Wi-Fi.

1. Unplug Incoming Internet: Unplug the WAN / incoming fiber cable from your router (keep the router powered on).

   • Both devices must communicate over the local network without active internet access.

2. Temporarily Disable Windows Defender Firewall:

   [!IMPORTANT] Windows Firewall frequently blocks incoming connections from the STB on port 53 (DNS) and port 8443/9443 (TLS proxy), causing the exploit to silently fail. You must temporarily turn it off:

   1. Press Win + R, type firewall.cpl, and press Enter.
   2. Click "Turn Windows Defender Firewall on or off" on the left menu.
   3. Select "Turn off Windows Defender Firewall (not recommended)" for both Private and Public network settings.
   4. Click OK. (You will re-enable it in Step 12 once finished.)

Launch Docker Desktop from your Start Menu and wait until the engine status switches to running.

1. Open the Technitium console in your browser at http://localhost:5380.
2. Go to Zones $\rightarrow$ Click Add Zone:
   • Zone Name: jio.com
   • Zone Type: Primary Zone
3. Click into jio.com $\rightarrow$ Click Add Record:
   • Name: acs.oss
   • Type: A
   • IP Address: Your Windows IPv4 Address from Step 2
4. Save the record and ensure the jio.com zone is Enabled.

1. Open File Explorer and navigate to sideload-jiostb/tls.
2. Click the address bar, type cmd, and press Enter.
3. In Command Prompt, run:

docker compose up -d

Depending on your model, pick Option A or Option B:

In the same Command Prompt window (inside the tls folder):

python -m pip install pycryptodome
python pass_front.py

(Leave this window running. pass_front.py includes a precomputed token fallback, so it works even if pycryptodome is absent).

JHS boxes enforce strict system CA certificate validation and reject the default certificate chain. Instead of python pass_front.py:

1. Open Git Bash in the main sideload-jiostb folder.
2. Run the automated eMudhra certificate minting script:

   ./jhs/run_acs.sh

(This automatically recovers the leaked eMudhra intermediate key, mints a certificate trusted by the STB's system store, and launches the proxy on ports 8443 and 9443. Leave this terminal open).

1. Open the main sideload-jiostb folder.
2. Right-click blank space $\rightarrow$ Show more options $\rightarrow$ Open Git Bash here.
3. (Optional but highly recommended) Prove your PC setup works before touching the TV:

   python doctor.py --quick
   python doctor.py --simulate

   --simulate sends a synthetic Inform through the proxy and GenieACS, verifying the entire chain is 100% operational.

Ensure Docker, Technitium, and your proxy listener (from Step 8) are active, then run:

./stage1.sh --list-devices

Select your STB when prompted. To run only the required payload without stripping extras, you can alternatively use:

./stage1.sh --tasks-only

In Git Bash, confirm your connection:

adb devices

Your device should now be listed with the status device.

Once ADB is confirmed and your setup is complete:

1. Stop pass_front.py / run_acs.sh by pressing Ctrl + C in its window (or run ./stage1.sh --stop).
2. In Git Bash, stop Docker containers:

   docker compose down

3. Reconnect your router's incoming WAN/Internet cable.
4. Turn Windows Defender Firewall back on: Press Win + R $\rightarrow$ firewall.cpl $\rightarrow$ Turn Windows Defender Firewall back on.

Since the built-in package installer UI is disabled on the STB, install any Android TV APK from your PC:

1. Connect your PC to the STB over ADB (if not already connected):

   adb connect <STB_IP_ADDRESS>:5555

2. Sideload your preferred application:

   adb install "C:\path\to\your_app.apk"

3. The app will immediately appear inside Monet Launcher.

If you find this guide too complicated or don't have the time to configure Docker, DNS records, and TLS certificates, I can handle the entire setup for you:

• 100% Free Guidance: The guide itself and any troubleshooting assistance you need to complete it yourself are completely free.
• Mail-In Modification: Send your box over, and I will unlock network ADB, configure Monet Launcher, and set everything up.
• Pricing: Pay whatever your heart desires + return shipping charges.
• Contact: Message me on Reddit at [u/ilikechocopies.

• Scope: Stage 1 performs modifications such as enabling ADB, queueing downgrade flags, installing Monet Launcher and Shevery, disabling TR-069 settings, and disabling startup ads.
• Root/Bootloader: This guide deliberately excludes unlock.sh and pull_boot.sh. Do not run Stage 2 utilities unless you know what you are doing.
• Liability: Use only on hardware you own or have explicit authorization to test.

• Documentation, Windows 11 Streamlining & Maintenance:
  Maintained by Vishal Beniwal (aka u/ilikechocopies
  The guide and any personal support are completely free. If you need me to do the process for you, pay whatever your heart desires + shipping!

• Original Vulnerability Research & Tooling:
  Massive respect to Bihaan Sen, ak_0o7, and Otus9051 for the reverse-engineering and original Housekeeping-PoC repository. Please star and support their project!

• JHS Series & eMudhra Chain Research:
  Huge thanks to Pavit Chhabra (@mesosan16 on Twitter) for helping add JHS series support.