Kali NetHunter Pro on POCO F1 (SDM845) — Complete Guide
Kali NetHunter Pro on POCO F1 (SDM845) — Complete Step-by-Step Guide (2026)
Turn your POCO F1 into a powerful Kali NetHunter Pro device with this complete, beginner-to-advanced guide.
No missing steps. No guesswork. Just a clean install that works.
🔥 Overview
This guide will help you:
- Install a stable Android base (Project Elixir Android 14)
- Flash Kali NetHunter Pro correctly
- Fix black screen issues
- Enable OTG (USB host mode)
- Avoid common mistakes that cause bootloops
Installation Flow
flowchart TD
A[Install Drivers & Tools] --> B[Flash TWRP]
B --> C[Flash Project Elixir ROM]
C --> D[Boot Android Once]
D --> E[Check Display Panel]
E --> F[Flash Kali NetHunter]
F --> G[Fix Black Screen]
G --> H[Enable OTG Optional]
📦 Step 0 — Requirements
Download and install:
- ADB Drivers: https://adb.clockworkmod.com
- Platform Tools: https://developer.android.com/tools/releases/platform-tools
⚠️ Use USB 2.0 only to avoid flashing errors.
📥 Step 1 — Download Files
Kali NetHunter
https://www.kali.org/get-kali/#kali-mobile
Download SDM845
Project Elixir ROM (MANDATORY)
https://sourceforge.net/projects/project-elixir/files/fourteen/beryllium/
Download latest: ProjectElixir_4.x_beryllium-14.0-XXXX-OFFICIAL.zip
TWRP Recovery
https://twrp.me/xiaomi/xiaomipocophonef1
Download latest POCO F1 TWRP image
⚡ Step 2 — Flash TWRP
1
fastboot flash recovery twrp.img
🚨 Step 3 — Flash Project Elixir (IMPORTANT)
Inside TWRP:
- Go to Install
- Select Project Elixir ZIP
- Swipe to flash
Why this matters
This provides:
- Updated firmware
- Vendor compatibility
- Proper kernel support
Without this → Kali will fail.
🔁 Step 4 — Boot Android Once
Reboot system and let Android fully load.
⚠️ Do NOT skip this.
🖥️ Step 5 — Find Display Panel
In TWRP Terminal:
1
cat /proc/cmdline
Look for:
msm_drm.dsi_display0
Examples:
- tianma → use tianma boot image
- ebbg → use ebbg boot image
🚀 Step 6 — Flash Kali NetHunter Pro
1
2
3
4
5
6
7
8
9
adb reboot bootloader
fastboot erase userdata
fastboot flash userdata rootfs.img
fastboot flash boot panel-boot.img
fastboot reboot
⚠️ Step 7 — Black Screen Fix
After reboot, screen may stay black.
👉 Press Volume Up or Down
Why this happens
flowchart LR
A[Kali Booted] --> B[Display Not Initialized]
B --> C[Black Screen]
C --> D[Volume Button]
D --> E[Display Activates]
⏳ Step 8 — First Boot
Wait patiently.
Do NOT:
- Force reboot
- Panic
- Interrupt
🔌 Optional — Enable OTG (USB Host Mode)
⚠️ Run inside Kali NetHunter terminal
Install tools
1
sudo apt install -y abootimg device-tree-compiler
Modify device tree
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
TMPDIR=$(mktemp -d) && cd $TMPDIR
cp /usr/lib/linux-image-*/qcom/sdm845-xiaomi-beryllium-*.dtb orig.dtb
dtc -o tmp.dts orig.dtb
sed -i 's/dr_mode = "peripheral"/dr_mode = "host"/' tmp.dts
dtc -o host.dtb tmp.dts
cat /boot/vmlinuz-* host.dtb > kernel_dtb
dd if=/dev/disk/by-partlabel/boot of=boot.img
abootimg -u boot.img -k kernel_dtb
🧪 Test Safely (Recommended)
Export boot image:
1
scp boot.img user@pc:/path/
Then:
1
fastboot boot boot.img
💀 Flash Permanently
1
2
fastboot flash boot boot.img
fastboot reboot
Bluetooth Not Working? Fix It
If Bluetooth refuses to turn on after installing Kali NetHunter Pro, this is a firmware mismatch issue.
⚠️ Run inside Kali NetHunter terminal
1
2
3
4
5
6
sudo su
rm /lib/firmware/qca/crnv21.bin
cp /lib/firmware/updates/qca/beryllium/crnv21.bin /lib/firmware/qca/
sync
systemctl enable bluetooth
reboot
❌ Common Mistakes
- Skipping Project Elixir
- Using wrong display panel
- Using USB 3.0
- Not booting Android once
- Flashing wrong boot image
🏁 Final Result
If done correctly:
✅ Kali NetHunter Pro boots
✅ Touch and display work
✅ OTG supported
✅ Full Linux environment ready
🎯 Conclusion
You now have a fully functional Kali NetHunter Pro device on POCO F1.
Use it wisely.