下载Command line tools
twrp for nexus 9
Current and past versions of TWRP can be found at one of the mirrors below:
TWRP Install (Requires TWRP 2.8.4 or higher already installed):
Download the latest TWRP image file (.img) from the download link and boot TWRP. Go to install and find and select the Images... button. Browse to the image that you downloaded and select it. Choose recovery and swipe to flash.
Fastboot Install Method (No Root Required):
You will need the platform-tools from the Android SDK on your computer. Find the Android command line tools section on the page linked and install the SDK tools package. From the SDK Manager, download only the platform-tools to get adb and fastboot binaries.
Windows users will need proper drivers installed on their computer. You can try the simple FWUL adb/fastboot ISO or the Naked ADB drivers or the Universal ADB drivers if you don't already have a working driver installed
On your device, go into Settings -> About and find the Build Number and tap on it 7 times to enable developer settings. Press back and go into Developer Options and enable USB debugging. From your computer, open a command prompt and type:
adb reboot bootloader
You should now be in fastboot mode.
Download the correct image file and copy the file into the same folder as your adb and fastboot binaries. Rename the image to twrp.img and type:
fastboot flash recovery twrp.img
Note many devices will replace your custom recovery automatically during first boot. To prevent this, use Google to find the proper key combo to enter recovery. After typing fastboot reboot, hold the key combo and boot to TWRP. Once TWRP is booted, TWRP will patch the stock ROM to prevent the stock ROM from replacing TWRP. If you don't follow this step, you will have to repeat the install.
4.0 Installing NetHunter on top of Android
Now that you've either downloaded a NetHunter image or built one yourself, the next steps are to prepare your Android device and then install the image. "Preparing your Android device" includes:
unlocking your device and updating it to stock AOSP or LineageOS (CM). (Check point 1.0 for supported roms)
installing Team Win Recovery Project as a custom recovery.
installing Magisk to root the device
Once you have a custom recovery, all that remains is to flash the NetHunter installer zip file onto your Android device.
5.0 Post Installation Setup
Open the NetHunter App and start the Kali Chroot Manager.
Install the Hacker Keyboard from the NetHunter Store using the NetHunter Store app.
Install any other apps from the NetHunter app store as required.
Configure Kali Services, such as SSH.
Set up custom commands.
Initialize the Exploit Database.
第一次进入TWPR Recovery模式，若提示Enter Password，就点Cancel，然后勾选“Never show...”，点Select Language，选择Chinese，点OK，界面语言就变成了中文，然后你滑动下面的箭头进入八宫格界面
（6）当手机提示Enter Password，你就点“Cancel”（取消数据加密），然后点“Select Language”，选择简体中文，然后滑动下面的箭头进入八宫格界面