I have Sharp AQUOS Crystal 306SH.
it's update by internet. cause i think, we make virtual update server, and updating Root binary.
I captured 'OTA Update' packet. but i don't know networking. cause can't analyze...
i just know a bit infomation... (capture file attached.)
First, Update server is "h ttp://dm-sharp2.redbend.com/dm".
using "Red Bend OMA-DM Client FOTA solution".
but i can't know other infomation...
cause write this thread.
help to root!
--150505 add
i'm upload new pcap file.
it's captured to updating aquos crystal. but it's not including some infomation maybe.
and i'm get some url at this pcap file.
h ttp://dl-sharp3.redbend.com:8080/VrmDLServerWEB/servlet/RequestDPServlet/DD/120318848_dp/DomainName/DEFAULT
h ttp://409f588200cd1dedd915-465d1c61f856116a191db7e16fb24e1c.r52.cf3.rackcdn.com/120318848_dp
file is 2015_04_27_195348.zip
this is not the way it will be very hard..
p.p it will be more easy if we have some one without updated phone
loonbg said:
this is not the way it will be very hard..
p.p it will be more easy if we have some one without updated phone
Click to expand...
Click to collapse
What is the sw version of the non updated phone?
acedamack said:
what is the sw version of the non updated phone?
Click to expand...
Click to collapse
s8216 10/05/2014
updated is SA300 12/11/2014
loonbg said:
s8216 10/05/2014
updated is SA300 12/11/2014
Click to expand...
Click to collapse
have a source code for 2 version, but this source code so different
WOW
That would take a while to do and that is the very hard way to do that. but thanks for trying
Source Code
I have a brand new crystal just bought it, and of course the first thing i wanna do is root. If you still need the source code mine is still original. S8216 I would love to help.
I have original to how could I help
richierich09 said:
I have a brand new crystal just bought it, and of course the first thing i wanna do is root. If you still need the source code mine is still original. S8216 I would love to help.
Click to expand...
Click to collapse
you can install https://play.google.com/store/apps/...e+box&pcampaignid=APPU_1_GCPtVKO_I4qvU_TKgOAG and show what vulnerability analysis report give you
Bluebox screencap
I also have held up on updating my Crystal in hopes of root, bought it very close to its release date because of its looks but dint bother to check if it was rooted. Would like to help as much as i can dispite the limited knowledge i have. Heres a screenshot of the bluebox results.
Mielmano said:
I also have held up on updating my Crystal in hopes of root, bought it very close to its release date because of its looks but dint bother to check if it was rooted. Would like to help as much as i can dispite the limited knowledge i have. Heres a screenshot of the bluebox results.
Click to expand...
Click to collapse
Don't Update !
s8216 10/05/2014 - have bug in Object Input Stream Serilization - CVE-2014-7911 and CVE-2014-4322 - giefroot and other is CVE-2015-1474 (but we don't have still root for this last)
updated is SA300 12/11/2014 - if some one have updated like me only hope is CVE-2015-1474 and CVE-2014-4322
hey i found somthing, i can get file from system/app or file in system without root
whynot4444 said:
hey i found somthing, i can get file from system/app or file in system without root
Click to expand...
Click to collapse
yes but you can't edit anything without root also you don't have access to data ..
loonbg said:
yes but you can't edit anything without root also you don't have access to data ..
Click to expand...
Click to collapse
no, just pull file into internal device, then copy to pc to edit, and push it again
loonbg said:
Don't Update !
s8216 10/05/2014 - have bug in Object Input Stream Serilization - CVE-2014-7911 and CVE-2014-4322 - giefroot and other is CVE-2015-1474 (but we don't have still root for this last)
updated is SA300 12/11/2014 - if some one have updated like me only hope is CVE-2015-1474 and CVE-2014-4322
Click to expand...
Click to collapse
I have tried giefroot, and posted my results, with both an un-updated and updated phone.
It fails either way.
whynot4444 said:
no, just pull file into internal device, then copy to pc to edit, and push it again
Click to expand...
Click to collapse
Not possible unless the given partition is set to RW. Without root or a custom recovery then it isn't happening.
With that said, I posted some questions over in a thread in the Q&A section. If anyone can assist let me know there or pm me.
Hes actually og t a point here, OTA is a huge flaw here even though its secured. The source file and everything should have the code to decode the OTA files correct? once we decode them we can basically recode them and use a man in the middle type deal and push the "update" to the phone and get root or maybe even custom roms.
jamer123 said:
Hes actually og t a point here, OTA is a huge flaw here even though its secured. The source file and everything should have the code to decode the OTA files correct? once we decode them we can basically recode them and use a man in the middle type deal and push the "update" to the phone and get root or maybe even custom roms.
Click to expand...
Click to collapse
The OTA isn't coded it is merely stored on to their server. This device updates itself using the download method. It first downloads a pcap file which contains all the needed info to run checks, connect to it's server, and download the required files to later patch to the system of the device while in download mode. That's why it takes so long when an update comes around for this device and the update is accepted by the end user. They won't release the actual OTA unless they have a change of heart and to be honest, they are not obligated to do so. They are obligated to release the kernel source which they already have but it won't help to grab the OTA. Having the device rooted would make it somewhat easy to redirect the download to another directory for keepings but since the device doesn't necessarily have a bootloader this is an issue. It also doesnt help that the kernel uses write protection either and that the ramdisk secures the system preventing any permanent changes. Downloading the pcap file and tampering with it may bring a solution to all of our problems but if that person has no valuable skills than it is a dead end.
---------- Post added at 12:38 AM ---------- Previous post was at 12:25 AM ----------
Personally, I despise any company that uses such methods. For the average user it's whatever, but for development purposes it's bad for business on their part when word gets out about how they operate. But since Sharp also does many other things such as building TV's then I seriously doubt it will hurt them.
It's why I stick with HTC products because they are big on supporting developer's and they typically do not make much of a fuss on the matter. Huawei is another one but the downfall with them is getting a response back since they are originally out of China.
If anyone is still focus on hacking this device I would suggest you focus on the aboot partition.
Modding.MyMind said:
If anyone is still focus on hacking this device I would suggest you focus on the aboot partition.
Click to expand...
Click to collapse
still wait to root :v, we cannot hack bootloader sharp
Related
HI @all,
now that we have a FW for the device - is root possible?
All known root methods are not working.
BR
UserX10
Edit:
Solved -> Thanks you DooMLoRD
http://forum.xda-developers.com/z3-...58xx-cwm-based-recovery-6-0-4-7-root-t2890231
Delete.
Jeez.
People haven't even got their hands on the phone yet...
Be patient
Anyone wanna try Framaroot?
http://framaroot.net/index.html
framaroot does not work ...
Ok because I saw it posted on this blog and thought it would work. Strange!
plisk3n said:
Ok because I saw it posted on this blog and thought it would work. Strange!
Click to expand...
Click to collapse
Well, it says "tested on device" and is from 9/4, before the device was even unavailable. I'd be careful that apk isn't something more.
CollinsJ said:
Well, it says "tested on device" and is from 9/4, before the device was even unavailable. I'd be careful that apk isn't something more.
Click to expand...
Click to collapse
Yeah that's also the reason why I decided not to download it, I'll just wait till someone @ XDA finds a way to root the device. It's not like we'll die because our device isn't rooted for x weeks/months.
Weeks/months?! I would die! It's been a day and the amount of things I can't do is driving me nuts!
If you have an unlocked boot loader see what I say at http://forum.xda-developers.com/showthread.php?p=55709585. If you don't I think you'll be waiting for a while - someone needs to find an exploit and write the app/code needed to exploit it. This has become increasingly hard as Android has become more secure - before Towelroot AFAIK the Z1/Z2 was not rootable for a long time. You'd probably be waiting a similar length of time for the next big root exploit.
tilal6991 said:
If you have an unlocked boot loader see what I say at http://forum.xda-developers.com/showthread.php?p=55709585. If you don't I think you'll be waiting for a while - someone needs to find an exploit and write the app/code needed to exploit it. This has become increasingly hard as Android has become more secure - before Towelroot AFAIK the Z1/Z2 was not rootable for a long time. You'd probably be waiting a similar length of time for the next big root exploit.
Click to expand...
Click to collapse
Would it not be helpful to contact Sony themselves? They're increasingly developer friendly, these days. Maybe they'd be willing to offer pointers to root app developers?
mudnightoil said:
Would it not be helpful to contact Sony themselves? They're increasingly developer friendly, these days. Maybe they'd be willing to offer pointers to root app developers?
Click to expand...
Click to collapse
Well I know people at Sony and long story short: if you want root unlock the boot loader. Its as simple as that. You have to understand that while a root exploit looks nice to tinkerers its also a serious security issue which must be fixed - that is why many root solutions also patch the exploit they use after using it.
Does unlocking the bootloader require wiping the phone? I know this is required on the nexus phones. If it requires wipe then its the very first thing I'm doing once I get the phone out of the box.
Sent from my Nexus 5 using Tapatalk
tilal6991 said:
Well I know people at Sony and long story short: if you want root unlock the boot loader. Its as simple as that. You have to understand that while a root exploit looks nice to tinkerers its also a serious security issue which must be fixed - that is why many root solutions also patch the exploit they use after using it.
Click to expand...
Click to collapse
I'm aware of this ... but on the one hand being one of the few if only manufacturers to provide official unlocking for the bootloaders (with the obvious intention of spurring development etc), but on the other actively closing non-simple (i.e. ones requiring a dedicated program) root 'exploits' would seem a little at odds. Is it really that black and white? You'd think it might be in their interests to provide an official complex / secure rooting method.
sublimnl said:
Does unlocking the bootloader require wiping the phone? I know this is required on the nexus phones. If it requires wipe then its the very first thing I'm doing once I get the phone out of the box.
Sent from my Nexus 5 using Tapatalk
Click to expand...
Click to collapse
Yes. It will wipe everything AFAIK - double check with the website.
mudnightoil said:
I'm aware of this ... but on the one hand being one of the few if only manufacturers to provide official unlocking for the bootloaders (with the obvious intention of spurring development etc), but on the other actively closing non-simple (i.e. ones requiring a dedicated program) root 'exploits' would seem a little at odds. Is it really that black and white? You'd think it might be in their interests to provide an official complex / secure rooting method.
Click to expand...
Click to collapse
Your statements contradict themselves. Rooting without unlocking the bootloader needs a security flaw. How can any method which leaves a security hole be secure?
Bootloader unlocking gets around this by letting you control the boot partition of the device so you can disable the "security barrier" that android provides. This is a choice you are explicitly making which is why it is the only "secure" way to root.
Does towelroot work?
MrOeyta said:
Does towelroot work?
Click to expand...
Click to collapse
Unfortunately Towelroot does not work.
I've read some people saying that unlocking the bootloader causes you to lose your DRM keys which apparently would affect software/ camera issues?
Can anyone verify this?
tacocats said:
I've read some people saying that unlocking the bootloader causes you to lose your DRM keys which apparently would affect software/ camera issues?
Can anyone verify this?
Click to expand...
Click to collapse
This is very true. On the z1c I neglected to back up the TA partition. And apparently lost native mirror cast and some camera features when I rolled the device back to stock.
Back up your TA partition before unlocking BL.
dillalade said:
This is very true. On the z1c I neglected to back up the TA partition. And apparently lost native mirror cast and some camera features when I rolled the device back to stock.
Back up your TA partition before unlocking BL.
Click to expand...
Click to collapse
Any idea how this could be done?
UPDATED:
Please jump to the following thread for information on root/lollipop:
http://forum.xda-developers.com/shield-tablet/help/qa-root-shield-tablet-2-0-lollipop-t2945163
garyd9 said:
There's some misinformation going around concerning lollipop (android 5.0), root, and the SHIELD tablet. I'm posting this (redundant) information to (hopefully) clear things up and prevent someone from causing themselves a headache after the tablet updates...
nvidia has stuck very close to AOSP in their tablet firmware updates, so it's a reasonable assumption (at this point) that the new firmware will also be very close to AOSP.
If that comes to be, then "rooting" the tablet will be more difficult than in previous firmware updates. Most of the gory details can be found in this G+ article by @Chainfire : https://plus.google.com/113517319477420052449/posts/VxjfYJnZAXP
(BTW, as always, a huge thanks to Chainfire for his efforts. If you haven't already, paying for the upgrade to "SuperSU Pro" is well worth the price if for no other reason than to encourage Chainfire to continue work on that project.)
If you don't understand the details of that post from chainfire, I'll try to summarize it: Even if you manage to get a copy of the "su" binary on your system partition (which is essentially the goal of all the older root exploits), it won't matter much in Android 5.0. In Android 5.0, we'll ALSO need a part of the kernel image changed (the ramdisk) so that a part of "superSU" can run at a more permissive context.
Updating the kernel ramdisk shouldn't be too difficult (if its compressed with the kernel in a normal way) once we have the image to play with. As well, in order to put the newly modified kernel image in place, a person would have to unlock their bootloader (which can void your warranty.)
Actually, it's possible (once the image is released by nvidia) that @Chainfire will stick the image on his server in one of his very easy to use "CF-Auto-Root" bundles. (Hopefully, all the @ references I've made will get him to look at this thread and confirm what I've said. The honest truth is that I'm NOT familiar with SELinux, so I'd have to do a bit of experimenting to get this working.)
Take care
Gary
Click to expand...
Click to collapse
Have you found any specifics on what will need to be modified in the ramdisk? I haven't really done anything with the boot.img itself but I'd be interested to see what is going on with this.
Keithn said:
Have you found any specifics on what will need to be modified in the ramdisk? I haven't really done anything with the boot.img itself but I'd be interested to see what is going on with this.
Click to expand...
Click to collapse
That Google plus post I linked to describes the needed change.
Sent from my SHIELD Tablet using Tapatalk
Okay, thanks. I guess I didn't catch that.
Sent from my One M8
Root successful!
I just successfully got root. If I can make it permanent I will post the necessary files/instructions in the update thread.
SuperPichu said:
I just successfully got root. If I can make it permanent I will post the necessary files/instructions in the update thread.
Click to expand...
Click to collapse
With a modified recovery or stock ?
matyas69 said:
With a modified recovery or stock ?
Click to expand...
Click to collapse
CWM. The instructions are up in the lollipop update thread
SuperPichu said:
CWM. The instructions are up in the lollipop update thread
Click to expand...
Click to collapse
Is this root sticking?
whoamanwtf said:
Is this root sticking?
Click to expand...
Click to collapse
It seems to be. Only problem I have run into is that FX file explorer root mode doesn't seem to work, but ES does so I think it's an app compatibility with 5.0 thing rather than a problem with root.
SuperPichu said:
CWM. The instructions are up in the lollipop update thread
Click to expand...
Click to collapse
I'll wait root without custom recovery
SuperPichu said:
It seems to be. Only problem I have run into is that FX file explorer root mode doesn't seem to work, but ES does so I think it's an app compatibility with 5.0 thing rather than a problem with root.
Click to expand...
Click to collapse
Are you able to use FolderMount with it? and Titanium? Those are the reason I need root, and if those both work then I will wipe and unlock to get LP rooted
whoamanwtf said:
Are you able to use FolderMount with it? and Titanium? Those are the reason I need root, and if those both work then I will wipe and unlock to get LP rooted
Click to expand...
Click to collapse
Testing right now. How should I test these? i.e. What do you use them for?
SuperPichu said:
Testing right now. How should I test these? i.e. What do you use them for?
Click to expand...
Click to collapse
Awesome, I use FolderMount to link my obb files from the sd card to the main so that my largest game files are all on my sd card. I actually have the premium version so I just link my whole obb folder and data folder but I would guess linking any obb and then seeing if the game would load would test it. As for Titanium a backup/delete/restore of any app would test all of the features. Thanks for checking that out
whoamanwtf said:
Awesome, I use FolderMount to link my obb files from the sd card to the main so that my largest game files are all on my sd card. I actually have the premium version so I just link my whole obb folder and data folder but I would guess linking any obb and then seeing if the game would load would test it. As for Titanium a backup/delete/restore of any app would test all of the features. Thanks for checking that out
Click to expand...
Click to collapse
No problem.
Results
Folder Mount - Made a link from internal to external and the link seemed to be working correctly (files put in one showed up in the other)
Titanium - Backed-up, uninstalled, and restored Netflix successfully with no errors
Here's a link to the root instructions. http://forum.xda-developers.com/shield-tablet/development/root-root-lollipop-t2945044
Please post any questions there.
Works for both locked and unlocked bootloaders now.
SuperPichu said:
Here's a link to the root instructions. http://forum.xda-developers.com/showpost.php?p=56854633&postcount=77
Works for both locked and unlocked bootloaders now.
Click to expand...
Click to collapse
You beat me too it lol. I just got home pulled the ota and modified the boot.img before I saw this.
Keithn said:
You beat me too it lol. I just got home pulled the ota and modified the boot.img before I saw this.
Click to expand...
Click to collapse
I was starting to wonder how I was the only person (or at least the first) to have that idea.
So I already installed the update for lollipop. Although I was rooted using towelroot, I never installed CWM or unlocked my bootloader. Is it too late to follow the instructions to unlock my bootloader at this point? Do I need to just wait for another root method?
onduck said:
So I already installed the update for lollipop. Although I was rooted using towelroot, I never installed CWM or unlocked my bootloader. Is it too late to follow the instructions to unlock my bootloader at this point? Do I need to just wait for another root method?
Click to expand...
Click to collapse
No if you unlock your bootloader you can follow my unlocked instruuctions.
onduck said:
Is it too late to follow the instructions to unlock my bootloader at this point?
Click to expand...
Click to collapse
no. Not too late.
Sent from my HTC One_M8
Hey any developer willing to look at this find of mine?
http://androidforums.com/attachments/zte-updat-2-png.112624/
Is the mbn file something you can use to root? I googled it coz I saw this mbn test in the app manager after the update. IT is saying it contains files in what I believe is what you need to root. In this case I think they use it to put/boot all those update files.
ON my research odin can read mbn files. Just an idea.
http://forum.xda-developers.com/showthread.php?t=2799160
I don't know why you are ignoring this idea coz I know I am on the right track on all of you. LOL. Look what I found:
http://forum.xda-developers.com/showthread.php?t=2641245
IT works on those mbn files in the attachment come on now, I will post this on xda. Maybe someone will be interested there since you all are ignoring this gem of a find of mine.
I know how to search, I understand programming somewhat. I just am not 'fluent' in android platform. So go have at it. Those who know what they are doing. I am on the right track. AM I right? OR AM I right?!
LOL. This phone is either unpopular, officially unloved, or wow is locked tight even developers here and the other forum can't crack it. I am kinda happy about it. It means it's really secure this phone.
asianrocker said:
LOL. This phone is either unpopular, officially unloved, or wow is locked tight even developers here and the other forum can't crack it. I am kinda happy about it. It means it's really secure this phone.
Click to expand...
Click to collapse
Its mainly SElinux, also the best dev we have is studying for exams
asianrocker said:
Hey any developer willing to look at this find of mine?
http://androidforums.com/attachments/zte-updat-2-png.112624/
Is the mbn file something you can use to root? I googled it coz I saw this mbn test in the app manager after the update. IT is saying it contains files in what I believe is what you need to root. In this case I think they use it to put/boot all those update files.
ON my research odin can read mbn files. Just an idea.
http://forum.xda-developers.com/showthread.php?t=2799160
I don't know why you are ignoring this idea coz I know I am on the right track on all of you. LOL. Look what I found:
http://forum.xda-developers.com/showthread.php?t=2641245
IT works on those mbn files in the attachment come on now, I will post this on xda. Maybe someone will be interested there since you all are ignoring this gem of a find of mine.
I know how to search, I understand programming somewhat. I just am not 'fluent' in android platform. So go have at it. Those who know what they are doing. I am on the right track. AM I right? OR AM I right?!
Click to expand...
Click to collapse
I cant go into detail yet but there are some amazing people that hace been working on root for over a year that are currently very very close to a public release. I would advise anyone that wishes to finally root this phone DO NOT install any updates released by your carrier going forward as the vulnerability that has been exploited allowing the root devs to get farther than any other attempt before now was recently patched by google last month and will most likely be included in the next uodate released by the carriers. All variants and builds up to B21 are vulnerable to this exploit so when a stable root is achieved and released very soon it should work for everyone that does not update their phone past build B21. Standby for further updates...
DroidModderX has just uploaded a video of a 1-click program called Dr.Fone that supposedly can root a bunch of devices. He shows it working on a Verizon HTC 10. The T-Mobile S7 Edge is on the list of supported devices on the Dr.Fone website. The program is $29.95. Has anybody tried the program on our phones or can a dev chime in and either confirm or deny it's "legit-ness"?
I know the fact that it costs money may sound like a scam, but that's what I thought of Sunshine on my HTC M9 at first. Even with the U firmware and root, these devices are still way slower and have crappy battery life. I won't be happy until a good root method is released.
Just updated the TEK thread... I just got it... Pictures are proof, as is the weeks of sleep I am missing..... I have been working on a full Developer Takeover.. Changed the build type, user, thumbprint, keys, props, no TIMA or KNOX, Permissive, Cut the stock rom down to 700 mb and the system apps are GONE... not disabled... And so much more....
Let me explain the pic of a windows screen. That is Mr.MobileHelper... A very honest 3rd party chinese app... On the main page you get stats on your device. As you can see, there is a spot for root.. Before with straight leaked kernel, it would show up as NO for ROOT... No exploits were done with that kernel. It was factory... This has exploits... I, however am going with about 5 hours of sleep in two weeks, and ****ing don't recall the exact steps... I have a potential gold-mine here, and forgot where I put my mine'n pan! FML!
And I have no clue what a Dr. Phone is... where is this link? ****EDIT Found
and it may be nothing... but doesn't look or feel like nothing.. .This rom is smooter than the U is stock... It is the U... But MY U
Exciting news!
anonymoustl said:
And I have no clue what a Dr. Phone is... where is this link? ****EDIT Found
and it may be nothing... but doesn't look or feel like nothing.. .This rom is smooter than the U is stock... It is the U... But MY U
Click to expand...
Click to collapse
Your second pic shows ENG BUILD, the same that comes up with the ENG kernel. I'm suspect that the program you used only rooted with the ENG kernel, and it leads me to believe, OP, that the Dr.Fone program likely must do the same :crying:
Edit: looks like you can download a free version of the program to root with, without having to pay the 30$ I would gladly guinea pig this, but I need my phone for work tomorrow. If none brave enough by weekend, I'll give it a shot.
CaptainMorgan said:
Your second pic shows ENG BUILD, the same that comes up with the ENG kernel. I'm suspect that the program you used only rooted with the ENG kernel, and it leads me to believe, OP, that the Dr.Fone program likely must do the same :crying:
Edit: looks like you can download a free version of the program to root with, without having to pay the 30$ I would gladly guinea pig this, but I need my phone for work tomorrow. If none brave enough by weekend, I'll give it a shot.
Click to expand...
Click to collapse
ill downgrade from nougat to mm and try it
---------- Post added at 01:28 AM ---------- Previous post was at 12:46 AM ----------
blane3298 said:
ill downgrade from nougat to mm and try it
Click to expand...
Click to collapse
didnt work
blane3298 said:
ill downgrade from nougat to mm and try it
---------- Post added at 01:28 AM ---------- Previous post was at 12:46 AM ----------
didnt work
Click to expand...
Click to collapse
Did you try the paid version or the free one? The free version says it can only detect but not root.
anonymoustl said:
Just updated the TEK thread... I just got it... Pictures are proof, as is the weeks of sleep I am missing..... I have been working on a full Developer Takeover.. Changed the build type, user, thumbprint, keys, props, no TIMA or KNOX, Permissive, Cut the stock rom down to 700 mb and the system apps are GONE... not disabled... And so much more....
Let me explain the pic of a windows screen. That is Mr.MobileHelper... A very honest 3rd party chinese app... On the main page you get stats on your device. As you can see, there is a spot for root.. Before with straight leaked kernel, it would show up as NO for ROOT... No exploits were done with that kernel. It was factory... This has exploits... I, however am going with about 5 hours of sleep in two weeks, and ****ing don't recall the exact steps... I have a potential gold-mine here, and forgot where I put my mine'n pan! FML!
And I have no clue what a Dr. Phone is... where is this link? ****EDIT Found
and it may be nothing... but doesn't look or feel like nothing.. .This rom is smooter than the U is stock... It is the U... But MY U
Click to expand...
Click to collapse
I'm guessing Dr.Fone is similar to Mr.MobileHelper. But it looks like your program is using the ENGBOOT to gain root. If this is the case then these programs aren't any better than the manual root method. But try to get some sleep and get that ROM built and look into these programs some more!
CosMiiK said:
Did you try the paid version or the free one? The free version says it can only detect but not root.
Click to expand...
Click to collapse
Free. Not wanting to waste money if it's just the eng kernel
30 dollars for some free eng kernel..yay
blane3298 said:
Free. Not wanting to waste money if it's just the eng kernel
Click to expand...
Click to collapse
I don't want to pay either if it's just engboot. But this is why we need somebody to test it to confirm its just the eng kernel. If their claim of "over 7000 supported devices" is true, they might be using an exploit somebody on their team discovered. Or maybe they use dirtycow. I just can't give up until we have stable root. Stock kernel and root would make this the perfect phone.
CosMiiK said:
I don't want to pay either if it's just engboot. But this is why we need somebody to test it to confirm its just the eng kernel. If their claim of "over 7000 supported devices" is true, they might be using an exploit somebody on their team discovered. Or maybe they use dirtycow. I just can't give up until we have stable root. Stock kernel and root would make this the perfect phone.
Click to expand...
Click to collapse
If they gave a refund sure I'd try it
CosMiiK;69995103b said:
I don't want to pay either if it's just engboot. But this is why we need somebody to test it to confirm its just the eng kernel. If their claim of "over 7000 supported devices" is true, they might be using an exploit somebody on their team discovered. Or maybe they use dirtycow. I just can't give up until we have stable root. Stock kernel and root would make this the perfect phone.
Click to expand...
Click to collapse
I just got nougat redownloaded and set back up. Really don't want to go thru the hassle again -__-
There's no reason to even try to spend the 30$. I was going to act all high and mighty with some comment about "everyone wants root, but noone wants to pay to try" and then pay myself, but just read their FAQ for refunds, it says they will not provide a refund if you don't test the free version....so test the free version and get the answer:
It seems pretty clear cut to me. If you do it on EngBoot, perhaps it'll root it for you so you don't need the manual SuperSU method....but not for 30$.
Ran it on both Stock 935T and also on the stock 935U with the same results.
With products featuring up to a 30-day Money Back Guarantee, Wondershare generally does not refund or exchange products in the following situations:
Non-technical Circumstances
1) Failure to read the product description before purchasing and thus resulting in dissatisfaction with the product's functioned and/or results. It is highly recommended that every customer read the product description and try the free trial version before making their final purchase decision.
Wondershare does not refund software if products fail to meet customer's needs due to a lack of understanding by the customer, of the products functions and capabilities.
Click to expand...
Click to collapse
Seems pretty cut and dry that the 30$ wouldn't be worth it and this topic is now a null issue/question.
With that said, the product itself also has only 4 reviews posted on its website. 3 of them created within a 3minute period by "Jane, Jerry, Alex" who were extremely happy to state how amazing DrFone worked on their Note (3's?).
Can we agree that the OP's question has been answered?
At least for the gs7, it's funny how it lists our gs7 variants in the list of supported devices.
Blade22222 said:
At least for the gs7, it's funny how it lists our gs7 variants in the list of supported devices.
Click to expand...
Click to collapse
Only root going on here is them rooting 30 dollars from our wallet
nitroevo said:
Only root going on here is them rooting 30 dollars from our wallet
Click to expand...
Click to collapse
Agreed.
CosMiiK said:
I'm guessing Dr.Fone is similar to Mr.MobileHelper. But it looks like your program is using the ENGBOOT to gain root. If this is the case then these programs aren't any better than the manual root method. But try to get some sleep and get that ROM built and look into these programs some more!
Click to expand...
Click to collapse
That is where you are wrong, my friend... I forced that.. All part of a takeover.. And remember, the ENG kernel was NOT build on PI3, which this is clearly displaying Least you forget(or maybe you don't know) that there are MANY steps to finding and/or CREATING a vulnerability within a kernel or an OS... ESPECIALLY with the freaking types of encryption algo'z this thing can play with..
This isn't just downloading an app, pressing a button, and calling ones self an ub3r1337h4x0r.... This is reverse engineering... And as many people whom deconstruct/reconstruct better, I fu(*ing HATE documentating a DAMN thing.. So I have that to contend with as well..
See.. Download MrPhone if you want to test yourself... It's all free and blah blah... not gunna f*&k ya over... Now with your eng kernel on your phone, plug into mrPhone(which is only a device admin app.. does NOT root) and look at the kernel and root status... It will show just as I say.
I am uploading a current BOOTING BUILD PROP complete with TEST-KEYS and more.. Also totally broken encryption and verity... Hoping to break this ***** down to an exploitable level... At this point I am too far in.. Now it's 4tLulZ
Full Postulation:
Not going to put it until I get complete because that is like posting a 0-day as you are exploiting it..... EDIT******
Cliff Note Version: Get bootloader unlocked to make rooting a snap...or... wait for it........
A FLASH!!!!!! @Chainfire ?!?!
What would help the MOST from someone, is if they could point in the direction of the homes of the files that deal with the bootloader...
****EDIT 2*****
Rolled back the security patch to August 1, 2016 >
Has anyone tried to fake the chinese device and then use it's solutions to gain BL Unlock or root? Just saying... THAT is the same hardware.. I think someone was giving one of these devices away to a tester for testing... I am using my production phone which is causing relationship issues that I could totally do without.. So I mean... Someone else is going to have to grow a pair and start hacking at this thing too... Or I need that test phone.. because I am ready for some major testing, yet sphincter too tight to pull the cord of a full device fake....
---------- Post added at 08:29 AM ---------- Previous post was at 08:27 AM ----------
I also tried the Dr Phone solution.. The program was....donated to me. And after about 30 minutes of it rebooting my phone, it didn't work... So for the normal s7e user you pay a dollar a minute for the hopes of having something happen that was promised, ending up not just like..... trying to find a goddamn curved tempered glass screen cover that isn't udder garbage!
---------- Post added at 09:07 AM ---------- Previous post was at 08:29 AM ----------
Found exploit that should be able to help out. Reaching out to indiv. for possible help/co-creating.....
What I do not get is that this device has the OEM unlock switch in developer mode.. .but it doesn't do what it is supposed to do..
anonymoustl said:
What I do not get is that this device has the OEM unlock switch in developer mode.. .but it doesn't do what it is supposed to do..
Click to expand...
Click to collapse
All these posts make it sound like you're getting somewhere. That OEM Unlock switch threw everybody off the first few days after the phone came out. A lot of us assumed that the T-Mobile version would be unlocked like all their other phones have been and pre-ordered it. And if I remember correctly, not everybody with T-Mobile phones had that switch in dev options. Not that it did anything for the people that did have it
I've had this phone a little while now and I'm itching to root it. There's nothing wrong with it, I just really want to get into the code and do some modding. But there doesn't seem to be any root solution available right now.
So I thought I'd start this thread so we could discuss any rooting tips and ideas you all might have.
First I should probably mention all the potentially dodgy rooting solutions out there. Google "root xa1" and you get many results that offer methods to gain root access on our phone.
I confess I haven't tried any of them but that's because they all look suspicious. Some were written before the phone launched, some require you to download unknown software (I'll keep my PC virus-free, thanks), some even go so far as to feature a fake comment section with people saying it works.
I have no desire to stick malware on either my PC or my phone so I'm steering well clear of those.
The XZs launched at the same time as the XA1 and there seems to be a solution available for that. This is a thread by @zlRampageSlz with details: https://forum.xda-developers.com/xzs/how-to/tutorial-step-step-guide-to-gain-root-t3612624
It looks like the best solution is to unlock the bootloader (making sure to back up your TA partition first!), flash a modified kernel (otherwise the camera takes green pictures), flash a recovery image and then flash Magisk.
Where do we get this modified kernel? Where do we get the recovery image?
I have no idea, sadly. This is all way beyond my area of expertise. I'm a themer, not a developer.
But if anybody knows better than me, please post here.
This is a great phone, let's work together so we can get it modded!
Ticklefish said:
I've had this phone a little while now and I'm itching to root it. There's nothing wrong with it, I just really want to get into the code and do some modding. But there doesn't seem to be any root solution available right now.
So I thought I'd start this thread so we could discuss any rooting tips and ideas you all might have.
First I should probably mention all the potentially dodgy rooting solutions out there. Google "root xa1" and you get many results that offer methods to gain root access on our phone.
I confess I haven't tried any of them but that's because they all look suspicious. Some were written before the phone launched, some require you to download unknown software (I'll keep my PC virus-free, thanks), some even go so far as to feature a fake comment section with people saying it works.
I have no desire to stick malware on either my PC or my phone so I'm steering well clear of those.
The XZs launched at the same time as the XA1 and there seems to be a solution available for that. This is a thread by @zlRampageSlz with details: https://forum.xda-developers.com/xzs/how-to/tutorial-step-step-guide-to-gain-root-t3612624
It looks like the best solution is to unlock the bootloader (making sure to back up your TA partition first!), flash a modified kernel (otherwise the camera takes green pictures), flash a recovery image and then flash Magisk.
Where do we get this modified kernel? Where do we get the recovery image?
I have no idea, sadly. This is all way beyond my area of expertise. I'm a themer, not a developer.
But if anybody knows better than me, please post here.
This is a great phone, let's work together so we can get it modded!
Click to expand...
Click to collapse
First of all thank you so much for your awesome tool "Tickle My Android" which i really like it (Y).
i'm about to get XA1 Ultra so sure i'm so curious about root also but i'll try to make it clear,
simply, don't waste your time searching for a root tool because it's impossible to have root without modifying kernel, so, 100% all of these tools are just malware !
in the new devices there's something calls DM-Verity which is a check tool and that means any modification to /system will leads to bootloop,
so DM-Verity must be disabled ( through kernel of course ) & any mess with kernel means you have to unlock bootloader.
another thing, Sony ric which is prevent mounting system, so, any modification must be through recovery or it will leads to bootloop also, so we must also disable it.
fortunately on my xperia z2 there is no DM-Verity and there's a module to disable sony ric through recovery so root was possible without unlocking bootloader but starting from xperia z3+ DM-Verity appeared !
so now root is impossible without unlocking bootloader ( which means losing drm keys forever if you didn't back it up ).
i downloaded the firmware for xa1 ultra through xperiafirm and i unpacked the kernel and tried with these tools to see how its going on:
https://forum.xda-developers.com/xp...oot-automatic-repack-stock-kernel-dm-t3301605
&
https://forum.xda-developers.com/crossdevice-dev/sony/poc-real-trim-instead-drm-fix-t3552893
the first one was hanging and i didn't get any information & the second one to be able to use it then you must put your ta.img ( your ta backup ) inside the folder,
i used my z2 ta.img as a test to see the process and the result was pretty good !
i successful disabled DM-Verity and there's no sony ric !!!!! but it's also still not safe and needs to be confirmed because maybe there's a bad surprise which is not clear yet, maybe something like sony ric but new !
so, if it's only the ****ty DM-Verity it's easy to disable it even away from this tool because we can't use it without ta.img, maybe by any script or unpacking kernel and modify it then repacking it this is not a problem at all & after that MAYBE we can flash supersu or magisk via ADB since there's no recovery yet ( completely not sure about this so it needs to be confirmed ) & in this case the choice is between root or drm features but at least root has been achieved.
so now, we need something like this to be able to backup ta without root and after that no problem of unlocking bootloader:
https://forum.xda-developers.com/crossdevice-dev/sony/universal-dirtycow-based-ta-backup-t3514236
or
https://forum.xda-developers.com/crossdevice-dev/sony/iovyroot-temp-root-tool-t3349597
or if it's not possible at this moment to backup ta without root then at least we need something like this to be able to to reactivate drm features such as camera denoise and x-reality...etc:
https://forum.xda-developers.com/crossdevice-dev/sony/xperia-z1-z2-z3-series-devices-drm-t2930672
or
https://forum.xda-developers.com/xperia-z5/development/sony-credentials-restore-unlocking-t3296383
or the worst choice...root without drm & waiting for a fix like those above !
anyway, root is not easy like before but it's still possible after all, i tried to clarify everything as much as i can and i hope there's a solution soon !
@munjeni we need your help bro, please if you have free time have a look, i uploaded the kernel for xa1 ultra so try to tell us how it's going on & what is new !
https://www.mediafire.com/?bc63fgjw99r785d
good luck for everyone .
As my Z5 compact was broken, I bought the XA1. I didn't remember, how awful an unrooted phone is - So I am also waiting and would be very interested to be informed.
BR
Sopur
Did anyone tried this?
https://www.oneclickroot.com/sony/sony-xperia-xa1/
chauhanjayc said:
Did anyone tried this?
https://www.oneclickroot.com/sony/sony-xperia-xa1/
Click to expand...
Click to collapse
I haven't, personally. Every mention of it I can find just looks like an advert. And I'm not paying for something that might not work and might do something horrible to my phone.
Sent from my Sony Xperia XA1 using XDA Labs
Ticklefish said:
I haven't, personally. Every mention of it I can find just looks like an advert. And I'm not paying for something that might not work and might do something horrible to my phone.
Click to expand...
Click to collapse
Its free
chauhanjayc said:
Its free
Click to expand...
Click to collapse
One Click Root does not work at the moment :crying:
kpfreak said:
One Click Root does not work at the moment :crying:
Click to expand...
Click to collapse
Uffffd
Let wait till next exploit.
chauhanjayc said:
Uffffd
Let wait till next exploit.
Click to expand...
Click to collapse
I'm sure it's only a matter of time.
Sent from my Sony Xperia XA1 using XDA Labs
bought this phone to replace my oppo. i can't wait for root abilities to be made
Bought this phone to replace my old Xiaomi. It's a good, powerful phone. Hope to see root appear for it soon. Personally for me, I'm one of those people who will only root a phone once it gets slow (the warranty expires). So as much as I'm reluctant to root my phone now, I'll hold out and see what wonderful developments appear on this thread.
Given the XA1 (I have the XA1 not the XA1 Ultra, I believe they are different) runs a Mediatek processor, I'm inclined to see something along the lines of a MT Flash Tool being used. Correct me if I'm wrong but I've only had successful flashes and roots with Qualcomm processors. The last device I had with a Mediatek processor (Lenovo A8-50 A5500H, MT8382) bricked on me horribly and I had to throw it away :crying:.
Meh. Hope we'll see awesomeness come soon from here. I'm still pretty new to XDA, looks like an awesome community
MINGXXIE said:
Bought this phone to replace my old Xiaomi. It's a good, powerful phone. Hope to see root appear for it soon. Personally for me, I'm one of those people who will only root a phone once it gets slow (the warranty expires). So as much as I'm reluctant to root my phone now, I'll hold out and see what wonderful developments appear on this thread.
Given the XA1 (I have the XA1 not the XA1 Ultra, I believe they are different) runs a Mediatek processor, I'm inclined to see something along the lines of a MT Flash Tool being used. Correct me if I'm wrong but I've only had successful flashes and roots with Qualcomm processors. The last device I had with a Mediatek processor (Lenovo A8-50 A5500H, MT8382) bricked on me horribly and I had to throw it away :crying:.
Meh. Hope we'll see awesomeness come soon from here. I'm still pretty new to XDA, looks like an awesome community
Click to expand...
Click to collapse
from what i've seen on sony's support page, they've made their own flash tool to flash stock roms to your phone with in case of events like bricking
diosdetiempo said:
from what i've seen on sony's support page, they've made their own flash tool to flash stock roms to your phone with in case of events like bricking
Click to expand...
Click to collapse
Is it? That's wonderful, shall go check it out
Seems like the ultra version has gotten it.
https://forum.xda-developers.com/xa1-ultra/development/g3221-built-sources-t3622886
diosdetiempo said:
Seems like the ultra version has gotten it.
https://forum.xda-developers.com/xa1-ultra/development/g3221-built-sources-t3622886
Click to expand...
Click to collapse
Cool. I wonder if they can help with our device..
Sent from my Sony Xperia XA1 using XDA Labs
Hi. Wondered if I could ask advice. When trying to unlock bootloader using Sony website via a code. After entering the command with the code it says command not allowed, any ideas?
arienwalsall72 said:
Hi. Wondered if I could ask advice. When trying to unlock bootloader using Sony website via a code. After entering the command with the code it says command not allowed, any ideas?
Click to expand...
Click to collapse
I don't know, sorry. Did you definitely enter the right code?
Sent from my Sony Xperia XA1 using XDA Labs
Ticklefish said:
I don't know, sorry. Did you definitely enter the right code?
Click to expand...
Click to collapse
Yes. It gives the full command with the code on the Sony website. So I copied and pasted it from there. It does say on the phone in the service menu under bootloader unlock able = no. But says yes on the Sony website so not sure
arienwalsall72 said:
Yes. It gives the full command with the code on the Sony website. So I copied and pasted it from there. It does say on the phone in the service menu under bootloader unlock able = no. But says yes on the Sony website so not sure
Click to expand...
Click to collapse
if it says no on your phone then you're not able to
arienwalsall72 said:
Yes. It gives the full command with the code on the Sony website. So I copied and pasted it from there. It does say on the phone in the service menu under bootloader unlock able = no. But says yes on the Sony website so not sure
Click to expand...
Click to collapse
Go to Settings > About Phone.
Tap on Build Number until you get a toast notification that says you're a developer.
You should now be able to access Developer Options in Settings.
Go inside Developer Options then toggle OEM unlocking. Make sure it's on.
The code you get from the website should work now.