QuadRooter vulnerability - Xperia Z5 Premium General

I guess most of you have learned of the recently discovered vulnerability affecting over 900m Qualcomm devices. Apparently even after Google's latest July patches, the vulnerability persists, allowing root access to affected handsets. Pretty much the entire Xperia line using Qualcomm SOCs is affected.
My question is: will we see a rooting method based on this exploit? I know that unlocking the BL is the most straight forward way to root, however me and others I believe, would like to have a backup of their TA partition first. Ivyroot apparently works on older firmwares (not with .253), but as with BackupTA there's always some risk involved when restoring.
Perhaps a bounty is the proper way to go?

expecting security patch by Google!
meanwhile i have installed zonealarm...

Though if we could get a temp root on LB we could always refine the method for a permanent root on LB. Then, on the post from whichever genius makes the permanent root, have a damn neon flashing sign saying "OKAY, GO PATCH THIS NOW" via another kernel or a software fix as part of the "tutorial" post that would eventually be made.

pattmyn said:
Though if we could get a temp root on LB we could always refine the method for a permanent root on LB. Then, on the post from whichever genius makes the permanent root, have a damn neon flashing sign saying "OKAY, GO PATCH THIS NOW" via another kernel or a software fix as part of the "tutorial" post that would eventually be made.
Click to expand...
Click to collapse
permanent root on LB cannot be done post 5.1.1 (android). it will be same as finding loop wholes in system and vulnerabilities of MM. atleast SONY don't support such methods where SONY RIC protects device to the level of putting it in to bootloops rather than allowing root access (when tried rooting on LB and DM-VARIETY+SONYRIC on).
the permanent solution ? either
1. switch to devices which allow PREROOTED O/S
2. UB and flash Kernal /ROMS as your own

YasuHamed said:
permanent root on LB cannot be done post 5.1.1 (android). it will be same as finding loop wholes in system and vulnerabilities of MM. atleast SONY don't support such methods where SONY RIC protects device to the level of putting it in to bootloops rather than allowing root access (when tried rooting on LB and DM-VARIETY+SONYRIC on).
the permanent solution ? either
1. switch to devices which allow PREROOTED O/S
2. UB and flash Kernal /ROMS as your own
Click to expand...
Click to collapse
Well that's a depressing way to start my day lol. I love this damn phone but there's some rooted apps I miss dearly.

pattmyn said:
Well that's a depressing way to start my day lol. I love this damn phone but there's some rooted apps I miss dearly.
Click to expand...
Click to collapse
i know what you mean! Xperias are my personal addiction!
i made deal with devil and lost drm keys and took security risks over my Z5 in exchange of rooted device.
in my opinion its matter of time, sooner or later you will also root your device!

YasuHamed said:
i know what you mean! Xperias are my personal addiction!
i made deal with devil and lost drm keys and took security risks over my Z5 in exchange of rooted device.
in my opinion its matter of time, sooner or later you will also root your device!
Click to expand...
Click to collapse
Not with a locked bootloader that can't be unlocked, I ain't. Unless you know some magical people at Sony that could override that lol

pattmyn said:
Not with a locked bootloader that can't be unlocked, I ain't. Unless you know some magical people at Sony that could override that lol
Click to expand...
Click to collapse
well one LONG workaround for you will be
via flashtool, (xperifirm) select z5p , select "INTERNAL" in the country list and download .170 version (android 5.0.2) the version at which it left sony factory.
flash it, Root it via kingroot (where kingroot is considered unsafe) , extract DRM KEYS
https://github.com/DevShaft/Backup-TA/releases
once u have those, upgrade to 6.0.1 and unlock the bootloader, flash it with custom kernal and relock the boot loader.
this way atleast you will have your ORIGINAL z5p KEYS with you for any future times

However relocking the BL with root will result in bootloop, since file system hash won't match the bootup check. However, with a TA partition backup, running an unlocked BL is much safer, for when you need to relock BL, and send the phone in for repairs etc.

YasuHamed said:
well one LONG workaround for you will be
via flashtool, (xperifirm) select z5p , select "INTERNAL" in the country list and download .170 version (android 5.0.2) the version at which it left sony factory.
flash it, Root it via kingroot (where kingroot is considered unsafe) , extract DRM KEYS
https://github.com/DevShaft/Backup-TA/releases
once u have those, upgrade to 6.0.1 and unlock the bootloader, flash it with custom kernal and relock the boot loader.
this way atleast you will have your ORIGINAL z5p KEYS with you for any future times
Click to expand...
Click to collapse
Not all bootloaders can be unlocked. Some specifically can't be because Sony made them that way because the carriers wanted it that way...
Sent from my SGP311 using XDA Free mobile app

guhvanoh said:
Not all bootloaders can be unlocked. Some specifically can't be because Sony made them that way because the carriers wanted it that way...
Sent from my SGP311 using XDA Free mobile app
Click to expand...
Click to collapse
agree, i believe z1 and z tablets in USA (versions) were falling in the catagory you mentioned.
if the bootloader cannot be locked then.... betty buy blackberry
---------- Post added at 11:30 AM ---------- Previous post was at 11:29 AM ----------
guhvanoh said:
Not all bootloaders can be unlocked. Some specifically can't be because Sony made them that way because the carriers wanted it that way...
Sent from my SGP311 using XDA Free mobile app
Click to expand...
Click to collapse
agree, i believe z1 and z tablets in USA (versions) were falling in the catagory you mentioned.
if the bootloader cannot be locked then.... betty buy blackberry

guhvanoh said:
Not all bootloaders can be unlocked. Some specifically can't be because Sony made them that way because the carriers wanted it that way...
Sent from my SGP311 using XDA Free mobile app
Click to expand...
Click to collapse
What he said.

pattmyn said:
What he said.
Click to expand...
Click to collapse
he is referring to some sony devices who's bootloader was denied unlocking.
but don't worry, most of the devices (outside USA) has bootunlocking ALLOWED

Per-purchase question .....
YasuHamed said:
he is referring to some Sony devices who's bootloader was denied unlocking.
but don't worry, most of the devices (outside USA) has boot unlocking ALLOWED
Click to expand...
Click to collapse
My GF's M4 Aqua had the option to unlock the bootloader in the dev settings. It still couldn't have the BL unlocked (E2306), but the other 2 variations could, the E2303 and the E2353.
The E2306 was subsidized and discounted by Sony and mass distributed by lower end carriers here in Canada, hence the unlockable BL.
This model has the E6833 and the E6883, which one has the BL that can be/is unlocked?

UnableToResetOldProfile said:
My GF's M4 Aqua had the option to unlock the bootloader in the dev settings. It still couldn't have the BL unlocked (E2306), but the other 2 variations could, the E2303 and the E2353.
The E2306 was subsidized and discounted by Sony and mass distributed by lower end carriers here in Canada, hence the unlockable BL.
This model has the E6833 and the E6883, which one has the BL that can be/is unlocked?
Click to expand...
Click to collapse
the OEM UNLOCKING allowed in Developer options is just an extra step.
my z5dual was giving one IMEI however with flashtool i was getting TWO IMEI numbers, both different and with the second imei i was able to unlock.
is yours M4aqua Dual

Related

Why one should never unlock the Motorola Razr HD bootloader (xt925) !

The pro & cons of unlocking the bootloader:
Pro: Install customs ROMS with custom kernels (basically that's it)
Cons: - Loosing warranty from Motorola & your carrier
- No more firmware upgrades (your IMEI is dropped out of Motorola databank)
- Little verity of quality custom ROMs or development (close to none) exist for the Razr HD
- Future upgrade to JB & KLP will never happened (this phone is listed as a potential candidate for KLP update)
- Keeping your xt925 beyond your 1 year warranty will still guaranty, a steady upgrades of firmware
- Can root a phone with bootloader locked (without loosing warranty - root is reversible)
- Legally (Motorola binding Bootloader unlock contract), you can't sell a BL unlock Motorola Razr HD phone !
If someone can add some Pro's to an unlock bootloader please do it..
Are you sure about the firmware upgrades? I read somewhere that's not the case.
I wish I had known all this before I unlocked my phone.
Are you sure about the firmware upgrades? I read somewhere that's not the case.
Click to expand...
Click to collapse
I spoke to Motorola & my carrier services, also read the warning details before the unlock process begins.
I wish I had known all this before I unlocked my phone
Click to expand...
Click to collapse
Same here..(I learned all that after the fact)
I'd add this to Pro:
If you're stuck on Rogers 49003 ICS because you flashed the ROM trying to get root, your best option to get anything above 4.0.4 is to unlock bootloader?
Perhaps a CWM install will be possible for those with unlocked bootloaders when updates come.
It seems that in one form or another an unlocked bootloader means being able to push all the new files in doesn't it? Is there any limitation on this phone, for example flashing a new modem or kernel?
Cons one by one:
itzik_man said:
- Loosing warranty from Motorola & your carrier
Click to expand...
Click to collapse
True, but obvious.
itzik_man said:
- No more firmware upgrades (your IMEI is dropped out of Motorola databank)
Click to expand...
Click to collapse
Nope. Even if you were not to receive OTA, which by the way is not true as I've observed on my Photon Q, you can still freely flash the new firmwares yourself ^^
itzik_man said:
- Little verity of quality custom ROMs or development (close to none) exist for the Razr HD
Click to expand...
Click to collapse
Depends on ones point of view. Usually a CM port means you get newer Android sooner.
itzik_man said:
- Future upgrade to JB & KLP will never happened (this phone is listed as a potential candidate for KLP update)
Click to expand...
Click to collapse
Why it wouldn't? Unlocking BLs has no impact on upgrade schedule.
itzik_man said:
- Keeping your xt925 beyond your 1 year warranty will still guaranty, a steady upgrades of firmware
Click to expand...
Click to collapse
No. That's solely on Moto / Google decision. They don't have to update it at all. (See Droid 3, Milestone 3, Motorola XT720 etc.)
itzik_man said:
- Can root a phone with bootloader locked (without loosing warranty - root is reversible)
Click to expand...
Click to collapse
Yes, although you have to be careful, because there are scirpts checking if you're rooted.
itzik_man said:
- Legally (Motorola binding Bootloader unlock contract), you can't sell a BL unlock Motorola Razr HD phone !
Click to expand...
Click to collapse
You can sue Moto for breaking laws. They can't forbid you doing that (don't know honestly how is that in US / Canada, but I doubt that seeing how it works with computer games).
So please, while for normal user not willing to flash custom ROMs it's true that they should not unlock the bootloader, don't spill nonsenses around that. It's just that when you unlock your bootloader, you're on your own when playing with the firmware. But when you have stock firmware back on it, nothing prevents you from getting the OTA.
don't spill nonsenses around that. It's just that when you unlock your bootloader, you're on your own when playing with the firmware. But when you have stock firmware back on it, nothing prevents you from getting the OTA.
Click to expand...
Click to collapse
Possible 90% of your response represent just false theories..
OTA is goneforever once you unlock your bootloader ! If & when you be able manually to install JB, still your IMEI (not registered with Motorola) wont OTA.
You can sue nobody ! it's a contractual agreement you "sign" when you agree to unlock BL !
And if you can't OTA, No future auto upgrades.
So, before you use a statement "don't spill nonsense" make sure you are talking sense...
At least on my O2 Germany xt925 I got the update OTA from ICS to JB after unlocking. Had to return to the stock bootloader because the OTA relies on it after rebooting though.
itzik_man said:
Possible 90% of your response represent just false theories..
OTA is goneforever once you unlock your bootloader ! If & when you be able manually to install JB, still your IMEI (not registered with Motorola) wont OTA.
You can sue nobody ! it's a contractual agreement you "sign" when you agree to unlock BL !
And if you can't OTA, No future auto upgrades.
So, before you use a statement "don't spill nonsense" make sure you are talking sense...
Click to expand...
Click to collapse
Once again.
A) The reason why the page says "no updates" is beacuse OTA updates only work when you're on stock firmware, which is unlikely when you have the bootloader unlocked. That's all.
B) There are things that such "agreement" cannot contain. Being unable to sell the phone is one of them in most countries.
I disagree from the op.
Every change to device firmware compromises the warranty, not just bootloader, read the agreements ... If you exploit a bug to have root access, you will have to fool everyone who will have contact with your phone so they don't see what you have done. Even if you try to "reverse" the root, you(or the program you use) will always leave a trace.
We should be promoting "unlock the world"
This is not to imply everything should be free, however if I own something it should be mine in every regard, that includes breaking it.
Sent from my Galaxy Nexus using Tapatalk 2
---------- Post added at 03:13 PM ---------- Previous post was at 03:12 PM ----------
@skrilax thanks for you work on the a500.
Sent from my Galaxy Nexus using Tapatalk 2
I have xt925, first thing I did was unlock boot loader. Then I updated ota to Telstra JB. OP is misleading people.
Once again.
A) The reason why the page says "no updates" is beacuse OTA updates only work when you're on stock firmware, which is unlikely when you have the bootloader unlocked. That's all.
B) There are things that such "agreement" cannot contain. Being unable to sell the phone is one of them in most countries.
Click to expand...
Click to collapse
To end my part in this discussion: The limitations, restrictions & disadvantages of unlocking the bootloader are much greater then any benefit or gain under the current availability of development !
Darbness said:
I have xt925, first thing I did was unlock boot loader. Then I updated ota to Telstra JB. OP is misleading people.
Click to expand...
Click to collapse
Have you tried out lte tethering? It doesn't work on Rogers.
To epinter -
I disagree from the op.
Every change to device firmware compromises the warranty, not just bootloader, read the agreements ... If you exploit a bug to have root access, you will have to fool everyone who will have contact with your phone so they don't see what you have done. Even if you try to "reverse" the root, you(or the program you use) will always leave a trace.http://www.linuxmobile
Click to expand...
Click to collapse
I did not notice your response at first, now to the point -
Without any disrespect to the work, time & effort invested, the main point is being ignored by the developers: All comments I got on this OP didn't touched the number one reason of my suggestion to not unlock the bootloader: There in not really enough of a variety of development options today to justification the bootloader unlocked of the xt925.
Skrilax_CZ said:
Cons one by one:
Yes, although you have to be careful, because there are scirpts checking if you're rooted.
Click to expand...
Click to collapse
Can someone elaborate on this point; I read in another thread that when you remove all rooted apps and data, clear out the files left in /system, that there is still info stored stated if the device has ever been rooted, and that this can be cleared using an app on a PC (don't remember which) however when I looked at the app it was specific to the XT926 and thus I wouldn't be able to use it.
After a thorough clean of every rooted app and everything left behind by rooted apps, is there a known way (or assumed to be working way) on XT925 to erase the record of the root.
Also, assuming I was to get my phone back to that state and remove proof of root, what specifically do I need to do in order to be careful as stated... or is epinter correct in saying that there is always a trace left behind, and if so, is this a blatant trace or something that hasn't been of much concern for Motorola in the past when servicing phones?
Tombs1234 said:
At least on my O2 Germany xt925 I got the update OTA from ICS to JB after unlocking. Had to return to the stock bootloader because the OTA relies on it after rebooting though.
Click to expand...
Click to collapse
How would I return to a stock bootloader if I were to unlock mine and an OTA didn't work? How did you do it?
itzik_man said:
The limitations, restrictions & disadvantages of unlocking the bootloader are much greater then any benefit or gain under the current availability of development !
Click to expand...
Click to collapse
It's your decision whether to unlock the bootloader or not. I'm just saying (for other users) that many of the cons you wrote were absolutely incorrect.
PantsDownJedi said:
Can someone elaborate on this point; I read in another thread that when you remove all rooted apps and data, clear out the files left in /system, that there is still info stored stated if the device has ever been rooted, and that this can be cleared using an app on a PC (don't remember which) however when I looked at the app it was specific to the XT926 and thus I wouldn't be able to use it.
After a thorough clean of every rooted app and everything left behind by rooted apps, is there a known way (or assumed to be working way) on XT925 to erase the record of the root.
Also, assuming I was to get my phone back to that state and remove proof of root, what specifically do I need to do in order to be careful as stated... or is epinter correct in saying that there is always a trace left behind, and if so, is this a blatant trace or something that hasn't been of much concern for Motorola in the past when servicing phones?
Click to expand...
Click to collapse
I believe there is something stored in the pds partition. Or at least it is that way on Droid RAZR XT912 and you had to fix it to remove the remaining traces. Flashing FXZ is also a way how to get a clean stock firmware, but pds partition is not affected that way.
PantsDownJedi said:
How would I return to a stock bootloader if I were to unlock mine and an OTA didn't work? How did you do it?
Click to expand...
Click to collapse
I think he meant "stock firmware" instead of "stock bootloader"
So if that were the case on this phone, I wonder if doing a dd backup of the pds partition before rooting at ICS, for restoring after downgrade, would be the way to go. Assuming it restores properly, it would be a good thing to add to the sticky thread about rooting. I did a dd of all my partitions except for /data last night, but I'm already rooted.
hmm... I'm wondering if there's something inaccessable in /system or even the sdcard since they get mounted with fuse. My only other Android phone was the Galaxy S II which was pretty straightforward and dead simple to root and unroot. I was surprised to see the fuse module being used to mount anything when I got this one.
The original topic is here: http://forum.xda-developers.com/showthread.php?t=1857558
I don't know if there was a proper fix developed (haven't checked) on the RAZR.

(Rooting) Something I don't understand

Why is there no way to root 4.4.4?
I don't understand how the Sony system works yet, this is my first Sony coming from HTC and Samsung.
Samsungs rooted like a dream without any complications, why is sony so complicated in the process?
Thanks
OmarMagdi said:
Why is there no way to root 4.4.4?
I don't understand how the Sony system works yet, this is my first Sony coming from HTC and Samsung.
Samsungs rooted like a dream without any complications, why is sony so complicated in the process?
Thanks
Click to expand...
Click to collapse
Rooting 4.4.4 is easy... as long as you do it the official way, which means unlocking the bootloader and losing your warranty.
People don't want to only gain root, but they want to do it in a way that Sony doesn't see it and this is difficult.
There are easier was of doing it. Downgrade to 4.4.2, root and then flash one of the ROMs based on .167. I have a locked bootloader and flashing either Niaboc's or Pandemic's ROM was the first thing done out of the box for me.
Sent from my D6503 using XDA Free mobile app
I'm honestly not fond of the process of downgrading and upgrading, so I was trying to know why it is so complicated and understand how it works, and trying to root it without the longer process.
but then if there's no other way, i terribly need Xposed and Titanium. so yeah.
pec0ra said:
Rooting 4.4.4 is easy... as long as you do it the official way, which means unlocking the bootloader and losing your warranty.
People don't want to only gain root, but they want to do it in a way that Sony doesn't see it and this is difficult.
Click to expand...
Click to collapse
Okay,
I don't have warranty anyways because I am in Egypt and rooting voids it here, so I bought it for $100 cheaper without warranty
My bootloader can be unlocked, I've checked.. how can I root it with the official way?
Thanks!
Downgrading is really easy, I don't recommend unlocking your bootloader unless you want to try kernels and CM like roms and dont mind losing bravia engine etc. Just download a 4.2.2 firmware, and flash it with flashtool, root it and then install recovery and flash the rom you like with (4.4.4).
OmarMagdi said:
Okay,
I don't have warranty anyways because I am in Egypt and rooting voids it here, so I bought it for $100 cheaper without warranty [emoji14]
My bootloader can be unlocked, I've checked.. how can I root it with the official way?
Thanks!
Click to expand...
Click to collapse
Once you unlocked the bootloader (there's a page on Sony website which explains how to do it), you can flash a recovery or a custom kernel with recovery via fastboot. From the recovery you can then flash supersu.
But be careful before unlocking the bootloader. As said before, you might lose some functionality (like x-reality). I recommend you do some search on the forums.
OmarMagdi said:
I'm honestly not fond of the process of downgrading and upgrading
Click to expand...
Click to collapse
Let me tell you something that may be obvious: Sony IS NOT Samsung!
In a Sony Xperia phone there is no risk of bricking the phone while downgrading or upgrading to root. You won't loose the IMEI and the risk of hard bricking the phone is almost non-existent. You can downgrade and upgrade as many times as you wish or need. I've been flashing my phones since 2011, and sometimes all night long. No joke, my Z1 got flashed at least twice a week.
At first, the Xperia world may look complicated, but trust me; A Sony Its the safest phone. Can be easily rooted, not like those HTC or Motorola phones, and even if you end up with a "brick"...It is just a soft-brick. Just turn it off completely and use Flashtool or PC Companion to repair it.
The Flashtool is a very easy to use tool. Our firmwares are file with the .ftf extension, and can be downloaded by the same Flashtool.
Since 2011 I've had HTC, Motorola, Samsung but I always love my Xperia.
Fun fact: its theoreticly impossible to brick a locked bootloader Xperia
+1 as a sony user i can agree flashing and downgrading is safe
Envious_Data said:
Fun fact: its theoreticly impossible to brick a locked bootloader Xperia
+1 as a sony user i can agree flashing and downgrading is safe
Click to expand...
Click to collapse
+1
I have used and still using an Xperia Device and never soft bricked it or died in my hands, An Xperia Device is the best device what i have had and have and will ever use,
Flashtool is the doc to save your Sony Device ^^
Sent From Somewhere On Earth With My Z2 ^^

Xperia Z4/Z3+ Root Discussion

There appears to be no discussion thread about root for the Z4/Z3+, so I thought one was in order.
I'm currently about as useful as a snooze button on a smoke alarm in terms of obtaining root. I'm curious - is there any development going on to root our devices? I'd love to donate and what not to possibly speed it up.
Let's talk!
BL unlock is not listing this device on Sony open devices
Flashtool from androxyde doesn't have the device listed as well, so I doubt BL could be unlocked.
Regarding development
I managed to unpack the blog_fs FILE'S from Emma so there we have the kernel.sin maybe we could unpack it with Android image kitchen, but I didn't succeed, Android magic was missing or something like that!?
If that could be possible, then we could repack twrp radish with zimage of the kernel.sin and perhaps have a working recovery maybe as FOTAkernel.
But that's just wishful thinking
First we need unlocked BL
And then we also have all the loss of DRM keys. TA partition and all that also needs to be in place, unless we're willing sacrifice a bit hehe...
Sent from my E6553 using XDA Free mobile app
I'm also interested in Rooting my device, but the question is; would the dual Sim (E6533) be different than the single Sim device (in terms of rooting of course)?
Sent from my E6533 using XDA Free mobile app
I unlocked my Z4T SGP712 (WiFi)
Could it work as well?
You can unlock your device by chosing Z3... No need for Z4/Z3+ on Sony Unlock page.
GhostLeader said:
I unlocked my Z4T SGP712 (WiFi)
Could it work as well?
You can unlock your device by chosing Z3... No need for Z4/Z3+ on Sony Unlock page.
Click to expand...
Click to collapse
Even with a bootloader unlock, is there any custom recovery for the Z3+?
Sent from my Xperia Z3+ E6553
Did any one try to unlock their Sony Xperia Z+ yet? Or any one try to see if it is unlockable by following steps.
You can check if it is possible to unlock the boot loader of your device in the service menu by following the steps below:In your device, open the dialler and enter*#*#7378423#*#**to access the service menu.Tap Service info > Configuration > Rooting Status. If Bootloader unlock allowed says Yes, then you can continue with the next step. If it says No, or if the status is missing, your device cannot be unlocked.
I am going to build a custom recovery incase the bootloader unlock allow says Yes..
Update: Yes it is allow to unlock the bootloader. I am waiting for my device then start working
Sent from my LG-H815 using Tapatalk 2
janjan said:
Did any one try to unlock their Sony Xperia Z+ yet? Or any one try to see if it is unlockable by following steps.
You can check if it is possible to unlock the boot loader of your device in the service menu by following the steps below:In your device, open the dialler and enter*#*#7378423#*#**to access the service menu.Tap Service info > Configuration > Rooting Status. If Bootloader unlock allowed says Yes, then you can continue with the next step. If it says No, or if the status is missing, your device cannot be unlocked.
I am going to build a custom recovery incase the bootloader unlock allow says Yes..
Update: Yes it is allow to unlock the bootloader. I am waiting for my device then start working
Sent from my LG-H815 using Tapatalk 2
Click to expand...
Click to collapse
Yup, mine allows the bootloader to be unlocked too. I would think that the international version should allow for that
Look forward to your custom recovery then!
boo85 said:
Yup, mine allows the bootloader to be unlocked too. I would think that the international version should allow for that
Look forward to your custom recovery then!
Click to expand...
Click to collapse
I'm quite looking forward to it as well. If we can get a custom recovery going, then we'll be able to get root right? It's just a matter of being able to flash SuperSU through the custom recovery? Pardon my ignorance.
AhsanU said:
I'm quite looking forward to it as well. If we can get a custom recovery going, then we'll be able to get root right? It's just a matter of being able to flash SuperSU through the custom recovery? Pardon my ignorance.
Click to expand...
Click to collapse
Its a step but we need to find a root exploit too
Sent from my E6553 using Tapatalk
Ok, got mine a few days ago. Tranfer of apps and data was sh**** as hell without titatnium backup!
I don't have any usable knoledge in programming, but if there's something to test or try, I'm volunteering
If some of the devs for other xperias has any idea, I'll test it.
Hoping to get root, very soon.
the_brad said:
Ok, got mine a few days ago. Tranfer of apps and data was sh**** as hell without titatnium backup!
I don't have any usable knoledge in programming, but if there's something to test or try, I'm volunteering
If some of the devs for other xperias has any idea, I'll test it.
Hoping to get root, very soon.
Click to expand...
Click to collapse
Yup, same here. I'll test if needed =)
xDope said:
Yup, same here. I'll test if needed =)
Click to expand...
Click to collapse
Me too! Single SIM Z3+.
my Dual Sims E6533 says that bootloader unlock is not allowed. Does that mean my phone cannot be rooted? I think its the HK version, I got it on Amazon in the USA. Any tips or advices would be greatly appreciated. Thanks!
projectseahorse said:
my Dual Sims E6533 says that bootloader unlock is not allowed. Does that mean my phone cannot be rooted? I think its the HK version, I got it on Amazon in the USA. Any tips or advices would be greatly appreciated. Thanks!
Click to expand...
Click to collapse
By right if the bootloader unlock is stated as not allowed, you can only root your phone through an exploit. Other xperia phones exploits have been found (like my previous z2, i rooted it without unlocking the bootloader), I most certainly do hope one can be found for z3+ as it would allow all the DRM stuff to be backed up and its "neater" imo.
Otherwise, if no exploit is found, then no, you would not be able to root without unlocked the bootloader to install a custom rom.
However please check if you signed in to myXperia service. If you did, you just need to sign out and reboot, then your status would be back to allowed. That is only if originally the bootloader is allowed to be unlocked.
boo85 said:
By right if the bootloader unlock is stated as not allowed, you can only root your phone through an exploit. Other xperia phones exploits have been found (like my previous z2, i rooted it without unlocking the bootloader), I most certainly do hope one can be found for z3+ as it would allow all the DRM stuff to be backed up and its "neater" imo.
Otherwise, if no exploit is found, then no, you would not be able to root without unlocked the bootloader to install a custom rom.
However please check if you signed in to myXperia service. If you did, you just need to sign out and reboot, then your status would be back to allowed. That is only if originally the bootloader is allowed to be unlocked.
Click to expand...
Click to collapse
Thanks! My dual E6533 is not allow unlock too. Than I sign out myXperia and reboot, It becomes to Yes.
boo85 said:
By right if the bootloader unlock is stated as not allowed, you can only root your phone through an exploit. Other xperia phones exploits have been found (like my previous z2, i rooted it without unlocking the bootloader), I most certainly do hope one can be found for z3+ as it would allow all the DRM stuff to be backed up and its "neater" imo.
Otherwise, if no exploit is found, then no, you would not be able to root without unlocked the bootloader to install a custom rom.
Click to expand...
Click to collapse
At this point, I see no mention of anyone working on any sort of exploit for the Z3+, this is a bit disheartening! I'm considering the new OnePlus device at this point since I'm sure root will not be an issue for that phone. It'd be a shame if it came to that since I love the feel of the Z3+
Sent from my Xperia Z3+ E6553
mine said no. Does that mean I can never install a custom recovery and custom ROMS?
boo85 said:
Yup, mine allows the bootloader to be unlocked too. I would think that the international version should allow for that
Look forward to your custom recovery then!
Click to expand...
Click to collapse
GCbard said:
mine said no. Does that mean I can never install a custom recovery and custom ROMS?
Click to expand...
Click to collapse
Did you activate your MyXperia app? If so, this could result in your phone indicating that the bootloader is not unlockable, even though it actually is. If you didn't activate this app and it still says no, then yes, it's not unlockable and you will not be able to install custom kernels / ROMs. Note that custom recovery can still work on rooted phones with locked bootloaders.
hush66 said:
Did you activate your MyXperia app? If so, this could result in your phone indicating that the bootloader is not unlockable, even though it actually is. If you didn't activate this app and it still says no, then yes, it's not unlockable and you will not be able to install custom kernels / ROMs. Note that custom recovery can still work on rooted phones with locked bootloaders.
Click to expand...
Click to collapse
i looked into my applications and did not see a myxperia app. Just xperia lounge. I did install the current firmware using sony pc companion.
I am new to xperia. I had htc one and google nexus phones prior to this that I have rooted and such. I am experience but not in xperia. Any suggestions for rooting that you know works>
uhm where is this myXperia app you guys are talking about? I searched the app store and the phone and cannot find it. Under settings, there is a "Xperia Connectivity" section, but no option to sing out.
Googling the app did give some results and I did land on this page, which I was logged into. I logged out and rebooted the phone, still says "No" to unlock bootloader.

[discussion][root] with [locked bl], vulnerabilities Snapdragon on <March2016 Android

[discussion][root] with [locked bl], vulnerabilities Snapdragon on <March2016 Android
There's an interesting article that got me thinking:
http://buysoft.greatsoftline.com/vu...m-snapdragon-chip-allow-for-easy-root-access/
CVE-2016-0819 vulnerability
Click to expand...
Click to collapse
We discovered this particular vulnerability, which is described as a logic bug when an object within the kernel is freed. A node is deleted twice before it is freed. This causes an information leakage and a Use After Free issue in Android. (UAF issues are well-known for being at the heart of exploits, particularly in Internet Explorer.)
CVE-2016-0805 vulnerability
This particular vulnerability lies in the function get_krait_evtinfo. (Krait refers to the processor core used by several Snapdragon processors). The function returns an index for an array; however, the validation of the inputs of this function are not sufficient. As a result, when the array krait_functions is accessed by the functions krait_clearpmu and krait_evt_setup, an out-of-bounds access results. This can be useful as part of a multiple exploit attack.
Gaining root access
Using these two exploits, one can gain root access on a Snapdragon-powered Android device. This can be done via a malicious app on the device. To prevent further attacks that may target either the patched vulnerabilities or similar ones that have yet to be discovered, security experts are not disclosing the full details of this attack.
Trend Micro researchers will disclose the full details of exactly how to leverage the bugs at the upcoming Hack In The Box security conference in the Netherlands to be held in late May 2016.
Click to expand...
Click to collapse
Once updates got applied,
flashing back via XperiFirm, exploit that vulnerability and gain root
What do you think ?
langeveld024 said:
It was already found.
.11 fw is vulnerable at several points, however, rooting is not possible due to dm-verity and Sony ric which prevents modify system.
If u search this thread you'll find more about it.
Click to expand...
Click to collapse
bummer
Pandemic said:
We are genius in Z3 forum !!!!
http://forum.xda-developers.com/showthread.php?p=65856403
“Sent From MWE V9.5.0 On My Z3”
Click to expand...
Click to collapse
There's progress on the Z3 front
Poor Sony's fan waiting root for locked BL so long, many 6.0 phone have got root already,
Gaining root with locked BL is actually great security risk, not something one should be proud of.
Saw this?
http://forum.xda-developers.com/showthread.php?p=65861217
Post 1677 by Pandemic
It looks promising, the Z3 just got Root on LB
Thx. Wolfbreak the developer since the X10i
Sent from my E6653 @ XDA Portal
Duvel999 said:
Saw this?
http://forum.xda-developers.com/showthread.php?p=65861217
Post 1677 by Pandemic
It looks promising, the Z3 just got Root on LB
Thx. Wolfbreak the developer since the X10i
Sent from my E6653 @ XDA Portal
Click to expand...
Click to collapse
Is it possible to port this root method on M with LB for z3 ????? They have the same problem with DRM keys like us.... But they win.
http://forum.xda-developers.com/z3/...oid-6-0-mm-t3337357/post65856403#post65856403
thanx.
I don't think there will be a way to root z5 with LB unfortunatelly.
The method there needs a custom recovery installed which is possible on Z3 due to an exploit used on an early firmware. Since there's no such achievement yet on the Z5 you will already fail with the first task and any other following.
Since they've made their success public before the final firmware is out Sony has enough time to fix everything else.
some people say the z5 and z3 use the same hardware and could technically use the z3 rom to root the z5.
however, the heading of this post should change. i thought we finally have root on the z5 family only to find out that it's just a post talking about root on the z3.....
zacharias.maladroit said:
There's an interesting article that got me thinking:
http://buysoft.greatsoftline.com/vu...m-snapdragon-chip-allow-for-easy-root-access/
Click to expand...
Click to collapse
I didn't know those information were to be disclosed in May, instead of being kept secret. Good news from our point of view...
I think that, if the vulnerabilities could be exploited also on the Z5 line (every exploit needs to be verified practically), then we could gain temporary shell root/system priviledge to backup the TA partition. If i remember well, we cannot achieve permanent root on locked bootloader, as the /system protection SONYric is embedded in the stock kernel image.
We would need some mobile flashing tool like this: http://forum.xda-developers.com/showthread.php?t=2334554
I think i misunderstood. The problem is the Verified Boot ("dm-verity") check introduced in Z3+/Z4 and Z5 line.
We cannot get permanent root because this would involve modified kernel (to write on /system partition), which would not boot using a Locked bootloader because of Verified boot process that uses an OEM key.
The whole process is described here: https://source.android.com/security/verifiedboot/verified-boot.html
Google intention is (or was) to allow the boot process, after a red warning, if the verification of the kernel image didn't succeed on a locked bootloader... But Sony devices bootloop without showing any warning and so the user is not allowed to continue (source: https://androplus.org/Entry/843/ thanks to the developer).
So, on locked bootloaders, it's impossible to have permanent root apps, xposed ,.... unless someone finds a hole in the bootloader (someone found a hole in Motorola's bootloader) or the OEM key gets copied and is used to sign modified firmwares...just exciting dreams.
Anyone, correct me if i'm wrong.
ninestarkoko said:
I think i misunderstood. The problem is the Verified Boot ("dm-verity") check introduced in Z3+/Z4 and Z5 line.
We cannot get permanent root because this would involve modified kernel (to write on /system partition), which would not boot using a Locked bootloader because of Verified boot process that uses an OEM key.
The whole process is described here: https://source.android.com/security/verifiedboot/verified-boot.html
Google intention is (or was) to allow the boot process, after a red warning, if the verification of the kernel image didn't succeed on a locked bootloader... But Sony devices bootloop without showing any warning and so the user is not allowed to continue (source: https://androplus.org/Entry/843/ thanks to the developer).
So, on locked bootloaders, it's impossible to have permanent root apps, xposed ,.... unless someone finds a hole in the bootloader (someone found a hole in Motorola's bootloader) or the OEM key gets copied and is used to sign modified firmwares...just exciting dreams.
Anyone, correct me if i'm wrong.
Click to expand...
Click to collapse
Personally, not having permanent root on a locked bootloader is fine with me. I just need temp root to back up TA partition.
I am pretty sure the rest of the Z5 owners who are not yet unlock are waiting to backup TA partition before doing anything else.
there already is a way to restore credentials to use the bravia engine and the sony goodies. but ultimately, people would like to keep their TA keys (something which they paid for) instead of losing them once they unlock bootloader.
frostmore said:
Personally, not having permanent root on a locked bootloader is fine with me. I just need temp root to back up TA partition.
Click to expand...
Click to collapse
Me too
ninestarkoko said:
I think i misunderstood. The problem is the Verified Boot ("dm-verity") check introduced in Z3+/Z4 and Z5 line.
We cannot get permanent root because this would involve modified kernel (to write on /system partition), which would not boot using a Locked bootloader because of Verified boot process that uses an OEM key.
The whole process is described here: https://source.android.com/security/verifiedboot/verified-boot.html
Google intention is (or was) to allow the boot process, after a red warning, if the verification of the kernel image didn't succeed on a locked bootloader... But Sony devices bootloop without showing any warning and so the user is not allowed to continue (source: https://androplus.org/Entry/843/ thanks to the developer).
So, on locked bootloaders, it's impossible to have permanent root apps, xposed ,.... unless someone finds a hole in the bootloader (someone found a hole in Motorola's bootloader) or the OEM key gets copied and is used to sign modified firmwares...just exciting dreams.
Anyone, correct me if i'm wrong.
Click to expand...
Click to collapse
I remember few month ago... Chainfire was working with a new form of root, it doesn't modifies system partition. This solution doesn't help us???? We don't want lose our sony's features. :silly:
uripiruli said:
I remember few month ago... Chainfire was working with a new form of root, it doesn't modifies system partition. This solution doesn't help us???? We don't want lose our sony's features. :silly:
Click to expand...
Click to collapse
That's the systemless root, where root is achieve without changing the system file.
but this kind of root requires modified boot image, which cannot be done without unlocked bootloader....
root is becoming harder to achieve as the years pass. with samdung introducing their crap knox and sony with dm-verify etc etc.. android is fast becoming another apple where everything is being locked up and end users are forced to adhere to the way their phones are "supposed" to be used.
F U C K U P Sony. Why we couldn't own our phone features we paid for. Give our freedom to use our own phone
devilmaycry2020 said:
F U C K U P Sony. Why we couldn't own our phone features we paid for. Give our freedom to use our own phone
Click to expand...
Click to collapse
here's an article on the subject http://www.xda-developers.com/a-look-at-marshmallow-root-verity-complications/
explaining your and my feelings (i really understand you).
If you want, you can comment there but please stay in topic here.
ninestarkoko said:
here's an article on the subject http://www.xda-developers.com/a-look-at-marshmallow-root-verity-complications/
explaining your and my feelings (i really understand you).
If you want, you can comment there but please stay in topic here.
Click to expand...
Click to collapse
ok,thanks for told me about that. i'll be more attention about my words next times
Maybe developer Wolfbreak from the Z3 forum can help us?
Sent from my E6653 @ XDA Portal
Samsung Galaxy s7 and the edge exynos version just got root, wtf Sony --'.
I think the main thing about Samsung phones is they have a recovery partition where as sony do not.
Sent from my Xperia™ Z5 using Tapatalk

ROOT (Xperia X 34.0.A.1.277 Modified Kernel With Root)

As the title says root is now working in xperia x
For unlocked bootloaders with 34.0.A.1.277 firmware for the moment
Thanks go to
boolee
He repack the kernel for both F5121-5122 and he share it here with us
For the moment
*For F5121--F5122 34.0.A.1.277
*SONY ric and dm-verity OFF
*DRM FIX
*SELinux is Permissive.
*init.d support
*SuperSU installed.
*No TWRP/CWM For the moment,,,use flashfire instead
Instructions
Power off,,,,hold volume up and connect the xperia via usb to pc to enter fastboot,a blue light will confirm it
fastboot flash boot filename.img
Flash with ur risk
Downloads
F5121--34.0.A.1.277
http://www.mediafire.com/download/2q1l76jxopf85bd/F51221--34.0.A.1.277.img
F5122--34.0.A.1.277
http://www.mediafire.com/download/1c3i4paoovkealc/F5122--34.0.A.1.277.img
Lefteris Fragiadakis (Frago) said:
As the title says root is now working in xperia x
Click to expand...
Click to collapse
Only for unlocked bootloaders? how do i unlock mine? thanks.
kalel29 said:
Only for unlocked bootloaders? how do i unlock mine? thanks.
Click to expand...
Click to collapse
Check in the service menu to see if it is unlockable *#*#7378423#*#* under software configuration I think it is, if it's a sim free network unlocked device(like from Sony store) it should be ok. If it's supplied locked to a network like EE, T-mobile, Verizon ect it's probably NOT unlockable the days of root on locked Bootloaders is over on new xperia device's if not all devices
Sent from my Xperia XA using XDA Labs
aidy.lucas said:
Check in the service menu to see if it is unlockable *#*#7378423#*#* under software configuration I think it is, if it's a sim free network unlocked device(like from Sony store) it should be ok. If it's supplied locked to a network like EE, T-mobile, Verizon ect it's probably NOT unlockable the days of root on locked Bootloaders is over on new xperia device's if not all devices
Sent from my Xperia XA using XDA Labs
Click to expand...
Click to collapse
Well.on my device says NO,but in sony page under unlock bootloader,says its unlockable
Well it works,in order to root it,i had to upgrade my firmware to .277 ,the only thing is that i flashed the U.S. firm,and it disabled my fingerprint scanner,now im flashing the Generic Gel. But yeah,root works. :good:
are the sony drm functions still active after this?
f5544 said:
are the sony drm functions still active after this?
Click to expand...
Click to collapse
Yes
How long should it take to boot up after flashing this kernel? I can't tell if I'm bootlooping or it's just taking a long time to boot.
josh_zombie said:
How long should it take to boot up after flashing this kernel? I can't tell if I'm bootlooping or it's just taking a long time to boot.
Click to expand...
Click to collapse
u checked what rom firmware version u had before flashing the kernel???
Lefteris Fragiadakis (Frago) said:
u checked what rom firmware version u had before flashing the kernel???
Click to expand...
Click to collapse
Yes, as far as I can tell.
josh_zombie said:
Yes, as far as I can tell.
Click to expand...
Click to collapse
I flashed the Generic LAM/Customized GEL 34.0.A.1.277 firmware and all seems to be working now.
kalel29 said:
Well.on my device says NO,but in sony page under unlock bootloader,says its unlockable
Click to expand...
Click to collapse
Check if MyXperia is turned on, if it is turned on turn it off.
Go to Developer Settings, turn OEM Unlocking on.
Sithu Htun said:
Check if MyXperia is turned on, if it is turned on turn it off.
Go to Developer Settings, turn OEM Unlocking on.
Click to expand...
Click to collapse
thanks will check that later and reply.
It has been a few years since i've unlocked a bootloader on a xperia device so I'm a bit confused:
At the moment it's only possible to obtain root with an unlocked bootloader but unlocking my bootloader means the DRM keys are whiped. I cant do a TA-backup because i have no root yet. But the DRM-fix in this kernel will fix everything so I wont loose any functionallity? So TA backup isnt needed any more? and does unlocking the bootloader still has consequences?
kistigun said:
It has been a few years since i've unlocked a bootloader on a xperia device so I'm a bit confused:
At the moment it's only possible to obtain root with an unlocked bootloader but unlocking my bootloader means the DRM keys are whiped. I cant do a TA-backup because i have no root yet. But the DRM-fix in this kernel will fix everything so I wont loose any functionallity? So TA backup isnt needed any more? and does unlocking the bootloader still has consequences?
Click to expand...
Click to collapse
this kernel has in built drm fix,bravia works,camera works,dlna works,music info works
Lefteris Fragiadakis (Frago) said:
this kernel has in built drm fix,bravia works,camera works,dlna works,music info works
Click to expand...
Click to collapse
So i wont lose functionality only DRM keys
kistigun said:
So i wont lose functionality only DRM keys
Click to expand...
Click to collapse
Yes
kistigun said:
So i wont lose functionality only DRM keys
Click to expand...
Click to collapse
You will lose warranty.
Now if only we got this for the only bug-free version (34.0.A.2.292)...
I assume flashing 34.0.A.2.292 over rooted 34.0.A.1.277 will cause loos of root functionality, right?
MegaSharkXDA said:
Now if only we got this for the only bug-free version (34.0.A.2.292)...
I assume flashing 34.0.A.2.292 over rooted 34.0.A.1.277 will cause loos of root functionality, right?
Click to expand...
Click to collapse
I would assume so, but I can't get 34.0.A.1.277?*Customized US to boot with the kernel to try it. Strange that it works for me with other customizations, just not US. And I can't live with the reception loss on LTE if I flash anything other than US/Canada firmwares. Granted I'm new to the Xperia scene, but seems like kernel should work with 34.0.A.1.277?*across the board.

Categories

Resources