Develop Bugs

APK root exploit

I tweeted this a couple week ago before the N1 was publicly out but here you go, nothing fancy, no real ui or output.
Thanks to Saurik and Giantpune for contributing (ie its based on their research)
Install apk, run apk wait 1 minute, install supersu app from market then uninstall with this command
adb uninstall com.qualcomm.privinit

Do you have a link to their research or are their findings private?
Regards,

Mr_Bartek said:
Do you have a link to their research or are their findings private?
Regards,
Click to expand...
Click to collapse
saurik - his analysis of the "second master key vuln"
giantpune for his symlnink attack vuln in property space:
Code:
/system/bin/mv /data/property /data/backupprop
/system/bin/mkdir /data/property
/system/bin/ln -s /sys/kernel/uevent_helper /data/property/.temp
/system/bin/setprop persist.sys.fail /data/pwn.sh

jcase said:
I tweeted this a couple week ago before the N1 was publicly out but here you go, nothing fancy, no real ui or output.
Thanks to Saurik and Giantpune for contributing (ie its based on their research)
Install apk, run apk wait 1 minute, install supersu app from market then uninstall with this command
adb uninstall com.qualcomm.privinit
Click to expand...
Click to collapse
Will this exploit work in any other device. when i try to install the play store warns about the vulnerability. Will this vulnerability be gone after uninstalling oppoown.

coolrevi said:
Will this exploit work in any other device. when i try to install the play store warns about the vulnerability. Will this vulnerability be gone after uninstalling oppoown.
Click to expand...
Click to collapse
Possibly other oppo devices
No it doesnt fix the vuln, just becareful where you install apps from

jcase said:
Possibly other oppo devices
No it doesnt fix the vuln, just becareful where you install apps from
Click to expand...
Click to collapse
a second mater key vulnurability? hmm, so this could might not be patched in 4.4?
great job by the way, i dont have the device but this is interesting!

ricky310711 said:
a second mater key vulnurability? hmm, so this could might not be patched in 4.4?
great job by the way, i dont have the device but this is interesting!
Click to expand...
Click to collapse
It should be patched in 4.4.
But some (read most) OEMs still can't manage to patch their devices up to the latest security updates on release.
Anyway, I tested this root method a week or so ago and it works nicely

pulser_g2 said:
It should be patched in 4.4.
But some (read most) OEMs still can't manage to patch their devices up to the latest security updates on release.
Anyway, I tested this root method a week or so ago and it works nicely
Click to expand...
Click to collapse
so your saying in most devices the master key patch could be a possible vulnurabillity still in 4.3?
interesting...

ricky310711 said:
so your saying in most devices the master key patch could be a possible vulnurabillity still in 4.3?
interesting...
Click to expand...
Click to collapse
It depends on if OEMs backported it, depends on which build OEMs used and depends on the bug. Four or five different zip parser bugs with similar results. This one I used was patched in 4.3, but other exist.

Im trying to figure out why oppown apk will not install in my n1. everytime i try it just. Says app not installed. But on the install screen it says something about being an update to an already installed program. Any clues as to what the issue is? all ive done is update to the latest ota software and im currently located in indonesia if that makes a difference.

trickraca said:
Im trying to figure out why oppown apk will not install in my n1. everytime i try it just. Says app not installed. But on the install screen it says something about being an update to an already installed program. Any clues as to what the issue is? all ive done is update to the latest ota software and im currently located in indonesia if that makes a difference.
Click to expand...
Click to collapse
Possible they patched it by now, if you are on cyanogenmod you are certainly patched
Sent from my HTC Two

jcase said:
Possible they patched it by now, if you are on cyanogenmod you are certainly patched
Sent from my HTC Two
Click to expand...
Click to collapse
So show do you root the cyanogenmod edition n1.. Can you help please.. Does it come rooted or what..

giuliano rigon said:
So show do you root the cyanogenmod edition n1.. Can you help please.. Does it come rooted or what..
Click to expand...
Click to collapse
It should not come rooted, if it comes rooted then no way did it pass CTS. I'm guessing unlocking the bootloader and flashing a recovery? I don't know, I dont have one

giuliano rigon said:
So show do you root the cyanogenmod edition n1.. Can you help please.. Does it come rooted or what..
Click to expand...
Click to collapse
You don't need to root if you aren't staying on stock. There's no lock anywhere on the bootloader or anything.
Simply flash TWRP in fastboot, then flash Omni (or whatever else) through TWRP.
You should be able to just flash a SuperSU zip in TWRP as well if you want to root the stock ColorOS.
Sent from my N1 using Tapatalk

noobish doubts..
Harfainx said:
You don't need to root if you aren't staying on stock. There's no lock anywhere on the bootloader or anything.
Simply flash TWRP in fastboot, then flash Omni (or whatever else) through TWRP.
You should be able to just flash a SuperSU zip in TWRP as well if you want to root the stock ColorOS.
Sent from my N1 using Tapatalk
Click to expand...
Click to collapse
Please i ne ed a walthrough..
1) download twrp
2) put it in root of the telephone robot
3) flash it in recovery?
4) reboot recovery wipe cache and dalvik flash omnirom..
Please correct me..
Thank you

giuliano rigon said:
1) download twrp Yes
2) put it in root of the telephone Yes
Make sure to copy Omnirom to your phone at some point
3) flash it in recovery? No - Flash TWRP in Fastboot if you haven't flashed the recovery already. Use the official Teamwin site for guidance
4) reboot recovery wipe cache and dalvik flash omnirom.. Wipe Cache, Dalvik, System, and Data
Click to expand...
Click to collapse
Updates in Red
This is off-topic for this thread though. Questions/Info for flashing Omnirom should be addressed in the Omnirom thread.

Harfainx said:
You don't need to root if you aren't staying on stock. There's no lock anywhere on the bootloader or anything.
Simply flash TWRP in fastboot, then flash Omni (or whatever else) through TWRP.
You should be able to just flash a SuperSU zip in TWRP as well if you want to root the stock ColorOS.
Sent from my N1 using Tapatalk
Click to expand...
Click to collapse
may you provide to right superSU.zip files
I v got superSU from this link and it doesnt work on first and second CM version
I am not rooted yet ...
thnaks

nowy57 said:
may you provide to right superSU.zip files
I v got superSU from this link and it doesnt work on first and second CM version
I am not rooted yet ...
thnaks
Click to expand...
Click to collapse
That does work. You're likely not removing root, but rather just uninstalling SuperSU.
I answered you in your Q&A thread on root.

not rooted.. confirm i can flash
nowy57 said:
may you provide to right superSU.zip files
I v got superSU from this link and it doesnt work on first and second CM version
I am not rooted yet ...
thnaks
Click to expand...
Click to collapse
I nave tried my damnedest to root .. Fastboot flashing supersu flashing from recovery Direct install from google play complete unroots and reflash letting recovery do it .. No way..
So now i need a last confirmation.. Can i flash omnirom after wipes even if i am unrooted.. And has anyone rooted omnirom or does it come unrooted.. Thanks for the info .. Another idea.. Flashing color OS footing and then flashing omni.. Or is this a late night bad Dream..
---------- Post added at 01:17 AM ---------- Previous post was at 01:05 AM ----------
Harfainx said:
That does work. You're likely not removing root, but rather just uninstalling SuperSU.
I answered you in your Q&A thread on root.
Click to expand...
Click to collapse
Sorry now i got it.. It was in the forums.. Just unchecking the respect cyanogen settings in the super su menu got me roooted and happy.. Sorry for your time.. I flashed super su zip from recovery rebooted and unchecked .. Now i am set..

I were rooted myN1 in yesterday, its really good . thankss
Sent from my N1 using XDA Premium 4 mobile app

[Q&A] [ROM][STOCK](V410 ONLY)KOT49I.V4101d | 4.4.2 | Rooted + Busybox

Q&A for [ROM][STOCK](V410 ONLY)KOT49I.V4101d | 4.4.2 | Rooted + Busybox
Some developers prefer that questions remain separate from their main development thread to help keep things organized. Placing your question within this thread will increase its chances of being answered by a member of the community or by the developer.
Before posting, please use the forum search and read through the discussion thread for [ROM][STOCK](V410 ONLY)KOT49I.V4101d | 4.4.2 | Rooted + Busybox . If you can't find an answer, post it here, being sure to give as much information as possible (firmware version, steps to reproduce, logcat if available) so that you can get help.
Thanks for understanding and for helping to keep XDA neat and tidy!

Thank You Thank you Thank You.
OMG you are a savior. I've had a overpriced paperweight for weeks! So Glad to have a workable rom again!

Exiius said:
Thank You Thank you Thank You.
OMG you are a savior. I've had a overpriced paperweight for weeks! So Glad to have a workable rom again!
Click to expand...
Click to collapse
lol, sorry to hear that. You're welcome. Did you fix it yet with this ROM?

yes i did
now i can go with tinkering off the bloatware again with a legit backup this time lol

OK, so I have the ATT V410 tablet, still in factory form. I've been wanting to do more with this and have been doing a lot of research on acquiring root. I would like to install the Skinny ROM onto it and was thinking this might be my solution for root as I don't currently have access to a PC to perform with Purpledrake. So, of course I went through the process of trying to install TWRP first but was unable because Flashify requires root to begin with. So it appears that I'm back to square 1 here... or am I? What I'd like to know is if I can do all this WITHOUT first acquiring Root via Purpledrake and a PC....?
DTxNET© / {DT.Net}™

Just got my new LG G Pad 7.0 LTE v410.
Want to install this ROM via TWRP or CWM.
Can anyone please guide the steps to install the custom recovery on this tablet and the download links to the custom recovery files. Looks like without the custom recovery I cannot move forward to install this ROM.
Thanks for your help.

you have a stock rom in tot file
help me please you have tot file ? for lg v410 ??

Me too
Like post #22, I find myself stuck in TWRP as well after ATT tried to update my rooted tab to lollipop. Tried flashing the stock 410 rooted rom but no luck.

please help
im stuck at twrp recovery screen exact same reason u describe i had installed twrp and att update tried installing on its own and now I am stuck at twrp screen i had tried to use your terminal method but it brings up folders pop up asking browse to starting folder it doesn't have dd of of to pick from and also I don't have place to type in can u please help me to fix the issue

V410 = u4310
I just got a UK410 and I have it rooted with DP Tools and installed TWRP bumped.
My question is: do the V410 rom threads pertain also to the UK410? Can I use a rom for the V410 in the UK410 since they are the same except for carrier. I am not using the LTE phone functions, just as a tablet. When I purchased the UK410, it was listed as WIFI only, which led me to believe it was a V400, but they sent a UK410.

LG 410 stock with functional Stock Lollipop update
Hey there I have finally found a solution to this problem. XDA will not allow me to create a new thread to post it but if you still need it let me know. Basically you will be installing the rooted stock 410 found here on xda, then installing a stock recovery image using simple recovery, and then running ota update. You do loose root on the lollipop update. I have the necessary files and a step by step if you need them.

mimey1977 said:
Hey there I have finally found a solution to this problem. XDA will not allow me to create a new thread to post it but if you still need it let me know. Basically you will be installing the rooted stock 410 found here on xda, then installing a stock recovery image using simple recovery, and then running ota update. You do loose root on the lollipop update. I have the necessary files and a step by step if you need them.
Click to expand...
Click to collapse
Yes i still need them. Please pm me or reply here. Damn ATT update has me stuck on TWRP recovery.

Saved my LG Pad 7 V410
This saved my tablet. Just when I thought my tablet was done I saw this post and tried it.
Thank you so much.

So, I have a stock, rooted V410 with TWRP, how do I get the lollipop update?

mikiemc73 said:
So, I have a stock, rooted V410 with TWRP, how do I get the lollipop update?
Click to expand...
Click to collapse
I would use Flashify to flash stock recovery, then unroot.

please
mimey1977 said:
Hey there I have finally found a solution to this problem. XDA will not allow me to create a new thread to post it but if you still need it let me know. Basically you will be installing the rooted stock 410 found here on xda, then installing a stock recovery image using simple recovery, and then running ota update. You do loose root on the lollipop update. I have the necessary files and a step by step if you need them.
Click to expand...
Click to collapse
yes please i have been looking for a fix for this for 2 months so any help is greatly appreciated

How can I get my tablet into download mode when all it does it not to recovery

mrwattz405 said:
How can I get my tablet into download mode when all it does it not to recovery
Click to expand...
Click to collapse
Turn off, hold volume up button and plug in USB.
Tablet will turn on, telling you to hold volume up button until download mode starts, so hold volume up, and download mode will start.

Just updated to bol1 need help

I recently updated to the new fw bol1 im just wondering if there is any way to root the phone or downgrade ?

Sebby000 said:
I recently updated to the new fw bol1 im just wondering if there is any way to root the phone or downgrade ?
Click to expand...
Click to collapse
This is from the Renegade Rom page on Android Development, IT WORKS EVEN IF YOU ARE ON BOL1.
Start with step 5
Proper flashing/upgrading to this ROM.. IF you're thinking about flashing OJ7 Roms, take note of the following:
First, Make a TWRP backup
Make a Titanium backup and Backup your Files to PC (i.e. DCIM/Downloads/SMS/TWRP) as you might have to factory full wipe if no boot after ODIN!! Yes no more pictures of your cat Fluffy
ODIN OJ7 Full Update/Firmware Click Here.
After returning to STOCK - bootup and go to software update and take ANY OTA
{{START HERE WITH A NEW PHONE}}{{START HERE IF YOU'RE ALREADY ON OI1}}
Go to Settings--->About Device--->Tap "Build Number" 10 times and you will unlock Developer Options---> unlock bootloader (See Attachment)
Flash THIS TWRP in Odin (compatible with 5.1.1 OFE and up) and you will be good to go with root+recovery on 5.1.1!!
Boot into TWRP; Wipe (Cache,Dalvik,System); Flash a RENEGADE OJ7-V1 Rom
Finally done!! Now you get all the juiciness of the Renegade work and any mods.
Depending on your install method... The initial boot WILL take up to 10 minutes on a clean install, SO PLEASE BE PATIENT!!!!
Please check post 2 and 3 if you're having issues or questions after flashing a Rom

veri nica, ty

Sebby000 said:
I recently updated to the new fw bol1 im just wondering if there is any way to root the phone or downgrade ?
Click to expand...
Click to collapse
Have you had success with getting root on OL1 following the steps suggested above?

exeleon said:
Have you had success with getting root on OL1 following the steps suggested above?
Click to expand...
Click to collapse
Yes, I installed Renegade rom over OL1 and it works without a problem after 4 days or so. You can even use GalaxyTools to get hotspot access, good battery life also.

thanks for the helps guys but i just wanted to root my phone to use HOTSPOT but i figure it out how to do it without root access just changed the APN SETTING AND ADD .dun at the end and it works

I Have a Few Questions About Rooting My HTC One M9

Hey guys, I'm fairly new to the android scene when it comes to the rom and rooting side of things so I just have a few questions about Sunshine and the whole process in general. Sorry if this may have already been asked but after a quick search many of the answers to these questions seem to be outdated.
1. Do you need to be rooted in order to use Sunshine?
2. If I do, is there any method to root my phone? I can't seem to find any without paying some money.
The only reason why I would want to root my phone is so I can use Titanium root and back up my data.​
3. Do I have the order right?
Use Sunshine (gains S-off/unlocks bootloader)​Install a custom recovery (TWRP)​Super SU (Does this root my phone?)​Install Cyanogenmod​
4. If I have the order correct, at what point should I backup my data and when would my data get wiped?
5. And if I'm backing up my data should I back it up to my SD card and remove it, or do something else?
Once again, I'm sorry if most of the answers to these questions seem obvious but this is my first time tampering with my phone so I would appreciate any help!

Ok so a little update, I used sunshine, installed twrp, and tried to flash super su but I got stuck on a bootloop. Any help? I tried wiping the cache/dalvik.

.-. said:
Ok so a little update, I used sunshine, installed twrp, and tried to flash super su but I got stuck on a bootloop. Any help? I tried wiping the cache/dalvik.
Click to expand...
Click to collapse
The latest supersu zip will give you a bootloop. The previous version works fine. I don't have it anymore but you will need to download a rom and flash it.

Flyhalf205 said:
The latest supersu zip will give you a bootloop. The previous version works fine. I don't have it anymore but you will need to download a rom and flash it.
Click to expand...
Click to collapse
Would you be able to drop a link please? or give me version number?

.-. said:
Would you be able to drop a link please? or give me version number?
Click to expand...
Click to collapse
Are you looking for Sense rom or CM?
Sense roms you can find them http://forum.xda-developers.com/verizon-one-m9/development There is a complete stock rom and a few modded versions
CM you can find here. http://forum.xda-developers.com/verizon-one-m9/orig-development/rom-cyanogenmod-13-0-t3339509
CM does lack VoLTE

.-. said:
Ok so a little update, I used sunshine, installed twrp, and tried to flash super su but I got stuck on a bootloop. Any help? I tried wiping the cache/dalvik.
Click to expand...
Click to collapse
This is a common issue, it happened to me too, so I wrote a quick post how to avoid it.
https://forum.xda-developers.com/verizon-one-m9/help/s-offed-unlocked-bootloader-via-t3444629

Made a full root-uninstall on CM12.1 - how to properly re-root?

After successfully flashing CM12.1 and playing around with it a little bit, I wanted to completely remove root (to get a few apps running). So I was advised to download SuperSU and use it to make a full/complete root removal. After that I de-installed SuperSU and disabled root in the Developer Options.
Well, that worked, I could run the apps that were unhappy with just root disabled in Developer Options. But now I want to have root back and I read in a couple of place that just flashing the latest SuperSU.zip from recovery might be a bad idea.
Any suggestions how to properly re-root my CM12.1 ?

aalemann said:
After successfully flashing CM12.1 and playing around with it a little bit, I wanted to completely remove root (to get a few apps running). So I was advised to download SuperSU and use it to make a full/complete root removal. After that I de-installed SuperSU and disabled root in the Developer Options.
Well, that worked, I could run the apps that were unhappy with just root disabled in Developer Options. But now I want to have root back and I read in a couple of place that just flashing the latest SuperSU.zip from recovery might be a bad idea.
Any suggestions how to properly re-root my CM12.1 ?
Click to expand...
Click to collapse
Not sure what would be bad about it. If it's an issue with latest version, just use 2.46

levone1 said:
Not sure what would be bad about it. If it's an issue with latest version, just use 2.46
Click to expand...
Click to collapse
ok, thanks for the prompt answer! I am currently trying to find where I read this..... anyway, will then probably just flash it and see if it works

aalemann said:
ok, thanks for the prompt answer! I am currently trying to find where I read this..... anyway, will then probably just flash it and see if it works
Click to expand...
Click to collapse
https://download.chainfire.eu/696/supersu/

levone1 said:
https://download.chainfire.eu/696/supersu/
Click to expand...
Click to collapse
this is exactly the version I flashed onto my CM12.1, worked flawlessly