Possibility to root with trickery exploid - Hero, G2 Touch Android Development

Hello,
I have successfully rooted my G2 Touch 1.5 with the trickery exploid (hxxp://c-skills.blogspot.com/2010/07/android-trickery.html), because it was not possible to root it with the "One click" method.
Using this guide: hxxp://alldroid.org/default.aspx?g=posts&t=493
According to the README on trickery blog this method should work for 1.x and 2.x firmware. Maybe someone can try this method also for 1.6 and 2.1, if it's working for Hero.
In the attached zip is the changed source code and the compiled binary.
To compile the source follow this tutorial: hxxp://betelco.blogspot.com/2010/01/buildingdebugging-android-native-c.html

skuskom said:
Hello,
I have successfully rooted my G2 Touch 1.5 with the trickery exploid (hxxp://c-skills.blogspot.com/2010/07/android-trickery.html), because it was not possible to root it with the "One click" method.
Using this guide: hxxp://alldroid.org/default.aspx?g=posts&t=493
According to the README on trickery blog this method should work for 1.x and 2.x firmware. Maybe someone can try this method also for 1.6 and 2.1, if it's working for Hero.
In the attached zip is the changed source code and the compiled binary.
To compile the source follow this tutorial: hxxp://betelco.blogspot.com/2010/01/buildingdebugging-android-native-c.html
Click to expand...
Click to collapse
Interesting. Do we have any idea what the 'exploid' package itself does? Just curious. The exploit may well exist in 2.1, but there never was a 1.6 for the hero officially released.
The other method which I released from the Droid Eris folks' work was the 777 permissions exploit. I'm wondering if this could be a similar method, or if it's a totally different attack vector.
Still, would love to know how this one works at a technical level.
EDIT: just noticed you provided changed source code. Taking a look just now...

NOOBIE
Sorry but is there any chance you could throw together a qucik run down of what you actually did compared to the Alldroid guide? sorry but im used to working on my Magic and Dream in which case i would install a new Engineering SPL but i dont know if that would be required on a Hero or not. I dont actually have a Hero to try right now but trying to put a quick guide together for for a friend.

So again i will ask diffrently.....if I follow this guide http://wiki.cyanogenmod.com/index.php?title=Full_Update_Guide_-_Rogers_Dream_911_Patched
The diffrences would be using a Hero recovery, and secondly to skip the part about installing the SPL.
So I guess my question is: All i need is a custom recovery installed right??
Someone please answer, and sorry if it sound like a stupid question (no flamers please)

raymar23 said:
So again i will ask diffrently.....if I follow this guide http://wiki.cyanogenmod.com/index.php?title=Full_Update_Guide_-_Rogers_Dream_911_Patched
The diffrences would be using a Hero recovery, and secondly to skip the part about installing the SPL.
So I guess my question is: All i need is a custom recovery installed right??
Someone please answer, and sorry if it sound like a stupid question (no flamers please)
Click to expand...
Click to collapse
Right. First thing. Forget everything you learned on the magic or dream etc
Second thing. If you're on 2.1, use this method, as all you need is a patched recovery. Then you flash a ROM from recovery and you're sorted.
If you're on 1.5 ROM, then go to http://villainrom.co.uk/viewtopic.php?f=46&t=375 and follow those instructions to root etc. Those are easier methods for now, till we work out how this method works best, and put it to use

anon2122 said:
If you're on 1.5 ROM, then go to hxxp://villainrom.co.uk/viewtopic.php?f=46&t=375 and follow those instructions to root etc. Those are easier methods for now, till we work out how this method works best, and put it to use
Click to expand...
Click to collapse
Yes, but only problem is, that if you should use GoldCard method you lose your original ROM.
And in my country T-mobile didn't release any RUU ROM, which can be flash back in case of warranty.
With this "new" posibility to root you can do NANDROID backup before flashing custom ROM, like it was possible with "One Click" method.

Tnhanks for the answers.
Guess I was trying to complicate something simple
Ill do up a guide on the process after I root the phone. Probably be a few days though.

Related

[Q] Basic Root; I still want Sprint Default Rom? Thanks

I would like some help. I had the Hero before and there was a lot less options to root; with the EVO is overwhelming. All I am looking for is a rooted version of Sprint's official rom so I can uninstall dumb preloaded sprint applications and enable free wireless tethering.
I found this
http://www.knowyourcell.com/htc/htc-evo-4g/evo-4g-guides/463925/how_to_root_the_htc_evo_4g.html would I just follow the first section steps 1-5? Or does anyone have any other advice for what I am trying to do.
Thanks
I'm not sure this is the right forum for this, but it is really simple. Follow toast's instructions for root (part 1) to root the device. Then follow toast's nand unlock instructions (part 2) to fully root the device. Next, flash the ROM of your choice (for a stock rooted ROM, look at the offerings from flizmode or joeykrim).
I rooted then after trying a bunch of others settled on flipzmode's stock ROM and removed the nuisance apps. Then I used it to make my own with all the bits removed.
Honestly it's easier to use the kitchen to make a ROM then remove the apps one by one through adb.
fr4nk1yn said:
I rooted then after trying a bunch of others settled on flipzmode's stock ROM and removed the nuisance apps. Then I used it to make my own with all the bits removed.
Honestly it's easier to use the kitchen to make a ROM then remove the apps one by one through adb.
Click to expand...
Click to collapse
You can use a file manager like root explorer which speeds things up considerably. If you want to use adb that is fine as well. You can just make a .txt file with the rm commands for whatever you want to remove and just paste that into your console. It will mass remove them and it goes a lot quicker.
Hint: If theres a question mark in your subject, the thread belongs in Q&A
Here are all the Evo roms..
http://wiki.xda-developers.com/index.php?pagename=HTC Evo ROMs
Look under "Stock with Root"..
thanks guys.
So i am reading this
http://forum.xda-developers.com/showthread.php?t=690762 from toastcfh, but I want to keep the stock rom and just remove the junk, but he says don't use his guide if you want to use Sprint RUU and that's what I want to do so what are my options then?
thanks
integra144 said:
So i am reading this
http://forum.xda-developers.com/showthread.php?t=690762 from toastcfh, but I want to keep the stock rom and just remove the junk, but he says don't use his guide if you want to use Sprint RUU and that's what I want to do so what are my options then?
thanks
Click to expand...
Click to collapse
First do the simple root method linked in my sig. Then take a look at the guide in my sig. Both should guider you everything you need.
webs05 said:
First do the simple root method linked in my sig. Then take a look at the guide in my sig. Both should guider you everything you need.
Click to expand...
Click to collapse
Thanks. So I run the root application. Then i can use this in step 2 Stock (1.32.651.6) with root. Deodex and odex available v1.0.8 (06/25/2010) by joeykrim http://forum.xda-developers.com/showthread.php?t=699847
. and i will be roooted an able to get free wireless tether and remove sprint junk apps?
just to make sure?
Thanks again for the replies.
Please some more advice
OK. Thanks for the help so far. I am so confused as there are way to many root methods and options for the EVO. And too much backup, Recovery, Rooting, lol my mind is going crazy on what I am supposed to do.
ALL I WANT TO DO at the end of the day is remove sprint crap ware and enable wireless tether. I am not interested in custom roms, etc. Can someone please just direct me with specific links.
I did this on my hero really easy, I just followed these http://forum.xda-developers.com/showthread.php?t=694572. But with the EVO there is way to mant options. Can someone just please direct me.
Joeykrim ROM is exactly what you're looking for. See the above link that leads you to all the EVO ROMs.

Droid Incredible- root and then unroot?

Hello-
Again, big thanks for the work done by unrevoked team. Awesome.
My phone is arriving today, and I'd like to root. However, I'd also like the ability to return the phone to factory spec in case of an emergency. Is that possible via the unrevoked3 tool? If not, where can I find a factory Droid Incredible ROM or recovery image to flash?
Lastly, are there any changes to the wifi tether methods with one click root vs previous methods?
Thanks!
please search for unroot, there are videos out there for this as well.
Not really- nothing addresses the new unrevoked3 tool. Don't leave an answer unless you bring something new to the table- I've done my basic homework.
EDIT: Can't post links yet, but there is a post called "[HOW 2] Downgrade software version (before OTA)" which has instructions on using the HTC Radio Update Utility. Can anyone confirm if this works with unrevoked3? outsid0r - is this the same method you are referring to?
yes thats the method and i have done it so i can confirm it does work
outsid0r said:
yes thats the method and i have done it so i can confirm it does work
Click to expand...
Click to collapse
Thanks! That was very helpful, I appreciate it. The mods can mark this thread as closed, I think. I suppose I'll now be comfortable with rooting the phone!
rooting is quite easy, but and FYI for right now, using windows can get a communication error which is under investigation by the unrevoked team

Unrevoked 3 NAND unlock?

Hello, I am new to this but successfully used unrevoked 3.1 on my evo. From there I installed two roms under clockwork recovery from zip files on my sd card, one worked, the other did not. What I am confused about is that they say unrevoked does not allow NAND write to /system, but yet I was able to flash a custom rom? i thought i had to be nand unlocked to flash a custom rom? Thanks !
should I post this to a different part of the forum or...
If you have a "Question" to which you would like an "Answer" then the "Q&A" section will suffice.
Regarding your question, my answer is to use the "Search" button or read the threads first. - You won't believe how much information I've learned just by reading through a thread with a couple hundreds pages of "good" feedback on root, roms, and what type of root methods to stay away from.
My question wasnt really a general question and is about development so I thought it would be appropriate here. I have read this forum since 07 and this was the only question I wasn't able to find anywhere. No one has spelled out exactly why some roms need nand unlock and others don't as far as I have seen.
I've noticed this too. I'm using baked snack with no issues but can't run damage control.
sent from my htc evo
Certain ROMs will require you to have NAND unlocked others not, this isnt a development question though its a general question about how to root the phone.
What is the difference though ? As in why if one rom can work nand locked why would another not be able to work? I'm trying to understand whats happening here.
more importantly, does anyone know how to nand unlock? Simple root doesn't work on my system after unrevoked..
prophetx2 said:
more importantly, does anyone know how to nand unlock? Simple root doesn't work on my system after unrevoked..
Click to expand...
Click to collapse
If i was you i would go back to stock RUU and try Toast root method 1 and 2 for the full root, or if you got the 1.47.651.1 the the SimpleRoot.
And i believe the difference between ROM that need or does not need Nand unlock is that some roms writes in nand and other doesn't.
I've been trying to figure this out as well as I have 1.47.651.1, rooted with unrevoked 3.1, and have been trying to unlock nand with no luck. I'm on a mac so simpleroot won't work for me (even tried it on my work PC, but something is messed up with the /net framework, installed 4, but simpleroot says it can't find it), and when I try toast's method I get "permission denied" errors when trying to use the adb system. So I'm kinda stuck on what to do right now....
Scratch that, found my problem.. Forgot to startup superuser access...
I also rooted with unrevoked 3 and want to get the nand unlocked.
Did you get it to work on your Mac or the PC? I'll continue to search around in the meantime and see what the best method is... I'd rather do it on my Mac, but I can find a PC if I must.
thanks.
http://unrevoked.com/rootwiki/doku.php/public/forever
Scroll down to install instructions, download the forever zip and then flash in recovery, and you'll be all set.

[PATCH] Working Superuser/su for newer Sense ROMs

Anyone following the RUU threads already knows about this and it's starting to get more attention now. The latest official build of Superuser does not work with newer Sense ROMs (such as Vision 1.72+, anything released recently). HTC has started utilizing a relatively new feature of sqlite; a journaling mode called WAL (write-ahead logging). It's actually smart. WAL journaling should improve sqlite throughput, which represents a large amount of Android's IO and benefits applications across the board. The downside is it broke Superuser because it's actually special in its' use of sqlite.
WAL journaling, as built with these new Sense ROMs, is using exclusive locking. Why is this important for Superuser? It's the one situation where you have an application running within Android's process space and one outside of it, both accessing the same sqlite database. When su runs, it opens the sqlite database to check whether you have allowed access for said command to run. If not, a call is made to the Android application, which fires up and prompts you for an answer. Problem is, su has the database open with an exclusive lock (i.e. nothing else can touch it), so Superuser (the Android app) fails to open the database and cannot run. It'll either force close or do nothing.
To fix this, I have modified Superuser and su. Both changes have been submitted to ChainsDD for review. You can look at his git repository's pull requests to see the changes I'm proposing. I'm basically changing the journal mode being used by su one that is non-exclusive and Superuser to close its' database when sitting idle. I couldn't change Superuser's journal mode no matter what I did; it seems to be set deeper in the stack than I can access.
Here are the links to my pull requests on Github if you want to review the code:
https://github.com/ChainsDD/android_packages_apps_Superuser/pull/14
https://github.com/ChainsDD/android_system_extras/pull/1
Anyway, the end result is I have a working Superuser. Here are the caveats:
This is not an official build, so it's signed with my key, not ChainsDD. He has merged my patches into his Github repository so they should be making their way into a release soon.
I've artificially incremented the version number to 9.9.9, to make sure if you install my version, it'll "win" over any other installed version. Also, this prevents the Market from nagging you for updates.
I don't recommend using this version unless you must. In other words, you are on one of the Sense ROMs which is broken. Use an official build otherwise.
If you ran the RUU and have trashed your custom recovery (Clockwork), this isn't going to help you root the device again. Superuser is a tool for managing root access, not obtaining it.
If you are running Virtuous, you DO NOT need this.
Download Patched Superuser Flashable Zip​
great work rmk! but i still prefer to stick with your virtuous.
I'm trying to work around the no root available for 1.72 problem with my stock HTC Z rom updated to 1.72 OTA, but with Rage method temp-root I'm stuck with a frozen terminal after the 'Force Close' step, starting the terminal the 3rd time in the process. I've replaced the gfree_temp_root package's su file with the one provided here, used the APK provided here (pre-installed the apk too before the attempt). It's unfortunately stuck with a frozen black terminal window. Probably the Rage thingy doesn't work with the new 1.72 update, or am I using these files correctly at all?
(guide http://forum.xda-developers.com/wik...cess_.28Permanent_Root_.2F_.22Permaroot.22.29 )
ChainsDD merged my patches into his repositories today so they should make it into an official release soon.
Nice! Is ChainsDD going to be changing Journal Mode himself?
thanks for this, confirmed working on DHD.
Just for a correct understanding:
I need to have root like described here to use SU right?
Or is it now possible to get the new Update via OTA and get root with this method and its a solution for rooting 1.72?
Thanks!
Dacoco said:
Just for a correct understanding:
I need to have root like described here to use SU right?
Click to expand...
Click to collapse
That's a DHD thread and this is the DZ/G2 forum. So you're either in the wrong forum, or looking at the wrong procedure (which could brick your phone).
Soo.... Us stock 1.72 people can root??
MacaronyMax said:
Soo.... Us stock 1.72 people can root??
Click to expand...
Click to collapse
There has been more than one report that rage doesn't work either, on the 1.72 ROMs.
Also, there's the issue of S-OFF that needs addressing, whether that can be re-done at 1.72.
I dont understand, or I miss some information. The 1,72 ROM is not patched yet (or what?).. Then. If I install 1,72 I will loose root. So in what cases I will need this patch?
denich said:
I dont understand, or I miss some information. The 1,72 ROM is not patched yet (or what?).. Then. If I install 1,72 I will loose root. So in what cases I will need this patch?
Click to expand...
Click to collapse
Check this thread - http://forum.xda-developers.com/showthread.php?t=886023
The patched su/Superuser is just part of the solution.
steviewevie said:
That's a DHD thread and this is the DZ/G2 forum. So you're either in the wrong forum, or looking at the wrong procedure (which could brick your phone).
Click to expand...
Click to collapse
Oh! You're right. I just followed some links. Okay thanks.
steviewevie said:
Check this thread - http://forum.xda-developers.com/showthread.php?t=886023
The patched su/Superuser is just part of the solution.
Click to expand...
Click to collapse
According to this- there is now root method to 1.72.. I don't understand, why this patch is needed if rooting 1,72 is not availeble?
denich said:
According to this- there is now root method to 1.72.. I don't understand, why this patch is needed if rooting 1,72 is not availeble?
Click to expand...
Click to collapse
Cause the Virtuous 0.8.X is build from the Egypt 1.72.X Release, if I understood it right
b1oh4zard said:
Cause the Virtuous 0.8.X is build from the Egypt 1.72.X Release, if I understood it right
Click to expand...
Click to collapse
Is the Egypt RUU rootable?
That could solve our problems!
&partialy working for me.. still creating read-only -wal and -shm files
here is an another solution: http://saraev.ca/su/
it is modified to "chmod" own databases - have a look at README file included
don't forget to grant permissions to superuser itself
EDIT: this is a dirty workaround, I hope someone can make it better...
seo said:
&partialy working for me.. still creating read-only -wal and -shm files
here is an another solution: http://saraev.ca/su/
it is modified to "chmod" own databases - have a look at README file included
don't forget to grant permissions to superuser itself
EDIT: this is a dirty workaround, I hope someone can make it better...
Click to expand...
Click to collapse
The one in your link is a dirty workaround for sure, it modifies baksmali code. Mine is working as intended. The wal and shm files are only present when you're actually sitting in the Superuser app. I'll modify the code some more to close the DB anytime it's not being read or written from. As it stands it's already rare to trigger a case where a request would fail.
rmk40 said:
The one in your link is a dirty workaround for sure, it modifies baksmali code. Mine is working as intended. The wal and shm files are only present when you're actually sitting in the Superuser app. I'll modify the code some more to close the DB anytime it's not being read or written from. As it stands it's already rare to trigger a case where a request would fail.
Click to expand...
Click to collapse
yeah i know that..
Hi,
This patch works only on Desire Z or I can install in my Desire HD?
Regards,

Confused

I just recently bought a G2 and updated its software...But I'm clueless where to start/how to root the phone. I looked through some stickies, but I got lost right away. Can anyone help or show me something a lot easier to follow? Thanks
Word to the wise, if the rooting process seemed too hard to do do not do it and stay stock, lot less risk of your phone bricking.
monkeytuner said:
I just recently bought a G2 and updated its software...But I'm clueless where to start/how to root the phone. I looked through some stickies, but I got lost right away. Can anyone help or show me something a lot easier to follow? Thanks
Click to expand...
Click to collapse
Just follow the guide in the wiki step by step, and remember to double check your typing before issuing ang commands
Sent from my T-Mobile G2 using XDA App
monkeytuner said:
I just recently bought a G2 and updated its software...But I'm clueless where to start/how to root the phone. I looked through some stickies, but I got lost right away. Can anyone help or show me something a lot easier to follow? Thanks
Click to expand...
Click to collapse
What software did you upgrade? You may have to downgrade to root, pay attention to software versions.
Sent from my shiny metal G2 w/ meXdroid V3
PaganAng3l said:
What software did you upgrade? You may have to downgrade to root, pay attention to software versions.
Sent from my shiny metal G2 w/ meXdroid V3
Click to expand...
Click to collapse
I'm on 2.2
Build number 1.22.531
Kerner 2.6.32.17
Hboot-0.82
Just follow the steps on the wiki like a member said. I had no experience whatsoever but managed to learn a little adb and successfully rooted my phone. Use the rage gfree method. It is simple with the least chance of bricking
Sent from my HTC Vision using XDA App
The Wiki guide is right here, if you haven't found it yet:
http://forum.xda-developers.com/wiki/index.php?title=HTC_Vision#Rooting_the_Vision_.28G2.2FDZ.29_and_DHD
Just read up as much as you can before you start, and follow the instruction very carefully, and you will be fine.
The Gingerbread (Android 2.3) OTA that is currenlty being deployed is not currently rootable (and requires downgrading first to root), but you should be okay since you are still on the T-Mobile 2.2 ROM still.
What about doing this on Macs?
monkeytuner said:
What about doing this on Macs?
Click to expand...
Click to collapse
It should work on a Mac. Just dual boot into a Linux distribution.
Could someone post the Windows USB Drivers for the Vision?
The link is dead, and i couldn't find anything after I searched for it.
Can somebody also post T-Mobile G2 and HTC Desire Z: recovery-clockwork-3.0.2.4-vision.img (md5sum cbc776e7941ebf030e9fa39473d5b6f1)
? The link won't load, I'l borrow my friends windows to do this. Thanks so much!
Edit:
http://theunlockr.com/2010/11/30/how-to-gain-permanent-root-and-s-off-on-the-t-mobile-g2-htc-vision/
Will this method work after doing a temp root? It seems a lot easier
As far as the usb drivers go, I used pda.net from the market. If after you install pda.net it still sees your phone as usb mass storage only, then unplug your phone, remove the current driver and plug it back in. It should ask you if you want to set up your new hardware and show it as an android device
Sent from my shiny metal G2 w/ meXdroid V3
monkeytuner said:
Could someone post the Windows USB Drivers for the Vision?
The link is dead, and i couldn't find anything after I searched for it.
Can somebody also post T-Mobile G2 and HTC Desire Z: recovery-clockwork-3.0.2.4-vision.img (md5sum cbc776e7941ebf030e9fa39473d5b6f1)
? The link won't load, I'l borrow my friends windows to do this. Thanks so much!
Click to expand...
Click to collapse
Just download HTC Sync, it comes with the drivers:
http://www.htc.com/www/supportdownloadlist.aspx?p_id=325&act=sd&cat=all
There is a similar post about the Clockworkmod download. Might just be down temporarily. Try again later.
http://forum.xda-developers.com/showthread.php?t=1097465
Will the visionary method work too?
monkeytuner said:
Will the visionary method work too?
Click to expand...
Click to collapse
NO. And yes. Confused? Here is a link to the method myself and many others have used: http://forum.xda-developers.com/showthread.php?t=928160
This is an "easy" method using Visionary to temp root ONLY and then G-free for perm root. Do not be tempted to check "perm-root now" on Visionary since there is a high brick risk. Anyhow, this method runs scripts so much less chance for typo errors... just follow the simple directions to the letter and you will be rooted in no time. Works like a dream.
That was easy! hah, this was a lot easier than what the wiki told me to do. Thank you so much
edit:i restored to my back up (phew ), but why does the CM screen keep on repeating after I try installing 7.03?
i rooted everything fine, but after installing CM 7, the boot logo keeps on repeating, and the home screen won't pop up. is there a fix for this? :/
No prob.
Did you do a full wipe before flashing CM7? Even if you did, I'd recommend a "Superwipe". This is a zip you flash from recovery like anything else, and it really gets to everything on your phone's memory. I don't have the direct link but you can download it here:
http://forum.xda-developers.com/showthread.php?t=991254
It's down the page a bit, in the "attached files". The one on the top called SuperWipeG2+. Also, the ROM on that page is a nice one if you're looking for stuff other than CM. (Though CM is a good place to start)
I didn't do a complete wipe, I just did something else instead. I figured it out before checking this up, but thank you a lot for the help. +Thanks

Categories

Resources