Attend XDA's Second Annual Developer Conference, XDA:DevCon 2014!
5,736,274 Members 45,793 Now Online
XDA Developers Android and Mobile Development Forum

[Japanese L-01F] Root your L-01F [HOWTO]

Tip us?
 
supersonicninja
Old
#1  
supersonicninja's Avatar
Member - OP
Thanks Meter 110
Posts: 70
Join Date: Oct 2012
Location: Sapporo

 
DONATE TO ME
Default [Japanese L-01F] Root your L-01F [HOWTO]

Hi everyone.
The Japanese version of LG G2 DoCoMo L-01F has the special "ccsecurity" access control system.
That has prevented us from rooting!
So we used the CVE-2013-6282 vulnerability to take root.
Here is the automagic rootkit for you!

WARNING
ROOTING WILL DISABLE YOUR WARRANTY.
YOU MAY BE UNABLE TO GET SUPPORT FROM THE DOCOMO SHOP.
YOU MAY BRICK YOUR PHONE.
YOU MAY BE UNABLE TO GET OFFICIAL UPDATES.



Download

L-01F Rootkit ver6

How to use
Basically run the batch and read instructions!
We have two versions of the L-01F.
L01F10c:The initial OS version. You can get permanent root easy!
L01F11k:The update which destroys the root! We can still acquire a temporary root until the next reboot .You need to type these commands in the "Terminal Emulator" app every time you boot to get root again.
Code:
/data/local/tmp/install_backdoor
/data/local/tmp/disable_ccsecurity
Or, you can flash my NINJAKERNEL from recovery for the permanent root in L01F11k!
The Ninja kernel thread

PROTIP
Take backup of your phone just after the CWM recovery is installed.
Do not attempt to do official updates.
Install busybox from the Google Play.
Push the volume up button with the power button to boot to recovery menu.

Want a touch recovery?
Flash this zip from the recovery to get the TWRP recovery.

Unrooting
If you just want to disable root, use the "root uninstaller" app.
Otherwise, follow the instructions of the rootkit.

Credit
fi01 for adapting CVE-2013-6282 rootkit github
Tohno for helping me make L01F11k rootkit.
And many testers!
The Following 4 Users Say Thank You to supersonicninja For This Useful Post: [ Click to Expand ]
 
supersonicninja
Old
(Last edited by supersonicninja; 8th February 2014 at 11:14 AM.)
#2  
supersonicninja's Avatar
Member - OP
Thanks Meter 110
Posts: 70
Join Date: Oct 2012
Location: Sapporo

 
DONATE TO ME
Default Helping you

Many people has sent me help requests about the root relating things. This post should answer all common helps.

Q. The rootkit shows error"cannot stat ..... No such file or directory".
A. The folder name you put the rootkit in is likely Japanese. Place the rootkit in C drive root or some other English-named path.

Q. My games! Lovelive Puzzles&Dragons etc not playable after rooting. Why?
A.It detects root. It is a cheat prevention system of some games and apps. Use the rootcloak. If that is not working and you really want to play that game, then you have to unroot.

Q. My phone does't boot anymore. It stucks on the "docomo" logo.
A.Hold your power button for about 20 seconds to force shutdown. Then hold your power button and the volume up button at the same time to boot up to the CWM recovery. Then restore your phone from the backup file you took.

Q.What do I need for the L01F10c to 11k FOTA update?
A.Stock boot.img and recovery.img and system files. Just unroot and try updating.

Q. I did the FOTA update and CWM recovery is looping.
A. That's because you forgot to unroot and the CWM recovery is still there. The fix is included in my rootkit. Thanks to antond57.

Q. I did the FOTA update and some error screen came up and the update failed.
A. This indicates that you have modified your system too much to be updated. This is often caused by the xposed framework.
First, you need to root your phone again.
Second, download the needed files. Download them by your phone. Not the PC.
Download the all four parts of the system.img from this thread.
Install the ZArchiver app and unpack it. The system.img should show up.
Then boot to CWM recovery.
Plug your PC and the L-01F with a USB-data-cable.
In your PC, go to "Control Panel", then "Device Manager" and find the "L-01F" and right click.
Then select "Update driver" , "Manual search" , "Select from the List" and select the "LG adb single sooner interface" and install it.
Then your CWM should be recognized to your PC.
So open up my rootkit, select the "adb shell" option, and type the following command and press the enter key.
Change the first "if=...system.img" part to your exact path to the system.img
Code:
dd if=/data/media/0/Download/system.img of=/dev/block/platform/msm_sdcc.1/by-name/system
Finally, unroot and do the FOTA.

Q. I cant find and install the LG adb driver for the CWM recovery.
Try using the pdanet driver.
The Following 3 Users Say Thank You to supersonicninja For This Useful Post: [ Click to Expand ]
 
supersonicninja
Old
#3  
supersonicninja's Avatar
Member - OP
Thanks Meter 110
Posts: 70
Join Date: Oct 2012
Location: Sapporo

 
DONATE TO ME
Default reserved

reserved
 
bepari220
Old
#4  
Junior Member
Thanks Meter 1
Posts: 13
Join Date: Nov 2013
Location: Kawaguchi
my phone is not booting up, so how can I download the system.img to my phone ?
also, if I use adb push system.img will that work ?
 
mn147
Old
(Last edited by mn147; 7th February 2014 at 07:43 PM.)
#5  
mn147's Avatar
Member
Thanks Meter 8
Posts: 95
Join Date: Dec 2013
Location: 唐津市ーkaratsu
before rooting/installing ninjakernel. I would like to have a failsafe if I do something wrong and run into problems/bootloop etc. how do I backup the stock rom of our phones and reload it in case I run into problems?

[EDIT] never mind. figured it out. nandroid backup in cwm recovery.

what I meant was how to back up apps and data and launcher layout. but I guess I can just do that with mybackup and nova launcher backup and android sync.

sent from my LG G2 with tapatalk pro
 
supersonicninja
Old
#6  
supersonicninja's Avatar
Member - OP
Thanks Meter 110
Posts: 70
Join Date: Oct 2012
Location: Sapporo

 
DONATE TO ME
Quote:
Originally Posted by bepari220 View Post
my phone is not booting up, so how can I download the system.img to my phone ?
also, if I use adb push system.img will that work ?
I figured out that the "adb push" command can only send file up to 2GB
So please zip compress the system.img with your PC. It should shrink to 1.9GB. And then adb push it.
Then use the"unzip" command in your twrp to unzip it, and flash it by the "dd" command.
 
mn147
Old
#7  
mn147's Avatar
Member
Thanks Meter 8
Posts: 95
Join Date: Dec 2013
Location: 唐津市ーkaratsu
so to confirm. I download rootkit to pc, ninjakernel.zip to device. usb debugging on, connection to charge only. plug into pc, run root.exe will root device, install cwm recovery and boot into recovery. then I take nandroid backup in recovery and don't reboot but install from zip the ninjakernel then reboot. finished. yes?

sent from my LG G2 with tapatalk pro

---------- Post added at 11:45 AM ---------- Previous post was at 11:43 AM ----------

also, I don't need to wipe nothing for the kernel?


sent from my LG G2 with tapatalk pro
 
bepari220
Old
#8  
Junior Member
Thanks Meter 1
Posts: 13
Join Date: Nov 2013
Location: Kawaguchi
Quote:
Originally Posted by supersonicninja View Post
I figured out that the "adb push" command can only send file up to 2GB
So please zip compress the system.img with your PC. It should shrink to 1.9GB. And then adb push it.
Then use the"unzip" command in your twrp to unzip it, and flash it by the "dd" command.
so what would be the dd command if I push the image to /sdcard/system.img
oh ! I'm such a noob
 
supersonicninja
Old
#9  
supersonicninja's Avatar
Member - OP
Thanks Meter 110
Posts: 70
Join Date: Oct 2012
Location: Sapporo

 
DONATE TO ME
Quote:
Originally Posted by bepari220 View Post
so what would be the dd command if I push the image to /sdcard/system.img
oh ! I'm such a noob
All linux and windows commands are friendly to a noob! They have help. Type
Code:
dd --help
to see it.

In your case. You have to use these three commands.
First, zip compress system.img and name it to system.zip or something. Place it with the same folder as the adb.exe in your pc and open the adb shell and type these commands.
Code:
adb push system.zip /sdcard/
This sends the file over the USB cable.
Code:
unzip system.zip
This unzips the file.
Code:
dd if=/sdcard/system.img of=/dev/block/platform/msm_sdcc.1/by-name/system
This copies the file.
The "if=" means "input file" so where to copy from. And the "of=" means "output file" so where to copy to. Pretty obvious.
 
mn147
Old
#10  
mn147's Avatar
Member
Thanks Meter 8
Posts: 95
Join Date: Dec 2013
Location: 唐津市ーkaratsu
rooted now. working so far. thanks. great work

sent from my LG G2 with tapatalk pro

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes