Evo Shift Root Exploit and Development Thread

Search This thread

bcnice20

Retired Recognized Developer
Dec 10, 2009
1,604
402
south va.
Please place all of your discussions about obtaining root on the Evo Shift here.

Temp root:
Temporary root can be acheived a number of ways on the shift the easiest being either z4root app or the visionary plus root app.

Z4root:
download here and install as you would any other apk
open the app and hit temporary root
let it run till you are notified of its success
you now have temporary root!!
*Note you have to reapply z4 each time you reboot your phone

Visionary:
full instructions and the link to visionary can be found here.
http://android.modaco.com/content/h...m/320722/19-nov-r14-visionary-one-click-root/

IMPORTANT NOTE!
PLEASE DO NOT ACCEPT ANY OTA UPDATES!!!!!!!!!!!!!!!!!

they patched the root exploit on the desire z when they updated you can most definitely expect them to do the same for the shift so please for that sake of everybody being able to get proper root do not accept any updates unless further notified!!!

unless you just dont care about root that is.....
 
Last edited:

epitaphromance

Senior Member
Jun 23, 2008
222
27
so far, we got a temporary root.
No point in trying unrevoked as it scans for the device name and shows
"sorry, the device 'speedy' is not suppored" (paraphrasing)
wish i knew alittle more about this.
You can get to hboot by Holding down the vol down while powering on
 

falz

Member
Aug 6, 2007
37
6
Also in a previous thread bubby323 requested a dump of /system and dnalevelc obliged:

* http://www.digglesworth.net/evoshift/system.7z

In another forum (androidcentral) someone noted that an app called VISIONary works to auto temp-root the Shift upon boot.

* http://android.modaco.com/content/h...m/320722/19-nov-r14-visionary-one-click-root/

Edit: Also there's code to temp root the G2 using a different exploit below. I haven't attempted to run it on my Shift. Possibly not relevant since it has a newer version but could be if an update is pushed to the Shift:

* https://github.com/tmzt/g2root-kmod/tree/scotty2/scotty2/psneuter
 
Last edited:
  • Like
Reactions: yokken and BrandoKC

yokken

Senior Member
Dec 29, 2010
635
126
got the shift today. MAN this thing is fast! i'd love to see unrevoked release a small update that supports the shift. otherwise i can do it the long way but i can't wait to see the scores once i get a custom ROM on it.
 

DWake014

Senior Member
Mar 31, 2010
392
18
Visonary does work, I turned on temproot on boot and then i pressed temproot now and it rebooted the phone. The phone was either taking its time or got stuck on the 4G for 2-3 mins so I pulled the battery and started the phone up again. I installed connectbot and typed su and got a #. Tried the reboot command and it wouldn't let me so I went into root explorer and it prompted the su app, gave it permission and started hacking away at bloatware..... no luck, it still came back from the grave :\
 

yokken

Senior Member
Dec 29, 2010
635
126
does anyone think the rageagainstthecage exploit will work on this? i assume people are working on it? cause if it does, that means unrevoked3 could possibly release a new version with shift support, right? since unrevoked is just an automated rageagainstthecage, right?

edit: i mean, for permanent root, S-OFF.
 

rhodiggah

Senior Member
Aug 11, 2010
1,061
351
South City
I successfully Temp rooted with z4root (http://xdaforums.com/showthread.php?t=833953) and I couldnt get the download off the market so I just went to 4shared.com and searched z4root and picked up 1.3.0 which is the latest version....

It worked great and I used Titanium back up and a screen shot app that both needed root.

Z4Root temp root was a success but SU is telling me to upgrade by going into recovery, How do I go about this? I can't get any permissions for Rom Manager, Titanium, BusyBox, Etc...
 

falz

Member
Aug 6, 2007
37
6
does anyone think the rageagainstthecage exploit will work on this? i assume people are working on it? cause if it does, that means unrevoked3 could possibly release a new version with shift support, right? since unrevoked is just an automated rageagainstthecage, right?

edit: i mean, for permanent root, S-OFF.
yes, the rage exploit is what works and is what z4root uses. However I couldn't get the actual binary to work from the CLI using adb.
 

tatonka_hero

Senior Member
Dec 12, 2009
514
17
Just curious--with this temp root, will the wireless tether app work? At least until the phone is restarted. I use that app quite a bit with my Hero, to get on the sites blocked at work on my ipad :D
 

bcnice20

Retired Recognized Developer
Dec 10, 2009
1,604
402
south va.
Yes we finally got a forum

But on to the good stuff and not so good stuff

Even though we only have temp root partitions on the shift can be flashed using dd I won't go into exactly how to do it till I get home because the commands have to be EXACT!!!! Or u risk bricking your phone... I've had to ruu a couple times now

O btw the ruu that was previously leaked appears to be exactly what was released on the shift.

Sent from my PG06100 using Tapatalk
 

BrandoKC

Senior Member
May 15, 2010
1,158
285
Kansas City
"Maybe good news for people with the HTC Wildfire. We're looking at it. (Also maybe good news for people with Evo Shift 4G sooner or later.)"
 

Top Liked Posts

  • There are no posts matching your filters.
  • 4
    Please place all of your discussions about obtaining root on the Evo Shift here.

    Temp root:
    Temporary root can be acheived a number of ways on the shift the easiest being either z4root app or the visionary plus root app.

    Z4root:
    download here and install as you would any other apk
    open the app and hit temporary root
    let it run till you are notified of its success
    you now have temporary root!!
    *Note you have to reapply z4 each time you reboot your phone

    Visionary:
    full instructions and the link to visionary can be found here.
    http://android.modaco.com/content/h...m/320722/19-nov-r14-visionary-one-click-root/

    IMPORTANT NOTE!
    PLEASE DO NOT ACCEPT ANY OTA UPDATES!!!!!!!!!!!!!!!!!

    they patched the root exploit on the desire z when they updated you can most definitely expect them to do the same for the shift so please for that sake of everybody being able to get proper root do not accept any updates unless further notified!!!

    unless you just dont care about root that is.....
    3
    I'll just put this right here. Patience, folks.

    http://i.imgur.com/mn5iW.jpg

    And this for clarity:

    http://img254.imageshack.us/img254/5365/picture3h.jpg (this is my personal phone)

    I don't take credit for ANY of this. My phone is just being used to test **** on by devs. Thank them profusely with donations when they post a perma-root method. It's only "soft" s-off, btw. A new hboot would set s-on again. Radio s-off would be perma-off.
    2
    Also in a previous thread bubby323 requested a dump of /system and dnalevelc obliged:

    * http://www.digglesworth.net/evoshift/system.7z

    In another forum (androidcentral) someone noted that an app called VISIONary works to auto temp-root the Shift upon boot.

    * http://android.modaco.com/content/h...m/320722/19-nov-r14-visionary-one-click-root/

    Edit: Also there's code to temp root the G2 using a different exploit below. I haven't attempted to run it on my Shift. Possibly not relevant since it has a newer version but could be if an update is pushed to the Shift:

    * https://github.com/tmzt/g2root-kmod/tree/scotty2/scotty2/psneuter
    2
    I receive the following message after allowing Superuser and receiving confirmation of root (#)

    # cannot create kmsg_shift.log: read-only file system

    I'm on my way to get a root canal, so I will try later and check to see if anything has changed on here.

    Thanks for checking this out for us.

    Update: tried hitting enter on the HW keyboard instead of the soft and was able to generate the log. E-mail sent.

    Err, sorry - I wrote the command wrong in my list.

    It should be cat /proc/kmsg > /sdcard/kmsg_shift.log &

    Either way though, I got enough logs from everyone, and it gave me what I needed to know :).

    Thanks everyone!! (GREAT news for you Shift users once aosp comes out for it, FYI)
    2
    If u do cat /proc/emmc you can see the actual partition layout

    $ cat /proc/emmc
    dev: size erasesize name

    mmcblk0p17: 00040000 00000200 "misc"

    mmcblk0p21: 0087f400 00000200 "recovery"

    mmcblk0p22: 00400000 00000200 "boot"

    mmcblk0p26: 1f7bf600 00000200 "system"

    mmcblk0p29: 00140200 00000200 "local"

    mmcblk0p28: 09a7fa00 00000200 "cache"

    mmcblk0p27: 1bbffe00 00000200 "userdata"

    mmcblk0p31: 01400200 00000200 "devlog"

    mmcblk0p32: 00040000 00000200 "pdata"

    mmcblk0p25: 00c00200 00000200 "wimax"

    mmcblk0p30: 007ffa00 00000200 "udata_wimax"

    $

    Sent from my PG06100 using Tapatalk