TOWELROOT

Search This thread

andu86

Senior Member
Jan 3, 2012
306
127
Bucharest
OnePlus 7
Samsung Galaxy S22
Hi all,

there is a new app for rooting phones, the name is Towelroot and it was made especially for Verizon Glaxaxy s5 but the dev says that every phone with kernel build date < 3 June can be rooted.

With this app you can root Galaxy S4 Mini with kitkat firmware without tripping knox counter. It will stay 0x0 and you will have root access.

First of all you must put a vulnerable kernel with build date <3 june

you can grab one from [INDEX] Official Stock KERNEL collection for Galaxy S4 Mini (Kernel for I9195XXUCNF7 is the one you have to grab to work with towelroot, offcourse if you own an i9195 )

Flash it via odin. Leave everything intact and load the kernel to AP.



After the phone boots, install towelroot, press makeitra1n and you are rooted.

Next step is to install SupserSU from google play.

After all the above steps are done, flash the kernel from your firmware the same way as you did it the first time.

There you go, knox 0x0 and root access.

http://xdaforums.com/showthread.php?t=2783157
 
Last edited:

vriz27

Senior Member
Jan 2, 2011
187
67
glyfada , Hellas
just tried it.rooted successfully the phone in 15 seconds.the bad thing is that I've already tripped Knox warranty so I cannot tell if it stays 0x0.I'm on latest 4.4.2 stock
 

tobbbie

Senior Member
Jan 5, 2007
1,452
252
Stuttgart
just tried it.rooted successfully the phone in 15 seconds.the bad thing is that I've already tripped Knox warranty so I cannot tell if it stays 0x0.I'm on latest 4.4.2 stock

Ooohhh - this is tempting :)
towelroot did not work for 4.2.2. latest stock for my German device. Can you tell which is your firmeare and if German is a supported language?
I think KNOX should NOT be tripped if you only upgrade to official FW (i.e. kernel and recovery builds have valid checksums) - so how did you get KNOX tripped earlier - for CWM based rooting?
 

vriz27

Senior Member
Jan 2, 2011
187
67
glyfada , Hellas
I have latest official stock 4.4.2. which I think is for Belgium,but as far as I know it's the only one that has already came out. German language is fully functional and supported. I live in Greece and Greek language is also supported. I think that official Roms are multilingual
 
Last edited:

tobbbie

Senior Member
Jan 5, 2007
1,452
252
Stuttgart
I have latest official stock 4.4.2. which I think is for Belgium,but as far as I know it's the only one that has already came out. German language is fully functional and supported. I live in Greece and Greek language is also supported. I think that official Roms are multilingual

How can you be sure that the root explot worked from towelroot and not from your actions earlier tripping KNOX?

You have already a custom recovery and custom ROM - this would not be possible without bootloader having KNOX triggered. So I guess that with this price paid you have already rooted the "regular" way - didn't you?

---------- Post added at 06:29 PM ---------- Previous post was at 06:21 PM ----------

Another thing with upgrade is that you may loose your installed apps.
I remember this from my first steps with Xperia Ray some years ago, but this could also have been due to unlocking the bootloader and installing a custom kernel. Back that time I was not so knowing about what should be done in the process of unlocking bootloader, CWM recovery install and finally rooting. I may have scratched data partition that time without knowing what it actually means - and without it being needed as well.

Is this the case here as well? Non-root means no Nandroid backup and so what happens to the data-partition in this process?

---------- Post added at 06:43 PM ---------- Previous post was at 06:29 PM ----------

Finally to all who want to dare testing:

It is highly unlikely that KNOX would be tripped here. As far I understand the process of image integrity that KNOX tries to maintain, the booloader checks if the image checksum of the kernel or recovery partition is intact - at upgrade time (not runtime at boot?). The towelroot exploit is compromising kernel security (aka "exploit") with some instructions (lib\armeabi\libexploit.so) to gain root and retain that state across the re-boot process. I am not aware of the details how this can be achieved (this is real high-tech hackery) - but the towelroot exploit does NOT install SU on system partition yet - this has to happen in a second step - and failed with 4.2.2 stock ROM on my GT-I9195.

So if there is anyone out there with just upgraded 4.4.2 and confirmed non-rooted - please check if you can get root with this method!

EDIT 20140705: Towelroot does NOT make the reboot in case of successful root. It gets you root in the same session immediately after you click "make it ra1n". So there is no reason why/how KNOX could be tripped. I did root my device with this method and still have KNOX intact (I just checked again to be sure). I have in the meantime made some changes to the /system folder, e.g. removed the photo-click sound, freed some space by removing the japanese language files for text-to-speech (gives you 25MB) and inserted all the updated system apps back to the system (did not ODEX them and removed classes.dex from the .apk - so they are all larger than the ODEXed originals). Also I moved out Google+ from System to be regular app.
 
Last edited:

vriz27

Senior Member
Jan 2, 2011
187
67
glyfada , Hellas
How can you be sure that the root explot worked from towelroot and not from your actions earlier tripping KNOX?

You have already a custom recovery and custom ROM - this would not be possible without bootloader having KNOX triggered. So I guess that with this price paid you have already rooted the "regular" way - didn't you?

---------- Post added at 06:29 PM ---------- Previous post was at 06:21 PM ----------

Another thing with upgrade is that you may loose your installed apps.
I remember this from my first steps with Xperia Ray some years ago, but this could also have been due to unlocking the bootloader and installing a custom kernel. Back that time I was not so knowing about what should be done in the process of unlocking bootloader, CWM recovery install and finally rooting. I may have scratched data partition that time without knowing what it actually means - and without it being needed as well.

Is this the case here as well? Non-root means no Nandroid backup and so what happens to the data-partition in this process?

---------- Post added at 06:43 PM ---------- Previous post was at 06:29 PM ----------

Finally to all who want to dare testing:

It is highly unlikely that KNOX would be tripped here. As far I understand the process of image integrity that KNOX tries to maintain, the booloader checks if the image checksum of the kernel or recovery partition is intact - at upgrade time (not runtime at boot?). The towelroot exploit is compromising kernel security (aka "exploit") with some instructions (lib\armeabi\libexploit.so) to gain root and retain that state across the re-boot process. I am not aware of the details how this can be achieved (this is real high-tech hackery) - but the towelroot exploit does NOT install SU on system partition yet - this has to happen in a second step - and failed with 4.2.2 stock ROM on my GT-I9195.

So if there is anyone out there with just upgraded 4.4.2 and confirmed non-rooted - please check if you can get root with this method!

well maybe i wasn't so clear. i was on CM m7 snapshot,then flashed through odin the samsung's 4.4.2 firmware. after that my root privilages were gone(as i presume,flashing the new firmware formats system,and installs new one) and i was left with plain stock firmware. checked with root checker,tried with titanium,tried with ES file explorer to remove anything from system partition but this was a no-go. so NO root after installing 4.4.2. installed towelroot,run the app and after 15 or so seconds,the phone rebooted and root privileges were back on! track!
with ES and Titanium i removed all of the knox related stuff with absolutely no problem. i read in the towelroot app's that SU app is not installed and i manually installed it from chainfire's thread. that's all i did.
the knox warranty 0x1 was triggered loooooooooong ago, and thankfully i haven't need the waranty for the time being...
hope it helps :laugh:;)
 
  • Like
Reactions: tobbbie

vriz27

Senior Member
Jan 2, 2011
187
67
glyfada , Hellas

uploadfromtaptalk1403204028708.jpg
 

comaX13

Member
Feb 27, 2012
33
2
comax.fr
This doesn't work for me. It just reboots my phone. It's an unbranded european S4 mini LTE.
I'm on 4.2.2 and I read before someone couldn't root with it on 4.2.2, and I'm not sure I can update it to 4.4.2 because
1) I tried flashing it before and it says i have an unofficial rom (or kernel, can't rememebr which) which in the end I don't have... edit "updates are not available because your device had been modified".
2) I'm not sure the update has rolled out for France. Edit : It hasn't, according to Sammobile. Only Belgium. I'll try to update through Odin and get back to you. In the mean time, feel free to make any suggestion to resolve the issue! Thanks
 
Last edited:

fburgos

Senior Member
Sep 1, 2012
1,511
384
This doesn't work for me. It just reboots my phone. It's an unbranded european S4 mini LTE.
I'm on 4.2.2 and I read before someone couldn't root with it on 4.2.2, and I'm not sure I can update it to 4.4.2 because
1) I tried flashing it before and it says i have an unofficial rom (or kernel, can't rememebr which) which in the end I don't have... edit "updates are not available because your device had been modified".
2) I'm not sure the update has rolled out for France. Edit : It hasn't, according to Sammobile. Only Belgium. I'll try to update through Odin and get back to you. In the mean time, feel free to make any suggestion to resolve the issue! Thanks

You have to upgrade with Odin.

But don't do it if you're in the old bootloader

sent from my i9192 with CM11 by sekil
 

andu86

Senior Member
Jan 3, 2012
306
127
Bucharest
OnePlus 7
Samsung Galaxy S22
This doesn't work for me. It just reboots my phone. It's an unbranded european S4 mini LTE.
I'm on 4.2.2 and I read before someone couldn't root with it on 4.2.2, and I'm not sure I can update it to 4.4.2 because
1) I tried flashing it before and it says i have an unofficial rom (or kernel, can't rememebr which) which in the end I don't have... edit "updates are not available because your device had been modified".
2) I'm not sure the update has rolled out for France. Edit : It hasn't, according to Sammobile. Only Belgium. I'll try to update through Odin and get back to you. In the mean time, feel free to make any suggestion to resolve the issue! Thanks

if it says that the updates are not available because your device has been modified, it means that you are rooted. you have to install supersu separretly.

this exploit was meant for all kernel built before 3 june, so it will work on your device.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 10
    Hi all,

    there is a new app for rooting phones, the name is Towelroot and it was made especially for Verizon Glaxaxy s5 but the dev says that every phone with kernel build date < 3 June can be rooted.

    With this app you can root Galaxy S4 Mini with kitkat firmware without tripping knox counter. It will stay 0x0 and you will have root access.

    First of all you must put a vulnerable kernel with build date <3 june

    you can grab one from [INDEX] Official Stock KERNEL collection for Galaxy S4 Mini (Kernel for I9195XXUCNF7 is the one you have to grab to work with towelroot, offcourse if you own an i9195 )

    Flash it via odin. Leave everything intact and load the kernel to AP.



    After the phone boots, install towelroot, press makeitra1n and you are rooted.

    Next step is to install SupserSU from google play.

    After all the above steps are done, flash the kernel from your firmware the same way as you did it the first time.

    There you go, knox 0x0 and root access.

    http://xdaforums.com/showthread.php?t=2783157
    3
    Me too, and flashed the newer kernel as well, but it is not what I am asking.

    Will flashing a stock rom trigger the knox? Logic says no, but can someone who has done it verify it?
    (I am just a reply away from a cool present :fingers-crossed: )
    No worries, a stock Rom via odin will not trigger knox! Done it many times!
    2
    Towelroot tripped Knox on Australian I9195T

    Hi,
    After doing lots of research on Samsung Galaxy S4 Mini sold in Australia as I9195T version. Awhile ago I updated the firmware via OTA. Telstra only released this 4.4.2 version in the middle of 2015 some 6 months later than other carriers or Countries. To Find out I lost Write Access to SDCard. this model having only 8MB of internal memory means you are always running out of space. Could not even do the OTA update from 4.2.2 to 4.4.2 Ran out of memory half way through.
    So I moved lots of apps and freed up as much as I could. Finally got 4.4.2 installed and then No Write Access, found some apps allow Write Access. Anyway This perfectly good working turns to **** and no mention of this prior to update Typical of Samsung and Android lack of info. We the users have to do the research then decide to up date or not.
    After the update the phone never really worked properly anyway. After more research most suggestions fixes or comments required a Master RESET of Factory reset. ie save all your data and apps. Remove SD Card so it can not be corrupted etc. Used ADB full update after finally getting drivers to work. But my S4 mini had not been fully operational since the firmware patch. So ADB Full Backup would not work. Used Helium Backup worked but does not fully backup everything. same as Kies only partial backup.

    Anyway after all that I finally did a factory reset that was supposed to backup then reset. Found out that only backup some apps and settings. Then spent many hours over the next few days to restore everything back to normal. Still not sure every app is configured as it was prior to reset. Then finally I could do an ADB Full Backup of the internal Memory ONLY without 64GB SD Card which is half full. File size was about 3GB. Just to be sure prior to Rooting the device. I tried plenty of different types of One Click Rooting Apps, so I would not trip Knox, reading plenty of comments about many procedures to Root will trip KNOX. Found your method using Towelroot. Then found that the latest firmware passed July 2014 had been patched.
    My firmware is I9195TDVUACOE3-I9195TTELCOE3 released on 03-07-2015 v4.4.2 with prior firmware being I9195TDVUABNB1-I9195TTELBNB1 v4.2.2 released on 02-09-13. There has been only one update from this model's release mid 2013 in Australia for 3 carriers Telstra, Vodaphone and different Model i9195 for Optus.
    So I tried Towelroot using the 4.4.2 Boot file extracted from Firmware download from SAMMOBILE and used script as suggested to make root.tar.md5 file for ODIN. Downloaded it and tried Towelroot, to find it would not Root the phone. Phone locked up and would not boot. So I had to use method of remove battery and restart into Download Mode to again restore phone back to normal using root.tar.md5 file extracted from OC3 Latest version firmware.

    I was glad I achieved a working phone again with KNOX still 0x0. Then more research realising that I must use same version boot file from 4.4.2, but a release prior to June 3 2014. But Did not have any options of early releases in this region. Seams to be many releases around Europe.
    Found a software site that lists all Samsung's Firmware for I9195 models. I could have downloaded many 2-3GB files from several countries, but assumed wrongly that the boot files would be same for each release and only the carrier's or Country files differ in each Rom.

    My only choice was to select from I9195XXUCNF7 series released on 13/6/14 or I9195XXUCNEA released on 27/5/14. So decided to try your boot file already indicated that would work with Towelroot.. I could have pick any Complete firmware from the 20+ Listed from any as listed. But what would I gain as suggested earlier.
    But maybe I was wrong and you have to match firmware components and not use a different Boot file from another release. ie must be from XXUCNF7 and use earlier release being same as latest already updated. Must be XXUNCNF7 older and XXUNCOC3 Latest. So KNOX will not be tripped.
    Anyway I went for XXUNCNF7 Boot so I could be rooted by Towelroot On my I9195TDVUCOE3 firmware. That worked OK. So Achieved that part, Then I reinstalled my latest boot TDVUCOE3, phone rebooted OK.

    But on startup, I had a message in Yellow on top of the screen indicating Set Warranty bit : Kernel before booting with Samsung Symbol on Screen followed by Home screen with Icons. After bootup was completed I used SuperSU app to complete the root process. Did not disable KNOX and then used Root Checker to find Root was successful.
    Next I installed SD Fix App to get write access back again.
    Using Xplore to read Root directories found the permission.xls file modified as to allow Write access to Ext SD Card, taken away by Android update in 4.4.2. Suddenly I got my access back to the SD card and it allowed about 2GB of files to be transferred from Internal Memory to EXT SD Memory. I have now got 2.5GB Free instead of 500MB free of Internal Memory. Phone is now useable. ONLY ISSUE is NOW KNOX is 0x1 (Tripped).

    Conclusion I think you cannot mix Firmware version or I9195T sold in Australia is different to I9195 European or International model or I9195L Latin American Model. But I have limited choices. I used factory STOCK Firmwares. I could have used Software extracted from I9195T Recovery process using ODIN or used PC Based TWRP or CWM, PC Kingroot , Framaroot. that would have tripped KNOX.
    Pingpongroot, Kingroot, and OneClickRoot apps did not work on my latest version firmware. So now have a rooted phone working properly, KNOX Tripped. Does not really matter as phone is 2 years old and out of Warranty anyway.
    I just wanted to experiment to get my phone working how it was when I purchased it.

    The moral of the story DONT UPDATE FIRMWARE without RESEARCH. DONT USE OTA updates pushed on users by manufacturer's WHIMS. and BULL**** about safety, security etc. An update that reduces the functionality, is a breach of Consumer Law. " Item is NOT FIT For PURPOSE" breaches the code.
    Samsung and Googles Android should be made to fix the problem of reduced access to SD Cards, especially models with only 8MB of internal memory. But they obviously don't care to fix it, by releasing a patch or new versions of 5.0 Lollipop for I9195 models.
    So we have to root the phone and lose Warranty to fix it as users.

    Anyway that's it folks
    2
    Ok, maybe I will give it a go this weekend. Just need to understand how the option to get root rights remain if you don't install SU? I mean is not the basic thing to get root the SU binary itself? Or is it that towelroot already installs an SU-binary which later is updated with installing the SuperSU application, which then asks to "update" - not install - the SU binary?

    On the process of getting back the vulnerable kernel to start the whole thing: which winrar can extract the official update packages from Samsung? I thought these packages are encrypted and so I had no success in getting the full content that time when it appeared on my device.

    You can install supersu while you are on the vulnerable kernel, there is no problem with that, disable knox when supersu asks you and it wont trigger knox, it will stay 0x0. I did it every time i installed a new firmware..

    Afterwards you can put back the kernel that your firmware had.

    There is a topic created by me with kernels for i9195 and i9192, you can grab from there an old kernel with vulnerabilities and a new kernel.

    you can find the topic here [INDEX] Official Stock KERNEL collection for Galaxy S4 Mini
    2
    Here are some screenshots for those who don't believe KNOX is not triggered:

    evysybe6.jpg
    4e2ahupa.jpg
    9ypy6ete.jpg
    vuda5ugu.jpg