---==={ROOT GUIDE}===--- | 1.47.651.1 ROOT method |
- Thread starter SteelH
- Start date
- Status
You need to remember (and it should be added to instructions) to set your device to "Charge Only". If it is still set to "Disk Drive" then your sdcard is already mounted and cannot be read.
EDIT: if you can ninja edit, so can I!!
It would be nice to know the details of what's being exploited. Worst case this could be mirrored by redirecting the domain somewhere else assuming the exploit can use wifi for that fun manipulation.
I can't yet post links, but I've mirrored the file here:
http_colon_slash_slash unixgeeks.biz/android/hackfiles.zip
Feel free to add it to the first post.
http_colon_slash_slash unixgeeks.biz/android/hackfiles.zip
Feel free to add it to the first post.
Anyone know if this method breaks 4g,cameras or anything else yet? Also can I use the simple root method to unlock nand instead of toasts?
Sent from my PC36100 using XDA App
Sent from my PC36100 using XDA App
Odd, I haven't tested it, but try this. First ensure that plugins and everything is enabled for flash and js in the settings. If it was off, try again. If it was not, put "about:debug" (w/o quotes) in the address bar, no http or any of that and go back into settings. Scroll down and change the UA string to "desktop" and try again.
Almost there...
Hi guys,
I'm almost there. I finished step 8 and got:
8. It should print after part2 finished:
Code:
crw-rw-rw- root root 90, 2 2010-07-05 19:37 mtd1
However, I'm not quite sure how to accomplish step #9:
9. When your phone finished booting, flash toastcfh's mtd-eng.img to misc:
Code:
cat /sdcard/flash_image > /data/flash_image
chmod 755 /data/flash_image
/data/flash_image misc /sdcard/mtd-eng.img
I assume that the "cat /sdcard/flash_image > /data/flash_image" should be ran from within an ADB shell? I tried but got:
Code:
$ cat /sdcard/flash_image > /data/flash_image
cat /sdcard/flash_image > /data/flash_image
cannot create /data/flash_image: permission denied
$
Would someone be kind enough to point out what newbie mistake I made and how to proceed?
Thanks so much in advance,
--
Sean.
Hi guys,
I'm almost there. I finished step 8 and got:
8. It should print after part2 finished:
Code:
crw-rw-rw- root root 90, 2 2010-07-05 19:37 mtd1
However, I'm not quite sure how to accomplish step #9:
9. When your phone finished booting, flash toastcfh's mtd-eng.img to misc:
Code:
cat /sdcard/flash_image > /data/flash_image
chmod 755 /data/flash_image
/data/flash_image misc /sdcard/mtd-eng.img
I assume that the "cat /sdcard/flash_image > /data/flash_image" should be ran from within an ADB shell? I tried but got:
Code:
$ cat /sdcard/flash_image > /data/flash_image
cat /sdcard/flash_image > /data/flash_image
cannot create /data/flash_image: permission denied
$
Would someone be kind enough to point out what newbie mistake I made and how to proceed?
Thanks so much in advance,
--
Sean.
Should be
Code:
cat /sdcard/flash_image > /data/local/flash_image
chmod 755 /data/local/flash_image
/data/local/flash_image misc /sdcard/mtd-eng.imgYes, go into adb shell first, then try typing "su" without quotes. If you get to "#" (root) you are money! From there:
- Type "mount" and press Enter.
- Look for a line that includes the word /system. On that line, look at the part that says /dev/block/mtdblockN, where N is a digit. That is the partition that your system lives on.
- Type "mount -o remount,rw -t yaffs2 /dev/block/mtdblockN /system", substituting the digit you saw in the previous step for N.
- Now your system is mounted read/write and you can make changes. You should now be able to repeat step 9.
- Type "mount" and press Enter.
- Look for a line that includes the word /system. On that line, look at the part that says /dev/block/mtdblockN, where N is a digit. That is the partition that your system lives on.
- Type "mount -o remount,rw -t yaffs2 /dev/block/mtdblockN /system", substituting the digit you saw in the previous step for N.
- Now your system is mounted read/write and you can make changes. You should now be able to repeat step 9.
Last edited:
That didn't work.
I went to the address bar and typed " about:debug " pressed menu and navigated to the settings. Scrolled to the bottom and selected " UA " and changed to desktop.
I typed in the address and tried again. - Same page "macromedia.com/support......
message "This content requires Flash".
For the guy who got to step 8, what did that page look like to you? - I checked it on my desktop browser and it says its a broken URL.
I went to the address bar and typed " about:debug " pressed menu and navigated to the settings. Scrolled to the bottom and selected " UA " and changed to desktop.
I typed in the address and tried again. - Same page "macromedia.com/support......
message "This content requires Flash".
For the guy who got to step 8, what did that page look like to you? - I checked it on my desktop browser and it says its a broken URL.
D
devin.slick
Guest
Same here. Are we to be prompted when to refresh the page?
I've repeated the process about 5 times, thinking I'm missing something...
I've repeated the process about 5 times, thinking I'm missing something...
P
petea8
Guest
I got it working by clicking thru flash games... Google 'flash games' and click on the first one you find
- Status
Similar threads
