[Japanese L-01F] Root your L-01F [HOWTO]

Search This thread

supersonicninja

Senior Member
Oct 20, 2012
102
162
Sapporo
blog.goo.ne.jp
Hi everyone.
The Japanese version of LG G2 DoCoMo L-01F has the special "ccsecurity" access control system.
That has prevented us from rooting!
So we used the CVE-2013-6282 vulnerability to take root.
Here is the automagic rootkit for you!

WARNING
ROOTING WILL DISABLE YOUR WARRANTY.
YOU MAY BE UNABLE TO GET SUPPORT FROM THE DOCOMO SHOP.
YOU MAY BRICK YOUR PHONE.
YOU MAY BE UNABLE TO GET OFFICIAL UPDATES.



Download

L-01F Rootkit ver8 androidfilehost

How to use
Basically run the batch and read instructions!

PROTIP
Do not attempt to do official updates.
Install busybox from the Google Play.
Push the volume up button with the power button to boot to recovery menu.
Take backup from recovery.

Unrooting
If you just want to disable root, use the uninstall root option of the supersu app.
If you want to wipe all data and have a clean rom , write tot/kdz from this thread.

Credit
fi01 for adapting CVE-2013-6282 rootkit github
Tohno for helping me make L01F11k rootkit.
thecubed for bump.
blastagator for twrp source.
And many testers!
 
Last edited:

supersonicninja

Senior Member
Oct 20, 2012
102
162
Sapporo
blog.goo.ne.jp
Helping you

Many people has sent me help requests about the root relating things. This post should answer all common helps.

Q. The rootkit shows error"cannot stat ..... No such file or directory".
A. The folder name you put the rootkit in is likely Japanese. Place the rootkit in C drive root or some other English-named path.

Q. My games! Lovelive Puzzles&Dragons etc not playable after rooting. Why?
A.It detects root. It is a cheat prevention system of some games and apps. Use the rootcloak. If that is not working and you really want to play that game, then you have to unroot.

Q. My phone does't boot anymore. It stucks on the "docomo" logo.
A.Hold your power button for about 20 seconds to force shutdown. Then hold your power button and the volume up button at the same time to boot up to the recovery. Then restore your phone from the backup file you took.

Q.What do I need for the FOTA update?
A.Stock boot.img and recovery.img and system files.

Q. I did the FOTA update and recovery is looping.
A. That's because you forgot to unroot and the custom recovery is still there. The fix is included in my rootkit. Thanks to antond57.

Q. I did the FOTA update and some error screen came up and the update failed.
A. This indicates that you have modified your system too much to be updated. This is often caused by the xposed framework.
First, you need to root your phone again.
Second, download and install the system installer, boot installer, recovery installer from this thread.

Q. I cant find and install the LG adb driver for the recovery.
Try using the pdanet driver.
 
Last edited:

bepari220

Senior Member
Nov 19, 2013
65
18
my phone is not booting up, so how can I download the system.img to my phone ?
also, if I use adb push system.img will that work ?
 

mn147

Senior Member
Dec 12, 2013
182
16
40
唐津市ーkaratsu
before rooting/installing ninjakernel. I would like to have a failsafe if I do something wrong and run into problems/bootloop etc. how do I backup the stock rom of our phones and reload it in case I run into problems?

[EDIT] never mind. figured it out. nandroid backup in cwm recovery.

what I meant was how to back up apps and data and launcher layout. but I guess I can just do that with mybackup and nova launcher backup and android sync.

sent from my LG G2 with tapatalk pro
 
Last edited:

supersonicninja

Senior Member
Oct 20, 2012
102
162
Sapporo
blog.goo.ne.jp
my phone is not booting up, so how can I download the system.img to my phone ?
also, if I use adb push system.img will that work ?

I figured out that the "adb push" command can only send file up to 2GB:eek:
So please zip compress the system.img with your PC. It should shrink to 1.9GB. And then adb push it.
Then use the"unzip" command in your twrp to unzip it, and flash it by the "dd" command.
 

mn147

Senior Member
Dec 12, 2013
182
16
40
唐津市ーkaratsu
so to confirm. I download rootkit to pc, ninjakernel.zip to device. usb debugging on, connection to charge only. plug into pc, run root.exe will root device, install cwm recovery and boot into recovery. then I take nandroid backup in recovery and don't reboot but install from zip the ninjakernel then reboot. finished. yes?

sent from my LG G2 with tapatalk pro

---------- Post added at 11:45 AM ---------- Previous post was at 11:43 AM ----------

also, I don't need to wipe nothing for the kernel?


sent from my LG G2 with tapatalk pro
 

bepari220

Senior Member
Nov 19, 2013
65
18
I figured out that the "adb push" command can only send file up to 2GB:eek:
So please zip compress the system.img with your PC. It should shrink to 1.9GB. And then adb push it.
Then use the"unzip" command in your twrp to unzip it, and flash it by the "dd" command.

so what would be the dd command if I push the image to /sdcard/system.img
oh ! I'm such a noob :silly:
 

supersonicninja

Senior Member
Oct 20, 2012
102
162
Sapporo
blog.goo.ne.jp
so what would be the dd command if I push the image to /sdcard/system.img
oh ! I'm such a noob :silly:

All linux and windows commands are friendly to a noob! They have help. Type
Code:
dd --help
to see it.

In your case. You have to use these three commands.
First, zip compress system.img and name it to system.zip or something. Place it with the same folder as the adb.exe in your pc and open the adb shell and type these commands.
Code:
adb push system.zip /sdcard/
This sends the file over the USB cable.
Code:
unzip system.zip
This unzips the file.
Code:
dd if=/sdcard/system.img of=/dev/block/platform/msm_sdcc.1/by-name/system
This copies the file.
The "if=" means "input file" so where to copy from. And the "of=" means "output file" so where to copy to. Pretty obvious.
 

mn147

Senior Member
Dec 12, 2013
182
16
40
唐津市ーkaratsu
I was wondering about the bloatware on our phones. what's safe to freeze/delete. like the lg and docomo bloat. please advise

sent from my LG G2 with tapatalk pro
 

bepari220

Senior Member
Nov 19, 2013
65
18
hay @supersonicninja

I did everything you said, but when I give the unzip command it just shows that it is unzipping...but after 1 hour it still shows that it is unzipping, whats wrong ?

all these happened after I flashed Ninja Kernel on my L01F10c (rooted, xposed installed) Stock Rom. My phone is not booting up :(

My Phone Condition :
1. Can go to recovery TWRP Touch.
2. Phone Storage 20994 MB
3. Full Wiped including Internal Memory
4. ADB Push works
5. Sideload also works
6. If I press power button : gets stuck at docomo logo with notification LEDs flashing nothing else.

I have all the stock .img files (L01F10c). I also have the L01F11k.kdz file.
Please advise how can I bring my phone back to life
 

supersonicninja

Senior Member
Oct 20, 2012
102
162
Sapporo
blog.goo.ne.jp
hay @supersonicninja

I did everything you said, but when I give the unzip command it just shows that it is unzipping...but after 1 hour it still shows that it is unzipping, whats wrong ?

all these happened after I flashed Ninja Kernel on my L01F10c (rooted, xposed installed) Stock Rom. My phone is not booting up :(

My Phone Condition :
1. Can go to recovery TWRP Touch.
2. Phone Storage 20994 MB
3. Full Wiped including Internal Memory
4. ADB Push works
5. Sideload also works
6. If I press power button : gets stuck at docomo logo with notification LEDs flashing nothing else.

I have all the stock .img files (L01F10c). I also have the L01F11k.kdz file.
Please advise how can I bring my phone back to life

If you have the .kdz file, you can extract it for the .dll and the flashable dz file.
See this thread
 

bepari220

Senior Member
Nov 19, 2013
65
18
got my phone working...but can't pull down notification bar down :( works fine on Landscape mode...maybe it's just my bad luck...
 

bawbagbawbag

New member
Dec 16, 2013
1
0
Hello there - I tried rooting using the zip file in the OP but it seems like there are files missing from the f10 folder. I'm not sure whether the files in the f11 folder are the same or not, so I didn't try to copy them over to the f10 folder. Could you let me know how to proceed? Many thanks!
 

supersonicninja

Senior Member
Oct 20, 2012
102
162
Sapporo
blog.goo.ne.jp
I was wondering about the bloatware on our phones. what's safe to freeze/delete. like the lg and docomo bloat. please advise

sent from my LG G2 with tapatalk pro

Freezing/deleting system apps are not a good idea. Some apps are called from the system framework. So if you delete apps, the framework may try to start the deleted app infinitely, causing severe CPU usage and battery drain.
 

batuocbongdem

Member
Jan 11, 2008
7
0
help me

jovr.jpg
 

hem.acharya

Senior Member
Sep 19, 2010
339
32
Toronto
I tried rooting my phone . installed LG driver as well. but everytime i press option 3 and enter the command windows closes with flashing red screen.

any idea why is this happening. i copied the files in C drive.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 4
    Hi everyone.
    The Japanese version of LG G2 DoCoMo L-01F has the special "ccsecurity" access control system.
    That has prevented us from rooting!
    So we used the CVE-2013-6282 vulnerability to take root.
    Here is the automagic rootkit for you!

    WARNING
    ROOTING WILL DISABLE YOUR WARRANTY.
    YOU MAY BE UNABLE TO GET SUPPORT FROM THE DOCOMO SHOP.
    YOU MAY BRICK YOUR PHONE.
    YOU MAY BE UNABLE TO GET OFFICIAL UPDATES.



    Download

    L-01F Rootkit ver8 androidfilehost

    How to use
    Basically run the batch and read instructions!

    PROTIP
    Do not attempt to do official updates.
    Install busybox from the Google Play.
    Push the volume up button with the power button to boot to recovery menu.
    Take backup from recovery.

    Unrooting
    If you just want to disable root, use the uninstall root option of the supersu app.
    If you want to wipe all data and have a clean rom , write tot/kdz from this thread.

    Credit
    fi01 for adapting CVE-2013-6282 rootkit github
    Tohno for helping me make L01F11k rootkit.
    thecubed for bump.
    blastagator for twrp source.
    And many testers!
    3
    Helping you

    Many people has sent me help requests about the root relating things. This post should answer all common helps.

    Q. The rootkit shows error"cannot stat ..... No such file or directory".
    A. The folder name you put the rootkit in is likely Japanese. Place the rootkit in C drive root or some other English-named path.

    Q. My games! Lovelive Puzzles&Dragons etc not playable after rooting. Why?
    A.It detects root. It is a cheat prevention system of some games and apps. Use the rootcloak. If that is not working and you really want to play that game, then you have to unroot.

    Q. My phone does't boot anymore. It stucks on the "docomo" logo.
    A.Hold your power button for about 20 seconds to force shutdown. Then hold your power button and the volume up button at the same time to boot up to the recovery. Then restore your phone from the backup file you took.

    Q.What do I need for the FOTA update?
    A.Stock boot.img and recovery.img and system files.

    Q. I did the FOTA update and recovery is looping.
    A. That's because you forgot to unroot and the custom recovery is still there. The fix is included in my rootkit. Thanks to antond57.

    Q. I did the FOTA update and some error screen came up and the update failed.
    A. This indicates that you have modified your system too much to be updated. This is often caused by the xposed framework.
    First, you need to root your phone again.
    Second, download and install the system installer, boot installer, recovery installer from this thread.

    Q. I cant find and install the LG adb driver for the recovery.
    Try using the pdanet driver.
    2
    I followed the above steps but option 3 root process stopped at "rm: remove '/system/bin/ccs-auditd'?"... I cannot input anything at this stage, no respond for any key enter from the keyboard, am I missing something, my device is L01F10c:

    Code:
    exit
    exitshell@android:/ $ cd /data/local/tmp
    shell@android:/data/local/tmp $ chmod 777 unlock_security_module
    shell@android:/data/local/tmp $ chmod 777 busybox
    shell@android:/data/local/tmp $ chmod 777 disable_ccsecurity
    Unable to chmod disable_ccsecurity: No such file or directory
    10|shell@android:/data/local/tmp $ chmod 777 install_backdoor
    Unable to chmod install_backdoor: No such file or directory
    10|shell@android:/data/local/tmp $ chmod 777 run_root_shell
    Unable to chmod run_root_shell: No such file or directory
    10|shell@android:/data/local/tmp $ chmod 777 su
    shell@android:/data/local/tmp $ chmod 777 loki_flash
    shell@android:/data/local/tmp $ chmod 777 cwm.lok
    shell@android:/data/local/tmp $ ./install_backdoor
    /system/bin/sh: ./install_backdoor: not found
    127|shell@android:/data/local/tmp $ ./disable_ccsecurity
    /system/bin/sh: ./disable_ccsecurity: not found
    127|shell@android:/data/local/tmp $ ./run_root_shell
    /system/bin/sh: ./run_root_shell: not found
    127|shell@android:/data/local/tmp $ mkdir /sdcard/NINJABACKUP
    mkdir failed for /sdcard/NINJABACKUP, File exists
    me/modemst1 of=/sdcard/NINJABACKUP/modemst1.img;                              <
    dd: can't open '/dev/block/platform/msm_sdcc.1/by-name/modemst1': Permission denied
    st2 of=/sdcard/NINJABACKUP/modemst2.img                                       <
    dd: can't open '/dev/block/platform/msm_sdcc.1/by-name/modemst2': Permission denied
    1|shell@android:/data/local/tmp $
    1|shell@android:/data/local/tmp $ mount -o remount,rw /system
    mount: Operation not permitted
    255|shell@android:/data/local/tmp $ ./busybox rm /system/bin/ccs-auditd
    rm: remove '/system/bin/ccs-auditd'?

    It looks like you're using the Superninja root method. For me, that didn't work and I had the same error.

    KBC rooting method.

    Install LG G2 drivers HERE (look for ドライバ and click it)
    Download the attached .zip file for rooting.
    Turn your phone on.
    Go to About Phone in Settings.
    Tap Build Number 7 times to enable Developer Options
    Go to Developer Options and tick Android Debugging or USB Debugging (I forget what it's called)
    Connect phone via USB to your PC.
    Select USB charging only mode from notifications on your g2.
    Unzip the g2_support_tool_v1.7
    Double click the file runme.bat
    Follow the order in the CMD window.
    siBTVpL.png


    1. Image backup
    2. Install Custom Recovery
    3. Get a permanent root (with superuser)

    Do 1, then 2, then 3 in that order. If you are successful your phone will reboot automatically and install superuser in CWM.
    Do not disconnect your phone.

    If you are able to complete 1, 2, and 3, then you can select 9 to exit the root tool and disconnect your phone.

    To boot into recovery, turn phone off, then while turning it on again, hold the power button and volume up button (note: USB must be disconnected otherwise it will go into download mode)
    1
    can i copy these from \files\ folder and put them inside \files\10c\ folder?
    Yes, it good idea.
    or rename path \10c\ to \11k\
    1
    Have found another rooting method that works flawlessly. Attached to this post,,. Credits to KBC developers...

    [See for rooting HERE]

    This root method does not work on the lf010c... I used the L-01F Rootkit ver6 by supersonicninja, but it instantly closed. So, I downloaded the rootkit.bat by VaskaPupkin but again I had a problem with missing files. SO then I tried to copy the files in the 11k folder to 10c folder, but still couldn't root. This is the screen I got.... I would love some help.