[Japanese L-01F] Root your L-01F [HOWTO]

Hi everyone.
The Japanese version of LG G2 DoCoMo L-01F has the special "ccsecurity" access control system.
That has prevented us from rooting!
So we used the CVE-2013-6282 vulnerability to take root.
Here is the automagic rootkit for you!

WARNING
ROOTING WILL DISABLE YOUR WARRANTY.
YOU MAY BE UNABLE TO GET SUPPORT FROM THE DOCOMO SHOP.
YOU MAY BRICK YOUR PHONE.
YOU MAY BE UNABLE TO GET OFFICIAL UPDATES.


Download
L-01F Rootkit ver8 androidfilehost

How to use
Basically run the batch and read instructions!

PROTIP
Do not attempt to do official updates.
Install busybox from the Google Play.
Push the volume up button with the power button to boot to recovery menu.
Take backup from recovery.

Unrooting
If you just want to disable root, use the uninstall root option of the supersu app.
If you want to wipe all data and have a clean rom , write tot/kdz from this thread.

Credit
fi01 for adapting CVE-2013-6282 rootkit github
Tohno for helping me make L01F11k rootkit.
thecubed for bump.
blastagator for twrp source.
And many testers!

Helping you

Many people has sent me help requests about the root relating things. This post should answer all common helps.

Q. The rootkit shows error"cannot stat ..... No such file or directory".
A. The folder name you put the rootkit in is likely Japanese. Place the rootkit in C drive root or some other English-named path.

Q. My games! Lovelive Puzzles&Dragons etc not playable after rooting. Why?
A.It detects root. It is a cheat prevention system of some games and apps. Use the rootcloak. If that is not working and you really want to play that game, then you have to unroot.

Q. My phone does't boot anymore. It stucks on the "docomo" logo.
A.Hold your power button for about 20 seconds to force shutdown. Then hold your power button and the volume up button at the same time to boot up to the recovery. Then restore your phone from the backup file you took.

Q.What do I need for the FOTA update?
A.Stock boot.img and recovery.img and system files.

Q. I did the FOTA update and recovery is looping.
A. That's because you forgot to unroot and the custom recovery is still there. The fix is included in my rootkit. Thanks to antond57.

Q. I did the FOTA update and some error screen came up and the update failed.
A. This indicates that you have modified your system too much to be updated. This is often caused by the xposed framework.
First, you need to root your phone again.
Second, download and install the system installer, boot installer, recovery installer from this thread.

Q. I cant find and install the LG adb driver for the recovery.
Try using the pdanet driver.

Keror0 said:

I followed the above steps but option 3 root process stopped at "rm: remove '/system/bin/ccs-auditd'?"... I cannot input anything at this stage, no respond for any key enter from the keyboard, am I missing something, my device is L01F10c:

Code:

exit
exitshell@android:/ $ cd /data/local/tmp
shell@android:/data/local/tmp $ chmod 777 unlock_security_module
shell@android:/data/local/tmp $ chmod 777 busybox
shell@android:/data/local/tmp $ chmod 777 disable_ccsecurity
Unable to chmod disable_ccsecurity: No such file or directory
10|shell@android:/data/local/tmp $ chmod 777 install_backdoor
Unable to chmod install_backdoor: No such file or directory
10|shell@android:/data/local/tmp $ chmod 777 run_root_shell
Unable to chmod run_root_shell: No such file or directory
10|shell@android:/data/local/tmp $ chmod 777 su
shell@android:/data/local/tmp $ chmod 777 loki_flash
shell@android:/data/local/tmp $ chmod 777 cwm.lok
shell@android:/data/local/tmp $ ./install_backdoor
/system/bin/sh: ./install_backdoor: not found
127|shell@android:/data/local/tmp $ ./disable_ccsecurity
/system/bin/sh: ./disable_ccsecurity: not found
127|shell@android:/data/local/tmp $ ./run_root_shell
/system/bin/sh: ./run_root_shell: not found
127|shell@android:/data/local/tmp $ mkdir /sdcard/NINJABACKUP
mkdir failed for /sdcard/NINJABACKUP, File exists
me/modemst1 of=/sdcard/NINJABACKUP/modemst1.img;                              <
dd: can't open '/dev/block/platform/msm_sdcc.1/by-name/modemst1': Permission denied
st2 of=/sdcard/NINJABACKUP/modemst2.img                                       <
dd: can't open '/dev/block/platform/msm_sdcc.1/by-name/modemst2': Permission denied
1|shell@android:/data/local/tmp $
1|shell@android:/data/local/tmp $ mount -o remount,rw /system
mount: Operation not permitted
255|shell@android:/data/local/tmp $ ./busybox rm /system/bin/ccs-auditd
rm: remove '/system/bin/ccs-auditd'?

Click to expand...

Click to collapse

It looks like you're using the Superninja root method. For me, that didn't work and I had the same error.

KBC rooting method.

Install LG G2 drivers HERE (look for ドライバ and click it)
Download the attached .zip file for rooting.
Turn your phone on.
Go to About Phone in Settings.
Tap Build Number 7 times to enable Developer Options
Go to Developer Options and tick Android Debugging or USB Debugging (I forget what it's called)
Connect phone via USB to your PC.
Select USB charging only mode from notifications on your g2.
Unzip the g2_support_tool_v1.7
Double click the file runme.bat
Follow the order in the CMD window.


1. Image backup
2. Install Custom Recovery
3. Get a permanent root (with superuser)

Do 1, then 2, then 3 in that order. If you are successful your phone will reboot automatically and install superuser in CWM.
Do not disconnect your phone.

If you are able to complete 1, 2, and 3, then you can select 9 to exit the root tool and disconnect your phone.

To boot into recovery, turn phone off, then while turning it on again, hold the power button and volume up button (note: USB must be disconnected otherwise it will go into download mode)

hem.acharya said:

can i copy these from \files\ folder and put them inside \files\10c\ folder?

Click to expand...

Click to collapse

Yes, it good idea.
or rename path \10c\ to \11k\

Have found another rooting method that works flawlessly. Attached to this post,,. Credits to KBC developers...

[See for rooting HERE]

creaturecool said:

This root method does not work on the lf010c... I used the L-01F Rootkit ver6 by supersonicninja, but it instantly closed. So, I downloaded the rootkit.bat by VaskaPupkin but again I had a problem with missing files. SO then I tried to copy the files in the 11k folder to 10c folder, but still couldn't root. This is the screen I got.... I would love some help.

Click to expand...

Click to collapse