Welcome to XDA

Search to go directly to your device's forum

Register an account

Unlock full posting privileges

Ask a question

No registration required
Post Reply

[DEV] Rooting Blackberry Playbook

OP skoperst

13th May 2011, 04:08 PM   |  #1  
OP Member
Thanks Meter: 14
42 posts
Join Date:Joined: Aug 2010
Donate to Me
I've been diggin into the Playbook for a few days now, trying to figure out who against who here. the goal of course is gaining root.

The things we know so far, is that the device is dual-core 1Ghz cortex-A9, armv7 architecture using OMAP4 platform. On top of it runs a QNX linux that uses Adobe air sdk for application.

Its possible to set the device into Development Mode in the security settings, and use the 'blackberry-connect' utility that comes with the Blackberry TabletOS SDK .
First thing you need to be connected with the pc and playbook on the same wifi.
You will need a private key, and a public key created with the ssh-gen utility or you can use the keys I attach in keys.zip.

Use the utility to connect the device on port 4455:
blackberrysdk\blackberry-connect -targetHost <ip> -devicePassword <pass> -sshPublicKey <yourkey4096.pub>
Then the device will start the ssh server on the ssh port.
In order to connect it, I used 2 utilities: Peagent, and Putty.

By starting Peagent, load the private key (or .pkk in the zip). and use putty to connect the device.
The username is : devuser

There is also a way to execute native code on the device as first discovered by @b3ll.

The idea is to compile the code in the QNX ide for armv7, making them runnable by : chmod +x nativeapp
and zipping them.
Then connect the device using the Blackberry desktop, copy the zip to "Downloads" directory and use the ssh to unzip the files and run them(in /tmp directory).
The Download directory will be located somewhere under the /accounts directory. I added the native app that @b3ll originally published.

Also, the device has 3 connections in the bottom, the most right is the magnetic charger- which cannot transfer data.
The middle one is micro-USB, and the left one is mini-hdmi.
Leaving the micro-USB the only connection that can transfer data.

Key combinations

POWER - turning on the device

Turning on using POWER + Volume-UP - gives unknown special mode for few seconds.

Thats all i figured out so far
Attached Files
File Type: zip keys.zip - [Click for QR Code] (3.0 KB, 391 views)
File Type: zip nativeapp.zip - [Click for QR Code] (2.8 KB, 363 views)
Last edited by skoperst; 14th May 2011 at 12:58 PM.
The Following 5 Users Say Thank You to skoperst For This Useful Post: [ View ]
29th May 2011, 01:47 AM   |  #2  
Thanks Meter: 3
78 posts
Join Date:Joined: Nov 2009
Clean work, man!

One thing though: bb-connect must be running all the time while you want to have the SSH open.

(working on Qt now)
6th June 2011, 01:21 AM   |  #3  
Thanks Meter: 3
78 posts
Join Date:Joined: Nov 2009
and I have some news re Qt:

All the best
The Following User Says Thank You to TAMHAN For This Useful Post: [ View ]
6th June 2011, 01:49 PM   |  #4  
OP Member
Thanks Meter: 14
42 posts
Join Date:Joined: Aug 2010
Donate to Me
Will look into it now, I also found a twit from @cmwdotme that posted this.
The updates download process is not secured, getting it in though its all different story
The Following User Says Thank You to skoperst For This Useful Post: [ View ]
25th June 2011, 08:47 AM   |  #5  
-]Megacharge[-'s Avatar
Senior Member
Flag Montreal
Thanks Meter: 119
375 posts
Join Date:Joined: Nov 2010
Interesting stuff guys, keep up the good work, looking forward to your progress.
22nd July 2011, 09:45 PM   |  #6  
Senior Member
Flag Bucharest
Thanks Meter: 119
434 posts
Join Date:Joined: Jan 2007
Donate to Me
Android is running on playbook.... finally http://forums.crackberry.com/blackbe...r-apps-631724/
The Following 2 Users Say Thank You to lucian777 For This Useful Post: [ View ]
3rd October 2011, 11:37 PM   |  #7  
Junior Member
Thanks Meter: 1
12 posts
Join Date:Joined: Jan 2011
So is anyone working on Blackberry Playbook hacking ..etc?
23rd November 2011, 06:08 PM   |  #8  
mercado79's Avatar
Senior Member
Flag Boston, MA
Thanks Meter: 390
1,005 posts
Join Date:Joined: Oct 2008
with the recent drop in price to $199 for the 16gb model... any action going on in this regard? I'd be all over this if there was even a glimmer of hope. Devs! Where you at?!
24th November 2011, 03:36 PM   |  #9  
mrRobinson's Avatar
Recognized Contributor
Thanks Meter: 8,609
2,381 posts
Join Date:Joined: Dec 2010
watch @cmwdotme
prob best bet right now.
27th November 2011, 11:39 PM   |  #10  
chaose's Avatar
Flag New York
Thanks Meter: 8
57 posts
Join Date:Joined: Nov 2010
looks like he's doing a great job, props

Post Reply Subscribe to Thread
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes