5,599,135 Members 34,889 Now Online
XDA Developers Android and Mobile Development Forum

[Root] Droid Ultra / Maxx / Mini - Update 9/13/2013 - Version 1.1

Tip us?
 
jcase
Old
(Last edited by jcase; 15th September 2013 at 12:05 AM.)
#1  
jcase's Avatar
Forum Moderator / Senior Recognized Developer - Taco Vendor - OP
Thanks Meter 5457
Posts: 3,088
Join Date: Feb 2010
Location: Sequim WA

 
DONATE TO ME
Default [Root] Droid Ultra / Maxx / Mini - Update 9/13/2013 - Version 1.1

[COLOR="red"]Update 9/14/2013

A better solution has been released, please update using it.
http://forum.xda-developers.com/show...php?p=45598648














Warning: Don't attempt to use this on a device that isn't Motorola.

Lets break this sub forum open with a good one.

See: http://www.androidpolice.com/2013/09...mini-and-maxx/ for the story

Bounty payouts or donations can be paypaled to jcase@cunninglogic.com, or use the donate button to the left. If its for the bounty, please reply below with confirmation number or pm me.

These files are not to be mirrored elsewhere, no included in other packages. Its simple already, no need to repackage it.


Same APK should work for Maxx, Ultra and Mini. If it does not, I just need to rebuild it and need someone to test, it will work.

adb install -r <filename>

Run MotoRoot app
Press Setup

Install Supersu app

Phone will reboot, and you will be rooted as soon as device is fully booted.

Limitations:
Uninstalling the app will disable root until reinstalled
supersu is not able to update su yet, this will be fixed in an update shortly.
su is maintained in a ext4 img at /data/xbin.img and mounted over /system/xbin at BOOT_COMPLETE.
su is not available for the first few seconds of boot, im working on this.
/system is write protected, even with unlocked bootloaders you can not write to it while booted in Android.

Unroot:
Two choices, factory reset, or press the unroot menu option in the app.

Problems:
Run into a problem? try hittung unroot then re-rooting

Credits:

We use two vulns in this app, first being 9695860 to gain system user, then a symlink attack of mine to get root from system.

xIndirect (nick) for assisting me from start to finish
Whoever originally found bug 9695860
Saurik for his description of 9695860
Ryan Welton for his 9695860 tool
Dave Kover for yet another kick butt icon
and Anthony Fox/Droid-Hive for great help with getting the device to me today
Attached Files
File Type: apk SuperSU-v1.66-xbin.apk - [Click for QR Code] (1.88 MB, 5655 views)
File Type: apk MotoRoot1.1-Droid.apk - [Click for QR Code] (1.34 MB, 20386 views)
I find bugs and write exploits, I don't provide tech support via email or PM. You not having root != my concern, serious please don't email me about it.

Something important? jcase@cunninglogic.com
Like Android security topics? Join our G+ community -> https://plus.google.com/communities/...07618051049043
My Bitcoin address : 1Newifz6yETTmbziCsZZstmHHPH6ejNr75
The Following 29 Users Say Thank You to jcase For This Useful Post: [ Click to Expand ]
 
redpipe
Old
(Last edited by redpipe; 13th September 2013 at 04:04 AM.)
#2  
Member
Thanks Meter 14
Posts: 47
Join Date: Aug 2012
Location: Lexington Park
Very much appreciated.
PayPal transaction ID 4GK69936510343543.
 
@work
Old
#3  
@work's Avatar
Senior Member
Thanks Meter 6
Posts: 122
Join Date: Mar 2007
Location: Saint Petersburg

 
DONATE TO ME
Ignore everything I said, I will send my donation thank you
-------------------------------------
Stay hungry, Stay foolish.
 
TheWhiteChallenger
Old
#4  
Senior Member
Thanks Meter 94
Posts: 469
Join Date: Mar 2013
Quote:
Originally Posted by jcase View Post
/system is write protected, even with unlocked bootloaders you can not write to it while booted in Android.
firist off thank you for all your hard work
i do have a question dose this mean we can not install apps on the system/app folder?

Quote:
Originally Posted by jcase View Post
su is not available for the first few seconds of boot, im working on this.
and dose this mean files cant be pushed with adb as a work around?
 
meddy6407
Old
#5  
Junior Member
Thanks Meter 2
Posts: 20
Join Date: Sep 2010
Confirmation number: 3FS7579230091290J
Thanks!!
 
@work
Old
#6  
@work's Avatar
Senior Member
Thanks Meter 6
Posts: 122
Join Date: Mar 2007
Location: Saint Petersburg

 
DONATE TO ME
Confirmation 17R58863KC726802C , I didn't pledge on the bounty thread.
-------------------------------------
Stay hungry, Stay foolish.
 
cameyboi
Old
#7  
Junior Member
Thanks Meter 0
Posts: 2
Join Date: Sep 2013
Yes!

Worked like a charm!

Been waiting for this since day one. You are a god sir.
 
jcase
Old
(Last edited by jcase; 13th September 2013 at 04:18 AM.)
#8  
jcase's Avatar
Forum Moderator / Senior Recognized Developer - Taco Vendor - OP
Thanks Meter 5457
Posts: 3,088
Join Date: Feb 2010
Location: Sequim WA

 
DONATE TO ME
Quote:
Originally Posted by TheWhiteChallenger View Post
firist off thank you for all your hard work
i do have a question dose this mean we can not install apps on the system/app folder?



and dose this mean files cant be pushed with adb as a work around?
No messing with system/app yet, just system/xbin. Will be addressing the rest of it soon, I just got my phone today. Been talking with HashCode and DBHacker about getting custom roms going, it is being looked at now.


adb works fine, su just doesnt get remounted until the BOOT_COMPLETE broadcast is sent, it means poorly written apps that does retry a root command with a delay, MIGHT fail to get root at boot. They should retry. I will be addressing this, soon.

Like I said, just got the phone about 7 hours ago.
I find bugs and write exploits, I don't provide tech support via email or PM. You not having root != my concern, serious please don't email me about it.

Something important? jcase@cunninglogic.com
Like Android security topics? Join our G+ community -> https://plus.google.com/communities/...07618051049043
My Bitcoin address : 1Newifz6yETTmbziCsZZstmHHPH6ejNr75
The Following 2 Users Say Thank You to jcase For This Useful Post: [ Click to Expand ]
 
One2thTEXAN
Old
#9  
One2thTEXAN's Avatar
Member
Thanks Meter 41
Posts: 97
Join Date: Aug 2013
Location: Round Rock, TX

 
DONATE TO ME
Thanks man!

Sent from my XT1080 using XDA Premium 4 mobile app
 
redpipe
Old
#10  
Member
Thanks Meter 14
Posts: 47
Join Date: Aug 2012
Location: Lexington Park
got adfree working, but you have to do it QUICKLY. remount /system as rw, then immediately press the update button on the adfree app. the changes will remain until reboot, but I hardly ever reboot

busybox mount -o remount,rw /system;

THREAD CLOSED
Subscribe
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes