Attend XDA's Second Annual Developer Conference, XDA:DevCon 2014!
5,737,124 Members 43,486 Now Online
XDA Developers Android and Mobile Development Forum

[APP]SuperOneClick v2.3.3 - Motorola Exploit Added!

Tip us?
 
dlmvegas
Old
#6371  
Junior Member
Thanks Meter 0
Posts: 2
Join Date: Jun 2012
Default Samsung Fascinate with 2.3.5 NOT working

Have run this program over and over and turned the phone off and back on. Still doesn't work on my Samsung Fascinate. Program gets to a point where it is "WaitForDevice " on Step 7. Clickiing on the app only gives you a "not responding" message. Sometimes it will finish with an "Operation not permitted" and then END.

Any help would be greatly appreciated.

Below is the output from the run:

* daemon not running. starting it now on port 5037 *
* daemon started successfully *
export PS1=""



$ export PS1=""



getprop ro.build.version.release > /data/local/tmp/output 2>&1

export TEMPRANDOM=40757

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

2.3.5

END:40757export PS1=""



getprop ro.product.manufacturer > /data/local/tmp/output 2>&1

export TEMPRANDOM=86499

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

Samsung

END:86499export PS1=""



getprop ro.product.model > /data/local/tmp/output 2>&1

export TEMPRANDOM=41351

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

SCH-I500

END:41351export PS1=""



getprop ro.build.version.incremental > /data/local/tmp/output 2>&1

export TEMPRANDOM=43221

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

EH03

END:43221export PS1=""



ls -l /system/xbin/su > /data/local/tmp/output 2>&1

export TEMPRANDOM=57200

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

/system/xbin/su: No such file or directory

END:57200export PS1=""



ls -l /system/bin/su > /data/local/tmp/output 2>&1

export TEMPRANDOM=40307

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

/system/bin/su: No such file or directory

END:40307export PS1=""



chmod 755 /data/local/tmp/busybox > /data/local/tmp/output 2>&1

export TEMPRANDOM=30292

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:30292export PS1=""



/data/local/tmp/busybox whoami > /data/local/tmp/output 2>&1

export TEMPRANDOM=44938

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

whoami: unknown uid 2000

END:44938export PS1=""



rm /data/local/tmp/boomsh > /data/local/tmp/output 2>&1

export TEMPRANDOM=62954

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:62954export PS1=""



rm /data/local/tmp/sh > /data/local/tmp/output 2>&1

export TEMPRANDOM=54134

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:54134export PS1=""



chmod 700 /data/local/tmp/zergRush > /data/local/tmp/output 2>&1

export TEMPRANDOM=69157

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:69157export PS1=""



cd /data/local/tmp/ > /data/local/tmp/output 2>&1

export TEMPRANDOM=36119

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:36119export PS1=""





export TEMPRANDOM=44641;export PS1=END:$TEMPRANDOM;./zergRush



[**] Zerg rush - Android 2.2/2.3 local root

[**] (C) 2011 Revolutionary. All rights reserved.



[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.



[+] Found a GingerBread ! 0x00000118
[*] Scooting ...
[*] Sending 149 zerglings ...
[*] Sending 189 zerglings ...

[+] Zerglings found a way to enter ! 0x18

[+] Overseer found a path ! 0x000181e0
[*] Sending 189 zerglings ...

[+] Overseer found a path ! 0x000181e0
[*] Sending 189 zerglings ...

[-] Zerglings did not leave interesting stuff

END:44641export PS1=""

export PS1=""



/data/local/tmp/busybox mount -o rw,remount /system > /data/local/tmp/output 2>&1

export TEMPRANDOM=43895

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

mount: permission denied (are you root?)

END:43895export PS1=""



/data/local/tmp/busybox mount > /data/local/tmp/output 2>&1

export TEMPRANDOM=35524

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

rootfs on / type rootfs (ro,relatime)

tmpfs on /dev type tmpfs (rw,relatime,mode=755)

devpts on /dev/pts type devpts (rw,relatime,mode=600)

proc on /proc type proc (rw,relatime)

sysfs on /sys type sysfs (rw,relatime)

none on /acct type cgroup (rw,relatime,cpuacct)

tmpfs on /mnt/asec type tmpfs (rw,relatime,mode=755,gid=1000)

tmpfs on /mnt/obb type tmpfs (rw,relatime,mode=755,gid=1000)

none on /dev/cpuctl type cgroup (rw,relatime,cpu)

/dev/block/stl9 on /system type rfs (ro,relatime,vfat,log_off,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/mmcblk0p1 on /data type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/stl10 on /dbdata type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/stl11 on /cache type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/stl6 on /mnt/.lfs type j4fs (rw,relatime)

/dev/block/mmcblk0p2 on /data/fota type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/mmcblk0p3 on /preinstall type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)

END:35524export PS1=""



/data/local/tmp/busybox mount -o rw,remount /dev/block/stl9 /system > /data/local/tmp/output 2>&1

export TEMPRANDOM=66244

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

mount: permission denied (are you root?)

END:66244export PS1=""



/data/local/tmp/busybox mount > /data/local/tmp/output 2>&1

export TEMPRANDOM=27973

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

rootfs on / type rootfs (ro,relatime)

tmpfs on /dev type tmpfs (rw,relatime,mode=755)

devpts on /dev/pts type devpts (rw,relatime,mode=600)

proc on /proc type proc (rw,relatime)

sysfs on /sys type sysfs (rw,relatime)

none on /acct type cgroup (rw,relatime,cpuacct)

tmpfs on /mnt/asec type tmpfs (rw,relatime,mode=755,gid=1000)

tmpfs on /mnt/obb type tmpfs (rw,relatime,mode=755,gid=1000)

none on /dev/cpuctl type cgroup (rw,relatime,cpu)

/dev/block/stl9 on /system type rfs (ro,relatime,vfat,log_off,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/mmcblk0p1 on /data type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/stl10 on /dbdata type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/stl11 on /cache type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/stl6 on /mnt/.lfs type j4fs (rw,relatime)

/dev/block/mmcblk0p2 on /data/fota type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/mmcblk0p3 on /preinstall type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)

END:27973export PS1=""

mount -o rw,remount /dev/block/stl9 /system > /data/local/tmp/output 2>&1

export TEMPRANDOM=48830

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

mount: Operation not permitted

END:48830
 
flippinfreddie
Old
#6372  
Junior Member
Thanks Meter 0
Posts: 3
Join Date: Jun 2012
Question LG optimus L7 ICS 4.0.3

Will this work on the Lg optimus L7 running ICS 4.0.3 version V10d-MAY-21-2012 ?? If not is there any other software that will root this phone sucsessfully ??

thanks,
flippinfreddie
 
k2mach
Old
#6373  
Member
Thanks Meter 2
Posts: 42
Join Date: May 2012
Location: New Delhi
http://forum.xda-developers.com/show....php?t=1586570

can this method be used for rooting my live with walkman bootloader unlocked?
 
Nomnom98
Old
#6374  
Junior Member
Thanks Meter 0
Posts: 1
Join Date: Feb 2012
Location: Las Vegas
It isn't working for my Motorola Droid, it says its rooted but through Root Check Basic it says it isn't. Every once in a while it will say; "Automatic version check failed. Is your OS 2.0 or higher?" and "Device properties could not be read!(You should try rebooting your device)"

Any one know what to do?
 
chris_b0ss
Old
#6375  
Member
Thanks Meter 3
Posts: 70
Join Date: May 2012
Do you think you'll add compatibility for Samsung Galaxy Mini 2(S6500) soon ?
Thank you.Great work
 
aa14
Old
#6376  
Member
Thanks Meter 5
Posts: 43
Join Date: Jun 2012
Default thanx .. it so simple and easy

Quote:
Originally Posted by CLShortFuse View Post
SuperOneClick




Downloads available at http://shortfuse.org/

v2.3.3
------
Motorola ADB Patching
Checks for shell root before applying exploits
Unroot has been fixed to work more reliably
LG devices no longer need to use alternate ADB

v2.3.2
------
Better LG phone support

v2.3.1
------
Auto driver installation

v2.2 is up!
zergRush and Superuser 3.0.6 included
----------------------------------------------

v2.1.1 is up!

Driver pack comes later!

---


I made it. I tested it. It works. You can get it from shortfuse.org or use the links below (if you're a registered XDA member).

Here's a one-click root with almost all phones and all android versions. (including the i9000, Droid, Nexus One, etc)

YOU CAN ROOT ALMOST ALL ANDROID PHONES!

The program requires Microsoft .NET Framework 2.0+ or Mono v1.2.6+
Operations systems with native support:
  • Windows Vista
  • Windows 7
  • Ubuntu Hardy (8.04 LTS)
  • Ubuntu Jaunty (9.04)
  • Ubuntu Karmic (9.10)
  • Ubuntu Lucid (10.04 LTS)
  • Ubuntu Maverick (10.10)
  • Debian Lenny (5.0)
  • Debian Squeeze (testing)
  • Debian Sid (unstable)
  • Debian Experimental

If you run Microsoft Windows XP, install .NET Framework v2.0 or above
If you run Mac or another Linux flavor, make sure you install Mono:
http://www.go-mono.com/mono-downloads/download.html

For more information about making it work in linux:
See here


You NEED to put your phone on USB Debugging mode
You NEED to install make sure the Android drivers for your phone are installed
Make sure you DO NOT mount your SD card.
If you still can't get something to run, try doing it in recovery mode.


Read me: (READ BEFORE POSTING)
2/24/2011:
I registered my website shortfuse.org so you can grab SuperOneClick from there now.

2/22/2011:

Great news. -1Day roots AT&T Motorola Atrix4G!!! YAY!

11/29/2010:

I'm sorry I haven't been updating lately!!! The problem is, I no longer have an Android phone and I can't play around or test anymore. I'm going to see if I can find one on craiglist or ebay.

11/10/2010:
I finally figured out how to root without looping. After rooting 13 phones, this is how I did it on the first try.

Turn USB Debugging OFF

Click Root

When it says: Waiting for Device, Turn USB Debugging ON

It'll now run RATC

When it says: Starting ADB Server...
Turn USB Debugging OFF
Turn USB Debugging ON
Turn USB Debugging OFF
All BEFORE it says "Waiting for device..." again


11/1/2010:
Hey guys! I'm sorry I haven't been able to respond to lots of posts. I've been really busy lately with work. I've been reading some posts and I've made some changes in v1.5.2

Let me know what bugs and issues you guys have.


10/17/2010:
Thanks to all that donated! I was worried for a bit but you guys proved me wrong. So, I fixed the NMA (non market apps) button. It should now install sqlite3 and busybox into a temporary folder if you don't have it. I added an unroot (by popular demand). I did some major code clean up, so you can expect faster releases from here on out. Next version will add sqlite3 and busybox to the /system partition included in root.

If you're having issues with "wait for device" or if RATC is looping, try this
Unplug your USB Cable
Go to Settings > Applications > Development
Uncheck USB Debugging
Plug in your USB Cable
Unplug your USB Cable
Check USB Debugging
Plug in your USB Cable

10/13/2010:
I need people with issues to post their device model and if they tried rooting in recovery mode. All posts ignoring the read me will be ignored. (meaning nma complaints and those NAND locked devices).
I'm getting flooded with replies, PMs and emails. Seriously, try reading a few posts back.
The program has been downloaded over 5000 times and only 2 people have have donated. I see donations as signs of gratitude. Even if it's 25 cents, please donate.
When I find the time (and will) I will work on the v1.5 release.
The rageagainstthecage looping is by design. Bad usb cables and ports can cause ratc to not run properly so I have it loop until it works. The "waiting for device" hang is for the same reason. There's nothing wrong with my application. It's usually your usb cable or port. This is not a cop-out answer. This is not an excuse as if I didn't know why it happens. This has been investigated and the problem is USB connectivity. It happens with my Captivate as well.

10/11/2010:
Enabling market apps isn't working unless you have busybox installed. I plan to fix this in the next version. The problem is, different devices have different locations for the com.provider.android.settings/settings.db and I was using the 'find' command to find your settings.db location. I didn't realize this was a busybox command not internal. That will be fixed.

I also added some information about root that I think people should read and classified different root levels.

By classifying root levels, I make it easier for the users to know if certain options will work or not. For example, enabling non-market apps will only require a Level 1 root, meaning it will work with the HTC Aria

Donate

Donate if you wish... (:

Compatibility list
Please note that if you device is not listed here, it doesn't automatically make it incompatible. The list is definitely incomplete.
Use the search feature to search for your phone model: http://forum.xda-developers.com/sear...hreadid=803682
Incompatibility list

With the absolutely beautiful ADB exploit I use, titled rageagainstthecage (ratc), absolute ALL devices can be rooted. This is because it exploit is ADB which all devices use. There is an issue though. Some devices have a NAND lock which does not allow you to write to the /system mount. Because of this, you can't copy su, sqlite or busybox to /system/bin. This creates some issues but there is a work around. For things that don't need access to /system (like enabling non-market apps) I can use the ratc exploit to make those changes. If your device cannot use su in /system/bin then you can simple select a checkbox (as of v1.5) that says to use ratc.

There are 3 levels of "root" we can define:
Level 1: Shell Root (with ratc rooting the adb shell but no /system write access)
Level 2: Temporary Root (/system/bin/su installed but lost on reboot)
Level 3: Full Root (/system/bin/su installed and sticks)

Some devices have a NAND lock. SuperOneClick will only give a Shell root until you remove this lock.
The following phones can use http://unrevoked.com to remove this lock:
  • Sprint EVO 4G (HTC Supersonic)
  • Droid Incredible (HTC Incredible)
  • HTC Desire GSM
  • HTC Desire CDMA (HTC BravoC)
  • HTC Aria
  • Droid Eris (HTC DesireC)
  • HTC Wildfire (HTC Buzz)

THe HTC Legend and My Touch 3G 32A also have a NAND lock and need more specific methods to unlock.

The T-Mobile (HTC) G2 has something different which may or may not be a hardware flaw. I have yet to really research the device, but while it may root, it won't be permanent since copying /su to /system/bin/su has problems. I believe this is a Level 2 root, but to be honest, I need to research more.

All other devices has a Level 3 root via SuperOneClick

Version changes:
v1.9.5
Driver Installation Fix
Force Administrator on Vista/Win7
Fixed Non-Market Apps not working for some devices

v1.9.1
GingerBreak support! (I think)

v1.9
Bug fixes!
Should work better now on XP systems and Linux

v1.8
Automatic driver installation
Removed RageAgainstTheCage (no virus flags)
New folder structure
Major code clean up

v1.7
Hopefully fixed Linux hangs
Theoretical honeycomb support (still needs testing)

v1.6.5
Fixed major bug. Oops!

v1.6.4
Installs busybox to /system/xbin and installs syslinks
Added a 30 second timeout check (should eliminate all lock ups)

v1.6.3
Mounts with busybox first
Includes version in first line

v1.6.2
Fixed wrong su version being sent
Fixed issue when getting OS version
Prints device info on failure.

v1.6.1
Falls back to previous mount path method if busybox method fails

v1.6
Uses psneuter for exploit instead of rageagainstthecage by default (should root Sony Ericsson devices easily now)
Added detection for 1.x Donut/Eclair kernels
Uses busybox for getting mount path
Updated Windows ADB to latest version (I'll update the Mac/Linux ones next build)

v1.5.5
Unroot uninstalls Superuser from /data/app
Returned installation of Superuser to /system/app

v1.5.4
Fixed superuser install issue
Added a prompt to tell you to allow superuser on your phone, for the test.
Fixed unroot.

v1.5.3
Fixed ADB-pushing problem

v1.5.2
Administrative rights in Windows Vista/7 are automatically requested.
Fixed the settings.db search. (Tries default two locations, then uses busybox is all else fails).
Set Superuser to install (to data/apps) instead of copy to /system/apps. You can manually remove it from your phone like any other app. (You can also update it with the Market).
Fixed NMA not working if you didn't have Shell Root


v1.5.1
Untested Mac and Linux support (you need Mono)

v1.5
Fixed Non Market Apps
Added Unroot
Added separate Shell Root (rageagainstthecage) button
Lots of internal code clean up.

v1.4
Changed main form's name to SuperOneClick from RageAgainstTheCageGUI
Enabled Captivate - Get Unlock Code button
Added a messagebox to confirm if Non Market Applications are enabled
Made "Enable Non Market Apps" FULLY universal
Added initial message telling you to remember to allow superuser commands (when enabling Non-Market Apps)

v1.3
Removed busybox for space reasons. Changed the layout. Fixed issue where application stayed running in the background. Added Non Market App button.

v1.2
Added a detection to see if RATC was already working.

v1.1
Universal device support. Application now finds your /system path.

v1.0
Initial release.

Development Plan:




Scheduled for next major release
  • Linux support via mono-project
  • Add a check box to use su or rageagainstthecage for other scripts (like Enable NMA)
  • Better error handling for devices with NAND lock on /system
  • Have options show what level root is needed (0,1,2,3)

To do list:
  • Jupiter fixes
  • Custom scripts support
  • Plugin support
  • Mac support via mono-project
  • Linux support via mono-project





Wishlist:
  • None
Thanks to basily, I have an Captivate v2.1 nv_data.bin I can test with to create the unlock button.
I need a mac/linux user to help me. PM so we can chat on AIM/Google

Courtesy of TheUnlockr.com, here's a step-by-step video:


Mod Edit: this app will set off some anti virus software...here's a small explanation by pulser_g2:

thanx .. it so simple and easy
 
dlmvegas
Old
#6377  
Junior Member
Thanks Meter 0
Posts: 2
Join Date: Jun 2012
Default It might be simple and easy but.....

Will there be a fix for Samsung Fascinate 2.3.5 gingerbread soon?
 
Bar-Taia
Old
#6378  
Junior Member
Thanks Meter 1
Posts: 1
Join Date: Jun 2012
Default rooting htc desire hd

Hi! I'm very "fresh" in the field...
I tried to root my device, but it stopped at the 7-th stage. Nothing happened.
I tried to switch of USB debugging and disconnect, reconnect and all this...
I feel like I'm missing smth...
Please, help me!
Thanks!
The Following User Says Thank You to Bar-Taia For This Useful Post: [ Click to Expand ]
 
nastyneon2001
Old
#6379  
Junior Member
Thanks Meter 0
Posts: 11
Join Date: Apr 2012
Anyone know if superuser is fixed yet?

Sent from my SCH-I800 using XDA
 
BellerophonM
Old
(Last edited by BellerophonM; 14th June 2012 at 10:30 AM.)
#6380  
Junior Member
Thanks Meter 0
Posts: 12
Join Date: Feb 2011
Has anyone tested this against a Galaxy SII on the current update (4.0.3, I believe)? Australia Virgin Mobile (Optus) if it matters.

Tags
2.2, galaxy, galaxy s brazil, galaxy y s5360, root, superoneclick, uckb2, z4root
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes