FORUMS
Remove All Ads from XDA

[Root/TWRP/Rom]T-Mobile K428sg K10/MetroPCS ms428 K10[4/2/17]

3,724 posts
Thanks Meter: 11,743
 
By OvrDriVE, Recognized Contributor on 1st April 2017, 08:24 AM
Post Reply Email Thread
i am in no way responsible if you brick, break or just plain blow up your device. it's your device and your responsibility. if you blame me i am gonna die laughing!
Disclaimer! the exploits in the rar may be flagged as a virus by your virus software. just add an exception for them! they are not a virus

T-Mobile/MetroPCS Root, TWRP and Deodexed Stock Roms

Cannot Stress this Enuff but Read this Entire Post, when done read it again, and finally read it once more for good measure

ok all. this is dirtycow exploit for the t-mobile k428 - works on the 10g firmware(works for the metropcs ms428 as well - Must have 10c kdz flashed first). the exploit method is almost the same as the v20
i have personally done this multiple times on my t-mobile k10 without issues to make sure it is 100% working

all the needed files you need are in this rar. just extract it to the root of your C drive Download Me
this requires an unlocked bootloader and on the t-mo variant it's very easy to do. check this forum. you'll find instructions on how to do it

Now lets get started!!

copy the supersu file to your sdcard

open a command prompt window.

now copy and paste each line except the lines surrounded by "< >"

adb push dirtycow /data/local/tmp
adb push recowvery-applypatch /data/local/tmp
adb push recowvery-app_process32 /data/local/tmp
adb push recowvery-run-as /data/local/tmp
adb push twrp-3.1.0-0.img /sdcard/twrp.img
adb shell
cd /data/local/tmp
chmod 0777 *
./dirtycow /system/bin/applypatch recowvery-applypatch
"<Note! wait for to finish>"
./dirtycow /system/bin/app_process32 recowvery-app_process32
"<Note! wait for to finish, it should appear to crash, however
the crash will not happen, you have to force the crash.
to do this wait for the exploit to finish. now press and hold
the power button until you see the t-mo logo screen and hear
the jingle. now it's crashed and you can continue onto the next
step>"
exit
adb logcat -s recowvery
"<wait for it to tell you it was successful - Then Press>"
"[CTRL+C]"
adb shell reboot recovery
"<wait for phone to boot up again, your recovery will be reflashed to stock>"
adb shell
getenforce
"<it should say Permissive>"
cd /data/local/tmp
./dirtycow /system/bin/run-as recowvery-run-as
run-as exec ./recowvery-applypatch boot
"<wait for it to flash your boot image this time>"
run-as su
run-as exec dd if=/sdcard/twrp.img of=/dev/block/bootdevice/by-name/recovery
"<wait for it to complete>"
reboot recovery
"<once in twrp do the following>"
click install
select supersu 2.79-sr3.zip
reboot
setup your phone and enjoy

thats it. enjoy root!

Stock Deodexed Roms

Features:

Deodexed
Debloated(if thats what you want to call it) i've removed what i don't want so
Magisk v12.0 with magisk manager 4.3.0
Note! (make sure to enable hide magisk in magisk manager settings) - pass's safetynet check - android pay will work along with pokemon go and any other apps that look for root
Busybox 1.26.2 installed by default
dolby atmos 6.5
Viper4Android 2.5.0.5
Includes a custom app for a reboot menu that ties into the actual power button

As always to install either rom you'll want to wipe system, data, dalvik and cache(this is normal for any rom)

T-Mobile Rom
T-Mobile K10 K428sg 10h rom - Weather Widget has been removed due to deodexing issues. PLZ use an Alternate Weather Widget
K428sg10h Removed Files

MetroPCS Rom
MetroPCS K10 ms428 10h rom - Weather Widget has been removed due to deodexing issues. PLZ use an Alternate Weather Widget
MetroPCS Removed Files

for anyone interested you can freely use these rom as a starting point base for a custom rom.

Thanks to @pvineeth97 - for working twrp, @Chainfire - for supersu, @topjohnwu - for magisk, and everyone else i forgot to mention. sorry guys i'm tired!
The Following 5 Users Say Thank You to OvrDriVE For This Useful Post: [ View ] Gift OvrDriVE Ad-Free
 
 
1st April 2017, 08:25 AM |#2  
OvrDriVE's Avatar
OP Recognized Contributor
Flag Fresno
Thanks Meter: 11,743
 
Donate to Me
More
reserved 1
1st April 2017, 08:53 AM |#3  
pvineeth97's Avatar
Senior Member
Hyderabad
Thanks Meter: 502
 
Donate to Me
More
Quote:
Originally Posted by OvrDriVE

reserved 1

I just didn't remember that dirtycow could be used to root MetroPCS 428! Thanks for the guide
1st April 2017, 08:57 AM |#4  
OvrDriVE's Avatar
OP Recognized Contributor
Flag Fresno
Thanks Meter: 11,743
 
Donate to Me
More
actually the metropcs twrp you did works like a charm on the t-mo 428. ty for that btw.
i wasn't sure if this worked for metropcs or not but since you say it does i'll mention it as well
1st April 2017, 10:44 AM |#5  
pvineeth97's Avatar
Senior Member
Hyderabad
Thanks Meter: 502
 
Donate to Me
More
Quote:
Originally Posted by OvrDriVE

actually the metropcs twrp you did works like a charm on the t-mo 428. ty for that btw.
i wasn't sure if this worked for metropcs or not but since you say it does i'll mention it as well

I don't have a MetroPCS 428 phone but I compiled TWRP for it. I happy it works for you guys

---------- Post added at 03:14 PM ---------- Previous post was at 02:47 PM ----------


@OvrDriVE
Edit the guide properly whenever you are free.

Can you contact me on hangouts: vineeth.pen@gmail.com.
1st April 2017, 05:04 PM |#6  
GuyInDogSuit's Avatar
Senior Member
Flag Antelope, CA
Thanks Meter: 934
 
Donate to Me
More
On the very first command I'm already facing issues:

Code:
adb push dirtycow /data/local/tmp
adb: error: cannot stat 'dirtycow': No such file or directory
1st April 2017, 05:10 PM |#7  
OvrDriVE's Avatar
OP Recognized Contributor
Flag Fresno
Thanks Meter: 11,743
 
Donate to Me
More
Quote:
Originally Posted by GuyInDogSuit

On the very first command I'm already facing issues:

Code:
adb push dirtycow /data/local/tmp
adb: error: cannot stat 'dirtycow': No such file or directory

make sure your running cmd from the adb dir. also you need to make sure usb debugging is enabled in dev options along with oem unlock
1st April 2017, 05:14 PM |#8  
GuyInDogSuit's Avatar
Senior Member
Flag Antelope, CA
Thanks Meter: 934
 
Donate to Me
More
Quote:
Originally Posted by OvrDriVE

make sure your running cmd from the adb dir. also you need to make sure usb debugging is enabled in dev options along with oem unlock

I am running it from the adb directory. And USB debugging and OEM unlock are enabled.
1st April 2017, 05:15 PM |#9  
OvrDriVE's Avatar
OP Recognized Contributor
Flag Fresno
Thanks Meter: 11,743
 
Donate to Me
More
Quote:
Originally Posted by GuyInDogSuit

I am running it from the adb directory. And USB debugging and OEM unlock are enabled.

then it should work as the file is in that folder if you grabbed my zip at the top of OP
1st April 2017, 05:20 PM |#10  
GuyInDogSuit's Avatar
Senior Member
Flag Antelope, CA
Thanks Meter: 934
 
Donate to Me
More
Quote:
Originally Posted by OvrDriVE

then it should work as the file is in that folder if you grabbed my zip at the top of OP

I got it! The "dirtycow" file was being removed by ESET. You should add a disclaimer in the OP about it possibly being flagged by antivirus software.
1st April 2017, 05:26 PM |#11  
OvrDriVE's Avatar
OP Recognized Contributor
Flag Fresno
Thanks Meter: 11,743
 
Donate to Me
More
Quote:
Originally Posted by GuyInDogSuit

I got it! The "dirtycow" file was being removed by ESET. You should add a disclaimer in the OP about it possibly being flagged by antivirus software.

yeah it's a false positive. anyway disclaimer added.
Post Reply Subscribe to Thread

Guest Quick Reply (no urls or BBcode)
Message:
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes