Big thanks to tereg for the toolkit and the guys who rooted the EVO with a file write/chmod race condition exploit that gave me the idea for this.
jcase noticed that a race isn't actually necessary to exploit the chmod 777 on the file I've been working with, simplifying the script alot.
I used...