FORUMS
Remove All Ads from XDA
Post Reply Email Thread
Background

Starting with the GS4, Samsung removed the ability to see SysScope status. As you S3 users may know, this is the "Root Detection" software that runs on devices. It has 3 status's, Scanning, Normal, and modified. The results of this status gets sent off to the RIL layer as the form of an AT command (AT+SYSSCOPE) in order to be remotely queried by whoever.

What does Sysscope Query?

Files-

/proc/stat - not sure why, but it does
/proc/cmdline - checks for authorized kernels
/proc/task - not sure why
busybox - in any classpath
su - in any classpath
/proc/mounts - Checks if /system is in RW mode
Props-

ro.csc.sales_code - Read my rant in S3 dev section, DO NOT CHANGE THIS VALUE TO LOLs
ril.sales_code - See above
ro.secure - adb props
ro.debuggable - adb props
Does this App let me change status?
NO. This app does not modify any stock functionality it just gives you the ability to see what status you are passing. You will see what your Carrier/whoever else knows about the SysScope status of your device.

Using App:

Test 1:
  1. First push apk to SYSTEM/APP. This is important and I do not believe it will work in /data/app.
  2. Open the app. Go to menu -> Preferences. Turn on "Start on SysScope Event". This will automagically open the app whenever an event is received.
  3. Reboot the device. Wait about 30 seconds. The app should open and show a response.
If the app did not start at all after boot, you likely have a -1 and failed SysScope with a modified.
*Once it is queried you can turn off the SysScope preference*

Test 2:
  1. Click the read button and allow root access.


What the status's mean: (GS4 specific, app works on GS3 just do not know status's)
-1 means scanning. If the state stays at a -1 for more than 120 seconds, it means the device is modified (Sysscope was removed)
0 is also a failure. It means sysscope was removed
1 is a Status of NORMAL. This is what stock roms will return
2 is a status of MODIFIED.
If the app did not start at all after boot, you likely have a -1 and failed SysScope with a modified.

Thanks
Eschelon/Ziggy471/NxtGenCowboy/Virus for testing/being awesome!
See if you can find the hidden Ziggy easter egg
Attached Files
File Type: apk Treve.SysScopeScanner_v1.apk - [Click for QR Code] (68.8 KB, 2669 views)
The Following 11 Users Say Thank You to TrevE For This Useful Post: [ View ] Gift TrevE Ad-Free
15th June 2013, 03:32 AM |#2  
eschelon's Avatar
Retired Recognized Developer
Thanks Meter: 8,968
 
Donate to Me
More
Mines
The Following 2 Users Say Thank You to eschelon For This Useful Post: [ View ] Gift eschelon Ad-Free
15th June 2013, 05:43 AM |#3  
Senior Member
Thanks Meter: 65
 
More
Thank you for all your hard work and meticulous attention to privacy! It is much appreciated, especially in these times.
The Following User Says Thank You to techusky For This Useful Post: [ View ] Gift techusky Ad-Free
15th June 2013, 08:46 PM |#4  
CPA Poke's Avatar
Senior Member
Flag Tulsa, OK
Thanks Meter: 3,364
 
Donate to Me
More
Just to clarify, is the purpose of this to help anyone who is working on a workaround to "fool" the SysScope app into thinking that the device is unrooted/unmodified (ie to remove the custom padlock splash screen at boot)?
The Following User Says Thank You to CPA Poke For This Useful Post: [ View ] Gift CPA Poke Ad-Free
16th June 2013, 12:12 AM |#5  
OP Retired Recognized Developer
Thanks Meter: 3,673
 
Donate to Me
More
Quote:
Originally Posted by CPA Poke

Just to clarify, is the purpose of this to help anyone who is working on a workaround to "fool" the SysScope app into thinking that the device is unrooted/unmodified (ie to remove the custom padlock splash screen at boot)?

Yep, we like giving users visibility to see mods done like this so they do not have to take dev's words for it. Always a fan of giving everyone a way to test for themselves. The S3 had a menu item right in settings, this brings back that removed functionality.
16th June 2013, 02:48 AM |#6  
CPA Poke's Avatar
Senior Member
Flag Tulsa, OK
Thanks Meter: 3,364
 
Donate to Me
More
Quote:
Originally Posted by TrevE

Yep, we like giving users visibility to see mods done like this so they do not have to take dev's words for it. Always a fan of giving everyone a way to test for themselves. The S3 had a menu item right in settings, this brings back that removed functionality.

Awesome, I was hoping that's what it was for
5th June 2014, 02:32 PM |#7  
E:V:A's Avatar
Recognized Developer
Flag -∇ϕ
Thanks Meter: 2,170
 
More
@TrevE Sorry to revive old thread, but did you reverse this thing? What is the code used for the AT, and where can I find it? What other binaries are involved in this. I'm on 4.2.2...
11th January 2016, 09:38 PM |#8  
Junior Member
Thanks Meter: 0
 
More
Hi TrevE can I get the AT code as well please? Maybe you could pm it to me? Thanks.
12th January 2016, 05:58 AM |#9  
Senior Member
Thanks Meter: 26
 
More
Can sysscope be the reason why backup manager plus will not work anymore? This could help
Post Reply Subscribe to Thread

Guest Quick Reply (no urls or BBcode)
Message:
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes