[Guide] Firewater S-Off

Status
Not open for further replies.
Search This thread

hyrax1994

Senior Member
Nov 12, 2013
74
103
Disclaimer

License: Firewater S-Off is the result of many hours of hard work by beaups and fuses. The firewater binaries you download may not be shared, rehosted, bat’d, integrated into a one-click, repackaged, hotlinked, or otherwise distributed or reused. The source code and methods in firewater are closed and private.
Temproot is a hack-up build of android_run_root_shell which appears to be a work of hikezoe and fi01. Original source can be downloaded HERE, our modified mess will be made available on this website soon.
This software is provided free of charge for personal non-commercial use. For commercial use or redistribution a WRITTEN agreement with the authors is required.

Support: support for firewater s-off is available at #firewater on the freenode and andirc networks. Please make sure you meet all of the requirements before contacting support.

Official website: http://firewater-soff.com/


Welcome to Firewater

What firewater can do for you:
  • S-Off your HTC device
  • Unlock yout bootloader

There are two methods which can be used to achieve S-Off:
  • Method n.1: to be used with and HTCDev unlocked/rooted device;
  • Method n.2: temp-root method, to be used if you don't want to unlock your device through HTCDev (it may not work with all devices);

Prerequisites

  • Working adb on your PC (Windows, Linux, OSX, etc. are all supported);
  • HTC drivers installed and working
  • HTC sync removed (not closed - REMOVED)
  • All other phone software removed or disabled (Samsung Kies, PDANet, etc.)
  • A working internet connection on your device (Wifi, 3G, 4G, etc. are all supported). There is no way around this requirement, don’t ask;
  • USB debugging enabled on your device;
  • Your device must be HTCDEV unlocked/rooted or have a working temproot. A temproot that works with many modern (not all) HTC devices is provided below;
  • Do not attempt to run firewater from a terminal emulator on your device. You MUST use adb along with a PC;
  • A supported device. Firewater *should* work with most modern QUALCOMM based HTC devices, including (but not limited to) the HTC One, HTC Droid DNA, HTC One S, HTC One Max and many others.

Instructions: method n.1 (normal, rooted device method)

Once you confirm you meet the above pre-requisites, it’s time to get started.

  1. Ensure device is booted to android with usb debugging enabled
  2. USB 2.0 ports are preferred. You should not be connected using any hubs which may cause connectivity issues;
  3. Ensure that lock screen security is disabled on your device (no passcode lock, no pattern lock, no face lock);
  4. Download Firewater Search the download from the official site;
  5. Push, prepare and execute Firewater:

    Code:
    adb reboot       (<--- important!!!!)
    adb wait-for-device push firewater /data/local/tmp
    adb shell
    su
    chmod 755 /data/local/tmp/firewater
    /data/local/tmp/firewater
  6. Agree to the terms and conditions you are prompted with;
  7. Allow the exploit to do its work;
  8. Profit.

Instructions: method n.2 (temp-root method)

This method may allow firewater to work on a fully stock/HTCDev locked device. This method is being provided as a convenience. Do NOT seek support if this temproot does not work for you.

  1. Ensure device is booted to android with usb debugging enabled.
  2. USB 2.0 ports are preferred. You should not be connected using any hubs which may cause connectivity issues;
  3. Ensure that lock screen security is disabled on your device (no passcode lock, no pattern lock, no face lock);
  4. Download firewater Search the download from the official site;
  5. Download temproot Search the download from the official site;
  6. Push, prepare and execute temproot and Firewater:

    Code:
    adb reboot       (<--- important!!!!)
    adb wait-for-device push firewater /data/local/tmp
    adb push temproot /data/local/tmp
    adb shell
    chmod 755 /data/local/tmp/temproot
    chmod 755 /data/local/tmp/firewater
    /data/local/tmp/temproot
    /data/local/tmp/firewater
  7. Agree to the terms and conditions you are prompted with;
  8. Allow the exploit to do its work;
  9. Profit.

Donate
 
Last edited:

hyrax1994

Senior Member
Nov 12, 2013
74
103
I tried to use Firewater S-Off on my HTC One (M7-UL, S-On, CID T-Mob101, Android 4.3 and Hboot 1.55; locked bootloader, never unlocked through HTCDev). It worked very well: after 5-10 minutes, it had S-Off and an unlocked bootloader. ;)

Positive experiences from other users

  • russel5: "On 4.19.401.8 and HBOOT 1.56, 30 seconds and ---> S-OFF!";
  • ronnbon: "Used this yesterday with a German 02___102 device and hboot 1.55. Worked smooth and without any problems. Thank you.";
  • samflorin: "Worked for me on stock J15 4.2.2. No issues, used a mac in the process.";
  • backfromthestorm: "This is amazing. Couldn't unlock bootloader due to a partition issue and device locked and s-on. Thanks to this, unlocked and s-off. Didn't think this phone would get rooted again. Super job."
  • Maduro78: "4.3 hboot 1.55 firewater unlocked bootloader and s-off via mac. Installed twrp su and now running custom ROM. Thank you firewater was starting to think this phone would never run a custom rom."
  • bamps: "Amazing. Works like a charm. Was already unlocked with HTCdev and on ARHD 51.0. 30sec and S-off."
  • nobbysheep: "That seems to be the case - dev unlocked + 4.4.2 + 1.56 hboot + firewater = s-off. Many thanks."
  • Docarut: "Thank You! Worked like a charm under a minute!"
  • KiraYahiroz: "Worked very well, the temproot did take the whole 10 minutes, but after that firewater S-OFF'd on the first bottle (was on Android 4.3). Thanks!"
  • killerbie: "Just tried it with my dev unlocked phone, was on the latest elegancia. It worked great!!"
  • Pinak.ahuja: "Used the temp root method on my stock htc one with 4.3 and hboot 1.55. Worked like a charm."
 
Last edited:
  • Like
Reactions: rootlinux

hyrax1994

Senior Member
Nov 12, 2013
74
103
How is this different from rumrunner?

I don't really know, but I think Firewater should work for those who couldn't achieve S-Off using Rumrunner. It also provides instructions to gain S-Off using a temp-root method (which worked for me), while I've never found that with Rumrunner.
 

cchant

Senior Member
May 11, 2010
1,037
161
Rumrunner couldn't provide s-off for firmwares 1.54 and 1.55 on the HTC one. Firewater can

Sent from my One using xda app-developers app
 

juergenn

Senior Member
Apr 15, 2008
156
11
Temp root seems to work..... but firewater exits after 12 bottels....i have to reboot and try again
Everytime the same
Any Idea?
 
Last edited:

FitAmp

Senior Member
Mar 21, 2012
1,424
681
26
Terrace
By the looks of the instructions it seems its similar to revone. The binary is pushed onto the device and run from there via adb shell. A good alternative imo especially for people that have problems using rumrunner on their pc's

Sent from my HTC One using Tapatalk
 

juergenn

Senior Member
Apr 15, 2008
156
11
okay i didn't sucseed....
tried it with windows 8.1 and windows xp....
still the same....
stock htc one cid 102 Android 4.3
Hboot 1.55 never unlocked

this is what i get

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\one>adb reboot

C:\one>adb wait-for-device push firewater /data/local/tmp
protocol failure

C:\one>adb wait-for-device push firewater /data/local/tmp
2027 KB/s (4347896 bytes in 2.093s)

C:\one>adb push temproot /data/local/tmp
535 KB/s (68576 bytes in 0.125s)

C:\one>adb shell
[email protected]:/ $ chmod 755 /data/local/tmp/temproot
chmod 755 /data/local/tmp/temproot
[email protected]:/ $ chmod 755 /data/local/tmp/firewater
chmod 755 /data/local/tmp/firewater
[email protected]:/ $ /data/local/tmp/temproot
/data/local/tmp/temproot


run_root_shell, thanks fi01 - https://github.com/android-rooting-tools/android_r
un_root_shell

[*] Attempting to acquire root. This will take 5-10 minutes, be patient

[*] Root acquired.
[*] Thanks, HTC, for leaving this exploit open for such a ridiculously long time
!
[email protected]:/ # /data/local/tmp/firewater
/data/local/tmp/firewater


==================== firewater S-OFF 0.2.0 ==============================

firewater S-OFF comes with NO WARRANTY (express or implied)
and NO GUARANTEE OF FITNESS for any particular task.
We have made every effort we can to make this a safe process for users
however the authors disclaim any liability for damage to your phone
or other materials or devices used during this process.

The entire risk of running firewater S-OFF lies with you, the user.
By using this software you acknowledge and accept that the authors
are not liable for any loss, material or otherwise howsoever caused.

firewater S-OFF may not be rehosted, repackaged, one-clicked, etc.
support is available @ #firewater on the freenode and andirc networks
support is much faster there vs.posting helpme threads on xda etc

Do not operate a motor vehicle after interacting with firewater
Do not inhale firewater or allow firewater to come in contact with eyes
firewater is best served at extremely cold temperatures
firewater has been known to cause temporary lapses in judgement
DO NOT TAUNT FIREWATER, YOU'VE BEEN WARNED

=========================================================================



Do you understand the implications of these warnings?

(Yes/No)
Yes
Yes

!!If firewater hangs for more than 2 minutes or device enters qhusb mode, ho

!!If firewater hangs for more than 2 minutes or device enters qhusb mode, ho

!!If firewater hangs for more than 2 minutes or device enters qhusb mode, ho
ld power for 60 seconds !!
=========================================================================
preparing, one moment


The first bottle is open
chugging..........
whelp, that bottle is empty, opening bottle 2
chugging..........
whelp, that bottle is empty, opening bottle 3
chugging..........
whelp, that bottle is empty, opening bottle 4
chugging..........
whelp, that bottle is empty, opening bottle 5
chugging..........
whelp, that bottle is empty, opening bottle 6
chugging..........
whelp, that bottle is empty, opening bottle 7
chugging..........
whelp, that bottle is empty, opening bottle 8
chugging..........
whelp, that bottle is empty, opening bottle 9
chugging..........
whelp, that bottle is empty, opening bottle 10
chugging..........
whelp, that bottle is empty, opening bottle 11
chugging..........
whelp, that bottle is empty, opening bottle 12

all out of bottles and still no buzz :( reboot device by holding power and
try again

[email protected]:/ #
 
Last edited:

EgonLebt

Member
Sep 9, 2007
18
0
no luck on my device, same reult as juergenn

International/German HTC One 102 device with Android 4.3 (3.62.401.1) and HBOOT 1.55
 

ronnbon

Senior Member
Aug 15, 2010
412
102
Hamburg
Used this yesterday with a German 02___102 device and hboot 1.55. Worked smooth and without any problems.Thank you.
 

Steve1207

Senior Member
Sep 12, 2010
296
163
Budapest
Hey guys!

On my device (4.19.401.8 and HBOOT 1.56) not working. Untouched, no root, no unlock htcdev and anything else.
Try methode 2, but in the shell failed the temproot process.

Win8.1 x64, HTC drivers, ADB drivers installed. Which system using and whats the problem with the temproot? I think we mess up anything, not the methode is wrong.
 

samflorin

Senior Member
Apr 27, 2013
284
113
Worked for me on stock J15 4.2.2. No issues, used a mac in the process.

Sent from my Nexus 5 using Tapatalk
 

Zirowe

Senior Member
Jun 17, 2009
132
10
Budapest
Htc One stock locked 4.4.2 cid htc_032 failed to get temproot.

[email protected]:/ $ chmod 755 /data/local/tmp/temproot
chmod 755 /data/local/tmp/temproot
[email protected]:/ $ chmod 755 /data/local/tmp/firewater
chmod 755 /data/local/tmp/firewater
[email protected]:/ $ /data/local/tmp/temproot
/data/local/tmp/temproot


run_root_shell, thanks fi01 - https://github.com/android-rooting-tools/android_
un_root_shell

[*] Attempting to acquire root. This will take 5-10 minutes, be patient
error in setsockopt().
Failed to get prepare_kernel_cred address.
Failed to get commit_creds address.
Failed to get ptmx_fops address.
Failed to setup variables.
1|[email protected]:/ $ /data/local/tmp/firewater
/data/local/tmp/firewater
error, run firewater as root. su or FU!!!!!!
1|[email protected]:/ $
 

samflorin

Senior Member
Apr 27, 2013
284
113
So it seems the root exploit was fixed in 4.4.2. Only option i see is be htc dev unlocked and rooted so that you can use option 1.
 
Status
Not open for further replies.

Top Liked Posts

  • There are no posts matching your filters.
  • 96
    Disclaimer

    License: Firewater S-Off is the result of many hours of hard work by beaups and fuses. The firewater binaries you download may not be shared, rehosted, bat’d, integrated into a one-click, repackaged, hotlinked, or otherwise distributed or reused. The source code and methods in firewater are closed and private.
    Temproot is a hack-up build of android_run_root_shell which appears to be a work of hikezoe and fi01. Original source can be downloaded HERE, our modified mess will be made available on this website soon.
    This software is provided free of charge for personal non-commercial use. For commercial use or redistribution a WRITTEN agreement with the authors is required.

    Support: support for firewater s-off is available at #firewater on the freenode and andirc networks. Please make sure you meet all of the requirements before contacting support.

    Official website: http://firewater-soff.com/


    Welcome to Firewater

    What firewater can do for you:
    • S-Off your HTC device
    • Unlock yout bootloader

    There are two methods which can be used to achieve S-Off:
    • Method n.1: to be used with and HTCDev unlocked/rooted device;
    • Method n.2: temp-root method, to be used if you don't want to unlock your device through HTCDev (it may not work with all devices);

    Prerequisites

    • Working adb on your PC (Windows, Linux, OSX, etc. are all supported);
    • HTC drivers installed and working
    • HTC sync removed (not closed - REMOVED)
    • All other phone software removed or disabled (Samsung Kies, PDANet, etc.)
    • A working internet connection on your device (Wifi, 3G, 4G, etc. are all supported). There is no way around this requirement, don’t ask;
    • USB debugging enabled on your device;
    • Your device must be HTCDEV unlocked/rooted or have a working temproot. A temproot that works with many modern (not all) HTC devices is provided below;
    • Do not attempt to run firewater from a terminal emulator on your device. You MUST use adb along with a PC;
    • A supported device. Firewater *should* work with most modern QUALCOMM based HTC devices, including (but not limited to) the HTC One, HTC Droid DNA, HTC One S, HTC One Max and many others.

    Instructions: method n.1 (normal, rooted device method)

    Once you confirm you meet the above pre-requisites, it’s time to get started.

    1. Ensure device is booted to android with usb debugging enabled
    2. USB 2.0 ports are preferred. You should not be connected using any hubs which may cause connectivity issues;
    3. Ensure that lock screen security is disabled on your device (no passcode lock, no pattern lock, no face lock);
    4. Download Firewater Search the download from the official site;
    5. Push, prepare and execute Firewater:

      Code:
      adb reboot       (<--- important!!!!)
      adb wait-for-device push firewater /data/local/tmp
      adb shell
      su
      chmod 755 /data/local/tmp/firewater
      /data/local/tmp/firewater
    6. Agree to the terms and conditions you are prompted with;
    7. Allow the exploit to do its work;
    8. Profit.

    Instructions: method n.2 (temp-root method)

    This method may allow firewater to work on a fully stock/HTCDev locked device. This method is being provided as a convenience. Do NOT seek support if this temproot does not work for you.

    1. Ensure device is booted to android with usb debugging enabled.
    2. USB 2.0 ports are preferred. You should not be connected using any hubs which may cause connectivity issues;
    3. Ensure that lock screen security is disabled on your device (no passcode lock, no pattern lock, no face lock);
    4. Download firewater Search the download from the official site;
    5. Download temproot Search the download from the official site;
    6. Push, prepare and execute temproot and Firewater:

      Code:
      adb reboot       (<--- important!!!!)
      adb wait-for-device push firewater /data/local/tmp
      adb push temproot /data/local/tmp
      adb shell
      chmod 755 /data/local/tmp/temproot
      chmod 755 /data/local/tmp/firewater
      /data/local/tmp/temproot
      /data/local/tmp/firewater
    7. Agree to the terms and conditions you are prompted with;
    8. Allow the exploit to do its work;
    9. Profit.

    Donate
    15
    Wishful thinking...

    However, the m7 is getting older by the minute so I doubt any new exploit is gonna be worked on. Unless of course as I said before some dev randomly stumbled upon it.

    Sad but true.


    Sent from my baked potato with blue cheese

    Its coming, at some point when time allows.

    Sent from my One using XDA Premium 4 mobile app
    13
    Tried many roms and couldn't get S-OFF working.... till now.

    What I used:
    Latest CM11 nightly (from April 1th)
    teaMseven_v57 Kernel
    Enable su for adb in cyanogen settings and enable the usual stuff in SuperSU
    .... worked for me after the 1st bottle :)
    6
    If it's discontinued should we not close this thread now? I am getting notifications from this thread.

    Good idea...

    Thread closed

    Members wishing to S-Off are cordially directed to the XDA Sunshine THREAD
    5
    Where in the world do these crazy theories come from

    Sent from my HTC6500LVW using Tapatalk