[Root][JB 4.2] Root your Nexus 7 without unlocking bootloader. (djrbliss motochopper)

Search This thread

bert73

Senior Member
Jan 20, 2011
62
9
My tf300t was rooted in one minute but on the nexus I had to search for the correct drivers. After installing them it worked fine.
I used windows 7 64bit. Both tablets on the latest firmware.
 

GedBlake

Senior Member
Jan 5, 2013
889
604
Ashton-under-Lyne, Manchester, UK
Is there a definite way to completely unroot? I need to know in case something goes wrong or I need to sell the Nexus 7? Just asking...

Well, there's a settings option in Chainfire's SuperSU app (which this 'exploit' installs), for Full Unroot - Cleanup for permanent unroot.

Root, by definition, would give you access to /system/bin or /system/xbin... and with a root compliant file manager, you could manually delete the SU binary yourself... and I assume the setting in Chainfire's app does something similar.

-----------

Besides, it's UNLOCKING THE BOOTLOADER (a prerequisite for the more traditional method of ROOTING), that technically breaches your warranty, not ROOTING per se.

With this 'exploit', the BOOTLOADER remains locked, thus no violation of warranty.

Rgrds,
Ged.
 
Last edited:

nhshah7

Senior Member
Feb 14, 2009
2,069
568
Boston
Is there a definite way to completely unroot? I need to know in case something goes wrong or I need to sell the Nexus 7? Just asking...

There are no risks to rooting unless you mess something up using a file explorer to delete the wrong files or an app to adjust the cpu. As GedBlake mentioned, it doesn't do anything to your warranty and is no risk if you don't use it but it's still installed.

Sent from my HTC One X using xda premium
 
  • Like
Reactions: GedBlake

GedBlake

Senior Member
Jan 5, 2013
889
604
Ashton-under-Lyne, Manchester, UK
Just had another tinker with this exploit...
(I fastboot flashed back to stock, and relocked the bootloader beforehand).

...and I can confirm (again) that not only does it work... but you can reverse it really easily...

...by going to the app, SuperSU... and then SETTINGS>>FULL UNROOT.

Upon reboot, the device is fully unrooted.

--------

And as with the normal method of ROOTING, you can also backup your root (SU binary) using Voodoo OTA Rootkeeper...

http://play.google.com/store/apps/details?id=org.projectvoodoo.otarootkeeper&hl=en

Upon (deliberate) loss of ROOT, I was able to restore ROOT, using this app.

Further, and with relative ease, I was also able to change over from Chainfire's ROOT to Koush's (the CWM guy) ROOT...

http://play.google.com/store/apps/details?id=com.koushikdutta.superuser&hl=en.

-------

I have thrown every ROOT app I can think of at it... and it just works.

(And unrooting works, as described earlier.)

And the beauty of it is... if you do loose ROOT (either by accident or design)... you can easily acquire it again, just by re-running the script.... and WITH NO LOSS OF DATA.

-------

Rooting doesn't get any easier than this...

I 'tip my hat' in appreciation and respect... in the general direction of nhshah7 for making this exploit available.

Rgrds,
Ged.
 
Last edited:

nhshah7

Senior Member
Feb 14, 2009
2,069
568
Boston
I 'tip my hat' in appreciation and respect... in the general direction of nhshah7 for making this exploit available.

Rgrds,
Ged.

Thanks for the gratitude, but literally all of the hard work was done by djrbliss and I simply made a tweak to it. I'm glad you're enjoying it. I'll add your info to the OP next week when I'm back at a PC. Enjoy :)

Sent from my HTC One X using xda premium
 

ando1993

Member
Nov 3, 2012
5
1
wow. this method seems attractive. just a quick question before i go back to stock rom and try this. am i able to install TWRP and install customs roms by using this root method?
 

GedBlake

Senior Member
Jan 5, 2013
889
604
Ashton-under-Lyne, Manchester, UK
wow. this method seems attractive. just a quick question before i go back to stock rom and try this. am i able to install TWRP and install customs roms by using this root method?

No. If the BOOTLOADER is locked, FASTBOOT won't work.

So, for example...

Code:
fastboot flash recovery twrp_recovery.img

...would return an error. And by extension, no custom ROMs or kernels can be flashed.

This is ROOT only, by 'exploit'.

Rgrds,
Ged.
 

SW686

Member
Dec 17, 2012
21
32
just a quick question before i go back to stock rom and try this. am i able to install TWRP and install customs roms by using this root method?

Oddly enough, at one point on my grouper I was able to "fastboot oem unlock", install CWM + CM10.1, "fastboot oem lock", and boot the modified image. Others report similar experiences. It is somewhat surprising that a locked bootloader would execute a boot.img that lacks an official signature; this would be a big no-no on most bootloader locked phones.

This implies that you could probably root the tablet using motochopper or kernelchopper, then install a custom recovery image (via "dd" not fastboot) which will be usable without ever unlocking the bootloader.

Try it and see?
 

Top Liked Posts

  • There are no posts matching your filters.
  • 88
    Hi all,
    I just rooted a nexus 7 using the motochopper toolkit made by djrbliss. He gets full credit for the method, I just modified it to work for the N7 by updating the adb files within it (tested on Win7 64-bit, N7 wifi). Oh, and if something breaks, it's not my fault :)

    (original thread: http://www.droidrzr.com/index.php/t...id-root-exploit/page__pid__244281#entry244281)


    Here's what you'll need:

    Nexus 7 Drivers installed (try the universal naked drivers if you have issues with this. Search google if ADB/motochopper cannot see your device)
    (Android SDK is recommended if you need to troubleshoot the nexus connecting, but not necessary.)
    Developer options enabled, USB debugging enabled.
    The attached zip.

    Steps:
    1. Download and unzip the folder within the attached file.
    2. Make sure USB debugging is enabled. When you plug the tablet into the computer, the status bar of the tablet should say "USB debugging connected". If it doesn't, see below.
    3. WITH YOUR SCREEN TURNED ON, run the appropriate script from the motochopper folder. (Run.bat for windows, I think run.sh for Mac and Linux).
    4. You may be prompted by the tablet to approve a connection by the computer (RSA key, etc.). Accept this!
    5. If all is fine and dandy here, it will see your device and start to push files to it. When it tries to push the SuperSU.apk, your tablet will ask you to Approve something for tracking apk's/apps installed over ADB. Click yes or accept.
    6. The script (on your computer) should prompt you to reboot. Hit any key and you should be rooted when it starts up!
    Note: if your computer isn't able to see the device, try setting the device to PTP from MTP. This seems to work for some.


    Need to enable USB Debugging?
    1. Make sure you are in the main account.
    2. Go to settings, about, and scroll to the bottom.
    3. Tap on the "build number" entry 7 times.
    4. Exit out of the 'about' and go to Developer options.
    5. Check "USB debugging".

    Since I do NOT have a nexus 7 of my own, I can't fully support this but I'll do my best. I thought it would be great to share this with the nexus community for anyone (like me) that doesn't want to unlock their device in order to root. Like I mentioned before, all credit goes to djrbliss.

    Enjoy!

    Edit: some people are asking why this is useful. If you want root, unlocking the bootloader to gain root erases your device. This method does not.

    Edit 2: users report that it does not work on nexus 10 but does work on nexus 4.


    Indeed it would be amazing... and very useful... but as I've indicated in a previous post, 4.3 implements a new security model designed to protect itself from exploits (ostensibly of the malicious kind), so it's very unlikely this (motochopper) or any other exploit in the future will work.

    If you want root on 4.3, you're going to have to do it the old fashioned way...

    1) Unlock the bootloader with fastboot.
    2) Fastboot flash a Custom Recovery (CWM or TWRP).
    3) Using that recovery, flash Chainfire's modified SuperSU root updater.

    Rgrds,
    Ged.


    Update 3/2014. This method is outdated and no longer works for any current version of android (4.3+)
    6
    Thank you so much for your replies still run windows xp will that still be ok to root with please.

    Thank You
    :)

    As a lowly user, I'm the wrong one to ask. As a Windows admin, I've got a bit more experience. The tools used here on the Windows side look pretty basic to me. If you can find the right USB driver and establish communications, I can't see why XP wouldn't be just fine. The USB driver has been the thing that has tripped me and several other users up. Get the right one for the right device. Just because Windows sees your device doesn't mean the root process will work. There's some other API involved.

    ---------- Post added at 11:48 AM ---------- Previous post was at 11:08 AM ----------

    Now that I've hit my 10 post count legitimately and no one can complain, I wanted to re-share some sources for USB drivers. Myself and several other users have been bitten using nhshah7's awesome modification when it hangs, apparently unable to communicate with our Nexus 7. In every case the problem has been a bad USB driver.

    Myself and at least one other have solved this by installing PDANET+ which includes it's own USB drivers. Follow the instructions here:

    How To Install Drivers For Any Android Device

    And get PDANET here:

    http://junefabrics.com/android/downloadold.php

    But the drivers included didn't work for my older Galaxy Nexus. nhshah7 recommends using the USB drivers included in the full Android SDK. But if you hunt around, you can find lists of manufacturer USB drivers. A couple I found are:

    http://www.teamandroid.com/download-android-usb-drivers


    http://dottech.org/26188/usb-adb-and-fastboot-drivers-for-windows-for-all-android-phones/

    Hope this helps the next person to get a hung batch file.
    3
    Just had another tinker with this exploit...
    (I fastboot flashed back to stock, and relocked the bootloader beforehand).

    ...and I can confirm (again) that not only does it work... but you can reverse it really easily...

    ...by going to the app, SuperSU... and then SETTINGS>>FULL UNROOT.

    Upon reboot, the device is fully unrooted.

    --------

    And as with the normal method of ROOTING, you can also backup your root (SU binary) using Voodoo OTA Rootkeeper...

    http://play.google.com/store/apps/details?id=org.projectvoodoo.otarootkeeper&hl=en

    Upon (deliberate) loss of ROOT, I was able to restore ROOT, using this app.

    Further, and with relative ease, I was also able to change over from Chainfire's ROOT to Koush's (the CWM guy) ROOT...

    http://play.google.com/store/apps/details?id=com.koushikdutta.superuser&hl=en.

    -------

    I have thrown every ROOT app I can think of at it... and it just works.

    (And unrooting works, as described earlier.)

    And the beauty of it is... if you do loose ROOT (either by accident or design)... you can easily acquire it again, just by re-running the script.... and WITH NO LOSS OF DATA.

    -------

    Rooting doesn't get any easier than this...

    I 'tip my hat' in appreciation and respect... in the general direction of nhshah7 for making this exploit available.

    Rgrds,
    Ged.
    2
    I have rooted Nexus with this method (very easy, THANKS!), but the idea (at least for me) for rooting was to use an external SDCARD or pen disk with an OTG cable connected to Nexus 7.

    But this I can't do, I have used OI File Manager and Root Browser to explore pen disk but I can't see external SDCard with these apps.

    Can someone explain me what I am doing wrong? Thanks

    It could be a million and one things!
    Where are you looking for the external card? You know it's mounted under /sdcard yeah?
    Could be the cable you're using. Some don't work.
    Have you tried using StickMount?
    2
    Hello, I am having trouble with this on my Nexus 7. I get the following in CMD and it seems to just be on a loop of trying.

    [*] Pushing root tools...
    error: more than one device and emulator
    ...
    ...
    snip
    ...
    ...
    EDIT******* seems to be working now but oddly enough I just tried doing it with usb debugging disabled......yes with it off lol
    now it shows pushing exploit so stay tuned ill let you know how it goes.

    UPDATE:
    [*] Waiting for device...
    * daemon not running. starting it now on port 5037 *
    * daemon started successfully *
    [*] Device found.
    [*] Pushing exploit...
    576 KB/s (1283460 bytes in 2.175s)
    [*] Pushing root tools...
    402 KB/s (91980 bytes in 0.223s)
    483 KB/s (1867568 bytes in 3.770s)
    535 KB/s (969701 bytes in 1.770s)

    and im now left with a blinking cursor under that last line and waiting for something else to happen


    Are you sure you didn't start an emulator when you installed the Android SDK? You might be trying to root an emulator! (That might explain why you apparently saw things happening with ADB turned off).

    Anyway, you certainly should not be seeing messages such as this:

    error: more than one device and emulator

    manually running the command "adb devices" from a command window should show you only a single device listed - your N7.
Our Apps
Get our official app!
The best way to access XDA on your phone
Nav Gestures
Add swipe gestures to any Android
One Handed Mode
Eases uses one hand with your phone