[Root/TWRP/Rom]T-Mobile K428sg K10/MetroPCS ms428 K10[4/2/17]
- Thread starter OvrDriVE
- Start date
Got rid of Enforcing! Finally rooted w/ TWRP
Thanks for the HUGE hint. Although the method you mentioned didn't work for me (issue writing recovery in fastboot), I found https://www.**********.com/unlock-bootloader-install-twrp-and-root-lg-k20-plus/, installed the 15 Seconds ADB Installer onto my PC, and followed the steps outlined in the "Steps to Unlock Lg K20 Plus Bootloader" section to unlock the bootloader (even though I've already enabled OEM unlock in Developer Options).
Now, when I go through the steps outlined in the OP, I no longer get "Enforcing" when I run the getenforce command; instead, I get "Permissive" and now I have root and TWRP! (Finally! Spent countless hours trying to figure this all out so hopefully this helps someone).
Note: What's different this time around after following these steps is now I get the message "your device software can't be checked for corruption" at bootup .
Thanks for the HUGE hint. Although the method you mentioned didn't work for me (issue writing recovery in fastboot), I found https://www.**********.com/unlock-bootloader-install-twrp-and-root-lg-k20-plus/, installed the 15 Seconds ADB Installer onto my PC, and followed the steps outlined in the "Steps to Unlock Lg K20 Plus Bootloader" section to unlock the bootloader (even though I've already enabled OEM unlock in Developer Options).
Now, when I go through the steps outlined in the OP, I no longer get "Enforcing" when I run the getenforce command; instead, I get "Permissive" and now I have root and TWRP! (Finally! Spent countless hours trying to figure this all out so hopefully this helps someone).
Note: What's different this time around after following these steps is now I get the message "your device software can't be checked for corruption" at bootup .
On the very first command I'm already facing issues:
code: adb push dirtycow /data/local/tmp
error: more than one device/emulator
code: adb push dirtycow /data/local/tmp
error: more than one device/emulator
Works great, but author forgot about one thing
After hours of trying this root method, and flashing
different firmware versions I always ended with same error-kernel enforcing not permissive, author of this great and helpful forgot to mention in order this to work you should have unlocked bootloader not just to turn on "OEM unlock" but to go to fastboot and fastboot oem unlock after that everything works great
After hours of trying this root method, and flashing
different firmware versions I always ended with same error-kernel enforcing not permissive, author of this great and helpful forgot to mention in order this to work you should have unlocked bootloader not just to turn on "OEM unlock" but to go to fastboot and fastboot oem unlock after that everything works great
could you help me please (lgms428)
size 152196
[*] mmap 0xb44d0000
[*] exploit (patch)
[*] currently 0xb44d0000=464c457f
[*] madvise = 0xb44d0000 152196
[*] madvise = 0 1048576
[*] /proc/self/mem 675282944 1048576
[*] exploited 0xb44d0000=464c457f
m209n:/data/local/tmp $
---------------------------------------------------------
after this step absolutely nothing happens, what should I do?
size 152196
[*] mmap 0xb44d0000
[*] exploit (patch)
[*] currently 0xb44d0000=464c457f
[*] madvise = 0xb44d0000 152196
[*] madvise = 0 1048576
[*] /proc/self/mem 675282944 1048576
[*] exploited 0xb44d0000=464c457f
m209n:/data/local/tmp $
---------------------------------------------------------
after this step absolutely nothing happens, what should I do?
what do you mean by this??
Note!!! the crash will not happen you have to force the crash
to do this wait for the exploit to finish. now press and hold
the power button until you see the t-mo logo screen and hear
the jingle. now it's crashed and you can continue onto the next
step
Note!!! the crash will not happen you have to force the crash
to do this wait for the exploit to finish. now press and hold
the power button until you see the t-mo logo screen and hear
the jingle. now it's crashed and you can continue onto the next
step
Last edited:
I know this is super old but I have this phone (metropcs) and spoiler: I have never flashed using LGUP and i keep getting this error when downgrading to 10c
That's not an ARB error. ARB is checked earlier in the process, at around 5%. And the error message is also different
interesting, mine failed at 5% with the arb check so i kinda gave up. what did your error say?
I wasn't flashing a phone. I work in the mobile field, so I'm just extremely familiar with LG UP and flashing
Similar threads
Top Liked Posts
-
There are no posts matching your filters.
-
12i am in no way responsible if you brick, break or just plain blow up your device. it's your device and your responsibility. if you blame me i am gonna die laughing!
Disclaimer! the exploits in the rar may be flagged as a virus by your virus software. just add an exception for them! they are not a virus
T-Mobile/MetroPCS Root, TWRP and Deodexed Stock Roms
Cannot Stress this Enuff but Read this Entire Post, when done read it again, and finally read it once more for good measure
ok all. this is dirtycow exploit for the t-mobile k428 - works on the 10g firmware(works for the metropcs ms428 as well - Must have 10c kdz flashed first). the exploit method is almost the same as the v20
i have personally done this multiple times on my t-mobile k10 without issues to make sure it is 100% working
all the needed files you need are in this rar. just extract it to the root of your C drive Download Me
this requires an unlocked bootloader and on the t-mo variant it's very easy to do. check this forum. you'll find instructions on how to do it
Now lets get started!!
copy the supersu file to your sdcard
open a command prompt window.
now copy and paste each line except the lines surrounded by "< >"
adb push dirtycow /data/local/tmp
adb push recowvery-applypatch /data/local/tmp
adb push recowvery-app_process32 /data/local/tmp
adb push recowvery-run-as /data/local/tmp
adb push twrp-3.1.0-0.img /sdcard/twrp.img
adb shell
cd /data/local/tmp
chmod 0777 *
./dirtycow /system/bin/applypatch recowvery-applypatch
"<Note! wait for to finish>"
./dirtycow /system/bin/app_process32 recowvery-app_process32
"<Note! wait for to finish, it should appear to crash, however
the crash will not happen, you have to force the crash.
to do this wait for the exploit to finish. now press and hold
the power button until you see the t-mo logo screen and hear
the jingle. now it's crashed and you can continue onto the next
step>"
exit
adb logcat -s recowvery
"<wait for it to tell you it was successful - Then Press>"
"[CTRL+C]"
adb shell reboot recovery
"<wait for phone to boot up again, your recovery will be reflashed to stock>"
adb shell
getenforce
"<it should say Permissive>"
cd /data/local/tmp
./dirtycow /system/bin/run-as recowvery-run-as
run-as exec ./recowvery-applypatch boot
"<wait for it to flash your boot image this time>"
run-as su
run-as exec dd if=/sdcard/twrp.img of=/dev/block/bootdevice/by-name/recovery
"<wait for it to complete>"
reboot recovery
"<once in twrp do the following>"
click install
select supersu 2.79-sr3.zip
reboot
setup your phone and enjoy
thats it. enjoy root!
Stock Deodexed Roms
Features:
Deodexed
Debloated(if thats what you want to call it) i've removed what i don't want so
Magisk v12.0 with magisk manager 4.3.0
Note! (make sure to enable hide magisk in magisk manager settings) - pass's safetynet check - android pay will work along with pokemon go and any other apps that look for root
Busybox 1.26.2 installed by default
dolby atmos 6.5
Viper4Android 2.5.0.5
Includes a custom app for a reboot menu that ties into the actual power button
As always to install either rom you'll want to wipe system, data, dalvik and cache(this is normal for any rom)
T-Mobile Rom
T-Mobile K10 K428sg 10h rom - Weather Widget has been removed due to deodexing issues. PLZ use an Alternate Weather Widget
K428sg10h Removed Files
MetroPCS Rom
MetroPCS K10 ms428 10h rom - Weather Widget has been removed due to deodexing issues. PLZ use an Alternate Weather Widget
MetroPCS Removed Files
for anyone interested you can freely use these rom as a starting point base for a custom rom.
Thanks to @pvineeth97 - for working twrp, @Chainfire - for supersu, @topjohnwu - for magisk, and everyone else i forgot to mention. sorry guys i'm tired!2
I got it! The "dirtycow" file was being removed by ESET. You should add a disclaimer in the OP about it possibly being flagged by antivirus software.1On the very first command I'm already facing issues:
Code:adb push dirtycow /data/local/tmp adb: error: cannot stat 'dirtycow': No such file or directory1Since this is now a year old...
Has anyone simply tried flashing latest SuperSU to root, and not doing all the OP steps? Other T-Mo LG models like the K20, Aristo, and others can be rooted the old fashioned way (unlock bootloader, flash TWRP, flash SuperSU) - including on Nougat
!
