Rooting the webOS TV

Search This thread
By:
Advanced…
Maroc-OS

Maroc-OS

Retired Recognized Developer
Mar 16, 2012
886
3,629
Casablanca
www.merruk.com
lullius said:
This is from my 55UJ630V-ZA with software version 04.70.40 and webOS TV version 3.7.0-57311 (dreadlocks2-drto)

dropbox DOT com/s/orss3f3xjb1lwmg/webos_info.zip?dl=0

Please excuse the link. I know I'm not allowed to post it yet, but I'm hoping it's alright as I'm only trying to help out with this.
Click to expand...
Click to collapse

am afraid to say your tv is not jailbreakable by this method am using. your tv is using a lite version of LG webOS.

Anyone else can provide logs?
 
A

aproape2

New member
Jan 3, 2019
1
0
Hi there,

Here you go - another set of logs (OLED65B7, 5.80.15):

dropbox.com/s/1pnq1zlrqhj055c/logs.zip?dl=0

Cheers!
 
petsrdjan

petsrdjan

Senior Member
Oct 12, 2010
96
3
Lajkovac
Hi, I'm using the version LG 42LF652V-ZA with webOS 2.2.0-163. Is there any possibility of root? And installing a newer version of webOS? Thanks in advance.
 
D

d10785740

New member
Apr 9, 2019
1
0
40UB8000 can be root? i can not search the dev mode app in LG store.
Any suggestion?
The WebOS can be upgrade or install the new one?
 
P

pdionisis

Member
Jun 1, 2019
8
0
LG V30
Xiaomi Mi Note 10
At Greece and the default liveTV(timeshift) buffer is 90 minutes no matter how big USB-disk I attach.
Is there a way to increase it? I saw 2 hours mentioned at some sites,maybe it is dependable to
the country?.
Ideally I would like to increase it to 8 hours

Also ideally the tv should enable the screen saver in order to avoid burn-in of pixels.

Maybe rooting the TV will help?
 
N

NewbRooter89

Member
Aug 19, 2018
14
2
Apps & Games
Sorry to sound like a noon but.....

I was wondering if gaining root access, could I enable HDR10 on my 65UF6800 TV? It really drives me nuts that I can't play my Xbox one X have in HDR10.
 
C

czsniper

New member
Nov 4, 2019
1
0
webos command line

Hi.
I want to develop an app on webos 3 and 4, but the problem is the limited API. I want to read some information from dvb tuner and use gstreamer (already installed open-source), so i cannot test in emulated vm.
At this moment i have a LG UH8507 but I am scared to test on it, and i want to buy cheapest LG webos from market to develop and play on it. I saw on market most of LG tv's are webos 4.0.
Can anyone tell me if can i get access to terminal command (root or user) on the webos 4.0 ? i don't want to install apps, only to read some info.
If is not possible to obtain terminal command access in webos 4.0, witch version is suitable for that ?
At this moment i test it with ares-novacom but is to hard to work in this manner.
I tried to log in with putty with key from puttygen but no success.

Thank you !
Robert
 
M

Modzzo

New member
Nov 12, 2019
2
0
Hi everyone, could someone give some information about possibilities to update software, i got 49ub850v-zd tv and it runs 1.4.0-2337 afro ashley version, the main thing I using is internet browser to watch tv but it don’t open all contents anymore so im struggling to log in or other stuff is there any chance to upgrade software?
 
R

rusup

New member
Jan 2, 2020
1
0
Hi guys and happy New year!!
Quick question: is it possible to upgrade my lg 55uj620v from webOS 3.5 to 4? And is it worth the hassle?
Thanks a lot. Cheers
 
L

leafybasil

New member
Jun 24, 2020
1
0
Maroc-OS said:
am afraid to say your tv is not jailbreakable by this method am using. your tv is using a lite version of LG webOS.

Anyone else can provide logs?
Click to expand...
Click to collapse

Hey, do you mean you want more logs for WebOS TV Lite? Please let me know as I am happy to collect my logs for you @Maroc-OS

---------- Post added at 01:20 AM ---------- Previous post was at 01:06 AM ----------
Maroc-OS said:
am afraid to say your tv is not jailbreakable by this method am using. your tv is using a lite version of LG webOS.

Anyone else can provide logs?
Click to expand...
Click to collapse

Hey, do you mean you want more logs for WebOS TV Lite? Please let me know as I am happy to collect my logs for you @Maroc-OS
 
V

VerizonLover

Member
Mar 2, 2014
26
1
Opelika, AL
Samsung Galaxy A53
Does the root work when os_info is as follows:

Code: 
{
    "core_os_kernel_version": "4.4.3-119.drd4tv.5",
    "core_os_name": "Rockhopper",
    "core_os_release": "3.8.0-61114",
    "core_os_release_codename": "dreadlocks2-dunggir",
    "encryption_key_type": "prodkey",
    "webos_api_version": "4.1.0",
    "webos_build_datetime": "20200122044432",
    "webos_build_id": "61114",
    "webos_imagename": "starfish-atsc-secured",
    "webos_manufacturing_version": "05.80.55",
    "webos_name": "webOS TV",
    "webos_prerelease": "",
    "webos_release": "3.8.0",
    "webos_release_codename": "dreadlocks2-dunggir"
}
 
You must log in or register to reply here.

Similar threads

Maroc-OS
GetMeIn : One time rooting/jailbreaking tool for webOS LG TV's
Replies
126
Views
177K
F
fullerorb7
U
AndroidTV on LG webOS tv
Replies
8
Views
109K
L
lordxenu
R
Official: Palmdroid Development Thread (android app emulator for WebOS)
Replies
177
Views
103K
RumoredNow
RumoredNow
T
WebOS on LG Smart TVs: Possible to switch region and download out-of-market apps?
Replies
53
Views
101K
C
chanyork
Nixing
webOS 3.0 on LG TV
Replies
3
Views
22K
M
Medyredy

Top Liked Posts

24 Hours All time
  • There are no posts matching your filters.
  • 9
    T
    teffd
    Root webOS

    Hodizzal said:
    I could use your help rooting my lg 65uf6450-ua if you would. Thank you
    Click to expand...
    Click to collapse

    1. You need to install Developer Mode App and export private ssh-key with CLI (webostv.developer.lge.com/develop/app-test)
    2. Convert private ssh-key with puttygen [import key <your private ssh-key>, then save private key]
    3. Download exploit (zalil.su/6937580), then connect with TV User: prisoner, [<ip-tv>:9922] + private-key with WinSCP (or other SCP-client), upload to /media/developer on TV and rename it to root.
    on linux
    Code: 
    ssh -i <your private ssh-key> [email protected]<ip-tv> -p 9922 "/bin/sh -i"
    4.
    Code: 
    chmod +x root
    Code: 
    ./root
    5. After try install any app from market go to LG App Store and try to install any app.
    6. if third stage ok. the insert password 1111 as said.
    7.
    Code: 
    busybox chroot /proc/1/root
    Code: 
    [email protected]:/# id
    Code: 
    uid=0(root) gid=0(root)........

    I personally use Linux Subsystem on Windows 10 for all of this.

    To install .ipk app:
    Code: 
    ApplicationInstallerUtility -c install -p /tmp/<any-name>.ipk -u 0 -l /media/developer -d
    Info about your linux kernel and TV firmware:
    Code: 
    luna-send -n 1 -f luna://com.palm.systemservice/osInfo/query '{ "subscribe": false }'
    Launch app:
    Code: 
    luna-send -n 1 -f luna://com.webos.applicationManager/launch '{"id": "netflix"}'
    All apps ID you can find with
    Code: 
    luna-send -n 1 "palm://com.palm.applicationManager/listLaunchPoints" "{}"
    or at a folder /media/cryptofs/apps/usr/palm/applications/<App ID>/appinfo.json


    For permanent root access through telnet:

    1)
    Code: 
    [email protected]:/# mkdir -p /media/cryptofs/root/etc
    2)
    Code: 
    [email protected]:/# cp -r /etc/* /media/cryptofs/root/etc
    3)
    Code: 
    [email protected]:/# mount -o bind /media/cryptofs/root/etc /etc
    4)
    Code: 
    [email protected]:/# passwd root
    Enter any new root password
    5)
    Code: 
    cp /media/cryptofs/apps/usr/palm/services/com.palmdts.devmode.service/start-devmode.sh /tmp/start-devmode.sh
    6) Download with WinSCP start-devmode.sh and edit it locally.
    You need to add at the beginning
    Code: 
    mount -o bind /media/cryptofs/root/etc /etc
telnetd -l /sbin/sulogin &
    Plus you can add the line to launch any App at start, e.g:
    Code: 
    luna-send -n 1 -f luna://com.webos.applicationManager/launch '{"id": "netflix", "params":{}}'
    And comment Dev Mode online check.

    Here it's mine start-devmode.sh. It's for webOS 1.4. It can be different for other webOS versions:
    Code: 
    #!/bin/sh
mount -o bind /media/cryptofs/root/etc /etc
telnetd -l /sbin/sulogin &

#luna-send -n 1 -f luna://com.webos.applicationManager/launch '{"id": "netflix", "params":{}}'

# FIXME: disable this to turn off script echo
set -x

# FIXME: disable this to stop script from bailing on error
# set -e

# TODO: Check upstart daemon/process tracking (do we need to change /etc/init/devmode.conf? start sshd as daemon?)

# set devmode ssh port here
SSH_PORT="9922"

# set arch:
ARCH="armv71"
grep -qs "qemux86" /etc/hostname && ARCH="i686"

# set directories
OPT_DEVMODE="/opt/devmode"
OPT_SSH="/opt/openssh"
DEVELOPER_HOME="/media/developer"
DEVMODE_SERVICE_DIR="/media/cryptofs/apps/usr/palm/services/com.palmdts.devmode.service"
CRYPTO_SSH="$DEVMODE_SERVICE_DIR/binaries-${ARCH}/opt/openssh"
CRYPTO_OPT="$DEVMODE_SERVICE_DIR/binaries-${ARCH}/opt"

if [ -s ${DEVMODE_SERVICE_DIR}/jail_app.conf ] ; then
   mv ${DEVMODE_SERVICE_DIR}/jail_app.conf ${DEVELOPER_HOME}
   mv ${DEVMODE_SERVICE_DIR}/jail_app.conf.sig ${DEVELOPER_HOME}
fi

if [ -r ${DEVMODE_SERVICE_DIR}/sessionToken ] ; then
   mv -f ${DEVMODE_SERVICE_DIR}/sessionToken /var/luna/preferences/devmode_enabled
fi


# Make sure the ssh binaries are executable (in service directory)
if [ ! -x "${CRYPTO_SSH}/sbin/sshd" ] ; then
   chmod ugo+x ${CRYPTO_SSH}/sbin/sshd ${CRYPTO_SSH}/bin/ssh* ${CRYPTO_SSH}/bin/scp* || true
   chmod ugo+x ${CRYPTO_SSH}/bin/sftp ${CRYPTO_SSH}/lib/openssh/* || true
   chmod ugo+x ${CRYPTO_OPT}/devmode/usr/bin/* || true
fi

# TODO: (later) Look for "re-init" flag to re-generate ssh key if requested by app (via devkey service)
# com.palm.service.devmode could have "resetKey" method to erase /var/lib/devmode/ssh/webos_rsa
# Kind of dangerous though, since new key will need to be fetched on the desktop (after reboot)...
# We could just require a hard-reset of the TV which should blow away /var/lib/devmode/ssh/...

# Initialize the developer (client) SSH key pair, if it doesn't already exist
if [ ! -e /var/lib/devmode/ssh/webos_rsa ] ; then
   mkdir -p /var/lib/devmode/ssh
   chmod 0700 /var/lib/devmode/ssh
   # get FIRST six (UPPER-CASE, hex) characters of 40-char nduid from nyx-cmd
   # NOTE: This MUST match passphrase as displayed in devmode app (main.js)!
        # PASSPHRASE="`/usr/bin/nyx-cmd DeviceInfo query nduid | head -c 6 | tr 'a-z' 'A-Z'`"
        # PASSPHRASE="`/usr/bin/nyx-cmd DeviceInfo query nduid | tail -n1 | head -c 6 | tr 'a-z' 'A-Z'`"
        PASSPHRASE="`tail /var/lib/secretagent/nduid -c 40 | head -c 6 | tr 'a-z' 'A-Z'`"
   ${CRYPTO_SSH}/bin/ssh-keygen -t rsa -C "[email protected]" -N "${PASSPHRASE}" -f /var/lib/devmode/ssh/webos_rsa
   # copy ssh key to /var/luna/preferences so the devmode service's KeyServer can read it and serve to ares-webos-cli tools
   cp -f /var/lib/devmode/ssh/webos_rsa /var/luna/preferences/webos_rsa
   chmod 0644 /var/luna/preferences/webos_rsa
   # if we generated a new ssh key, make sure we re-create the authorized_keys file
   rm -f ${DEVELOPER_HOME}/.ssh/authorized_keys
fi

# Make sure the /media/developer (and log) directories exists (as sam.conf erases it when devmode is off):
mkdir -p ${DEVELOPER_HOME}/log
chmod 777 ${DEVELOPER_HOME} ${DEVELOPER_HOME}/log

# Install the SSH key into the authorized_keys file (if it doesn't already exist)
if [ ! -e ${DEVELOPER_HOME}/.ssh/authorized_keys ] ; then
   mkdir -p ${DEVELOPER_HOME}/.ssh
   cp -f /var/lib/devmode/ssh/webos_rsa.pub ${DEVELOPER_HOME}/.ssh/authorized_keys || true
   # NOTE: authorized_keys MUST be world-readable else sshd can't read it inside the devmode jail
   # To keep sshd from complaining about that, we launch sshd with -o "StrictModes no" (below).
   chmod 755 ${DEVELOPER_HOME}/.ssh
   chmod 644 ${DEVELOPER_HOME}/.ssh/authorized_keys
   chown -R developer:developer ${DEVELOPER_HOME}/.ssh
fi

# FIXME: Can we move this to /var/run/devmode/sshd ?
# Create PrivSep dir
mkdir -p /var/run/sshd
chmod 0755 /var/run/sshd

# Create directory for host keys (rather than /opt/openssh/etc/ssh/)
HOST_KEY_DIR="/var/lib/devmode/sshd"
if [ ! -d "${HOST_KEY_DIR}" ] ; then
   mkdir -p ${HOST_KEY_DIR}
   chmod 0700 ${HOST_KEY_DIR}
fi

# Create initial keys if necessary
if [ ! -f ${HOST_KEY_DIR}/ssh_host_rsa_key ]; then
   echo "  generating ssh RSA key..."
   ${CRYPTO_SSH}/bin/ssh-keygen -q -f ${HOST_KEY_DIR}/ssh_host_rsa_key -N '' -t rsa
fi
if [ ! -f ${HOST_KEY_DIR}/ssh_host_ecdsa_key ]; then
   echo "  generating ssh ECDSA key..."
   ${CRYPTO_SSH}/bin/ssh-keygen -q -f ${HOST_KEY_DIR}/ssh_host_ecdsa_key -N '' -t ecdsa
fi
if [ ! -f ${HOST_KEY_DIR}/ssh_host_dsa_key ]; then
   echo "  generating ssh DSA key..."
   ${CRYPTO_SSH}/bin/ssh-keygen -q -f ${HOST_KEY_DIR}/ssh_host_dsa_key -N '' -t dsa
fi

# Check config
# NOTE: This should only be enabled for testing
#${CRYPTO_SSH}/sbin/sshd -f ${CRYPTO_SSH}/etc/ssh/sshd_config -h ${HOST_KEY_DIR}/ssh_host_rsa_key -t

# Set jailer command
DEVMODE_JAIL="/usr/bin/jailer -t native_devmode -i com.palm.devmode.openssh -p ${DEVELOPER_HOME}/ -s /bin/sh"
#DEVMODE_JAIL="echo"

# Add for debugging, but this will cause sshd to exit after the first ssh login:
# -ddd -e 

# Make environment file for openssh
DEVMODE_JAIL_CONF="/etc/jail_native_devmode.conf"
DEVMODE_OPENSSH_ENV="${DEVELOPER_HOME}/.ssh/environment"
if [ -f ${DEVMODE_JAIL_CONF} ]; then
   echo " generating environment file from jail_native_devmode.conf..."
   find ${DEVMODE_JAIL_CONF} | xargs awk '/setenv/{printf "%s=%sn", $2,$3}' > ${DEVMODE_OPENSSH_ENV}
   ${DEVMODE_JAIL} /usr/bin/env >> ${DEVMODE_OPENSSH_ENV}
fi
# Set path for devmode
if [ -f ${DEVMODE_OPENSSH_ENV} ]; then
   echo "PATH=${PATH}:${OPT_DEVMODE}/usr/bin" >> ${DEVMODE_OPENSSH_ENV}
fi

sleep 5;
for interface in $(ls /sys/class/net/ | grep -v -e lo -e sit);
do
if [ -r /sys/class/net/$interface/carrier ] ; then
  if [[ $(cat /sys/class/net/$interface/carrier) == 1 ]]; then OnLine=1; fi
fi
done
#if [ $OnLine ]; then
#   sessionToken=$(cat /var/luna/preferences/devmode_enabled);
#   checkSession=$(curl --max-time 3 -s https://developer.lge.com/secure/CheckDevModeSession.dev?sessionToken=$sessionToken);

#   if [ "$checkSession" != "" ] ; then
#      result=$(node -pe 'JSON.parse(process.argv[1]).result' "$checkSession");
#      if [ "$result" == "success" ] ; then
         rm -rf /var/luna/preferences/dc*;
#         # create devSessionTime file to remain session time in devmode app
#         remainTime=$(node -pe 'JSON.parse(process.argv[1]).errorMsg' "$checkSession");
#         resultValidTimeCheck=$(echo "${remainTime}" | egrep "^([0-9]{1,4}(:[0-5][0-9]){2})$");
#         if [ "$resultValidTimeCheck" != "" ] ; then
            echo '900:00:00' > ${DEVMODE_SERVICE_DIR}/devSessionTime;
            chgrp 5000 ${DEVMODE_SERVICE_DIR}/devSessionTime;
            chmod 664 ${DEVMODE_SERVICE_DIR}/devSessionTime;
#         fi
#      elif [ "$result" == "fail" ] ; then
#         rm -rf /var/luna/preferences/devmode_enabled;
#         rm -rf /var/luna/preferences/dc*;
#         if [ -e ${DEVMODE_SERVICE_DIR}/devSessionTime ] ; then
#            rm ${DEVMODE_SERVICE_DIR}/devSessionTime;
#         fi
#      fi
#   fi
#fi

# Cache clear function added (except Local storage)
if [ -e ${DEVMODE_SERVICE_DIR}/devCacheClear ] ; then
   rm -rf `ls | find /var/lib/webappmanager*/* -name "Local Storage" -o -name "localstorage" -prune -o -print`;
   rm ${DEVMODE_SERVICE_DIR}/devCacheClear;
fi

# Launch sshd
${DEVMODE_JAIL} ${OPT_SSH}/sbin/sshd 
  -o StrictModes=no 
  -f ${OPT_SSH}/etc/ssh/sshd_config 
  -h ${HOST_KEY_DIR}/ssh_host_rsa_key 
  -o PasswordAuthentication=no -o PermitRootLogin=no -o PermitUserEnvironment=yes 
  -D -p ${SSH_PORT}
    7) Upload new start-devmode.sh and rewrite the old one
    Code: 
    cp /tmp/start-devmode.sh /media/cryptofs/apps/usr/palm/services/com.palmdts.devmode.service/start-devmode.sh
    8) Restart TV.
    Connect with telnet and type previously entered password.
    Code: 
    telnet <ip-tv>
Trying <ip-tv>...
Connected to <ip-tv>].
Escape character is '^]'.

webOS TV 1.4.0 LGSmartTV


Give root password for system maintenance
(or type Control-D for normal startup):
Entering System Maintenance Mode

[email protected]:/#
    View
    7
    T
    teffd
    Hello!
    I'm from webos-forums.ru. I've root on TV for a while and can help you with translation or testing on LG webOS 1.4.
    View
    5
    M
    Mazda77
    pivotce.com informs that instructions have been published on gaining root access to a webOS TV. This is much harder than on the old phones and tablets. When this was done on legacy webOS, there was a wave of enhancements and tweaks made available to phone users from webOS Internals and other developers.

    The instructions can be found on the Russian webOS forums here: webos-forums.ru/topic4650.html (English Translation via Google).

    As the thread itself notes, this creates the possibility of fiddling with your TV in a way that may turn it into a large, thin brick and will almost certainly invalidate your warranty. The general user should stay well clear of this.

    pivotCE published this for information only and recommend leaving investigations to those who know what they are doing or who can afford to wreck expensive television sets. We will watch to see if anything interesting emerges from this development.

    +

    Detailed analysis of the root access method described above:
    forums.webosnation.com/lg-webos-tv/331754-pivotce-seems-webos-tv-has-been-rooted.html#post3450911
    View
    4
    Maroc-OS
    Maroc-OS
    Tool Released here enjoy and you can always send logs there.
    View
    3
    Maroc-OS
    Maroc-OS
    Hello,


    What about adding a new universal root tool for all models :) let me know if you're interested.
    View

New posts