RootMy.TV: v2.0 Released!

Search This thread

Dabatino

Member
Feb 6, 2021
9
3
start-devmode,sh: Downloading from https://rootmy.tv/files/jumpstart.sh...
Original start-devmode.sh overwrite failed, attempting v2 exploit...
extra_conf.sh: Downloading from https://rootmy.tv/files/jumpstart.sh... extra conf.sh: Download completed
startup.sh: Downloading from https://rootmy.tv/files/stage3.sh...
startup.sh: Download completed
hbchannel.ipk: Downloading from https://github.com/webosbrew/webos-homebrew- channel/releases/download/v0.5.1/org.webosbrew.hbchannel 0.5.1 all.ipk...
hbchannel.ipk: Download completed
devmode_enabled: Downloading from https://rootmy.tv/files/dummy...
devmode_enabled: Download completed Your TV shall reboot in 5 seconds...



I have this, on the reboot, nothing Dev mode, homebrew and nothing root
 

1matrix

Member
Oct 21, 2021
10
4
I have a 2019 LG OLED65C9PUA running WebOS TV Version: 4.9.7-14 and Firmware: 5.30.25. From what I have learned the link below is the latest and greatest fix. Can anybody out there please confirm if it will work on a LG C9?


Any advice welcome.
 
Last edited:

Apollo_1

Senior Member
May 6, 2011
149
36
no chance with oled65c
3.34.95
webbrowser -> rootinstall 2.0

same situation as

Dabatino


try manual way

thanks for dev further
 
Last edited:

Apollo_1

Senior Member
May 6, 2011
149
36
really less time - to find out manual way (console-script)
- if there is a way to implement higher Webos
hope to devs these days
 

Gandakor

New member
Jul 19, 2023
1
0
Hi,

just bought a LG OLED65G2 from 2022 with Software 03.33.16

is it possible to root this TV?

regards, Gandakor

I'm running the FHEM Smarthome System which had a LG_TV module using "SSAP" to interact with WebOS, but since LG patched the vulnarabilities the module doesn't work anymore.
 
Last edited:
Model: 75UN8570AUD
webOS: 5.4.2-2601
(says this version is in supported range: "At the time of writing (RootMyTV v2 - 2022-01-05), all webOS versions between 4.x and 6.2+ we tested (TVs released between early-2018 and late-2021) are supported by the new exploit chain.")

I keep getting stuck at step 0. Connecting.
I've gotten past it a couple of times by resetting to initial settings as mentioned in the guides but even when it proceeds, my TV reboots before I have time to read everything. I know it says it Succeeded Facebook login.

I'm willing to try manual, any other tips would be appreciated!
 
  • Like
Reactions: osswas

osswas

New member
Jul 29, 2023
1
0
IMG_9215.jpeg
Model: 75UN8570AUD
webOS: 5.4.2-2601
(says this version is in supported range: "At the time of writing (RootMyTV v2 - 2022-01-05), all webOS versions between 4.x and 6.2+ we tested (TVs released between early-2018 and late-2021) are supported by the new exploit chain.")

I keep getting stuck at step 0. Connecting.
I've gotten past it a couple of times by resetting to initial settings as mentioned in the guides but even when it proceeds, my TV reboots before I have time to read everything. I know it says it Succeeded Facebook login.

I'm willing to try manual, any other tips would be appreciated!
i have the same problem..

Modell : 55QNED8290B
Plattform : webOS22
Softwareversion : 03.30.74
 

Mazda77

Member
Aug 12, 2017
10
10

EnduringGuerila, osswas

The old method of getting root through rootmy.tv no longer works, you need to use the manual method.

 
  • Like
Reactions: osswas

TarekElsakka

Senior Member
Sep 27, 2008
1,532
198
Cairo
I've never really rooted a TV before but I can see that it can be limited to the software version it's running, similar to iPhones and jailbreaking. I have a 32" LG TV and this model number and software version:

05.30.40

LG webOS TV LM630BPVB

Is mine rootable? And if so, how? Thanks
 

Mazda77

Member
Aug 12, 2017
10
10
I've never really rooted a TV before but I can see that it can be limited to the software version it's running, similar to iPhones and jailbreaking. I have a 32" LG TV and this model number and software version:

05.30.40

LG webOS TV LM630BPVB

Is mine rootable? And if so, how? Thanks
Use instruction form link above.
 

crazyazz

Senior Member
Nov 10, 2010
67
4
Hi, I need some advice my TV is on 03.00.61and wants to update to 03.36.30. If I root on 03.00.61 will I not be able to update to 03.36.30? Just got the the TV today, was new old stock. Thanks
 

rzadas

New member
Apr 1, 2020
2
0
I rooted my tv LG50UP75006LF via rootmytv. 03.15.60 version. So far it has worked as it should. Today I wanted to turn on the web browser, but a message appeared to use it, I should update it. After trying to update my browser, I got a message that I need to update webos software to do this. I want to use the browser on tv. Is there any non-dedicated application available? Or another way?
 

Mazda77

Member
Aug 12, 2017
10
10
I rooted my tv LG50UP75006LF via rootmytv. 03.15.60 version. So far it has worked as it should. Today I wanted to turn on the web browser, but a message appeared to use it, I should update it. After trying to update my browser, I got a message that I need to update webos software to do this. I want to use the browser on tv. Is there any non-dedicated application available? Or another way?
Try updates only ssl certs http://webos-forums.ru/post156129.html#p156129
 

borisSweden

Senior Member
May 10, 2021
296
30
OnePlus 7T
Is it possible to install unsupported apps to WebOS? I have a 2017 LG OLED with firmware 6.0. The app Telia Play does support WebOS but only TV that where sold 2018 and onwards.

Also the web-browser in default mode has Chinese searches.

RooyltMyTV didn't work, I don't see the homebrew app.

Model: 65UJ670V

WebOS TV-v: 3.9.2-62912

Firmware: 06.10.50
 
Last edited:

Top Liked Posts

  • There are no posts matching your filters.
  • 23
    rmtv.png

    RootMyTV is a user-friendly exploit for rooting/jailbreaking LG webOS smart TVs.

    Website: RootMy.TV
    GitHub: https://github.com/RootMyTV/RootMyTV.github.io

    For further details, and a full writeup, please check out the GitHub repo.

    TL;DR; If you want root on any* current WebOS LG TV, do not install updates for the time being, and wait patiently. If you're a developer or researcher, read the latest update below.

    *The exploit requires "ThinQ" support, which seems to only be available on TVs running WebOS 4.0+. I will update this when we know more about which versions support it.


    RootMy.TV is an 0-click (kinda) web-to-root exploit for WebOS.

    Website (placeholder): RootMy.TV
    GitHub (placeholder): github.com/DavidBuchanan314/RootMyTV

    After this bug in Download Manager was published (which, on its own, allows rooting the WebOS emulator), I was motivated to find new bugs which can be combined with it, to get root on actual TVs.

    Given the relatively severe impact of this exploit chain, its publication will have to wait at least until LG makes official patches available for the Download Manager bug. After that, I will be publishing the exploit, along with a full writeup.

    During my research, I received invaluable advice and information from members of the openlgtv Discord server - I definitely couldn't have done this without them. Please join us, if you would like to assist with testing the exploit etc. in the hopefully-near future: https://discord.gg/9sqAgHVRhP

    Update 2021/02/15:
    LG claims to have fixed the Download Manager bug, but they haven't really. To motivate LG to actually patch the bug, I will be disclosing my exploit chain to them under a 30-day public disclosure deadline - after which, I will be publishing the exploit here. Assuming I send my disclosure to LG email tonight, that sets the RootMyTV "release date" at 2021/03/19.

    Update 2021/03/18:
    The release date is now 2021/03/21 - I have a few things I need to finish up...

    Update 2021/03/23:
    Sorry for the delays...
    I am attaching a bare-bones vulnerability report and PoC for the exploit, which is enough to get you root. This "pre-release" is intended for developers and researchers. If you're not a developer or researcher, please be wait for the "full" release, which will hopefully arrive in the coming weeks. The final release will be more user friendly, and include a "Homebrew Channel". If you would like to contribute to development of the Homebrew ecosystem, please visit us on Discord.

    Some notes/disclaimers about the exploit: (READ FIRST!!!)

    - This will void your warranty, don't blame me if anything goes wrong etc. etc.

    - Amazon's "google play store" link, described in the writeup, is currently broken. As a workaround, you can search for "google search" on Amazon, Click the top result, Click "developer info", then click the link to Google's privacy policy. From there, you can click the menu icon in the top-right and continue with the rest of the instructions.

    - Something I forgot to mention in the report - you must update the value of the "HOST_PREFIX" variable in index.html, to point to your local webserver.

    - If you were previously using Developer Mode, then overwriting `start-devmode.sh` will have broken devmode features like `ares-install`, and the jailed sshd. You can fix this by putting the old `start-devmode.sh` back again, with some edits.

    - For some TVs that don't have the ThinQ login page, you can access an equivalent page via "Account Management" in the settings. This doesn't work on my TV (the amazon link opens in the web browser), but apparently it works on some models/versions.

    - The current version of the exploit will give you a root telnet server, accessible on the default port (23), without authentication.
    7
    If someone can use this to make a custom firmware that adds back in the 120hz black frame insertion to the LG C9 (and maybe even older models) that would be amazing. LG removed the feature last minute despite it showing up in C9 reviews samples, but it did make it into the CX as OLED motion low and mid. I remember in some old interviews hearing that the feature is all algorithm based and could be added into older OLED TVs but they never did.

    You're in luck. Just this week a user at AVSForum reported that you could enable Motion Pro on the C9/E9 with a simple command on the tv. The only disadvantage was that you need to execute this command with root privileges. Now that is where this thread comes in.
    I've managed to get root access to my C9 and have executed the command and it works! Motion Pro low, medium and high is available and works at 120Hz.

    This is the command that you need to execute:

    Code:
    luna-send -n 1 -f "luna://com.webos.service.config/setConfigs" '{ "configs": { "tv.model.motionProMode": "OLED Motion Pro" } }'
    4
    Same here, I believe they are working on a newer method. Wait and see for now. I see have my apps and yt adfree so happy enough.

    Any chance of an update from the devs? @retr0id
    If you really want root, you can try this method in the video, it's the most resent way.

    3
    If you are having trouble connecting to certain websites or using Plex or Emby on your TV, it may be because the services are using digital certificates signed by the new LetsEncrypt Certificate Authority cert, and LG have not updated the TV’s certificate trust store to include this new cert and remove the old expired one.

    If your TV is rooted, then you can use this shell script to fix thIs: https://github.com/tf318/lg
    3
    With the just released firmware update for the 2021 OLED TV models, the last model without a fix has also received an update that fixes the corresponding security vulnerability.

    Thus, the method used by RootMy.TV to gain root privileges should no longer work on any of LG's OLED TVs (2019-2022) if they have the most recent firmware version. Note that installing apps via RootMy.TV may still work.