[Tutorial] Rooting LT25i - Xperia V (Unlocked Bootloader)

-SlenderMan-

Senior Member
Sep 14, 2012
627
166
0
Singapore
How to root Xperia V...

Information:
For 9.0.D.0.484:
1a: Please use the unsecure kernel by spida_singh as it has TWRP
1b: Flash the unsecure kernel using fastboot [fastboot flash boot Xperia.V.TWRP.Kernel.9.0.1.D.0.10.elf]
2: Reboot into TWRP
3: Flash this - SU-Busybox-Installer.zip - gregbradly
For 9.0.D.0.484:
1: Flash the unsecure kernel using fastboot [fastboot flash boot lt25i-unsecure-debuggable.elf]
2: Push SU and Busybox using ADB
Credits:
- championswimmer for unsecure kernel 9.0.D.0.484
- spida_singh for unsecure kernel 9.0.1.D.0.10
- gregbradly for SU-Busybox-Installer.zip
For Locked Bootloader:
 
Last edited:

-SlenderMan-

Senior Member
Sep 14, 2012
627
166
0
Singapore
If I recall correctly, it doesn't work on locked boot loaders right?

Sent from my LT25i
I am not sure but based on the rootkit, it does work on locked boot loaders. But since it was originally created for 2011 device, i'm not sure if it works for Xperia V with locked bootloader. You can always try and just restore your phone with pc companion if it doesnt work
 

Pacjonek

Senior Member
Mar 24, 2010
210
59
0
Kraków
I don't have this phone.
But if i were you i would try tricks with downgradge kernel from some Xperia 2012, root and reflash oryginal Xperia V kernel
This works on many (teoretically non rootable) Xperia phones with locked BL
 
  • Like
Reactions: thetitans89

datagubben

Senior Member
Nov 25, 2010
1,410
504
0
Landskrona
I don't have this phone.
But if i were you i would try tricks with downgradge kernel from some Xperia 2012, root and reflash oryginal Xperia V kernel
This works on many (teoretically non rootable) Xperia phones with locked BL
Only Xperia T (old) firmware can be rooted with Bin4ry, and I don't know if you can flash only the T stock kernel (ftf) on a Xperia V :confused: and then upgrade with flashtools to V kernel again? But I dont dare to try.

If somebody dares, it might work :confused:
 
  • Like
Reactions: thetitans89

cire1980

Senior Member
Dec 28, 2008
88
6
0
I got a BAD_POOL_HEADER. x_X Not nice that it came in the form of a BSOD.

I'm going to reinstall the ADB drivers and see if it'll be okay.

EDIT: Using the link to install Flashtools, I selected all Sony drivers and installed all of them. The error didn't appear after that.
 
Last edited:

datagubben

Senior Member
Nov 25, 2010
1,410
504
0
Landskrona
You could also flash the firmware from au's Xperia VL; that's how I got root on my Xperia AX.

Haven't tried with the V yet though.
Interesting! Since AX and V are the same but different internal memory size. :cool:

Maybe some DEVS can read this and help us? :fingers-crossed:
http://xperia-freaks.org/2012/11/20/ax-rooted/

They flash kernel.sin-, loader.sin and system.sin from VL, make root and then flash original firmware again...

(Its japanese but use goole translate or ask the member above).
 

Gasai Yuno

Senior Member
May 11, 2011
713
328
0
Rausu
Rooting the Xperia V: How-To.

You will need: TRIMMED-LT25i-SOL21_9.0.F.0.195.ftf or the original LT25i-SOL21_9.0.F.0.195.ftf (this FTF has its loader.sin replaced with LT25i's loader.sin; the trimmed version lacks unneeded files like baseband etc. and as such removes unneeded wipe/exclude options, leaving only the three files we actually need) and an LT25i FTF of your choice; the rootkit (this one is "translated" and edited for convenience; do NOT use regular GX/SX rootkits blindly as they require modification).

1. Power the phone up in Flashmode (hold Volume down; connect USB). Using Flashtool, flash LT25i-SOL21_9.0.F.0.195.ftf with:
kernel.sin
loader.sin
system.sin

(Remember to uncheck the wipe options!)

2. Unplug USB. Turn the phone on. Enable USB debugging if it wasn't enabled previously. Connect the phone via USB again.

3. Unpack the Rootkit and start it (run install.bat). Confirm restore of the backup as requested, and press any key in the cmd window. Press any key again; the device will reboot (twice).

4. Run adb shell. To do it, you can open the rootkit folder in Windows Explorer, and shift-Right Click the "files" folder inside it. Choose "Open command window here". Type "adb shell" in that window.

If you're presented with a prompt that ends with "$", type "su".

The prompt should end with "#" now.

Type "echo ro.kernel.qemu=1 > /data/local.prop" and check if the file was created successfully by typing "ls -l /data/local.prop": below you will find an example of what the output looks like.

Code:
C:\Software\Rootkit\files\> adb shell
[email protected]d:/ $ su
su
[email protected]:/ # echo ro.kernel.qemu=1 > /data/local.prop
echo ro.kernel.qemu=1 > /data/local.prop
[email protected]:/ # ls -l /data/local.prop
ls -l /data/local.prop
-rw-r--r-- system   system         17 2013-01-15 17:29 local.prop
[email protected]:/ #
5. Turn the phone off, and connect it in Flashmode again. Using Flashtool, flash your firmware of choice with:
loader.sin
system.sin

(Remember to uncheck the wipe options!)

6. Turn the phone on. Open a command prompt into the files subfolder of the rootkit folder, like in step 4, or return to that window if you haven't closed it.

Type "adb shell". If you get a $ prompt, try "su" to get to "#". Once in adb, type "/data/local/tmp/step2.sh", then "reboot". The phone will reboot.

When it boots back, run adb shell again, and type "/data/local/tmp/step3.sh". You'll witness another reboot or maybe two. You should be rooted now.

Code:
C:\Software\Rootkit\files\> adb shell

[email protected]:/ # /data/local/tmp/step2.sh
/data/local/tmp/step2.sh
0+1 records in
0+1 records out
57 bytes transferred in 0.001 secs (57000 bytes/sec)
[email protected]:/ # reboot

C:\Software\Rootkit\files\> adb shell

[email protected]:/ # data/local/tmp/step3.sh
data/local/tmp/step3.sh
43+1 records in
43+1 records out
22364 bytes transferred in 0.002 secs (11182000 bytes/sec)
1647+1 records in
1647+1 records out
843503 bytes transferred in 0.123 secs (6857747 bytes/sec)
2119+1 records in
2119+1 records out
1085140 bytes transferred in 0.089 secs (12192584 bytes/sec)
7. Turn the phone off, and connect it in Flashmode again. Using Flashtool, flash your firmware of choice with:
kernel.sin
loader.sin

(Remember to uncheck the wipe options!)

Do NOT skip this step: you need the LT25i kernel on your LT25i system!

8. Let's finish.

We will need adb shell once again. This time, you will need to type a few lines as follows:

Obtain root:
su

Remount /system:
mount -o remount,rw -t ext4 /dev/block/mmcblk0p12 /system

Remove /data/local.prop since it's a security hole; this is important and is normally done by the rootkit's step 3, but we needed to save the file to get to keep root access on our LT25i firmware:
rm /data/local.prop

And finally reboot:
reboot

Code:
G:\Android\LT25i\rootkitGXSX_v3\files>adb shell
[email protected]:/ $ su
su
[email protected]:/ # mount -o remount,rw -t ext4 /dev/block/mmcblk0p12 /system
mount -o remount,rw -t ext4 /dev/block/mmcblk0p12 /system
[email protected]:/ # rm /data/local.prop
rm /data/local.prop
[email protected]:/ # reboot
reboot
Done. You now have busybox, Superuser and su on your stock LT25i firmware.

Remember to clean up those pesky au apps.
 
Last edited:

datagubben

Senior Member
Nov 25, 2010
1,410
504
0
Landskrona


Thank you very much Gasai for nice tutorial. :good:

It works for me and I got root on locked bootloader, but sometimes I have reboot so maybe I did something wrong.

Please copy your post and make a thread in General section.

+1