Rooted NK2 AT&T t337a w/ Tutorial

[moonbutt74]

Just had a had a thought, maybe we could tweak a twrp version for say the t-mobile version and try to code safestrap into that and make it boot on our t337a? Recently had the need for a recovery and I want to help get it working! Do you think there is any chance with the one linked here?: http://xdaforums.com/tab-4/general/sm-t235-lte-rooted-twrp-2-8-alpha1-sm-t3027059

C,

hi, i am basically at a dead end with the 337a and safestrap, what the community need is for some who isn't a total asswit like me :silly:
to unlock the bootloader.

I had also tried to negotiate the LK QCOM bootloader exploit but can't seem to figure out how to get the modus to generate the signing key.
@pre4speed hooked me up with a dump of the bootloader but i could not locate the private key which means it's not in the bootloader or
it means i'm an asswit :silly:
@vortox 's thread on the subject is here http://xdaforums.com/kindle-fire-hd...ol-signing-tool-pre-3-2-4-booloaders-t2992435 and as he points out and the rest of us know samsung has a real hard-on for dry fisting it's customers.

m

 

[vortox]

@vortox 's thread on the subject is here http://xdaforums.com/kindle-fire-hd...ol-signing-tool-pre-3-2-4-booloaders-t2992435 and as he points out and the rest of us know samsung has a real hard-on for dry fisting it's customers.

The modulus shouldn't matter in most cases. It's just an upper bound for the generated sigature. To use my tool for the exploit it's more important to understand the format of the signature. The samsung ones i've seen are different for the reference implementation.

That's the reason I'm no longer buying Samsung phones

 

[moonbutt74]

The modulus shouldn't matter in most cases. It's just an upper bound for the generated sigature. To use my tool for the exploit it's more important to understand the format of the signature. The samsung ones i've seen are different for the reference implementation.

That's the reason I'm no longer buying Samsung phones

I hear you on that, but they're in my price range and fairly solid, being a clutz, i beat the hell out of these things and they just keep going !
I would love to go Nexus but not having external storage/expansion is inexcusable, all that duplicitous corporate philosophical crap can blow bubbles. :silly:

A quick question, would using the entry in the public key as modulus work?

 

[vortox]

A quick question, would using the entry in the public key as modulus work?

No. As I said it's necessary to understand the format of the signature.
In the reference implementation the signature is is simply 256 bytes long and PKCS#1 v1.5 padded.
On this device however it's this way:

• First some 32 byte magic number
  

   SEANDROIDENFORCE

• then 256 bytes, maybe the encrypted signature (?)
• and at the end 224 bytes that look a PKCS#1 v1.5 padded decrypted signature

This makes 512 bytes and is incompatible with my tool!

 

[pre4speed]

If the way things are done on the Note 3 and the S5 are the same as this method, you should be able to flash the new kernel AFTER you have rooted then be ready for the next OTA that drops. I ended up freezing anything OTA related after rooting so I'm not forced into an unrootable update. But actually, I'm not even sure I'll get the updates because I'm prepaid AT&T service.

 

[ericyao]

I followed your steps. After trying to install towel root.apk, it tells me App not installed, although I checked Google's warning and chose Install Anyway. Then I got a Security Notice popped up, saying "Unauthorized actions have been detected. Restart your tablet to undo any unauthorized changes". Any ideas?

 

[thisisapoorusernamechoice]

I followed your steps. After trying to install towel root.apk, it tells me App not installed, although I checked Google's warning and chose Install Anyway. Then I got a Security Notice popped up, saying "Unauthorized actions have been detected. Restart your tablet to undo any unauthorized changes". Any ideas?

In Settings > Security, check the Unknown Sources box (Allow installation of apps from sources other than the Play Store) and uncheck the Verify Apps box (Block or warn before installing apps that may cause harm). Make sure you're not getting automatic security updates. If your tablet comes pre-installed with any sort of security/anti-virus app (e.g. my Samsung AT&T phone came with an app called Lookout before I could get rid of it) go to Settings > Application manager > All and select whatever security app there is and force stop it.

 

[ericyao]

Thanks for the help. I did the Security Settings as you said before installing towel root. It turns out I downloaded a wrong apk. After installing the correct towel root, my Tab 4 is rooted now. But the Security Notice keeps popping up from time to time on the top. I couldn't find any security app installed. There are several security related apps or process in the Application Manager. I will just leave the warning there for now.

 

[ericyao]

Is there any custom rom available that have stable 4G lte working for this model?

 

[thisisapoorusernamechoice]

Thanks for the help. I did the Security Settings as you said before installing towel root. It turns out I downloaded a wrong apk. After installing the correct towel root, my Tab 4 is rooted now. But the Security Notice keeps popping up from time to time on the top. I couldn't find any security app installed. There are several security related apps or process in the Application Manager. I will just leave the warning there for now.

You can freeze or uninstall them with Titanium Backup if you know the name(s) of the app(s) or process(es) responsible

 

[pre4speed]

Is there any custom rom available that have stable 4G lte working for this model?

No and there never will be unless we can get safestrap support and a dev that cares enough to make one. We are locked from our bootloader on this model.

 

[greenturtles]

This worked for me but I did have some unexpected results along the way. FYI, I bought the T337A on Feb 15 2015, and it had NF4 with build date of Nov 10 2014. When the NK4 ota update was applied (darn it, I tried to stop it!), it changed to NK2, and kept the same build date. I followed this tutorial and it only changed the build date, to June 10 2014, and it did not change the build no or baseband no, which is still NK2. I figured the build date change to June 10 2014 was the important thing as some other users have reported that towelroot won't work on builds after June 2014.

Once I finished the tutorial, I started getting popup messages that "unauthorized actions have taken place". Oh my. But I proceeded to install towelroot anyway. It took a few tries over the course of an hour or so for it to work. I'm not sure why. Every time I clicked on the "make it ra1n" button in towelroot, it said successful, but when I tried to enable "root explorer" in ES FileExplorer, it would enable for 10 seconds or so, then say, "test access failed, you are not rooted". Root Checker also said I was not rooted. I rebooted a few times, tried Towelroot a few times, and eventually, ES FileExplorer was able to enable root explorer, and root checker also had success.

Once rooted, I installed SuperSU (and selected option to disable KNOX) so that other apps cannot take advantage of my root access and also to stop those security check warnings, probably caused by KNOX (developer says it does not trip KNOX, however I don't know how to verify that). Then I froze some apps related to ota updates with Titanium Backup Pro, renamed a file, and changed permissions on a folder...So hopefully I've nailed the ota updates down.

This is my first android device and my first time trying anything like this! Thanks for posting!

Frozen apps in Titanium Backup Pro:
Att software upgrade
FWUpgrade
Local FOTA
wssyncmlnps

Renamed file:
/etc/security/otacerts.zip to otacerts.zip.bak

Unchecked all permissions boxes for folder:
data/fota

 

[drivel2787]

Simple, cut and dry, and it works. Thank you so much! Now I can get rid of all this JUNK bloatware! :good:

 

[pre4speed]

Do you have the NK2 kernel to ODIN after rooting?

 

[yolo_]

Worked like a charm thanks!

 

[avemt1]

Do you have the NK2 kernel to ODIN after rooting?

I was able to get this working with the nk2 version, although have had issues with google play. and a few other apps.

---------- Post added at 08:47 PM ---------- Previous post was at 07:59 PM ----------

installed Superuser, and everything works fine!

 

[bongra80]

Hi after rooting the sm-t337a is there any custom rom for it?

 

[pre4speed]

Hi after rooting the sm-t337a is there any custom rom for it?

No and there never will be unless we get a safestrap type recovery for it.

 

[CocaFoca]

No and there never will be unless we get a safestrap type recovery for it.

We should start a thread and try to gather everything we know. I would love to have a custom rom for my tab 4, stock is so slow... Will do anything I can to help get this working.

 

[pre4speed]

We should start a thread and try to gather everything we know. I would love to have a custom rom for my tab 4, stock is so slow... Will do anything I can to help get this working.

@moonbutt was trying already but he struck out. However, there is a new tool called FlashFire from the dev of SuperSU that works for the AT&T S5 locked bootloader that *may* be worth checking out. I am NOT a dev, so I can't elaborate on it. If someone with that talent wants to check it out, maybe we can have something for our Tab4.