96 replies to this topic

[SPJESTER]

Off to our next venture... Anyone got any ideas

[my2cents]

Is there a way to run the exploit without booting the phone? I know that the bootloader wont let us boot the phone if we try to flash back to ICS, but everything appears to flash back except the bootloader, if I am not mistaken. Would it be possible to flash back to ICS (obviously it wont boot) but then run a script that would root it without it being able to boot the phone and then flash the JB update again? I know this sounds far fetched because we would somehow also need to protect root without booting up and using Voodoo, but maybe it will spark a bigger and better idea...

[SPJESTER]

U can't go back..that's the problem

Sent from my DROID BIONIC using Tapatalk 2

[STT]

No you can't go back but if you use Matts 1.82 and flash it it writes all but the bootloader. Then it goes to the m screen then black screen. At that point you have the adb set up. Then try using Matts super root took that should protect the root (if it gets it) then reboot into Recovery. Just hold down all there buttons till recovery comes back up. Then reapply the JB update. I Was gonna try this when I got home this weekend.

[wabmorgan]

don't think that will work. :-(

[SPJESTER]

new file

[ajax33]

new file

Close but still a permission problem... Pushes Superuser app, but not the su binary to the phone... so no root

[*] MOTO RAZR XT912/XT912 MAXX JB ROOT
[*] Copyright © 2013 SPJESTER (@mhowell34)
[*]
[*] Before continuing, ensure USB debugging is enabled,
[*] that you have the latest Motorola drivers installed,
[*] and that your phone is connected via USB.
[*] Once you press a button it will begin rooting
[*]
Press any key to continue . . .
"Pushing Files to import"
3456 KB/s (586212 bytes in 0.165s)
4041 KB/s (1862336 bytes in 0.450s)
64 KB/s (660 bytes in 0.010s)
4155 KB/s (85096 bytes in 0.020s)
"Setting Permissions for hack files in /data"
"Temporarily removing /data/local directory"
/system/bin/sh: ln-s: not found
"Restarting the phone for the first time"
"Waiting on Device to boot..."
"Running the ROOT script, thank you china!"
Attempting to place su binary on /system...
debugfs 1.42 (29-Nov-2011)
/dev/block/mmcblk1p20: Permission denied while opening filesystem
debugfs: cd: Filesystem not open
debugfs: write: Filesystem not open
debugfs: set_inode_field: Filesystem not open
debugfs: set_inode_field: Filesystem not open
debugfs: set_inode_field: Filesystem not open
debugfs: Something went wrong.
"Restarting again.."
"Waiting on device to boot"
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
"Installing SuperUser 3.1.4 \ SU 3.1.1"
3757 KB/s (1500495 bytes in 0.390s)
pkg: /data/local/tmp/Superuser.apk
Failure [INSTALL_FAILED_ALREADY_EXISTS]
"Installation is successful, your phone has successfully been ROOTED
"And the Finishing Restart"
Press any key to continue . . .

[SPJESTER]

try number 5 and see if that fixes the
/system/bin/sh: ln-s: not found
error

[ajax33]

Tried the sdcard as well, both scripts failed to run

[SPJESTER]

as in dont do anything? or just dont root

[ajax33]

script fails on rootcopy.sh[10]: syntax error: '(' unexpected

[SPJESTER]

see if that fixes it.

[ajax33]

sdcard test 2 fails to write the 4 files to data/local/12m, permission denied

[SPJESTER]

Im startin to give up lol

[marksibert]

I wonder if it is possible to programmatically trigger a bug report? If so, we could create an app to trigger the bug report (since vol/power and dev menu item don't work). Run the motofail2go exploit, then run the app to trigger the bug report... I suppose if there's no API to trigger a bug report, someone could create a purposely buggy app that would trigger one.

[lostsoul01]

That's a hell of an idea. Would the app launch during the root process though?

[marksibert]

The motofail2go script pauses halfway through and tells you to trigger a bug report on the phone. My thinking is that you would run the 'bug trigger app' at that time. (The script would not launch it automatically.) This would take the place of holding down the volume/power buttons as indicated in the script instructions.

The app would be installed prior to running the script. Or, the script could copy it to the phone and install it. But running it would require launching the app manually from the phone.

[jburchii]

would there be a way to make the root program run the bug program as part of the install process?

[SPJESTER]

Theres a problem with that theory tho. On bionic i dont have that option to report a bug. Volume up + Power for 10 secs did nothing. Which is why i veered away from it. Also we have /system/bin/bugtogo.sh instead of the installed program that could call for the com.motorola.bug2go/.ACTIVITY

Thats how the razr m is rooted yes. But they are different. Couldnt get a bug report to trigger.

[jburchii]

I really know absolutely nothing about this process, but it seems that every time I tried any of the files there is a point that something can't be written to the phone? I'll try any file you have, but I am sorry to report that I do not know enough to help you troubleshoot the problem.