yashsingh1/xdaforums huggingface dataset:
[Android Software Development] rprr:
on Vizio VTAB1008

I have tried the most recent zergRush on my Vizio VTAB 1008 running Gingerbread 2.3.2 and this exploit did not work. Here is the complete output which I ran in manual mode.

$ ./zergRush

[**] Zerg rush - Android 2.2/2.3 local root

[**] (C) 2011 Revolutionary. All rights reserved.

[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.

[+] Found a GingerBread ! 0x00015118

[*] Scooting ...

[*] Sending 149 zerglings ...

[+] Zerglings found a way to enter ! 0x10

[+] Overseer found a path ! 0x000151e0

[*] Sending 149 zerglings ...

[+] Zerglings caused crash (good news): 0x40119cd4 0x0054

[*] Researching Metabolic Boost ...

[+] Speedlings on the go ! 0x8001a737 0x8003a4bf

[*] Popping 24 more zerglings

[*] Sending 173 zerglings ...

[-] Bad luck, our rush did not succeed :(

I did notice that other earlier versions of zergRush had been tried on this tablet but none succeeded in rooting it.

Is it possible to modify the exploit so that it could succeed on this device? Or is it possible that this vulnerability has been patched and will not succeed at all?

Any help provided by anyone will be HUGELY appreciated. If this helps, I do have the Android source code installed and am able to compile this from source code as needed.

All other exploits have failed on this tablet. I have tried rageagainsthecage, gingerbreak, etc. It is difficult to believe that Vizio has made such a secure tablet with no exploitable vulnerabilities.

Thanks again... Getting desperate...
[Android Software Development] nintendolinky:
It works on the HTC Sensation XL, however it unmounts the internal sd card, and it wont remount unless there is a reboot, therefore removing root, is there anyway to get it to work so the sd card is either not unmounted or it remounts automatically
[Android Software Development] krish_nank:
Works fine on Huawei ideos X5 U8800... Thank you :)
[Android Software Development] emilitingo:
try this:

http://xdaforums.com/showthread.php?t=1321582

maybe if you add this lines in the .bat...just before this line:"@echo --- pushing busybox"

@files\adb shell sleep 1

@files\adb remount

DooMLoRD or ieftm, can you help us?
[Android Software Development] paxChristos:
You don't need the sd card mounted for the automated one to work

Run it from your pc, it didn't work if you try and run it on your phone.
[Android Software Development] bjg222:
We're having the same problem with the HTC Vivid. It's got an internal & an external sd card, where the internal one is separate from the system partition and is mounted to /mnt/sdcard (/sdcard is a link to /mnt/sdcard) and the external one is mounted to /mnt/sdcard2 (/sdcard/ext_sd is a link to /mnt/sdcard2). Running zergRush seems to make the internal one innaccesible. In the shell, it's still there and mounted properly, but the OS can't seem to see it at all, and any apps (such as gallery or music) that rely on having storage available say that the sd card is not mounted.

adb remount doesn't seem to help. I believe that simply remounts /system as rw.

PS - The Vivid is an HTC Holiday/Raider variant on AT&T in the US. zergRush works to root it, just has the side affect of making the internal sd inaccessible
[Android Software Development] designgears:
http://code.google.com/p/android/issues/detail?id=21681

Looks like this hole is getting plugged fast.
[Android Software Development] Ch4lky:
New version updated to fix this problem, check the GIT ;)
[Android Software Development] jitin02:
tryd on my htc pico and got the following : can anyone point me whats the line at the end means??

C:\android-sdk-windows\platform-tools>adb shell
$ chmod 755 /data/local/zergrush
chmod 755 /data/local/zergrush
$ /data/local/zergrush
/data/local/zergrush

[**] Zerg rush - Android 2.2/2.3 local root
[**] (C) 2011 Revolutionary. All rights reserved.

[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.

[+] Found a GingerBread ! 0x00017118
[*] Scooting ...
[*] Sending 149 zerglings ...
[*] Sending 189 zerglings ...
[-] Hellions with BLUE flames !
$
[Android Software Development] mark_6700:
Reposting this here as recommended by DoomLoRD.

v3 isn't working on a ZTE Warp phone running GingerBread 2.3.5

Output:

[+] Found a GingerBread ! 0x00015118[*] Scooting ...
Unable to open log device '/dev/log/system': Permission denied[*] Sending 149 zerglings ...
Unable to open log device '/dev/log/system': Permission denied[*] Sending 189 zerglings ...
[-] Hellions with BLUE flames !

If the devs want to try getting it to work on the Warp phone and need access to the phone then I can provide a remote shell and adb connectivity.
[Android Software Development] $omator:
it fails with this funny output on I9000 XXJPY Froyo

maybe because of

hope that helps in next version
[Android Software Development] mark_6700:
Means that it didn't work.
[Android Software Development] Ch4lky:
That's right, there's a typo here I'll fix in a future version, but it does not trigger a bug, since libc.so is already loaded by the exploit.

This output means that the exploit didn't crash vold, or didn't know it did.

The reasons can be :

- vuln has been patched

- no debug info in the logs

- no access to the logs

- the buffer size is different on your device than on the others (<- can be fixed)
[Android Software Development] $omator:
duno mate i just pasted what someone posted in easy root for gt-i900 thread

xxjvpy froyo he said fail and started thinking that it might be that
[Android Software Development] kholk:
It doesn't work on the latest RAZR XT910 en.EU OTA.
[Android Software Development] Ch4lky:
Can you paste the exploit output ?
[Android Software Development] hermanchb:
pls help i got this msg for my SGS2 GT-I9100G Android: 2.3.6 :-

---------- Post added at 06:04 PM ---------- Previous post was at 05:36 PM ----------

my sgs2 i9100g got same thing~:confused:
[Android Software Development] kholk:
It seems it has been fixed on Android 2.3.6...as we're seeing it doesn't work on any 2.3.6 device :(
[Android Software Development] Ch4lky:
Not fixed in 2.3.7, so I doubt it is in 2.3.6.
[Android Software Development] mark_6700:
WARP IS NOW ROOTED!!!!

Thanks go to Chalk (developer of zergRush) and interdpth for their hard work!

I tested on my phone and got root this morning - first Warp to be cracked :D

I suppose either Chalk or interdpth will be releasing an official exploit shortly!
[Android Software Development] $omator:
depends when it was compiled - if after google cme up with patch and 'compiler' used it then it will not work

most probably every single one compiled after patch release will not work ;)
[Android Software Development] kholk:
Well, on Defy+ and on the latest RAZR OTA it doesn't work...and well, I can confirm the latest RAZR 2.3.6 has been compiled on November 14.
[Android Software Development] $omator:
with todays version there is still

spam for i9000xxivt but it works anyways =)
[Android Software Development] hermanchb:
I failed to root and got the msg below, would you mind to help me?
[Android Software Development] Ch4lky:
A new version has been pushed to the git repository, fixing a bug for ZTE Warp.

hermanchb, try this version, and if it still fail, send me your "/data/local/tmp/crashlog" file.
[Android Software Development] creezalird:
i have the same problem like hermanchb with i9100G.

i've tried adb pull my crashlog but it seems the file is zero in size. 4 files were pulled from the tmp folder.

and i used the newest binary too

added : just read the c code for zergrush and i think the crashlog is zero/NULL and that is why the "Zerglings did not leave stuff at all" came up

if ((f = fopen(crashlog, "r")) == NULL)
die("[-] Zerglings did not leave stuff at all");
[Android Software Development] hermanchb:
you meant the latest version? Where is the Download link and I can get the "/data/local/tmp/crashlog" file, in phone??

---------- Post added at 05:15 PM ---------- Previous post was at 05:13 PM ----------

How u got these code ??
[Android Software Development] creezalird:
newest zergrush binary here

i attach here my runme.bat script with crashlog pull, the crashlog will be save under folder "files"

rename the runme.txt to runme.bat and then replace it with yours

and try, maybe it will work for u
[Android Software Development] Ch4lky:
Confirmed, it has been patched on latest Razr OTA.
[Android Software Development] hermanchb:
here it is ~
[Android Software Development] crdnilfan:
I'm trying to integrate the exploit into an app that will run directly on the phone, I'm using z4root's framework, replacing their exploit with the latest zergRush, I'm getting "Error creating nydus: permission denied" at:

socket_local_client("vold", ANDROID_SOCKET_NAMESPACE_RESERVED, SOCK_STREAM)

(line 226)

Pretty sure it's a permissions issue, the permissions I'm giving the app are:

<uses-permission android:name="android.permission.WAKE_LOCK" />
<uses-permission android:name="android.permission.INTERNET" />
<uses-permission android:name="android.permission.READ_LOGS" />
<uses-permission android:name="android.permission.MOUNT_UNMOUNT_FILESYSTEMS" />

Any ideas?
[Android Software Development] Ch4lky:
You can't integrate it to an app, you won't have the required privileges, even if you give all permissions.

And it's better, since it can't be used in malware.
[Android Software Development] willcaff:
on the samsung stratosphere if you use the rootzwiki method to flash the kernel you can then use zergrush and get root without manually pushing su and busy box
[Android Software Development] fathroen:
ZTE Light Plus Tab Root Success

hi guys,

I just want to let you know that the latest zergRush works with ZTE Light Tab 2(V9+) (it is called ZTE Light Plus Tab in Indonesia).

Previously I used DooMLorD toolkit but failed. I suspect because it use older version of zergRush that doesn't work with ZTE Light Plus Tab.

Gingerbread 2.3.4.

Thank you guys for all the nice work!
[Android Software Development] $omator:
his script sometimes runs the binary with succes but fails at copying su/bb due to insufficirnt space on device
[Android Software Development] DooMLoRD:
well in this case, i have not update with the new ZTE Warp binaries
[Android Software Development] $omator:
i m sory i do not understand wht you are trying to say
[Android Software Development] fathroen:
Probably he meant that his script is still using older zergRush without ZTE Warp fix. That is why it fails to root ZTE Light Plus. Please CMIIW.
[Android Software Development] powercat_:
Hello

I'm trying to root LG Gossip Pro (LG C660R) but am unable to do so.

(Android version 2.3.4, Software version V10e-Oct-05-2011)

I also have a LG Optimus Pro (LG C660) and I was able to root it using zergRush.

(Also Android 2.3.4)

I am using the latest binary of zergRush available on github.

I get this output from zergRush:

$ chmod 755 /data/local/zergRush
chmod 755 /data/local/zergRush
$ ./zergRush
./zergRush

[**] Zerg rush - Android 2.2/2.3 local root
[**] (C) 2011 Revolutionary. All rights reserved.

[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.

[+] Found a GingerBread ! 0x00000118
[*] Scooting ...
[*] Sending 149 zerglings ...
[+] Zerglings found a way to enter ! 0x10
[+] Overseer found a path ! 0x00015180
[*] Sending 149 zerglings ...
[+] Zerglings caused crash (good news): 0x4011bcf4 0x0064
[*] Researching Metabolic Boost ...
[+] Speedlings on the go ! 0xafd25167 0xafd3928f
[*] Popping 8 more zerglings
[*] Sending 157 zerglings ...

[+] Rush did it ! It's a GG, man !
[+] Killing ADB and restarting as root... enjoy!

C:\Program Files (x86)\Android\android-sdk\platform-tools>

Then, I try to remount:

C:\Program Files (x86)\Android\android-sdk\platform-tools>adb remount
remount failed: Operation not permitted

Oops! Seems like zergRush wasn't really able to get root, did it?

Anyone have any idea?
[Android Software Development] $omator:
latest versions of i9000 firmwres are patched :)
[Android Software Development] powercat_:
I don't have a i9000, I have a LG Gossip Pro (LG-C660R)
[Android Software Development] no.human.being:
Works on an HTC Wildfire S (S-ON).
[Android Software Development] chrisngrod:
Hellions with BLUE flames :-(

Cricket Huawei Mercury M886
[Android Software Development] J.Y.Daddy:
Can't re-root on my Razr

Thanks for your work.

I have a problem on my Razr.

Can't re-root. Help, please.

This result is after OTA updated. (Gingerbread 2.3.6 stock)

here is the result of execute:

shell@umts_spyder:/$ /data/local/zergRush
/data/local/zergRush

[**] Zerg rush - Android 2.2/2.3 local root
[**] (C) 2011 Revolutionary. All rights reserved.

[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.

[+] Found a GingerBread ! 0x00000118
[*] Scooting ...
[*] Sending 149 zerglings ...
[*] Sending 189 zerglings ...
[-] Hellions with BLUE flames !
[Android Software Development] bioweb:
I'm having trouble rooting my LG Optimus 3D. Since installing the latest V21b firmware (GB 2.3.5) none of the rooting methods work. I've used SuperOneClick (every version from 2.1.1 and up) and the latest zergRush, with and without Doomlords batch file but all I'm getting is:

[**] Zerg rush - Android 2.2/2.3 local root
[**] (C) 2011 Revolutionary. All rights reserved.

[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.

[+] Found a GingerBread ! 0x00000118
[*] Scooting ...
[*] Sending 149 zerglings ...
[*] Sending 189 zerglings ...
[-] Hellions with BLUE flames !

Something must have changed because one firmware before, V21a (2.3.5 too), root worked perfectly.

I've attached the crashlog if anyone's interested.
[Android Software Development] puffidredz:
getting permission denied on lg optimus v. am i doing something wrong or is this phone unable to be rooted? android v 2.2.2

E:\Software\Android2\android-sdk-windows\platform-tools>adb shell
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
$ chmod 755/data/local/zergRush
chmod 755/data/local/zergRush
Usage: chmod <MODE> <FILE>
$ /data/local/zergRush
/data/local/zergRush
/data/local/zergRush: permission denied
[Android Software Development] bioweb:
You're missing a space in your chmod command:

chmod 755/data/local/zergRush --> chmod 755 /data/local/zergRush
[Android Software Development] puffidredz:
thx. i didnt even notice the space. so now i get whats below, but i dont see any indications the phone is actually rooted so i'm not sure if it worked or not; doesn't look like it did. i am getting message that superuser was not found su binary was not found on my phone in /system/bin/su or /system/xbin/su

[**] Zerg rush - Android 2.2/2.3 local root
[**] (C) 2011 Revolutionary. All rights reserved.

[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.

[+] Found a Froyo ! 0x00000108
[*] Scooting ...
[*] Sending 149 zerglings ...
[+] Zerglings found a way to enter ! 0x10
[+] Overseer found a path ! 0x000150e8
[*] Sending 149 zerglings ...
[+] Zerglings caused crash (good news): 0x4011bcec 0x0064
[*] Researching Metabolic Boost ...
[+] Speedlings on the go ! 0xafd186ef 0xafd3a93f
[*] Popping 8 more zerglings
[*] Sending 157 zerglings ...

[+] Rush did it ! It's a GG, man !
[+] Killing ADB and restarting as root... enjoy!

E:\Software\Android2\android-sdk-windows\platform-tools>
[Android Software Development] no.human.being:
You might have to run it again (must delete "/data/local/tmp/boomsh" and "/data/local/tmp/sh" first for this to succeed), do "./adb remount" after getting disconnected from the adb shell, then do "./adb shell" again.

The shell you're getting then will show a "#" as prompt instead of a "$", indicating it is a root shell.

It is only the adb remote shell that is rooted. The processes running on the phone still won't have root access unless you do some more modifications via the (now privileged) remote shell.
[Android Software Development] V@no:
Hello.

The exploit works fine on LG Nitro HD with GB 2.3.5, however I managed it soft brick it and now it stuck in boot animation loop. The zergRush fails but not consistently:

[+] Found a GingerBread ! 0x00015118
[*] Scooting ...
[*] Sending 149 zerglings ...
[+] Zerglings found a way to enter ! 0x10
[-] No path found, let's hope ...
[*] Sending 149 zerglings ...
[+] Overseer found a path ! 0x000151e0
[*] Sending 149 zerglings ...
[-] Zerglings did not leave interesting stuff

[+] Found a GingerBread ! 0x00000118
[*] Scooting ...
[*] Sending 149 zerglings ...
[-] Error creating Nydus: Connection refused

[+] Found a GingerBread ! 0x00000118
[*] Scooting ...
[*] Sending 149 zerglings ...
[*] Sending 189 zerglings ...
[-] Hellions with BLUE flames !

[+] Found a GingerBread ! 0x00015118
[*] Scooting ...
[*] Sending 149 zerglings ...
[*] Sending 189 zerglings ...
[+] Zerglings found a way to enter ! 0x18
[-] No path found, let's hope ...
[*] Sending 189 zerglings ...
[+] Overseer found a path ! 0x000151e0
[*] Sending 189 zerglings ...
[+] Zerglings caused crash (good news): 0x4011dcd4 0x0054
[*] Researching Metabolic Boost ...
[+] Speedlings on the go ! 0xafd19c87 0xafd3b667
[*] Popping 24 more zerglings
[*] Sending 213 zerglings ...

[-] Bad luck, our rush did not succeed :(

Since I know for sure it works, maybe there is a way modify it so it would handle timeouts or whatever differently?

Thank you.
[Android Software Development] V@no:
I finally managed root my boot looping phone but only with zergRush from version 1 at this topic:

http://xdaforums.com/showthread.php?t=1321582

The output was this:

[+] Found a GingerBread ! 0x00015118
[*] Scooting ...
[*] Sending 149 zerglings ...
[+] Zerglings found a way to enter ! 0x10
[+] Overseer found a path ! 0x00015118
[*] Sending 149 zerglings ...
[+] Overseer found a path ! 0x00015118
[*] Sending 149 zerglings ...
[+] Overseer found a path ! 0x000151e0
[*] Sending 149 zerglings ...
[+] Overseer found a path ! 0x000151e0
[*] Sending 149 zerglings ...
[+] Zerglings caused crash (good news): 0x4011dcd4 0x0054
[*] Researching Metabolic Boost ...
[+] Speedlings on the go ! 0xafd25ec1 0xafd3b667
[*] Popping 24 more zerglings
[*] Sending 173 zerglings ...

[+] Rush did it ! It's a GG, man !
[+] Killing ADB and restarting as root... enjoy!

The empty line at the bottom is when it stopped for 1 minute and I pressed a key.
[Android Software Development] Genrauser:
Could you guys update this please?

It doesn't work for most 2.3.6 and 2.3.7 android version based rooms :(

[-] Hellions with BLUE flames! <-- the common error for those.

Please update it :(
[Android Software Development] paxChristos:
The exploit was patched back in november, so if the newer version have the patch, this exploit is useless...
[Captivate Q&A, Help & Troubleshooting] r_pimpn:
anyone having trouble with the incoming time stamp on this rom?

Mine is 4 hours behind, using rogers wireless.

Thanks.
[Captivate Q&A, Help & Troubleshooting] erbsmokah:
This happens when flashing foreign roms. There is an app you can use to fix it (bandaid) called sms time fix on the market.

Some people have had success with adjusting the time zone settings but i have never had that work for me.
[Captivate Q&A, Help & Troubleshooting] billd104:
What he said!!
[Captivate Q&A, Help & Troubleshooting] TRusselo:
has nothing to do with foreign roms. rogers stock 2.1 had that issue.

there is an app to fix it.

or flash the KJ3 stock rom i released today. its newer !... or CRT60s modded stock KJ3
[Nexus S Accessories] Deleted member 2842059:
I'm curious to see how well they hold up after all this time? And if anyone sprung for the Ringz audio cap?
[Nexus S Accessories] zephiK:
I'm still using it and noticing the texture of it is starting to fade away.

Particularly on the chin part of the phone (and edges).
[Nexus S Accessories] xcolt45:
I'm using it and having the same thing happen as the post before mine. Mine came with an audio cap and well I lost it haha.
[Nexus S Accessories] ChargingPaladin:
I switched to the Seidio Active after about a month with the Ringke. I did get the combo with screen protector and audio cap; both of them have been fine. The audio cap fits with the Active, so that's nice.

Anyway, as far as the Ringke goes, I carry my phone in my pocket and after a bit the edges became loose and weren't tight to the phone anymore. I was able to remedy it for a little while by wrapping a rubberband around the Nexus itself to act as a spacer between the phone and the loosened case, but that was hardly an ideal solution.

The chin was loosing a little of the laser etching towards the end but it was hardly an issue.

Slightly off-topic:

There is a disappointing dearth of hard cases for the Nexus S. I'm pleased with the Active but an all-hard case would be nice. I looked at the Case-Mate Pop! and the Seidio Surface but they booth looked even bulkier than the Active as well as killing the shape of the phone (hence me trying the Ringke first). I wish Incipio made a Nexus S case aside from the Feather.

Sent from my Nexus S
[Nexus S Accessories] Rem3Dy:
The coating does not hold up very well.... I am quite disappointed. I had asked to RMA mine as I had only had it for 3 weeks but I couldn't because I had thrown away the box :(
[Nexus S Accessories] blizzake:
I'm still using mine but it has no more texture at all and my screen is scratched all to &_@% next time I buy a phone i'm getting an otterbox or not using it
[Nexus S Accessories] androidlicious:
I am. Sadly, the color on the back has faded. But, I still love the case because it is incredibly thinner than all of the ones currently available.

I am thinking of switching to an Incipio Feather. Does anyone know if that case is thinner than the Rearth Ringke?

Or are there any other thinner cases out there?
[HTC Sensation] mexxxico:
Nexus PRIME bootanimation and matching downanimation (qHD)

Honeycomb bootanimation and matching downanimation (qHD)

Black bootanimation Beats by Dr. Dre and matching downanimation (qHD)

Enjoy
[HTC Sensation] CB620:
Thanks.

Sent from my HTC Sensation XE with Beats Audio
[HTC Sensation] -juanito-:
i just installed in AR HD 4.1.3 but nothing new !! still stock boot animation :(
[HTC Sensation] CB620:
My bootanimation is in data/local did you place it there.

Sent from my HTC Sensation XE with Beats Audio
[HTC Sensation] -juanito-:
it works now :D .. thanks
[HTC Sensation] mexxxico:
Some ROMs have boot animation in /data/local some ROMs in /system/customize/resources directory.

More info in my signature link...
[HTC Sensation] CB620:
No prob.

Sent from my HTC Sensation XE with Beats Audio
[HTC Sensation] zare51:
and I expected that you will be the first to customize the boot animation for the sensation :D

thanks man
[HTC Sensation] mexxxico:
Thx man. I make this for people who love it :)
[HTC Sensation] Lafenear:
Thanks man.
[HTC Sensation] kupreng:
Thanks a lot :)
[HTC Sensation] thanet:
Thank U so much.

but how to install?
[HTC Sensation] mexxxico:
With any file manager, copy boot animation on /system/customize/ or /data/local (depends of ROM you are using) or... Check the first link in my signature.
[HTC Sensation] ballu84:
Thx!
[HTC Sensation] sosquidtaste:
I loaded the attached bootanimation.zip and it looked amazing, except that it was going a little bit too fast.

I've attached a "downclocked" version that should be at a more typical animation speed. Rename to just "bootanimation.zip" and push where appropriate on your system.

Thanks so much to mexxxico for doing the hard part of the port :]
[HTC Sensation] sergeybrin:
Thanks for posting a screenshot so I could see what this looks like before I download it.
[HTC Sensation] sniperde:
just open the zip file and have a look at the images :)

and PLEASE change the color of your writing...
[HTC Sensation] Supermade:
For those using Android Revolution (I'm using 3.6.2, not sure if this qualifies for previous versions) use Root Explorer. The original bootanimation.zip is under data/local. Copy and overwrite with this zip.

Also, is it just me or does this boot animation look a little dull? As if the colors aren't vibrant... Maybe that's how the original looks. This animation is still bad ass. Best animation I've seen so far...maybe not the colors though! :o