[Kindle Fire General] Goosteady:
Okay, so I have been able to follow all of the steps in the OP with a few variations:

1) During Step 2, I do not get the message that, “adb server is out of date. killing…” after going into adb shell

2) During Step 2, after entering the ls command, my script read, “ls zergRush” not “ls boomsh zergRush”.

Upon reboot I am still stuck at the unmoving kindle fire boot screen. Could it be that fastboot isn't putting me back into the normal bootmode?

I have included a full copy of my script below.

Microsoft Windows [Version 6.1.7601]

Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\Luke>cd C:\Program Files (x86)\KindleFireRoot\files

C:\Program Files (x86)\KindleFireRoot\files>adb devices

List of devices attached

100E002600000001 device

C:\Program Files (x86)\KindleFireRoot\files>adb push zergRush /data/local/tmp

2251 KB/s (23056 bytes in 0.010s)

C:\Program Files (x86)\KindleFireRoot\files>adb shell chmod 755 /data/local/tmp/

zergRush

C:\Program Files (x86)\KindleFireRoot\files>adb shell

$ cd data/local

cd data/local

$ cd tmp

cd tmp

$ ls

ls

zergRush

$ rm sh boomsh

rm sh boomsh

rm failed for sh, No such file or directory

$ ./zergRush

./zergRush

[**] Zerg rush - Android 2.2/2.3 local root

[**] (C) 2011 Revolutionary. All rights reserved.

[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.

[+] Found a GingerBread ! 0x00015118

[*] Scooting ...

[*] Sending 149 zerglings ...

[+] Zerglings found a way to enter ! 0x10

[+] Overseer found a path ! 0x000151e0

[*] Sending 149 zerglings ...

[+] Zerglings caused crash (good news): 0x40119cd4 0x0054

[*] Researching Metabolic Boost ...

[+] Speedlings on the go ! 0xafd195cb 0xafd3937f

[*] Popping 24 more zerglings

[*] Sending 173 zerglings ...

[+] Rush did it ! It's a GG, man !

[+] Killing ADB and restarting as root... enjoy!

C:\Program Files (x86)\KindleFireRoot\files>adb shell

# cd /system/bin

cd /system/bin

# idme bootmode 4002

idme bootmode 4002

<idme> write 4002 to offset 0x1000

# reboot

reboot

C:\Program Files (x86)\KindleFireRoot\files>fastboot -i 0x1949 -w

erasing 'userdata'... OKAY [109.534s]

erasing 'cache'... OKAY [ 27.793s]

finished. total time: 137.329s

C:\Program Files (x86)\KindleFireRoot\files>fastboot -i 0x1949 oem idme bootmode

4000

... OKAY [ 0.201s]

finished. total time: 0.201s

C:\Program Files (x86)\KindleFireRoot\files>fastboot -i 0x1949 reboot

rebooting...

finished. total time: 0.001s

C:\Program Files (x86)\KindleFireRoot\files>

---------- Post added at 06:52 PM ---------- Previous post was at 06:16 PM ----------

I rooted and set the bootmode to 4000 and rebooted. It remains stuck on the boot screen.

Here is my script:

Microsoft Windows [Version 6.1.7601]

Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\Luke>cd C:\Program Files (x86)\KindleFireRoot\files

C:\Program Files (x86)\KindleFireRoot\files>adb push zergRush /data/local/tmp

2814 KB/s (23056 bytes in 0.008s)

C:\Program Files (x86)\KindleFireRoot\files>adb shell chmod 755 /data/local/tmp/

zergRush

C:\Program Files (x86)\KindleFireRoot\files>adb shell

$ cd data/local

cd data/local

$ cd tmp

cd tmp

$ ls

ls

zergRush

$ ./zergRush

./zergRush

[**] Zerg rush - Android 2.2/2.3 local root

[**] (C) 2011 Revolutionary. All rights reserved.

[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.

[+] Found a GingerBread ! 0x00015118

[*] Scooting ...

[*] Sending 149 zerglings ...

[+] Zerglings found a way to enter ! 0x10

[+] Overseer found a path ! 0x000151e0

[*] Sending 149 zerglings ...

[+] Zerglings caused crash (good news): 0x40119cd4 0x0054

[*] Researching Metabolic Boost ...

[+] Speedlings on the go ! 0xafd195cb 0xafd3937f

[*] Popping 24 more zerglings

[*] Sending 173 zerglings ...

[+] Rush did it ! It's a GG, man !

[+] Killing ADB and restarting as root... enjoy!

C:\Program Files (x86)\KindleFireRoot\files>adb shell

# cd /system/bin

cd /system/bin

# idme bootmode 4000

idme bootmode 4000

<idme> write 4000 to offset 0x1000

# reboot

reboot