yashsingh1/xdaforums huggingface dataset:
[Sharp Aquos Crystal] onroP89:
I will ship the finest german beer if you manage to root this damn phone so we can move on to the next step and activate GSM:highfive:
[Sharp Aquos Crystal] MrTriTanium:
I don't know how you got it to do that, but with the Boost model I have I got something completely different. When I hold Pwr + Vol Up the, LED turns white after holding it for a second. After the LED turns on it is white for 8 seconds , it doesn't do anything for a second and then it vibrates for 6 seconds. After the first 6 seconds vibrating, it stops for a second and will then vibrate for 15 seconds, stop for a second, and vibrate for another 15 seconds. My guess is that after it starts vibrating for 15 seconds and stopping for 1, it keeps repeating.

I also tried something else: I let go of Pwr + Vol Up after the LED turned on white and let go. Only the LED stayed on for 15 seconds, it didn't vibrate or turn on the screen or make any audible noise.

I did install the Sharp ADB drivers on my laptop (Y580 w/ 840 EVO), but don't have a USB to hook it up ATM. Will see what it does when I connect it later.

+1 Billion for Jimmy Neutron reference ;)
[Sharp Aquos Crystal] (x_x)Zombie:
Ya sorry working with a very crappy comp, mine will do the same sequence off vibrates as well if I hold it. It is white, I'm sorry I'm doing a terrible job documenting what I'm doing here. Be patient but as I've stated this just seems to be a prerequisite to get it into bootloader (I believe) their still could be a secondary security measure, I.e. the time out of the device as an issue, finally got free time will post my finding shortly, Hell a six pack of rolling rock will do nicely my good sir, if im actually onto it.
[Sharp Aquos Crystal] jamer123:
If I'm not mistaken ting can unlock international gsm on the phone as its specifically listed here https://help.ting.com/entries/43744186-International-SIM-Unlock
[Sharp Aquos Crystal] onroP89:
i found this too :)

Already asked em how it works if i buy a Sprint/Boost Sharp AQUOS Crystal, am i able to use it in Germany?

Till now, no answer ...

Couz that would be the best, i buy the Sprint/Boost Version form Ebay for 120$, buy a ting contract and use the phone in Germany. As a German ofc, i hope i dont need to be form the US to close a contract with ting. Than i just pay the 6$/month to ting which is a fair deal for a unlocked phone. and use a German Sim Card with it.
[Sharp Aquos Crystal] UltimaXtreme:
I believe I managed it. I held the Vol Up button while inputting Power, and the LED came up blue. Then I plugged the USB in. Indeed, my computer has installed something, though I am not sure what. Possibly drivers coinciding with the Sharp drivers available. I'm trying to watch the device manager on this.

As I saw, it came up as an Unknown Device. So I assume drivers aren't coming up for this, but it's certainly a suggestion of something positive. If I try to map the device to the Sharp drivers, it cannot locate them, despite the folder being right there. It's impossible for me to scroll through the details in the properties fast enough, but I can repeatedly identify just nulls due to lack of drivers. Whatever this mode is, it's too short to put diagnostics to, and how one would crack into it is beyond me. I also don't know about the open source files, but none of them work for 306SH due to the builds available being S00XX while we have ones like S8216 (mine, at least. I've not dared update for sake of the root).

MrTriTanium, I'll assume by the differences in build numbers, those files are all for the 305SH and not the 306SH. You can update that thread.
[Sharp Aquos Crystal] MrTriTanium:
After trying about a dozen different times, I haven't been able to turn the LED Blue...

I did update and my phone reports: Build Number: KVT49L01 ; SW Version: SA300.

Nothing else in About Phone comes close to what the OSS lists.

As for the update Ultima, I have posted in the 305 asking if there's any match with what they see. I want to make sure it is for the 305 and not 306 before I update.
[Sharp Aquos Crystal] psychostick90:
Recover mode on sharp 306SH

I don't know if anyone else has gotten here ( too many pages for me to read through while at school)

But how I managed to put my Aquos Crystal in recovery mode was to shut the phone down completely, and hold both of the volume buttons (+ and -) and hold the power button (all 3 at the same time) for about 4 seconds and it puts me to recovery mode to factory reset the device or just reboot.

Not sure where to go from there as i've only had rooting experience with HTC and Samsung so far.

hope this helps.
[Sharp Aquos Crystal] whynot4444:
but i use 306sh and use command adb reboot recovery, it just power on again, i will try your way
[Sharp Aquos Crystal] onroP89:
Hello again,

So after a long conversation with ting, i think there is a way to unlock the GSM Modul in the 306SH, and use it with other carrieres aswell !!

i refer to this post on the ting page.

https://help.ting.com/entries/43744186-International-SIM-Unlock

As you can see in the table, there is the 306SH. So i asked the support if they are able to unlock the Phone for a trip to Germany, for a GSM Network

here is the massage form the support,

Is anyone here using the Ting with the phone and wanna give it a try? Call the support and tell me you wanna make a trip to a Germany/EU or any other Country with GSM Network. They will unlock ur phone and you can add a SIM Card to give it a try and see if its connects.

You just need a US GSM Sim Card, like T-mobile

And if that works, you can sell me ur unlocked phone:silly:
[Sharp Aquos Crystal] whynot4444:
her, that mean support sharp sure 306sh have gsm network, right ?
[Sharp Aquos Crystal] orangekid:
Alright,

Did a bit of cleanup here.

Let's please not post things like "donate X amount of money to Y paypal address for Z file," that's common sense and definitely shady. There ARE some S OFF solutions that are paid and are legitimate, but you can find such in our paid apps section by well known forum members, and they don't just send you a file for money. So let's just make sure we're not posting things like that.

Thanks.
[Sharp Aquos Crystal] rolyataylor2:
Is there a way to switch to ting if....

Is there a way to switch to ting from boost if I don't have the box that the phone came in... In other words I can't get the ISID or is there a alternate method to get this number? :confused:
[Sharp Aquos Crystal] maximka18:
306 sh unlock

So, there you have it, complete unlock solution for 306sh!

Here's the instructions:

1. rename 306sh_RUIM.txt to 306sh_RUIM

2. install and run UICCUnlock(the name does mean nothing) will remove perso lock

3. run 306sh_RUIM should set RTRE to RUIM only

Then the phone works with China Telecom.
[Sharp Aquos Crystal] vanarebane:
Wow, Any 306SH owners can confirm? I own a 305SH. Shame...
[Sharp Aquos Crystal] ketanchi:
dear maximka18

its unlocking for both sim(text/msg and 3g or 4g) and multimedia unlock.....can 3g or 4g work ..i am from india and in india used cdma 900Mhz...pls reply must
[Sharp Aquos Crystal] ericofxda:
Can we use GSM simcards now? on this phone unlocked?

(we want to know more details about it Sir/Mam) Thank you in advance :fingers-crossed:
[Sharp Aquos Crystal] Jared's360SH:
HELP

How do you install the usb adb driver???? Im new with this stuff
[Sharp Aquos Crystal] MrTriTanium:
There are instructions on bottom of the same Sharp webpage where you can find the drivers.
[Sharp Aquos Crystal] Jared's360SH:
THNX

got it thanks alot
[Sharp Aquos Crystal] stu5797:
This morning there was a post here where you pay a guy $20 and he will root the 306sh phone. with an apk. Where did that post go? I am looking all over for it!
[Sharp Aquos Crystal] weltwon:
ALL posts demanding money will be removed.

ALL posts demanding money will be removed.

Demanding means that you MUST send a payment in advance for something that should be free on XDA.

XDA Developers are allowed to accept donations for any amount and at any time chosen by viewers.

Glenn
[Sharp Aquos Crystal] stu5797:
I dont think anyone demands anything...
[Sharp Aquos Crystal] MrTriTanium:
Yes, he was. In order to "get" the .apk to root the 306, he 'demanded' the payment in order to get root. Admittedly, demand is the harsher word to use (I say he requires payment).

It

Paying to get root and/or unlock is NOT what this community is about. His/her posting that breaks XDA Rule #11 by doing so. XDA does have a place for paid apps but (s)he does not meet the criteria XDA has based on their account details.

Donations are different. While a dev may encourage donations for using their work, you would do so after-the-fact if you chose to, not before.
[Sharp Aquos Crystal] etirkca:
:laugh: Don't worry. He didn't have root anyway. It's a scam.
[Sharp Aquos Crystal] d@vo:
Yes, we want the root, please post here and then we start to donate, sorry but that the rule.
[Sharp Aquos Crystal] club11h11:
305sh

Xin chao ban. minh cung o VN ban unlock giup minh duoc ko?

minh cam on ban nhieu\minh k biet SDT cua ban len k alo duoc

ban alo minh nhe minh se hau ta hi

0972794147

Mr. Trung
[Sharp Aquos Crystal] ecaslak:
Vuln found for KitKat, has been used for 3 devices so far

There is a new root exploit for KitKat on the Ascend Mate 7 that has been ported to the Xperia Z3 and Z3 Compact. It's very possible this will also work on the Aquos Crystal, but maybe not with the latest OTA (depending on if the kernel build was before October 2014).

Check it out: xdaforums.com/mate-7/general/wip-mate-7-root-bl-unlock-t2995086/post57991147#post57991147
[Sharp Aquos Crystal] t-o-f-u:
this is probably how root would be obtained on this phone. it uses an exploit in kit-kat (that is supposedly very difficult to pull off) which gains system uid. then, there is a kernel exploit for a qualcomm-specific driver that can only be exploited by a user with system uid.

do you know how it's being ported to other devices? i didn't see source listed. just an APK.
[Sharp Aquos Crystal] whynot4444:
moi ban máy bác, đang mua lại cây khác, chưa unlock dc bác, nó chỉ cho chỉnh thế thôi
[Sharp Aquos Crystal] UltimaXtreme:
This does seem to be the only chance unless we can figure out the boot loader. Let's hope our luck works out.

Maybe try the PoC ststem-service crash on CVE? If that busts the device, we might be wide open for a root.
[Sharp Aquos Crystal] mofugggz:
my phone didn't sell. I'm back

Well I saw some hope by using the vol+ & pwr till white led then plug into USB. I need to manually install the drivers as the phone times out before drivers finish. Or I need to figure out a Linux solution. I'll keep you updated with my findings.

P.s. I found hidden menu utility. I used nova launcher. Long press on desktop and choose shortcuts. Choose activities then hidden menu and add data.Dataeditpreferences..
[Sharp Aquos Crystal] kidza66:
how to root sharp aquos crystal http://hexamob.com/devices/how-to-root-sharp-aquos-crystal/

real or ??????
[Sharp Aquos Crystal] UltimaXtreme:
That's false. The Kingo root method was tested, but failed to succeed, so no, not a real root. Still waiting for a working exploit to root it, and even to unlock the bootloader.
[Sharp Aquos Crystal] quadraphone:
Is this the right source code for the 306SH?

Hi weltwon, is this the right source code for the 306SH kernel? Are additional packages required?

I've been checking the SharpUSA support page ever since calling SHarp's tech support to request source code for the Aquos Crystal, and saw this today:

http colon wack wack www dot sharpusa dot com/Home/CustomerSupport/SharpCareCenter/MobileSupport/OpenSourceCode dot aspx

---------- Post added at 05:50 PM ---------- Previous post was at 05:42 PM ----------

Apologies for the lame URL, I'm still on newbie lockdown.

sharpusa.com/Home/CustomerSupport/SharpCareCenter/MobileSupport/OpenSourceCode.aspx

---------- Post added at 06:03 PM ---------- Previous post was at 05:50 PM ----------

This website makes the following claims:

Download CWM & TWRP Recovery for Sharp Aquos Crystal

Upgrade/Update Sharp Aquos Crystal to 5.0 Lollipop

I wouldn't think so, but thought I'd run it by you:

cwm-twrp-recovery.org/mp3-0/sharp-aquos-crystal-6590.html
[Sharp Aquos Crystal] d@vo:
No,no, not again!!!!
[Sharp Aquos Crystal] UltimaXtreme:
970% bull crap rate, rather. Get this damn thing out of here.
[Sharp Aquos Crystal] whynot4444:
kick out him, 306sh sharp give for us a source code, may be will have a root
[Sharp Aquos Crystal] I_AM_DFW:
show proof

Weren't you asking for root only a week or so ago. Show proof and I'm sure you're pay pal will flood
[Sharp Aquos Crystal] Zombiebliss:
full of it

No screen shots, no videos, no one else to back up your claim. Keep asking for money ima walk into sharp and slap the s$#& outta your dad and tell him what an annoying f&$& his son is root or not, now set up a pay pal and accept donations, stop being a b$&$. Of course this is assuming your not a lying sack of s$&$
[Sharp Aquos Crystal] skryte:
Are you trying to get him fired? Doubt it though because aquiois isn't even a real company that's just a model Lin for Sharp. Seriously though this guy isn't too bright. Trying to charge people on a site that's donate only and probably with crap he stole from Sharp.
[Sharp Aquos Crystal] Zombiebliss:
Chances are he's just blowing smoke out his ass, he had real root them he would've set up donations already and released it. And as you pointed out he's trying to charge on a site full of those who would just take donations, so if it's a real root then someone's gonna beat him to the punch on releasing it and they'll be the ones reaping the rewards not him. Not very bright indeed
[Sharp Aquos Crystal] UltimaXtreme:
If anything, the suspecting shmuck who buys this can actually report it and undo the purchase if it's a lie. They get the fake APK, and they keep the money. Thank you, Paypal.

Either way, he's an idiot, he needs to either put up or shut up.
[Sharp Aquos Crystal] MrTriTanium:
It is simple what to do, really: ignore him/her, report the post(s), and stop complaining like children and feeding the troll.

I consistently did that when those posts first showed up and they got banned because of it. They wouldn't have needed to make a new profile if they weren't.

Their lack of any proof is the only testament to sketch.
[Sharp Aquos Crystal] UltimaXtreme:
Before being rudely interrupted by the 306SH Root Fooler, we had an idea established, yeah?

CVE-2014-7911 and CVE-2014-4322 are the exploitable security faults, yes? Reading the giefroot thread, we need pre-October firmware.

On s8216, using "cat /proc/version" gives this.

Linux version 3.4.0 (nbproj@TGX33001) (gcc version 4.7 (GCC) ) #2 SMP PREEMPT Mon Aug 25 10:55:37 JST 2014

So stock and unupdated firmware predates October, which means it's eligible for an exploit with giefroot... If this were a Sony product.

Sharp does things differently, of course, so we're left wondering how to do this. Can we check against the source code and see about java.io.ObjectInputStream?
[Sharp Aquos Crystal] hazridi:
Sharp doesn't really do anything differently. The exploit itself, and consequently the giefroot tool, requires device specific offsets to set up the ROP chain properly. With those it should be possible to root this phone, and almost every qualcomm device that doesn't have 7911 patched.
[Sharp Aquos Crystal] UltimaXtreme:
So this tells the story. We need 7911 or 8609 to get through the OS exploit, and only then can the 4322 exploit at kernel level work.

Note 4, it seems that was back-patched a while ago. This is Sharp, though. Were they sensible enough to do it?

We need something that can ADB in and give the necessary intent and execution...
[Sharp Aquos Crystal] MrTriTanium:
I HAVE updated the software, so anyone who HAS NOT updated their phone should try Geifroot (http://xdaforums.com/crossdevice-dev/sony/giefroot-rooting-tool-cve-2014-4322-t3011598) and see if it works. It doesn't work with the updated software. I tried... :crying:

I think effort should be put into finding out how to access the Bootloader and/or Download mode instead of looking for existing ways to root now. Even if we get root, one of the goals of rooting: ROMs, is unobtainable without either.

I'd LOVE to get rid of bloatware, but I'd much rather taste Lollipop.
[Sharp Aquos Crystal] 300nukez:
hey guys im a long time lurker in these forums I dont post allot but I just want to say thanks for the effort I have seen so far. Im not smart like you guys so Im cheering for you people! :good:
[Sharp Aquos Crystal] whynot4444:
hey welwon, 306sh have a source code, you need to update for people
[Sharp Aquos Crystal] whynot4444:
i will test it, but i think if i root success, i cannot update anymore :(
[Sharp Aquos Crystal] MrTriTanium:
Honestly, if you did get root, I see no need to update ;)
[Sharp Aquos Crystal] whynot4444:
i affraid my device will bootloop, and now we don't have any tool to install firmware :(
[Sharp Aquos Crystal] myspac:
It doesn't work on 305SH (not updated) evenif I remove the first false pre test.. if someone can ask Geifroot owner to add our 306sh and 305sh... (my englsih is too poor).
[Sharp Aquos Crystal] kdraw44:
No Luck

306SH, stock, not updated, Boost mobile. Tried regular and safe mode several times each, no luck. Man, it would be sweet to get this thing rooted.
[Sharp Aquos Crystal] Zombiebliss:
As Myspac pointed out someone needs to send the dev of giefroot sum info, if you go to the geifroot thread he lists everything he needs, I'm going to be busy and not around a computer for a few days. V3 of geifroot is not yet compatible we need it updated for the sharp aquos 306 ( and 305 owners if you want root too!!)
[Sharp Aquos Crystal] UltimaXtreme:
That is an INSTANT issue... We need root in the first place to exploit it, right? If so, we're shot in the foot before the trigger's pulled.

I posted the /process/version, but after using the giefroot tool, I might have more info. I can't ADB, nor can I SU to do the echo or chmod. Terminal is a limited resource.
[Sharp Aquos Crystal] t-o-f-u:
info on OTA update

i was hoping it'd be easy to find out the download URL and get a zip file or something like that. but it seems that our phone uses software from a company called Red Bend to do the "FOTA Updating": *google red bend fota, censored due to xda link restriction :(*

tcpdump capture of the phone checking for an update shows:

*censored due to xda link restriction :(*

visiting hxxp : / / 409f588200cd1dedd915-465d1c61f856116a191db7e16fb24e1c dot r52 dot cf3 dot rackcdn dot com/2640182142_dp provides a 24MB download, probably the update package itself.

running binwalk showed nothing; file might be encrypted. the app that handles this is probably com.redbend.app or com.redbend.dmClient. not sure which APK those are associated with, but hey, maybe an encryption key is bundled in the APK itself that could be found via decompilation.

if the update is able to be extracted somehow, and there is a full kernel image inside, kallsyms should be able to be extracted from said image. then, possibly we'd have enough to port giefroot?
[Sharp Aquos Crystal] UltimaXtreme:
Well, all the stupid XDA blocks aside, we may need to hold up a moment. I found ExploitServiceApp.apk in a Note 4 root thread. The installed app provides an app titled appropriately, "CVE-2014-7911." Images in the thread indicate this file will tell you if it is exploitable.

Upon first launch, nothing. It just sat at a black screen. Upon turning on debugging and mock, it crashed Android on second run. Same for third and fourth. I have no damage to my software, but this app certainly isn't answering the question of the exploit.
[Sharp Aquos Crystal] Zombiebliss:
Quick question, does other apps crash or give the has stopped prompt?? I had an issue where apps in the apps settings section would always say blank has stopped when I tried to click on them, only way I was able to fix it was a factory reset. Hate to say it but if other apps are giving the same response you might need to reset your phone.
[Sharp Aquos Crystal] UltimaXtreme:
To my luck, I haven't had this issue. Everything usually works for me.
[Sharp Aquos Crystal] Zombiebliss:
Well that's good, was a rather annoying experience. I hate to say it but we might be stuck waiting for boot loader before anyone can get root on stock roms. Pulling the kernel from the update is a good idea, but I'm not holding my breath.
[Sharp Aquos Crystal] zxz0O0:
That means the exploit is working (exploit to gain system privileges). Can you check if /dev/qseecom exists?
[Sharp Aquos Crystal] MrTriTanium:
Giefroot has that same .apk and it also installs the same app from your screenshots. No success and I couldn't replicate your results.
[Sharp Aquos Crystal] Zombiebliss:
Link to apk??

Might be an altered apk
[Sharp Aquos Crystal] UltimaXtreme:
Attachment says yes.

Giefroot uses the same APK. This essentially is what Giefroot uses AFTER it's uploaded. The rooting process begins thereafter.

Giefroot has to actually complete and reboot for you to have the APK installed, so I obtained it from the Note 4 thread.

File was actually obtained from this Fire TV thread, but I doubt it's any different to the versions being used.

MrTriTanium, I'll guess it has to do with your firmware. Try a cat /proc/version and tell us what the build date is. The 7811 exploit doesn't work on firmware younger than Oct 2014. If your build is later, then Google must have helped get the patch around.
[Sharp Aquos Crystal] MrTriTanium:
I don't know how to do that, if you would tell me I will post the results.
[Sharp Aquos Crystal] UltimaXtreme:
You can ADB into the phone and type it in a command line with "adb.exe cat /proc/version" or get the Android Terminal Emulator and type "cat /proc/version" in.
[Sharp Aquos Crystal] MrTriTanium:
Screenshot
[Sharp Aquos Crystal] UltimaXtreme:
You seem out of luck. That's borderline November, so root may be out of your reach right now.
[Sharp Aquos Crystal] Zombiebliss:
Mr tritanium didn't you get the ota update? I'm pretty sure he's updated. So there may be hope yet! Someone who had not updated should get a screen shot posted, dammit I'm not going to be home for a few days or else I would do it!

Any way to roll back the update for those who did update?
[Sharp Aquos Crystal] zxz0O0:
To support your device I need kallsyms addresses. I assume there is no way to root this device so the only way to get these addresses is to obtain it from a kernel image (from the firmware, for example).
[Sharp Aquos Crystal] MrTriTanium:
I am updated. See Ultima's quote to do it IN your phone.

How would one go about doing that or finding resources to do so? I'm only a n00b with Android, but if pointed in the right direction I'll do my best.
[Sharp Aquos Crystal] etirkca:
FYI, not necessary.

Kernel version is in Settings > About phone.
[Sharp Aquos Crystal] whynot4444:
we have a source code from sharp, may be kernel image from it
[Sharp Aquos Crystal] max1c:
This is messed up because I did activate the phone on boost. And then switched it to ting after. Boost terms of service say that I can cancel at any time. I guess I will have to go to the store on monday and talk to them.
[Sharp Aquos Crystal] jyu174:
Sprint Prepaid

I bought the Sprint prepaid version from Bestbuy today. I removed the Sprint SIM and put in my T-Mobile SIM.

Now, on the Android lock screen, it displays "SIM/RUIM IS PERSO LOCKED - CHAMELEON". It does not prompt me for unlock code or anything.

Just FYI.
[Sharp Aquos Crystal] weltwon:
Boost Terms

If the attorneys who write contracts for Boost have an IQ higher than a toaster, they likely have a clause in the contract that says something which forces you to stay with Boost Mobile for a period of time if they have given you $$$ off the phone for bringing your # to Boost. Guess you'll find out on Monday.

Glenn ;)
[Sharp Aquos Crystal] mooing:
Details

Got both versions, Boost and Sprint Prepaid from Best Buy retail. Sprint version passes Ting activation check and appears in devise list but does NOT activate. Didn't mess with SIM cards. Boost DOES activate. Getting Spark LTE.
[Sharp Aquos Crystal] max1c:
What "contract"? Nothing was signed. There was no contract involved.