yashsingh1/xdaforums huggingface dataset:
[Xperia Z3 Compact General] amintox:
im just sharing information.

i just unlocked my bootloader because i dont care about warranty and i couldn't wait till the exploit is released.

i flashed an advanced stock kernel and used the recovery to root the device

i said to myself now that i have the root installed i should flash the stock kernel back to have a stable device.

when i flashed the stock kernel, i noticed that i cannot write to system even though i have root access and i then flashed the advanced stock kernel back so i can install busybox and delete some system apps. the flashed back the stock kernel then i lost the writing to system ability.

the conclusion is: it is very difficult to root because even if you have root access you cannot write to system if you dont flash another kernel.

and to do that you need to unlock the bootloader.

im happy because i have root and the drm patch works and i have the x-reality and noise canceling and camera features working great.

if you dont care about warranty just go and unlock the bootloader because it is very difficult to root and to have system writing ability.
[Xperia Z3 Compact General] iFlasher:
I think that is because the Unlocked Bootloader Root Method only work with custom kernels, so if you restore to stock kernel you don´t get permissions to write on system because there is no method to get root on stock kernel yet.
[Xperia Z3 Compact General] cschmitt:
Sony RIC disables writes to the system partition at boot. There is a module available to disable it, or use a custom kernel that has it disabled.
[Xperia Z3 Compact General] zxz0O0:
Stay patient guys ;)
[Xperia Z3 Compact General] clouds5:
20$.
[Xperia Z3 Compact General] adamreid:
I'm in for $25
[Xperia Z3 Compact General] Kakashi2k4:
I'm in for $20 USD (Xperia Z3 D6603) :good:
[Xperia Z3 Compact General] hedgie123:
in for $20
[Xperia Z3 Compact General] Michealtbh:
$10 here
[Xperia Z3 Compact General] sxtester:
Notified Xperia Blog (http://www.xperiablog.net) about this bounty in order to increase visibility.

Hope they will bring it in their news... :)
[Xperia Z3 Compact General] Polso:
I'm in for $20 USD
[Xperia Z3 Compact General] JTdevAndroid:
i'm in

+ 20€
[Xperia Z3 Compact General] newk9:
20€ from me.
[Xperia Z3 Compact General] Dsteppa:
We have made the Dutch 'news' at least:

http://tweakers.net/nieuws/99713/eigenaars-loven-beloning-uit-voor-rooten-sony-z3-compact.html

Translated page:

https://translate.google.com/transl...t-voor-rooten-sony-z3-compact.html&edit-text=

In my opinion the more people hear about it, the better.

In a dream world, [MENTION=631273]Chainfire[/MENTION] would attempt getting us root:laugh::good::highfive:
[Xperia Z3 Compact General] gregor160300:
Towelroot

Hello everyone,

Maybe a noob suggestion but doesn´t towelroot do the trick?

towelroot .com
[Xperia Z3 Compact General] Fruktsallad:
Put me down for $20! If we keep this up, there'll be some serious money up for grabs, people!
[Xperia Z3 Compact General] charliebigpot:
Nope, somebody tried already and it doesn't work.
[Xperia Z3 Compact General] londahl:
I'm in for $15 :)
[Xperia Z3 Compact General] sxtester:
We're all dumb and exactly the reason why we run this bounty without having tried all options available in the first place...

Heaven!
[Xperia Z3 Compact General] raviboy100:
i tried towelroot on day 1
[Xperia Z3 Compact General] Pyres:
Let's all take it easy, he asked a question and he got an answer. I should have mentioned this in the OP, we already tried every available method and none of them has been successful.
[Xperia Z3 Compact General] metalmilo12:
T-Mobile Z3 (D6616)

15$
[Xperia Z3 Compact General] Jliax:
Good work guys

We've made the dutch news!

https://translate.google.nl/transla...ooten-sony-z3-compact.html&edit-text=&act=url
[Xperia Z3 Compact General] tansy:
Thanks for the info, I was posted a little further back :good:

http://xdaforums.com/z3-compact/general/bounty-root-unlocking-bootloader-method-t2940539/page7
[Xperia Z3 Compact General] Moist:
So cryptic!
[Xperia Z3 Compact General] sgiannouris:
I think I like where this is going...:D
[Xperia Z3 Compact General] phanmo:
^ Ditto!!!
[Xperia Z3 Compact General] munjeni:
Did you got a root??? If not than I maybe help! Found exploit which will work on your device I think http://www.exploit-db.com/exploits/35711/ ! Need output from terminal emulator on device which have unlocked bootloader and root! Write next commands into your terminal emulator and post your log here! Only rooted device please!

Commands:

su
echo 0 > /proc/sys/kernel/kptr_restrict
cat /proc/kallsyms >/storage/sdcard1/kallsyms.log

kallsyms.log will be on your external sdcard, post it here...
[Xperia Z3 Compact General] hedgie123:
attached
[Xperia Z3 Compact General] graffixnyc:
I'm hitting F5 like a crack fiend.. I have been so tempted to just say screw it and unlock and was actually going to do it today but now I think I'll hold off a bit :P
[Xperia Z3 Compact General] munjeni:
Sorry these exploit is not complete, I dont want to spend 2 days importing things from kernel since these source code contain some kernel functions and I am unable to compile, sorry! I can give you info how to get into system user mode (I'm done this) but you need to complete this -> http://www.exploit-db.com/exploits/35711/ and make them compilable...
[Xperia Z3 Compact General] lowtraxx:
I am building a testapp with the exploit you mentioned. But up until now I was not able to escalate to system. Could you share your code for that with me? Once I finish the build for the xperia tablet compact and if it works there I could make the addresses configurable so it could be used on different devices.
[Xperia Z3 Compact General] XSYLUS:
I'm starting to agree with your assessment. I have an Xperia Z2 tablet that was successfully rooted via Towelroot before that exploit was patched. However, even though the device maintains root after the latest update the SU binary fails to update. It seems they've managed to prevent the file-system from being mounted as writable. While I'm mildly concerned with voiding the warranty I'm even more concerned about losing the camera features on the Z3.
[Xperia Z3 Compact General] munjeni:
How you managed to compile exploit? I'm not on pc now to give you more info, but I will share info tomorrow! In short you need to replace "a" binary in system exploit with an shell script which will output "whoami >/data/local/tmp/log.log" just if you need to see if things working about getting system user, than if you read "system" in log.log it mean system exploit is working and you are ready to write root exploit. You can post your exploit source?
[Xperia Z3 Compact General] amintox:
i didnt loose any features. i've tested x-reality, noise canceling and camera quality it works perfect. but you have to follow the instruction on how to activate these features after unlocking the bootloader by using the DRM FUNTION RESTORATION method http://xdaforums.com/crossdevice-dev/sony/xperia-z1-z2-z3-series-devices-drm-t2930672
[Xperia Z3 Compact General] XSYLUS:
This is what I get when trying to mount /system as writable on my rooted Z2 tablet.

C:\>adb shell
shell@SGP512:/ $ su
su
root@SGP512:/ # id
id
uid=0(root) gid=0(root) context=u:r:init_shell:s0
root@SGP512:/ # mount -o remount,rw -t yaffs2 /dev/block/mtdblock0 /system
mount -o remount,rw -t yaffs2 /dev/block/mtdblock0 /system
insmod: init_module '/system/lib/modules/wp_mod.ko' failed (Exec format error)
mount: Operation not permitted
[Xperia Z3 Compact General] infinitylook:
The problem with this is that if Sony manages to patch this on their Android 5.0 upgrade. And it would be hard to find again exploit. Then that would make you stuck at kk if you want the features to work so that is just like a temporary happiness on root.
[Xperia Z3 Compact General] amintox:
i think that as long as you have an unlocked bootloader, you are always free to do anything and freedom is priceless and back to your argument, i think they will have root on kitkat and this root will be patched with the next android version. it's the same case for everyone everything gets patched but there are always awesome developers who are working on finding new holes to exploit and that's the fun of it.
[Xperia Z3 Compact General] infinitylook:
Well got you're point also on there. I just hope that we can get root on this so we can still enjoy sony features. I thought Sony was developer friendly so they should give us the freedom to unlock it and still enjoy those features. What they should do is find other means of securing those drm keys if they are afraid of it being be stolen. Or at least give a tool to backup drm keys so that we can restore it also once we relock. Anyway guys Goodluck to all of the devs working hard on this.
[Xperia Z3 Compact General] yacloo:
I think z2t is not using yaffs2 probably it's ext4
[Xperia Z3 Compact General] lcohen999:
Yes, but we can backup TA, unlock the bootloader, root, do whatever and restore the partition. That is the Golden ticket for this device
[Xperia Z3 Compact General] XSYLUS:
Perhaps but based on what I've read in other forums the issue is wp_mod.ko that's preventing /system from being mounted as writable. Ergo the superuser.apk is no longer able to update the su binary stored in /system/xbin
[Xperia Z3 Compact General] lowtraxx:
As soon as I see that it works on my device I will push the sources to github. Compilation took a lot of playing around with the linux kernel sources from sony and I am still not there a hundred percent. But I am getting closer. But now I am going to bed as it is 2:30 am over here.
[Xperia Z3 Compact General] boojay:
I understand nothing that's being said, but I'm sensing the excitement and am digging the activity that's going on in this thread with the collaboration of so many awesome contributors, and it makes me more giddy than a teenage panda in a Swedish lollipop store run by little gnome people from Aruba.
[Xperia Z3 Compact General] Moist:
People please stop going on about just unlocking the bootloader! This is not the thread for that discussion. In any case, your unlocking the bootloader solution will not solve the issue for those who cannot unlock. It's also getting really frustrating when you're reading a thread and something off-topic is being discussed at the same time as discussion between devs.
[Xperia Z3 Compact General] munjeni:
Search google for (Exec format error)...! ;)
[Xperia Z3 Compact General] munjeni:
Missing is "mycred", how you solved mycred?
[Xperia Z3 Compact General] munjeni:
Need test, but please rooted device only! On my z1c it fail to obtain ionfd memory, but maybe it will work on your device, give me please output of next commands (extract first root.rar in the same directory with adb!):

adb push root /data/local/tmp/
adb shell
su
cd /data/local/tmp
chmod 755 root
./root
[Xperia Z3 Compact General] lowtraxx:
I just created my own version of the cred struct from cred.h in the kernel header which does not use the unneeded includes.
[Xperia Z3 Compact General] FlyingCheese:
so close we can almost taste it... it might even stay in KK if it means Root + DRM keys.
[Xperia Z3 Compact General] thienbrand:
Someone with root, please help munjini. [MENTION=1999768]Paulikid[/MENTION] [MENTION=4632533]Griffiths_Anna[/MENTION] [MENTION=462299]Untouchab1e[/MENTION] [MENTION=4535088]DonSebbo[/MENTION] [MENTION=3865219]gibihr[/MENTION] [MENTION=5051938]darkrai[/MENTION]
[Xperia Z3 Compact General] munjeni:
This app from atachment have no root but you can test if system user exploit is working, log will be saved in /data/local/tmp/root.log, if you open root.log and you see "system" string its mean that system exploit is working! Let me know! Before runing new root you must enable android debuging and allso you must enable "allow mock location"! When we get working root exploit than I will modify app and make them for root too and allso for unroot, only we need now working root exploit! :)

Allso please do this http://xdaforums.com/showpost.php?p=58344458&postcount=804
[Xperia Z3 Compact General] LeonidasTurk:
Hey can u help munjeni on testing new app?
[Xperia Z3 Compact General] 3x3cUt0r:
How can i open the log if is saved in "DATA" (it's protected right?)
[Xperia Z3 Compact General] thienbrand:
that's why he need us to find someone who already had root (unlocked bootloader ofcourse) for testing.

He is trying to find out if that exploit really works.
[Xperia Z3 Compact General] munjeni:
adb shell cat /data/local/tmp/root.log
[Xperia Z3 Compact General] munjeni:
You can share?
[Xperia Z3 Compact General] thienbrand:
Sitting here, trying to contact as many people who had root as I can to help you :D
[Xperia Z3 Compact General] EricCartmanez:
are you using the same system exploit as mentioned earlier as the huawei root method uses? if so we need guys still on .93 firmware because on 5.77 it no longer works, i would downgrade but it'd take a few hours till fw is downloaded and flashed :/
[Xperia Z3 Compact General] yacloo:
yes it's same exploit
[Xperia Z3 Compact General] 3x3cUt0r:
"permission denied", sorry i'm trying to help but i lack the skillset.
[Xperia Z3 Compact General] muzab a:
Wouldmt u need.to do su first
[Xperia Z3 Compact General] FlyingCheese:
do you have your bootloader unlocked and root? if not, then this is expected.
[Xperia Z3 Compact General] pw1nce:
hi guys , just wanted to give a suggestion , how about creating a whats app group regarding this bounty thread for devs so they can tell us what they need , most of us have access to whats app almost all the time while not many will be checking this thread , thanks :)
[Xperia Z3 Compact General] thienbrand:
Sound like a great plan although I don't use Whatsapp ...
[Xperia Z3 Compact General] pw1nce:
mm yeah , if the devs are on whats app so ill create a group if they are willing about that ;)
[Xperia Z3 Compact General] gibihr:
I am getting Note: Your device seems not vulnerable!
[Xperia Z3 Compact General] thienbrand:
i think we need to be on Rooted 5.77 or 2.93 firmware.
[Xperia Z3 Compact General] gibihr:
I am
[Xperia Z3 Compact General] thienbrand:
Did you do the "root.rar" ? And with the "newroot.rar", did you enable "allow mock location"?
[Xperia Z3 Compact General] EricCartmanez:
only 2.93 firmware will work maybe 98 also but 5.77 will not it's patched
[Xperia Z3 Compact General] gibihr:
Yes, that's what happens with newroot..
[Xperia Z3 Compact General] thienbrand:
Maybe because of this
[Xperia Z3 Compact General] Dsteppa:
C:\sdk\platform-tools>adb push root /data/local/tmp/
1082 KB/s (11084 bytes in 0.010s)

C:\sdk\platform-tools>adb shell
su
cd /data/local/tmp
chmod 755 root
./rootsu
cd /data/local/tmp
chmod 755 root
shell@D5803:/ $ su
cd /data/local/tmp
chmod 755 root

./root
1|shell@D5803:/ $

[IMG="http://i.imgur.com/6gegQpe.gif"]http://i.imgur.com/6gegQpe.gif[/IMG]

This one kept freezing on me, had to run it in compatibility mode in order to run it properly.

[IMG="http://i.imgur.com/tEDCqMg.gif"]http://i.imgur.com/tEDCqMg.gif[/IMG]

I ran it in XP SP2 mode and then it worked like it should (I also had PC companion running in the background so that could have been one of the reasons why it didn't work properly)

[IMG="http://i.imgur.com/vqK2onD.gif"]http://i.imgur.com/vqK2onD.gif[/IMG]

newroot_log

Success

pkg: /data/local/tmp/exploitServiceApp.apk

Success

Uploading files...
Start rooting attempt
Starting: Intent { cmp=org.keenteam/.ServiceExploitActivity }

Reboot. Please wait
Cleaning up now...
Success

root.log = 0b here nothing in it.

Windows 7 SP1 fully updated

FW: 23.0.A.2.98
[Xperia Z3 Compact General] thienbrand:
So ...we stuck again ?
[Xperia Z3 Compact General] tRippinthehead:
Ok, seems this vulnerable will not work too :(
[Xperia Z3 Compact General] EricCartmanez:
as i said we need someone on .93 to test, im not sure whether .98 works or not... i remember someone with .93 firmware successully ran through the huawei exploit app, it even installed supersu but couldn't push su binary, dunno if it was in this thread or another :(
[Xperia Z3 Compact General] minijaws:
I was the person from that last exploit with .93(unrooted and locked(unlockable)) I ran newroot and it showed up on the phone and didn't say not vulnerable. I don;t see a log in /data/local/tmp/ so im not sure about that. it seems the exploit does work though:

* daemon not running. starting it now on port 5037 *

* daemon started successfully *

Failure

pkg: /data/local/tmp/exploitServiceApp.apk

Success

Uploading files...

Start rooting attempt

Starting: Intent { cmp=org.keenteam/.ServiceExploitActivity }

Reboot. Please wait

Cleaning up now...

Waiting for 15 seconds, press CTRL+C to quit ...1413121110 9 8 7 6 5 4 3 2 1 0

Success
[Xperia Z3 Compact General] thienbrand:
At first, it was [MENTION=3989065]serajr[/MENTION] who tried:

but he failed. And then [MENTION=4178600]minijaws[/MENTION]:
[Xperia Z3 Compact General] EricCartmanez:
okay i, see, so we need someone rooted and unlocked on .93 firmware... you can't see the logs in /data if you're not rooted if i'm right, it could all be useless but it's all worth a try since .93 is the oldest firmware which may have the most security exploits found unpatched
[Xperia Z3 Compact General] minijaws:
shell@D6603:/data/local/tmp $ ls
ls
shell@D6603:/data/local/tmp $ touch test.txt
touch test.txt
shell@D6603:/data/local/tmp $ ls
ls
test.txt
shell@D6603:/data/local/tmp $ ls -la
ls -la
-rw-rw-rw- shell shell 0 2015-01-22 09:07 test.txt
shell@D6603:/data/local/tmp $ echo test > test.txt
echo test > test.txt
shell@D6603:/data/local/tmp $ cat test.txt
cat test.txt
test
shell@D6603:/data/local/tmp $
[Xperia Z3 Compact General] tRippinthehead:
So anyone here with rooted and BL unlocked on 93 firmware?
[Xperia Z3 Compact General] LeonidasTurk:
Can anyone return 23.0.A.2.93 with using this method http://www.droidviews.com/install-stock-firmware-sony-xperia-z3/
[Xperia Z3 Compact General] zoecker:
I'm still on .93 with LB and Bootloader unlock allowed:NO
[Xperia Z3 Compact General] STR33TPIR8:
Hey guys, is this real?

http://xperia-z3-root.blogspot.it/?m=1
[Xperia Z3 Compact General] muzab a:
No its surveys
[Xperia Z3 Compact General] davebugyi:
The download link gets to you to survey and other BS sites, so I believe it is not.
[Xperia Z3 Compact General] yacloo:
Rickiller needed before copying anything to system sony's ric app prevents to writing on system

Sent via D5803
[Xperia Z3 Compact General] munjeni:
Did you enabled mock location? If not than you must check option in development settings menu "allow mock location" before trying them!
[Xperia Z3 Compact General] munjeni:
Newroot.exe seems not working on these firmware!

About root binary from /data/local/tmp... you not executed them right way! You must first after adb push to establish adb shell connection "adb shell" than write command by command instead of pasting whole commands set! Do it one by one!
[Xperia Z3 Compact General] munjeni:
Why you press ctrl+c ?? Make app finish his job! :(
[Xperia Z3 Compact General] munjeni:
Found something interesting about "main" file from system exploit from here http://xdaforums.com/mate-7/general/wip-mate-7-root-bl-unlock-t2995086/post57991147#post57991147 , its missing 2 bytes "377a" hahaha and it is password protected 7z archive (haha great method for obfuscating files!), if you append 2 butes to the start of file you will get 7z archive, lets find password in apk or in apk lib, and let see what is inside these misterious "main" file and why it is obfuscated! Maybe malware? What is purpose of main file? :)
[Xperia Z3 Compact General] yacloo:
i already extracted the file here is

why did you build newroot.exe with password protected yes great method for obfuscating files :D i extracted it too anyway
[Xperia Z3 Compact General] Dsteppa:
It's been so long since I worked with ADB, so I keep forgetting these easy things :o

C:\sdk\platform-tools>adb push root /data/local/tmp/
1804 KB/s (11084 bytes in 0.006s)

C:\sdk\platform-tools>adb shell
shell@D5803:/ $ su
su
root@D5803:/ # cd /data/local/tmp
cd /data/local/tmp
root@D5803:/data/local/tmp # chmod 755 root
chmod 755 root
root@D5803:/data/local/tmp # ./root
./root
mypid 24455
ion fd 5
ION_IOC_ALLOC: No such device
alloc_ion_memory: No such device
share_ion_memory: Invalid argument
QSEECOM_IOCTL_SET_MEM_PARAM_REQ return 0xffffffff
QSEECOM_IOCTL_SEND_CMD_REQreturn 0x1 0x1
QSEECOM_IOCTL_SEND_CMD_REQ end
: Invalid argument
ioctl return 0xffffffff
mmap return 0xffffffff
Segmentation fault
139|root@D5803:/data/local/tmp #

[IMG="http://i.imgur.com/5Ho81zo.gif"]http://i.imgur.com/5Ho81zo.gif[/IMG]
[Xperia Z3 Compact General] munjeni:
I mean about file "main" and not about file "a"! File called "main" is 7z archive and password protected(you need to add 2 bytes to offset 0x0 to make them 7z! I know about file "a", it is extracted automaticaly into new dir which will create 2 files, one file is "main"(elf - aka root exploit binary) and another support.tar.gz archive(scripts and things). But file "main" is misterious by now and its 7z and is not the same like file "main" from new dir!

Hehe about newroot, its auto play media studio and by default password protected, not by me, but easy for fetching from tmp :)
[Xperia Z3 Compact General] munjeni:
Finaly! Thanks! Guys, seems root exploit from CWE is probably not working!! I am stopping here right now, sorry! Only which I will try is to open kernel source code and see if codeaurora patch is applied into source, if not than I will let you know, but I will not play with our root anymore, I have to finish some unfinished projects like xflasher and etc, sorry, hope you get root soon.
[Xperia Z3 Compact General] yacloo:
you are right i misread i know that main is 7z archive probably it's hiding mysterious mt7fix.ko file
[Xperia Z3 Compact General] graffixnyc:
nm........
[Xperia Z3 Compact General] skywalker6705:
I'm watching this thread hopefully again, holding onto my SO-01G model Z3 tightly.

My build number is quite a bit higher than the ones being discussed here, KitKat 4.4.4 built 23.0.B.1.13, and I have no option to unlock the bootloader via official means (yay carriers!). So all my hopes rest with you guys.

Obviously I'm a small fragment of the user base here, but there are tons of Japanese net users eager for root as well that would benefit from your work here should it work on the Japanese model. Hopefully whatever exploit is found can be ported forward to these builds, or expose something more vulnerable that might help us out.

For anyone curious, the Japanese devices do have some custom carrier software installed which is most forgettable, and I doubt exploitable, as well as a small amount of custom hardware to support services like OneSeg TV broadcasting and FeliCa NFC support. I doubt any of that would be helpful in attaining root though. But if on the off chance something about these devices seems opportune for a dev, please let me know and I'd be happy to help.
[Xperia Z3 Compact General] muzab a:
So us there any other method available
[Xperia Z3 Compact General] charliebigpot:
Thanks a lot for your efforts [MENTION=4120742]munjeni[/MENTION]!

I wonder if over the last couple of days somebody at Sony went like "üüüü, so close! If only they knew about this and this" :p
[Xperia Z3 Compact General] Farva0412:
Hopefully someone else can pick up where this left off, and find a way. I am dying for some root.
[Xperia Z3 Compact General] tijs14tijs:
You are using the exploit wrong

The exploit fails at ion allocation. According to the documentation, only SYSTEM is allowed to allocate with ion. Hence I can conclude that you did not execute this exploit as system. If it does really not work then it would fail in a later state. Try again as system and you may obtain root. (look for my prev post, take the system exploit) Good luck, we are already very far. But do not update your phone to 5.77 because I suspect that they patched the root exploit vulnerability there. All previous versions are very likely UNpatched. So with this one there is hope :)