yashsingh1/xdaforums huggingface dataset:
[Xperia Z3 Developer Discussion [Developers Only]] elkay:
Some more digging has shown that BTE is still running as the app user, not System, when issuing the 'id' command. Looks like native code will need to be executed from the intent rather than launching another app. I'm not sure how to go about executing the 'dd' command from busybox manually from an intent.
[Xperia Z3 Developer Discussion [Developers Only]] eskamhl:
Don't think it'll be useful since TA partition has permission 600 and the owner is root [emoji29]
[Xperia Z3 Developer Discussion [Developers Only]] elkay:
Yeah I just noticed that, too. Don't think this exploit is going to do much of anything for us. Looks like System isn't much more privileged than a normal user, from a filesystem perspective.
[Xperia Z3 Developer Discussion [Developers Only]] EricCartmanez:
Instead of trying to backup ta wouldn't it be more useful to try and push supersu binary and app? Once we get this we have access to ta anyways + root seems to be the bigger advantage :)
[Xperia Z3 Developer Discussion [Developers Only]] elkay:
That would be ideal, but System isn't enough to write to anywhere that I'm aware of that we can push the binaries somewhere usable.
[Xperia Z3 Developer Discussion [Developers Only]] elkay:
I read your original post. What theme apks were you talking about? Wouldn't modifying the apk code require a resign anyway? I'm just curious which apks you meant because I wasn't aware of those.
[Xperia Z3 Developer Discussion [Developers Only]] mic-1:
Is it possible?

Anyone with root on the Z3 makes a Backup from Root with this -----(play.google.com/store/apps/details?id=com.Supersu_Root_Copy_2) App??? and all Otter Users can restore the Backup of this one Person?

If the root or supersu Binary needs specific Hardware IDs to restore can i these rip if i use gnu root (whezzyx) to read the specific id and Hardware Tags of mm Original Rom? Ort is it possible only with gnu-root Backup the TA-Partition with help from ADB -TOOLZ??? :p
[Xperia Z3 Developer Discussion [Developers Only]] iBuzman:
I was under the impression (probably incorrectly) we actually get away with not resigning, and checking permissions for theme apps suggests system write access - I'll find my original notes on this (from a hangout I had with [NUT] on the topic). my idea was to use a modified theme apk to inject su binary (and I have no idea how to do that)

edit (notes on themes copy/paste from hangout)

just looking into com.android.systemui - and yes looks like it is whitelisted for get "MODE_ALLOWED" default access. Sony signatures seem to remain when making themes so maybe something can be "snuck" into the app to allow root?
[Xperia Z3 Developer Discussion [Developers Only]] mazbot:
I think we got it in in unified xperia section.
[Xperia Z3 Developer Discussion [Developers Only]] paysen:
link?
[Xperia Z3 Developer Discussion [Developers Only]] mazbot:
Sorry, the guy used a C6603 an not an d66xx but they are still trying... http://xdaforums.com/showthread.php?t=2930672
[Xperia Z3 Developer Discussion [Developers Only]] gregbradley:
Thread moved to the developer discussion thread, it seemed to fit here

Also, thread cleaned to keep within the rules of this section
[Xperia Z3 Developer Discussion [Developers Only]] EricCartmanez:
Well this is not about a root exploid, but about restoring some drm functions. it's still a wip for z3, you can see that now they try getting it to work by downgrading z3 to 4.4.2 z2 firmware, not exactly what we need... :(
[Xperia Z3 Developer Discussion [Developers Only]] minijaws:
I was looking into some of the stock apks and found some lines of interest

private static String mKeyBoxPath = "/mnt/data/drm/oem-crypto/wvkeybox.bin";

public void onReceive(Context paramContext, Intent paramIntent)
{
new RootStatus();
if (RootStatus.isPhoneRooted()) {
new File(mKeyBoxPath).delete();
}
}

and based on this string

<string name="sm_rooting_status_rooted">Bootloader unlocked: Yes</string>

rooting==bootloader unlocked to sony.

im guessing that is what gets called to remove drm. Can anyone with unlocked bootloader look into that file or anyone with one of the system exploits see if they can access it?

and some intents No clue what they do

com.sonyericsson.drmdialogs.EXTRA_FILE_PATH

com.sonyericsson.android.drm.GET_RIGHT

com.sonyericsson.drmdialogs.CONSUME_RIGHTS

com.sonyericsson.drmdialogs.PIC

com.sonyericsson.drm.NOTIFY_USER
[Xperia Z3 Developer Discussion [Developers Only]] AndroPlus:
I checked but there was no /mnt/data/drm/oem-crypto/wvkeybox.bin.

What apk you found that code?
[Xperia Z3 Developer Discussion [Developers Only]] minijaws:
Drmdialogs.apk a and try looking in /data instead of /mnt/data
[Xperia Z3 Developer Discussion [Developers Only]] epic118:
Surely, though, if you have an unlocked bootloader, and you cannot find that file (in either /mnt/data/drm/oem-crypto or /data/drm/oem-crypto), the obvious conclusion to make is that unlocking the bootloader deletes that file.
[Xperia Z3 Developer Discussion [Developers Only]] minijaws:
Was mainly interested If the path leading up to the file exists and what the permissions are on the parent folders are.
[Xperia Z3 Developer Discussion [Developers Only]] slipsystem:
If we could get the app to push Su or back up drm key how would we update the existing app? I have been trying to get updated ar effects to not show on the home screen. I can't seem to get the apps to install once modified.
[Xperia Z3 Developer Discussion [Developers Only]] Wajk:
I checked DRM Dialogs and UI app in Settings/Appilcations. We can disable them easily.
[Xperia Z3 Developer Discussion [Developers Only]] dragonstalker:
Ok, so you guys don't think i ran out on you. Being working on seeing if there is a back hole somewhere in the bootloader (the best that i know of. i'm not a programmer) using old exploits. Nothing is working. Even the kernel I made to try and allow supersu failed. Sorry, without knowing more about how bootloaders are made, i've gone as far as i can go. With that being said, I think (for us D6616 owners) we will just have to stick with what we get from TMO. I'm not mad since the phone is basically stock with tmo apps added in. If somebody has some info on how to get Sony's factory program tool please please please let us know. Will be a big help.
[Xperia Z3 Developer Discussion [Developers Only]] gregbradley:
Thread cleaned, please keep it clean for

development discussion only.

This may tease a few of you though

http://www.techworm.net/2014/12/linux-grinch-vulnerability.html

looks like root is around the corner.
[Xperia Z3 Developer Discussion [Developers Only]] gregbradley:
Latest news on Grinch

http://blog.trendmicro.com/trendlab...ubts-raised-about-grinch-linux-vulnerability/

Hopefully it still can be used.
[Xperia Z3 Developer Discussion [Developers Only]] gregbradley:
Looks like Grinch is a dead end

http://www.eweek.com/security/the-grinch-that-tried-to-exploit-linux.html

However, there is confirmation of a kernel level exploit that potentially can be used, so its not all bad news.

Anyone with knowledge can follow the link to see the reference to the vulnerability and hopefully create an android exploit we can use.
[Xperia Z3 Developer Discussion [Developers Only]] David_Vaz:
http://seclists.org/oss-sec/2014/q4/1052
[Xperia Z3 Developer Discussion [Developers Only]] epic118:
That bug concerns x86_64. Would this work on the ARMv7-based Xperia Z3?
[Xperia Z3 Developer Discussion [Developers Only]] David_Vaz:
Need try.
[Xperia Z3 Developer Discussion [Developers Only]] elkay:
ARM does not have the IRET instruction.
[Xperia Z3 Developer Discussion [Developers Only]] k4r70ng:
Would it not be possible to recover the lost files after they were deleted by reading the raw memory?
[Xperia Z3 Developer Discussion [Developers Only]] Zwulf:
Nice point. Maybe disabling TRIM before could help to use this without issues. Would be awesome if this worked.

Is there a dev who could confirm this to be possibly working?
[Xperia Z3 Developer Discussion [Developers Only]] muzab a:
So you're saying, attempt recover the keys when they are deleted just like scanning a hard drive to recover deleted files?
[Xperia Z3 Developer Discussion [Developers Only]] Desperanto86:
yes

we don't have direct acces to this part of memory. all our actions are implemented via bootloader. and I think security part doesn't give us to read raw image. we can have direct acces only via BSL (Bypass Security Loader) with phisical connection to memory chip or via J-TAG or TEST POINT
[Xperia Z3 Developer Discussion [Developers Only]] Zwulf:
Dang it. Thanks for your answer.
[Xperia Z3 Developer Discussion [Developers Only]] epic118:
That depends on how the keys are deleted. The phone may overwrite the raw memory, which would cause them to be unrecoverable.

edit: IGNORE, I just read the posts above :/
[Xperia Z3 Developer Discussion [Developers Only]] newk9:
http://xdaforums.com/showthread.php?p=57845532

Is this helpful?
[Xperia Z3 Developer Discussion [Developers Only]] gregbradley:
Unfortunately I think not
[Xperia Z3 Developer Discussion [Developers Only]] KuroTheBang:
Can't you just do it like that:

- Unlock

- Flash root + recovery

- Relock

- Restore DRM wtih using this tutorial: http://xdaforums.com/crossdevice-dev/sony/xperia-z1-z2-z3-series-devices-drm-t2930672

- Install rom.zip
[Xperia Z3 Developer Discussion [Developers Only]] Gustavo RD78:
yes if you do not mind totally void the warranty of your device

so it will be impossible to restore partition TA
[Xperia Z3 Developer Discussion [Developers Only]] gregbradley:
NO.

When you relock you can only boot on the stock kernel so you do not have a recovery anymore, or root.
[Xperia Z3 Developer Discussion [Developers Only]] Desperanto86:
when you unlocked you can flash supersu.zip and nut recovery pack, than you can flash stock kernel and root with recovery still be present in SYSTEM NOT IN KERNEL!
[Xperia Z3 Developer Discussion [Developers Only]] gregbradley:
That will work, but that's not what the questions was.

The instructions that were posted including relocking. That will break root.

What you have said keeps the bootloader unlocked, just on a stock kernel.

PLUS

This is a known method of rooting, the point of this thread is to find a root method without having to unlock the bootloader at all
[Xperia Z3 Developer Discussion [Developers Only]] Desperanto86:
realy? supersu and nut recovery don't fix ric service? they fix and all will work on relocked bootloader, but I don't see any reason to do that. we can't backup DRM, and that instruction just restore some features but NOT RESTORE DRM...

and about warranty:

MAY don't mean YOU LOSE!

in 99% cases of warranty we have phisical defects
[Xperia Z3 Developer Discussion [Developers Only]] gregbradley:
I never mentioned warranty

What I said was this thread is about rooting without unlocking the bootloader. Any method that involves unlocking it is already known and nothing to do with this development talk.

Lets try and move this forward talking about rooting without having to unlock the bootloader
[Xperia Z3 Developer Discussion [Developers Only]] punshkin:
Hey, I don't have experience in exploiting software myself, but I found this documentation of a possible exploit

http://xteam.baidu.com/?p=158

Has someone knowledgeable already assessed whether this might be a viable solution?
[Xperia Z3 Developer Discussion [Developers Only]] squabbi:
Apparently we need root permissions, as the TA partition belongs to root, not system.
[Xperia Z3 Developer Discussion [Developers Only]] elkay:
I tried it and got an app to launch from adding an account, but system user isn't enough to do much. Most everything is locked down to root.
[Xperia Z3 Developer Discussion [Developers Only]] robimarko:
Maybe this will work

http://xdaforums.com/crossdevice-dev/sony/guide-xperia-kitkat-4-4-4-rooting-t3003520
[Xperia Z3 Developer Discussion [Developers Only]] iFlasher:
Nope.... It requires a JellyBean kernel and Z3 series don´t have something like that :)
[Xperia Z3 Developer Discussion [Developers Only]] GigaSPX:
Any possibilities to get development for the Z3v counterpart?

I know this is out of place, but is there any chance there's a slight possibility whatever you guys are working in here could also progress towards root access for the Verizon variant? Just wondering :D
[Xperia Z3 Developer Discussion [Developers Only]] 3x3cUt0r:
It's highly possible that when they find an exploit it will be easy to port, but don't hold your breath.
[Xperia Z3 Developer Discussion [Developers Only]] SB13X:
Is there anything legit about this? Anyone tried it?

MOD EDIT [MENTION=3843529]gregbradley[/MENTION]

PPC links and survey links are not allowed

XDA RULES

Its fake
[Xperia Z3 Developer Discussion [Developers Only]] muzab a:
Looks funny, wouldnt trust it in my opinion

Checked it out and it was just surveys
[Xperia Z3 Developer Discussion [Developers Only]] thienbrand:
you cant even download the app.
[Xperia Z3 Developer Discussion [Developers Only]] minijaws:
Quoted from http://xdaforums.com/showpost.php?p=58311667&postcount=776 by tijs14tijs Incase someone is not following that thread.
[Xperia Z3 Developer Discussion [Developers Only]] thienbrand:
NEAR TO ROOT! WE NEED YOUR HELP RIGHT.NOW.!!!!!!

http://xdaforums.com/z3-compact/general/bounty-root-unlocking-bootloader-method-t2940539/page79
[Xperia Z3 Developer Discussion [Developers Only]] thienbrand:
need your help.
[Xperia Z3 Developer Discussion [Developers Only]] pattmyn:
Does the above .rar need to be done on an unlocked and rooted device or is that for us locked and unrooted folk to try? If it's the latter, I will make the single fastest drive home I've ever made to test it and report back.
[Xperia Z3 Developer Discussion [Developers Only]] shakerist:
Its for unlocked and rooted devices im afraid :(

---------- Post added at 01:05 AM ---------- Previous post was at 01:00 AM ----------

Its for unlocked and rooted devices im afraid :(
[Xperia Z3 Developer Discussion [Developers Only]] xploitnt:
im getting excited! i'm on the edge ready to test anything that someone comes up with for a locked boot loader asap :highfive:
[Xperia Z3 Developer Discussion [Developers Only]] thienbrand:
Sadly, all the tests above just proved that munjini's exploits are not working.
[Xperia Z3 Developer Discussion [Developers Only]] serajr:
But... !! ;)
[Xperia Z3 Developer Discussion [Developers Only]] thienbrand:
But miracles happened :D

Now waiting for them to built a tool.
[Xperia Z3 Developer Discussion [Developers Only]] monx®:
wait is over. proceed here

http://xdaforums.com/crossdevice-dev/sony/giefroot-rooting-tool-cve-2014-4322-t3011598
[Xperia Z3 Developer Discussion [Developers Only]] gregbradley:
If anyone actually gets this to work on Z3, then please post the steps and a link to the FTF you flashed.

Many people have reported this failing in the Z3, and only a few have reported success, but not really given the exact link to the FTF they flashed
[Xperia Z3 Developer Discussion [Developers Only]] tr0teK:
Since I know it works for most people, only people who have problems with this are D6603 Owners like me. First exploit works but the second exploit which should push supersu has problems. It seems that the exploit can be targeting the wrong kallsyms address (which is readable only in UB devices).
[Xperia Z3 Developer Discussion [Developers Only]] willuare:
I have a xperia Z 3 D6603

And the root works for me .

Just adjust the time to standby time of screen to 10 mins and in developer option tick fictiv position ans check application in usb

Normaly the first time it doesn't work and the second time its work and you have root access in your phone .

And don't forget to put your phone in airplane mode for all manipulation .

I hope this trick help you
[Xperia Z3 Developer Discussion [Developers Only]] tr0teK:
Thanks but I already tried all of it. Nothing worked. Which ftf file did you use ? Provide Download Link if possible. Maybe That's the problem.
[Xperia Z3 Developer Discussion [Developers Only]] willuare:
I used this : http://oceanhost.eu/d7iuzncelhpr/D6603_23.0.A.2.93_Generic_20GLOBAL.ftf.htm

i hope your problem will solve soonly
[Xperia Z3 Developer Discussion [Developers Only]] tr0teK:
I used the same one. Well I gotta sit back and wait....
[Xperia Z3 Developer Discussion [Developers Only]] mo3553:
Oh your just so lucky, aren't you?
[Xperia Z3 Developer Discussion [Developers Only]] willuare:
Maybe ^^ but my bootloader is locked forever . no custom ROM for me ...
[Xperia Z3 Developer Discussion [Developers Only]] mo3553:
What is your bootloader status? I mean can you unlock it or its not allowed?
[Xperia Z3 Developer Discussion [Developers Only]] tr0teK:
Bootloader Unlock Allowed: Yes
[Xperia Z3 Developer Discussion [Developers Only]] Shiftone:
Worked for me.

UK Three branded.

Flashed Generic global. 93 ftf

Followed instructions exactly

First attempt, no go

Second run of the script after reboot - success.

Patched remote play app working perfectly.
[Xperia Z3 Developer Discussion [Developers Only]] tr0teK:
Works for me now too :)
[Xperia Z3 Developer Discussion [Developers Only]] buda81:
On Generic .93 and still won't work for me. Keeps hanging on the rooting part.
[Xperia Z3 Developer Discussion [Developers Only]] tr0teK:
Airplane mode.

Location activated

Usb debugging

Mock location

Usb verification off

Display turn off after 10 min

Start exploit. After restarting phone unlock it wait 10 seconds! then press key on computer. If failed start exploit second time. It worked for me when I waited 10 seconds after restarting and unlocking phone.

And be sure to have generic global. 93 it didn't work for me with generic de for example
[Xperia Z3 Developer Discussion [Developers Only]] buda81:
I've done all that and it always hangs on "Failure [INSTALL_FAILED_INSUFFICIENT_STORAGE]". it won't get pass that section after the first try.

Edit: After 5 firmware flashes and many tries, I have root. Thank you all for your help.
[Xperia Z3 Developer Discussion [Developers Only]] gregbradley:
OK, this thread has run its course. It was a discussion on how to gain root on LB, we have done that now.

I will close the thread before it goes off topic. Please use the giefroot thread to discuss this root method.

Thread closed
[Samsung Epic 4G Touch] RS.85243:
I checked other threads and am completely stumped on this one. No matter which custom rom I lose MEID, Serial, and data connection. As soon as I restore FL24 stock rooted or reflash any stock rom it is back and working correctly. I've tried the ics FL24 and Gingerbread EL modems, nothing. I've tried the QPST work around to manually add the MEID and Serial but it will not continue past set_usb_path because the file is missing and I couldn't copy it from the stock rom. I'm at a complete loss as what to do now...HELP?:eek:
[Galaxy Note II Q&A, Help & Troubleshooting] 5parc:
Before I get linked to a thread full of geeky complicated replies, please; I already checked 4 threads & came to the conclusion I just wont understand it.

I basically rooted my phone using odin; just used the simple instructions on Max lee's website. Did the Vol up + Power Button + Home, plugged it into my laptop; clicked pda & chosen the .tar file of the note 2 (cwm6-root-note2.tar) Everything went well & my device started without any issues.

My phone works fine, but at first SuperSu would give me this message ' unfortunately supersuhas stopped' So I updated it in the playstore and now get this message 'There is no SU binary installed, this is a problem!'

Its a note II N1705 running Andriod 4.4; any help would be appreciated; I think I have to flash SuperSu or something along these lines, but hope someone can explain me how to do so.

I also read that my phone is 'technically' rooted, so I made sure to try out titanium backup which didn't work because I don't have root access.

Thanks in advance,
[Galaxy Note II Q&A, Help & Troubleshooting] ceomaverick:
Here is the Link to cwm recovery that you need to flash with odin 3.09.

http://galaxynote2root.com/cwm-recovery/

I think your phone is 7105 (lte), so download 1 for that. It should be a tar file.

Once it is installed, reboot to recovery and flash supersu zip using option "install zip"

Make sure the supersu zip is for your device. Flashing wrong supersu might brick ur device.

U will find it on chainfire's Web.

Press thumps up if you found this suggestion helpful.
[Galaxy Note II Q&A, Help & Troubleshooting] 5parc:
I downloaded the .tar file? Am I going to use Odin ? Or am I going to do this by only using my phone?

'Flash supersu zip using option install zip?' What do you mean flash

'Makee sure the supersu zip is for your device. Flashing wrong supersu might brick ur device.' You first say I need a tar file then start talking about a zip file? Am completely confused.

Explain this as if you are explaining it to a noob, I don't get it.

EDIT:

I managed to fix my problem after tons of research to translate your post to something more understandable; regardless of that! You got my upvote
[Galaxy Note II Q&A, Help & Troubleshooting] ceomaverick:
Tons of research, really?

You are the first guy who found it difficult to understand my instructions.

Anyway, I am happy you found your way and in the process gained more knowledge.
[Galaxy Note II Q&A, Help & Troubleshooting] med1c:
hlp

i m also having the same trouble,n i also.dun knw wat u saying,but u nid ur hlp,i nid u to show me the step clearly pls,can?
[HTC One Max] herzig.grant:
Both TWRP 2.8.1.0 and CWM think i am international but, I am t6vzw. I flashed the RUU, but i am having the same problem.. I tried to flash both international and verizon roms but neither work. How can I fix this?!?
[HTC One Max] dottat:
Make sure you flash the vzw version of twrp. Latest one can be found here..

http://techerrata.com/browse/twrp2/t6vzw
[HTC One Max] herzig.grant:
Thanks for replying but, thats exactly what i did. I reflashed twrp just in case but, i am still having the same issue... Cwm said i was t6 and it gabe me a status 7 error. TWRP just said error executing updater script. Any more suggestions? The RUU I flashed was also for vzw, ive never had a problem like this when flashing roms
[HTC One Max] dottat:
Can you post the filename of the recovery you flashed ?

Also the output of a

fastboot getvar all

X out your serial number and imei
[HTC One Max] Flyhalf205:
Sounds to me like your flashing AOSP roms. AOSP will not flash with TWRP builds from techerrata which are the official builds of TWRP. You can only flash AOSP roms with the TWRP builds here: http://xdaforums.com/showthread.php?t=2498746 which will not give you the binary issue.

[MENTION=3472611]dottat[/MENTION] FYI :D
[HTC One Max] herzig.grant:
ok, thanks i'll try that after school. Thanks for the reply
[HTC One Max] herzig.grant:
Sadly, i get the same error when i flash the image from the link you gave me. :(
[HTC One Max] herzig.grant:
Is there anything else i can do?
[HTC One Max] dottat:
I would still like to see that fastboot command
[HTC One Max] herzig.grant:
In the terminal, when i type adb fastboot getvar all, it just gives me a list of fastboot commands
[HTC One Max] herzig.grant:
Any more info about the fastboot getvar all?
[HTC One Max] dottat:
It's just

Fastboot getvar all

No adb in front.
[HTC One Max] herzig.grant:
Ok, working on it
[HTC One Max] herzig.grant:
alright, got it
[HTC One Max] Flyhalf205:
Alright. You have to be mixing up these files somewhere. Flash this recovery http://flyhalf205.com/recoveries/openrecovery-twrp-2.8.1.0-t6vzw.img

Download and flash this ROM https://download.cyanogenmod.org/get/jenkins/91425/cm-11-20141120-NIGHTLY-t6vzw.zip
[HTC One Max] herzig.grant:
Same results.... Btw i just wanted to say thanks for all of your guys' patience
[HTC One Max] Flyhalf205:
What ROM do you have installed right now?
[HTC One Max] herzig.grant:
Right now i am on stock.. I flashed the RUU after i started having this issue with the demon dust rom... But the RUU didnt fix it
[HTC One Max] herzig.grant:
The fastboot report shown in the attached file says im t6wl.. its supposed to say t6vzw, right?
[HTC One Max] Flyhalf205:
t6wl is verzion. t6ul is internationa. t6whl is sprint