yashsingh1/xdaforums huggingface dataset:
[AT&T Samsung Galaxy Note 4] siriom:
What are you on ? 4.4.4 or 5?
[AT&T Samsung Galaxy Note 4] Cormyee00:
It only works on KK
[AT&T Samsung Galaxy Note 4] warriorpluto:
Oh I forgot to add I installed it already. Great app
[AT&T Samsung Galaxy Note 4] gatesjunior:
Nice Avatar BTW :)
[AT&T Samsung Galaxy Note 4] warriorpluto:
Thank you kindly. Thats my ex girlfriend lol
[AT&T Samsung Galaxy Note 4] Cormyee00:
Has anyone noticed a folder appearing after using Kingroot? I was cleaning unused item out to free up space through My Files and noticed Tencent/Tcent/Logs and it appears to be logs of everything I do on a daily basis. I deleted them, i should have kept them but it looked very shady. I was wondering if this had something to do with Kingroot and the info being sent to them? I googled it and found this http://blog.trendmicro.com/trendlab...oid-malware-targets-china-mobile-subscribers/ sorry if this has been discussed but I haven't seen it mentioned in any of the root threads. Thanks
[AT&T Samsung Galaxy Note 4] heXacode:
Can you reproduce this? Was it from Kingroot or something else?

Please reproduce this and let us know what app or where it's coming from. Don't delete the logs. They contain info that the malware is being used to send info back.
[AT&T Samsung Galaxy Note 4] Cormyee00:
I believe it came from Kingroot but to be honest I'm not 100% sure. I will report back as soon as another log appears. Thanks.
[AT&T Samsung Galaxy Note 4] brorex:
That's a bit disturbing. I'd really like to know where you got that from. I haven't rooted yet and was curious about king root, when people started crying wolf about Internet connectivity and other people calling them paranoid. It's always paranoia until some real s**t comes to surface. Anyone else rooted and can find that folder?
[AT&T Samsung Galaxy Note 4] stevenj05:
What folder did you find this under? I wanted to look and see if I find it
[AT&T Samsung Galaxy Note 4] trafalger888:
Tencent is the name of a Chinese gaming/internet company. For whatever that's worth. Probably not related. Just saying.
[AT&T Samsung Galaxy Note 4] Dnice25:
Looks good
[AT&T Samsung Galaxy Note 4] k9castro:
I also uninstalled Kingroot (it worked, but just not a fan of temp root) and then ran Debloater (thanks again to gatesjunior) and Kingroot leaves a background process... I was able to stop it loading with Debloater.
[AT&T Samsung Galaxy Note 4] siriom:
what process ? even if you install everything?
[AT&T Samsung Galaxy Note 4] gatesjunior:
Don't even try and do this manually, just go grab Super-Sume from the Playstore and run it. It will completely remove Kingroot and all of its dependencies and install SuperSU. That is easy enough to uninstall afterwords if you just do not want root any longer.
[AT&T Samsung Galaxy Note 4] k9castro:
Thanks gatesjunior, I just ran your app and even though I have already uninstalled Kingroot I'm hoping it removed the background process Kingroot left after the standard playstore Uninstaller...
[AT&T Samsung Galaxy Note 4] gatesjunior:
Yes, it will.
[AT&T Samsung Galaxy Note 4] DeathLord..:
I am holding off till a perm root is found. I have tried this new route and I have more lost root and reboots then just using king root alone.

---------- Post added at 05:30 AM ---------- Previous post was at 05:26 AM ----------

I have great respect for Gate Junior and team. Guys don't give up keep up the work.
[AT&T Samsung Galaxy Note 4] wonderingabout:
Still just temporary root?
[AT&T Samsung Galaxy Note 4] Venom0642:
Correct.

Running On New Deadly Venom Note 4 v3.0
[AT&T Samsung Galaxy Note 4] ZPaul2Fresh8:
I can't believe how many people don't mind having their personal data shipped over to China!
[AT&T Samsung Galaxy Note 4] howellcp:
Expecially for temp root.
[AT&T Samsung Galaxy Note 4] eklipz3:
i'm just throwing this out there but has anybody besides myself tried kingoroot instead of kingroot with super sume working fine so far, when I get up later on i'm going to check and see if it's still rooted and give a update.
[AT&T Samsung Galaxy Note 4] siriom:
Havent tried kingoroot , but im gonna take a wild guess its also temp ?

Would have heard about it by now if it wasnt...
[AT&T Samsung Galaxy Note 4] psyciatrichelp:
We actually have no proof of that. I did a 15 minute long data capture of my device being rooted by kingroot and normal use after. it did not appear to try and send any data out side what was needed to root.
[AT&T Samsung Galaxy Note 4] ZPaul2Fresh8:
I'd rather not roll the dice. And just because you didn't direct anything now doesn't mean it won't pull data at a later date...

Just not worth the risk for temp root in my opinion...
[AT&T Samsung Galaxy Note 4] patt2k:
No one is forcing you to do it :D at least it rooted my android tv device and then I swapped it with supersu all good ever since.

We might never see root on this device or maybe in a year or longer who knows.
[AT&T Samsung Galaxy Note 4] elliwigy:
sounds like you and many others have root with king root already... not a year from now, you have it now already
[AT&T Samsung Galaxy Note 4] patt2k:
If you find root on LP on Note 4 I will gladly take it,yes I did try it for few hours on 4.4.4 but wasn't worth re-rooting every few hours or minutes.:laugh:
[AT&T Samsung Galaxy Note 4] elliwigy:
root is root imo.. its not perma root but as i said before, rooting isnt the issue its write protection.

your device has already been rooted.

but i get what you mean...
[AT&T Samsung Galaxy Note 4] killerocker:
I think I remember we figured out that the phone identity thing is so that it can pull the proper files and such that it needs from a server and then it uses that to do the correct rooting process for the phone.
[AT&T Samsung Galaxy Note 4] stevenj05:
Why do you have to keep rooting your phone? Once I get root I run all my apps that need it and then they stay active till reboot
[AT&T Samsung Galaxy Note 4] dagolith:
How do you expect it to root without those permissions?

Sorry I never post but I had to say something.
[AT&T Samsung Galaxy Note 4] eklipz3:
Although I was able to use super sume with kingoroot to install and run supersu it still random booted sometime between 4a and now so I guess it's no better.

Sent from my SM-N910V
[AT&T Samsung Galaxy Note 4] eklipz3:
I tried it again since my last post and this time I deleted kingouser after it granted supersu and as of now no random reboot not saying it won't but so far it hasn't. will still post later with any changes.
[AT&T Samsung Galaxy Note 4] ad44891:
?where you been playa..........
[AT&T Samsung Galaxy Note 4] xGREENCR4CKx:
What I understand there is no root for the att note 4? Sorry guys I just got this device, and I been wanting to root it lol.
[AT&T Samsung Galaxy Note 4] ZPaul2Fresh8:
Interesting. Here's your system UID for Lollipop. https://github.com/nowsecure/samsung-ime-rce-poc
[AT&T Samsung Galaxy Note 4] Kyuta Syuko:
Nice so who's going to work on getting LP rooted? :D
[AT&T Samsung Galaxy Note 4] scottjoshuac:
Please look through the thread. There have been many times people have talked about the status of root. One of which was describing our current temp root process.
[AT&T Samsung Galaxy Note 4] ZPaul2Fresh8:
Not sure if LP vulnerable yet with this. Then you'd have to get a kernel vulnerability. Then deal with permanent root which is a problem with KitKat's current root...
[AT&T Samsung Galaxy Note 4] collinstheclown:
I finally downgraded top KK so I could try this root. It mostly works, but that's to be expected.

I just ran kingroot and it crashed and reset, during the "powered by Android" splash screen it showed an un-locked paddock icon and said custom under it. Not sure if that means anything?

That's guys for the hard work!

Sent from my SAMSUNG-SM-N910A
[AT&T Samsung Galaxy Note 4] john.082896:
http://arstechnica.com/security/201...ng-galaxy-phones-into-remote-bugging-devices/

Another flaw that might allow root without kingroot and Chinese remote exploit code.
[AT&T Samsung Galaxy Note 4] jocarog:
https://www.kb.cert.org/vuls/id/155412

Just read about it but seems that I'm late...
[AT&T Samsung Galaxy Note 4] inassah:
Supersu. For anyone who is not seeing the supersu icon in the app drawer after running the supersu me app, I am getting it to appear by running the supersu me twice in a row.
[AT&T Samsung Galaxy Note 4] Venom0642:
Heads Up Looks like the T-Mobile for SG6 And SG6 Edge has put a Protection on there new Update Lollipop 5.1.1 Can't

Odin Or Downgrade On among other things, So basically once we Get This Update to Roll Over to us i Assume we won't be able to do it

as well just passing Information From There Thread: http://xdaforums.com/tmobile-galaxy-s6-edge/general/psa-odin-5-1-1-t3136151 The ones that Took that Update Are not able To Root!
[AT&T Samsung Galaxy Note 4] patt2k:
Did anyone send this to gates junior or one of the other guys? does this help us at all? I am on LP so if you guys need testing because most of people are on KK let us know those who are on LP

I honestly have no idea what this remote code execution exploit does but if it helps then I am happy. :good::highfive:
[AT&T Samsung Galaxy Note 4] siriom:
Think it might solve the WP issue.

https://www.nowsecure.com/blog/2015/06/16/remote-code-execution-as-system-user-on-samsung-phones/
[AT&T Samsung Galaxy Note 4] patt2k:
I hope gatesjunior and others are onto this :D
[AT&T Samsung Galaxy Note 4] siriom:
YEah but its not a perfect solution , from what i gather , a patch or update file will be made per type of phone / model . Its not a 1 size fits all kind of deal.
[AT&T Samsung Galaxy Note 4] gcodori:
Must be cracking season with Samsung phones.

Slashdot just had an article about Samsung phone keyboards when updated can have malicious code inserted.

Another Avenue to investigate.
[AT&T Samsung Galaxy Note 4] syserr:
I would think this is a slam dunk. It would likely require a crafted keyboard language file and probably update it over your WiFi so you can man-in-the-middle the host swiftkey uses.

:fingers-crossed:

Edit:

https://www.nowsecure.com/blog/2015/06/16/remote-code-execution-as-system-user-on-samsung-phones/ ... Looks like it's all there to scoop up.
[AT&T Samsung Galaxy Note 4] siriom:
Agreed but it requires it be done per model and i have a note edge atm ... /pray someone looks into the note edge as well ?
[AT&T Samsung Galaxy Note 4] syserr:
I'm not sure it would be model specific, since SwiftKey is common. The link I inserted in my previous post: https://www.nowsecure.com/blog/2015/06/16/remote-code-execution-as-system-user-on-samsung-phones/ seems to give great details. Funny thing, the guy posted the Youtube video in December and no one heard about it until he spoke at Blackhat. sheesh
[AT&T Samsung Galaxy Note 4] reydarz:
Guys this swift key exploit only gives us system user access which we can already achieve with kingroot + xinstaller
[AT&T Samsung Galaxy Note 4] jinx10000:
Keyboard vulnerability - possible advantages even if it isn't permaroot.

I assume that the root method could easily be open source and not require permissions to send unknown data types to a server.

It might work on Lollipop. I didn't see any version requirements. I don't know what further restrictions would be in place to prevent it...
[AT&T Samsung Galaxy Note 4] drivel2787:
Doesn't work on lollipop though
[AT&T Samsung Galaxy Note 4] syserr:
https://www.nowsecure.com/keyboard-vulnerability/

Shows the VZW S6 is unpatched, from that I would presume it works on lollipop.

The Note 3 and 4 are not listed, which is a little unsettling.

---------- Post added at 03:14 PM ---------- Previous post was at 03:09 PM ----------

I did not know this with kingroot + xinstaller. So you can get temporary root, but not write (permanently) to any system area to break it?
[AT&T Samsung Galaxy Note 4] reydarz:
This will explain it better than I can:

https://www.nowsecure.com/blog/2015/06/16/remote-code-execution-as-system-user-on-samsung-phones/

Now it may be possible to change the payload dir to /system but I doubt dm-verify would let the changes stick.
[AT&T Samsung Galaxy Note 4] drivel2787:
I was referring to king root/temp root
[AT&T Samsung Galaxy Note 4] rsohne:
AT&T
[AT&T Samsung Galaxy Note 4] eklipz3:
Is this exploit at boot or after boot, might be a dumb thought but I was also thinking bootloader

Sent from my SM-N910V
[AT&T Samsung Galaxy Note 4] ownmart:
https://www.androidfilehost.com/?w=search&s=N910a

on there it shows someone hosting a rooted oc4 tar. not sure if its good or not
[AT&T Samsung Galaxy Note 4] Venom0642:
No that's for Once you get Full Root that Tar Rom is From Here: http://xdaforums.com/note-4-att/development/rom-att-galaxy-note-4-t3111057
[AT&T Samsung Galaxy Note 4] jocarog:
Would this help us?

http://www.xda-developers.com/asus-zenfone-2-bootloader-unlocked-without-asus/
[AT&T Samsung Galaxy Note 4] patt2k:
[MENTION=3178012]gatesjunior[/MENTION]
[AT&T Samsung Galaxy Note 4] n0xx187:
I Don't think this will help but it might... it says you have to be rooted for it to work..so temp root might get it done..
[AT&T Samsung Galaxy Note 4] eklipz3:
According to the android police web site they are going to start rolling out a patch for this exploit

Sent from my VS985 4G
[AT&T Samsung Galaxy Note 4] Stryke_the_Orc:
It's common practice to patch an exploit before releasing details, otherwise you open the door to hackers worldwide. Counterproductive to security measures.

I'll post it here for you guys as well, but what I gather from the exploit:

and

So honestly, I wouldn't hold my breath on this being a valuable exploit. JM2C.
[AT&T Samsung Galaxy Note 4] elliwigy:
the 1st set of info contradicts the last part.. it indicates its patched starting with vzw but then says it was provided to carriers and reported it is not patched with vzw yet.
[AT&T Samsung Galaxy Note 4] eklipz3:
I believe I posted the same thing saying that a patch was on the way that is was not patch yet and what I read showed dated on the 16th the only reason I posted figured it'snot patched yet.

Sent from my SM-N910V
[AT&T Samsung Galaxy Note 4] tekjester:
What do you mean by "this"? The predictive text injection method? If so, it's after boot. Basically, the transport of dictionary files is unsecured and the installation runs with very high privileges.

You would basically perform a man in the middle attack on yourself. Your phone goes to look for updates, but when it's waiting the response, you inject the manifest (i.e. list of files it should expect) then the actual files. Once it receives the files, it runs them with system privileges. The beauty of this, is it's allowed to modify the system partition without firing off WP. WP knows that the updates are allowed to happen, so it doesn't reboot/rewrite the changes that it makes.

People smarter than myself would have to create a file that is executable by the predictive text engine to open a much larger security hole to start turning off WP. It's yet to be seen if DM-Verify (Bootloader) will revert these changes, but from my vantage point, this exploit will not gain us access to the bootloader, but could lead to permanent root.
[AT&T Samsung Galaxy Note 4] eklipz3:
My bad by (this) I meant the SwiftKey issue that if at boot is that a way for us to whip this thing.

Sent from my VS985 4G
[AT&T Samsung Galaxy Note 4] tekjester:
Still is! It allows us to write to the system with privileged account. But, forging a bootloader would be really sweet :)

Basically though, it's an OS layer technology that uses unencrypted traffic to write to the system. I wish the S6 was hacked to death already or else I think we'd already have root from this!
[AT&T Samsung Galaxy Note 4] scottjoshuac:
I'd be interested in getting a root application using the keyboard exploit. Maybe GatesJunior could do something?
[AT&T Samsung Galaxy Note 4] bobloblaw1:
Exactly. The SwiftKey exploit should allow us to write root to /system which we otherwise cannot do due to dm_verity. I'm a little confused as to why knowledgeable folks seem a little dismissive to the idea, but I'm more than willing to listen.
[AT&T Samsung Galaxy Note 4] rquinn19:
Sometimes it's times like this that produce results. All is quiet and then out of nowhere we have a solution. Fingers crossed it's being looked into.
[AT&T Samsung Galaxy Note 4] tekjester:
I'm hoping it's because of the variety of security holes involve that are scaring away the devs. Devs in general are lazy (in a good way), they like to use tools already available. I would suspect it's a team effort for this one. I think what's holding us back is needing someone who is an expert in HTTP Injection/spoofing. The questions I would be asking about this exploit are:

1. What triggers the phone to request a dictionary update?

2. What port?

3. How long does it listen?

4. What application executes the update? Can we run an APK? Is it just a parsed data file?

5. (the big one) what can I write into the system to allow a permanent root that is executable by the update mechanism?

If you could inject, and convince swiftkey to run an APK, I think we'd be rooted by now. I'm assuming it's figuring something out that operates within the constraint of the dictionary update mechanism.

I like to dream that devs are just being quiet because they are willing to work 6 months to maybe collect a $25,000 bounty.
[AT&T Samsung Galaxy Note 4] bobloblaw1:
A significant number of these questions are answered on the nowsecure technical blog.

https://www.nowsecure.com/blog/2015/06/16/remote-code-execution-as-system-user-on-samsung-phones/

A POC and instructions to reproduce are provided as is the Twitter handle of the exploiter.
[AT&T Samsung Galaxy Note 4] tekjester:
That's pretty amazing! Seems like it's relying on the Dalvik cache as well, which I don't believe will persist through a boot on 5.0, but I could be wrong. Definitely going to play around with this tonight.
[AT&T Samsung Galaxy Note 4] elliwigy:
dont go messing up your phone now lol
[AT&T Samsung Galaxy Note 4] bobloblaw1:
https://mobile.twitter.com/Fuzion24/status/610845808976642049

Familiar faces in different places.
[AT&T Samsung Galaxy Note 4] drivel2787:
Crazy how g4 and the s6 have already been rooted and we're still sitting here when will set get perm root lol.
[AT&T Samsung Galaxy Note 4] Kyuta Syuko:
I'm just going to quote what was said before...
[AT&T Samsung Galaxy Note 4] drivel2787:
Yeah I know. Have people given up yet? I'm thinking about selling it out right and going to a different phone. I love the phone but not having root sucks
[AT&T Samsung Galaxy Note 4] heXacode:
No we have not given up. There's gatesjunior and his team on it and there's me. We really do need outside help.
[AT&T Samsung Galaxy Note 4] geronimo8725:
oneclickroot.com/device/samsung-galaxy-note-4-sm-n910a-att-lollipop/[/url] is this legit?
[AT&T Samsung Galaxy Note 4] howellcp:
Try it, didn't work on Verizon.I just tried.
[AT&T Samsung Galaxy Note 4] geronimo8725:
haha they want you to enter a credit card # before it downloads besides that i dont own a note 4 im currently using an s4 considering upgrading wanting root first ofcourse
[AT&T Samsung Galaxy Note 4] howellcp:
I didn't have to put in a cc number.
[AT&T Samsung Galaxy Note 4] Vindicated777:
Nope. ATT, doesn't work.
[AT&T Samsung Galaxy Note 4] Gods Son:
WOW! Still no root! I must say this feaking disappointing and it's not the devs fault it's the fact that AT&T and samsung thought that they would be able to get this phone in secure hands handling secure info and documents. Just basically becoming the new government phone ???. Well it's not going to be and that's that. As for root well it would be nice but it's not going to happen. Heck I went be using my Galaxy S2 and it's a huge step back but I'd rather use that than go buy a fashion phone like the galaxy s6 which is crazy that it has root already on the AT&T network and the note 4 on the same network doesn't. Root will never happen end of story.

Sent from AT&T Galaxy S2
[AT&T Samsung Galaxy Note 4] themilkdud:
YEP.

second that-
[AT&T Samsung Galaxy Note 4] dsnider42:
I'm not a dev by any means but I am more than willing to test if needed. Let me know if there's something I can do. I have the verizon version note 4 M910V.05.
[AT&T Samsung Galaxy Note 4] heXacode:
All you do is complain, complain, and more complaining. You told the whole forum you were selling your N4 over 2 months ago yet here you are. All your post is nothing but complaining. If you're that pissed off then head to your nearest AT&T store and get rid of your N4!!!!

You don't know jack all whether we can get it perm root or not. You are always quick to say this phone will never be rooted.

Enough with the freakin' complaining and enjoy temp root till we figure it out!!!!!
[AT&T Samsung Galaxy Note 4] geronimo8725:
good to know thanks for checking out that link guys shame it was to no avail
[AT&T Samsung Galaxy Note 4] nemopsp:
Yes it's very true all you do is complain, just get a beer an chill.

Sell your phone if your unhappy, tell then go get a CrApple phone an still b unhappy in same situation with locked bootloader.

I hope the team best of luck! An I'm very happy with SuperSU :) even tho its not full, it does work!

I have faith in the team! They want to give us something, an working hard just everything takes time an I believe it will happen.

As I say, "If there is a will, There is a way!"
[AT&T Samsung Galaxy Note 4] stealyourface1:
I apologize if this has already been covered but just doing what I can to find a way to root this thing...

https://www.nowsecure.com/blog/2015/06/16/remote-code-execution-as-system-user-on-samsung-phones/

I did use the terminal emulator to see if my N4 is vulnerable to this and sure enough it is...the exploit through the swift key stock keyboard has root privileges and able to write to system...

Forgive me if this is long since been discussed...im still a bit of a new b.
[AT&T Samsung Galaxy Note 4] heXacode:
We are aware of that and ideally it would be a good way to utilize this method and get ourselves off of king and kingo root methods.

Although, we'd have temp root with this we still need to figure out a way to turn off WP or at least work around it to the bootloader and maybe find a flaw within the bootloader to utilize all this into a full perm root.

We still won't be able to flash some ROMs unless they are Touchwiz based.

Right now my laptop is out of commission. Motherboard fried and its only a year old laptop. I won't get it back for at least 2 weeks.

Not much I can do now except communicate with gatesjunior.
[AT&T Samsung Galaxy Note 4] Viryllo:
Has Anyone out there had temp-root on the VZW Note 4 running lollipop 5.0.1??
[AT&T Samsung Galaxy Note 4] tekjester:
If so, it's not been posted on the internet.
[AT&T Samsung Galaxy Note 4] xGREENCR4CKx:
I'm keeping up with this thread hoping some one finally roots att note 4
[AT&T Samsung Galaxy Note 4] elliwigy:
lol.. its already been rooted for a long time now...
[AT&T Samsung Galaxy Note 4] killerocker:
He probably means a stable permanent root which the AT&T version does not have (yet)
[AT&T Samsung Galaxy Note 4] epic4grooted:
Has anyone figured out what causes the reboot after kingroot?
[AT&T Samsung Galaxy Note 4] mircury:
Ya, dmverity. Which is write protection and is part of android's verified boot process. It works by using a hash tree to verify each block before loading it into memory and running it. It's implemented in the bootloader which is locked. The security gods are trying to force us into now needing a true bootloader exploit (which is much much much harder and hasn't been done since Rosenberg's Loki exploit on the S4 in 2013) and a regular system exploit (already done on the N4) to even attain root that doesn't cause crashes/reboots. That's my whole take on the issue from what I've read. Someone correct me if I'm wrong. So.... don't hold your breath for permanent root on the N4. With your next phone, get a phone with an unlocked bootloader.