yashsingh1/xdaforums huggingface dataset:
[Sony Cross-Device General] Stupid Dufus:
For those of you, like me, who are stuck with Docomo and its weird customizations and bloatware, here's the process I used to root the Z3 (SO-01G).

My phone was on Build/firmware 23.0.B.11 to start with

I then obtained a copy of the D6603 23.0.A.2.93 Global generic firmware.

Using the Xperia flash tool, I flashed ONLY kernel and system from the generic firmware.

I was then able to runzxz0O0's giefroot tool successfully.

I then created a pre-root firmware using the PRFCreator, and copied it over to the phone via USB (internal memory).

I then had to run the following adb commands:

adb shell

mount -orw /system

Afterward, I used z3-281-lockeddualrecovery on the phone to get recovery. Without the mount command in adb, it would not install recovery correctly.

I booted into recovery, flashed the pre-root firmware I created

Then I POWERED OFF the phone.

With the phone off, I went into the Xperia flasher, and chose to flash the new firmware but EXCLUDED system.

And that was it.

Sorry for the horrible writing here. Almost 2:30 a.m. and I'm tired. Thanks to everyone who created these amazing tools!

I pulled much of the info from some Japanese sites, like this and this
[Sony Cross-Device General] Tavinsky:
Thanks for the tool, unfortunately in my device did not work. Kernel not supported.

Facts:

D6633 Dual Xperia Z3

4.4.4

compilation 23.01.F.0.96

Stock Rom

Can someone help me?
[Sony Cross-Device General] hussein1:
:p

---------- Post added at 02:05 PM ---------- Previous post was at 02:03 PM ----------

[MENTION=3975929]zxz0O0[/MENTION] My Friend Use the New Exploit for sony device android 4.4.4 & 5.0 root.

This New Exploit Support Android 5.0 (Creation By Kingroot)

http://www.kingroot.net/article/134

Successfully worked Samsung Device Qualcomm Snapdragon Cpus.:p:D
[Sony Cross-Device General] Stupid Dufus:
I noticed that somewhere along the way, I lost the ability to give rw to /system. I can use terminal apps or adb shell to get su, but when I try to chmod (terminal or via ES File Explorer's Root Explorer rw options), it is denied and says I don't have permission. Any ideas why this is, or how I can go about changing that? Thanks!
[Sony Cross-Device General] ludago2000:
Update version without losing root

As I can upgrade from version 23.0.F.1.74 D6633 dual 23.0.1.F.0.96 the version without losing root?:D
[Sony Cross-Device General] Vynikal:
Really? Smells like kind of Chinese bloatware to me. And I don't understand a thing, if there would be a clear LINK, it would be more simple.
[Sony Cross-Device General] vittogn:
Worked at first attempt (v3) on my D6603 with 23.0.A.2.98 (ita custom).

Thanks a lot.

Already donated!

Inviato dal mio D6603 utilizzando Tapatalk
[Sony Cross-Device General] r0x:
Whats about the 23.0.1.A.5.77 ?

Does it work with V3?
[Sony Cross-Device General] kiliimanjaro:
Trying on macOS

When I run the install.sh on my mac on terminal it tells me that the command line is not found for all adb.

What am I doing wrong?
[Sony Cross-Device General] zxz0O0:
Probably I will release exploit when Lollipop is released ;) Which step you are unable to figure out? Maybe I can help.

PM me your hangout address, I have added 18.4.C.1.26 in test version but I am not sure if it's 100% working.

Seems there is an error in install.sh

Change line

adb version > /dev/null 2>&1 || { ADBBINARY="adb" && echo "Using local adb"; }

to

adb version > /dev/null 2>&1 && { ADBBINARY="adb" && echo "Using local adb"; }
[Sony Cross-Device General] munjeni:
I done all steps, done getting_ptr and getting_offset steps and now unable to figure out how to place shell code since I have no idea how things working in our exploit, curently I am stuck at this:

else
{
memcpy(v38, sub_89C0, 0x400u);
munmap(void_ion, 256);
do {
if ( *(unsigned long *)((char *)v39 + i) == 0xBEEFBEEF )
*(unsigned long *)((char *)v39 + i) = sub_89D0;
i += 4;
} while ( i != 64 );

v43 = (unsigned int)(*(unsigned long *)(unk_D18C + 8) + 56 - v51) >> 1;
v62 = v18 + v43;
v67 = v43;
puts("exploiting");
ioctl(qseecom_fd, QSEECOM_MOFD_CMD, (int)&v62);
}
goto LABEL_54;

Probably sub_89D0() is shell code (?), but not getting what is unk_D18C . And definitelly not understand things. Getting_offset giving me reaply about kernel kvirt addr? ...Etc.

When I execute root I am getting "unable to handle kernel pagging request at virtual address"... This is code which I have modified -> http://pastebin.com/FQ3UpQGa . I just want nothing special just want to understand how to exploit kernel since this is my first time interest in exploiting kernel, just want to learn things (If I get this, probably I will learn good leason from them). I will be happy to finish them and get full understand of them, thats all :)
[Sony Cross-Device General] starsky23:
I am having the same issue! I reset my phone using flashtool but it seems like I cannot get root again. I can install supersu and give permission to ADB but no system rw access. I tried multiple computers to no avail!

Any suggestions guys?

Thanks!
[Sony Cross-Device General] rezende999:
ok agora em portugues haha

Acho que essa eh a solucao pra fazer root no meu z3 compact hehe sera que pode fazer um tuto desse em portugues ?? thanks !!
[Sony Cross-Device General] zxz0O0:
Okay, I will explain you. Let's say you have this code:

doStuff();

in assembly language it will be

call [Address of doStuff]

where the address is relative to the call command. That's why we can not just copy our exploit code to a allocated address and need a wrapper. Otherwise the relative address will be wrong and result in kernel exception.

My wrapper looks like this:

__attribute__ ((naked)) int wrapper(void* par1, void* par2)
{
asm volatile(
"ldr PC, =0xBEEFBEEF"
);
}

The PC register holds the address of the next command so this is generally a jmp command but with absolute address (0xBEEFBEEF will get replaced by exploit address function).
[Sony Cross-Device General] Crono88:
podes usar google translate
[Sony Cross-Device General] Stupid Dufus:
OK, I played around a bit more with the Docomo firmware of SO-01G (Z3 normal... NOT compact). It seems that something in the official kernel.sin or system.sin files interfere with using "mount -o rw,remount /system"

I've tried flashing different kernels from diff official firmwares, as well as the Global Generic. I can get rw after using the initial giefroot (has to be done with global generic), but when I update to a kernel and system designed for this model, rw access goes away.

Any ideas on how to get around this? I'd like to be able to write to SD with apps, install Xposed, etc.
[Sony Cross-Device General] irbis1977:
StoreFront xperia C3 dont work. Recovery work T2U-lockeddualrecovery2.8.1-RELEASE.installer/ necessary root
[Sony Cross-Device General] zxz0O0:
When you flash another kernel after running giefroot, system rw will not work anymore because kernel symbols in wp_mod.ko are not correct anymore. Either update by a prerooted flashable zip and include SonyRICDefeat or see for example in the Z3C Tablet forum how it's solved there (e.g. patches in systemrw.sh, etc.)
[Sony Cross-Device General] munjeni:
Ok, but I still not understand. How can I execute wrapper? Where to copy them? How these wrapper get executed?
[Sony Cross-Device General] zxz0O0:
We modify function address for flush function of ptmx device (see file_operations structure). Wrapper code will get copied to ptr location.
[Sony Cross-Device General] munjeni:
Ok, I found ptr at 0x6xxxxxxx, but stil not understand how things working. If I copy wrapper to the ptr location (previously mmaped) I will get "unable to handle kernel pagging request at 0xBEEFBEEF ??
[Sony Cross-Device General] zxz0O0:
You need to replace 0xBEEFBEEF at ptr location with address of escalation function.
[Sony Cross-Device General] munjeni:
Ok, I understand some things like wrapper(shell code) and dostuff(function for gaining root), I need to replace beefbeef with pointer to the dostuf, but other things I not understand! :( I have copied wrapper to the ptr location just for testing but in last_kmsg nothing about beefbeef which mean wrong parameter to:

modfd_req.ifd_data[0].cmd_buf_offset = ???

so wrapper() is not executed :( What to put to the cmd_buf_offset? How to get that?
[Sony Cross-Device General] spyvsspy:
this is AMAZING!

im heading now to verify it on my D5833 , pledging my debt right afterwards!

i cant believe it :D
[Sony Cross-Device General] serajr:
No!!

Locked BL!!!

;)
[Sony Cross-Device General] espaciosalter20:
what??? seriously??? That's absolutely amazing! i'm going to try your guide once i'll be at home! thanks man!!!
[Sony Cross-Device General] Krustnesis:
That's because u can install roms based on stock with LB.
[Sony Cross-Device General] Newt182:
I sometimes get this when running the exploit. Did anyone who successfully used this to root ever see this?
[Sony Cross-Device General] EricCartmanez:
dont run it as admin^^
[Sony Cross-Device General] xKadaj:
Doesn't work in D6653 :(
[Sony Cross-Device General] iFlasher:
Just do it on my D5833 and... I Have Root with latest firmware and in locked bootloader.

Thanks to all, a lot of them :)
[Sony Cross-Device General] serajr:
Just FlashTool mate!

Old fw - Full install with all wipes checked + device booted up till its end (Power Off button, reboot again till home screen)

New fw - Full install with just SYSTEM excluded
[Sony Cross-Device General] Krustnesis:
Do we have to wipe everything before installing deodexed .77?

Have already set everything on .93 and don't want to do it again. :(
[Sony Cross-Device General] thienbrand:
it's been 4 hours trying and still cant achive root on my D6603 Global @.@

How can some people achived it ? Ours are just the same device and the same firmware/kernel @ [MENTION=5031141]!!!!![/MENTION]!!
[Sony Cross-Device General] EricCartmanez:
maybe something's wrong with global generic fw o.O we could try other branded fws^^ or if some1 got it to work on global exact settings and how he got it working...
[Sony Cross-Device General] SONiX-GERMANY:
I was successfull on my D6603 with a fresh clean install of .93 generic fw with flashtool, full wipe, without an sd-card or sim inserted. Before this i was on .98 fw, not rootable.

atm: Z, Z3, Arc S, Play, S3, S3 Mini
[Sony Cross-Device General] iFlasher:
Yes, you have to wipe again. I first try without wipe data but I get so many errors that I simply backup data and wipe all again.
[Sony Cross-Device General] RHBH:
Dude, calm down.

[MENTION=3975929]zxz0O0[/MENTION] is aware of the issues, I'm helping him debugging the issues for more than 3 hours.
[Sony Cross-Device General] Krustnesis:
In my Global .93: try this:

Firstly flash D6603_23.0.A.2.93_Generic_20GLOBAL.ftf with wiping everything and no final verification.

Turn on ur phone, wait until it will boot up, get through configuration, do not log in gmail account, don't search for wi-fi, no sync.

Open About phone settings: Click 7 times on Build number, go back and enter Developer options and check:

USB Debugging, Allow mock locations and in security uncheck Verify apps.

Then connect phone to computer, turn on Airplane mode, go to home screen and try running install.bat.

Windows 8.1, no PC Companion in background, no flashtool in background.
[Sony Cross-Device General] remc12:
Hello, just try the root method in z3 6653 model with firmware 93 but taiwan and does not work , now I'm down 93 overall firmware for the model 6603 , and proceed to inform .

Reported that method does not work in 6653 with firmware 93 z3 overall the z6603 .

greetings .

Hola, acabo de probar el metodo root en z3 modelo 6653 con firmware 93 pero el de taiwan y no funciona, ahora estoy bajando firmware 93 global para el modelo 6603, y procedo a informar.

Informo que tampoco funciona metodo en z3 6653 con firmware 93 global del z6603.

saludos.
[Sony Cross-Device General] -Zork-:
Only some hours online thread, so is normal some little issue.. Only be patient

Enviado desde mi D6653 mediante Tapatalk
[Sony Cross-Device General] Newt182:
That could be a possibility. I've tried Generic Global 23.0.A.2.93 and Generic UK 23.0.A.2.93 from here: http://xdaforums.com/z3/general/ftf-stock-firmwares-xperia-z3-models-t2886061

MD5, in case anyone else has had success with Generic Global 23.0.A.2.93 but obtained from another source, is 2FCB051CA327EBA2EAFD90643BDBFC5D
[Sony Cross-Device General] shakerist:
Im gonna downgrade from : Android version : 4.4.4 / kernel version : 3.4.0-perf-g1b1963a-02930-g23f7791 / Build number : 23.0.1.A.5.77 to the generic worlwide version, ill report back :)
[Sony Cross-Device General] munjeni:
Agony continues, hope you enjoy it? :rolleyes: I wish you all the best in your life!
[Sony Cross-Device General] jaeiksong:
HELP

what can i do? it says seem your kernel / device is not supported? i have a sony xperia z3c D5833 :(

---------- Post added at 11:35 AM ---------- Previous post was at 11:21 AM ----------

WHAT TO DO?

==============================================

= =

= giefroot v3 =

= created by zxz0O0 =

= =

= Many thanks to: =

= - [NUT] =

= - MohammadAG =

= - Keen Team =

= =

==============================================

* daemon not running. starting it now on port 5037 *

* daemon started successfully *

=============================================

Waiting for Device, connect USB cable now...

Make sure that you authorize the connection

if you get any message on the phone

=============================================

Device found

=============================================

Sending files

=============================================

126 KB/s (259 bytes in 0.002s)

3614 KB/s (22220 bytes in 0.006s)

115 KB/s (237 bytes in 0.002s)

3317 KB/s (13592 bytes in 0.004s)

832 KB/s (1705 bytes in 0.002s)

4205 KB/s (34473 bytes in 0.008s)

5903 KB/s (4016989 bytes in 0.664s)

6549 KB/s (657704 bytes in 0.098s)

366 KB/s (752 bytes in 0.002s)

Error: Seems your kernel / device is not supported

giefroot (c) zxz0O0

Press any key to continue . . .
[Sony Cross-Device General] jaeiksong:
==============================================

= =

= giefroot v3 =

= created by zxz0O0 =

= =

= Many thanks to: =

= - [NUT] =

= - MohammadAG =

= - Keen Team =

= =

==============================================

* daemon not running. starting it now on port 5037 *

* daemon started successfully *

=============================================

Waiting for Device, connect USB cable now...

Make sure that you authorize the connection

if you get any message on the phone

=============================================

Device found

=============================================

Sending files

=============================================

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator

error: more than one device and emulator
[Sony Cross-Device General] gregbradley:
Have you downgraded the firmware?

Ensure you do not have bluestacks or other android emulators running on your pc
[Sony Cross-Device General] jaeiksong:
what is this? What can i do? Help me please!
[Sony Cross-Device General] gregbradley:
Did you not see the post just above yours where I answered you.....
[Sony Cross-Device General] jaeiksong:
oh my. you save me. thank you so much. after 4 to 5 hours maybe my phone is rooted now. thanks again :victory:

==============================================

= =

= giefroot v3 =

= created by zxz0O0 =

= =

= Many thanks to: =

= - [NUT] =

= - MohammadAG =

= - Keen Team =

= =

==============================================

* daemon not running. starting it now on port 5037 *

* daemon started successfully *

=============================================

Waiting for Device, connect USB cable now...

Make sure that you authorize the connection

if you get any message on the phone

=============================================

Device found

=============================================

Sending files

=============================================

126 KB/s (259 bytes in 0.002s)

2830 KB/s (22220 bytes in 0.007s)

115 KB/s (237 bytes in 0.002s)

1910 KB/s (13592 bytes in 0.006s)

648 KB/s (1705 bytes in 0.002s)

3260 KB/s (34473 bytes in 0.010s)

4166 KB/s (4016989 bytes in 0.941s)

2902 KB/s (657704 bytes in 0.221s)

165 KB/s (752 bytes in 0.004s)

2188 KB/s (44259 bytes in 0.019s)

pkg: /data/local/tmp/exploitServiceApp.apk

Success

=============================================

Running exploit

Make sure you have enabled "Allow mock locations"

in Developer Settings

=============================================

Please wait for the device to reboot

Press any key to continue . . .

Done. You can now unplug your device.

Enjoy root

=============================================

What to do next?

- Donate to the people involved

- Install dualrecovery by [NUT]

- Backup TA partition

Press any key to continue . . .
[Sony Cross-Device General] baste07:
It pays to read the instructions from start to finish
[Sony Cross-Device General] HORiZUN:
I hate this stupid D6616 T-Mobile Z3... No root. No recovery. No sim unlock. Grr... Patiently waiting for anything on this bootloader locked POS.

I'm jealous of you guys with root...
[Sony Cross-Device General] dukesinclair:
Device model / firmware version = D6653

Kernel version (cat /proc/version) = 3.4.0-perf-g1b1963a-02930-g23f7791

builduser@buildhost #1

tue nov 25 11.03:01 2014

adb shell "ls -l /data/local/tmp/"

adb shell "cat /data/local/tmp/giefrootlog" = kernel not supported
[Sony Cross-Device General] Futura2000:
It wont work on that kernel as its been patched if you read the OP it states that it will only work on a kernel built before october. Down grade to the previous firmware then you will be able to root the phone then install the lastest update from the forum once you have root and recovery.
[Sony Cross-Device General] rezende999:
Merece you tube hehe

Alguem poderia postar um video fazendo ??

thanks
[Sony Cross-Device General] danmak89:
Thanks to everyone involved in getting this out there. Latest stock firmware, rooted. Probably jumping the gun a bit here, but when Sony eventually release their 5.X update, would the PRF creator work with it? I guess we wouldn't know until release right?

Anyway, looking forward to getting a few modifications on my device now and (still patiently) waiting for Lollipop to come out.

Thanks again!
[Sony Cross-Device General] scottgabee:
I need to restore TA Partition ?

I root my D6653 with success as the method of [MENTION=3975929]zxz0O0[/MENTION] and did beckup TA Partition , then upgraded to the rom .77 pre rooted with success .

My doubt is : if my bootloards was never unlocked I need to restore the TA partitions ?
[Sony Cross-Device General] cschmitt:
No, you do not need to restore TA if you have not unlocked the bootloader.
[Sony Cross-Device General] Santos8913:
Upgrade
[Sony Cross-Device General] trevinshu:
Is my device supported?

I have the Sony Xperia Z3 D6603 Build Number 23.0.1.A.5.77 is that supported please help
[Sony Cross-Device General] gregbradley:
Yes, but not that firmware, instructions are in the OP
[Sony Cross-Device General] trevinshu:
Is there away to roll back the software?
[Sony Cross-Device General] gregbradley:
Yes,

look for flashtool from flashtool.net and xperiafirm (Google it, its on xda) to download the necessary firmware
[Sony Cross-Device General] cajunflavoredbob:
Device, yes. Firmware, no. Downgrade and then root. Use one of the many tutorials in this thread or another.
[Sony Cross-Device General] Pixtriks:
Hello,

Firstly thank you very much for the work you did on this tool! It's so handy. :D

Secondly I have some questions:

1. Will this tool work with the Sony Xperia Z3?

2. Will the TA partition remain intact?

3. Will this tool install a custom recovery or will recovery stay intact?

4. Will this tool work with a locked boot loader?

5. Will this tool work with a unlocked boot loader?

6. Does this tool change the state of the boot loader locked/unlocked or will boot loader state stay intact?

7. Will this tool wipe all data of my phone?

8. Where can I get a kernel <october 2014 and with kernel version works best?

9. Where can I find the most recent kernel and reflash it? (To get rid of the old kernel after using this tool)

Thanks already! :)
[Sony Cross-Device General] Santos8913:
Root e backup DRM no XDA
[Sony Cross-Device General] trevinshu:
sorry but i am so new to this and i cant find the tutorial to downgrade my software can you please provide me with a link
[Sony Cross-Device General] cajunflavoredbob:
Sorry mate, but if searching for a tutorial is too difficult for you, then this root tool is way out of your depth.

---------- Post added at 12:59 PM ---------- Previous post was at 12:54 PM ----------

1. Yes worth older firmwares

2. Yes

3. keeps stock recovery

4. Yes

5. Yes, but no point since you could use recovery

6. Doesn't touch the bootloader

7. No

8. Flash an old firmware

9. Flash the newest firmware without the system partition, then flash the new system through recovery with a pre-rooted zip.

Lots of instructions in the forum and this thread.
[Sony Cross-Device General] Santos8913:
Upgrade FW 77

PRF Creator

You are experienced , help me to update the FW ! Just missing me so to complete the process with the locked bootloader ..

I marked all the Include ( Kernel, FOTAKernel , Modem , LTALabel ) I'm used to FW D5833_23.0.1.A.5.77_R11B_Ubranded_Brazil . The PRF gave error and does not advance : Bad state (invalid block type) . What can be ?

:confused:
[Sony Cross-Device General] chaunold:
Any hope on D6166 (T-Mobile Xperia Z3 Locked BL). Tried Giefroot V3 and get "Device not vulnerable" . Tried also in safe mode and no luck. Anyone know how yet or working on a method?
[Sony Cross-Device General] cajunflavoredbob:
This model is not currently able to be rooted.
[Sony Cross-Device General] ThatGuyLookingForAdvice:
how can I roll back the firmware?

Currently using...

Firmware: 23.0.1.A.5.77

Kernel Version: 3.4.0-perf-g1b1963a-02930-g23f7791 Builduser@Buildhost #1 Tue Nov 2511:03:01 2014

Device / Model: Xperia Z3 D6603
[Sony Cross-Device General] gregbradley:
Flash the old firmware with flashtool from flashtool.net
[Sony Cross-Device General] tao88h:
Dev, does this work on Sony Xperia Z3V on Verizon mobile? Thank you!
[Sony Cross-Device General] ludago2000:
Update without losing root

How to upgrade to version 23.0.F.1.74 23.0.1.F.0.96 in xperia z3 D6633 without losing root?
[Sony Cross-Device General] G-FACE:
By flashing a pre-rooted zip via recovery created by PRF Creator.
[Sony Cross-Device General] ludago2000:
As I can do this pre-rooted, some manually?

As I can do this pre-rooted, some manually?
[Sony Cross-Device General] tribemac:
http://xdaforums.com/showthread.php?t=2859904
[Sony Cross-Device General] timmytim:
Hey there, zxz0O0! Are you using the ptmx_fops address for your tool? If so.... and I have mine, how much effort is it to port this to another device?

Many thanks!

Timmytim
[Sony Cross-Device General] zxz0O0:
Yes I'm using this address. It's not a big effort as long both exploits are not patched. Which device do you have?
[Sony Cross-Device General] timmytim:
I have the LG G3. I know 7911 is not patched however Im not sure about 4322. I will look into this more.

**edit**. I lied. I upgraded to Lollipop OTA and 7911 is patches according to Trustable. Crap. Back to the drawing board.
[Sony Cross-Device General] wth_is_life:
Hello, I am unable to download giefroot v3, it gives me the error "HTTP 1.1 410 Gone"

Can anyone provide me a mirror please ?