yashsingh1/xdaforums huggingface dataset:
[ZTE ZMAX Guides, News, & Discussion] AknUlla:
Duly noted good sir. Its just hard to make sense of all the info I'm getting to create an output. My understanding is that you need a whole page of code to create something recognisable without errors. So my question would be as I am reading about different lines can I input that into my IDE and get an output. Its just hard to figure out what to do first. Urrgggg. :banghead::banghead:

Sorry if I talk your head off.
[ZTE ZMAX Guides, News, & Discussion] kardeef:
Couldn't figure how to get a link with Google drive. Here is a MEGA Drive link for the Exploit. There is some code at the bottom I believe its how to add it in your code I named the file Exploit.java https://mega.co.nz/#!eEwXiYCZ!4zLGPvDpFakQSXae7sYfKjSm0jR7M1NBAUrFLhkATXA
[ZTE ZMAX Guides, News, & Discussion] kardeef:
Been doing the tutorials in Eclipse. Put the Exploit quickly in the file,also DL'ed the Arm binarys and going to practice making some simple apps. Ohh forgot to add the best way to learn the language you choose is to do the tutorials and exercises . The more you practice the easier the syntax will be.
[ZTE ZMAX Guides, News, & Discussion] AknUlla:
Hope this is on topic but I've searched all over. What exactly are the conditions that need to be met in order to gain root access. And if its as simple as moving the su binary then why is our phone any different? Thanks to y'all I have loads of new info swimming around in my brain and with more info brings about a 5:1 ratio of questions to info strands. So lost.
[ZTE ZMAX Guides, News, & Discussion] thereal_antiHackmasta:
Because the exploit needs to be run first in order for the /system directory be written. Then the file needs to be put there if not we would have just pushed the file through adb. I know thats a simple explanation but that's the gist of it.

---------- Post added at 03:15 PM ---------- Previous post was at 03:12 PM ----------

To further clarify, the partition on our phones seem to be fused. Not sure what that means exactly but no matter what mode or method we try to write to the system partition we get access denied. We need to find a way to get elevated privileges which if I understand it correctly is what the said exploit does. It just needs to be written in to a script or and apk.
[ZTE ZMAX Guides, News, & Discussion] kardeef:
Reading previous post will give where to read it, DL it and try it. Again previous post will explain why we simply can't copy the su over.if you read prev post will notice just in this thread those questions have been answered once it not many...many..many times. I am just about to ask for the email address of the people who are helping. This is like the umph teen time I received a notification stopes working on root to answer posts that have been answered. Then figure where I stoped and get back into the train of though.. Sry just frustrated with post that don't contribute to root.. Turning XDA for a day or two and taking a break. Frustrated ... Be back in a few days when my patients back for useless posts. :(
[ZTE ZMAX Guides, News, & Discussion] AknUlla:
Hey guys go to the zte site and sign the petition to unlock the boot loader. They have everything to gain by unlocking in an update. If I read correctly this is the goodie bag. If you haven't yet please sign here: https://www.change.org/p/zte-usa-and-zte-china-bootloader-unlock-for-zte-zmax-phone
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
We (as in members of the ZMAX community) started that lol. That's from the old thread though, already signed it.
[ZTE ZMAX Guides, News, & Discussion] tech_yeet:
https://docs.google.com/file/d/0B-gILDzs5fkbdjJCNmtILXRnc2s/edit?usp=docslist_api did you know that the ZTE Z max actually IS 4G A-LTE compatible?
[ZTE ZMAX Guides, News, & Discussion] lkchrono:
Yes. And we know that T-Mobile plans on unlocking it with a future update. Supposedly. Not holding my breath for that one...
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
It seems allot of people misunderstood my posting of the exploit.... The poc apk

Will not give you root nor is it as simple as making it copy files.... Poc stands for proof of concept... That means that the script he wrote proves the exploit is there and that it legitimately exist... We know both variants of the phone are vulnerable to that exploit.. Now what needs to happen is someone fluent in java needs to script the exploit in a way that it itself gains root access and copies the binary to the /system folder...I myself an NOT a Dev nor am I fluent in any of the required languages needed to become one as I've said before I work 12 hour days and have my first child on the way so as much as id love to learn and do this I can't.... I am just someone who has plenty of experience running the Linux operating system and who knows how to use Google... There are a few exploits that use similar method to this one..... I've brought it up before I believe the android NDK allows for scripting in c but am not sure...

TL;DR

WE NEED SOMEONE THAT IS EXTREMELY EXPERIENCED IN JAVA AND ANDROID DEVELOPMENT TO PUT THIS IN APK FORM..
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
Right.. So for the person who desires to make this an apk you will need the following the proof of concept cve exploit, the one that was linked a few post back, su binary and SuperSU.apk, it would then run the exploit causing the android to believe that it was giving said apk riot privileges because it is using the exploit found that grants certain apk root privileges when run, once the apk gets root privileges the apk needs to mount system as read write and push both su binary to system/xbin with 775 privileges I believe and SuperSU to system/app or system/priv-app, not sure which spot but probably priv-app, after that is complete we should have a permanent root. To awnser your question about the fuse mount( a question we have awnsered a few times) is that the fuse is like mounting an image on a loop, so system partition gets mounted as system, but also gets mounted as system/fuse so it adds an extra layer of protection, because the sole job of a fuse partition is to keep the privileges the same although I did mount in terminal and don't see a dev/fuse system

Mounted only dev/fuse sdcard

And emulated so we might not have to worry about the fuse any longer, maybe its just my machine because icthiughtvi used to see dev/fuse system

But basically its just a second mount point to add security to keep a partition mounted as intended. I.e system as read only
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
Yes and no...... He explains in his full post what needs to be done to execute code as root but it's too vague to understand without a background in java. . so in short no the poc apk isn't enough the apk needs to be redone to do what we need it to
[ZTE ZMAX Guides, News, & Discussion] kraklin:
theory

What about writing it as a virus? The permissions are already there from what I read. All you need is an apk to write the Su " virus"

Just a thought.
[ZTE ZMAX Guides, News, & Discussion] lkchrono:
We call it an exploit because it's not harmful to the system if done right. A virus is an exploit meant to do harm. They are the same thing written in the same methods with different goals.
[ZTE ZMAX Guides, News, & Discussion] loonycgb2:
I have seen all the codes and scripts that have been being used. I do have a zmax also and have personally been doing work on it.

What i want to know is since it has been tried with that POC, has anyone bothered taking logcat logs to actually see if the exploit is working instead of hoping it did because your phone have restarted?

The buffer overflow that it causes it suppose to trigger a kernel panic and restart the phone which shows the malicious code has exploited the target service, but without knowing if it actually issued a kernel panic due to the target service being attacked then it could just be a normal system fail reboot.

I have tried just about every possible idea other then manipulating the update file and exploiting the update system this phone uses. Even if you exploit the system to allow the su binary to be copied before the reboot happens, how will you chmod it to actually be run?

The phone its self has a partial busybox already on the phone.

It is also partially rooted to the point that the system has a flash image binary in the xbin folder allowing the system to accept a update file and overwrite any partition.

In FTM it allow root commands, but the actual root account is not root it has another root account which can be found by doing a ls -l command to find the group and user on the flash image binary.
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
Because without the panic a restart wouldn't trigger... If this was patched you wouldn't get as far as a reboot... Into of that the exploit was disclosed after the physical build date of the phone and wasntt patched out of aosp till 5.1....

As far as chmoding the su.bin how does framaroot chmod the su?? How do any of the one stop shop apps do it??.. All im doing is pointing to exploits that work against our flavor of android... The cves I listed before WILL work against the T-Mobile variant I know they will because you can't patch what you didn't know about.... I know they didn't know about them because I've physically pulled the build. Prop and looked at the build date..
[ZTE ZMAX Guides, News, & Discussion] JAWheat411:
I am following this thread closely. I don't have this phone, but I think that this exploit will work with my phone, the ZTE warp sync. It has the same issue of not being able to get into boot loader and no other root methods working.
[ZTE ZMAX Guides, News, & Discussion] imattmodz:
CVE and SuperSU >> https://drive.google.com/file/d/0B5UxE7BN6I12cENfWEZHamZ6Nlk/view?usp=sharing

---------- Post added at 06:01 PM ---------- Previous post was at 05:58 PM ----------

Sorry the last link was to the CVE and SuperSU

The LOGCAT link is here >> https://drive.google.com/file/d/0B5UxE7BN6I12WWtwb04tNXpoRmM/view?usp=sharing
[ZTE ZMAX Guides, News, & Discussion] AknUlla:
So I went into terminal and used the ls -l

Command and the word root is all over what the heck is this? Is it normal?
[ZTE ZMAX Guides, News, & Discussion] imattmodz:
I think it is just a list of system files and there given permissions.
[ZTE ZMAX Guides, News, & Discussion] jcase:
normal

Permission owner group size date filename

-rwxr-x--- root root 397032 1970-01-01 00:00 init
[ZTE ZMAX Guides, News, & Discussion] JAWheat411:
Hey, jcase. Not saying your back, but glad to see you again.
[ZTE ZMAX Guides, News, & Discussion] KingApex:
jcase

Haven't seen him post in a while but what he said good to see you again back posting
[ZTE ZMAX Guides, News, & Discussion] tech_yeet:
I Have A Big Announcement To Make I Found The Little Ba*ta*d that was couse in the phone to heat up for real now las time I through it has the demo app but no it was the "GBA service app"

https://plus.google.com/105855773732882713268/posts/GphwMizDBGY

So everybody go head and disable that bullcrap I noticed an increase in battery life too.

So no more CPU at 190°F crap.
[ZTE ZMAX Guides, News, & Discussion] AknUlla:
So what does that app do and the only way I see it heating up is from charging it and playing games
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
Dude, its a cheap phone made of plastic with a big battery and a cheap processor. Your issue is by no means a quick fix. You are running major titles on a budget phone. An app with NO footprint and less the 100kb in size can't be the cause of your problems, its something more.

Last time I checked, we had the same phone with all the same BS apps from ZTE and in a worse case scenario, my phone gets a bit warm when I start playing a game, and that's like sliiiightly warm, no more extreme than any other phone on the market.

From the dev level, there are governors and I/O Schedulers that will solve your problem immediately, but that requires a custom kernel, which requires root. Like most OEMs, ZTE has it set to 3 Govs: Powersave, balance and performance. Once you incorporate something like badassv2 or interactive govs with an I/O like noop (I think that's the name), your prayers will be answered.

Please know I'm not attacking, I just don't want you to think these quick fixes are going to give you what you intend to find, they will just tie you over until the next 50kb app makes you think its the issue, and you dont wanna screw around and delete something vital, because we don't have OTA backups, root, anything.

EDIT: And if your battery is hot like that, then your battery life would reflect that. I'm getting a day or two easy, based on the way you talk, you have to be getting underperforming battery, which could also be the result of a bad phone model.
[ZTE ZMAX Guides, News, & Discussion] thegrim11:
Hey guys, if you use Nova, I suggest getting Voxel icon packs. Sleek and very nice to look at.
[ZTE ZMAX Guides, News, & Discussion] tech_yeet:
Its not the battery the battery is fine I have had two phones in the pass with this some chip set so I know the performance of the SD 400 and I played heavy games on them while they were on the charger and then never got that hot.... just now I played Vice City it did not get hot or slow down.
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
So it has to be something specific to your phone. Mine is loaded with apps and media and I'm not getting the problems you are getting.

And if you are going to throw the blame on an app, get us some data to back it up. You are just chopping away at apps without so much as a logcat. Like I said, you don't wanna have a $200 bootlooping brick on your hands
[ZTE ZMAX Guides, News, & Discussion] tech_yeet:
And I extracted two one and half gigabyte files while on the charger no heat...
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
Well I've thrown out my educated guesses on the subject. Like I said, don't just chop away at stuff. Even if it does nothing more than collect crash data, its a reason its there, and you can't just go lumberjacking through your app list trying to solve a common problem that might not be much of a problem at all.

P.S. - unzipping files is not processor intensive enough to cause heating issues
[ZTE ZMAX Guides, News, & Discussion] tech_yeet:
Yes the hell is I'm telling you man try using your phone while doing it plus think about you are extracting from a huge 1.7GB file converting all that data to what different form and then copying.
[ZTE ZMAX Guides, News, & Discussion] Meekplague:
I've run stress tests on my phone, highest I have ever reached was 147. Are you sure that maybe you don't have a defective battery or something. BTW I have GBA running I've never disabled it or any other pre-installed apps.
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
Sorry didn't mean to skip over your question. The TL;DR response is that it's not as simple as "moving" it. It was back in the Android 2.3 GB days but that has long since been thrown away on non-Nexus/GPE devices (which are the easiest by far to root, as google hasn't locked them down). In order to gain root... how do I say this... you need to have r/w (read/write, meaning I can both see and edit the contents of the partition) access to the system, which is the point of the su binary. Sounds like a circular argument, which is where exploits come into play. On an otherwise locked down system, an exploit (as someone previously stated) is essentially the chink in the armor that grants you abilities the system otherwise would't allow you to have.

Exploits are, however, a double edged sword. They are good for people like us who want root and more control over the system, and are bad for people hackers and thieves who use the exploit to get into OUR systems and do malicious things, which is why OEMs "patch" non-rooted phones with updates and why root users often have root level security apps and mods to circumvent the downside of having an exploited system.

So, with the help of an exploit, yes we can "move" the SU binary, but then there's the matter of unlocking the boot loader so that the system doesn't remove the binary, get what I'm saying? It would be impossible for me to really help you gain a grasp of the various concepts associated with root and its pros and cons, but I hope this gives you an idea of how it works.

---------- Post added at 09:18 PM ---------- Previous post was at 09:16 PM ----------

Watched Youtube and texted while I had Zarchiver unzipping a 3.7 GB zip of PDFs in the background last week, it really doesn't.
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
On from my random posts, and interesting find!!

Hey everyone, found some software called NandDL. I think it was designed to flash firefox to the ZTE Open while in DFU (Diagnostic Interface) mode, the one that uses volume up + volume down and power and responds with the read light staying on. It reminds me of Kies for Samsung, but we don't have any system images. It recognized my phone, so I think that's a good thing. Anybody got any way to get some system images? lol. I don't know if it's designed with the partitions of the ZTE Open in mind or not, that would be my only reservation.

Alternatively, I saw someone say that they managed to get it to recognize fastboot on the phone (which means by some chance in hell, they got to a bootloader). Did you trying running "fastboot oem unlock" while you had access to fastboot?

If I misread their post, please tell me, just wondering here. Attached is the zip with the program.

EDIT: Website I found this on: https://sites.google.com/site/zteopenfirmware/download-mode
[ZTE ZMAX Guides, News, & Discussion] JAWheat411:
Yeah I mentioned this app in the ZTE warp sync forum on Androidforums.com. We could possibly flash an edited boot.img with it on our phone (which should help our rooting issue) . But we do not have any backup image in case we screw up. If we had an ota/update zip we could pull it out. And of course without fastboot on our phone as well, we can't backup ours. I would like to know how that guy got his phone into bootloader also. I have to see it to believe it.
[ZTE ZMAX Guides, News, & Discussion] skinlab:
I read that SketchScars achieved root and is creating an apk?

I haven't even seen him here or on Twitch.
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
If he has its news to me.. Last time him and I talked he was trying a sperate exploit from the one I posted here...
[ZTE ZMAX Guides, News, & Discussion] Moon83:
Where did you read that at?
[ZTE ZMAX Guides, News, & Discussion] skinlab:
https://plus.google.com/app/basic/s...=/app/basic/communities/106249882026636369150
[ZTE ZMAX Guides, News, & Discussion] imattmodz:
Here is the Open C firmware flashtool also. The phone is recognized, and once it's installed you can also configure the XML file like you do in Odin to allow different configurations. We still would need a modified image of our firmware to flash though.

If the phone isn't recognized then make sure all the drivers are installed by dialing *983*87274# and click each box one by one until windows installs all drivers.

Open C Upgrade tool>> https://drive.google.com/file/d/0B5UxE7BN6I12YzNvYUFIUTJhZUk/view?usp=sharing

DISCLAIMER: Don't actually try to flash with this tool, because we DO NOT have any backup images to fall back on if you screw up your phone!
[ZTE ZMAX Guides, News, & Discussion] web3221:
z970 rooting

first of all I know nothing about rooting, just what I have read on xda and other forums, and understand little of it, if it can ever be done I will have pay someone to do it as I have done in the past with other phones, afraid of bricking my phone, by my ignorance.

I just got off the phone with William of zte usa technical support, he said the phone can be rooted, but would not give me any details, as they do not support rooting, etc... (I do not believe him), he also said if I wanted more info or help to contact tmobile, I have tried and got no where with my local tmobile store.

I found this on the web, I am really skeptical, cause the video link is just advertising

http://www.lollipop-rom.club/2014/12/ZTE-4058-ZMax-Z970.html

in all of my research, all of it has been a bunch of bull caca, this is probably as well :mad:

maybe some day, we will all reach our goals of rooting this phone, maybe we will be able to get lollipop as well

for now I doubt it

just sharing hope it helps

could this be real for getting lollipop???? on z970

http://www.lollipop-rom.club/2014/12/ZTE-4058-ZMax-Z970.html

just found this below, sounds interesting, but I think I am going to stand in the background and not post, because I am not knowledgeable enough to really help out, but I have at least tried, looking forward to reading the experts opinions around here though, I will keep praying for a solution though, take care

web3221

http://gadgets.ndtv.com/mobiles/new...hone-without-google-services-this-year-674441

gotta get back to running my company now, take care all
[ZTE ZMAX Guides, News, & Discussion] ghet2rockuu:
no its not real if you read from the beg. of this thread those lollipop sites are fake !
[ZTE ZMAX Guides, News, & Discussion] web3221:
"no its not real if you read from the beg. of this thread those lollipop sites are fake ! "

yes, and thanks, I have done so much reading, and it does get old, but I am still trying to find something that works, maybe someday we all will get the ability to root?????? that will be a great accomplishment :cool:
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
As far as this goes I'm not sure.... I don't know why sketch would not have posted here.... In any case I still think we should continue trying to get the exploit coded... I don't want to twiddle my thumbs until sketch tells us himself...
[ZTE ZMAX Guides, News, & Discussion] 13roomshh:
This post on google plus is from march 30
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
Yeah which is around the last time I talked to him.... Not to mention creating the app and debugging it would take a good amount of time... So I think it would take a little longer than two weeks for someone who doesn't code in java everyday..... But like I said we should keep working here.... Part of the reason jcase stopped working on this phone was because he heard it was going to be unlocked..... I don't want to have to start at square one because of a post that wasn't even made to this thread....

---------- Post added at 06:49 PM ---------- Previous post was at 06:37 PM ----------

We should be praying to get into a decent devs good graces because we aren't going to be able to do this ourselves in a short period of time.... Look at it this way your looking at a minimum of 3 months to be proficient in java then you need to learn the android api.... Then you need to learn a decent bit on Linux and exploits on top of that... That right there should be enough put the amount of work going into a working exploit into perspective.... This is why I didn't understand the disrespect from certain people toward jcase charging for root apps... You have to figure there is well over a year in work and that's just to get you an understanding of what's going into it.... Not to mention hours sitting at keyboard coding debugging and re-coding to get a method pliable enough to work across a number of devices all of this after working and running around for your family.... My point is this isn't something we can half ass or just expect to happen we need someone who knows what they are doing....
[ZTE ZMAX Guides, News, & Discussion] DarthJaylen9189:
So if we work out the T-Mobile version then get it to update possibly to 4.4.4 KitKat to work out metro if we can get someone to do it?

Sent from my Z970
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
You would also need a vfat formatted sdcard not the extfat or what ever the newer version is called, I believe mine is formatted to the extvfat not vfat.
[ZTE ZMAX Guides, News, & Discussion] DarthJaylen9189:
Oh. OK. So we develop the the .bat or apk for the patch then have a vfat formatted SD card?

Sent from my Z970
[ZTE ZMAX Guides, News, & Discussion] StonerSteve420:
Are you guys saying you found a way to root?