yashsingh1/xdaforums huggingface dataset:
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
Wanna thank everyone for the work being done can't wait to get root on this awesome phone but if I remember right we were looking for a crash reboot right then

*983*27274# CRASH Reboot

Wouldn't that maybe be the one were looking for? If it does what the list above says?? I know nothing of Java but swear I remember reading that a while back.
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
Problem is I don't know what exactly we are looking for... I've been making allot of assumptions... I'm working under the assumption that [MENTION=2376614]jcase[/MENTION] used one of these to gain root on his own and has been dropping hints to help us along.. So I've been running the ussd codes add trying to pull info on what they start and stop to look for a way in. But so far I have nothing..
[ZTE ZMAX Guides, News, & Discussion] thegrim11:
Every time I run a code i get this...
[ZTE ZMAX Guides, News, & Discussion] skinlab:
I get the same bro. I'm going to try with emode on. Going to try a bunch.
[ZTE ZMAX Guides, News, & Discussion] loonycgb2:
If you get that ussd thing it is because the dialer code can only be run thru native code and does not have a front end.

After you type the # it should run the application if applicable.
[ZTE ZMAX Guides, News, & Discussion] Jwynegar:
How do you correct the com.android.phone has stopped working error on the ZMax? I have wiped the thing like 3 times and it's still coming back after a while
[ZTE ZMAX Guides, News, & Discussion] doubtingthomas:
well upgrade done on Metro

Build 06

Mobile network type : HSPA+

Voice in service / data in service
[ZTE ZMAX Guides, News, & Discussion] jcase:
I never claimed my zMax root came through emode, I actually stated that it didn't somewhere in my presentation (something along the line no known vulns...). I have found multiple vulnerabilities leading to root in emode, I've published them before. I know the potential for a vulnerability leading to root through emode is very high, and its probably the best target for low hanging fruit (easy to find and exploit vulnerabilities) in the device.

Its a good place to look.
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
I see I'm sorry for my misconception... But if your saying this is the best place to start I'm all about learning...Problem is even with all of my reading I can't figure out what I'm looking at or even how to begin to know if something I found is a vulnerability..I know I have to be patient and try to learn trust me I've played guitar for 15 years is just I don't understand allot of this is a new area for me... I mean is there anything I should be reading to get a start??
[ZTE ZMAX Guides, News, & Discussion] loonycgb2:
Have you attempted extracting nv ram and system files via the zte diagnostic interface?

I have been able to read the recovery partition, but still cant find a way of writing to it other then thru that interface.

Also possibly doing a 2nd start recovery before booting to android.
[ZTE ZMAX Guides, News, & Discussion] 13roomshh:
new idea here

OK I new to this and following this thread and honestly I do not k ow much about rooting methods but trying to learn. So I have a few questions.

First what is a native library?

Second what is obfuscation?

Anyway if dialer codes is not the answer..and jcases slides say native library not solution...does that mean it is not a solution for us or zte?
[ZTE ZMAX Guides, News, & Discussion] loonycgb2:
Native library or language?

Either way just how the android system is coded and its system files.

Obfuscation = Encryption - A way of hiding what can be seen in plain readible text

The dialer codes can enable many features which can help with rooting the phone by allowing more access to the system.

As for the dialer codes being the "exploit", its more of how the phone handles certain dialer codes in emode that can be exploited.

Dialer codes can open the system up with enough time to slip a su binary :eek:.
[ZTE ZMAX Guides, News, & Discussion] jcase:
System files can be extracted in normal android without root.

adb pull /system

"nvram" (its not even nvram anymore) is of no interest to me in this case

Native library, is a a library loaded by the app at runtime through the java jni api

Obfuscation is obscuring, or hiding the intent of code. Not necessarily encryption, however in this case they are obscuring it with a simple cipher.

My slides were from a private security confrence with OEMs/carriers, I was telling them native code is not a solution, nor is obfuscation, for vulnerabilities.
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
So your root didn't come from the use of the dialer codes then? I'm confused now???? :eek::eek:
[ZTE ZMAX Guides, News, & Discussion] justlovejoy:
Messed up- renamed the original update to update.zip and the modified one to update.zip now i am too with the update.

Attached is the latest ota update .zip from univision mobile. SO upset I didn't look at the file size. I been fixing errors one by one.

I'm afk for at least an hour. Maybe I'll look into the methods listed for last 12 pages.

It's possible my modded update.zip will leave you bricked, green

and red flashing lights with a black blank screen so...

attached is the original update.zip (un-rooted & un-modified)

intended for someone else to inspect and modify.
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
SoB... Nice. Well what im about to inquire about is old school, like GB old school.. I remember that if you drag and drop the binaries and su apk into the update zip without extracting, it would preserve the signature, is that outdated???
[ZTE ZMAX Guides, News, & Discussion] justlovejoy:
Well it was the method I was trying. Even found a way to manipulate md5. Was running syntax errors trying to sneak a flash in. Now I'm going to go loopiest. Best of luck and skill.:good:
[ZTE ZMAX Guides, News, & Discussion] brandonlee96:
i still have the update.zip that jcase shared a long time ago i saved it to my mega cloud the tmobile one does anybody need it im trying to help even if its not helpful
[ZTE ZMAX Guides, News, & Discussion] skinlab:
Where is the update located on the Zmax. I haven't installed it. Can you get to it without root?

---------- Post added at 11:57 PM ---------- Previous post was at 11:51 PM ----------

Stayboogy rooted the ZTE Merit with the update.zip on 3/2015. Why wouldn't it work on the Zmax?

Here's the link from stayboogy : www.androidforums.com/threads/merit-root-update-zip-root.676258/
[ZTE ZMAX Guides, News, & Discussion] loonycgb2:
Zmax requires specific signature
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
Any way to yank the signature from the update itself... I know it may be a stupid question because if it was that way every phone would have root.
[ZTE ZMAX Guides, News, & Discussion] imattmodz:
Does anyone know what was used to sign the update.zip file that was used to root the Merit?
[ZTE ZMAX Guides, News, & Discussion] brandonlee96:
(deleted)

(deleted)

---------- Post added at 11:14 PM ---------- Previous post was at 11:13 PM ----------

this update.zip installs to my zte zmax from t-mobile
[ZTE ZMAX Guides, News, & Discussion] b3nderthc:
so no root

so is there a root right now?
[ZTE ZMAX Guides, News, & Discussion] Lesharoturbo:
No.
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
He is saying he renamed the original to update.zip, and that he was trying to use a modified one, so he too is on update. So all you did was update your phone
[ZTE ZMAX Guides, News, & Discussion] justlovejoy:
Sorry I didn't clarify that more intricately. That update.zip is for someone else to try hacking it for root. I'll rename it.
[ZTE ZMAX Guides, News, & Discussion] skinlab:
I haven't updated my phone yet. If someone wants to create a root update.zip, I will try it.

Where is the update located on the Zmax?
[ZTE ZMAX Guides, News, & Discussion] brandonlee96:
they used (dsixda's Android kitchen)
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
The ZMAX does boot into recovery the same way as the merit by holding Volume up + the menu button from boot. just tried it on my ZMAX and it booted right into the recovery? If someone has a modded update I have the Metro version on 4.4.4 and will try flashing it.
[ZTE ZMAX Guides, News, & Discussion] tech_yeet:
No it's the power button and the volmue up botton...
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
On my Metro ZMAX I pushed menu + volume up and went into recovery from a powered down state. I'll do it again and try to get my camera charged and take a pic. Gives me the following actions

Reboot system now

Apply update from ADB

Wipe catch/factory reset

Wipe cache partition

Apply update from SD carad

Apply update from cache

Check md5

Normal stock recovery options.

I have those options give me a modified update zip and I will try it I can get another phone I live directly across from a Metro PCS store. LoL I also just asked staybooty on the Merit thread if he could help us out on this.

Normal stock recovery options.
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
ok I got a reply from stayboogy this is what he said

I can give it a shot. get me a stock pull of the boot.img and recovery.img, upload, and post a link. also if there is an official update for the device download it and mirror it to mediafire and post the link.

after that is done we will go from there

anyone have these that can upload them for him? or send them to me and I can upload them to him?
[ZTE ZMAX Guides, News, & Discussion] brandonlee96:
i have one i send them to mediafire then upload them
[ZTE ZMAX Guides, News, & Discussion] fire3element:
So, regarding this method of patching the Update.zip. If the update fails and does not work, it will brick the device?

Thought that it would just fail to update and throw an error?

As stated before, I have a Univision variant.

I have the Update notification that has been there since the 1st boot up of the phone.

Would be willing to test this method out. My device is less than a week old and the back squeaks like a 100yr old rocking chair. Was thinking of swapping it out anyways.

And holy cow that is an old method! Remember following Dsixda's work back in the days of the Omnia on Modaco. That is where I started on modding phones. Memories *sigh*
[ZTE ZMAX Guides, News, & Discussion] brandonlee96:
the univision update.zip download link

http://www.mediafire.com/download/mj7xj1n4rnr15p8/update.zip

the boot.img download link

http://www.mediafire.com/download/86owbyba6skx42t/boot.img.p

the recovery.img download link

http://www.mediafire.com/download/f5fpgg0cqayqszm/recovery.img.p
[ZTE ZMAX Guides, News, & Discussion] fire3element:
Almost forgot a blip.

I found this rather interesting.

The available update in the notification bar is present from the Play Services app.

Is this the case for all updates of this manner?

After I disabled the notifications from Play Services, the Update nagging in the status bar went away. (It was spazzing out, killing WiFi connections for some unknown reason)
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
Nice work brandon
[ZTE ZMAX Guides, News, & Discussion] brandonlee96:
thanks
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
ok thank you brandonlee96 I posted that all over in his thread and gave you credit for them there fingers crossed
[ZTE ZMAX Guides, News, & Discussion] brandonlee96:
ok thank glad i could help in same way can you send me the link you post to his page
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
it's the ZTE Merit thread

http://androidforums.com/threads/merit-root-update-zip-root.676258/page-5
[ZTE ZMAX Guides, News, & Discussion] loonycgb2:
You can use the update zip by going into settings and loading from storage.
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
So who has been watching the samgsung s6 scene, Verizon variant just got took from an apk, pingpong.apk

Soaybe we can get them to add our device to that.

http://xdaforums.com/galaxy-s6/gene...-root-tool-t3103016/post60600131#post60600131
[ZTE ZMAX Guides, News, & Discussion] thegrim11:
I dong think they're going to add support for a non Samsung device. Especially one that isn't very popular like the Z970
[ZTE ZMAX Guides, News, & Discussion] OHNONONO:
Just bought a brand new zmax, the T-Mobile Univision branded one, first time powering it on and the touchscreen does not work AT ALL. Stuck on the the first screen at boot, the "welcome select your language" screen. Really?

Wiping data did not fix it. I can't even power off. All hard buttons work but touch is needed to power it off. How did ZTE shut it down before placing it in the box? The battery is precharged.

Does anyone know anything I can do, thanks.

z97∅ · tapatalk
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
Exchange it would be your best bet.... I wouldn't want the phone if it had a problem like that to start...take it back and have then give you a new one
[ZTE ZMAX Guides, News, & Discussion] OHNONONO:
Yeah I was actually editing my post, I don't have the receipt, it wasn't bought from the store, its actually a friend of mine I was there when he opened the box, I have the same phone, the phone was factory sealed.

So this is a defective unit I'm guessing.

The only option then as I see it, he buy and switch it out .

z97∅ · tapatalk

---------- Post added at 11:28 PM ---------- Previous post was at 11:22 PM ----------

Since the touch don't work and battery cant be removed they can't verify the imei let them know lol

z97∅ · tapatalk
[ZTE ZMAX Guides, News, & Discussion] Meekplague:
Try holding power down for about 15 seconds should shut the phone down
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
How in the... If we had fastboot we could make our own cwm and flash a custom recovery.
[ZTE ZMAX Guides, News, & Discussion] OHNONONO:
This only restarts.

Soft keys don't work either. I wonder how the phone was shut down before shipment. It looks as if their was no final inspection at all from zte. Unless they have them connected to their own software on a computer that that shuts them down, because touch doesn't work.

z97∅ · tapatalk
[ZTE ZMAX Guides, News, & Discussion] Meekplague:
Could try this http://www.droidforums.net/threads/touch-screen-and-touch-sensitive-buttons-not-responding.240136/
[ZTE ZMAX Guides, News, & Discussion] OHNONONO:
That was moisture that caused the persons touch to fail. Rain, water on the screen will do the same. I've tried pressing, too. Thanks for the help and your time!

z97∅ · tapatalk
[ZTE ZMAX Guides, News, & Discussion] stinkbud:
Ugh.

I had to replace my original zmax due to an over bright patch of screen in the lower third center of the device. I saw other people on this thread reporting similar issues. Well, I'm noticing the same thing on my replacement device.

Sigh, at least it is exchangeable under warranty.
[ZTE ZMAX Guides, News, & Discussion] Meekplague:
Oh okay I didn't read all the way through. I'm sorry I can't be of much help, I'm not to tech savvy.
[ZTE ZMAX Guides, News, & Discussion] OHNONONO:
I hope they don't try making tv's

z97∅ · tapatalk
[ZTE ZMAX Guides, News, & Discussion] br0adband:
FYI: To properly shut off the Zmax (and most any Android device) hold the power button till it does actually shut off and immediately let the button go - don't continue holding it or it'll reboot. This has worked for me on most every Android device I've ever come across. There's no specific amount of seconds, just hold it till the screen or more accurately the backlight itself goes out/off and let the button go at that moment and you should end up totally powered off.
[ZTE ZMAX Guides, News, & Discussion] tech_yeet:
But the ZTE z max is water poof (ipx2).. http://wwwen.zte.com.cn/endata/magazine/mobileworld/2014/6/articles/201412/t20141226_430240.html
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
Its not waterproof its splash resistant, don't think you can go underwater and be OK, but it should still work fine if a little water is on your hands while you use it
[ZTE ZMAX Guides, News, & Discussion] willard18:
Guys!!! My friend built the app and was able to get it to write to the system!! The weird thing was that it didn't stay it didn't have root permissions after I rebooted

the phone though..
[ZTE ZMAX Guides, News, & Discussion] thegrim11:
Can we see the app?

¯\_(ツ)_/¯
[ZTE ZMAX Guides, News, & Discussion] rkey1000:
May we see the app. A temporary root may lead to perm.
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
so you had temp root? can you upload the app so we can play with it see if we can figure out how to make it stick?
[ZTE ZMAX Guides, News, & Discussion] tech_yeet:
Um use apk extractor on it, then upload that thing to Google drive then post the link here???
[ZTE ZMAX Guides, News, & Discussion] willard18:
Not to be rude guys but im not gonna share it just yet I thought id just tell you its possible... Sorry.
[ZTE ZMAX Guides, News, & Discussion] imattmodz:
I call BS...
[ZTE ZMAX Guides, News, & Discussion] stinkbud:
PLEASE!!! I don't want to see this descend to where we were when jcase gave up on us. The guy wants to wait. So for all intents and purposes that's it. No insults, leave it alone.

This thread has been the only outlet we have on XDA to discuss attaining root. Let's not screw it up again with trolling and insulting each other.
[ZTE ZMAX Guides, News, & Discussion] tech_yeet:
Yes!
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
I found another interesting pdf from Jcase I have been reading through a little at a time (I have epilepsy so can't stare at the PC screen for long periods of time sorry I know it don't make me much help) but it's really interesting so I'd thought I would share it hope you don't mind Jcase but it's been a awesome read.

http://theroot.ninja/PAE.pdf
[ZTE ZMAX Guides, News, & Discussion] imattmodz:
I have a temp root too. It's uses a flaw in ftp and apt-get. It also requires another Android device using an otg cable. I'm sharing this information because that's the point of a developers forum. If I don't see the app, then I call BS. Furthermore if this so called app didn't have elevated privilege to begin with then it is highly unlikely to be able to right su to xbin, which is a read only system folder.
[ZTE ZMAX Guides, News, & Discussion] fire3element:
Everything is awesome

Everything is cool when you're part of a TEAM

Key word there was "Team"

Besides the point you tried to make, why does your post #1497 say posted on 12/31/1969 ???
[ZTE ZMAX Guides, News, & Discussion] shanev420:
Just want to thank everyone who has been working on this! And also want to say to everyone else who do nothing but complain stop hating or start doing it yourself things get done easier faster and better when you don't have douche bags interrupting your wonderful progress! Hopefully we see root soon i can't wait to have full access and see what this phablet can really do
[ZTE ZMAX Guides, News, & Discussion] imattmodz:
^^^ This is the last piece of information I share on this topic so enjoy. Screw this phone. Figure it out yourselves.
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
imattmodz can you get me the dumps I asked for a few post back staybooty said the other ones weren't the right ones. He needs the boot.img , recovery.img and the update.zip from the ZMAX.
[ZTE ZMAX Guides, News, & Discussion] shanev420:
If you share it others can see what you have done and maybe somebody else will see something that you missed or something that can make it permanent
[ZTE ZMAX Guides, News, & Discussion] dmmckitrick:
Yes Temp root is possible. I agree with others on not releasing until more is done.
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
If you look at that pdf I just linked to it talks about the lowest fruits on page 36 another refreence made by Jcase. Just wanna throw that out there.
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
Okay lets get some fish biting here...

Okay, what I'm about to share with you came from the inside. Don't ask where it came from (specifically), don't ask how I got it, just know that it exists and you all can use it as a base for your endeavors. This is the ZTE Root apk, and I literally mean ZTE [PHONE ROOTING] apk. temp push this to the system and run it. When I try to run it from /data, I don't have the permissions to make it happen. It might not bite, but it could serve as a base for further tweaking if you decompile, which I have. There's VERY little code in this app, and how it obtains root is a mystery and I couldn't determine that by a simple look at the code (if it does at all), but this comes from ZTE themselves and isn't some thrown together app from a user (you can google it, it doesn't exist on the internet).

Happy trails everyone ;)
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
Damn product version mismatch needs 4.4.4
[ZTE ZMAX Guides, News, & Discussion] loonycgb2:
This is run by product version so doubt it is zmax.
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
That was the easiest thing to fix. Unfortunately, when i tried to change the product version, i couldnt sign the apk, so it was giving me signature errors. Like i said, decompile the apk and see for yourself. This [file] comes from a ZMAX directly.
[ZTE ZMAX Guides, News, & Discussion] nobreak1970:
Same error on the Zinger and it's 4.4.4
[ZTE ZMAX Guides, News, & Discussion] biledigger:
I installed it and hit the unroot phone option. IT WAS A SUCCESS!!!..... Now where was I again?
[ZTE ZMAX Guides, News, & Discussion] tech_yeet:
Yeah but when you try the root option it dose not work...

Z999LP-A-LTE
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
Like i said, you have yo change the product version in the code then sign the apk.. Let me see if i can find my tweaked version for proof.
[ZTE ZMAX Guides, News, & Discussion] tech_yeet:
You have some very good connections yes? ??

Z999LP-A-LTE
[ZTE ZMAX Guides, News, & Discussion] nobreak1970:
Wish I could getting the apk on my Huawei for editing. ? Laptop dead.

If the zmax get rooted our little Zinger is right behind it

---------- Post added at 12:16 PM ---------- Previous post was at 12:10 PM ----------

Apk runs in the server process including emode fuse location Qualcomm ATFWD I'm babbling now I'm so excited sorry.
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
Lol I got excited when that happened to me, if only the opposite reacted the same way :D:D:D

Let's just say I'm fortunate to have people with eagle eyes and big ambitions lol. I wouldn't be able to provide you with that if it wasn't for a really awesome user who's name shall remain unspoken for legal purposes lol

Hear's to root for everyone! :D:D:D
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
In response to your second post... see my expertise stops at decompiling and some basic java tweaking lol, so I see "Apk runs in the server process including ROOT ROOT ROOT ROOT ROOT. I'm babbling now I'm so excited sorry." lmao

---------- Post added at 12:24 PM ---------- Previous post was at 12:19 PM ----------

This is what I was trying to say even though I didn't say it like that. That line can be found in the build prop. The device code is "P892T57V1.0.B22" I believe.
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
yea I know, I was just typing it up not trying to do any of the work lol

see here it is checking phone build versoin

if build version matches, we should get the apk to root our device or we could take the check out, and just have it run the root
[ZTE ZMAX Guides, News, & Discussion] nobreak1970:
Just take out the java check part...maybe?

Edit: got beat to this idea. Damn lag lol

---------- Post added at 12:41 PM ---------- Previous post was at 12:39 PM ----------

Unless the goto line with the if command is called by something and call something else
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
Thats what that line i posted was