yashsingh1/xdaforums huggingface dataset:
[ZTE ZMAX Guides, News, & Discussion] dmmckitrick:
PERM ROOT METRO PCS 4.4.4 (with OTA update)

This Guide works for

Metro PCS ZTE Zmax

Android: 4.4.4

BUILD Number: Z970_MetroPCSV1.0.0B06

Baseband Version: P892T57B01

Kernel Version: 3.4.0-g30db9cf-00505-g8310dbd zte-kernel@Zdroid-SMT
[ZTE ZMAX Guides, News, & Discussion] tgib1990:
I have a feeling the problem is here:

Your setprop command should be:

That's how I've got full root on mine at least. I'm a total noob with this right now though, so for all I know it might not matter.
[ZTE ZMAX Guides, News, & Discussion] hroark13:
damn I had root and it rebooted before I could do anything, and now I cant get it rooted again
[ZTE ZMAX Guides, News, & Discussion] Meekplague:
It seems to make a big difference if you plug your phone into your PC then run the app. I couldn't do it with the app alone after about 30 trys I decided to plug it into my laptop and it instantly worked I restarted my phone to lose root then did it again worked two times in a row
[ZTE ZMAX Guides, News, & Discussion] fire3element:
I am in the same situation. I did not switch the recovery back before rebooting and now I can't access stock recovery to wipe cache or factory reset.

Try a cache wipe and then follow what I did again. See if that is the missing step.
[ZTE ZMAX Guides, News, & Discussion] hroark13:
i have, also tried doing complete factory reset and doing it all over again
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
You are correct sir that is his issue
[ZTE ZMAX Guides, News, & Discussion] ghet2rockuu:
ok that worked im lost at this step

Type exit into the terminal and it should drop you back to your normal cmd...unzip the su zip anywhere you want in your cmd switch to that directory...

how do u switch to that direct..

do u type" dir " and search for where u extracted? im lost here cuz i find it on cmd but where i go from there

---------- Post added at 01:08 AM ---------- Previous post was at 01:05 AM ----------

on another note i got to change boot animation
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
Say you get the first half with the backdoor/recovery done but are having issues pushing through adb think it will hurt to factory reset the phone and start from the beginning or will it brick???
[ZTE ZMAX Guides, News, & Discussion] ghet2rockuu:
it shouldnt
[ZTE ZMAX Guides, News, & Discussion] fire3element:
I think I am beginning to see the pieces. From what jcase thinks, KingUser is using a ping exploit.correct? And it depends where the downloaded exploit files fall in the memory right?

Now, many of us are running this exploit time and time again. And in that one random moment, BAM! ROOT.

I lost root after I had it. Was having issues pushing the su to xbin because KingUser was in place as su already.

I have been trying to re-root for around 6hrs now without luck. I continuously watched the screen to see if I could see any patterns.

King user pretty much always reboots between 17-21% every time. After the reboot, it always fails somewhere between 65-71%. This is happening time and time again.

So I had a theory. What if this exploit is working as a buffer overflow in sorts? The root finally happens when the memory is close to full.

With that in mind, I cleared KingRoot's cache and data, then immediately rebooted. After the reboot, I ran the app, then started a graphic intensive game and a cpu intensive game console emulator.

The root failed the first time. Immediately after I went to the KingRoot app in settings and Force Stop. Then I ran the app again. It rooted this time, no reboot.

I also noticed when it is trying to root, but never does, it seems to take forever. When it decides to root finally, the % counter seems to go fast.

I have no idea if this is all just a coincidence, but I found it rather interesting.

Here is hoping to progress and helping people out.
[ZTE ZMAX Guides, News, & Discussion] hroark13:
mind telling me the two games you ran, would like to try to duplicate what you did
[ZTE ZMAX Guides, News, & Discussion] fire3element:
I ran CounterSpy and FinalFantasay Type-0 in the PPSSPP v1.0.1-411 emulator. I would not advise downloading Type-0 just to test it. That game is nearly 3gigs LoL

You could also try the Dolphin emulator Alpha in the Play Store. That emu is still in early stages and is pretty demanding on the processor.
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
In windows type cd to change directories
[ZTE ZMAX Guides, News, & Discussion] fire3element:
[MENTION=222483]eXtreme[/MENTION]asure

I have root again and sent you another PM. Ready to move forward again, but have the same problem as last time. Wondering your thoughts
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
Okay I really appreciate everyone that has tried to give me a method to root, but I an having virtually no luck at all! Has anybody had success with a T-Mobile ZMAX on Android 4.4.2 before the most recent update, build 22?
[ZTE ZMAX Guides, News, & Discussion] mussio:
We don't need root to tether all you need is make a duplicate apn, select it and in the status bar drop down menu select mobile hotspot and it will activate without verification from the network... if you want to usb tether connect your usb obviously and turn on airplane mode and select usb tether ... it will bypass verification ... now turn airplane mode off... if you don't make a duplicate apn you will be directed to spell page.
[ZTE ZMAX Guides, News, & Discussion] ghet2rockuu:
so it would be

C:\Users\enrique>cd C:\Users\enrique\Downloads\UPDATE-SuperSU-v1.94

output

C:\Users\enrique\Downloads\UPDATE-SuperSU-v1.94

i then put adb push arm/su /data/local/tmp/su ?

ok i tried this dont know if its how u input it

C:\Users\enrique>cd C:\Users\enrique\Downloads\UPDATE-SuperSU-v1.

C:\Users\enrique\Downloads\UPDATE-SuperSU-v1.94>adb push arm/su /

su

1283 KB/s (113036 bytes in 0.086s)

C:\Users\enrique\Downloads\UPDATE-SuperSU-v1.94>adb push common/i

.sh /data/local/tmp

307 KB/s (629 bytes in 0.002s)

C:\Users\enrique\Downloads\UPDATE-SuperSU-v1.94>adb shell

root@draconis:/ # su

su

root@draconis:/ # id

id

uid=0(root) gid=0(root) context=u:r:init:s0

root@draconis:/ # mount -o remount,rw /system

mount -o remount,rw /system

root@draconis:/ # cat /data/local/tmp/su > /system/xbin/su

cat /data/local/tmp/su > /system/xbin/su

k_shell/0:26029: can't create /system/xbin/su: Permission denied

1|root@draconis:/ #
[ZTE ZMAX Guides, News, & Discussion] tech_yeet:
So I just type id in once I get root?

Z999LP-A-LTE
[ZTE ZMAX Guides, News, & Discussion] ghet2rockuu:
no u type

1) adb shell

2) su

3) id

out put should be

uid=0(root) gid=0(root) context=u:r:init:s0

root@draconis:/ #
[ZTE ZMAX Guides, News, & Discussion] tech_yeet:
That's it it will stick even when I reboot (sorry asking this but it could me so damn long to get root again I do not want to waste it!)

Z999LP-A-LTE
[ZTE ZMAX Guides, News, & Discussion] ghet2rockuu:
if u follow the steps yea

http://xdaforums.com/showpost.php?p=60692537&postcount=1902
[ZTE ZMAX Guides, News, & Discussion] Cyconumnum:
Is it possible to batch this and have it like motochopper...all in a folder?

Or just write a batch to stick in the motochopper folder to execute when root is achieved?

Or....had anyone tried motochopper to push su after root?
[ZTE ZMAX Guides, News, & Discussion] tech_yeet:
I was thing something like that as well...

Z999LP-A-LTE
[ZTE ZMAX Guides, News, & Discussion] steventechno:
yeah

I got it to work once, after many fail attempts one time it just happened really fast and root checker said rooted. Lost it shortly after, and also I wasn't able to use adaway sadly.
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
It freaking worked!!!!!!!!!

EDIT: Page 205, I'm sorry

okay so everyone stop what you are going and go check fire3element's post on page 204 about the ping exploit. He was spot on! I have been fighting with this all day. Couple of tries and it worked! For those of you that don't have an emulator and a big time processor heavy game, fill your phone with smaller, intensive things. For example, I installed (BTW BEFORE YOU DO THIS FORCE STOP TASK MANAGER):

1. Next Launcher Lite

2. Apex Launcher

3. Nova Launcher

4. Cheetah Launcher

5. CM Launcher

6. Mi Launcher

7. 25 tabs on Google Chrome (No joke)

8. Both Temple Runs

9. Fruit Ninja

10. Google Play Store

11. Google Now

12. Google Play

13. Amazon

14. Google Play Music

Now mine was extreme but I wanted to garuantee that the system would be memory hogged. Within seconds KingRoot Worked. Now it will take a couple of tries and KR might restart the phone (fill up the memory BEFORE starting King Root). Run it and it should go. Always make sure that before each run of KR, you force close, do not wipe data (at least that's how it worked for me).

Happy Rooting :)
[ZTE ZMAX Guides, News, & Discussion] Daveyoung300:
Do you know how to get free mobile hotspot on zte zmax i don't have root
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
Everyone having permission failed to write su, there is already a su in system/xbinsu, from kingroot.

If you can't remount system then you might have forgotten to copy boot.IMG over recovery.IMG.

restart tutorial provided by jcase, if your still having issues maybe you should wait for cwm

Sent from my Z970

root@draconis:/ # id

uid=0(root) gid=0(root) context=u:r:init:s0
[ZTE ZMAX Guides, News, & Discussion] xIP-:
Has anyone installed xposed yet?

Ive never used xposed but hear alot about it and wanna try it. but the whole potential to brick my device scares me becuse of compatibility issues and what not.
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
It's a user app. Worse case scenario is a factory reset which wipes all user data, though i have never experienced this with Xposed on a slew of phones.

---------- Post added at 11:46 PM ---------- Previous post was at 11:45 PM ----------

I have a system.img backup if anybody is interested in it. I know we had the boot and recovery images, figured someone would want a grab at the system.img, too.
[ZTE ZMAX Guides, News, & Discussion] fire3element:
This is good news. I knew there was hair growing on my brain for a reason :p

Lets see if we can reproduce these results. It may just give us better success in rooting with KingRoot.

Everyone that is having trouble getting KingRoot to work, please try the suggested method.

REPORT BACK! Let us know if it works or not

The more info we collect the better the end results for everyone.

And if this does indeed work for more than a few, it would be nice to have a sticky to ward off the multiple waves of questions.

Good luck to you all :silly:
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
I'm not a root genius but I think it's because the entire time kingroot is try to get root it is spamming intents... Maybe the system being bogged down allows elevation through it starting a specific service???..

Another way would be to try and run that cve test app that was posted a while back... If the memory and system usage was a factor that apk does nothing but spam info at a certain service forcing a Kernel panic...
[ZTE ZMAX Guides, News, & Discussion] steventechno:
Yep!

That did the trick for me. I've opened up Sims Freeplay, NOVA3, Simcity, Minecraft, and a bunch of Facebook tabs, and whever else I did to the point to where the Lag was beginning to kick in. KingRoot asked to install another program, then it worked!
[ZTE ZMAX Guides, News, & Discussion] ghet2rockuu:
yes i have and i have mentioned it earlier and so have a few other people exposed works fine
[ZTE ZMAX Guides, News, & Discussion] fire3element:
Sweet. Man do I wish I would have figured this out a week ago. Have only slept 2hrs in the last 72hrs because I was jacking around with this thing.

Thanks for the good report. :good: I shall sleep well tonight.
[ZTE ZMAX Guides, News, & Discussion] MadBum:
Connect device to your PC via USB

In Google Chrome, Add the User Agent extension.

On your Zmax, add a new APN. Use your existing as a guide, but add the ""default,supl,mms,hipri,dun" string to the APN.

For example, I'm a Metro user, so I just created an APN called TMob which is a C&P of my Metro APN, but I added the "dun" line to the string and I use the TMob APN when tethering.

In the User Agent app in GC, populate the "Change" field with the following string: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9) AppleWebKit/537.71 (KHTML, like Gecko) Version/7.0 Safari/537.71" and click "Change.

Under "Connect to PC" in your phone settings, set the radio button to "Charge Only" and tick the "Enable USB debugging" box.

Next, set to "Airplane Mode" then nav to "Settings" > "More" > Tethering & "Mobile Support"

Tick the checkboxes for both "USB Tethering" & "Mobile Hotspot"

Go back and disable "Airplane Mode" and you should be good to go.

I'm going by memory, so PM if this doesn't work for you and I'll try to walk you thru it.

You need to enable "Airplane Mode" in order for USB Tethering to remain enabled. Once it does, you can disable Airplane Mode.

Good Luck.

Note: I haven't tried this since ZMax pushed the last update, but it worked previously.
[ZTE ZMAX Guides, News, & Discussion] noodle2113:
----

still works.... been using since about mid march was gonna post link to androidforum but dont have enough post.
[ZTE ZMAX Guides, News, & Discussion] hroark13:
hey all

I made a TWRP Recovery for the ZMAX

http://androidforums.com/threads/zte-zmax-twrp.918537/
[ZTE ZMAX Guides, News, & Discussion] xIP-:
Ive downloaded the app but not installing till someone else confirms working

---------- Post added at 07:29 AM ---------- Previous post was at 07:24 AM ----------

Nevermind.I bit the bullet,it works. Thanks!
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
Let's get a couple more success stories and I'll go for it lol. Who's going to take the plunge!?

---------- Post added at 01:55 AM ---------- Previous post was at 01:54 AM ----------

Kept good on my promise to everyone, here is a thread dedicated to rooting the ZMAX!

http://xdaforums.com/general/general/root-how-to-root-zte-zmax-t3107409/

---------- Post added at 01:58 AM ---------- Previous post was at 01:55 AM ----------

Whoa there cowboy lol, question, how does this effect our need to "reboot recovery" to access the system at times? I know there has been once or twice (namely the installation of Xposed) where I had to RR to gain access to the system when I was booted regularly. Notice anything peculiar?

---------- Post added at 01:58 AM ---------- Previous post was at 01:58 AM ----------

And to you good sir, many thanks for your contribution!!!!!
[ZTE ZMAX Guides, News, & Discussion] hroark13:
yeah, I guess it kind of takes that option away, until you flash boot to recovery again

I guess someone can make like a dual boot recovery that let you choose to go into TWRP or boot Android R/W, but that gets complicated and can take some time to come up with, not sure if I am gonna make it or not
[ZTE ZMAX Guides, News, & Discussion] steventechno:
sleep well

Oh wow. Go catch some zs . A lot of zs. Lol :)

Never deprive yourself of sleep. It can have negative effects.
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
Once we get a custom rom going we will be good, i was just asking about the now lol
[ZTE ZMAX Guides, News, & Discussion] steventechno:
holy ####

That was fast! Thank you so much! ! !
[ZTE ZMAX Guides, News, & Discussion] hroark13:
custom ROM will not solve the /system write protection, the write protection is initiated in the boot loader (aboot)

when you boot from the "boot" partition /system is write protected, when you boot from the recovery partition write protections is not on

the only other way is a boot loader unlock of some sort

---------- Post added at 03:13 AM ---------- Previous post was at 03:12 AM ----------

your welcome
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
ah... hurdles hurdles hurdles lol

---------- Post added at 02:33 AM ---------- Previous post was at 02:20 AM ----------

I love the smell of root in the morning ?
[ZTE ZMAX Guides, News, & Discussion] Cyconumnum:
YAY FOR hroark13!!!!!

spent what seemed like hours trying to get root from kingroot...

got root..

installed TWRP....

flashed SUupdate zip......

stared at ANDROID screen for 15 minutes trying not to panic.......

force reboot into TWRP....

for kicks and giggles...back up my phone ...then reboot....

installed SU and used TWRP to update successfully ..

and kinguser refuses me uninstallation now.....cannot do anything to it without it giving error

installed adaway....successful reboot.....wont load libraries.....

i mostly have static root and TWRP in full effect....

hroark13 IS THE MAN!!!!!!
[ZTE ZMAX Guides, News, & Discussion] hroark13:
who is ROAR ?
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
You know... I didn't wanna be the one to ask lol
[ZTE ZMAX Guides, News, & Discussion] Meep70:
I had to manually stop and delete the Kingroot and Kinguser apps, and then everything was beautiful.
[ZTE ZMAX Guides, News, & Discussion] Cyconumnum:
now to patiently wait to see whats next.....

xposed got SU permission but could not write ...

is there a way to use SMANAGER to force r/w ?

because ..i have more than temp root....just not full root....

can someone throw something together to flash in TWRP?
[ZTE ZMAX Guides, News, & Discussion] mingolianbeef:
Reboot recovery into system Instead of regular reboot, worked for me
[ZTE ZMAX Guides, News, & Discussion] Cyconumnum:
it's from the F6 forums ...sorry...i'll stop abbreviating your name
[ZTE ZMAX Guides, News, & Discussion] hroark13:
lol I was just kidding, I know you meant me

since you flashed TWRP to recovery partition

when you reboot to recovery it will go into TWRP

if you need to boot Android with system write protection off

you have to flash the boot partition to the recovery partition and then reboot into recovery

this will actually boot you back into android, but since it is booting from the recovery partition, write protection is off

there are instruction on this in the root instructions

we will need to come up with a more better way to handle stuff like maybe a boot menu or something, but it may take a while to come up with it
[ZTE ZMAX Guides, News, & Discussion] Cyconumnum:
phew......thought i stepped on the wrong toes....
[ZTE ZMAX Guides, News, & Discussion] hroark13:
nah

So this is what I was kind of thinking for TWRP or System WP OFF mode

When the phone boots into recovery, either from Android or from holding Vol Up and Power

Make the Green LED blink a few times, and when user see the blinking LED they can either press Vol Up for Android with system WP Off or they can or press Vol Down and boot into TWRP, and if nothing is pressed it will default to TWRP after a few seconds

This is kind of how they do it on some Sony Phones with dual recoveries

This should not be too hard to do

but I do see a problems since we have different versions of the phone, like Metro uses 4.4.4 and T-mobile uses 4.4.2 and those two different version used different zImages and ramdisks, so there will need to be two versions of the recovery for people
[ZTE ZMAX Guides, News, & Discussion] Moon83:
I tried flashing chainfire su over kingroot su through twrp aaannnddd that's a no go:confused:
[ZTE ZMAX Guides, News, & Discussion] LowPro:
Hey guys, any info on how to install braviaengine3 without TWRP?
[ZTE ZMAX Guides, News, & Discussion] willard18:
So I decided to try kingroot. And I did everything correct and it gave me permission denied when trying to move su it over but I restarted my phone like seven times and I still have root with no supersu just kingroot? So did I find permanent root without SuperSU??
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
Hey do you think I can flash the TWRP and get su installed I get to the pushing of su through adb the other way and I keep getting errors root checker says I have root and it sticks after rebooting just can't get su pushed through adb?

I still have the kinguser though to so will it flash over that?
[ZTE ZMAX Guides, News, & Discussion] biledigger:
I'm stumped. Everytime i enter "reboot recovery" everything resets back to default and i cannot mount system as R/W and i have to start all over with goofing around for KingRoot to get me a temp root. "mount -o rw,remount /system" keeps returning that i am not allowed to commit that action. I have the MPCS version of the ZMAX with the latest FOTA update. Think that could be blocking me?

---------- Post added at 11:32 AM ---------- Previous post was at 11:02 AM ----------

Ok, i temp rooted. While in the temp root state i installed the TWRP recovery and rebooted to it, i then installed the SuperSu update package and i am staying rooted now. Not sure if my system is in R/W mode or not, but i don't have to keep temp rooting it over and over again just to make a small attempt and elevated priviledges.

---------- Post added at 11:39 AM ---------- Previous post was at 11:32 AM ----------

Ok, yes, i have permaroot with the order that i did everything in, I just don't have full R/W capabilities to the system. Is there a posibility that you can make a flashable zip that you can run in TWRP to make everything set to R/W mode?
[ZTE ZMAX Guides, News, & Discussion] thegrim11:
I use it very much so. About 12 or so modules installed. ?

¯\_(ツ)_/¯
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
Ok so I ran the TWRP apk got TWRP recovery installed su with it but can not it su binary to update also root checker says I don't have root now????? But I'm assuming that's because I can't get the binary to update.
[ZTE ZMAX Guides, News, & Discussion] Wade876:
I am too having somewhat the same issue I did everything down to reboot in recovery and after I restart the device and enter adb shell the put "I'd" in I get the following output. See pics. Any help will be appreciated.
[ZTE ZMAX Guides, News, & Discussion] tech_yeet:
Think you so much man when I get some money I give you 20$.

Z999LP-A-LTE
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
Ok so does anyone know how I can get su to update the binary in TWRP all I see in TWRP when I boot in it is the su zip I put in there and I don't have the option to uninstall su either in my settings? But it's in my apps just not running??? Now root checker says I don't have root but I'm assuming that's because the binary issue. I had it till I uninstalled all the kingroot stuff.
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
Your sure you had no root access through kinguser.. I spent a good amount of time on team viewer with flame last night... Kinguser had a lock on his su binary so supersu couldn't touch it... Wouldn't update wouldn't even see it without kinguser giving it access.... It's no big deal if king user is managing your access it does the same things as supersu

---------- Post added at 12:28 PM ---------- Previous post was at 12:24 PM ----------

You could always just reinstall kinguser itself without going through kingroot... I'll link you the apk install it then let me know if it works...

http://mmgr.myapp.com/myapp/Kingroo...C87_B182_office_release_2015_03_30_105003.apk
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
I couldn't run any normal fixes with the kinguser everything failed sd fix ect. Would get root permissions from kinguser but couldn't access any files. Just like now if I install it gives permissions ect but none of the actions work but like I said if I went into root checker said it had root. Even after rebooting and not running kingroot I still had root.
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
Did you boot into recovery before trying the SD fix??
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
I don't know I think my phones just messed up beyond me fixing now debating on throwing it in my fish tank and letting my eel eat it and just getting a different phone. LoL
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
Double check that you have pushed and gave permissions to su, daemonsu, and install-recovery.sh
[ZTE ZMAX Guides, News, & Discussion] djc7980:
Any idea what this means.
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
You could dd the recovery back go back to stock and start fresh...