yashsingh1/xdaforums huggingface dataset:
[ZTE ZMAX Guides, News, & Discussion] fire3element:
I am getting the same thing right now as we speak. Was about to post this too, but trying everything I can before I did.

Also note that I am loosing the temp Root from KingRoot after the recovery reboot.

If I run the KingRoot app again, I get the temp Root back. But I think it is too late to have the ADB backdoor open to inject the SU

Edit:

Also checked "getenforce" with Terminal Emulator on the phone. It still claims PERMISSIVE

What are we missing here?? LoL
[ZTE ZMAX Guides, News, & Discussion] brandonlee96:
exposed framework is installed on my zmax
[ZTE ZMAX Guides, News, & Discussion] fire3element:
Did all the commands for pushing SU come back without errors for you?

DroidisLINUX and I are getting "permission denied" when trying to move the SU from tmp to xbin
[ZTE ZMAX Guides, News, & Discussion] brandonlee96:
i still need help with this part i push the first two things successfully and then when i put adb shell in.it gives me the $ non root sign instead of # root sign
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
i made sure that getprop persist.sys.k is P892TF7

I did setenforce 0

just can't figure out what is wrong,

we can always dd if=recovery.img of=recovery back again start over

thats not the issue
[ZTE ZMAX Guides, News, & Discussion] fire3element:
well it looks like you have lost the temp root. Try running KingRoot again. Also try "reboot recovery" command from ADB or Terminal Emulator, then try the commands again after the reboot.
[ZTE ZMAX Guides, News, & Discussion] brandonlee96:
its weird sense i cant get the su binary updated i have no recovery installed but when i restart my phone normally i will not give me write access to /system but when i restart my phone with the up volume button it doesent boot into recovery like it should.it boots my phone up all the way and gives me rw access to /system.but i need help with these steps shown in this photo
[ZTE ZMAX Guides, News, & Discussion] fire3element:
WHOA THERE COWBOY!!!

My eyes refuse to read that. Can you make us a bar graph? Or even maybe a pie chart?

I like PIE
[ZTE ZMAX Guides, News, & Discussion] Cyconumnum:
screen shot
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
thats how it is supposed to work, reboot recovery boots the boot.img you put on recovery allowing rw to system. I am however getting erros pushing su to system/xbin
[ZTE ZMAX Guides, News, & Discussion] skinlab:
Thanks for the over extended step by step.
[ZTE ZMAX Guides, News, & Discussion] Cyconumnum:
no problem
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
edit kinguser is the problem, it has installed itself as su, and a system apk, both su and recovery-install.sh are kingusers apks
[ZTE ZMAX Guides, News, & Discussion] fire3element:
Ok so I pushed SU and install-recovery to /system/xbin with Xplore app (file manager)

It appears to have copied. When I tried to copy SU, it kept asking if I wanted to overwrite the existing SU. I said yes and it copied.

Copying the install-recovery did not ask to overwrite.

Tried to chmod from ADB and Terminal Emulator. Both give error "Operation not permitted"

I do not thing that system is getting mounted properly.

Anyone have any ideas on what to try next?

---------- Post added at 05:23 AM ---------- Previous post was at 05:21 AM ----------

I replied at the same time as you. :P

So what do we do now? Can we remove KingUser while running and keep the temp root long enough to push the SU to xbin?
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
I think we have to start over uninstall it, go back to recovery.img as recover set persist.sys.k back

to get kingroot as tmp root, so its not in system, so basically we need kroot not to get in system when we do boot up as recovery to rw to system. I will see if i can figure it out otherwise its same as having supersu, only its i chinese LOL
[ZTE ZMAX Guides, News, & Discussion] fire3element:
Ah, so you are saying KingUser installed itself early in the boot process as SU when we attempted to "reboot recovery"? Thus keeping us from actually mounting /system properly.

And as much as I appreciate what this chinese dev team has made, I want Chainfires SU instead.

It is just too hard to trust the power of something like superuser to a dev who you know nothing about.
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
you can move other files, just not su, or install-recovery.sh try it works fine they are like in windows when a proccess is running it you cant delete it, kingroot owns our system

The CHINESE own our system
[ZTE ZMAX Guides, News, & Discussion] brandonlee96:
ok i have full root access but without recovery.The things that i got too work with root access .(#1)I pushed su into /system/xbin shown in photo 1.(#2) i remove the system apps that i didnt want(#3)i have the modded google play installed from lucky patcher shown in photo 3 (#3) i have exposed framework installed in shown photo 2 (#4) i have ifont installed and i have a custum font installed (#5) i have adaway installed and working shown in photo 4 (#6) i have gravitybox installed shown in photo 5 (#7) i have a custom statusbar from gravitybox shown in photo 2 (#8) i have boot manager installed and working shown in photo 6 (#9) i have ABM+ installed and working sown in photo 2 and 7.... so i have full root access but i need the recovery mode back:)
[ZTE ZMAX Guides, News, & Discussion] fire3element:
Read my post a few back. I was able to use Xplore file manager to replace SU and move recovery to xbin. At least it said it was successful.

Xplore normally returns an error if a copy/replace is not working.
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
just open adb or terminal and type

su

reboot recovery

you will have read/write to system brandon if boot.img is recovery.img

you made dd if=boot of=recovery

this is the trick [MENTION=1022383]jaca[/MENTION]se gave us to allow write to system so do that everytime you want ot write to system
[ZTE ZMAX Guides, News, & Discussion] fire3element:
Did you see my question before? We want to know if you got an "permission denied" error when you pushed SU to the xbin folder.
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
he has kingroot as su, look at pic the bytes are 147 same as mine
[ZTE ZMAX Guides, News, & Discussion] fire3element:
Forgive my ignorance, still trying to learn. Is this the commands to go back to the stock recovery? Trying to clear it up in my head, but just looks like to me this is how we tell the phone to boot into android instead of the recovery.

---------- Post added at 05:47 AM ---------- Previous post was at 05:44 AM ----------

How did he get the otasurvival.sh ?

Brandon, did you try to install the SuperSU app from the Play Store?
[ZTE ZMAX Guides, News, & Discussion] lgg5:
Hi. After using this method to root my phone, I ran the OTA update, which soft bricked my phone. So, if you haven't, do not run the OTA after you root.

FTM mode is without root and it does not allow writing to /recovery.

Thanks.

Also, if you haven't, plz. do backup your phone using ADB (I didn't). :(
[ZTE ZMAX Guides, News, & Discussion] fire3element:
I see what you are saying about the SU now.

Mine is showing the same byte size.

I have closed the file browser and reopened to check the contents of the xbin folder.

The copy of install a recovery.sh DID stick.
[ZTE ZMAX Guides, News, & Discussion] brandonlee96:
yes i tried to but it wont install because the su binanary is not updated
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
oh no that was for brandon to boot read/write if you want to go back

you need to have the backup recovery.img that you hopefully made on sdcard

need to be in adb root shell

and type

cd /dev/block/platform/msm_sdcc.1/by-name/

dd if=/sdcard/recovery.img of=/recovery

you would need to uninstall kingroot and then achieve root all over as tmp root

you would have to follow jacase instructions to a T, and hope it doesn't automatically move to system on reboot,

maybe reinstall it while in boot.img booted from reboot recovery and keep system as read only, and don't set persist.sys.k or enforce 0 until after its installed as tmp root, then use the rest of his tutorial tomove super su to system instead. there are many ways to attempt this I don't care at the moment maybe when I have a couple days off i will fiddle with it. like sat, sun
[ZTE ZMAX Guides, News, & Discussion] fire3element:
Give me a place to upload it to. I dont have google drive or anything else set up.

And thanks for the heads up
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
[MENTION=1022383]jaca[/MENTION]se kindly uploaded his recovery.img backup a while back like 181 page i think
[ZTE ZMAX Guides, News, & Discussion] brandonlee96:
heres mine http://www.mediafire.com/download/nv23flhtt79j73k/recovery.img
[ZTE ZMAX Guides, News, & Discussion] fire3element:
I think where I messed up was after the reboot recovery

My temp root was gone (or so I assumed after checking it with Root Checker), so I ran KingRoot again.

I think that FUBAR'd my chance to get SuperSU in there.

By the way, all the commands up to the "reboot recovery" I did in the Terminal Emulator

---------- Post added at 06:06 AM ---------- Previous post was at 06:03 AM ----------

I can hear the roosters crowing. Think its time to get some shut eye. Check back with you guys later today.

Nite... errr, Morning :D
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
yea, best part of new root is nextapp sdfix, allows kitkat to write to sdcard no restrictions. root required BOOM take that [MENTION=498526]g00gle[/MENTION]

and using xposed power menu, to allow only reboot recovery, never lose read,write to system again. unless you total power off
[ZTE ZMAX Guides, News, & Discussion] brandonlee96:
i followed jcases steps now how am i suppose to put every thing but to normal like get my recovery back and put boot.img back to normal
[ZTE ZMAX Guides, News, & Discussion] lgg5:
Brandon, thanks for the file. :)

Unfortunately I was mistaken. No write access to /recovery partition in FTM mode. I think I might have to resort to DFU mode, and figure out if I can write the recovery that way.
[ZTE ZMAX Guides, News, & Discussion] brandonlee96:
my zmax keeps booting into safemode what do i do

i put these codes in the build prop to remove no sim card icon on status bar and rebooted the then it when to the zte zmax logo then it goes to a black screen then the red dot shows i cant go into ftm mode

the codes i entered into built prop at the very bottom

ro.config.tima=1

ro.config.donot_nosim= true
[ZTE ZMAX Guides, News, & Discussion] doubtingthomas:
Jcase, Mingo and Crewe THANK YOU all

Jcase, Mingo and Crewe THANK YOU all

Cheers
[ZTE ZMAX Guides, News, & Discussion] tech_yeet:
I do not have a computer can this be maded in to a apk or something?

Z999LP-A-LTE
[ZTE ZMAX Guides, News, & Discussion] thegrim11:
Most likely not. Or at least I don't think so. It would be very much easier to make a script out of this for the command prompt. Which I can probably do when I have some free time.

¯\_(ツ)_/¯
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
If you unzipped the su file on your phone you should still be able to move the necessary files into the correct places cutting out the need to adb but I'm not sure..... I know all of the phone command can be run through a terminal emulator...
[ZTE ZMAX Guides, News, & Discussion] ghet2rockuu:
i keep getting kshell /2000:18755 : reboot :not found
[ZTE ZMAX Guides, News, & Discussion] brandonlee96:
i cannot get out of safe mode
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
When you get to here [MENTION=5885045]tech_yeet[/MENTION] try taking the zip file and extracting it on your phone and manually moving the listed files to /data/local/tmp then continue following the guide
[ZTE ZMAX Guides, News, & Discussion] turruso:
root@draconis:/dev/block/platform/msm_sdcc.1/by-name # Reboot recovery

Reboot recovery

root@draconis:/dev/block/platform/msm_sdcc.1/by-name # Reboot recovery

Reboot recovery

everything works until this point, any ideas?

btw my keys were P892T57_MPCS does it look right?
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
ok got kingroot to rerun have temp root but when I open CMD and type in adb shell I get adb is not reconized as an internal or external command, operable program or batch file anyone know how I can fix this or what I'm doing wrong?
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
It should just be the first part P892T57

Did you dd recovery ?

---------- Post added at 01:41 PM ---------- Previous post was at 01:40 PM ----------

You need to install adb Google it
[ZTE ZMAX Guides, News, & Discussion] jdmsled:
thanks

Just want to say thanks thus far ,for everyone's help. It was nice to find some help after kinda being forced into this fone, and not being to happy about it. It appears I now have ROOT . Im not the savviest, but it seems that airplane mode may have been the deciding factor for my attempt(that was my only change to the environment).
[ZTE ZMAX Guides, News, & Discussion] lgg5:
A quick update. I tried using Ubuntu to get display the partitions using DFU mode (to copy the original recovery that way). : dmesg shows QHSUSB__BULK, but it does not mount or show up as a mountable device under /dev/ .
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
getprop*ro.product.name

If that's the output to this command then your fine..... Swype capitalized the r

The command should be reboot recovery with a lowercase and it'll work

---------- Post added at 01:58 PM ---------- Previous post was at 01:57 PM ----------

Do it with a lower case r

reboot recovery
[ZTE ZMAX Guides, News, & Discussion] Moon83:
I've done all the steps from my phone using terminal app. My only hang up is when copying su to /system/xbin I get permission denied. But phone is mounted r/w? Do I need root adb shell?
[ZTE ZMAX Guides, News, & Discussion] _ck_:
Sat on my hands for too long not buying a Zmax with the walmart clearance because I didn't want another ZTE that I couldn't root

With the tides changing I tried three stores today and they are all sold out :(

Hope this helps someone, grab them for $50 at your walmart ASAP:

stock checker: http://mobile.walmart.com/find-in-store/42306964

(ignore the online price of $200, it is $50 in every store)

they will need to be carrier unlocked unless you already use tmobile
[ZTE ZMAX Guides, News, & Discussion] ghet2rockuu:
i did ity rebooted but lost root on reboot
[ZTE ZMAX Guides, News, & Discussion] arampapaz:
They are definitely not $50 in every store. I have been to 10-12 walmarts, and many of them are still selling at $200. I have bought the only three I was able to find on clearance. I even asked them to scan it at one of the walmarts to make sure it just wasn't labeled incorrectly, and it came up as $200 and still active. Not sure if some stores will continue to sell them, or if they will all eventually go on clearance.
[ZTE ZMAX Guides, News, & Discussion] krazyone2006:
Ok for some reason I lost temp root halfway through enabling the backdoor and now after getting temp root and adb open it tells me Su: not found now when I type in su in the second step. I can keep going and get responses up to

dd /dev/block/platform/msm_sdcc.1/by_name/

And I get cannot open for read:* permissions denied

Any clue did I screw my phone up????

Yeah I'm thinking I messed my phone up cause now as soon as I get temp root all my Google play services and apps keep freaking out and sending up force close boxes every 2-3 seconds lol stops as soon as I reboot phone starts as soon as I get temp root lol fml
[ZTE ZMAX Guides, News, & Discussion] jcase:
Please guys dont take OTAs if you have rooted/modified system
[ZTE ZMAX Guides, News, & Discussion] ghet2rockuu:
Is it possible to achieve perm root with installing superuser because I rebooted my phone 3x and it still says it's rooted
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
It shouldn't be dd you should be using cd you wanna change to that directory
[ZTE ZMAX Guides, News, & Discussion] fire3element:
You guys need to pay attention to this warning, along with not getting too mod happy with the android system and prop settings.

You will end up with a brick and little chance to recover. Just wait till we have a custom recovery before going deep.

[MENTION=2376614]jcase[/MENTION]

On the subject of permission denied, DroidisLINUX thinks it is because KingUser installed itself as SU after the reboot.

Must we restore the stock recovery, clear out KingRoot and all related, start fresh again?

Trying to clear this up instead of having you bombarded with questions.
[ZTE ZMAX Guides, News, & Discussion] jcase:
I dont know anyhing about kinguser nor permission denied, i did test the method with kinguser, I remove it after creating the backdoor property, as root will stay then.

Sorry I ahve no futher help on the zmax, you guys have root, and wp bypass
[ZTE ZMAX Guides, News, & Discussion] fire3element:
Well most of this is WAY over my little noggin, but we all can learn right? I will figure it out, or my Zmax will die trying.

[MENTION=2376614]jcase[/MENTION] - just want to say thank you very much for what you have shared. :thumbup:
[ZTE ZMAX Guides, News, & Discussion] ghet2rockuu:
If your output is

uid=0(root) gid=0(root) context=u:r:shell:s0

It worked...

I can't get this to say this...... But yet it's still rooted I also can't mount say not found
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
Are you running these commands through adb shell??
[ZTE ZMAX Guides, News, & Discussion] fire3element:
Ok when I input:

# id

I get return:

uid=0 (root) gid=0 (root) context=u:r:init_shell:s0

I am assumimg this is why /system will not mount with full rw permissions.

Anyone have any thoughts on this?
[ZTE ZMAX Guides, News, & Discussion] ghet2rockuu:
Yes some othe r comes up (shell) doesn't say 0 (root)
[ZTE ZMAX Guides, News, & Discussion] Cyconumnum:
After the first time I rooted with king...I started having google gapps issues...It wouldn't stop erroring until I restarted phone....After reboot no errors...but, my phone started reporting insufficient storage......

So I reset my phone....and decided not to touch kingroot till someone made a batch file for cmd ....

Wasn't expecting an apk since all the adb cmds needed....

Only decided to run king again after I was asked to log what I went through to root my phone....It dragged on longer than I thought it would...longer than the first time....

Sorry if it was useless...

Root didn't even last long after I finally got the green check mark...
[ZTE ZMAX Guides, News, & Discussion] ghet2rockuu:
Yes some other id shows id(shell) I'll try post pic later just getting to work but I have perm root. Just can get the writable part.
[ZTE ZMAX Guides, News, & Discussion] Wade876:
Can't seem to get mine to work. I'm a noob so see with me please
[ZTE ZMAX Guides, News, & Discussion] ghet2rockuu:
​

You need to do that on the computer not on phone
[ZTE ZMAX Guides, News, & Discussion] fire3element:
I believe this is why we are getting permission denied. Pretty sure that we need to elevate ADB to init vs init_shell to get SuperSU to copy over
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
Yes for everyone that is root happy listen to [MENTION=2376614]jcase[/MENTION] don't do anything look, until we have cwm to fix your bricks. You have system rw, BE CAREFUL
[ZTE ZMAX Guides, News, & Discussion] tc0566:
Be very careful with SuperSu Install

I did the complete Super Su install up to the point of updating the binaries. I accidentally chose twrp to update. Now I am stuck in a boot loop cycling first android screen. All I can do is get to the FTW screen. holding power will not shut it down constant loop on first android screen. Volume buttons up or down nothing. All that works is both volume keys give FTW.
[ZTE ZMAX Guides, News, & Discussion] jcase:
if you can get root for even a second, do "rm -r /cache/*"
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
I know this sounds mean but before the day is out you gonna have bricks to lay, how many so far 3, people wait for cwm recovery its coming
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
For those having trouble you need to slow down and read the instructions... I'm a patient person and will try to help but if you don't understand what this is doing or are not comprehending the instructions I wrote you have to wait... I did this first try so you guys should have no trouble I'm going to write it up again in a bit and try to be even more clear as to what do...you do it wrong you may end up with a brick and no warranty to fix it... be patient
[ZTE ZMAX Guides, News, & Discussion] steventechno:
Dude! Awesome!

That's amazing! I'm a little scared to try right now, as we currently don't have recovery (xposed is one of my main reasons to root, as well as getting ALL SDcard privileges back like it was in the jb days. But just for the SDcard I'm gonna try this! I thank everyone so much for contributions in opening up our phone! We likely still got the bootloader battle but that can wait some other day. As stock is plenty good enough to be happy with.

This is the right step in the right direction. I appreciate it. really! It'll be the last phone I own for a long time! :laugh:
[ZTE ZMAX Guides, News, & Discussion] fire3element:
@ Extremeasure - Did you uninstall the KingUser or KingRoot app at any point before or after the "reboot recovery" ?

Once I rebooted, the temp root was gone. Had to run KingRoot again to get it back, at which point it installed KingUser as SU in xbin.

I think this is where some of the folks here are getting tripped up. Wondering if we should uninstall KingUser before the reboot (that is if we can keep the temp root to stick)
[ZTE ZMAX Guides, News, & Discussion] hroark13:
he bud, how are ya

The Univision model is not on Clearance at every Walmart

I purchased 3 of them, from different Walmarts, and some Walmarts still charge 200 for it, this was like a week ago, so it may have changed

anyway, I have the Univision model, and have not been able to get Kingroot to root it yet, but I am gonna still try
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
I uninstalled after I moved su into xbin myself... After you reboot recovery you have root in adb shell which is where you need it
[ZTE ZMAX Guides, News, & Discussion] fire3element:
Try my method, see if it works for you also. More collected info will be helpful to everyone.

http://xdaforums.com/showpost.php?p=60688490&postcount=1862
[ZTE ZMAX Guides, News, & Discussion] xtremeasure:
Takes a while just remember after it fails clear the app data... Make sure kinguser isn't installed and then try again
[ZTE ZMAX Guides, News, & Discussion] 1haplo:
But I'm a man and never learned to read instructions or manuals. :D
[ZTE ZMAX Guides, News, & Discussion] fire3element:
That is where the hang up is. I did not have root in ADB after the reboot. Gave it a few mins to completely boot, then tried again. Checked root with root checker app, no root. Re-ran KingRoot and let it root again. This is when I think KingUser installed itself as SU in xbin.

Guess only thing to do now is revert all the way back to the start and try again, because I do not see any way possible to replace su with SuperSU while it is running. KingUser has control of the system and wont allow it.

I am re-reading and reading again to make sure I understand the commands I need to follow IN ORDER to get back the stock recovery and try this whole process over again. Don't want to brick the phone by a missed placed step. 2hrs sleep isnt helping either. LoL
[ZTE ZMAX Guides, News, & Discussion] hroark13:
thanks for all that detail, after seeing all that I realized that I have not tried for long enough yet

so what carrier, what version of Android, what build number
[ZTE ZMAX Guides, News, & Discussion] DroidisLINUX:
Kingroot has an uninstall button, in king user.... Give it a go see how far the rabbit hole takes you

With the blue pill

root@draconis:/ # id

uid=0(root) gid=0(root) context=u:r:init:s0
[ZTE ZMAX Guides, News, & Discussion] Reallionare:
I have been patient all this time waiting for root I think I'll wait until the script someone said they would write.....