yashsingh1/xdaforums huggingface dataset:
[Sharp Aquos Crystal] soudara:
Hello tewilove thanks for all yôur work but can you help me.for fullroot 305sh japanese after follow step on first page my dump have not full 000000000000000 but 555555555 and 0000000 i see # after type su but i can not root with root360 or kingroot
[Sharp Aquos Crystal] brunosil:
This is the end of this post or you re planning to root the s7232 version also?
[Sharp Aquos Crystal] tewilove:
No.
[Sharp Aquos Crystal] irishobo:
Do you have any ideas how we could get it to work for S7232?
[Sharp Aquos Crystal] enki7:
S7232: wait for cm version by uberlaggydarwin.
[Sharp Aquos Crystal] :
And how do you propose to install CM when write protection, and bootloader can't be properly handled on S7232? If tewilove isn't planning on adding support for the newer software then those with S7232 are sitting ducks until someone else comes along and makes it happen. Uberlaggydarwin has already stated he wouldn't provide his sources to hack away and gain "root" access to the device.

I'm beginning to think some of you on here do not realize the basic requirements which is needed just to install a custom ROM should a custom ROM become available.
[Sharp Aquos Crystal] brunosil:
Yeah... You are right :(
[Sharp Aquos Crystal] enki7:
Well, he said it will be released as CM port (oct/2015): https://plus.google.com/+BrinlyTaylor/posts/4wT2ygYsQiz

And he said S7232 is rootable : https://plus.google.com/+BrinlyTaylor/posts/cN2atUBap4B

I can´t believe it will be just: "hey, here is CM port for 306sh, just for you too see, as you cannot install it"... it won´t make any sense.

So, I think the port will include how to install it, even in the S7232.
[Sharp Aquos Crystal] :
I'm aware of these things. If he has a change of heart and offers a way to gain access to the device so you guys can install CM then great. Otherwise, the only ones who will be running CM are those who have "root" access. Which implies others being left out until some motivator comes along and changes that.
[Sharp Aquos Crystal] enki7:
Well, I have 2 phones, with both firmwares, 1 is already full "tewiloved"... (gonna mess with wcdma problem now).

The other is waiting for the promised land of changed heart :D
[Sharp Aquos Crystal] HermitDash:
I would agree with the last bit of what you said and say that most of us lack that knowledge, and I say that because this phone went on sale recently and people started buying them to seek a cheap alternative.

Really impressed with tewilove's work but really sad that I updated past the rootable firmwares.

Also had my phone sent in for repair and they gave me a brand new one with S7232 built on in.

Here's to hope that little bunny does come along someday and we can achieve root further on this phone

:good:
[Sharp Aquos Crystal] digioo:
也对。you are right but i like MILF.:D:laugh:
[Sharp Aquos Crystal] QuickNET Tech:
O_o What happened here since I left?!?!?!?!?

???
[Sharp Aquos Crystal] tewilove:
Two ideas.
[Sharp Aquos Crystal] enki7:
Revolution! Tewilove is asking for sex, love and money to continue his work :D
[Sharp Aquos Crystal] sabrex11:
the easiest way to

only downgrade firmware...but as?
[Sharp Aquos Crystal] irishobo:
There is no way to downgrade the firmware with write protection.
[Sharp Aquos Crystal] :
[MENTION=5314976]uberlaggydarwin[/MENTION], to be honest, I am not completely up to date with your plans on this device so aside from that, since you already got CM booted up for this device, do you plan to bring in CM13 or keep it where it is? Nightlies haven't begun yet though following gerrit I presume it shouldn't be too much longer but figured I would asked since you are into development and are in a sense a maintainer. I'm building CM13 right now for myself to test out on my daily device - bugs expected of course.
[Sharp Aquos Crystal] tewilove:
I do have signal with China Mobile/TDD BAND 41.

Bad news is that SHARP seems to have hardcoded APN list, possible in radio. I've removed all restrictions in Android with xposed and the log did tell me written APN to radio with success. But I cannot get data working.

And FC when dialing, and auto rejecting calls.
[Sharp Aquos Crystal] tewilove:
https://gist.github.com/tewilove/a5a66c7a3ef3216013c4

After apply this xposed module, you may still have to delete /pdp_profiles/profile1 in EFS using QPST.
[Sharp Aquos Crystal] enki7:
Sorry to interrupt you, but...

Is this a custom xposed module?

Did you use any already known xposed module to tweak the phone?

In apps like "advanced signal status", do you get 3g/GSM/EDGE/LTE and not just CDMA? (I just get CDMA atm, even after changing a lot of things inside the rom)
[Sharp Aquos Crystal] tewilove:
Why do you think known xposed modules will work? There are lots of hardcodes in this ROM.

Again, any *known* solutions won't work I think. Many of you only know editting properties or using known hacks, but never know how and why.

a. GSM/UMTS and other LTE bands

I did not check GSM/UMTS. For LTE, SHARP only write B25/26/41 calibration data to modem, hard to image adding to NV #6868 without calibration data will work. And it's likely that every boot there is code that set this NV with some mask, which results to at most the 3 bands are turned on. Not sure whether radio or Android does this. If it's Android, maybe copying RFNV from 305SH could allow BAND 3.

b. the issue that phone could list network operators but won't register to

I use QXDM message logs and dedicated the connection issue, and finally I get local BAND 41 working.

If you have QCAT parser to dig into the messages you will find that by default, radio attempts to "ATTACH" to local LTE network and then after a few messages, local LTE network responses "ATTACH accepted", but radio soon sends "Detach Request" to local LTE network. What's the problem here is, SPRINT profile in EFS sets IPV4 only, which does not match to the local carrier, so radio gives up. That's why I suggest deleting /pdp/profile1 in EFS.

c. APN

By reversing the ROM, I've found that SHARP implemented own ApnListTracker(via QMI directly), which responsible for listening APN changes and synchronizing APN to radio, and the original Android implementation(via RILJ->RIL->QMI) is not used. Normally CDMA phones create CdmaPhone by default, when non-CDMA SIM card is detected switch to GsmPhone, this can be found in AOSP code. But 306SH is not like this, it only creates CdmaPhone when I use UIM. So I have to force the phone switching to GsmPhone. Unfortunately the ApnListTracker class only applies to CdmaLtePhone class, when in SPRINT network it sets up APN automatically. Meanwhile, when GsmPhone is active, anything happens to APN is obmitted. And what's more, both radio and Android side SHARP has changed Qualcomm APN data structure, by adding a field called apnClass to it. And you can take a look at /etc/apn-confs.xml and find that only SPRINT APNs have this attribute. I don't know how the radio side APN processing is modified, hope no hard limit for SPRINT. As you can see I've removed the restriction in Android using xposed, but I still cannot get data working.

d. too many hardcodes

While forcing the phone work as GSMPhone, lots code are broken. Many FCs. I'm tired of patching, giving up. You win, SHARP, your developers only knows hardcode.
[Sharp Aquos Crystal] iamdude:
Hello to all! [MENTION=1713470]tewilove[/MENTION] here in Russia some peoples have a Japan version of this phone with unlocked GSM/UMTS/LTE bands. Probably this could help you? How they can help you? Which information/debug/dumps do you need?

---

Sony Xperia A2 SO-04F (Japan version of Z1 Compact)
[Sharp Aquos Crystal] tin7777:
Congratulation! Can you share how to do it? Thank you in advance
[Sharp Aquos Crystal] .Zubair:
Thanks for trying ...now someone please figure this out :3
[Sharp Aquos Crystal] brunosil:
Please.... i need root for S7232... someone... :(
[Sharp Aquos Crystal] FriesPlease:
HALP

I put my phone into usb debugging and plugged it and but adb doesn't see it. I run windows 10 64x with the latest updates installed. I tried it on my sgh-t989 and it worked fine. Any help?
[Sharp Aquos Crystal] TechInMD:
I have a question about flashing SuperSU. I have recovery and boot img written and I am able to access TWRP. Do I have to run wpoff from TWRP terminal? Cause I flash the latest SuperSU and it does not work. Anyone who can point me in the right direction would get many thanks... and possibly a Japanese highschool girl :D
[Sharp Aquos Crystal] HermitDash:
Via Device Manager just reinstall the ADB Drivers.

Do a search for those.

---------- Post added at 03:53 AM ---------- Previous post was at 03:50 AM ----------

Which version of SU are you flashing? After flashing SU you should see SuperUser in your Apps and that it should work from there. What doesn't work exactly like are there errors?
[Sharp Aquos Crystal] TechInMD:
It's v2.46. I do not show superuser in apps, root checker fails, and su fails at terminal prompt. That is why I was wondering if I had to disable write protection before flashing supersu zip. Which I have tried also, and root is not successful. Maybe one of the TWRP devs can elaborate?
[Sharp Aquos Crystal] enki7:
Did you alread had permroot, no?

Did you flashed from twrp?

Did you flashed boot.img?
[Sharp Aquos Crystal] Jelvi00:
Hey the root worked in me 306sh with the older Zip uploaded, but now after running the root file instead of getting ( shell@SG306SH:/ # ), i got ( 1|shell@SG306SH:/ $ ) and it is a problem to continue with the rooting process Heeelp :D
[Sharp Aquos Crystal] TechInMD:
No

Yes

Yes

:banghead:
[Sharp Aquos Crystal] enki7:
You need a "#"... with a $, you didnt get temp root.

Try to find a way to get a # :D
[Sharp Aquos Crystal] FriesPlease:
This works on kikat 4.4.2 right?
[Sharp Aquos Crystal] UltimaXtreme:
It's the only build of Android we have on the Aquos Crystal, so yes.
[Sharp Aquos Crystal] FriesPlease:
Haha, ok thanks
[Sharp Aquos Crystal] sabrex11:
do root for S7232 died :(
[Sharp Aquos Crystal] HermitDash:
There is no root for it and no one was working on it. (Except UberLaggyDarwin, but that was for his own personal project)
[Sharp Aquos Crystal] sabrex11:
or I have a tablet :(
[Sharp Aquos Crystal] ectomech78:
Your google drive link in the first post is dead. Just thought I'd let you know...
[Sharp Aquos Crystal] tewilove:
Oh I've deleted it by accident.

Someone who still owns it please upload.
[Sharp Aquos Crystal] sabrex11:
https://yadi.sk/d/nupkITugkp33u

I hope that you remember about the other ;)
[Sharp Aquos Crystal] hitm@n:
hi guys

is there any open source for this exploit?

i test this exploit on my nexus 5 with android 5 but it failed

is there any available exploit for lollipop
[Sharp Aquos Crystal] longbow4869:
Please repost boot.img and recovery.img. many thx
[Sharp Aquos Crystal] sabrex11:
https://docviewer.yandex.ru/?url=ya...overy.7z&name=boot_recovery.7z&c=565ec2e679ff

Yet here you have:confused:
[Sharp Aquos Crystal] longbow4869:
Yet here you have:confused:[/QUOTE]

Thx a lot
[Sharp Aquos Crystal] soudara:
link for boot and recovery doesn't work please reupload it
[Sharp Aquos Crystal] Jasmyne:
Can't get anything past defeat wp to work :/

I can't defeat wp idk what I'm doing wrong but please help me with this as it's preventing everything after that as well
[Sharp Aquos Crystal] sabrex11:
https://disk.yandex.ru/client/disk/Tewilove
[Sharp Aquos Crystal] gz19880228:
Please upload the 2 img file to another place like Google Drive.......

The original one is gone, and the Russian one requests registration which seems cannot be done outside Russia......
[Sharp Aquos Crystal] sabrex11:
ok...

https://drive.google.com/file/d/0BzEY3280td59a2JfNF9oT2RZQkk/view?usp=sharing
[Sharp Aquos Crystal] gz19880228:
Many thx for your fast response!
[Sharp Aquos Crystal] terramir:
Does this root work permanently now,

I think my phone has been hacked,

but without root a meaningful

Firewall to trace the source is not really possible.

Both my paypal (got rid of app on phone) and gmail

Rules were verifyably messed with. And before

both paypal hacks I used the app on my phone.

I think there is some kinda zero day in kit Kat that

has not been patch or found yet. Updated to the

latest update a few weeks ago , so I figure root

Is my only hope to track the problem with a firewall

terramir
[Sharp Aquos Crystal] TheRootPrince:
Am I the only one who cannot comprehend that guide or?
[Sharp Aquos Crystal] coincypher:
thanks

I appreciate all of the effort and skill required to come up with these work arounds but I'm a complete incompetent trying to teach myself programming. I get that this needs to be input through command or .exe something or other but I don't have a clue on how to do that on a phone or I would probably have already known how to wrote my own rooting tools. This will be my first root and my el cheap o tablet will be my second please explain (like to a child) how to use these files?
[Sharp Aquos Crystal] soudara:
not working on 305sh firmware s020

all command working but after reboot no recovery and can not install supersu
[Sharp Aquos Crystal] unimatrixdoc:
Source code for root program

Hi there,

Is there a way that I could get the source code for the actual root program file?

I could use gdb and disassemble it to assembler code

but it would be a lot easier with source code.

Thank you for all the hard work done on this!

Can't wait to see the behind-the-scenes to the magic!
[Sharp Aquos Crystal] Codingale:
Right, so I messed up and rebooted after following all the commands, everything passed except I didn't flash SU and I'm in a boot loop with flashing LEDs, is there a way to remove the file that I'm missing or did I properly brick my phone?

---------- Post added at 02:06 PM ---------- Previous post was at 01:22 PM ----------

Could try tewilove's github
[Sharp Aquos Crystal] Dyshko:
Hello.

I did everything from 1st post and it says ok. But then I gone to twrp and wiped all.

Now I stuck on sharp logo and cannot load a system

Still can go to twrp.

Please help!

Is it possible to recover this phone?

306SH

Thanks.
[Sharp Aquos Crystal] qazqwertyuiop6950:
same here, a message pops up saying that there is no root access.
[Sharp Aquos Crystal] Codingale:
Just going to bump this again, can anyone help me? I flashed the stuff, and I'm getting a rapid front LED flash. Is there anyway to fix this, I did not do the steps properly due to no understanding how to flash SU
[Sharp Aquos Crystal] DaemeonZane:
Did you do a backup in TWRP before flashing?

Sent from a potato using Kung-Fu

---------- Post added at 06:06 AM ---------- Previous post was at 06:04 AM ----------

More information is needed to help. What's your firmware version? Did you follow all of the steps correctly? Have you tried more than once?

The more info you can provide about what you did and how you got to where you are now, the easier it will be to troubleshoot your issue.

Sent from a potato using Kung-Fu
[Sharp Aquos Crystal] Dyshko:
Hi DaemeonZane.

Thanks for answer.

What I asking is if someone already successfully rooted his Aquos then he can make a twrp backup and share it.

My problem is that I rooted my phone, but then I wiped my phone in TWRP. I shouldn't do it but I did.

If somebody can send me his TWRP backup I will restore it on my phone. Because I can go to TWRP and can restore TWRP backup.

Thanks.
[Sharp Aquos Crystal] Pushkar.Indora:
FILES MISSING Please HELP

boot.img and recovery.img -> FILES ARE MISSING

---------- Post added at 11:32 PM ---------- Previous post was at 11:31 PM ----------

Can you email me files for boot.img and recovery.img

@ pushkarindora@gmail(.)com
[Sharp Aquos Crystal] Codingale:
Still want some help from anyone to try to get my phone back.

Also [MENTION=7272217]Pushkar.Indora[/MENTION] someone posted a link a few pages ago.
[Sharp Aquos Crystal] TechInMD:
I ran the dd command from terminal emulator on the device and it returns "read error: I/O error" and "ls -s" on the .../by-name/ dir shows that all files contained within are 0 bytes. Even performing "cp * /data/local/tmp/" from the .../by-name/ dir returns "Operation not permitted". This of course is after running temp root.

Sent from my 306SH
[Sharp Aquos Crystal] QuickNET Tech:
Is the one named root.zip version 2 or is 306SH.zip version 2?
[Sharp Aquos Crystal] TechInMD:
root.zip is the v2. My apologies for my previous post. I did not see that there was a newer version of the file. I was able to perform the dd commands using v2. Thanks for all of your work tewilove... I sense that we are very close to owning these devices for good.

Sent from my 306SH
[Sharp Aquos Crystal] QuickNET Tech:
Still receiving I/O error with v2.
[Sharp Aquos Crystal] QuickNET Tech:
Were you able to pull a non-corrupted version of aboot.img? If so could you please upload it?
[Sharp Aquos Crystal] TechInMD:
I was able to dd images of aboot, boot, recovery, and sbl1 without error. I am having issues imaging system because the file size exceeds the amount of space that I have available on the device... and I only have a 2GB sdcard installed. I will attempt to upload the files that I have when I get to my PC.

Also, with v2 root I was able to successfully remount system as rw. I used "mount -o remount,rw /system". This is very good!!!

Not sure if it makes a difference but I was performing these actions using terminal emulator. I will attempt to replicate this with adb when I get to my PC.

Sent from my 306SH

---------- Post added at 02:47 PM ---------- Previous post was at 02:35 PM ----------

I think you still may be using v1 because with v2, at the end of the output it would show:

+ trigger

+ gooood 1

+ 15 partition(s) unprotected

+ 13 MIYABI function(s) patched

I don't see this in your screenshot. Try to rm /data/local/tmp/root and repush v2.

Sent from my 306SH
[Sharp Aquos Crystal] TechInMD:
Here are the images that I was able to create. I zipped them separately due to the file limitations. One thing that was a bit weird is the aboot.img file was 16.8MB and after zipping it the filesize was less than 1MB. Let me know if you have any issues with them.

Concerning the remount of /system as rw: I noticed that after an extended period of time the mount point went back to ro, and I had to restart the device to remount it again.

Another note: When I connected the device to my computer to use adb... and I ran:

adb shell
/data/local/tmp/root

it would run through the output and at the end, the device would restart itself. So instead i ran:

adb shell
cd /data/local/tmp/
./root

The root prompt appeared and the device did not restart. But, I kept getting kicked out of adb and sent back to my normal terminal prompt. I am running Linux Mint 17.1 64bit. Not sure if that makes a difference but I am trying to include as much information as I can.
[Sharp Aquos Crystal] QuickNET Tech:
Actually it was really early for me and I tried it when not fully awake. I ended up moving the file into the folder I use for adb, but forgot to push it to my device. I have successfully pushed the file to my device but am told I do not have permission to execute the file.

EDIT: I get the same error trying to execute it from my phone as well

EDIT 2: Tried to chmod the file, but that was also denied.
[Sharp Aquos Crystal] QuickNET Tech:
Here is a screenshot of what is happening.
[Sharp Aquos Crystal] TechInMD:
Bizarre... I was not at my computer so I downloaded root.zip to my phone, extracted root and did "cp root /data/local/tmp/" and it overwrote the previous version with the new one. Not sure if that retained any of the original permissions associated with the file. Maybe try:

cd /data/local/tmp

and then:

chmod +x root

I am not sure if that will work for you though... but it is worth a shot.
[Sharp Aquos Crystal] QuickNET Tech:
I have deleted and repushed every file and even tried using the old root file. No dice. It appears that I can't execute anything in /data/local/tmp

EDIT: When I try the command

I get an error saying
[Sharp Aquos Crystal] TechInMD:
That is very strange. I never experienced that from the time I originally pushed v1 until now. Maybe somehow the parent dir permissions have changed? Try pushing the files to another writable dir on the device and see if that works.
[Sharp Aquos Crystal] QuickNET Tech:
Still wont work, even in /sdcard/. Permission is denied when both trying to execute and chmod.

[MENTION=2376614]jcase[/MENTION] I hate to bother you, but if you have a second, could you help me with not being able to execute files via adb or a terminal emulator?
[Sharp Aquos Crystal] TechInMD:
I was afraid that my instruction was incorrect. Chmod on android does not support the "u+x" syntax. Try "chmod 555 /data/local/tmp/root" Apologies. I am used to linux.
[Sharp Aquos Crystal] QuickNET Tech:
Long story short, I fixed the problem. However I am unable to remount /system.
[Sharp Aquos Crystal] TechInMD:
Restart your device and try the mount command again. Thats the error that I was getting until I restarted.
[Sharp Aquos Crystal] QuickNET Tech:
Alright, a reboot did the trick, but I am unable to modify anything in /system. Is this the same for you?

[MENTION=6367467]SHM[/MENTION] Did you get a copy of the aboot.img that [MENTION=4596008]TechInMD[/MENTION] uploaded?
[Sharp Aquos Crystal] wangxiantaoye:
i cant get mount work,how do you get?

View attachment 3364465

View attachment 3364466
[Sharp Aquos Crystal] QuickNET Tech:
Run the following commands.

You should now have a hashtag at the end of your new line. Now enter

If you get an error saying that it is a read only filesystem, enter these commands and try again.
[Sharp Aquos Crystal] wangxiantaoye:
ok i got it working,and copy busybox into /system/xbin,im findding su now
[Sharp Aquos Crystal] kaptn_krunch:
Where are the boot and recovery images?
[Sharp Aquos Crystal] katastyle971:
Here : https://drive.google.com/open?id=0BxX6Nk_iw66_TzdWMWppUEcxS0U
[Sharp Aquos Crystal] kaptn_krunch:
Thanks! I'll give it a shot. I hope these files are on the up and up. My model is a 306sh.
[Sharp Aquos Crystal] Napk1n5:
I have been wanting to root my aquos 306sh for a while now, but have not been keeping up with this thread. Can anyone email me what to do at "dakool12341@gmail.com." I would greatly appreciate it if you did please.
[Sharp Aquos Crystal] ayan1115:
did you get any help?
[Sharp Aquos Crystal] THESuperUser:
S7202

Need a way to exploit temp root since this is the only way we can get any system cooperation out of this build. This phone would be awesome with a permanent root given the hardware. I do believe this phone is worth the effort, and I've been rooting since the ZTE Warp (nightmare). My phone is available for testing provided there is a way to back up current system for restore. Boost Variant. Also we should keep in mind the issues with the phone functioning as a phone after reboot. Possibly a kernal over write from past phones. Boost IPN should be fairly universal for the most part if I'm not mistaken.
[Sharp Aquos Crystal] hippocrits:
Does this still work?

I'm curious if anybody has tried this recently, does this still work?
[Sharp Aquos Crystal] baii:
any 1 have a twrp backup by anychance?
[Sharp Aquos Crystal] srmd:
thanks ......for all
[Sharp Aquos Crystal] z720:
try on 404sh

return...

shell@SG404SH:/data/local/tmp $ ./root

+ prepare

kconfig = 00000003

kflag = 00000000

+ spray

****************

- fixed

:)
[Sharp Aquos Crystal] agentx712:
comprehensive instrutions for 306SH

Is there a place with the latest info on how to root 306SH? I mean the latest instructions?
[Sharp Aquos Crystal] TheSmokingMan:
Does anyone here have the 232 update.zip?

It's been quite a road here.

I saw the SA300 files, but that is what I am currently stuck on.
[Sharp Aquos Crystal] thedanh:
Code for root sharp 403sh??

Please,help
[Sharp Aquos Crystal] thedanh:
Error: Could not kernel read for now

Kernel_helper: could not find filp

Kode: could not kernel write

Kernel_help:could not write kode

.....

Thedanhhongvan@gmail.com
[Sharp Aquos Crystal] irsuv:
would someone be able to reuplopad the files?
[Sharp Aquos Crystal] turkbot:
https://mega.nz/#!H45wAYBY!0x0NlUeRtY4tgGxlfuI-fvcR0twrGfClkSyhSjYk-AU
[Sharp Aquos Crystal] irsuv:
Sorry I was looking for the recovery and boot files