yashsingh1/xdaforums huggingface dataset:
[G4 General] dboechat:
Why can't we root Marshmallow using this method? Is it because of the locked bootloader or the OS itself?
[G4 General] Lekerstein:
Thinking about it, it probably worked because much of the system partition is empty space, especially the back end of it. So when you forcefully restart your phone, you have a complete image of your system, but the partition is not complete (hence the file size not being big enough). The same holds true flashing back to your phone. When you flash it back to your phone, you wait the full time. You also tell the DD command to flash a full image. However, if the image was cut short when you first extracted, I am pretty sure DD will just fill in the excess empty space with more empty space, thereby no problems. Same if you cut short the flashing of the rooted image; DD will not have completed, but the only thing remaining is empty space, so no problems. (I say empty space because each partition is allocated a certain amount of space; when we are backing up and flashing the images in this thread, we are working on the entire partition, even the allocated but empty space).

Hopefully this helps explain some of how this all works. And hopefully I'm not wrong. [emoji1]

---------- Post added at 06:09 PM ---------- Previous post was at 06:06 PM ----------

See the quote below, located just a few posts above your question.
[G4 General] Velcorn:
Thank for that explanation, that might actually be what happened. Then again, I waited a fair amount of time after the # appeared and after I tried the LEAVE command without it working. It might've had sufficient time to extract the complete system.img so manually rebooting didn't do any harm :P

Next time I'll be more careful, nonetheless. Don't want to mess up my system ^^
[G4 General] new2city:
You are not alone in this, I experienced this in my last root a month ago, but no one else did, or no one answered me. I took the risk anyway and luckily it went OK. Luckily, someone answered you and now I know what to do.

Great thing about following threads like this in XDA. The answer will come sooner or later..
[G4 General] vangoogle:
worked first go no sweat!! Thanx to everyone involved with creating this!!
[G4 General] Andypandiiee:
Is it possible for someone to post a video tutorial... I'm nervous to root it and potentially brick it :\
[G4 General] QuickNET Tech:
HERE you go! Done by xda tv on YouTube.
[G4 General] player911:
This is kind of a basic question but I am unable to copy the backup system.img off my LG X8.3 tablet to my PC. I keep getting an immediate "copy failed". I am unable to move it to another folder either. I've rooted my G4 and able to obviously back up the system image on the tablet itself. I am trying to do a root injection but I need the image.

I can probably do a WiFi Explorer or FileSharing, but I am leery if the device bootloops. The device is 16gb too with only 8.5gb free.

Am I being stupid and missing something?
[G4 General] smason:
From your PC shell:

$ adb pull /storage/sdcard0/system.img .
[G4 General] tribullet:
From what I gather, I can use this method to root my Verizon version 10b phone. But if I wanted to go back to stock, I wouldn't be able to do so because there is only a kdz for version 11a. Is this accurate?

On a sort of separate note, I have an OTA available, which I keep rejecting. Is it possible to see which version the OTA is going to update me to? I don't want to go all the way to 12a with the whole wifi notification issue, but wouldn't mind updating to 11a since it see seems like there is more info rooting that version.
[G4 General] DsturbD:
this is stock, it just has root, install the SuperSU app and remove root that way

as for the ota's, in my experience with other phones you only get the next version up from what you have, dont know if any carrier skips versions. in other words, you only go from 1.0 to 1.1 to 1.2 not 1.0 directly to 1.2...but i could be wrong
[G4 General] jesssiii:
Sure wish I could have your 10B instead of my 11A!
[G4 General] tribullet:
Great thanks for the reply. Sorry, I meant go back to unrooted status, not stock. That sounds easy enough using SuperSU; the last device I rooted couldnt be unrooted that way so this is good news. If i did want to flash to unroot, it sounds like I wouldn't actually need a kdz either, and that the backed up image is all that is needed. I think I'll take the OTA and hope it doesn't skip all the updates, thanks again!

---------- Post added at 08:39 PM ---------- Previous post was at 08:19 PM ----------

Yeah i was planning on updating, but given my touch screen issues aren't too bad and that the updates weren't significant improvements (that I know of), i think i may just use this method to inject root onto my 10b image. I don't really plan to take advantage of an unlocked bootloader, if it comes, but I guess it's nice to have the option.
[G4 General] harosha:
LG-H815 v10e worked!! Thanks
[G4 General] tribullet:
Worked on my Verizon 10B! Have only ever done one click root options with my other devices and don't really understand the commands used, so this seemed daunting; took me forever to read through all the comments and everything, but now I at least understand from a high level what all the steps accomplish and the actual process wasn't too bad at all, thanks!
[G4 General] player911:
I am getting permissions denied here still.

I have a little more freedom when I am connected via Send_Command diag port. What I tried to do was:

cp /data/media/0/system.img /storage/external_SD/system.img

That "seems" to work, as it takes a bit of time before my # comes back and I can verify IT does copy it to /storage/external_SD/... but it never actually makes it to my microSD. Also I have created a file on there labeled "externalsd.txt" but am unable to see it when I list the contents of that folder.

Is storage/external_SD just a symlink? How would I find the ACTUAL location of the microSD?

I think I am close, but new to this. This, again, is the LG G Tab X8.3. Here is the forum if it would be easier to contribute there:

http://xdaforums.com/lg-g-pad-83/general/root-verizon-x8-3-vk815-t3229562
[G4 General] smason:
Please, show a screen-shoot about that.

On send_command shell you are connect to your device in a initial boot state. Look the following output of my G4 (your tablet should be less or more the same output):

Author : blog.lvu.kr

SPECIAL COMMAND : ENTER, LEAVE

#mount

rootfs / rootfs rw 0 0

tmpfs /dev tmpfs rw,seclabel,nosuid,relatime,size=1437392k,nr_inodes=359348,mode=755 0 0

devpts /dev/pts devpts rw,seclabel,relatime,mode=600 0 0

proc /proc proc rw,relatime 0 0

sysfs /sys sysfs rw,seclabel,relatime 0 0

selinuxfs /sys/fs/selinux selinuxfs rw,relatime 0 0

debugfs /sys/kernel/debug debugfs rw,relatime 0 0

/dev/block/bootdevice/by-name/system /system ext4 ro,seclabel,noatime,data=ordered 0 0

/dev/block/bootdevice/by-name/cache /cache ext4 rw,seclabel,nosuid,nodev,noatime,noauto_da_alloc,errors=continue,data=ordered 0 0

/dev/block/bootdevice/by-name/userdata /data ext4 rw,seclabel,nosuid,nodev,noatime,noauto_da_alloc,resuid=1000,errors=continue,data=ordered 0 0

/dev/block/bootdevice/by-name/persist /persist ext4 ro,seclabel,nosuid,nodev,relatime,data=ordered 0 0

#

#/system/bin/toolbox ls -la /mnt

#/system/bin/toolbox ls -la /system/bin

drwx--x--x root root 2015-10-03 00:00 .ext

-rwxr-xr-x root shell 39000 2015-08-17 09:20 ATFWD-daemon

-rwxr-xr-x root shell 65400 2015-08-17 09:20 BCM4339_003.001.009.0108.0501_LGE_P1-EU_FM_ORC.hcd

-rwxr-xr-x root shell 9776 2015-08-17 09:20 PktRspTest

[...]

#

#LEAVE

So this is the wrong way, because the device is isolated! The right way is: using "adb".

Can you supply the output of "#/system/bin/toolbox ls -la /data/media/0/" ?

Can you supply some screen-shot of the PC shell?
[G4 General] MattCorr:
Looks promising, Ill try this tomorrow on my H812 10e on Bell and post back here :P
[G4 General] player911:
Yea I am finding that out. I can't access the microSD using send_command. Nor can we copy the system.img off using adb or MTP. I am kind of at a loss.

C:\LG\Root>adb devices
List of devices attached
VK815dad74945 device

C:\LG\Root>adb pull /storage/sdcard0/system.img .
failed to copy '/storage/sdcard0/system.img' to './system.img': Permission denied

shell@altev2:/ $ ls
ls
acct
cache
charger
config
d
data
default.prop
dev
etc
file_contexts
firmware
fota.fstab
fstab.altev2
init
init.altev2.invmpu.rc
init.altev2.rc
init.altev2_core.rc
init.altev2_product.rc
init.betaal.crash.sh
init.betaal_core.rc
init.class_main.sh
init.environ.rc
init.lge.bt_vendor.rc
init.lge.cmm.usb.sh
init.lge.early.rc
init.lge.log.rc
init.lge.modem_log.rc
init.lge.power.rc
init.lge.rc
init.lge.svelte.rc
init.lge.usb.rc
init.lge.usb.sh
init.lge.vzw.usb.sh
init.mdm.sh
init.qcom.class_core.sh
init.qcom.early_boot.sh
init.qcom.factory.sh
init.qcom.rc
init.qcom.sh
init.qcom.ssr.sh
init.qcom.syspart_fixup.sh
init.rc
init.recovery.altev2.rc
init.target.rc
init.trace.rc
init.usb.rc
init.zygote32.rc
init.zygote64_32.rc
lgdms.fota.rc
lgdms.fota_update.rc
mnt
persist
persist-lg
pkg
proc
property_contexts
recovery.fstab
res
root
sbin
sdcard
seapp_contexts
selinux_version
sepolicy
service_contexts
set_emmc_size.sh
smpl_boot
sns
storage
sys
system
tombstones
ueventd.altev2.rc
ueventd.rc
vendor
vzw

shell@altev2:/storage/sdcard0 $ ls
ls
Alarms
Android
Audible
DCIM
Download
LGBackup
Movies
Music
Notifications
Pictures
Podcasts
QuicksetLite Setup
Ringtones
amazonmp3
system.img
tmp
shell@altev2:/storage/sdcard0 $ cp /storage/sdcard0/system.img /storage/external_SD/system.img
p /storage/sdcard0/system.img /storage/external_SD/system.img <
cp: /storage/sdcard0/system.img: Permission denied
1|shell@altev2:/storage/sdcard0 $

It isn't just me, but others as well. I think if we can get the damn image off the device we'd be in biznassssssss. Hey and thanks for your help, smason.
[G4 General] smason:
Try this on Send_Command shell:

Author : blog.lvu.kr
SPECIAL COMMAND : ENTER, LEAVE

#/system/bin/toolbox mv /data/media/0/system.img /data/media/0/Download
#/system/bin/toolbox chown media_rw:media_rw /data/media/0/Download/system.img
#/system/bin/toolbox chmod 664 /data/media/0/Download/system.img
#/system/bin/toolbox chcon "u:object_r:media_rw_data_file:s0" /data/media/0/Download/system.img
#/system/bin/toolbox ls -laZ /data/media/0/Download/system.img
-rw-rw-r-- media_rw media_rw u:object_r:media_rw_data_file:s0 system.img
#
#LEAVE

and after the reboot try:

adb pull /storage/sdcard0/Download/system.img .
[G4 General] player911:
I will try. I left my tablet at home so I will try again later. However, I have tried changing the permissions using chmod but I get permission issues. I have NOT tried moving it to a new folder and trying there.

At little history on this tablet and the root process. I bought the Tablet paired with the LG G4. We were able to use the original send_command root method to push SuperSU, busybox, and root.sh, then run the script to root. Recently we got an OTA (a week ago) that disabled the old method. So the download mode environment was recently updated to block root attempts. I am curious if there are further advancements on the Tablet and if this paves the future for our LG G4s.

UPDATE

#mv /data/media/0/system.img /data/media/0/Download
#chown media_rw:media_rw /data/media/0/Download/system.img
#chmod 664 /data/media/0/Download/system.img
#chcon "u:object_r:media_rw_data_file:s0" /data/media/0/Download/system.img
#ls -laZ /data/media/0/Download/system.img
-rw------- media_rw media_rw u:object_r:media_rw_data_file:s0 system.img
#

Holy crap. That worked! Thanks smanon! That was no trouble at all hahaha.

I now have root on my LG X8.3 Tab with the latest OTA!
[G4 General] skyline72:
Hi guys,

Need some help here.

I followed all the steps already but my phone is in a booting loop I guess.

My model is H815 SEA V10D.

Any help please.
[G4 General] new2city:
Reflash your old system.IMG. and start again
[G4 General] MattCorr:
Rooted my LG G4 H812 10e

Well thanks to everyone who contributed to this, I was able to root my Canadian LG G4 in about 20min. Very quick and easy thanks again!
[G4 General] skyline72:
Hi guys,

Thanks for the instructions.

I gotten my root for H815 SEA V10D.

This is the rooted image.

https://docs.google.com/uc?export=download&confirm=53Sy&id=0Bys-r1VZHnQGVEdtRmhpWTRrWTA
[G4 General] linanzhe:
It's good
[G4 General] Andypandiiee:
Is it okay to update SU binary? Cheers.
[G4 General] jannmedia:
It doesnt work, showing this message" cannot move ‘system.img

http://postimg.org/image/sk5gyx1tz/full/
[G4 General] player911:
Your ubuntu looks mad.

I moved everything to the desktop, and added sudo to each string. Mine didnt like the sudo -i
[G4 General] 2nd Sky:
thx for simple guide! next time i will try it also to root the img with ubuntu :)

with rooted img its really easy!

would be nice to add commands directly instead of linking 2 original thread and make a better list of rooted img as in orig thread

ok would not be nice 2 ignore then orig thread ... but a list of all rooted img would be great....
[G4 General] new2city:
Sure. You can update su binaries
[G4 General] darekesp:
Hello it's possible to root 6.0 on locked bootloader ?? Step by step for new user LG ?? Before I use SONY there root was easy.
[G4 General] Underworled:
Atm in 6.0 we only can root with twrp and open boot
[G4 General] anderbytes:
Worked flawlessly in my H815P (Brazil).

Thank you so much!
[G4 General] 69Term69inator69:
pulled,bad link VS98612A

FONT="Courier New"]Ok Let's start piling up those system imgs for noobs. There are just too many fake complains here related to human error. This would help them. Move to step 3 if you have your rootedsystem.img.[/FONT]

Hi. Thanks for setting all this up. When I click on the Verizon link I get an error of "pulled,bad link VS98612A " . Is there a different link?

Mitch
[G4 General] ismoore:
I too had this problem. I looked high and low and tried various driver packages available online, none of them worked. Here's what did:

(Note that I'm using Windows 10 and the prompts when plugging your phone into your PC display differently)

1. Uninstall all LG drivers from Add/Remove Programs in Control Panel

2. Reboot your PC

3. Plug your phone into your PC using the USB Cable

4. Immediatly after plugging in your phone, you should be presented with a notification on the bottom right hand corner of your screen asking you what happens with "CD Drive Verizon Mobile" Click this quickly!! If you don't it will change from CD Drive mode to USB mode and you'll have to unplug and do again.

5. After you click the notification, it will give you options of what you can do next. Click the option "Open Folder to view files"

6. Once File Explorer opens up, go into the "tools" folder.

7. Once inside the tools folders, you should see an executable file that starts with LG_VZW. Mine is named LG_VZW_United_WHGL_v2.20.0.msi. Double click it and follow the prompts. This will install drivers specific to your phone.

8. When finished, unplug your phone from the PC and reboot windows.

9. Now begin the procedure as stated in the OP.

Hope this helps. Good luck!
[G4 General] eplgr:
Worked flawlessly on my H815AR. I just love you. No one cares about that model and the few people talking about it think it's just not possible to do it right now.

Oh, and this was also my very first time rooting a phone.

In case someone was wondering, I used the commands aimed to the H815 model.

Again, thank you.
[G4 General] dankbud42o:
I have a Verizon VS98610B and I'm stuck on Step 1. On step 11 of step 1 it NEVER goes back to #. Ive tried multiple times on two different PC's and different USB ports on both machines. Ive installed the Verizon driver and it recognized the phone properly. I run the port command, get the port #, put the send command to get into download mode then run

dd if=/dev/block/mmcblk0 bs=8192 skip=65536 count=548352 of=/data/media/0/system.img

but it never goes back to #. Ive waiting over an hour once, 45 min another, 20 min a few other times. Some people are saying it only takes 30 seconds to 5 minutes. What am I doing wrong? I've wasted my whole day being stuck on step 1 and its driving me nuts.
[G4 General] kmcphee:
First put in download. Must be off then hold volume up thrn plug in usb cable thrn it will go into download hold until you see the download then release. Then run yor commands. Not responsible for any bricks
[G4 General] dankbud42o:
Thank your for clarifying download mode.
[G4 General] Sea-Wolf:
My thanks too, this puzzled me for a little bit. Just did the process on V10h-AUS and it worked flawlessly.

I'm guessing when Marshmallow comes along this process will work for it too, though we'll need a new inject_root.zip with updated files.
[G4 General] laperro:
Hi,

I'm trying to do this with a GPad 10.1", because I installed Verizon's last OTA update, which evidently breaks all the current root methods, thought I'd try it doing this. Yeah I know, wrong device, wrong forum, but one of the devs who's been helping me in PMs suggested I post something to the original root injection (this) thread. I don't necessarily need device specific help, for the dd parameters and all, I've got all that, just need some thoughts about what might be hanging this up. Making a backup system image, copying it to the computer, rooting it, and pushing the rooted image back should still be possible, regardless of model, the problem is that dd:

dd if=/dev/block/mmcblk0 bs=8192 skip=40960 count=351232 of=/data/media/0/system.img

does nothing, just goes straight back to # same as the root methods I've tried after the OTA (this one from here used to work), now if I do:

adb.exe push busybox /data/local/tmp/ && adb.exe push lg_root.sh /data/local/tmp && adb.exe push UPDATE-SuperSU-v2.46.zip /data/local/tmp

...and then:

Send_Command.exe //./COM5
#sh /data/local/tmp/lg_root.sh dummy 1 /data/local/tmp/UPDATE-SuperSU-v2.46.zip /data/local/tmp/busybox
#

...it goes immediately back to the # prompt too, I can list directories (ls) no problem, so Send_Command is working, there's absolutely a data connection, and if I list the contents of /data/local/tmp, the SuperSU, busybox and lg_root.sh are all there, so 'adb push' is working just fine, it simply won't run the shell script or copy the system image, it's like sh just totally ignores both the dd command and the root script, but runs other commands without a problem, I tried copying the image to /data/media/0/Download/system.img, in case it needed rw permission, but still nothing. Not to mention, just to be sure, I ran through the above root, start to finish, at least a dozen times. I've tried the above dd command a bunch of times too, same result. The drivers are all installed correctly, running the reg query (ports.bat) gives me the correct data port, I, at this point, am stumped, looking for some fresh ideas, because I'm fresh out.

Just posting this here, obviously, because this thread isn't in the 10.1 forum, I could link to it, but I thought the odds that someone in this thread might have some insight, into making a system image copy, were a lot better. That's really the only issue, once I have the image, rooting it, and pushing it back shouldn't be a problem. Just can't get it to make the copy....

The device is :VK70023A B14.LGE.VK700.0 LG-Gpad 10.1" VK700.0 Lollipop 5.0.2, if no one has a problem with my posting this here, (hopefully not anyway) and anyone's got any ideas, or needs more detail, I'll put it up, screenshots, or whatever.

Thanks
[G4 General] cesar2k:
Hey, i am wondering if you are able to install/ flash a custom recovery after root with this method?

I have the 815 variant but I don't want use the official unlock option as I want to keep my warranty!;)
[G4 General] smason:
OK!

Please, Can you supply the output of these two different shells environment?

1) From adb shell show the output of "/system/bin/toolbox mount" command.

2) From send_command shell show the output of "/system/bin/toolbox mount" command.

Many thanks in advance!
[G4 General] dankbud42o:
So after I wasted my whole day because I didnt put my device in Download mode I went out for the night and the damn thing updated to 11A in my pocket! Wasn't too happy. But Im now fully VS98611A rooted thanks to this thread! Thank you!
[G4 General] skyline72:
I don't find a need to flash custom recovery after rooting as of now.
[G4 General] dspeier:
Que bueno que te hayas animado y confirmes que funciona en el 815AR. Uno de estos días lo voy a hacer y cualquier duda te voy a estar contactando. Saludos

Enviado desde mi LG-H815 mediante Tapatalk
[G4 General] prot-:
I think the title needs to be changed to say ANY Loillipop LG G4 Variant as it is missleading for Marshmallow users.
[G4 General] Medizinmann:
No, not possible - if it would be that easy nobody would discuss unofficial bootloader unlock this much anymore - you need an unlocked bootloader to install custom recovery.

Greetings

Medizinmann
[G4 General] elkolodj:
Thanks, very clear explanation.

I have my LG-815 V10d-TWN-XX rooted thanks to your guide.

I found a rootedsystem for my variant in this post:

http://xdaforums.com/g4/general/h815-v10d-oct-29-2015-software-version-t3238852/page4
[G4 General] Forum#:
Hi,

used this method to root my H815, worked nicelely.

Now i'd like to update via OTA to M6.0 but cant take update due to root. Can i re inject the non rooted img i kept using this method? Or can i just uncheck "activate root" using SuperSu app?

Thx for your advices.

F.
[G4 General] kevtrysmoddin:
It should work but u do know u can use lgup to flash the 6.0 kdz
[G4 General] boxa72:
Thx heaps for this I gained root using this method this afternoon and it couldn't be easier.
[G4 General] 7sen:
I will get my new h818 after one hour sure I will try this ?
[G4 General] nothingfacey:
sorry if i write something stu...id, so if i root my device G4 H815P like you said (image), can i install the app TWRP?? and then install the roms Genisys or cyanogenmod 13 or HD 7.7??? or its necessary to unlock bootloader firts.... something we cant...
[G4 General] boxa72:
You definitely have to unlock ur bootloader to flash roms and if ur stuck with a model like mine ur SOL!
[G4 General] ProInvestor:
Thank You.

I have tried to root my phone multiple times. Most with the low effort root and my phone was bricked several times. With your help, I was able to achieve root(and as well get ubuntu VM) Thank you! :D:D:D:D:D:D:D:)

you are the best. I even had the ota update lmao! Thank you again :)
[G4 General] boxa72:
Yeah it's easily the best method as it pretty much can't go wrong coz ur using ur own image but if u write a bad command and flash it to some random part of ur emmc ur f#cked lol not that that would be funny
[G4 General] Sea-Wolf:
Yeah, this is the kind of situation where you want to be triple checking everything that's getting entered at the command line.
[G4 General] Adwaree:
Hi im new here and i just finished flashing the root and when i rebooted i got the "android is upgrading" message. Did i do something wrong or is this supposed to happen? Thanks:)
[G4 General] ivangundampc:
I am trying to use this method to get the root access on V10. (I know that this is a thread on G4 forum, but i really don't what mistakes i have make. I really need yours help, please, thank you!!!)

The problem is, no matter what command i sent to the phone in download mode (even with "ls"), it just showed "FAIL" in the console. I can confirm that the driver has been installed properly and it has showed the port number of the "DIAG" in ports.bat.

D:\V10\LG_Root>Send_Command.exe \\.\COM8
Author : blog.lvu.kr
SPECIAL COMMAND : ENTER, LEAVE

#dd if=/dev/block/mmcblk0p51 of=/data/media/0/system.img
FAIL
#ls
FAIL
#
[G4 General] wadken1:
This is totally normal but if you left your phone running you'll know that by now because it will have completed upgrading and fished off the boot sequence.
[G4 General] Adwaree:
Thanks man I have it up and running with xposed and some other root apps. Thanks!