yashsingh1/xdaforums huggingface dataset:
[Droid Turbo 2 General] Rhydenallnight:
Droid turbo 2

After spending countless hours trying to unlock my bootloader to root my phone I'm at an impasse I've been told the Verizon and at&t models arnt able to be unlocked I will keep trying to get around this to root and install custom roms if anyone has any tips
[Droid Turbo 2 General] mattjhsn:
Crack the case, hook up some leads (microscope) and dump the memory for the boot loader is the only thing I can think of. Don't know if the that is even possible with that memory. It's probably integrated with other stuff.

Update: Oh yeah, it's encrypted. Guess that won't work.
[Droid Turbo 2 General] windraver:
Found something. Does anyone know if this vulnerability exists on the Droid Turbo 2?

CVE-2015-1805

http://www.computerworld.com/articl...itical-android-root-vulnerability-itbwcw.html

There is a proof of concept out there. Has anyone tried it?

https://github.com/dosomder/iovyroot
[Droid Turbo 2 General] windraver:
Further Research:

https://source.android.com/security/advisory/2016-03-18.html

It is patched in 3.18+ which is Marshmallow according to the chart below. So this means Lollipop users might be able to root if Moto didn't patch it prior to release. I unfortunately had to replace my phone due to some screen problems(vertical pink lines on my screen) so the replacement device put me on 6.0 instead of Lollipop (I refused to update holding out for root). Maybe someone can get lucky.

Quote sourced: http://android.stackexchange.com/questions/51651/which-android-runs-which-linux-kernel
[Droid Turbo 2 General] Rhydenallnight:
Awesome

Maybe if we can revert back before the security patch my security level patch is after the dates mentioned Sally :(
[Droid Turbo 2 General] sergeikaspd:
I have a XT1585 with 5.1 without any updates (i think so).

The script says "Unsupported device", what is logical. In this theme are talking about sony's devices mostly.

And method requires a specific "kernel adresses" or something like that, I'm not complitly understand.

Maybe someone can contact to zxz0O0 to ask a help with this?

I'm not a developer, but I can try some things at future.
[Droid Turbo 2 General] bluebloomers:
http://www.zdnet.com/article/quadrooter-security-flaws-affect-over-900-million-android-phones/

I used Check Point's app and it said the turbo 2 was susceptible to all four vulnerabilities (CVE-2016-2059, CVE-2016-2504, CVE-2016-2503, CVE-2016-5340)

Using version 24.14.16
[Droid Turbo 2 General] brannonwj:
I just got a message from Hacking Tech this morning that all phones with Marshmallow and down were vulnerable to "Quadrooter" they provided a link to an app that checks your phone's vulnerability so I install on my up to date DT2 and guess what, "it's vulnerable"

Here is a link to an article on Quadrooter http://android.stackexchange.com/qu...to-affect-over-900-million-of-android-devices

Surely this can be used to gain root access for those of us who want it legitimately, not just hackers.
[Droid Turbo 2 General] QuintonS:
I can confirm, quadroot vulnerability scanning app shows my Turbo 2 as vulnerable.
[Droid Turbo 2 General] sergeikaspd:
Me too.
[Droid Turbo 2 General] windraver:
Just saw the Quadrooter issue as well. Now we just need to figure out how to implement it. :)
[Droid Turbo 2 General] windraver:
Has anyone seen any proof of concepts for the quadrooter exploit? Given the widespread "impact", I'm sure other devices owners are all trying to implement the exploit for root access as well.
[Droid Turbo 2 General] gillim74:
Quadroot shows mine vulnerable to all 4 and I just got the phone from Verizon today
[Droid Turbo 2 General] skellyxx:
Soooo..... BUMP
[Droid Turbo 2 General] Takieddine:
CAN ANY ONE translait the method i cant inderstand the chinees language pls :crying: sorry my english is bad
[Droid Turbo 2 General] acmobleer:
Assuming fake but gotta check.

I'm assuming this is not real our working but can anyone confirm our deny this method??

"androidinfotech.com/2016/05/motorola-droid-turbo-2-verizon-60_23.html?m=1[/url]"
[Droid Turbo 2 General] Firsto:
So far, no new info about root on XT1585?
[Droid Turbo 2 General] choyang:
Does this phone have InFocus M810 or Nextbit Robin?

if so, root may be possible.
[Droid Turbo 2 General] TsPcs:
modchip root

im thinking that the only way where going to get root is with some sort of mod chip like the kind they put in video game systems to bypass the locks of cores this would have to be done by someone with extensive Motorola hardware knowledge but on the plus side anyone who makes such a chip will make cash on selling them
[Droid Turbo 2 General] fivesthefox:
Some one should buy one, and compare it to the normal version,

Or maybe compare it to the Verizon one? ;)
[Droid Turbo 2 General] amateurhack:
For what it's worth, I still think that someone will find a root solution for this phone someday, even though we haven't had anyone with the skills pipe up and go after it yet. Everyone wants to get paid for root these days, and i don't blame them.

Be that as it may, I saw this article today and thought it erupted be a good addition to this thread.

http://arstechnica.com/security/201...tflips-to-root-android-phones-is-now-a-thing/

---------- Post added at 07:02 AM ---------- Previous post was at 06:36 AM ----------

More info. I am willing to download and try the test app to see if we have any vulnerability.

https://www.vusec.net/projects/drammer/#app
[Droid Turbo 2 General] amateurhack:
I did load up the app, and attempted to run it a few times last night. I don't know how to interpret the results, and a couple times it just seemed to run indefinitely, so I closed it before it finished. If I can figure out anything, I'll post again.
[Droid Turbo 2 General] QuintonS:
More news on specific Android exploit....

I really hope somebody can figure this out. The post didn't specify exactly what was done but it seems these guys have the code to do it, but they're doing the semi-ethical thing and giving it to Google instead...

http://arstechnica.com/security/201...serious-linux-escalation-bug-ever/?comments=1
[Droid Turbo 2 General] amateurhack:
I was just going to post that. It's actually a different exploit than the one I posted last night, and this one says it's easy to do and should work on _EVERY_ Android phone. Seems more promising.
[Droid Turbo 2 General] pvcoco:
I was thinking that too, but with the bootloader still locked and the sys partition under the microscope, what is the risk of bricking? If anyone is interested anyway, there is an exploit on GitHub. Can't post the link but if you Google "dirty cow android github", it will be the first result.
[Droid Turbo 2 General] amateurhack:
Well you can't day there's ever no risk of bricking a device no matter what you do, but I would think it's pretty minimal. There have been situations in the past where such an exploit led to losing root on every reboot. I don't know enough to know if that would happen in this case. I probably won't be able to investigate this for a while, so I will go take a look, download everything, and make sure my phone doesn't update for the time being. If we have a working exploit, it will be a lot easier to get a dev to put the pieces together.

---------- Post added at 05:36 PM ---------- Previous post was at 05:12 PM ----------

Here's an xda thread where they are working on the exploit. Looks like as it stands right now you would lose root on a reboot, and some devices may reboot automatically once they detect the changed system. We'll have to be patient to see if this can be developed into a usable exploit. Then maybe the issues of adapting it to our phones can be addressed.

http://xdaforums.com/general/security/dirty-cow-t3484879/page5
[Droid Turbo 2 General] romma1:
This would be fantastic. If they come up with simple enough steps, I'll gladly be a canary in the coal mine.
[Droid Turbo 2 General] Stuphologist:
I only bought a Motorola again because my wife threatened to limit me to flip phones after I smashed my last one, and this was the most damage resistant one I could find. I knew going in that Motorola has this locked-down (asshat) philosophy, but it's still really annoying. Please somebody figures this out! This is the best shot that's come up yet.
[Droid Turbo 2 General] ChazzMatt:
It's not Motorola, it's Verizon. Of the 2015 Motorola Kinzie phones, the sibling Moto X Force is bootloader unlocked on request for free via Motorola.

Same situation with the predecessor 2014 Motorola Quark: Droid Turbo XT1254 (Verizon) and the siblings XT1250 (identical in every way to the XT1254, including FCC ID and sold by at least a dozen U.S. regional CDMA/LTE carriers) -- as well as the "international" XT1225 (which ironically has all the U.S. AT&T LTE bands and more). Two of those three phones in the Quark series have easily unlocked bootloader for free via Motorola. Guess which one is NOT? The Verizon one.

I own three of the XT1225, running two of them on AT&T.
[Droid Turbo 2 General] amateurhack:
I had some time to look through all of the relevant development threads, both on xda as well as github, and it is clear that any successful use of this exploit will require an unlocked bootloader to be a permanent root solution. As far as I can tell, were no better off now than we were before as the bootloader situation is still our biggest obstacle to root. SELinux is also a major hurdle right now, even with an unlocked bootloader.

Looks to me like this is going to take a long time.
[Droid Turbo 2 General] bigv5150:
Unlocked bootloader would be great but in the end not really yield much other than permanent root. I still have my Maxx which I unlocked the bootloader and only one 6.0.1 ROM built for it. I also dont see 7.0 ever getting ported. I would suspect as much for the turbo 2 just not enough interest with these phones.
[Droid Turbo 2 General] amateurhack:
Yeah, if you have to do the whole process every time your device reboots, and SELinux reboots your phone every time you root it, then what's the point?
[Droid Turbo 2 General] GroovyGeek:
All I want is permanent root. I never install custom ROMs. If I had root I would do Xposed, Greenify, TiBu, and AdAway. Don't need more than that.
[Droid Turbo 2 General] lonixlon:
Just read about dirtyCOW apparently it can be used to root any Android device

https://en.m.wikipedia.org/wiki/Dirty_COW
[Droid Turbo 2 General] ChazzMatt:
The Moto Maxx/Moto Turbo XT1225, sibling Quark to Droid Turbo XT1254 already has Nougat 7.X custom ROM. Also runs on the Droid Turbo XT1254. And more are coming.

Unless you mean the 2013 Droid Maxx? See, Motorola used "Turbo" and "Maxx" names on several phones.

---------- Post added at 06:23 AM ---------- Previous post was at 06:21 AM ----------

You need unlocked bootloader for permanent root on these Motorola devices. Was that way also for Quark (Droid Turbo XT1254, U.S. Moto Maxx XT1250, Moto Turbo XT1225, Moto Maxx XT1225).
[Droid Turbo 2 General] bigv5150:
Hey you can stfu as well
[Droid Turbo 2 General] amateurhack:
Looks like the latest security updates have patched Dirty Cow. If you've installed that latest update, that exploit is probably not going to work for you...not that it was all that hopeful anyway.
[Droid Turbo 2 General] Smileymike23:
I've been digging on this subject forever now, and I feel I'm no closer than when I began. Even through one click root and diving headfirst through all baseline systems I.e bootloader,recovery mode, et etc. But if anything is found I'm all ears!
[Droid Turbo 2 General] amateurhack:
I'm hoping that the guys working on dirty cow will figure out a way to pull the bootloader image. If they can do that, then there is hope that it could be modified and flashed, and then we could get root. It's a long shot, though. I think it's more likely that the tool Moto and VZW use will be leaked at some point like it was for the original turbo. Either way, you just have to wait and see...or buy a Pixel.
[Droid Turbo 2 General] amateurhack:
One step closer.

http://www.redtile.io/security/galaxy/
[Droid Turbo 2 General] TheBadBen:
Good news folks. I traded in my DT2 for a Pixel. That should pretty much guarantee a root method for you within a few days!
[Droid Turbo 2 General] amateurhack:
...if we trade in our DT2s for Pixels, too.

:)
[Droid Turbo 2 General] amateurhack:
[MENTION=2465998]TheBadBen[/MENTION] Any news?

I continue to follow the Dirty Cow threads, and there is slow but hopeful progress there. I still would not hold my breath. If we ever get a root method out of it, it will be a while. But, I'm still holding off on that November security update. Maybe we'll get lucky.
[Droid Turbo 2 General] kcle284:
I found these any info?

kidapso.com how-to-unlock-motorola-droid-turbo-2-bootloader

---------- Post added at 02:26 AM ---------- Previous post was at 02:23 AM ----------

Also unlock-bootloaders.site 2016/12/motorola-droid-turbo-2-7713
[Droid Turbo 2 General] amateurhack:
Give it a try and let's know how it works. There have been similar posts but none have proved useful.
[Droid Turbo 2 General] kcle284:
Just being hopefully
[Droid Turbo 2 General] acmobleer:
they are just clickbait links, the complete an offer to download your file type.
[Droid Turbo 2 General] Az Biker:
* * * Thread Cleaned * * *

I know most of the ridiculousness just cleaned is older, but in the event the temptation comes back, let's keep the comments RESPECTFUL and ON-TOPIC: about the Droid Turbo 2.
[Droid Turbo 2 General] amateurhack:
Could we also get the following post removed, and maybe clean up the related thread. FRP does not equal root.
[Droid Turbo 2 General] Techn0Luigi:
I refuse to dissapoint myself before trying this. Could we have some video/image proof?
[Droid Turbo 2 General] amateurhack:
Please send a link to me via PM. I'll have a look at it.

He must signed up, so he can't post links or attachments yet. Of he sends me a link, and it looks to check out, I'll post it here.

---------- Post added at 07:09 AM ---------- Previous post was at 07:05 AM ----------

And it should be pointed out that you can disable system apps through the apps menu without root. Uninstalling those apps and running apps with root permissions is the trick.
[Droid Turbo 2 General] fdg_:
alright, i sent you the links.

and also, sorry about not being clear enough about the apps:

most of the 170+ system apps i disabled using Titanium don't originally give the user permission to disable them in the apps menu. (for example, things like: com.motorola.bug2go, UICC Watchdog, camera, verizon services, etc.)

but i'm glad to know someone already has an idea. hopefully it leads to something. at least finding a way to permanently remove disabled apps. i'm not really expecting a permanent root to come of this, but if it does, i'm sure it would make a lot of people happy! :)

also i can post the list of all apps i disabled if anyone is interested.

and if anyone else wants the links to these programs, here they are:

www dot kingoapp dot com/ <<<<<<<<<< for the kingo root pc program and the apk

android-1 dot com/en/file_1589-dw.html <<<<<< for the Titanium (pro version) apk

(just replace the word dot with a . sorry, still a new member, can't post links) :p

---------- Post added at 09:45 AM ---------- Previous post was at 09:20 AM ----------

oh, and also, one more thing. i'm not sure how important it is, but it could be a significant factor. before doing any of this, i flashed the original stock rom (kinzie 5.1.1) with RSD lite. i can't remember for the life of me where i found these things..... i may have found it on rootjunky's site, but i'm not entirely sure.
[Droid Turbo 2 General] fdg_:
here's the video i just made for proof of the process i've been using:

www (dot) youtube (dot) com/watch?v=ylV3uBcTm-Q

in this video, i only show the process used with the Kingo Root apk and showing how titanium works in temp-root.

notice: i already froze/disabled a long list of apps in a previous temp-root to shorten the length of the video.

and of course, those apps i disabled resurrect upon reboot.

**this was done after a failed root using the same app, then reboot**
[Droid Turbo 2 General] amateurhack:
I'm going to step back from sharing the links for now, at least until this can be developed into a full root solution. I'm not saying don't do it, or that it's not safe, or have any criticism for fdg_ for sharing his current solution. But I do have some reasons, so here they are.

1.) The process of downgrading for an incomplete solution is not appealing to me, so in not going to test this until it can be turned into a full root solution that will allow us to upgrade to custom ROMs.

2.)Kingo Root has had a bad history with XDA, at one point even being banned from the site because they did not provide source code for the app. They finally did in 2014, but as far as I can tell, they have not updated it since. There were complaints about it installing bloat occasionally, although fdg_, obviously, has not reported such in his post. So that means, use at your own risk, and even moreso than normal.

What we need is:

1.) A developer willing to check this method for safety, including Kingo Root, and

2.) Verify if this method will allow access to download /boot from the phone

As I understand it, not being a dev, that if we can do that, it should be possible to modify and replace the bootloader, allowing a custom recovery to be installed, and then you would be able to install custom ROMs and/or have full root access.

Thanks to fdg_ for sharing. This may be a step in the right direction.
[Droid Turbo 2 General] fdg_:
you've made some really valid points. i had no idea kingo root wasn't trusted, that's probably why i couldn't find much info about them. i will be more cautious when using their service. also, you're completely right about the temp-root being unappealing.... the full root solution would be amazing for this phone. i hope a developer decides to analyze all of this. however, i'm not going to stop trying new methods until i find a permanent solution. thanks for the insight, amateurhack :)
[Droid Turbo 2 General] amateurhack:
I wouldn't say Kingo root is untrusted, just that their history is not good. There is even an xda blog post that suggests using it, but when you go and try to look under the hood it becomes a little sketchy. xda guys don't like sketchy. But they did comply with posting their source code and were allowed back on xda...in 2014. What has happened since then, I don't know.

And I am thankful that you posted what you are doing. It's good to see an open door, even if it's just a crack.
[Droid Turbo 2 General] ChazzMatt:
The issue, which has been stated many times, is with these Motorola phones like Quark and Kinzie bootloader unlock is necessary for permanent root. There's no other way around it.

Other phones from other manufacturers like LG G2 and LG G3 can be rooted and even custom recovery installed without bootloader unlock. But Motorola is different.

I know people just want "root", but bootloader unlock is the prerequisite step.

Sunshine team unlocked the bootloader for 2014 Droid Turbo (Quark) on Lollipop firmware, but never found an exploit for 2015 Droid Turbo 2 (Kinzie).

The Sunshine team has posted quite frequently in the Droid Turbo forum, and has educated us on the finer points of all this.

One of the first steps in Sunshine is actually getting temp root -- but only for the purpose of running the bootloader unlock exploit. They said running "temp root" for long periods of time can make your phone unstable.

Even with the Droid Turbo, getting temp root was never a problem. Unlocking the bootloader to get permanent root was the problem.
[Droid Turbo 2 General] amateurhack:
I've been following the DT2 forums since day 1, and I have not seen anyone even get temp root on this device, though. If I'm wrong, and it was posted elsewhere, please share a link.

I haven't followed the DT forums as closely, even though I have a DT in addition to my DT2. But I seem to remember that temp root was a step in accessing the bootloader and thereby modifying it, and then being able to unlock it and overwrite it. So I'm wondering of this may be a step closer. I will go read up on sunshine and mofo and see what's up.
[Droid Turbo 2 General] Czubbydo:
So what I gather from reading all previous post is that rooting the DT2 is a tough cookie. Sounds like it can be temp done, but who wants that. I love this phone and it would be cool to unlock all of its power. Unless we find the key for the gatekeeper, I'm stuck in bloat ware ville...
[Droid Turbo 2 General] ijt311:
Has anyone actually tried the temp root?
[Droid Turbo 2 General] romma1:
I have not. I used to have a bit more time for it, but if I can find the time I will... That said, Anyone know the best way to tag a dev that may actually have interest in popping the B/L lock?
[Droid Turbo 2 General] Czubbydo:
Just thought that I would see if any one out there has any info on the temp root now and is it worth going thru the process? thanks in advance.

---------- Post added at 03:37 PM ---------- Previous post was at 03:30 PM ----------

On second thought, after reading the whole thread, the temp rooting seems to be a PITA and risk of bricking. Moto DT2 is one tough cookie to crack. Better off leaving sleeping dog lay. Thanks to everyone who has posted with there hard work of trail and error.
[Droid Turbo 2 General] amateurhack:
Bribe them.
[Droid Turbo 2 General] eryndor:
I upgraded my phone to android 7.0 (build number NCK25.118-10) recently and in the developer options is an option to allow OEM unlocking of the bootloader. I do not remember seeing that before.
[Droid Turbo 2 General] ChazzMatt:
It's been there since Lollipop. And no, it doesn't do anything without Verizon permission. You still need a code from Motorola to input via ADB after you toggle that.

Verizon won't let Motorola give out bootloader unlock codes, like they do with the OTHER Kinzie, Moto X Force.
[Droid Turbo 2 General] HZ88AOPz:
h t t p : / / unlockbootloader . org / tutorial / motorola-droid-turbo-2

is this bs? (sorry about the spaces but this is my first post; can't post links)
[Droid Turbo 2 General] HZ88AOPz:
Wow! Thanks. I thought it was too good to be true, especially with all the clean-cut white dude profile pics for each comment. I'm about to upgrade and was doing one last ditch effort to find bootloader unlock.
[Droid Turbo 2 General] gtg472b:
While I've been rooting my phones since I started getting these (damn Verizon) smartphones, I never really paid much attention to those details. I just started to wonder about a brute force attack.

I'm guessing each phone's code is different, so we couldn't do a distributed attempt?

But I can't find any posts on the downside to trying this.

https://github.com/wiiliam/UnlockMotoE/blob/master/force.sh

Will it brick your phone after too many failed attempts? How long does one attempt actually take? Are there clues as to the format of the unlock code?

I'm not in a location that I can try it, and I know I'll forget this by tomorrow (HAH!)
[Droid Turbo 2 General] jcase:
Takes longer than a life time,.
[Droid Turbo 2 General] dragng8:
Still haven't updated... But I might. Idk how long I can hold out for a root method
[Droid Turbo 2 General] Anfeldt24:
I can't hold out long enough. I'm going to most likely get the Samsung Note 8 when it comes out. I'm sure early on, the Note will have an exploit and I'll be able to root. Not like they will ever update fast enough so I might a well do it on the Samsung since the Droid Turbo 2 won't get any more updates or root.... SMH.

That's my 2¢.