yashsingh1/xdaforums huggingface dataset:
[Samsung Galaxy S7 Guides, News, & Discussion] light24bulbs:
Looks like some folks are claiming a no KNOX exynos root method, just like the one available for the SnapDragon phones.

Here is some more info about how to get your phone in the proper state:

I don't mean to steal Billa's work, but I think this needs to in its own thread so we can work specifically on this root method. Billa if you want to make your own thread, I will delete this one.

I'm curious if anyone can confirm this method works?

UPDATE: I did manage to get the engKernel installed. It bootlooped for a while but once I went into recovery and actually did a full wipe, it booted after a few loops and a long wait. I can see it is a little buggy and laggy. Hopefully some of the fixes to repair the kernel will make it faster.

Unfortunately, the script that actually installs supersu is bugging out. It worked once part way, but for the most part it hangs on copying the su binary over, eventually giving a "protocol error" I think this may have something to do with my ADB setup. I've read it might have to do with USB write perms but mine should be good. I'm curious if running the script as admin will fix it but I haven't been able to get that to work, it just exits.
[Samsung Galaxy S7 Guides, News, & Discussion] Outbreak444:
Are you running on Windows? If so maybe I could help you out with that script just closing.

Right button click on your desktop and go to New -> Shortcut

For the Location type in "cmd" without the quotes

Name it whatever you want, I personally like naming it Elevated Command Prompt, and click finish

Now you want to right button click on the new shortcut you made, and go to Properties -> Advanced and check the Run as Administrator box and apply that setting

Open up the new Command Prompt shortcut you created on your desktop, UAC may prompt if you want to allow it, go ahead and accept it.

Now you will want to navigate to the directory of where your .bat file is located

-For example, if your command prompt directory is located in C:\Users\whateveryourusernameis (Should be in C:\Windows\System32 when granted Administrative privileges) and you need to navigate to C:\adb then you will have to type in "cd C:\adb" without the quotes.

From there you will want to check that you are in the right directory and that the file is there

-Type in "dir" without the quotes and hit enter. It should give you a list of file names in the folder you are located in, verify that the .bat file you are looking for is there, if not then you're not in the right directory and will need to make sure to go to where it is located.

If you were in the correct directory then all you have to do now is run the batch file from the command prompt window

-Type in "root.bat" without the quotes and hit enter. If there is a problem, the error message will stay up and not close itself out like it probably has been doing.

If it fails, all you will need to do is hit the up arrow on your keyboard and it should say "root.bat" again and hit enter.

Give that a shot and let me know if that helped.

Also, sorry if it's too descriptive, I don't know anyone's level of knowledge behind a computer screen so I wanted to make sure no matter the skill level, anyone can follow these directions.
[Samsung Galaxy S7 Guides, News, & Discussion] light24bulbs:
Thank you so much dude! That was good advice and I really appreciate the writeup for anyone else who comes along. Realizing that the kernel tweaks from the snapdragon kernel probably wouldn't work on exynos and that having to use the engineering kernel will probably never be very satisfactory, I went ahead and tripped my KNOX by installing a custom recovery and ROM.

I just wanted to explore this no KNOX root method as much as possible and see if it can be made mature for the next person who comes along, since I really don't think it is yet.
[Samsung Galaxy S7 Guides, News, & Discussion] Outbreak444:
The tweaks may work but it will never be the best experience because it's an engboot, unfortunately. Some people prefer it over non-root anyways, and I'm starting to feel the same. Tripping your Knox probably won't mean anything for where you live anyways, enjoy root without decreased performance on your phone!
[Samsung Galaxy S7 Guides, News, & Discussion] theseventensplit:
so this will reduce performance on my exynos device? that sucks :(. I'm rough on my phone and need the warranty just in case, but need root for things like sixaxis
[Samsung Galaxy S7 Guides, News, & Discussion] BottleB:
And Viper Audio
[Samsung Galaxy S7 Guides, News, & Discussion] theseventensplit:
never tried viper audio before, but I'm curious to try it now

---------- Post added at 12:46 PM ---------- Previous post was at 12:43 PM ----------

still need to know how it will affect performance
[Samsung Galaxy S7 Guides, News, & Discussion] BottleB:
Oh man. Its amazing.

Only real disadvantges to root are basically no Samsung Pay correct? If it ever gets here....

---------- Post added at 08:13 PM ---------- Previous post was at 08:11 PM ----------

Makes me wanna carry around my note 2 for audio
[Samsung Galaxy S7 Guides, News, & Discussion] imyourpapi:
For me the script not work with my SM-G935F, after executed this 2 command:

adb shell mount -o rw,remount /system

adb shell mount -o rw,remount rootfs /

the phone freeze totally

and the promt stay freeze on: adb push SuperSU-v2.74-2.img /data/su.img , i've tried to wait 15 mins, without success

Any suggestion? Thanks

I've tried more 5 times
[Samsung Galaxy S7 Guides, News, & Discussion] RealNovgorod:
Well, that and losing the warranty and any resell value of your brand new expensive phone... I'm still figuring out how to remove the bloody shutter sound on my 930S without voiding the warranty. As of now, there's no method for even a temporary root just to access the system sound files. I guess we'll have to wait for a knox-neutral root until the warranty of this thing ends anyway....
[Samsung Galaxy S7 Guides, News, & Discussion] theseventensplit:
Pretty sure the point of this root method is that it doesn't trip know, thus negating that worry
[Samsung Galaxy S7 Guides, News, & Discussion] billa:
Happy hacking :)

Well, I have posted that just as a proof of concept root without tripping Knox, leaving all testing up to you guys.

Installation is a bit tricky, gotta get the timing just right while the ADB port is open for a short time during the bootup sequence.

With careful tweaking it can be adjusted to give a fairly smooth performance, read the S7 QC/Qualcomm threads.

Happy hacking :)
[Samsung Galaxy S7 Guides, News, & Discussion] light24bulbs:
Thanks for being such a rad dude!

I agree that with tweaking, this may become a very viable root method. I just worry that everyone who would be working on this as a dev has already knox 0x1 their phones ;)

I guess we will see what the masses come up with.
[Samsung Galaxy S7 Guides, News, & Discussion] light24bulbs:
Alright, that's exactly what happened to me. I also get a protocol error message sometimes. So there is definitely something up with the ADB file push command. Maybe someone who knows more about ADB can get that working.
[Samsung Galaxy S7 Guides, News, & Discussion] theseventensplit:
so i did everything and it looks like i even got supersu installed, but it's not actually rooted... At least not according to rootchecker

---------- Post added at 09:44 PM ---------- Previous post was at 09:28 PM ----------

welp, i just checked via download mode and yup, it tripped knox... darn Positive is I can do a full root of my phone now
[Samsung Galaxy S7 Guides, News, & Discussion] tyteen4a03:
Tested this on my FD, didn't root the phone but didn't trip KNOX either. I've sent a logcat to the author; probably isn't much help but it's something, right?

Going to root my phone the traditional way though after this, sorry! :P
[Samsung Galaxy S7 Guides, News, & Discussion] jonlad1:
Has anyone successfully tested this?

I'm not rooting until this is confirmed working - happy to contribute towards a bounty if someone is working on this
[Samsung Galaxy S7 Guides, News, & Discussion] tahirozgun:
i m wondering if anyone succeed this ?
[Samsung Galaxy S7 Guides, News, & Discussion] midnightrider:
I read you can turn off system sounds and that seems to work. You can also fast toggle sound in the pulldown prefs. Seems to work fine.
[Samsung Galaxy S7 Guides, News, & Discussion] RealNovgorod:
Nope - there are different levels of bullcrap and the 930S seems to beat it all.. The camera app doesn't care at all about the system sound settings, it always zaps you in your face...
[Samsung Galaxy S7 Guides, News, & Discussion] nitrous²:
Magisk specifically says that it needs a modified boot image. That'd definitely trip Knox.
[Samsung Galaxy S7 Guides, News, & Discussion] bassini:
If u need a special bootloader last site to found this is Chinse site of s7/s7edge

I think it a last hope
[Samsung Galaxy S7 Guides, News, & Discussion] :
Chinese websites are horrible for navigation and to understand what they write, even using the translator.

You have the link of the topic or file? :)
[Samsung Galaxy S7 Guides, News, & Discussion] timonoj:
Maybe this can help...

http://arstechnica.com/security/201...tflips-to-root-android-phones-is-now-a-thing/
[Samsung Galaxy S7 Guides, News, & Discussion] Hansoliv:
Could it be?

Anyone else thinks that this exploit could help?

I was about to root my phone (and lose warranty) and stopped when i've seen this post.
[Samsung Galaxy S7 Guides, News, & Discussion] nitrous²:
I doubt it. It needs to be tested but so far only the S5 has been rooted this way and only in one of two S5s was the test successful. Also, the article doesn't mention anything regarding Knox.

I doubt it because the S5 is two generations behind. All the other devices are also at least two generations behind the S7. Since then there have been countless improvements to hardware based security. Still, it needs to be tested. The article doesn't go into detail at all, unfortunately.
[Samsung Galaxy S7 Guides, News, & Discussion] :
Guys, look this:

https://gist.github.com/Arinerron/0e99d69d70a778ca13a0087fa6fdfd80
[Samsung Galaxy S7 Guides, News, & Discussion] ayamgoreng:
does it work with 64bit device like S7 ?
[Samsung Galaxy S7 Guides, News, & Discussion] davkpl:
As you may read in comments below this post...

Below is his instruction...
[Samsung Galaxy S7 Guides, News, & Discussion] sendhiloo7:
Did you anyone try to gain root using dirtycow vulnerability
[Samsung Galaxy S7 Guides, News, & Discussion] navis83:
I tried and the result is:

shell@hero2lte:/ $ run-as com.jrummy.root.browserfree
run-as: Could not set capabilities: Operation not permitted

As I understood googling, it seems that SAMSUNG has an improved SELINUX that stop such vulnerability.
[Samsung Galaxy S7 Guides, News, & Discussion] :
???

Thanks for testing!

PS: are you using October or September update?
[Samsung Galaxy S7 Guides, News, & Discussion] mazbot:
Are you using last fw?
[Samsung Galaxy S7 Guides, News, & Discussion] navis83:
Yes, it would be useful to try it with old firmware, maybe previous then August one. If I can, I will do it next week, but if anyone can have a try, it's safe for knox: it just push inside /system/bin folder a new version of run-as without restrictions, so on restart it would be resubstituted again by DM-Verity, so it's a temporary Root that doesn't impact the bootloader --> NO Knox Trip.
[Samsung Galaxy S7 Guides, News, & Discussion] navis83:
I tried to use the July firmware to test Dirtycow exploit but it didn't work :(. If anyone had success in different way, let us know.
[Samsung Galaxy S7 Guides, News, & Discussion] jackq:
Any news about root without knox? Thread dying...
[Samsung Galaxy S7 Guides, News, & Discussion] Random04:
Deleted
[Samsung Galaxy S7 Guides, News, & Discussion] charliebigpot:
Is there any news on rooting without triggering knox? I'm asking here since I tried looking for newer posts but it's a jungle out there.. MM or N, doesn't matter to me, as long as I can root without any issues.
[Samsung Galaxy S7 Guides, News, & Discussion] spike2:
No new news about the root without triggering Knox? :(
[Samsung Galaxy S7 Guides, News, & Discussion] h1ghland3r:
It's not possible reset the counter to 0x0 using stock rom. If you want, you need to use custom roms which you can switch the counter to 0x0 while using this rom.

Sent from my Galaxy S7
[Samsung Galaxy S7 Guides, News, & Discussion] misterkekko:
Sorry, i don't understand. Exist the method to reset Knox counter on custom rom?

Inviato dal mio SM-G930F utilizzando Tapatalk
[Samsung Galaxy S7 Guides, News, & Discussion] h1ghland3r:
Not exactly. Most of the custom roms use Magisk to hide root and keep Knox 0x0 only while using the custom rom. Even though Samsung Pay can't work in custom roms.

Sent from my Galaxy S7
[Samsung Galaxy S7 Guides, News, & Discussion] quasimodoz:
Not quite clear to me.

If I use a custom rom e.g. [ROM][03 Mar] Helios v7.7.0 * TW * android 7.0 * DQBH, Knox seems not to be triggert while using this rom.

What happens if I reinstall stock rom using ODIN after this? Will KNOX be triggert?
[Samsung Galaxy S7 Guides, News, & Discussion] RealNovgorod:
As I understand, knox is already triggered but the custom ROM can hide the real knox state from the apps. If you install the stock ROM again, it will see the true knox state of course...
[Samsung Galaxy S7 Guides, News, & Discussion] midnightrider:
That blows. I was happy when it worked on my FD. I hate that sound. Hopefully there is an app that can fix it for you. If not, root root.
[Samsung Galaxy S7 Guides, News, & Discussion] ad78:
ive done with edge and S7 and knox dont trip. reverse back as samsung pay is very important to me..
[Samsung Galaxy S7 Guides, News, & Discussion] sendhiloo7:
Appreciate if you summarise and give ste by steps to root without knox.

Advance thanks
[Samsung Galaxy S7 Guides, News, & Discussion] Nicheuji:
I thought the whole point of not tripping knox is to be able to have samsung pay working with root.
[Samsung Galaxy S7 Guides, News, & Discussion] kersian:
Just sharing info on updates.

http://xdaforums.com/showpost.php?p=68169461&postcount=635

http://xdaforums.com/showpost.php?p=68176762&postcount=636

No knox root success is still stopping my purchase of S7.
[Samsung Galaxy S7 Guides, News, & Discussion] hendry:
waiting until safe knox 0x0 rooting progress is finished
[Samsung Galaxy S7 Guides, News, & Discussion] dharani1234:
Was anyone able to test the updated script?

I am selfishly asking abt it because I have set up way too many cards in samsung pay to try this :P.

Thanks!
[Samsung Galaxy S7 Guides, News, & Discussion] lucadalba:
Thanks for resharing[emoji6]

I rewrite here my post so maybe we will got more testers..

Here's ORIGINAL billa's post:

But it seems it doesn't work on exynos for some problems with permissions (that there aren't in snapdragon versions as I read..) so here is:

POSSIBLE FIX

------

EDIT ON 19 AUGUST: FOR NOW THIS METHOD

DOESN'T WORK FOR DM-VERITY

, SO TEST IT ONLY IF YOU WANT TO REPORT IF FLASHING ENGKERNEL YOUR S7 MODEL WILL BOOT AND IF KNOX WILL BE TRIPPED OR NOT.

ELSE DO NOT TEST FOR NOW

, IT'S USELESS FOR NOW..

Read this post to better understand: http://xdaforums.com/showthread.php?p=68255732

---------

DO

NOT

TRY THIS METHOD WITH

G930W8 OR G935W8

BECAUSE IT

TRIP KNOX ON THAT DEVICE

DO

NOT

TRY THIS METHOD WITH

G930FD OR G935FD

BECAUSE

PHONE WILL NOT BOOT ON DUAL SIM MODELS

Hello to all and thanks to [MENTION=293193]billa[/MENTION] , [MENTION=631273]Chainfire[/MENTION] , [MENTION=5028474]princecomsy[/MENTION] and to [MENTION=4911585]br3w3r[/MENTION] for their work.

I've seen some users notice error during Root.BAT and it is related to "system read-only file system"

I've seen that in the script system is read-write remounted only one time

So what I've done is mounting system, rootfs and data at Root.BAT beginning (executing it immediately after phone starts booting, this partitions could also be unmounted) and mostly I'VE ADDED REMOUNT SYSTEM COMMAD BEFORE EVERY COMMAND THAT TOUCHES SYSTEM.

This because in most of my scripts after a limited number of commands, system will automatically read-only remounted.

Here is the folder, instructions are identical as before and you can found them in 0_ReadMe.txt

https://mega.nz/#!i08F3QhD!Tq2Dfi_5wb-esGcqnuvmhUjpxCKb1lFVfPdTzX_n4o4

I must warning you that * I CANNOT TEST THIS METHOD BECAUSE I HAVEN'T S7, I'm just trying to help S7 users *

I want to remember that * I CANNOT GUARANTEE THAT YOU WILL NOT HAVE PROBLEMS OR DAMAGES TO YOUR DEVICE * , *I CANNOT GUARANTEE THAT KNOX WILL REMAIN 0x0 (but if engKernel does not trip knox, surely knox will not be tripped from my additional commands)* and * YOU ARE THE ONLY PERSON RESPONSIBLE OF EVENTUALLY DAMAGES OF YOU PHONE *

Told this, REMEMBER TO FOLLOW [MENTION=293193]billa[/MENTION]'s ADVICES:

Please, if you try this, COPY HERE ALL LINES THAT WILL APPEAR WHEN YOU EXECUTE Root.BAT , it's very important to see what's happened!

If the process successes, you SHOULD NEVER see this error in Boot.BAT output lines:

Blablabla : [COLOR=red]Read-only file system[/COLOR]

Hope that will solve problems[emoji4]

Enjoy!

---------

I also removed SUPERSU.CMDS else phone would reboot immediately after adb shell < supersu.cmds and OTA will NOT be removed[emoji6]
[Samsung Galaxy S7 Guides, News, & Discussion] ad78:
its not the knox, its the android system.

even other handsets if you root it it android pay will not work. so the workaround to them is to install twrp which is impossible to S7 US version
[Samsung Galaxy S7 Guides, News, & Discussion] jonlad1:
[MENTION=7119432]lucadalba[/MENTION] - What is the realistic risk?

If we miss the timing, could it still trip knox? Sounds like we have one shot at getting this right and I'm sure everyone is a little nervous as you have no S7 to test on....
[Samsung Galaxy S7 Guides, News, & Discussion] mindstorms54:
wow

No knox trip root method comes!!

Thanks a lot, really.

Can i install custom after this with out knox 0x1?

---------- Post added at 04:47 AM ---------- Previous post was at 04:24 AM ----------

Errrrrr

935FD here

what i've done was:

1. enable DM+ACM+ADB

2. enable oem unlock and usb debug

3. boot into recovery and wipe cache

4. boot into download mode and flash the modified boot

5. reboot and run toot.bat

now my phone keeps vibrating, and stuck at the SANSUNG logo

and the computer stucks here

http://imgur.com/a/PwHE3

don't know what to do now

:crying::crying:
[Samsung Galaxy S7 Guides, News, & Discussion] kersian:
[MENTION=7119432]lucadalba[/MENTION]

What is the mount command used for? Based on the screenshot, it says that the command is not available and Windows does not have this command.
[Samsung Galaxy S7 Guides, News, & Discussion] mindstorms54:
i just run the script, didn't change any part of it

i am using windows10(64bit)
[Samsung Galaxy S7 Guides, News, & Discussion] dharani1234:
And it worked?
[Samsung Galaxy S7 Guides, News, & Discussion] lucadalba:
I canNOT tell what's the realistic risk.. the risks are the same as billa's method.. I just added some mount commands and moved the reboot command..

In my opinion the works thing that can be happen is the phone stucks on Samsung Logo and you can solve reflashing stock firmware.. but as I said I CANNOT GUARRANTEE ANYTHING ABOUT DAMAGES OR KNOX..

I haven't S7 and I know users are a little nervous about this.. but I'm only trying to give my help and anyone is obligated to follow my method.. follow just if you want

Replace Root.BAT with this updated new one: https://mega.nz/#!n1tmAAzK!fw3qZ499GfSeTqNOmEkL8e8uBJLUKI4h8XZBjkStW08

And try again to execute it when phone is booting..

Anyway if it doesn't work, you should solve just flashing stock firmware..

But really in G935FD I cannot know if rom will boot.. because kernels are for monosim models..

I rememer that I CANNOT GUARANTEE ANYTHING..

I've corrected some commands and I'm reuploading all zip.. but anyway I've already uploaded the Root.BAT with new commands (added "adb shell" before some commands and corrected syntax of one command) .. thanks for the notice![emoji6]

---------- Post added at 11:21 ---------- Previous post was at 10:36 ----------

ZIP UPDATED

Updated zip in my first post as wrotten in previous post[emoji6]

https://mega.nz/#!i08F3QhD!Tq2Dfi_5wb-esGcqnuvmhUjpxCKb1lFVfPdTzX_n4o4
[Samsung Galaxy S7 Guides, News, & Discussion] :
Sorry I'm late to thread but I had to ask :

I don't exactly understand when am I supposed to run root.bat ( during reboot after Odin flash or once booted ? )

And in theory this should not trip knox right ? And because it's an eng-boot, is it as stable as stock ?

Also, does the fingerprint scanner still work after the root ?

Thanks in advance
[Samsung Galaxy S7 Guides, News, & Discussion] lucadalba:
1. This SHOULD not trip knox (anything is guarranteed in modding) because is an engKernel: it is recognized as stock kerel but it has root permissions. But root permissions can't be accessed without SuperSU and SuperSU needs to be installed also in /system and system can't be rewrited without supersu.

The solution is that adb (thanks to engKernel) can access to root permissions without supersu and you will install supersu in system via adb.

(You just need to run Root.BAT and commands will be automatically executed.. the complete guide is available in the zip)..

2. I can't know.. just try and see.. if you doesn't like it just reflash stock rom..

3. Fingerprint should work because this is engKernel and not engBootloader..
[Samsung Galaxy S7 Guides, News, & Discussion] mindstorms54:
thanks for the update

i've tried, the phone still stucked at the boot animation

the script frozen at su not found, runing for about 15 mins.

after that, i opened a cmd, i found that it has root permission on adb shell

but due to not able to bootup, i backed to stock rom using odin.
[Samsung Galaxy S7 Guides, News, & Discussion] lucadalba:
Ok really THANKS for the feedback.

Really probably you got bootloop because engKernek is for SINGLE SIM MODELS and you have G935FD (dual sim..) but thank you for trying ;)

I want to ask to you 2 things..

1. Have a log/screen of execution of Root.BAT execution as before (you had a screen of cmd..).. if yes can you post it here? It could be really useful..

2. Phone stucked at "Samsung Galaxy S7 edge Powered by Android" logo or at "SAMSUNG" bootanimation?

Thanks in advance :)
[Samsung Galaxy S7 Guides, News, & Discussion] mindstorms54:
But..instead of a 935fd odin file, i use 935f's image, which is single sim model, and the phone boots.

I won't be for a long time, but i will try again if i have time.

By the way, after flashing the kernel, the phone stucked at samsung boot animation and keep vibrating

the pattern is like o ooo o ooo, and never stop only if me force to reboot it.

thanks for your efforts
[Samsung Galaxy S7 Guides, News, & Discussion] jonlad1:
Did knox trip after your attempt?
[Samsung Galaxy S7 Guides, News, & Discussion] lucadalba:
Ok thanks[emoji6]

When you want to try again, please provide a screenshot of execution of Root.BAT as before of better copy here ALL lines that appears..

Anyway thanks for your tests.

Really hope also someone other will try[emoji4]
[Samsung Galaxy S7 Guides, News, & Discussion] oile:
I'd like to thank [MENTION=4312508]mindstorms54[/MENTION] for testing it out and, more importantly, giving precious feedback!
[Samsung Galaxy S7 Guides, News, & Discussion] oswade:
This is awesome news, but I'm too scared to try (I have G30FD running G930F firmware).

Will samsung pay work with the engkernel if knox is not tripped?
[Samsung Galaxy S7 Guides, News, & Discussion] lucadalba:
I don't know if knox is the Samsung Pay problem.. but I think you can try to read this.. maybe it could be useful.. http://xdaforums.com/showthread.php?t=3432382
[Samsung Galaxy S7 Guides, News, & Discussion] :
Following the thread. ;)