yashsingh1/xdaforums huggingface dataset:
[LG V20 Guides, News, & Discussion] Ryuk359:
What would be a good way to set up a bounty for this? I. E. Kickstarter, gofundme, etc? I think it could help garner support and most folks are willing to kick in a few bucks for it. I know I am.
[LG V20 Guides, News, & Discussion] rickberg:
Probably gofund me however i dont know how we would get people to see it i was thinking the same thing
[LG V20 Guides, News, & Discussion] rickberg:
Right i was hoping there would be a workaround for that i am going to try chown tonight
[LG V20 Guides, News, & Discussion] twistedvip:
Thing is, those files (I believe) should have no effect to the actual dirtycow exploit binaries for the Tmobile variant.
[LG V20 Guides, News, & Discussion] rickberg:
He said he updated the binaries yesterday i have not tried with the updated binaries i will try layer
[LG V20 Guides, News, & Discussion] rickberg:
Ok so i tried and this time cant get past the reboot part just hangs the chown 0777 * does do something without that command it says access denied
[LG V20 Guides, News, & Discussion] othermark:
Did someone grab the root shell from this post? I didn't grab it originally and now it's 404. It would save me some trouble of building my own.

http://xdaforums.com/showpost.php?p=69307743&postcount=109

Basically, the story here is that at this point unless we can get the bootloader unlocked we can't boot into a permissive mode. Bypassing the ATT bootloader seems to be a no-op unless someone has some brilliant idea.

That means your best hope at this point is somehow finding a way to do something really permissive on the system to mod with the dirtycow exploit that could lead to a temp root that would have to be reapplied every boot.

A fully permissive exploit could, in theory, allow you to run 'setenforce 0' to just turn off selinux at runtime. Currently using run-as on my device with the cow exploit does not allow to me to turn off enforcing.
[LG V20 Guides, News, & Discussion] Revan365:
Well I'm posting to follow this thread. I have a sprint lg v20 and I'm highly interested in getting root on this device.
[LG V20 Guides, News, & Discussion] gogorob:
so if we have a locked bootloader, what's the point in having the "Enable OEM unlock" option under Dev options? I'm talking the Sprint model..
[LG V20 Guides, News, & Discussion] elliwigy:
maybe u guys should look at something similar to depixel8
[LG V20 Guides, News, & Discussion] twistedvip:
With the VZW pixel, I believe they were able to get into the fastboot screen still - they just were getting error messages of not being allowed to run commands on fastboot.

With our variant of the V20 - the bootloader is locked down. Only way in is through either an eng image or by reverse engineering the SHA keys to allow us into the bootloader screen.

I think it will be much harder to get this bootloader unlocked than how they did depixel8.
[LG V20 Guides, News, & Discussion] SaintZ93:
Guide that could help us figure out how to enable fastboot.

1. Plug phone in

2. Open CMD as administrator

3. cd to your android sdk platform-tools section

4. Make sure you have USB Debuggin on

5. type adb shell

6. type ls

This allows you to view everything of the phone and I mean everything. If we could compare bootloader section and or fastboot sections with T-Mobile variant we might be able to figure out how to enable these!
[LG V20 Guides, News, & Discussion] twistedvip:
I'm going to be quite honest here. Getting into your shell as a regular user is not going to do literally anything for you without an exploit. Currently the dirtycow exploit that is used for root privileges on T-Mobile variant does not work.

Even if there was a way to look at the bootloader section (theres not as a regular user) - you cant modify anything.

When you go into the shell, you're placed into the root directory ('/'). It only shows files on the phone inside that root directory. Most important folders you cannot even go into (or list).
[LG V20 Guides, News, & Discussion] Slypnslyde:
I think we're beat, I don't think it's looking good
[LG V20 Guides, News, & Discussion] elliwigy:
he refuses and doesnt want to be asked bcuz he wont do it

---------- Post added at 02:53 PM ---------- Previous post was at 02:53 PM ----------

i wouldnt say beat more so then no devs willing lol
[LG V20 Guides, News, & Discussion] rickberg:
Op updated with open source for our devices as well
[LG V20 Guides, News, & Discussion] lambgx02:
Imagine the shivers this thread would have given RMS 30 years ago. :(

It's terrifying locked bootloaders are even legal under consumer protection laws, let alone commonplace.

Don't these idiots understand that they literally owe the existence of Linux and Android to the very people they are now attempting to lock out?

But not only were they illegal, like debuggers—you could not install one if you had one, without knowing your computer's root password. And neither the FBI nor Microsoft LG Support would tell you that.
[LG V20 Guides, News, & Discussion] newbomb:
Donald Trump just said if he's elected, he will unlock the v20 bootloader.
[LG V20 Guides, News, & Discussion] raimondomartire:
Guys H920DS I write from Italy, my situation on this smartphone. In my opinion I can open bootloader with fastboot flash unlock unlock.bin

So the problem for now is only unlock.bin. Lg dev site don't permit to request this key
[LG V20 Guides, News, & Discussion] kcadrenalin:
Make Bootloaders Great Again!
[LG V20 Guides, News, & Discussion] me2151:
Im still trying to get our boot.img file. My build environment sucks... I cant compile the files i need. Once i get that we might have the boot.img.
[LG V20 Guides, News, & Discussion] nyfl2004:
I don't have my device yet. Do you know the location of the boot.img?

Are you able to adb shell
[LG V20 Guides, News, & Discussion] me2151:
/dev/block/bootdevice/by-name/boot

We have regular shell not root shell through adb
[LG V20 Guides, News, & Discussion] nyfl2004:
Ok, can you try the following:

adb shell

ls -al /dev/block/bootdevice/by-name
[LG V20 Guides, News, & Discussion] elliwigy:
has anyone tried this:

---------- Post added at 02:07 AM ---------- Previous post was at 01:48 AM ----------

he said:

this was done on locked bootloader. in order to unlock it. I did not do the boot image, .i did the FRP partition, that allowed for bootloader unlock.
[LG V20 Guides, News, & Discussion] rickberg:
Do you have the original post
[LG V20 Guides, News, & Discussion] elliwigy:
its in the dirty cow thread page 26

http://xdaforums.com/general/security/dirty-cow-t3484879/page27
[LG V20 Guides, News, & Discussion] nyfl2004:
Yes, thank you. Now we have the partition table
[LG V20 Guides, News, & Discussion] jellybear456:
Really rooting for everyone here. Wish I could contribute but my skills are limited. My v20 needs this unlocked bootloader:good:
[LG V20 Guides, News, & Discussion] elliwigy:
he advised it might not work but worth a shot imo.. i asked for the files used but it was compiled for 32bit system and i believe ours is 64bit so if anyone knows how to compile it thatd be great
[LG V20 Guides, News, & Discussion] rickberg:
Its wprth a shot if somecan co.pile them i was going to help another dev but mu pc took a **** have to reinstall everything
[LG V20 Guides, News, & Discussion] elliwigy:
i would but dont know how lol or where to start at that but im watching election on Trump day
[LG V20 Guides, News, & Discussion] rickberg:
Guys these phones have fastboot shells and unlockable bootloaders the only thing is getting into the OMADM menu if you look in the sprint hidden menu and hidden menu apk you can see its disable by usb only and controlled through OMADM menu

The problem is its asking for a service code ?
[LG V20 Guides, News, & Discussion] me2151:
Service code is a 2 part code. one half device id one half from sprint.
[LG V20 Guides, News, & Discussion] pro_granade:
Wait, so we can just simply go into a menu to unlock the bootloader? lmao
[LG V20 Guides, News, & Discussion] osva:
These are the options inside OMADM
[LG V20 Guides, News, & Discussion] sml2004:
Service code is msl. I have mine. What is other part? And how to unlock with them?
[LG V20 Guides, News, & Discussion] rickberg:
If you look in hidden menu and aprint hidden menu there is option for bootloader unlock check bootloader unlock, flash block, usb flash enable there is also a lis of available codes available in the .xml the three i camt get to do anything is ##IOT# ##msl# and ##test#
[LG V20 Guides, News, & Discussion] sml2004:
How to get to hidden menu? I can do data menu...
[LG V20 Guides, News, & Discussion] rickberg:
5689#*990# lg test mode has flash lock\unlock

Working

##diag#

##debug#

##meid#

##data#

##omadm#

##scrtn#

##rtn#

##log#

not working or hidden

##test#

##iot#

##(msl)#

##(otksl)#

there are more locatedin hifden menu and framework.jar once i get them figuredout ill post as well
[LG V20 Guides, News, & Discussion] elliwigy:
u get into these by dialer?
[LG V20 Guides, News, & Discussion] rickberg:
Yes all the ones that are working
[LG V20 Guides, News, & Discussion] elliwigy:
i cant get into them on vzw lol
[LG V20 Guides, News, & Discussion] othermark:
Probably because the dialer code is

*#546368#*990#

where the 990 is your model number.
[LG V20 Guides, News, & Discussion] elliwigy:
still doesnt work even with 995
[LG V20 Guides, News, & Discussion] ajamer:
great work guys, giving hope to sprint variant!
[LG V20 Guides, News, & Discussion] 1619415:
If someone can find a way to get into fast boot mode (I.e adb reboot bootloader) then you can try running fastboot oem unlock. Which would/ should unlock your bootloader based on LG's other major flash ships (LG G5). If you are able to unlock the bootloader you can confirm the unlock by running fastboot getvar unlock. Also, it maybe like the G5 in the sense that you guys are going to need a pre rooted custom firmware (.tot) that you flash via download mode. First you need to get the bootloader unlocked tho if someone has some idea's or something I'll help however I can (just send me a PM).

Also, you can get ADB and Fastboot from HERE.

Download LG Mobile Driver from HERE

Also make sure you have USB Debugging on

Hope that helps, good luck:good:

Also, OP feel free to quote me if you'd like just make sure to give credit:cool:
[LG V20 Guides, News, & Discussion] elliwigy:
glad to have more support.. just curious though, do you have a v20?
[LG V20 Guides, News, & Discussion] Ryuk359:
What is flash lock? Mine is set to unlock. But I wonder..

edit - nothing. I've been trying every hidden menu code possible thinking its just some stupid lock buried in there. Wouldn't be that easy tho.
[LG V20 Guides, News, & Discussion] 1619415:
Sadly no but wiling to help in anyway I can
[LG V20 Guides, News, & Discussion] elliwigy:
can you compile dirty cow?
[LG V20 Guides, News, & Discussion] osva:
BTW I ran the process(dirtycow) for Tmobile(Knowing that I could brick my device and it will not work) and after it crashed, I rebooted and I got a message saying that my operating system was corrupted and the phone will turn off. Luckily it turned back on later. :eek:
[LG V20 Guides, News, & Discussion] me2151:
I posted previously that I tried this and same result.
[LG V20 Guides, News, & Discussion] 1619415:
If you send me a link I could try
[LG V20 Guides, News, & Discussion] rickberg:
Ok so cant decompile frameworks.jar but i have a thought android studio has a theme studio for lg why couldnt we sneak dirty cow in through a theme?
[LG V20 Guides, News, & Discussion] jellybear456:
Not that I know much about development and getting into devices to unlock bootloaders/root, but if feasible, this idea could potentially work? I mean I think anything is worth a shot at this point.
[LG V20 Guides, News, & Discussion] elliwigy:
i guess my only question is what would be the difference between running dirty cow now vs. running the same exploit through an app?
[LG V20 Guides, News, & Discussion] mcraeally44:
Out of curiosity, would stock, bootloader locked Sony Xperia Z4 Tablet Snapdragon 810 running 6.01 system differ much from the hardware you're working on?
[LG V20 Guides, News, & Discussion] rickberg:
Cant you give an apk root user status through android manifest
[LG V20 Guides, News, & Discussion] 1619415:
Yes but the problem is you need to allow it root access (I.e SuperSU)

Just to clarify you really don't need a app to be doing this, dirty cow has all the instructions you need, lol

If you really wanted a automated process for dirty cow I'd suggest you try making a .sh script then make the script executable (chmod +x script.sh) then just put it in the same folder as the other binary's and execute it (./script.sh). Just a suggestion tho without a device I can't really test anything although I hope to be using a friends tomorrow so if we find anything we'll make sure to post a teaser vid, lol.

If anyone has actually run dirty cow and has experience with linux please send me a message and let me know what your results are looking like. If you guys (and girls) mange to get the device's bootloader unlocked or even a temporary root shell using dirty cow that means you can flash a recovery and at that point someone would just have to compile a recovery and you guys should be good since you would just need to flash like 2 or 3 zip's.

If anyone with idea's want to send me a message and based on your suggestion I'll add you to a hangouts group that way we can try to speed the process up since just reading through the forum(s) it seems you guys have all have bits and pieces to a root/bootloader unlock but you just need help "connecting" the dots so to speak.

Also, I saw someone asking how to get your MSL if you just call Sprint and tell them that your at a tech shop and their repairing your device and they need the phone's MSL in order to recalibrate the phone they often give it you.
[LG V20 Guides, News, & Discussion] Slypnslyde:
Man I hope I hope I hope things come to light before my 14 days is up lol. The 16th is my deadline to bring it back I sware if I had developer smarts I'd be all over this. I see the problem most hard-core devs don't have this phone yet or ever will. So help is limited. But I appreciate all you guys that are working hard on it for us.THANK YOU!!
[LG V20 Guides, News, & Discussion] 1619415:
Does anyone have a .tot file for this device?
[LG V20 Guides, News, & Discussion] elliwigy:
i have an update sitting on my vzw device but no way to read it due to access denied lol
[LG V20 Guides, News, & Discussion] sml2004:
I think alot of us are fresh to LG. But I have only seen Tmobile with stock .tot which I assume .tot is the firmware package?
[LG V20 Guides, News, & Discussion] elliwigy:
yes, it is stock firmware.. i am on vzw and theres an updste ive been postponing since launch day that i have no way to extract but it should be a tot that hopefulliy includes some files we need
[LG V20 Guides, News, & Discussion] rickberg:
Can anyone pull these files

Dev/block/bootdevice/by-name/

Aboot

Abootbak

And platform/soc/624000.ufshc

Aboot

Abootbak
[LG V20 Guides, News, & Discussion] elliwigy:
i get operation failed and tried multiple root explorers
[LG V20 Guides, News, & Discussion] rickberg:
I was using root explorer and could get the aboot files to copy and paste but the file size was 0bytes
[LG V20 Guides, News, & Discussion] rickberg:
Can you pull using the root shell in dl mode?
[LG V20 Guides, News, & Discussion] elliwigy:
same lol. shows as 0 bytes for me and/or just fails saying theres no file there depending on browser

---------- Post added at 08:25 PM ---------- Previous post was at 08:24 PM ----------

where was the instructions for that? i can try lol
[LG V20 Guides, News, & Discussion] me2151:
Im still trying to get the whole boot.img pulled. As far as I can see the DL mode will not let you pull any files I think its there for only writing files.
[LG V20 Guides, News, & Discussion] rickberg:
Damn ok
[LG V20 Guides, News, & Discussion] rickberg:
I need a few developers from att and verizon to pm me there gmail names i think we have actually foumd a correct path to go down but it will take some work at first for that reason i am creatimg a ho group id like to see some att and verizon devs in there as well please
[LG V20 Guides, News, & Discussion] sml2004:
Rick what carrier are you?
[LG V20 Guides, News, & Discussion] rickberg:
I am sprint I am adding you to the group as well
[LG V20 Guides, News, & Discussion] SaintZ93:
Mind adding me? Im working hard myself trying to obtain root but in discrete. Also is we obtain root I will be bring roms I built for the Note 4 ported over to our v20s. :p
[LG V20 Guides, News, & Discussion] rickberg:
Pm me your ho name once i get all the emails i will provide what i have so far
[LG V20 Guides, News, & Discussion] elliwigy:
sent u mine
[LG V20 Guides, News, & Discussion] Gman_aka_Pop's:
I have an AT&T LG V20 let me know if I can be of any service for testing etc........would be more than happy to test or help
[LG V20 Guides, News, & Discussion] Slypnslyde:
Ah yeah Saintz in the house with the v20
[LG V20 Guides, News, & Discussion] pro_granade:
You could add me? I was a ROM maintainer for the Galaxy S5.
[LG V20 Guides, News, & Discussion] gogorob:
I tried via "Wifi-Explorer", it let me download the files (zip format, which was corrupted and also 0 bytes).. i'm referring to platform/soc/624000.ufshc Aboot Abootbak.. the other files it wouldn't let me download..
[LG V20 Guides, News, & Discussion] c45h2012:
Glad to see you in here you did great work back on the sprint g3
[LG V20 Guides, News, & Discussion] Gman_aka_Pop's:
I have a ATT V20 what commands would I try in terminal emulator to try and pull firmware?
[LG V20 Guides, News, & Discussion] Ryuk359:
You are the f-ing man! We are all behind you bro.
[LG V20 Guides, News, & Discussion] Gman_aka_Pop's:
https://github.com/Xonar/LGBinExtractor

Could this possibly be used to help us extract the files we need?
[LG V20 Guides, News, & Discussion] me2151:
If we had a .tot yes. That tool extracts .tots and bins. not from the phone itself like we are trying.
[LG V20 Guides, News, & Discussion] Gman_aka_Pop's:
Okay makes sense just trying to help out thanks for the quick response
[LG V20 Guides, News, & Discussion] me2151:
No problem. I do appreciate the help though :)
[LG V20 Guides, News, & Discussion] Gman_aka_Pop's:
Please let me know if i can be any assistance I have a ATT V20
[LG V20 Guides, News, & Discussion] elliwigy:
i dont think its a matter of extracting a tot, its more so we get permission denied as we dont have root so it shows everything being 0 bytes
[LG V20 Guides, News, & Discussion] Gman_aka_Pop's:
Understood i had the same problem
[LG V20 Guides, News, & Discussion] Gman_aka_Pop's:
http://thunderztech.com/root-your-device-by-dirty-cow-exploit-working-on-all-devices/
[LG V20 Guides, News, & Discussion] Slypnslyde:
Maybe it meant on all with an unlocked bootloader
[LG V20 Guides, News, & Discussion] me2151:
Lol yep thats what im using to get as far as I have. My goal is to have a root shell(even if its a temp one) by tomorrow.
[LG V20 Guides, News, & Discussion] jellybear456:
By all means keep us updated. This is starting to get exciting but we cant all be too hopeful yet! :svetius:thanks for your work.
[LG V20 Guides, News, & Discussion] me2151:
I managed to get a Temp root shell about a hour ago. The shell runs under the System_Server context so it is still limited but Its the first step in a long one. Next step is to get a higher level context.
[LG V20 Guides, News, & Discussion] jellybear456:
That's awesome news! Definitely a step in the right direction! Congrats on that:good: keep chugging!
[LG V20 Guides, News, & Discussion] my_handle:
For us clueless people is that like step 1 out of 10, 25, 100..... Just trying to gauge my level of enthusiasm accordingly. Awesome job though.
[LG V20 Guides, News, & Discussion] me2151:
Yea. we would have been at step 25 in that list if our phone was vulnerable to Kernel module exploits. Still might be able to IF i can get my fake module signed.

I wonder if we have kernel source
[LG V20 Guides, News, & Discussion] justinswidebody:
Isn't source on the first post?
[LG V20 Guides, News, & Discussion] me2151:
Yea i hadn't been to the first post in a long time. lol Doesn't have the signing key
[LG V20 Guides, News, & Discussion] Ryuk359:
2 days no news. Can't be a good sign for us.
[LG V20 Guides, News, & Discussion] Skripka:
People have lives and jobs and family and things to do. No news doesn't necessarily mean anything.
[LG V20 Guides, News, & Discussion] rickberg:
Guys there is development going on behind the scenes as reported earlier this is not a easy task and it will take many more failures until a working root is established
[LG V20 Guides, News, & Discussion] Ryuk359:
No I get it. I'm not butt hurt about it. There was just a post every couple of hours or so with news of attempts (even news of failure still gives hope). Hasn't been one in two days. I'm not throwing in the towel just stirring the pot a little.
[LG V20 Guides, News, & Discussion] elliwigy:
we are trying to figure it all out and a few ppl have been trying various things and have got a few places but not what we need yet lol

i think its best to post when theres viable updates on progress but know quite a few of us have the devices on different variants and we all want root or a bl unlock lol

And again, outside of the few devs we know will not help us directly, if you know any devs or if any devs see this and want to join the cause wed be glad to have more brains in the chat, just shoot a comment here
[LG V20 Guides, News, & Discussion] c45h2012:
I can try n help I have a little exp am on Verizon variant
[LG V20 Guides, News, & Discussion] pro_granade:
I'm a ex-ROM dev/maintainer. I'd be happy to help out and test or give insight. I went by Punderino on the IRC if you saw. I'll PM you my Hangouts email.
[LG V20 Guides, News, & Discussion] innthesun:
You guys are awesome. The progress you've made has me excited, I am waiting for root to buy the phone and even if for some crazy reason you geniuses do not achieve it, I applaud your valiant efforts. Thank you.
[LG V20 Guides, News, & Discussion] elliwigy:
an update, someone in the community found a us996 that has debug firmware on it.. just waiting for him to receive the device..

again, this does not mean root but hopefully it can help the cause but we have a ways to go still and trying everything we can think of
[LG V20 Guides, News, & Discussion] keithabrown:
Jeez. Sometimes this sort of thing can take months. Be patient.
[LG V20 Guides, News, & Discussion] Ryuk359:
You did read my post after this one right? I'm very aware.
[LG V20 Guides, News, & Discussion] Ryuk359:
This is exciting news about the debug firmware. Hopefully it pays off.
[LG V20 Guides, News, & Discussion] bobbarker2:
I use to do a lot of x86 REing. Not as familiar with ELF asm but can try and contribute.

It's weird the last LG device I used was the G3 and bootloader unlock and subsequently root were trivial. Did LG step their game up with security?
[LG V20 Guides, News, & Discussion] elliwigy:
to be honest were waiting until he gets the debug device to see what we can do with it.. itll be a bit but its on its way to him..

and not sure, this is the longest ive owned any lg device lmao.. always been sammy up until the N7 fiasco.. ive also always been with verizon most my smartphone life
[LG V20 Guides, News, & Discussion] Slypnslyde:
In the same situation as you I've always been Sammy til the note 7 that I couldn't get , maybe I should of kept my note 5 instead, well only time will tell. But I do gotta say this is a beautiful piece of hardware
[LG V20 Guides, News, & Discussion] Ryuk359:
I'm in love with it. I'll probably hang onto it regardless but root would make it perfect.
[LG V20 Guides, News, & Discussion] Gman_aka_Pop's:
Could this possibly help us???? It states that LG devices with locked bootloaders would just have to BUMP boot.img

http://xdaforums.com/apps/magisk/of...systemless-t3473445/post69621730#post69621730

https://androidcommunity.com/chainf...e-with-twrp-on-pixel-and-nougat-7-1-20161117/

All credit goes to the developer keep up the good work!!!!!!!