yashsingh1/xdaforums huggingface dataset:
[T-Mobile LG V10 General] YrrchSebor:
Gotcha yeah, it seems like good news for all phones with unlockable bootloaders until Google, and then the OEMs, patch the exploit.
[T-Mobile LG V10 General] CrimsonSaber5G:
will this factory reset my phone?
[T-Mobile LG V10 General] YrrchSebor:
Nope. Unlocking your bootloader will but this won't in itself.
[T-Mobile LG V10 General] CrimsonSaber5G:
thank you, and i have the tmobile variant, that means my bootloader is already unlocked??
[T-Mobile LG V10 General] YrrchSebor:
No, it means it's unlockable, but you have to actively unlock it. There should be a thread here somewhere if you haven't done that yet, but it's just boot into bootloader and then 'fastboot oem unlock'

Edit: in case you need it there are great instructions in the v20 thread that I linked in the first post.
[T-Mobile LG V10 General] je2854:
The cow method means copy on write...

This means as anything is written it is copied (or flashed or burned; whatever you want to call your desired definition)

You could in theory copy dummy files to a temp location and actually write to a permanent location...

Or am I thinking wrong about it?

If this is a viable option to ALL phones I don't think Google or manufactures could (or would for that matter) actually patch this kind of exploit as it would be super time consuming.
[T-Mobile LG V10 General] Amd4life:
just confirming that Root 20l w/Dirty Cow does work.

Finally got my replacement V10 back, and all is a go again. Stock rooted,

Not sure the novice should try this, as its pretty nerve racking. If you follow the directions correctly it does work great.

Surprised they have closed this backdoor yet,

thanks for being the first to try this on a V10.
[T-Mobile LG V10 General] YrrchSebor:
I think it's considered a very serious vulnerability that must and will be patched soon. They can't have root access so easily obtained on any device.
[T-Mobile LG V10 General] YrrchSebor:
You're welcome, and thanks for confirming. That one step where the screen goes weirdly backlit with the Tmo splash screen is a bit nerve-wracking, and so is writing recovery this way, but I was comforted by the fact that you can just tell it to to write to the recovery partition rather than having to know the more technical name/location(not sure if this was possible a few years back?)

Anyway, if I did brick I was gonna go straight to the store and buy a ZTE Zmax Pro for $180 haha.
[T-Mobile LG V10 General] YrrchSebor:
Which reminds me, does anyone know if there is a way to simply push su into /system once you have the root shell, instead of writing recovery to flash SuperSu? Just curious. I sorta wanted to do that but then I just went with TWRP.
[T-Mobile LG V10 General] famewolf:
No. The shell has limited access...it has just enough permissions to write recovery and access some things on boot...you need to get it a recovery where you can then flash a zip to install superuser.
[T-Mobile LG V10 General] AnonVendetta:
Thanks so much for this info, I was actually about to post a new thread to see if root for 20L had been achieved.

But a few questions:

Is there a KDZ/TOT available for 20L? Or is it delivered in update.zip format via OTA?

Is there a way to root 20L without touching system partition? Like, you know, systemless root? I was thinking that maybe it might be possible to flash Magisk from TWRP then install systemless phh Superuser or (less preferable for me) SuperSU. This way I can still take the official Nougat OTA when it hits, without losing root. But the catch is, TWRP needs to be accessible first.

Well, time to sleep for now, it's been a long 3 days, subsisting on Monster and cigs. I'll tackle this when I eventually wake up.
[T-Mobile LG V10 General] joesee:
Like the last guy, I've got a million questions on this. I need to find the changelog on 20L to begin with, because if they didn't fix the VoLTE silence on calling, then it's useless to me. I wonder where the OP was with his existing V10.. because I'm currently on 20J rooted with twrp. Seems with the instructions posted, I would have to use LG bridge to go back to 100% stock, then upgrade to 20L then hope this works. Again, the radios are probably modified so there's probably some kind of anti-rollback involved as well.

Great post though! Great work discovering this! Definitely in the right direction!
[T-Mobile LG V10 General] YrrchSebor:
There is a 20l KDZ floating around in some other threads. Not sure if there is or will be a systemless root, never even done it myself [emoji4]
[T-Mobile LG V10 General] YrrchSebor:
The Volte silence bug is fixed in 20l, as many have reported. I had updated officially to 20l and was stock unrooted prior to this. But for people who are rooted on 20j or earlier, I believe Eliminator has released a pre-rooted update, so maybe you'd wanna do that instead.
[T-Mobile LG V10 General] AnonVendetta:
Well, I found the thread that has a link to 20L KDZ, but the link doesnt work:

http://xdaforums.com/tmobile-lg-v10/development/rom-v20e-6-0-t-mobile-t3356412

I've tried with multiple browsers, several download accelerators, etc, on mobile and PC, file wont download. I either get a blank page, an error, or a tiny downloader.dev file that cant possibly be a valid KDZ.
[T-Mobile LG V10 General] YrrchSebor:
Yeah, that one doesn't work for me either, but here is one that does in this post: http://xdaforums.com/showpost.php?p=69556319&postcount=2855
[T-Mobile LG V10 General] AnonVendetta:
The 2nd link worked, but I'm not flashing the KDZ just yet, until I can figure out the exact steps for dirty cow root. I checked your links in OP, but some steps are unclarified. The instructions appear to be for the LG v20, not the v10. Although it's my understanding that the exploit is nearly universal and usable on most devices.
[T-Mobile LG V10 General] YrrchSebor:
Ah yeah, I just linked the v20 thread to give that person credit for his write up and whatever he did, but to root I actually just used the steps in the github link. But yeah, the exploit is universal.
[T-Mobile LG V10 General] stikboy73:
Just stopped by to let everyone know that this dirty cow exploit is working 100% with the v10. Just flashed the stock 20L kdz and then rooted with the dirty cow exploit linked in the first post. Everything went very well and the instructions are very straight forward.

Thank you to everyone involved.
[T-Mobile LG V10 General] AnonVendetta:
I just finished using this exploit, works 100%. But I couldn't get adb and fastboot working in Windows 10, even though I have the LG drivers installed. So I booted into a Fedora Linux live ISO, installed a few tools, both worked immediately.

I didn't bother flashing SuperSU, instead I installed Magisk and phh's Superuser from TWRP.

I also noticed that the dirty cow command for modding the boot image also sets SELinux to permissive, ensuring permissive on every boot without needing to use a script. I have a 10" Samsung Galaxy tablet running CM13 that's very easy to root, but I haven't been able to get a permanently permissive boot image. So I'm going to try this exploit on it for this alone.
[T-Mobile LG V10 General] AnonVendetta:
I havent been able to get the exploit working on my tablet. I used the appropriate ARMv7 binaries. I ran the command where the device is supposed to look like it's crashing, but nothing happens on tablet. So I proceeded anyway. After I get to the boot image flash part, I get a message that the exec command isnt found. And a message that the boot image cant located.

I wonder if CM13 is already patched against this exploit, or if there are additional steps I need to take. I'll try installing CM13 on v10 to see if it works there. Maybe I should also register a GitHub account so I can file an issue report.
[T-Mobile LG V10 General] YrrchSebor:
I guess the exploit could already be patched in the latest CM builds, or else it must be something with their kernel, since it would pretty surely work with the stock Samsung ROM? Not sure but keep us posted.
[T-Mobile LG V10 General] hachi111:
this root method works a treat, thanks for sharing
[T-Mobile LG V10 General] Double0EK:
Not sure of this... but why would CM roms need to be rooted? Dont they already have root pre-installed on every build? Just open Development and turn it on...?
[T-Mobile LG V10 General] YrrchSebor:
Ah, check his post right above the one you quoted. He's trying to use this to set the selinux to stay permissive..
[T-Mobile LG V10 General] tnpapadakos:
will this work to install 6.0 on a V10 over 5.1.1 stock rooted?
[T-Mobile LG V10 General] YrrchSebor:
Nope this is just for rooting. You might want to find and install the latest stock KDZ file to update your phone.
[T-Mobile LG V10 General] tnpapadakos:
and then use this to root it, right?
[T-Mobile LG V10 General] YrrchSebor:
Yep, you could definitely do that.
[T-Mobile LG V10 General] AnonVendetta:
[MENTION=2572863]Double0EK[/MENTION]: The problem isn't rooting, the tab is easy enough to root. I was trying to use the dirty cow exploit to get a permanently permissive (SELinux) boot image/kernel. There is a step in the instructions where the boot image is patched, this works on v10 stock ROM to get permissive. Did you *read* my post in its' *entirety*?

Still no luck so far, I'll try again later when I'm not as busy.
[T-Mobile LG V10 General] luisitox22:
This worked like a charm. Had some issues at first since i did not know the phone had to be on and not on ADB bootloader mode to start this process. Trying out the ROM - RadeonMaya LG V10 (T-Mobile) v3.5 H901 V20L now thanks to this post.

Thanks a lot!!! this was tricky but fun.
[T-Mobile LG V10 General] CILOT01:
anyone face an issue with chmod 0777 - cant get passed it
[T-Mobile LG V10 General] YrrchSebor:
No issue and no reports of an issue. I can't remember now but maybe you need the space and asterisk? chmod 0777 *
[T-Mobile LG V10 General] CILOT01:
Got it...but when i put in the command for my twrp img it says perms denied...
[T-Mobile LG V10 General] YrrchSebor:
Hmm, when you get to the dd command, do you have the # prompt?
[T-Mobile LG V10 General] CILOT01:
I must of missed something....but i have it now...

Thx for your help!!!
[T-Mobile LG V10 General] neo4uo:
Is this the only method to get root on the latest T-Mobile software H90120L?

Ended up using the DirtyCow exploit and it worked perfectly :)

5 Star Thread, but definitely not for the faint of heart, lol!!!
[T-Mobile LG V10 General] YrrchSebor:
I'm not sure if Eliminator or Tungkick or anyone have made a tot file to flash TWRP by now or not. When I first did this it was the only way to root 20l. But yeah, there's that one moment that can scare you, but I wasn't worried because the instructions basically warned about it. And like I said before, if I bricked I was gonna run to the store and buy a ZTE Zmax Pro for 180 haha.
[T-Mobile LG V10 General] neo4uo:
Ya I had soft bricked the first time I used this method, it wasn't anything to do with dirtycow or this process, something I did after the fact. I flashed the 20j tot updated to 20l and re used dirtycow and bam...that's twice I used this exploit and it works flawlessly :)
[T-Mobile LG V10 General] Koup1472:
Hi new user hear so take it easy please I'm on stock rooted 6.0 v20e version and have been trying to find a guided to update to the newest version v20l I believe and keep my root access, if anyone can point me to a step by step guide I would be thankful, I rooted my phone from the guild hear and have searched, but haven't been able to figure it out
[T-Mobile LG V10 General] Double0EK:
http://xdaforums.com/showthread.php?t=3360240

Go to that thread.

Download 20L Part 1 and a 20L Part 2 of your choice.

Flash Part 1 in TWRP

Use the TWRP Menu To Boot Back Into Recovery

Flash Part 2

I dirty flashed this over the 20J and havent had any issues. But each phone acts different.
[T-Mobile LG V10 General] Koup1472:
Thank you , so the part 2 that I pic is there root acess on anyone of them or is rooting it a different process, does the custom debloated have root ? Thanks in advance
[T-Mobile LG V10 General] AnonVendetta:
I used the Dirty Cow exploit to create a boot image that sets SELinux to permissive by default. Then I took the resulting image and modified it with SuperR's Kitchen, to add native native init.d support, a feature I couldnt find in other v20L ROMs for the v10 (well, Andy Zhang's ROM has init.d, but it doesnt work all the time, off-again, on-again). It is otherwise stock in all other ways. No overclocking/underclocking or other added features, etc. It is for v20L only, should work on any ROM that uses that firmware. I only have a private copy which I'm using for personal use, but if anyone else wants to try it, I can get around to providing a copy. This boot image can be patched by Magisk, Xposed, SuperSU, phh's Superuser, etc, but is otherwise unpatched by any of these unless you do so yourself. I'm an amateur, first time I've modded a boot image, but it's been working fine for me for over a month.

I see that Eliminater74 has released a new kernel for our device last month, it's in alpha/beta, and as he says it is likely to have big issues. Mine is nothing more than a mod of the stable v20L boot image. But I do plan to try his kernel. I don't even know if there is a technical different between between a boot image and a kernel, and if so, what that difference is. LOL.
[T-Mobile LG V10 General] Sylen7Nato:
how long is it supposed to be on the "crash" screen with the weird backlight? been on that screen for about 10 min now and not sure if its supposed to take that long

edit: nevermind I got it to work...everything works great, rooted and twrp installed...thanks so much
[T-Mobile LG V10 General] vladimir40:
can you help me to root my phone?
[T-Mobile LG V10 General] MCFADONNA:
i get so far then it starts saying no such file directory . im doing copy and paste so i dont understand what im doing wrong. Anyone around to help ?
[T-Mobile LG V10 General] YrrchSebor:
At which point do you get that error? It's possible that you don't have the files in the right directory where you're running your commands from. So, if you have the files in a download folder, you may want to do CD Downloads in the command window..
[T-Mobile LG V10 General] MCFADONNA:
Thanks for the response . Of course after i scream for help it works right away lmao . Happens everytime. im rooted now all is well . :silly:
[T-Mobile LG V10 General] Sylen7Nato:
I just used this guide, it's pretty easy but a little scary (as descripted)...when I got to the crash screen I just exited the cmd window and continued...everything worked out fine...here's the link to the guide I used

https://xdaforums.com/tmobile-lg-v10/general/step-step-guide-rooting-lg-v10-using-t3382631
[T-Mobile LG V10 General] famewolf:
I just use the universal init.d app for that. https://play.google.com/store/apps/details?id=com.androguide.universal.init.d

---------- Post added at 10:35 PM ---------- Previous post was at 10:33 PM ----------

You don't tell anyone what line you were running or the exact response. How are they supposed to help you?
[T-Mobile LG V10 General] famewolf:
My understanding is that once you've enabled init.d via universal init.d and it has "hooked" into the boot process you can uninstall the app and it will continue to run things on bootup similar to how when you run the "sdfix" app to correct permissions once it edits your platform.xml file you no longer need the app and can uninstall it. I'll agree that kernel level support is better but have to weigh that against running something that hasn't been peer reviewed in depth. This is nothing against you in particular and would be the same if I was trying any rom or kernel someone had "tweaked".

For clarification is your boot.img that you uploaded based on the stock boot image or eliminator's?
[T-Mobile LG V10 General] AnonVendetta:
[MENTION=320962]famewolf[/MENTION]: My mod is based on the pure stock boot image, I didn't use Eliminater74's work at all. I did say I started by flashing an official KDZ. But to get SELinux permissive and init.d with Eliminater74's Nebula kernel, I first had to flash my zip, then his. I'm not sure why these things "carried over".

I already listed my steps, anyone can duplicate them. I have no idea how to infect the stock boot image with malware or other malicious modifications, etc, even if I really wanted to (which I don't). With that said, you guys are free to either use my zip or not, trust it or not. It's your call. Do you not think that more experienced modders like Eliminater74 had to start out as being untrusted, then work his way up? Of course he did. People tried his work, found that it was good, that builds his rep.

If anyone here can find anything malicious in regards to what I've provided, I will go ahead and request that XDA staff ban me if that turns out to be the case. But that will never happen.
[T-Mobile LG V10 General] danthesamsung:
may i please have some assistance i need help getting my v10 rooted ...
[T-Mobile LG V10 General] xXCoolGuYXx:
Look up step by step root for the LG v10 and you will find it there he has it step by step for dirty cow
[T-Mobile LG V10 General] linsalata28:
Just subscribing
[T-Mobile LG V10 General] linsalata28:
I keep trying to use this but it gets about half way through the commands then I get a error .Something like command not recognized while flashing TWRP.img.

Please help.

Can someone please post the commands they used?

Thank you.
[T-Mobile LG V10 General] 1337haXXor:
So I recently got my V10 (LOVE it!) and I'm looking for a method to hide the root, as I have ONE app (looking at you Pokemon Go) that's not too keen on rooted devices. I've used magisk, phhsuperuser, and had a systemless setup on my Galaxy S5, would something like that be possible on the V10?
[T-Mobile LG V10 General] clockcycle:
OP method worked 100%
[T-Mobile LG V10 General] rafaelox24:
HELP!

Im bad with english... can some one make a video or a more specific tutorial? thanks
[T-Mobile LG V10 General] sumitverma1:
Ya make a video tutorial.i done all the commands successful. But the getenforce command is not working for me what is wrong.
[T-Mobile LG V10 General] sinner822:
Yes.

Look into security also for those games that steal your info.
[T-Mobile LG V10 General] sumitverma1:
Finally I did it got super su on my mobile.
[T-Mobile LG V10 General] ratedadorable:
ahh it was such a pain took 3 days for a noob like me :( but i did it in my friends mobile just to learn this :D So happy and thanks to all Dev n XDA for keeping alive every kind thing stay blessed
[T-Mobile LG V10 General] fastjohnson:
Worked perfect. Not the first time I used dirtycow but a first for root and custom recovery. Normally it would be for frp unlocking. Worked great and good work putting this together.

---------- Post added at 01:23 PM ---------- Previous post was at 01:20 PM ----------

I had the same problem at first delete it from your D_cow file and re-copy it to your dcow folder work on just that cause once you get it to take it'll work. Extract it to that folder as well using 7zip
[T-Mobile LG V10 General] rafaelox24:
Hi, y root my device with this xploit, but i have a minor problem.... Always when i turn on the phone the next text apear: "Your device software can be checked for corruption" my device works perfectly but i dislike that, its posible eliminate that message? Note: Sorry for my english jajaj
[T-Mobile LG V10 General] fastjohnson:
It's saying that because theres a recovery system in the boot partition that's all it's nothing bad and it also see's the system is rooted so most phones say that one every reboot , Motorola, lg , some Samsung's. It's nothing to worry about.

---------- Post added at 09:22 AM ---------- Previous post was at 09:15 AM ----------

I have the same build as you and this exploit works perfectly. Not the first time I've used D+cow but it was a first for recovery n root. I normally use it for FRP unlocking and it's a fun and challenging exploit I was telling the maker of dirtycow last night on his YouTube channel about the things that it's being used for. He was happy as hell check him out look for ghostly hacks.

---------- Post added at 09:30 AM ---------- Previous post was at 09:22 AM ----------

I don't know about all variants you need the bootloader unlocked first and I'm sure D-cow could do it you just need the right files and where to point them to. Let's say the international version lg V10 h961n doesn't have a oem unlocking option probably the same with att. I just know the dirtycow is doing things that work.

---------- Post added at 09:40 AM ---------- Previous post was at 09:30 AM ----------

I'm on the 20L and installed TWRP and rooted yesterday and my phone's acting perfectly like it hasn't been changed at all everything is right like it was so. I'd probably go back stock and wait to get the 20L update then D-cow it. Like you said there's too many issues on the 20j update it's not worth it for sure.

---------- Post added at 09:45 AM ---------- Previous post was at 09:40 AM ----------

How come you flashed the 20L kdz file if you was already 20L there's no need to flash that kdz I went from 90% stock just had the bootloader unlocked and did the D-cow exploit and bingo.

---------- Post added at 09:51 AM ---------- Previous post was at 09:45 AM ----------

Your already rooted and is your BL unlocked ? If so I'd try it, it won't hurt your phone it'll just reject it.

---------- Post added at 09:58 AM ---------- Previous post was at 09:51 AM ----------

You copy and paste all commands. In the link where to get the D-cow files there's a step by step instructions to do this. You bring that up as your first page then put your terminal commands page in front of it and you just copy and paste don't bother typing each individual command it's nerve racking but yes chmod 0777* must have a atterisk.
[T-Mobile LG V10 General] sumitverma1:
I am on rooted v20l with twrp.Volte function is not working with my Jio4g sim is there any method to work Volte.
[T-Mobile LG V10 General] ammenheru:
Dirty Cow was by far the easiest, non one-click root method I've used. The instructions were easy to follow and my LG-V10 was rooted and fully operational (besides the well known Android Pay issue-which I don't use anyway) in about 10 minutes. Kudos to the team that put this together. You guys rock!!!!
[T-Mobile LG V10 General] Jimhackthorn:
Can dirty cow brick my phone or is it perfectly safe just want to know if there are any dangers and how to avoid something going wrong with it.
[T-Mobile LG V10 General] Skylined:
Worked perfectly on my stock LG V10 H901 20I with a unlocked bootloader. I had done it on Ubuntu 17.04 x64...
[T-Mobile LG V10 General] Mo3bium:
read to go. buuut

hi I'm not trying to drive anyone crazy but..

I have the bootloader unlocked the dirty cow files all in a folder located on my desktop,

I put both a twrp.img and a recovery.img (because there are conflicting threads on which is correct?) into my phones internal root along with the

no-verity-opt-encrypt-3.1 and the SR3-SuperSU-v2.79-SR3-20170114223742

I leave the phone (just on right) - not fastboot mode

but how on earth do I activate the 4 recowvery files/ double clicking doesn't do it and drag n' drop to c prompt doesn't either? so if you don't mind, would you please reveal the magic secret to activating these?
[T-Mobile LG V10 General] YrrchSebor:
Hi, click the first link I posted in the OP, then click 'view all of README.md'. You'll find the steps there, basically you'll be using adb to push those files to the phone. That page I linked must have changed since I posted it way back lol. The steps are all there
[T-Mobile LG V10 General] Mo3bium:
vent no more. :D

yeah , find that there are two links. one to source forge or moddb? and its the un-compiled files> - > slaps hand down face. ;)

so anyways yeah in found the automagical kit. it works until it says my bootloader locked. so I do the lock re-unlock. still says I'm locked . soooo I try it another 16 times. plugged unplugged different twrp versions. it still says I'm locked. sooooo by this point I'm so F-in angry . after over 60 hours I quit. no more rage dumps. rofl. so thanks for responding anyway man.