yashsingh1/xdaforums huggingface dataset:
[Android Q&A, Help & Troubleshooting] goitalone:
Don't worry.. I am about to borrow the Tardis.

When I get back, ALL phones will be easily rootable again!

---------- Post added at 02:30 AM ---------- Previous post was at 02:27 AM ----------

Back.. nm... ran into some Daleks! Someone else have a go at it! :eek:
[Android Q&A, Help & Troubleshooting] Yommo:
Wait, what?

You're saying the LG tribute HD phone can be unlocked (rooted) by some guy in eBay for 15 bucks? What listings do I look for? I scanned eBay and didn't find anything.

I'm extremely interested. Thanks!
[Android Q&A, Help & Troubleshooting] goitalone:
Not rooted, network unlocked for other carriers besides Sprint/Boost
[Android Q&A, Help & Troubleshooting] Yommo:
Ahhhh

I thought that sounded too easy.

Thanks o
[Android Q&A, Help & Troubleshooting] DrDank:
Stock firmware FINALLY FOUND

After hours and hours of searching different search engines and dead links I finally found the stock firmware for the LG Tribute HD LS676

https://www.tapatalk.com/topic/631-...ribute-hd-ls676-verision-firmware-here:silly:
[Android Q&A, Help & Troubleshooting] goitalone:
:( losing hope nevertheless about root
[Android Q&A, Help & Troubleshooting] Snigglez:
C'mon, don't lose hope. If there is a Will then there is a Way - and think of the new, cool stuff you learn when these little challenges arrive.

:p
[Android Q&A, Help & Troubleshooting] fakeprince:
I've LS676 firmware ZV4 but it's an octopus box file.
[Android Q&A, Help & Troubleshooting] kdm6389:
Are you able to GSM unlock or using as play phone?. I am unable to gsm-unlock so using with JioFi
[Android Q&A, Help & Troubleshooting] goitalone:
GSM unlock on eBay
[Android Q&A, Help & Troubleshooting] bakerd62:
Maybe now we can find a way to install a custom recovery and flash the room. Hopefully this will give us a upper hand.
[Android Q&A, Help & Troubleshooting] sickysticky:
hey there just a thought, i pulled the opensource from lg. the file contained a redme that walked through building from source, and a kernal.tar.gz and android.tar.gz, one could build cm13/lineage13(6.0.1).
[Android Q&A, Help & Troubleshooting] Jrhotrod:
Please move your unlocking discussion to the unlocking thread. This thread is for achieving root access on this device, not carrier unlocking it.

https://xdaforums.com/android/help/lg-tribute-hd-ls676-sim-carrier-unlock-t3556266

---------- Post added at 08:30 PM ---------- Previous post was at 08:24 PM ----------

I doubt stock firmware will help in achieving root. However, after we test the download and try it out, we now have nothing to lose from experiments that have a chance of bricking. Thanks!!
[Android Q&A, Help & Troubleshooting] goitalone:
Only chance for root I can think of at this point would be if we could acquire a userdebug build, which is highly unlikely.
[Android Q&A, Help & Troubleshooting] sickysticky:
Does anyone know if the oem unlock in developer options work?

---------- Post added at 04:11 PM ---------- Previous post was at 04:07 PM ----------

Ive been trying old root methods and got supersu, su and busybox pushed to /data/local/tmp and chmodded, but cand mv to /system/ due to being read only. If we can find the system partition we could adb shell mount -o remount, rw /dev/block/
[Android Q&A, Help & Troubleshooting] goitalone:
Disk info/ pro should show all that

Gotta play around in settings to turn things on first though

https://play.google.com/store/apps/details?id=me.kuder.diskinfo
[Android Q&A, Help & Troubleshooting] sickysticky:
I found in the additional build prop

#

# ADDITIONAL_DEFAULT_PROPERTIES

#

ro.secure=1

ro.allow.mock.location=0

ro.debuggable=0

ro.factorytest=0

persist.sys.usb.config=boot

ro.adb.secure=1

persist.sys.ssr.restart_level=ALL_ENABLE

sys.init_log_level=3

ro.lge.fmframework.enabled=true

ro.zygote=zygote32

dalvik.vm.image-dex2oat-Xms=64m

dalvik.vm.image-dex2oat-Xmx=64m

dalvik.vm.dex2oat-Xms=64m

dalvik.vm.dex2oat-Xmx=512m

ro.dalvik.vm.native.bridge=0

debug.atrace.tags.enableflags=0

#

# BOOTIMAGE_BUILD_PROPERTIES

#

ro.bootimage.build.date=Sun Mar 19 09:50:46 KST 2017

ro.bootimage.build.date.utc=1489884646

ro.bootimage.build.fingerprint=lge/k6b_spr_us/k6b:6.0.1/MXB48T/17078093966a6:user/release-keys

If i remember ro.adb.secure and ro.secure can be changed to gain root

---------- Post added at 07:59 PM ---------- Previous post was at 07:58 PM ----------

Of if we can find an engineering build to get a simple adb remount
[Android Q&A, Help & Troubleshooting] BlakeIverson24:
Uh oh getting close. Great job guys!
[Android Q&A, Help & Troubleshooting] sickysticky:
Well i found out how ro get a bootloader unlocked, however lgs developer site states the process and it looks to be device specific. So hopefully we can get at least a insecure boot.img
[Android Q&A, Help & Troubleshooting] Jrhotrod:
Yes, it is indeed device specific. In the regard that you can only unlock the bootloader on flagships, like the G4 and G5.
[Android Q&A, Help & Troubleshooting] sickysticky:
But an unlocked bootloader comes from a bin file thats emailed after you submit your imei and device id. I just cant get adb to recognise the bootloader. Once the bootloader is available then we can mound the system with adbd..
[Android Q&A, Help & Troubleshooting] Jrhotrod:
Emailed? I never recieved such an attachment when unlocking the bootloader on my friend's LG G4. That makes no sense

---------- Post added at 01:13 AM ---------- Previous post was at 01:11 AM ----------

Then again, I never actually went to the LG website, but just used fastboot OEM unlock
[Android Q&A, Help & Troubleshooting] goitalone:
Yes, it is in fact emailed just like HTC device bin file unlocks are.
[Android Q&A, Help & Troubleshooting] sickysticky:
In any case the bootloader is just one of our problems. If anyone knows how to cause a break in the os to run a cmd promp in root ot mount the system or even pull a boot.img...
[Android Q&A, Help & Troubleshooting] Ryuu_Nanashi:
Just keeps configuring

Hi, I have a LG Tribute HD that appears to be unlocked. However, whenever I try to set it up it won't configure to my network (GSM). What could be the problem?
[Android Q&A, Help & Troubleshooting] Jrhotrod:
https://xdaforums.com/android/help/lg-tribute-hd-ls676-sim-carrier-unlock-t3556266

I know people familiar with the thread are sick of hearing this, but this is the link to the carrier unlock discussion. Take your question there and they will probably be able to help you out more. Since you're new to XDA I don't expect you to know this, but posting in the relevant place is always your best bet for help. This thread concerns rooting the LGLS676.
[Android Q&A, Help & Troubleshooting] sickysticky:
OK so from zergrush to the windows one click programs... No dice, my next step is full Linux environment...
[Android Q&A, Help & Troubleshooting] Ph3ar.:
56 pages in this thread is a testament to the popularity of this phone and it hasn't even been rooted . Some devices that cost 20x more never even get this many pages from root through development . I bought two and also hope someone will figure it out . I'm rooting for our rooters :) .

Update : Hey y'all , I went here https://www.kingoapp.com/contact.htm and filled out a form to add this device to Kingroot . Some of you should do the same . They also have a form for those of you who have been attempting it and they ask for any logs etc that might help . I explained the popularity and included the link to this thread . It won't hurt for many of you to join in requesting it by filling in this form . Thanks
[Android Q&A, Help & Troubleshooting] Sands207:
For those that continue to ask there is a working sim unlock method here https://xdaforums.com/showthread.php?t=3574819

Possible rooting method here... any thoughts or attempts at this? :confused::confused::confused: https://xdaforums.com/sprint-lg-g5/how-to/guide-adb-root-rw-dm-verity-off-sprint-t3523496
[Android Q&A, Help & Troubleshooting] Chief_Nodnarb:
404 error on the possible root link.
[Android Q&A, Help & Troubleshooting] Sands207:
My bad :) here is the right one https://xdaforums.com/sprint-lg-g5/how-to/guide-adb-root-rw-dm-verity-off-sprint-t3523496 It sounds crazy but we will likely need to update to zv4 if we try it or something like this but im pretty sure its an idea:confused:. I'll try it but the tot I will need to restore if I brick is 15 bucks http://www.meenatel.com/2017/04/01/...bute-hd-virginboost-mobile-firmware-download/ i'll need to wait til the first of june to buy it but ill see what I can figure out I can build a userdebug kernel possibly but the one included in the zv3 source doesnt seem to have that option I haven't looked at the zv4 source yet I keep getting nagged to update though.
[Android Q&A, Help & Troubleshooting] goitalone:
deleted
[Android Q&A, Help & Troubleshooting] sickysticky:
Ya ive been contemplating getting the tot, probably gonna get it friday, would it be wrong of me to share with the community? Im not sure, but im afraid ill burn out my logic board with how many times i thought i briked this thing
[Android Q&A, Help & Troubleshooting] -n0cturne-:
Isn't all the lg software,, including all firmware versions along with the lg up dll, available on their dev site..? I checked awhile back, though figured the reason our phone wasn't listed was due to it being a month old.
[Android Q&A, Help & Troubleshooting] Jrhotrod:
Nah, this is a prepaid. As far as I know, LG doesn't care enough to post prepaid device firmware... Correct me if I'm wrong. We would have how to stock ROM a long time ago if it had been that easy.
[Android Q&A, Help & Troubleshooting] valued_one:
Source code available for LG X Style

Source code is available for LG X Style (Simple Mobile). It shows up when one searches for "LGL53".
[Android Q&A, Help & Troubleshooting] sickysticky:
There are zip files you can doumload from lg opensource, but there are directions to compile asop then add those repos then build. They skip the part about an unlocked bootloader
[Android Q&A, Help & Troubleshooting] Jrhotrod:
Wow... This is why I own a Motorola device instead of these crappy LGs. They make it so difficult to just compile a stock ROM! I mean it would take under 4 hours to compile the TOTs or KDZs themselves. Anyway, when there's a will there's a way; I'm sure we can find some way to root this glorified piece of plastic. I'll be monitoring this thread consistently this summer ;)
[Android Q&A, Help & Troubleshooting] sickysticky:
So does anyone know how to split a .tot file into a readable table
[Android Q&A, Help & Troubleshooting] goitalone:
You have to have an unlocked bootloader?
[Android Q&A, Help & Troubleshooting] sickysticky:
In order to flash it to the phone it would need to have lg key. Asop build will be a userdebug key. Unless i missed something the device will lock up if not unlocked
[Android Q&A, Help & Troubleshooting] goitalone:
wow... well that's just great eh? : (
[Android Q&A, Help & Troubleshooting] sickysticky:
No too great, untill i get a file share going then well have zv3 rollback via tot. But From what i can tell its a legit firmware although i cant tell if its specific to any carrier which can be bad
[Android Q&A, Help & Troubleshooting] sickysticky:
OK, got something. Been trying to flash the tot for some time, I keep getting insecure image.... Any thoughts on how to proceed
[Android Q&A, Help & Troubleshooting] kdm6389:
How can check my ls676 is blacklisted or not; before I spend on eBay for GSM unlock. I bought it for online store in $30.
[Android Q&A, Help & Troubleshooting] sickysticky:
Try swappa/esn or imeipro.info the last time these worked but you have to make an account, those were free.
[Android Q&A, Help & Troubleshooting] Sands207:
are you using uppercut with lg up? or the older flash tool
[Android Q&A, Help & Troubleshooting] bibikalka:
Correct. Due to strict SE Linux policies Dirty Cow cannot provide anything of use yet. The first order of business is to figure out how to get at least read only root and zero out the laf partition (link), this should give fastboot access :

dd if=/dev/zero of=/dev/block/mmcblk0p35

Right, but yet here we are, and Kingroot does not seem to help ...
[Android Q&A, Help & Troubleshooting] bibikalka:
I've made a semi-minor progress today. I was able to save a modified boot partition into recovery as per the link below, but unfortunately, it could not boot due to the signature verification failure:

https://github.com/jcadduono/android_external_dirtycow#running

Using these files:

https://mega.nz/#!LFlBRAhS!rDl7PJMkFq7HqUDDgbKV6ddv-C3qkQIJl_CJkhkx2sc

Here is a log of commands:

adb push dirtycow /data/local/tmp
adb push recowvery-applypatch /data/local/tmp
adb push recowvery-app_process32 /data/local/tmp
adb push recowvery-run-as /data/local/tmp

adb shell

shell@k6b:/ $ cd /data/local/tmp
shell@k6b:/data/local/tmp $ chmod 0777 *
shell@k6b:/data/local/tmp $ ./dirtycow /system/bin/applypatch recowvery-applypatch
/dirtycow /system/bin/applypatch recowvery-applypatch <
warning: new file size (22144) and file old size (62072) differ

size 62072

[] mmap 0xb6d77000
[] exploit (patch)
[] currently 0xb6d77000=464c457f
[] madvise = 0xb6d77000 62072
[] madvise = 0 1048576
[] /proc/self/mem 662700032 1048576
[] exploited 0xb6d77000=464c457f
shell@k6b:/data/local/tmp $ ./dirtycow /system/bin/app_process32 recowvery-app_process32
/dirtycow /system/bin/app_process32 recowvery-app_process32 <
warning: new file size (17992) and file old size (22068) differ

size 22068

[] mmap 0xb6d66000
[] exploit (patch)
[] currently 0xb6d66000=464c457f
[] madvise = 0xb6d66000 22068
[] madvise = 0 1048576
[] /proc/self/mem 1665138688 1048576
[] exploited 0xb6d66000=464c457f
shell@k6b:/data/local/tmp $

Then I pressed the Power button for a bit, and the device got LG logo with the star rotating around the letter L. In another adb window, I ran :

adb logcat -s recowvery

And got the output that's in the attached log file.

Then, I typed "adb reboot recovery", and I got "boot verification failure". So while the modified kernel got loaded into recovery, unfortunately, it could not boot, and the device booted using the regular kernel instead from /boot partition.

So back to the drawing board ...
[Android Q&A, Help & Troubleshooting] Sands207:
We got this I am sure of it. I have alot to post but I'm about to go in to work, but in the morning I'll update you as well thanks for giving this your best shot too ? it's only a matter of time
[Android Q&A, Help & Troubleshooting] Android_JT:
Two senior members working on root access! Beyond awesome!
[Android Q&A, Help & Troubleshooting] bibikalka:
Don't jinx it ;)

The next promising attack is same as on Galaxy, via /init process :

http://www.redtile.io/security/galaxy/

But it's a bit tough at the moment since we cannot even read /init to see the right address :(
[Android Q&A, Help & Troubleshooting] itisdieter:
Thanks for your hard work bibikalka and Sands207, my dumb ass appreciates it!
[Android Q&A, Help & Troubleshooting] akula1488:
how does the gift option work? I can make one time paypal payment to bibikalka and Sands207?
[Android Q&A, Help & Troubleshooting] jrk190:
So exciting!
[Android Q&A, Help & Troubleshooting] mrhoque:
are you guys able to root this phone?
[Android Q&A, Help & Troubleshooting] wesgreen:
Not so far, but smarter heads than mine are working on it.
[Android Q&A, Help & Troubleshooting] AwolDroid:
Btw, "psneuter" does nothing...
[Android Q&A, Help & Troubleshooting] bibikalka:
A quick update - trying a few things here and there, but it ain't easy, LG must have pretty solid programmers working over there ! :D

Well, don't stop believing ! ;)
[Android Q&A, Help & Troubleshooting] jrk190:
Really appreciate your work on this, though lg should focus on not making their phones bootloop, lol.

If we get root, you think we can twrp and get cyanogen 14.1 or something?
[Android Q&A, Help & Troubleshooting] bibikalka:
We'll see. OEM unlock option is there, so if we restore our access to fastboot, it might just be possible ;)
[Android Q&A, Help & Troubleshooting] Sands207:
AOSP build is now underway :good:
[Android Q&A, Help & Troubleshooting] nimble.s:
Hello All, I see great work in being done, this is my first post and was thinking if there is a way to collect common information in a wiki like fashion, where we all can update what we have found/tried so far. Let me know

LGUP Flashtool –This will be useful in case the phone needs to be restored to stock. What is needed:-

a)	confirmation on if a specific version of LGUP needs to be created for LS676

b)	Stock image(s) to be used for recovery

c)	Specific steps/directions to perform stock recovery

Unofficial Links

•	Links to bunch of LG Flashtool downloads - http://downloads.codefi.re/autoprime/LG/Flash_Tools

•	Nice write up with links - http://www.androidsage.com/2016/08/...r-all-lg-devices-lg-flashtool-2014-lg-bridge/

•	Links to LG stock images doesn’t have one for LS676 though might be useful - http://storagecow.eu/index.php?dir=Xda/

•	Another Link for LG firmware downloads - http://www.lg-phones.org/lg-firmware-download

•

LG Official Links

•	Firmware - http://opensource.lge.com/osSch/list?types=ALL&search=ls676

•	Drivers, LG Bridge, LG Mobile Support Tool - http://www.lg.com/us/support/produc...mptom=&subsymptom=&sort=pHitCount&resultSeq=6

•	LG Android Device Reset - http://www.lg.com/us/support/produc...ptom=&subsymptom=&sort=pHitCount&resultSeq=15

Root Exploits tried and did not work

1.	KingRoot V5.0.0.367 161 (Android Version) - https://kingroot.net/

2.	KingoRoot 1.4.6 (PC) - http://kingoroot.org/kingo-root/#

3.	Root Method for LG Devices - http://xdaforums.com/android/development/guide-root-method-lg-devices-t3049772

4.	DirtyCow

5.	psneuter

ROM related Links

•	How to make your own KitKat ROM with Root+TWRP from KDZ (can be refrened for LS676) - http://xdaforums.com/showthread.php?t=2666967
[Android Q&A, Help & Troubleshooting] jrk190:
Really appreciate your work, but out of curiosity, why build the ROM if we don't have a way to flash it?
[Android Q&A, Help & Troubleshooting] Sands207:
Good question. Because we will need some of the files that will come as a result. The kernel needing Selinux to be set to permissive among other features and as a way in for us possibly is one but trust me it won't be long before we unlock and root but my main focus is getting source code and kernel built for us and compiling twrp also, it will be one less hurdle for us to jump over and there is no twrp for us so we need to build from source.
[Android Q&A, Help & Troubleshooting] jrk190:
I'll be more than willing to test and help log for you if need be, I've got a *nix partition set up and the phone isn't a daily driver for me, so I'll do what I can to help
[Android Q&A, Help & Troubleshooting] sickysticky:
Lgup no uppercut(yet), ive been through uninstall/reinstall, trying to recognize the device. But if the tot is an insecure image is it rooted?
[Android Q&A, Help & Troubleshooting] ottomatic89:
root?

Hey, I just got here. What is the hold up in rooting this phone? could someone give me a rundown? LG is always a problem.
[Android Q&A, Help & Troubleshooting] Jrhotrod:
Said hold up, in short, is a device running MM with no stock firmware and a non-unlockable bootloader. Most root exploits have been attempted, including Dirty Cow and even as lowly as KingRoot. Scroll back and read some of the thread for more info.
[Android Q&A, Help & Troubleshooting] sickysticky:
Now hold up, I got a stock tot, the headers on the file identify it as ls676. I just haven't got it to flash due to insecure image. Which I assume is adbd insecure "cross fingers". I should have a drop box up with the files for testing soon.so we actually might have more than we think.
[Android Q&A, Help & Troubleshooting] Jrhotrod:
Nice! One step further
[Android Q&A, Help & Troubleshooting] sickysticky:
Ok fellas i got a drive folder with all the items i've been working with. the common folder will need to be copied to the lgup/model folder afterinstall if your going that route. i cant vouch for the origin of the tot seeing as the billing for the site was in india, but there it is basically i still havent gotten it to flash and this took me 3 days to upload...

https://drive.google.com/open?id=0B-PnQPvzCr8eaWowLWJ5VUZyS1U
[Android Q&A, Help & Troubleshooting] Jrhotrod:
How do you think we could go about making it flash? Maybe it's for a different carrier variant of the phone. Perhaps there's some way to dig inside in the tot and find out the exact model number of the intended phone, just to make sure
[Android Q&A, Help & Troubleshooting] sickysticky:
Ive been poking at it with a hex editor, but it can be broken into a bin file. But as far as i got was install lg driver, lgup, lgup_cy, copy/paste common file in model directory of lgup. Restart pc, begin flash.... Flash fail due to secure device but insecure image. Im currently digging into all the .dll files in the directory to see if we can use another flash tool, like odin or something else to skip the secure image lock that the sevice has. Once we get a way back to vz3 then we can poke at temp root without consequence.
[Android Q&A, Help & Troubleshooting] Sands207:
does uppercut help here at all?
[Android Q&A, Help & Troubleshooting] sickysticky:
Will try to confirm, been worken non stop for a few weeks so if anyone wants to be a crash test dummy give it a shot, however im not afraid to brick my ls676. Others should proceed with caution!!!!....
[Android Q&A, Help & Troubleshooting] IVIrZeus:
I wouldn't mind being a test dummy I'm a complete noob as far as all this technical talk is concerned but if someone wouldn't mind walking me through it ill do it, my main concern is messing up my phone service and irreversibly bricking my phone:eek:
[Android Q&A, Help & Troubleshooting] Jrhotrod:
When you're flashing, none of that is guaranteed whatsoever. It's a risk for your device, so better have a backup phone if you expect to help ;)
[Android Q&A, Help & Troubleshooting] sickysticky:
I got the tot from here http://www.meenatel.com/2017/04/01/...bute-hd-virginboost-mobile-firmware-download/ all instructions are there as far as return to stock "if anyone get it to flash" I was trying to pull the partitions from the tot, mod the image and flash via lg flash tool, or even getting the laf to zero out the bootloader, but I still get secure device insecure boot.
[Android Q&A, Help & Troubleshooting] Sands207:
hey guys does this help with the flashing process https://xdaforums.com/showthread.php?t=3517839 Our device is actually K6b_spr_us or at least mine is my screen is cracked atm View attachment 4177340
[Android Q&A, Help & Troubleshooting] kdm6389:
Can any append gsm global unlocking, in topic of discussion, I can't XDA saying you can't add topic
[Android Q&A, Help & Troubleshooting] MsFemina:
https://www.youtube.com/watch?v=10k8I5sDtuQ

Watch this to add new APN https://youtu.be/NG7TQ2Ql3mc

Yes I am using jio, download the app from the first link video description and watch the videos.
[Android Q&A, Help & Troubleshooting] kdm6389:
[MENTION=6085001]Sands207[/MENTION]: can you add a page regarding Global GSM unlock for ls676, people can get confused between rooting and unlock GSM.
[Android Q&A, Help & Troubleshooting] Sands207:
Definitely. ill post it and the redirecting link here to that thread to hopefully to bring the focus back to acquiring root. I personally have no interest in the Global unlock myself on mine I'm sticking with vm for a bit longer but ill gladly get the thread started, but as far as support beyond the tutorial etc people will need to work together on that.
[Android Q&A, Help & Troubleshooting] Ph3ar.:
So is it possible to get LTE on T-mobile doing this with the LS676 ?
[Android Q&A, Help & Troubleshooting] sickysticky:
Hey yall, i got to poking around using the g2 kdz extractor, with a couple of different image mounters and hex editors. So far i can modify the hex and save but still no flash. Im goinig to pull all my apk from my rom with apk extractor and see if the kdz tool can pull and seperate partitions, along with a image structure for the tot