yashsingh1/xdaforums huggingface dataset:
[Android Q&A, Help & Troubleshooting] Sands207:
I still have not managed to get into fastboot but I now know our partition layout ie where our partitions are and a readout of what some of build.prop lists currently but I'm not sure exactly what can be done with the info, I don't know enough about 6.0.1 yet and LG's, I've been on a moto. I mounted /system in recovery I wasn't exactly sure what it would do.. it didn't damage the phone but can we remount R/W somehow to achieve a temp root or with a twrp build of an EXACT varients close like specs of ours and edit or port it so we can try to fastboot boot the recovery and finally flas? Any thoughts? Is adb.secure being set to 1 part of the problem of fastboot being inaccessible? I know you need to be root to run adbd app so I don't know what more to try.. I can run a root shell on my side in arch but it doesn't help the lack of su on the phones side ? if we could pull our existing recovery, that would help but I'm not sure how to extract it from my backup or using adb lol... Is there a twrp build for our sister phones? What are the varients with matching hardware?
[Android Q&A, Help & Troubleshooting] zswielder:
Thank you for your hard work. I don't know if this helps, but many people say Tribute HD is the same as X style (I don't know if it's true though). Here's a root method for X style that I came across on the web: http://rootoreviews.com/root-LG-X-style-install-twrp-custom-recovery

As far as the specs go, Tribute HD is very similar to LG X Power too. This thread talks about rooting X Power, if you see anything helpful there:

http://xdaforums.com/x-screen/help/lg-x-power-screen-root-t3445479

Best,

GT
[Android Q&A, Help & Troubleshooting] Sands207:
The xda app which although not entirely accurate 100% of the time identifies my phone as an X style and I carefully compared the two and i think it is a rebrand, which may work in our favor :) ill have some time tonight to give it another shot, I REALLY appreciate you giving a nudge in the right direction. ?
[Android Q&A, Help & Troubleshooting] coolcapnc:
I tried adb reboot bootloader and it would just boot into normal mode. I think they removed fastboot like they did on the v20.
[Android Q&A, Help & Troubleshooting] mrhoque:
Thank for working on the root. Let us know if u able to get root access
[Android Q&A, Help & Troubleshooting] Sands207:
Annnd now we now know what blocks recovery, and more importantly laf partition are in? I'm nuking mine when I get home which should cause a boot to look for the kernel and fall into fastboot.. I don't remember if it will wipe my data or not but at this point I don't honestly care im all backed up. I am 99% sure that if we can get to fastboot and this is crucial, even though we have the option to enable oem unlocking and i have it enabled we must run the fastboot oem unlock command and then the normal root exploits for 6.0.1 should begin to work for us. there are a few variations of that command for different devices. I'll keep you posted if I have luck ?

*DISCLAIMER* *don't go nuking partitions, unless you are 100% sure what you are doing!*
[Android Q&A, Help & Troubleshooting] Sands207:
Sorry spaced last post
[Android Q&A, Help & Troubleshooting] bibikalka:
Have you tried the Dirty Cow exploit ? It's fairly easy to run, and gets one at least temporary root which should let you nuke the laf partition. See these couple of posts on how to use Dirty Cow :

http://xdaforums.com/showpost.php?p=69387472&postcount=5

http://xdaforums.com/showpost.php?p=69746951&postcount=5905 (this guide is for LG Stylo 2 - LGLS775ABB with Marshmallow, seems the most similar to Tribute HD)

It's pretty easy to run (you will need to modify pieces of the scripts from the above links), and once you get a root shell, it should be simple to run dd.
[Android Q&A, Help & Troubleshooting] Sands207:
Awesome, I'll see what I can do with it. It does look promising though. Will i need to edit the mount points im guessing in the script to match hours?
[Android Q&A, Help & Troubleshooting] bibikalka:
Well, you should check that the system files exist there first ;) Use the LGLS775ABB guide (2nd link), it seems the closest to what we need for LS676.
[Android Q&A, Help & Troubleshooting] zswielder:
You're our hero! Almost there :)
[Android Q&A, Help & Troubleshooting] jrk190:
I'm so hyped. For $16 after tax, this bad boy is snappier than my blu r1 HD. Gotta love having a snapdragon processor!
[Android Q&A, Help & Troubleshooting] AwolDroid:
Lg x style
[Android Q&A, Help & Troubleshooting] bibikalka:
Dirty Cow :

Alright, I tried both options with Dirty Cow, and while it seems that the files are getting replaced, I am unable to benefit from it in terms of getting a root shell:

shell@k6b:/data/local/tmp $ cp /system/bin/app_process32 .
cp /system/bin/app_process32 .

shell@k6b:/data/local/tmp $ md5sum /system/bin/app_process32
md5sum /system/bin/app_process32
5077c4e1b1ae9afec942585c82df162f /system/bin/app_process32

shell@k6b:/data/local/tmp $ ./dirtycows4 /system/bin/app_process32 ./recowvery-app_process32
/dirtycows4 /system/bin/app_process32 ./recowvery-app_process32 <
warning: new file size (17992) and file old size (22068) differ

size 22068

[] mmap 0xb6de0000
[] exploit (patch)
[] currently 0xb6de0000=464c457f
[] madvise = 0xb6de0000 22068
[] madvise = 0 1048576
[] /proc/self/mem 1665138688 1048576
[] exploited 0xb6de0000=464c457f

shell@k6b:/data/local/tmp $ md5sum /system/bin/app_process32
md5sum /system/bin/app_process32
a1632b41ea1036dab40028096acddf93 /system/bin/app_process32

shell@k6b:/data/local/tmp $ ./dirtycows4 /system/bin/app_process32 ./app_process32
/dirtycows4 /system/bin/app_process32 ./app_process32 <
size 22068

[] mmap 0xb6d70000
[] exploit (patch)
[] currently 0xb6d70000=464c457f
[] madvise = 0xb6d70000 22068
[] madvise = 0 1048576
[] /proc/self/mem 1665138688 1048576
[] exploited 0xb6d70000=464c457f

shell@k6b:/data/local/tmp $ md5sum /system/bin/app_process32
md5sum /system/bin/app_process32
5077c4e1b1ae9afec942585c82df162f /system/bin/app_process32

I also tried with the "run-as" command, but could not get root shell either.

Weird stuff ...
[Android Q&A, Help & Troubleshooting] bibikalka:
It looks like the highest aspiration with Dirty Cow will be to nuke the laf partition. Other things can be quite a bit more difficult. Here is some info on Galaxy S7 with seemingly similar issues :

http://www.redtile.io/security/galaxy/
[Android Q&A, Help & Troubleshooting] mrhoque:
Is there any way to modify the build.prop file permanently?
[Android Q&A, Help & Troubleshooting] bibikalka:
Well, you can always Dirty Cow it, and see if it sticks after a reboot.
[Android Q&A, Help & Troubleshooting] demonaxe:
It didnt stay after reboot for me

---------- Post added at 08:32 AM ---------- Previous post was at 08:02 AM ----------

I found the stock firmware zip files here

http://opensource.lge.com/osList/list?curPage=2&m=Mc001&s=Sc002
[Android Q&A, Help & Troubleshooting] xebbmw:
What is the phone Software version from Software info in the menu?

From http://opensource.lge.com/osSch/list?types=ALL&search=ls676 it seems that ZV3 version is available.

For another similar phone LGLS775 it seems that Kingroot (version 4.9.6.) works fine for phones with software version ZV3. See the following thread with details http://xdaforums.com/showpost.php?p=68090309&postcount=35.
[Android Q&A, Help & Troubleshooting] xxxviom:
I paid with PayPal and in 10 minutes we started.
[Android Q&A, Help & Troubleshooting] xxxviom:
2 more phones unlocked :) 10$x2
[Android Q&A, Help & Troubleshooting] xebbmw:
Could you describe exactly how it works with Teamviewer? Do you provide him your IP address?
[Android Q&A, Help & Troubleshooting] xxxviom:
No. When you install teamviewer you will get your ID (9 digits) and password. Password will change every time you close\open teamviewer or reboot your PC, so it is impossible to control your pc after that without new password. You will tell him your ID and password for that moment via website chat (open it in your old smartphone for convinience, to have possibility to communicate), he will connect to your PC and will have control over your desktop and mouse. He will control your desktop like he is sitting next to you. You will see all the process and can interrupt him if you need (youcan move mouse or close teamviewer or restart PC or switch OFF internet connection). He will installl drivers for LG if you don't have them already installed and will run unlock program connected to his unlock usb stick on his PC. For the reason of safety you can use another PC without your private information (if you afraid) or another partition (second operating system). I used my all-in-one PC in my kitchen (I use it as TV). But now I'm sure that this guy is OK - he did well and without any strange actions :) He is worried about his reputation! And don't afraid when he will close Windows Defender if you have one - it think that all cracks or unlock tools are viruses and deleting them, so it is unable to unlock without stopping defender. Unlock works after factory reset, tried on 2 phones.

Also USB Debugging must be activated in developer options and you should grant acess for your PC to your phone on your phone. I've talked to him and said that users just afraid of using Teamviewer :), but ther is no another way to unlock for now.

P.S. Excuse my English - not native... :)

Also I use Teamviewer to help my parents and my brother with their PC - it's very convinient and I don't have to visit them every time. For that purposes it is possible to use teamviewer account.
[Android Q&A, Help & Troubleshooting] Android_JT:
Thanks for the screenshots and the detailed info on the unlocking process! You rock!
[Android Q&A, Help & Troubleshooting] rockinmusicgv:
A bit off topic, but Ting processing an international SIM unlock does not actually make an international sim usable in the phone. The options for GSM/UMTS mode are not visible.

Back on topic, [MENTION=6151268]Android_JT[/MENTION], did Kingroot ever get back to you on your device request? Second, how often does King or KingoRoot update their APKs?
[Android Q&A, Help & Troubleshooting] Android_JT:
KingRoot never responded to my two emails. Not sure if they are normally unresponsive or if this phone isn't on their queue hence the silence.

If anyone notices a KingRoot version update, could they test it on their tribute HD for root and report back here?
[Android Q&A, Help & Troubleshooting] rockinmusicgv:
Do they ever make announcements? It looks like their 'news' page is just typical "why you should root" type stuff...
[Android Q&A, Help & Troubleshooting] MrJinx123:
Does unlocking expose the tethering menu?

I wasn't able to see your screenshots but could you look and see if tether now appears in the settings. It's hidden by default. I have 2 of these phones. one is on boost with tethering enabled and working the other is on another sprint mvno but they were never able to push the policy to turn it on.

Thanks!
[Android Q&A, Help & Troubleshooting] Sands207:
how about root anyone figure that out yet? Another thread could easily be drawn up about unlocking it

Sent from my LGLS676
[Android Q&A, Help & Troubleshooting] Android_JT:
The person who unlocked only posted screenshots of his APN. You should message him for that info.
[Android Q&A, Help & Troubleshooting] Android_JT:
No root progress yet, which is really disappointing. The LG Tribute HD is such a great little phone.
[Android Q&A, Help & Troubleshooting] mrhoque:
please make more request to king root. I am waiting for root since thanksgiving.
[Android Q&A, Help & Troubleshooting] Android_JT:
I have already sent two emails and am wary of being a nuisance to them. If more people on this thread emailed the KingRoot team to request root, it would make more of an impact than me - a single person - constantly pestering them.
[Android Q&A, Help & Troubleshooting] Android_JT:
I checked KingRoot's social media, same content as their "news" page. :/
[Android Q&A, Help & Troubleshooting] rockinmusicgv:
The obvious question I would have is has anyone had any real, reliable success rooting Android 6 devices? It seems Marshmallow itself is significantly more secure than previous versions. I know some vulns get patched here and there, but it seems a good number of modern Android phones haven't been rooted yet.
[Android Q&A, Help & Troubleshooting] Jrhotrod:
I've been monitoring this thread for several months now for my little sister's phone. I just wanted to jump in and let you all know that KingRoot is probably not going to be able to root the phone. It's running Marshmallow, so most root exploits are patched and there are two alternatives: 1. You downgrade to Lollipop (not an option here) or 2. Use systemless root. This would involve an unlocked bootloader and TWRP. In other words, root for this phone is going to be darn near impossible. The only way to get around this issue would be to boot TWRP onto the phone without an unlocked bootloader... Hmm...

My advice? Sell the phone (if you haven't shattered it like my sis :rolleyes: ) and buy something like the Moto G4 with a bit of extra money. There are some screaming deals on Swappa and refurbished on Best Buy, so look around.

PM me or reply to me if you would be interested in any of these ideas.
[Android Q&A, Help & Troubleshooting] Nitro Lopez:
KingRoot 5.0.3 doesn't work. actually the app didn't even try to root., just said that my device couldn't be rooted yet and to submit a request for root.
[Android Q&A, Help & Troubleshooting] bgomezzz:
I have seen some unlocked LS676s on Ebay, is there a way to flash one of those firmwares on a locked cell?

Do you have tried the Chainfire's Systemless Root?
[Android Q&A, Help & Troubleshooting] dannylolz4:
Here's a Galaxy that was shipped with MM that's evidently successfully been rooted. It can be had from Cricket right now for 30 bucks if you port in. Thinking seriously about that and abandoning LG forevermore.
[Android Q&A, Help & Troubleshooting] Nitro Lopez:
chainfire systemless root would work, but u need TWRP to install it.
[Android Q&A, Help & Troubleshooting] rockinmusicgv:
So, to give you an idea of how locked down this phone is, Ting seems unable to perform a ISU - which I would've hoped is a fairly mundane thing for them to do and not at all harmful to anyone's bottom line.

End of the day, this is the last LG Phone I ever buy. Great work, LG.
[Android Q&A, Help & Troubleshooting] Android_JT:
Those sim unlocked phones were probably achieved the same way as offered by gsmzambia.

Can't flash since there isn't root.
[Android Q&A, Help & Troubleshooting] Chief_Nodnarb:
How different is this phone from the K10? There has been a root method for the K10 on Marshmallow using the DirtyCow exploit. I'm just curious if it would work on this phone. I'll look into it more and test if I can.

I've recently purchased a Moto G4 and am very happy with my decision. I've got it TWRPed, rooted and there are multiple Rooms for it. If any of you have the extra money, I'd recommend you buy this device. Good size, great screen, awesome front facing speaker (even better with V4A), pretty decent camera that's get me by and a good feel in the hand. There are a lot of pros for this phone and I haven't found anything I don't like about it yet. There's also a stock 7.0 soaktest ROM floating about that I've flashed, the phone is even better on Nougat.

Anyways, just wanted to let you all know about the K10 root method. I'll try it, if it works I'll let you know. If not........Well, you'll know that as well.
[Android Q&A, Help & Troubleshooting] rockinmusicgv:
I don't want to be a negative nancy here, but according to this thread:

https://xdaforums.com/lg-k10/how-to/root-lg-k10-420ds-t3479902

it is possible to root the LG K10 with KingRoot. Correct me if I'm wrong, but KingRoot does not work for this phone, no? Or is the binary given in that thread a new variant?
[Android Q&A, Help & Troubleshooting] gldbnd:
no solution :(
[Android Q&A, Help & Troubleshooting] rockinmusicgv:
Did you try the K10 method?
[Android Q&A, Help & Troubleshooting] MsFemina:
You people talking about sim unlock websites too, is it really helping? I thought they are all spammers. Don't get excited just because someone posted screenshot of hidden tethering and network selecting option. You will get it once you finished hands free activation and I have activated 7 times. Whenever I formatted I just reactivate it. 4g or 3g wifi and sprint sim card is enough to activate the phone and get the tethering settings. I am not happy with boost apps installed in my phone but I needed Bluetooth tethering since I have problem connecting 2.4 frequency wifi connection, so I activated the phone. But I can't use my country sim cards. Anybody facing wifi disconnection problem? My wifi disconnects every 30 seconds. But my phone works great with frequency 5something. I only have problem with 2.4.
[Android Q&A, Help & Troubleshooting] mrsurge:
True, so true. I even feel bad about writing this, but I feel it has to be said. One day in the future someone's going to want to try to find something that was mentioned somewhere in the middle of this thread... And it's going to be damn near impossible because of all the BS they've got to comb through.
[Android Q&A, Help & Troubleshooting] MsFemina:
I just don't trust such websites because I have seen on lots forum even developers replying links to Thier own apps as someone else apps lol. Only people who have no knowledge about them or new to internet will believe in such websites. Even if there is some genuine websites, we won't know unless we know the admins in person. Because 90% of them are spammers and it's hard to find genuine websites. But I don't think it's possible since we won't get sim unlock code input option. It's network's trick to stop people from unlocking illegally, this is my point of view because we can't even input secret Android codes without active sim cards. I believe only network can perform unlocking stuffs if we want safe unlock. And I don't know about other people mobile but I am not getting any options to input sim unlock code when I insert my country sim cards.
[Android Q&A, Help & Troubleshooting] rockinmusicgv:
So, it might be worthwhile to move the unlock discussion to a new thread. I created one here: https://xdaforums.com/android/help/lg-tribute-hd-ls676-sim-carrier-unlock-t3556266
[Android Q&A, Help & Troubleshooting] Android_JT:
Thanks for hearing people's greivences and taking time out to create the separate thread!
[Android Q&A, Help & Troubleshooting] rockinmusicgv:
I installed a shortcut tool to try and figure out how to get the tethering/roaming menus currently unavailable due to Sprint's and LG's idiocy. There are *a ton* of hidden menus/options in there, but Shortcut Master can't seem to open them. Anyone know how?

Edit, Not all the menus are that exciting looking. The "reboot test" menu options, those might be more interesting if we need fastboot. Also, they show how similar these phones really are. There are several options listed as "vzw_only". I'm don't know that much about the phone world, but it strikes me that LG wouldn't include settings for Verizon on a Sprint phone unless they were running the same software.
[Android Q&A, Help & Troubleshooting] MadsMann:
A lot of OEMs are lazy in the sense that there are multiple variations of the same hardware across a multitude of carriers so for simplicity's sake they omit and add only whatever carrier specific code is needed. So there's always residual bits and pieces left behind. I've noticed it for years now.
[Android Q&A, Help & Troubleshooting] rockinmusicgv:
Right. I figured as much. By the way, I fired up "Activity Launcher" and played around for a bit. There are SO MANY more options available through the other carriers menus.

But I think my point was this: if we can break into one phone, we might be able to break into all of them.
[Android Q&A, Help & Troubleshooting] MsFemina:
Just input carrier sim card and turn on the phone and perform handsfree activation. It will be activated and you will get the tethering settings. if your wifi connection is fast. You don't have to pay money so don't worry just give a try. You can go to settings and click activate this device. I have done this 7 times and successfully activated 7 times. All you need is fast internet connection to download fastly
[Android Q&A, Help & Troubleshooting] rockinmusicgv:
I appreciate the suggestion, however, the menus are still hidden.
[Android Q&A, Help & Troubleshooting] MsFemina:
Not hidden for me, I can turn on tethering and my sprint sim card is not activated.
[Android Q&A, Help & Troubleshooting] rockinmusicgv:
It might be due to you never activating your phone. This was on R+ first. Maybe that has something to do with it. Either way, hopefully root can be achieved for this phone so it can be used at it's full potential.

If not, Huawei Honor, here I come...
[Android Q&A, Help & Troubleshooting] MsFemina:
When I called sprint they asked me to root the phone and unlock it because they only can unlock year old phones
[Android Q&A, Help & Troubleshooting] Sands207:
i am working with the senior dev of the K10 who just overnight cracked the bootloader and unlocked their bootloader and have been troubleshooting with for over a week. I'm chipping away at it as i find time but i can't say anymore as im not hear to hear others say im chasing unicorns because im NOT. Our issue is we need aboot and laf aka download mode zeroed out to access fastboot... which is the long of the short of it. The short vision which is what im working at with help is patching both init and selinux to grab a true temp root so we can a. extract and zero aboot and get a look at our partition mapping and b. extract laf and zero it so we can finally access fastboot which we DO have. After bootloader unlock via fastboot normal root methods aka one clicks and kingroot supersu etc SHOULD work and we also had another xda member step up and offer me help with twrp should we overcome said hurdles. For me this has been over 3 months i was going to toss this phone in the trash but I couldn't.. This phone has potential and im seeing this through, instead of hating on me maybe some of you more experienced members could contact me to help instead of trying to shame me publicly for not knowing everything and this thread wouldn't be 10 pages long. Straight up, I NEED HELP.

Sent from my LGLS676
[Android Q&A, Help & Troubleshooting] rockinmusicgv:
You are so far beyond what I know. If you need a build server, I can try to help you with that. Otherwise I will continue to look forward to your progress.
[Android Q&A, Help & Troubleshooting] Sands207:
As far as progress this is where I am at. If you would like to assist in this process start here https://xdaforums.com/showthread.php?t=3553674 I worked at it all day yesterday and all night last night but i have to work so i gotta crash lol.. and you will need the ndk first of all, python, windows and Ubuntu among other tools in the guide. it is a starting point so we can get at aboot and laf to get to fastboot and to the good stuff. here is the process which also gives root as well in the long run... take a crack at it... please thank the dev as he has been trying to help us as well ?? and try it before you tell me its not going to work, i just dont have the time.

Sent from my LGLS676
[Android Q&A, Help & Troubleshooting] bakerd62:
I will admit, it's alot for root, but one step closer to full root and a ROM/Recovery. Another idea would be to flash a recovery using flashify, then flash SuperSU in recovery. Idk just throwing up things
[Android Q&A, Help & Troubleshooting] Sands207:
Unfortunately that is not going to work. You need root access to use Flashify and we do not have it yet...

And until we unlock the bootloader which is possible I have been talking with the dev on the K10 unlock, and our phone is a K6B for those who are wondering why this process is where I am headed with this. If the init and selinux can be patched and I have been shown it can be we are going in the right direction and I need help as this is more advanced. I feel stupid asking for help so im likely to abandon the project soon just being honest

Sent from my LGLS676