yashsingh1/xdaforums huggingface dataset:
[AT&T Samsung Galaxy S 5] asahi_nysurf:
[MENTION=7597286]AptLogic[/MENTION],

Hey man thanks for your great work on this. I was pleasantly surprised to find your post. I thought folks already forgot about the AT&T Galaxy S5 due to the lock bootloader, but you proved us wrong. Golf clap and Cheers to you. And also thank you for continuing to support and answer folks questions. I am studying your guide thoroughly before I make a move

I actually found you and this thread via this youtube video:

*https://www.youtube.com/watch?v=6yznDQwizx4 *

==

I have a couple of questions if thats cool :

1. Regarding the most recently updated instructions, [03/04/2017], If I follow your guide what version of Android do I end up with? (Apologies if that's clear given by the file name of the firmware - I just want to be safe as the title of the thread is "Root, ROMs, and Other Cool Stuff").

2. I'm currently running 5.0 lollipop and it sucks simply for the fact that I can't use any vpn services. Will VPN services after I follow your guide?

3. Thanks man!
[AT&T Samsung Galaxy S 5] MO35AB:
i keep getting Kernel panic:

KRAIT INFO

Panic Caller : ext5_handle_eroor+0x98

Panic Msg : EXT4-fs(device mmcblk0p23): panic forced after error

Thread : mkdir:16357

;0x0

Wait...

Done!

UDC START

kernel panic upload mode
[AT&T Samsung Galaxy S 5] AptLogic:
Hey! These are good questions lol

1. You will end up on 5.0 Lollipop (OF3).

2. VPN should work after the rooting process. It worked fine for me after the process was finished.

3. My pleasure :)

Battery pull, boot into download mode and re-flash everything.
[AT&T Samsung Galaxy S 5] MO35AB:
DONE !!

Thanks !!
[AT&T Samsung Galaxy S 5] AptLogic:
Just a quick note: I took a look at the YouTube video you used, and I'm sorry to say that its quite outdated! I'll be posting an official one soon so people don't use the old method (not working since late January 2017)
[AT&T Samsung Galaxy S 5] asahi_nysurf:
[MENTION=7597286]AptLogic[/MENTION] or any other member:

I think I also I realize the answer to my question.

I realized that there are no roms after lollipop 5.0 - The reason being is that there is no "official" or "successful" root that has been found after 5.0

there's no root for 5.1 or even 6.0 Marshmallow (as of this date at least)

*Hey thanks for replying man I appreciate that! I'm following you on twitter now! looking forward to your 2018 projects!

Best,
[AT&T Samsung Galaxy S 5] AptLogic:
You are correct.
[AT&T Samsung Galaxy S 5] VonDavis:
Hi, if I use this method will it stay in 5.0 or 6.0.1?
[AT&T Samsung Galaxy S 5] tooplanx:
Hi!

I've just done the whole of your first post, following steps 1,2 & 3 of the new method for rooting.

I want to install your AptOS ROM but I'm a little confused by the instructions in post 3, as quoted below:

As the new rooting process includes installing a stock rooted OF3, do I still need to do this step of downloading this other (same?) Stock rooted OF3 rom? Or is that the same ROM installed in the new rooting process (Step 3)?

Many thanks!
[AT&T Samsung Galaxy S 5] AptLogic:
The rooted OF3 ROMs are both the same.
[AT&T Samsung Galaxy S 5] AptLogic:
After rooting you will be on 5.0
[AT&T Samsung Galaxy S 5] tooplanx:
Thanks!
[AT&T Samsung Galaxy S 5] luy0:
Thank you aptlogic!

Reporting: 900A AT&T 16GB 5.0 aucu4bof3 Unlocked Movistar Argentina no-ship Stock FULLY ROOTED!:cool:

Sucess in one attemp.

P.S.: How to get Xposed working on this no ship stock of3 5.0 rooted? Tried framework apk and says that api and arquitechture isn't compatible yet. Tried your Xposed.zip in Flashfire but nothing happened. I'm mostly interested on Xblast Tools, Gravity Box n Xposed Additions. Downloaded TMS5 build Holo ROM but not tested yet, supposedly it supports Xposed..supposedly :s Solution?

P.S. 2: Safestrap installs but not appears, no flashscreen, nothing appears. Tried Hashcode bo1 n bo3 apk, and TMS5 900A apk, no one work. On my splashscreen before the bootanimation it says CUSTOM within Samsung and Galaxy S5 words. In Download mode it says Satus Custom. Solution?

P.S. 3: Again, thank you!
[AT&T Samsung Galaxy S 5] AptLogic:
Take a look at this thread if the Xposed zip isn't working for you: https://xdaforums.com/att-galaxy-s5/general/xposed-lollipop-t3567152
[AT&T Samsung Galaxy S 5] luy0:
All right! It worked, plus the three modules i wanted. All working. For Safestrap, some fix, tip or workaround to make it work on this device? Thx!
[AT&T Samsung Galaxy S 5] AptLogic:
Safestrap really only works on KitKat.... You can try installing it but you would need to flash a KitKat kernel through Odin whenever you want to get in
[AT&T Samsung Galaxy S 5] luy0:
I you dont mind, you could guide me? Im on of3 stock. How can coexist downgraded os and safestrap with your of3 rooted stock? Which kernel exactly must flash? Sorry, im confused.
[AT&T Samsung Galaxy S 5] AptLogic:
As long as safestrap is installed you'll be able to get in by flashing the NCE kernel in Odin.

Now after you're done in safestrap, you'll have to go back into Odin and flash the OF3 kernel or your system won't boot.

Pretty simple... If you have any further questions don't hesitate to ask. :)
[AT&T Samsung Galaxy S 5] luy0:
I understand. I got on my pc a G900A_NG3_Stock_Kernel.tar.md5, that works as the NCE kernel?. And i got too an G900A_OC4_Stock_Kernel.tar.md5 that works as the OF3 kernel? Or i got to download another specific kernels?
[AT&T Samsung Galaxy S 5] AptLogic:
Those should work fine
[AT&T Samsung Galaxy S 5] luy0:
Well, i flashed the NG3 kernal -> bootloop

Then, Odin the OC4 kernel -> phone here alive again but no Safestrap. What have to do?
[AT&T Samsung Galaxy S 5] AptLogic:
I think you'd be better off using this app called "NCE Flasher", I've had success with it in the past.

https://xdaforums.com/att-galaxy-s5/general/nce-flasher-odin-to-safestrap-t3087450
[AT&T Samsung Galaxy S 5] luy0:
-Unlocked

-Rooted

-Safestrap

-EFS Bak

-Kernel Bak

-"Nandroid" Bak (Safestrap)

-Xposed with 9 modules

-Vice City xD

THANK YOU!
[AT&T Samsung Galaxy S 5] NicTom96:
Thank you so much for this guide! I am glad that I was finally able to take control of my galaxy S5. I am slightly less mad at myself for getting the AT&T variant of it not knowing it had the locked bootloader at first. Thanks to your guide and AptOS software, I was able to breathe new life into my phone.
[AT&T Samsung Galaxy S 5] samccfl99:
Well nothing new in here, unfortunately. My USB cover finally fell off my S5 after almost 4 years (will be 4 in June)...LOL.

NEW G950-F (S8 Intl) is still too expensive at $570 (that's the lowest...it is amazing they still cost this much!)

https://www.ebay.com/itm/Samsung-Ga...hash=item2f02bc8d5e:m:mxHf7iW6d6RMlsIIdZWrbuQ

Also I can't find a rom that could look like the attachments...yet...Googley really screwed Development up after KK for pretty mods (mostly Status Bar Icons...how do people see the stock Status Bar?)...:(

Also all these people just getting root is good, but funny. If you got the phone before 2015, it was rootable (like mine)...:)

I still do not understand why ATT won't release image files that will unlock the damn bootloader after almost 4 years...WELL THEY SUCK, THAT'S WHY!
[AT&T Samsung Galaxy S 5] Deep Ellum Dan:
Just gotta make sure, will this work or the G900AUCU2AOA2? Everything working fine it's it does? Any issues? All I have been finding is how this phone isn't able to be rooted so just want to be sure if this will work here or not. Thanks!
[AT&T Samsung Galaxy S 5] divergentmobile:
I've tried your method to remove the custom lock on the boot screen (wipe cache partition from recovery) but it persists.

I tried a wipe data/factory reset too but that also didn't work. What else can I do? Can you maybe point me to a correct stock file to revert to, maybe I'm taking it from the wrong place?
[AT&T Samsung Galaxy S 5] :
I've been thinking for a little while, and I had an idea. Can we flash the bootloader with a JTAG?

I don't know much about how it works, but I know that some devices can be unbricked this way. Could this be used to flash a bootloader from, say, a G900F, to fully unlock the bootloader and phone?
[AT&T Samsung Galaxy S 5] AptLogic:
No because the root key that is used to verify the bootloader when the device starts is stored in a read-only sector of the TrustZone, which we can't really JTAG.

If we tried to force a G900F bootloader onto the device that way you would brick and then you'd have to flash an SD card to get back to download mode.
[AT&T Samsung Galaxy S 5] :
Gah, figures. Can we extract the root key to sign our own bootloaders somehow? I knew it wouldn't be that easy... I just figured we could somehow hardmod the G900A, like with other game consoles (3DS, Wii, etc.)
[AT&T Samsung Galaxy S 5] AptLogic:
The main difference between those game consoles and our phone here is that they aren't Security-oriented, so hardware attacks like that work fairly easily.

This phone, on the other hand, was made for use cases in a work environment, where security is paramount. Which is why Knox exists, secure boot, etc.

The root key on the device is only a public key, not the private key we'd need to sign our own firmware. The one copy of the private key is probably on a signing server at Samsung in Seoul or something.
[AT&T Samsung Galaxy S 5] :
Yeah, figured as much. I was wondering why people never attacked it from the hardware itself.. I guess that's why.

Doesn't that mean we can't replace the bootloader at all, due to the TrustZone key? Does TrustZone also check recovery during this period?

Is there a chart of the boot process I can look at, to understand the situation better? Like, what TrustZone checks, and in what order things load up.
[AT&T Samsung Galaxy S 5] NavSad:
Couldn't we use on of those TrustZone exploits made by laginimaineb?
[AT&T Samsung Galaxy S 5] AptLogic:
If you can figure out how to adapt the exploit to the S5 I guess we'd have a chance. Problem is that level of exploitation is a bit above me lol
[AT&T Samsung Galaxy S 5] NavSad:
It's been done before.

https://twitter.com/Garnet_Sunset/status/871836581883256832
[AT&T Samsung Galaxy S 5] AptLogic:
Well it would be nice if that guy released the source he used... otherwise we're stuck looking for someone who can help dev the exploit because I don't really know how lol
[AT&T Samsung Galaxy S 5] taadow1030:
Yeah, that was kind of odd. We saw a few seconds of the boot screen and that was it. It's frustrating because I thought our variant of the S5 was so close to realizing the full potential of the hardware.
[AT&T Samsung Galaxy S 5] grobbit:
Just Checking OP Instructions re. sm-g900a rooting

Ok, may I just check something about the OP.

1) I use Odin

from PC to phone

to flash experimental OS COMBINATION_ATT_FA44_G900AUCU4AOF1_ATT4AOF1_2166968_REV00_user_mid_noship_MULTI_CERT.tar.md5?

2) I then copy the roottools: flashfire.apk, Superuser.apk and towelroot_OFFLINE.apk to the phone, install them and run towelroot from phone, then Superuser from phone, then reboot?

3) I then open flashfire from the phone and flash the modified OF3 then reboot?

It might seem obvious that an .apk file has to be run from the phone but I thought I'd ask before beginning this rooting exercise.

Cheers!
[AT&T Samsung Galaxy S 5] AptLogic:
Yep that's all correct! :)
[AT&T Samsung Galaxy S 5] grobbit:
Thanks AL.

I need to check two more things :confused:

In step 1 (i.e. flashing with Odin from the PC) is the experimental .tar.md5 file placed on:

a) The PC?

b) The phone's internal memory?

c) The phone's external card?

In step 3 (i.e. flashing with flashfire from the phone) is the modified OF3 placed on:

a) The PC?

b) The phone's internal memory?

c) The phone's external card?

I'm guessing the phone's external card both times?

Cheers!
[AT&T Samsung Galaxy S 5] AptLogic:
The .tar.md5 file always goes on the PC when using Odin, and the OF3 zip goes on either the phones internal or external storage (it doesn't really matter which)
[AT&T Samsung Galaxy S 5] grobbit:
Once again thanks.

I have bought refurbished AT&T SM=G900A with Android version 6.01, security patch level Aug 1st 2016, kernel version 3.4.0.-, baseband v. AUCU4DPH2. I want root to replace the hosts file and remove bloat.

I was wondering what version of OS I end up with after performing this procedure ending with OF3?

Apologies for my ignorance, I've been using a Galaxy Wonder until now.
[AT&T Samsung Galaxy S 5] AptLogic:
After rooting you'll stay on 5.0 OF3 :)
[AT&T Samsung Galaxy S 5] divergentmobile:
I couldn't manage to remove the lock on screen with your methods ):

Do you have any other suggestions?

Wiping cache was not enough, not even wiping factory data/reset.

I should be on stock rom but still nothing, that massive lock always appearing on boot.
[AT&T Samsung Galaxy S 5] AptLogic:
I don't really know what else to try... For me that lock comes and goes, I never really completely figured out what caused it to disappear
[AT&T Samsung Galaxy S 5] NavSad:
I think I found a bug in our bootloader using BootStomp.
[AT&T Samsung Galaxy S 5] AjvarXX:
Guys, my sister's phone is still on 4.4.2 NG3, is there a reason for battery life or anything to upgrade to 5.1.1 or 6.0.1?

Also is there a custom touchwiz ROM 6.0.1 for keeping root and be close as possible to stock?

Thank you!

P.S. I think I used Safestrap recovery in the past and I think rom slot 1 updated itself to ND3 and now I can't load safestrap because kernel is updated, is that possible? If so, if I downgrade kernel NCE or whatever will I see again 2 slots in safestrap or that update wiped those? I just feel that it's less space on NAND than it should have been (2GB short or so).
[AT&T Samsung Galaxy S 5] AptLogic:
Lollipop generally has more features and looks nicer, also no root for 6.0/6.0 ROMs, but I am working on a 6.0 unrooted ROM coming out this summer
[AT&T Samsung Galaxy S 5] AjvarXX:
Thank you for a quick reply.

On another note, one funny thing: I think I used Safestrap recovery in the past and I think rom slot 1 updated itself to ND3 and now I can't load safestrap because kernel is updated,

is that possible

? If so, if I downgrade kernel to NCE or whatever will I see again 2 slots in safestrap or that update wiped those? I just feel that it's less space on NAND than it should have been (2GB short or so) and I really think I did install safestrap 3-4 years ago.
[AT&T Samsung Galaxy S 5] QweS84:
Hello guys. I have two G900A, one is PA6 and other is OF3, both stock. Would this root guide work with it?
[AT&T Samsung Galaxy S 5] AptLogic:
As far as I know the ROM slots in Safestrap were never working. Hashcode stopped development before getting it to work. But generally if you did have Safestrap installed and you didn't completely re-flash Android, flashing the NCE kernel should let you get back in.

This guide works for all current firmware for the G900A.
[AT&T Samsung Galaxy S 5] grobbit:
Thanks for that.

I was looking at this ROM (RESURRECTION REMIX 5.8.X[7.1.2][G900H][OFFICIAL], ROM for the Samsung Galaxy S5 - v.7.1 - Nougat)...

https://xdaforums.com/galaxy-s5/gal...-exynos/rom-resurrection-remix-5-7-4-t3526192

Apparently it requires Marshmallow Stock firmware to be on the phone to work.

Does this exclude the AT&T G900A due to the way AT&T have nobbled the boot-loader or whatever, and can only be rooted up to version 5.0 - Lollipop?

Cheers :confused:
[AT&T Samsung Galaxy S 5] AptLogic:
Yeah no you can't use that on this phone.... 5.0 TouchWiz ROMs only, sorry.
[AT&T Samsung Galaxy S 5] luy0:
Hey folks, i figured to solve that thing. You must use Xposed Framework-Wanam Xposed module 1.3.0-Security Hacks-Fake system status. Normal booting splashscreen and in download mode it says OFFICIAL again, not custom. Cheers
[AT&T Samsung Galaxy S 5] Delgoth:
[MENTION=7597286]AptLogic[/MENTION] or [MENTION=7533813]NavSad[/MENTION]

Please, if you will, can either of you answer my two questions concerning the new updated method? I didn't want to send a PM because this will really benefit a lot of current devices. I can make this work on a Note5 if I knew how create the modified from-noship firmware you mention.

Quesrion 1-- What makes the link to the combination firmware hosted by [MENTION=7533813]NavSad[/MENTION], *experimental*, besides just being a factory binary firmware? Has the combination been modified in anyway?

Question 2-- How was the modified "from-noship" pre-rooted OF3 firmware created? I've heard of people taking the combination firmware and removing certain bits, while adding bits from a stock system in order to make it bootable without the whole factory binary being installed. And when you say "from-noship", I've never seen a noship firmware that wasn't a combination or eng binary.

With those two questions answered, I think I can make this method work on a couple other devices that really could use it. I bring it up because I had a user report that they were able to modify the combination n920a firmware enough to have it boot a pre rooted n920t Rom. Only they couldn't remember how they did it. So their information is now lost to the internet. But I saw screenshots I was told, were legit.

Please, can you spare a few minutes here :D
[AT&T Samsung Galaxy S 5] tony332211:
Wait, so even a G900A on QC1, Marshmallow?
[AT&T Samsung Galaxy S 5] AptLogic:
1. It's just a factory firmware, nothing more nothing less

2. The from-noship OF3 is literally just muniz_ri's prerooted OF3 but all the bootloader binaries are flashed during the install so that the system can boot to lollipop.

Yes
[AT&T Samsung Galaxy S 5] tony332211:
Will it work on my second G900A running lollipop and on PA6? (sorry for the double question)
[AT&T Samsung Galaxy S 5] Delgoth:
Is it really that simple? And here I guess I was making a bigger deal than maybe I needed to. But in all honesty. This method described

should

work with any samsung device you have a combination firmware for then. The trick is getting the rom to flash over the Factory Binary.

In my current case, the N920A Revision 4 Bootloader, currently only has official builds available based on MM & Nougat. All the Official 5.1.1 builds are based on the Revision 2 Bootloader. BIG Difference there. Only the Binary 4 Combination Files are based on LP. And I suspect that we will not see a MM based combination firmware until Oreo gains a lot of traction. So the trickiest part for me will be building a modified combination file that is more of a daily driver variant. Service Mode firmware is definitely Not how you want to roll everyday. So I am just going to have to devise a way to incorporate the Binary 2 Stock LP files, into the v4 Factory Binary. So far we have a Fully Rooted Service Mode Device on v4. Sounds simple, but there has only been one option found that will complete the initial root. And it isn't King(o)Root or SuperSu or anything common. Now to get some of the fixin's.

Thanks for the reply.
[AT&T Samsung Galaxy S 5] AjvarXX:
Speaking about that, I guessed it myself considering what else would be the differense between muniz one, but maybe it's best to add a line "if you were on KitKat A02 and earlier then you won't go back after following this. If you want then follow muniz method LINK HERE" or something like that.

Just my thinking.
[AT&T Samsung Galaxy S 5] Delgoth:
I haven't fully looked into everything G900A, as the Galaxy S5 I posses, is a Verizon Variant. I was looking into this newer method, because it is almost exactly as the method is supposed to be theoretically on the N920A.
[AT&T Samsung Galaxy S 5] tony332211:
So uh, I ran into a problem with Xposed: https://xdaforums.com/general/help/install-app-apks-please-help-t3754581 it'd be appreciated if you guys who are still active help me with this issue. Do you think redoing the instructions in the OP of this thread will fix it?
[AT&T Samsung Galaxy S 5] Miker1029:
Might help?

I ran across this the other day while searching how to upgrade my gs5 active on the pb2 build..

I understand the language, but not the code...

Mike

https://www.sstic.org/media/SSTIC20...ticle-attacking_samsung_secure_boot-basse.pdf
[AT&T Samsung Galaxy S 5] AptLogic:
That's the T-Flash exploit, we've been over that earlier in the thread but for custom ROMs instead of root.

If you can figure out how to modify a TWRP image to flash in T-Flash mode, root _could_ be possible on the G870. The code he shows is more to show the reader how the Odin downloader switches the phone between flash mode, as well as how it disables signature checking for T-Flash binaries.
[AT&T Samsung Galaxy S 5] Miker1029:
Right.

Ya, I was searching more this morning and ran across the post on page 1, my apologies for not reading through..

My thoughts on that exploit was you could load the base startup sequences to the SDcard, bypassing the SBOOT, load a crashable kernel, install the root then remove the custom startup, and/or disable SBOOT, I'm the old school ODIN flasher, matrter my biggest achievement was flashing a bricked BLU studio 5, rooting and installing Xposed frame work.

Mike
[AT&T Samsung Galaxy S 5] AptLogic:
You'd still have to modify the images to exploit the buffer overflow
[AT&T Samsung Galaxy S 5] Miker1029:
Lol, ya, and that's WAY beyond my knowledge, best I knew the way rooting worked was to crash the kernal....

Why I posted without really looking through... Thought maybe someone with way more skill thene could use it... And the 1st page post was in 2016 and this 2017, which between page 1 and 33 I was kind of sure someone probably already came across it..

But still, it seems possible, just a butt load of work... I mean technically, if we can get SBOOT disabled, aren't we good to go? I believe o understand, at least for the g870a, the update to 5.1.1 is what totally locked the bootloader.....

Anyway just trying to help.

Not having root is killing me... Lol, and I'm on the unlocked gs5 on a non at&t network.,

Mike
[AT&T Samsung Galaxy S 5] Zechs290:
Okay so I flashed the experimental firmware and when I try to run towelroot it says I need a internet connection...

I also tried to revert to the original firmware and it won't let me flash back to the original firmware so I'm assuming my only option is to continue but I cannot get towelroot to install the binaries. I am connected to the Wi-Fi and it shows that it is connected but won't recognize it in towelroot...

Any suggestions would be greatly appreciated...

I apologize. I got it working!
[AT&T Samsung Galaxy S 5] Miker1029:
This might not apply for the 900, but as far as my searching has gotten me, once your beyond 5.0 your stuck.

And yes TR needs an internet connection, which is another issue I have besides being on 5.1.1. best I can say is try the PC version of TR..

Lol didn't read the bottom, N/M
[AT&T Samsung Galaxy S 5] chetos121690:
Hello, i want to be short

It worked perfectly, followed everything as tutorial explains, after installing new image, got in an issue of com.sec.imsservice stopped working, i needed just to get link2sd to uninstall this app or service, working now find with supersu, took a while to install new system with flashfire but it succeed, now im just finishing uninstall that trah of at&t apps, and installing system loggers and status, to continue working with superuser tools

I love my new root ######

Want to now how i did, just send me an email

chetos12690@gmail.com
[AT&T Samsung Galaxy S 5] Hidden Knight:
Must use the TR.apk from the the link in the first post, unable to share links because of my post count.
[AT&T Samsung Galaxy S 5] dbeeheim:
trojan

hate to be a pest I am kinda new to this.

my windows 10 keep removing root tools because it includes trojan?

I am not allowed to upload images to show you the details

worry or ignore? thanks, D
[AT&T Samsung Galaxy S 5] RebelLion_:
[MENTION=9070458]dbeeheim[/MENTION] Ignore, most rooting software will be recognized as malware or virus because it contains code used to bypass Linux security and obtain superuser access.
[AT&T Samsung Galaxy S 5] dbeeheim:
thanks

thanks, I freaked out a bit and booted to ubuntu to move apk files to sd.

guide worked great!

I have an sm-g900T that I want to bring back to life and debloat. will do tonight. thank you guys!