yashsingh1/xdaforums huggingface dataset:
[General Topics] MotoJunkie01:
Man I tell you, eBay is your best outlet. I actually run a small business just selling device parts on eBay. Amazingly, you can get more money selling parts from a broken device than you can selling the device brand new in the box. I sometimes buy budget devices brand new, tear them apart, sell the parts on eBay, and make 4 times the money that I originally invested for the new device.
[General Topics] Astr4y4L:
Oh Kool... so if I just strip em down i can sell the pieces on ebay... i hadn't thought of that !

hey post the link to your ebay store i'm currious to see how that works !

---------- Post added at 02:09 PM ---------- Previous post was at 02:04 PM ----------

Tracking Number:###############

Accepted

Expected Delivery Day: Monday, August 21, 2017

Product & Tracking Information

Postal Product: First-Class Mail® Features:	USPS Tracking®

Date & Time	Status of Item	Location	August 18, 2017,	12:54 pm	USPS in possession of item	CORBIN, KY 40701	USPS is now in possession of your item as of 12:54 pm on August 18, 2017 in CORBIN, KY 40701.

---------- Post added at 02:14 PM ---------- Previous post was at 02:09 PM ----------

WooHoo !!! i'll have something to work with again !

Thanks again for all your help with this project

I am thinking of creating a new thread maby two...

thread 1 would just be info for rooting and thread two could be just step by step instructions for the downgrade process just to put all of our info together so that Noobs can understand how to accomplish what we've got
[General Topics] Astr4y4L:
WELL they killed my server at amazon so the link to Zone3 root .zip is down im working to fix it...
[General Topics] MotoJunkie01:
Upload to Google Drive. It is pretty reliable
[General Topics] Astr4y4L:
Well I've Rerouted everything again and if you want to fix the link for OP it is now:

http://www.astrayalslanding.dynu.net/

and the donation button is included on that page and a direct-download link to the root package is there too

I guess the people at amazon finnaly pulled my plug ...

i had it free for over a year because the first thing i do is set it up for ssh and root access then i change the linux-headers because amazon uses special **** to give them control using their AWS web panel so i change the headers and do_dist-upgrade to take root control of the virt. machine... :cowboy:

but i guess they finally just pulled the plug... thank God for Backups and Backups of Backups :)

Anyhow please fix that one link in OP page 1

when you get time.

Uuugh !!!

backs killing me gotta go Ttyl

Astr4y4L
[General Topics] SquaredDev:
trying it now! SO SORRY for being so MIA... life hit me hard... ran into some really bad luck on the semi truck.. anyways.. I gotta google pixel xl for my daily driver... so if this bricks this phone, it bricks it, lol..
[General Topics] Astr4y4L:
i used the fota option and was at 99% when my stupid pc glitched... i was stuck in download mode and its now fried.

but you may have success... that would be freakin KOOL ! Marshmallow :)

and a pixel congrats man thats nice ! My dream phone is the LG Google Nexis 5

but i'm always too strapped for cash to get it...
[General Topics] SquaredDev:
NOW my issue, lol... I can't get LGUP to work for some reason.. it finds it as the com port but when i go to run it, it says cannot find model after I select my model and com port.... i got another laptop since my truck fried my laptop i was using to flash....

the pixel is nice, but very limited since i got the verizon version and ALAS, locked bootloader so no root...
[General Topics] Astr4y4L:
well i would but my gdrive is absolutly full of pictures of family that i can't replace.

BUT !!

CHECK THIS OUT

https://xdaforums.com/android/help/rooted-how-to-root-zone3-t3658768/post73452298#post73452298

I got the stuff posted up over there and if anyone needs help i sent them here cause i'll be here working on this aboot krap so we can stick it to lg and fix our fones with custom firmware. I mean its not the Nexis 5 that i want but if we figure this all out it will be good enough to handle the things i want to do...

checked on the USPS Package again and it's on the way..

I hope @SquaredDev manages to get this marshmallow to flash to his device...

that would be kool.

but i wonder if he noticed that we got past the display issue with the other guy ?
[General Topics] SquaredDev:
HOLY CRAP! Did yall really fix the display issue? If so, that would mean the world to me... i must go back and crawl the thread! If this MM works, that would be awesome as well
[General Topics] Astr4y4L:
WARNING I WAS AT 99% BUT....

that don't mean i would have success .

it might brick...

any way the display thing was a krazy idea that turned into a flash to pp8 let it boot to red verizon screen then soon as it passes that and starts the app krapp pull battery before it finishes... then go streight to download-mode and flash the pp2

worked for 1 guy that we know of a few pages and days ago..

either way let us know how it go's

---------- Post added at 09:37 PM ---------- Previous post was at 09:20 PM ----------

Google search

Xda + UPPERCUT

that helps lgup when its being stupid
[General Topics] SquaredDev:
[QUOTE

[/COLOR]

Google search

Xda + UPPERCUT

that helps lgup when its being stupid[/QUOTE]

uppercut fixed the issue :D Now to the sad :( The KDZ for k4 MM won't flash for me.. i get to 4% with FOTA and get the same error message.. and if i try refurbish or upgrade, it crashes LGUP at 4%. I am redoanloading PP8 and PP2 to try the display issue...

NOTE: I tried the K4 MM with pp6 installed on my phone.. should i try it with pp7 and pp8?
[General Topics] Astr4y4L:
uppercut fixed the issue :D Now to the sad :( The KDZ for k4 MM won't flash for me.. i get to 4% with FOTA and get the same error message.. and if i try refurbish or upgrade, it crashes LGUP at 4%. I am redoanloading PP8 and PP2 to try the display issue...

NOTE: I tried the K4 MM with pp6 installed on my phone.. should i try it with pp7 and pp8?[/QUOTE]

Really not sure...'

I had already rooted and removed a bunch of verizon krap and changed quite a few config files...

Essentially i had a rooted pp2 /system.

But yes please try the display thing and trick and let us know
[General Topics] Astr4y4L:
Well, how did it go?
[General Topics] :
[MENTION=7383447]MotoJunkie01[/MENTION]

Today a guy in the grocery-store parking lot sold me a brand new phone and for $5 i went ahead and got it it is a

LG L57BL10B

its a trackfone but it happens to be a rebel lte is what i found from google...

didn't see much on root for it and it has a Marshmallow build (MXB48T)

i've skipped through activation as it came without sim and is carrier-locked.

skipped adding google because fear of FRP skipped setting a pin and installed kingroot from adb... no go ... but im playing with dirtycow and its succeptible to the race-condition... haven't gotten far not a big deal as i'm working on Zone3 but you seem knowledgable about the rebel and it does seem to be an even more locked-down version of ours and k4 etc except its got a larger screen and different style with keys and this marshmallow build sucks

they took away the app drawer !!!!!!!!!!! WTF ? WHO DOES THAT?

but yep i'm trying to kill it allready.

HOW CAN WE ROOT IT TO PULL THE SYSTEM?
[General Topics] :
Mine is actually a different model number than yours and its a 5.1.1 build. I'll see what I can find on your model number (yours may be Rebel 2?)
[General Topics] :
Yeah, download mode is usually disabled on TracFone devices.
[General Topics] Astr4y4L:
So.... Probably a candidate for a WiFi device for the kids except I don't like giving them a 911 dialer they are 8 and 9 lol

---------- Post added at 02:41 PM ---------- Previous post was at 02:35 PM ----------

Is it even a rebel?

---------- Post added at 03:19 PM ---------- Previous post was at 02:41 PM ----------

Looked it up on Wal-Mart.com it is lg rebel2 LTE...
[General Topics] MotoJunkie01:
I just checked. My Rebel is the LG L43AL Tracfone version with 5.1.1, and a 09-01-2016 SPL.
[General Topics] Astr4y4L:
Well... Krap.

Know of any shareware for carrier unlocking
[General Topics] MotoJunkie01:
Haha. Not right off top. I know very little about the Rebel as of now. Trying to get full root as we speak.
[General Topics] Astr4y4L:
i hear ya, been the same on this P.O.S ...

I almost didn't buy it but when i looked to make sure the battery and all pieces was there i noticed that its got screws, a lot of newer low-end fones don't so i remembered what u said about your ebay store and figured the screen's probably worth more than 5 bucks, hell i can probably sell the whole thing for more than $5...

but when i realized it was actually a K4 Type i was hopeful i might have another development device. but alas trackfone screwed the pooch, no download-mode no recovery ,factory-mode nothing...

thinking about turning it off and see if that other tool for qcom modems i was foolin with could see it but ... IDK.

still it's 6.0.1 but 32bit and succeptable to dirty-cow race condition so there may be a chance of useing dirty-cow to swap a built-in .sh script with one of my own but gotta find something thats run in the init context to get root i think...

---------- Post added at 08:45 PM ---------- Previous post was at 08:37 PM ----------

if i could find a way to unlock the carrier i'd just swap my wife for that samsung galaxy amp2 that i put the .eng boot loader on and have that to play around with i've been wanting to figure out how to port Safe-Strap for it as it has no development on recoveries or roms... But , my wife won't let me fool with it anymore :) i've got the stock rom bootloader and odin for every now and again it'll get all bugged out and i just pull everything to the p.c flash it again with odin, root it ,Xposed ,put her files apps and pictures all back and it runs like brand new for a while... i really don't understand why there aren't more people developing for budget devices... it make me sad :(

but i guess thats what u and me's here for :)
[General Topics] Astr4y4L:
[MENTION=7383447]MotoJunkie01[/MENTION]

Hey. Don't know if this helps for anything but I'm digging in codefi.re and found this

http://downloads.codefi.re/autoprime/Qualcomm/Drivers
[General Topics] Astr4y4L:
[MENTION=7383447]MotoJunkie01[/MENTION]

On our zone 3... I know we have the snapdragon (msm8909?) that's qcom but does that same chipset handle our baseband and our wlan ?
[General Topics] jjangsangy:
So I was able to downgrade my phone to version P2 and was able to root it.

I was able to root the device successfully, however restarting the device goes into bootloops for a couple spins, like 5 minutes before it loads completely.

In order to get rid of the initial loading, I found a guide that told me to replace the files modem, modemst1, modemst2, fsg, ssd, but now I have infinite boot loops. I think I'm going to have to go all over and reinstall from scratch from the system recovery, but would still like to figure out how to get rid of the bootloops if you have chance to figure it out.
[General Topics] MotoJunkie01:
Yes. The Qualcomm Snapdragon 210 (MSM8909) handles all radio functionality. [MENTION=8236433]Astr4y4L[/MENTION], when is your Zone 3 scheduled to arrive in the mail?
[General Topics] Astr4y4L:
It should arrive any time now its "out for delivery" I'll be so glad to have the zone 3 back :)

---------- Post added at 10:24 AM ---------- Previous post was at 10:20 AM ----------

Ok first go get my root package again its here

http://www.astrayalslanding.dynu.net

Then follow the README.

And out of curriosity what software version did you begin with please?

---------- Post added at 10:26 AM ---------- Previous post was at 10:24 AM ----------

And I asked about the baseband because in devices that have a separate radio chip its another avenue of exploit....

---------- Post added at 10:29 AM ---------- Previous post was at 10:26 AM ----------

Did you use the refurbish option in download_mode on lgup when flashing pp2?
[General Topics] MotoJunkie01:
I think I've got my Rebel LTE carrier unlocked. Getting ready to try another GSM SIM card to see if it worked.

Oh, and I've got TWRP completed for the Zone 3. Now if we could flash it. Haha. Anyway, I'll upload it this evening and send you a link [MENTION=8236433]Astr4y4L[/MENTION]. Maybe we can put it to use soon.
[General Topics] Astr4y4L:
Hey bro awesome I just got the zone3 and report it in good condition and working order.

Its charging I swapped Sims and already got a spam telephone call so its all back like before.

I'll root it tonight and be back to work on aboot.

Gotta go the children of the son are having a party

---------- Post added at 01:05 PM ---------- Previous post was at 12:18 PM ----------

About the carrier unlock :

It should be similar for zone3 please let me know what's involved

---------- Post added at 01:45 PM ---------- Previous post was at 01:05 PM ----------

Just flashed pp2 waiting for my bootloops to stop and then I'll root and fix bootloops

---------- Post added at 01:46 PM ---------- Previous post was at 01:45 PM ----------

Just got Verizon screen now I'm gonna root
[General Topics] MotoJunkie01:
OK brother. Glad you received it.
[General Topics] Astr4y4L:
Hey bro I'm rooted , booted and stoked!

Can u use any zone3 bricks for parts? I got a few I could send ya on the first of the month...

---------- Post added at 04:41 PM ---------- Previous post was at 04:00 PM ----------

@jjangsangy

How did it go?

Is your problem solved?

---------- Post added at 03:59 PM ---------- Previous post was at 03:41 PM ----------

@Motojunki01

csmg.lgmobile.com:9002

Is lg's software servers....

How can we find the servers for AT&T cricket/Aio etc?
[General Topics] MotoJunkie01:
I think I can run them down using a logcat reader and throwing a ping.
[General Topics] Astr4y4L:
Bro if u find the ip's I'll try to figure a way for us to query it..

or at least possibly browse the content of the server..

And I'm trying to get fm radio working to listen to local stations

And

How did it go on the carrier unlock thing?
[General Topics] MotoJunkie01:
I'm not certain I'm carrier unlocked. The device is reading GSM SIM cards from other networks. However, upon setting the APNs that correspond with the networks, data isn't connecting on all networks. Life Wireless is working as well as H20 Wireless (both AT&T mvno subsidiaries. ) T-Mobile & T-Roc Wireless are both giving me problems. While its on my mind I'll install a logcat reader, and ping the UpdateAccessPoint config application. I'll see if I can grab us a URL or two.
[General Topics] Astr4y4L:
That would be great see if you can capture the POST or GIT request and the header so we can spoof the user agent

It'd be sweet if we can pull att and aio firmwares !

If I could get a kdz for the cricket spree I have one of those that was rooted and I tried to flash a custom recovery but got dmvarity secure boot error... But with a proper firmware update it would be usable again...
[General Topics] MotoJunkie01:
I recently studied an XDA tutorial from a dev that's a master at grabbing OTAs and builds exclusive to the update servers. That's the method I'm using.
[General Topics] Astr4y4L:
That's super cool! Later when u get time post the link to the tut. Sounds like an interesting read.
[General Topics] MotoJunkie01:
Hey I'm not getting any type of interceptible URL for OTA updates or factory firmware servers for the Rebel. I'm having the exact issue on an Alcatel Ideal for which I've released developments. AT&T is apparently the world's toughest OTA to capture (I can't even locate the updater.zip OTA file using a root explorer!) Any ideas [MENTION=8236433]Astr4y4L[/MENTION]?
[General Topics] Astr4y4L:
Not sure what network setup u have but if u have another computer you could use a man-in-the-middle approach with a network tool like wireshark and ettercap use ettercap to capture all network packets and wireshark to analize the p.cap files u intercept .... maby

---------- Post added at 12:12 PM ---------- Previous post was at 12:00 PM ----------

Also I remember something like this before ...

Turned out it was stored in /fota something or another. But wasn't identifiable as update or .zip it was actually a file with no .extention and was labeled. With numbers and letters ....

Can't remember what device that was but I think it was a model of att. Gophone.

But it definitely won't be labeled update.zip it was Capitol letters and numbers
[General Topics] MotoJunkie01:
That is probably the issue. Good thinking. There is actually a partition called /fota
[General Topics] Astr4y4L:
Yea, u might try dumping the content of that partition ...

its wild all the krap they do to try to keep us from developing for our devices. I know though that if u have a usb stick u can download kali linux live .iso use dd to put it on the stick and use that liveboot stick to perform all kinds of kool test on your network ... including redirection of HTTP and capturing of network traffic's. And if by chance its using a secure protocol

Such as ssl there's something to strip that too

Oh and if u want to make the boot stick from windows environment without downloading cygwin... I recommend a program called Rufus
[General Topics] MotoJunkie01:
Yes I love RUFUS for all my Windows software packages for both USB flash drive, DVD & CD. I just found a fota URL as well. Soon as I decipher this stuff a little I'll forward the URL. Out of all things, it was the stock ro.build.jrdlogger that captured the URL.

PS. Here is a kernel enabler for USB OnTheGo support for the K4, Zone 3, Rebel, etc.

persist.sys.isUsbOtgEnabled=1

And here is a single entry that significantly optimizes all available free RAM:

ro.config.low_ram=true
[General Topics] MotoJunkie01:
I can confirm full GSM domestic SIM unlock (DSU)

on my LG Rebel LTE (LG L43AL) Tracfone. Life Wireless, H20 Wireless, Red Pocket Wireless, AT&T, T-Mobile, T-Roc Wireless, and Ting all confirmed fully working. I'll PM you the build.prop edits and tweaks needed for DSU this evening. I strongly assume this will work as well on your Rebel variant.
[General Topics] Astr4y4L:
I bet IT would but still can't find an exploit for it... and what sucks is if I had root on it it would be an awsome phone...

Oh well . Anyhow please do send me the info.

Id love to get that to work on this zone3 and I bet it will .

I really need that on the zone 3 so I can keep my favorite fone and ditch bigred

---------- Post added at 06:12 PM ---------- Previous post was at 06:07 PM ----------

That's hilarious :) beat em to death with thair own code

And binarys...

Haha. Will try the .prop edits directly
[General Topics] MotoJunkie01:
My Rebel uses a 5.1.1 LL build which is susceptible to the old brown dirty ass cow exploit, for a means by which to achieve temp root & adb shell to at least mod build.prop. Did you mention yours was a variant with a 6.0.x MM ROM? Is the security patch level prior to like December, 2016. Or you already tried the Begrimed Bos Taurus (LOL, Dirty Cow)?
[General Topics] Astr4y4L:
Security patch=12-01-2016

And I believe it is susceptible...

Which version of the browncow are u using?

---------- Post added at 06:06 PM ---------- Previous post was at 06:03 PM ----------

Right now... I'm booting up. Cyber Sloup and going to poke at the rebel now
[General Topics] MotoJunkie01:
From everything I've read, Google AOSP did not patch the Brown Cow exploit until either December, 2016 or January, 2017. I use the dirtycow.sh version that can be ran from a terminal emulator. I think I got it from XDA. I can link you a copy if you need
[General Topics] Astr4y4L:
Yea send me the link. I just tried the crwoot.apk and it says my device isn't vulnerable...

But I ran a dirtycow from adb and it gave me the madvise and said exploited...

Haveing troubles though with the version I have.. Not sure what to do about getting the run-as shell... Maby if i try the windows version....
[General Topics] MotoJunkie01:
Here is the OTA access point URL I grabbed using a default.prop logger on one of my Alcatel devices.

http://www-ccpp.tcl-ta.com/files/4060A.xml

Its a link for some source code it looks like, but I think there are some more URL captures within the source code.
[General Topics] MotoJunkie01:
Here is a DirtyCow script for a SonyXperia I think. This should give you the links and enough info to execute the script for temp root shell.

https://xdaforums.com/xperia-x-performance/how-to/dirtycow-temp-root-t3503918 This script is geared towards Marshmallow Stock specifically
[General Topics] Astr4y4L:
cant get it to work on run-as... wtf ?

#################################################

shell@lv1:/data/local/tmp $ ls

dirtycow

my-run-as

shell@lv1:/data/local/tmp $ ./dirtycow

/system/bin/sh: ./dirtycow: can't execute: Permission denied

126|shell@lv1:/data/local/tmp $ chmod 0777 *

shell@lv1:/data/local/tmp $ ./dirtycow

usage ./dirtycow /default.prop /data/local/tmp/default.prop

dirtycow /system/bin/run-as /data/local/tmp/my-run-as <

warning: new file size (13796) and file old size (17920) differ

size 17920

[*] mmap 0xb6de6000

[*] exploit (patch)

[*] currently 0xb6de6000=464c457f

[*] madvise = 0xb6de6000 17920

[*] madvise = 0 1048576

[*] /proc/self/mem 1610612736 1048576

[*] exploited 0xb6de6000=464c457f

shell@lv1:/data/local/tmp $ run-as con

run-as: Package 'con' is unknown

254|shell@lv1:/data/local/tmp $

###############################################

it says exploited ... but i must be missing something...

IDK ??? !!!

how to confirm anything is actually being exploited ?

any idea ?

possibly place a dummy.txt file somewhere saying " it don't work :( "

and a new dumdum.txt file saying " it worked :) " in /tmp and see if it swapps them ?

im at a loss..
[General Topics] MotoJunkie01:
Looks fine. Remember the DirtyCow script is nothing more than a privilege escalation exploit. You may get temp root and a working adb shell, now that you have escalated the privileges. Hang on, I almost forgot the most important part. Looking great so far. BRB

OK here is what I meant to include earlier. This concept will allow you to make partition image dumps using a Dirty Cow temp root script. Try thus now and I think you've got it. Dump the whole system image & boot image for example.

https://xdaforums.com/android/software-hacking/tool-testing-dirtydump-to-dump-boot-t3544284
[General Topics] Astr4y4L:
Kool im gonna give it a read and I'll get back to it...

Stupid storms killed rhe power so it may be tomorrow before I get a chance to try it
[General Topics] MotoJunkie01:
Storms just touched down in Southeastern KY as well. Oh hell, lightnin' in dem Appleaishuns you dag burn varments
[General Topics] chwang13:
Rooted!!!!!! need help with getting it to work with T-mobile/Trurconnect SIM

Greetings..

Yay!!! I can also confirm another successfully rooted Zone 3. Thanks so much for the info and the write-up!!!! I'm so excited hopeful for what else is possible. The whole process went fairly smoothly considering that I'm a noob at this. Next i'd like to get this device to work with a Truconnect/(T-MOBILE network) SIM. I've been reading all the posts and have done the steps below provided by MotoJunkie01 to modify the build.prop file and renaming the vzw*.apk files. But I'm not sure about the node.db files, etc and whatever else that needs to be configured. I guess at this point I should express my gratitude for the excellent work that's been done and seek help on making this phone work with other carrier SIMs. Any help on this is is much appreciated..
[General Topics] Astr4y4L:
[MENTION=7383447]MotoJunkie01[/MENTION]

Can u plz explain this ?

" standard "SPR" edit in build.prop. "

I know build prop but what is spr?

---------- Post added at 08:42 AM ---------- Previous post was at 08:32 AM ----------

I can whip-up the stock gpt.img from pp2 if anyone knows how or where to use it....

It's Listed in my chunk files so I could surely create an .img from it but haven't fooled with it because it was no use to what we've so far been working on.