[AT&T Samsung Galaxy Note5] droidvoider:
*** New Tool Added: 04-06-2017 ***​

Warning: 'extremely powerful and dangerous tool'

This tool is designed to execute commands as root + system_server && install_recovery. While this example shows how to disable packages please be aware that a typo will be executed on the system as a command.

General Notice:

This package disabler is Android 6.01 64 bit and it isn't Samsung specific.

This tool is currently limited to only two contexts and therefore may not currently be able to disable "some??" packages.. Please let me know if that is true and I will attempt to find the correct context to disable the problem package.

Please note

This tool is part of a root kit I'm designing but since it's purpose was never a package disabler it isn't likely to receive updates. If you have an issue and you're waiting for a correction it's gonna be some wait unless you pm me. (i'm trying to learn forums, best thing to do is PM me to make me aware of your post here)

Information Updates:

You can disable every AT&T app on the device for a net gain on battery performance for your device. But if you disable some of the security logging and Android proper packages you will start seeing a net loss on batter performance. I was at < 1% over night before I got crazy.. Now I'm back to 6% battery lost in 6 to 8 hours of screen off time.

(obviously a tool that can disable a package can enable it also so keep careful track of your cmd_list.txt files)

Instructions

Don't brick your phone... just kidding see in depth instructions on my github

sources, no binaries

April 12 2017 sources have been majorly overhauled, binaries are beta beta.. however, package disabling power not increased

--Android 5.11 r2 64-bit binary toolbox and applypatch 'till' now added. ubuntu + ndk needed to make run5

https://github.com/droidvoider/CVE-2016-5195_GreyhatRootProject_Root_Console

BINARIES - NO SOURCES -instructions for disabling packages are in the zips

Linux

https://drive.google.com/open?id=0B-fnF5v-xg6OYmdreVNJOGlLWUE

Windows (i didn't test that batch file.. edit the batch file it's just a "batch" of commands)

https://drive.google.com/open?id=0B-fnF5v-xg6OYmdreVNJOGlLWUE

Scope:

dirtycow 5195 is patched November 2016.. If you are running Android 6.01 you may be able to flash the October 2016 kernel to your phone to bypass the patch

1. First make sure you have the AP file from your firmware.. (specifically boot.img and recovery.img which are included in the AP file)

2. Backup your device.

3. Use Odin to flash PJ1 boot.img / recovery.img to your phone

https://drive.google.com/open?id=0B-fnF5v-xg6OR1VWRTItWFVOTVE

4. Constantly check your phone, if it is getting hot or losing a lot of battery fast you need to stop... restore it and forget this

5. as long as it's all good see the instructions included with the tool

OLD PROCESS BELOW

************************************************************ UPDATE: 02/21/2017 ************************************************************************

This exploit is powerful and from what I can tell you don't need to use adb at all to make it work. Create an archive of the app with your tool, I listed what I used below. Install from archive. "app crashes". There are 3 updaters that I kill: com.sec.fwservice + com.sec.android.soagent + com.ws.dm. Any apps I can disable in App Manger I disable normally instead. For example if you begin disabling Google play it will allow you to fully disable it. This was the biggest thing that made my batter life better. You can use the adb commands, script and etc also if you want to do anything and everything to avoid additional updates. Hopefully I'm right because I am done with updating.

**** Warning **** Disabling the wrong thing this way can cause the phone to crash so hard you need to flash firmware to restore it. Make sure you have backed up and that you have your firmware ready. Also be warned that in my experience devices can suddenly crash & need repair from doing this type of stuff!!

tESted on firmware N920AUCS4CPK1 Android 6.01 w/Nov. Sec. Patch

Overview of the process

Our goal is to completely remove most AT&T from the application manager list and have AT&T software show up as a regular app, not a hidden system app. I am unsure if we need to have a fresh flash and how far you need to go in order to achieve our intended goal. I am fairly confident we need only change system settings to off for AT&T + Knox that and then fire this script. If that is not enough please see page two. I would very much appreciate feedback so I can edit this.

===> REMINDER <===

Backup all your contacts, text messages, downloaded files and also individually back any apps there are important to you. Also have a look at your /sdcard/ to see what's there. Do a full backup on the entire phone just in case you forgot anything.

*** Prepare to have to flash/wipe data to get this to work as I've only truly tested this after a recent flash personally!!! ***

This walk through utilizes the following technologies you will need to Google

You need the platform-tools from Android Studio SDK it comes with adb. (You can probably google platform-tools directory and download it)

(path environment needs to be set in the script or just fully qualify the location of adb which is what I do) <change to match your path>

I assume you understand how to download a file, open command prompt, cd to the directory it's download to and edit the path to your platform-tools inside the batch file

I also assume you can figure out the Samsung USB driver for Windows and test that you can adb shell to your device.

I assume you can get into Download mode and flash your firmware with Odin / Windows using a usb cable.

Steps to brick your perfectly good working AT&T Note 5 phone

Denial of permission and general rearrangement of system apps Version .0008 beta

Fresh after a flash please block the signal on your phone if possible. I always block signal!!!

1.) Turn on developer options then confirm that you have OEM unlock on(like it matters), USB Debugging On and default Verify Apps via USB remains off

2) Kill all AT&T running processes DEVELOPER OPTIONS | RUNNING SERVICES (get Smart Limits, Protect app, ATT yahoo mail, anything ATT)

every opportunity)

2A) Package disabler is awesome leave it running if you have it we don't need anything special for adb, besides adb.

3) Plug your phone into your PC via usb and get it connected.. (adb devices "unauthorized means you didn't say ok on phone in time unplug/replug try again")

3a) adb shell should log you into the phone and exit should get you back out (we don't want to be in the shell just testing the connection)

4.)Turn off "can make system changes" for AT&T apps. Application Manger | More | Change System Settings | More | Show System Apps -- Turn off anything AT&T (I also kill anything I can knox, samsung)

5) Fire this script on your phone (obviously you will have it connected to your pc, allowed the connection on your phone screen)

Basic commands I'm using, I prioritize com.ws.dm and then I run the commands on the rest of AT&T:

<This small snippet is a linux bash shell while the attached script is a Windows example>

#NOTE TO LINUX USERS: take the rest of the script from the windows batch and convert it to bash

#!/bin/bash

/opt/Android/Sdk/platform-tools/adb devices

/opt/Android/Sdk/platform-tools/adb wait-for-device

/opt/Android/Sdk/platform-tools/adb shell am kill-all

/opt/Android/Sdk/platform-tools/adb shell pm clear com.ws.dm

/opt/Android/Sdk/platform-tools/adb shell pm reset-permissions com.ws.dm

/opt/Android/Sdk/platform-tools/adb shell am set-inactive com.ws.dm true

/opt/Android/Sdk/platform-tools/adb shell pm revoke com.ws.dm android.permission.CHANGE_CONFIGURATION

/opt/Android/Sdk/platform-tools/adb shell pm revoke com.ws.dm android.permission.WRITE_SECURE_SETTINGS

/opt/Android/Sdk/platform-tools/adb shell pm revoke com.ws.dm android.permission.BATTERY_STATS

/opt/Android/Sdk/platform-tools/adb shell pm revoke com.ws.dm android.permission.INTERACT_ACROSS_USERS

/opt/Android/Sdk/platform-tools/adb shell pm revoke com.ws.dm android.permission.SET_PROCESS_LIMIT

/opt/Android/Sdk/platform-tools/adb shell am kill-all

/opt/Android/Sdk/platform-tools/adb shell am kill com.ws.dm

/opt/Android/Sdk/platform-tools/adb shell pm clear com.ws.dm

Note: I always did this right after a flash so I'm hoping that's not necessary

(I know I misused reset-permissions but it accepts it, laugh)

In the attached photo notice that I can "Show" system apps but AT&T Software Update is already shown (i.e. not a system app) For me I have no other att apps even if I show system apps!, they're installed tho)