yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] pvineeth97:
Hi guys!

I am posting a very noob friendly guide on replacing init with your patched init file. This will help loading the patched sepolicy and can get temporary unrestricted root shell.

This guide is a prequel to the guide I already posted.

A big thank you to my friend [MENTION=383844]matteogenacio[/MENTION] for helping me out to compiling all the files and patching sepolicy and helping when I was stuck!

→ Patching your init and loading it into your phone:

(1) Open run_for_arm_devices.bat.

(2) Type "id". You get something similar to this screenshot:

(3) Type "cp init /sdcard/". Your original init file is copied into the sdcard.

(4) Type "exit" two times to get out of the shell.

(5) Type "adb pull /sdcard/init". The init file is copied into your computer.

(6) Open your init file in IDA PRO.

(7) Compare it with this source code: Click Here

(8) Look for the function which looks similar to this (This actually relates to bootchart_sample() function which you saw in the C++ code above):

(9) Compile shellcode.s using this command: arm-linux-androideabi-as shellcode.s -o shellcode

(10) Open shellcode file in HexEditor.

(11) Copy the content between AAAAINIT and AAAAFINE.

(12) Open init in XDA and copy the shellcode just after the "PUSHW {R4-R11,LR} line.

(13) My patched init file looked like this (more images to be added):

(14) At the end of the shellcode add "POP.W {R4-R11,PC}; NOP" instruction manually. Use ARMConverter. Copy the "Thumb2 HEX" Code.

(15) Click on File> Create DIFF File. Use a IDA Diff patcher to patch your original init.

(16) Now we have to load the init file. Turn off screen and wait 10 seconds.

(17) Type "adb push <your patched init file> /data/local/tmp".

(18) Open "run_for_arm_devices.bat".

(19) Type "run-as con". Then type "cd /data/local/tmp".

(20) Type "./a.out /init ./init". If it gives you "load destination error", try this one "./dirtycow /init ./init".

→ Injecting your sepolicy with rules for unrestricted access:

(1) Compile sepolicy-inject. Type this "gcc -std=gnu11 *.c -o t -I ../libsepol/include/ ../libsepol/src/libsepol.a -DARG_MAX=128" in terminal.

(2) Copy the the compiled sepolicy-inject file into sepolicy_generator. In sepolicy_generator folder, run ./installa.sh file.

(3) Now we have to copy the patched sepolicy file into phone. Type "adb push <your patched sepolicy file> /data/local/tmp/sepolicy".

Finally, open "adb logcat | grep audit". Look for messages that your sepolicy is loaded.

Hey we got root(temporary & unrestricted access)! :D

→ Notes:

(1) This works for only ARM32 Devices.

(2) This guide works regardless of your Android version. You can check if your phone is vulnerable to dirtyc0w using my debugging tools which I posted them in my guide.

(2) Another big thank you to my friend [MENTION=383844]matteogenacio[/MENTION] for helping me out to compiling all the files and patching sepolicy and helping when I was stuck!
[Android Software/Hacking General [Developers Only]] pvineeth97:
Reserved.
[Android Software/Hacking General [Developers Only]] Delgoth:
I'm glad I found this. I'm hoping maybe this can be converted to 64 bit, using a 64 bit dirty cow shell.

If you look in my thread, injecting root & setting SELinux, we have a 64bit shell.
[Android Software/Hacking General [Developers Only]] tommo1982:
Sorry if it's a noob question, but is "sepolicy" compatible between devices? My policy has attributes I wish it didn't have and I don't know how to remove them. So I thought replacing it with another one.
[Android Software/Hacking General [Developers Only]] sieger007:
Was looking around XDA for a "guru's thread' on SeLinux - and found this one.

My Util

bindfs

wont work cos of SeL denials

and I need help "neutralizing" the denial by changing SePolicy or alternatively running any relevant

chron . So I'm putting my Q here. If ain't of relevance I'll Del it

A non root file explorer can rename existing file with bindfs but it cant create new files aka WhatsApp downloads fail

My Samsung Stock ROM SeLinux logging is disabled.

grep -i avc /proc/kmsg dmesg | grep -i avc logcat | grep -i avc

No results from above. So I cant figure out what's hurting the Create Perm

So I ( hopeully ) recreated the scenario on another Android 9 phone with SeLinux state changeable ( the other 1 is perm. enforced). & I get this avc denial

9421 9421 W com.whatsapp: type=1400 audit(0.0:15540): avc: denied { create } for comm=4D65646961446F776E6C6F61642023 name="LW9n+rkip578Ox9pPGthBD5DGfO7rIMxJyDHRHjQ9ZY=.tmp" scontext=u:r:untrusted_app:s0:c122,c257,c512,c768 tcontext=u:object_r:sdcardfs:s0 tclass=file permissive=0

So the issue could be untrusted app or becos my target /data/sdext3 has unlabeled context ?

ls -Zd /data/sdext3
u:object_r:unlabeled:s0 /data/sdext3

BTW just FYI chron fails. Why so ?

chcon -Rh u:object_r:sdcardfs:s0 /data/sdext3` # before that I `chown -R`ed to `root` entire `/data/sdext3` o/p of ths is `chcon: '/data/sdext3/j37 WhatsApp/data/colornote/backup/1606263606732-AUTO.doc' to u:object_r:sdcardfs:s0:
# Permission denied - throws this error for all files

.

Does it mean I have to recompile kernel with updated policy OR any work-around ?
[HTC Desire 510] nbman:
Hello

As you can see, I'm a newbie...

My son dropped his phone in water ...we bagged it and followed all the steps to dry it out as best we could...

Now, when powered on, it just cycles through the startup to the HTC logo, continuously, which I believe is called "boot Loop". I've gone through a bunch of videos and tutorials on what do do in that case, as well as searched here, and none seem to really work. From what I can see, even to root it requires that it be in Developer mode, but since I cannot even get it to bot up, I can't get it into it..

I can get it into the menus by holding power and volume down though...

Question is, is this phone garbage or is there any hope? If there's hope, I'd really appreciate it..

Thanks
[HTC Desire 510] nbman:
OK, been reading and trying things for hours..

I can get to the bootloader screen, and its stable BUT:

Its says LOCKED in pink..

Recovery option just takes me into the boot loop again..

Factory reset, same thing..

I can get Fastboot USB to come up, but not sure what to do after that. The phone was stock, unmodified..

Somewhere else I read to post this info as it was helpful...

c:\mini-adb>fastboot getvar all

INFOversion: 0.5

INFOversion-bootloader: 3.19.0.0000

INFOversion-baseband: 1.101.1372.19.1121

INFOversion-cpld: None

INFOversion-microp: None

INFOversion-main: 1.19.666.4

INFOversion-misc: PVT SHIP S-ON

INFOserialno: FA49YY403170

INFOimei: removed (saw that a mod had removed this info on the other post...)

INFOimei2: Not Support

INFOmeid: 00000000000000

INFOproduct: a11_ul

INFOplatform: hTCBmsm8226

INFOmodelid: 0PCV22000

INFOcidnum: BM___001

INFObattery-status: good

INFObattery-voltage: 0mV

INFOpartition-layout: Generic

INFOsecurity: on

INFObuild-mode: SHIP

INFOboot-mode: FASTBOOT

INFOcommitno-bootloader: 74b2d0b4

INFOhbootpreupdate: 11

INFOgencheckpt: 0

all: Done!

finished. total time: 0.012s

Really Appreciate any help on this..
[HTC Desire 510] nbman:
OK,

More reading, and trials...

Got the bootloader Unlocked..and now it also says "Tampered"...?
[HTC 10 Questions & Answers] rcgoodall93:
This is pretty straight forward. I was wanting to know how many models/hardware versions there are of the HTC 10 and what makes them different. I have a T-Mobile HTC 10 that is unlocked, then converted to US Unlocked.

What I'm getting at with all this is that since it's unlocked and it's been converted to a US Unlocked CID. Is it basically a US Unlocked model now? I did use a RUU on it to make things match up. I'm just not sure if I can consider it a US Unlocked model in full now.

Thanks for any answers!
[Xperia Z5 Premium Q&A, Help & Troubleshooting] ahmedsubaih:
hello everybody

i tried to flash the ftf that debagger posted but i'm getting this msg

https://xdaforums.com/showpost.php?p=70594432&postcount=20

can u please help
[Xperia Z5 Premium Q&A, Help & Troubleshooting] ayhanornek:
Update flashtool.here http://www.flashtool.net/downloads.php .. (0.9.23.2)

here x10flasher.jar.http://www.flashtool.net/downloads_windows.php..Upload to this
[Xperia Z5 Premium Q&A, Help & Troubleshooting] ahmedsubaih:
thanks mate you are my hero
[Xperia Z5 Premium Q&A, Help & Troubleshooting] ayhanornek:
You're welcome
[Shield Tablet Q&A, Help & Troubleshooting] vadergr:
Another happy owner.

Some quick questions:

1) I am reading about various issues with nougat so i am not upgrading. Is there any way to disable update notification?

2) Do i loose warranty if i root? Can i un-root / relock bootloader it with no traces?

3) Is there any Shield Toolkit program to easily root/unroot ?

4) USB OTG is suuported both in MM and Nougat ?

5) Any double tap to wake option?

Thanks in advance.
[Shield Tablet Q&A, Help & Troubleshooting] Bryandu13:
Hello :

1- IDK but I think it's possible, and I have no problem with the update, tablet is better with nougat.

2- Easy to relock and get the warranty again, but NVIDIA don't care about unlocked devices so you can keep it unlocked without problem.

3- No, you have to use ADB / Fastboot commands

4- Yes

5- No
[Shield Tablet Q&A, Help & Troubleshooting] GibFTW:
1) Probably, I know a custom rom can do it...

2) Just restore it to factory with their packages, and relock the bootloader.

3) Use ADB, it is quite simple. If you have any issues, just update the Fastboot driver to the Shield driver, that helped me.

4) IDK...

5) IDK...
[Android Apps and Games] BASICSTEPS:
FINANSIA is a financial application for smartphone users, which helps to control personal finance, using high-tech functionality put in the application.

If you would be wealthy, think of saving as well as getting.

(Benjamin Franklin)

Finansia - translated from Latin means " cash payment ". The term originated in the 13-15 centuries.

To save money, you need to learn to control expenses and income. Most likely, you tried a variety of financial applications or notebooks and because of the complexity and inconvenience, you cease to use it. We tried to create the most user-friendly application, and at the same time exclude all the disadvantages of other similar applications.

Remember, that money is of the prolific, generating nature.

(Benjamin Franklin)

For full tracking of consumption and income, Finansia application keeps in accounting of debts and credits (loans).

Automatic parsing of messages from the bank, will help you to fully control the spending and income at bank cards.

A penny saved is a penny earned.

(Benjamin Franklin)

Beware of little expenses; a small leak will sink a great ship.

(Benjamin Franklin)

Today, more than ever, need to pay close attention to accounting and control of personal finances.

Features Finansia application:

**** Multi currencies

**** Voice input

**** Google Sync

**** Incomes and expenses

**** Debts

**** Loans

**** SMS parsing

**** Purpose (money box)

**** Auto operation

**** Reports

**** Password protection

**** Widget
[8525, TyTN, MDA Vario II, JasJam ROM Development] bfi2906:
I have the 6 tab version installed and working fine, except for one small but irritating issue. When I press the "messenger" tab, it always opens the MMS inbox. I've tried opening and closing things in different order. I've tried to find settings somewhere, all without success - very frustrating. Is there a way to set it to open my email? I've looked everywhere I can think to find a fix, but no luck.

Tks
[Lenovo Vibe K5 Plus Questions & Answers] Prajwal MG:
Hello,

i m using lenovo k5 plus with Resurrection remix android 7.1 Rom . why cant i save videos .. it shows " not able to capture media"
[Mate 8 Q&A, Help & Troubleshooting] lvikel2:
How can i install new rom from fastboot

i have ulock bootloader .

But when i start the phone "hueai logo" on screen for hours
[Mate 8 Q&A, Help & Troubleshooting] sillanwali:
What about your phone model?

http://consumer.huawei.com/en/support/find-model/index.htm

NXT-L09, NXT-L29, NXT-AL10, NXT-CL00, NXT-DL00 or NXT-TL00

Mentioned on back of your phone like this image:

​

And region:

C10 - Russian

C185 - Africa, Middle East

C432 - Europe

C605 - Latin America

C636 – Asia

If you don’t about your phone region, go to http://consumer.huawei.com/us/support/warranty-query/index.htm

Enter your device IMEI/MEID/MAC/SN for query

Like NXT-L**C***B***

Kindly Reminder:

1. Press *#06# on phone dial pad to get the IMEI/MEID.

2. You can get the IMEI/MEID/MAC/SN from the giftbox or label of phone.
[Mate 8 Q&A, Help & Troubleshooting] lvikel2:
its L09 NXT-L09A

and i dont know what to do now
[Mate 8 Q&A, Help & Troubleshooting] sillanwali:
Region?
[Mate 8 Q&A, Help & Troubleshooting] lvikel2:
i dont know. in the website the u send didnt reconize wanrany

he say me just NXT L09
[Mate 8 Q&A, Help & Troubleshooting] lvikel2:
i see in box this: QISNXT-L09

ITS OK?

i can once to get into TWRP

its say like he cant mout /****

/vendor

invalid argument
[Mate 8 Q&A, Help & Troubleshooting] VenuGopalu:
Clearly follow My steps To unbrick and get normal device ::

Step 1 ::

Download the full firmware here :: http://update.hicloud.com:8180/TDS/data/files/p3/s15/G1076/g104/v67545/f1/full/update.zip

Step 2 :

make sure that your bootloader is in unlocking state

Follow the video blindly ::: https://youtu.be/OMKDnBqbi3U?list=PLrYmWkiAhQ1gXLPDLB0eT9J26lkefvVkK

don't panic of mobile.

Step 3 :: done ..enjoy u did it

---------- Post added at 05:30 PM ---------- Previous post was at 05:18 PM ----------

If you bricked on nougat then follow the below steps

step one :::

download this ::http://download-c.huawei.com/download/downloadCenter?downloadId=91923&version=359596&siteCode=do

then extract the zip and open the update.app using HuaweiUpdateextrator in that select recovery and extract

1.now, boot your device into fastboot and flash the recovery (Optional)(try this if it said incompatible version on recovery)

2. on your sd card and make a folder "dload" . and copy the update.app which we have extracted earlier

3.the switch off the device and press all three buttons you will be reboot into recovery and done . you device will be okey
[Mate 8 Q&A, Help & Troubleshooting] basimzanaty:
I'm a bit late to see your reply ....as I bricked my phone early today after trying to root nougat .....then I tried Everything ....till I went to DC Phoenix ....I purchased credits then I tried the first unbrick method which was no use then I tried the second one which pushed me to install A NEW FIRMWARE then I had my phone dead LITERALLY DEAD....(NO POWER / No FASTBOOT/....NOTHING)...I gonna use my daughter's broken phone (LENOVO A700) as a punishment till I get the new SAM S8.:rolleyes::rolleyes::rolleyes::crying::crying::crying:
[Mate 8 Q&A, Help & Troubleshooting] Boratsu:
Tried it, but nothing happens

Hi,

I have a Mate 8 NXT-AL10 (Chinese version)

I tried your steps in the video, but after the "fastboot reboot" command and the screen where its says "your device is booting" (after pushing the powerbutton) nothing happens....

In your video it continues to the loading screen and boots into Android. On my device it does not....

Is there another step?
[Mate 8 Q&A, Help & Troubleshooting] letschky:
You have tried a factory reset?
[Xiaomi Mi MIX  Questions & Answers] SantinoInc:
What would it take for a developer to be able to release a Lineage/CM type ROM for this phone? Do you guys think it is a possibility in the near future or will this never happen?
[Xiaomi Mi MIX  Questions & Answers] Hogyoku:
Source code for starters is probably helpful, and that might take a while with xiaomi....
[Xiaomi Mi MIX  Questions & Answers] brambizimski:
I've experienced that with the Mi5, Cyanogenmod builds came very quickly after Xiaomi released the kernel sources. I'm also waiting for them, this device would be so much better with Lineage OS, or anything other than a MIUI rom, although the EPIC rom is getting fairly close

You can follow the official github for xiaomi devices here: https://github.com/MiCode/Xiaomi_Kernel_OpenSource

Mi5 owners also did a petition though, asking Xiaomi to release the kernel sources for the mi5, maybe we should do the same for the MIX ?
[Xiaomi Mi MIX  Questions & Answers] Constrabus:
How do we submit a petition? Lets do it!
[Xiaomi Mi MIX  Questions & Answers] james1089:
:laugh: it's already been done early build up and running been using for a week.
[Xiaomi Mi MIX  Questions & Answers] Constrabus:
Right but its not a true build. It's using the sources that were released for the Mi5s.
[Android Head-Units] meisme12:
Hi People,

I have two Android HUs. I have a brand new still in the box Eonon GA6163F and currently have installed a Joying JY-UL128N2. I first purchased the Eonon but have seen so many issues with it's performance so decided to get the Joying but not a fan of how it looks in my car and prefer the Eonon as it was made more the car.

I tired selling the Eonon on eBay but people offered silly low offers.

Is there anyway to upgrade the Eonon to improve performance? I read the thread about upgrading RAM but I don't have the skills for this or know anyone that does. Is there a SOM that I can purchase or silly questions use parts from one with the other?

Thanks for any help :o
[Android Head-Units] m00n61:
Assuming the EONON is a MTCB/C unit

1. Get the latest 5.1.1 ROM from here

2. Root with Kingo root

3. Enter settings, Apps, ALL tab and disable all Google apps

4. DON'T update Google Maps, newer versions require Google services

5. Get the apks for your preferred apps from an apk repository like apkmirror.com

With these simple steps you will have a 5.1.1 unit as fast as a 4.4 one.
[Android Head-Units] meisme12:
Thanks for the info. So you think the the 1GB Eonon will be around the same speed as the 2GB Joying?

Does anyone know if the Eonon is a MTCB/C unit? I haven't installed or unpacked it so I cannot check.
[Android Head-Units] xdamember2:
I've sold a couple of HUs on Craigs List and got my asking price - but these were removed from service, not unopened.
[Xperia Z3 Q&A, Help & Troubleshooting] zielar:
Hello,

*

In December, I wanted to change the software in my D6603. Soft is installed, but the phone is switched saw only a black screen.

Ability to reinstall anything was impossible because of a damaged key VOL, so the phone was lying yesterday when it reached me a new tape.

After replacing the tape I made all possible options to restore / install the new software and different versions of the program Flashtool (latest version). I did even ReLock bootloader to be able to have the option to repair Sony Companion.

*

The problem persists ... Here tried my method:

*

1) Install the latest firmware from Xperifirm

2) Hardreset of holding down the POWER + VOL +

3) Reset using the RESET button is pressed next to the memory card slot

4) Repair software by Sony Companion.

*

Soft wgrywałem full Wipe User Data and APP CACHE.

To avoid solutions which will not apply, I inform you of current settings, which will not change because of the problem you are experiencing:

- Bootloader locked [it just can unlock]

- USB debugging: OFF

*

Please help me because I do not know what else to do

*

Phone REACT normally clicks. I turned on even MTP clicking at random to ensure proper computer connection mode :) backlight also works correctly. The problem lies only in BLACK SCREEN.

*

I do not remember what software i flash in December. It is an option that I could upload wrong.

Thanks for the help in advance.
[Lenovo P2 Questions & Answers] helppme:
Hi,. I deleted a bunch of bloatware when I first set up device. I can't remember if I deleted and equaliser or audio app. Can you guys check if you have one? If I have deleted one, is there anyway I can get it back?

Cheers
[Lenovo P2 Questions & Answers] nandakis4:
To my knowledge I didn't notice any Equalizer ...So don't blame it on you ?
[Lenovo P2 Questions & Answers] helppme:
Cheers, good to know.
[Lenovo P2 Questions & Answers] phoneinf:
Same here I can only find 13 apps to be pre-installed and no audio app :silly:
[Lenovo P2 Questions & Answers] helppme:
This is the kind of place they saved money. No firmware level control of global audio settings. Only app level control with android standard API. It's essentially a Moto standard ROM. Hence why we have identical annoying fingerprint vibration that cannot be dissabled. Same as Motorola's. It's a Moto z play in a different packackage with a bigger battery :). Cheers for checking about the apps!!
[Xperia Z5 Q&A, Help & Troubleshooting] Badmem:
I just did a clean update to Nougat on my Z5 E6633. Is there still an option in Battery optimisation that will charge for battery health - lifespan? I'm not asking about getting maximum use time from a charge, but charging to extend the life of the battery.

Thank you.
[Xperia Z5 Q&A, Help & Troubleshooting] iArvee:
Yes. It's still there in Settings > About Phone > Status
[Xperia Z5 Q&A, Help & Troubleshooting] Badmem:
Thanks - I'd forgotten where I set the option before - it's not exactly in a logical place to me.
[AT&T Samsung Galaxy S6 Edge] Ghetto Geeksta:
Received a new ATT S6 Edge yesterday via insurance because the battery died in my old one. Got the exact same phone updated it to 6.0.1 but for some reason the edge screen position is not available in the Edge screen settings. I was able to change it to the left side on my old phone, so I look at the edge settings on my old and it's not their either! I only have three options for Edge screen, Edge Panels, Edge feeds, and Edge lighting, and the latest version of the edge screen is installed.

Did something change? Did they take that option away?
[AT&T Samsung Galaxy S6 Edge] Ghetto Geeksta:
I got it now, apparently its located in the edge panels handle settings.
[Android Q&A, Help & Troubleshooting] frestelle:
Hello,

i'm trying to find the last firmware 4325 for this equipment.

There is an old thread about that but unfortunately the download links are dead

https://xdaforums.com/sho....php?t=1361956

if someone could send new download active links about this firmware it would be really nice !

Kind regards

Frestelle
[Galaxy Note II Q&A, Help & Troubleshooting] Jemal Tskhakaia:
hey guys I have a little prroblem. anyways camera focus got stuck on one position I tryed two android 7.1 roms ressurection and aicp ,wiped cache dalvik system data,tryed other apps too but no luck.can you advise someting or do I have to replace whole camera module?
[Galaxy Note II Q&A, Help & Troubleshooting] audit13:
Does the same thing happen with a stock ROM? If you're rear camera is stuck, you can buy a replacement on ebay or aliexpress. It's very simple to replace. I just replaced the rear camera on a note 2 sgh-i317m that had a damaged sensor.
[Galaxy Note II Q&A, Help & Troubleshooting] Jemal Tskhakaia:
well I have not tryed stock rom for years.I had some some serius issues with odin so I dont want to get back to it again.I wanna try some other 6.0 roms to and see if it works then I might buy a new module.hope it wont be ****ty one.
[Galaxy Note II Q&A, Help & Troubleshooting] audit13:
You'll never really know if it is software without trying a stock ROM.

What problem were you having in Odin?
[P3600 ROM Development] filjoa:
Hi

some one can tell me what is the last version of TOMTOM and last version of iberian maps?

if possivel some one can give me an link for download?

regards
[P3600 ROM Development] shym:
go there : http://www.tomtom.com/

And don't warez on this forum !!! Thx
[P3600 ROM Development] nealed:
In fairness - there was no reference to warez. A request for a download link is not a big problem - most Trinitys come packages with tomtom.

When you try to crack the map activation - then you are in deep water - but there was no talk of that at all.

You should be able to download tomtom for Trinity from HTC free of charge - including one free city. You pay for the maps.
[P3600 ROM Development] shym:
Okay. It's maybe a misunderstanding. But it's not so difficult to find the site of tomtom ... or registrer to htc e-cub ... ;)
[P3600 ROM Development] tweakmy:
how much is tomtom with one city?