yashsingh1/xdaforums huggingface dataset:
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
well if we dont have write access how would one write the su binary lol
[Samsung Galaxy S8 Guides, News, & Discussion] Maltego:
Will probably "end up" requiring...meaning they once proper access is achieved it will require custom everything. After all, this is a Sammy device...
[Samsung Galaxy S8 Guides, News, & Discussion] suzook:
Sounds like we are f'd. This blows.
[Samsung Galaxy S8 Guides, News, & Discussion] 954wrecker:
4 weeks and those carrier switches don't look that easy either
[Samsung Galaxy S8 Guides, News, & Discussion] Tigerhoods:
I wanted to add I don't have verizon voicemail you will have to download google voice or something and the apk won't work the flag isn't set..
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
So we tried to eng boots and neither is what we need lol. Both are permissive but similar to the factory binary firmware we already had
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
To add, this one does say unauthorized actions detected and appears to have adb debugging on by default and is newer but that's about it.. it also seems to run fairly smooth on stock roms
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
Also, secure download and secure boot are both still enabled
[Samsung Galaxy S8 Guides, News, & Discussion] Silenus21:
Thought we were closer this time.

My Sprint phone was unlocked recently but I think the flash tripped my Knox.

I don't have Shealth or Samsung Pay, so my system was modified or something like that.

I kinda thought with this new firmware around, some devs might achieve root soon.
[Samsung Galaxy S8 Guides, News, & Discussion] 954wrecker:
What does the official knox counter show?
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
It didn't trip knox.. the one posted in this thread had other firmware files in it
[Samsung Galaxy S8 Guides, News, & Discussion] pma7779:
Yes!! A tutorial our just one location for all necessary files & instructions. Unfortunately this thread got flooded with off topic posts so it's tough to sift through it all. Especially for a beginner.
[Samsung Galaxy S8 Guides, News, & Discussion] Silenus21:
I just confirmed with an app that Knox is not tripped.

Then I wonder why s-health says my system was modified and it doesn't run.

What can I do guys, without losing my unlock?

Afraid of flashing something that removes my unlock.
[Samsung Galaxy S8 Guides, News, & Discussion] AngelRyu:
But if it has adb root then can't we make the kernel permissive and then run a systemless root ?

I know on the s6+ I did this (used adb root) and changed the kernel and wifi tether and all that and was able to gain root but after restart it went back to default..(Had to unroot before reboot due to bootloop) But systemless root would be a start.

Also did you try chainfires auto root?

Edit

Also try kingroot
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
Kernel is already permissive and when trying to run adb as root it says it is started as root but isnt in root shell
[Samsung Galaxy S8 Guides, News, & Discussion] AngelRyu:
So basically that eng boot file is trash..
[Samsung Galaxy S8 Guides, News, & Discussion] mweinbach:
I am thinking of away to make it work. Has anyone tried to mount the system and just try to extract system files to see if we could.
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
Not user mountable in fstab
[Samsung Galaxy S8 Guides, News, & Discussion] mweinbach:
did you try flashing cf auto root
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
...

We do not even have adb root... This kernel is already permissive.. kingroot will not work and c.f. auto root will not work since we cannot flash any modified tars

---------- Post added at 05:11 AM ---------- Previous post was at 05:01 AM ----------

Guys, c.f. auto root will never work unless we get an unlocked BL.

---------- Post added at 05:18 AM ---------- Previous post was at 05:11 AM ----------

Maybe Samsung learned and started making their eng kernels without rw access
[Samsung Galaxy S8 Guides, News, & Discussion] ashyx:
Seems this got missed, so I'll post it again.

https://xdaforums.com/showpost.php?p=72333309&postcount=1140
[Samsung Galaxy S8 Guides, News, & Discussion] ernestico911:
What about if convert G955U from T-Mobile to G955U from SPR? root after and then unlock it, will this work?
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
no offense but how would that change anything? All the US variants are the same device on the same base firmware so flashing spr or tmo csc or userdata doesnt change anything in regards to rooting or unlocking or sim unlocking..

if its tmo its still locked to tmo network unless you use the tmo unlock app..

each carrier has their own policies with unlockimg and it hasnt changed with the S8/S8+.. I am sure they will find ways and I am sure they will be sim unlocking non spr s8 devices soon enough seeing as how we have the factory binary firmware already which is one of the main things it can be used for lol
[Samsung Galaxy S8 Guides, News, & Discussion] The bodhi:
The real eng root file

The eng file has been flashed up on facebook

But still no flash

The man with the document told me

If anyone can provide "token";)

Then you can flash eng

Otherwise all thinking is in vain
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
What do you mean by provide token?
[Samsung Galaxy S8 Guides, News, & Discussion] The bodhi:
A new strategy

If you want to flash eng

You need to enter a code in your phone

This code is provided internally by samsung and USES this code to unlock the eng limit
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
Without it we cannot flash the firmware youu have?
[Samsung Galaxy S8 Guides, News, & Discussion] djhotsauce:
for some reason that sounds very fishy.. or is it just me?
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
Would you be willing to share the files you currently have?
[Samsung Galaxy S8 Guides, News, & Discussion] meathammer386:
that would be nice
[Samsung Galaxy S8 Guides, News, & Discussion] moldovanos:
Get BK Disabler from app store
[Samsung Galaxy S8 Guides, News, & Discussion] Akumai:
currently back on stock firmware, but, just a few tips for those on the debug firmware, something I found which was hidden, the three software buttons at the bottom of the screens, when pressed or in a certain order, can activate and de-activate certain things. the one I found, which I found interesting, was if you hold the home button, you have a variety of options, one of which was to change your debug level on or off, or a higher level (for example, from low to High)

just thought i'd bring that up, maybe there is a secret button combination somewhere.
[Samsung Galaxy S8 Guides, News, & Discussion] billydroid:
I share that feeling. We'll get the eng_boot.imgs. Hopefully sooner than later.
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
Anyone have any idea what this is my s8 is in it right now from the factory binary??
[Samsung Galaxy S8 Guides, News, & Discussion] Quickvic30:
Isn't the eng software available on a China site someone linked in the TMO root thread? I'll see if I can find it again.

Also, would a root.bat file work with adb like on the S7?
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
I haven't seen eng firmware i have seen combination firmware which is the same as what we have here.....

As for root.bat we need to be able to mount system as read/write not read only

I have never seen this before on a Samsung Device Upload Mode??
[Samsung Galaxy S8 Guides, News, & Discussion] Quickvic30:
I've never seen that either, how did you get there?
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
I cannot give you a definitive answer as of yet i want to know what i can with it though lol device appears in odin but not on pc or adb??
[Samsung Galaxy S8 Guides, News, & Discussion] Akumai:
Did you see my other post? I'm only asking because It would be great if one of my contributions lead to a breakthrough. Also, very interesting, never heard of upload mode before.

I have a small belief that somewhere hidden in this firmware, might be the answer to atleast a root.
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
Yes i saw your post, i knew we could change debug level and turn a cp ramdump on just didnt know we could change the debug by holding home button and doing so, i have ime codes to do it
[Samsung Galaxy S8 Guides, News, & Discussion] Quickvic30:
Finally found it and got it translated. Now that it is translated it looks like this might be what we already have. Engineering debugger?
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
We have the AQCF firmware version but i didnt purchase from that site, i saw it and debated on it but i cant remember the price, it was too much for comfort though. That one could be different than what we have but i doubt it
[Samsung Galaxy S8 Guides, News, & Discussion] Quickvic30:
Do you remember how much it was? I'm willing to throw down some $$$.
[Samsung Galaxy S8 Guides, News, & Discussion] ashyx:
Yes its part of the factory binary. As it states its accessed by holding the Power button as the device restarts.

It unusable for anyone but a Samsung engineer. I also have a belief that Samsung is able to reset knox using this mode.
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
$45 and i paid $10 for the one we currently have....
[Samsung Galaxy S8 Guides, News, & Discussion] Quickvic30:
Well that's not so bad, I might purchase it.
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
If you do will you share that was going to be the first one i purchased, but $45 or $10, $10 wins lol
[Samsung Galaxy S8 Guides, News, & Discussion] Quickvic30:
Yes I will for sure. I'm having some trouble with the translation stuff though so it might take a while.
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
Use Chrome and right click page-->Translate to English
[Samsung Galaxy S8 Guides, News, & Discussion] djhotsauce:
"The man with the document told me

If anyone can provide "token""

i dont think he has the file.
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
That's a possibility although that pic says something never seen an eng mid noship it is always user mid noship etc. Google has no results for me so we just have to wait and see
[Samsung Galaxy S8 Guides, News, & Discussion] djhotsauce:
yeah i just did the same no result also. or it could be one of these "http://gsm-firmware.com/index.php?a=browse&b=category&id=9277" files renamed.
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
yea take it with a grain of salt especially if theres no way to retridve it lol
[Samsung Galaxy S8 Guides, News, & Discussion] the_OZONE:
So basically, eng boot really provided no progress in obtaining root? Assuming this means there are no elevated privileges, I'm a bit confused as to what the point in eng boot is to begin with.
[Samsung Galaxy S8 Guides, News, & Discussion] ernestico911:
I see that it is only for unlock solution, Boxes and dongles sees it as rooted device
[Samsung Galaxy S8 Guides, News, & Discussion] the_OZONE:
Does that mean by flashing eng boot, anyone should be able to unlock their device?
[Samsung Galaxy S8 Guides, News, & Discussion] ernestico911:
if it supported by any BOX/Dongle yes sir
[Samsung Galaxy S8 Guides, News, & Discussion] Bladescarr:
How do you even flash it? I am having trouble finding out how to do it.

Any help would be appreciated. Thanks!

Edit: NVM, I think I just got a bad download
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
Previously the eng boot had adb root but these do not

In fact it wouldn't even charge beyond 80% lol
[Samsung Galaxy S8 Guides, News, & Discussion] the_OZONE:
Well now that's just ridiculous.

There have been a lot of posts on the thread, so I would like to just summarize the G955U status quo, please tell me if I am wrong

EDIT: updated, look at post below

Engboot root: engboot received, no current root solution

BL unlock: no current solution

BL unlock root: no current solution

Cross carrier flash: not entirely sure on this one, anyone know?
[Samsung Galaxy S8 Guides, News, & Discussion] ernestico911:
These files are from GCProkey team, it says that is for SPR only but, it works on all qualcomm

G950U and G955U
[Samsung Galaxy S8 Guides, News, & Discussion] ashyx:
Still ro.secure=1

Seems like Samsung got wise since the S7 root exploit and are now shipping ENG boot images with ro.secure=1

Looks like that exploit has now been patched.

Not that it matters either, but the build properties state for Verizon not Sprint.
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
Engboot root = no longer rooted as they have no write access and ro.secure=1 when it used to be 0 prior to the S8, therefore it is now just "ENG Boot"

BL Unlock = no solution

BL Unlock root = Clearly no solution if we have no bl unlock lol

cross carrier flash = not possible without root i believe as stock firmware contains multi csc and whatever variant you got your device on it tends to go back.. you can however get a bloat free system.

to add SIM Unlock: besides Sprint and carriers that come unlocked already like vzw and usc you still need to unlock through your carrier method such as tmo unlock app.. flashing another providers firmware doesnt magically unlock the device lol

---------- Post added at 08:27 PM ---------- Previous post was at 08:26 PM ----------

thats what i believe as well.. they made the eng boots useless for root on the S8 lol
[Samsung Galaxy S8 Guides, News, & Discussion] billydroid:
Damn what is wrong with them? Why only on Qualcomm devices are this gung-ho about root?
[Samsung Galaxy S8 Guides, News, & Discussion] ashyx:
Maybe the devs at Kingroot will crack nougat with an exploit. Then the eng boot might have some worth.
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
lol wasnt sure if this was a joke or not but anything is possible haha

i dont think theres been a solid exploit for N since dirty cow
[Samsung Galaxy S8 Guides, News, & Discussion] Triforce1001:
So correct me if I am wrong, but in order to root we will most likely need to unlock the bootloader first?
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
nope.. we need an exploit to root.. of course unlocking bl would be great but typically that is a ton more difficult to achieve these days
[Samsung Galaxy S8 Guides, News, & Discussion] bricky23:
If you use the non prince version, it will succeed. However it still doesn't work for me. Waiting on the tutorial. How do you find out which band you are using?

Edit: Actually it just flashed for me using prince. But still can't get back to cdma working.
[Samsung Galaxy S8 Guides, News, & Discussion] Triforce1001:
So does this exploit need to be the actual root files or does it need to be a way to access the system in order to flash root files
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
an exploit is something such as a vulnerability (cve) somewhere in the device to escalate priveleges which are difficult to find this day n age.. there are hardware vulns and software vulns..

for example, dirty cow was an exploit that security resarchers found..

typically when they find em they report it to Google to patch it before public release but typically oems are slower to patch which is why we always recommend to block updates so you dont inadvertently patch it before its made public..

its impossible to say when or how these exploits will be found/implemented or if itd even work for said device/firmware
[Samsung Galaxy S8 Guides, News, & Discussion] kevkid:
We need to find an exploit in the system that allows us to gain root access (with write permission) like a buffer overflow (just more complex)
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
Jusemejose said he has 3 different files/builds I will talk to him more what this weekend
[Samsung Galaxy S8 Guides, News, & Discussion] mweinbach:
nice. I hope we get them.
[Samsung Galaxy S8 Guides, News, & Discussion] Acoustichayes:
I was about to ask if anyone has tried something of the sort. Force a memory leak/overflow, etc. I feel like it would be hard with how heavily the s8 deals with background apps to keep memory pool open.

The least available memory I've seen from standard use has always been at least 900mb
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
its not that easy.. i am sure there are many exploits but if the s8 is vulnerable to any i havent seen any discussions or work being done..

if anyone gets bored maybe scour the cves for anything somewhat new that is listed as android 7.0, our kernel, qualcomm etc. vulnerabilities and get some eyes on it and maybe we can get lucky lol
[Samsung Galaxy S8 Guides, News, & Discussion] mweinbach:
this looks promising. http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0593
[Samsung Galaxy S8 Guides, News, & Discussion] Acoustichayes:
Oh I know it won't be easy by any means. I was just wondering if anyone has tried anything of the sort. Once I get my desk set back up and finish eating I'll dive into that and see what I can find
[Samsung Galaxy S8 Guides, News, & Discussion] V0idst4r:
That vulnerability only allows applications to access custom permissions, doubt it could be used for root. It would be a way bigger exploit if it could be used for that.
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
forgot to mention the exploit should have priv+ meaning it can be used to escalate priveleges not normally available to users (basically elevate to root priveleges)
[Samsung Galaxy S8 Guides, News, & Discussion] Acoustichayes:
Looking at the CVE list for android Nougat brings up a fair amount of things that are susceptible to elevation of privileges

Honestly I didn't sleep last night and have been super busy today so I'm just skimming. I'll share the link and the numbers to the ones deemed at all relevant

Also assuming everyone is running with at least v4.4 of the kernel, so I'll disregard those

CVEDETAILS for 2017, highest score to Lowest

I'm not 100 percent as I've never looked through CVE but I believe the update date, is when it was patched? not sure. so tired

My Phone hasn't had any security patch updates since April 1st as I'm refusing to update in hopes of root

#6

#10 - Specifically talks about possibly obtaining root, and didnt get updated till April 25th

#21

#34/35

#36

#37

#38

#39...?

#44

Ok, I cant really stay awake anymore. and i feel like some of those aren't even for android phones... Ehhh, Just needed to put in some effort before bed
[Samsung Galaxy S8 Guides, News, & Discussion] billa:
Cross carrier flash S8

Cross carrier flash may be possible by changing the CSC carrier code via AT command (using 530k UART diag cable, with no root):

AT+PRECONFG=2,CSC

Where CSC = XAA - giving a bloat free environment (as long as the codes is included in the multi CSC firmware)

Other codes are:

ACG - CSpire

BST - Boost

CRI - Cricket

LRA - VZW Regional

SPR - Sprint

TFN - Tracfone

TMB - Tmobile

TMK - MetroPCS

USC - USCellular

VMU - Virgin Mobile

VZW - Verizon

XAA - USA

XAS - Sprint/Generic
[Samsung Galaxy S8 Guides, News, & Discussion] hazmad:
This one looks better "Google Android Qualcomm Pin Controller Driver CVE-2017-0619 Privilege Escalation Vulnerability"

http://www.securityfocus.com/bid/98192

Waiting for a PoC for this ...Reported by vendor - looks like we'd have to find it ourselves.
[Samsung Galaxy S8 Guides, News, & Discussion] mweinbach:
GUYS, WE GOT NEW INFO!!!! https://xdaforums.com/showpost.php?p=72355027&postcount=196 Now we can switch carriers and can someone test out those EngBoot files? Thanks [MENTION=293193]billa[/MENTION]

---------- Post added at 09:55 AM ---------- Previous post was at 09:52 AM ----------

it was patched in the may security update. if someone can exploit this then we can probably get root. Keep on April till we get a definitive answer about this.
[Samsung Galaxy S8 Guides, News, & Discussion] bftiedt:
Those files are 100% not eng root files.
[Samsung Galaxy S8 Guides, News, & Discussion] BotsOne:
What makes you say that?
[Samsung Galaxy S8 Guides, News, & Discussion] gqukyo:
Don't know about root but that Odin linked in that post let me finally flash back to partial Vzw from XAA. Now I have XAA/VZW/VZW which is different from some so I don't know what pros and cons there are. However, the biggest thing for me is that Samsung Pay works perfectly fine now. Woohoo! Lol Just hope I can get updates now... lol
[Samsung Galaxy S8 Guides, News, & Discussion] elliwigy:
i assume u flashed userdata? if so you could have done that with older odin lol.. all u need to do is throw it in the ap slot and it flashed to correct partition but hey, if its easier then awesome lol
[Samsung Galaxy S8 Guides, News, & Discussion] b3@n:
someone just posted the eng boot for g995u\[/QUOTE]

Quit your bull****. Even if these new boot (not root, learn syntax) files don't turn out to be all we need for a root, you have no way of knowing that, and they hash out differently than the previous files uploaded several pages back. Again, quit your naysaying bull****, pleb.
[Samsung Galaxy S8 Guides, News, & Discussion] gqukyo:
R&amp;D Carrier Switch/Root Snapdragon

Not userdata, just the AP and home CSC files. Don't want the bloatware. Just wanted unlocked LTE bands and SS pay to work. And updates. Lol

Oh and previous Odin versions would always give a "dismatch model" error.
[Samsung Galaxy S8 Guides, News, & Discussion] Acoustichayes:
As I said in my post, I haven't updated my phone since I got it. My security updates are dated April first. So if someone needs me to dump my system for them to use, i can do that
[Samsung Galaxy S8 Guides, News, & Discussion] hazmad:
definitely staying on April Security Patch
[Samsung Galaxy S8 Guides, News, & Discussion] Maltego:
I've stayed on day 1 release update like I do on all my devices. Keeps chances highest
[Samsung Galaxy S8 Guides, News, & Discussion] eL_777:
I'm still on March security patch. :P
[Samsung Galaxy S8 Guides, News, & Discussion] V0idst4r:
Isn't April the latest security patch?....
[Samsung Galaxy S8 Guides, News, & Discussion] bighit101:
Hi, yes could you upload that? Dumb me updated it :(

Thanks!
[Samsung Galaxy S8 Guides, News, & Discussion] eL_777:
Here's a screenshot. Never updated phone since I've had it. Bought it 4/23.
[Samsung Galaxy S8 Guides, News, & Discussion] Acoustichayes:
Yeah. Let me do that here in a few. Just got the t-mobile lte booster and been fidgeting with that to make it work the best. You want the full phone dump or just the system?
[Samsung Galaxy S8 Guides, News, & Discussion] the_OZONE:
Do the security patched update automatically? How do I prevent it from updating?
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
We can go all the way back to a Feb 1st security patch with the first version of the factory binary firmware or combination firmware I found to begin with.
[Samsung Galaxy S8 Guides, News, & Discussion] bricky23:
I think I remember reading that once you are back to XAA/VZW/VZW if you do a factory reset, it will revert to VZW/VZW/VZW not 100% sure though.
[Samsung Galaxy S8 Guides, News, & Discussion] V0idst4r:
Don't waste your time. The "eng root" that [MENTION=293193]billa[/MENTION] linked is useless. All it has is permissive SELinux. ro.secure is still set to 1.
[Samsung Galaxy S8 Guides, News, & Discussion] TimelessPWN:
http://www.cvedetails.com/cve/CVE-2017-0481/

Here we go goes talks about using NFC to elevate permissions for root?
[Samsung Galaxy S8 Guides, News, & Discussion] gqukyo:
Wasn't me, I had trouble flashing the XAA then after getting that working, had trouble flashing VZW and now that I got that working, I'm at XAA/VZW/VZW while most with the Verizon version is on XAA/XAA/VZW.
[Samsung Galaxy S8 Guides, News, & Discussion] Sam3gX:
Mine says XAA/VZW/VZW too. I have no idea what the difference is but everything works fine including Samsung Pay so I'm sticking with this setup for now. I'm not getting any update notifications for the latest Verizon update but that's probably because I'm using it with ATT.