yashsingh1/xdaforums huggingface dataset:
[Android General] jctghost:
Man I love this forum and XDA. Heard from codeage and he recommended going to settings, system, factory restore (not the bootloader/recovery/software update thing and wipe/factory restore) and I tried that. Made a difference as Garmin Navigator no longer force closes but it still does not launch, it is blank. Sent him another email and waiting. If I can get Garmin Navigator back and not go to the dealership well. Just really want that rooted android head unit back, but with the Nav package (it is just nice for the PHEV's since the maps have all that in them).
[Android General] sawixso81:
Proof off concept

Peep this ladies and gents found some stuff digging

Man if I could just get a navi civic dump lol this is on a 2018 civic si by the way enable a bunch of new tabs but with out the apps the tabs are useless
[Android General] jrieder46:
I have a 2016 accord ex and was able to successfully install Honda Hack. However, I cannot type when the vehicle is in motion, I downloaded and installed Google Keyboard, but I cannot use it....any help?

Also, I think when I'm driving it would not let me access the apps screen.
[Android General] toolhas4degrees:
Turn on parking brake option in Honda hack
[Android General] sawixso81:
Man am I the only one excited about this lol:good::highfive::good:
[Android General] jrieder46:
Sorry, but I don't see that any option for that in the Honda Hack app. Am I missing something....where is it located?

I did turn it off in head unit itself, but it resets upon turning the car off and on.
[Android General] Ludeape:
are you excited at the possibility to install native Garmin GPS on regular non NAVI EX models? or something else?
[Android General] sawixso81:
Well yes I am, I'm weird I like things to be integrated and have options,love to tinker with things and this is for a non Navi SI that I got all of those tabs enabled (couple posts back) I just need a dump of the system folder along with "data1" and "data 2" folders from the "mnt" folder and if there are any apks files that may be in any folders with "sdcard" in them(all need to be from a Navi civic model that has the Mitsubishi apps)
[Android General] Ludeape:
I have a CRV EX non NAVI, but i agree.. installing built in Garmin NAV would be a cool option to have.

Codeage is always looking for new features to add.. maybe you can work with him? He doesn't reply much here in this thread, but does respond to emails.
[Android General] darky22:
Did you set google keyboard as your default keyboard ? If so I am not sure if you would need to turn on the parking brake thing, i dont remember doing that but I do remember setting google keyboard as default.
[Android General] sawixso81:
I really feel like it could be possible, or at least get it on there and running at that point I would pay for the Garmin maps if I had to. Even if we cant get the navi app to run I really think we can enable those tabs like I did with the map button and remap that to what ever navi app we want that is installed on the HU, lots of possibilities just need those files, Ill email [MENTION=495426]codeage[/MENTION] and see if he has access to these files:good::highfive::good:
[Android General] jrieder46:
How do I set it up? I installed it but not sure how to make it default?

anyone else know where the parking brake option is in honda hack?
[Android General] panchox:
I am.

How did you enable the extra options, where all they enabled all at once or did you select what you wanted?, I'm interested in remapping the MAP button in the status bar to redirect to another app, at least while we don't have the stock navi.
[Android General] sawixso81:
At first I did one by one then did bunch at once the file is located on the root of the head-unit in the mnt /data1/com.mitsubishielectric.ada.appservice.unitinfomanager/ open up the other two folders and the file is called modelinf.xml. The navi ones have navi in the name but once again I haven't tried one by one yet so cant give you exacts on which ones do what. I will tell you that when I reverted back all the changes I did and rebooted all I got was black screen my lane watch would work but nothing else so I had to use the recovery.sh file and force a factory reset and now all is good,(think that problem had to due with needing a data wipe to the launcher) so I suggest that if you arent comfortable doing these kinds of things DONT:good::highfive::good:
[Android General] panchox:
I will try today, thank you, logcat will come handy when using the MAPS button.
[Android General] jrieder46:
How did you set google keyboard as default? I download it and it is listed as an app.
[Android General] sawixso81:
I think for the remapping it will be in the DAlauncher.apk at least that is where the layout for all the tabs are so you will need to deodex and recompile for that. Right now I'm looking into options of secondary recovery options like safestrap or flash fire, I like the idea of safestrap at least on my once rooted S8 Samsung I had safestrap installed and it would boot an option first for safestrap or go straight to your rom, with that we could potentially flash zip files, make backups, and if we mess up it will boot to safestrap and we could fix our screw ups lol
[Android General] darky22:
Click on googlekeyboard and open it, it will show you the steps to use the keyboard as default.
[Android General] nacer111:
honda civic hack

Hello,

I tried to hack my honda civic 2017. I followed the first part of the method, till I arrived to USB role modifiying from host to device.

"2. Change the USB role of the head unit from 'Host' to 'Device'.

Press the power, menu, and brightness button at once, and hold until you enter a new menu with two options.

Click the bottom option called Detail Information & Settings.

Now hold the MENU key to enter another menu.

Then Hold the HOME key to enter the last menu. You should first hear two consecutive beeps and then one final beep.

Lastly, change the role of USB Port from Host to Device.

Now connect your laptop to the front Android Auto/CarPlay Port using the USB A to A cable."

I downloaded the hondahack.exe, but avira found a virus (EXP) and would not let me extract it.

I tried to go back on the modification of USB role, but cannot access the menu, from the home button, like I did the first time.

Do you know how I can access this menu and change the host role back to host.

Thank you.

Il don't know if there is a link but Android auto doesn't work and the car is not recognized, by AA, and the car doesn't aknowledge any android device.

Thank you.
[Android General] darky22:
Try starting fresh with a reset?
[Android General] jctghost:
Well, solved my problem. Used Honda Hack and X-plore to find the original garmin navigation apk on the internal sd card (contains the navigation database and all gps drivers). Ran that, it reinstalled garmin navigator. However it would still not display as it seems there is a custom overlay and map button attach setup. Dug some more and found a honda infotainment apk in the root/vendor/app folder called com.honda.displayaudio.navi.apk ran that and it installed the required map link and overlay. Garmin Navigation is back. All I had to do was setup the defaults in the app again (lost my customizations) and all is good! Seems the ddpai app I tried to install to access the dashcam broke the navigation when it installs to the SD. unfortunate but not a huge loss. Codeage and I am confused as to why a factory reset (either Recovery or from the menu) would not have already reinstalled the navigation package but there is something else going on with how the navigation is deployed, at least on the Clarity.

also, HondaHack was via the online wireless method using the browser.

Saved me having to get the HU replaced!
[Android General] Ludeape:
so does this mean with what sawixso81 uncovered + jctghost garmin apk.. we can install built in Garmin Navi on non navi models??
[Android General] sawixso81:
Maybe just as long as his head unit is a Mitsubishi from what I gathered I need at least a dump from the vendor folder and a dump from mnt/data1 and data1, if I can get those files it's a starting point I feel:good::highfive::good:
[Android General] panchox:
There should be another mount point for the maps, did you check auto-install.sh script?

I already modified the file model.xml, the first 2 Navi lines are the ones that enable it, tried 1 by 1, I don't remember the names but the second one has something like NaviEcuID, I just replaced both with 0x01, maybe the APK reads it and even with the files it won't run unless theres a valid EcuID or VIN.
[Android General] sawixso81:
Looking back at the auto_install.sh it points alot to the mnt/data1 folder, Im no pro with some of the scripting but I can some what make out what it is doing. I can post mine for others to view maybe if we get enough heads on this we can crack it:good::highfive:
[Android General] panchox:
Maybe [MENTION=5759627]jctghost[/MENTION] could help us with the backup.

[MENTION=6360887]sawixso81[/MENTION]

Could you make a backup of some audio .cfg files in the etc folder?, let me check the names, I think with one firmware update (F197.0) Android Auto music apps went bad, I think the audio channels changed.
[Android General] sawixso81:
For sure mind you I do have an Si,I get out of work in 10min and be back to the car
[Android General] jctghost:
I would be happy to backup anything you would like. Mind you it's a 2018 Clarity. The only issue is I have no place to upload that to that isn't "traceable." Suggestions? If you are talking about the whole nav sd, it's over 8GB.

Also, the headunit is, as far as I can tell a "MY16ADA"
[Android General] sawixso81:
I hit you up in a P.M.
[Android General] jctghost:
Ok, grabbed some .conf from the etc folder (there are several etc's, live and vendor) which ones do you need?
[Android General] jctghost:
[MENTION=6360887]sawixso81[/MENTION]

Let me know if you need something else, I have not been specifically following your issue and not sure what all to post up.
[Android General] jctghost:
Where is the model.xml file on the system - haven't found that one yet?
[Android General] sawixso81:
I need whole folders lol I think you got the audio files mixed up, [MENTION=6358862]panchox[/MENTION] was looking for those lol:good::highfive::good:

---------- Post added at 12:48 PM ---------- Previous post was at 12:47 PM ----------

It is in

mnt\data1\com.mitsubishielectric.ada.appservice.unitinfomanager\Group001\NR-000UH8CB10-T
[Android General] panchox:
In my case, the 2 last folders are Group013 and inside there are 4 or 5 folders, each one it's for different regions like KC for Canada, 2 folders with KA for America and KX for Mexico, there was a guide for removing restrictions while driving, if you follow those steps you will know which version you have, then you have to check each folder and open model.xml, inside the file it's the name of the version.
[Android General] jctghost:
So, have some possible bad news. It looks like our file system (root mnt especially) is not the same. I have no group 001. Does your HU have a mounted SD card with what on mine looks to be 16GB in its partition? If not, I am not sure, unless you open the case and install the mSD, that installing NAV is an option. Looks like it has to be an SD mount with R/W, not a USB. I will chat with you further via PM. I have a pretty long work day tomorrow (14 hours) so probably won't get back on this until Friday. I know you are probably pretty ready to try this so lets see how far we can get. Adding NAV, even if it is a one shot no updates, would be very cool. I am extremely curious.
[Android General] twitch2021:
Netflix Not Loading

Hi All!

I’ve spent the better part of my evening skimming through this massive thread. There’s such a wealth of great info in here. Thank you all for sharing your knowledge.

I recently purchased a 2019 Honda Clarity PHEV and have HH Basic installed and everything is fine. I did have some trouble with the HH version of Chrome crashing upon launch (as I noticed another user on here mentioning) but I was able to install the version of Chrome hosted in the Play Store and it works just fine so no big issue there.

The issue I AM having, however, is that I can’t for the life of me get Netflix to work. I obviously can’t install from the Play Store due to Android 4.2.2 being unsupported. The version that HH hosts in its small repository doesn’t seem to want to connect to Netflix’s servers anymore. When I launch it I get the Netflix loading screen for a solid 30-60 seconds before getting the error “Sorry, we could not reach the Netflix service. Please try again later. (-9).” I’ve uninstalled and reinstalled and rebooted the head unit to no avail. I’ve also tried clearing Netflix’s cache. I’m not terribly well versed with these things but if anyone else is experiencing this or has a suggestion I would be very grateful.

Thanks again to you all for your hard work.
[Android General] twitch2021:
Can’t get recovery.sh to launch

So...ignore my post above. I more urgently need to figure out how to restore my head unit to factory because I need to take it in and using the hide apps feature of Honda Hack left the Google Play Store and Google Settings apps in the app drawer. I managed to get rid of the Play Store but I can’t get Google Settings to disappear and I can’t get recovery.sh to run. I’ve formatted a USB stick to FAT32, saved recovery.sh to the stick, plugged it into the USB slot under my centre console (same one I connect my phone to for CarPlay), and rebooted the head unit. It just boots normally. I even tried pulling the negative contact off the battery (which successfully reset th car as I’m getting all the standard TPMS and VSA warnings) but the head unit still loads without launching recovery. I could really use a hand if anyone has a suggestion or can point out a step I’m missing/doing incorrectly. Thank you all!
[Android General] LLStarks:
You should just uninstall Play services. This is both using the uninstall app and manually uninstalling the updates for each app in the Android app menu.

There's also a misunderstanding of how the recovery works. It doesn't launch a recovery, it simply fixes things in the background. The car will more or less boot normally.
[Android General] sawixso81:
Navi on non navi

So navi is possible on non navi units like my 2018 SI lots of trial and error but it works,.....just no maps at this point. Had to modify an apk to look for the garmin app in the USB drive 2 slot instead sdcard2 because the auto install.sh will uninstall the garmin app if not present on sdcard2. Still going to inspect my headunit for any sdcard slots or pin outside to solder to.

So in the end yes to navi on non navi just need a map unlock code ,I might try to call Garmin and see if I can pay to have my device registered maybe then I can generate an unlock file to unlock the maps
[Android General] panchox:
Did you get the original navi apk?, is the dalauncher the apk you modified? I would like to try too.

Also, is your voice command button in the steering wheel working?, once I modified my model.xml with 2 navi 0x01 it stopped working, haven't reverted yet to see if it works again, the initial loading screen shows a world under the Honda logo too.
[Android General] sawixso81:
Yes I do have both apks, You know not sure about the voice command Ill give it a shot after work, and no not the DAlauncher but the navigation apk, everything works but no detailed maps only the point of instrest and what not work but seem wonky because the detailed maps are locked:good::highfive::good:
[Android General] panchox:
Good to know, can you send me the files if possible?, instructions are welcome, no need to be 100% detailed.
[Android General] dandyfarid:
Great job sir :good:
[Android General] Bulkowski:
Has anyone tried to install in HU any sound equalizers such as Viper4Android?

(link V4A app: https://xdaforums.com/showthread.php?t=2191223)

EDIT: found an answer under the post #1392:https://xdaforums.com/showpost.php?p=76611053&postcount=1392
[Android General] panchox:
I have v4a installed, you need Busybox, then install the driver within v4a, lock the mode to headphones or bluetooth to have all the options, other modes are very limited, then go to android settings, sound, effects and select v4a to always have it enabled on boot, if not, you will need to open v4a on each boot to be enabled.
[Android General] Ludeape:
really great job! :)

Hoping we can get this simplified enough so its easy for the avg user to implement..
[Android General] codeage:
Did you try adb connection?
[Android General] phr0zen:
Not yet. That requires a USB to USB connection, and the Android SDK right? Would it also require drivers for the existing 4.2.2 version that's already in the car?
[Android General] codeage:
You have never connect the head unit via adb? I'm wondering how did you brick it?
[Android General] phr0zen:
I've a wonderful ability to screw up anything I touch:eek:. Long story short, I inadvertently changed how it boots. Told it to boot via USB. Making a bootable flash drive didn't work.
[Android General] badabing2003:
Hi,

Can someone please clarify what is considered the power button in this instructions on Step 3.

I know those instructions are for Civic and I'm on 2017 Canadian CRV.

I have already turned on developer mode and USB debugging on.

I tried the radio power button + menu + brightness

It beeped 3 times and it went dark.

I also tried with the car ignition button, but that didn't help either.

What is meant by power button? and if it is the radio power button, am I doing something wrong? or is this not going to work on a 2017 CRV?

Thanks
[Android General] codeage:
Did you change the boot options in the recovery? I know some people entered the recovery menu for some unknown reason and sticked there (nothing happened no matter which menu item was selected). But if they select the last option, keep the engine running and wait 15~20 minutes, the head unit will automatically boot correctly again. So I think you may try starting the engine and then wait 20 minuets to see if anything good will happen.

View attachment 4233624
[Android General] phr0zen:
Yes! Those were the options, but the layout was different. I appreciate the idea but my commute is longer than 20 minutes, and unfortunately it does not reset itself. Also tried keeping it in accessory mode for a long time while pulling fuses.

Actually I believe the setting said "boot from usb" or something similar.
[Android General] pasaonline:
Thank you for this topic, if some one cannot root you can look video for step.

https://youtu.be/w89DW5YJq9I
[Android General] blowtorch:
I owe you a reply an update. Everything is working again. I deleted the /system/etc/permissions/platform.xml, then replaced it with the original and factory reset. Sdcard access was restored. I then edited the platform xml as follows:

<permission name="android.permission.READ_EXTERNAL_STORAGE" >
<group gid="sdcard_r" />
<group gid="media_rw" />
</permission>

<permission name="android.permission.WRITE_EXTERNAL_STORAGE" >
<group gid="sdcard_rw" />
<group gid="media_rw" />
</permission>

Set the platform.xml permissions to 777 and now apps can store information to usb media storage.
[Android General] rosenkrantz:
Hmmmm :) ..... sorry to ask, but how to tell the actual app to store on "media" and not on "sdcard" ???
[Android General] blowtorch:
The storage medium becomes available to the app, for instance installing maps to the usb drive becomes an option.
[Android General] codeage:
Glad you have it resolved.
[Android General] badabing2003:
To answer my own question, to enter the hidden menu on CRV 2017 (Cdn) replace 'MENU' in step 3 and 4 above with 'PHONE'

I am able to establish adb connection using USB A - USB A cable,

unfortunately there is no trace of factory_reset.sh file to exploit.

I wonder if anyone figured out what it is replaced with.

---------- Post added at 03:42 PM ---------- Previous post was at 03:41 PM ----------

[MENTION=4433621]yuprules[/MENTION]

Were you able to get far with your tests?
[Android General] codeage:
If the head unit is made by Mitsubishi, you may try using /bin/run-as to exploit. Please refer to the source code of root.sh.
[Android General] badabing2003:
Thanks

I'm not sure if it is Mitsubishi, I read somewhere that it might be Clarion

I don't see /bin/run-as but I do see /system/bin/run-as

How do I trigger it after exploiting it?

Factory Reset calls this script?

Update: I see the I don't need to do a factory reset and just call run-as

which according to root.sh is in /system/bin

Following the Honda Pilot Thread I was expecting to exploit factory_reset.sh, which isn't necessary for my model.

I'll update the post once I perform the operation.

Based on quick look, the only file that is modified with root is run-as

I'll back that up first, any other files to backup before continuing?

Thanks
[Android General] badabing2003:
Hi,

My HU must be Mitsubishi as I see the following directories.

com.mitsubishielectric.ada.appservice.camera

com.mitsubishielectric.ada.appservice.navigation

com.mitsubishielectric.ada.appservice.unitinfomanager

com.mitsubishielectric.ada.framework.vehicledbmanager

I'm planning to execute the main steps outlined in the OP manually.

I've expanded the script contents to reflect the steps and have few questions.

But first, my understanding of what is going on / needs to be done. (please correct me if I'm understanding it wrong)

1. Download all files from GitHub
2. Enter developer mode in the head unit and enable USB debugging.
3. Change the USB mode of the head unit from 'Host' to 'Device'
4. Connect the head unit and your PC with a USB Type A-to-Type A cable.
5. Execute root.sh on your PC to uploading the necessary files to the head unit.
a. push the dirtycow binary to HU temporary directory
b. Make the dirtycow binary executable
c. push the run-as binary to HU temporary directory
d. exectute the dirtycow exploit on HU, to temporaryly modify the script /system/bin/run-as to binary /data/local/tmp/run-as
e. create another temporary directory on HU (rootme)
f. push nefarious.sh to this temporary rootme directory
g. push su executable to rootme on HU
h. push SuperSU apk file to rootme on HU
i. make nefarious.sh executable
6. Open adb shell and execute: /system/bin/run-as (hopefully this starts nefarious,sh and then reboots)
a. mount /system as r/w
b. copy su to /system/xbin/
c. change ownership of su
d. make su executable
e. copy superSU app to /system/app/
f. log file related work (none critical for rooting)
g. mount /system as ro
7. If everything goes well then you should have privilege to see the whitelist file '/data/data/whitelist-1.0.xml' now.

Steps 1-4 all good

The questions I have:

5.c
- Why run-as is a binary file and not a script?
- does run-as need to be set to be executable or the fact that the original file is executable makes it an executable?
perhaps add this: adb shell 'chmod 777 /data/local/tmp/run-as'
- What exactly it does? isn't it supposed to do this?, then why isn't it this?
#!/system/bin/sh
/data/local/tmp/rootme/nefarious.sh
reboot
- at this stage run-as is executed as non-privileged user, is that ok? don't we need it to execute as root like it does in Pilot when Factory Reset is performed through the HU?

5.g
- su is pushed but it is never set to be executable, aren't we missing

7. Shouldn't the system reboot at this stage assuming that run-me does that?

I'm planning to switch run-as binary with
#!/system/bin/sh
/data/local/tmp/rootme/nefarious.sh
reboot

and execute chmod 777 /data/local/tmp/run-as after 5.c

I also read in this thread that executing the steps manually has caused bootloops to some when doing the step 6.a

Do we know why that is the case, does this happen to everyone? should I avoid it and just modify the scripts and execute them?

Thanks in advance.