yashsingh1/xdaforums huggingface dataset:
[Fire HD 8 and HD 10 General] chairmanmiaow:
Bit late to the game but many thanks for this thread and all the others on xda for Fire HD 10 hacking and experimenting. I've used this method many times over on multiple HD 10s successfully (FireOS 5.6.2.0 exclusively, I upgrade them out of the box fully before I start messing with them).

An observation I'm surprised nobody else has made yet: the DirtyCOW exploit this uses likes a 'busy' system, i.e., one under load. For those needing multiple runs before it works successfully simply queue up the exploit and as soon as you execute:

./Matrix /data/local/tmp 2

via the adb shell immediately randomly launch a few applications on the tablet itself. I've never needed to run the exploit more than once this way.

I've been putting together my own cheat sheet for what to do after rooting cribbing heavily from multiple posts which I'd be happy to share - not quite sure which of the many threads to post it in though. I've got it down to quite a fine art at this point... I've had a lot of practice though and managed to soft brick one :]

Normally I root and inject a launcher (Evie), F-droid, Busybox and Xposed as system apps. Busybox is essential to replace the feature-crippled shipped binaries to enable scripting stuff (I'm lazy). Once you've got root + busybox + adb life is easy - I've not found much use for Xposed (yet) and the Flashfire install is unnecessary if you can dd on and off the sdcard anyway to dump/restore partitions. To avoid soft-bricking usually some 'safe' stuff I delete from /system/priv-app (technically I move it to a cache folder on /sdcard first just to be sure) like the OTA components, the rest is done via pm disable (up to about a 100 entries in the kill script so far). Google Play sideloads easily enough too.

So far, so good. The only thing that is still causing issues is HD 10s with second users - several of the units I look after for people are shared and I can't figure out a way to get the Google components functional for the second login. I've tried a few different ways of injecting some of the Google APKs as system apps but no luck so far. Anyone got any ideas?
[Fire HD 8 and HD 10 General] nypaulie:
I have previously posted that when I install SuperSU after rooting my root status is dropped and only by uninstalling SuperSU does it return. So now I am running without SuperSU and am fine without it. Do you have any ideas about this? Love to know just because I am always curious. Curiosity and a sense of humor are the only 2 attributes anyone needs in my opinion BTW.
[Fire HD 8 and HD 10 General] chairmanmiaow:
I messed this up on the last build I did and was wondering why I didn't have supersu - it was because I neglected to follow the steps properly so I backtracked and redid it.

9. Confirm by getting to a root shell:
10. Install SuperSU from /sdcard/c/ (you can just click on Docs on your home screen, go to local storage, then the c directory, and install the apk).
11. Open SuperSU and update binary as Normal (should be successful).
12. Click to reboot.
13. Set SuperSU to Grant as default access.
14. Delete the two wondershare directories in /data/data-lib/:

I do these slightly out of order - steps 9, 14, 10, 11, 12, 13. Don't be tempted to install supersu from elsewhere (it won't work). If you forget to install supersu at this point you'll still have su but will quite possibly randomly lose root a few reboots later - not a problem, just repeat the rooting process.
[Fire HD 8 and HD 10 General] nypaulie:
Followed all of the steps in the order you used and wound up with SuperSU installed. Tweaked the settings (SSU) and tried a few apps that need root access. Bombed. It just must be that I am not configuring SSU properly, but as I didn't need it anyway I uninstalled SuperSU again but this time it did not restore root access. Had to redo the process on the first page, the ballgame commands. Now I am Back in Biz w/root.
[Fire HD 8 and HD 10 General] chairmanmiaow:
That's weird... SuperSu Free v2.82-SR5, right?

Thanks to 'reasons' I'm just about to do yet another restore to test a clean (-ish) flash of opengapps - I'll double check that I'm not doing anything different to you but I've done this a bunch of times now and am pretty sure we're following the same process. You're right that you don't need SuperSU for root, it's just neater (for want of a better phrase). I'll report back if I belatedly discover that I'm feeding you incorrect information :|
[Fire HD 8 and HD 10 General] nypaulie:
I used the link to the SuperSU.apk download page given on page 1. This takes you to a page that shows a download button labeled: "Version: 2.82-SR5 (282) ". The actual downloaded file is labeled: "eu.chainfire.supersu_2.82-SR5-282_minAPI9(nodpi)_apkmirror.com.apk". Which I renamed simply: "SuperSU.apk" before I sideloaded it to the "c" folder. See anything that might be tossing a wrench there?
[Fire HD 8 and HD 10 General] chemengire:
Script Request

I'd like to view your full script that you use to disable apk items on the device.

Would you oblige? ?
[Fire HD 8 and HD 10 General] chairmanmiaow:
No, that looks normal - md5sum it once it's on the HD10 to make sure it's ok perhaps?

root@suez:/ # md5sum /storage/sdcard1/CCCP/hakt/eu.chainfire.supersu_2.82-SR5-282_minAPI9\(nodpi\)_apkmirror.com.apk
f4fba28e620a3797f9f66f9c931c1562 /storage/sdcard1/CCCP/hakt/eu.chainfire.supersu_2.82-SR5-282_minAPI9(nodpi)_apkmirror.com.apk

You really don't seem to be doing anything different to me ¯\_(ツ)_/¯ We must have a subtle difference somewhere. Firmware revisions?
[Fire HD 8 and HD 10 General] chairmanmiaow:
Ok, I've condensed a bunch of the usual adb shell stuff I use into a properly sketchy "shell script" that I've at least tested a few times. It's nothing anyone vaguely familiar with adb and the pm commands couldn't do themselves with a bit of copy and paste but it does save a bit of time if you do this a lot and it's easy to adapt by just stuffing valid package names into the (separate) list of components to nuke. It requires root and busybox, presumes a sdcard is present for it's working directory and has absolutely no error handling or real sanity checking to speak of. That being said it's easy to modify, it's reversible to enable packages from a list instead and does at least generate sorted package lists per user in a timestamped directory. Experts should feel free to laugh at it and write a better one :]

To use, download the attached zip and unpack to your computer: presuming your HD10 has a sdcard present at /storage/sdcard1/ create a new folder "CCCP" there and transfer both files to it:

adb shell mkdir /storage/sdcard1/CCCP
adb push commie-hd10.sh /storage/sdcard1/CCCP/
adb push KILL.LIST /storage/sdcard1/CCCP/

To actually run it:

adb shell
su
cp -v /storage/sdcard1/CCCP/commie-hd10.sh /data/local/tmp/
chmod +x /data/local/tmp/commie-hd10.sh
/data/local/tmp/commie-hd10.sh

By default the script will loop through the contents of KILL.LIST - which is simply a bunch of standard package names - and pm disable them for the main and secondary user. Obviously people can add or remove their own choice of packages to the KILL.LIST depending on what they personally want to nuke, my included version has ~85 entries currently but I'm always adding more based on xda debloat threads and my own experiments. By slightly editing or commenting/uncommenting the script you could hide/uninstall instead of disable, reverse it to enable/unhide, etc. If you don't have a secondary user setup either comment out the relevant lines or just let them fail, doing pm disable --user 10 com.amazon.kcp.tutorial when there isn't a user with id=10 won't actually do any harm after all.

If anyone has suggestions for additions to the list of packages to nuke through their own testing I'd be happy to collect them but there are already a whole bunch of HD10 debloat threads out there (which is what got me started on this in the first place).

Hopefully someone might find this vaguely useful, good luck comrades!
[Fire HD 8 and HD 10 General] nypaulie:
You could also call the newly created sdcard1 storage area the "Oleg Archives"! Sorry, couldn't resist.
[Fire HD 8 and HD 10 General] konradsa:
I’d love to try out your script, but I can’t download it, always get a corrupted archive. Anybody else with the same issue?
[Fire HD 8 and HD 10 General] chairmanmiaow:
Sorry about that comrade - I just double checked that I can download and unpack it from the link and it does work for me.

Have you got md5sum ff8dc443438fc99dc2a0c96ad65ca2cb for the downloaded hd10-debloater.7z? Does your archive program not like the version of 7z my computer packed it with perhaps?

Anyway I attach a zip of the same two files, let me know if that doesn't work either.
[Fire HD 8 and HD 10 General] konradsa:
Works now, thanks. Worked from my laptop, but tried both with the Fire and my iPhone, failed both times.
[Fire HD 8 and HD 10 General] konradsa:
Great work comerade, worked like a charm. I was wondering why no one has created such a script yet, it makes the device a lot snappier. May I suggest you start a new thread with just thy script? That would help a lot of people.
[Fire HD 8 and HD 10 General] chairmanmiaow:
Hmm, probably because as I get more used to Fire HDs, adb, debloating and android in general I'm realising that this really isn't the way you're supposed to do things... Treating these things like a normal *nix system and shell scripting with a big hammer might be how we do things in the motherland but it's definitely not how things are done in capitalist pigdog Amazon-land :|

This on the other hand is a good example of how it's supposed to be done. However although that script has been done "properly" - running locally and batching commands via adb - it's unmaintained and will break your tablet as it stands (pm uninstalling his entire list will not end well, trust me).

So adapting it into a v2 currently which will automate the entire process - as far as possible - of plugging in a box fresh HD10 and completely setting up: do offline root, install tools and apks, transfer files to sdcard, flash gapps, etc. If I ever finish that in a satisfactory fashion then it would be worth it's own new thread I guess. Even that's on hold for the moment though as to take a break from the drudgery of endlessly reflashing and configuring ****ty Amazon tablets I've distracted myself by cross-compiling handy tools in to make the whole exercise a bit less painful. Can post them here if anyone wants but you'd be a brave person to download and execute as root random binaries from XDA I guess.
[Fire HD 8 and HD 10 General] Supersonic27543:
I need a time killer anyway, so I guess you will have this around next week. :)
[Fire HD 8 and HD 10 General] KIMmunity:
Much easier than I have anticipated. Kingoroot progress was stuck at 29% after repeated attempts and this manual method saved me from the unknown error. Thr whole cloud rooting was shady but I was left with no other option until I came across this post. Thanks!
[Fire HD 8 and HD 10 General] hoangmytr:
delete everything from /data/local/tmp/

Anyone help me to know how to "delete everything from /data/local/tmp/"?? :(:(

I've failed once and I don't know how to delete from "/data..."

Thanks so much! :D:D
[Fire HD 8 and HD 10 General] nypaulie:
I would use an app like Terminal Emulator and type these commands:

su

cd /data/local/tmp/

rm -r *

exit

exit

If after entering su you DON'T get # instead of $ as your prompt don't bother with the rest because you are not rooted.
[Fire HD 8 and HD 10 General] Sgtmack:
I tried this method on my HD 10 running OS 5.4.1.0. I can ls -1, but he cp command gets a permission denied message.

Microsoft Windows [Version 6.1.7601]

Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\Neal>adb shell

shell@suez:/ $ cp /sdcard/c/* /data/local/tmp

cp: /sdcard/c/*: Permission denied

1|shell@suez:/ $

I think I'll try the kingo root option and see what happens.
[Fire HD 8 and HD 10 General] hoangmytr:
But I tried to delete everything from "/data/local/tmp/" to start again from step 5. It means I've not rooted yet.

How can I delete everything mentioned if it's not rooted? :D
[Fire HD 8 and HD 10 General] nypaulie:
Use a USB connection and on your PC at the command prompt type: adb devices You should get something like this:

List of devices attached

G000NS0582070ACV	device

If you DO get the "device" result above then type:

cd /data/local/tmp

rm -r *

This should remove all the files in that folder.

Just to let you know, I had to run the shell script a couple of times to get it to "take" and be rooted and I still haven't cleaned out the tmp folder. It's just housekeeping and is not really important. Just sloppy and lazy I guess.
[Fire HD 8 and HD 10 General] MutantWizard:
Meticulously followed instructions and completed without issues. My Fire HD 10 (7th generation) 5.6.2.0 is fully compatible with this.
[Fire HD 8 and HD 10 General] hoangmytr:
Fire HD 10 5.6.2 Rooted!

I can confirmed that my Fire HD 10 running 5.6.2 rooted by following the steps in 1st post.:D

Thanks so much!:laugh:
[Fire HD 8 and HD 10 General] JKSurf:
Picked up the HD10 on Prime day 2018 and used this method. Lost root 2 days later. Rerooted using the same method. Lost root 6 weeks later. Any idea why I keep losing root?

Adaway stops working. SuperSU says no root.
[Fire HD 8 and HD 10 General] shadowcliffs:
The write permission for app is not remembered after reboot. It seems it's due to /data/system/packages.xml got restored. For instance, I granted Titanium backup the permission to write to SD card, but after reboot, the permission is lost and I have to do it all over again. Any idea?
[Fire HD 8 and HD 10 General] lovaduck:
Connection is too unstable to run Kingo

Hi there, I am new to participating here although I have been reading quite often. The information here is absolutely amazing, thanks for your posts!

I live in Patagonia, very far from quality internet connections. I have a 3 mbps nominal download speed on Velocom's Wi-Max but the fraction I get when reaching outside the country to the USA is even smaller and the connection very unstable. Tried Kingo but it just can't download all it needs and simply hangs. If any kind soul can share the files required to do the offline root of the HD 10 directly with me I'd be very grateful. I am at 5.6.0 fw.

Thanks for any help you can provide!

:fingers-crossed:
[Fire HD 8 and HD 10 General] KIMmunity:
Hello.

Would you kindly update the method for 5.3.6.4?

It doesn't seem to work properly since the update.

Nevermind. Confirmed working on 5.3.6.4! Thanks, always!
[Fire HD 8 and HD 10 General] KSP1234:
I have now 5.3.6.4 HD 10 2017. Is it possible to root it as in topicstart described ?

How many ways to root amsazon tablet for today ? Kingo Root/etc/other
[Fire HD 8 and HD 10 General] wwwxxyy:
Step 2 says to overwrite wsroot.sh, but 20165195.zip only contains fileWork and Matrix.

Am I missing something? Should I be extracting the zips to an existing 20165195 folder somewhere, or just a working directory?
[Fire HD 8 and HD 10 General] Ozzymandais:
EDIT: (READ THIS)

I didn't do the step *right* before the code is listed and I didn't enter adb shell so yeah, don't be like me kids, read the test paper.

IGNORE THIS, I'M APPARENTLY NOT SMART ENOUGH TO BE ALIVE:

The adb command line code doesn't seem to work for me running Windows 10. "cp" didn't work as it was not a recognised command but I realised that it is just "copy" on windows, however anything I try and do just gives me "The syntax of the command is incorrect" when I try to run it. Anyone able to help me out at all or perhaps post the code that I can directly paste into the terminal? Thanks
[Fire HD 8 and HD 10 General] macawmatt:
Just did this for my two day late HD10 and it worked without any issue. Had to reconnect adb after the reboot and didn't regain root while trying to delete the wondershare directories, but once I did they went away without any issue.
[Fire HD 8 and HD 10 General] NeuDroid:
5.3.6.4/5.6.3.0

Confirming this root method works on my day old (11.23.18 purchase) Fire 10.1 running 5.6.3.0 which mistakenly shows up as 5.3.6.4 under the software info. I did have to try 3 times before everything worked since I kept "timing out."

For rookies like me: Make sure you begin your initial command prompt by writing "adb shell" without the quotes then copy/paste the command lines. Same applies when removing the wondershare files though root worked for me before removing them. Finally, you MUST go into the Supersu app>>settings and set the permissions to "grant." You may be used to granting root access on an app by app basis like on other devices but apparently on the Fire Tablet you must set permissions to "grant' at all times. Not a huge deal. Download a root-checker app from play store and confirm root, this assuming you already have the play store installed on your device which you should!
[Fire HD 8 and HD 10 General] NeuromancerInc:
Took two tries but this worked for me as well on a Fire HD 10 on 5.3.6.4 that I got 2 hours ago ;P Thanks [MENTION=3497316]retyre[/MENTION]
[Fire HD 8 and HD 10 General] redhonker:
What is the latest OS version that I can root with this method? I'm getting a new one. So the thinking is to update before rooting.

Second question: once I root it, is there a process that we can update and keep root?

Thanks
[Fire HD 8 and HD 10 General] Supersonic27543:
I would highly advise against updating before rooting, because you can never say what happens with Amazon.

If you are going to buy a 2017 one, any version should work, if a 2018 one, it is impossible to root it because dm-verity. (Not meaning to be negative, but, well, it should be impossible if Amazon is careful now as they were before)

And, you can update (but not the normal way) while keeping root. You'll have to extract the system image, add su to it, repack and flash with FlashFire. (But I think [MENTION=3497316]retyre[/MENTION] has a thread for it, so you'll just have to download the image and flash)
[Fire HD 8 and HD 10 General] redhonker:
Which one is easier and safer, this method or the thread with KingRoot? Thanks
[Fire HD 8 and HD 10 General] Thibor69:
Hello ....

Step #6 in OP says:

But I have no /sdcard folder that I can see on my Fire to copy the files to. Isnt the /sdcard folder in the root folder along with stuff like /acct /data /root /sbin /mnt ect.....?

I guess my question is How do I copy files from PC to the Fire's Internal Storage at /sdcard which is in the root folder but I dont have root yet ..??

Thank you

============================

UPDATE: NM, I figured it out myself and now have fully rooted Kindle.

Cheers
[Fire HD 8 and HD 10 General] Supersonic27543:
It's Kingoroot actually, don't mistake that!

To answer your question, the Kingoroot method is easier for most people. Both are safe if you follow the instructions correctly.

But who knows what Kingoroot does with our personal information...
[Fire HD 8 and HD 10 General] redhonker:
Good point. I have done the script one for LG. Maybe I will try this one.

Separately, is there a detailed instruction on how to update the OS after root?

Thanks
[Fire HD 8 and HD 10 General] Supersonic27543:
There is a thread named "Prerooted Xposed 5.6.3.0 Image" in this forum, I'm in a hurry so I can't link it now.
[Fire HD 8 and HD 10 General] jhford:
Fire HD 8 2018 6.3.0.1 (8th Gen)

Last week I rooted my HD 10 using this method before I bricked it doing something I can't remember. But I also bought an HD 8 tablet on Cyber Monday (OS 6.3.0.1) which I just tried to root with this method.

Here is the final output which, according to your post, indicates it failed to gain root access. Is this correct? Is so, do you have any suggestions for success?

<WSRoot><Exploit>0x00000332</Exploit></WSRoot>

check done

<WSRoot><Exploit>0x00000382</Exploit></WSRoot>

<WSRoot><Exploit>0x00000881</Exploit></WSRoot>

<WSRoot><Done>0x00000172</Done></WSRoot>

And how do I delete the files in /data/local/tmp/ since I'm not rooted, with ADB? If so, what are the commands?

Thanks
[Fire HD 8 and HD 10 General] linggm:
The description is done with a new/resetted device.

My HD is already set up. Can I follow the instruction or do I have to reset before?
[Fire HD 8 and HD 10 General] coilmaster949:
so I just got a Fire HD 10 - and it quickly did some update before I cud disable wifi- but it now shows 5.3.6.4 - which I guess is the wrongly number 5.6.X.X update? so I shd. follow this method to root ?
[Fire HD 8 and HD 10 General] wcarlson40:
5.3.6.4 is the latest version (they messed up the numbering with the latest version. I suspect they meant 5.6.3.4)

In any event, you've already done all the updates, so you don't have any other choice. Go ahead and try to root, and please report back. (I'm serious, because I suspect I'll do the same when I get my HD10)
[Fire HD 8 and HD 10 General] NeuDroid:
Just a suggestion once rooted: download the "service disabler" app and block system updates. You can always update firmware via ADB in an effort to keep root. I could care less if I ever get new updates so it works great for me.
[Fire HD 8 and HD 10 General] P4il1p:
Hello everyone,

I successfully rooted my Hd 10 tablet thanks to the detailed instructions on this thread; however, after rooting, I am unable to mount -w -o /system. Uninstall function or the convert to system app on Link2sd does not work (failure). I also tried using titanium backup to install system app but that does not work too. Adway was not able to find or replace host.

I have already set access to grant on SuperSu.

Does anyone know what i did wrong?
[Fire HD 8 and HD 10 General] coilmaster949:
so brand new Fire HD 10 bought 2 days ago...it quickly updated to

followed to the T...all worked fine upto step 14...

and it even displays

<WSRoot><Exploit>0</Exploit></WSRoot>

<WSRoot><Done>0</Done></WSRoot>

but then it doesnt delete the wondershare dirs.. (result pasted below)

shell@suez:/ $ cd /data/data-lib

shell@suez:/data/data-lib $ rm -r com.wondershare.DashRoot

override rwxrwxrwx root:root for 'com.wondershare.DashRoot'? y

rm: com.wondershare.DashRoot: Permission denied

1|shell@suez:/data/data-lib $ rm -r com.wondershare.DashRoot

override rwxrwxrwx root:root for 'com.wondershare.DashRoot'? y

rm: com.wondershare.DashRoot: Permission denied

1|shell@suez:/data/data-lib $

and even tho it installs SU - when I check with a root checker APK - it says device not rooted! - I did update SU binary with normal ....by turning on WIFI - is it somehow getting broken by AMZN??

pls. suggest
[Fire HD 8 and HD 10 General] P4il1p:
Did you set SuperSu access to Grant? and you would need root access to delete the wondershare files.
[Fire HD 8 and HD 10 General] coilmaster949:
yes...SU set to grant.

folks...does anyone have any inkling asto what cud be going wrong here! like I said, I had to turn on wifi to update SU binaries...is it possible that AMZN has changd smthng, preventing this from working anymore ?

And version is 5.3.6.4 which like someone said is prolly updated but wrongly numbered 5..6.3. 4 on HD 10 2017
[Fire HD 8 and HD 10 General] DrSmog:
Confirmed on 5.3.6.4 626533320 (or whatever it really is)

Worked like a charm! Latest Fire OS version as of this writing.

Bought in October and let it OTA yesterday Dec 2 after I sent it in for "repair" when I hard bricked it during a failed adb sideload. I was within my 30 days so they didn't give me any trouble. I'm pretty sure they just flashed it stock and sent it right back.

Got a little confused for a sec because if you cd to /data/local and ls -l, you can't see tmp, but you can cd into it. Other than that I'm golden. I'll probably let it OTA again on the next update and try it again just for giggles! Now I just hope somebody can get the bootloader unlocked so I can do an easy TWRP backup before messing with it again.