yashsingh1/xdaforums huggingface dataset:
[Realme GT 2 Pro] Quake94:
Did you try holding volume down + power button? Does it boot into bootloader or recovery?
[Realme GT 2 Pro] raimir:
It does not work!
[Xiaomi 12 (Global)] C0qRouge:
Currently I am using the stock case and the pre-installed display cover.

Since of the edges of the display beeing round it seems to be very difficult to find a good screen protector (I mean the hard one, not the flexible)

Any suggestions much appreciated, thanks!
[Xiaomi 12 (Global)] kraaienest:
I've bought this hard case and it showed signs of decradation of the outer coating within a few days

https://a.aliexpress.com/_vmhgfD

I would not recommend this one
[Xiaomi 12 (Global)] Keven11:
I just got these screen tempered glass protectors a few days ago. They fit perfectly even on the contoured panel and are good quality glass. I absolutely recommend them.

https://a.aliexpress.com/_mtJjN5A
[Xiaomi 12 (Global)] maex-la:
@Keven11

The link doesnt work (page not found). Can you provide the rigt one, please?
[Xiaomi 12 (Global)] Keven11:
LoL.... Apparently I'm dumber than a pale of hammers... I can seem to post a link that actually works. Wow....
[Xiaomi 12 (Global)] Keven11:
This is odd because the first link I posted works fine for me. You might need the AliExpress app installed as it opens in the app for me.
[Xiaomi 12 (Global)] acalapone:
Thank you. It's works like a charm! Bought it!
[Xiaomi 12 (Global)] Keven11:
Right on, you won't regret it.
[General Questions and Answers] P3450:
Hi All, I've been reading everything I can find on this but they're all very old threads and I can't seem to get this right. Any help much appreciated.

I'm trying to link a new icon from the sprint touch home screen plugin to a new note. I've done this successfully for the other icons and links and have created a .lnk file to open a new note and linked to it from the plugin's xml file but using it gives an error: Cannot open note. It has been renamed, moved or deleted. The problem must be with my .lnk file:

21#\Windows\notes.exe -n

I have tried this with quotes and without and with -new and -n but I can't seem to get it to work - can anyone enlighten me? I'm using WM 6.1 on an HTC Touch.

Thanks

Lisa
[General Questions and Answers] nir36:
ok.. 2 things

1. try creating a new link WITHOUT editting it (through a file explorer of some sort) and check if it loads Notes. if it does, try adding -n to it and check if it works.

2. -n DOES work for me so it means the problem is not the command line itself.

are you using some kind of shell like UltimateLaunch maybe?
[General Questions and Answers] P3450:
thanks for your help nir36,

from your first point I thought I'd check the file I already have first off. when I click on the lnk file I'd already created it opens a new note fine. also tried adding it to the ordinary HTC app launcher and it works there too. it's only when linking to it from the sprint home plugin that I get the error. It does get to the notes app but won't open a new note still. I'm linking to it with: link="\Windows\NewNote.lnk" which I guess is picking up the right file as it's getting half way to working.

Any thoughts? thanks
[General Questions and Answers] nir36:
NewNote.lnk is the regular and sure to be working way to open a new note. if the sprint home plugin wouldn't open a new note i assume it's a problem with the plugin reading a command line. unfortunatly i'm not familiar with the sprint home plugin, i'm sorry.

just a thought tho. check if there's more than one notation for the linking process from the plugin.

good luck
[General Questions and Answers] P3450:
Thanks for your suggestions - they've given me some ideas to try to find out how the normal new note menu works to see if I can use that, look at linking directly from the plugin's xml and maybe find a thread more related to the plugin now I have a better idea of where the problem is. I'd still welcome ideas and help here too though if anyone has any thoughts! thanks!
[General Questions and Answers] nir36:
pleasure's mine
[Samsung Galaxy S21 Ultra] demosthenes131:
I have some experience in flashing via Odin having done it on previous Samsung devices but I am having all sorts of issues with trying to do this.

I have a Tmobile S21 Ultra 5g and just switched to Verizon. I am trying to flash the firmware to unbranded (XAA if I have read correctly) but I am getting errors. The first error was SHA256 which I read was because I needed a patched Odin. When I switch to the patched Odin, and I have tried both 3.13.1 and 3.14.1, it goes for awhile and fails. I am unsure whether I need to root the device to switch between carriers or try something else. I am unsure if I want to root it as I may eventually want to trade in the phone.

Do I have any options? My main issue is with wifi calling as I am at times in areas where the signal is terrible but may need to make calls. With the switch from Tmobile to Verizon it appears that is not working.
[Samsung Galaxy S22 Ultra] blackhawk:
Don't update... destroyer of worlds🤣
[Samsung Galaxy S22 Ultra] olivehue512:
I feel like I'm missing something because wouldn't their normally be a million responses of hype, hope and nay-saying going on here? Has this been shot down already?
[Samsung Galaxy S22 Ultra] blackhawk:
Lol, everybody already updated the patch🤣
[Samsung Galaxy S22 Ultra] olivehue512:
This is just sad panda. I'm gonna skip next update anyways unless it comes with an actual other phone that is BL unlocked. I feel like everyone wants this so bad it can't be that far out before it happens.

Does the Magisk injection method work after July patch? I was reading through the work they did to get it done. Props to those guys.
[Samsung Galaxy S22 Ultra] K0mraid3:
Has it got a fancy number yet?! Eager to try this!!!! Maybe it can be put in with the others.
[Samsung Galaxy S22 Ultra] K0mraid3:
Well, because they are known and accepted vulnerabilities and exploits. A very few have even been marked as "WONTFIX" such as the TTY method.
[Samsung Galaxy S22 Ultra] K0mraid3:
Honestly, it's worth a shot but I doubt it.

One of the goals behind building the APK compilation of all these different tactics is to enable the end user to "give it a shot" easily on different devices, without having to know how to run all of this manually. Basically imagine an apk that just tries all the above methods and if ones successful the gui will pop a root shell open. From there, the possibilities are endless. Edit Build.prop, SELinux, Verity, Etc.
[Samsung Galaxy S22 Ultra] xgerryx:
FYI even you applied the July update, seems like the Kernel version is still from June 21st, is still 5.10xxxx so we could still benefit from this exploit. Very interested in how we can get root here in the US.
[Samsung Galaxy S22 Ultra] K0mraid3:
Go to the Github linked and try the different methods, see if you can pop a root and nano build.prop to allow OEM unlocking?
[Samsung Galaxy S22 Ultra] K0mraid3:
GREAT news for us! LEts get this temp root! lol
[Samsung Galaxy S22 Ultra] K0mraid3:
Looks like another new one! CVE-2022-33708
[Samsung Galaxy S22 Ultra] K0mraid3:
Another Samsung Exclusive - CVE-2022-33701
[Samsung Galaxy S22 Ultra] K0mraid3:
So, ive just spent my entire friday and friday night MANUALLY testing all the GTFOBins & reproducing some of the newer CVE's on Samsung Galaxy S7 Edge (Android 9) -Galaxy tab A 8.4, (Android 11), Galaxy S21 & S22 (Android 12) --- A little bit of progress made. Again, ill need someone with better working knowledge on APKs & Java to really move forward. All i can say so far, is this all must be awk for sammie, because cronie is looking promising ;)

"crontab -e"
[Samsung Galaxy S22 Ultra] K0mraid3:
interesting find. not "New" but still new-ish enough some may be able to use. CVE-2022-22268 (Unlock Knox Guard with DEX)
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
New to this all but not rooting. Anyone recommend a way tutorial on how to try these methods on Win 11?
[Samsung Galaxy S22 Ultra] DevinDking:
I don't have a deep understanding of Linux, I have tried, debian and unbuntu. I get traitor to run but it's detecting the Linux kernel and not my phones. How can I get the program to search for vulnerability on my phone not my Linux. I would love a more in depth guide and I'd love to give feedback on methods.
[Samsung Galaxy S22 Ultra] K0mraid3:
i had the same issue but cant remember how i worked that out. let me see if i can find out what i did on win11
[Samsung Galaxy S22 Ultra] DevinDking:
Thankyou sir 🙏
[Samsung Galaxy S22 Ultra] DevinDking:
I was able to get this by running "traitor-arm64" on my phone.

Steps to get script on phone.

//

#!/bin/sh

set -e

dir=/data/local/tmp

adb=${adb:-"adb"}

$adb push traitor ${dir} //This puts file on phone make sure to run the terminal where its located

$adb shell chmod 755 ${dir}/traitor"

//

Now to run script start a new terminal

//

adb shell

#!/bin/sh

set -e

dir=/data/local/tmp

adb=${adb:-"adb"}

${dir}/traitor //script opens

//

But I assume this wouldn't work right, and isn't right.

Idk trying my best here xD

View attachment 5661079
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
Unkes

Unless your S22 somehow managed to go up on BL to 3 or your software is on May or newer...then yes consider any access to privilege higher than shell denied. But...if not...there's info somewhere around here on XDA...to get you more access to your SAMSUNG device. No BL stuff but...at least it's better than nothing
[Samsung Galaxy S22 Ultra] xdej:
Thanks for your work. The netfilter linux root local exploit is now public since monday, I refrain from linking it in this post because it seems xda-developers.com forbids it.

I don't have the S22 but have the Samsung Fold 3, and am looking for payloads to ensure root shell access after the pending update, without tilting Knox. Yeah, this is difficult.

[edit] the Samsung Z Fold 3 is not vulnerable to that CVE-2023-32233 according to these commands:

$ adb pull /proc/config.gz

$ zgrep CONFIG_NF_TABLES config.gz

# CONFIG_NF_TABLES is not set

$ zgrep CONFIG_USER_NS config.gz

# CONFIG_USER_NS is not set

I landed on your post googling the following : xda-developpers.com payload cve knox
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
system_shell_2
[Samsung Galaxy S22 Ultra] Xynon:
Hi,

(Super old reply ik)

Here's why you should be wary of installing anything that sets SELinux to permissive

An undocumented Android feature allows any arbitrary app to gain root access on a permissive SELinux environment. Read on to know more!

www.xda-developers.com

maybe this will help you?

It allows gaining partial root (UID=0) as long as selinux is permissive.

being partial root allows it to patch boot images and break stuff, which it can use to install magisk to gain full root

{Mod edit: Inappropriate language edited. Oswald Boelcke, Senior Moderator}
[Samsung Galaxy S22 Ultra] Xynon:
damn, how fast are you moderator 😂
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
I'll go ahead and direct you to two repos,

GitHub - Markakd/bad_io_uring: Android kernel exploitation for CVE-2022-20409

Android kernel exploitation for CVE-2022-20409. Contribute to Markakd/bad_io_uring development by creating an account on GitHub.

github.com

GitHub - wr3cckl3ss/system3: system3, Samsung's worst nightmare for a 3rd time!

system3, Samsung's worst nightmare for a 3rd time! - wr3cckl3ss/system3

github.com

bad_io_uring > root on S22 Ultra

system3 > system shell access for the third time on 90 to 95 percent of Samsung devices.
[Samsung Galaxy S22 Ultra] DaveH52:
My cell updates anyway even if I do not give it permission. Google hates us.
[Samsung Galaxy S22 Ultra] DragonFire1024:
old thread i know. but I have a similar problem with root explorer. When I try to open files that require root access, in an editor or even try to read it, the "opened file" would just be blank, like the build.prop. Now when I go to open those files, root explorer just force closes...something I have never seen before.
[Samsung Galaxy S22 Ultra] Argonon:
Very interesting. I have an MTK Android 12, Blu Studio Mini 2023 I'm going to try gtfo bins. Thanks! The darn OEM unlocking is restricted/hidden by carrier. I extracted the settings app and saw in the xml
[Samsung Galaxy S22 Ultra] K0mraid3:
Great work sir! Thank you for sharing for everyone!
[Samsung Galaxy S22 Ultra] QwalifydXDA:
Not new to *nix workflows or exploit kits such as basic Metasploiting, but haven't rooted a phone since the Pixel 1 XL ~ how difficult is it to get this going on a NA S22 Ultra (Galaxy Store updated, 5.10.81 kernel and build number SP1A.201812.016.S908U1UEU2AVF1 aka haven't updated since June)

EDIT FOR CLARIFICATION: "NA S22 Ultra" meaning SM-S908U1 on VZW
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
Is there anyway for sure to know if any exploit worked because I tried this method on computer and also thru termux on my phone and somehow now my gpay fails. It gives me the error that this phone is altered and modified. Also noticed the kernel was set to permissive (i don't think it was before maybe I'm wrong) then I set it to enforcing on termux Also noticed that my font changed in certain places that didn't have it before (monoUi.apk). So is it possible I somehow retained root or temp root? And if so, wouldnt a restart get rid of it? I've restarted 3 or 4 times and it's still the same. Also checked thru download mode to see if Knox was tripped...still at 0x0. Sorry for the long post. I was just curious.
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
And just to add. I checked thru YASNAC. And i fail. And when I was talking about my font changing. Look at the pic attached. Before I did the exploit, he font in YASNAC didn't change to what I set. Now it's changed.
[Samsung Galaxy S22 Ultra] K0mraid3:
one way to know an exploit worked, FTMP, is if you are able to get root in a shell after exploit, most will pop a root automatically. (Interactive or dumb shell) i wonder if a Root manager would help to know if root has been found (i.e superSu, ETFSU, etc.) - ..... just spitballing an idea.
[Samsung Galaxy S22 Ultra] K0mraid3:
try opening an app that requires root, see what happens. also, try using CHMOD 777 to change the prems on a normally protected directory. (I.e /system) if it lets you, you are on to something.
[Samsung Galaxy S22 Ultra] K0mraid3:
Maybe, if we cant directly obtain root access, we can find a way to get into and change recovery. again, im just throwing ideas out there atm.
[Samsung Galaxy S22 Ultra] K0mraid3:
Better yet, try to "cd" to /system and edit build.prop with "nano" maybe? or you could try "crontab -e" and edit the cron file, telling it to go to a "script.sh" that we can make that tell cronie to give user root. Crontab by default runs as root. so it can give prems.

the line in the "script.sh" should go something like this

echo "YOURUSERNAME ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers #------For this one, just replace "YOURUSERNAME" with your username on device.

echo "0 ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers #------- For this one, it will set USER 0 with root prems.

echo "TestUser::0:0:System Administrator:/root/root:/bin/bash" >> /etc/passwd #------- For this one, Cronie will create a NEW user under the name "TestUser" with root privileges.

You should only need to use one of those lines, but i gave them all in case they are needed. - idek know if cronie is on android but if it is, heres another attack vector.

If you want, i can upload the script i made for Crontab.
[Samsung Galaxy S22 Ultra] K0mraid3:
So (if im not wrong) from what i see about your device, its 5.10 linux? so it should be patched for the latest Dirty Pipe exploit, but many are saying that the Traitor program can still get you root even after update, so its worth a shot. Follow the guide in OP and let us know what happens!
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
I will try all this shortly. I'm at work but it is exciting to find out if I did or if I didn't. Worth a shot.
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
It'll be a little bit before I can get to all of this and I'm not an expert nor am i beginner at all this (I have a P6P on DerpFest)....but I do know my way around ADB and can follow directions if you lay them out for me.
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
I've attached the following for more insight.
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
sent you a DM
[Samsung Galaxy S22 Ultra] Gregbmil1:
I've been not updating in hopes of getting root. I'm at work and can't read all the details but check out my screenshot,. How am I looking?
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
Can I DM you?
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
Nothing private but I've been trying to retrace my steps and I came across something else I found. Just messing around with different exploits and came across this....

S22 · Issue #3 · polygraphene/DirtyPipe-Android

Could this same method work on s22, i assume it woukd require mymod.ko be built in s22 kernel source but can it work

github.com

As you can tell, it sets permissive but doesnt obtain root, so to speak. Thats why i asked to DM you. Didnt want to flood the thread with mis-information and also have a million people flooding that thread. Asking what to do next.
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
From that thread, someone completely found a way but just posted a screenshot. Maybe someone else can give it a go. Idk. But either way I feel bad cuz it's not directly pertaining to what the OP is about but hey maybe OP might have some insight.
[Samsung Galaxy S22 Ultra] K0mraid3:
Kernel is 5.10 :(

your good! i just now am seeing. ill message you back.
[Samsung Galaxy S22 Ultra] K0mraid3:
Trying now.
[Samsung Galaxy S22 Ultra] K0mraid3:
if you can get the right privileges you can in fact change it without root. you are basically tricking the system that has root by default to execute the commands on your behalf. so you could alter absolutely anything that would be contained within the build prop (and more presumably) ******This is, assuming, there is nothing new in Knox or other unknown samsung barriers in place, which, id bet you a coffee, there probably is, considering the massive data breach earlier this year that leaked tons of info on the S21 and Qualcomm proprietary info.
[Samsung Galaxy S22 Ultra] patrickfenn:
Google sets flags when you root the phone, and perhaps even though it didn't finish the root, the flags were raised. You can clear cache/storage in all the google apps(play store, services, gpay, whatever else you can find) and it should work. Assuming it isn't rooted ofc.
[Samsung Galaxy S22 Ultra] K0mraid3:
Heres a template Crontab file is anyone needs it.
[Samsung Galaxy S22 Ultra] K0mraid3:
Right, but this/these methods do not give "user" root per-say, but rather trick the system which has root to do users bidding.
[Samsung Galaxy S22 Ultra] K0mraid3:
I'm messing around a bit and I'm now wondering if there is a way to utilize the "Nearby Share" feature or even gain system root on a device and use its system root to shell into another device and still have system root, I vaguely remember someone on here years ago talking about this and i think did it with success.
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
well if there's anything I can do to help or do to test. ill be willing to try to help the community out. Not to worried about bricking this device. Not saying I'm rich or anything but after years of messing with things, you eventually know how to get another phone, if you end up with a paperweight. Trust me my first paperweight was an S4 or S7, right around the time towelroot came out. But anyways ill still continue to look around, read and test. Oh btw, saw you posted over there as well. Definitely the right people to ask for any help.
[Samsung Galaxy S22 Ultra] K0mraid3:
Can anyone else confirm if init.rilcarrier.rc exists on their devices? i found it in / but im using a pieced together hybrid rom i made in AIK (Android Image Kitchen)
[Samsung Galaxy S22 Ultra] Gregbmil1:
I have it

/system/etc/init/init.rilcarrier.rc/

Completely stock rom.
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
Same here...stock as well
[Samsung Galaxy S22 Ultra] K0mraid3:
Are you allowed to read it? What prems does it have for user and for system on your device? is it basically blank but some manufacturer text at the top?

It looks like this file is ment for the Radio Vendor (whoever builds the radio chips for samsung) to add any modification to the system. the top of the file says something like this:

Now to just figure out how to syntax the file, I'm just not sure how other devices protect this file. If it can be written to, we can use it to send commands to the RIL receiver I'm assuming.
[Samsung Galaxy S22 Ultra] K0mraid3:
Damn, it looks ike it may already be protected,, but maybe a GTFOBin would get us in to edit it?
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
I can read mine
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
File on MEGA

mega.nz

Just pulled it...if u need anything else or have an idea of somewhere to look. I can try to pull it on my phone. No computer for the next 10 hours. Let me know.
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
On a weird note, now KG status is COMPLETED. It was ACTIVE before from what I can remember. Also, Device Services is gone. I have another S908U to check just in case it was carrier involved and not exploit. but my best guess is that it was the exploit. Idk
[Samsung Galaxy S22 Ultra] K0mraid3:
KG Status ="Completed" ...? I've never heard of that before! grab some screenshots or pics from another device!!
[Samsung Galaxy S22 Ultra] K0mraid3:
KG is "Knox Guard" and relates to the Bootloader, if im not mistaken! this is super interesting. Take note of everything you did prior and in what order. Post it here!
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
I don't know much but I do know it has to do with the bootloader. But it's all speculation. Just throwing it out there.
[Samsung Galaxy S22 Ultra] K0mraid3:
Mine on my S7 & S21 are blank.

But look at what is found at the bottom of yours and my S22's

Important is in Italic Bold
[Samsung Galaxy S22 Ultra] K0mraid3:
Try to call this service somehow, see if you can exploit it or find a vulnerability to maybe escalate privileges or get system root?
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
I'll try to give it a go. Not too familiar with "calling it" but I'll look around.
[Samsung Galaxy S22 Ultra] K0mraid3:
i found this other post talking about KG Completed, it looks like it relates specifically to the 7 day period needed to wait after a factory reset? but i know there has GOT TO BE more too it then simply that.

https://xdaforums.com/t/kg-status-completed-no-oem-unlock-option.4442325/

More info i found about KG status, just for reference. Here to start.
[Samsung Galaxy S22 Ultra] K0mraid3:
try using this in shell, someone correct me if im off. (Which i probably am.....)

-- see what comes up and look for DMM-Daemon

or try running it directly

Maybe also try doing this first? idek if it would work though.
[Samsung Galaxy S22 Ultra] K0mraid3:
OH. ....... DUDE, TRY POINTING CRONTAB AT IT!
[Samsung Galaxy S22 Ultra] wr3cckl3ss1:
File on MEGA

mega.nz

Ran getprop and adb shell service list

Maybe you can see something different than I can see.
[Samsung Galaxy S22 Ultra] K0mraid3:
Very end of your file, line 123 -132
[Samsung Galaxy S22 Ultra] K0mraid3:
look at how it puts the user as root on line 131
[Samsung Galaxy S22 Ultra] K0mraid3:
We have got to find the way its called. its not directly accessible/call-able in /sh (Shell) @wr3cckl3ss1