[EVO 4G Android Development] piper at the gates:
------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 10:51:59.79

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:12.83

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:17.09

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:17.85

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:18.29

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:18.51

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:18.80

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:19.40

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:19.65

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:19.99

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:20.24

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:20.89

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:21.15

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:21.83

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:22.43

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:24.66

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:25.36

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:25.62

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:26.22

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:26.98

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:27.20

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:27.87

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:28.48

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:28.72

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:28.96

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:29.20

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:29.89

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:30.53

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:30.78

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:31.45

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:31.68

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:51:31.95

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:52:16.52

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'device' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:52:17.52

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'device' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:52:18.21

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'device' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:52:18.92

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'device' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:52:19.37

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'device' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:52:27.31

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'device' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:53:02.29

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'device' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 11:53:32.87

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Checking MTD configuration...

dev: size erasesize name

mtd0: 00c00000 00040000 "wimax"

mtd1: 00100000 00040000 "misc"

mtd2: 00480000 00040000 "recovery"

mtd3: 00340000 00040000 "boot"

mtd4: 15e00000 00040000 "system"

mtd5: 0a000000 00040000 "cache"

mtd6: 1aa00000 00040000 "userdata"

'check.bat mtd' returned 'new'

Checking for root...

UID is 'uid=2000(shell)'

Pushing res\rageagainstthecage-arm5.bin to /data/local/tmp/rageagainstthecage-arm5.bin...

526 KB/s (5392 bytes in 0.010s)

Running exploit...

$ ./data/local/tmp/rageagainstthecage-arm5.bin

[*] CVE-2010-EASY Android local root exploit (C) 2010 by 743C

[*] checking NPROC limit ...

[+] RLIMIT_NPROC={3316, 3316}

[*] Searching for adb ...

[+] Found adb as PID 78

[*] Spawning children. Dont type anything and wait for reset!

[*]

[*] If you like what we are doing you can send us PayPal money to

[*] 7-4-3-C@web.de so we can compensate time, effort and HW costs.

[*] If you are a company and feel like you profit from our work,

[*] we also accept donations > 1000 USD!

[*]

[*] adb connection will be reset. restart adb server on desktop and re-login.

$

Checking for ADB...

PLEN='45' PSTATE='device' RETURNTO='s3' STATE=''

PING ADB Counter - State Changed '1' out of '45'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '2' out of '45'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '3' out of '45'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Checking for root...

UID is 'Got Root!'

Checking for needed files...

Pushing res\mtd-eng.img to /sdcard/mtd-eng.img...

1185 KB/s (655360 bytes in 0.540s)

Pushing res\URFSOFF.zip to /sdcard/URFSOff.zip...

1556 KB/s (223144 bytes in 0.140s)

Pushing res\URFSON.zip to /sdcard/URFSOn.zip...

1365 KB/s (223773 bytes in 0.160s)

Pushing res\newkernel.zip to /sdcard/newkernel.zip...

1088 KB/s (2863406 bytes in 2.570s)

Flashing misc partition...

Rebooting in to bootloader...

Setting RUU mode...

< waiting for device >

... OKAY

Verifying bootloader status...

hBoot version '2.02.0000'

Version Major '2'

Version Minor '02'

Firmware version '1.17.651.1'

Version Major '1'

Version Minor '17'

hbpreupdate set at '11'

HBPU is 'na'

WARNING Skipping bootloader verification...

Security is 'on'

Sending flash PC36IMG_UD.zip command...

sending 'zip' (175072 KB)... OKAY

writing 'zip'... INFOadopting the signature contained in this image...

INFOsignature checking...

INFOzip header checking...

INFOzip info parsing...

INFOchecking model ID...

INFOchecking custom ID...

INFOchecking main version...

INFOstart image[hboot] unzipping for pre-update check...

INFOstart image[microp] unzipping & flushing...

INFO[RUU]UZ,microp,0

INFO[RUU]WP,microp,0

INFO[RUU]WP,microp,9

INFO[RUU]WP,microp,14

INFO[RUU]WP,microp,23

INFO[RUU]WP,microp,28

INFO[RUU]WP,microp,33

INFO[RUU]WP,microp,42

INFO[RUU]WP,microp,51

INFO[RUU]WP,microp,56

INFO[RUU]WP,microp,61

INFO[RUU]WP,microp,70

INFO[RUU]WP,microp,75

INFO[RUU]WP,microp,84

INFO[RUU]WP,microp,89

INFO[RUU]WP,microp,100

INFOstart image[radio] unzipping & flushing...

INFO[RUU]UZ,radio,0

INFO[RUU]UZ,radio,9

INFO[RUU]UZ,radio,14

INFO[RUU]UZ,radio,19

INFO[RUU]UZ,radio,28

INFO[RUU]UZ,radio,33

INFO[RUU]UZ,radio,42

INFO[RUU]UZ,radio,47

INFO[RUU]UZ,radio,52

INFO[RUU]UZ,radio,61

INFO[RUU]UZ,radio,70

INFO[RUU]UZ,radio,75

INFO[RUU]UZ,radio,80

INFO[RUU]UZ,radio,85

INFO[RUU]UZ,radio,97

INFO[RUU]UZ,radio,100

INFO[RUU]WP,radio,0

INFO[RUU]WP,radio,100

INFOstart image[rcdata] unzipping & flushing...

INFO[RUU]UZ,rcdata,0

INFO[RUU]UZ,rcdata,100

INFO[RUU]WP,rcdata,0

INFO[RUU]WP,rcdata,100

INFOstart image[recovery] unzipping & flushing...

INFO[RUU]UZ,recovery,0

INFO[RUU]UZ,recovery,22

INFO[RUU]UZ,recovery,42

INFO[RUU]UZ,recovery,73

INFO[RUU]UZ,recovery,99

INFO[RUU]UZ,recovery,100

INFO[RUU]WP,recovery,0

INFO[RUU]WP,recovery,22

INFO[RUU]WP,recovery,44

INFO[RUU]WP,recovery,66

INFO[RUU]WP,recovery,88

INFO[RUU]WP,recovery,100

INFOstart image[sp1] unzipping & flushing...

INFO[RUU]UZ,sp1,0

INFO[RUU]UZ,sp1,100

INFO[RUU]WP,sp1,0

INFO[RUU]WP,sp1,100

INFOstart image[system] unzipping & flushing...

INFO[RUU]UZ,system,0

INFO[RUU]UZ,system,7

INFO[RUU]UZ,system,15

INFO[RUU]UZ,system,23

INFO[RUU]UZ,system,31

INFO[RUU]UZ,system,38

INFO[RUU]UZ,system,46

INFO[RUU]UZ,system,54

INFO[RUU]UZ,system,62

INFO[RUU]UZ,system,70

INFO[RUU]UZ,system,77

INFO[RUU]UZ,system,85

INFO[RUU]UZ,system,93

INFO[RUU]UZ,system,100

INFO[RUU]WP,system,0

INFO[RUU]WP,system,100

INFOstart image[tp] unzipping & flushing...

INFO[RUU]UZ,tp,0

INFO[RUU]UZ,tp,100

INFOstart image[tp] unzipping & flushing...

INFO[RUU]UZ,tp,0

INFO[RUU]UZ,tp,100

INFOstart image[userdata] unzipping & flushing...

INFO[RUU]UZ,userdata,0

INFO[RUU]UZ,userdata,8

INFO[RUU]UZ,userdata,13

INFO[RUU]UZ,userdata,21

INFO[RUU]UZ,userdata,26

INFO[RUU]UZ,userdata,34

INFO[RUU]UZ,userdata,43

INFO[RUU]UZ,userdata,51

INFO[RUU]UZ,userdata,56

INFO[RUU]UZ,userdata,65

INFO[RUU]UZ,userdata,73

INFO[RUU]UZ,userdata,78

INFO[RUU]UZ,userdata,87

INFO[RUU]UZ,userdata,95

INFO[RUU]UZ,userdata,100

INFO[RUU]WP,userdata,0

INFO[RUU]WP,userdata,100

INFOstart image[wimax] unzipping & flushing...

INFO[RUU]UZ,wimax,0

INFO[RUU]UZ,wimax,12

INFO[RUU]UZ,wimax,24

INFO[RUU]UZ,wimax,36

INFO[RUU]UZ,wimax,48

INFO[RUU]UZ,wimax,60

INFO[RUU]UZ,wimax,72

INFO[RUU]UZ,wimax,83

INFO[RUU]UZ,wimax,95

INFO[RUU]UZ,wimax,100

INFO[RUU]WP,wimax,0

INFO[RUU]WP,wimax,11

INFO[RUU]WP,wimax,23

INFO[RUU]WP,wimax,35

INFO[RUU]WP,wimax,47

INFO[RUU]WP,wimax,59

INFO[RUU]WP,wimax,71

INFO[RUU]WP,wimax,83

INFO[RUU]WP,wimax,95

INFO[RUU]WP,wimax,100

INFOstart image[boot] unzipping & flushing...

INFO[RUU]UZ,boot,0

INFO[RUU]UZ,boot,45

INFO[RUU]UZ,boot,90

INFO[RUU]UZ,boot,100

INFO[RUU]WP,boot,0

INFO[RUU]WP,boot,48

INFO[RUU]WP,boot,96

INFO[RUU]WP,boot,100

INFOstart image[hboot] unzipping & flushing...

INFO[RUU]UZ,hboot,0

INFO[RUU]UZ,hboot,100

FAILED (remote: 52 image check fail)

Sending 'fastboot reboot' command...

rebooting...

Checking for ADB...

PLEN='120' PSTATE='any' RETURNTO='b2recovery' STATE=''

PING ADB Counter - State Changed '1' out of '120'. ADB State is 'of' expected 'any'

PING ADB Counter - State Changed '2' out of '120'. ADB State is 'of' expected 'any'

Phone rebooted to bootloader, reflashing PC36IMG_UD.zip...

... OKAY

< waiting for device >

sending 'zip' (175072 KB)... OKAY

writing 'zip'... INFOadopting the signature contained in this image...

INFOsignature checking...

INFOzip header checking...

INFOzip info parsing...

INFOchecking model ID...

INFOchecking custom ID...

INFOchecking main version...

INFOstart image[hboot] unzipping for pre-update check...

INFOstart image[microp] unzipping & flushing...

INFO[RUU]UZ,microp,0

INFO[RUU]WP,microp,0

INFO[RUU]WP,microp,9

INFO[RUU]WP,microp,14

INFO[RUU]WP,microp,23

INFO[RUU]WP,microp,28

INFO[RUU]WP,microp,33

INFO[RUU]WP,microp,42

INFO[RUU]WP,microp,51

INFO[RUU]WP,microp,56

INFO[RUU]WP,microp,61

INFO[RUU]WP,microp,70

INFO[RUU]WP,microp,75

INFO[RUU]WP,microp,84

INFO[RUU]WP,microp,89

INFO[RUU]WP,microp,100

INFOstart image[radio] unzipping & flushing...

INFO[RUU]UZ,radio,0

INFO[RUU]UZ,radio,9

INFO[RUU]UZ,radio,14

INFO[RUU]UZ,radio,19

INFO[RUU]UZ,radio,28

INFO[RUU]UZ,radio,33

INFO[RUU]UZ,radio,42

INFO[RUU]UZ,radio,47

INFO[RUU]UZ,radio,52

INFO[RUU]UZ,radio,61

INFO[RUU]UZ,radio,70

INFO[RUU]UZ,radio,75

INFO[RUU]UZ,radio,80

INFO[RUU]UZ,radio,85

INFO[RUU]UZ,radio,97

INFO[RUU]UZ,radio,100

INFO[RUU]WP,radio,0

INFO[RUU]WP,radio,100

INFOstart image[rcdata] unzipping & flushing...

INFO[RUU]UZ,rcdata,0

INFO[RUU]UZ,rcdata,100

INFO[RUU]WP,rcdata,0

INFO[RUU]WP,rcdata,100

INFOstart image[recovery] unzipping & flushing...

INFO[RUU]UZ,recovery,0

INFO[RUU]UZ,recovery,22

INFO[RUU]UZ,recovery,42

INFO[RUU]UZ,recovery,73

INFO[RUU]UZ,recovery,99

INFO[RUU]UZ,recovery,100

INFO[RUU]WP,recovery,0

INFO[RUU]WP,recovery,22

INFO[RUU]WP,recovery,44

INFO[RUU]WP,recovery,66

INFO[RUU]WP,recovery,88

INFO[RUU]WP,recovery,100

INFOstart image[sp1] unzipping & flushing...

INFO[RUU]UZ,sp1,0

INFO[RUU]UZ,sp1,100

INFO[RUU]WP,sp1,0

INFO[RUU]WP,sp1,100

INFOstart image[system] unzipping & flushing...

INFO[RUU]UZ,system,0

INFO[RUU]UZ,system,7

INFO[RUU]UZ,system,15

INFO[RUU]UZ,system,23

INFO[RUU]UZ,system,31

INFO[RUU]UZ,system,38

INFO[RUU]UZ,system,46

INFO[RUU]UZ,system,54

INFO[RUU]UZ,system,62

INFO[RUU]UZ,system,70

INFO[RUU]UZ,system,77

INFO[RUU]UZ,system,85

INFO[RUU]UZ,system,93

INFO[RUU]UZ,system,100

INFO[RUU]WP,system,0

INFO[RUU]WP,system,100

INFOstart image[tp] unzipping & flushing...

INFO[RUU]UZ,tp,0

INFO[RUU]UZ,tp,100

INFOstart image[tp] unzipping & flushing...

INFO[RUU]UZ,tp,0

INFO[RUU]UZ,tp,100

INFOstart image[userdata] unzipping & flushing...

INFO[RUU]UZ,userdata,0

INFO[RUU]UZ,userdata,8

INFO[RUU]UZ,userdata,13

INFO[RUU]UZ,userdata,21

INFO[RUU]UZ,userdata,26

INFO[RUU]UZ,userdata,34

INFO[RUU]UZ,userdata,43

INFO[RUU]UZ,userdata,51

INFO[RUU]UZ,userdata,56

INFO[RUU]UZ,userdata,65

INFO[RUU]UZ,userdata,73

INFO[RUU]UZ,userdata,78

INFO[RUU]UZ,userdata,87

INFO[RUU]UZ,userdata,95

INFO[RUU]UZ,userdata,100

INFO[RUU]WP,userdata,0

INFO[RUU]WP,userdata,100

INFOstart image[wimax] unzipping & flushing...

INFO[RUU]UZ,wimax,0

INFO[RUU]UZ,wimax,12

INFO[RUU]UZ,wimax,24

INFO[RUU]UZ,wimax,36

INFO[RUU]UZ,wimax,48

INFO[RUU]UZ,wimax,60

INFO[RUU]UZ,wimax,72

INFO[RUU]UZ,wimax,83

INFO[RUU]UZ,wimax,95

INFO[RUU]UZ,wimax,100

INFO[RUU]WP,wimax,0

INFO[RUU]WP,wimax,11

INFO[RUU]WP,wimax,23

INFO[RUU]WP,wimax,35

INFO[RUU]WP,wimax,47

INFO[RUU]WP,wimax,59

INFO[RUU]WP,wimax,71

INFO[RUU]WP,wimax,83

INFO[RUU]WP,wimax,95

INFO[RUU]WP,wimax,100

INFOstart image[boot] unzipping & flushing...

INFO[RUU]UZ,boot,0

INFO[RUU]UZ,boot,45

INFO[RUU]UZ,boot,90

INFO[RUU]UZ,boot,100

INFO[RUU]WP,boot,0

INFO[RUU]WP,boot,48

INFO[RUU]WP,boot,96

INFO[RUU]WP,boot,100

INFOstart image[hboot] unzipping & flushing...

INFO[RUU]UZ,hboot,0

INFO[RUU]UZ,hboot,100

FAILED (remote: 52 image check fail)

Sending 'fastboot reboot' command...

rebooting...

Checking for ADB...

PLEN='120' PSTATE='any' RETURNTO='b2recovery' STATE='ruureflash'

PING ADB Counter - State Changed '1' out of '120'. ADB State is 'of' expected 'any'

PING ADB Counter - State Changed '1' out of '120'. ADB State is 'of' expected 'any'

PING ADB Counter - State Changed '2' out of '120'. ADB State is 'of' expected 'any'

Phone rebooted to bootloader, reflashing PC36IMG_UD.zip...

... OKAY

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 13:15:34.22

Params=1'makeandroid' 2'' 3'' 4'' 5'' 6''

Passed an invalid parameter 'makeandroid'

Passed to ERRHANDLER

------------ AutoRoot.bat End

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 13:18:32.62

Params=1'-d' 2'fastboot' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 14:09:44.50

Params=1'-d' 2'fastboot' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'of' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 14:21:47.91

Params=1'-d' 2'fastboot' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'device' expected 'device'

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 14:21:55.57

Params=1'-d' 2'fastboot' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Checking MTD configuration...

dev: size erasesize name

mtd0: 00c00000 00040000 "wimax"

mtd1: 00100000 00040000 "misc"

mtd2: 00480000 00040000 "recovery"

mtd3: 00340000 00040000 "boot"

mtd4: 15e00000 00040000 "system"

mtd5: 0a000000 00040000 "cache"

mtd6: 1aa00000 00040000 "userdata"

'check.bat mtd' returned 'new'

Checking for root...

UID is 'uid=2000(shell)'

Pushing res\rageagainstthecage-arm5.bin to /data/local/tmp/rageagainstthecage-arm5.bin...

526 KB/s (5392 bytes in 0.010s)

Running exploit...

$ ./data/local/tmp/rageagainstthecage-arm5.bin

[*] CVE-2010-EASY Android local root exploit (C) 2010 by 743C

[*] checking NPROC limit ...

[+] RLIMIT_NPROC={3316, 3316}

[*] Searching for adb ...

[+] Found adb as PID 78

[*] Spawning children. Dont type anything and wait for reset!

[*]

[*] If you like what we are doing you can send us PayPal money to

[*] 7-4-3-C@web.de so we can compensate time, effort and HW costs.

[*] If you are a company and feel like you profit from our work,

[*] we also accept donations > 1000 USD!

[*]

[*] adb connection will be reset. restart adb server on desktop and re-login.

$

Checking for ADB...

PLEN='45' PSTATE='device' RETURNTO='s3' STATE=''

PING ADB Counter - State Changed '1' out of '45'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '2' out of '45'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '3' out of '45'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '4' out of '45'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '5' out of '45'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '6' out of '45'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '7' out of '45'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Checking for root...

UID is 'Got Root!'

Checking for needed files...

Missing res\PC36IMG_UD.zip. The full zip needs to be downloaded.

Attempting to dump the recovery log.

---------RECOVERY LOG DUMP BEGIN---------

/cache/recovery/log: No such file or directory

----------RECOVERY LOG DUMP END----------

------------ AutoRoot.bat End

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 14:23:06.92

Params=1'-d' 2'fastboot' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Checking MTD configuration...

dev: size erasesize name

mtd0: 00c00000 00040000 "wimax"

mtd1: 00100000 00040000 "misc"

mtd2: 00480000 00040000 "recovery"

mtd3: 00340000 00040000 "boot"

mtd4: 15e00000 00040000 "system"

mtd5: 0a000000 00040000 "cache"

mtd6: 1aa00000 00040000 "userdata"

'check.bat mtd' returned 'new'

Checking for root...

UID is 'Got Root!'

Checking for needed files...

Pushing res\flash_image to /data/local/flash_image...

834 KB/s (76044 bytes in 0.089s)

Flashing misc partition...

Rebooting in to bootloader...

Setting RUU mode...

< waiting for device >

... OKAY

Verifying bootloader status...

hBoot version '2.02.0000'

Version Major '2'

Version Minor '02'

Firmware version '1.17.651.1'

Version Major '1'

Version Minor '17'

hbpreupdate set at '11'

HBPU is 'na'

WARNING Skipping bootloader verification...

Security is 'on'

Attempting to dump the recovery log.

---------RECOVERY LOG DUMP BEGIN---------

error: device not found

----------RECOVERY LOG DUMP END----------

------------ AutoRoot.bat End

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 14:29:41.03

Params=1'makeandroid' 2'' 3'' 4'' 5'' 6''

Passed an invalid parameter 'makeandroid'

Passed to ERRHANDLER

Attempting to dump the recovery log.

---------RECOVERY LOG DUMP BEGIN---------

- exec '/system/bin/sh' failed: No such file or directory (2) -

----------RECOVERY LOG DUMP END----------

------------ AutoRoot.bat End

------------ AutoRoot.bat Begin - v1.8 - Sat 12/18/2010 14:30:02.94

Params=1'makeandroid' 2'' 3'' 4'' 5'' 6''

Passed an invalid parameter 'makeandroid'

Passed to ERRHANDLER

Attempting to dump the recovery log.

---------RECOVERY LOG DUMP BEGIN---------

- exec '/system/bin/sh' failed: No such file or directory (2) -

----------RECOVERY LOG DUMP END----------

------------ AutoRoot.bat End

idk it told me to do this and said there were invalid paramaters