[EVO 4G Android Development] skeith223:
------------ AutoRoot.bat Begin - Sun 12/12/2010 13:13:52.42

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1'

PING ADB Counter '1' out of '1'. ADB State is 'of' expected 'device'

1 of na

PING ADB Counter '2' out of '1'. ADB State is 'of' expected 'device'

2 of na

ADB not ready. State shows it as 'na'

Passed to ERRHANDLER

------------ AutoRoot.bat End

------------ AutoRoot.bat Begin - Sun 12/12/2010 13:14:36.64

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1'

PING ADB Counter '1' out of '1'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Checking MTD configuration...

dev: size erasesize name

mtd0: 00c00000 00020000 "wimax"

mtd1: 000a0000 00020000 "misc"

mtd2: 00480000 00020000 "recovery"

mtd3: 00300000 00020000 "boot"

mtd4: 15e00000 00020000 "system"

mtd5: 0a000000 00020000 "cache"

mtd6: 1aba0000 00020000 "userdata"

'check.bat mtd' returned 'old'

Checking for root...

UID is 'uid=2000(shell)'

Pushing res\rageagainstthecage-arm5.bin to /data/local/tmp/rageagainstthecage-arm5.bin...

405 KB/s (5392 bytes in 0.013s)

Running exploit...

$ ./data/local/tmp/rageagainstthecage-arm5.bin

[*] CVE-2010-EASY Android local root exploit (C) 2010 by 743C

[*] checking NPROC limit ...

[+] RLIMIT_NPROC={3316, 3316}

[*] Searching for adb ...

[+] Found adb as PID 78

[*] Spawning children. Dont type anything and wait for reset!

[*]

[*] If you like what we are doing you can send us PayPal money to

[*] 7-4-3-C@web.de so we can compensate time, effort and HW costs.

[*] If you are a company and feel like you profit from our work,

[*] we also accept donations > 1000 USD!

[*]

[*] adb connection will be reset. restart adb server on desktop and re-login.

$

------------ AutoRoot.bat Begin - Sun 12/12/2010 13:29:14.17

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1'

PING ADB Counter '1' out of '1'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Checking MTD configuration...

dev: size erasesize name

mtd0: 00c00000 00020000 "wimax"

mtd1: 000a0000 00020000 "misc"

mtd2: 00480000 00020000 "recovery"

mtd3: 00300000 00020000 "boot"

mtd4: 15e00000 00020000 "system"

mtd5: 0a000000 00020000 "cache"

mtd6: 1aba0000 00020000 "userdata"

'check.bat mtd' returned 'old'

Checking for root...

UID is 'uid=2000(shell)'

Running exploit...

./data/local/tmp/rageagainstthecage-arm5.bin

$ [*] CVE-2010-EASY Android local root exploit (C) 2010 by 743C

[*] checking NPROC limit ...

[+] RLIMIT_NPROC={3316, 3316}

[*] Searching for adb ...

[+] Found adb as PID 78

[*] Spawning children. Dont type anything and wait for reset!

[*]

[*] If you like what we are doing you can send us PayPal money to

[*] 7-4-3-C@web.de so we can compensate time, effort and HW costs.

[*] If you are a company and feel like you profit from our work,

[*] we also accept donations > 1000 USD!

[*]

[*] adb connection will be reset. restart adb server on desktop and re-login.

$

------------ AutoRoot.bat Begin - Sun 12/12/2010 13:30:02.52

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1'

PING ADB Counter '1' out of '1'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Checking MTD configuration...

------------ AutoRoot.bat Begin - Sun 12/12/2010 13:30:50.73

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1'

PING ADB Counter '1' out of '1'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Checking MTD configuration...

^C

------------ AutoRoot.bat Begin - Sun 12/12/2010 13:32:57.75

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1'

PING ADB Counter '1' out of '1'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Checking MTD configuration...

dev: size erasesize name

mtd0: 00c00000 00020000 "wimax"

mtd1: 000a0000 00020000 "misc"

mtd2: 00480000 00020000 "recovery"

mtd3: 00300000 00020000 "boot"

mtd4: 15e00000 00020000 "system"

mtd5: 0a000000 00020000 "cache"

mtd6: 1aba0000 00020000 "userdata"

'check.bat mtd' returned 'old'

Checking for root...

UID is 'Got Root!'

Checking for needed files...

Pushing res\URFSOFF.zip to /sdcard/URFSOff.zip...

1252 KB/s (223144 bytes in 0.174s)

Pushing res\URFSON.zip to /sdcard/URFSOn.zip...

1065 KB/s (223773 bytes in 0.205s)

Pushing res\oldkernel.zip to /sdcard/oldkernel.zip...

1267 KB/s (3020437 bytes in 2.327s)

Flashing misc partition...

mtd: read error at 0x00000000 (Out of memory)

mtd: read error at 0x00020000 (Out of memory)

mtd: read error at 0x00040000 (Out of memory)

mtd: read error at 0x00060000 (Out of memory)

mtd: read error at 0x00080000 (Out of memory)

mtd: write error at 0x00000000 (Out of memory)

mtd: re-read error at 0x00000000 (Out of memory)

mtd: write error at 0x00000000 (Out of memory)

mtd: re-read error at 0x00000000 (Out of memory)

mtd: skipping write block at 0x00000000

mtd: write error at 0x00020000 (Out of memory)

mtd: re-read error at 0x00020000 (Out of memory)

mtd: write error at 0x00020000 (Out of memory)

mtd: re-read error at 0x00020000 (Out of memory)

mtd: skipping write block at 0x00020000

mtd: write error at 0x00040000 (Out of memory)

mtd: re-read error at 0x00040000 (Out of memory)

mtd: write error at 0x00040000 (Out of memory)

mtd: re-read error at 0x00040000 (Out of memory)

mtd: skipping write block at 0x00040000

mtd: write error at 0x00060000 (Out of memory)

mtd: re-read error at 0x00060000 (Out of memory)

mtd: write error at 0x00060000 (Out of memory)

mtd: re-read error at 0x00060000 (Out of memory)

mtd: skipping write block at 0x00060000

mtd: write error at 0x00080000 (Out of memory)

mtd: re-read error at 0x00080000 (Out of memory)

mtd: write error at 0x00080000 (Out of memory)

mtd: re-read error at 0x00080000 (Out of memory)

mtd: skipping write block at 0x00080000

error writing misc: No space left on device

Rebooting in to bootloader...

Setting RUU mode...

< waiting for device >

... OKAY

Verifying bootloader status...

hBoot version '2.02.0000'

Version Major '2'

Version Minor '02'

HBOOT AND /PROC/MTD MISMATCH!!

MTDCON 'old' - BOOTV 'na'

Passed to ERRHANDLER

Attempting to dump the recovery log.

---------RECOVERY LOG DUMP BEGIN---------

error: device not found

----------RECOVERY LOG DUMP END----------

------------ AutoRoot.bat End

------------ AutoRoot.bat Begin - Sun 12/12/2010 13:38:33.73

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1'

PING ADB Counter '1' out of '1'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Checking MTD configuration...

dev: size erasesize name

mtd0: 00c00000 00020000 "wimax"

mtd1: 000a0000 00020000 "misc"

mtd2: 00480000 00020000 "recovery"

mtd3: 00300000 00020000 "boot"

mtd4: 15e00000 00020000 "system"

mtd5: 0a000000 00020000 "cache"

mtd6: 1aba0000 00020000 "userdata"

'check.bat mtd' returned 'old'

Checking for root...

UID is 'uid=2000(shell)'

Running exploit...

$ ./data/local/tmp/rageagainstthecage-arm5.bin

[*] CVE-2010-EASY Android local root exploit (C) 2010 by 743C

[*] checking NPROC limit ...

[+] RLIMIT_NPROC={3316, 3316}

[*] Searching for adb ...

[+] Found adb as PID 78

[*] Spawning children. Dont type anything and wait for reset!

[*]

[*] If you like what we are doing you can send us PayPal money to

[*] 7-4-3-C@web.de so we can compensate time, effort and HW costs.

[*] If you are a company and feel like you profit from our work,

[*] we also accept donations > 1000 USD!

[*]

[*] adb connection will be reset. restart adb server on desktop and re-login.

$

Checking for ADB...

PLEN='45' PSTATE='device' RETURNTO='s3'

PING ADB Counter '1' out of '45'. ADB State is 'of' expected 'device'

1 of na

PING ADB Counter '2' out of '45'. ADB State is 'of' expected 'device'

2 of na

PING ADB Counter '3' out of '45'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Checking for root...

UID is 'Got Root!'

Checking for needed files...

Flashing misc partition...

Rebooting in to bootloader...

Setting RUU mode...

< waiting for device >

... OKAY

Verifying bootloader status...

hBoot version '2.02.0000'

Version Major '2'

Version Minor '02'

HBOOT AND /PROC/MTD MISMATCH!!

MTDCON 'old' - BOOTV 'na'

Passed to ERRHANDLER

Attempting to dump the recovery log.

---------RECOVERY LOG DUMP BEGIN---------

error: device not found

----------RECOVERY LOG DUMP END----------

------------ AutoRoot.bat End

------------ AutoRoot.bat Begin - Sun 12/12/2010 18:33:36.76

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1'

------------ AutoRoot.bat Begin - Sun 12/12/2010 18:34:10.99

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1'

PING ADB Counter '1' out of '1'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Checking MTD configuration...

dev: size erasesize name

mtd0: 00c00000 00020000 "wimax"

mtd1: 000a0000 00020000 "misc"

mtd2: 00480000 00020000 "recovery"

mtd3: 00300000 00020000 "boot"

mtd4: 15e00000 00020000 "system"

mtd5: 0a000000 00020000 "cache"

mtd6: 1aba0000 00020000 "userdata"

'check.bat mtd' returned 'old'

Checking for root...

UID is 'uid=2000(shell)'

Running exploit...

./data/local/tmp/rageagainstthecage-arm5.bin

$ [*] CVE-2010-EASY Android local root exploit (C) 2010 by 743C

[*] checking NPROC limit ...

[+] RLIMIT_NPROC={3316, 3316}

[*] Searching for adb ...

[+] Found adb as PID 1440

[*] Spawning children. Dont type anything and wait for reset!

[*]

[*] If you like what we are doing you can send us PayPal money to

[*] 7-4-3-C@web.de so we can compensate time, effort and HW costs.

[*] If you are a company and feel like you profit from our work,

[*] we also accept donations > 1000 USD!

[*]

[*] adb connection will be reset. restart adb server on desktop and re-login.

$

Checking for ADB...

PLEN='45' PSTATE='device' RETURNTO='s3'

PING ADB Counter '1' out of '45'. ADB State is 'of' expected 'device'

1 of na

PING ADB Counter '2' out of '45'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Checking for root...

UID is 'Got Root!'

Checking for needed files...

Flashing misc partition...

Rebooting in to bootloader...

Setting RUU mode...

< waiting for device >

... OKAY

Verifying bootloader status...

hBoot version '2.02.0000'

Version Major '2'

Version Minor '02'

HBOOT AND /PROC/MTD MISMATCH!!

MTDCON 'old' - BOOTV 'na'

Passed to ERRHANDLER

Attempting to dump the recovery log.

---------RECOVERY LOG DUMP BEGIN---------

error: device not found

----------RECOVERY LOG DUMP END----------

------------ AutoRoot.bat End

------------ AutoRoot.bat Begin - Sun 12/12/2010 19:16:32.24

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1'

PING ADB Counter '1' out of '1'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Checking MTD configuration...

dev: size erasesize name

mtd0: 00c00000 00020000 "wimax"

mtd1: 000a0000 00020000 "misc"

mtd2: 00480000 00020000 "recovery"

mtd3: 00300000 00020000 "boot"

mtd4: 15e00000 00020000 "system"

mtd5: 0a000000 00020000 "cache"

mtd6: 1aba0000 00020000 "userdata"

'check.bat mtd' returned 'old'

Checking for root...

UID is 'uid=2000(shell)'

Running exploit...

$ ./data/local/tmp/rageagainstthecage-arm5.bin

[*] CVE-2010-EASY Android local root exploit (C) 2010 by 743C

[*] checking NPROC limit ...

[+] RLIMIT_NPROC={3316, 3316}

[*] Searching for adb ...

[+] Found adb as PID 78

[*] Spawning children. Dont type anything and wait for reset!

[*]

[*] If you like what we are doing you can send us PayPal money to

[*] 7-4-3-C@web.de so we can compensate time, effort and HW costs.

[*] If you are a company and feel like you profit from our work,

[*] we also accept donations > 1000 USD!

[*]

[*] adb connection will be reset. restart adb server on desktop and re-login.

$

Checking for ADB...

PLEN='45' PSTATE='device' RETURNTO='s3'

PING ADB Counter '1' out of '45'. ADB State is 'of' expected 'device'

1 of na

PING ADB Counter '2' out of '45'. ADB State is 'of' expected 'device'

2 of na

PING ADB Counter '3' out of '45'. ADB State is 'of' expected 'device'

3 of na

PING ADB Counter '4' out of '45'. ADB State is 'of' expected 'device'

4 of na

PING ADB Counter '5' out of '45'. ADB State is 'of' expected 'device'

5 of na

PING ADB Counter '6' out of '45'. ADB State is 'of' expected 'device'

6 of na

PING ADB Counter '7' out of '45'. ADB State is 'of' expected 'device'

7 of na

PING ADB Counter '8' out of '45'. ADB State is 'of' expected 'device'

8 of na

PING ADB Counter '9' out of '45'. ADB State is 'of' expected 'device'

9 of na

PING ADB Counter '10' out of '45'. ADB State is 'of' expected 'device'

10 of na

PING ADB Counter '11' out of '45'. ADB State is 'of' expected 'device'

11 of na

PING ADB Counter '12' out of '45'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Checking for root...

UID is 'Got Root!'

Checking for needed files...

Flashing misc partition...

Rebooting in to bootloader...

Setting RUU mode...

< waiting for device >

... OKAY

Verifying bootloader status...

hBoot version '2.02.0000'

Version Major '2'

Version Minor '02'

HBOOT AND /PROC/MTD MISMATCH!!

MTDCON 'old' - BOOTV 'na'

Passed to ERRHANDLER

Attempting to dump the recovery log.

---------RECOVERY LOG DUMP BEGIN---------

error: device not found

----------RECOVERY LOG DUMP END----------

------------ AutoRoot.bat End

Heres mine from 4 tries...sorry for the long post....