Database Info

[Completed] [HELP] Phone physically hacked?

Hi,
My phone was recently compromised with a sophisticated RAT. The exploits the RAT used were picked up by CM security and CM said it found.
1. Towel Root Exploit
2. Fake ID Exploit - something to do with exploiting Android certificates.
The thing is I have never rooted the phone or done anything other than a factory reset and purchased it new.
I'm concerned this may have been planted by someone close to me and need information to ensure I am safe in future.
How possible is it that this was carried out physically? the hacker who planted the RAT had physical access to my phone?
There is also other evidence which I can supply which was suggesting my phone had been flashed without my knowledge as well.
Any help would be greatly appreciated.
UPDATE: I just did a factory reset and reinstalled CM and again the exploits were found. How is this possible? Is the malware embedded in my ROM?
-Tim

timmyhall83 said:
Hi,
My phone was recently compromised with a sophisticated RAT. The exploits the RAT used were picked up by CM security and CM said it found.
1. Towel Root Exploit
2. Fake ID Exploit - something to do with exploiting Android certificates.
The thing is I have never rooted the phone or done anything other than a factory reset and purchased it new.
I'm concerned this may have been planted by someone close to me and need information to ensure I am safe in future.
How possible is it that this was carried out physically? the hacker who planted the RAT had physical access to my phone?
There is also other evidence which I can supply which was suggesting my phone had been flashed without my knowledge as well.
Any help would be greatly appreciated.
UPDATE: I just did a factory reset and reinstalled CM and again the exploits were found. How is this possible? Is the malware embedded in my ROM?
-Tim
Click to expand...
Click to collapse
The are false.
Imean look at one. It is how one roots a device
The Fake ID is something else though.
Dont trust Virus warnings. They will detect anything to do with root as an exploit.

Hi,
A lot of what we do here on XDA can get reported as virus and what not... Cause a lot of what do here are hacks/exploits . I would say not to worry, but if you want to ask people that know your device and the CM you are using, I need to know your make and model to point you in the right direction. ?

KJ said:
Hi,
A lot of what we do here on XDA can get reported as virus and what not... Cause a lot of what do here are hacks/exploits . I would say not to worry, but if you want to ask people that know your device and the CM you are using, I need to know your make and model to point you in the right direction. ?
Click to expand...
Click to collapse
I've never done anything XDA related on the device though.
Device: Samsung Galaxy S4 GT-I9506

timmyhall83 said:
I've never done anything XDA related on the device though.
Device: Samsung Galaxy S4 GT-I9506
Click to expand...
Click to collapse
Foe them do anything they would would have needed to have access to your device for an extended period. Don't trust cm security. It is pointless and doesn't do anything really.

Here is a good place to learn and discuss security issues... You could browse through some of these threads or ask about your issue here...
> General discussion > Security Discussion
Some very knowledgeable members are around that section. ?

[Completed] [Q] Verification of understanding regarding root

I'm trying to understand the root process as it currently exists.
Keep in mind that my current device is a Samsung Galaxy Tab S 10.5 model SM-T800. It's a wifi device without cellular capabilities, so it is not through a carrier.
My first Android device was an Asus Transformer. I could get root because there were exploits (particularly regarding PDF if I remember right) that could grant root privileges. Of course, OTA updates would undo it and fix the security hole that allowed it.
Currently, it seems to no longer be a feasible method.
To make sure I'm understanding things correctly, please correct my understanding (or lack of) below.
The current preferred root for most devices is cf-auto-root. It will grant superuser (root) privileges and then flash the stock image from the device manufacturer. Alternatively, you can flash a custom recovery image. Do I understand this correctly?
Assuming that is correct, are OTA updates possible? Will those OTA updates break root?

Hi, thank you for using XDA Assist. It seems you got most of your questions answered here, http://forum.xda-developers.com/gal...f-rom-root-t3112897/post60845695#post60845695 Your device specific forum is the best place to ask your questions as they are the experts on your deivce.
I'm going to close this thread.

[Completed] [Q] Galaxy Note 3 SM-N900W8 Root

Hi all, I'm new in this world, I was just using tasker and start seeing things that need rooted phones to work properly, and then I research and find a lot of new things that you can do with a rooted phone, so I started to research about it, I tried the "easiest way" the 1-click KingRoot, but didn't work.
So, I have been reading a lot of this, but I'm not sure of what file use, I know that I have to download all the drivers of KIES 3, put debugging usb, turn off the reactivate, use ODIN (I don't know what version), know how to put the phone in download mode (I think that's the name) but the problem is whit the rooting file, I don't know the difference of cf-auto-root, CWM, TWRP. I know that CF activate the KNOX, but I have more than one and a half year with my note 3 so I think won't be a problem the voiding warranty issue.
Also, I don't know what's the problem with the locked or unlocked bootloader and how to know that, I read I can put in the dialer the *#1234# and know it with the info, but... well... hahaha I can't, so I put it here:
AP: N900W8UBUBMHG
CP: N900W8UBUBMHG
CSC: N900W8TCEBMHG
I don't know if this helps or not, but I put it just in case:
Kernel: 3.4.0-4992259
Compilation number: LRX21V.N900W8UBU2DOE4
I hope you can help me and sorry for the noob questions, I just don't want an expensive brick... :$

Hi, thank you for using XDA Assist and welcome to the Android world. There's a forum specific to your device here, http://forum.xda-developers.com/galaxy-note-3 They are the experts on your device and should be able to help you. I would suggest you look in the general and Q&A forums. Look for the stickied threads, the ones with the push pins in the left column. Read those. CF-Auto Root just roots your device. TWRP and CWM are custom recoveries, and although they can be used to root your device they can also do many other things. If you have a choice I would recommended twrp, it's been better supported lately.
Good luck on your journey!

Thank you for the answer.
I will check the thread and follow your recommendation about de TWRP.
Regards!

[Q] Finding a way to root from rooted devices?

Hi,
Is it possible to find a way to root from already rooted devices? It may sound weird, but I got a rooted device from one who did not provide how to do it. Since I have another device which I want to root, I hope there is any way to extract some pieces of information.
It is not a typical device with customized bootloader. I can extract some files like hacked system apps but it should be not enough. Any suggestion or advice?
Best,

sartrism said:
Hi,
Is it possible to find a way to root from already rooted devices? It may sound weird, but I got a rooted device from one who did not provide how to do it. Since I have another device which I want to root, I hope there is any way to extract some pieces of information.
It is not a typical device with customized bootloader. I can extract some files like hacked system apps but it should be not enough. Any suggestion or advice?
Best,
Click to expand...
Click to collapse
Are the two devices the same? If not then, no, the other rooted device won't help you.
To find how to root the device you want to root, do a Google search for:
"How to root (your model number)"
I DO NOT PROVIDE HELP IN PM, KEEP IT IN THE THREADS WHERE EVERYONE CAN SHARE

Droidriven said:
Are the two devices the same? If not then, no, the other rooted device won't help you.
To find how to root the device you want to root, do a Google search for:
"How to root (your model number)"
I DO NOT PROVIDE HELP IN PM, KEEP IT IN THE THREADS WHERE EVERYONE CAN SHARE
Click to expand...
Click to collapse
Yes, they are exactly the same. And obviously the reason why I'm asking here is there is no information on Google.
After researching, I'm pretty sure that eMMC hacking is the only probable way that does not depend on a specific/unknown device. As it's been done with Amazon TV here (http://solderwiresandplastic.com/20...the-amazon-firetv-to-achieve-root-privileges/).

sartrism said:
Yes, they are exactly the same. And obviously the reason why I'm asking here is there is no information on Google.
After researching, I'm pretty sure that eMMC hacking is the only probable way that does not depend on a specific/unknown device. As it's been done with Amazon TV here (http://solderwiresandplastic.com/20...the-amazon-firetv-to-achieve-root-privileges/).
Click to expand...
Click to collapse
Careful, the android on TVs and TV sticks/boxes isn't quite the same as android on phones and tablets.
If the other device is rooted and is identical you can try using adb to pull a copy of the system.img from the rooted device. Then use adb to push the rooted system.img to the non rooted device. Or use fastboot to flash the rooted system.img onto the non rooted device.
What is the model number of your non rooted device? Is the rooted device the exact same model number? Or does it have the same device name but different model number? I'll make sure there are no device specific things that you need yo know about that might cause issues.
Rooting by directly interfacing with eMMC is a very extreme method that is very rarely used.
I DO NOT PROVIDE HELP IN PM, KEEP IT IN THE THREADS WHERE EVERYONE CAN SHARE

Droidriven said:
Careful, the android on TVs and TV sticks/boxes isn't quite the same as android on phones and tablets.
If the other device is rooted and is identical you can try using adb to pull a copy of the system.img from the rooted device. Then use adb to push the rooted system.img to the non rooted device. Or use fastboot to flash the rooted system.img onto the non rooted device.
What is the model number of your non rooted device? Is the rooted device the exact same model number? Or does it have the same device name but different model number? I'll make sure there are no device specific things that you need yo know about that might cause issues.
Rooting by directly interfacing with eMMC is a very extreme method that is very rarely used.
I DO NOT PROVIDE HELP IN PM, KEEP IT IN THE THREADS WHERE EVERYONE CAN SHARE
Click to expand...
Click to collapse
Thanks for the reply. But I'm not that ignorant to try exactly the same method for TV to other devices or to be confused with model numbers or so. Usual rooting methods are not applicable in this case, for even USB communication is blocked intentionally for security reasons. If I could use adb to connect to the device, I would not ask this kind of question.
I know hardware hacking is very extreme, and devices whose rooting method is unknown usually require such extreme methods. Of course, I won't try to modify eMMC myself because it's too risky. On the other hand, it looks quite easy and promising compared to unusual rooting methods, e. g. hacking firmware update routine to penetrate system files.

Need help with rooting a phone. (ALCATEL 3L MODEL: 5029Y)

Please do move this to the correct thread, as I am new here.
So, as I stated in the title, I need help rooting this phone. I am familiar with rooting, flashing and all of that. But there is a huge problem with this phone, as I am unable to find the stock rom of it anywhere on the internet. There are no guides, either. It's like this phone doesn't even exist.
Another thing is, that this phone was modified in my country to be called "A1 Alpha 20", it's the basic version, not the Plus one. I'm pretty sure there are guides for the Plus one... But the name/model is Alcatel 3L (2020) 5029Y. The phones are the same, I'm pretty sure the Alcatel 3L rom would work fine on it, too. They have the same specs as well.
It's a pretty solid phone, with good specs, not sure why nobody is talking about it. Even my older phone, Samsung J5, has a ton of guides, and of course, I installed TWRP on it and rooted it a year ago. It's working good, even to this day.
So, I'm asking for your help here, I need tips on how to root this phone. I want to know if it's possible pulling the stock firmware out of it, or just rooting it without TWRP? I can't find TWRP for it either, I'm afraid there is nothing I will be able to do for now. I have access to ADB tools and a PC, if I can maybe do something with these. I enabled OEM unlocking without having to format which means that my bootloader was unlocked? If so, could that make pulling stock images easier???
Please help me out. Thank you. For any additional information (model, build number, all info that I can pull out using applications and such) just let me know and I will tell you.

To add root functionality to Android all you have to do is to replace existing ( restricted ) Toybox binary by an unrestricted version, like Toybox 0.8.5.
Index of /toybox/bin
landley.net

jwoegerbauer said:
To add root functionality to Android all you have to do is to replace existing ( restricted ) Toybox binary by an unrestricted version, like Toybox 0.8.5.
Index of /toybox/bin
landley.net
Click to expand...
Click to collapse
Hello, thanks for answering.
How may I do that? Using ADB? This is the first time I am hearing about Toybox.

.

Hey can anyone help me here i have this phone alcatel 3L but it is in demo mode and idk how to remove it