[APP][Root][4.4 & 6+ & 7.0+ & 8.0.0] Tera - A cloud file system for unlimited storage - Android Apps and Games

Tera is a cloud file system with unlimited storage size by extending the storage blocks to the cloud.
We recently released Tera ROM for Nexus 5x Post Here. However, it requires that you wipe the phone in order to install it. Not to mention that it works only on Nexus 5X.
After some serious effort, we have successfully crafted a new version that works on most Android phones without having to wipe them! All you need is root access. It is easy to install and uninstall, without the need of backing up your data, or the fear of destroying your existing files.
Changelog
2017.09.27 First release.
2017.10.03
Make phone permission is not necessary.
Support click to install in windows bat file.
2017.10.13
Add debug log for support new devices.
Improve stability for install script.
Support Android 7.0
2017.10.18
Support Android 6.0.X
solve problem with `adb push` in Windows
2017.11.02
Change adb push to push one file at once, some device don't support multiple files.
Support 32bit device.
2017.11.08
Repacking 32-bit version with correct share library
2017.11.14
Fix command issue in specific ROM
Tera-root has been tested on these devices:
Nexus 5X Android 8.0.0
Nexus 5X Android 7.1.2
Nexus 5X Android 7.1
Nexus 5X Android 7.0.0
Nexus 5X Android 6.0.1
Nexus 5X Android 6.0.0
Nexus7 Android 4.4.4
Nexus7 Android 4.4
Nextbit Robin Android 7.1.1
Samsung SM-T211 Android 4.4.2
Feature
Root-tera differs from the original LG Nexus 5X version Post Here in the following ways:
Root-tera uses a separate location (see below) to store its data so it won’t affect your existing data. Depending on the Android version, the location may be:
/sdcard/MY-TERA
/MY-TERA
/storage/MY-TERA
This directory can be accessed by any app.
Original functions that still work the same way:
Tera extends your phone storage to the cloud and makes your local storage look as big as your cloud storage.
Tera can use Google drive or Openstack Swift as backend storage. Just choose the one you want from the Tera app, and follow the setup instructions.
Guide
Reminders:
Grant the permission requests when they are shown.
If something’s not working, check the permission setting of SuperSu and the Tera app.
Installation steps:
Make sure the device is ROOTed and has SuperSu by TWRP installed.
Connect to the device through adb.
Download the Root-tera package and unzip.
Package for 7.1+ & 8.0.0 64 bit Link Here
Package for 7.1+ & 8.0.0 32 bit Link Here
Package for 6.0.x & 7.0.0 64 bit Link Here
Package for 6.0.x & 7.0.0 32 bit Link Here
Package for 4.4.X 32 bit Link Here
In root-tera directory, execute ./setup.sh install (Linux/Mac) or setup.bat install (Windows).
Grant permissions in SuperSU and wait for installation to finish. (In some cases it might fail on the first attempt. Don’t worry, just uninstall and then try install again.)
Open Tera app and grant permsssions again.
If you’re using Google Drive as your backend, you’ll be taken to a browser window and asked to log in to your Google Drive account.
Login and enjoy. Any app can use /sdcard/MY-TERA to store anything you like.
If you can’t see MY-TERA directory through MTP, go to Settings - Apps, in the “...” drop down menu on the top-right corner, select “Show System”, scroll down to select “Media Storage”, tap “Storage", then tap “CLEAR DATA” to clear the SD card directory cache. Reboot the device and wait for the system to rebuild the SD card directory cache. It may take a few minutes.
Uninstallation steps:
All data in /sdcard/MY-TERA will be DELETED, in the device and in the cloud.
Connect to the device through adb.
In root-tera directory, execute ./setup.sh uninstall (Linux/Mac) or setup.bat uninstall (Windows).
That's all.
The data on the backend are still there and need to be removed manually. If you reinstall Root-tera, you will see a fresh start on your device.
XDA:DevDB Information
Tera-AllDevice, App for all devices (see above for details)
Contributors
fineaisa
Version Information
Status: Beta
Current Beta Version: 0.11.4
Beta Release Date: 2017-11-13
Created 2017-09-27
Last Updated 2017-11-13

Reserved
I will try this when i get back to home!
btw, you said SuperSU but i use Magisk will it get Root access (i mean support Magisk)??
Thanks for this anyway
@fineaisa
I am not able to install sir
Device: Redmi Note 3 (SD kenzo)
ROM: RR Final Nougat 7.1.2
i think my device is not supported by your great tool :crying:

xN00Bx said:
Reserved
I will try this when i get back to home!
btw, you said SuperSU but i use Magisk will it get Root access (i mean support Magisk)??
Thanks for this anyway
@fineaisa
I am not able to install sir
Device: Redmi Note 3 (SD kenzo)
ROM: RR Final Nougat 7.1.2
i think my device is not supported by your great tool :crying:
Click to expand...
Click to collapse
From you screenshot, that operation is not support with direct click it.
You have to open a cmd and go to root-tera dir and type `setup.bat install`
In Root-Tera dir's address and type cmd
C:\root-tera-0.10.1-7+>setup.bat install
I think we will make setup.bat more simple in next release
Thank for your feedback,

My PC Is not working.. Can't I do this from my android device?

vraciu' said:
My PC Is not working.. Can't I do this from my android device?
Click to expand...
Click to collapse
Can you take a screenshot for your situation
and what operations you do? what kind of OS?

fineaisa said:
Can you take a screenshot for your situation
and what operations you do? what kind of OS?
Click to expand...
Click to collapse
I was just asking If I can install this without a pc. Without running that bat file from pc

vraciu' said:
I was just asking If I can install this without a pc. Without running that bat file from pc
Click to expand...
Click to collapse
Sorry my fault.
You can't install without a pc/mac and android device bridge

fineaisa said:
Sorry my fault.
You can't install without a pc/mac and android device bridge
Click to expand...
Click to collapse
I've seen the sh file and I saw that the script is pushing some files using ADB.. Can't I move those files manually?

Welp, nothing. It just fails

vraciu' said:
I've seen the sh file and I saw that the script is pushing some files using ADB.. Can't I move those files manually?
Click to expand...
Click to collapse
Yes, you can! but be careful, if you trying on a phone with your data.
Our script is tested which not affect your data and make installation as easy as possible.

xxxCrimeDogxxx said:
Welp, nothing. It just fails
Click to expand...
Click to collapse
What kind of device and ROM ?

fineaisa said:
What kind of device and ROM ?
Click to expand...
Click to collapse
Samsung Galaxy A800i, AOSP

Plz input install or uninstall:install
install
uid=0(root) gid=0(root) groups=0(root) context=u:r:su:s0
failed to copy 'files/hcfs' to 'files/hcfsapid': secure_mkdirs failed: No such f
ile or directory
Tera Install Fail
Press any key to exit...
Sony Xperia XA
Android 7.0

xxxCrimeDogxxx said:
Samsung Galaxy A800i, AOSP
Click to expand...
Click to collapse
Sorry, I forget to ask android version...
But AOSP ROM we may build it to try in emulator.
btw, this release 0.10.2 not support Android 7.0 yet.

vraciu' said:
Plz input install or uninstall:install
install
uid=0(root) gid=0(root) groups=0(root) context=u:r:su:s0
failed to copy 'files/hcfs' to 'files/hcfsapid': secure_mkdirs failed: No such f
ile or directory
Tera Install Fail
Press any key to exit...
Sony Xperia XA
Android 7.0
Click to expand...
Click to collapse
Sorry this version not support Android 7.0
but we are woking on that
next release will support!!!

fineaisa said:
Sorry, I forget to ask android version...
But AOSP ROM we may build it to try in emulator.
btw, this release 0.10.2 not support Android 7.0 yet.
Click to expand...
Click to collapse
No problem
Also for my other phone when will you release for lollipop and marshmallow

uid=0(root) gid=0(root) groups=0(root) context=u:r:su:s0
failed to copy 'files/hcfs' to 'files/hcfsapid': secure_mkdirs failed: No such file or directory
Tera Install Fail
Press any key to exit...
I have a Nexus 5x with Android 7.1.2, I tried with windows and Linux, in both I have the same fail

fineaisa said:
Sorry this version not support Android 7.0
but we are woking on that
next release will support!!!
Click to expand...
Click to collapse
Oh, no problem. I didn't read the title so I didn't saw that is not supported

Couple of Suggestions
Failed on my HTC M8 running lineageOS 14.1, but I was able to play around with your shell scripts and here are my thoughts
- not sure if you needed to keep the directory structure or not, but I changed your setup.bat to push the files in the 'files' directory on sdcard. So the directory structure is the same.
- on my OS, /sdcard does not allow executing files, so I changed your install part of setup.bat to copy all the files to /data/local/tera, so my setup.bat now has:
:START_UP
adb shell su -c "rm -rf /data/local/tera"
adb shell su -c "(cd /sdcard ;tar cf - tera |(cd /data/local; tar xvf -))"
adb shell su -c "find /data/local/tera -exec chmod 777 {} \;"
adb shell su -c "/data/local/tera/tera %UserInput%"
I also edited the tera shell script to reflect this change. All works except now the hcfsconf reports: "/data/local/tera/tera[407]: /system/hcfs/hcfsconf: not executable: 64-bit ELF file ". neither of the versions you have posted work. If I try and just run it manually I get "sh: ./hcfsconf: not executable: 64-bit ELF file
"
Looking forward to the next version
-brad

Melfloc said:
uid=0(root) gid=0(root) groups=0(root) context=u:r:su:s0
failed to copy 'files/hcfs' to 'files/hcfsapid': secure_mkdirs failed: No such file or directory
Tera Install Fail
Press any key to exit...
I have a Nexus 5x with Android 7.1.2, I tried with windows and Linux, in both I have the same fail
Click to expand...
Click to collapse
wow, Is there different model for nexus 5x?
what is build number for your device?

Related

[Emulator][Root][How-To] BlueStacks 0.9.x + pre-rooted 0.9.30.4239 image

This How-To briefly describes a way to manually root recent BlueStacks without any third-party apps. All you need is a linux distro (you can use VirtualBox virtual machine) and SuperSU CWM flashable. I won't go into much details, some little linux know-how is needed, but you can always google for what you don't understand, since the required steps are fairly simple. I also share a pre-rooted BlueStacks 0.9.30.4239 image for the lazy ones
This How-To assumes you already have an installed BlueStacks you wish to root, but make sure it isn't running. So, let's get started
1. Copy over UPDATE-SuperSU-v2.46.zip and BlueStacks Root.fs to your linux box: in Windows it is typically located at "C:\ProgramData\BlueStacks\Android\Root.fs". If you're using VirtualBox, I suggest you use a shared folder to copy the image over to the guest linux OS.
2. As root, unpack UPDATE-SuperSU-v2.46.zip and mount Root.fs as a loop device.
3. Now we need to copy over (as root) some of the extracted files to the mounted Root.fs:
arm/su --> android/system/xbin/su
arm/su --> android/system/xbin/daemonsu
arm/supolicy --> android/system/xbin/supolicy
arm/libsupol.so --> android/system/lib/libsupol.so
common/Superuser.apk --> android/system/app/Superuser.apk
4. Since there's no init.d structure in BlueStacks, we need to edit android/system/etc/init.sh: at the buttom of the file find these lines:
Code:
init|"")
do_init
;;
esac
and insert one line after 'do_init':
Code:
init|"")
do_init
/system/xbin/daemonsu --auto-daemon &
;;
esac
5. Unmount the loop device and copy the modified Root.fs over to your BlueStacks Android dir (typically, "C:\ProgramData\BlueStacks\Android" in Windows). You may want to make a backup of the original file just in case.
6. Start BlueStacks and launch SuperSU via Play Store: it will prompt for upgrading su binary --- choose the normal way and restart BluseStacks upon completion.
7. That's it, you're rooted! Now you may wish to install a proper launcher (like Nova Launcher) if you have not done so already.
Now, as promised, you can grab pre-rooted BlueStacks 0.9.30.4239 Root.fs from here:
https://www.mediafire.com/folder/bc7hjf0a8lgnq/BlueStacks_Root
Stop BlueStacks, copy Root.fs over to your BlueStacks Android dir, and start BlueStacks. In case your current version is incompatible with the image, try BlueStacks-ThinInstaller_0.9.30.4239.exe from the link above. I'm not sure whether this ThinInstaller will download the proper data when newer version is released, so no guarantees here, you may still need to do it manually at some point in the future unless I maintain the Root.fs actual.
200+ people downloaded rooted image already, and not a single response yet. Some feedback would be appreciated, you know
Serkenar said:
200+ people downloaded rooted image already, and not a single response yet. Some feedback would be appreciated, you know
Click to expand...
Click to collapse
Thanks, worked perfect for me
thanks replace root.fs works for me, was using 9.27.5408
mac-duff said:
Thanks, worked perfect for me
Click to expand...
Click to collapse
netsee said:
thanks replace root.fs works for me, was using 9.27.5408
Click to expand...
Click to collapse
Great, I'm glad that it works. Thanks for the feedback!
link for zip is broken

[Meizu]-[FLyme Os] Install rom international for All devices

Sorry English my "BAD"
Ground facebook: https://www.facebook.com/groups/1697660883795443/
Guide will support install rom international for Meizu MX4 , MX5 , MX4 pro Version A , U , C ......and more devices Meizu
Advantages: rather safe method, no Chinese applications, default Google Play Services, more supported languages i-rom in the near future.
Disadvantage: OTA-update not possible, (but you can always update manually).
Note: Here's how to do safe , You do not have to worry
Request:
+Rooted
+Busybox
+Driver ADB for PC because run you need command ADB
How to instal driver ADB for Meizu Devices
Note:Because English not good , pls see Guide Tks to @abaggie Meizufan
Step 1 : Enable Usb debug and Allow mock locations
Step 2: connect devices PC and choose connect CD/Rom
You can see CD driver , you install driver adb equal file in folder Usb driver
Step 3: at c: \ Users \ your name \ .android \
Creat or edit file adb_usb.ini
add a line
Code:
0x2a45
Step 4: check driver
Code:
adb kill-sever
Code:
adb devices
if cmd current "offline" you need install again driver
Step 4: download and copy file rom .img to storage
Step 5: run CMD and type command:
Code:
adb shell
Code:
su
Code:
dd if=/sdcard/system-i.img of=/dev/block/platform/xxxxx/by-name/system
Note : xxxxx leaves partition system
example : MX4pro (cpu exynos) : /dev/block/platform/15540000.dwmmc0/by-name/system
M2 note,mx4,m1note (cpu MTK) : /dev/block/platform/mtk-msdc.0/by-name/system
MX5:/dev/block/mmcblk0p18 or you can use dev/block/platform/mtk-msdc.0/by-name/system
We expect the end of the command (about 5 min . ) . After the download of the image will be prompted to enter a new team in the form of the sign '#' ;
Due to the fact that the section is replaced by a system hang smartphone . This is normal. Restart it long hold the power button , and wait for download smartphone. If your smartphone is not loaded within 15 minutes , you need to reset the settings of recovery stock ( volume down button + power button ) .
Step 6 : Now you need to reset your smartphone to factory settings. Settings - About phone - memory - factory reset . Put two checkboxes, and click " Start cleaning " .
Or reboot recovery stock and clear data
DOWNLOAD
Rom 4.5.4i for MX4 Pro: google driver
Rom 4.5.4i MX4pro use TWRP flash rom:Google driver
Rom 4.5.5i for MX4pro:Google driver
Meizu pro5 stock mod version I
4.5.4.2i: Download
M1 note: Download
MX5:Google driver
FW 4.5.2.7i Stable: Download
M2 note : Google driver
FW 4.5.3i :Link Mega
MX4 folder download: google driver
Folder run command ADB:Google driver
Meizu M1 note :Google driver
==================================================
Update tools One click auto converter system support creat system.img for meizu devices
Link download : Driver google
How to use:
Step1: Copy system.new.dat and system.transfer.list to folder "in"
Step2: Run System-conVERTER.dat
===============================
PS: Get link download max speed vietnam host Fshare: get link
Good idea!
update MX4 link rom
doesn't work... Says Permission denied.
this is the string:
[email protected]:/ $ su
su
enter main
start command :am start -a android.intent.action.MAIN -n com.android.settings/co
m.android.settings.root.RootRequestActivity --ei uid 2000 --ei pid 6904 > /dev/n
ull
[email protected]:/ # dd if=/sdcard/system-i.img of=/dev/block/platform/15540000.dwmm
c0/by-name/system
dcard/system-i.img of=/dev/block/platform/15540000.dwmmc0/by-name/system <
dd: /sdcard/system-i.img: Permission denied
I solved with the terminal emulator
ucb83 said:
I solved with the terminal emulator
Click to expand...
Click to collapse
you need flash on PC
no terminal emulator
Sent from my MX4 Pro using Tapatalk
I succeeded even with the terminal emulator. I finally managed to install via PC, great job, everything works.
Hum great... seem good new....
Envoyé de mon X98 Air 3G(C8J7) en utilisant Tapatalk
i will update rom version I use TWRP flash for mx4pro
Sent from my MX4 Pro using Tapatalk
what ROM? I don't understand how to do after the end of the command. What must i write? "#"?
TARAS88 said:
what ROM? I don't understand how to do after the end of the command. What must i write? "#"?
Click to expand...
Click to collapse
This is what i do but after when i see the sharp i reboot the smartphone and i see only the recovery.
Very great method...it worke great! Only issue is that I do not see Contacts for my google account....Any clue?...
THANKS IN ADVANCE!
popo72 said:
Very great method...it worke great! Only issue is that I do not see Contacts for my google account....Any clue?...
THANKS IN ADVANCE!
Click to expand...
Click to collapse
hi
you can install contacts google ...use file apk
i will update file apk app center
Sent from my MX4 Pro using Tapatalk
Really thanks....
What is the difference beentween the international version and the Chinese version? I'm using my phone in Norway, will this rom support Norwegian?
And if this rom is installed, will ota updates still work?
Thanks
I get "Permission denied" when trying to enter the last command in adb.
[email protected]:/ # dd if=/sdcard/system-i.img
c0/by-name/system
dcard/system-i.img of=/dev/block/platform/15
dd: /sdcard/system-i.img: Permission denied
HabueN said:
I get "Permission denied" when trying to enter the last command in adb.
[email protected]:/ # dd if=/sdcard/system-i.img
c0/by-name/system
dcard/system-i.img of=/dev/block/platform/15
dd: /sdcard/system-i.img: Permission denied
Click to expand...
Click to collapse
Install supersu or try with terminal emulator or try with twrp method.
ucb83 said:
Install supersu or try with terminal emulator or try with twrp method.
Click to expand...
Click to collapse
Will do that. But is there any advantages of installing the I ROM instead of A ROM?
Thanks for answers
stuck at step 4.
where i can find rom.img for meizu m2 note.?
only can find update.zip for international version
---------- Post added at 09:37 AM ---------- Previous post was at 09:27 AM ----------
ok found it. thanks
penyapu79 said:
stuck at step 4.
where i can find rom.img for meizu m2 note.?
only can find update.zip for international version
---------- Post added at 09:37 AM ---------- Previous post was at 09:27 AM ----------
ok found it. thanks
Click to expand...
Click to collapse
link download #1
Gửi từ MX4 Pro của tôi bằng cách sử dụng Tapatalk

Root Remix OS for PC

This guide is to root Remix OS for PC
You will need Ubuntu for Rooting (You can download and run it in live CD)
If you are experienced with linux systems don't read whats written in bracket
1. Download and Extract RemixRoot.zip
2. Copy system.img from your pendrive or hdd wherever you have installed Remix Os to this folder (ie RemixRoot folder it should be alongside Readme.txt)
3. Open Terminal (Ctrl+Alt+T)
4. Type
Code:
sudo -i
5. Enter your password (If you are running in live cd then no password)
6. Change directory to RootRemix folder (Goto tmp folder, right click and goto properties and copy location, this is your <dir> replace it in command below )
Code:
cd <dir>
7. If you did it right next line of terminal will end with RemixRoot# followed by blinking cursor
8. Now run rootx.sh script by typing
Code:
sh rootx.sh
9. If everything goes right there wont be any error message and you will get a root.img in your RemixRoot folder
10. Rename it to system.img and copy to your pendrive/hdd replacing previous system.img
11. Reboot and go to RemixOS and update SuperSU binaries
12. That's it! you are now rooted
Thanks to Chainfire & hackarchive
I tried it but i got no system.img, i got r/w access to system (choosen by install) so i tried to symlink it to my system directory and commented out all image mounted related things from script and then tried it.
but after that i cannot boot android anymore, i think the problem is app_process linking to daemonsu, since i set back to original it boots like normal but no superuser access. SuperSU said theres is no superuser installed.
Any suggestion?
Silly question but will I lose root access if I update to the newest version by flashing the new image over the top?
Yes a silly question.... Deserves a silly answer. It will still be underneath, but good luck trying to retrace it!
any other method for rooting, without using ubuntu?
#tested with ubuntu live, and it works like a charms. Thank you..
Sent from my C46G using XDA Premium 4 mobile app
ninharp said:
I tried it but i got no system.img, i got r/w access to system (choosen by install) so i tried to symlink it to my system directory and commented out all image mounted related things from script and then tried it.
but after that i cannot boot android anymore, i think the problem is app_process linking to daemonsu, since i set back to original it boots like normal but no superuser access. SuperSU said theres is no superuser installed.
Any suggestion?
Click to expand...
Click to collapse
same problem here.
Hope same other method can solved
I modified the original script to work with the system folder installation and i removed all app_processX dependend things from script (dunno if it affects the root in any way, cannot find any issue by now) Read the Readme.txt for further installation instructions. The link you find on the reddit sub that GoPal has posted! I cannot post links right now.
Try this
kretex said:
Hope same other method can solved
Click to expand...
Click to collapse
ninharp said:
I tried it but i got no system.img, i got r/w access to system (choosen by install) so i tried to symlink it to my system directory and commented out all image mounted related things from script and then tried it.
but after that i cannot boot android anymore, i think the problem is app_process linking to daemonsu, since i set back to original it boots like normal but no superuser access. SuperSU said theres is no superuser installed.
Any suggestion?
Click to expand...
Click to collapse
You will get root.img file you will have to rename it to system.img
masdeco said:
same problem here.
Click to expand...
Click to collapse
Me too [emoji25]
Envoyé de mon E5333 en utilisant Tapatalk
I've just installed RemixOS 2.0 onto a partition on my Lenovo X200T. I followed the instructions and all was good until I tried to run SuperSU. When it tried to update via the normal method the install failed and asked for a reboot. Any suggestions.
ninharp said:
I modified the original script to work with the system folder installation and i removed all app_processX dependend things from script (dunno if it affects the root in any way, cannot find any issue by now) Read the Readme.txt for further installation instructions. The link you find on the reddit sub that GoPal has posted! I cannot post links right now.
Try this
Click to expand...
Click to collapse
the answer is replace the system folder. this is my methode :
1. copy the system img from the extracted remix iso to somewhere
2. then run the script
3. unpack the system img that already rooted and copy all the content to the system folder of the remix (replace)
4. done. Remix os rooted.
Guys, I installed Remix to ext4 partition (in order to use all free space), so there's no "system.img" on it (but there's "system" folder). How to modify the script or to root Remix other way?
masdeco, thanks for the idea! How do you unpack img file, btw?
4ezahernya said:
Guys, I installed Remix to ext4 partition (in order to use all free space), so there's no "system.img" on it (but there's "system" folder). How to modify the script or to root Remix other way?
masdeco, thanks for the idea! How do you unpack img file, btw?
Click to expand...
Click to collapse
after root the system img then mount it, copy all the content to the system folder of your remix.
since I am a linux user so I use this command :
mount -o loop system.img tmp
this is so cool cool
Works Lenovo Yoga 2 11
Installed to a partition on my HD:
Downloaded RemixOS iso
extracted contents of iso
created temp, data and system folders
ran this tool to root the system.img (now root.img)
renamed root.img back to system.img
mounted system.img to temp folder
copied contents of temp folder to system folder
added entry in grub
now I am triple booting Windows, Linux and RemixOS 2.0 Android with ROOT
Thank You!!!
here is a xdelta3 for patching system.img for those using Remix OS 2 from a USB stick and run windows
GizmoTheGreen said:
here is a xdelta3 for patching system.img for those using Remix OS 2 from a USB stick and run windows
Click to expand...
Click to collapse
can you please explain its usage?
the_poolee said:
can you please explain its usage?
Click to expand...
Click to collapse
me too!
Please
the_poolee said:
can you please explain its usage?
Click to expand...
Click to collapse
dariett said:
me too!
Please
Click to expand...
Click to collapse
it shouldn't be too hard to figure out, put the files in your folder of choice with the system.img from your usb stick, run the batfile. it should create a file named rooted system image, now just replace system.img on your usb stick with that and run...
ofcourse I am assuming your system.img is identical to the one I had, which it should be if it was the 2.0 dev preview which is the only thing you can get today, right?

[ROOT] Universal (temporal) root tool for dirtycow-capable Android M devices

Hi,
I've developed an universal & stable temporal root tool for "dirtycow-capable" Android M (and N?), i.e., without the 2016-11-06 patch.
It bypasses selinux via a vdso backdoor inside the init process which is injected by a memory-only dirtycow exploit.
This approach has the following advantages:
Memory-only: does not modify the filesystem
Scalable: easy to add new kernel and/or new devices
Stable: does not affect stability of your device
Reversible: the backdoor is cleared immediately after the root shell ends, which means no reboot is required after usage
Please use version v0.1.1 instead of v0.1 which has a severe bug!
Attention:
By "SELinux bypass" I mean the payload will run in init domian even if SELinux is in enforcing mode, however, a patch to sepolicy is still needed for making init domain unconfined. Usually this means a modified boot image is required.
Details, releases, usage and the source code is available at Github.
Maybe I'll turn it into a SuperSU installer in the future. Donations are welcome.
XDA:DevDB Information
VIKIROOT, Tool/Utility for all devices (see above for details)
Contributors
hyln9
Source Code: https://github.com/hyln9/VIKIROOT
Version Information
Status: Testing
Created 2017-01-20
Last Updated 2017-01-21
Hi, I am working on the LG Tribute HD model LGLS676 and we are looking for an exploit for MM 6.0.1 build MXB48T. is it possible to create a 32-bit version of this exploit? It's exactly what we need right now for a method to gain root as not even temp is not even close to possible, lg has this one airtight. I'm running Ubuntu 16.04.01 64 bit and can help test if needed on my device. Thanks in advance for any help you can or cannot provide ?
Sands207 said:
Hi, I am working on the LG Tribute HD model LGLS676 and we are looking for an exploit for MM 6.0.1 build MXB48T. is it possible to create a 32-bit version of this exploit? It's exactly what we need right now for a method to gain root as not even temp is not even close to possible, lg has this one airtight. I'm running Ubuntu 16.04.01 64 bit and can help test if needed on my device. Thanks in advance for any help you can or cannot provide
Click to expand...
Click to collapse
Thanks for your reply.
Unfortunately, 32-bit vDSO support is not available for Android currently.
hyln9 said:
Thanks for your reply.
Unfortunately, 32-bit vDSO support is not available for Android currently.
Click to expand...
Click to collapse
Could we use a different backdoor/exploit for x86 devices?
AptLogic said:
Could we use a different backdoor/exploit for x86 devices?
Click to expand...
Click to collapse
Great idea, I'll have a try in the emulator.
Hello and thank you for this!
I am stuck and need your help here please... I'm on an LG V10 (H960A) mm, and I think I followed the instructions on GitHub correctly:
1. Extracted the "exploit" binary
2. adb push /data/local/tmp
3. adb shell (cd to /data/local/tmp and made "exploit" executable)
4. Executed the "exploit"
and now I am stuck in "waiting for reverse connect shell". Turning device on/off, toggling Bluetooth etc does nothing... How should I proceed? Thanks in advance!
ftaios said:
Hello and thank you for this!
I am stuck and need your help here please... I'm on an LG V10 (H960A) mm, and I think I followed the instructions on GitHub correctly:
1. Extracted the "exploit" binary
2. adb push /data/local/tmp
3. adb shell (cd to /data/local/tmp and made "exploit" executable)
4. Executed the "exploit"
and now I am stuck in "waiting for reverse connect shell". Turning device on/off, toggling Bluetooth etc does nothing... How should I proceed? Thanks in advance!
Click to expand...
Click to collapse
A debug version was added to the download page.
Would you please run it as before and send me the two generated debug info file "vdso_orig.so" and "vdso_patched.so" to me? They are just dump of some part of kernel and don't contain any personal information.
My e-mail address is: hyln9$live.cn (replace $ with @)
Thanks!
@hyln9 how goes the looking for a 32bit exploit? I'm available to test any developments that have been made, using an AT&T Galaxy S5 running Android 5.0 ((I can upgrade to 5.1.1 or 6.0 if needed)
(Try exploiting wpa_supplicant )
hyln9 said:
A debug version was added to the download page.
Would you please run it as before and send me the two generated debug info file "vdso_orig.so" and "vdso_patched.so" to me? They are just dump of some part of kernel and don't contain any personal information.
My e-mail address is: hyln9$live.cn (replace $ with @)
Thanks!
Click to expand...
Click to collapse
Just sent them to you...
hyln9 said:
A debug version was added to the download page.
Would you please run it as before and send me the two generated debug info file "vdso_orig.so" and "vdso_patched.so" to me? They are just dump of some part of kernel and don't contain any personal information.
My e-mail address is: hyln9$live.cn (replace $ with @)
Thanks!
Click to expand...
Click to collapse
I also sent!!
Is there any way this can with for the at&t lg g5 h820 I believe. I hope so that is the only thing I hate with this phone. No root. So boring.
What port should we be using? When I use the non-debug version it hangs waiting for the reverse connection... using the debug version it dies before even creating a log file it says: "Internal error: unknown kernel." I'm running an AT&T G5 (H820) without the latest patches...
rvyhmeister said:
What port should we be using? When I use the non-debug version it hangs waiting for the reverse connection... using the debug version it dies before even creating a log file it says: "Internal error: unknown kernel." I'm running an AT&T G5 (H820) without the latest patches...
Click to expand...
Click to collapse
did you reboot phone?
and maybe you don't get error.
Not executable 64 bit elf file?
jcpowell said:
Not executable 64 bit elf file?
Click to expand...
Click to collapse
That means you're trying to run this 64 bit exploit on a 32 bit android system. The exploit doesn't work on 32 bit because 32bit systems don't have vdso. I'm working on a different exploit and I think this dev is too but I don't expect much out of my tests since it's mostly device specific.
iptr9 said:
did you reboot phone?
and maybe you don't get error.
Click to expand...
Click to collapse
Rebooted... running the debug
Now I get this
Syscall error: bind at line 392 with code 13.
No files are created... what port should I tell it? Thanks!
rvyhmeister said:
Rebooted... running the debug
Now I get this
Syscall error: bind at line 392 with code 13.
No files are created... what port should I tell it? Thanks!
Click to expand...
Click to collapse
maybe you have to cd into /data/local/tmp
and then ./exploit
iptr9 said:
maybe you have to cd into /data/local/tmp
and then ./exploit
Click to expand...
Click to collapse
I've done that... the interesting thing is that if I run simply
./exploit
it replies
CVE-2016-5195 POC FOR ANDROID 6.0.1 MARSHMALLOW
Usage:
./exploit port: use local terminal.
./exploit ip port: use remote terminal.
If I enter any number, it then fails...
rvyhmeister said:
I've done that... the interesting thing is that if I run simply
./exploit
it replies
CVE-2016-5195 POC FOR ANDROID 6.0.1 MARSHMALLOW
Usage:
./exploit port: use local terminal.
./exploit ip port: use remote terminal.
If I enter any number, it then fails...
Click to expand...
Click to collapse
try a port above 1024
saspipi said:
try a port above 1024
Click to expand...
Click to collapse
thanks.... it starts fine.... but then hangs waiting for the reverse shell to connect.... I've got the zip with the two debug files that I'm attaching

[GUIDE]How to install Bromite SystemWebView without Magisk (Android 12+ included)

This has not been tested on any other version other than Android 12.1. If you have issues please report them here or open an issue on GitHub.
I just upgraded to LineageOS 19 from 18.1 and as usual I want to apply my own modifications on top of it but the NanoDroid script that I previously used doesn't seem to work on 19. I couldn't find an answer neither on r/LineageOS, r/fossdroid or even XDA so I wrote a way to install Bromite SystemWebView in a way that's a lot more elegant and doesn't need Magisk or root.
Method 1 (preferred):
Download the flashable package and install it in recovery mode either by placing it on the SD card or by sideloading, then reboot:
Bash:
adb sideload BromiteSystemWebViewOverlay.zip
Download the latest Bromite SystemWebView release and install it as you would a regular app.
Navigate to Settings > Developer options > WebView implementation and select Bromite SystemWebView.
Method 2 (legacy):
Enable Rooted debugging by navigating to Settings > Developer options > Rooted debugging.
Connect your phone to your PC and type
Bash:
adb root
Mount the vendor folder:
Bash:
adb shell mount -o rw,remount /vendor
Copy the package downloaded from here to the overlay directory:
Bash:
adb push treble-overlay-bromite-webview.apk /vendor/overlay
Mount the system as read-write:
Bash:
adb shell mount -o rw,remount /
Copy the OTA survival script to the appropriate location:
Bash:
adb push 99-bromite-webview.sh /system/addon.d
Make the script executable:
Bash:
adb shell chmod 755 /system/addon.d/99-bromite-webview.sh
Reboot the device:
Bash:
adb reboot
Download the latest Bromite SystemWebView release and install it as you would a regular app.
Navigate to Settings > Developer options > WebView implementation and select Bromite SystemWebView.
For a more in-depth explanation check the GitHub repository.
It is worth mentioning that after installing Bromite SystemWebView, developers will not provide any support when their banking applications are not functioning properly. Proven in practice.
ze7zez said:
It is worth mentioning that after installing Bromite SystemWebView, developers will not provide any support when their banking applications are not functioning properly. Proven in practice.
Click to expand...
Click to collapse
I never encountered a mobile banking app that uses WebView (at least for the main functionality), but your mention is most welcome.
I've been debloating and degoogling and old HTC 10 running android 8. I've been wanting to get bromite installed because chrome is installed as the webview. I'm rooted, but unfortunately the webview manager magisk module fails to install.
I just found this thread and would love to give this approach a try.
I have the /system/addon.d directory. I have /vendor but not /vendor/overlay. I have /mnt but not /mnt/system. The scripts I have in /system/addon.d (fdroid and minmicrog) only reference the system app and priv-app directories so no help there, unless those locations are fallback options. Can your instructions be adjusted for android 8?
I also have a rooted microg LOS 19 moto g7 that's served as a reference with my debloating/degoogling effort. I looked at the contents of /vendor/overlay there and found that all but one of the apk's in there had "vendor" in the name, so I searched recursively from / on my HTC and didn't find any apk's with "vendor" in the name. Do you have any other ideas on how I might identify the equivalent directory on my HTC?
TheShanMan said:
I have /vendor but not /vendor/overlay.
Click to expand...
Click to collapse
Then try looking into /system/product/overlay.
TheShanMan said:
I have /mnt but not /mnt/system.
Click to expand...
Click to collapse
Your path will be /mnt/system only if you mount the root from recovery mode.
TheShanMan said:
all but one of the apk's in there had "vendor" in the name
Click to expand...
Click to collapse
The name doesn't matter, you can call the apks anything and they will still work.
Can you attach the output of the following command?
Bash:
adb shell cmd overlay list
arovlad said:
Then try looking into /system/product/overlay.
Click to expand...
Click to collapse
I don't have a /system/product directory. Here are the contents of my /system directory:
Code:
addon.d
app
bin
build.prop
compatibility_matrix.xml
customize
etc
fake-libs
fake-libs64
fonts
framework
lib
lib64
lost+found
manifest.xml
media
priv-app
tts
usr
vendor
xbin
And since "vendor" is part of the discussion, here are the contents of my /system/vendor directory:
Code:
app
bin
compatibility_matrix.xml
etc
firmware
framework
lib
lib64
manifest.xml
media
radio
rfs
ueventd.rc
arovlad said:
Can you attach the output of the following command?
Bash:
adb shell cmd overlay list
Click to expand...
Click to collapse
The output from that command is nothing.
I'm happy to try as much as you'd like, including experimentation (I've gotten very used to nandroid backups and restores while degoogling and debloating ). Thanks for the help!
Try it out:
Installing SystemWebView
Bromite is a Chromium fork with ad blocking and privacy enhancements; take back your browser! - bromite/bromite
github.com
Yeah I've seen that. It's a bit complicated, which is why I was hoping to either do it via the magisk manager module or via these steps. Ultimately if all else fails, I may give that a try. Hoping @arovlad will have the magic touch here, but I totally understand if there's no desire to invest time figuring out how to do this on an old device and android version.
TheShanMan said:
I totally understand if there's no desire to invest time figuring out how to do this on an old device and android version.
Click to expand...
Click to collapse
I am all for supporting old hardware. The thing is I actually thought every device running Project Treble (TL;DR Android 8 and above) use overlays of some kind.
I have the following ideas:
Do steps 1-3 as explained above and then make a folder called overlay inside the vendor partition:
Bash:
adb shell mkdir -m 755 /vendor/overlay
Do step 4 and then run the following command:
Bash:
adb shell cmd overlay enable com.arovlad.bromite.webview.overlay
TheShanMan said:
The output from that command is nothing.
Click to expand...
Click to collapse
Does it output nothing or does it output cmd: Can't find service: overlay? If the service cannot be found then the device may not be Treble-enabled. Please check if it is.
If it is try running:
Bash:
adb shell cmd overlay dump
and paste the output here.
TheShanMan said:
Thanks for the help!
Click to expand...
Click to collapse
Thank you for your patience and investing time in this.
Edit: added link for Treble support
It outputted nothing, and the treble check app says it's not enabled. Does that mean I'm out of luck or is there anything else to try? Thanks!
TheShanMan said:
It outputted nothing
Click to expand...
Click to collapse
You mean the first command, the second, or both? Please use quotes accordingly so I can know what you're referring to.
TheShanMan said:
the treble check app says it's not enabled. Does that mean I'm out of luck...?
Click to expand...
Click to collapse
You may be. You mentioned earlier that the Magisk module fails to install and that may be because your ROM is not Treble-enabled.
TheShanMan said:
is there anything else to try?
Click to expand...
Click to collapse
Have you tried creating the overlay folder manually and then enabling it via ADB as I wrote above?
Sorry, when I said it outputted nothing, it was in response to your question about the command "adb shell cmd overlay list". I tried creating the overlay folder and enabling it. The enable command gave no output so I don't know if it worked or not. I tried rebooting and then checking the webview setting in dev options, but it's still not there.
I'm guessing you assumed I would also then do steps 6 and 7. Is that right? If so, I'll have to try creating a magisk module to put the script in that location and hope it runs. I can't touch the actual system partition because doing so causes VoLTE to stop working on my phone, so I'm doing all my debloating/degoogling through magisk modules. I don't mind giving this a try, but since my phone isn't treble enabled, I'd like to verify that you think I ought to before I spend the time creating a magisk module for it.
Appreciate the help!
TheShanMan said:
The enable command gave no output so I don't know if it worked or not. I tried rebooting and then checking the webview setting in dev options, but it's still not there.
Click to expand...
Click to collapse
Run the following command:
Bash:
adb shell dumpsys webviewupdate
and if it outputs org.bromite.webview is NOT installed then it works.
TheShanMan said:
I'm guessing you assumed I would also then do steps 6 and 7. Is that right?
Click to expand...
Click to collapse
If your phone is old and doesn't receive official updates anymore, there's no need for addon.d, so no.
May I have the contents of the / (root) folder? Is there any partition called oem or odm? If so, what do they contain?
I'm a little confused by you saying it works if it says "NOT installed", but no, it doesn't say anything about bromite. Here's the output:
Current WebView Update Service state
Fallback logic enabled: true
Current WebView package (name, version): (com.google.android.webview, 62.0.3202.84)
Minimum WebView version code: 320208452
Number of relros started: 2
Number of relros finished: 2
WebView package dirty: false
Any WebView package installed: true
Preferred WebView package (name, version): (com.google.android.webview, 62.0.3202.84)
WebView packages:
Valid package com.android.chrome (versionName: 62.0.3202.84, versionCode: 320208452, targetSdkVersion: 27) is NOT installed/enabled for all users
Valid package com.google.android.webview (versionName: 62.0.3202.84, versionCode: 320208400, targetSdkVersion: 27) is installed/enabled for all users
And the contents of / are:
acct
bt_firmware
bugreports
cache
carrier
charger
config
cota
crashdump.d
cwkeys
d
data
default.prop
dev
devlog
dsp
etc
fataldevlog
file_contexts.bin
firmware
fstab.qcom
init
init.environ.rc
init.hosd.cradio.rc
init.hosd.htc_pme.rc
init.hosd.usb.configfs.rc
init.hosd.usb.rc
init.hosd_fusion.usb.rc
init.htc.storage.exfat.rc
init.htc.storage.mocana.rc
init.rc
init.recovery.common.rc
init.recovery.htc_pme.rc
init.usb.configfs.rc
init.usb.rc
init.zygote32.rc
init.zygote64_32.rc
mnt
nonplat_file_contexts
nonplat_hwservice_contexts
nonplat_property_contexts
nonplat_seapp_contexts
nonplat_service_contexts
oem
persist
plat_file_contexts
plat_hwservice_contexts
plat_property_contexts
plat_seapp_contexts
plat_service_contexts
preload
proc
res
root
sbin
sdcard
sdcard2
sepolicy
storage
sys
system
tombstones
ueventd.htc_pme.rc
ueventd.rc
vendor
vndservice_contexts
vzw
vzwqualitylogger
/oem is empty.
TheShanMan said:
I'm a little confused by you saying it works if it says "NOT installed"
Click to expand...
Click to collapse
Yeah, it's a little confusing, but if the overlay was successfully installed it should output NOT installed.
TheShanMan said:
but no, it doesn't say anything about bromite. Here's the output:
Click to expand...
Click to collapse
Then it doesn't work.
TheShanMan said:
/oem is empty.
Click to expand...
Click to collapse
Then try putting the overlay package inside, enable it (even if there is no output, just in case) and reboot the phone.
If it doesn't work, then you are out of luck as far as I know and your only option is to patch framework-res.apk manually.
Edit: clarification
Not only did that not work, but the /oem directory got wiped out after booting up. It must get populated by something during boot. Thank you very much for putting in this much effort to figure out how to make this work in my case. I wish I could've reported victory, but maybe I'll get it figured out via framework-res. I've tried one approach with that unsuccessfully so far (which hung during boot). I'll try more things and hopefully get it figured out! Best of luck with your project and thanks for offering it to people!
TheShanMan said:
Thank you very much for putting in this much effort to figure out how to make this work in my case.
Click to expand...
Click to collapse
Don't sweat it! Thank you for your patience and sorry I couldn't find a proper solution.
TheShanMan said:
I'll try more things and hopefully get it figured out!
Click to expand...
Click to collapse
If you actually DO find a way, it would be awesome if you could report back. Maybe it will help others in the same situation. Good luck!
Hi. Thank you for that step by step process of installing Bromite Webview.
I am a little confused about the 'vendor' part. What does that mean and why is it there? And as a consequence of that, I do not understand steps 6 & 7 beyond adb 'push' or 'shell'.
Any help is massively appreciated!
arovlad said:
This has not been tested on any other version other than Android 12.1. If you have issues please report them here or open an issue on GitHub.
I just upgraded to LineageOS 19 from 18.1 and as usual I want to apply my own modifications on top of it but the NanoDroid script that I previously used doesn't seem to work on 19. I couldn't find an answer neither on r/LineageOS, r/fossdroid or even XDA so I wrote a way to install Bromite SystemWebView in a way that's a lot more elegant and doesn't need Magisk or root.
Prerequisites:
adb
Rooted debugging or a custom recovery
Installation guide:
Enable Rooted debugging by navigating to Settings > Developer options > Rooted debugging.
Connect your phone to your PC and type
Bash:
adb root
Mount the vendor folder:
Bash:
adb shell mount -o rw,remount /vendor
Copy the package downloaded from here to the overlay directory:
Bash:
adb push treble-overlay-bromite-webview.apk /vendor/overlay
Mount the system as read-write:
Bash:
adb shell mount -o rw,remount /
Copy the OTA survival script to the appropriate location:
Bash:
adb push 99-bromite-webview.sh /system/addon.d
Make the script executable:
Bash:
adb shell chmod 755 /system/addon.d/99-bromite-webview.sh
Reboot the device:
Bash:
adb reboot
Download the latest Bromite SystemWebView release and install it as you would a regular app.
Navigate to Settings > Developer options > WebView implementation and select Bromite SystemWebView.
For custom recoveries: skip the first two steps, enable ADB from recovery mode and follow steps 3-10 replacing /vendor/overlay with /mnt/system/vendor/overlay and /system/addon.d with /system/system/addon.d.
For a more in-depth explanation check the GitHub repository.
Click to expand...
Click to collapse
Hi, @arovlad thanks for this workaround. I'm running the exactly same LOS version than you on a OP6. But at step 5 i'm getting the following error : /dev/root is read-only any idea what can i do ? Thx for your help !
amanajosh said:
I am a little confused about the 'vendor' part. What does that mean and why is it there?
Click to expand...
Click to collapse
Starting Android Oreo, the vendor partition is a separate partition containing proprietary manufacturer code not part of AOSP. This separation ensures that the Android system can be updated without recompiling the device-specific software. The vendor partition is typically overlayed over the system partition, making it easy to apply tweaks and modifications without actually touching the system. These modifications are typically named systemless.
Did you install Bromite WebView successfully?
bre75 said:
at step 5 i'm getting the following error : /dev/root is read-only any idea what can i do ?
Click to expand...
Click to collapse
Try the following command instead of step 5 and see if works for you:
Bash:
adb remount

Categories

Resources