Untethered Temp Root For the Original Note 7

Ask our community anything. We will do our best to help. You will receive an answer quicker via our discord support server.

Moderators: Junior Moderator, Jr. Admin

User avatar
tazzala31
Alliance Member
Posts: 15
Joined: Tue Dec 20, 2016 1:22 am

Awesome news and great job guys!!!🤘🤘
User avatar
tazzala31
Alliance Member
Posts: 15
Joined: Tue Dec 20, 2016 1:22 am

Thank you,thank you, thank you!!! You guys are awesome
User avatar
waterpass
Alliance Member
Posts: 22
Joined: Fri Dec 23, 2016 8:57 pm

Great job guys!!!
User avatar
cooper.beaman
Alliance Member
Posts: 8
Joined: Mon Jan 30, 2017 1:51 am

SM-N930V PHE?
User avatar
GhostGH
Alliance Member
Posts: 16
Joined: Wed Dec 28, 2016 2:09 pm

Hi all.
On step 9 i have an error:

C:\ndk\build>nmake connect

Microsoft (R) Program Maintenance Utility Version 14.11.25507.1
Copyright (C) Microsoft Corporation. Tous droits réservés.

"there is no prompt, type ls to test connection!!"
nc localhost 4040
NMAKE : fatal error U1077: '.\nc.EXE' : code retour '0x1'
Stop.

C:\ndk\build>

What I'm doing wrong?
Thanks an advance
User avatar
essmd
Alliance Member
Posts: 2
Joined: Fri Sep 08, 2017 12:37 am

Another Noob question....

Once this is accomplished, can an newer version of Android be installed/ Is so, how do I get one that is compatible and how to install it???

Gotta learn somewhere...

Thanks
User avatar
christianskent
Alliance Member
Posts: 4
Joined: Fri Aug 25, 2017 11:15 am

did the first steps for tethered root succesfully now im at the point where I send echo commands , how to I send them . I sent thru native command prompt and cmd to no avail clearer instructions greatly appreciated .. thanks
User avatar
christianskent
Alliance Member
Posts: 4
Joined: Fri Aug 25, 2017 11:15 am

ok im a little further im at the last step but I keep getting error permission denied . I chmod 777 the root.sh file first still getting denied error
User avatar
Mkivgti
Alliance Member
Posts: 9
Joined: Thu Sep 07, 2017 10:46 am

I cant manage to get a grip on this one. Installation of ndk isnt well documented. Is there any video of this process so its alot easier. Thanks
User avatar
christianskent
Alliance Member
Posts: 4
Joined: Fri Aug 25, 2017 11:15 am

its easy put ndk folder in root c drive run native tools command prompt start by cd C:\ndk\build then you can run the nmake commands . ive passed that part . at the end when I run the root.sh file I get all these lines permission denied..... blah blah blah
need help
User avatar
Mkivgti
Alliance Member
Posts: 9
Joined: Thu Sep 07, 2017 10:46 am

i'm stuck with the nmake 'nmake' is not recognized as an internal or external command.
User avatar
christianskent
Alliance Member
Posts: 4
Joined: Fri Aug 25, 2017 11:15 am

I see either no one comes on here or thread is dead heres my log
i chmod 777 the file before I run it root.sh did the nmake commands first then the uid stuff
C:\Users\User>adb shell
adb server is out of date. killing...
* daemon started successfully *
shell@graceqltespr:/ $ id
uid=2000(shell) gid=2000(shell) groups=2000(shell),1004(input),1007(log),1011(adb),1015(sdcard_rw),1028(sdcard_r),3001(net_bt_admin),3002(net_bt),3003(inet),3006(net_bw_stats) context=u:r:shell:s0
shell@graceqltespr:/ $ u:r:dnsmasq:s0
/system/bin/sh: u:r:dnsmasq:s0: not found
127|shell@graceqltespr:/ $ cd /data/local/tmp/super-chris/
shell@graceqltespr:/data/local/tmp/super-chris $ touch file
shell@graceqltespr:/data/local/tmp/super-chris $ echo FFFFFFFF >> root.sh
shell@graceqltespr:/data/local/tmp/super-chris $ chmod 777 *
cho u:r:init:s0 > /proc/self/attr/current <
cho u:r:init:s0 > /proc/self/attr/exec <
data/local/tmp/super-chris/root.sh <
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
Usage: mount [-r] [-w] [-o options] [-t type] device directory
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
mount: Permission denied
chmod: chmod '/data' to 40777: Permission denied
dd: /data/su.img: Permission denied
dd: /cache/su.img: Permission denied
/data/local/tmp/super-chris/root.sh[36]: e2fsck: can't execute: Permission denied
/data/local/tmp/super-chris/root.sh[37]: resize2fs: can't execute: Permission denied
/data/local/tmp/super-chris/root.sh[38]: e2fsck: can't execute: Permission denied
/data/local/tmp/super-chris/root.sh[39]: resize2fs: can't execute: Permission denied
dd: /sbin/su: Permission denied
dd: /sbin/daemonsu: Permission denied
dd: /sbin/sukernel: Permission denied
dd: /sbin/sush: Permission denied
dd: /sbin/supolicy: Permission denied
dd: /sbin/app_process: Permission denied
dd: /sbin/libsupol.so: Permission denied
dd: /file_contexts: Read-only file system
dd: /sbin/launch_daemonsu.sh: Permission denied
mkdir: '/su': Read-only file system
dd: /su/su: No such file or directory
dd: /su/daemonsu: No such file or directory
dd: /su/sukernel: No such file or directory
dd: /su/sush: No such file or directory
dd: /su/supolicy: No such file or directory
dd: /su/app_process: No such file or directory
dd: /su/libsupol.so: No such file or directory
dd: /file_contexts: Read-only file system
chmod: chmod '/sbin' to 40777: Read-only file system
chmod: No /sbin: Permission denied
chmod: /su: No such file or directory
Function: selinux_compare_spd_ram, index[3], priority [2], priority version is VE=SEPF_SECMOBILE_6.0.1_0013
SELinux: Loaded file_contexts contexts from /file_contexts.
SELinux: Could not get canonical path /su/* restorecon: No such file or directory.
restorecon: restorecon failed: /su/*: No such file or directory
sh: /sbin/launch_daemonsu.sh: Permission denied
/data/local/tmp/super-chris/root.sh[65]: FFFFFFFF: not found
User avatar
OnThe7thDayBOOM
Rooter
Posts: 20
Joined: Thu Feb 02, 2017 11:16 am

GhostGH wrote: Thu Sep 07, 2017 8:00 pm Hi all.
On step 9 i have an error:

C:\ndk\build>nmake connect

Microsoft (R) Program Maintenance Utility Version 14.11.25507.1
Copyright (C) Microsoft Corporation. Tous droits réservés.

"there is no prompt, type ls to test connection!!"
nc localhost 4040
NMAKE : fatal error U1077: '.\nc.EXE' : code retour '0x1'
Stop.

C:\ndk\build>

What I'm doing wrong?
Thanks an advance
When that Happens you usually just need to redo nmake reverse, just make sure you have the hotspot off before each command and turn it on right after sendmy each command. Also let the command run course, don't end it early, it looks stuck but its not I assure you.
User avatar
GhostGH
Alliance Member
Posts: 16
Joined: Wed Dec 28, 2016 2:09 pm

I tried again. Look what I have as logs
Hidden Content: [SHOW]
C:\ndk\build>nmake run

Microsoft (R) Program Maintenance Utility Version 14.11.25507.1
Copyright (C) Microsoft Corporation. Tous droits réservés.

adb push sepolicy /data/local/tmp/sepolicy
[100%] /data/local/tmp/sepolicy
adb push obj/local/arm64-v8a/load /data/local/tmp/load
[100%] /data/local/tmp/load
adb push obj/local/arm64-v8a/reverse /data/local/tmp/reverse
[100%] /data/local/tmp/reverse
adb push obj/local/arm64-v8a/stage /data/local/tmp/stage
[100%] /data/local/tmp/stage
adb shell chmod 777 /data/local/tmp/reverse /data/local/tmp/stage /data/local/tmp/load
adb shell /data/local/tmp/stage /data/local/tmp/load
[+] stager loading /data/local/tmp/load
NOW I TURNED ON Mobile hotspot
"sepolicy injection binary loaded into dnsmasq!"
"Wait for load done!, then turn off Mobile Hotspot, then type make reverse"

C:\ndk\build> NOW I TURNED OFF Mobile hotspot

C:\ndk\build>nmake reverse

Microsoft (R) Program Maintenance Utility Version 14.11.25507.1
Copyright (C) Microsoft Corporation. Tous droits réservés.

adb forward tcp:4040 tcp:4040
adb shell /data/local/tmp/stage /data/local/tmp/reverse
[+] stager loading /data/local/tmp/reverse
NOW I TURNED ON Mobile hotspot
"reverse shell binary loaded into dnsmasq."
"Wait for reverse loaded, turn off Mobile Hotspots, then type make connect"

C:\ndk\build> NOW I TURNED OFF Mobile hotspot

C:\ndk\build>nmake connect

Microsoft (R) Program Maintenance Utility Version 14.11.25507.1
Copyright (C) Microsoft Corporation. Tous droits réservés.

"there is no prompt, type ls to test connection!!"
nc localhost 4040
NMAKE : fatal error U1077: '.\nc.EXE' : code retour '0x1'
Stop.
What I missed ?
If I type command id in adb shell I have 'context=u:r:shell:s0' and no 'u:r:dnsmasq:s0'
User avatar
OnThe7thDayBOOM
Rooter
Posts: 20
Joined: Thu Feb 02, 2017 11:16 am

you dont type in adb shell, right when u type in nmake connect, it will look like its hanging, you wont a $ or anything, at this point type in id and you will see that you are root, follow the rest if the instructions for a supersu root shell
Post Reply