• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Easy Root Achieved!

Krowbarr

Well-Known Member
I take absolutely no credit or responsibility for this method. Use at your own risk! All thanks goes to chainfire over at XDA Developers. This exploit takes advantage of a security hole in stock kernel. Just install the .apk and run. Rooted my phone and installed Super SU flawlessly in less than ten seconds. *This has been updated to allow the user to turn off the exploit for security reasons. Please read the thread carefully*

http://forum.xda-developers.com/showthread.php?t=2050297
 
I just used this method. It really works. I'm on Fl22. It installed SuperSU for me. Then went to install TiBu. It works just fine.

I'm super thankful because I'm just too busy these days to get out my computer. I wanted to put a ROM on it but that just isn't viable with my time table. Christmas season and I'm management in retail... Haha.

This will keep me happy for a little while!

Thanks for this post and a huge thanks to Chainfire!
 
This is just sad....did any even ready the thread!!! This is an wakeup call here people!!!...This is not a good thing read the thread fully!!!!!
 
This is just sad....did any even ready the thread!!! This is an wakeup call here people!!!...This is not a good thing read the thread fully!!!!!


Yes many of us have read it and fully understand. It is an exploit, and many times it is the way people have of rooting devices like this. For some phones an exploit is only way to root. Yes it poses a security risk as does even running apps from unknown sources. As for being a "wake up call", exploits have been a double edged sword for a long time (not to mention the cause of many a software/firmware update).

Codegerm
 
No real sense of getting all in "alert" mode really.
It's as simple as this, of you bought somthing online, if you made a purchase ina store, if you sent email, if you ordered food online IE pizza place, if you have use ANY kinda of credit, or email or facebook or anything. your information is out there, plain and simple. fact is this world is in NO way perfect, and even machines make mistakes, as sad as it is, but we have to remember, and come to the realisatin of if you use the net or a cred card or email or anything of the sort, you are at risk, and it's really as simple as all that.
Things can be put in place to "prevent" bad things from happening, but as I said, it's not a perfect world, and there are bad people who WILL exploit things given the chance.

The only REAL solution is "unplug" simply throw away your technology, and go off the grid, otherwise you are always at risk. Like a germaphobe, when did we as a society become so concerned about germs and cleanliness? fact is our bodies NEED some of the UN-clenliness we have to build some sort of an immunity. If your concerned about it that much might as well get yourself a little bubble and live life inside that. Fact is people tend to "pick and choose" what their expectation of the word clean means. They will carry around white gloves and hand cleaner, yet they walk in the filthiest places with their shoes, and they don't even think about taking their shoes off.

Sorry, I'm off my soapbox now, I could go on a long time about this. I just think people over react about stuff and go into a panic, when it's really not needed.
 
Run off on a wild tangent alpha2k? lol :D


LOL, sorry, it's a LONG many years touchy subject with me. People just go into panic mode and go all crazy about the least little thing without realiseing the info is already out there. it seems to be getting worse these days too heh.

Funny story:
I worked for pizza hut, and was a shift manager. Well I took an order, the lady gave me the card number "over the phone". So I gave her an estimated time, and hung up. My manager said to go ahead and deliver it sense we were low on drivers that night so I did, and go to the door.
Now the policy was then (not sure about now) but it was we had to basically scribe or scrape the card number on the back of the receipt they signed, gave them a copy and we kept a copy for the store for the books.
Well I asked her for the cred card to verify the number, and she gave me this wild look as if to say "say wha?!" and said "I ain't giving you no cred card, they already took it over the phone" that's when I said "yes maam, I took your order" she kinda stuttered and said oh (in a puzzled voice)......nope, she wasn't giving me the card, so I apologized and said I could not give the pizza without
1: checking the card number, and
2: scribing the card on the receipt
So I had to refuse to give the pizza and took it back to the store.

Simple case of people just don't think......she would give it freely to any moron or person speaking "over the phone" to someone she couldn't even see, yet in person she refused, when she had already given me the number over the phone. :confused::confused::confused: LOL

Anyways, sorry if I ruffled feathers, and got on a tangent, just an on going touchy subject with me :).
 
I do understand that our info is out there,I work for an IT team and I have access to sensitive info all the time,heck we even have to control others systems from our location ,so I know how this stuff works.Reason I say its sad....this is Samsungs fault not a loop hole in android,and according to reports most people have a samsung smartphone phone.If one bad apple(LOL! no pun intended) makes a simple legitimate app and It get published in the playstore.....The thought of how many phones one can control.....I just feel like word should be out about exploits good or bad ones,I thinks its better if a bad exploit is spread around after its fixed.I know thats too much like right but as anything the wrong people can make it bad for good people.Now if any of ya'll really follow Samsung products this is the biggest reason why I say you should be alarmed and its an eye opener,look up rooting exploit for a Samsung smart TV....not trying to sound bad but there is a company already rooting Samsung smart TVs....read that artical then you will see....makes me wonder if there is this loop hole on purpose???
 
I do understand that our info is out there,I work for an IT team and I have access to sensitive info all the time,heck we even have to control others systems from our location ,so I know how this stuff works.Reason I say its sad....this is Samsungs fault not a loop hole in android,and according to reports most people have a samsung smartphone phone.If one bad apple(LOL! no pun intended) makes a simple legitimate app and It get published in the playstore.....The thought of how many phones one can control.....I just feel like word should be out about exploits good or bad ones,I thinks its better if a bad exploit is spread around after its fixed.I know thats too much like right but as anything the wrong people can make it bad for good people.Now if any of ya'll really follow Samsung products this is the biggest reason why I say you should be alarmed and its an eye opener,look up rooting exploit for a Samsung smart TV....not trying to sound bad but there is a company already rooting Samsung smart TVs....read that artical then you will see....makes me wonder if there is this loop hole on purpose???

Agreed, and I can see the concern.
On the flip side though this can mean a HUGE positive thing for a lot of people, as they are not as tech savvy as we are and aren't comfortable with rooting their phones, so this is a really easy way to get root access.
It really depends on what side your looking at it really.
If you read it's a like 50/50 toss up, some are very happy with the hole, some are concerned. I can see both sides, but I don't really see concern as a "major" issue thing. If you lock your car, and I come along and want in your car, I "WILL" get into your car, either by force or picking the lock or some other sort of way (being as I know how).

The said "hole" may very well be there for Samsung's sake, just as a backdoor is usually in software, for the programmers sake, so he can use it to better fix things. While some may exploit the bugs, others can benefit from it. Maybe it's there and they didn't think anyone would find the hole?
Then again it could be an oversight on Samsung's part, and thier looking into it as we speak.
There is also the notion that things are leaked on purpose, and they sit back and watch the reactions and stuff people do, and pick up on that stuff from the community, and plug needed holes, so it can be a good thing, but it also can be a bad thing.
 
You would be shocked in how many electronic goodies have exploits or "back doors" in them. I am a technician in the corporate security industry and even things like access control systems have them. Even my old dvd player had a back door into its system.
 
You would be shocked in how many electronic goodies have exploits or "back doors" in them. I am a technician in the corporate security industry and even things like access control systems have them. Even my old dvd player had a back door into its system.


Yep, but it is intended as a "good" thing, not an exploit or a bad thing.
Another tidbit of info I found out years and years ago, a virus 80% of the time is not meant to be a so called virus, it's meant to be a patch, or a fix or a program to use, and it reacts badly with the system or other applications within said system, and then has an adverse affect. The person that wrote the code in NO way meant it to be harmful, it just turned out that way. That and the fact as I have read there are tons of viruses created and or made, be it by that circumstances or on purpose, every 2 seconds is what I have read and heard. So it's not always bad, just maybe a concern.
That aside what's to keep me from snagging your phone, and hacking into your info on that phone, if I was smart enough to program and write coding, it could be done. Look at all the rom makers, they create amazing things every day it seems, WAY beyond my knowledge, but in this scenario, I swipe your phone, I then have ALL your info, your contacts, your info right at my fingertips, and you would be as shocked as I was to find out just how easy it really is to get info these days......do a search on your names or addresses in Google, you'll find you aren't that "hidden" to begin with. I did this about 5 or so yrs ago, and I about crapped my pants when I saw my name, my exact address, and upon further searching with that info I found out I had 2 kids and so on.....and this was with a simple Google search.
I am relly shoked at the fact that we say we don't want to release info about the war or how many died or this info and that info, yet we have Google maps that openly show a birds eye view of a certain area. We want to hide out heads in the sand, yet our a$$ is hanging in the wind :confused::confused:, sorry, almost went on my soap box again lol.

Anyways, I'm jsut pointing out, this so called hole with the phones is a concern yes, but it's not a life and death thing and I personally will not lose sleep over it.....you want my info, feel free to hack away, I've just realised if somone wants trash on you, their gonna get it....(points to Hollywood)


Also gotta remember 2 things
1: if samsung plugged this hole, that may mean no root for anyone, are you good with not having root? I personally like root, it opens a lot more doors.
2: If you are rooted (without the exploit) then you are JUST as vulnerable in that case
And before they found out about this exploit, or you never heard of it, or say you never did hear of it still, would it make you any less concerned?

Just food for thought :)
 
I think when it comes to this exploit, You just need to do your research.
Make sure of the apps you use, read reviews. If you download non-market apps, make sure you know what permissions you're giving it. Ensure that it's not malicious. If you've got doubt, Don't install it.

Knowledge is power. Just as it was stated, These exploits are always double edged swords. I'm personally thankful as root is important to me.

No device that has an internet connection can be considered truly safe. You just have to vigilant.

That said, I'm glad I was able to remove Boost ID and all that bloatware that constantly updated itself annoyingly. ^^.
 
I just wanted to get a little clarity on this exploit. Isn't downloading any 3rd party apk (or an apk off of the Play Store for that matter) just as "dangerous" as using this exploit? I mean most apps require some sort of permissions to function properly, and it's up to you to decide weather or not you choose to give the app those permissions, and if not, you simply don't install the app, right? So my question is, what makes using this exploit to root your phone so much more dangerous than installing some random APK from a 3rd party?

Someone please get back to me on this and give me some piece of mind on this. Already have the APK downloaded and anxious to install. Oh and by the way, what's the deal with the camera? What causes it to become broken, exactly?
 
LEVERage: This app just uses an existing exploit in the phone's OS to give you an easier way of rooting your phone without having to use a PC and Odin. Krowbarr and others have used it to gain root.

Codegerm
 
I just wanted to get a little clarity on this exploit. Isn't downloading any 3rd party apk (or an apk off of the Play Store for that matter) just as "dangerous" as using this exploit? I mean most apps require some sort of permissions to function properly, and it's up to you to decide weather or not you choose to give the app those permissions, and if not, you simply don't install the app, right? So my question is, what makes using this exploit to root your phone so much more dangerous than installing some random APK from a 3rd party?

Someone please get back to me on this and give me some piece of mind on this. Already have the APK downloaded and anxious to install. Oh and by the way, what's the deal with the camera? What causes it to become broken, exactly?

There is a huge difference between an app using an security hole to gain root permissions on the device and any "normal" app permissions.

Most apps cannot gain root permissions on a non rooted device. That is a huge security hole, which is why its very rare that a situation like this arises. This exploit will have to be patched by Samsung soon.
 
Back
Top Bottom