Learning How To Root Device

[chalupabatman]

I have been programming with .NET and JAVA for roughly 10 years. I think I would like to dive into learning how to root a device. Does anyone have any guides or instructions on how to begin to do this?

 

[scary alien]

Rooting a device is often (usually) done by finding an exploit that will allow you to gain system (root) privileges.

Also, the programs that I've seen that involve testing/using/initiating those exploits have typically been in C or C++ code (if/when they're published at all--often they are not, or just don't involve a program per se but rather a process (set of steps)). So, Java (or .Net) are not likely to necessarily be of help other than the discipline of knowing how to code that might help you evaluate and research things.

There's not really any set of guides / instructions available as the exploits are (often) Android-, Linux kernel-, and device-dependent.

A good starting place to start learning or get ideas might be this Google group (Android Security Discussions):

https://plus.google.com/communities/118124907618051049043​

Cheers!

 

[chalupabatman]

@scary alien --> thank you for the link for that. I will def review and see if I can find anything helpful. Also, thank you for explaining to me the process, I was not certain how that worked, and now it makes more sense.

So android apps are typically coded in JAVA, but the actual exploiting has little to nothing to do with JAVA? Is that an accurate statement?

 

[scary alien]

Well, I've yet to see a piece / program / component exploit that was actually written in Java--the ones I've seen were written in C (I can try to dig-up the references when I get home--I don't have them here/handy).

C or C++ seem to have fewer restrictions as far as poking around in memory (i.e., in places Java likely won't let you tread ).

 

[chalupabatman]

Interesting. I believe that iOS apps are coded in C++ (I could be wrong on that), looks like I may start looking at syntax for that (as I hear it is kinda similar to C#).

Here I was thinking I was bringing a gun to the table and only needed bullets, but I was not right on that one.

 

[scary alien]

Here's a set of areas at vulnfactory.org with a ton of great info that might help you:

http://vulnfactory.org/blog/
http://vulnfactory.org/vulns/
http://vulnfactory.org/exploits/​

Also, here's a great site with links to many well-known* (and some not so well-known) root methods/exploits:

https://github.com/ucam-cl-dtg/android-vulnerabilities/tree/master/input/vulnerabilities​

(viist the .json links and view the information and links inside)

Cheers and best of luck!



* Motochopper, NachoRoot, PingPongRoot, RageAgainstTheCage, StageFright, StumpRoot, TacoRoot, TowelRoot, WeekSauce, exploid, zergRush, etc...