• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Root Well, lets get the ball rolling

Just dawned on my you still need a com port to use cdma ws so it's back to figuring that out. Has anyone gotten into stock recovery to see if it'll show up as com port that way.
 
Just dawned on my you still need a com port to use cdma ws so it's back to figuring that out. Has anyone gotten into stock recovery to see if it'll show up as com port that way.

if you put it in to download mode (the code is mentioned in here somewhere) that it will show up as comm and if you can pull the msl from there then cool
 
I'm messing around with it in CDMA Workshop right now. I can't find a place where I can change my MEID though. But I can change all the other stuff. And I dumped an NV Ram logfile off of it, and all of the stuff is zeroed out.
 
I'm messing around with it in CDMA Workshop right now. I can't find a place where I can change my MEID though. But I can change all the other stuff. And I dumped an NV Ram logfile off of it, and all of the stuff is zeroed out.

Since you have a replacement coming, would it be possible for me to go ahead and root your phone and poke around for a bit, maybe I can locate a safer root.

If so can you hit me on gtalk again?
 
Since you have a replacement coming, would it be possible for me to go ahead and root your phone and poke around for a bit, maybe I can locate a safer root.

If so can you hit me on gtalk again?

kay, and yeah you can. Do whatever you want.
 
To all who are working this for our benefit..Thank You.

I can't help out..but I'm very grateful for what you're doing.

It's very much appreciated.


Drew
 
jcase tried to poke around with the phone earlier, and the nvram wiped out the ability to use adb. Tried it through both Windows and Linux.

Oh, and you can't add a google account to the phone either. So you can't download any apps even if you're on Wi-Fi.
 
I picked up the elite yesterday and I tried pulling spc with cdma ws. I tried in recovery mode and phone didn't load as serial port. Tried in download mode and cdma workshop connects to phone but won't read spc.
 
I picked up the elite yesterday and I tried pulling spc with cdma ws. I tried in recovery mode and phone didn't load as serial port. Tried in download mode and cdma workshop connects to phone but won't read spc.

Did you make sure that LG_Method was selected?
 
Did you make sure that LG_Method was selected?

Yeah I did. I also tried with this program and it wouldn't read

Not sure if anyone has seen this program but it's a cdma workshop alternative that's open source and free. Didn't have a chance to mess with it alot but appears to do a great deal of things

CdmaDevTermV.2.zip - cdmaworkshoptool - CdmaDevTerm - Beta v.2 - A tool for interaction with QCDM based CDMA phones - A utility that parses cdma worksop items: NV Item reads(to remove plain text) and bin dumps(to find SPC/MSL) and converts MEID/ESN f
 
Yeah I did. I also tried with this program and it wouldn't read

Not sure if anyone has seen this program but it's a cdma workshop alternative that's open source and free. Didn't have a chance to mess with it alot but appears to do a great deal of things

CdmaDevTermV.2.zip - cdmaworkshoptool - CdmaDevTerm - Beta v.2 - A tool for interaction with QCDM based CDMA phones - A utility that parses cdma worksop items: NV Item reads(to remove plain text) and bin dumps(to find SPC/MSL) and converts MEID/ESN f

Does anyone think that we can grab the bin folder from the system dump we get when we do asb pull /system to find our msl/spc with cdma workshop? I can't test it until tomorrow but if we did get the msl/spc we can type ##diag# (##3424#) and give it the msl/spc to see if that is how we get into modem mode and if it is, then we can test the lnpqst or w.e to see if it destroys the phone or not
 
jcase, is there something that I can do with my Elite seeing as I have not decided wether or not to use it as of yet? I'd like to try some more exploits, but I'm currently running out of ideas. I'm on a Linux machine and can communicate easily with the phone via adb.

If I put the phone in download mode, will/can I have more permissions with adb to access maybe the /bin files -- possible way to exploit for root access?
 
Does anyone think that we can grab the bin folder from the system dump we get when we do asb pull /system to find our msl/spc with cdma workshop? I can't test it until tomorrow but if we did get the msl/spc we can type ##diag# (##3424#) and give it the msl/spc to see if that is how we get into modem mode and if it is, then we can test the lnpqst or w.e to see if it destroys the phone or not

Here's a dump. I pulled everything off of it(this is from after I flashed it). oh and jcase I got the adb working, so when you get the chance to poke around just let me know.

Download system.zip from Sendspace.com - send big files the easy way
 
jcase, is there something that I can do with my Elite seeing as I have not decided wether or not to use it as of yet? I'd like to try some more exploits, but I'm currently running out of ideas. I'm on a Linux machine and can communicate easily with the phone via adb.

If I put the phone in download mode, will/can I have more permissions with adb to access maybe the /bin files -- possible way to exploit for root access?

You can pull /system/bin without download mode or anything.

We already have it
 
You can pull /system/bin without download mode or anything.

We already have it
I know you have it, I posted the first system dump. I've been looking for an exploit to use with adb to be able to access the /system files/folders. I was asking if you could think of anything else that I could try to exploit root because I'm running out of options. I never needed download mode active to get it to work in the first place. The problem with adb is you need to start-server as root on a linux machine. I've also been able to use shell access (via adb), but I can't get commands like chmod to function the way I'd like to (altering permissions).
 
I know you have it, I posted the first system dump. I've been looking for an exploit to use with adb to be able to access the /system files/folders. I was asking if you could think of anything else that I could try to exploit root because I'm running out of options. I never needed download mode active to get it to work in the first place. The problem with adb is you need to start-server as root on a linux machine. I've also been able to use shell access (via adb), but I can't get commands like chmod to function the way I'd like to (altering permissions).

You don't need to start the adb server as root, setup your udev rules properly instead.

As far as root, I have a verified root method, you guys just need a way to flash stock firmware without wiping nvram.

Someone with the phone needs to take some time, do research to figure out how to get it into the correct mode so NVRAM gets backed up during the flash process.
 
You don't need to start the adb server as root, setup your udev rules properly instead.

As far as root, I have a verified root method, you guys just need a way to flash stock firmware without wiping nvram.

Someone with the phone needs to take some time, do research to figure out how to get it into the correct mode so NVRAM gets backed up during the flash process.

I setup udev rules properly, but I have 6 devices in there (and still have to start the server as root). Anyway, there's got to be some other way to do this without wiping out the phones way to communicate. I'm going to try a few more ideas when I get home tonight.
 
Can anyone that tried to flash the tot file with lgnpst look in your lgnpst folder and see if you have a .nvs file. If I'm reading correctly whenever you write the tot file to the phone it backs up the nvram to the .nvs file. If so you can use the data recovery option in lgnpst to write this file back to phone and restore nvram. It should be in the folder you put the dll in... ex. c:\LG Electronics\LGNPST\VM696 and the file should be named something like vm696_com*.nvs.

Not very good with this stuff but trying to do a bit of research
 
Does dialing

##3424# or #*#DIAG#*#

ask for MSL or SPC?

and can someone run adb shell getprop > jcase.txt and pastebin the file for me
 
Does dialing

##3424# or #*#DIAG#*#

ask for MSL or SPC?

and can someone run adb shell getprop > jcase.txt and pastebin the file for me

@jcase

Here is the getprop for you - Pastebin.com - Phone isn't activated yet so hope that doesn't affect anything

Has anyone had luck pulling spc code? I've tried cdma workshop and an opensource cdma type program I found and no luck on either. Both will connect via com port but when trying to read spc cdma workshop reports phone won't answer and the other tool locks up.
 
Hey there's something weird that I've noticed since flashing the phone. Multiple times I've seen the phone model be VS910 instead of VM696. I'm not sure what would cause that, but the phone might think that is an LG Revolution rather than an OE. For example, in RF Calibration History, it says that this phone is the LTE version(it isn't, but the revolution is). It could be nothing, but it seems strange.

Oh, and in the folder that kwknott was talking about, there is the .nvs files but they are labeled as like VS910_COM6.nvs sort of things :/
 
Hey there's something weird that I've noticed since flashing the phone. Multiple times I've seen the phone model be VS910 instead of VM696. I'm not sure what would cause that, but the phone might think that is an LG Revolution rather than an OE. For example, in RF Calibration History, it says that this phone is the LTE version(it isn't, but the revolution is). It could be nothing, but it seems strange.

Oh, and in the folder that kwknott was talking about, there is the .nvs files but they are labeled as like VS910_COM6.nvs sort of things :/

If you try flashing the Nvs what happens because apparently the nvs holds data information for the phone company
 
Back
Top Bottom