• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Root ZTE Zmax Pro Official Root Discussion

Status
Not open for further replies.
That's not root though or is it ? Please clarify. I'm saying that the gm2 and zmp are practically identical right? Now we know that the original zmax won't help hear but would it help to work together with the grand max and grand max 2 . Example combine threads.Just a question sorry.
 
That's not root though or is it ? Please clarify. I'm saying that the gm2 and zmp are practically identical right? Now we know that the original zmax won't help hear but would it help to work together with the grand max and grand max 2 . Example combine threads.Just a question sorry.
Does most info match? Board , CPU, partitions etc
 
I have a flashable selinuxpolicy.zip type file but is for a rooted Samsung Galaxy On5. It was made to get viper4android to work and install in enforcing mode. You flash it then reboot. Then you install the viper4android driver. This notification toast pops up asking you to install driver on most viper4android builds. Would this be feasible to maybe study, break down, decompile etc*****edit*****
I'm saying see how exactly the supolicy zip is made for one. How it "attacks" the system. B14 has some partition change. Just random stuff. Maybe scripting with non root BusyBox. Build a supolicy zip rooting apk or Linux or whatever
 
I have a flashable selinuxpolicy.zip type file but is for a rooted Samsung Galaxy On5. It was made to get viper4android to work and install in enforcing mode. You flash it then reboot. Then you install the viper4android driver. This notification toast pops up asking you to install driver on most viper4android builds. Would this be feasible to maybe study, break down, decompile etc*****edit*****
Probably not. If we had a way to flash the kernel we would have root already. The On5 can be flashed with Odin, and has fastboot and adb as well. We don't have software to use on ours yet.

I'm really curious if anyone has flashed one from the SD card with no sim installed. From looking through the logs it looks like it gets a handshake from a MetroPCS server before the flash goes through.

When you do a factory reset SELinux starts in permissive mode. If there was a way to trick the stock recovery into pulling the backup off of the SD card I think we could get somewhere. The updates don't work properly when adaptive storage is activated, which makes me think it might be possible to spoof the root directory. I just don't know how to do it. We don't have a stock backup as far as I know either, so there is nothing to flash if we could do it. I could be totally wrong too.
 
It's not off , it's only a black screen, you can check the ports in device manager you will find qcom port.
The port is showing, but my phone had the battery charging image on it.
7e17ba571fa8b50ab07e6066ce4fd624.jpg
090d3025a2a62d504b2f655b74d1d0b6.jpg
 
It's iOS but runs on linúx? Also I think can set up different environments******edit**** also ROP Gadget Tool?
 

Attachments

  • Screenshot_20170129-221431.png
    Screenshot_20170129-221431.png
    320.4 KB · Views: 99
Last edited:
I deleted the drivers for all of the other phones I have and PDAnet because I thought they might conflict. It did the same thing.
 
I tried it with different drivers instead of zadig, and got a little bit further. I didn't think my phone was going to come back on afterwards. Anyone know which version of Linux it was built on?

axon2.png
 
Aarch64 Linux ring a bell?
I don't have a machine running Arch, but I can set one up tomorrow. That one can take a while to install. I think I could log what the script was actually trying to do in Linux. Ubuntu won't even recognize the phone. That acts like a exploit, it might not even work on this phone.

You can unlock the bootloader with fastboot on the Axon. I don't understand why you would use that instead of installing TWRP.
 
Also are there apps like tmobile.pr.adapt and the Google check-in successful app or type apps that we can freeze/disable that might lax security?
 
Also are there apps like tmobile.pr.adapt and the Google check-in successful app or type apps that we can freeze/disable that might lax security?

All T-Mobile.PR.adapt is is a root checker that asks for root every two seconds and the second you grant it got warranty is void cause the carrier knows your rooted I know cause it's on an old LG of mine so I rooted and uninstalled it
 
Status
Not open for further replies.
Back
Top Bottom