• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Root ZTE Zmax Pro Official Root Discussion

Status
Not open for further replies.
Nthall said:
That one has already been patched. You might be able to find a different way that I couldn't. I'm not the best at OpenGL. The security focus papers give you the basic idea.

I haven't seen any code using it anywhere else either, so I don't think it's that easy to pull off if it wasn't patched. KingRoot would have adopted it by now.
Click to expand...
I would love to help you compile multiple tools to test rooting attempts with. But i do not know anything at all about coding. I just look around through existing system files. Open them up and extract contents and attempt to read them. I also just modify my existing installations. Ill toss out anymore ideas if i come along them. Im also the one that pointed out the .mbn core but no one really noticed at the time.
 
Nthall said:
That one has already been patched. You might be able to find a different way that I couldn't. I'm not the best at OpenGL. The security focus papers give you the basic idea.

I haven't seen any code using it anywhere else either, so I don't think it's that easy to pull off if it wasn't patched. KingRoot would have adopted it by now.
Click to expand...
Kingroot lists ZTE ZMAX PRO in que . Basically adopted
 
Look at it this way, if we use the CVE's in B8 we can pull the recovery and other partitions and find out if there is a special fastboot command to enable fastboot completely and we can finally fully root the device - you guys shouldn't have updated tbh unless you had to. I'm on b8 and it runs just fine.

The special fastboot command is in there somewhere, all we need is to root one device, just one and it would pretty much fully unlock the device for us.
 
btw I am back now. Since Cricket doesn't know how to block tethering on non-cricket devices my Zmax Pro works with it and that's all I NEED. I'm staying on B8 so if anybody has any scripts or rooting apps I should try that haven't already been tried then go ahead and tell me.
 
https://github.com/hyln9/VIKIROOT/

Try this... This is for 64-bit Android 6.0.1 Marshmallow, as well as an universal & stable temporal root tool. It does not require a SUID executable or any filesystem changes. The exploit is a SELinux bypass. This means that the payload will run in init domain even if SELinux is in enforcing mode.
Worth a try...
 
I was nosing around the root directory when I found a file called "verity key". I copied it to my SDcard and looked up what it was and apparently since Android 6.0, there is a "feature" called verity which can detect any modifications to the system partitions when the phone boots or when the partitions are accessed. Some phones still boot and give you a warning and some refuse to boot all-together.

I really hope KingRoot finds a way to disable verity. I know little about it but I already know enough not to like it.

TL;DR
Any non-temporal root could easily brick the phone.
 
anubis2048 said:
I was nosing around the root directory when I found a file called "verity key". I copied it to my SDcard and looked up what it was and apparently since Android 6.0, there is a "feature" called verity which can detect any modifications to the system partitions when the phone boots or when the partitions are accessed. Some phones still boot and give you a warning and some refuse to boot all-together.

I really hope KingRoot finds a way to disable verity. I know little about it but I already know enough not to like it.

TL;DR
Any non-temporal root could easily brick the phone.
Click to expand...
Dm verify is easy to disable either by flashing the dmverify disable zip or by flashing a disabled dmverify boot.img
 
Charles367 said:
I'm still leaning on a factory USB, or a hotwire. There is always a back door. This is android not ios
Click to expand...

It would be better to try to force our way in through Android because we have knowledge about Android and the security it uses. We know nothing about the bootloader, and even if we did we wouldn't have any tools to fix it if we bomb it.
 
messi2050 said:
I'm sure this can work on our zmax but the programmer script needs to be modified. Unfortunately it's developer is not very active on xda but i left him a reply in his thread anyway. ..
Click to expand...
Have you been able to have any sort of communication in the past week with the developer? Thanks.
 
Rashawn229 said:
I think I have a way to overload the heck out of this phone like they did the original ZMax. I was using Google photos and I was downloading over 30+ videos at once and this phone was suuuuperr laggy. I hope somehow we can do something similar to this device as the original ZMax
Click to expand...

That exploit wouldn't work on this phone, and even if it did it is patched anyway.
 
Status
Not open for further replies.
Back
Top Bottom