• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Root ZTE Zmax Pro Official Root Discussion

Status
Not open for further replies.
Ethorbit said:
What makes you think it's rooted yet? It's been a year and nobody has been able to root it. Don't get your hopes up.
Click to expand...
loonycgb2 said:
No i am still working on it as i am attempting to pull the boot image the way only the holy ghost is capable of haha, freakin zte put so many restrictions its hard to even get one simple thing without root.

I dont see it taking to long if my plan to pull aboot works.
Click to expand...
Uhhh he got temp root. I feel confident my dude.
 
Ethorbit said:
What makes you think it's rooted yet? It's been a year and nobody has been able to root it. Don't get your hopes up.
Click to expand...
I currently get it to partially brick due to boot system file modification, but since i have no access to the boot img files to view the actual file contents it leaves me with a non bootable device.

who else has managed to get into dfu mode ;) aka download mode
 

Attachments

  • 555.png
    555.png
    690 KB · Views: 253
It is just a matter of days at this point. If even that. If he has done what he says he has done, we will have root soon. And soon after that, the custom roms that come with it.
 
Blaxx said:
Why the negativity though, I understand you're impatient and all but jeeez keep it to yourself man.
Click to expand...
I'm not being negative about this I just don't get why anyone would ask if it's been rooted yet. I know it will be rooted, I'm not impatient. I'm not saying that loonycgb can't root if no one else could simply saying don't get your hopes up.
 
Nice wallpaper 😃


loonycgb2 said:
I currently get it to partially brick due to boot system file modification, but since i have no access to the boot img files to view the actual file contents it leaves me with a non bootable device.
who else has managed to get into dfu mode aka download mode
Click to expand...
 
SapphireEx said:
Nice work. It's good to finally see some traction going on here.
Click to expand...
At this point im waiting for messi or anyone who understands a bit more on knowing how to pull partitions and code a bit to help me..

ZTE has seriously gone thru a hell of alot to keep us out.

They blocked read access to even the /data/local partition.. im trying to find a good mount point thats accessible to copy the boot ramdisk to get all the init files.

I may end up trying to use /data/local/tmp.. perhaps is r/w to all users/groups.

But i can confirm phone has been exploited and i have been able to write to the boot partition.

So the bootloader is not locked or else i would have been perma bricked. DM-verity is just a bitch.
 
loonycgb2 said:
At this point im waiting for messi or anyone who understands a bit more on knowing how to pull partitions and code a bit to help me..

ZTE has seriously gone thru a hell of alot to keep us out.

They blocked read access to even the /data/local partition.. im trying to find a good mount point thats accessible to copy the boot ramdisk to get all the init files.

I may end up trying to use /data/local/tmp.. perhaps is r/w to all users/groups.

But i can confirm phone has been exploited and i have been able to write to the boot partition.

So the bootloader is not locked or else i would have been perma bricked. DM-verity is just a bitch.
Click to expand...
/data/local/tmp is r/w and chmod'able. It's where I ran most of my scripts
 
loonycgb2 said:
At this point im waiting for messi or anyone who understands a bit more on knowing how to pull partitions and code a bit to help me..

ZTE has seriously gone thru a hell of alot to keep us out.

They blocked read access to even the /data/local partition.. im trying to find a good mount point thats accessible to copy the boot ramdisk to get all the init files.

I may end up trying to use /data/local/tmp.. perhaps is r/w to all users/groups.

But i can confirm phone has been exploited and i have been able to write to the boot partition.

So the bootloader is not locked or else i would have been perma bricked. DM-verity is just a bitch.
Click to expand...

Also, you mind uploading the source you used to exploit? Or better yet, a compiled script? Dirtyc0w didn't do anything for me.
 
loonycgb2 said:
Im currently on b14, but once we get a full root going i will update to b20 with twrp and retry again to see if it still is vaulnerable.
Click to expand...
Let me know when you do get to B20. I'll run the exploit on B08, then B20 after B14 has root

If everything goes well, B08/B14 should be exploitable, and TWRP can handle OTA survival as long as recovery doesn't get overwritten.
 
loonycgb2 said:
At this point im waiting for messi or anyone who understands a bit more on knowing how to pull partitions and code a bit to help me..

ZTE has seriously gone thru a hell of alot to keep us out.

They blocked read access to even the /data/local partition.. im trying to find a good mount point thats accessible to copy the boot ramdisk to get all the init files.

I may end up trying to use /data/local/tmp.. perhaps is r/w to all users/groups.

But i can confirm phone has been exploited and i have been able to write to the boot partition.

So the bootloader is not locked or else i would have been perma bricked. DM-verity is just a bitch.
Click to expand...
Maybe @Masterchief87. Can come back.
 
loonycgb2 said:
At this point im waiting for messi or anyone who understands a bit more on knowing how to pull partitions and code a bit to help me..

ZTE has seriously gone thru a hell of alot to keep us out.

They blocked read access to even the /data/local partition.. im trying to find a good mount point thats accessible to copy the boot ramdisk to get all the init files.

I may end up trying to use /data/local/tmp.. perhaps is r/w to all users/groups.

But i can confirm phone has been exploited and i have been able to write to the boot partition.

So the bootloader is not locked or else i would have been perma bricked. DM-verity is just a bitch.
Click to expand...
Feel free to contact me via pm or hangouts.
 
Status
Not open for further replies.
Back
Top Bottom