[Q] Busybox fails to install - Sprint HTC EVO 4G LTE

I have S-OFF and rooted my phone, and need Busybox to run nandroid. Using either Busybox Pro, or Busybox Installer, the install fails to either bin or binx. Its says "It looks like the installation of Busybox failed" after displaying a scrolling list of apps. It suggests tryin g a different location.
I have 80 MB of free memory in /system.
How can I track this down?

What ROM are you on?
I believe that most rooted ROM's already have Busybox built in.
The advice is free....the bandwidth, not so much

Still the EVO one
FinZ28 said:
What ROM are you on?
I believe that most rooted ROM's already have Busybox built in.
The advice is free....the bandwidth, not so much
Click to expand...
Click to collapse
3.15.651.16 71ORD
Nandroid said busybox was not installed.

Summary
My phone is rooted and S-OFF, but have the stock 3.15 installed.
1) Open busybox
2) do install and pick smart
3) Says "Installing, checking system", screen goes black and it reboots. It is not supposed to. What is happening here?
After reboot:
5) /system/bin/busybox not found (and indeed, it is not there)
6) Go into busybox again
7) says installing busybox. Then setting up many applications. Then message says install failed
Log claims it is installed, but /system/bin/busybox is not there. What could have removed it?
/system is rw. 81MB free in it
[email protected]:/ $ su
[email protected]:/ # ls -l /system
drwxr-xr-x root root 2013-01-30 15:02 app
drwxr-xr-x root shell 2013-02-12 17:29 bin
-rw-r--r-- root root 6833 2012-12-18 17:05 build.prop
drwxr-xr-x root root 2012-12-18 17:05 customize
drwxr-xr-x root root 2012-12-18 17:05 etc
drwxr-xr-x root root 2012-12-18 17:05 fonts
drwxr-xr-x root root 2012-12-18 17:05 framework
drwxr-xr-x root root 2012-12-18 17:05 lib
drwxr-xr-x root root 2012-12-18 16:58 media
drwxr-xr-x root root 2012-04-27 17:10 tts
drwxr-xr-x root root 2012-04-27 17:15 usr
drwxr-xr-x root shell 2012-12-18 17:05 vendor
drwxr-xr-x root shell 2013-01-30 15:02 xbin
[email protected]:/ # cd bin
sh: cd: /bin: No such file or directory
2|[email protected]:/ # ls -l
drwxr-xr-x root root 2013-02-12 17:27 acct
drwxrwx--- system cache 2013-02-13 14:28 cache
dr-x------ root root 2013-02-12 17:27 config
lrwxrwxrwx root root 2013-02-12 17:27 d -> /sys/kernel/debug
drwxrwx--x system system 2013-02-12 16:42 data
-rw-r--r-- root root 118 1969-12-31 19:00 default.prop
drwxr-xr-x root root 2013-02-12 17:28 dev
drwx------ root root 2013-02-13 14:26 devlog
lrwxrwxrwx root root 2013-02-12 17:27 etc -> /system/etc
drwxrwx--x system system 2013-02-12 17:27 firmware_dsps
drwxrwxrwx root root 1969-12-31 19:00 firmware_q6
drwxrwxrwx root root 1969-12-31 19:00 firmware_radio
drwxrwxrwx root root 1969-12-31 19:00 firmware_wcnss
-rw-r----- root root 330 1969-12-31 19:00 fstab.jet
-rwxr-x--- root root 118008 1969-12-31 19:00 init
-rwxr-x--- root root 2344 1969-12-31 19:00 init.goldfish.rc
-rwxr-x--- root root 2910 1969-12-31 19:00 init.qcom.firmware_links.sh
-rwxr-x--- root root 12671 1969-12-31 19:00 init.qcom.rc
-rwxr-x--- root root 9588 1969-12-31 19:00 init.qcom.sh
-rwxr-x--- root root 23152 1969-12-31 19:00 init.rc
-rwxr-x--- root root 18402 1969-12-31 19:00 init.target.rc
-rwxr-x--- root root 3569 1969-12-31 19:00 init.target.recovery.rc
-rwxr-x--- root root 1637 1969-12-31 19:00 init.trace.rc
-rwxr-x--- root root 21425 1969-12-31 19:00 init.usb.rc
drwxrwxr-x root system 2013-02-12 17:27 mnt
dr-xr-xr-x root root 1969-12-31 19:00 proc
drwx------ root root 2012-11-30 04:28 root
drwxr-x--- root root 1969-12-31 19:00 sbin
lrwxrwxrwx root root 2013-02-12 17:27 sdcard -> /storage/sdcard0
lrwxrwxrwx root root 2013-02-12 17:27 sdcard2 -> /storage/sdcard0/ext_sd
d---r-x--- system sdcard_r 2013-02-12 17:27 storage
dr-xr-xr-x root root 2013-02-12 17:27 sys
drwxr-xr-x root root 2012-12-18 17:05 system
lrwxrwxrwx root root 2013-02-12 17:27 tombstones -> /data/tombstones
-rw-r--r-- root root 272 1969-12-31 19:00 ueventd.goldfish.rc
-rw-r--r-- root root 5594 1969-12-31 19:00 ueventd.rc
-rw-r--r-- root root 8528 1969-12-31 19:00 ueventd.target.rc
drwxrwx--x system system 2013-02-12 17:27 vendor

So, it seems to install, and tghen disappears:
The commands to install BusyBox
D/RootTools v2.6( 6429): dd if=/data/data/stericson.busybox.donate/files/bb/busybox of=/system/bin/busybox
D/RootTools v2.6( 6429): /data/local/toolbox dd if=/data/data/stericson.busybox.donate/files/bb/busybox of=/system/bin/busybox
D/RootTools v2.6( 6429): /system/bin/toolbox dd if=/data/data/stericson.busybox.donate/files/bb/busybox of=/system/bin/busybox
D/RootTools v2.6( 6429): /data/local/toolbox chmod 0755 /system/bin/busybox
D/RootTools v2.6( 6429): /system/bin/toolbox chmod 0755 /system/bin/busybox
D/RootTools v2.6( 6429): chmod 0755 /system/bin/busybox
D/RootTools v2.6( 6429): /data/local/xbin/beep: No such file or directory
D/RootTools v2.6( 6429): Command 0finished.
D/RootTools v2.6( 6429): /data/local/bin/beep: No such file or directory
D/RootTools v2.6( 6429): Command 0finished.
D/RootTools v2.6( 6429): Using Existing Root Shell!
D/RootTools v2.6( 6429): Sending command(s): ls /data/local/bin/beep
D/RootTools v2.6( 6429): beep was NOT found here: /data/local/bin/
D/RootTools v2.6( 6429): Sending command(s): ls /system/sd/xbin/beep
Shows the file being copied...
D/Command ( 6429): ID: 0, 1587+1 records in
D/Command ( 6429): ID: 0, 1587+1 records out
D/Command ( 6429): ID: 0, 813044 bytes transferred in 0.040 secs (20326100 bytes/sec)
D/Command ( 6429): ID: 0, 1587+1 records in
D/Command ( 6429): ID: 0, 1587+1 records out
D/Command ( 6429): ID: 0, 813044 bytes transferred in 0.046 secs (17674869 bytes/sec)
D/Command ( 6429): ID: 0, 1587+1 records in
D/Command ( 6429): ID: 0, 1587+1 records out
D/Command ( 6429): ID: 0, 813044 bytes transferred in 0.043 secs (18908000 bytes/sec)
It is gone!
D/RootTools v2.6( 6429): Command 0finished.
D/RootTools v2.6( 6429): Using Existing Root Shell!
D/RootTools v2.6( 6429): Sending command(s): /system/bin/busybox --install -s /system/bin/
D/RootTools v2.6( 6429): /data/local/bin/beep: No such file or directory
D/RootTools v2.6( 6429): Command 0finished.
D/RootTools v2.6( 6429): /system/sd/xbin/beep: No such file or directory
D/RootTools v2.6( 6429): Command 0finished.
D/RootTools v2.6( 6429): Using Existing Root Shell!
D/RootTools v2.6( 6429): Sending command(s): ls /system/sd/xbin/beep
D/RootTools v2.6( 6429): beep was NOT found here: /system/sd/xbin/
D/RootTools v2.6( 6429): Sending command(s): ls /system/bin/failsafe/beep
D/RootTools v2.6( 6429): Command 0finished.
D/RootTools v2.6( 6429): /system/sd/xbin/beep: No such file or directory
D/RootTools v2.6( 6429): Command 0finished.

Related

Root: shaking something loose [WIP]

Don't know how much time I'll spend on this, since someone smarter than me will come along or (fingers crossed) HTC will decrypt the bootloader.
Just some stuff from poking around that I thought might shake stuff loose for people. I'm still poking around, really only done privilege escalation as part of the infosec portion of my job before, but if I can help...
/system/bin
Code:
-rwxr-xr-x root shell 5520 2011-05-23 09:33 3D_calibration
-rwxr-xr-x root shell 69168 2011-05-23 09:33 DMTest
-rwxr-xr-x root shell 10247904 2011-05-13 14:51 DxDrmServerIpc
-rwxr-xr-x root shell 5540 2011-05-23 09:32 PktRspTest
-rwxr-xr-x root shell 191 2011-05-13 14:38 am
-rwxr-xr-x root shell 218182 2011-05-13 14:23 androidvncserver
-rwxr-xr-x root shell 9732 2011-05-23 09:32 aparse
-rwxr-xr-x root shell 5720 2011-05-23 09:33 app_process
-rwxr-xr-x root shell 150628 2011-05-23 09:32 apph
-rwxr-xr-x root shell 49924 2011-05-23 09:32 applypatch
-rwxr-xr-x root shell 39020 2011-05-23 09:33 awb_camera
-rwxr-xr-x root shell 18080 2011-05-23 09:33 badblocks
-rwxr-xr-x root shell 5292 2011-05-23 09:33 bluetoothd
-rwxr-xr-x root shell 9648 2011-05-23 09:33 bma150_usr
-rwxr-xr-x root shell 199 2011-05-13 14:38 bmgr
-rwxr-xr-x root shell 44404 2011-05-23 09:33 bootanimation
-rwxr-xr-x root shell 9716 2011-05-23 09:32 bootcomplete
-rwxr-xr-x root shell 2003092 2011-05-13 14:23 btld
-rwxr-xr-x root shell 5556 2011-05-23 09:32 bugreport
-rwxr-xr-x root shell 5472 2011-05-23 09:33 cam_ins_spmo
lrwxr-xr-x root shell 2011-05-23 09:33 cat -> toolbox
-rwxr-xr-x root shell 9844 2011-05-23 09:33 charging
lrwxr-xr-x root shell 2011-05-23 09:33 chmod -> toolbox
lrwxr-xr-x root shell 2011-05-23 09:33 chown -> toolbox
-rwxr-xr-x root shell 5520 2011-05-23 09:33 chownThp
lrwxr-xr-x root shell 2011-05-23 09:33 chownto -> toolbox
lrwxr-xr-x root shell 2011-05-23 09:33 cmp -> toolbox
-rwxr-xr-x root shell 5520 2011-05-23 09:33 dalvikvm
lrwxr-xr-x root shell 2011-05-23 09:33 date -> toolbox
-rwxr-xr-x root shell 109504 2011-05-23 09:33 dbus-daemon
-rwxr-xr-x root shell 14208 2011-05-23 09:33 dcvs
-rwxr-xr-x root shell 14324 2011-05-23 09:33 dcvsd
lrwxr-xr-x root shell 2011-05-23 09:33 dd -> toolbox
-rwxr-xr-x root shell 9676 2011-05-13 14:51 debug_tool
-rwxr-xr-x root shell 22272 2011-05-23 09:33 debuggerd
-rwxr-xr-x root shell 9796 2011-05-23 09:33 dexopt
lrwxr-xr-x root shell 2011-05-23 09:33 df -> toolbox
-rwxr-xr-x root shell 44596 2011-05-23 09:32 dhcpcd
-rwxr-xr-x root shell 36040 2011-05-13 14:23 dhd
-rwxr-xr-x root shell 5648 2011-05-23 09:32 diag_klog
-rwxr-xr-x root shell 5840 2011-05-23 09:32 diag_mdlog
-rwxr-xr-x root shell 67540 2011-05-23 09:33 dmagent
lrwxr-xr-x root shell 2011-05-23 09:33 dmesg -> toolbox
-rwxr-xr-x root shell 108820 2011-05-23 09:32 dnsmasq
-rwxr-xr-x root shell 34544 2011-05-23 09:32 dumpstate
-rwxr-xr-x root shell 9812 2011-05-23 09:33 dumpsys
-rwxr-xr-x root shell 5548 2011-05-23 09:32 dvz
-rwxr-xr-x root shell 119684 2011-05-23 09:33 e2fsck
-rwxr-xr-x root shell 249836 2011-05-23 09:32 e2fsck_recvy
-rwxr-xr-x root shell 9632 2011-05-23 09:32 fbtool
-rwxr-xr-x root shell 22640 2011-05-23 09:32 fsck_msdos
-rwxr-xr-x root shell 14324 2011-05-23 09:33 fusermount
-rwxr-xr-x root shell 13860 2011-05-23 09:33 getWiMAXPropDaemond
lrwxr-xr-x root shell 2011-05-23 09:33 getevent -> toolbox
lrwxr-xr-x root shell 2011-05-23 09:33 getprop -> toolbox
-rwxr-xr-x root shell 5604 2011-05-23 09:32 gzip
-rwxr-xr-x root shell 23284 2011-05-23 09:33 hciattach
lrwxr-xr-x root shell 2011-05-23 09:33 hd -> toolbox
-rwxr-xr-x root shell 68900 2011-05-23 09:33 hdmid
-rwxr-xr-x root shell 18160 2011-05-23 09:33 htc_ebdlogd
-rwxr-xr-x root shell 68004 2011-05-23 09:32 htcbatt
-rwxr-xr-x root shell 14232 2011-05-23 09:33 htcfs
-rwxr-xr-x root shell 5428 2011-05-13 14:51 htclogkernel
lrwxr-xr-x root shell 2011-05-23 09:33 id -> toolbox
lrwxr-xr-x root shell 2011-05-23 09:33 ifconfig -> toolbox
lrwxr-xr-x root shell 2011-05-23 09:33 iftop -> toolbox
-rwxr-xr-x root shell 194 2011-05-13 14:38 ime
-rwxr-xr-x root shell 201 2011-05-13 14:38 input
lrwxr-xr-x root shell 2011-05-23 09:33 insmod -> toolbox
-rwxr-xr-x root shell 22436 2011-05-23 09:32 installd
lrwxr-xr-x root shell 2011-05-23 09:33 ioctl -> toolbox
lrwxr-xr-x root shell 2011-05-23 09:33 ionice -> toolbox
-rwxr-xr-x root inet 147252 2011-05-23 09:32 ip
-rwxr-xr-x root inet 5588 2011-05-23 09:32 ipd
-rwxr-xr-x root shell 101060 2011-05-23 09:32 iptables
-rwxr-xr-x root shell 5620 2011-05-23 09:32 keypress
-rwxr-xr-x root shell 10112 2011-05-23 09:32 keystore
lrwxr-xr-x root shell 2011-05-23 09:33 kill -> toolbox
-rwxr-xr-x root shell 13812 2011-05-23 09:32 kthp_proxy
-rwxr-xr-x root shell 39448 2011-05-23 09:32 linker
lrwxr-xr-x root shell 2011-05-23 09:33 ln -> toolbox
-rwxr-xr-x root shell 115 2011-05-13 14:23 load-modem.sh
lrwxr-xr-x root shell 2011-05-23 09:33 log -> toolbox
-rwxr-xr-x root shell 13952 2011-05-23 09:32 logcat
-rwxr-xr-x root shell 13984 2011-05-23 09:32 logcat2
-rwxr-xr-x root shell 9760 2011-05-23 09:32 logwrapper
lrwxr-xr-x root shell 2011-05-23 09:33 ls -> toolbox
-rwxr-xr-x root shell 65648 2011-05-23 09:33 lsc_camera
lrwxr-xr-x root shell 2011-05-23 09:33 lsmod -> toolbox
lrwxr-xr-x root shell 2011-05-23 09:33 lsof -> toolbox
-rwxr-xr-x root shell 5504 2011-05-23 09:32 make_ext4fs
-rwxr-xr-x root shell 5564 2011-05-23 09:33 mediaserver
lrwxr-xr-x root shell 2011-05-23 09:33 mkdir -> toolbox
-rwxr-xr-x root shell 34848 2011-05-23 09:33 mke2fs
-rwxr-xr-x root shell 141036 2011-05-23 09:32 mke2fs_recvy
-rwxr-xr-x root shell 9520 2011-05-23 09:33 mm-audio-acdb-test
-rwxr-xr-x root shell 5408 2011-05-23 09:32 mm-audio-alsa-test
-rwxr-xr-x root shell 22260 2011-05-23 09:33 mm-mpo-enc-test
-rwxr-xr-x root shell 10652 2011-05-23 09:32 mm-qcamera-testsuite-client
-rwxr-xr-x root shell 10652 2011-05-23 09:32 mm-qcamera-testsuite-client-awb
-rwxr-xr-x root shell 26492 2011-05-23 09:33 mm-vdec-omx-test
-rwxr-xr-x root shell 63620 2011-05-23 09:33 mm-venc-omx-test
-rwxr-xr-x root shell 30468 2011-05-23 09:33 mm-venc-omx-test720p
-rwxr-xr-x root shell 13760 2011-05-23 09:32 mm-video-driver-test
-rwxr-xr-x root shell 13680 2011-05-23 09:32 mm-video-encdrv-test
-rwxr-xr-x root shell 53892 2011-05-23 09:33 mmcamera_test
-rwxr-xr-x root shell 205 2011-05-13 14:21 monkey
lrwxr-xr-x root shell 2011-05-23 09:33 mount -> toolbox
-rwxr-xr-x root shell 9984 2011-05-23 09:33 mpdecision
-rwxr-xr-x root shell 18308 2011-05-23 09:32 mtpd
lrwxr-xr-x root shell 2011-05-23 09:33 mv -> toolbox
lrwxr-xr-x root shell 2011-05-23 09:33 nandread -> toolbox
-rwxr-xr-x root shell 5604 2011-05-23 09:32 ndc
-rwxr-s--- root inet 5676 2011-05-23 09:33 netcfg
-rwxr-xr-x root shell 39412 2011-05-23 09:33 netd
-rwxr-xr-x root shell 48420 2011-05-23 09:33 netmgrd
-rwxr-xr-x root shell 13988 2011-05-23 09:33 netsharing
lrwxr-xr-x root shell 2011-05-23 09:33 netstat -> toolbox
lrwxr-xr-x root shell 2011-05-23 09:33 newfs_msdos -> toolbox
-rwxr-xr-x root shell 5520 2011-05-23 09:33 nl_listener
lrwxr-xr-x root shell 2011-05-23 09:33 notify -> toolbox
-rwxr-xr-x root shell 32616 2011-05-23 09:33 omx_tests
-rwxr-xr-x root shell 18692 2011-05-23 09:33 pand
-rwxr-sr-x root net_raw 26720 2011-05-23 09:32 ping
-rwxr-xr-x root shell 191 2011-05-13 14:38 pm
-rwxr-xr-x root shell 139540 2011-05-23 09:32 pppd
lrwxr-xr-x root shell 2011-05-23 09:33 printenv -> toolbox
lrwxr-xr-x root shell 2011-05-23 09:33 ps -> toolbox
-rwxr-xr-x root shell 28772 2011-05-23 09:32 qmuxd
-rwxr-xr-x root shell 142516 2011-05-23 09:32 racoon
-rwxr-xr-x root shell 5424 2011-05-23 09:32 radiooptions
-rwsr-sr-x root shell 5604 2011-05-23 09:32 reboot
lrwxr-xr-x root shell 2011-05-23 09:33 renice -> toolbox
-rwxr-xr-x root shell 26372 2011-05-23 09:33 resize2fs
-rwxr-xr-x root shell 47524 2011-05-23 09:32 resize2fs_recvy
-rwxr-xr-x root shell 9808 2011-05-23 09:33 rild
lrwxr-xr-x root shell 2011-05-23 09:33 rm -> toolbox
lrwxr-xr-x root shell 2011-05-23 09:33 rmdir -> toolbox
lrwxr-xr-x root shell 2011-05-23 09:33 rmmod -> toolbox
-rwxr-xr-x root shell 59412 2011-05-23 09:32 rmt_storage
lrwxr-xr-x root shell 2011-05-23 09:33 route -> toolbox
-rwsr-s--- root shell 59860 2011-05-23 09:32 run-as
-rwxr-xr-x root shell 5392 2011-05-23 09:32 schedtest
lrwxr-xr-x root shell 2011-05-23 09:33 schedtop -> toolbox
-rwxr-xr-x root shell 13936 2011-05-23 09:32 sdcard
-rwxr-xr-x root shell 42404 2011-05-23 09:33 sdptool
lrwxr-xr-x root shell 2011-05-23 09:33 sendevent -> toolbox
-rwxr-xr-x root shell 763396 2011-05-23 09:33 sequansd
-rwxr-xr-x root shell 34692 2011-05-23 09:33 ser2net
-rwxr-xr-x root shell 9860 2011-05-23 09:33 service
-rwxr-xr-x root shell 9956 2011-05-23 09:32 servicemanager
-rwxr-xr-x root shell 17972 2011-05-23 09:33 setWiMAXPropDaemond
lrwxr-xr-x root shell 2011-05-23 09:33 setconsole -> toolbox
lrwxr-xr-x root shell 2011-05-23 09:33 setprop -> toolbox
-rwxr-xr-x root shell 82840 2011-05-23 09:32 sh
-rwxr-xr-x root shell 18164 2011-05-23 09:32 shutdown
lrwxr-xr-x root shell 2011-05-23 09:33 sleep -> toolbox
lrwxr-xr-x root shell 2011-05-23 09:33 smd -> toolbox
-rwxr-xr-x root shell 5408 2011-05-23 09:32 snd
-rwxr-xr-x root shell 9504 2011-05-23 09:32 snd8k
-rwxr-xr-x root shell 18000 2011-05-23 09:32 sound8x60
lrwxr-xr-x root shell 2011-05-23 09:33 start -> toolbox
lrwxr-xr-x root shell 2011-05-23 09:33 stop -> toolbox
-rwxr-xr-x root shell 5456 2011-05-23 09:33 surfaceflinger
-rwxr-xr-x root shell 192 2011-05-13 14:38 svc
lrwxr-xr-x root shell 2011-05-23 09:33 sync -> toolbox
-rwxr-xr-x root shell 5480 2011-05-23 09:33 system_server
-rwxr-xr-x root shell 67956 2011-05-23 09:32 tc
-rwxr-xr-x root shell 10084 2011-05-23 09:32 test_diag
-rwxr-xr-x root shell 14164 2011-05-23 09:32 thermald
-rwxr-xr-x root shell 81544 2011-05-23 09:32 toolbox
lrwxr-xr-x root shell 2011-05-23 09:33 top -> toolbox
-rwxr-xr-x root shell 5648 2011-05-23 09:32 touchevent
-rwxr-xr-x root shell 5644 2011-05-23 09:32 touchscreen
-rwxr-xr-x root shell 26564 2011-05-23 09:33 tune2fs
-rwxr-xr-x root shell 141428 2011-05-23 09:32 tune2fs_recvy
-rwxr-xr-x root shell 19504 2011-05-23 09:32 udhcpd
lrwxr-xr-x root shell 2011-05-23 09:33 umount -> toolbox
lrwxr-xr-x root shell 2011-05-23 09:33 uptime -> toolbox
-rwxr-xr-x root shell 408 2011-05-13 14:23 usbnet
-rwxr-xr-x root shell 5552 2011-05-23 09:32 vdc
lrwxr-xr-x root shell 2011-05-23 09:33 vmstat -> toolbox
-rwxr-xr-x root shell 55860 2011-05-23 09:33 vold
lrwxr-xr-x root shell 2011-05-23 09:33 watchprops -> toolbox
-rwxr-xr-x root shell 5504 2011-05-23 09:33 wimaxAddRoute
-rwxr-xr-x root shell 5520 2011-05-23 09:33 wimaxConfigInterface
-rwxr-xr-x root shell 22144 2011-05-23 09:33 wimaxDaemon
-rwxr-xr-x root shell 5520 2011-05-23 09:33 wimaxDhcpRelease
-rwxr-xr-x root shell 5424 2011-05-23 09:33 wimaxDhcpRenew
-rwxr-xr-x root shell 5536 2011-05-23 09:33 wimaxDumpKmsg
-rwxr-xr-x root shell 5536 2011-05-23 09:33 wimaxDumpLastKmsg
-rwxr-xr-x root shell 5536 2011-05-23 09:33 wimaxDumpLogcat
-rwxr-xr-x root shell 30368 2011-05-23 09:33 wimax_mtd
-rwxr-xr-x root shell 5424 2011-05-23 09:33 wimax_uart
lrwxr-xr-x root shell 2011-05-23 09:33 wipe -> toolbox
-rwxr-xr-x root shell 249648 2011-05-13 14:23 wl
-rwxr-xr-x root shell 304228 2011-05-23 09:33 wpa_supplicant
Here's the ones with a suid bit set (nowhere else is the suid bit set):
Code:
-rwxr-s--- root inet 5676 2011-05-23 09:33 netcfg
-rwxr-sr-x root net_raw 26720 2011-05-23 09:32 ping
-rwsr-sr-x root shell 5604 2011-05-23 09:32 reboot
-rwsr-s--- root shell 59860 2011-05-23 09:32 run-as
There's a sticky bit here (the only one):
Code:
/sys/devices/virtual/graphics/fb1/video_mode --w----r-T root root 4096 2011-06-27 18:07 video_mode
here's current user id output, including groups.
Code:
uid=2000(shell) gid=2000(shell) groups=1003(graphics),1004(input),1007(log),1009(mount),1011(adb),1015(sdcard_rw),3001(net_bt_admin),3002(net_bt),3003(inet)
run-as seems to be a decent way to get whatever group membership we need, but it won't allow us to escalate to root (it takes an application to run as, not a user), though there may be an exploit there somewhere.
reboot seems to take a "reboot command" of some sort, not sure what that is exactly, playing with that now.
I've got a little python utility I threw together that drives ADB, and does dives into file types, permissions, etc. and allows me to sort and slice the data however I want. If that would be useful for someone, I can throw it up here.
all executables in the filesystem, not including /mnt, links, block devices, character devices, sockets, or pipes:
Code:
/system/bin/3D_calibration -rwxr-xr-x root shell 5520 2011-05-23 09:33 3D_calibration
/system/bin/DMTest -rwxr-xr-x root shell 69168 2011-05-23 09:33 DMTest
/system/bin/DxDrmServerIpc -rwxr-xr-x root shell 10247904 2011-05-13 14:51 DxDrmServerIpc
/system/bin/PktRspTest -rwxr-xr-x root shell 5540 2011-05-23 09:32 PktRspTest
/system/bin/am -rwxr-xr-x root shell 191 2011-05-13 14:38 am
/system/bin/androidvncserver -rwxr-xr-x root shell 218182 2011-05-13 14:23 androidvncserver
/system/bin/aparse -rwxr-xr-x root shell 9732 2011-05-23 09:32 aparse
/system/bin/app_process -rwxr-xr-x root shell 5720 2011-05-23 09:33 app_process
/system/bin/apph -rwxr-xr-x root shell 150628 2011-05-23 09:32 apph
/system/bin/applypatch -rwxr-xr-x root shell 49924 2011-05-23 09:32 applypatch
/system/bin/awb_camera -rwxr-xr-x root shell 39020 2011-05-23 09:33 awb_camera
/system/bin/badblocks -rwxr-xr-x root shell 18080 2011-05-23 09:33 badblocks
/system/bin/bluetoothd -rwxr-xr-x root shell 5292 2011-05-23 09:33 bluetoothd
/system/bin/bma150_usr -rwxr-xr-x root shell 9648 2011-05-23 09:33 bma150_usr
/system/bin/bmgr -rwxr-xr-x root shell 199 2011-05-13 14:38 bmgr
/system/bin/bootanimation -rwxr-xr-x root shell 44404 2011-05-23 09:33 bootanimation
/system/bin/bootcomplete -rwxr-xr-x root shell 9716 2011-05-23 09:32 bootcomplete
/system/bin/btld -rwxr-xr-x root shell 2003092 2011-05-13 14:23 btld
/system/bin/bugreport -rwxr-xr-x root shell 5556 2011-05-23 09:32 bugreport
/system/bin/cam_ins_spmo -rwxr-xr-x root shell 5472 2011-05-23 09:33 cam_ins_spmo
/system/bin/charging -rwxr-xr-x root shell 9844 2011-05-23 09:33 charging
/system/bin/chownThp -rwxr-xr-x root shell 5520 2011-05-23 09:33 chownThp
/system/bin/dalvikvm -rwxr-xr-x root shell 5520 2011-05-23 09:33 dalvikvm
/system/bin/dbus-daemon -rwxr-xr-x root shell 109504 2011-05-23 09:33 dbus-daemon
/system/bin/dcvs -rwxr-xr-x root shell 14208 2011-05-23 09:33 dcvs
/system/bin/dcvsd -rwxr-xr-x root shell 14324 2011-05-23 09:33 dcvsd
/system/bin/debug_tool -rwxr-xr-x root shell 9676 2011-05-13 14:51 debug_tool
/system/bin/debuggerd -rwxr-xr-x root shell 22272 2011-05-23 09:33 debuggerd
/system/bin/dexopt -rwxr-xr-x root shell 9796 2011-05-23 09:33 dexopt
/system/bin/dhcpcd -rwxr-xr-x root shell 44596 2011-05-23 09:32 dhcpcd
/system/bin/dhd -rwxr-xr-x root shell 36040 2011-05-13 14:23 dhd
/system/bin/diag_klog -rwxr-xr-x root shell 5648 2011-05-23 09:32 diag_klog
/system/bin/diag_mdlog -rwxr-xr-x root shell 5840 2011-05-23 09:32 diag_mdlog
/system/bin/dmagent -rwxr-xr-x root shell 67540 2011-05-23 09:33 dmagent
/system/bin/dnsmasq -rwxr-xr-x root shell 108820 2011-05-23 09:32 dnsmasq
/system/bin/dumpstate -rwxr-xr-x root shell 34544 2011-05-23 09:32 dumpstate
/system/bin/dumpsys -rwxr-xr-x root shell 9812 2011-05-23 09:33 dumpsys
/system/bin/dvz -rwxr-xr-x root shell 5548 2011-05-23 09:32 dvz
/system/bin/e2fsck -rwxr-xr-x root shell 119684 2011-05-23 09:33 e2fsck
/system/bin/e2fsck_recvy -rwxr-xr-x root shell 249836 2011-05-23 09:32 e2fsck_recvy
/system/bin/fbtool -rwxr-xr-x root shell 9632 2011-05-23 09:32 fbtool
/system/bin/fsck_msdos -rwxr-xr-x root shell 22640 2011-05-23 09:32 fsck_msdos
/system/bin/fusermount -rwxr-xr-x root shell 14324 2011-05-23 09:33 fusermount
/system/bin/getWiMAXPropDaemond -rwxr-xr-x root shell 13860 2011-05-23 09:33 getWiMAXPropDaemond
/system/bin/gzip -rwxr-xr-x root shell 5604 2011-05-23 09:32 gzip
/system/bin/hciattach -rwxr-xr-x root shell 23284 2011-05-23 09:33 hciattach
/system/bin/hdmid -rwxr-xr-x root shell 68900 2011-05-23 09:33 hdmid
/system/bin/htc_ebdlogd -rwxr-xr-x root shell 18160 2011-05-23 09:33 htc_ebdlogd
/system/bin/htcbatt -rwxr-xr-x root shell 68004 2011-05-23 09:32 htcbatt
/system/bin/htcfs -rwxr-xr-x root shell 14232 2011-05-23 09:33 htcfs
/system/bin/htclogkernel -rwxr-xr-x root shell 5428 2011-05-13 14:51 htclogkernel
/system/bin/ime -rwxr-xr-x root shell 194 2011-05-13 14:38 ime
/system/bin/input -rwxr-xr-x root shell 201 2011-05-13 14:38 input
/system/bin/installd -rwxr-xr-x root shell 22436 2011-05-23 09:32 installd
/system/bin/ip -rwxr-xr-x root inet 147252 2011-05-23 09:32 ip
/system/bin/ipd -rwxr-xr-x root inet 5588 2011-05-23 09:32 ipd
/system/bin/iptables -rwxr-xr-x root shell 101060 2011-05-23 09:32 iptables
/system/bin/keypress -rwxr-xr-x root shell 5620 2011-05-23 09:32 keypress
/system/bin/keystore -rwxr-xr-x root shell 10112 2011-05-23 09:32 keystore
/system/bin/kthp_proxy -rwxr-xr-x root shell 13812 2011-05-23 09:32 kthp_proxy
/system/bin/linker -rwxr-xr-x root shell 39448 2011-05-23 09:32 linker
/system/bin/load-modem.sh -rwxr-xr-x root shell 115 2011-05-13 14:23 load-modem.sh
/system/bin/logcat -rwxr-xr-x root shell 13952 2011-05-23 09:32 logcat
/system/bin/logcat2 -rwxr-xr-x root shell 13984 2011-05-23 09:32 logcat2
/system/bin/logwrapper -rwxr-xr-x root shell 9760 2011-05-23 09:32 logwrapper
/system/bin/lsc_camera -rwxr-xr-x root shell 65648 2011-05-23 09:33 lsc_camera
/system/bin/make_ext4fs -rwxr-xr-x root shell 5504 2011-05-23 09:32 make_ext4fs
/system/bin/mediaserver -rwxr-xr-x root shell 5564 2011-05-23 09:33 mediaserver
/system/bin/mke2fs -rwxr-xr-x root shell 34848 2011-05-23 09:33 mke2fs
/system/bin/mke2fs_recvy -rwxr-xr-x root shell 141036 2011-05-23 09:32 mke2fs_recvy
/system/bin/mm-audio-acdb-test -rwxr-xr-x root shell 9520 2011-05-23 09:33 mm-audio-acdb-test
/system/bin/mm-audio-alsa-test -rwxr-xr-x root shell 5408 2011-05-23 09:32 mm-audio-alsa-test
/system/bin/mm-mpo-enc-test -rwxr-xr-x root shell 22260 2011-05-23 09:33 mm-mpo-enc-test
/system/bin/mm-qcamera-testsuite-client -rwxr-xr-x root shell 10652 2011-05-23 09:32 mm-qcamera-testsuite-client
/system/bin/mm-qcamera-testsuite-client-awb -rwxr-xr-x root shell 10652 2011-05-23 09:32 mm-qcamera-testsuite-client-awb
/system/bin/mm-vdec-omx-test -rwxr-xr-x root shell 26492 2011-05-23 09:33 mm-vdec-omx-test
/system/bin/mm-venc-omx-test -rwxr-xr-x root shell 63620 2011-05-23 09:33 mm-venc-omx-test
/system/bin/mm-venc-omx-test720p -rwxr-xr-x root shell 30468 2011-05-23 09:33 mm-venc-omx-test720p
/system/bin/mm-video-driver-test -rwxr-xr-x root shell 13760 2011-05-23 09:32 mm-video-driver-test
/system/bin/mm-video-encdrv-test -rwxr-xr-x root shell 13680 2011-05-23 09:32 mm-video-encdrv-test
/system/bin/mmcamera_test -rwxr-xr-x root shell 53892 2011-05-23 09:33 mmcamera_test
/system/bin/monkey -rwxr-xr-x root shell 205 2011-05-13 14:21 monkey
/system/bin/mpdecision -rwxr-xr-x root shell 9984 2011-05-23 09:33 mpdecision
/system/bin/mtpd -rwxr-xr-x root shell 18308 2011-05-23 09:32 mtpd
/system/bin/ndc -rwxr-xr-x root shell 5604 2011-05-23 09:32 ndc
/system/bin/netd -rwxr-xr-x root shell 39412 2011-05-23 09:33 netd
/system/bin/netmgrd -rwxr-xr-x root shell 48420 2011-05-23 09:33 netmgrd
/system/bin/netsharing -rwxr-xr-x root shell 13988 2011-05-23 09:33 netsharing
/system/bin/nl_listener -rwxr-xr-x root shell 5520 2011-05-23 09:33 nl_listener
/system/bin/omx_tests -rwxr-xr-x root shell 32616 2011-05-23 09:33 omx_tests
/system/bin/pand -rwxr-xr-x root shell 18692 2011-05-23 09:33 pand
/system/bin/ping -rwxr-sr-x root net_raw 26720 2011-05-23 09:32 ping
/system/bin/pm -rwxr-xr-x root shell 191 2011-05-13 14:38 pm
/system/bin/pppd -rwxr-xr-x root shell 139540 2011-05-23 09:32 pppd
/system/bin/qmuxd -rwxr-xr-x root shell 28772 2011-05-23 09:32 qmuxd
/system/bin/racoon -rwxr-xr-x root shell 142516 2011-05-23 09:32 racoon
/system/bin/radiooptions -rwxr-xr-x root shell 5424 2011-05-23 09:32 radiooptions
/system/bin/reboot -rwsr-sr-x root shell 5604 2011-05-23 09:32 reboot
/system/bin/resize2fs -rwxr-xr-x root shell 26372 2011-05-23 09:33 resize2fs
/system/bin/resize2fs_recvy -rwxr-xr-x root shell 47524 2011-05-23 09:32 resize2fs_recvy
/system/bin/rild -rwxr-xr-x root shell 9808 2011-05-23 09:33 rild
/system/bin/rmt_storage -rwxr-xr-x root shell 59412 2011-05-23 09:32 rmt_storage
/system/bin/schedtest -rwxr-xr-x root shell 5392 2011-05-23 09:32 schedtest
/system/bin/sdcard -rwxr-xr-x root shell 13936 2011-05-23 09:32 sdcard
/system/bin/sdptool -rwxr-xr-x root shell 42404 2011-05-23 09:33 sdptool
/system/bin/sequansd -rwxr-xr-x root shell 763396 2011-05-23 09:33 sequansd
/system/bin/ser2net -rwxr-xr-x root shell 34692 2011-05-23 09:33 ser2net
/system/bin/service -rwxr-xr-x root shell 9860 2011-05-23 09:33 service
/system/bin/servicemanager -rwxr-xr-x root shell 9956 2011-05-23 09:32 servicemanager
/system/bin/setWiMAXPropDaemond -rwxr-xr-x root shell 17972 2011-05-23 09:33 setWiMAXPropDaemond
/system/bin/sh -rwxr-xr-x root shell 82840 2011-05-23 09:32 sh
/system/bin/shutdown -rwxr-xr-x root shell 18164 2011-05-23 09:32 shutdown
/system/bin/snd -rwxr-xr-x root shell 5408 2011-05-23 09:32 snd
/system/bin/snd8k -rwxr-xr-x root shell 9504 2011-05-23 09:32 snd8k
/system/bin/sound8x60 -rwxr-xr-x root shell 18000 2011-05-23 09:32 sound8x60
/system/bin/surfaceflinger -rwxr-xr-x root shell 5456 2011-05-23 09:33 surfaceflinger
/system/bin/svc -rwxr-xr-x root shell 192 2011-05-13 14:38 svc
/system/bin/system_server -rwxr-xr-x root shell 5480 2011-05-23 09:33 system_server
/system/bin/tc -rwxr-xr-x root shell 67956 2011-05-23 09:32 tc
/system/bin/test_diag -rwxr-xr-x root shell 10084 2011-05-23 09:32 test_diag
/system/bin/thermald -rwxr-xr-x root shell 14164 2011-05-23 09:32 thermald
/system/bin/toolbox -rwxr-xr-x root shell 81544 2011-05-23 09:32 toolbox
/system/bin/touchevent -rwxr-xr-x root shell 5648 2011-05-23 09:32 touchevent
/system/bin/touchscreen -rwxr-xr-x root shell 5644 2011-05-23 09:32 touchscreen
/system/bin/tune2fs -rwxr-xr-x root shell 26564 2011-05-23 09:33 tune2fs
/system/bin/tune2fs_recvy -rwxr-xr-x root shell 141428 2011-05-23 09:32 tune2fs_recvy
/system/bin/udhcpd -rwxr-xr-x root shell 19504 2011-05-23 09:32 udhcpd
/system/bin/usbnet -rwxr-xr-x root shell 408 2011-05-13 14:23 usbnet
/system/bin/vdc -rwxr-xr-x root shell 5552 2011-05-23 09:32 vdc
/system/bin/vold -rwxr-xr-x root shell 55860 2011-05-23 09:33 vold
/system/bin/wimaxAddRoute -rwxr-xr-x root shell 5504 2011-05-23 09:33 wimaxAddRoute
/system/bin/wimaxConfigInterface -rwxr-xr-x root shell 5520 2011-05-23 09:33 wimaxConfigInterface
/system/bin/wimaxDaemon -rwxr-xr-x root shell 22144 2011-05-23 09:33 wimaxDaemon
/system/bin/wimaxDhcpRelease -rwxr-xr-x root shell 5520 2011-05-23 09:33 wimaxDhcpRelease
/system/bin/wimaxDhcpRenew -rwxr-xr-x root shell 5424 2011-05-23 09:33 wimaxDhcpRenew
/system/bin/wimaxDumpKmsg -rwxr-xr-x root shell 5536 2011-05-23 09:33 wimaxDumpKmsg
/system/bin/wimaxDumpLastKmsg -rwxr-xr-x root shell 5536 2011-05-23 09:33 wimaxDumpLastKmsg
/system/bin/wimaxDumpLogcat -rwxr-xr-x root shell 5536 2011-05-23 09:33 wimaxDumpLogcat
/system/bin/wimax_mtd -rwxr-xr-x root shell 30368 2011-05-23 09:33 wimax_mtd
/system/bin/wimax_uart -rwxr-xr-x root shell 5424 2011-05-23 09:33 wimax_uart
/system/bin/wl -rwxr-xr-x root shell 249648 2011-05-13 14:23 wl
/system/bin/wpa_supplicant -rwxr-xr-x root shell 304228 2011-05-23 09:33 wpa_supplicant
/system/etc/ppp/ip-up-vpn -r-xr-xr-x root root 5520 2011-05-23 09:32 ip-up-vpn
/system/xbin/dexdump -rwxr-xr-x root shell 60276 2011-05-23 09:32 dexdump
/system/xbin/wireless_modem -rwxr-xr-x root shell 22256 2011-05-23 09:33 wireless_modem
/sys/devices/virtual/graphics/fb1/video_mode --w----r-T root root 4096 2011-06-27 19:04 video_mode
/sys/module/bcm4329/parameters/dhd_master_mode ---------x root root 4096 2011-06-27 19:01 dhd_master_mode
/dev/cpuctl/tasks -rwxrwxrwx system system 0 2011-06-27 15:01 tasks
/dev/cpuctl/bg_non_interactive/tasks -rwxrwxrwx system system 0 2011-06-27 15:01 tasks
/dev/cpuctl/fg_boost/tasks -rwxrwxrwx system system 0 2011-06-27 15:01 tasks
yeah, I wasn't thinking. Reboot command is something like "recovery". Not a real command.
way above my head but hopefully can help!
Is the ping command exploitable like it was in the wrt54g routers.. I'm not sure of the exploit but it allowed root access and reflashing
I was reading through an article that seemed newer, and it had an interesting way of achieving root. http://www.erodov.com/forums/how-root-any-android-device-manually/43325-page2.html
probably won't work for us but yeah....
I dont know if our phones have download mode, I haven't really had anytime to try anything. I'm still in tech school for the Air Force... Consumes the hell out of my day... I get to my normal base in the end of august. So if no root by then, ill sit down and try some stuff.... Wonder if the people with S-off might benefit from this, though i need to read way more into it.
wasupwithuman said:
I was reading through an article that seemed newer, and it had an interesting way of achieving root. http://www.erodov.com/forums/how-root-any-android-device-manually/43325-page2.html
probably won't work for us but yeah....
I dont know if our phones have download mode, I haven't really had anytime to try anything. I'm still in tech school for the Air Force... Consumes the hell out of my day... I get to my normal base in the end of august. So if no root by then, ill sit down and try some stuff.... Wonder if the people with S-off might benefit from this, though i need to read way more into it.
Click to expand...
Click to collapse
only problem is that our phones don't have Download mode except in recovery but recovery doesn't allow adb so it doesn't work
that was similar to something I was pursuing earlier, never could figure it out.
You're allowed to set the suid bit on anything in the /data/local/tmp directory.
that means, theoretically if we could get a root owned file that we can edit in that directory, we could put whatever we wanted in in, set the suid bit so it executed as root, and we're off to the races (granted it's a bit more complicated than that, with suid bits on shell files and such, but still...)
if someone has a card reader, and linux, I can walk you through a thought I have though.
I haven't had a HTC in a long time... How many fastboot commands do we have access to?
dragonfyre13 said:
if someone has a card reader, and linux, I can walk you through a thought I have though.
Click to expand...
Click to collapse
I have both
but the card reader only works on my windows box... laptop
extended:
Code:
C:\android\tools>fastboot oem ?
...
(bootloader) command list
(bootloader) mb
(bootloader) mh
(bootloader) mw
(bootloader) ew
(bootloader) eh
(bootloader) eb
(bootloader) mmu
(bootloader) ram_test
(bootloader) jump
(bootloader) test
(bootloader) sdtest
(bootloader) eraseconfig
(bootloader) writeconfig
(bootloader) readconfig
(bootloader) writesku
(bootloader) readsku
(bootloader) rflash
(bootloader) tflash
(bootloader) block_test
(bootloader) partition_test
(bootloader) rbchk
(bootloader) erasesd
(bootloader) btrouter
(bootloader) tick
(bootloader) heaptable
(bootloader) sysinfo
(bootloader) emapi
(bootloader) emapiTest
(bootloader) emapiCountryID
(bootloader) emapiWlanMac
(bootloader) emapiSetDefCal
(bootloader) emapiReadCal
(bootloader) lr
(bootloader) imgcrc
(bootloader) resetautoimage
(bootloader) resetpreferdiag
(bootloader) resetRUUflag
(bootloader) writeserialno
(bootloader) readserialno
(bootloader) battcheck
(bootloader) enter
(bootloader) gotofastboot
(bootloader) gotohboot
(bootloader) writemid
(bootloader) usbtestmode
(bootloader) eraseWifiFlash
(bootloader) erase
(bootloader) readmbserialno
(bootloader) listpartition
(bootloader) erasebcid
(bootloader) writebcid
(bootloader) readbcid
(bootloader) fmrouter
(bootloader) fmtx
(bootloader) resetuP
(bootloader) bdaddress
(bootloader) readbdaddr
(bootloader) wMfgTp
(bootloader) rMfgTp
(bootloader) emptypagecheck
(bootloader) saveprt2sd
(bootloader) savemem2sd
(bootloader) savefb2sd
(bootloader) emapiInit
(bootloader) emapiChannel
(bootloader) emapiBand
(bootloader) emapiRate
(bootloader) emapiRateset
(bootloader) emapiCountry
(bootloader) emapiTXpwr1
(bootloader) emapiPkteng_start
(bootloader) emapiPkteng_stop
(bootloader) emapiOut
(bootloader) emapiFqacurcy
(bootloader) emapiCrsuprs
(bootloader) emapiUp
(bootloader) emapiDown
(bootloader) emapiMpc
(bootloader) emapiCounters
(bootloader) emapiVersion
(bootloader) emapiEtheraddr
(bootloader) emapinRate
(bootloader) emapiSetIrqPin
(bootloader) usblog
(bootloader) bkflash2emmc
(bootloader) fl
(bootloader) loaddiag
(bootloader) lnb
(bootloader) init_a1026_fw
(bootloader) checkKeyCard
(bootloader) loopback
(bootloader) spitest
(bootloader) i2ctest
(bootloader) pmic8058_led_test
(bootloader) gpiow
(bootloader) gpior
(bootloader) clock
(bootloader) i2cr
(bootloader) i2cw
(bootloader) i2ctest
(bootloader) ulpi
(bootloader) changeCid
(bootloader) read_l2_acc_fuse
(bootloader) emmc_boot
(bootloader) poweron
(bootloader) poweroff
(bootloader) setvol
(bootloader) spi
(bootloader) fat
(bootloader) pmgpiow
(bootloader) pmgpior
(bootloader) 8058vregon
(bootloader) 8058vregoff
(bootloader) 8058vregw
(bootloader) 8058vregr
(bootloader) 8901vregon
(bootloader) 8901vregoff
(bootloader) 8901vregw
(bootloader) 8901vregr
(bootloader) 8x60i2cr
(bootloader) 8x60i2crNoAddr
(bootloader) 8x60i2cwNoAddr
(bootloader) 8x60i2cw
(bootloader) mipi_test
(bootloader) chargeron
(bootloader) chargeroff
(bootloader) adc
(bootloader) readsimlocktype
(bootloader) enablesimlock
(bootloader) addsimlockcode
(bootloader) clearsimlockcode
(bootloader) listsimlockcode
(bootloader) clearunlockrecord
(bootloader) lite_heap_test
(bootloader) vibrate_test
(bootloader) getrtc
(bootloader) setrtc
(bootloader) getrtcalarm
(bootloader) setrtcalarm
(bootloader) pgfs
(bootloader) bumpclk
(bootloader) acpuclk_get
(bootloader) acpuclk_set
(bootloader) rpmclk_set
(bootloader) rpmclk_get
(bootloader) oschalt
(bootloader) tz_req
(bootloader) blow_efuse
(bootloader) enable_hw_auth
(bootloader) disable_jtag
(bootloader) blow_boot_cfg
(bootloader) lock_secboot
(bootloader) blow_sec_key
(bootloader) hide_hwkey
(bootloader) dump_tzlog
(bootloader) fdisk_emmc
(bootloader) set_partition_emmc
(bootloader) erase_emmc
(bootloader) test_emmc
(bootloader) sector_erase_emmc
(bootloader) fat_format_emmc
(bootloader) init_emmc
(bootloader) reinit_emmc
(bootloader) write_mmc
(bootloader) set_wp_emmc
(bootloader) write_prot_test
(bootloader) clear_wp_emmc
(bootloader) set_enh_area_emmc
(bootloader) wimaxinfo
(bootloader) wimaxuart
(bootloader) wimaxid
(bootloader) wimaxcmd
(bootloader) wimaxhelp
(bootloader) wimaxrmac
(bootloader) wimaxpower
(bootloader) wimaxinit
(bootloader) wimaxwmac
(bootloader) wimaxdelca
(bootloader) wimaxdelcb
(bootloader) wimaxerase
(bootloader) wimaxbackupcb
(bootloader) wimaxbackupmac
(bootloader) wimaxrestorecb
(bootloader) wimaxverifycb
(bootloader) keytest
(bootloader) heap
(bootloader) boot
(bootloader) reset
(bootloader) powerdown
(bootloader) rebootRUU
(bootloader) heap_test
(bootloader) rtask
(bootloader) task
(bootloader) enableqxdm
(bootloader) gencheckpt
(bootloader) readpid
(bootloader) writepid
(bootloader) readcid
(bootloader) writecid
(bootloader) readimei
(bootloader) writeimei
(bootloader) readsecureflag
(bootloader) writesecureflag
(bootloader) list_partition_emmc
(bootloader) load_emmc
(bootloader) check_emmc
(bootloader) check_emmc_mid
(bootloader) read_mmc
(bootloader) load_modem_emmc
(bootloader) get_wp_info_emmc
(bootloader) send_wp_info_emmc
(bootloader) get_ext_csd_emmc
(bootloader) get_sector_info_emmc
OKAY [ 0.218s]
finished. total time: 0.218s
standard:
Code:
> ... INFOcommand list
> INFOcheckSbl1
> INFOcheckHWSecurity
> INFOkeytest
> INFOheap
> INFOboot
> INFOreset
> INFOpowerdown
> INFOrebootRUU
> INFOheap_test
> INFOrtask
> INFOtask
> INFOenableqxdm
> INFOgencheckpt
> INFOreadpid
> INFOwritepid
> INFOreadcid
> INFOwritecid
> INFOreadimei
> INFOwriteimei
> INFOreadsecureflag
> INFOwritesecureflag
> INFOlist_partition_emmc
> INFOload_emmc
> INFOcheck_emmc
> INFOcheck_emmc_mid
> INFOread_mmc
> INFOload_modem_emmc
> INFOget_wp_info_emmc
> INFOsend_wp_info_emmc
> INFOget_ext_csd_emmc
> INFOget_sector_info_emmc
> OKAY
dragonfyre13 said:
if someone has a card reader, and linux, I can walk you through a thought I have though.
Click to expand...
Click to collapse
I have a card reader, stock sd card, and Linux. I have no idea what I would be doing but I will definitely take orders to help, Lol. Just pm me or walk me thru it. I have it all right here in front of me. **** you can even call me if it means we might have a chance to get this thing going.
Sent from the 3VO
Actually, got l33tlinuxh4x0r on IRC to help me out, but I'll hit you up when he gets off if I need help.
The idea didn't work, but gave me another.... working on that now.
dragonfyre13 said:
Actually, got l33tlinuxh4x0r on IRC to help me out, but I'll hit you up when he gets off if I need help.
The idea didn't work, but gave me another.... working on that now.
Click to expand...
Click to collapse
Good deal. I'm here if you guys need me. Good luck!!
dragonfyre13 said:
Actually, got l33tlinuxh4x0r on IRC to help me out, but I'll hit you up when he gets off if I need help.
The idea didn't work, but gave me another.... working on that now.
Click to expand...
Click to collapse
What exactly are you trying? I don't mean to be a Debbie-downer here, but the card-reader thing sounds like you're attempting a smart-card hack. If that's the case, don't waste your time. I looked through the public API online, and from what I can tell it requires a microsd with an integrated microprocessor to run a Java VM to communicate with the bootloader.
Anyway, good luck!
l33tlinuxh4x0r said:
Is the ping command exploitable like it was in the wrt54g routers.. I'm not sure of the exploit but it allowed root access and reflashing
Click to expand...
Click to collapse
I don't know. But i have 3 wrt54g routers flashed with dd-wrt firmware. Started doing a little dev work on those too.
Sent from 3D land
nah, nothing like a smartcard hack. This is a straight up privledge escalation hack, but to do it I need to get a file that's owned by root that I can modify (yes, I get that there's stuff in place to prevent that)
hmmm, ok, think I'm going to break for the night. Wife is going to stab me in the face as late as I am anyway.
I think I might have a lead on something.
We're in the mount group right? That means, given those permissions that we should be able to mount whatever we want (assuming it's readable by Shell). So if we put a loopback image on the SD card, what's to stop us from mounting it in /data/local/tmp? Set the uid of the owner for the files to root, wide open read and execute permissions on certain files, and we should be able to run busybox as root?
Maybe, worth a look in the morning.
dragonfyre13 said:
hmmm, ok, think I'm going to break for the night. Wife is going to stab me in the face as late as I am anyway.
I think I might have a lead on something.
We're in the mount group right? That means, given those permissions that we should be able to mount whatever we want (assuming it's readable by Shell). So if we put a loopback image on the SD card, what's to stop us from mounting it in /data/local/tmp? Set the uid of the owner for the files to root, wide open read and execute permissions on certain files, and we should be able to run busybox as root?
Maybe, worth a look in the morning.
Click to expand...
Click to collapse
Hey, we're talking about what your doing in IRC. you should hop on the next time your tinkering.
irc.freenode.net #htc-evo-3d
Oh wait... Im an idiot. You are there. HA

[Q] Noontec A9 Smart TV Box

I was just wondering if anyone had any suggestions or experience with the Noontec A9 Smart TV Box. I was given one for Christmas and I'm attempting to root it so I can run cifsmanager and play videos from samba shares.
The trouble is it only has a power button on the device. Plugging in a USB keyboard and holding down F4 (volume down) or Home then the power button does not boot into recovery mode like it does on my Samsung Galaxy Gio.
I've Google'd for root information, or in fact any information on this device, and come up with next to nothing.
with terminal:
reboot recovery
works?
I'll admit I didn't try the ADB shell until you posted. Connected it up like I did with my Samsung Galaxy Gio.
Strangely the prompt is # and it is root... but the /system partition is cramfs and can't be mounted as rw?
I can remount the root partition as rw, however I copied the su binary from the sdcard to /sbin with `cat su >/sbin/su` and set permissions then rebooted the device, and the file has magically disappeared since reboot.
`mount -o remount rw /system` does not work (running mount on its own after shows that its still mounted ro).
From the shell `reboot recovery` did reboot the device but it booted up normally, not in recovery mode.
When I ran `adb reboot recovery` instead of using the adb shell, it did the same thing.
Some adb shell output:
# mount -o remount rw /
mount -o remount rw /
# mount -o remount rw /system
mount -o remount rw /system
# mount
mount
rootfs / rootfs rw,relatime 0 0
tmpfs /dev tmpfs rw,relatime,mode=755 0 0
devpts /dev/pts devpts rw,relatime,mode=600 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,relatime 0 0
none /acct cgroup rw,relatime,cpuacct 0 0
tmpfs /mnt/asec tmpfs rw,relatime,mode=755,gid=1000 0 0
tmpfs /mnt/obb tmpfs rw,relatime,mode=755,gid=1000 0 0
none /dev/cpuctl cgroup rw,relatime,cpu 0 0
/dev/block/mtdblock4 /system cramfs ro,relatime 0 0
/dev/block/mtdblock7 /data ext3 rw,nosuid,nodev,noatime,nodiratime,errors=continue,data=ordered 0 0
/dev/block/mtdblock6 /cache ext3 rw,nosuid,nodev,noatime,nodiratime,errors=continue,data=ordered 0 0
The Noontec website has the official firmware... which is a recovery.img file inside a ZIP. Can this be modified?
critenau said:
I'll admit I didn't try the ADB shell until you posted. Connected it up like I did with my Samsung Galaxy Gio.
Strangely the prompt is # and it is root... but the /system partition is cramfs and can't be mounted as rw?
I can remount the root partition as rw, however I copied the su binary from the sdcard to /sbin with `cat su >/sbin/su` and set permissions then rebooted the device, and the file has magically disappeared since reboot.
`mount -o remount rw /system` does not work (running mount on its own after shows that its still mounted ro).
From the shell `reboot recovery` did reboot the device but it booted up normally, not in recovery mode.
When I ran `adb reboot recovery` instead of using the adb shell, it did the same thing.
Some adb shell output:
# mount -o remount rw /
mount -o remount rw /
# mount -o remount rw /system
mount -o remount rw /system
# mount
mount
rootfs / rootfs rw,relatime 0 0
tmpfs /dev tmpfs rw,relatime,mode=755 0 0
devpts /dev/pts devpts rw,relatime,mode=600 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,relatime 0 0
none /acct cgroup rw,relatime,cpuacct 0 0
tmpfs /mnt/asec tmpfs rw,relatime,mode=755,gid=1000 0 0
tmpfs /mnt/obb tmpfs rw,relatime,mode=755,gid=1000 0 0
none /dev/cpuctl cgroup rw,relatime,cpu 0 0
/dev/block/mtdblock4 /system cramfs ro,relatime 0 0
/dev/block/mtdblock7 /data ext3 rw,nosuid,nodev,noatime,nodiratime,errors=continue,data=ordered 0 0
/dev/block/mtdblock6 /cache ext3 rw,nosuid,nodev,noatime,nodiratime,errors=continue,data=ordered 0 0
The Noontec website has the official firmware... which is a recovery.img file inside a ZIP. Can this be modified?
Click to expand...
Click to collapse
Post here the recovery.img and i'll check it....
megaupload.com/?d=5VRNN510
In the next days i will work on it...
Inviato dal mio GT-I9100 usando Tapatalk
Thanks heaps! I appreciate your help.
I'll send you a donation in a couple weeks when I'm back at work.
critenau said:
Thanks heaps! I appreciate your help.
I'll send you a donation in a couple weeks when I'm back at work.
Click to expand...
Click to collapse
First let me see if i can do something....
Another thing... maybe i'm wrong but if you can have root acces with adb you can:
insmod cifs.ko
No?
Inviato dal mio GT-I9100 usando Tapatalk
First let me see if i can do something....
Another thing... maybe i'm wrong but if you can have root acces with adb you can:
insmod cifs.ko
No?
Then send me with a pm the content of the sbin folder and also the content of / and block/dev and the output of: cat /proc/filesystems
Inviato dal mio GT-I9100 usando Tapatalk
Inviato dal mio GT-P7510 usando Tapatalk
new firmware
www .umax.cz/download/drivers/DH/A9_firmware_V1.2.04.zip
Uhh could you provide more information on this ROM ondra1234? I don't really want to flash my device with it knowing there is no boot time recovery menu so I could potentially brick the device.
Skin, see the following code:
Code:
# cd /sdcard
cd /sdcard
# insmod cifs.ko
insmod cifs.ko
insmod: init_module 'cifs.ko' failed (Exec format error)
# cd /
ls -lcd /
#
ls -l
lrwxrwxrwx root root 2011-12-29 23:05 bcm4329_cybertan.hcd -> /
etc/bluez/bcm432x/BCM4329B1_002.002.023.0389.0000_Cybertan-Foxconn_Cls2_extLNA_E
DRmaxInputLev+PeakDEVM_NT.hcd
lrwxrwxrwx root root 2011-12-29 23:05 bcm4329_usi.hcd -> /etc/b
luez/bcm432x/BCM4329B1_USI_WM-BN-BM-01.hcd
lrwxrwxrwx root root 2011-12-29 23:05 bcm4329_samsung.hcd -> /e
tc/bluez/bcm432x/BCM4329B1_TestOnly_0237_26MHz_SEMCO_B23.hcd
dr-x------ root root 2011-12-29 23:05 config
drwxrwx--- system cache 2011-12-29 23:16 cache
lrwxrwxrwx root root 2011-12-29 23:05 udisk -> /mnt/udisk/usb
lrwxrwxrwx root root 2011-12-29 23:05 flash -> /mnt/storage
lrwxrwxrwx root root 2011-12-29 23:05 udiskint -> /mnt/udiskint
lrwxrwxrwx root root 2011-12-29 23:05 sdcard -> /mnt/storage/sd
card
drwxr-xr-x root root 2011-12-29 23:05 acct
drwxrwxr-x root system 2011-12-29 23:05 mnt
lrwxrwxrwx root root 2011-12-29 23:05 vendor -> /system/vendor
lrwxrwxrwx root root 2011-12-29 23:05 d -> /sys/kernel/debug
lrwxrwxrwx root root 2011-12-29 23:05 etc -> /system/etc
-rw-r--r-- root root 1107 1970-01-01 08:00 ueventd.rk29board.rc
-rw-r--r-- root root 3764 1970-01-01 08:00 ueventd.rc
-rw-r--r-- root root 0 1970-01-01 08:00 ueventd.goldfish.rc
drwxrwxrwx root root 1970-01-01 08:00 system
drwxr-xr-x root root 1970-01-01 08:00 sys
drwxr-x--- root root 1970-01-01 08:00 sbin
-rwxrwxrwx root root 113525 1970-01-01 08:00 rk29xxnand_ko.ko
dr-xr-xr-x root root 1970-01-01 08:00 proc
-rwxr-x--- root root 45 1970-01-01 08:00 init_battery.sh
-rwxr-x--- root root 3449 1970-01-01 08:00 init.rk29board.rc
-rwxr-x--- root root 15757 1970-01-01 08:00 init.rc
-rwxr-x--- root root 1677 1970-01-01 08:00 init.goldfish.rc
-rwxr-x--- root root 94268 1970-01-01 08:00 init
-rw-r--r-- root root 243 1970-01-01 08:00 default.prop
drwxrwx--x system system 2011-12-29 22:09 data
drwxr-xr-x root root 1970-01-01 08:00 bin
drwx------ root root 2011-11-22 08:42 root
drwxr-xr-x root root 2011-12-29 23:06 dev
# cd /sbin
cd /sbin
# ls -l
ls -l
lrwxrwxrwx root root 1970-01-01 08:00 ueventd -> ../init
-rwxr-x--- root root 113876 1970-01-01 08:00 adbd
# cd /system/bin
cd /system/bin
# ls -l
ls -l
-rwxrwxrwx root root 56904 1970-01-01 08:00 InputChannel_test
-rwxrwxrwx root root 53368 1970-01-01 08:00 InputDispatcher_test
-rwxrwxrwx root root 74328 1970-01-01 08:00 InputPublisherAndConsumer
_test
-rwxrwxrwx root root 220308 1970-01-01 08:00 InputReader_test
-rwxrwxrwx root root 66888 1970-01-01 08:00 Looper_test
-rwxrwxrwx root root 48456 1970-01-01 08:00 ObbFile_test
-rwxrwxrwx root root 48488 1970-01-01 08:00 String8_test
-rwxrwxrwx root root 38496 1970-01-01 08:00 akmd8975
-rwxrwxrwx root root 191 1970-01-01 08:00 am
-rwxrwxrwx root root 9648 1970-01-01 08:00 amix
-rwxrwxrwx root root 10020 1970-01-01 08:00 aplay
-rwxrwxrwx root root 5736 1970-01-01 08:00 app_process
-rwxrwxrwx root root 10004 1970-01-01 08:00 arec
-rwxrwxrwx root root 9648 1970-01-01 08:00 audioloop
-rwxrwxrwx root root 5292 1970-01-01 08:00 bluetoothd
-rwxrwxrwx root root 199 1970-01-01 08:00 bmgr
-rwxrwxrwx root root 23160 1970-01-01 08:00 bootanimation
-rwxrwxrwx root root 10196 1970-01-01 08:00 brcm_patchram_plus
-rwxrwxrwx root root 5424 1970-01-01 08:00 bt_mac
-rwxrwxrwx root root 5556 1970-01-01 08:00 bugreport
-rwxrwxrwx root root 1807056 1970-01-01 08:00 busybox
lrwxrwxrwx root root 1970-01-01 08:00 cat -> toolbox
-rwxrwxrwx root root 18208 1970-01-01 08:00 chat
-rwxrwxrwx root root 54680 1970-01-01 08:00 check_prereq
lrwxrwxrwx root root 1970-01-01 08:00 chmod -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 chown -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 cmp -> toolbox
-rwxrwxrwx root root 5520 1970-01-01 08:00 dalvikvm
lrwxrwxrwx root root 1970-01-01 08:00 date -> toolbox
-rwxrwxrwx root root 109504 1970-01-01 08:00 dbus-daemon
lrwxrwxrwx root root 1970-01-01 08:00 dd -> toolbox
-rwxrwxrwx root root 5552 1970-01-01 08:00 ddc
-rwxrwxrwx root root 18112 1970-01-01 08:00 debuggerd
-rwxrwxrwx root root 9796 1970-01-01 08:00 dexopt
lrwxrwxrwx root root 1970-01-01 08:00 df -> toolbox
-rwxrwxrwx root root 44596 1970-01-01 08:00 dhcpcd
-rwxrwxrwx root root 57044 1970-01-01 08:00 dhcpcd_eth
-rwxrwxrwx root root 18292 1970-01-01 08:00 displayd
lrwxrwxrwx root root 1970-01-01 08:00 dmesg -> toolbox
-rwxrwxrwx root root 108820 1970-01-01 08:00 dnsmasq
-rwxrwxrwx root root 34544 1970-01-01 08:00 dumpstate
-rwxrwxrwx root root 9812 1970-01-01 08:00 dumpsys
-rwxrwxrwx root root 5548 1970-01-01 08:00 dvz
-rwxrwxrwx root root 119700 1970-01-01 08:00 e2fsck
-rwxrwxrwx root root 22640 1970-01-01 08:00 fsck_msdos
-rwxrwxrwx root root 5612 1970-01-01 08:00 gdbjithelper
-rwxrwxrwx root root 151868 1970-01-01 08:00 gdbserver
lrwxrwxrwx root root 1970-01-01 08:00 getevent -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 getprop -> toolbox
-rwxrwxrwx root root 5604 1970-01-01 08:00 gzip
-rwxrwxrwx root root 23476 1970-01-01 08:00 hciattach
lrwxrwxrwx root root 1970-01-01 08:00 hd -> toolbox
-rwxrwxrwx root root 22756 1970-01-01 08:00 hidd
-rwxrwxrwx root root 166468 1970-01-01 08:00 hostapd
-rwxrwxrwx root root 18196 1970-01-01 08:00 hostapd_cli
-rwxrwxrwx root root 5440 1970-01-01 08:00 hostapd_wps
-rwxrwxrwx root root 9648 1970-01-01 08:00 i2c
lrwxrwxrwx root root 1970-01-01 08:00 id -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 ifconfig -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 iftop -> toolbox
-rwxrwxrwx root root 194 1970-01-01 08:00 ime
-rwxrwxrwx root root 201 1970-01-01 08:00 input
lrwxrwxrwx root root 1970-01-01 08:00 insmod -> toolbox
-rwxrwxrwx root root 22420 1970-01-01 08:00 installd
lrwxrwxrwx root root 1970-01-01 08:00 ioctl -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 ionice -> toolbox
-rwxrwxrwx root root 100916 1970-01-01 08:00 iptables
-rwxrwxrwx root root 544444 1970-01-01 08:00 iwconfig
-rwxrwxrwx root root 682733 1970-01-01 08:00 iwlist
-rwxrwxrwx root root 10112 1970-01-01 08:00 keystore
-rwxrwxrwx root root 6640 1970-01-01 08:00 keystore_cli
lrwxrwxrwx root root 1970-01-01 08:00 kill -> toolbox
-rwxrwxrwx root root 39416 1970-01-01 08:00 linker
lrwxrwxrwx root root 1970-01-01 08:00 ln -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 log -> toolbox
-rwxrwxrwx root root 13952 1970-01-01 08:00 logcat
-rwxrwxrwx root root 9760 1970-01-01 08:00 logwrapper
lrwxrwxrwx root root 1970-01-01 08:00 ls -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 lsmod -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 lsof -> toolbox
-rwxrwxrwx root root 5584 1970-01-01 08:00 mediaserver
lrwxrwxrwx root root 1970-01-01 08:00 mkdir -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 mkdosfs -> toolbox
-rwxrwxrwx root root 38976 1970-01-01 08:00 mke2fs
-rwxrwxrwx root root 493476 1970-01-01 08:00 mkswap
-rwxrwxrwx root root 205 1970-01-01 08:00 monkey
lrwxrwxrwx root root 1970-01-01 08:00 mount -> toolbox
-rwxrwxrwx root root 18308 1970-01-01 08:00 mtpd
lrwxrwxrwx root root 1970-01-01 08:00 mv -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 nandread -> toolbox
-rwxrwxrwx root root 5552 1970-01-01 08:00 ndc
-rwxrwxrwx root root 5660 1970-01-01 08:00 netcfg
-rwxrwxrwx root root 39476 1970-01-01 08:00 netd
lrwxrwxrwx root root 1970-01-01 08:00 netstat -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 newfs_msdos -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 notify -> toolbox
-rwxrwxrwx root root 262932 1970-01-01 08:00 ntfs-3g
-rwxrwxrwx root root 161908 1970-01-01 08:00 ntfslabel
-rwxrwxrwx root root 32600 1970-01-01 08:00 omx_tests
-rwxrwxrwx root root 18692 1970-01-01 08:00 pand
-rwxrwxrwx root root 9820 1970-01-01 08:00 patch_plus
-rwxrwxrwx root root 26720 1970-01-01 08:00 ping
-rwxrwxrwx root root 191 1970-01-01 08:00 pm
-rwxrwxrwx root root 139540 1970-01-01 08:00 pppd
lrwxrwxrwx root root 1970-01-01 08:00 printenv -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 ps -> toolbox
-rwxrwxrwx root root 5520 1970-01-01 08:00 qemu-props
-rwxrwxrwx root root 13828 1970-01-01 08:00 qemud
-rwxrwxrwx root root 142516 1970-01-01 08:00 racoon
lrwxrwxrwx root root 1970-01-01 08:00 reboot -> toolbox
-rwxrwxrwx root root 9912 1970-01-01 08:00 record
-rwxrwxrwx root root 200364 1970-01-01 08:00 recovery
lrwxrwxrwx root root 1970-01-01 08:00 renice -> toolbox
-rwxrwxrwx root root 26340 1970-01-01 08:00 resize2fs
lrwxrwxrwx root root 1970-01-01 08:00 rm -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 rmdir -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 rmmod -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 route -> toolbox
-rwxrwxrwx root root 9848 1970-01-01 08:00 rtp_test
-rwxrwxrwx root root 59848 1970-01-01 08:00 run-as
-rwxrwxrwx root root 5392 1970-01-01 08:00 schedtest
lrwxrwxrwx root root 1970-01-01 08:00 schedtop -> toolbox
-rwxrwxrwx root root 9748 1970-01-01 08:00 sdcard
-rwxrwxrwx root root 42404 1970-01-01 08:00 sdptool
lrwxrwxrwx root root 1970-01-01 08:00 sendevent -> toolbox
-rwxrwxrwx root root 9860 1970-01-01 08:00 service
-rwxrwxrwx root root 9940 1970-01-01 08:00 servicemanager
lrwxrwxrwx root root 1970-01-01 08:00 setconsole -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 setprop -> toolbox
-rwxrwxrwx root root 542384 1970-01-01 08:00 sg_start
-rwxrwxrwx root root 82840 1970-01-01 08:00 sh
-rwxrwxrwx root root 10792 1970-01-01 08:00 showlease
-rwxrwxrwx root root 975 1970-01-01 08:00 shutdown
-rwxrwxrwx root root 47972 1970-01-01 08:00 skia_test
lrwxrwxrwx root root 1970-01-01 08:00 sleep -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 smd -> toolbox
-rwxrwxrwx root root 39384 1970-01-01 08:00 spindownd
-rwxrwxrwx root root 31080 1970-01-01 08:00 stagefright
lrwxrwxrwx root root 1970-01-01 08:00 start -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 stop -> toolbox
-rwxrwxrwx root root 5456 1970-01-01 08:00 surfaceflinger
-rwxrwxrwx root root 192 1970-01-01 08:00 svc
lrwxrwxrwx root root 1970-01-01 08:00 sync -> toolbox
-rwxrwxrwx root root 5488 1970-01-01 08:00 system_server
-rwxrwxrwx root root 67956 1970-01-01 08:00 tc
-rwxrwxrwx root root 193284 1970-01-01 08:00 tds
-rwxrwxrwx root root 9712 1970-01-01 08:00 testid3
-rwxrwxrwx root root 89880 1970-01-01 08:00 toolbox
lrwxrwxrwx root root 1970-01-01 08:00 top -> toolbox
-rwxrwxrwx root root 22308 1970-01-01 08:00 tune2fs
-rwxrwxrwx root root 5536 1970-01-01 08:00 tvcontrol
lrwxrwxrwx root root 1970-01-01 08:00 umount -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 uptime -> toolbox
-rwxrwxrwx root root 5552 1970-01-01 08:00 vdc
lrwxrwxrwx root root 1970-01-01 08:00 vmstat -> toolbox
-rwxrwxrwx root root 64164 1970-01-01 08:00 vold
lrwxrwxrwx root root 1970-01-01 08:00 watchprops -> toolbox
lrwxrwxrwx root root 1970-01-01 08:00 wipe -> toolbox
-rwxrwxrwx root root 5572 1970-01-01 08:00 wlan_loader
-rwxrwxrwx root root 5536 1970-01-01 08:00 wlan_mac
-rwxrwxrwx root root 31252 1970-01-01 08:00 wpa_cli
-rwxrwxrwx root root 291860 1970-01-01 08:00 wpa_supplicant
# cd /system/xbin
cd /system/xbin
# ls -l
ls -l
-rwxrwxrwx root root 14052 1970-01-01 08:00 agent
-rwxrwxrwx root root 5620 1970-01-01 08:00 attest
-rwxrwxrwx root root 9792 1970-01-01 08:00 avinfo
-rwxrwxrwx root root 9884 1970-01-01 08:00 avtest
-rwxrwxrwx root root 9972 1970-01-01 08:00 bdaddr
-rwxrwxrwx root root 5572 1970-01-01 08:00 btool
-rwxrwxrwx root root 5484 1970-01-01 08:00 bttest
-rwxrwxrwx root root 5504 1970-01-01 08:00 cpueater
-rwxrwxrwx root root 5536 1970-01-01 08:00 crasher
-rwxrwxrwx root root 5552 1970-01-01 08:00 daemonize
-rwxrwxrwx root root 9712 1970-01-01 08:00 dbus-monitor
-rwxrwxrwx root root 13856 1970-01-01 08:00 dbus-send
-rwxrwxrwx root root 60276 1970-01-01 08:00 dexdump
-rwxrwxrwx root root 5536 1970-01-01 08:00 directiotest
-rwxrwxrwx root root 59076 1970-01-01 08:00 hciconfig
-rwxrwxrwx root root 111028 1970-01-01 08:00 hcidump
-rwxrwxrwx root root 32164 1970-01-01 08:00 hcitool
-rwxrwxrwx root root 9716 1970-01-01 08:00 hstest
-rwxrwxrwx root root 9632 1970-01-01 08:00 io
-rwxrwxrwx root root 9756 1970-01-01 08:00 l2ping
-rwxrwxrwx root root 18028 1970-01-01 08:00 l2test
-rwxrwxrwx root root 9792 1970-01-01 08:00 latencytop
-rwxrwxrwx root root 9740 1970-01-01 08:00 librank
-rwxrwxrwx root root 5612 1970-01-01 08:00 lmptest
-rwxrwxrwx root root 18260 1970-01-01 08:00 nc
-rwxrwxrwx root root 68528 1970-01-01 08:00 netperf
-rwxrwxrwx root root 47712 1970-01-01 08:00 netserver
-rwxrwxrwx root root 14992 1970-01-01 08:00 opcontrol
-rwxrwxrwx root root 57364 1970-01-01 08:00 oprofiled
-rwxrwxrwx root root 9648 1970-01-01 08:00 procmem
-rwxrwxrwx root root 9716 1970-01-01 08:00 procrank
-rwxrwxrwx root root 13892 1970-01-01 08:00 rawbu
-rwxrwxrwx root root 13932 1970-01-01 08:00 rctest
-rwxrwxrwx root root 24116 1970-01-01 08:00 rfcomm
-rwxrwxrwx root root 9792 1970-01-01 08:00 scotest
-rwxrwxrwx root root 18176 1970-01-01 08:00 scp
-rwxrwxrwx root root 9692 1970-01-01 08:00 script_parse
-rwxrwxrwx root root 5644 1970-01-01 08:00 sdptest
-rwxrwxrwx root root 9684 1970-01-01 08:00 showmap
-rwxrwxrwx root root 9684 1970-01-01 08:00 showslab
-rwxrwxrwx root root 41908 1970-01-01 08:00 sqlite3
-rwxrwxrwx root root 76564 1970-01-01 08:00 ssh
-rwxrwxrwx root root 122148 1970-01-01 08:00 strace
-rwxrwxrwx root root 60112 1970-01-01 08:00 su
-rwxrwxrwx root root 633556 1970-01-01 08:00 tcpdump
-rwxrwxrwx root root 5408 1970-01-01 08:00 timeinfo
-rwxrwxrwx root root 5344 1970-01-01 08:00 vfp-crasher
# cd /dev/block
cd /dev/block
# ls -l
ls -l
drwxr-xr-x root root 2011-12-29 23:06 vold
brw------- root root 31, 9 2011-12-29 23:05 mtdblock9
brw------- root root 31, 8 2011-12-29 23:05 mtdblock8
brw------- root root 31, 7 2011-12-29 23:05 mtdblock7
brw------- root root 31, 6 2011-12-29 23:05 mtdblock6
brw------- root root 31, 5 2011-12-29 23:05 mtdblock5
brw------- root root 31, 4 2011-12-29 23:05 mtdblock4
brw------- root root 31, 3 2011-12-29 23:05 mtdblock3
brw------- root root 31, 2 2011-12-29 23:05 mtdblock2
brw------- root root 31, 1 2011-12-29 23:05 mtdblock1
brw------- root root 31, 0 2011-12-29 23:05 mtdblock0
brw------- root root 7, 7 2011-12-29 23:05 loop7
brw------- root root 7, 6 2011-12-29 23:05 loop6
brw------- root root 7, 5 2011-12-29 23:05 loop5
brw------- root root 7, 4 2011-12-29 23:05 loop4
brw------- root root 7, 3 2011-12-29 23:05 loop3
brw------- root root 7, 2 2011-12-29 23:05 loop2
brw------- root root 7, 1 2011-12-29 23:05 loop1
brw------- root root 7, 0 2011-12-29 23:05 loop0
brw------- root root 179, 1 2011-12-29 23:05 mmcblk0p1
drwxr-xr-x root root 2011-12-29 23:05 platform
brw------- root root 179, 0 2011-12-29 23:05 mmcblk0
# cat /proc/filesystems
cat /proc/filesystems
nodev sysfs
nodev rootfs
nodev bdev
nodev proc
nodev cgroup
nodev tmpfs
nodev devtmpfs
nodev sockfs
nodev pipefs
nodev anon_inodefs
nodev rpc_pipefs
nodev inotifyfs
nodev devpts
ext3
cramfs
nodev ramfs
vfat
nodev nfs
nodev nfs4
ntfs
nodev fuse
fuseblk
nodev fusectl
yaffs
yaffs2
# mount
mount
rootfs / rootfs ro,relatime 0 0
tmpfs /dev tmpfs rw,relatime,mode=755 0 0
devpts /dev/pts devpts rw,relatime,mode=600 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,relatime 0 0
none /acct cgroup rw,relatime,cpuacct 0 0
tmpfs /mnt/asec tmpfs rw,relatime,mode=755,gid=1000 0 0
tmpfs /mnt/obb tmpfs rw,relatime,mode=755,gid=1000 0 0
none /dev/cpuctl cgroup rw,relatime,cpu 0 0
/dev/block/mtdblock4 /system cramfs ro,relatime 0 0
/dev/block/mtdblock7 /data ext3 rw,nosuid,nodev,noatime,nodiratime,errors=contin
ue,data=ordered 0 0
/dev/block/mtdblock6 /cache ext3 rw,nosuid,nodev,noatime,nodiratime,errors=conti
nue,data=ordered 0 0
/dev/block/vold/31:9 /mnt/storage vfat rw,dirsync,nosuid,nodev,noexec,relatime,u
id=1000,gid=1015,fmask=0002,dmask=0002,allow_utime=0020,codepage=cp437,iocharset
=iso8859-1,shortname=mixed,utf8,flush,errors=remount-ro 0 0
/dev/block/vold/31:9 /mnt/secure/asec vfat rw,dirsync,nosuid,nodev,noexec,relati
me,uid=1000,gid=1015,fmask=0002,dmask=0002,allow_utime=0020,codepage=cp437,iocha
rset=iso8859-1,shortname=mixed,utf8,flush,errors=remount-ro 0 0
tmpfs /mnt/storage/.android_secure tmpfs ro,relatime,size=0k,mode=000 0 0
/dev/block/vold/179:1 /mnt/storage/sdcard vfat rw,dirsync,nosuid,nodev,noexec,re
latime,uid=1000,gid=1015,fmask=0002,dmask=0002,allow_utime=0020,codepage=cp437,i
ocharset=iso8859-1,shortname=mixed,utf8,flush,errors=remount-ro 0 0
I have noontec a9.
fw is the oficial. tested
List of modifications:
- Support for installing applications from the SD card
- Support for DLNA (uPnP in the system as)
- Support 3G wireless network
- Support for connection via PPPoE
- Sub Flash11 Adobe to optimize Flash playback
- Acceleration of automatic scanning and sorting files
- Support for playback of TS files with H.264 codec
- Possibility to choose the icon size (setting-display-icon size)
here it distributes company umax.cz
Ahh it seems you're right. Umax is a distributor for Noontec in Czech. And they have firmware newer than the Noontec website. I'll load that up tomorrow and get back to Skin's questions for me too.
Please send me the cifs.ko you have used and also the complete name of your kernel.. i will patch it to get it working...
cifs.ko be in /system/lib/modules ?
I do not have it there .
Skin1980 said:
Please send me the cifs.ko you have used and also the complete name of your kernel.. i will patch it to get it working...
Click to expand...
Click to collapse
This version FW have bug with Power Off device. Power Off is not functional.
I concur... this firmware appears to be unfinished, I've downgraded again after a number of issues including not being able to power down properly.
new fw
www .noontec.com/Files/ProductPics/A9_V1.2.06_CN36.zip
i have tried that firmware. its a Chinese version like the one on noontec's site. plus bloatwares any luck on rooting this baby?
Hello friends. Sorry for my English. I'm using the google translator.
I have a serious problem. Buy this Noontec A9 and after upgrading to version November last year from the official website of noontec, the tablet made ​​the whole process but when you turn always gives error with the application and re-market the red letters charging noontec , loading and re-enter and re-throw the same error.
So is continuously and in a loop.
No one knows how to enter the recovery of this unit to reinstalling the firmware?.
Please help because I have a brick.

Permissions /efs and /modemfs

Hello,
while backing up an restoring I think i killed the permissions of my Galaxy Xcover 2.
Now my Mobile-Service (Internet, Call, SMS) isn´t working.
Why I think this:
I was in FactoryMode and after using following commands I could exit it:
chown 1000.1000 /efs/FactoryApp/keystr
chown 1000.1000 /efs/FactoryApp/factorymode
chmod 0744 /efs/FactoryApp/keystr
chmod 0744 /efs/FactoryApp/factorymode
So i want now to fix all Permissions of the /efs and /modemefs Folders and the Files.
Here´s what ls -l says about my /efs Folder:
Code:
[email protected]:/ $ ls -l /efs
drwxrwxr-x radio system 2014-08-14 16:53 FactoryApp
-rw------- radio radio 2 2014-08-14 15:25 GUARDFIL
drwx------ radio radio 2014-08-14 15:25 RFHAL
drwx------ u0_a70 u0_a70 2014-08-14 15:24 RFHAL.DEF
drwxrwxr-x radio system 2014-08-14 15:24 bluetooth
drwxrwxr-x radio system 2014-08-14 15:24 imei
-rw------- u0_a70 u0_a70 0 2014-08-13 23:01 pre_recovery.log
drwxrwxr-x radio system 2014-08-14 15:24 wifi
Here the /modemfs
Code:
[email protected]:/ $ su
[email protected]:/ # ls -l /modemfs
drwxr-xr-x radio radio 2014-08-14 15:27 CONF
-rw------- u0_a70 u0_a70 0 2014-08-13 23:21 GUARDFIL
drwxr-xr-x radio radio 1970-01-01 01:00 PERM
drwx------ u0_a70 u0_a70 2014-08-14 15:09 RFHAL
-rw------- u0_a70 u0_a70 2 2014-08-13 23:21 rfhal_copied
-rw-rw-rw- radio radio 184 2014-08-13 23:22 trace_auto.conf
Thanks
..

[Q] Can't write to /sdcard or /extSdCard

Hi,
For some reason none of my apps on my phone work because they can't write to /sdcard:
Code:
[email protected]:/ # cd /sdcard/
[email protected]:/sdcard # mkdir test
mkdir failed for test, Permission denied
Code:
[email protected]:/ # ls -l sdcard
lrwxrwxrwx root root 2015-01-02 17:53 sdcard -> /storage/sdcard0
/sdcard seems to be a symlink to /storage/sdcard0, which is not writable. However, when I go to /mnt/media_rw/sdcard0 I can write to the card:
Code:
[email protected]:/sdcard # cd /mnt/media_rw/sdcard0/
[email protected]:/mnt/media_rw/sdcard0 # mkdir test
[email protected]:/mnt/media_rw/sdcard0 #
Here are the permissions
Code:
[email protected]:/storage # ls -l
drwxrwx--x root sdcard_r 2015-01-02 21:32 sdcard0
drwxrwx--x root sdcard_r 2015-01-02 16:55 sdcard1
drwxrwx--- root root 2015-01-02 17:53 usbdisk0
Code:
root[email protected]:/mnt/media_rw # ls -l
drwxr-xr-x root root 2015-01-02 21:32 sdcard0
drwxr-xr-x root root 2015-01-02 16:55 sdcard1
drwx------ media_rw media_rw 2015-01-02 17:53 usbdisk0
[email protected]:/mnt/media_rw #
Is it normal that /storage/sdcard0 is not writable ?
Is there a way to maybe recreate the symlink to /mnt/media_rw/sdcard0 ?
Or are there any other ways I should solve this ?

has anyone seen this before ? 1969? help

1|[email protected]:/ $ ls -la
drwxr-xr-x root root 1969-12-31 19:37 acct
drwxrwx--- system cache 2016-03-04 14:10 cache
lrwxrwxrwx root root 1969-12-31 18:00 charger -> /sbin/healthd
dr-x------ root root 1969-12-31 19:37 config
lrwxrwxrwx root root 1969-12-31 19:37 d -> /sys/kernel/debug
drwxrwx--x system system 2016-03-04 14:44 data
-rw-r--r-- root root 414 1969-12-31 18:00 default.prop
drwxr-xr-x root root 2016-03-04 14:50 dev
lrwxrwxrwx root root 1969-12-31 19:37 etc -> /system/etc
-rw-r--r-- root root 61730 1969-12-31 18:00 file_contexts
dr-xr-x--- system system 1969-12-31 18:00 firmware
-rw-r----- root root 2909 1969-12-31 18:00 fstab.e7lte
-rwxr-x--- root root 254352 1969-12-31 18:00 init
-rwxr-x--- root root 2696 1969-12-31 18:00 init.class_main.sh
-rwxr-x--- root root 2891 1969-12-31 18:00 init.e7lte.rc
-rwxr-x--- root root 6153 1969-12-31 18:00 init.e7lte_core.rc
-rwxr-x--- root root 1250 1969-12-31 18:00 init.e7lte_product.rc
-rwxr-x--- root root 1344 1969-12-31 18:00 init.environ.rc
-rwxr-x--- root root 2090 1969-12-31 18:00 init.lge.cmm.usb.sh
-rwxr-x--- root root 672 1969-12-31 18:00 init.lge.early.rc
-rwxr-x--- root root 5765 1969-12-31 18:00 init.lge.log.rc
-rwxr-x--- root root 3040 1969-12-31 18:00 init.lge.modem_log.rc
-rwxr-x--- root root 6160 1969-12-31 18:00 init.lge.power.rc
-rwxr-x--- root root 7732 1969-12-31 18:00 init.lge.rc
-rwxr-x--- root root 565 1969-12-31 18:00 init.lge.svelte.rc
-rwxr-x--- root root 3498 1969-12-31 18:00 init.lge.svelte.sh
-rwxr-x--- root root 26396 1969-12-31 18:00 init.lge.usb.rc
-rwxr-x--- root root 3403 1969-12-31 18:00 init.lge.usb.sh
-rwxr-x--- root root 1702 1969-12-31 18:00 init.mdm.sh
-rwxr-x--- root root 7064 1969-12-31 18:00 init.qcom.class_core.sh
-rwxr-x--- root root 6655 1969-12-31 18:00 init.qcom.early_boot.sh
-rwxr-x--- root root 12447 1969-12-31 18:00 init.qcom.factory.sh
-rwxr-x--- root root 27677 1969-12-31 18:00 init.qcom.rc
-rwxr-x--- root root 5350 1969-12-31 18:00 init.qcom.sh
-rwxr-x--- root root 4561 1969-12-31 18:00 init.qcom.ssr.sh
-rwxr-x--- root root 2962 1969-12-31 18:00 init.qcom.syspart_fixup.sh
-rwxr-x--- root root 23528 1969-12-31 18:00 init.rc
-rwxr-x--- root root 627 1969-12-31 18:00 init.recovery.e7lte.rc
-rwxr-x--- root root 5949 1969-12-31 18:00 init.target.rc
-rwxr-x--- root root 1927 1969-12-31 18:00 init.trace.rc
-rwxr-x--- root root 3885 1969-12-31 18:00 init.usb.rc
-rwxr-x--- root root 4606 1969-12-31 18:00 init.zetaw.bt_vendor.rc
-rwxr-x--- root root 2592 1969-12-31 18:00 init.zetaw.sensor.sh
-rwxr-x--- root root 8572 1969-12-31 18:00 init.zetaw_core.rc
-rwxr-x--- root root 301 1969-12-31 18:00 init.zygote32.rc
-rw-r--r-- root root 503 1969-12-31 18:00 lgdms.fota.rc
-rw-r--r-- root root 1200 1969-12-31 18:00 lgdms.fota_update.rc
drwxrwxr-x root system 1969-12-31 19:37 mnt
drwxrwxr-x system system 2016-03-04 16:22 mpt
drwxrwx--x system system 2016-03-04 14:43 persist
drwxrwx--x system system 1969-12-31 18:17 persist-lg
lrwxrwxrwx root root 1969-12-31 19:37 pkg -> /storage/sdcard0
dr-xr-xr-x root root 1969-12-31 18:00 proc
-rw-r--r-- root root 9833 1969-12-31 18:00 property_contexts
drwxr-xr-x root root 1969-12-31 18:00 res
drwx------ root root 2015-07-20 19:40 root
drwxr-x--- root root 1969-12-31 18:00 sbin
lrwxrwxrwx root root 1969-12-31 19:37 sdcard -> /storage/emulated/legacy
-rw-r--r-- root root 2786 1969-12-31 18:00 seapp_contexts
-rw-r--r-- root root 7 1969-12-31 18:00 selinux_version
-rw-r--r-- root root 406785 1969-12-31 18:00 sepolicy
-rw-r--r-- root root 15774 1969-12-31 18:00 service_contexts
-rw-r--r-- root root 878 1969-12-31 18:00 set_emmc_size.sh
-rw-r--r-- root root 1 1969-12-31 19:37 smpl_boot
drwxrwxr-x system system 1970-01-01 01:20 sns
drwxr-x--x system sdcard_r 1969-12-31 19:37 storage
dr-xr-xr-x root root 1969-12-31 19:37 sys
drwxr-xr-x root root 1969-12-31 18:16 system
lrwxrwxrwx root root 1969-12-31 19:37 tombstones -> /data/tombstones
-rw-r--r-- root root 9249 1969-12-31 18:00 ueventd.e7lte.rc
-rw-r--r-- root root 4515 1969-12-31 18:00 ueventd.rc
lrwxrwxrwx root root 1969-12-31 19:37 vendor -> /system/vendor
[email protected]:/ $

Categories

Resources