E2303 6.0.1 Root with Locked BootLoader? - Sony Xperia M4 Aqua

Hey guys, is there any new exploits / rootkitXperias for the 6.0.1 update with locked bootloader?

---

Same question here. This would be very nice.

---

No have Way For Root M4 Aqua In Locked Bootloader!

---

and in the future?

---

kubanec86 said:
and in the future?
Click to expand...
Click to collapse
despite our developers, Coming Soon

---

I also have locked bootloader (Unlock allowed: no; and also I would prefer to keep the DRM keys and warranty) however it would be great to be able to root it...

---

well, at least we can preinstall xposed with prf zip

---

sergioslk said:
well, at least we can preinstall xposed with prf zip
Click to expand...
Click to collapse
prf zip rom don't working, I try it.

---

That sounds great Hope there will be a solution soon.

---

Is there any update about it? I really want to update to MM but dont want loose my root.

---

BVEKT0R said:
Is there any update about it? I really want to update to MM but dont want loose my root.
Click to expand...
Click to collapse
Nope

---

Can someone with access to the M4 run the Quadrooter checker. Hopefully these security issues give root.
http://blog.checkpoint.com/2016/08/07/quadrooter/
http://www.xda-developers.com/xda-external-link/4-vulnerabilities-found-in-qualcomms-code/
I know people are saying it's a security issue but it's also possibly the only hope for root for a lot of phones.
https://play.google.com/store/apps/details?id=com.checkpoint.quadrooter

---

CE1
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Click to expand...
Click to collapse

---

I have the E2306 variant, i've been reading about a new bulnerabilty called "humingbad".
In the page where i readed that i found info from a app that search system bulnerabilties and after running on my device there is four bulnerabilties
(cve-2016-2059)(cve-2016-2504)(cve-2016-2503)
(cve-2016-5340).
Correct if i'm wrong but for gain root acces on a locked device is by using a system bulnerabilty like those?
I think maybe with any of the bulnerabilties that i've mentioned before we can get root for locked bootloaders.
(sorry for my english if it's bad, not my native language)

---

Found this on z5 forums. I'm pretty sure there is dm verity check on m4 too.
We cannot get root because this would involve modified kernel (to write on /system partition), which would not boot using a Locked bootloader because of Verified boot process that uses an OEM key.
The whole process is described here: https://source.android.com/security/...fied-boot.html
Google intention is (or was) to allow the boot process, after a red warning, if the verification of the kernel image didn't succeed on a locked bootloader... But Sony devices bootloop without showing any warning and so the user is not allowed to continue (source: https://androplus.org/Entry/843/ thanks to the developer).
So, on locked bootloaders, it's impossible to have permanent root apps, xposed ,.... unless someone finds a hole in the bootloader (someone found a hole in Motorola's bootloader) or the OEM key gets copied and is used to sign modified firmwares...just exciting dreams.
Click to expand...
Click to collapse

---

DarkerJava said:
Found this on z5 forums. I'm pretty sure there is dm verity check on m4 too.
Click to expand...
Click to collapse
There is not dmverity in m4, i have locked bootloader and i installed the update with an unrooted zip but i could preinstall xposed in /system and also deleted bloatware and booted correctly with xposed working and without root

---

sergioslk said:
There is not dmverity in m4, i have locked bootloader and i installed the update with an unrooted zip but i could preinstall xposed in /system and also deleted bloatware and booted correctly with xposed working and without root
Click to expand...
Click to collapse
Alright, if there is no firmware verity check, then it should not be to hard to get root in bl locked... just need to find an exploit in /system partition..

---

Hellow, Everyone can test this way for preerooted rom?
This way rooted we device in lockedbootloader, But every Boot phone is longer. it way test in E2333 and now need to test in other veriants.
Plaese test and feedback in here, boot phone in 40min and uper
http://forum.xda-developers.com/crossdevice-dev/sony/tool-prfcreator-easily-create-pre-t2859904

---

EHSAN™ said:
Hellow, Everyone can test this way for preerooted rom?
This way rooted we device in lockedbootloader, But every Boot phone is longer. it way test in E2333 and now need to test in other veriants.
Plaese test and feedback in here, boot phone in 40min and uper
http://forum.xda-developers.com/crossdevice-dev/sony/tool-prfcreator-easily-create-pre-t2859904
Click to expand...
Click to collapse
I'll test it soon, and post about the results.

---

EHSAN™ said:
Hellow, Everyone can test this way for preerooted rom?
This way rooted we device in lockedbootloader, But every Boot phone is longer. it way test in E2333 and now need to test in other veriants.
Plaese test and feedback in here, boot phone in 40min and uper
http://forum.xda-developers.com/crossdevice-dev/sony/tool-prfcreator-easily-create-pre-t2859904
Click to expand...
Click to collapse
Hello,
I've test with "E2303_26.1.A.3.111_1293-7738_R8A.ftf" rom and just "UPDATE-SuperSU-v2.76.zip" (no recovery) but it don't works, the phone boot (it take a long time) but isn't rooted.