Change TTL on rooted kate - Xiaomi Redmi Note 3 Questions & Answers

I have a kate on rooted dev global 7.1.19 and I want to change the TTL for tethering.
all the apps [change ttl, ttl editor...] on the playstore freeze when I validate the change of ttl and they do not apply the new value of ttl at boot.... Even in terminal, the command
su sysctl net.ipv4.ip_default_ttl=65
does not finish...
this is from windows
Code:
C:\Windows\System32>adb shell
[email protected]:/ $ cat /proc/sys/net/ipv4/ip_default_ttl
64
[email protected]:/ $ sudo sysctl net.ipv4.ip_default_ttl=65
/system/bin/sh: sudo: not found
127|[email protected]:/ $ su sysctl net.ipv4.ip_default_ttl=65
sush: net.ipv4.ip_default_ttl=65: not found
127|[email protected]:/ $ cat /proc/sys/net/ipv4/ip_default_ttl
64

okay change TTL seem to work even at boot 1

Related

Installing SuperSU root on Mi 5c

Here's a guide + script for installing SuperSU root on the Mi 5c.
I haven't yet managed to build a TWRP recovery image for it (I haven't really tried) - so this can be used to get root in the mean-time. (I also saw a Chinese TWRP ROM on the MIUI forums, but I haven't tried it myself)
Obviously modifying the phone system is risky, you may void the warranty, break it etc. I take no responsibility for that, and you use the instructions below at your own risk.
The script, and a few other tools I'm using for the Mi 5c can be found in my git repo: github.com/usedbytes/meri_tools
To use the script, you'll need a linux (or Mac, probably) computer with gcc and git installed, as well as a new-ish version of adb and fastboot. I'm running it on Arch Linux fine.
First get the phone into developer mode (tap on the MIUI version in About Phone 7 times), and enable adb debugging, and approve your computer to access debugging.
Then you need to download and extract the SuperSU "Installable Recovery" zip, and the Xiaomi stock ROM, which we will use for the install files.
Then, run the script below (meri_root.sh in the git repo).
The script installs all the bits needed, then reboots the phone with a rooted boot image. To make the root persistent, you need to flash the boot.supersu.img to the boot partition with fastboot (it just boots it by default).
Code:
#!/bin/bash
#
# Script to root the Xiaomi Mi 5c, by manually installing SuperSU
#
# Copyright 2017 Brian Starkey
#
# Permission is hereby granted, free of charge, to any person obtaining a
# copy of this software and associated documentation files (the "Software"),
# to deal in the Software without restriction, including without limitation
# the rights to use, copy, modify, merge, publish, distribute, sublicense,
# and/or sell copies of the Software, and to permit persons to whom the
# Software is furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in
# all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
# OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
# DEALINGS IN THE SOFTWARE.
#
# -- Disclaimer
#
# Obviously modifying your phone can be dangerous, void the warranty etc. etc.
# Use this script and the instructions within it at your own risk.
#
# -- Description
#
# The SuperSU installer seems to assume you already have root, and is intended
# to be run from a custom recovery (like TWRP). We don't have that, so we'll do
# some funny dances to do a systemless root without having root to begin with.
#
# The crux of the matter is using SuperSU's tools to patch the ramdisk and
# sepolciy (in /data/local/tmp, without root), then building a ramdisk with
# those components
#
# -- Usage
#
# Plug in the phone, make sure you have (persistent) adb debugging permissions
# and run this script like so:
# meri_root.sh SUPERSU_DIR ROM_DIR
# Where SUPERSU_DIR is a directory where you have downloaded and extracted the
# SuperSU "Recovery Flashable" zip file: http://www.supersu.com/download
# and ROM_DIR is a directory where you have downloaded and extracted the ROM
# from Xiaomi's download page: http://en.miui.com/download-322.html
#
# The script will make and boot a boot.img which enacts a systemless root.
# To make it persisent, you must flash it instead:
# fastboot flash boot.supersu.img
#
# By default, SuperSU removes dm-verity from /system and encryption from /data
# To prevent this, set PRESERVE_VERITY=1 before running the script:
# PRESERVE_VERITY=1 ./meri_root.sh ...
if [ $# -ne 2 ];
then
cat >&2 <<EOM
Usage: $(basename $0) SUPERSU_DIR ROM_DIR
Extract SuperSU zip file into SUPERSU_DIR, and the Xiaomi ROM into ROM_DIR,
then run this script.
EOM
exit 1
fi
SUPERSU_DIR=$1
echo ${SUPERSU_DIR}/arm64/su
if [ ! -f ${SUPERSU_DIR}/arm64/su ]
then
echo "Invalid SUPERSU_DIR" >&2
exit 1
fi
ROM_DIR=$2
if [ ! -f ${ROM_DIR}/boot.img ]
then
echo "Invalid ROM_DIR" >&2
exit 1
fi
# 1. Get mkbootimg and build it
git clone --depth 1 https://github.com/osm0sis/mkbootimg.git || exit 1
cd mkbootimg
make || ( cd .. && exit 1 )
cd ..
# 2. Copy the SuperSU binaries to the device
echo "Waiting for device..."
adb wait-for-usb-device
adb push ${SUPERSU_DIR}/arm64/*su* /data/local/tmp/ || exit 1
adb shell chmod +x /data/local/tmp/su*
# 3. Create the SuperSU systemless root image
# Ideally we'd set up security contexts too, but then you need to be running
# on an SELinux-enabled kernel in permissive mode.
# Instead, we will fix it on first boot.
dd if=/dev/zero bs=1M count=96 of=su.img
mkfs.ext4 su.img
mkdir mnt
sudo mount su.img mnt
sudo mkdir mnt/{bin,xbin,lib,etc,su.d}
sudo chmod 0751 mnt/bin
sudo chmod 0755 mnt/{xbin,lib,etc}
sudo chmod 0700 mnt/su.d
sudo cp ${SUPERSU_DIR}/arm64/{su,sukernel} mnt/bin/
sudo cp ${SUPERSU_DIR}/arm64/su mnt/bin/daemonsu
sudo cp ${SUPERSU_DIR}/arm64/supolicy mnt/bin/supolicy_wrapped
sudo ln -s /su/bin/su mnt/bin/supolicy
sudo chown root:root mnt/bin/{su,daemonsu,sukernel,supolicy_wrapped}
sudo chmod 0755 mnt/bin/{su,daemonsu,sukernel,supolicy_wrapped}
sudo cp ${SUPERSU_DIR}/arm64/libsupol.so mnt/lib/libsupol.so
sudo chown root:root mnt/lib/libsupol.so
sudo chmod 0644 mnt/lib/libsupol.so
# Run a script at first-boot to fix up the SELinux contexts on the image
# It will remove itself after running
sudo bash -c "cat > mnt/su.d/firstboot.rc" <<EOF
#/system/bin/sh
chcon -hR u:object_r:system_data_file:s0 /su /data/local/tmp/su.img
rm /su/su.d/firstboot.rc
sync
EOF
sudo chmod 0750 mnt/su.d/firstboot.rc
sync
sudo umount mnt
# 4. Copy the systemless root image to the device
adb push su.img /data/local/tmp/su.img
# 5. Extract boot.img
mkdir bootimg
mkbootimg/unpackbootimg -o bootimg -i ${ROM_DIR}/boot.img
# 6. Unzip the ramdisk
cat bootimg/boot.img-ramdisk.gz | gunzip > ramdisk
# 7. Copy the ramdisk to the device, for patching
adb push ramdisk /data/local/tmp
# 8. Patch sepolicy and the ramdisk, using the SuperSU tools we copied over
# earlier
adb shell "
cd /data/local/tmp
LD_LIBRARY_PATH=. ./supolicy --file /sepolicy ./sepolicy.patched
LD_LIBRARY_PATH=. ./sukernel --patch ./ramdisk ramdisk.patched
"
# 9. Pull back the patched files
adb pull /data/local/tmp/sepolicy.patched /data/local/tmp/ramdisk.patched .
# 10. Extract the patched ramdisk, and install the patched sepolicy into it
mkdir ramdir
cat ramdisk.patched | sudo cpio --no-absolute-filenames -D ramdir -i
sudo cp sepolicy.patched ramdir/sepolicy
sudo chown root:root ramdir/sepolicy
sudo chmod 0644 ramdir/sepolicy
# 11. Install the SuperSU init scripts
sudo mkdir ramdir/su
sudo chmod 755 ramdir/su
sudo cp ${SUPERSU_DIR}/common/launch_daemonsu.sh ramdir/sbin
sudo chmod 744 ramdir/sbin/launch_daemonsu.sh
sudo chown root:root ramdir/sbin/launch_daemonsu.sh
sudo cp ${SUPERSU_DIR}/common/init.supersu.rc ramdir
sudo chmod 750 ramdir/init.supersu.rc
sudo chown root:root ramdir/init.supersu.rc
# 12. Patch the initscript for our img location and set the su.img context
sudo sed -i 's;/data/su.img;/data/local/tmp/su.img;' ramdir/init.supersu.rc
sudo sed -i '\;on property:sukernel.mount=1;a\ \ \ \ restorecon /data/local/tmp/su.img' ramdir/init.supersu.rc
sudo bash -c "echo /data/local/tmp/su.img u:object_r:system_data_file:s0 >> ramdir/file_contexts"
# Optional: Preserve dm-verity on /system, encryption on /data
if [ ! -z "$PRESERVE_VERITY" ] && [ $PRESERVE_VERITY -ne 0 ]
then
echo "Preserving dm-verity"
mkdir ramdir-stock
cat ramdisk | sudo cpio --no-absolute-filenames -D ramdir-stock -i
sudo cp ramdir-stock/{fstab.song,verity_key} ramdir/
sudo rm -rf ramdir-stock
fi
# 13. Repack the ramdisk
cd ramdir
sudo find . ! -path . | sudo cpio -H newc -o | gzip > ../ramdisk.gz
cd ..
# 14. Repack the boot image
mkbootimg/mkbootimg \
--kernel bootimg/boot.img-zImage \
--ramdisk ramdisk.gz \
--cmdline "console=ttyS0,115200 earlyprintk=uart8250-32bit,0xF900B000 androidboot.hardware=song no_console_suspend debug user_debug=31 loglevel=8" \
--base 0x0 \
--pagesize 4096 \
--kernel_offset 0x0a080000 \
--ramdisk_offset 0x0c400000 \
--dt bootimg/boot.img-dtb \
--tags_offset 0xc200000 \
--os_version 0.0.0 \
--os_patch_level 0 \
--second_offset 0x00f00000 \
--hash sha256 \
--id \
-o boot.supersu.img
# 15. Boot it! (flash it if you want to make it persistent)
adb reboot-bootloader
fastboot boot boot.supersu.img
echo "Waiting for device..."
adb wait-for-usb-device
Hi ,
Can you give me some advice on how to run this on Windows? I can get a adb shell but thats as far as I can get. I don't know how I am supposed to run the script.
Thanks
Stewart
Hello,
I am trying to root my mi 5c with your script, but I can't find sepolicy file on my phone, so for example this line can't be executed:
Code:
LD_LIBRARY_PATH=. ./supolicy --file /sepolicy ./sepolicy.patched
Do you know where I could find this file? I am using xiaomi.eu_multi_MI5c_7.4.6_v8-7.1 rom.
Hello,
I've had exactly the same issue on a multirom and on xiaomi.eu_multi_MI5c_7.4.20(although i'm not sure if installed rom has something to do with it)
blagon said:
...I am trying to root my mi 5c with your script, but I can't find sepolicy file on my phone...
Click to expand...
Click to collapse

Boost Net_speed by Network Tuning on nexus 5

Another method to Network Tuning and Performance by touch some value on linux tcp/IP tuning to give us some significant result on test speed and download process more faster than usual.
Tweak are made for boosting the interneet without any app so you must be Rooted, TWRP , Busybox inside and some rom or kernel to supported for init.d on system/etc or do a little search on xda how to put the init .d insde yours and for busybox download from palystore
this tweak cannot be combine with some other tweak for net_tweak because i dont know what kind of tweak inside your rom it will be give you some crash or the tweak not running as well
how to test or running my tweak :
backup up first so if there's and problem you can restore everything
and do manualy by deleting the init.d stuff ( note . if u have one ) and just get rid all the build prop for tweaking especilay mention about tcp buffer size .. u can grab it from the original rom and push it to your device
tweak as desired, depending on your internet connection and maximum bandwidth/latency on your country so this tweak not guarantee will give u same result ​
how to flash :
1. reboot to twrp
2. flash the file
3. wipe cache and dalvik
4. reboot . ( be patient take time to boot up )
For uninstal my tweak you can do it manualy :
extract my zip file and take alook at it
open app like rootexplorer . and delete all the stuff then reboot
done
Choose and Please .. comment and give me full report this tweak is running or not .. so i can do more
(tested on my nexus 5 (6.0.1) / 7.0.1 /7.1 not test on oreo yet
this tweak based on many reference on goolge you can do alittle search how to and know how
I'm not responsible if there is any kind off damage !!!
Hits Thank Button if i Helped you and give you more !!!​
After couple of experiment and tested ..i remove all the link above .. because as i said in red line on #post 1 every each country has diffrent internet connection and maximum bandwidth/latency but i wont stop to figure out and find the best value to maximize the network speed and performance especialy on 6.0.1 up, may be some other people say why you so hassle create this this craft and useless well the answer came because i'm can't find any app/ or tweaking value to give me some satisfaction, like on kernel under 2.6 (2011- 2013 )
some explanation you can find in here
http://www.linux-admins.net/2010/09/linux-tcp-tuning.html
and these are what @zeppelinrox do on kick as kernel tweak :
echo " Applying Network Tweaks...";
echo \$line;
echo "";
$sleep;
#
# Queue size modifications
busybox sysctl -e -w net.core.wmem_max=1048576;
busybox sysctl -e -w net.core.rmem_max=1048576;
#busybox sysctl -e -w net.core.rmem_default=262144;
#busybox sysctl -e -w net.core.wmem_default=262144;
busybox sysctl -e -w net.core.optmem_max=20480;
busybox sysctl -e -w net.unix.max_dgram_qlen=50;
#
busybox sysctl -e -w net.ipv4.tcp_moderate_rcvbuf=1; # Be sure that autotuning is in effect
busybox sysctl -e -w net.ipv4.route.flush=1;
busybox sysctl -e -w net.ipv4.udp_rmem_min=6144;
busybox sysctl -e -w net.ipv4.udp_wmem_min=6144;
busybox sysctl -e -w net.ipv4.tcp_rfc1337=1;
busybox sysctl -e -w net.ipv4.ip_no_pmtu_disc=0;
busybox sysctl -e -w net.ipv4.tcp_ecn=0;
busybox sysctl -e -w net.ipv4.tcp_rmem='6144 87380 1048576';
busybox sysctl -e -w net.ipv4.tcp_wmem='6144 87380 1048576';
busybox sysctl -e -w net.ipv4.tcp_timestamps=0;
busybox sysctl -e -w net.ipv4.tcp_sack=1;
busybox sysctl -e -w net.ipv4.tcp_fack=1;
busybox sysctl -e -w net.ipv4.tcp_window_scaling=1;
#
# Re-use sockets in time-wait state
busybox sysctl -e -w net.ipv4.tcp_tw_recycle=1;
busybox sysctl -e -w net.ipv4.tcp_tw_reuse=1;
#
# KickAss UnderUtilized Networking Tweaks below initially suggested by avgjoemomma (from XDA)
# Refined and tweaked by zeppelinrox... duh.
#
busybox sysctl -e -w net.ipv4.tcp_congestion_control=cubic; # Change network congestion algorithm to CUBIC
#
# Hardening the TCP/IP stack to SYN attacks (That's what she said)
# http://www.cyberciti.biz/faq/linux-kernel-etcsysctl-conf-security-hardening
# http://www.symantec.com/connect/articles/hardening-tcpip-stack-syn-attacks
#
busybox sysctl -e -w net.ipv4.tcp_syncookies=1;
busybox sysctl -e -w net.ipv4.tcp_synack_retries=2;
busybox sysctl -e -w net.ipv4.tcp_syn_retries=2;
busybox sysctl -e -w net.ipv4.tcp_max_syn_backlog=1024;
#
busybox sysctl -e -w net.ipv4.tcp_max_tw_buckets=16384; # Bump up tw_buckets in case we get DoS'd
busybox sysctl -e -w net.ipv4.icmp_echo_ignore_all=1; # Ignore pings
busybox sysctl -e -w net.ipv4.icmp_echo_ignore_broadcasts=1; # Don't reply to broadcasts (prevents joining a smurf attack)
busybox sysctl -e -w net.ipv4.icmp_ignore_bogus_error_responses=1; # Enable bad error message protection (should be enabled by default)
busybox sysctl -e -w net.ipv4.tcp_no_metrics_save=1; # Don't cache connection metrics from previous connection
busybox sysctl -e -w net.ipv4.tcp_fin_timeout=15;
busybox sysctl -e -w net.ipv4.tcp_keepalive_intvl=30;
busybox sysctl -e -w net.ipv4.tcp_keepalive_probes=5;
busybox sysctl -e -w net.ipv4.tcp_keepalive_time=1800;
#
# Don't pass traffic between networks or act as a router
busybox sysctl -e -w net.ipv4.ip_forward=0; # Disable IP Packet forwarding (should be disabled already)
busybox sysctl -e -w net.ipv4.conf.all.send_redirects=0;
busybox sysctl -e -w net.ipv4.conf.default.send_redirects=0;
#
# Enable spoofing protection (turn on reverse packet filtering)
busybox sysctl -e -w net.ipv4.conf.all.rp_filter=1;
busybox sysctl -e -w net.ipv4.conf.default.rp_filter=1;
#
# Don't accept source routing
busybox sysctl -e -w net.ipv4.conf.all.accept_source_route=0;
busybox sysctl -e -w net.ipv4.conf.default.accept_source_route=0 ;
#
# Don't accept redirects
busybox sysctl -e -w net.ipv4.conf.all.accept_redirects=0;
busybox sysctl -e -w net.ipv4.conf.default.accept_redirects=0;
busybox sysctl -e -w net.ipv4.conf.all.secure_redirects=0;
busybox sysctl -e -w net.ipv4.conf.default.secure_redirects=0;
Click to expand...
Click to collapse
and the script running as well .. ( Under jelly bean )
i edited most of my post and get rid all the link .. i give you some link to test
just wait and see i'm working on it
meanwhile if you want to try, i made a simple script based on last kisk ass kernel
give me some report if u have aproblem or the script not running i do my best i could .. Thank for testing it .. Cheers
The short summary:
TCP performance tuning - how to tune linux
The default Linux tcp window sizing parameters before 2.6.17 sucks.
The short fix [wirespeed for gigE within 5 ms RTT and fastE within 50 ms RTT]:
in /etc/sysctl.conf
net/core/rmem_max = 8738000
net/core/wmem_max = 6553600
net/ipv4/tcp_rmem = 8192 873800 8738000
net/ipv4/tcp_wmem = 4096 655360 6553600
It might also be a good idea to increase vm/min_free_kbytes, especially
if you have e1000 with NAPI or similar. A sensible value is 16M or 64M:
vm/min_free_kbytes = 65536
If you run an ancient kernel, increase the txqueuelen to at least 1000:
ifconfig ethN txqueuelen 1000
If you are seeing "TCP: drop open request" for real load (not a DDoS),
you need to increase tcp_max_syn_backlog (8192 worked much better than
1024 on heavy webserver load).
The background:
TCP performance is limited by latency and window size (and overhead, which
reduces the effective window size) by window_size/RTT (this is how much data
that can be "in transit" over the link at any given moment).
To get the actual transfer speeds possible you have to divide the resulting
window by the latency (in seconds):
The overhead is: window/2^tcp_adv_win_scale (tcp_adv_win_scale default is 2)
So for linux default parameters for the recieve window (tcp_rmem):
87380 - (87380 / 2^2) = 65536.
Given a transatlantic link (150 ms RTT), the maximum performance ends up at:
65536/0.150 = 436906 bytes/s or about 400 kbyte/s, which is really slow today.
With the increased default size:
(873800 - 873800/2^2)/0.150 = 4369000 bytes/s, or about 4Mbytes/s, which
is resonable for a modern network. And note that this is the default, if
the sender is configured with a larger window size it will happily scale
up to 10 times this (8738000*0.75/0.150 = ~40Mbytes/s), pretty good for
a modern network.
2.6.17 and later have resonably good defaults values, and actually tune
the window size up to the max allowed, if the other side supports it. So
since then most of this guide is not needed. For good long-haul throughput
the maxiumum value might need to be increased though.
For the txqueuelen, this is mostly relevant for gigE, but should not hurt
anything else. Old kernels have shipped with a default txqueuelen of 100,
which is definately too low and hurts performance.
net/core/[rw]mem_max is in bytes, and the largest possible window size.
net/ipv4/tcp_[rw]mem is in bytes and is "min default max" for the tcp
windows, this is negotiated between both sender and reciever. "r" is for
when this machine is on the recieving end, "w" when the connection is
initiated from this machine.
There are more tuning parameters, for the Linux kernel they are documented
in Documentation/networking/ip-sysctl.txt, but in our experience only the
parameters above need tuning to get good tcp performance..
Know How
list the sysctl’s that usually have impact on network performance:
net.nf_conntrack_max
maximum number of tracked connection in iptables
net.ipv4.ip_local_port_range
range of ports used for outgoing TCP connections (useful to change it if you have a lot of outgoing connections from host)
net.ipv4.tcp_rmem
autotuning tcp receive buffer parameters
net.ipv4.tcp_wmem
autotuning tcp send buffer parameters
net.ipv4.rmem_max
maximum tcp socket receive buffer memory size (in bytes)
net.ipv4.wmem_max
maximum tcp socket send buffer memory size (in bytes)
net.ipv4.tcp_mem
TCP buffer memory usage thresholds for autotuning, in memory pages (1 page = 4kb)
net.core.somaxconn
maximum listen queue size for sockets (useful and often overlooked setting for loadbalancers, webservers and application servers (like unicorn, php-fpm). If all server processes/threads are busy, then incoming client connections are put in “backlog” waiting for being served). Full backlog causes client connections to be immediately rejected, causing client error.
net.core.dev_weight
maximum number of frames that kernel may drain from device queue during one interrupt cycle (setting higher value will allow more packets to be processed during one softirq cycle, but longer gaps between CPU availability for applications)
net.core.netdev_max_backlog
number of slots in the receiver's ring buffer for arriving packets (kernel put packets in this queue if the CPU is not available to process them, for example by application)
net.ipv4.tcp_keepalive_time
interval in seconds between last packet sent and first keepalive probe sent by linux
net.ipv4.tcp_keepalive_probes
number of unacknowledged keepalive probe packets to send before
any devs checked out this? placebo or malware?
Every improvemnt for lates experiment will be post ini here and this is the lates update
for our device ( Qualcom snapdragon 800 , MSM 8974 )
Last tested on nougat 7.1 [ROM][LOS14.1][7.1.2_r29] DARK ROM [OMS] huge thanks for that
The latest give me some Amazing improvement on my N5 the one and only i have ....i missed my xperia :crying:.test using gsm network 3G/4G
Change Log :
1. New Value on signal stability
2. New IPtable on system bin based msm 8974 device
3. Change most of value on script
4. busybox include not to necessary download from ps ( give me some crash with latest super su )
4. Google dns included and more i think i forgot
before you use this it will be better if you upgrade your bootloader and radio to the latest update
i make flashble zip for that just grab it (hhz20h-2.0.50.2.30)
grab it here :
lates bootloader and radio
https://www.androidfilehost.com/?fid=746010030569955615
Boosted V.1.0 tweak :
https://www.androidfilehost.com/?fid=890129502657584755
Just try it and give me some feed back..
and please delete manualy the old tweak or you can do dirty flash to try this
ENJOY...... YOU ARE BOOSTED NOW !!!
​
My issues with this mod is not what the TCP tweaks to the kernel and build.prop.
It lies here:
00Cleaner:
Code:
if $cache; then
echo "* RemoveCache Tweaks Starting At $( date +"%m-%d-%Y %H:%M:%S" )" | tee -a $raweLOG
busybox find /data/data -type d -iname "*cache*" -maxdepth 2 -mindepth 2 -exec busybox rm -rf {} ';'
busybox rm -f /data/anr/*.*
busybox rm -f /data/cache/*.*
busybox rm -f /data/log/*.*
busybox rm -f /data/mlog/
busybox rm -f /data/tombstones/*
busybox rm -f /data/backup/pending/*
busybox rm -r /data/local/tmp/*
busybox rm -r /data/system/appusagestats/*
busybox rm -r /data/system/dropbox/*
busybox rm -f /data/system/usagestats/*
echo "* RemoveCache Tweaks Finished At $( date +"%m-%d-%Y %H:%M:%S" )" | tee -a $raweLOG
fi
and
01killing
Code:
#System rw at boot
sysrw
#Clean-up
find /data/data/*/cache/ -depth -mindepth 1 -exec rm -Rf {} \;
find /data/data/*/*/cache/ -depth -mindepth 1 -exec rm -Rf {} \;
find /data/data/*/*/*/cache/ -depth -mindepth 1 -exec rm -Rf {} \;
find /data/data/*/*/*/*/cache/ -depth -mindepth 1 -exec rm -Rf {} \;
find /data/data/*/Cache/ -depth -mindepth 1 -exec rm -Rf {} \;
find /data/data/*/*/Cache/ -depth -mindepth 1 -exec rm -Rf {} \;
find /data/data/*/*/*/Cache/ -depth -mindepth 1 -exec rm -Rf {} \;
find /data/data/*/*/*/*/Cache/ -depth -mindepth 1 -exec rm -Rf {} \;
rm -Rf /data/data/com.facebook.katana/files/video-cache/*
#Google service drain fix
su -c "pm enable com.google.android.gms/.update.SystemUpdateActivity"
su -c "pm enable com.google.android.gms/.update.SystemUpdateService"
su -c "pm enable com.google.android.gms/.update.SystemUpdateService$ActiveReceiver"
su -c "pm enable com.google.android.gms/.update.SystemUpdateService$Receiver"
su -c "pm enable com.google.android.gms/.update.SystemUpdateService$SecretCodeReceiver"
su -c "pm enable com.google.android.gsf/.update.SystemUpdateActivity"
su -c "pm enable com.google.android.gsf/.update.SystemUpdatePanoActivity"
su -c "pm enable com.google.android.gsf/.update.SystemUpdateService"
su -c "pm enable com.google.android.gsf/.update.SystemUpdateService$Receiver"
su -c "pm enable com.google.android.gsf/.update.SystemUpdateService$SecretCodeReceiver"
I'm not sure what this all does on boot...
moreover, a permanent non upgradable hosts file redirecting all ads to localhost will probably reflect in a somewhat better web performance, but you should announce that you're doing it.
Code:
# This hosts file has been generated by AdAway on:
# 2016-11-15 23:17:02
# Please do not modify it directly, it will be overwritten when AdAway is applied again.
# This file is generated from the following sources:
# [url]http://winhelp2002.mvps.org/hosts.txt[/url]
# [url]https://adaway.org/hosts.txt[/url]
# [url]https://hosts-file.net/ad_servers.txt[/url]
# [url]https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0&mimetype=plaintext[/url]
127.0.0.1 localhost
::1 localhost
127.0.0.1 ad.doubleclick.net.18295.9086.302br.net
127.0.0.1 db6.net-filter.com
127.0.0.1 ads.doktoronline.no
127.0.0.1 logc189.xiti.com
127.0.0.1 spinbox.techtracker.com
...
...
...
...
BTW, and for the record, to give credit where it's due:
Code:
================ Copyright (C) 2014 rawe Project ================
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
=====================================================================
daedric said:
My issues with this mod is not what the TCP tweaks to the kernel and build.prop.
It lies here:
00Cleaner:
Code:
if $cache; then
echo "* RemoveCache Tweaks Starting At $( date +"%m-%d-%Y %H:%M:%S" )" | tee -a $raweLOG
busybox find /data/data -type d -iname "*cache*" -maxdepth 2 -mindepth 2 -exec busybox rm -rf {} ';'
busybox rm -f /data/anr/*.*
busybox rm -f /data/cache/*.*
busybox rm -f /data/log/*.*
busybox rm -f /data/mlog/
busybox rm -f /data/tombstones/*
busybox rm -f /data/backup/pending/*
busybox rm -r /data/local/tmp/*
busybox rm -r /data/system/appusagestats/*
busybox rm -r /data/system/dropbox/*
busybox rm -f /data/system/usagestats/*
echo "* RemoveCache Tweaks Finished At $( date +"%m-%d-%Y %H:%M:%S" )" | tee -a $raweLOG
fi
and
01killing
Code:
#System rw at boot
sysrw
#Clean-up
find /data/data/*/cache/ -depth -mindepth 1 -exec rm -Rf {} \;
find /data/data/*/*/cache/ -depth -mindepth 1 -exec rm -Rf {} \;
find /data/data/*/*/*/cache/ -depth -mindepth 1 -exec rm -Rf {} \;
find /data/data/*/*/*/*/cache/ -depth -mindepth 1 -exec rm -Rf {} \;
find /data/data/*/Cache/ -depth -mindepth 1 -exec rm -Rf {} \;
find /data/data/*/*/Cache/ -depth -mindepth 1 -exec rm -Rf {} \;
find /data/data/*/*/*/Cache/ -depth -mindepth 1 -exec rm -Rf {} \;
find /data/data/*/*/*/*/Cache/ -depth -mindepth 1 -exec rm -Rf {} \;
rm -Rf /data/data/com.facebook.katana/files/video-cache/*
#Google service drain fix
su -c "pm enable com.google.android.gms/.update.SystemUpdateActivity"
su -c "pm enable com.google.android.gms/.update.SystemUpdateService"
su -c "pm enable com.google.android.gms/.update.SystemUpdateService$ActiveReceiver"
su -c "pm enable com.google.android.gms/.update.SystemUpdateService$Receiver"
su -c "pm enable com.google.android.gms/.update.SystemUpdateService$SecretCodeReceiver"
su -c "pm enable com.google.android.gsf/.update.SystemUpdateActivity"
su -c "pm enable com.google.android.gsf/.update.SystemUpdatePanoActivity"
su -c "pm enable com.google.android.gsf/.update.SystemUpdateService"
su -c "pm enable com.google.android.gsf/.update.SystemUpdateService$Receiver"
su -c "pm enable com.google.android.gsf/.update.SystemUpdateService$SecretCodeReceiver"
I'm not sure what this all does on boot...
moreover, a permanent non upgradable hosts file redirecting all ads to localhost will probably reflect in a somewhat better web performance, but you should announce that you're doing it.
Code:
# This hosts file has been generated by AdAway on:
# 2016-11-15 23:17:02
# Please do not modify it directly, it will be overwritten when AdAway is applied again.
# This file is generated from the following sources:
# [url]http://winhelp2002.mvps.org/hosts.txt[/url]
# [url]https://adaway.org/hosts.txt[/url]
# [url]https://hosts-file.net/ad_servers.txt[/url]
# [url]https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0&mimetype=plaintext[/url]
127.0.0.1 localhost
::1 localhost
127.0.0.1 ad.doubleclick.net.18295.9086.302br.net
127.0.0.1 db6.net-filter.com
127.0.0.1 ads.doktoronline.no
127.0.0.1 logc189.xiti.com
127.0.0.1 spinbox.techtracker.com
...
...
...
...
BTW, and for the record, to give credit where it's due:
Code:
================ Copyright (C) 2014 rawe Project ================
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
=====================================================================
Click to expand...
Click to collapse
thanks in advance
sorry late for respond..i have a lot of work to do
i'll try to fix and run the script on boot and running flawless
i.m still working on it doing some test and else
wide open minded if there any sugestion and oppinion cheers
Boost_net_test rc 02
Tested On Nougat ( Pure Nexus 7.1 ) Huge thank for they awesome rom and hardwork
i just make additional option for net connection and i think nougat better on net then mm
Change Log :
- change the other method with directly touch the tuning from buildprop
- busybox included
Note :
Backup your buildprop to your sdcard ! and if theres some wrong u can push it manualy
for check just take alook system/buildprop on your device and you will find my tweak on it
link moved to post #1
rawe_etc said:
Boost_net_test rc 02
Tested On Nougat ( Pure Nexus 7.1 ) Huge thank for they awesome rom and hardwork
i just make additional option for net connection and i think nougat better on net then mm
Change Log :
- change the other method with directly touch the tuning from buildprop
- busybox included
Note :
Backup your buildprop to your sdcard ! and if theres some wrong u can push it manualy
for check just take alook system/buildprop on your device and you will find my tweak on it
Click to expand...
Click to collapse
Canthis tweak work on 8.1.0 oreo.?.. Or can you share any significant information i should be researching to better acheive this tweak.?.. Thank you in advance. RUNNING. GZOSP
alienblackpro said:
Canthis tweak work on 8.1.0 oreo.?.. Or can you share any significant information i should be researching to better acheive this tweak.?.. Thank you in advance. RUNNING. GZOSP
Click to expand...
Click to collapse
not testing yet on oreo . but i think this can be work on oreo cause it just tweak on build prop and the main goal of this tweak are pushing the kernel 3. above to the limit until we get the max result, my advice just try it ! not to worry .. but u should backup your rom first .. do some test by app on playstore .. before u flashin this tweak and after ,, if anything goes wrong u can restore your rom and everthing will be back .. cheers
rawe_etc said:
not testing yet on oreo . but i think this can be work on oreo cause it just tweak on build prop and the main goal of this tweak are pushing the kernel 3. above to the limit until we get the max result, my advice just try it ! not to worry .. but u should backup your rom first .. do some test by app on playstore .. before u flashin this tweak and after ,, if anything goes wrong u can restore your rom and everthing will be back .. cheers
Click to expand...
Click to collapse
Yes foe sure...just needed the boot of confidence.. Thanks again..and yes sir im no strangee to brinking devices back from the dead...FYI....OREO. Running great on tge old " hammerhead"...#NEVERSETTLE
alienblackpro said:
Yes foe sure...just needed the boot of confidence.. Thanks again..and yes sir im no strangee to brinking devices back from the dead...FYI....OREO. Running great on tge old " hammerhead"...#NEVERSETTLE
Click to expand...
Click to collapse
Try this one my freind
Due on hammerhead kernel for maximus TCP tunning 7.1 and give me some feedback
link moved to post #1
rawe_etc said:
Try this one my freind
Due on hammerhead kernel for maximus TCP tunning 7.1 and give me some feedback
Click to expand...
Click to collapse
Okie dokie,..here goes nothin....crossed fingers...feed back soon as i can..:good::good:
alienblackpro said:
Okie dokie,..here goes nothin....crossed fingers...feed back soon as i can..:good::good:
Click to expand...
Click to collapse
Not letting me post screen shots...somethin im doing wrong here..?.. Flashed fine...im sure im missing a whole lot about other parameters i need to follow...to free all capabilities of your script...i was gonna post my kernal ....and anything else you need for feedback..i also have map of coverage here ...and it not bad i just only can get signal outside the house in certain areas...this is why im so desperate to control these networks...about to construct my own tower..!!! Thank you in advance..#NEVERSETTLE.....dies my kernel interfere?.. I have speed up swap running also...wow what a difference... Awaiting guidance fellas...tganx again
its hard to make it stable .. if u put big or small value .. then some issue come up and i dont gett it why the qualcom not upgrade the modem like iphone .. this is my progress so far .. base on this value on hammerhed 7.1
and i try to put script to make it stabel and change to incerease the download section and decrease the the upload section
3 time test .. give stable result but not significant improvment .. cause cann't deal with the modem and our lovely limeted device
u can figure out on google for that ...
note:
May be in your country will give u diffrent result then mine
and for awhile this project will be suppend cause i have alot of to do in real world
cheeers.......
new update tweak boot_net_ rc04 .. good luck
link moved to post #1
rawe_etc said:
its hard to make it stable .. if u put big or small value .. then some issue come up and i dont gett it why the qualcom not upgrade the modem like iphone .. this is my progress so far .. base on this value on hammerhed 7.1
and i try to put script to make it stabel and change to incerease the download section and decrease the the upload section
3 time test .. give stable result but not significant improvment .. cause cann't deal with the modem and our lovely limeted device
u can figure out on google for that ...
note:
May be in your country will give u diffrent result then mine
and for awhile this project will be suppend cause i have alot of to do in real world
cheeers.......
new update tweak boot_net_ rc04 .. good luck
Click to expand...
Click to collapse
OK..so I had no idea it would do full wipe...hardly anything workedvin settings..WiFi wouldn't stay on ...greyed out...icons were different....complete restore....appreciate all your time and work..I'll be following how you come along with this...great work...thanx
hallo world
i' m back with the lates update all change log u can find on post #5
heres my screen shot .. but sorry
I'm out of internet quota for tested .. so only one result for test speed
you can do it by your own or you can try to download something .. u can see some good improvent on downlod speed
enjoy
rawe_etc said:
hallo world
i' m back with the lates update all change log u can find on post #5
heres my screen shot .. but sorry
I'm out of internet quota for tested .. so only one result for test speed
you can do it by your own or you can try to download something .. u can see some good improvent on downlod speed
enjoy
Click to expand...
Click to collapse
It seems to work fine, connection speed somewhat is quicker, but less battery friendly than before, but anyway I appreciate the work done, thank you for that. If it's in your plans, can you do something about Bypass ISP, Tether boost and DNSmasq features from Crossbreeder to be included in your mod? I really miss them, and they were extremely useful at the time. Take this as a simple question, not a request to be satisfied immediately. Thank you again
Inviato dal mio Nexus 5 con Tapatalk 2
jacomail95 said:
It seems to work fine, connection speed somewhat is quicker, but less battery friendly than before, but anyway I appreciate the work done, thank you for that. If it's in your plans, can you do something about Bypass ISP, Tether boost and DNSmasq features from Crossbreeder to be included in your mod? I really miss them, and they were extremely useful at the time. Take this as a simple question, not a request to be satisfied immediately. Thank you again
Inviato dal mio Nexus 5 con Tapatalk 2
Click to expand...
Click to collapse
sorry late for respond .. alot off app to support your question hope that will help you but i dont think will work .. on 6.0 above
let see what i can do on next update .. thank you for testing mine.. and support .. some feed back and report give me some energy to give you more
cheers
Flash this zip can modify build.prop right?
I change dns server to cloudflare,sorry.

How to get ADB shell with uid=0(root) on i9500?

Hi. I set following values in default.prop but have no adb root shell.
Code:
[email protected]:/ $ grep secure default.prop
ro.secure=0
ro.adb.secure=0
Code:
[email protected]:/ $ id
uid=2000(shell) gid=2000(shell) groups=1003(graphics),1004(input),1007(log),1011(adb),1015(sdcard_rw),1028(sdcard_r),3001(net_bt_admin),3002(net_bt),3003(inet),3006(net_bw_stats) context=u:r:shell:s0
I use factory boot and system partitions, except one change I made to default.prop.
Can anyone give any suggestions or pointers?
up
up
up

Recovery stock flash, need some guides

Hi. After 2 years (something about that) with my phone i don't know how resolve this issue. I can't believe something like that happens me just now (?!).
After idk how many flashing, reflashing, testing all i think roms for my device i was force to flash stock recovery :/.
Odin you ask? I try working with windows 10 after visit my friends (yes they all have 10!) without success. I wrote this post and asking for help and solution because before i flashed this retard stock recovery i was still installed my rom. I use AEX 7.1.2.
So first question and most important how can i mount system partition (coz this is the problem right? with no signed zip for example?). I can't obviously flash zip file but my phone was rooted at least 1000x times using supersu, magisk so mayby this is my open door for start?
Mayby i share what i have in bin and xbin folder for this moment. If need more information just ask please.
*** acpid
add-property-tag
add-shell
addgroup
adduser
adjtimex
anrd
ar
arch
arp
arping
ash
awk
base64
basename
bash
bbconfig
beep
blkdiscard
blkid
blockdev
bootchartd
brctl
bunzip2
busybox
bzcat
bzip2
cal
cat
chat
chattr
chcon
check-lost+found
chgrp
chmod
chown
chpasswd
chpst
chroot
chrt
chvt
cksum
clear
cmp
comm
conspy
cp
cpio
cpustats
crond
crontab
cryptpw
cttyhack
cut
date
dc
dd
deallocvt
delgroup
deluser
depmod
devmem
dexlist
dexopt-wrapper
df
dhcprelay
diff
dirname
dmesg
dnschk
dnsd
dnsdomainname
dos2unix
dpkg
dpkg-deb
du
dumpcache
dumpkmap
dumpleases
echo
ed
egrep
eject
env
envdir
envuidgid
ether-wake
expand
expr
factor
fakeidentd
fallocate
false
fatattr
fbset
fbsplash
fdflush
fdformat
fdisk
fgconsole
fgrep
find
findfs
fio
flash_eraseall
flash_lock
flash_unlock
flashcp
flock
fold
free
freeramdisk
fsck
fsck.minix
fsfreeze
fstrim
fsync
ftpd
ftpget
ftpput
fuser
getenforce
getopt
getsebool
getty
grep
groups
gunzip
gzip
halt
hd
hdparm
head
hexdump
hexedit
hostid
hostname
httpd
httpurl
hush
hwclock
i2cdetect
i2cdump
i2cget
i2cset
id
ifconfig
ifdown
ifenslave
ifplugd
ifup
inetd
init
inotifyd
insmod
install
ionice
iostat
ip
ipaddr
ipcalc
ipcrm
ipcs
iplink
ipneigh
iproute
iprule
iptunnel
kbd_mode
kill
killall
killall5
klogd
ksminfo
last
latencytop
less
librank
link
linux32
linux64
linuxrc
ln
load_policy
loadfont
loadkmap
logger
login
logname
logread
losetup
lpd
lpq
lpr
ls
lsattr
lsmod
lsof
lspci
lsscsi
lsusb
lunzip
lzcat
lzip
lzma
lzop
lzopcat
makedevs
makemime
man
matchpathcon
md5sum
mdev
mesg
micro_bench
micro_bench_static
microcom
mkdir
mkdosfs
mke2fs
mkfifo
mkfs.ext2
mkfs.minix
mkfs.reiser
mkfs.vfat
mknod
mkpasswd
mkswap
mktemp
mmc_utils
modinfo
modprobe
more
mount
mountpoint
mpstat
mt
mv
nameif
nanddump
nandwrite
nbd-client
nc
netstat
nice
nl
nmeter
nohup
nproc
nsenter
nslookup
ntpd
nuke
od
odex
openvt
partprobe
passwd
paste
patch
perfprofd
pgrep
pidof
ping
ping6
pipe_progress
pivot_root
pkill
pmap
popmaildir
poweroff
powertop
printenv
printf
procmem
procrank
ps
pscan
pstree
puncture_fs
pwd
pwdx
raidautorun
rawbu
rdate
rdev
readahead
readlink
readprofile
realpath
reboot
reformime
remove-shell
renice
reset
resize
restorecon
resume
rev
rfkill
rm
rmdir
rmmod
route
rpm
rpm2cpio
rtcwake
run-init
run-parts
runcon
runlevel
runsv
runsvdir
rx
sane_schedstat
script
scriptreplay
sed
selinuxenabled
sendmail
seq
sestatus
setarch
setconsole
setenforce
setfattr
setfiles
setfont
setkeycodes
setlogcons
setpriv
setsebool
setserial
setsid
setuidgid
sh
sha1sum
sha256sum
sha3sum
sha512sum
showkey
showmap
showslab
shred
shuf
simpleperf
slattach
sleep
smemcap
softlimit
sort
split
sqlite3
ssl_client
ssl_helper
start-stop-daemon
stat
strace
strings
stty
sulogin
sum
sv
svc
svlogd
swapoff
swapon
switch_root
sync
sysctl
syslogd
tac
tail
tar
taskset
taskstats
tcpdump
tcpsvd
tee
telnet
telnetd
test
tftp
tftpd
time
timeout
top
touch
tr
traceroute
traceroute6
true
truncate
tty
ttysize
tunctl
tune2fs
ubiattach
ubidetach
ubimkvol
ubirename
ubirmvol
ubirsvol
ubiupdatevol
udhcpc
udhcpc6
udhcpd
udpsvd
uevent
umount
uname
uncompress
unexpand
uniq
unix2dos
unlink
unlzma
unlzop
unshare
unxz
unzip
uptime
users
usleep
uudecode
uuencode
vconfig
vi
vlock
volname
w
wall
watch
watchdog
wc
wget
which
who
whoami
whois
xargs
xxd
xz
xzcat
yes
zcat
zcip
zip ***
*** acpi
am
app_process
app_process32
applypatch
appops
appwidget
arp
arping
atrace
audiod
audioserver
base64
basename
bcc
bdt
blkid
blockdev
bmgr
bootanimation
bootstat
brctl
btnvtool
btsnoop
bu
bugreport
bugreportz
bzcat
cal
cat
chattr
chcon
chgrp
chmod
chown
chroot
chrt
cksum
clatd
clear
cmd
cmp
comm
content
cp
cpio
cut
dalvikvm
dalvikvm32
date
dd
debuggerd
dex2oat
dexdump
df
dhcptool
diff
dirname
dmesg
dnsmasq
dos2unix
dpm
drmserver
du
dumpstate
dumpsys
e2fsck
ebtables
echo
egrep
env
expand
expr
fallocate
false
fdisk
fgrep
file
find
flock
fm_qsoc_patches
fmconfig
free
freeramdisk
fsck_msdos
fsck.exfat
fsck.f2fs
fsck.ntfs
fsfreeze
fstype
ftpget
ftpput
gatekeeperd
gatt_test
gdbserver
getenforce
getevent
getfattr
getprop
grep
groups
gzip
hci_qcomm_init
head
help
hid
host
hostapd
hostapd_cli
hostname
hwclock
id
idmap
ifconfig
iftop
ime
inotifyd
input
insmod
install
install-recovery.sh
installd
ioctl
ionice
iorenice
iotop
ip
ip6tables
ip6tables-restore
ip6tables-save
iptables
iptables-restore
iptables-save
irsc_util
iw
keystore
keystore_cli
keystore_cli_v2
kill
killall
l2test_ertm
ld.mc
linker
lmkd
ln
load_policy
loc_launcher
log
logcat
logd
logname
logpersist.cat
logpersist.start
logpersist.stop
logwrapper
losetup
ls
lsattr
lsmod
lsof
lspci
lsusb
make_ext4fs
makedevs
mcap_tool
md5sum
mdnsd
media
mediacodec
mediadrmserver
mediaextractor
mediaserver
memory_replay32
memtest
mkdir
mke2fs
mkfifo
mkfs.exfat
mkfs.f2fs
mkfs.ntfs
mknod
mkswap
mktemp
mm-qcamera-daemon
modinfo
monkey
more
mount
mount.exfat
mount.ntfs
mountpoint
mtpd
mv
nandread
nbd-client
nc
ndc
netcat
netd
netmgrd
netstat
newfs_msdos
nice
nl
nohup
nproc
oatdump
od
onandroid
partprobe
paste
patch
patchoat
perfd
pgrep
pidof
ping
ping6
pivot_root
pkill
pm
pmap
pngtest
pppd
printenv
printf
prlimit
profman
ps
pwd
pwdx
qmuxd
qseecomd
r
racoon
radiooptions
radish
readahead
readlink
realpath
reboot
renice
requestsync
reset
resize
resize2fs
restart
restorecon
rev
rfc
rfkill
rild
rm
rmdir
rmmod
rmt_storage
route
run-as
runcon
schedtest
screencap
screenrecord
sdcard
secdiscard
sed
sendevent
sensorservice
seq
service
servicemanager
setenforce
setfattr
setprop
setsid
settings
sgdisk
sh
sha1sum
sha224sum
sha256sum
sha384sum
sha512sum
sleep
sm
sort
split
ss
ssr_diag
ssr_setup
start
stat
stop
strings
subsystem_ramdump
surfaceflinger
svc
swapoff
swapon
sync
sysctl
sysinit
tac
tail
tar
taskset
tc
tee
telecom
telnet
test
thermal-engine
time
time_daemon
timeout
tinycap
tinymix
tinypcminfo
tinyplay
toolbox
top
touch
toybox
tr
tracepath
tracepath6
traceroute
traceroute6
true
truncate
tty
tunctl
tune2fs
tzdatacheck
uiautomator
ulimit
umount
uname
uncrypt
uniq
unix2dos
uptime
usleep
vconfig
vdc
vmstat
vold
watch
wc
wcnss_service
which
whoami
wlandutservice
wm
wpa_cli
wpa_supplicant
xargs
xxd
xzcat
yes ***
Wysłane z mojego SM-G530FZ przy użyciu Tapatalka

hacking a old discontinued android tv box(airtel internet tv, codename: ganesa)

A old thread about the same topic: https://forum.xda-developers.com/android/software-hacking/rooting-set-box-lge-sh960s-airtel-t3826462
So I have temp root using dirty-cow and have tried to edit default.prop to get adb by usb. didnt work, all are mounted read-only. tried remounting, fail, turning off SELinux, fail. heres the shell:
Code:
$ adb shell
[email protected]:/ $ /data/local/tmp/dcow /data/local/tmp/run-as /system/bin/run-a>
dcow /data/local/tmp/run-as /system/bin/run-as
warning: new file size (9804) and destination file size (17920) differ
[*] size 17920
[*] mmap 0xb6d64000
[*] currently 0xb6d64000=464c457f
[*] using /proc/self/mem method
[*] madvise = 0xb6d64000 17920
[*] madvise = 0 17449
[*] /proc/self/mem 10931200 610
[*] exploited 0 0xb6d64000=464c457f
[email protected]:/ $ /system/bin/run-as
uid /system/bin/run-as 2000
uid 0
0 u:r:runas:s0
context 0 u:r:shell:s0
[email protected]:/ # Hehehe
/system/bin/sh: Hehehe: not found
127|[email protected]:/ # which touch
/system/bin/touch
[email protected]:/ # touch Hi.txt
touch: 'Hi.txt': Read-only file system
1|[email protected]:/ # mount -o rw,remount /system
mount: Permission denied
255|[email protected]:/ # ls -ladZ sys
sys/ system/
255|[email protected]:/ # ls -ladZ system
drwxr-xr-x root root u:object_r:system_file:s0 system
[email protected]:/ # setenforce 0
setenforce: Couldn't set enforcing status to '0': Permission denied
1|[email protected]:/ # sestatus
/system/bin/sh: sestatus: not found
127|[email protected]:/ # cat
^C
130|[email protected]:/ #
130|[email protected]:/ #
130|[email protected]:/ #
130|[email protected]:/ #
130|[email protected]:/ #
130|[email protected]:/ # cat /etc/selinux/config
/system/bin/sh: cat: /etc/selinux/config: No such file or directory
1|[email protected]:/ # cd etc
[email protected]:/etc # ls
18p
NOTICE.html.gz
audio_effects.conf
audio_policy.conf
bluetooth
clatd.conf
dhcpcd
event-log-tags
fallback_fonts.xml
fonts.xml
gps.conf
hosts
media_codecs.xml
media_codecs_google_audio.xml
media_codecs_google_tv.xml
media_codecs_google_video.xml
media_codecs_performance.xml
media_profiles.xml
mkshrc
permissions
ppp
preloaded-classes
recovery-resource.dat
security
sysconfig
system_fonts.xml
wifi
[email protected]:/etc # touch lol
touch: 'lol': Read-only file system
1|[email protected]:/etc # mount -o rw,remount /
mount: Permission denied
255|[email protected]:/etc # su mount -o rw,remount /
/system/bin/sh: su: not found
127|[email protected]:/etc # sudo mount -o rw,remount /
/system/bin/sh: sudo: not found
127|[email protected]:/etc #
127|[email protected]:/etc #
so can I know why I am denied even tho I am root? Also can some-one guide me to write a blob extraction script? There is no fastboot.
as its a Android Marshmallow (6.0) device try to dump boot.img and flash modified magisk_patched.img on locked bootloader. Magisk has an option to by-pass dm-verity. this is confirmed method on some Mediatek devices, if you are lucky this will work
Code:
ls -d $(find /dev/block -name by-name)/*
cat /dev/block/.../by-name/boot > /sdcard/boot.img
if that works, adb pull the img, patch with Magisk Manager, make sure you have enabled both checkboxes for preserve encryption + keep AVB/dm-verity, push it back to device and try to flash
Code:
cat /sdcard/magisk_patched.img > /dev/block/.../by-name/boot
however, if the img is flashed and dm-verity is preventing from boot this is a permanently brick
FaIl
aIecxs said:
as its a Android Marshmallow (6.0) device try to dump boot.img and flash modified magisk_patched.img on locked bootloader. Magisk has an option to by-pass dm-verity. this is confirmed method on some Mediatek devices, if you are lucky this will work
Code:
ls -d $(find /dev/block -name by-name)/*
cat /dev/block/.../by-name/boot > /sdcard/boot.img
if that works, adb pull the img, patch with Magisk Manager, make sure you have enabled both checkboxes for preserve encryption + keep AVB/dm-verity, push it back to device and try to flash
Code:
cat /sdcard/magisk_patched.img > /dev/block/.../by-name/boot
however, if the img is flashed and dm-verity is preventing from boot this is a permanently brick
Click to expand...
Click to collapse
I dont have full root i guess: find: /dev/block: Permission denied
check /proc/partitions for two similar partitions with 10 or 16 MB one of these should be boot. try to dump the partition (for example on my device it's mmcblk0p7)
Code:
cat /proc/partitions
cat /dev/block/mmcblk0p7 > /sdcard/mmcblk0p7.img
if that fails try to disable selinux
Code:
echo 0 > /sys/fs/selinux/enforce
or
echo 0 > /data/local/tmp/enforce
mount -o bind /data/local/tmp/enforce /sys/fs/selinux/enforce
chmod 0644 /sys/fs/selinux/enforce
chown 0.0 /sys/fs/selinux/enforce
chcon u:object_r:selinuxfs:s0 /sys/fs/selinux/enforce
Can someone help with steps to root the device and backup current ROM
seniornoob58432 said:
A old thread about the same topic: https://forum.xda-developers.com/android/software-hacking/rooting-set-box-lge-sh960s-airtel-t3826462
So I have temp root using dirty-cow and have tried to edit default.prop to get adb by usb. didnt work, all are mounted read-only. tried remounting, fail, turning off SELinux, fail. heres the shell:
Code:
$ adb shell
[email protected]:/ $ /data/local/tmp/dcow /data/local/tmp/run-as /system/bin/run-a>
dcow /data/local/tmp/run-as /system/bin/run-as
warning: new file size (9804) and destination file size (17920) differ
[*] size 17920
[*] mmap 0xb6d64000
[*] currently 0xb6d64000=464c457f
[*] using /proc/self/mem method
[*] madvise = 0xb6d64000 17920
[*] madvise = 0 17449
[*] /proc/self/mem 10931200 610
[*] exploited 0 0xb6d64000=464c457f
[email protected]:/ $ /system/bin/run-as
uid /system/bin/run-as 2000
uid 0
0 u:r:runas:s0
context 0 u:r:shell:s0
[email protected]:/ # Hehehe
/system/bin/sh: Hehehe: not found
127|[email protected]:/ # which touch
/system/bin/touch
[email protected]:/ # touch Hi.txt
touch: 'Hi.txt': Read-only file system
1|[email protected]:/ # mount -o rw,remount /system
mount: Permission denied
255|[email protected]:/ # ls -ladZ sys
sys/ system/
255|[email protected]:/ # ls -ladZ system
drwxr-xr-x root root u:object_r:system_file:s0 system
[email protected]:/ # setenforce 0
setenforce: Couldn't set enforcing status to '0': Permission denied
1|[email protected]:/ # sestatus
/system/bin/sh: sestatus: not found
127|[email protected]:/ # cat
^C
130|[email protected]:/ #
130|[email protected]:/ #
130|[email protected]:/ #
130|[email protected]:/ #
130|[email protected]:/ #
130|[email protected]:/ # cat /etc/selinux/config
/system/bin/sh: cat: /etc/selinux/config: No such file or directory
1|[email protected]:/ # cd etc
[email protected]:/etc # ls
18p
NOTICE.html.gz
audio_effects.conf
audio_policy.conf
bluetooth
clatd.conf
dhcpcd
event-log-tags
fallback_fonts.xml
fonts.xml
gps.conf
hosts
media_codecs.xml
media_codecs_google_audio.xml
media_codecs_google_tv.xml
media_codecs_google_video.xml
media_codecs_performance.xml
media_profiles.xml
mkshrc
permissions
ppp
preloaded-classes
recovery-resource.dat
security
sysconfig
system_fonts.xml
wifi
[email protected]:/etc # touch lol
touch: 'lol': Read-only file system
1|[email protected]:/etc # mount -o rw,remount /
mount: Permission denied
255|[email protected]:/etc # su mount -o rw,remount /
/system/bin/sh: su: not found
127|[email protected]:/etc # sudo mount -o rw,remount /
/system/bin/sh: sudo: not found
127|[email protected]:/etc #
127|[email protected]:/etc #
so can I know why I am denied even tho I am root? Also can some-one guide me to write a blob extraction script? There is no fastboot.
Click to expand...
Click to collapse
Can you help me the steps you used to root via ditry cow?
aIecxs said:
check /proc/partitions for two similar partitions with 10 or 16 MB one of these should be boot. try to dump the partition (for example on my device it's mmcblk0p7)
Code:
cat /proc/partitions
cat /dev/block/mmcblk0p7 > /sdcard/mmcblk0p7.img
if that fails try to disable selinux
Code:
echo 0 > /sys/fs/selinux/enforce
or
echo 0 > /data/local/tmp/enforce
mount -o bind /data/local/tmp/enforce /sys/fs/selinux/enforce
chmod 0644 /sys/fs/selinux/enforce
chown 0.0 /sys/fs/selinux/enforce
chcon u:object_r:selinuxfs:s0 /sys/fs/selinux/enforce
Click to expand...
Click to collapse
How to disable selinux?

Categories

Resources