43 replies to this topic

[RikRong]

I might need to pick one up to try it.

sent from my N6

I'm half tempted to get hold of my buddy's M and try it. I'd give him my unlocked M in trade if something happened.

Sent from my HTC6525LVW using Tapatalk

[RikRong]

Just saw this posted. I thought this worked by replacing the kernel with the older one? I read through the explanations of the exploit and didn't see anything about restoring the new kernel after the exploit. Is dumb ole me missing something?

Please Login or Register to see this Hidden Content

 

Please Login or Register to see this Hidden Content

  32.72KB   20 downloads

Please Login or Register to see this Hidden Content

 

Please Login or Register to see this Hidden Content

  99.08KB   20 downloads

Sent from my HTC6525LVW using Tapatalk

[SamuriHL]

The script reboots about a billion times.  It'll reboot the kernel during one of them.

[RikRong]

The script reboots about a billion times. It'll reboot the kernel during one of them.

Gotcha, that's what I figured.

Sent from my HTC6525LVW using Tapatalk

[gamertwo1]

After reading this thread,   

 

Hi, Newbie here, 

Having 182.46.15 , droid razr hd (xt926) , kk 4.4.2.. 

 

Is there any possibility that I am able to unlock + root my phone ??

[johnthehillbilly]

After reading this thread,

Hi, Newbie here,
Having 182.46.15 , droid razr hd (xt926) , kk 4.4.2..

Is there any possibility that I am able to unlock + root my phone ??

Root.... Possibly yes.... Unlock, not likely.... Here is the root method that is referred to a few posts earlier ...

Please Login or Register to see this Hidden Content

.... Give it a try, then please report back here if it works for you or not.....

[gamertwo1]

Root.... Possibly yes.... Unlock, not likely.... Here is the root method that is referred to a few posts earlier ...

Please Login or Register to see this Hidden Content

.... Give it a try, then please report back here if it works for you or not.....

 

But sir my 1st priority is to unlock my phone, Because I wan't to have lollipop .. 

[SamuriHL]

But sir my 1st priority is to unlock my phone, Because I wan't to have lollipop .. 

 

Then buy a new phone.  Cause if you're on build 15, you can't unlock it.

[johnthehillbilly]

In all honesty, you're lucky, and should be grateful that there are still some people even working on root for the 926..... Its an old device and [rapidly] approaching end of life . .... And IMO lollipop still has too many bugs .... Rooted KK, debloated, with maybe Xposed installer and Gravitybox module may serve you better :)

[RyanFleming]

!!!Verify IT Works!!!

 

I just bought a broken XT926 very inexpensive. it's my fifth XT926 I've bought since December.  One I sent back because it was updated to latest OTA and I could not unlock the bootloader.  Three I rooted/unlocked.  Anyway Once I put the new LCD on the broken one I booted it up and <sigh> it's updated to latest OTA.  I took a quick look and found the Hydrogen Peroxide exploit.  See Below:

 

System Version

182.46.15.XT926.verizon.en.us

 

Android Version 

4.4.2

 

BaseBand

Vanquish_BP_100731.020.64.21P

 

Kernel

3.4.42-gbd361ac

dbbuild@ca88inxdroid25 #1

tue july 29 30:03:04 PDT 2014

 

Build number

KDA20.62-15

 

Build Date

tue jul 29 02:51:09 PDT 2014

 

 

Long story short I kept getting the "Dead Android" No Command Window when the exploit was trying to boot to the recovery partion.  So I looked at the batch script and manually flashed the Kernel from fastboot to the recovery partion, then rebooted the phone and before it booted up normally I held the volume buttons to go to menu and went directly to boot to Recovery and this time it booted up to 4.4.2 with the May 2014 kernel and I was able to Root it with Towel Root.  I posted detailed instructions on a different forum, if somebody is interested I'll post it here, but while it's not too difficult to understand if you are comfortable with flashing, it's also not exactly for the faint of heart to try...  Hopefully if you run the script it works for you without having to do anything but run the script. But again I can verify it does work on a locked phone.  Now if somebody can  just figure out how to do something clever like this with the TZ partition....  <not holding my breath>

[johnthehillbilly]

I would say, post your detailed instructions here for others to see...

[RyanFleming]

Having Problems Try This:

Okay, I just bought my fifth XT926 Since last December (2014). The first two and the fourth I was able to use Towel Root, and (even though this DOES NOT APPLY HERE) motopocalypse to unlock the boot loader. One I sent back because it was updated, Why do people ever take OTA updates!!!!

Anyways I bought one with a broken LCD with the latest OTA, it came in the mail today and I learned of this new root method.
About The Phone:
System Version
182.46.15.XT926.verizon.en.us
Android Version 
4.4.2
BaseBand
Vanquish_BP_100731.020.64.21P
Kernal
3.4.42-gbd361ac
dbbuild@ca88inxdroid25 #1
tue july 29 30:03:04 PDT 2014
Build number
KDA20.62-15
Build Date
tue jul 29 02:51:09 PDT 2014

My first mistake was I did not realize there are two versions one for the XT907 and one for the XT926. I used the wrong one, so the flash to recovery failed. I kept getting stuck in fastboot with flash error, just kept typing fastboot continue, then eventually figured out if I successfully flash something, in my case I re-flashed the boot.img the fastboot flash error went away..

Finally I downloaded the correct exploit.: NOTE: the link listed on the page you copy and paste it, REMOVE THE SPACE between the DOT and the COM!!!!!

Please Login or Register to see this Hidden Content

Next I would run the exploit script and keep getting to the Boot To Recovery Part and Have the "Dead Android Dude" with the word NO COMMAND. I tried this several times, no luck, so I edited the bat script and where the script uses fastboot to flashes the Kernel into the recovery partition, and then reboots back to Android, then uses ADB to reboot into recovery. Well I decided heck with it, I went ahead and booted into fastboot, manually flashed the image, reset the phone and held the power keys in and went directly to recovery, and it booted to 4.4.2 kitkat with the May Kernel, and I ran the Towel Root exploit. Then I made a copy of the script and kept the first few lines up to the "cd files" erased everything up to the point it says run towel root. I then ran that script to clean things up. I could have just manually typed it all but hey, I'm lazy.

For Newbies or People not too comfortable with Android in general. Be warned these steps take you a step closer to potentially damaging your phone, but if do these steps right no worries. If you do soft brick the phone, just use rsdlite or fastboot and re-image it with the latest OTA. I'm not going to cover that here.

Steps:
NOTE when typing all commands are in quotes, do not include the quotes!
PLEASE READ ALL THE STEPS FIRST BEFORE TRYING THIS!!!

From the Hydrogen PEROXIDE XT926 folder
hold the shift key in and right mouse click on the files folder and select Open Command Window Here
This will open a command window with the current path set as the files folder.  Make sure the phone is plugged into the computer and your phone is set up like the exploit instructs you to.

Type 
"ADB Devices" and you should see the device listed, if not, search the forums for help.
"ADB Reboot Bootloader" This will boot into fastboot
Alternately after opening the command line window with the phone powered off press and hold volume up/volume down, and while holding press power for four seconds and release all the buttons. Then when the menu appears press volume down until fastboot is sselected and then press volume up. This will also boot in to fastboot.

From the Command Line Window With the phone in Fastboot mode Type
"fastboot flash recovery root.img" You should get a message showing success, if not Stop Now because something else is wrong and I don't have an answer for you. 
Next, take a deep breath and be ready to take action, as we are going to reboot the phone and before it has a chance to reboot, put it into recovery mode.
Type "fastboot reboot" as soon as the phone reboots (the screen goes black) press and hold volume up/volume down, and while holding press power for four seconds and release all the buttons. Then when the menu appears press volume down until recovery is selected and then press volume up. This will also boot into the recovery partition which has the older kernel, so actually the phone will boot to the 4.4.2. You can verify that things worked by going to settings about phone and the Kernel version should be dated May 2014.

From the Phone
Find the Towel Root App and make sure the phone has internet connection and then run it.
You should get a message saying it worked, next run the script I mentioned above with the first half of the steps removed and run it, this will put the phone's recovery image back and clean things up.

DON"T TRY THESE STEPS BEFORE FIRST TRYING THE AUTOMATED INSTALL_ROOT.BAT SCRIPT THE STEPS I MENTIONED ABOVE ASSUME THAT YOU INSTALLED THE EXPLOIT, TOWELROOT, AND THE SUPERUSER PROGRAM ALREADY. ONLY TRY THIS IF YOU RUN THE SCRIPT AND GET THE "DEAD ANDROID GUY WITH NO COMMAND" ON THE SCREEN

[xKroniK13x]

Another potential: potential bootloader unlock for .15

Please Login or Register to see this Hidden Content

Never heard of sigma, and am skeptical. Only one person on xda showed this, and a person on GSM hosting says it worked on xt907 .15 firmware.

Sent from my Blissful RAZR M 5.0.2 from Tapatalk

[SamuriHL]

OMFG.  Do you know what that's doing???  That's insane. Basically they're temporarily changing the IMEI to one with a known unlock code, unlocking it, and restoring the original IMEI.  Wow....just wow.

[xKroniK13x]

OMFG. Do you know what that's doing??? That's insane. Basically they're temporarily changing the IMEI to one with a known unlock code, unlocking it, and restoring the original IMEI. Wow....just wow.

#YOLO, amirite?
I'm on vacation and don't have WiFi, so I'm pretty limited as far as researchability. Seems like a good way to cause issues. Not something I'd do!

Sent from my Blissful RAZR M 5.0.2 from Tapatalk

[SamuriHL]

#YOLO, amirite?
I'm on vacation and don't have WiFi, so I'm pretty limited as far as researchability. Seems like a good way to cause issues. Not something I'd do!

Sent from my Blissful RAZR M 5.0.2 from Tapatalk

 

That and the 265 dollar box you need to make it work, yea?  LOL

[xKroniK13x]

That and the 265 dollar box you need to make it work, yea? LOL

LOL. I just went to Sigmas website. That is ridiculous. Seems reasonable.

Actually a pretty interesting concept if it actually works. Good for independent dealers that resale used devices. Definitely not useful for us end users.

Sent from my Blissful RAZR M 5.0.2 from Tapatalk

[SamuriHL]

It's definitely an inventive way to attack the problem.  I was impressed.  The box, yea, not for us.

[SamuriHL]

Looks like I was looking at the wrong box.

 

Please Login or Register to see this Hidden Content

 

The basic set is only 99 bucks.  That's doable.

[xKroniK13x]

Looks like I was looking at the wrong box.

Please Login or Register to see this Hidden Content

The basic set is only 99 bucks. That's doable.

Questionable if its worth 100 for an old device like this though. That's more reasonable than over 200 though.

Sent from my Blissful RAZR M 5.0.2 from Tapatalk