- 記事: 48
- 登録日時: 2013年5月26日(日) 22:40
c:\adb\lgl23>adb push install_backdoor /data/local/tmp/
4685 KB/s (449804 bytes in 0.093s)
c:\adb\lgl23>adb push disable_ccsecurity /data/local/tmp/
5919 KB/s (378852 bytes in 0.062s)
c:\adb\lgl23>adb push device.db /data/local/tmp/
3583 KB/s (57344 bytes in 0.015s)
c:\adb\lgl23>adb shell
10|shell@android:/ $ cd /data/local/tmp/
cd /data/local/tmp/
shell@android:/data/local/tmp $ chmod 755 *
chmod 755 *
shell@android:/data/local/tmp $ ./install_backdoor
./install_backdoor
You have already installed backdoor mmap.
1|shell@android:/data/local/tmp $ ./disable_ccsecurity
./disable_ccsecurity
Already disabled??
Unlock anyway.
shell@android:/data/local/tmp $ ^C
c:\adb\lgl23>adb push run_root_shell /data/local/tmp/
3098 KB/s (396588 bytes in 0.125s)
c:\adb\lgl23>adb shell
shell@android:/ $ cd /data/local/tmp/
cd /data/local/tmp/
shell@android:/data/local/tmp $ chmod 755 *
chmod 755 *
shell@android:/data/local/tmp $ ./run_root_shell
./run_root_shell
Device detected: LGL23 (JDQ39B)
Attempt acdb exploit...
LGL23 (JDQ39B LGL2310d) is not supported.
Attempt fj_hdcp exploit...
Attempt msm_cameraconfig exploit...
Detected kernel physical address at 0x00008000 form iomem
Attempt put_user exploit...
shell@android:/data/local/tmp #
と言った感じで、自分の操作が悪いのか何なのかは解りませんが、run_root_shellにてtemproot可能でした。
一応同じようにパーティション一覧を載せておきます。
- コード: 全て選択
shell@android:/dev/block/platform/msm_sdcc.1/by-name # ls -l
ls -l
lrwxrwxrwx root root 1970-02-13 23:01 DDR -> /dev/block/mmcblk0p4
lrwxrwxrwx root root 1970-02-13 23:01 OneSeg -> /dev/block/mmcblk0p28
lrwxrwxrwx root root 1970-02-13 23:01 aboot -> /dev/block/mmcblk0p5
lrwxrwxrwx root root 1970-02-13 23:01 boot -> /dev/block/mmcblk0p7
lrwxrwxrwx root root 1970-02-13 23:01 cache -> /dev/block/mmcblk0p34
lrwxrwxrwx root root 1970-02-13 23:01 dbi -> /dev/block/mmcblk0p3
lrwxrwxrwx root root 1970-02-13 23:01 dbibak -> /dev/block/mmcblk0p29
lrwxrwxrwx root root 1970-02-13 23:01 drm -> /dev/block/mmcblk0p21
lrwxrwxrwx root root 1970-02-13 23:01 encrypt -> /dev/block/mmcblk0p20
lrwxrwxrwx root root 1970-02-13 23:01 felica -> /dev/block/mmcblk0p23
lrwxrwxrwx root root 1970-02-13 23:01 fota -> /dev/block/mmcblk0p25
lrwxrwxrwx root root 1970-02-13 23:01 fsc -> /dev/block/mmcblk0p17
lrwxrwxrwx root root 1970-02-13 23:01 fsg -> /dev/block/mmcblk0p16
lrwxrwxrwx root root 1970-02-13 23:01 grow -> /dev/block/mmcblk0p38
lrwxrwxrwx root root 1970-02-13 23:01 laf -> /dev/block/mmcblk0p24
lrwxrwxrwx root root 1970-02-13 23:01 misc -> /dev/block/mmcblk0p13
lrwxrwxrwx root root 1970-02-13 23:01 modem -> /dev/block/mmcblk0p1
lrwxrwxrwx root root 1970-02-13 23:01 modemst1 -> /dev/block/mmcblk0p10
lrwxrwxrwx root root 1970-02-13 23:01 modemst2 -> /dev/block/mmcblk0p11
lrwxrwxrwx root root 1970-02-13 23:01 mpt -> /dev/block/mmcblk0p26
lrwxrwxrwx root root 1970-02-13 23:01 pad -> /dev/block/mmcblk0p9
lrwxrwxrwx root root 1970-02-13 23:01 pad1 -> /dev/block/mmcblk0p12
lrwxrwxrwx root root 1970-02-13 23:01 pad2 -> /dev/block/mmcblk0p19
lrwxrwxrwx root root 1970-02-13 23:01 persist -> /dev/block/mmcblk0p14
lrwxrwxrwx root root 1970-02-13 23:01 rct -> /dev/block/mmcblk0p32
lrwxrwxrwx root root 1970-02-13 23:01 recovery -> /dev/block/mmcblk0p15
lrwxrwxrwx root root 1970-02-13 23:01 rpm -> /dev/block/mmcblk0p6
lrwxrwxrwx root root 1970-02-13 23:01 rpmbak -> /dev/block/mmcblk0p30
lrwxrwxrwx root root 1970-02-13 23:01 sbl1 -> /dev/block/mmcblk0p2
lrwxrwxrwx root root 1970-02-13 23:01 seclog -> /dev/block/mmcblk0p27
lrwxrwxrwx root root 1970-02-13 23:01 sns -> /dev/block/mmcblk0p22
lrwxrwxrwx root root 1970-02-13 23:01 spare -> /dev/block/mmcblk0p36
lrwxrwxrwx root root 1970-02-13 23:01 ssd -> /dev/block/mmcblk0p18
lrwxrwxrwx root root 1970-02-13 23:01 system -> /dev/block/mmcblk0p33
lrwxrwxrwx root root 1970-02-13 23:01 tombstones -> /dev/block/mmcblk0p35
lrwxrwxrwx root root 1970-02-13 23:01 tz -> /dev/block/mmcblk0p8
lrwxrwxrwx root root 1970-02-13 23:01 tzbak -> /dev/block/mmcblk0p31
lrwxrwxrwx root root 1970-02-13 23:01 userdata -> /dev/block/mmcblk0p37
loki?が可能かはscotty755さんにabootを渡しましたので、報告を待ちましょうw