wr3cckl3ss x The Elite's #system3 Discussions! #9
Replies: 10 comments 27 replies
-
|
Hi, I have A13 with kg complete, cant install this apk. ??? August patch. Downgrading is not possible. Lower bit. I would like to increase the permissions of icebox.apk |
Beta Was this translation helpful? Give feedback.
-
|
Well. Several things. It's a failure, that I call being "grandfather'd in". What's already in place before you update should be respected and honored. And that includes apps like those that are installed thru PrePackageInstaller. As long as you do not wipe a single thing during any of the updates, the apps will stay in place and hold its context. This "grandfather'd in" idea can ultimately take you down as far as seeing FTL and any other combo apps all the way through to the Official One UI 6 release. From there, anything there after, I do not know if things will stay, as I left R&D and focused on other things. Now granted I do not have the original files that I had posted here on the repo because I wiped everything away as of about a week ago when my account was hacked. At this time I do not plan on uploading those files again but it shouldn't be hard to find if you just look around. If you or anyone here decides to do my recommendation of installing those apps on vulnerable firmware. Then the command will change going forward from August and on. And I'll eventually update the repo with that info and another idea at a later time. I did at one point vaguely talk about that command and the idea I have about it but didnt put it out there and only kept it in a controlled environment. So if those that did catch what I may have said then I invite those and anyone that's willing to downgrade, to install the apps to give their input and see how far they can get... Leave your info in this format, Model: The info above can be obtained by opening up a shell or by using #system3 and simply running "getprop". Then focus in on following to fill in your info, ro.boot.em.model Happy hunting....and ENJOY! Update coming real soon...... -wr3cckl3ss |
Beta Was this translation helpful? Give feedback.
-
|
Thanks, SM-136B |
Beta Was this translation helpful? Give feedback.
-
|
I wish i will use this exploit to my Galaxy S24 Ultra lol. Can't change CSC now without these expolits. :( |
Beta Was this translation helpful? Give feedback.
-
|
Perhaps bootloader unlock will be possible thanks to it eventually too! That'd be amazing! |
Beta Was this translation helpful? Give feedback.
-
|
I've lost all hope in there EVER being an exploit to unlock the bootloader in a samsung crapdragon. Even if wr3cckl3ss, BLuFeNiX et al. showed up at my front door to tell me they figured it out I would probably laugh in their faces and tell those liars to get off my property! That's how frustrated I've become with Samsung. I have tried every imaginable thing I've found for an S10 I have and this piece of shite phone is somehow in better shape than my 6 month old S22. Absolutely nothing wrong with it after who knows how many factory resets, apps that aren't supposed to be installed/compatible and shell scripts that I haven't even bothered reading. No oem, no bootloader, no custom kernel, no twrp, no magisk..... impossible I'm telling you |
Beta Was this translation helpful? Give feedback.
-
|
@kmg9971 If, the one day I receive or plan on getting an S24. I'll take a look but until then, I will work with what I have. |
Beta Was this translation helpful? Give feedback.
-
|
Found 1000 shells equivalent to 2000 shells /data/local/tmp after strolling around for a few hours. Gotta do some messing around in there I guess, should be interesting now that I know I can actually run stuff from within the shell. Not sure if I should be letting that info out or not (or maybe I'm the last one to the party 🤷♂️) so I'll wait until @wr3cckl3ss gives the go ahead. Wasn't extremely hard to find, just lots of thumb work on the ol' keyboard. Maybe some new commands and different scripts will "pop" up... Anyways, yay. |
Beta Was this translation helpful? Give feedback.
-
|
Sounds interesting. Would you like to elaborate some more? And to answer something you previously mentioned. You said, you had the S10, I believe, the US...S10 was littered and full of bugs and those bugs have led to root access. As far as BL unlock, that's something, you may have to look at again, but it all depends on what firmware you have on it. As far as the S22 Ultra, well...that device, I've had very recently and that device did see the good ol '#'. Check out the pic, I'll attach. I'll even leave the pic up unedited, so that if you pay attention, you can catch and see clues about where it's from. Start here on GitHub. Always the best place to look. |
Beta Was this translation helpful? Give feedback.
-
|
That's sick! Yeah I have the S10 which has been my enemy for quite a while now haha. I also have an S22 5G just normal as can be and have left it pretty much at stock and is at the most recent updates because I'm awesome and apparently love a challenge (mentally challenged 🤦♂️) yeah I've heard a little about the recent rooting capabilities in some of the older snapdragons, not super keen or interested in paying for it, just not worth it to me. |
Beta Was this translation helpful? Give feedback.
-
|
You're probably going to have to explain a bit more. And for that, I'd ask you to DM me on Telegram. Not to say, I don't want the info out in the public but it's more to help individuals from bricking or doing something stupid. Show me what you mean and then from there, you can post whatever you'd like here. t.me/wr3cckl3ss |
Beta Was this translation helpful? Give feedback.
-
|
This exploit does not work with new firmware. I tested on Android 13 August patch. There is an error with the ")" symbol after the ./samsung.kallsyms command. ./exp_s22.c is an error with the "do" command. Are you using a different termux? , if you can, reveal the hidden command after s+. |
Beta Was this translation helpful? Give feedback.
-
|
I've run into that tons of times. I don't know if this is by the book so don't listen to me or use a device you don't care about just in case. All I've done in the past is exactly what you've done in your description. You have to fix the script by adding quotations to the end of the parentheses like this "(hello, world)". It's worked for me on small scripts that I can understand. Just don't come biting my head off if it's not to your liking or whatever with everyone else because "it's not the proper way". |
Beta Was this translation helpful? Give feedback.
-
|
@KUBULEK16 you're issue is because
What the author released I understand some..but not all of it and what I didn't understand...i had a very good colleague of mine.. But above all it's knowing what you have because while the author is claiming...it does give root on S22. Compiling and running it as-is, will not get you what you want. |
Beta Was this translation helpful? Give feedback.
-
|
Guess we'll see where this rabbit hole takes me today... said something about opening up to civil liabilities and blah blah blah, I closed the dialog before I cared too much and it won't come back. So! I'll be in jail if anyone asks. 🚗 🚓 |
Beta Was this translation helpful? Give feedback.
-
|
Where are you guys trying to execute things from? I'm having a hard time finding a path or directory where I can use "./" instead of trying to "sh" all the time. Everywhere I go, even in places where I obviously have rw permissions, keep throwing the same denied error. I was told it's to do with selinux (I think). But if shell can use /data/local/tmp that doesn't make sense since executing a script can be more dangerous you'd think. |
Beta Was this translation helpful? Give feedback.
-
|
Im assuming...your trying to START Shizuku with system shell? |
Beta Was this translation helpful? Give feedback.
-
|
i know one way to keep shizuku runing, click usb debugging and then use wireless debugging, shizuku will keeping actived even turn off wireless debuging. Surely, if it possible run shizuku with system shell will be better. |
Beta Was this translation helpful? Give feedback.
-
|
Yep, shizuku stays on at all times until I do something dumb that reboots my phone. I don't even need to be connected to the internet. The shizuku server just needs to be running before and not be interrupted it seems |
Beta Was this translation helpful? Give feedback.
-
|
It already runs with shizuku, that's how it's able to start and downgrade smt... or are you using a different one? |
Beta Was this translation helpful? Give feedback.
-
Just a heads up, I have done it with regular shell in data/local/tmp. I think the "daemon???" automatically gets sent there Edit. Now that I think of it, system shell requires shizuku lol |
Beta Was this translation helpful? Give feedback.
-
|
https://t.me/+lwxUzevKGUkwYzkx Don't go crazy |
Beta Was this translation helpful? Give feedback.
-
|
Page is now public. BE WARNED. KG ❌ UNFILTERED CONTENT ✅ All are welcome to join...and I mean everyone. |
Beta Was this translation helpful? Give feedback.
-
|
i there! |
Beta Was this translation helpful? Give feedback.
-
|
Having a system shell is not needed nowadays for the simple things of opening the activity of Hidden Network Bands... |
Beta Was this translation helpful? Give feedback.
-
|
Is it broken again on OneUI 6.1, specifically with the May Patch? The binary bit is also increased, to prevent a rollback. The PrePackageInstaller method doesnt work now, and it hits with -3001 regardless. |
Beta Was this translation helpful? Give feedback.
-
|
I advise you to join the group on TG for the latest, if any for you... |
Beta Was this translation helpful? Give feedback.
-
|
@wr3cckl3ss Do you still operate the Telegram group? If so, could you provide the new link? |
Beta Was this translation helpful? Give feedback.
-
Beta Was this translation helpful? Give feedback.
-
⚱️ Enter Hell's Gate
Against my better judgement. I decided to RELEASE the Krakken and give those who are truly here to learn and/or help with anything involved in escalating privilege on a Samsung Device. This is not a playground for the countless minds of the KG aficionados. That bridge was burned. Find somewhere else to slum at. Speak respectful, mind your manners and stay on topic.
To get started, drop a comment below.
Beta Was this translation helpful? Give feedback.
All reactions