• Login:

Welcome to the Toshiba Thrive Forum.

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed.

Page 26 of 26 FirstFirst ... 16242526
Results 251 to 256 of 256
Like Tree50Likes

Thread: Toshiba Excite 10 SE (AT300SE) root [SOLVED]

  1. #251
    Thrive Lurker
    Member #
    28528
    Join Date
    Dec 2016
    Posts
    7
    Liked
    0 times
    Quote Originally Posted by pio_masaki View Post
    At this point it's probably the only real option I fear.
    TOSHIBA asked €75 for a system restore!!!!! I think I'll better buy a NEW Chuwi Hi8 tablet for €65!

  2. Ads


  3. #252
    Thrive Lurker
    Member #
    28542
    Join Date
    Dec 2016
    Posts
    9
    Liked
    3 times
    Got it!

    I managed to patch the sealime_sb_mount() kernel method such that remounting /system with readwrite permissions is possible.

    Just for fun (and to understand what's going on) I ported the CVE-2013-6282 exploit to C++ (ugly C++, but still.. ). Still don't understand how it manages to parse the kallsysms, though...

    However, I managed to understand the assembler code of the sealime_sb_mount() (or any other sealime method, they're basically all identical...) and how to modify it so it doesn't care.
    panda likes this.

  4. #253
    Developer

    Member #
    18359
    Join Date
    Sep 2012
    Location
    Surprise, Az (that's a real place)
    Posts
    3,783
    Liked
    1904 times
    Twitter
    piomasaki
    Quote Originally Posted by UserName View Post
    Got it!

    I managed to patch the sealime_sb_mount() kernel method such that remounting /system with readwrite permissions is possible.

    Just for fun (and to understand what's going on) I ported the CVE-2013-6282 exploit to C++ (ugly C++, but still.. ). Still don't understand how it manages to parse the kallsysms, though...

    However, I managed to understand the assembler code of the sealime_sb_mount() (or any other sealime method, they're basically all identical...) and how to modify it so it doesn't care.
    Congratulations! You just made plenty of excite owners very happy! Sealime goes down again lol

    Edit: don't write to boot or recovery, those are checked. Xposed apparently causes bootloops also.
    JB/ICS OC Kernels | My ROMs section | TWRP Recovery for Thrive
    CM10 General Thread | Jelly Bean Guide
    Donations, always appreciated!
    Need a rollback or reflash? Just send a PM!

  5. #254
    Thrive Lurker
    Member #
    28542
    Join Date
    Dec 2016
    Posts
    9
    Liked
    3 times
    Quote Originally Posted by pio_masaki View Post
    Congratulations! You just made plenty of excite owners very happy! Sealime goes down again lol

    Edit: don't write to boot or recovery, those are checked. Xposed apparently causes bootloops also.
    Thanks, but I doubt there are that many excite owners left.

  6. #255
    Thrive Lurker
    Member #
    28632
    Join Date
    Mar 2017
    Posts
    1
    Liked
    0 times
    I'm interested, I'm a developer as well but don't know that much about Android exploits.
    I had played w. CVE-2016-5195 and I see that it says it's vulnerable however the dcow command doesn't seem to overwrite the system run-as and I don't get a soft root.
    I didn't look into it further really, if you have it working please share your findings / code

  7. #256
    Thrive Lurker
    Member #
    28542
    Join Date
    Dec 2016
    Posts
    9
    Liked
    3 times
    zezu: I'll try to get the code in useable shape (at the moment it's a mess) and put it on github. Stay tuned.


 
Page 26 of 26 FirstFirst ... 16242526


Remove Ads

Ads

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Search tags for this page

at300 root
,
custom rom for toshiba at300
,
how to root at300
,
how to root at300 motochopper
,

how to root toshiba at300

,
how to root toshiba excite at300
,
how to root toshiba excite tablet
,
jro03c at300
,

root toshiba at300

,
root toshiba excite 10
,
root toshiba excite at300
,
root toshiba tablet at300se
,

toshiba at300 root

,
toshiba excite 10 at300 root
,

toshiba excite at300 root

Click on a term to search our site for related topics.