If you get temp root with Kingo
you can use adb shell to install a backdoor
this was found by jcase for the ZTE ZMAX a while ago
Get root with Kingo, dont reboot
Make sure you have adb on you computer
adb shell
su
setprop persist.sys.k Z958
now if the phone is rebooted you can still get root using adb shell
you will not be able to do to much with this, but for those that want to play around, here it is
just note that the system partition is write protected unless you are booted from the recovery partition
the bootloader requires the boot.img and recovery.img to be signed, so no TWRP or CWM
flashing the boot.img to the recovery partition does not work like it did on the ZMAX
so you do not have any options except a boot loader unlock
maybe with the root shell someone can find something
you can use adb shell to install a backdoor
this was found by jcase for the ZTE ZMAX a while ago
Get root with Kingo, dont reboot
Make sure you have adb on you computer
adb shell
su
setprop persist.sys.k Z958
now if the phone is rebooted you can still get root using adb shell
you will not be able to do to much with this, but for those that want to play around, here it is
just note that the system partition is write protected unless you are booted from the recovery partition
the bootloader requires the boot.img and recovery.img to be signed, so no TWRP or CWM
flashing the boot.img to the recovery partition does not work like it did on the ZMAX
so you do not have any options except a boot loader unlock
maybe with the root shell someone can find something
Last edited: