Root ZTE Zmax Pro Official Root Discussion

[SapphireEx]

I just downloaded the B12 update from Google plus.
Just Google zmax pro update and find it..simple..
After extracting it the meta-inf folder gave some insight.
But no way to repack without signature oem key..

Be aware, the MetroPCS variants are B08, B14, and B20. Tmobile uses different numbers. I wouldn't recommend updating to a different carrier.

 

[armandop_]

Dang the file I was looking for was not in the update.zip

Be aware, the MetroPCS variants are B08, B14, and B20. Tmobile uses different numbers. I wouldn't recommend updating to a different carrier.

 

[armandop_]

I am also looking for a way to pull boot.img as well as recovery.img

Any luck yet?

Can we stay on topic? Like really, we don't need to know what phones you own, what you think our chance of rooting the Z981 is, or who has the biggest stick.
That being said, use the search function in the forums themselves if you have questions as to avoid asking the same question already answered previously.

Finally, I'm looking for ways to pull the boot.img, but I'm not having much luck finding mount points that are rwx outside of ../tmp. If anyone has nothing to do, and little experience with coding, use temp root method and locate a mount point for other people to use. The more people we have working on literally any root related task can bring us closer to installing TWRP.

 

[loonycgb2]

Gotta use recowvery dirty cow, not vanilla. It's slightly modified for use on dm-verity enviroments

Lmao this is why i dont share exploits with people as this is why they get patched immediately.

Great job!

 

[Enoch1333]

Lmao this is why i dont share exploits with people as this is why they get patched immediately.
Great job!

Yup we got to be secretly on this info...so if there is an update, we will know why so don't update it.

 

[SapphireEx]

Lmao this is why i dont share exploits with people as this is why they get patched immediately.

Great job!

The exploits been known for awhile, and people need it to use it.

 

[Greysworld007]

Lmao this is why i dont share exploits with people as this is why they get patched immediately.

Great job!

If you got a exploit, then you shouldn't share the technical aspects of it in this forum. Its ok to say "I found a way to exploit the system" but how you did it or what you used, should only be shared with trusted people through pm or email. If you actually root the phone and install twerp and custom rom,you still shouldn't share the methods here in the public till all bases are covered.

 

[SapphireEx]

If you got a exploit, then you shouldn't share the technical aspects of it in this forum. Its ok to say "I found a way to exploit the system" but how you did it or what you used, should only be shared with trusted people through pm or email. If you actually root the phone and install twerp and custom rom,you still shouldn't share the methods here in the public till all bases are covered.

The exploit was already made public due to it being used for another phone, and other forums have already taken to testing it. There was nothing secret about it. Also, the vanilla exploit alone isn't enough to actually do anything, and it needs to be modified to actually work, which I didn't share the details of.

 

[Greysworld007]

The exploit was already made public due to it being used for another phone, and other forums have already taken to testing it. There was nothing secret about it. Also, the vanilla exploit alone isn't enough to actually do anything, and it needs to be modified to actually work, which I didn't share the details of.

Ok I know that but the point I was trying to make is specific methods should not be posted in a open forum till everything is finished.

 

[loonycgb2]

The exploit was already made public due to it being used for another phone, and other forums have already taken to testing it. There was nothing secret about it. Also, the vanilla exploit alone isn't enough to actually do anything, and it needs to be modified to actually work, which I didn't share the details of.

Pingpong root for s3 is public, but it can be used for all zte with kitkat. Does zte know that?

Kingroot is 6-8 exploits premade on a server so its easier to mention kingroot as it doesnt specify which is used.

Dirty c0w originally does not affect this system, but to mention which does then you lead a better direction to manufacturers.

If you knew about this method already why not continue to push on it?

 

[neilhicks18191]

No I didn't know that but I do know my phone is marshmallow 6.0.1

 

[Ethorbit]

Lmao this is why i dont share exploits with people as this is why they get patched immediately.

Great job!

I don't understand, they can patch it, but not for your current version?
Did you update?

I'm never updating to B20.

 

[neilhicks18191]

No I haven't

 

[loonycgb2]

I don't understand, they can patch it, but not for your current version?
Did you update?

I'm never updating to B20.

No i havent and from testing on another phone with b20, it still is capable of being exploited

 

[JoshuaAwe]

How long has this thread been active for? I practically have given up root for this phone. I just pop adguard on and carry on. I'll check back in six months to see if this phone really gets root. lol.

 

[Unforgiven]

How long has this thread been active for?

Four months, fourteen days, with the original version closed. But no moderators are counting.

 

[armandop_]

I spy with my little eye a device named urd

 

[asianrocker]

Further black belt on my google-fu. The creator of the 'that' said:

By the way if your bootloader is locked it won't do anything, it will write to recovery but just reboot into system how it was and system will flash stock recovery back again

And someone exactly has same output with locked bootloader device And that one actually has boot.img. installed. So we are back to the problem of that damn locked bootloader then?

 

[loonycgb2]

Further black belt on my google-fu. The creator of the 'that' said:

By the way if your bootloader is locked it won't do anything, it will write to recovery but just reboot into system how it was and system will flash stock recovery back again

And someone exactly has same output with locked bootloader device And that one actually has boot.img. installed. So we are back to the problem of that damn locked bootloader then?

Somewhat, in our situation its not just capable of writing to recovery, but also the main boot partition.

 

[messi2050]

Further black belt on my google-fu. The creator of the 'that' said:

By the way if your bootloader is locked it won't do anything, it will write to recovery but just reboot into system how it was and system will flash stock recovery back again

And someone exactly has same output with locked bootloader device And that one actually has boot.img. installed. So we are back to the problem of that damn locked bootloader then?

yea It always took me to a black screen after reboot

 

[jhgfrtu]

How long has this thread been active for? I practically have given up root for this phone. I just pop adguard on and carry on. I'll check back in six months to see if this phone really gets root. lol.

One silver lining to this phone is I found alternative ways to optimize my phone Without Root.
Adguard premium
Nova launcher with screen off apk for double tap scren off gesture.
Package Disabler apk for disabling bloatware
Status apk for centering clock and removing carrier name from status bar and
Audio pocket apk for YouTube playback in the background.
I use Xposed on my other rooted phones .
But my daily LG Stylo 2 Plus k550 has the 7.0 update and Xposed is not that friendly on Nougat yet.
Although 7.0 is running superb. Best O S by far.
Oh and don't expect 7.0 on the zmax pro. Zte has never updated an O S on any phone ..They just make another similar model with the new O S ..lol

 

[Greysworld007]

Oh and don't expect 7.0 on the zmax pro. Zte has never updated an O S on any phone ..They just make another similar model with the new O S ..lol

Actually they have updated the firmware before I have the grandmax + and they updated it from kitkat to lollipop lol

 

[GarnetSunset]

"Stay Woke" - Donald Glover

Reminder you can help the cause by testing /data/* for chmod-able folders, thanks loves.

 

[coreywantsROOT]

'Stay Woke' - Donald Glover
Reminder you can help the cause by testing /data/* for chmod-able folders, thanks loves.

How do I test for that I'm new and really trying to learn

 

[GarnetSunset]

How do I test for that I'm new and really trying to learn

adb shell
>the shell pops up

cd /data

ls (lists dirs)

go in each dir

chmod 777

successful?