Root ZTE Zmax Pro Official Root Discussion

cyanidekid · Jan 24, 2017

GrifterGrifts said:
I already know something that works on b14 as well as a couple other members I'm 99% sure messi is aware of what I'm talking about but it's temporary

Can you elaborate please or p.m. me.
I saw where temp root would show and a small script of file had to be flashed right away so it would stick long enough to ........etc

GrifterGrifts · Jan 24, 2017

anubis2048 said:
Don't understand why so many people bothered updating... I've even heard that the updates make the phone even more buggy. Oh well, hopefully Messi can exploit 2503. CVE reports that it's not that hard to do if you know how to write basic apps.

B14 is a test thing it's not public

anubis2048 · Jan 24, 2017

GrifterGrifts said:
I already know something that works on b14 as well as a couple other members I'm 99% sure messi is aware of what I'm talking about but it's temporary

Why bother posting if you're not going to tell anyone? It's not like ZTE can update instantly and force us all to update. Please elaborate on what it is you are talking about. We would all appreciate it.

And @Flare106 That vendor ID did not work either.

GrifterGrifts · Jan 24, 2017

anubis2048 said:
Why bother posting if you're not going to tell anyone? It's not like ZTE can update instantly and force us all to update. Please elaborate on what it is you are talking about. We would all appreciate it.

And @Flare106 That vendor ID did not work either.

Not mine to talk about unfortunately as well you are wrong zte can hotfix this phone and fix bugs without applying an ota it was proven when overnight they fixed well over 100 cves

Edit over 100 stagefreight cves which to my knowledge were never meant for root thus they never came up

Nthall · Jan 24, 2017

Quadrooter was patched on this phone before the B12 update that had the official Google security patch went out. I tried that months ago.

cyanidekid · Jan 24, 2017

How can we find out if any 2017 cve like in this screen shot will work

Nthall · Jan 24, 2017

cyanidekid said:
How can we find out if any 2017 cve like in this screen shot will work

You would have to read the reports and see if they apply to any hardware or software on this phone. Just from glancing at that list, I think it would be a waste of time.

cyanidekid · Jan 25, 2017

In android 5.0.x you could boot stock recovery and mount system(not all stock can) adb pull build.prop then edit it then push it back. Would that be valid here for us period??? Change selinux prop?

cyanidekid · Jan 25, 2017

Can you say Stumped!

cyanidekid · Jan 25, 2017

I've talked to Dev multiple on Google Plus and XDA. A few XDA experienced persons have the Pro. So........Just trying to be Hype Man lol. Please can we have an update? The behind the scenes guy like Messi etc that are actively aggressive knowledge are working on****edit**** also been requesting different web sites to add support etc ROM zip OTA tar all that good stuff. I've tested various ROM download to see if it looked official etc

Powduh · Jan 25, 2017

I think Messi is back to doing his exams. However, I'm awaiting a response on a friend who was in my c++ coding classes, to see if maybe he can help me put together a script to get in the backdoor of CVE 2016-2053, just to humor myself and see what happens. But, I'm on b12, so I don't expect much.

Rashawn229 · Jan 25, 2017

I've been searching up Jcase's work he's done in the near past and I found this>> http://bbqand0days.com/Pork-Explosion-Unleashed/
it explains a vulnerability using FTM mode and we have FTM on our device. I don't know if it has ever been tried before but far as the B08 build users it maybe something useful. Idk about B12-14 users tho

jesellopez · Jan 25, 2017

Rashawn .. Am on B8. Can u explain me how this work? To try on my phone !

Rashawn229 · Jan 25, 2017

Sadly idk I'm not a dev. I just research a lot of things that could be useful to our devices

anubis2048 · Jan 25, 2017

Rashawn229 said:
I've been searching up Jcase's work he's done in the near past and I found this>> http://bbqand0days.com/Pork-Explosion-Unleashed/
it explains a vulnerability using FTM mode and we have FTM on our device. I don't know if it has ever been tried before but far as the B08 build users it maybe something useful. Idk about B12-14 users tho

**EDIT**
It seems that the ASM is just a map of the Robin's Fastboot code. He doesn't list any source code on his page. But the rest of what I said is pretty accurate. I don't know ARM Assembly, and even if I did, I do not know how to exploit this vulnerability.

We need to find a way to re-enable the Fastboot commands, and then we would have a better chance to exploit this flaw. Having the source code would help too.

If we could find a point of entry in the bootloader, it would be possible to exploit this device.

cbc0201 · Jan 26, 2017

cyanidekid said:
In android 5.0.x you could boot stock recovery and mount system(not all stock can) adb pull build.prop then edit it then push it back. Would that be valid here for us period??? Change selinux prop?

WHY DONT YOU GIVE

anubis2048 said:
**EDIT**
It seems that the ASM is just a map of the Robin's Fastboot code. He doesn't list any source code on his page. But the rest of what I said is pretty accurate. I don't know ARM Assembly, and even if I did, I do not know how to exploit this vulnerability.

We need to find a way to re-enable the Fastboot commands, and then we would have a better chance to exploit this flaw. Having the source code would help too.

If we could find a point of entry in the bootloader, it would be possible to exploit this device.

Unfortunately, without root first and or ZTE unlocking our bootloader ( not going to happen), I don't think it's possible. I've hard-bricked two devices this week pursuing fastboot. The only way to enable fastboot is by flashing fastboot.img to fbob plus aboot. I'm out of ideas getting fastboot working. Got any let me know,

jackndray · Jan 26, 2017

Hmmm after 3 failed one brick phone, I've backed off Linux anyone seen this
http://androidforums.com/threads/ne...s-with-the-new-sdcard-update-from-zte.786236/

ShmoleKing · Jan 26, 2017

After 3 months of owning the phone you call MetroPCS and they can unlock the phone, I think that unlocks the bootloader? . Just tell them you have no plans to change providers but if you go out of country you would like to be able to use the phone. I tried to ask them on the phone if unlocking the bootloader resets phone I believe they said no

Piplup702 · Jan 26, 2017

ShmoleKing said:
After 3 months of owning the phone you call MetroPCS and they can unlock the phone, I think that unlocks the bootloader? . Just tell them you have no plans to change providers but if you go out of country you would like to be able to use the phone. I tried to ask them on the phone if unlocking the bootloader resets phone I believe they said no

That just SIM unlocks the phone to be used with any carrier

Piplup702 · Jan 26, 2017

jackndray said:
Hmmm after 3 failed one brick phone, I've backed off Linux anyone seen this
http://androidforums.com/threads/ne...s-with-the-new-sdcard-update-from-zte.786236/

Gonna take a wild guess and say that's not gonna work. Considering its from 2013. And it's talking about an ICS update

Nthall · Jan 26, 2017

Powduh said:
I think Messi is back to doing his exams. However, I'm awaiting a response on a friend who was in my c++ coding classes, to see if maybe he can help me put together a script to get in the backdoor of CVE 2016-2053, just to humor myself and see what happens. But, I'm on b12, so I don't expect much.

It's not going to work. It didn't work before B12. Making the APK to do it isn't that hard though. I wouldn't release it publicly as it's essentially a virus, and may work on other phones.

Nthall · Jan 26, 2017

A vulnerability in Marshmallow is probably the best bet. As far as I know there aren't any right now that would let you escalate privileges. Even if there were we would still have the issue of not being able to flash an unsigned ROM. You could potentially install SU manually giving you root privileges.

Powduh · Jan 26, 2017

Nthall said:
It's not going to work. It didn't work before B12. Making the APK to do it isn't that hard though. I wouldn't release it publicly as it's essentially a virus, and may work on other phones.

Since you seem so knowledgeable on this, I'm going to assume you've already tried? Otherwise, you wouldn't seem so hopeless...

Nthall · Jan 26, 2017

Powduh said:
Since you seem so knowledgeable on this, I'm going to assume you've already tried? Otherwise, you wouldn't seem so hopeless...

Yeah. I gave it a shot. The driver exploits were already patched on this phone before the official Google patch was installed.

Powduh · Jan 26, 2017

Nthall said:
Yeah. I gave it a shot. The driver exploits were already patched on this phone before the official Google patch was installed.

Fair enough. However, I disagree with your statement saying marshmallow has no vulnerabilities. Other marshmallow devices can be rooted, however it may be that those device use other exploits?

Root ZTE Zmax Pro Official Root Discussion

Android Enthusiast

Member

Android Enthusiast

Member

Well-Known Member

Android Enthusiast

Attachments

Well-Known Member

Android Enthusiast

Android Enthusiast

Android Enthusiast

Well-Known Member

Newbie

Newbie

Newbie

Android Enthusiast

Newbie

Lurker

Lurker

Member

Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

BEST TECH IN 2023

Smartphones

Best Android Phones

Upcoming

Best iPhones

Upcoming

Tablets

Best Tablets

Upcoming

Laptops

Best Laptops

Upcoming

Televisions

Best TVs

Upcoming

Game Consoles

Best Game Consoles

Upcoming

Wearables

Best Wearables

Upcoming

Smart Home

Smart Home Tech

Upcoming

Similar threads