[GUIDA][ROOT EXPLOIT+PATCH][2012.12.19] ExynosAbuse APK v1.40

[Anna]

ATTENZIONE:
Essendo una procedura appena creata potrebbe essere moooooolto instabile e creare danni al cellulare, considerato anche che sfrutta una falla del sistema...
Se la usate lo fate a vostro rischio e pericolo.

Provato su jb 4.1.2 Polonia.

Non aumenta il counter

This is an APK that uses the ExynosAbuse exploit (by alephzain) to be able to do various things on your Exynos4 based device.

Features for non-rooters:
- Securely patch the exploit

Features for rooters:
- Root the device (SuperSU v0.99)
- Enable/disable the exploit at will
- Enable/disable patching the exploit at boot
- Unroot and cleanup (optionally leaving the exploit patch at boot in place)

Please note that patching the exploit may break camera functionality, depending on device and firmware. Also note that if use the patch method without rooting, or keep patching the exploit at boot enabled when unrooting, you need an alternate method to re-root the device to disable this feature (like CF-Auto-Root) - you cannot use ExynosAbuse to do this since it patched the exploit. Unlike other patch authors, I do not believe in keeping an invisible rooted process running in the background while pretending you aren't rooted, to be able to unpatch this way.

While the exploit patches work (aside from possibly disabling your camera), these are more work-around than actual fixes. A proper patch would be a kernel fix, either from a third party or Samsung themselves (hopefully one day...)

My method vs Supercurio, RyanZA
Mine is the only one that is secure. Both Supercurio's and RyanZA's method leave you with easily exploitable holes any serious malware author will abuse. More details http://forum.xda-developers.com/show....php?t=2053824

Exploit
For more details on the exploit itself, see this thread: http://forum.xda-developers.com/show....php?t=2048511. The exploit is used by this APK in unmodified form. You should be very afraid of this exploit - any app can use it to gain root without asking and without any permissions on a vulnerable device. Let's hope for some fixes ASAP !

Camera
If your camera keeps working depends on your device/firmware combination. Affected are mostly the SGS3, but there is good news too, there is a potential fix here: http://forum.xda-developers.com/show....php?t=2052675 SGS3 I9300 ONLY. It seems to work for a number of people. It replaces some system libraries with libraries from a different firmware version that does not rely on /dev/exynos-mem. Do not attempt this unless your camera actually breaks due to the exploit, and beware it may cause you to have to reflash your firmware. Also beware that even though this change will not prevent OTAs from downloading, it can possibly prevent OTAs from flashing succesfully.

Device status
Using this patch may turn your device status into modified. There's not really a proper solution to that at the moment, but you can restore status by removing the patch (and SuperSU) again and rebooting your phone. This will however leave you unprotected again. Doing all sorts of weird stuff (like for example wiping data) to get rid of this modified status while you're still have the patch applied at boot or keep SuperSU around, is an exercise in futility. If you want to go ahead and do that, that is fine, but do not litter my thread with your comments. Because eventually, the modified status is likely to return

Compatibility:
(If your device isn't listed it could still be both compatible with the exploit as well as this fix !)

Samsung Galaxy S2 GT-I9100

Samsung Galaxy S3 GT-I9300
Samsung Galaxy S3 LTE GT-I9305

Samsung Galaxy Note GT-N7000

Samsung Galaxy Note 2 GT-N7100
Samsung Galaxy Note 2 LTE GT-N7105
AT&T Galaxy Note 2 SGH-I317
Verizon Galaxy Note 2 SCH-I605 both locked and unlocked bootloaders work

Samsung Galaxy Camera EK-GC100

Samsung Galaxy Tab Plus GT-P6210

Samsung Galaxy Note 10.1 GT-N8000, GT-N8010, GT-N8013, GT-N8020

Google Nexus 10 not compatible, Exynos5

Post in this thread if you have a device to add.

Notes
I'm not sure if this APK will work right on Android 2.x devices (not tested yet), doesn't mean the exploit doesn't work. So if you're on Android 2.x and this APK doesn't work for you, try doing the exploit manually.

Download

Please do not redistribute, link to this thread instead

(v1.00: 3786; v1.10: 6397; v1.20: 12004; v1.30: 14480)

Questo è il link alla discussione e al download.
http://forum.xda-developers.com/show....php?t=2050297


Visto che l'autore ha chiesto di non postare l'apk se qualcuno lo dovesse fare in questa discussione lo considereró warez... E lo infrazioneró

[Anna]

2012.12.19 - v1.40
- Added check for updates functionality
- Added "current status" display
- Split into sections for non-rooters and rooters
- Added "One-click secure exploit patch" for those who just want to patch their device and forget about
- Added ability to unroot and clean up the leftovers (optionally leaving the patch code in place)

2012.12.18 - v1.30
- Adjusted many things in the shell code, the app will now properly detect an install SuperSU/Superuser with the wrong permissions as NOT having root
- Added a startup notification telling you your device/firmware is not susceptible to this exploit, if it isn't

2012.12.17 - v1.20
- Gingerbread-related fixes - note that not all Gingerbread firmwares of affected devices are vulnerable (for example, I know several SGS2 GB firmwares are not exploitable)
- Added some spam (view my apps on Play, follow me on Twitter, that sort of BS)
- Added icon

2012.12.16 - v1.10
- Added ability to disable and re-enable the exploit (which may break camera)
- Added ability to disable exploit at boot (before any Play-installed app runs, other solutions run later which means they are still vulnerable)
- Both above features require being rooted

2012.12.16 - v1.00
- Initial release

Trollallero Trollallá mediante il mio GS2 con gingerbread 2.3.5 ki8

[alegu]

Ops...mi è scappato il dito...sarà il thread più visitato

INVIATO DA ? CON IL MIO S?

[dieguccio]

Ops...mi è scappato il dito...sarà il thread più visitato

INVIATO DA ? CON IL MIO S?

certo che lo sarà

tranquillo ti redimo io

[quicck]

sta falla è peggio del bug emmc del note

edit: leggendo su xda sembra che i dev abbiamo contattato samsung e messa al corrente

Okay thanks, I confirm that people at Samsung have just made aware of it.

[ciska]

Come faccio a toglier il root una volta rootato tramite questo apk???


Inviato dal mio GT-I9300 usando Androidiani App

[ameris]

leggendo rapidamente "ho sonno" vedo che è stata trovata la falla nel kernel.. quindi sto trucchetto va solo con il kernel originale samsung?

[S3Line]

già installata l'app sul mio s3

[Dezk]

Scusate ma sono una pippa in inglese, tutto questo cosa comporta?

[Anna]

Come faccio a toglier il root una volta rootato tramite questo apk???


Inviato dal mio GT-I9300 usando Androidiani App

Devi usare altri metodi, questo non toglie il root

leggendo rapidamente "ho sonno" vedo che è stata trovata la falla nel kernel.. quindi sto trucchetto va solo con il kernel originale samsung?

No, io sul gs2 l'ho usato su cyano10.1 (togliendo prima il root con l'applicazione supersu)

Scusate ma sono una pippa in inglese, tutto questo cosa comporta?

Che fai il root da firmware stock con un applicazione. Anche se molto pericoloso perché sfrutta un bug del sistema




Trollallerollá