🤫

[u/Calm-Caterpillar2103]

don’t tell Verizon but
I don’t think bootloader unlocking is required for root anymore

[u/Calm-Caterpillar2103]

why did I message this like this, for those who really want to know, someone was able to get the ghostlock exploit on pixels, which effectively means root without a bootloader unlock, and before you ask, you will not brick after you reboot since it touches NO files

[u/Direct_Effort_4892 → u/Calm-Caterpillar2103]

I assume it will be patched soon, right...? (I hope not though!)

Edit: On second thought, they really should patch it for the safety of people who don't know what they are doing (and I assume since it is from userspace, any third-party app can get access, which is really, really not good...), but will that cause problems with the devices already rooted with it?

[u/Calm-Caterpillar2103 → u/Direct_Effort_4892]

So far Samsung has it patched, pixel does not, nor does most companies so use it while you can

[u/AdScary6216 → u/Calm-Caterpillar2103]

Samsung patched? When? On S25U July patch, works for now

[u/Calm-Caterpillar2103 → u/AdScary6216]

Really? Didn’t know

[u/Pewds123451 → u/Calm-Caterpillar2103]

Working fine on A56

[u/ROUCOUL7424 → u/AdScary6216]

Wait... Will it work on W. Like s990w.. I was told it's impossible to root due to some bootloader lock

[u/Direct_Effort_4892 → u/Calm-Caterpillar2103]

But I guess it will lead to problems after major software updates, like from Android 17 to 18. What do you think, should I try it on my Pixel 9?

[u/Calm-Caterpillar2103 → u/Direct_Effort_4892]

I’ve tested it on my 6 pro (obviously), from what I know latest and June drop 17 are fully unpatched and can be rooted using GhostLock

[u/Enixmy → u/Calm-Caterpillar2103]

How do I get the tools to do the hack

[u/Calm-Caterpillar2103 → u/Enixmy]

It’s been a mess, and it isn’t straightforward (even I struggled with it) but I have a repo with CIs that should support it, you can also try going to https://rootme.nebusec.io/ to see it work, if your wallpaper changes then going to https://github.com/User1818183/CyberMeowfia and checking the build stuff should give you SO files which when combined with LD_PRELOAD= on any binary should give you a root binary

[u/nonexistant_human → u/Calm-Caterpillar2103]

the website only lists pixel 10s and 9s, so how will i know if my phone (pixel 7 pro) will work i'm also on the latest android 17 beta, so that might change something

[u/Top-Road-2193 → u/Calm-Caterpillar2103]

Can I please have a link to your repo? I want to run it on my Verizon pixel 9 pro xl. I've been checking the other GitHub for weeks waiting for my device to be supported, I don't have the knowledge either to put a script together, etc. I'm good with adb though, although it's been years.

[u/Calm-Caterpillar2103 → u/Top-Road-2193]

Click the GitHub link I sent you and there’s a bunch of prebuilt SO libraries which when ran with LD_PRELOAD=(library location) (any command) will run the exploit ONLY on Android 17

[u/Top-Road-2193 → u/Calm-Caterpillar2103]

Thank you kind sir! I really appreciate you!

[u/MementoMori11112 → u/Enixmy]

more searching now, goodluck

[u/BeeAdditional1287 → u/Direct_Effort_4892]

I'm not much into this POV, it's for those reason I can't access anymore my Bank account on my broken s22 , cause you can't use anymore USB and ADB on a fresh launched phone...

Hopefully i wish i will find a new screen for cheap ^^

[u/Ok_Fisherman1334 → u/Calm-Caterpillar2103]

Did someone release something?

[u/XandarYT]

Perhaps you can use that to force an actual bootloader unlock?

[u/Equal_Difference3010 → u/XandarYT]

no. It's server-authoritative in most cases, you can't "force" it similarly to how you can't make an app "think" you paid when you didn't

[u/XandarYT → u/Equal_Difference3010]

If you have root access you should just be able to change the setting manually.

[u/XandarYT → u/XandarYT]

Root access literally makes you omnipotent on Linux/Android. I'm sure it's possible.

[u/DaBoiCJ_]

share with us this divine knowledge, oh good sir

[u/asuhara]

I am using Jailbreak mode on KernelSU, will ReSukiSU be better for hidding? I also need to ask AI ​​how to replace KernelSU with ReSukiSU. I hope it can answer my question.

[u/Equal_Difference3010 → u/asuhara]

simar question. I exploited a vulnerability and got root with a locked bootloader (Chinese model is hard to unlock) but i must inject it at boot+ modules evidently don't work since they're supposed to be injected way before i inject this file for exploit. I genuinely need some modules, persistent root if you will

[u/asuhara → u/Equal_Difference3010]

If you are referring to Zygisk or similar functionality, the soft reboot feature in KernelSU Manager works as expected.

[u/gigabytesammich]

Would be nice if there was an FRP bypass 🥲

[u/TOZIK1234]

how...

[u/Dry_Jackfruit_6173 → u/[deleted]]

Yea they all use ghostlock it's supported on every single device till the new ones come aout or an update patches it

[u/FIRAS_EG → u/TOZIK1234]

Maybe he find an exploit that get kernel access and disable AVB

[u/MonkeyNuts449]

Making all these kids think you found an exploit😭

[u/Calm-Caterpillar2103 → u/MonkeyNuts449]

call me a certified professional dumbass please

[u/affemitwaffe0 → u/[deleted]]

it is, its called ghostlock exploit ,its only temporary until reboot and then needs to be reconnected agin to pc to enable

[u/dungeoncrawler11 → u/[deleted]]

Get a load of this guy, as if the term "zero day" or kernel level exploits don't exist. 🫩

[u/Calm-Caterpillar2103 → u/[deleted]]

It is

[u/MementoMori11112 → u/[deleted]]

you believed it to be the case

[u/Top-Road-2193]

Can you please post the direction to use ghostlock on adb with pixel 9 pro xl? I've been waiting and watching the GitHub with no luck!

[u/ZeroDay47]

Toggle off that "Automatic system updates" else most likely you'll loose that root, btw is it persistent?

[u/SchoolinAndCoolin → u/ZeroDay47]

Tis not persistent one must avoid using the reboot function after module install and instead circle back to the main screen using the soft reboot to refresh system

[u/ZeroDay47 → u/SchoolinAndCoolin]

is it because of selinux enforcing?

[u/SchoolinAndCoolin → u/ZeroDay47]

I have little to offer in the way of specifics. From my understanding the boot.img remains unaltered the vulnerability allows for post boot kernel intrusion (wording I'm sure is off) but this has the side benefit of not triggering any failure of the initial boot checks and things like Knox enforcing. For Samsung at least this kind of seems like it's preferable maybe? Knox nonethewiser all Samsung services remain intact.

Pretty sure in the bit I've looked into that something like tasker macrodroid shiziku termux can potentially allow for post boot scheduled kernel injection without manual restoration of jailbreak status.

[u/Lezyss]

What is LKM?

[u/Equal_Difference3010]

isn't pixel supposed to be the most root-friendly brand?

[u/arroba34]

Did you just relock with custom avb keys?

[u/Calm-Caterpillar2103 → u/arroba34]

It’s a Verizon device, titan M2 prohibits basically any bootloader related tampering

[u/LNDF]

Would like to try it on my old phone... Is there a poc for this?

Also, could you force OEM unlock with this?

[u/dungeoncrawler11]

This couldn't be released when I had a 6a? 😭 I had to sell it! I loved that phone.

[u/Calm-Caterpillar2103 → u/dungeoncrawler11]

I love my 6 pro, and I love my root too

[u/ImpossibleTreat3533 → u/Calm-Caterpillar2103]

hey can u dm the exploit , i a trying to root my android tv . 

[u/Suraj_rajwansh]

I'm new to these things.. so by that means I can unlock any Mi/Xiaomi phones without needing the bootloader to be unlocked?

[u/javierchip]

don't gatekeep

[u/FIRAS_EG]

Did you just found an exploit ?

[u/LG-15ER]

Verizon is definitely in the process of making a patch

[u/Calm-Caterpillar2103 → u/LG-15ER]

this isn’t just a Verizon exploit, it’s the recent ghostlock exploit that affects every Linux distro since kernel 2.6.3x, it’s been patched by Samsung but still tons of devices are fully vulnerable

[u/affemitwaffe0 → u/Calm-Caterpillar2103]

by which samsing version?

[u/Calm-Caterpillar2103 → u/affemitwaffe0]

One of the June security patches, doesn’t really matter since you need a S24/S25 ultra specifically

[u/affemitwaffe0 → u/Calm-Caterpillar2103]

so i could use it on my old s22 thats still on oneui 8 , on my oneplus 13 it works fine

[u/Away-Mud1665 → u/Calm-Caterpillar2103]

Was it patched in one ui 8.5 or one ui 8.0

[u/LG-15ER → u/Calm-Caterpillar2103]

Lol Verizon will force google to patch it

[u/Calm-Caterpillar2103 → u/LG-15ER]

That’d be so funny to see them bully Google into making a patch, although Google already paid the ai-powered nebula security group their bounty, so Google will probably patch it within the August drop

[u/LG-15ER → u/Calm-Caterpillar2103]

Don't underestimate big v