Awesome
Farm Root
Farm root is a rooting utility for android devices using the dirty cow vulnerability.
Support
- Right now it doesn't have support for easy mode root, just pulling and pushing images.
- only tested on galaxy s7 active
- only works for arm64v8
Showing the status
make log
Pulling an image
make pull
Pushing an image (flashing)
Place the image you want to flash in the root directory with the name recovery_push.img
. This is a really dangerous function. Only do this if you know what you are doing.
make push
Pulling a boot image
make pull_boot
Notes
If the log gets stuck here
farm-root: [*] waiting for process to finish
try to get system-server to run a toolbox command. (turning lockscreen on and off seems to work for galaxy s7 active).
TODO
- fix for armeabi? doesn't seem to work for this architecture right now.
- use dirty cow to flash boot img
Help/Sources
- https://github.com/timwr/CVE-2016-5195 for dirtycow exploit.
- https://github.com/jcadduono/android_external_dirtycow for some SELinux context ideas