Kernel exploit to root sonim?

Phones Sonim Phones
, , , ,
21

@leobuskin is your man, he did all the work already. Don’t think he’s available now though. Might want to read through his posts here.

22

Just checked out those stuff. When i was reading up on my vulnerability i did see other vulnerabilities but that guy wow he knows his stuff. I don’t have any kyocera to work with and anyway i’m not a fan of that phone. Still curious what that file is. It sounds like a file within the rom

#offtopic

23

What?

24

in the kyocera thread. The aboot eng file you weren’t supposed to have. Does that mean a secondary aboot file signed but not meant for production?

25

Yes

26

if this works on the xp3800 i have a few you can play with

27

I have too much to do :sob:

28

Playing with Xp3800’s should be a lot cheaper than tinkering with Kyocera’s.

You can get locked Xp3800’s for ~$40.

29

true. And sprint 2nd hand on ebay for about 10 since it can’t be unlocked.
I have to first see the kernel version on the xp3. I have 1 but can’t find it right now. If someone can check in settings about the kernel version and post it here…

30

Just tried compiling for xp3 and realized that xp3 is 32 bit and since the script is touching raw bits and addresses it can’t just be compiled for other architectures. The entire script has to be fixed up for it. Beyond my paygrade obviously.

31

Is anyone actually interested in a root app mini magisk style for the sonim xp5800.specifically or will it be like the other stuff i made for sonim which only i myself used…?
(not planning on keeping this specific sonim for more then another half year or so, so if no1s interested why bother)

32

persistent global root (available also for other apps) coming soon…

(xp5800 only meanwhile)

33

please provide feedback!

34

I personally don’t have a Sonim, but it seems very impressive!

35

Thanks!!

36

Would love to exploit every known cve exploit on the Kyocera’s and LG’s.

37

If i’d have 1 i’d look into it. I love cve’s

38

typical developers nightmare. Exact same (literally identical) devices, same update date, exact same kernel version and everything, exact same environment… on 2 devices i tested it it worked. On the third it failed. Can’t figure out how in the world this is possible. It’s failing to find the selinux rules. I’ll update soon if i can fix it. If anyone tests it let me know if it works by you.

39

Besides fixing that bug and some others, its much more stable and easier to manage and with new features. i also worked for hours rewriting parts to be more robustly compatible for this specific phone. Same link same repo just updated. Check it out:

40

App coming soon…

i realized i can just take together the files i already have and just have an app execute them.