i25ffz / iovyroot

CVE-2015-1805 root tool

iovyroot

A root tool based on the CVE-2015-1805 vulnerability

It supports 32 and 64bit but requires absolute kernel addresses (see offsets.c)

poc was done by idler1984 https://github.com/idl3r/testcode

system app clean

###run in host

ndk-build && adb push iovy /data/local/tmp/iovy/ && adb shell ###run in android normal shell cd /data/local/tmp/iovy && chmod 755 *.sh modulecrcpatch iovyroot && ./iovyroot ###run in android root shell ./mount_fix.sh && ./clean_sysapp.sh

You can do anything in clean_sysapp.sh script file... _

install supersu

http://su.chainfire.eu/#embed push busybox to /data/local/tmp cp busybox /system/xbin/ cd /system/xbin busybox --install . ln -fs /system/xbin/busybox /sbin/unzip busybox unzip /data/local/tmp/supersu.zip META-INF/com/google/android/* -d /tmp/supersu busybox sh /tmp/supersu/META-INF/com/google/android/update-binary dummy 1 /data/local/tmp/supersu.zip