Code:
C:\Users\Jerry>cd C:\android\tools
C:\android\tools>
C:\android\tools>adb push rageagainstthecage-arm5.bin /data/local/tmp/rageagains
tthecage
376 KB/s (5392 bytes in 0.014s)
C:\android\tools>adb push su /data/local/tmp/
1349 KB/s (26264 bytes in 0.019s)
C:\android\tools>adb push busybox /data/local/tmp/
2286 KB/s (1926944 bytes in 0.823s)
C:\android\tools>adb shell
$ chmod 4755 /data/local/tmp/rageagainstthecage
chmod 4755 /data/local/tmp/rageagainstthecage
$ chmod 4755 /data/local/tmp/busybox
chmod 4755 /data/local/tmp/busybox
$ cd /data/local/tmp
cd /data/local/tmp
$ ./rageagainstthecage
./rageagainstthecage
[*] CVE-2010-EASY Android local root exploit (C) 2010 by 743C
[*] checking NPROC limit ...
[+] RLIMIT_NPROC={3374, 3374}
[*] Searching for adb ...
[+] Found adb as PID 8076
[*] Spawning children. Dont type anything and wait for reset!
[*]
[*] If you like what we are doing you can send us PayPal money to
[*] 7-4-3-C@web.de so we can compensate time, effort and HW costs.
[*] If you are a company and feel like you profit from our work,
[*] we also accept donations > 1000 USD!
[*]
[*] adb connection will be reset. restart adb server on desktop and re-login.
$
C:\android\tools>adb shell
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
$ su
su
su: permission denied
$ ls
ls
config
sdcard
acct
mnt
d
etc
persist
cache
system
sys
sbin
res
proc
init.thunderc.rc
init.rc
init.qcom.rc
init.qcom.post_boot.sh
init.goldfish.rc
init.cappuccino.rc
init
hpfwinit.rc
hpfsinit.rc
default.prop
data
chargerimages
bootimages
root
dev
$ mount -o remount,rw -t yaffs2 /dev/block/mtdblock4 /system
mount -o remount,rw -t yaffs2 /dev/block/mtdblock4 /system
mount: Operation not permitted
$
C:\android\tools>
Facebook
Twitter
Instagram