~ Follow me :- https://twitter.com/l0u51f3r007 | https://www.linkedin.
com/in/abhinandan-khurana/
Android Device Rooting Procedure -
The process of rooting an Android device can be complex and may significantly vary based
on the make and model of different devices. Here are 2 methodologies for rooting Android
devices:
1. Utilizing TWRP custom Recovery
2. Flashing a patched boot image
IMPORTANT: Rooting a device necessitates the unlocking of the device's OEM
For Motorola devices, the process of OEM unlocking is as follows:
Ensure that OEM unlocking is activated in the Android developer settings. Please note that
this feature is typically enabled one week post the purchase of a new device.
Subsequently, execute the following commands:
root@pwnbox# adb reboot bootloader
root@pwnbox# fastboot oem get_unlock_data
This will yield the unlock data, which will look something like this -
(bootloader) Unlock data:
(bootloader) XXXX080679224627#5A44323232XXXX
(bootloader) XXXX4B006D6F746F2067350000#XXXX
(bootloader) XXXXF8FFA1F6B222BD1D893704DXXXX
(bootloader) XXXX868119C7ABC341809DECAFEXXXX
(bootloader) XXXXE55ECB969BF000000000000XXXX
Proceed to Motorola's official website to procure the OEM unlock code -
Unlocking the Bootloader | Motorola Support US
Follow the prescribed instructions and the key will be delivered to your registered email ID.
Next, execute the following command:
root@pwnbox# fastboot.exe oem unlock XXXXVMAXLCAT5RTXXXXX
~ Follow me :- https://twitter.com/l0u51f3r007 | https://www.linkedin.com/in/abhinandan-khurana/
With the OEM now unlocked, the rooting process can commence.
TWRP custom recovery -
Visit https://twrp.me/Devices/Motorola/ or XDA Forums to check if the TWRP official image is
available for your device. If available, use the command below to boot the image onto your
device:
root@pwnbox# fastboot boot twrp.img
IMPORTANT: Ensure that Magisk.apk has been renamed and saved as three distinct files:
Magisk.apk, uninstall.apk, Magisk.zip.
Then, flash Magisk.apk from TWRP and boot the device to verify its rooted status.
Refer to this video Proof of Concept (PoC) for further guidance.
Patched boot image -
In the event that a custom TWRP image is unavailable for your device, you will need to search
for the official firmware file online, as was done for the Moto G54 5G.
You may either find a META-INF folder with payload.bin [or] several .img files.
If the latter is the case and the boot.img file is visible, we are good to proceed.
Otherwise, use Release 1.2.2 · ssut/payload-dumper-go (github.com) to extract the boot.img
from payload.bin (the required image).
Next, install the latest Magisk.apk onto your mobile device, navigate to 'install' and select the
boot.img (ensure you transfer the boot.img from your PC to your mobile device). Magisk will
then patch this boot image and store it in the Download folder. Extract this file on your PC and
flash it onto your device using fastboot.
→
root@pwnbox# fastboot flash boot magisk_patched_boot.img
And there you have it, a successfully rooted device!
FOR further support and PoCs refer the following -
Root Android (Kali Linux NetHunter install)
Rooting Android Device with patched boot image.pdf
How to Extract payload.bin and get stock boot image file - DroidWin
Releases · libxzr/FastbootEnhance (github.com)
