Nexbook AMlogic root WORK!

[biffler]

there is also a post on xda saying the "NextBook Next8P12 with an AM Logic M3 chip" is not vulnerable to this exploit, so no need to try I guess.

[ozymandiaz]

I've tried the Bin4ry along with superoneclick, doomlord, etc. I think the only way to root this thing is a flash, or some other workaround possibly using the script that was found. It seems to be run for a "3g dongle", at a guess some sort of plug-in wireless data reciever. I didn't see anything in the manufacturer (Efun, Yifang, etc) accessories so I haven't looked into that much further.

[eegorr]

there is also a post on xda saying the "NextBook Next8P12 with an AM Logic M3 chip" is not vulnerable to this exploit, so no need to try I guess.

LOL!

[eegorr]

I've tried the Bin4ry along with superoneclick, doomlord, etc. I think the only way to root this thing is a flash, or some other workaround possibly using the script that was found. It seems to be run for a "3g dongle", at a guess some sort of plug-in wireless data reciever. I didn't see anything in the manufacturer (Efun, Yifang, etc) accessories so I haven't looked into that much further.

Good to see you made it over the pass okay, ozyman!

I think I'll send a request to Nextbook tech support asking what kind of 3G dongle, if any, will work with this tablet. If we plugged in the right dongle, it should start pppd, run the modified init-pppd.sh, and root the device. As long as the tablet is booted for a while before the dongle is inserted, the internal sdcard should be mounted, making su and Superuser.apk available to be copied.

BTW, how many of us are there who have these AMLogic based Nextbook tablets and how many tablets are we talking about, including posters and lurkers?

[eegorr]

It seems to be run for a "3g dongle", at a guess some sort of plug-in wireless data reciever.

Does anybody who has one of these tablets have any sort of USB 3G adapter and a micro-usb adapter? If so, try modifying your init-pppd.sh per instructions earlier in this thread. The file is in the /etc directory of your tablet.

Don't forget to copy su and Superuser.apk from finless bob's update.zip file to the /sdcard directory of your tablet first.

Failing that, I maybe I'll stop by our local AT&T store tomorrow to see if they have a dongle that will work with my tablet and give it a try!

[bryman777]

Ive been looking around in various forums and have found variuos intersting things. I cant remember where i found it or what the files were called but i guess there are three files needed for updating an amlogic device unless your using the cwm. I think one was called like plc_signed something another one was apk signed something and of coarse the update.zip.
My conclusion after much reading/researching is that we have to tradeout to a rooted bootloader in a update zip file then reboot again into the tricked bootloader, boot into the android os then either push or if you can install the Su apk files. I guess by tricking the bootloader it unlocks the locked uboot on loading the android os.
Have you tried any zenithink tabs yet?
Awesome to finally see some development on this thing!! you guys Rock!!

[Finless]

So at this point the only solution I see is to flash a boot.img that has RW access defined in init.rc. Well unless that ppp script will work. I am still waiting to hear about that.

No update.zip will work because the recovery system signing is locked down and we do not have the keys to make a valid signed zip. So that is out unless someone can find a recovery that works they can boot from SDcard. So far none have been found.

Now the boot.img method may not be doable really. I do not know if that flash tool will flash "parts" of a ROM. If so maybe. I am going to try and play with that idea a little with my Ramos.

Bob

[bryman777]

do you still need the build prop file and the recovery-from-boot.p files , I can open and copy the info in here if you like. in the recovery-from-boot.p file is a bunch of gibberish stuff.

[bryman777]

..

[bryman777]

Do you need the info from the init.rc file ? .. I can copy the info from all the init files and put them in different labeled notepad files and upload them in a zip if you like..

[bryman777]

uploaded the init files .. heres the link ..

https://www.dropbox.com/s/8zvthybmxo...InitFiles.7z?m ..

[Finless]

Well the AML flash tool wont work for me. I cannot put my MX into this mode. I have no home button and I tried all the other button methods described for doing it. It appears my uboot does not support this flash mode. Must be something new with the M3 chip.

However I can see how a custom boot could be flashed with this. The package does not have to contain everything in the ROM and if you do not erase nand, in theory this should be able to flash a new boot.img.
Problem is, I cannot test any of this so I cannot even figure out how to make a package that works.

I have another idea for a upate.zip though. build.prop has the keys they used in it. what if Nexbook messed up and signed using the same keys? Thus I might be able to build a metadata file in a update.zip that might pass signature!

I am going to give it a try.

Bob

[Finless]

I just looked at inir.rc and it is mounting system as UBIFS.... WTF?

Why when I asked for a dump using the mount command from a terminal does it say it is mounted ext3?



Bob

[Finless]

I am thinking we have 2 different AMlogic models.

Eegor's and Bryman's init.rc show UBIFS....

However the mount command dump from asaddotcom at post #29 clearly shows it is ext3.
asaddotcom, I think you have a RK tablet not AMlogic?

Something between all you guys is different for sure!


Bob

[Finless]

Bryman, please also give be build.prop file. I need the keys from it.

Bob