[APP]SuperOneClick v1.9.5 (Root, Unroot, Enable Non-Market App)

[Pzyduck]

SuperOneClick

I made it. I tested it. It works. You can get it from shortfuse.org or use the links below (if you're a registered XDA member).

Here's a one-click root with almost all phones and all android versions. (including the i9000, Droid, Nexus One, etc)

YOU CAN ROOT ALMOST ALL ANDROID PHONES!

The program requires Microsoft .NET Framework 2.0+ or Mono v1.2.6+
Operations systems with native support:

• Windows Vista
• Windows 7
• Ubuntu Hardy (8.04 LTS)
• Ubuntu Jaunty (9.04)
• Ubuntu Karmic (9.10)
• Ubuntu Lucid (10.04 LTS)
• Ubuntu Maverick (10.10)
• Debian Lenny (5.0)
• Debian Squeeze (testing)
• Debian Sid (unstable)
• Debian Experimental

If you run Microsoft Windows XP, install .NET Framework v2.0 or above
If you run Mac or another Linux flavor, make sure you install Mono:
Download - Mono

For more information about making it work in linux:
See here


You NEED to put your phone on USB Debugging mode
You NEED to install make sure the Android drivers for your phone are installed
Make sure you DO NOT mount your SD card.
If you still can't get something to run, try doing it in recovery mode.

Read me: (READ BEFORE POSTING)
2/24/2011:
I registered my website shortfuse.org so you can grab SuperOneClick from there now.

2/22/2011:

Great news. -1Day roots AT&T Motorola Atrix4G!!! YAY!

11/29/2010:

I'm sorry I haven't been updating lately!!! The problem is, I no longer have an Android phone and I can't play around or test anymore. I'm going to see if I can find one on craiglist or ebay.

11/10/2010:
I finally figured out how to root without looping. After rooting 13 phones, this is how I did it on the first try.

Turn USB Debugging OFF

Click Root

When it says: Waiting for Device, Turn USB Debugging ON

It'll now run RATC

When it says: Starting ADB Server...
Turn USB Debugging OFF
Turn USB Debugging ON
Turn USB Debugging OFF
All BEFORE it says "Waiting for device..." again


11/1/2010:
Hey guys! I'm sorry I haven't been able to respond to lots of posts. I've been really busy lately with work. I've been reading some posts and I've made some changes in v1.5.2

Let me know what bugs and issues you guys have.


10/17/2010:
Thanks to all that donated! I was worried for a bit but you guys proved me wrong. So, I fixed the NMA (non market apps) button. It should now install sqlite3 and busybox into a temporary folder if you don't have it. I added an unroot (by popular demand). I did some major code clean up, so you can expect faster releases from here on out. Next version will add sqlite3 and busybox to the /system partition included in root.

If you're having issues with "wait for device" or if RATC is looping, try this
Unplug your USB Cable
Go to Settings > Applications > Development
Uncheck USB Debugging
Plug in your USB Cable
Unplug your USB Cable
Check USB Debugging
Plug in your USB Cable

10/13/2010:
I need people with issues to post their device model and if they tried rooting in recovery mode. All posts ignoring the read me will be ignored. (meaning nma complaints and those NAND locked devices).
I'm getting flooded with replies, PMs and emails. Seriously, try reading a few posts back.
The program has been downloaded over 5000 times and only 2 people have have donated. I see donations as signs of gratitude. Even if it's 25 cents, please donate.
When I find the time (and will) I will work on the v1.5 release.
The rageagainstthecage looping is by design. Bad usb cables and ports can cause ratc to not run properly so I have it loop until it works. The "waiting for device" hang is for the same reason. There's nothing wrong with my application. It's usually your usb cable or port. This is not a cop-out answer. This is not an excuse as if I didn't know why it happens. This has been investigated and the problem is USB connectivity. It happens with my Captivate as well.

10/11/2010:
Enabling market apps isn't working unless you have busybox installed. I plan to fix this in the next version. The problem is, different devices have different locations for the com.provider.android.settings/settings.db and I was using the 'find' command to find your settings.db location. I didn't realize this was a busybox command not internal. That will be fixed.

I also added some information about root that I think people should read and classified different root levels.

By classifying root levels, I make it easier for the users to know if certain options will work or not. For example, enabling non-market apps will only require a Level 1 root, meaning it will work with the HTC Aria

Donate

Donate if you wish... (:

Compatibility list
Please note that if you device is not listed here, it doesn't automatically make it incompatible. The list is definitely incomplete.
Use the search feature to search for your phone model:

• Acer Liquid Metal
• Dell Streak
• HTC Magic (Sapphire) 32B
• HTC Bee
• LG Ally
• Motorola Atrix4G
• Motorola Charm
• Motorola Cliq
• Motorola Droid
• Motorola Flipside
• Motorola Flipout
• Motorola Milestone
• Nexus One
• Samsung Captivate
• Samsung Galaxy 551 (GT-I5510)
• Samsung Galaxy Portal/Spica I5700
• Samsung Galaxy S 4G
• Samsung Galaxy S I9000
• Samsung Galaxy S SCH-I500
• Samsung Galaxy Tab
• Samsung Transform M920
• Samsung Vibrant
• Sony Ericsson Xperia E51i X8
• Sony Ericsson Xperia X10
• Sprint Hero
• Telus Fascinate
• Toshiba Folio 100

Incompatibility list

With the absolutely beautiful ADB exploit I use, titled rageagainstthecage (ratc), absolute ALL devices can be rooted. This is because it exploit is ADB which all devices use. There is an issue though. Some devices have a NAND lock which does not allow you to write to the /system mount. Because of this, you can't copy su, sqlite or busybox to /system/bin. This creates some issues but there is a work around. For things that don't need access to /system (like enabling non-market apps) I can use the ratc exploit to make those changes. If your device cannot use su in /system/bin then you can simple select a checkbox (as of v1.5) that says to use ratc.

There are 3 levels of "root" we can define:
Level 1: Shell Root (with ratc rooting the adb shell but no /system write access)
Level 2: Temporary Root (/system/bin/su installed but lost on reboot)
Level 3: Full Root (/system/bin/su installed and sticks)

Some devices have a NAND lock. SuperOneClick will only give a Shell root until you remove this lock.
The following phones can use unrevoked to remove this lock:

• Sprint EVO 4G (HTC Supersonic)
• Droid Incredible (HTC Incredible)
• HTC Desire GSM
• HTC Desire CDMA (HTC BravoC)
• HTC Aria
• Droid Eris (HTC DesireC)
• HTC Wildfire (HTC Buzz)

THe HTC Legend and My Touch 3G 32A also have a NAND lock and need more specific methods to unlock.

The T-Mobile (HTC) G2 has something different which may or may not be a hardware flaw. I have yet to really research the device, but while it may root, it won't be permanent since copying /su to /system/bin/su has problems. I believe this is a Level 2 root, but to be honest, I need to research more.

All other devices has a Level 3 root via SuperOneClick

Version changes:
v1.9.1
GingerBreak support! (I think)

v1.9
Bug fixes!
Should work better now on XP systems and Linux

v1.8
Automatic driver installation
Removed RageAgainstTheCage (no virus flags)
New folder structure
Major code clean up

v1.7
Hopefully fixed Linux hangs
Theoretical honeycomb support (still needs testing)

v1.6.5
Fixed major bug. Oops!

v1.6.4
Installs busybox to /system/xbin and installs syslinks
Added a 30 second timeout check (should eliminate all lock ups)

v1.6.3
Mounts with busybox first
Includes version in first line

v1.6.2
Fixed wrong su version being sent
Fixed issue when getting OS version
Prints device info on failure.

v1.6.1
Falls back to previous mount path method if busybox method fails

v1.6
Uses psneuter for exploit instead of rageagainstthecage by default (should root Sony Ericsson devices easily now)
Added detection for 1.x Donut/Eclair kernels
Uses busybox for getting mount path
Updated Windows ADB to latest version (I'll update the Mac/Linux ones next build)

v1.5.5
Unroot uninstalls Superuser from /data/app
Returned installation of Superuser to /system/app

v1.5.4
Fixed superuser install issue
Added a prompt to tell you to allow superuser on your phone, for the test.
Fixed unroot.

v1.5.3
Fixed ADB-pushing problem

v1.5.2
Administrative rights in Windows Vista/7 are automatically requested.
Fixed the settings.db search. (Tries default two locations, then uses busybox is all else fails).
Set Superuser to install (to data/apps) instead of copy to /system/apps. You can manually remove it from your phone like any other app. (You can also update it with the Market).
Fixed NMA not working if you didn't have Shell Root


v1.5.1
Untested Mac and Linux support (you need Mono)

v1.5
Fixed Non Market Apps
Added Unroot
Added separate Shell Root (rageagainstthecage) button
Lots of internal code clean up.

v1.4
Changed main form's name to SuperOneClick from RageAgainstTheCageGUI
Enabled Captivate - Get Unlock Code button
Added a messagebox to confirm if Non Market Applications are enabled
Made "Enable Non Market Apps" FULLY universal
Added initial message telling you to remember to allow superuser commands (when enabling Non-Market Apps)

v1.3
Removed busybox for space reasons. Changed the layout. Fixed issue where application stayed running in the background. Added Non Market App button.

v1.2
Added a detection to see if RATC was already working.

v1.1
Universal device support. Application now finds your /system path.

v1.0
Initial release.

Development Plan:




Scheduled for next major release

• Linux support via mono-project
• Add a check box to use su or rageagainstthecage for other scripts (like Enable NMA)
• Better error handling for devices with NAND lock on /system
• Have options show what level root is needed (0,1,2,3)

To do list:

• Jupiter fixes
• Custom scripts support
• Plugin support
• Mac support via mono-project
• Linux support via mono-project

Wishlist:

• None

Thanks to basily, I have an Captivate v2.1 nv_data.bin I can test with to create the unlock button.
I need a mac/linux user to help me. PM so we can chat on AIM/Google

Courtesy of TheUnlockr.com, here's a step-by-step video:
[ame="http://www.youtube.com/watch?v=SuaXu8kusvA"]YouTube - How To - Root Your Android Phone (SuperOneClick Method) - TheUnlockr.com - Cell Phone How To's, Phone Reviews, and Wireless News![/url]

Mod Edit: this app will set off some anti virus software...here's a small explanation by pulser_g2:

rageagainstthecage is a root exploit via a fork bomb.

It IS a potentially malicious payload, BUT it is being used with owner's consent to root the phone.

The DreamDroid malware use exactly same payload - they are trojans, but this is a helpful tool.

It IS a dangerous tool in the wrong hands, but this is a root exploit, so you should exercise common sense and a little understanding of what it does and how it works.

Downloads:

SuperOneClickv1.7-ShortFuse
SuperOneClickv1.9.1-ShortFuse.Drivers
SuperOneClickv1.9.1-ShortFuse


Total Credits: CLShortFuse

[41rw4lk]

I actually used this to root my phone back when it was 1.3, I had to time toggling the debug button to get the rage exploit to go, but I finally got it lol. I was never so frustrated, but never so happy when it finally popped up the permission dialog. Memories of a stock phone lol.

[mustangmodderatx]

Will this work for the coby mid 7024? z4root does not work like its predecessor the 7015. Thank you, your awesome.

[Pzyduck]

Updated

[cobracjason]

ok it seems to have rooted my motorola defy android version 2.2.1. it says it was successful and it installed the superuser app but i don't see any difference i still can't delete those bloatware apps like blockbuster and slacker am i missing something? does rebooting involve something other than turning my phone off then on? sorry for the stupid question but i have no idea what i'm doing here.

[Pzyduck]

Install any application with Root permissions so that it realizes Root, for example: Root Explorer or SetCPU.

[cobracjason]

thanks it did work i see what it does now

[modnmotos]

Im gonna try it on my bravo, hope it works!
** update: not working on my bravo, how do you do it in "recovery mode"
*** Nevermind lol, I got it. I needed updated drivers for computer then it went smoothly. Thanks.

[polat1455]

I made it. I tested it. It works. You can get it from shortfuse.org or use the links below (if you're a registered XDA member).

Here's a one-click root with almost all phones and all android versions. (including the i9000, Droid, Nexus One, etc)

YOU CAN ROOT ALMOST ALL ANDROID PHONES!

The program requires Microsoft .NET Framework 2.0+ or Mono v1.2.6+
Operations systems with native support:
Windows Vista
Windows 7
Ubuntu Hardy (8.04 LTS)
Ubuntu Jaunty (9.04)
Ubuntu Karmic (9.10)
Ubuntu Lucid (10.04 LTS)
Ubuntu Maverick (10.10)
Debian Lenny (5.0)
Debian Squeeze (testing)
Debian Sid (unstable)
Debian Experimental

If you run Microsoft Windows XP, install .NET Framework v2.0 or above
If you run Mac or another Linux flavor, make sure you install Mono:
Download - Mono

For more information about making it work in linux:
See here


You NEED to put your phone on USB Debugging mode
You NEED to install make sure the Android drivers for your phone are installed
Make sure you DO NOT mount your SD card.
If you still can't get something to run, try doing it in recovery mode.

Read me: (READ BEFORE POSTING)
2/24/2011:
I registered my website shortfuse.org so you can grab SuperOneClick from there now.

2/22/2011:

Great news. -1Day roots AT&T Motorola Atrix4G!!! YAY!

11/29/2010:

I'm sorry I haven't been updating lately!!! The problem is, I no longer have an Android phone and I can't play around or test anymore. I'm going to see if I can find one on craiglist or ebay.

11/10/2010:
I finally figured out how to root without looping. After rooting 13 phones, this is how I did it on the first try.

Turn USB Debugging OFF

Click Root

When it says: Waiting for Device, Turn USB Debugging ON

It'll now run RATC

When it says: Starting ADB Server...
Turn USB Debugging OFF
Turn USB Debugging ON
Turn USB Debugging OFF
All BEFORE it says "Waiting for device..." again


11/1/2010:
Hey guys! I'm sorry I haven't been able to respond to lots of posts. I've been really busy lately with work. I've been reading some posts and I've made some changes in v1.5.2

Let me know what bugs and issues you guys have.


10/17/2010:
Thanks to all that donated! I was worried for a bit but you guys proved me wrong. So, I fixed the NMA (non market apps) button. It should now install sqlite3 and busybox into a temporary folder if you don't have it. I added an unroot (by popular demand). I did some major code clean up, so you can expect faster releases from here on out. Next version will add sqlite3 and busybox to the /system partition included in root.

If you're having issues with "wait for device" or if RATC is looping, try this
Unplug your USB Cable
Go to Settings > Applications > Development
Uncheck USB Debugging
Plug in your USB Cable
Unplug your USB Cable
Check USB Debugging
Plug in your USB Cable

10/13/2010:
I need people with issues to post their device model and if they tried rooting in recovery mode. All posts ignoring the read me will be ignored. (meaning nma complaints and those NAND locked devices).
I'm getting flooded with replies, PMs and emails. Seriously, try reading a few posts back.
The program has been downloaded over 5000 times and only 2 people have have donated. I see donations as signs of gratitude. Even if it's 25 cents, please donate.
When I find the time (and will) I will work on the v1.5 release.
The rageagainstthecage looping is by design. Bad usb cables and ports can cause ratc to not run properly so I have it loop until it works. The "waiting for device" hang is for the same reason. There's nothing wrong with my application. It's usually your usb cable or port. This is not a cop-out answer. This is not an excuse as if I didn't know why it happens. This has been investigated and the problem is USB connectivity. It happens with my Captivate as well.

10/11/2010:
Enabling market apps isn't working unless you have busybox installed. I plan to fix this in the next version. The problem is, different devices have different locations for the com.provider.android.settings/settings.db and I was using the 'find' command to find your settings.db location. I didn't realize this was a busybox command not internal. That will be fixed.

I also added some information about root that I think people should read and classified different root levels.

By classifying root levels, I make it easier for the users to know if certain options will work or not. For example, enabling non-market apps will only require a Level 1 root, meaning it will work with the HTC Aria

Donate

Donate if you wish... (:

Compatibility list
Please note that if you device is not listed here, it doesn't automatically make it incompatible. The list is definitely incomplete.
Use the search feature to search for your phone model: http://forum.xda-developers.com/sear...hreadid=803682
Acer Liquid Metal
Dell Streak
HTC Magic (Sapphire) 32B
HTC Bee
LG Ally
Motorola Atrix4G
Motorola Charm
Motorola Cliq
Motorola Droid
Motorola Flipside
Motorola Flipout
Motorola Milestone
Nexus One
Samsung Captivate
Samsung Galaxy 551 (GT-I5510)
Samsung Galaxy Portal/Spica I5700
Samsung Galaxy S 4G
Samsung Galaxy S I9000
Samsung Galaxy S SCH-I500
Samsung Galaxy Tab
Samsung Transform M920
Samsung Vibrant
Sony Ericsson Xperia E51i X8
Sony Ericsson Xperia X10
Sprint Hero
Telus Fascinate
Toshiba Folio 100

Incompatibility list

With the absolutely beautiful ADB exploit I use, titled rageagainstthecage (ratc), absolute ALL devices can be rooted. This is because it exploit is ADB which all devices use. There is an issue though. Some devices have a NAND lock which does not allow you to write to the /system mount. Because of this, you can't copy su, sqlite or busybox to /system/bin. This creates some issues but there is a work around. For things that don't need access to /system (like enabling non-market apps) I can use the ratc exploit to make those changes. If your device cannot use su in /system/bin then you can simple select a checkbox (as of v1.5) that says to use ratc.

There are 3 levels of "root" we can define:
Level 1: Shell Root (with ratc rooting the adb shell but no /system write access)
Level 2: Temporary Root (/system/bin/su installed but lost on reboot)
Level 3: Full Root (/system/bin/su installed and sticks)

Some devices have a NAND lock. SuperOneClick will only give a Shell root until you remove this lock.
The following phones can use unrevoked to remove this lock:
Sprint EVO 4G (HTC Supersonic)
Droid Incredible (HTC Incredible)
HTC Desire GSM
HTC Desire CDMA (HTC BravoC)
HTC Aria
Droid Eris (HTC DesireC)
HTC Wildfire (HTC Buzz)

THe HTC Legend and My Touch 3G 32A also have a NAND lock and need more specific methods to unlock.

The T-Mobile (HTC) G2 has something different which may or may not be a hardware flaw. I have yet to really research the device, but while it may root, it won't be permanent since copying /su to /system/bin/su has problems. I believe this is a Level 2 root, but to be honest, I need to research more.

All other devices has a Level 3 root via SuperOneClick

Version changes:
v1.9.5
Driver Installation Fix
Force Administrator on Vista/Win7
Fixed Non-Market Apps not working for some devices

v1.9.1
GingerBreak support! (I think)

v1.9
Bug fixes!
Should work better now on XP systems and Linux

v1.8
Automatic driver installation
Removed RageAgainstTheCage (no virus flags)
New folder structure
Major code clean up

v1.7
Hopefully fixed Linux hangs
Theoretical honeycomb support (still needs testing)

v1.6.5
Fixed major bug. Oops!

v1.6.4
Installs busybox to /system/xbin and installs syslinks
Added a 30 second timeout check (should eliminate all lock ups)

v1.6.3
Mounts with busybox first
Includes version in first line

v1.6.2
Fixed wrong su version being sent
Fixed issue when getting OS version
Prints device info on failure.

v1.6.1
Falls back to previous mount path method if busybox method fails

v1.6
Uses psneuter for exploit instead of rageagainstthecage by default (should root Sony Ericsson devices easily now)
Added detection for 1.x Donut/Eclair kernels
Uses busybox for getting mount path
Updated Windows ADB to latest version (I'll update the Mac/Linux ones next build)

v1.5.5
Unroot uninstalls Superuser from /data/app
Returned installation of Superuser to /system/app

v1.5.4
Fixed superuser install issue
Added a prompt to tell you to allow superuser on your phone, for the test.
Fixed unroot.

v1.5.3
Fixed ADB-pushing problem

v1.5.2
Administrative rights in Windows Vista/7 are automatically requested.
Fixed the settings.db search. (Tries default two locations, then uses busybox is all else fails).
Set Superuser to install (to data/apps) instead of copy to /system/apps. You can manually remove it from your phone like any other app. (You can also update it with the Market).
Fixed NMA not working if you didn't have Shell Root


v1.5.1
Untested Mac and Linux support (you need Mono)

v1.5
Fixed Non Market Apps
Added Unroot
Added separate Shell Root (rageagainstthecage) button
Lots of internal code clean up.

v1.4
Changed main form's name to SuperOneClick from RageAgainstTheCageGUI
Enabled Captivate - Get Unlock Code button
Added a messagebox to confirm if Non Market Applications are enabled
Made "Enable Non Market Apps" FULLY universal
Added initial message telling you to remember to allow superuser commands (when enabling Non-Market Apps)

v1.3
Removed busybox for space reasons. Changed the layout. Fixed issue where application stayed running in the background. Added Non Market App button.

v1.2
Added a detection to see if RATC was already working.

v1.1
Universal device support. Application now finds your /system path.

v1.0
Initial release.

Development Plan:




Scheduled for next major release
Linux support via mono-project
Add a check box to use su or rageagainstthecage for other scripts (like Enable NMA)
Better error handling for devices with NAND lock on /system
Have options show what level root is needed (0,1,2,3)

To do list:
Jupiter fixes
Custom scripts support
Plugin support
Mac support via mono-project
Linux support via mono-project





Wishlist:
None
Thanks to basily, I have an Captivate v2.1 nv_data.bin I can test with to create the unlock button.
I need a mac/linux user to help me. PM so we can chat on AIM/Google

Courtesy of TheUnlockr.com, here's a step-by-step video:

IMPORTANT NOTICE: No media files are hosted on these forums. By clicking the link below you agree to view content from an external website. We can not be held responsible for the suitability or legality of this material. If the video does not play, wait a minute or try again later.

I AGREE

Mod Edit: this app will set off some anti virus software...here's a small explanation by pulser_g2:

rageagainstthecage is a root exploit via a fork bomb.

It IS a potentially malicious payload, BUT it is being used with owner's consent to root the phone.

The DreamDroid malware use exactly same payload - they are trojans, but this is a helpful tool.

It IS a dangerous tool in the wrong hands, but this is a root exploit, so you should exercise common sense and a little understanding of what it does and how it works.



SuperOneClickv1.7-ShortFuse.zip 1.58mb =Get SuperOneClickv1.7-ShortFuse.zip on Wupload.com
SuperOneClickv1.9.5-ShortFuse.zip 1.59 MB=Get SuperOneClickv1.9.5-ShortFuse.zip on Wupload.com
SuperOneClickv1.9.5-ShortFuse.Drivers.rar 8 mb=Get SuperOneClickv1.9.5-ShortFuse.Drivers.rar on Wupload.com

[mahgninnuc93]

It worked on my G2x. Now for the stupid question of the day......
How do I add things with it LOL. I have been spoiled by Cydia and SSH'ing in that I'm wandering around like a idiot with the Droid.
BUT, I admit I am converted, never again will I play by Apples Iron Fist rules.

[sniper07940]

Hi guys How do I root the new HTC Wildfire S, please HELP ME!!

[Pzyduck]

I try to Gingerbreak?

[Apollopimp]

i am getting this on my stock Motorola Cliq phone info below any help would be awesome

System Version : Blur_Version.1.6.1MB200.T-Mobile.en.US
Model Version : MB200
Firmware Version : 1.5
Build Number : R6380CP1_042.01


Should i do the 2.1.5 upgrade for Motorola CLIQ ? and than root the phone?





SuperOneClick v1.9.5.0
Checking drivers...

Killing ADB Server...

OK

Starting ADB Server...
* daemon not running. starting it now on port 5037 *
* daemon started successfully *

OK

Waiting for device...

OK

Getting OS Version...

OK

Pushing psneuter...
790 KB/s (585731 bytes in 0.724s)

OK

chmod psneuter...

OK

Running psneuter...
ROOTED

Pushing busybox...
719 KB/s (1062992 bytes in 1.443s)

OK

chmod busybox...

OK

Getting mount path...
rootfs / rootfs ro 0 0
FAILED

[Pzyduck]

[MENTION=3272561]Apollopimp[/MENTION] [ROOT] Universal Cliq and Dext rooting method (Safe: Won't break 3g)

[Apollopimp]

Thanks for the link i have Superuser in apps now