[ROOT] All versions of Backflip

[b.searcy]

just tried Dbagjones advice and killed the server as fast as possible. Still have $ following shell.

trying again with CMD as administrator. BRB.

[Dbagjones]

Wish I could narrow down exactly what worked for me, but I tried sooo many different things that they've started to "blur" together. haha couldn't help myself

PS. the manual reboot (power button) after running exploit might be the trick, just don't remember rebooting.

[Skyfallkavu]

Come to mention it I killed the server really fast too. I remember rushing to type it, and then typing devices and eventually shell

I know I killed the server about before/right when MotoConnect alert popped up in my taskbar

[Dbagjones]

I know I killed the server about before/right when MotoConnect alert popped up in my taskbar

Yup, same here.

Thought of something else, I didn't bother to mess with USB alerts that popped up, didn't touch the phone screen.

[Skyfallkavu]

Same, I didnt touch the phone while it rooted. I remember I did try it while the SD Card was mounted, I dont remember if that was the method that was used for it to work.

[b.searcy]

Ok, so there are a few things about my process that are different, and maybe one of them have something to do with my inability to root.

1.) ADB is only accessable from inside my android SDK tools folder, so when I go to push the superuser.apk, SU, and busybox, I have to do it with the full command line from inside the tools folder (i.e. android-sdk-windows\tools>adb push c:\moto_msm_root\superuser.apk /data/local/tmp/superuser.apk)

2.)I don't have any type of MotoConnect software installed on my PC at all. It's pretty much the drivers for the USB connection from moto, and the ADB tools from the SDK

3.)rageagainstthecage completes in 10 seconds, tops, and nothing seems to happen on the phone. I've tried rebooting as soon as the BIN takes me back to my ADB directory, and none of that has worked.

Let me know if anything I'm doing is sticking out as a glaring issue.

[Skrilax_CZ]

1) Definitely not.
2) Well I don't really think it's the issue but just-in-case try installing MotoConnect.
3) I let Backflip owners to answer that, but from what I've seen, it was exactly the same, except they got the "#" prompt after that.

[Skyfallkavu]

Fellow rooties, please remember you can uninstall ATT bloatware with Root Explorer, promptly removing everything I can (after backing up, of course)

[Dbagjones]

3.)rageagainstthecage completes in 10 seconds, tops, and nothing seems to happen on the phone. I've tried rebooting as soon as the BIN takes me back to my ADB directory, and none of that has worked.

Same for me, it's a quick process. As soon as it drops you back off at your command prompt, do adb kill-server, then adb devices, then adb shell.
I also have Droid Explorer but I don't imagine that has anything to do with the exploit working for me. The only tip I can think of off-hand to offer would be to add your SDK folder to the Windows path. I'm able to use the adb commands from anywhere.

[ACCUSED]

Well I got the "#" to show and did the rest of the steps but nothing else happened, did I do something wrong?

[Skyfallkavu]

I dumped su,superuser,busybox and rage into the tools folder so I could quickly get to them instead of cding back and forth

[Skrilax_CZ]

ACCUSED:
Nice, you did nothing wrong. It's just done. You're rooted.

[ACCUSED]

ACCUSED:
Nice, you did nothing wrong. It's just done. You're rooted.

Lol, alright thanks

[Skyfallkavu]

I wonder if you can remove yahoo search...

I will experiment !

[b.searcy]

ok. Dumped those files in the tools folder also. Trying again.

interesting.... just noticed something going through accused's DOS box.... I never get the message about "forked 2041 childs". Any ideas?