[ROOT] All versions of Backflip

[Skrilax_CZ]

Instructions (it's the Droid 2 root method):

Setup:
- Install adb unless you haven't done so (here) and Motorola drivers unless you haven't done so (here)
- Download attached archive
- Extract to a directory, I used c:\Moto_MSM_Root
- Make sure you have USB degugging enabled
- Change connection to PC Mode (Charge Only)

Process:
- Open command prompt
- cd c:wherever-your-sdk-tools-folder-is
- adb devices (to verify the connection)
- adb push c:\Moto_MSM_Root\Superuser.apk /sdcard/Superuser.apk
- adb push c:\Moto_MSM_Root\su /sdcard/su
- adb push c:\Moto_MSM_Root\rageagainstthecage-arm5.bin /data/local/tmp/rageagainstthecage-arm5.bin
- adb push c:\Moto_MSM_Root\install-root.sh /data/local/tmp/install-root.sh
- adb shell
- cd /data/local/tmp
- chmod 0755 rageagainstthecage-arm5.bin
- chmod 0755 install-root.sh
-> keep your phone connected to PC

Download "Better Terminal Emulator" or "Terminal Emulator" or "ConnectBot" (I myself prefer ConnectBot - to open shell console there, just pick in the combobox "local", type any name into the editbox, and press enter) from the Market.

-> open the terminal emulator on the phone and type:
- cd /data/local/tmp
- ./rageagainstthecage-arm5.bin

Wait until you see this message - don't press anything:

[+] Forked xxxx childs.

Then press enter and type "exit" to close the terminal (or close it via the menu)

-> open the Terminal Emulator or ConnectBot on the phone (if you get the message that terminal died, dismiss it and run it again)

If you end up with "#" prompt, do the following. Otherwise reboot the phone and try opening the "Terminal Emulator" again. If even that doesn't give "#" prompt, go back to step "./rageagainstthecage-arm5.bin". There are mixed results atm., but some succeeded. See this post for possible way:

Type into the console:
- /data/local/tmp/install-root.sh
(if the script prints nothing, then it was successful)
- exit
- exit

Now you have successfully rooted the phone.

The install-root.sh contains the following:

mount -o rw,remount /dev/block/mtdblock1 /system

cat /sdcard/su > /system/xbin/su
chown root.root /system/xbin/su
chmod 6755 /system/xbin/su
cat /sdcard/Superuser.apk > /system/app/Superuser.apk
chown root.root /system/app/Superuser.apk
chmod 644 /system/app/Superuser.apk

mount -o ro,remount /dev/block/mtdblock1 /system

All credit goes to Sebastian Krahmer at C skills


(Photo by Skyfallkavu)

Download:
ModMyMobile Forums - Downloads - Root (Backflip, Cliq XT, Cliq, Dext)


Custom Recovery:
http://modmymobile.com/forums/406-mo...8-27-10-a.html

Note: Delete this file (if exists) if you are about to flash the custom recovery: "/system/recovery.img" - otherwise after you reboot, you'll have stock recovery back.

[ACCUSED]

I get to the second "adb shell" then everything else fails =[

[Skyfallkavu]

Try typing su? Maybe it didnt elevate your user level. I have to do that whenever I login to shell after getting root, or I stay at the $ prompt

[ACCUSED]

so you mean "su mount -o rw,remount /dev/block/mtdblock1 /system" ? If so I got "su: permission denied"

I'm new to modding phones so sorry if I miss understand you...

[Skrilax_CZ]

You still have "$", you'll have to try again from "./rageagainstthecage-arm5.bin" step.

[b.searcy]

I'm having the same problem. rageagainstthecage runs, and i let it finish, but the second shell takes me back to $.

[Skyfallkavu]

are you guys rebooting after running rage the first time?

[Skrilax_CZ]

Added the reboot the phone step.

[Skyfallkavu]

I dunno if you saw Skrilax, but I posted an image of my cmd prompt of what worked when I rooted in the other topic.

It could be of some help, maybe.

[Skrilax_CZ]

Well I looked on it again and there ain't the reboot step, so better no to avoid confusion.

[Dbagjones]

I didn't reboot my phone after first run of the exploit. I THINK the trick that worked for me was to kill the adb server (adb kill-server) as quickly as possible after the exploit ran, then typing adb devices, adb shell.

[Skyfallkavu]

Oh I didnt reboot the phone via adb, I did it through the on/off button.

[ACCUSED]

are you guys rebooting after running rage the first time?

I tried rebooting 7 times now, I still get "$".

[Dbagjones]

Oh, something I forgot. Don't know if it makes a difference but, I ran the command prompt (Win7 64) as administrator just in case.

[maxxz]

Skyfallkavu: me too and it works.