GitHub

stage1---> 替换系统文件如adb-->检查是否替换成功!

stage2---> 修改libc.so, 调用dlopen加载adb, 等待获取root权限的进程!

stage3---> 修改init,patch seliux!

stage4---> stage2--->获取root shell--->su --daemon!

Name		Name	Last commit message	Last commit date
Latest commit History 36 Commits
arm		arm
inject/jni		inject/jni
libsepol		libsepol
misc		misc
obfuscator		obfuscator
su		su
tool		tool
utils		utils
Android.mk		Android.mk
Application.mk		Application.mk
LICENSE		LICENSE
Makefile		Makefile
README.md		README.md
Wiki.md		Wiki.md
adb		adb
build.prop		build.prop
build.sh		build.sh
busybox		busybox
cowroot (execve).c		cowroot (execve).c
cowroot(plt).c		cowroot(plt).c
cowroot(recv).c		cowroot(recv).c
cowroot.c		cowroot.c
detour.S		detour.S
extractkall_huawei.sh		extractkall_huawei.sh
getroot.c		getroot.c
inject.c		inject.c
install-recovery.sh		install-recovery.sh
ldlib.S		ldlib.S
ldpo.S		ldpo.S
libc.so		libc.so
main		main
mpdecision		mpdecision
replace.c		replace.c
rt.sh		rt.sh
run.sh		run.sh
sepolicy.sh		sepolicy.sh
sepolicy_6p		sepolicy_6p
sh		sh
shell		shell
shell(execve).s		shell(execve).s
shell(plt).s		shell(plt).s
shell.o		shell.o
shell.s		shell.s
shellcode.h		shellcode.h
shellrecv.s		shellrecv.s
strace		strace

TooQuiet/android_root