* daemon started successfully *
TacoRoot: HTC Edition v1
By Justin Case (jcase)
Presented by TeamAndIRC, RootzWiki and AndroidPolice
With great assistance from Reid Holland (Erishasnobattery)
----------
TacoRoot: HTC Edition v1 is based on a vulnerability independently discovered by

both Justin Case and Dan Rosenberg (Rosenberg first). I believe unrevoked and
AlpahRev were also aware of it.
----------
Usage:
--recovery : For this exploit to work, you must have booted recovery at least on
ce after your last factory reset.
--setup : Setup the phone for root, must be done before --root.
--root : Root the phone.
--undo : Remove TacoRoot.
----------
Rebooting into root.

C:\android-sdk-windows\platform-tools>adb shell cd /data/local/tmp
adb server is out of date.  killing...
ADB server didn't ACK
* failed to start daemon *
error:

C:\android-sdk-windows\platform-tools>adb shell cd /data/local/tmp
adb server is out of date.  killing...
* daemon started successfully *

C:\android-sdk-windows\platform-tools>adb shell
adb server is out of date.  killing...
* daemon started successfully *
# cd /data/local/tmp
cd /data/local/tmp
# ./misc_version -s 1.00.000.0
./misc_version -s 1.00.000.0
--set_version set. VERSION will be changed to: 1.00.000.0
Patching and backing up misc partition...
# ./flashgc
./flashgc
Backing up sd-card MBR to file "./sdcardMbr-backup.img".
Making sd-card golden.
Writing gold-card to sd-card (/dev/block/mmcblk1) ...
SUCCESS: SD-card is golden.
# ./tacoroot --undo
./tacoroot --undo
TacoRoot: HTC Edition v1
By Justin Case (jcase)
Presented by TeamAndIRC, RootzWiki and AndroidPolice
With great assistance from Reid Holland (Erishasnobattery)
----------
TacoRoot: HTC Edition v1 is based on a vulnerability independently discovered by

both Justin Case and Dan Rosenberg (Rosenberg first). I believe unrevoked and
AlpahRev were also aware of it.
----------
Usage:
--recovery : For this exploit to work, you must have booted recovery at least on
ce after your last factory reset.
--setup : Setup the phone for root, must be done before --root.
--root : Root the phone.
--undo : Remove TacoRoot.
----------
Root removed, rebooting

C:\android-sdk-windows\platform-tools>fastboot
usage: fastboot [ <option> ] <command>

commands:
  update <filename>                        reflash device from update.zip
  flashall                                 flash boot + recovery + system
  flash <partition> [ <filename> ]         write a file to a flash partition
  erase <partition>                        erase a flash partition
  getvar <variable>                        display a bootloader variable
  boot <kernel> [ <ramdisk> ]              download and boot kernel
  flash:raw boot <kernel> [ <ramdisk> ]    create bootimage and flash it
  devices                                  list all connected devices
  continue                                 continue with autoboot
  reboot                                   reboot device normally
  reboot-bootloader                        reboot device into bootloader
  help                                     show this help message

options:
  -w                                       erase userdata and cache
  -s <serial number>                       specify device serial number
  -p <product>                             specify product name
  -c <cmdline>                             override kernel commandline
  -i <vendor id>                           specify a custom USB vendor id
  -b <base_addr>                           specify a custom kernel base address
  -n <page size>                           specify the nand page size. default:
2048

C:\android-sdk-windows\platform-tools>adb reboot bootloader
adb server is out of date.  killing...
* daemon started successfully *

C:\android-sdk-windows\platform-tools>fastboot oem rebootRUU
...
OKAY [  0.155s]
finished. total time: 0.156s

C:\android-sdk-windows\platform-tools>fastboot flash zip PD98IMG.zip
sending 'zip' (275460 KB)...
OKAY [ 45.596s]
writing 'zip'...
(bootloader) signature checking...
FAILED (remote: 12 signature verify fail)
finished. total time: 80.294s

C:\android-sdk-windows\platform-tools>fastboot reboot
rebooting...

finished. total time: 0.156s

C:\android-sdk-windows\platform-tools>adb reboot bootloader
adb server is out of date.  killing...
* daemon started successfully *

C:\android-sdk-windows\platform-tools>fastboot oem rebootRUU
...
OKAY [  0.234s]
finished. total time: 0.234s

C:\android-sdk-windows\platform-tools>fastboot flash zip Ace_DHD_1.24.405.1_PD98
IMG.zip
sending 'zip' (295144 KB)...
OKAY [ 48.805s]
writing 'zip'...
(bootloader) signature checking...
FAILED (remote: 12 signature verify fail)
finished. total time: 98.652s

C:\android-sdk-windows\platform-tools>fastboot flash zip Ace_DHD_1.24.405.1_PD98
IMG.zip
sending 'zip' (295144 KB)...
OKAY [ 48.795s]
writing 'zip'...
(bootloader) signature checking...
FAILED (remote: 12 signature verify fail)
finished. total time: 98.642s

C:\android-sdk-windows\platform-tools>fastboot reboot
rebooting...

finished. total time: 0.161s

C:\android-sdk-windows\platform-tools>adb push Ace_DHD_1.24.405.1_PD98IMG.zip /s
dcard/PD98IMG.zip
adb server is out of date.  killing...
* daemon started successfully *
2259 KB/s (302227850 bytes in 130.603s)

C:\android-sdk-windows\platform-tools>adb reboot bootloader
adb server is out of date.  killing...
* daemon started successfully *

C:\android-sdk-windows\platform-tools>fastboot oem rebootRUU
...
OKAY [  0.163s]
finished. total time: 0.164s

C:\android-sdk-windows\platform-tools>fastboot flash zip firmware.zip
sending 'zip' (18223 KB)...
OKAY [  2.992s]
writing 'zip'...
(bootloader) adopting the signature contained in this image...
(bootloader) signature checking...
(bootloader) zip header checking...
(bootloader) zip info parsing...
(bootloader) checking model ID...
(bootloader) checking custom ID...
(bootloader) checking main version...
(bootloader) start image[boot] unzipping & flushing...
(bootloader) [RUU]UZ,boot,0
(bootloader) [RUU]UZ,boot,31
(bootloader) [RUU]UZ,boot,68
(bootloader) [RUU]UZ,boot,99
(bootloader) [RUU]UZ,boot,100
(bootloader) [RUU]WP,boot,0
(bootloader) [RUU]WP,boot,100
(bootloader) start image[recovery] unzipping & flushing...
(bootloader) [RUU]UZ,recovery,0
(bootloader) [RUU]UZ,recovery,20
(bootloader) [RUU]UZ,recovery,44
(bootloader) [RUU]UZ,recovery,66
(bootloader) [RUU]UZ,recovery,89
(bootloader) [RUU]UZ,recovery,100
(bootloader) [RUU]WP,recovery,0
(bootloader) [RUU]WP,recovery,100
(bootloader) start image[radio] unzipping & flushing...
(bootloader) [RUU]UZ,radio,0
(bootloader) [RUU]UZ,radio,8
(bootloader) [RUU]UZ,radio,13
(bootloader) [RUU]UZ,radio,20
(bootloader) [RUU]UZ,radio,25
(bootloader) [RUU]UZ,radio,33
(bootloader) [RUU]UZ,radio,41
(bootloader) [RUU]UZ,radio,49
(bootloader) [RUU]UZ,radio,57
(bootloader) [RUU]UZ,radio,62
(bootloader) [RUU]UZ,radio,70
(bootloader) [RUU]UZ,radio,79
(bootloader) [RUU]UZ,radio,86
(bootloader) [RUU]UZ,radio,94
(bootloader) [RUU]UZ,radio,99
(bootloader) [RUU]UZ,radio,100
(bootloader) [RUU]WP,radio,0
(bootloader) [RUU]WP,radio,6
(bootloader) [RUU]WP,radio,14
(bootloader) [RUU]WP,radio,19
(bootloader) [RUU]WP,radio,27
(bootloader) [RUU]WP,radio,36
(bootloader) [RUU]WP,radio,44
(bootloader) [RUU]WP,radio,51
(bootloader) [RUU]WP,radio,59
(bootloader) [RUU]WP,radio,68
(bootloader) [RUU]WP,radio,76
(bootloader) [RUU]WP,radio,85
(bootloader) [RUU]WP,radio,95
(bootloader) [RUU]WP,radio,100
OKAY [107.365s]
finished. total time: 110.357s

C:\android-sdk-windows\platform-tools>fastboot reboot
rebooting...

finished. total time: 0.165s

C:\android-sdk-windows\platform-tools>adb reboot bootloader
adb server is out of date.  killing...
* daemon started successfully *
error: device offline

C:\android-sdk-windows\platform-tools>adb reboot bootloader
error: device offline

C:\android-sdk-windows\platform-tools>adb push Ace_DHD_1.24.405.1_PD98IMG.zip /s
dcard/PD98IMG.zip
error: device offline

C:\android-sdk-windows\platform-tools>fastboot oem rebootRUU
...
OKAY [  0.184s]
finished. total time: 0.184s

C:\android-sdk-windows\platform-tools>fastboot flash zip Ace_DHD_1.24.405.1_PD98
IMG.zip
sending 'zip' (295144 KB)...
OKAY [ 48.273s]
writing 'zip'...
(bootloader) signature checking...
FAILED (remote: 12 signature verify fail)
finished. total time: 85.438s

C:\android-sdk-windows\platform-tools>fastboot reboot
rebooting...

finished. total time: 0.184s

C:\android-sdk-windows\platform-tools>fastboot oem rebootRUU
...
OKAY [  0.184s]
finished. total time: 0.185s

C:\android-sdk-windows\platform-tools>fastboot flash zip rom.zip
sending 'zip' (252341 KB)...
OKAY [ 41.274s]
writing 'zip'...
(bootloader) adopting the signature contained in this image...
(bootloader) signature checking...
(bootloader) zip header checking...
(bootloader) zip info parsing...
(bootloader) checking model ID...
(bootloader) checking custom ID...
(bootloader) checking main version...
(bootloader) start image[hboot] unzipping for pre-update check...
(bootloader) start image[hboot] flushing...
(bootloader) [RUU]WP,hboot,0
(bootloader) [RUU]WP,hboot,100
(bootloader) start image[radio] unzipping for pre-update...
(bootloader) start image[radio] flushing...
(bootloader) [RUU]WP,radio,0
(bootloader) [RUU]WP,radio,6
(bootloader) [RUU]WP,radio,14
(bootloader) [RUU]WP,radio,19
(bootloader) [RUU]WP,radio,27
(bootloader) [RUU]WP,radio,36
(bootloader) [RUU]WP,radio,44
(bootloader) [RUU]WP,radio,51
(bootloader) [RUU]WP,radio,59
(bootloader) [RUU]WP,radio,68
(bootloader) [RUU]WP,radio,76
(bootloader) [RUU]WP,radio,85
(bootloader) [RUU]WP,radio,95
(bootloader) [RUU]WP,radio,100
FAILED (remote: 90 hboot pre-update! please flush image again immediately)
finished. total time: 156.761s

C:\android-sdk-windows\platform-tools>