GALAXY S II LTE SC-03Dをroot化してみた。
- MENU→設定→端末情報でバージョン等を確認。モデル番号はSC-03D、Androidバージョンは2.3.6、ベースバンドバージョンはSC03DOMKK3、カーネルバージョンは2.6.35.11-SC03DOMKK3-CL711887、se.infra@SEP-40 #2、ビルド番号はGINGERBREAD.OMKK3だった。
- MENU→設定→画面→画面のタイムアウト→10分、MENU→設定→アプリ→「提供元不明のアプリ」にチェック、MENU→設定→アプリ→開発→「USBデバッグ」にチェック
- GALAXY S II LTE SC-03D ダウンロードからソフトウェア→Device(Install),USB DriverのEXEアイコンをクリックしてADBドライバをダウンロードした後、実行
- GALAXY S II LTE SC-03DとWindows PCをmicroUSBケーブルで接続
- DooMLoRD_v4_ROOT-zergRush-busybox-su.zipをダウンロードして解凍した後、runme.batを実行（途中「続行するには何かキーを押してください . . .」が出たらEnterキー等を押す）
- 再起動したら完了
元に戻す（unroot化）のはDooMLoRD UNROOTING Script v1.0で出来ると思う。
以下、runme.bat実行時のログ。
---------------------------------------------------------------
Easy rooting toolkit (v4.0)
created by DooMLoRD
using exploit zergRush (Revolutionary Team)
Credits go to all those involved in making this possible!
---------------------------------------------------------------
[*] This script will:
(1) root ur device using latest zergRush exploit (21 Nov)
(2) install Busybox (1.18.4)
(3) install SU files (binary: 3.0.3 and apk: 3.0.6)
(4) some checks for free space, tmp directory
(will remove Google Maps if required)
[*] Before u begin:
(1) make sure u have installed adb drivers for ur device
(2) enable "USB DEBUGGING"
from (Menu\Settings\Applications\Development)
(3) enable "UNKNOWN SOURCES"
from (Menu\Settings\Applications)
(4) [OPTIONAL] increase screen timeout to 10 minutes
(5) connect USB cable to PHONE and then connect to PC
(6) skip "PC Companion Software" prompt on device
---------------------------------------------------------------
CONFIRM ALL THE ABOVE THEN
続行するには何かキーを押してください . . .
--- STARTING ----
--- WAITING FOR DEVICE
adb server is out of date. killing...
* daemon started successfully *
--- creating temporary directory
mkdir failed for tmp, File exists
--- cleaning
rm failed for *, No such file or directory
--- pushing zergRush
22 KB/s (23060 bytes in 1.000s)
--- correcting permissions
--- executing zergRush
[**] Zerg rush - Android 2.2/2.3 local root
[**] (C) 2011 Revolutionary. All rights reserved.
[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.
[+] Found a GingerBread ! 0x00000118
[+] Found a Samsung, running Samsung mode
[*] Scooting ...
[*] Sleeping a bit (~40s)...
[*] Waking !
[*] Sending 149 zerglings ...
[*] Sleeping a bit (~40s)...
[*] Waking !
[*] Sending 189 zerglings ...
[+] Zerglings found a way to enter ! 0x18
[+] Overseer found a path ! 0x00030730
[*] Sleeping a bit (~40s)...
[*] Waking !
[*] Sending 189 zerglings ...
[+] Overseer found a path ! 0x00030a18
[*] Sleeping a bit (~40s)...
[*] Waking !
[*] Sending 189 zerglings ...
[+] Zerglings caused crash (good news): 0x40322cd4 0x0074
[*] Researching Metabolic Boost ...
[+] Speedlings on the go ! 0xafd19b63 0xafd3975f
[*] Sleeping a bit (~40s)...
[*] Waking !
[*] Sending 181 zerglings ...
[+] Rush did it ! It's a GG, man !
[+] Killing ADB and restarting as root... enjoy!
--- WAITING FOR DEVICE TO RECONNECT
if it gets stuck over here for a long time then try:
disconnect usb cable and reconnect it
toggle "USB DEBUGGING" (first disable it then enable it)
--- DEVICE FOUND
--- pushing busybox
3054 KB/s (1075144 bytes in 0.343s)
--- correcting permissions
--- remounting /system
--- checking free space on /system
0 KB/s (439 bytes in 1.000s)
export: 11%: bad variable name
--- copying busybox to /system/xbin/
2099+1 records in
2099+1 records out
1075144 bytes transferred in 0.117 secs (9189264 bytes/sec)
--- correcting ownership
--- correcting permissions
--- installing busybox
--- pushing SU binary
21 KB/s (22228 bytes in 1.000s)
--- correcting ownership
--- correcting permissions
--- correcting symlinks
--- pushing Superuser app
2888 KB/s (785801 bytes in 0.265s)
--- cleaning
--- rebooting
ALL DONE!!!
続行するには何かキーを押してください . . .
