[ROOT] PingPongRoot ***S6 & S6 Edge Root Tool*** Android 5.0.2 OC3/OE2 Only!!!

Status
Not open for further replies.
Search This thread

idler1984

Senior Member
Feb 16, 2011
136
875
Shanghai
Just another party by Keen Team
attachment.php


I'm getting increased queries and replies in this post/PM recently, so I'll try to make this clear (hopefully) for 99% of people. Short version of OP which you must read:
1. Don't install 5.1.1 for now if you ever want to root without tripping Knox warranty.
2. No new ROM can be supported as bug has been fixed.
3. If you don't know how to check a kernel's build date, DO NOT submit FPTAG.
Full story:

New bootloader blocks downgrading, be careful installing 5.1.1 OTA! More details: http://xdaforums.com/tmobile-galaxy-s6-edge/general/psa-odin-5-1-1-t3136151
Kernel built after May 15th (including some 5.0.2 and all 5.1.1) have this bug fixed. Be cautious when installing OTA these days and FlashFire might be your best shot of upgrading systems. Use Odin to unroot and receive OTA if you want.
Current version: Beta 6 (HTC One (M9) SUPERSU VERSION! Check updated Usage section!)
Since Beta 5.2: Should be more "stable" on devices with more application installed, but I'm not 100% sure. :p If it doesn't work, roll back to beta 5.1
I'm getting too many queries about Note 4. Two things to clarify: 1) No device data needed to root Note 4, try KingRoot 4.0. 2) Unless you have KNOX warranty bit tripped already, there is no perm-root for Note 4 yet.
If you have decent bandwidth and experience with ROM files, please see this: http://xdaforums.com/galaxy-s6/general/root-pingpong-root-rom-workshop-thread-t3104639. Volunteers needed to speed up adding new ROMs.
Big THANK YOU to all helped collecting ROMs. Now we have 91+2 ROM versions supported!

Everyone please do me a favor. If you want a ROM (S6 or S6E) get supported, please confirm it is not yet supported and post a reply in this thread like:
FPTAG fingerprint here
So I can quickly filter FP out of the replys by using search. Thanks.
Only submit if you know what a kernel build date is.

Supported devices

Samsung Galaxy S6 with following ROM versions:
G9200ZCU1AOD5
G9200ZHU1AOD3
G9200ZHU1AOD9
G920R4TYU1AOD3
G920IDVU1AOD1
G920FXXU1AOCV
G920PVPU1AOCF
G920TUVU1AOCG
G920VVRU1AOC3
G920FXXU1AOBN
G920FXXU1AODG
G9209KEU1AOCI
G9209KEU1AODA
G9208ZMU1AOD5
G9208ZMU1AOCI
G920FXXU1AOD9
G920AUCU1AOCE
G920FXXU1AODE
G9200ZCU1AOD9
G920W8VLU1AOCG
G920FXXU1AOD4
G920R4TYU1AOCB
***new*** Use Download Data!
G920FXXU1AOCY
G920IDVU1AOC4
G920FXXU1AODI
G9209KEU1AOD5
G920IDVU1AOBQ
G9208ZTU1AOD9
G920FXXU1AOE3
G920IDVU1AOE3
G920FXXU1AOD8
G920FXXU1AOE4
G920AUCU1AOE2
G920T1UVU1AOCH
G9208ZTU1AOCI
G920IDVU1AOC6
G920IDVU1AOD3
G920FXXU1AOCZ
G920AZTUU1AOD1
G9200ZHU1AOE4
G9200ZCU1AOE4
G920KKKU1AODC
G920IDVU1AOE4
G920LKLU1AODC
G920SKSU1AODC
G920IDVU1BOE2
G9208ZTU1AOE4
G920PVPU1AOE2
G920W8VLU1AOE1
G920VVRU1AOE2
SC04GOMU1AOE1

Samsung Galaxy S6 Edge with following ROM versions:
G9250ZCU1AODC
G925VVRU1AOC3
G925FXXU1AOD9
G925PVPU1AOCF
G925FXXU1AOCV
G925AUCU1AOCE
G925TUVU1AOCG
G925W8VLU1AOCG
G925IDVU1AOD1
G925SKSU1AOD5
***new*** Use Download Data!
G925FXXU1AOD4
G925R4TYU1AOD3
G925FXXU1AODG
G925FXXU1AOCZ
G925IDVU1AOD3
G925LKLU1AOD8
G925SKSU1AOD8
G925FXXU1AOE3
G925PVPU1AOE2
G925FXXU1AOD8
G9250ZTU1AODC
G925FXXU1AOE4
G925AUCU1AOE2
G925TUVU1COE6
G925FXXU1AOCY
G9250ZTU1AOE4 (5/11 kernel, seems not fixed yet, please test)
G925R4TYU1AOE2
SCV31KDU1AOCP (Japan version of S6E?)
G9250ZCU1AOCH
G9250ZCU1AOE4
G925IDVU1AOE4
G925IDVU1BOE1
G925LKLU1AODC
G925IDVU1AOE3
G925IDVU1AOE2
G925KKKU1AODC
G925SKSU1AODC
G925W8VLU1AOE1
G925VVRU1AOE2
G925R7WWU1AOE3

HTC One (M9) -- EXPERIMENTAL, UNLOCKED BL REQUIRED
htc/himauhl_htccn_chs_2/htc_himauhl:5.0.2/LRX22G/516731.9:user/release-keys
Verizon 1.33.605 (?)

New ROM and device support are coming~~
If your ROM version is not listed here, please check if any ROM with the same variant is already supported. If the supported one is newer, I suggest go and grab it instead of waiting.


Known Issues:
None

Todo:
Coming next release: (will come after SuperSU version)
TBD

In queue:
Check the workshop thread: http://xdaforums.com/galaxy-s6/general/root-pingpong-root-rom-workshop-thread-t3104639 but DO NOT REPLY UNLESS YOU ARE WORKING ON ROMS. Thank you for keeping that post clean!

Usage
OK, since manual switch is too complex and there are some compatibility issue of Kinguser, I'm making a SuperSU version now.
Note that due to the natural that SuperSU su doesn't ask for permission when SuperSU apk is missing, root will only happen when SuperSU apk has been installed. Read instrucitons below CAREFULLY!
0. Read Q&A section and BACKUP your data.
1. If you already have Kinguser installed please:
a. Open Kinguser, go to Settings -> Root authorization setting -> Remove Root permission. Click to remove root permission
b. Uninstall Kinguser​
2. Download pingpongroot_<ver>.apk. Install & open it.
3. It will automatically install SuperSU 2.46 for you. Follow the instructions on screen. You may need to enable unknown source for this step.
a. Once install is finished, click “Open" and run it once to "activate" it. It will prompt an error message (unless you already rooted) and exit automatically, bring you back to PingPong root.​
4. Click "Download Data" button to update device data if you have Internet connection.
5. Open it and click "Get Root!" button
6. If prompted for app permissions, allow them and continue. If it reboots, just retry.
7. Once finished, please make sure to reboot.
8. You can uninstall PingPong root app once finished.

Credits
Vulnerability: memeda, wushi
Original idea of exploit: memeda
Exploit: idl3r, Qoobee

Special thanks to:
Kingroot team (@Kingxteam) for help testing and great root manager

Q&A
Q: How to root 5.1.1 then since PingPong root will never work?
WARNING: User report that fingerprint sensor and incoming call stop working after using the engineering sboot.

A: The classic recovery root method. You shall find details in many other posts. If you are T-Mobile user, lucky for you that there is a leaked engineering bootloader which make root a piece of cake without tripping Knox warranty bit:
http://xdaforums.com/galaxy-s6/gene...-root-tool-t3103016/post61684664#post61684664

Q: It just keeps rebooting, what can I do?
A: The exploit may panic the kernel and reboot your device. If the data is off, same could happen as well. When issue happens, try these:
a. Clean up background process before running root.
b. Turn on airplane mode after clicking "Download Data".
c. Backup your data and run factory reset.
d. Definitely avoid doing anything else when "wait!!!" appears.​
If these doesn't help after 5 retries, there could be some issue, please collect the information in /proc/last_kmsg and send it to me.
Note: User reporting installing My Knox or enable other Knox feature (like enterprise provision or KNOX active protection) may cause reboot loop. Be cautious!

Q: My ROM is not yet supported?
A: Since I have limited bandwidth to download ROMs, I have to prioritize ROM requests and focusing on new variants/models first. And currently recruiting volunteers to help download/shrink ROMs.
If you see your ROM FP is not listed, but a very similar one (may be just the last digit or character is different) exists, please see if you can flash that version of ROM. I'm sure you can find someone helping you in corresponding forum.

Q: Will Samsung Pay/My Knox work?
A: To be honest I can't tell for sure. Indeed this root does not trip warranty bit. But it still leaves SU files, which is inevitable, on system partitions. And a lot of root features actually make change to system partition, so let's say it can be detected. If Samsung makes the decision that there will be no certain feature for presence of a su file, then there will be no fun. IMHO this is very bad idea since even Apple doesn't disable anything on jailbreak devices. Let's see what will be the outcome. This makes sense to enterprise uses but for consumers at least a choice should be given.

Q: Note4/Z3/Old Samsung/etc?
A: We also wrote the rooting engine in KingRoot 4.0 for generic 32-bit devices. Give it a try. Note that for some devices like Note4, only temp root is achievable.

Q: Why "PingPong" root?
A: Because the vulnerability affects ping socket and we are Chinese :D

Q: What's the current status of this tool?
A: Beta. We've thoroughly tested it on ROMs for G9200, but not other variants. You are the 1st batch of beta testers! :D

Q: Is my device supported?
A: You can check the version of your ROM in "About this phone" page. It shall read LRXxxx following by the ROM version.
This tool checks your ROM version as well. If you read "Your device data is still not supported." after clicking "Get Root!", your device data has not been collected yet. Please reply with your ROM version plus keyword "FPTAG" in this thread.

Q: Will this root trip KNOX warranty bit or disable OTA?
A: No, it won't trip KNOX warranty bit and YES, it will disable OTA. It doesn't require odin to flash in a custom recovery, so the warranty bit will remain intact.

Q: I'd like switching to SuperSU, what shall I do?
A: Kinguser does not have a "swtich" function. Follow these steps to do so manually: (if you are not familiar with adb, see this version: http://xdaforums.com/showpost.php?p=60632150&postcount=269)
1. Download supersu.7z and extract it. You will get the files needed to install Supersu.
2. Using adb to push su and busybox (if not installed) to /data/local/tmp.
Code:
adb push su /data/local/tmp
adb push busybox /data/local/tmp
3. Start a su session and run the following commands:
Code:
mount -o remount,rw /system
cat /data/local/tmp/su >/system/xbin/daemonsu && chmod 0755 /system/xbin/daemonsu
cat /data/local/tmp/busybox >/system/bin/busybox && chmod 0755 /system/bin/busybox
daemonsu -d &
Then keep the session running.
4. Open Kinguser, go to Settings -> Root authorization setting -> Remove Root permission. Click to remove root permission. Your su session should be still running.
5. Uninstall Kinguser app.
6. Go back to the su session and run following commands to replace su and cleanup:
Code:
cat /data/local/tmp/su >/system/xbin/su && chmod 0755 /system/xbin/su
busybox chattr -ia /system/bin/ddexe
busybox chattr -ia /system/bin/ddexe_real
cat /system/bin/ddexe_real >/system/bin/ddexe
busybox chattr -ia /system/xbin/ku.sud
rm /system/xbin/ku.sud
rm /system/xbin/pidof
rm /system/xbin/supolicy
7. Install Supersu apk
8. Open Supersu apk to update files.
9. Reboot.


Q: S6 Edge/G Flex 2/M9/other arm64 devices?
A: We will look into them soon :D
S6 Edge: Done
M9: WIP
G Flex 2/others: pending

Q: I need a video to guide me through
A: Check out this one: https://youtu.be/_Ezh7Oi-jyM
(Note: these are for earlier version)
https://www.youtube.com/watch?v=gNdWX31Sqd8
and this one: http://youtu.be/eAQ4WBg9xj0

To all sent me PM: I'm sorry that the reply could be delayed. Currently we are busy working on supporting of new ROMs and fixing bugs. To all those providing useful info/suggestion, thanks a ton!
 

Attachments

  • supersu.7z
    2.7 MB · Views: 371,311
  • 17679167_banner.png
    17679167_banner.png
    34.7 KB · Views: 3,199,118
  • pingpongroot_beta5.1.apk
    4 MB · Views: 1,085,721
  • pingpongroot_beta6.apk
    4 MB · Views: 1,707,810
Last edited by a moderator:

2Nice4U

Member
Aug 27, 2010
30
21
Rosenheim
Wow...can't believe! [emoji33]
Nice work! [emoji106]

Now switched from beta1 to beta5 and SuperSU...worked like a charm!
Titanium Backup is now running how it should.

0c2a0e8ac7bcae822a436ac332d7a3ba.jpg


c794d9fd971ae612947ad097840db224.jpg


70f52283a0b8b3e92412225fe6d40e52.jpg


Yeah...root access until next Update to 5.1.1 [emoji7]
 
Last edited:

Japultra

Senior Member
Oct 21, 2010
720
170
Los Angeles
G920FXXU1AODG here, will it work for that firmware? (Vodafone Germany)

It's coming in the next update!

---------- Post added at 10:44 AM ---------- Previous post was at 10:43 AM ----------


You should really read the OP ;)

Q: Will this root trip KNOX warranty bit?
A: No. It doesn't require odin to flash in a custom recovery, so the warranty bit will remain intact.
 
  • Like
Reactions: tutti9372

idler1984

Senior Member
Feb 16, 2011
136
875
Shanghai
I'm wondering if the vulnerability used here exists on the S6 Edge. Because I don't see anyone posting a SM-925xx Rom and to my understanding SM-920 is normal S6, where as SM-925 is the edge version.

Oh, I shall update the Q&A section. S6E (and may be other arm64 devices) will be investigated. And vulnerability should still be there for any kernel before 5/3.
 

tomesiek

Senior Member
Mar 28, 2012
95
31
That is truly great work....

k1f4wj.png


2a0m6n6.png


e96ooj.png


346ugcw.png


and my FAVOURITE
2cq1k6q.png



After switching to SuperSU, aps like TitanumBackup, RootExplorer and many probably more works great.

I just edit my "others.xml" and just the begin of having true FUN with my phone

BIG THANKS for ROOT :)
 
Last edited:
Status
Not open for further replies.

Top Liked Posts

  • There are no posts matching your filters.
  • 573
    Just another party by Keen Team
    attachment.php


    I'm getting increased queries and replies in this post/PM recently, so I'll try to make this clear (hopefully) for 99% of people. Short version of OP which you must read:
    1. Don't install 5.1.1 for now if you ever want to root without tripping Knox warranty.
    2. No new ROM can be supported as bug has been fixed.
    3. If you don't know how to check a kernel's build date, DO NOT submit FPTAG.
    Full story:

    New bootloader blocks downgrading, be careful installing 5.1.1 OTA! More details: http://xdaforums.com/tmobile-galaxy-s6-edge/general/psa-odin-5-1-1-t3136151
    Kernel built after May 15th (including some 5.0.2 and all 5.1.1) have this bug fixed. Be cautious when installing OTA these days and FlashFire might be your best shot of upgrading systems. Use Odin to unroot and receive OTA if you want.
    Current version: Beta 6 (HTC One (M9) SUPERSU VERSION! Check updated Usage section!)
    Since Beta 5.2: Should be more "stable" on devices with more application installed, but I'm not 100% sure. :p If it doesn't work, roll back to beta 5.1
    I'm getting too many queries about Note 4. Two things to clarify: 1) No device data needed to root Note 4, try KingRoot 4.0. 2) Unless you have KNOX warranty bit tripped already, there is no perm-root for Note 4 yet.
    If you have decent bandwidth and experience with ROM files, please see this: http://xdaforums.com/galaxy-s6/general/root-pingpong-root-rom-workshop-thread-t3104639. Volunteers needed to speed up adding new ROMs.
    Big THANK YOU to all helped collecting ROMs. Now we have 91+2 ROM versions supported!

    Everyone please do me a favor. If you want a ROM (S6 or S6E) get supported, please confirm it is not yet supported and post a reply in this thread like:
    FPTAG fingerprint here
    So I can quickly filter FP out of the replys by using search. Thanks.
    Only submit if you know what a kernel build date is.

    Supported devices

    Samsung Galaxy S6 with following ROM versions:
    G9200ZCU1AOD5
    G9200ZHU1AOD3
    G9200ZHU1AOD9
    G920R4TYU1AOD3
    G920IDVU1AOD1
    G920FXXU1AOCV
    G920PVPU1AOCF
    G920TUVU1AOCG
    G920VVRU1AOC3
    G920FXXU1AOBN
    G920FXXU1AODG
    G9209KEU1AOCI
    G9209KEU1AODA
    G9208ZMU1AOD5
    G9208ZMU1AOCI
    G920FXXU1AOD9
    G920AUCU1AOCE
    G920FXXU1AODE
    G9200ZCU1AOD9
    G920W8VLU1AOCG
    G920FXXU1AOD4
    G920R4TYU1AOCB
    ***new*** Use Download Data!
    G920FXXU1AOCY
    G920IDVU1AOC4
    G920FXXU1AODI
    G9209KEU1AOD5
    G920IDVU1AOBQ
    G9208ZTU1AOD9
    G920FXXU1AOE3
    G920IDVU1AOE3
    G920FXXU1AOD8
    G920FXXU1AOE4
    G920AUCU1AOE2
    G920T1UVU1AOCH
    G9208ZTU1AOCI
    G920IDVU1AOC6
    G920IDVU1AOD3
    G920FXXU1AOCZ
    G920AZTUU1AOD1
    G9200ZHU1AOE4
    G9200ZCU1AOE4
    G920KKKU1AODC
    G920IDVU1AOE4
    G920LKLU1AODC
    G920SKSU1AODC
    G920IDVU1BOE2
    G9208ZTU1AOE4
    G920PVPU1AOE2
    G920W8VLU1AOE1
    G920VVRU1AOE2
    SC04GOMU1AOE1

    Samsung Galaxy S6 Edge with following ROM versions:
    G9250ZCU1AODC
    G925VVRU1AOC3
    G925FXXU1AOD9
    G925PVPU1AOCF
    G925FXXU1AOCV
    G925AUCU1AOCE
    G925TUVU1AOCG
    G925W8VLU1AOCG
    G925IDVU1AOD1
    G925SKSU1AOD5
    ***new*** Use Download Data!
    G925FXXU1AOD4
    G925R4TYU1AOD3
    G925FXXU1AODG
    G925FXXU1AOCZ
    G925IDVU1AOD3
    G925LKLU1AOD8
    G925SKSU1AOD8
    G925FXXU1AOE3
    G925PVPU1AOE2
    G925FXXU1AOD8
    G9250ZTU1AODC
    G925FXXU1AOE4
    G925AUCU1AOE2
    G925TUVU1COE6
    G925FXXU1AOCY
    G9250ZTU1AOE4 (5/11 kernel, seems not fixed yet, please test)
    G925R4TYU1AOE2
    SCV31KDU1AOCP (Japan version of S6E?)
    G9250ZCU1AOCH
    G9250ZCU1AOE4
    G925IDVU1AOE4
    G925IDVU1BOE1
    G925LKLU1AODC
    G925IDVU1AOE3
    G925IDVU1AOE2
    G925KKKU1AODC
    G925SKSU1AODC
    G925W8VLU1AOE1
    G925VVRU1AOE2
    G925R7WWU1AOE3

    HTC One (M9) -- EXPERIMENTAL, UNLOCKED BL REQUIRED
    htc/himauhl_htccn_chs_2/htc_himauhl:5.0.2/LRX22G/516731.9:user/release-keys
    Verizon 1.33.605 (?)

    New ROM and device support are coming~~
    If your ROM version is not listed here, please check if any ROM with the same variant is already supported. If the supported one is newer, I suggest go and grab it instead of waiting.


    Known Issues:
    None

    Todo:
    Coming next release: (will come after SuperSU version)
    TBD

    In queue:
    Check the workshop thread: http://xdaforums.com/galaxy-s6/general/root-pingpong-root-rom-workshop-thread-t3104639 but DO NOT REPLY UNLESS YOU ARE WORKING ON ROMS. Thank you for keeping that post clean!

    Usage
    OK, since manual switch is too complex and there are some compatibility issue of Kinguser, I'm making a SuperSU version now.
    Note that due to the natural that SuperSU su doesn't ask for permission when SuperSU apk is missing, root will only happen when SuperSU apk has been installed. Read instrucitons below CAREFULLY!
    0. Read Q&A section and BACKUP your data.
    1. If you already have Kinguser installed please:
    a. Open Kinguser, go to Settings -> Root authorization setting -> Remove Root permission. Click to remove root permission
    b. Uninstall Kinguser​
    2. Download pingpongroot_<ver>.apk. Install & open it.
    3. It will automatically install SuperSU 2.46 for you. Follow the instructions on screen. You may need to enable unknown source for this step.
    a. Once install is finished, click “Open" and run it once to "activate" it. It will prompt an error message (unless you already rooted) and exit automatically, bring you back to PingPong root.​
    4. Click "Download Data" button to update device data if you have Internet connection.
    5. Open it and click "Get Root!" button
    6. If prompted for app permissions, allow them and continue. If it reboots, just retry.
    7. Once finished, please make sure to reboot.
    8. You can uninstall PingPong root app once finished.

    Credits
    Vulnerability: memeda, wushi
    Original idea of exploit: memeda
    Exploit: idl3r, Qoobee

    Special thanks to:
    Kingroot team (@Kingxteam) for help testing and great root manager

    Q&A
    Q: How to root 5.1.1 then since PingPong root will never work?
    WARNING: User report that fingerprint sensor and incoming call stop working after using the engineering sboot.

    A: The classic recovery root method. You shall find details in many other posts. If you are T-Mobile user, lucky for you that there is a leaked engineering bootloader which make root a piece of cake without tripping Knox warranty bit:
    http://xdaforums.com/galaxy-s6/gene...-root-tool-t3103016/post61684664#post61684664

    Q: It just keeps rebooting, what can I do?
    A: The exploit may panic the kernel and reboot your device. If the data is off, same could happen as well. When issue happens, try these:
    a. Clean up background process before running root.
    b. Turn on airplane mode after clicking "Download Data".
    c. Backup your data and run factory reset.
    d. Definitely avoid doing anything else when "wait!!!" appears.​
    If these doesn't help after 5 retries, there could be some issue, please collect the information in /proc/last_kmsg and send it to me.
    Note: User reporting installing My Knox or enable other Knox feature (like enterprise provision or KNOX active protection) may cause reboot loop. Be cautious!

    Q: My ROM is not yet supported?
    A: Since I have limited bandwidth to download ROMs, I have to prioritize ROM requests and focusing on new variants/models first. And currently recruiting volunteers to help download/shrink ROMs.
    If you see your ROM FP is not listed, but a very similar one (may be just the last digit or character is different) exists, please see if you can flash that version of ROM. I'm sure you can find someone helping you in corresponding forum.

    Q: Will Samsung Pay/My Knox work?
    A: To be honest I can't tell for sure. Indeed this root does not trip warranty bit. But it still leaves SU files, which is inevitable, on system partitions. And a lot of root features actually make change to system partition, so let's say it can be detected. If Samsung makes the decision that there will be no certain feature for presence of a su file, then there will be no fun. IMHO this is very bad idea since even Apple doesn't disable anything on jailbreak devices. Let's see what will be the outcome. This makes sense to enterprise uses but for consumers at least a choice should be given.

    Q: Note4/Z3/Old Samsung/etc?
    A: We also wrote the rooting engine in KingRoot 4.0 for generic 32-bit devices. Give it a try. Note that for some devices like Note4, only temp root is achievable.

    Q: Why "PingPong" root?
    A: Because the vulnerability affects ping socket and we are Chinese :D

    Q: What's the current status of this tool?
    A: Beta. We've thoroughly tested it on ROMs for G9200, but not other variants. You are the 1st batch of beta testers! :D

    Q: Is my device supported?
    A: You can check the version of your ROM in "About this phone" page. It shall read LRXxxx following by the ROM version.
    This tool checks your ROM version as well. If you read "Your device data is still not supported." after clicking "Get Root!", your device data has not been collected yet. Please reply with your ROM version plus keyword "FPTAG" in this thread.

    Q: Will this root trip KNOX warranty bit or disable OTA?
    A: No, it won't trip KNOX warranty bit and YES, it will disable OTA. It doesn't require odin to flash in a custom recovery, so the warranty bit will remain intact.

    Q: I'd like switching to SuperSU, what shall I do?
    A: Kinguser does not have a "swtich" function. Follow these steps to do so manually: (if you are not familiar with adb, see this version: http://xdaforums.com/showpost.php?p=60632150&postcount=269)
    1. Download supersu.7z and extract it. You will get the files needed to install Supersu.
    2. Using adb to push su and busybox (if not installed) to /data/local/tmp.
    Code:
    adb push su /data/local/tmp
    adb push busybox /data/local/tmp
    3. Start a su session and run the following commands:
    Code:
    mount -o remount,rw /system
    cat /data/local/tmp/su >/system/xbin/daemonsu && chmod 0755 /system/xbin/daemonsu
    cat /data/local/tmp/busybox >/system/bin/busybox && chmod 0755 /system/bin/busybox
    daemonsu -d &
    Then keep the session running.
    4. Open Kinguser, go to Settings -> Root authorization setting -> Remove Root permission. Click to remove root permission. Your su session should be still running.
    5. Uninstall Kinguser app.
    6. Go back to the su session and run following commands to replace su and cleanup:
    Code:
    cat /data/local/tmp/su >/system/xbin/su && chmod 0755 /system/xbin/su
    busybox chattr -ia /system/bin/ddexe
    busybox chattr -ia /system/bin/ddexe_real
    cat /system/bin/ddexe_real >/system/bin/ddexe
    busybox chattr -ia /system/xbin/ku.sud
    rm /system/xbin/ku.sud
    rm /system/xbin/pidof
    rm /system/xbin/supolicy
    7. Install Supersu apk
    8. Open Supersu apk to update files.
    9. Reboot.


    Q: S6 Edge/G Flex 2/M9/other arm64 devices?
    A: We will look into them soon :D
    S6 Edge: Done
    M9: WIP
    G Flex 2/others: pending

    Q: I need a video to guide me through
    A: Check out this one: https://youtu.be/_Ezh7Oi-jyM
    (Note: these are for earlier version)
    https://www.youtube.com/watch?v=gNdWX31Sqd8
    and this one: http://youtu.be/eAQ4WBg9xj0

    To all sent me PM: I'm sorry that the reply could be delayed. Currently we are busy working on supporting of new ROMs and fixing bugs. To all those providing useful info/suggestion, thanks a ton!
    49
    Closure

    All,

    I with the knowledge and permsion of the OP am closing this thread.

    Why???

    1. The topics go far and wide compared to what the OP is about. It doesn't seem to stay on Topic.

    2. Several times I see negative comments towards new users when asking questions. Instead of just answering we tend to be negative. I dont like this type of behavior. Read the Rules....

    3. The OP is no longer going to add any additonal firmwares to ping-pong. The app is where it's at, no more.

    4. This exploit only works for: Verizon S6/S6 Edge Android 5.0.2 OC3/OE2 with a kernel date before May 12th!!!
    This will not work on Android 5.1.1, not now, not ever.


    5. Please, Please read the OP, it truly does explain how to use this great exploit..

    6. If you have questions, go to the Q&A section to ask. If you post a Question in the General Section it will be moved.

    7. If you have issue of me closing this, or comments I have made.. PM me.. I love feedback....

    And finally a huge big thanx to @idler1984 for providing this tool and a way for many of us to Root and enjoy our S6/S6 Edge's.
    25
    I see alot of quetions about some of the steps.. So i added some comments to hopefully make it a little clearer..

    CHEERS TO OP, awesome job..

    1. Download supersu.7z and extract it. You will get the files needed to install Supersu.
    (you need adb in your path or extract these files where your adb is installed in)
    2. Using adb to push su and busybox (if not installed) to /data/local/tmp.

    In a Command Window(PC)
    3. Type: (exactly)

    Hit Enter after each line to enter the command.

    Code:
    adb push su /data/local/tmp [Hit Enter/Return]
    adb push busybox /data/local/tmp [Hit Enter/Return]

    4. Type: (This puts you into adb session people mention)

    Code:
    adb shell [Hit Enter/Return]

    5. Type: (This puts you in superuser mode)
    Code:
    su

    * Phone May ask for adb premisison Answer Grant/Yes.

    Code:
    mount -o remount,rw /system
    cat /data/local/tmp/su >/system/xbin/daemonsu && chmod 0755 /system/xbin/daemonsu
    cat /data/local/tmp/busybox >/system/bin/busybox && chmod 0755 /system/bin/busybox
    daemonsu -d &
    (Don't close this su session window!!!)

    6. Open Kinguser, go to Settings -> Root authorization setting -> Remove Root permission. Click to remove root permission. Your su session should be still running.
    7. Uninstall Kinguser app. (Settings->Application Manager->All->Kinguser)
    8. Go back to the su session and run following commands to replace su and cleanup:

    9. Type
    Code:
    cat /data/local/tmp/su >/system/xbin/su && chmod 0755 /system/xbin/su
    busybox chattr -ia /system/bin/ddexe
    busybox chattr -ia /system/bin/ddexe_real
    cat /system/bin/ddexe_real >/system/bin/ddexe
    busybox chattr -ia /system/xbin/ku.sud
    rm /system/xbin/ku.sud
    rm /system/xbin/pidof

    10. Install Supersu apk
    11. Open Supersu apk to update files.
    12. Reboot.

    Ensure you type it exactly. don't capalize letters. type the exact!!!
    23
    Here is how you root g925t and g920t on 5.1.1 without tripping knox. All credit for rooting method go to original developers. I in no way take any credit for their hard work whatsoever.

    Download These Files

    1. Samsung USB Drivers (Click Here)
    2. Odin v3.10.6
    3. SuperSu v2.49
    4. UniKernel
    5. Auo's v4 kernel
    6. Auo's TWRP v12
    7. MOD EDIT: Sorry, Samsung have requested this link be removed.
    7b. MOD EDIT: Sorry, Samsung have requested this link be removed.



    If you plan on using the Unikernel to root your g925t or g920t on 5.1.1 use these steps

    1. Install Samsung USB Drivers if necessary.
    2. Put phone into download mode. Power phone off then press and hold Volume down, home and power keys at same time until you see warning screen then let go and hit volume up one time.
    3. Plug phone in and wait for drivers to install if necessary.
    4. Open odin you should now see phone's modem port highlighted in blue.
    5. Click on BL tab and select correct sboot.bin that you downloaded above. Then click start.
    6. When phone comes back on power off again and put into download mode.
    7. Open odin again and this time select AP tab and select UniKernel file and click start.
    8. That is it!!! When it comes back on phone will be rooted. To verify that knox has not been tripped go back to download mode and it should still say KNOX WARRANTY: 0 (0X0000)


    If you plan on using Aou's Kernel and TWRP to root your G925T on 5.1.1 (DO NOT USE THIS FOR G920T) use the steps below

    1. Install Samsung USB drivers if necessary.
    2. Copy and Paste SuperSU v2.49 on the root folder of your phone's internal memory.
    3. Put phone into download mode. Power phone off then press and hold Volume down, home and power keys at same time until you see warning screen then let go and hit volume up one time.
    4. Plug phone into computer and let drivers install if necessary.
    5. Open odin and click on BL tab and select sboot.bin file for g925t and click start.
    6. When phone is back on put back into download mode again.
    7. Open odin again and this time select AP tab and flash Aou's TWRP file and hit start.
    8. When phone is back on put phone into download mode one last time.
    9. Open odin and select AP tab and select Aou's v4 kernel and click start.
    10. When phone is back on unplug it and power it off and put into recovery mode (Volume up, home and power keys)
    11. When TWRP recovery is open click on install tab and select supersu file and swipe to flash it. then reboot phone to system.
    12. That is it!!! When it comes back on phone will be rooted. To verify that knox has not been tripped go back to download mode and it should still say KNOX WARRANTY: 0 (0X0000)

    IT IS VERY IMPORTANT THAT YOU FLASH THE FILES IN THE ORDER THE INSTRUCTIONS TELL YOU TO FLASH THEM!!!

    ---------- Post added at 11:12 PM ---------- Previous post was at 11:11 PM ----------

    If for some reason after you flash UniKernel and phone screen turns white after on main screen for few seconds Just flash Aou's v4 kernel. That will fix that issue if it happens and you will still be rooted.
    14
    All.... READ THIS

    I am gonna give you a friendly reminder... becuase I beleive a few have forgotten..

    1. Be civil, no cursing, trying to put users down

    2. Keep off topic out of here.. You want a dicussion about the exploit, create a new thread and talk away.. This thread was for the OP to add devices. there is so much banter back and forth that users can't figure out whats going..

    I am being very nice... So many posts could be removed.. Lets stay on topic which is adding device support for the Root method.

    Thank you... If you have an issue with this.. pm me......

    Forum Moderator
    gunthermic