Root Bionic / Razr with Ice Cream Sandwich from OSX

Dan Rosenberg (@djrbliss), a security researcher, recently published an exploit for Motorola RAZR devices running Ice Cream Sandwich which allows you to gain root access.

Ice Cream Sandwich is about to be released for the Motorola Bionic, and fortunately Dan’s vulnerability exploit works for the Bionic also.
Unfortunately, it only run on MS Windows, so I modified his script into a bash script for running in Linux / OSX, which you can download run.sh, here.

You need to download Dan’s code first and unzip it, and then download this run.sh into the same directory.
The script requires to you have the android-sdk installed locally so you can get the adb binary. Dan packages that up in his code for Windows but I don’t have it available for download here. Once you have it, make sure the path to the adb binary is correct in run.sh

Once those steps are complete, just run: bash run.sh and it should just work!

2 thoughts on “Root Bionic / Razr with Ice Cream Sandwich from OSX

  1. Reply
    Crash - August 1, 2012

    I’m getting this:

    CrashBook-Pro-II:platform-tools Crash$ bash /Users/Crash/Documents/Droid\ Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh
    [*]
    [*] Motorola Bionic/Razr ICS Root Exploit (Linux/OSX version)
    [*] by Avleen Vig (@avleen) based on work by:
    [*] by Dan Rosenberg (@djrbliss)
    [*]
    [*] Before continuing, ensure USB debugging is enabled, and that your
    [*] phone is connected via USB.
    [*]
    [*] Press enter to root your phone…

    [*]
    [*] Waiting for device…
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 37: adb: command not found
    [*] Device found.
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 41: adb: command not found
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 42: adb: command not found
    [*] Rebooting device…
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 45: adb: command not found
    [*] Waiting for device to reboot…
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 47: adb: command not found
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 49: adb: command not found
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 50: adb: command not found
    [*] Rebooting device again…
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 53: adb: command not found
    [*] Waiting for device to reboot…
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 55: adb: command not found
    [*] Attemping persistence…
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 58: adb: command not found
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 59: adb: command not found
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 60: adb: command not found
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 61: adb: command not found
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 62: adb: command not found
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 63: adb: command not found
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 64: adb: command not found
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 65: adb: command not found
    [*] Cleaning up…
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 68: adb: command not found
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 69: adb: command not found
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 70: adb: command not found
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 71: adb: command not found
    [*] Rebooting…
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 74: adb: command not found
    /Users/Crash/Documents/Droid Bionic/androidsdk/platform-tools/razrs_edge_windows/run.sh: line 75: adb: command not found
    [*] Exploit complete!
    [*] Press any key to exit.

    Any ideas? ADB is installed and working in terminal. When I run “./adb devices” it shows empty. Bionic is plugged in, set as MTB, with debugging enabled, and non-market sources checked.

    1. Reply
      Av - August 1, 2012

      Sounds like you have two problems:
      1. adb is installed but isn’t in your $PATH. Which directory is the adb command in? In the script you’ll see this line:
      alias adb=~/android-sdks/platform-tools/adb
      You need to change the part after the “=” to the full path to adb.

      2. adb isn’t picking up your bionic. Try these steps:
      mkdir ~/.android
      echo 0x22b8 >> ~/.android/adb_usb.ini
      adb kill-server
      adb devices

      the adb_usb.ini file tells ADB which vendor IDs to look for, the next two commands restart the adb daemon.

Leave a Reply

Your email address will not be published. Required fields are marked *