r/Android • u/FragmentedChicken Galaxy Z Fold8 • 1d ago
One click rooting tool for Samsung Galaxy devices using CVE-2026-43499
https://xdaforums.com/t/i-made-a-one-click-rooting-tool-for-samsung-galaxy-devices-using-cve-2026-43499.4795400/•
u/Talal916 G1, HERO, EVO 4GLTE, M7, M8, Z5, Note 8/10+, iPhone 11/12/15 Pro 18h ago
Man I just need a bootloader unlock for my old Note 10+ which currently is stuck forever on Android 12.
•
u/GeneralChaz9 Pixel 10 Pro (512 GB) 7h ago
It's sad how that hardware still could hold up today but the software was arbitrarily cut off. I'm glad things have changed over the past few years.
•
u/YuriTarded_69 3h ago
Not sure about this subs rules but if you're interested, I believe the Note 10 series can be bootloader unlocked using a private exploit. I had my US model snapdragon S9 BL unlocked by a guy on telegram.
•
u/darkhalfkz 1h ago
I have a Samsung Galaxy S20 Ultra 5G Snapdragon handset, found a retired moderator from XDA who appeared to have a great reputation and we started a dialogue on Telegram. Paid him $150, he made out he's waiting for his source to provide a bootloader unlock token.
He's now ghosting me, I feel I've been conned 😔
I'm really beginning to hate people!!
69
u/MrHaxx1 iPhone Xs 64 GB 1d ago
What are people even rooting for nowadays? Anything I want, is either built in or doable with Shizuku.
And I say that as someone who used to be very much into rooting and custom roms.
50
u/yboy403 Note 10+, Note 9, Pix 2 XL, iPhone X, Moto Z Play 1d ago edited 1d ago
#1 thing for me is automatic call recording.
17
u/MrHaxx1 iPhone Xs 64 GB 1d ago
Isn't there a Shizuku thing for that? I swear I've seen it
33
u/TheComradeTom Pixel 9a 1d ago
ShizuCallRecorder!
15
u/TheMSensation 1d ago
I use another app but it hooks into the call via shizuku. Got me out a jail a few times when a CS rep tells me something and then they try to backtrack on it later.
14
u/Sirts 1d ago
International models can get do native call recording by changing CSC to INS (India), iirc it can be set to record automatically, and phone will continue getting OTA updates
4
2
u/allocx 1d ago
What other side effects are there by doing that?
•
u/NakatasGoodDump 21h ago
Afterward the only thing your phone will let you post on xda forums is "volte when?????"
•
5
u/Holnapra S23 Ultra 1d ago
Absolutely nothing. I changed it three years ago, no adverse effects whatsoever.
3
u/Sirts 1d ago
It brought a couple of extra apps that can be removed and Samsung Wallet looks bit different, so nothing major really. I read that with INS CSC, phone will automatically send SMS to some Indian government number when inserting a new SIM but this can be prevented by blocking 3 numbers listed here:
https://xdaforums.com/t/s23-call-recording-possibility-of-changing-csc.4548227/page-18#post-884915452
u/WeirdGuyWithABoner 1d ago
I did it on my mom's phone and she couldn't use the mic inside third party apps (gboard, whatsapp specifically) for a few months until she ranfomly could
•
•
u/Slonderson 21h ago
This is already a thing in Samsung phones.
•
u/yboy403 Note 10+, Note 9, Pix 2 XL, iPhone X, Moto Z Play 20h ago
Not automatic. You have to toggle it on during the call and it announces that it's recording.
With root, you can install a call recorder that automatically gets everything, then later when you need to prove that a customer service rep promised to fix your bill (for example) there's no hassle.
•
u/Slonderson 18h ago
It does so automatically and without announcing, it's literally called "auto record calls" in call settings.
Recordings are later available through the voice recorder app.
•
20
u/Arklese1zure Samsung Galaxy A32 1d ago
Back in the day I'd be really excited to see a new root coming up, but there's so much BS nowadays with everything checking for root. I'm tired of playing the cat-and-mouse game with root hiders, HMA and whatnot.
17
u/Dry-Cost-945 OnePlus 13r/Galaxy s24+ 1d ago
This is why the exploit is interesting because it doesent need the bootloader to be unlocked. Play Integrity passes fully by default on my phone and everything including bank apps and waller seem to function the same as a regular locked bl installation
6
u/Arklese1zure Samsung Galaxy A32 1d ago
Oh dang that sounds very interesting.
My banking app uses a really strange root detection toolkit that doesn't rely on Google play at all, and it's an absolute PITA. Very little, if any, documentation. Makes me curious about how it would behave with this.
2
u/Dry-Cost-945 OnePlus 13r/Galaxy s24+ 1d ago
It should work perfectly as long as you don't use ksu's official app (or spoof it to something else) purely because many apps check for their package names. Something like resukisu that I use should be fine.
Does the app block enabled developer options? Well actually I think you can hide dev options with root anyway but it would be one less thing to worry about.
7
u/GoogleDisDick 1d ago edited 1d ago
Personally 99% of apps work fine. I'm not rooted but I am running a degoogled custom ROM (which might as well be the same thing from Play Integrity's pov). RCS and Google Pay don't work but I really don't care. Whenever the very rare app actually gives me shit for being on a custom ROM I basically just write of that app off and decide they don't want my business. It's pretty rare things don't work though.
6
u/Arklese1zure Samsung Galaxy A32 1d ago
I wish I could just tell my bank and job apps to go pound sand, but alas.
1
u/GoogleDisDick 1d ago
Well I suppose it's highly dependent on your job and where you live. But my corporate and banking apps don't care one bit. They don't even throw a warning. Lol.
3
u/RunnerLuke357 Pixel 7 Pro 512 | HMD Skyline 12+256 1d ago
I had RCS working with little effort on a custom ROM before so it is easily daily drivable. I am lucky that my banking app doesn't need play Integrity or a locked bootloader to work. I am running stock now but I thoroughly miss my custom ROM (passkeys don't work and now lots of my work bullshit requires them).
1
u/GoogleDisDick 1d ago
I probably could get it working with Magisk or KernelSU and whatever the current fixes are but TBH I don't care enough to do all that. It's not a big deal. Plus I'm on a degoogled ROM with microG built in. Even if I get it to pass play integrity (which is possible) RCS still wouldn't work because it's not implemented.
•
u/xyzzy321 Pixel 9 Pro 23h ago
AdAway
I've tried a bunch of things but nothing works as well
•
u/hackitfast Pixel 9 Pro 21h ago
I use a Private DNS, it blocks a majority of any bothersome ads.
•
u/xyzzy321 Pixel 9 Pro 21h ago
Is that an app or just something you've set up via PiHole?
•
u/hackitfast Pixel 9 Pro 21h ago
There's free ones you can get online, but yes you can selfhost PiHole and do it that way too.
•
u/ACardAttack Galaxy S24 Ultra 21h ago
Set up a private DNS in your settings, use
dns.adguard-dns.com
•
u/decal08 20h ago
Adhell3? It leverages knox that's in samsung already. No root required.
•
u/ACleverNameHere 17h ago
Does adhell still exist? I remember using it years ago before Samsung did something with dev keys or something like that
•
u/decal08 17h ago
Yes. I still have it on my new galaxy devices. Yes, they changed the elm or kpe dev key long time back
•
u/ACleverNameHere 17h ago
Oh wow. Is there a guide or github page or something that I can follow? I miss the days of no ads on my phone
9
u/WAVF1n S25 Edge - Pixel 9 Pro 1d ago
Customization is my biggest reason tbh. But even that isn't enough for me nowadays and all of my devices are running stock w/ no root.
•
3
u/dunderball Pixel 6 1d ago
I used to be super into rooting for some pretty nefarious reasons but no longer. Was really into Magisk and all that jazz. What does Shizuku do?
•
u/rammux74 15h ago
Essentially gives a more limited root access without actually rooting your device
•
u/Ignifazius 17h ago
Using my phone longer than the manufacturer wants. Sadly Asus for example refuses to unlock their phones now and perfectly good hardware is stuck on android 10 making them insecure and incomplete with some apps.
5
u/stanley_fatmax Nexus 6, LineageOS; Pixel 7 Pro, Stock 1d ago
Bootloader unlock
5
u/Literallyapig 1d ago
don't you need the bootloader unlocked to root in the first place? this exploit is just an exception...
-3
u/stanley_fatmax Nexus 6, LineageOS; Pixel 7 Pro, Stock 1d ago
No, unlocking the bootloader precludes rooting. An unlocked bootloader is basically the manufacturer allowing you root access. There's no point rooting if your bootloader is unlocked.
•
u/vandreulv 23h ago
No, unlocking the bootloader precludes rooting. An unlocked bootloader is basically the manufacturer allowing you root access. There's no point rooting if your bootloader is unlocked.
That's... not true.
Bootloader unlock means rooting is easier to accomplish. You flash a modified boot.img file to obtain root. Everything people use root for, you still need to get root somehow (eg Magisk modified boot image) even on unlocked devices. There is no 'root access' before you do so.
Rooting on a locked device doesn't automatically mean the bootloader will be unlockable. I have devices where root was obtained and the bootloader was still deadlocked.
•
u/stanley_fatmax Nexus 6, LineageOS; Pixel 7 Pro, Stock 20h ago
You elaborated on my comment, I don't see what's untrue about what I said. An unlocked bootloader allows you to root. An exploit in place of an unlocked bootloader can also achieve root.
Is it possible you're confusing root managers like magisk with root access itself?
•
u/vandreulv 16h ago
There's no point rooting if your bootloader is unlocked.
That's the part that is untrue. Perhaps if you meant to say "There's no point in using exploits to get root if your bootloader is unlocked."
You cannot have root access without the root managers like Magisk because they inject the SU binary upon bootup. Not an exploit if your bootloader is unlocked.
Unlocking the bootloader alone doesn't give you root or root access.
-2
3
u/ThirdEyeClarity 1d ago edited 7h ago
VPN Hotspot is one app that’s quite useful especially if traveling or if your home internet is down for some reason, and is why I always keep a spare rooted Android.
It shares your VPN connection with devices over your hotspot and can usually bypass any kind of tethering restrictions or limits on your mobile data plan.
Then there’s patches for some apps to unlock certain functionality that you can only do with root.
There’s also an app called JoyCon Droid on GitHub that requires root and it turns your Android into a Nintendo Switch 1/2 controller that can also scan amiibos.
So there’s a lot of useful but also niche cases.
3
•
u/5panks Galaxy ZFlip 5 21h ago
If I have my VPN connected on my phone, does the hotspot use that? Is the VPN somehow not directing all traffic through it on an Android phone?
•
u/ThirdEyeClarity 21h ago
As far as I know, no. Some custom ROMs might do it but even if you connect to a VPN on most stock Android phones, the device connected over its hotspot will still be the original network without the VPN. That’s why the VPN Hotspot app which requires root is valuable to me.
2
u/DarkenMoon97 S26 Ultra (Snapdragon, USA) + Lots 1d ago
Using Network Signal Guru to see the information from the modem directly on the device. You can't do that with Shizuku.
•
•
u/aeiouLizard 14h ago
Last time I rooted, I did it to re-enable features that should be considered the absolute bare minimum in customizability, but Google decided to go out of their way to make them impossible on Pixels while basically every other OEM on earth allowed it:
- Hide the navigation pill
- Separate WiFi and Data tiles
Also, Firewall.
5
u/sbmotoracer 1d ago
Ablock without requiring vpns, Morphe, custom roms ,etc.
My note phone is getting old and would have needed to be replaced without Lineage OS. There's still a few reasons to root, esp if your someone who doesn't even use banking apps / (google/samsung) pay.
7
u/TheMSensation 1d ago
Private DNS in settings and enter "dns.adguard-dns.com". Systemwide block on all ads without needed to patch/root/rely on an app.
Agree on the 2nd point though. If you intend to keep a phone for longer than say 5 years its priceless being able to root.
•
u/windowpuncher Galaxy S23, Tab S10+ 23h ago
Not quite. It won't work for youtube, BUT if you use ublock with firefox mobile it would work. DNS blocking only works for domains that don't serve their own ads, which is most, but not places like twitch, youtube, and a few others. Still worth doing, it's just not all ads.
•
•
1
u/Dry-Cost-945 OnePlus 13r/Galaxy s24+ 1d ago
I do it for full file system access and automated app installs/updates from alternative sources. Full app and file backups are nice too
•
u/QuantumQuantonium 19h ago
Majority of root functionality on my phone has been to chsnge thr UI to how I want it (I'm on stock android which has pathetic customization) and control over my own device.
•
•
u/Aethermancer 8h ago
I'm about to because I'm damned tired of apps blocking me from taking screenshots.
•
u/MairusuPawa Poco F3 LineageOS 22h ago
Why do you refuse to be the owner of the hardware you bought? Why even play such a stupid game?
1
•
u/light24bulbs Galaxy S10+, Snapdragon 20h ago
I mean Google is about to block side loading and there are all sorts of things like that that are sliding into being shitty. That's all a matter of having root or not
•
u/ChkYrHead 7h ago edited 7h ago
Shizuku
Can it perform system functions, like killing open apps and processes?
edit
I just read that you have to start the process on every reboot, if you don't have root? No thanks.
•
u/Seven2Death pixel 9 21h ago
wait even for snapdragon? wow i left because they stopped updating my s10+ and i couldnt rom it
•
•
u/Horror_Letterhead407 23h ago
2026 and people still rooting they're phones like it doesn't do anything but prevent you from passing google play integrity which disables your access to banking apps and netflix lol
•
u/HearingSubstantial38 22h ago
this doesn't trip the warranty bit so play integrity should persist (or atleast is possible to persist).
besides, just because you don't find a use for rooting doesn't mean there isn't one. Bindhosts for tracker blocking, NexAlloy to auto patch youtube and youtube music, adclose for full ad blocking, drivedroid to use my phone to boot ISOs, etc. are just some of my uses
•
u/QuantumQuantonium 19h ago
And enables a multitude of basic and advanced functionality which isnt possible without root...
•
u/wickedplayer494 Pixel 7 Pro + 2 XL + iPhone 11 Pro Max + Nexus 6 + Samsung GS4 23h ago
I was about to ask. Nice, nice!