[Tutorial] Rooting LT25i - Xperia V (Unlocked Bootloader)

Search This thread

-SlenderMan-

Senior Member
Sep 14, 2012
627
166
Singapore
How to root Xperia V...

Information:

For 9.0.D.0.484:
1a: Please use the unsecure kernel by spida_singh as it has TWRP
1b: Flash the unsecure kernel using fastboot [fastboot flash boot Xperia.V.TWRP.Kernel.9.0.1.D.0.10.elf]
2: Reboot into TWRP
3: Flash this - SU-Busybox-Installer.zip - gregbradly

For 9.0.D.0.484:
1: Flash the unsecure kernel using fastboot [fastboot flash boot lt25i-unsecure-debuggable.elf]
2: Push SU and Busybox using ADB

Credits:
- championswimmer for unsecure kernel 9.0.D.0.484
- spida_singh for unsecure kernel 9.0.1.D.0.10
- gregbradly for SU-Busybox-Installer.zip

For Locked Bootloader:
 
Last edited:

-SlenderMan-

Senior Member
Sep 14, 2012
627
166
Singapore
If I recall correctly, it doesn't work on locked boot loaders right?

Sent from my LT25i

I am not sure but based on the rootkit, it does work on locked boot loaders. But since it was originally created for 2011 device, i'm not sure if it works for Xperia V with locked bootloader. You can always try and just restore your phone with pc companion if it doesnt work
 

Pacjonek

Senior Member
Mar 24, 2010
257
82
Kraków
I don't have this phone.
But if i were you i would try tricks with downgradge kernel from some Xperia 2012, root and reflash oryginal Xperia V kernel
This works on many (teoretically non rootable) Xperia phones with locked BL
 
  • Like
Reactions: thetitans89

datagubben

Senior Member
Nov 25, 2010
1,410
504
Landskrona
Samsung Galaxy S21
I don't have this phone.
But if i were you i would try tricks with downgradge kernel from some Xperia 2012, root and reflash oryginal Xperia V kernel
This works on many (teoretically non rootable) Xperia phones with locked BL

Only Xperia T (old) firmware can be rooted with Bin4ry, and I don't know if you can flash only the T stock kernel (ftf) on a Xperia V :confused: and then upgrade with flashtools to V kernel again? But I dont dare to try.

If somebody dares, it might work :confused:
 
  • Like
Reactions: thetitans89

cire1980

Senior Member
Dec 28, 2008
88
6
I got a BAD_POOL_HEADER. x_X Not nice that it came in the form of a BSOD.

I'm going to reinstall the ADB drivers and see if it'll be okay.

EDIT: Using the link to install Flashtools, I selected all Sony drivers and installed all of them. The error didn't appear after that.
 
Last edited:

datagubben

Senior Member
Nov 25, 2010
1,410
504
Landskrona
Samsung Galaxy S21
You could also flash the firmware from au's Xperia VL; that's how I got root on my Xperia AX.

Haven't tried with the V yet though.

Interesting! Since AX and V are the same but different internal memory size. :cool:

Maybe some DEVS can read this and help us? :fingers-crossed:
http://xperia-freaks.org/2012/11/20/ax-rooted/

They flash kernel.sin-, loader.sin and system.sin from VL, make root and then flash original firmware again...

(Its japanese but use goole translate or ask the member above).
 

Gasai Yuno

Senior Member
May 11, 2011
713
328
Rausu
Rooting the Xperia V: How-To.

You will need: TRIMMED-LT25i-SOL21_9.0.F.0.195.ftf or the original LT25i-SOL21_9.0.F.0.195.ftf (this FTF has its loader.sin replaced with LT25i's loader.sin; the trimmed version lacks unneeded files like baseband etc. and as such removes unneeded wipe/exclude options, leaving only the three files we actually need) and an LT25i FTF of your choice; the rootkit (this one is "translated" and edited for convenience; do NOT use regular GX/SX rootkits blindly as they require modification).

1. Power the phone up in Flashmode (hold Volume down; connect USB). Using Flashtool, flash LT25i-SOL21_9.0.F.0.195.ftf with:
kernel.sin
loader.sin
system.sin

(Remember to uncheck the wipe options!)

2. Unplug USB. Turn the phone on. Enable USB debugging if it wasn't enabled previously. Connect the phone via USB again.

3. Unpack the Rootkit and start it (run install.bat). Confirm restore of the backup as requested, and press any key in the cmd window. Press any key again; the device will reboot (twice).

4. Run adb shell. To do it, you can open the rootkit folder in Windows Explorer, and shift-Right Click the "files" folder inside it. Choose "Open command window here". Type "adb shell" in that window.

If you're presented with a prompt that ends with "$", type "su".

The prompt should end with "#" now.

Type "echo ro.kernel.qemu=1 > /data/local.prop" and check if the file was created successfully by typing "ls -l /data/local.prop": below you will find an example of what the output looks like.

Code:
C:\Software\Rootkit\files\> adb shell
root@android:/ $ su
su
root@android:/ # echo ro.kernel.qemu=1 > /data/local.prop
echo ro.kernel.qemu=1 > /data/local.prop
root@android:/ # ls -l /data/local.prop
ls -l /data/local.prop
-rw-r--r-- system   system         17 2013-01-15 17:29 local.prop
root@android:/ #
5. Turn the phone off, and connect it in Flashmode again. Using Flashtool, flash your firmware of choice with:
loader.sin
system.sin

(Remember to uncheck the wipe options!)

6. Turn the phone on. Open a command prompt into the files subfolder of the rootkit folder, like in step 4, or return to that window if you haven't closed it.

Type "adb shell". If you get a $ prompt, try "su" to get to "#". Once in adb, type "/data/local/tmp/step2.sh", then "reboot". The phone will reboot.

When it boots back, run adb shell again, and type "/data/local/tmp/step3.sh". You'll witness another reboot or maybe two. You should be rooted now.

Code:
C:\Software\Rootkit\files\> adb shell

root@android:/ # /data/local/tmp/step2.sh
/data/local/tmp/step2.sh
0+1 records in
0+1 records out
57 bytes transferred in 0.001 secs (57000 bytes/sec)
root@android:/ # reboot

C:\Software\Rootkit\files\> adb shell

root@android:/ # data/local/tmp/step3.sh
data/local/tmp/step3.sh
43+1 records in
43+1 records out
22364 bytes transferred in 0.002 secs (11182000 bytes/sec)
1647+1 records in
1647+1 records out
843503 bytes transferred in 0.123 secs (6857747 bytes/sec)
2119+1 records in
2119+1 records out
1085140 bytes transferred in 0.089 secs (12192584 bytes/sec)

7. Turn the phone off, and connect it in Flashmode again. Using Flashtool, flash your firmware of choice with:
kernel.sin
loader.sin

(Remember to uncheck the wipe options!)

Do NOT skip this step: you need the LT25i kernel on your LT25i system!

8. Let's finish.

We will need adb shell once again. This time, you will need to type a few lines as follows:

Obtain root:
su

Remount /system:
mount -o remount,rw -t ext4 /dev/block/mmcblk0p12 /system

Remove /data/local.prop since it's a security hole; this is important and is normally done by the rootkit's step 3, but we needed to save the file to get to keep root access on our LT25i firmware:
rm /data/local.prop

And finally reboot:
reboot

Code:
G:\Android\LT25i\rootkitGXSX_v3\files>adb shell
shell@android:/ $ su
su
shell@android:/ # mount -o remount,rw -t ext4 /dev/block/mmcblk0p12 /system
mount -o remount,rw -t ext4 /dev/block/mmcblk0p12 /system
shell@android:/ # rm /data/local.prop
rm /data/local.prop
shell@android:/ # reboot
reboot
Done. You now have busybox, Superuser and su on your stock LT25i firmware.

Remember to clean up those pesky au apps.
 
Last edited:

datagubben

Senior Member
Nov 25, 2010
1,410
504
Landskrona
Samsung Galaxy S21
screenshot2013011518214.png


Thank you very much Gasai for nice tutorial. :good:

It works for me and I got root on locked bootloader, but sometimes I have reboot so maybe I did something wrong.

Please copy your post and make a thread in General section.

+1
 

Top Liked Posts

  • There are no posts matching your filters.
  • 6
    How to root Xperia V...

    Information:

    For 9.0.D.0.484:
    1a: Please use the unsecure kernel by spida_singh as it has TWRP
    1b: Flash the unsecure kernel using fastboot [fastboot flash boot Xperia.V.TWRP.Kernel.9.0.1.D.0.10.elf]
    2: Reboot into TWRP
    3: Flash this - SU-Busybox-Installer.zip - gregbradly

    For 9.0.D.0.484:
    1: Flash the unsecure kernel using fastboot [fastboot flash boot lt25i-unsecure-debuggable.elf]
    2: Push SU and Busybox using ADB

    Credits:
    - championswimmer for unsecure kernel 9.0.D.0.484
    - spida_singh for unsecure kernel 9.0.1.D.0.10
    - gregbradly for SU-Busybox-Installer.zip

    For Locked Bootloader:
    5
    Rooting the Xperia V: How-To.

    You will need: TRIMMED-LT25i-SOL21_9.0.F.0.195.ftf or the original LT25i-SOL21_9.0.F.0.195.ftf (this FTF has its loader.sin replaced with LT25i's loader.sin; the trimmed version lacks unneeded files like baseband etc. and as such removes unneeded wipe/exclude options, leaving only the three files we actually need) and an LT25i FTF of your choice; the rootkit (this one is "translated" and edited for convenience; do NOT use regular GX/SX rootkits blindly as they require modification).

    1. Power the phone up in Flashmode (hold Volume down; connect USB). Using Flashtool, flash LT25i-SOL21_9.0.F.0.195.ftf with:
    kernel.sin
    loader.sin
    system.sin

    (Remember to uncheck the wipe options!)

    2. Unplug USB. Turn the phone on. Enable USB debugging if it wasn't enabled previously. Connect the phone via USB again.

    3. Unpack the Rootkit and start it (run install.bat). Confirm restore of the backup as requested, and press any key in the cmd window. Press any key again; the device will reboot (twice).

    4. Run adb shell. To do it, you can open the rootkit folder in Windows Explorer, and shift-Right Click the "files" folder inside it. Choose "Open command window here". Type "adb shell" in that window.

    If you're presented with a prompt that ends with "$", type "su".

    The prompt should end with "#" now.

    Type "echo ro.kernel.qemu=1 > /data/local.prop" and check if the file was created successfully by typing "ls -l /data/local.prop": below you will find an example of what the output looks like.

    Code:
    C:\Software\Rootkit\files\> adb shell
    root@android:/ $ su
    su
    root@android:/ # echo ro.kernel.qemu=1 > /data/local.prop
    echo ro.kernel.qemu=1 > /data/local.prop
    root@android:/ # ls -l /data/local.prop
    ls -l /data/local.prop
    -rw-r--r-- system   system         17 2013-01-15 17:29 local.prop
    root@android:/ #
    5. Turn the phone off, and connect it in Flashmode again. Using Flashtool, flash your firmware of choice with:
    loader.sin
    system.sin

    (Remember to uncheck the wipe options!)

    6. Turn the phone on. Open a command prompt into the files subfolder of the rootkit folder, like in step 4, or return to that window if you haven't closed it.

    Type "adb shell". If you get a $ prompt, try "su" to get to "#". Once in adb, type "/data/local/tmp/step2.sh", then "reboot". The phone will reboot.

    When it boots back, run adb shell again, and type "/data/local/tmp/step3.sh". You'll witness another reboot or maybe two. You should be rooted now.

    Code:
    C:\Software\Rootkit\files\> adb shell
    
    root@android:/ # /data/local/tmp/step2.sh
    /data/local/tmp/step2.sh
    0+1 records in
    0+1 records out
    57 bytes transferred in 0.001 secs (57000 bytes/sec)
    root@android:/ # reboot
    
    C:\Software\Rootkit\files\> adb shell
    
    root@android:/ # data/local/tmp/step3.sh
    data/local/tmp/step3.sh
    43+1 records in
    43+1 records out
    22364 bytes transferred in 0.002 secs (11182000 bytes/sec)
    1647+1 records in
    1647+1 records out
    843503 bytes transferred in 0.123 secs (6857747 bytes/sec)
    2119+1 records in
    2119+1 records out
    1085140 bytes transferred in 0.089 secs (12192584 bytes/sec)

    7. Turn the phone off, and connect it in Flashmode again. Using Flashtool, flash your firmware of choice with:
    kernel.sin
    loader.sin

    (Remember to uncheck the wipe options!)

    Do NOT skip this step: you need the LT25i kernel on your LT25i system!

    8. Let's finish.

    We will need adb shell once again. This time, you will need to type a few lines as follows:

    Obtain root:
    su

    Remount /system:
    mount -o remount,rw -t ext4 /dev/block/mmcblk0p12 /system

    Remove /data/local.prop since it's a security hole; this is important and is normally done by the rootkit's step 3, but we needed to save the file to get to keep root access on our LT25i firmware:
    rm /data/local.prop

    And finally reboot:
    reboot

    Code:
    G:\Android\LT25i\rootkitGXSX_v3\files>adb shell
    shell@android:/ $ su
    su
    shell@android:/ # mount -o remount,rw -t ext4 /dev/block/mmcblk0p12 /system
    mount -o remount,rw -t ext4 /dev/block/mmcblk0p12 /system
    shell@android:/ # rm /data/local.prop
    rm /data/local.prop
    shell@android:/ # reboot
    reboot
    Done. You now have busybox, Superuser and su on your stock LT25i firmware.

    Remember to clean up those pesky au apps.
    3
    Confirmed, you can obtain root by flashing the V to VL firmware, rooting that, and going back.

    Instructions later.
    1
    My kernel is already rooted
    You just installed su and busybox

    The title is misleading

    Sent from my Xperia S using xda app-developers app
    1
    Recently got OTA FW 9.1.A.1.145 and can't root by tutorial from first post. After some searching I found working rooting toolkit from DooMLoRD Easy Rooting Toolkit.