Hey,
Ok, I hope your not disapointed couse its an extremly simple process.
1. We rooted the TV from an old firmware with the SamyGo tutorial. Thanks so much for this!!
2. If you wanna keep your root shell persistent, you need to put it somewhere where you can start it and where it does not get deleted.
By looking into the Firmware-Upgrade Images we saw, that basically everything gets overwritten beside the installed Apps.
Here the "native" apps from Samsung are apperantly allowed to use "real code". So we picked one of them. The Web-Browser App was perfect for this, couse we found an launcher.sh script in the bin folder. The App was for us at the following location: "/mtd_down/widgets/normal/20111000001/".
3. Make it persisten. First we updated the browser to the newest version, so we avoid an update after we changed some stuff at the browser.
Next we need a tool which allows us to make a bind shell after all the Samy stuff is gone. So we were preatty lazy and copied the busybox from the samy binaries. YOU NEED TO COPY THE busybox FROM THE SAMY BINS not the one form /bin/busybox couse this one has less functions.
So copy (cp) the busybox from your SAMY bin folder to:
Code: Select all
/mtd_down/widgets/normal/20111000001/bin/
Now we make our shell. First we tried to add our shell to louncher.sh... didnt work, so we went more drastic and replaced the WebkitBrowserLauncher .
Make all the Steps.
1. Connect to your tv and:
Code: Select all
cp [... Your SamyGo Busybox, somewhere in the SamyGo Binaries] /mtd_down/widgets/normal/20111000001/bin/
cd /mtd_down/widgets/normal/20111000001/bin
mv WebkitBrowserLauncher WebkitBrowserLauncher.backup
2. Create local a file called "WebkitBrowserLauncher" (NO .SH or anything else !!) with following content:
Code: Select all
#!/bin/sh
/mtd_down/widgets/normal/20111000001/bin/busybox nc -lp1707 -e "/mtd_down/widgets/normal/20111000001/bin/sh" &
/mtd_down/widgets/normal/20111000001/bin/WebkitBrowserLauncher.backup
3. Upload the created file with FTP into the /mtd_down/widgets/normal/20111000001/bin folder. Make sure its still called WebkitBrowserLauncher
4. Create a busybox sh + make everything executable
Code: Select all
cd /mtd_down/widgets/normal/20111000001/bin
ln -s ./busybox sh
chmod +x *
5. TEST IT BEFORE YOU UPGRADE
Herefore your TV needs network connection. Start the browser in the smart hub.
and run from your machine (nc or telnet wor whatever you like)
nc [TVIP] 1707
If it works, upgrade the firmware
i had to do it over usb, obgrade over network didnt work
If you have any questions you can ask ofcourse
Have fun!