search

RootMyTV / RootMyTV.github.io

RootMyTV is a user-friendly exploit for rooting/jailbreaking LG webOS smart TVs.
https://RootMy.TV
MIT License
2.24k stars 64 forks source link

Any method to reroot my LG TV? or alternative way to Hard-Reset #139

Closed p2pdownsbrz closed 9 months ago

p2pdownsbrz commented 9 months ago

Hi, is there any way to overwrite the root or jailbreak, I already did the jailbreak on the TV, everything went fine, but when trying to update the chromium through overlays it ended up going very wrong, now due to my inexperience and my own mistakes when using the root I can no longer access ssh, telnet and apps, however, it still turns on and works hdmi-CEC with firetv, and connects to the internet via ethernet, and when I try to root, the confirmation window appears if you want to allow rootmytv access the TV, meanwhile the browser shows the following log: 0.Connecting...

  1. Connected, registering... Accept prompt on the TV.
  2. Registered - looking for vulnerable apps...
  3. Found com.webos.app.acrcard
  4. Found com.webos.app.alibaba
  5. Found com.webos.app.facebooklogin
  6. Launching com.webos.app.alibaba...
  7. Launch result: {"type":"response","id":"1707060559212","payload":{"returnValue":true,"id":"com.webos.app.alibaba","sessionId" :"Y29tLndlYm9zLmFwcC5hbGliYWJh"}} The TV does not restart after this. I'm wondering if it's possible to modify the rootmytv script to reinstall the webosbrew app and root access or be able to activate telnet or ssh again, the webosbrew apps disappeared and therefore I couldn't access any app, I can only use the hdmi function, menu TV settings won't open, so I couldn't initiate a hard reset... . I'm aware that the error was completely mine, but I'd be grateful if anyone has any solution or method for me to at least try a hard reset... TV model: 49UK6310PSE, I don't know what was the last WebOS update I did before making this mess . (I'm using an online translator, English is not my native language, so if you can understand it, please ignore the writing errors).
throwaway96 commented 9 months ago

How exactly did you try to "update the chromium through overlays"?

What is the firmware version ("software version") of the TV?

You should be able to use an SSAP client to manually do the same things RootMyTV does.

That model uses an LM18A SoC, and (the relevant part of) the OTAID is W18A. Your TV will be vulnerable to crashd since LG has not yet released any patched firmware for W18A.

p2pdownsbrz commented 9 months ago

throwaway96 First of all, thank you very much for responding, and you responded very quickly! I updated it almost 3 years ago, I think via USB, but when I looked on the website, there was no firmware available for my TV model 49UK6310PSE I don't remember all the steps I followed, but I got some instructions similar to those on this website https://www.webosbrew.org/pages/filesystem-overlays.html#keeping-overlays-persistent, I made one or more init scripts. I don't remember which version of Chromium I used, but I think I must have used the wrong Arm architecture, I was very noob, I think it's been over 2 years since I did this, so I don't remember in detail. I tested this SSAP demo on a simple http server, it worked, the TV screen appeared in the laptop's web browser. github.com/throwaway96/webos-ssap-web

I don't know how to use CLI commands via SSAP, the TV screen was mirrored on the laptop's browser, will I need to edit any of the files to be able to pass the commands? would it be the luna-send commands? I believe that if I remove the init scripts the TV returns to normal, but I don't know how to do it. I will read the links you sent more carefully now. Thank you very much. Any additional tips, specific or vague, are very welcome. I'm a linux user (Distro based on archLinux), so if you have any .sh script that speeds up the removal of my changes, or one that allows me to regain telnet or ssh access, or a shell via ssap, any tips or additional instructions , are very welcome. , which appear to be disabled. I checked with NMAP. my main goal is to remove the init scripts, and then reinstall rootmytv/webosbrew.

I tried to get webos_rsa using http://:9991/webos_rsa. did not work

For now I'm going to edit stage3.sh to remove my init scripts... but I'm not confident in being able to make script.sh run on the TV...

throwaway96 commented 9 months ago

Have you tried to install Developer Mode from the LG store?

What's the firmware version?

p2pdownsbrz commented 9 months ago

@throwaway96, I'm not sure, I think the last update I made was before 2022.. I don't have the Developer app and I don't have the webosbrew app either, someone here at home uninstalled it, it wasn't me. that ssap demo available in the git repository, I tested it, it captured the screen in real time, very little delay. when I try to open any app, it doesn't go beyond the splashscreen... all the apps that are installed don't start... in short, the only function I can use on the TV is the HDMI function (with or without CEC) and control volume, power on or Turn off the TV, and give ok to some dialogs, sometimes the dialog doesn't even appear, just the empty stripe or popup with the allow or deny or ok button. Take a look at the dialogue. IMG-20240205-164445-071

Is there any way to connect a Linux shell or terminal via SSAP? I can make small html edits, but I don't have javascript knowledge, at most I can install npm/nodejs modules

throwaway96 commented 9 months ago

Well, you're certainly in an interesting situation. It would help to know exactly what you installed, what version of RootMyTV you used, and what version of Homebrew Channel you had installed.

If I understand correctly, you don't want to do a factory reset. But you could, right? Or is that broken as well?

It might be easier to help you on Discord. I don't have an invite link right now, but there's one on webosbrew.org.

p2pdownsbrz commented 9 months ago

@throwaway96 rootmytv v2 before you put the .html warning about patched tv. I can't do a factory reset, because I don't have access to the configuration panel or the configuration app, when the configuration window appears, no text appears and I can't interact, and it closes. I would prefer to keep root, really. But my priority is to get the TV working normally again, with or without root enabled.

I remember that Kodi wasn't available on webosbrew either... when I rooted the TV.

Is there a way to pass the hardreset command via SSAP?

are you on Discord @throwawayofcourse57?

throwaway96 commented 9 months ago

are you on Discord @throwawayofcourse57?

No, that's not me. Just say something in #help.

This was ultimately solved by triggering a factory reset ("user reset").

The "private bus via createAlert" feature of webos-ssap-web was used to make a Luna request with a URI of luna://com.webos.service.tv.systemproperty/doUserDefault and payload of {}.

p2pdownsbrz commented 9 months ago

I tested it, everything worked normally again! Thanks again, I forgot to close the issue. :)