[i=s] 本帖最后由 hexpor 于 2015-1-25 11:41 编辑 [/i]
adb push device.db /data/local/tmp
adb push su /data/local/tmp
adb push busybox /data/local/tmp
adb push run_root_shell /data/local/tmp
adb push unlock_security_module /data/local/tmp
adb shell
$ cd /data/local/tmp
$ chmod 777 *
$./unlock_security_module
$./run_root_shell
#mount -o rw,remount /system
dd if=/data/local/tmp/su of=/system/xbin/su
dd if=/data/local/tmp/busybox of=/system/xbin/busybox
chown root:root /system/xbin/su
chmod 6755 /system/xbin/su
chmod 755 /system/xbin/busybox