How to Root with zergRush

Hole found by: Revolutionary Team (http://forum.xda-developers.com/showthread.php?t=1296916)Getting from hole in adb to phone root: CrimsonSentinal13 (http://forum.xda-developers.com/showpost.php?p=18612430&postcount=1)Step-by-step guide: paxchristos from the Xperia Play forums on xda-developers

Feel free to pass this along to anybody and everybody! (It's been confirmed to work on the Casio Commando and the Xperia Play, if you find another device it works on, pm me on XDA Developers, and I'll update the guide and post drivers if I find them)

Note: When I say, type in "command" I assume that you will hit enter after every command.

1) Turn on (Check the check box for) USB Debugging under Settings->Application->Development

2) Make sure you have a fresh SD Card in (some other exploits (gingerbreak) sometimes manage to screw up the SD Card, I just prefer to be safe)

3) Install the necessary driver (Windows) (Xperia Play) (http://forum.xda-developers.com/attachment.php?attachmentid=756259&d=1319173965)(Casio Commando Drivers) (http://forum.xda-developers.com/attachment.php?attachmentid=756782&d=1319217660)

4) Install Android SDK (if you haven't already) (http://developer.android.com/sdk/index.html)

5) Update Android SDK such that you have the platform-tools folder & adb

6) Download all three files and extract both of the zip files (zergRush.zip, su-3.05-efgh-signed.zip) to a place you'll remember 1. Superuser.apk (http://forum.xda-developers.com/attachment.php?

attachmentid=756081&d=1319159132)2. Su Binary (http://forum.xda-developers.com/attachment.php?

attachmentid=756080&d=1319159132) 1. The su binary itself is located in the system\bin folder of the zip, you don't anything else

in the zipped file.3. zergRush (http://forum.xda-developers.com/attachment.php?

attachmentid=756082&d=1319159132)

7) Open up command prompt

8) Navigate to your platform-tools directory in the android sdk

9) Type in "adb kill-server" (Not necessary, but if you had adb open prior, sometimes it pops up an error)

10) Type in "adb shell"

11) Type in "mkdir /data/local/tmp"

NOTE: If you get this error

1) Type in “rm -r /data/local/tmp”2) Type in “mkdir /data/local/tmp”

12) Type "exit" (this should bring you back to the windows command prompt)

13) Type "adb push "C:\[path to zergRush]\zergRush" /data/local/tmp

14) Type in "adb shell"

15) Type in "chmod 755 /data/local/tmp/zergRush"

16) Type in "/data/local/tmp/zergRush"

This will print out (on the Xperia Play)

If you get this error: (because you didn't rm -r /data/local/tmp earlier)

Type in “rm /data/local/tmp/boomsh”

Type in “rm /data/local/tmp/sh”

Type in “/data/local/tmp/zergRush” and you will get:

17) Type in "adb remount"

18) Type in "adb push “C:\[path to su]\su” /system/bin”

19) Type in "adb push “C:\[path to su]\su” /system/xbin”

20) Type in "adb shell"

NOTE: At this point, the previous $ should be a # as seen above (that means you're running adb as root!!)

21) Type in "chmod 4755 /system/bin/su"

22) Type in "chmod 4755 /system/xbin/su"

23) Type in “exit”

24) Type in "adb install “C:\[Path to Superuser.apk]\Superuser.apk"” Alternatively, type in “adb push “C:\[Path to Superuser.apk]\Superuser.apk" /system/app” if install command does not work.NOTE!!!: YOU WILL NOT GET THE SAME ERROR I DID UNLESS SUPERUSER IS ALREADY INSTALLED. IT'S INSTALLED AS A SYSTEM APP ON MINE AND I DON'T FEEL LIKE F*CKING WITH IT

24) Open up Market in your Xperia Play, Search for "Busybox" install any of the many Busybox installers (I personally used the free "Busybox Installer" (https://market.android.com/details?id=com.jrummy.busybox.installer&feature=search_result#?t=W251bGwsMSwxLDEsImNvbS5qcnVtbXkuYnVzeWJveC5pbnN0YWxsZXIiXQ .. )(Alternatively, I already had one person say that they had an issue installing stuff off Android market partway through rooting, so here's a link for the one I used (in .apk form). Just install it the same way you installed Superuser.apk) link: http://forum.xda-developers.com/attachment.php?attachmentid=759436&d=1319434751

25) Open the Busybox installer app, and install Busybox. It should ask you if it's OK to run this program as Superuser.

26) Type in "adb reboot"

27) And you're rooted!!

28) COMPLETELY OPTION FOR XPERIA PLAY USERS: If you want to keep adb root privileges after you reset, install Insecure ADB (http://forum.xda-developers.com/attachment.php?attachmentid=759434&d=1319434584) If you want to regain ADB root, you'll need to re-run zergRush (pay attention to pages 12/13) after each time you reboot (power cycle) your phoneCASIO COMMANDO USERS: Sorry guys, the developers of Insecure ADB have about as many pages dedicated to the Commando as are on the XDA-Developers... If you want adb root access, you'll need to re-run zergRush.