Replytext not yet in the index
I mean you mentioned that there’s no way to trigger the OOB W if you are from shell or untrusted app context
28 August 2026
Replylike i stated, if now there's context access for RCE
So you mean that you have something already to chain with to handle the selinux context issue?
Replyyeah, completely without rooting the device or using kernel exploits, blah..
隔离进程拥有gid 3009，可以不受限访问/proc，nohello解决不了这个
29 August 2026
Android Hackers
@Asimshad a correction to my claim, i was wrong, i checked my OnePlus EDL/Firehouse package, it did actually contain persist.img however it's bit large, i think Firehose knows how to unpack and gets your stuff back
Reply@Asimshad a correction to my claim, i was wrong, i checked my OnePlus EDL/Firehouse package, it did actually contain persist.img however it's bit large, i think Firehose knows how to unpack and gets your stuff back
i think its a generic persist because flashing stock with msm does nothing
Reply@Asimshad a correction to my claim, i was wrong, i checked my OnePlus EDL/Firehouse package, it did actually contain persist.img however it's bit large, i think Firehose knows how to unpack and gets your stuff back
i had backed up my persist partition via read back mode in msmtool but it does not contain anything other than sensors list