Kindle 4 NT (4.1.0 fw) Hacking help

[geekmaster]

The framework login is very restricted. About the only thing it is good for is "cat /etc/shadow". Then copy your scrollback buffer into a shadow file on the host PC, and crack it with John the Ripper and my fiona wordlist.

But the easiest way to get the root password is to use the web page that lets you type in your kindle serial number and it tells you your root password. Look in the Tools index wiki.

EDIT: Okay, I looked up the password links for you:
https://wiki.mobileread.com/wiki/Tools_Index#Password

You can get your serial number in the settings "information" menu, or by using Sir Alex's KDT program.

We do not encourage ad removal, but that information is not forbidden here, and you can find links to threads and kindle hacking wikis in the "kindle index wikis" that tell you how to do it. Start at the "master index" sticky thread...

[jack_slapped]

Thanks for your speedy response. I had actually been to the password generator an hour or two ago and tried the password it generated for me. It didn't work. So I looked at it again after you posted it and realized I had typed in the letters for my serial number in lowercase. Capital letters totally matter in hex. Smacks forehead. What a noobie mistake. So I tried the new password and it worked like a charm. Root access and entered the code in fine and bam. No ads. Thanks a bunch! You have been extremely helpful.

[pinchajetas]

Originally Posted by Gondolkodo

You just have to SSH into the kindle (e.g. with the USBnet-methode) and then create a RUNME.sh in the /mnt/us with the following content:

mntroot rw
if [ ! -f /var/local/adunits.bkp ]; then
	mv /var/local/adunits /var/local/adunits.bkp
	touch /var/local/adunits
fi
mntroot ro

Save, exit and make the following:

chmod +x /mnt/us/RUNME.sh; mntroot rw

Make a backup about the mntus.params file with this:

cp /var/local/system/mntus.params /var/local/system/mntus.params.BKP

Extend the original mntus.params with the followings:

if [ -e /mnt/us/RUNME.sh ]; then
	sh /mnt/us/RUNME.sh
fi

If you would like to see a log then change the "sh /mnt/us/RUNME.sh" with "sh /mnt/us/RUNME.sh > /mnt/us/RUNME.log"

If you are ready, just create and link the screensaver folder, just like before:

mkdir /mnt/us/screensaver
mount /dev/mmcblk0p1 /mnt/base-mmc
mv /mnt/base-mmc/opt/amazon/screen_saver/600x800 /mnt/base-mmc/opt/amazon/screen_saver/600x800.bkp
ln -sfn /mnt/us/screensaver /mnt/base-mmc/opt/amazon/screen_saver/600x800
exit

As far as I know this is the only black/hackway and there's no "block the ads" and "put screensavers" hack.
I tried it on my own K4 NT SO, works.

Hi guys, I have a problem with this code, and I hope you can help me with it:

if [ -e /mnt/us/RUNME.sh ]; then
	sh /mnt/us/RUNME.sh
fi

I only get this answer:

"/mnt/us/RUNME.sh: line 6: syntax error: unexpected end of file (expecting "then")"

So I changed it to:

if [ -e /mnt/us/RUNME.sh ]; 
then [ sh /mnt/us/RUNME.sh]
fi

But I get this:
"sh: /mnt/us/RUNME.sh: unknown operand"

What should I do to get it right?

[knc1]

Change the line endings from Windows to Unix.

[pinchajetas]

Originally Posted by knc1

Change the line endings from Windows to Unix.

OK but how can I do that? :S

[knc1]

Originally Posted by pinchajetas

OK but how can I do that? :S

Depends on what text editor you are using, in some cases what version of the text editor you are using.

Note (no pun intended): I recently read a post that line ending conversion was taken out of notepad++ (the prior standard editor).

Here is a good one (text editors are a personal choice, everyone has their own favorite):
http://www.geany.org/Download/Releases#windows

Pick the binary that is named "full installer ..." and it will just work.

[twobob]

Hi Knc1. Just to clarify they actually haven't removed it.

They just moved the menu item into something like "EOL OPERATIONS -> CONVERT -> UNIX" as opposed to where it used to live in the main toolbar.

My apologies if the post was misleading, I'll go and amend it with this extra info.

So, yeah, what Knc1 said. or you can also use Notepad++.

CAVEAT just be aware that IF you use Winscp to transfer files ONTO your device.

Winscp will automatically
a) fix your line-ending to Unix
b) resolve all symbolic links to their parent object when copying onto FAT (cool ey )

but this has an implication. Check that you actually do have the right file types before packaging it up for general use as others may transfer it with native unix tools. Hope that helps.

[knc1]

Geany is a Lua / GTK app -
It might "just work" on a Kindle with a touch of re-compiling for ARM.

[geekmaster]

Originally Posted by pinchajetas

...
So I changed it to:

if [ -e /mnt/us/RUNME.sh ]; 
then [ sh /mnt/us/RUNME.sh]
fi

But I get this:
"sh: /mnt/us/RUNME.sh: unknown operand"

What should I do to get it right?

Add a space before the right bracket:

if [ -e /mnt/us/RUNME.sh ]; 
then [ sh /mnt/us/RUNME.sh ]
fi

Also, double brackets are native to the shell, where "[" is an external program located in /bin/. I would use
"if [[ -e /mnt/us/RUNME.sh ]]" instead (even though it is less "condensed")...

[pinchajetas]

Thank you so much, knc1. I did change the line endings from Win to Unix on Vim and it work.

And, geekmaster, I did it before, but the real problem was the line endings.

[waterlubber]

How do you get SSL access? I know you nees to get into DIAGS, but how?

[twobob]

Originally Posted by waterlubber

How do you get SSL access? I know you nees to get into DIAGS, but how?

SSL or SSH?

https://wiki.mobileread.com/wiki/Kindle4NTHacking

Give that a read.

(http://en.wikipedia.org/wiki/Secure_Sockets_Layer) is ssl. I don't think you mean that but best to ask...

I don't think up need access to DIAGs (unless your device is fubarred in some way) to simply gain SSH access... DIAGS is generally for more "maintenance" level tasks.

in essence you need to ensure that you either a) installed a hack that manages the installation/starting/settings for you

or b)

install/start the dropbear/authentication service yourself and manage the firewall rules.

I just did exactly this in a VERY stubborn 5 B011.
Hopefully you will have an easier ride
but I did get it done.

[feelmaroon]

Hello. As I'm working on debricking my Kindle 4 (still no luck but working on it), I grabbed my roommate's newer k4 black with 4.1 to put the universal hack on it. I used the "universal method"..Placed the data.tar.gz, ENABLE_DIAGS and diagnostic_logs to the Kindle's USB drive's root...got into diagnostics mode and got to the "jailbreak, wait a moment while your kindle is being freed" screen and then restarted back into diagnostics mode, selected "D) Exit, Reboot or Disable Diags" again Select "D) Disable Diagnostics" and "Q) To continue"

At this point the ""You are Jailbroken" never came on and it just went straight back to my main screen with my collections. Do any of you have any suggestions what i did wrong and what i could do at this point to get it jailbroken? I don't want to proceed and screw anything more up like I did with my own K4. Thanks for any help. All is want is to ditch these ridiculous screensavers and put my own on.

[waterlubber]

Originally Posted by Gondolkodo

You just have to SSH into the kindle (e.g. with the USBnet-methode) and then create a RUNME.sh in the /mnt/us with the following content:

mntroot rw
if [ ! -f /var/local/adunits.bkp ]; then
	mv /var/local/adunits /var/local/adunits.bkp
	touch /var/local/adunits
fi
mntroot ro

Save, exit and make the following:

chmod +x /mnt/us/RUNME.sh; mntroot rw

Make a backup about the mntus.params file with this:

cp /var/local/system/mntus.params /var/local/system/mntus.params.BKP

Extend the original mntus.params with the followings:

if [ -e /mnt/us/RUNME.sh ]; then
	sh /mnt/us/RUNME.sh
fi

If you would like to see a log then change the "sh /mnt/us/RUNME.sh" with "sh /mnt/us/RUNME.sh > /mnt/us/RUNME.log"

If you are ready, just create and link the screensaver folder, just like before:

mkdir /mnt/us/screensaver
mount /dev/mmcblk0p1 /mnt/base-mmc
mv /mnt/base-mmc/opt/amazon/screen_saver/600x800 /mnt/base-mmc/opt/amazon/screen_saver/600x800.bkp
ln -sfn /mnt/us/screensaver /mnt/base-mmc/opt/amazon/screen_saver/600x800
exit

As far as I know this is the only black/hackway and there's no "block the ads" and "put screensavers" hack.
I tried it on my own K4 NT SO, works.

:t hanks:
:t hanks::tha nks:
YOU ARE AWESOME!!! DIDN'T EVEN HAVE TO DO A FACTORY RESET!!!

[la_tristesse]

Originally Posted by nikiiiva

Found them. Here there are, https://www.mobileread.com/forums/sho...d.php?t=169150. There are several methods but no one confirmed that they work on K4 NT. When I try, I will report back there.

Any news on that? Im anxious that a new update will break my jailbreak.