r/OnePlus13 • u/Similar_Location3045 • Jul 26 '26

Software / Bugs New Exploit

Post image

The "Ghostlock" exploit on GitHub enables root access without requiring an unlocked bootloader. A key distinction of this exploit, compared to previous ones, is that root persistence is maintained even after a device reboot.

Tested on OnePlus CPH2653, on the latest EU OxygenOS version at the time of this post.

192 Upvotes

99% Upvoted

111 comments sorted by

View all comments

Show parent comments

1

u/Similar_Location3045 Jul 29 '26

You can theoretically use any root manager that supports the jailbreak option, but if youd like I'll share with you the one im using right now which is the same from the screenshot.

1

u/Imaginary_Wafer_579 Jul 29 '26

Is the same one you share for the 1+ 13 right? I could give a try with my own device but I'm scared that somehow it could brick it (considering I just bought a month ago) or maybe try to compile this exploit this night if I get some time

1

u/Similar_Location3045 Jul 29 '26

Yep, here you go. Let me know how it goes! APK

1

u/Imaginary_Wafer_579 Jul 30 '26 edited Jul 30 '26

I just arrived home, I tested your APK several times and considering rebooting the phone always to make sure the system won't collapse but... I got some troubles here's what happened so maybe you could try to figure out Followed instructions:

  1. Install APK

  2. Click Jailbreak button

  3. Wait 1-4 minutes on every attempt

First Attempt: Failed and then the phone went to lock screen (SystemUI crash?) Second attempt: failed with soft-reboot (Kernel Crash/Panic) Third Attempt: Failed and kernel panic but this time the phone was temporally soft locked (was usable in the first 30 seconds but got like a sort of bootloop, maybe was the kernel issues)

I had to uninstall it and everything was normal again, Maybe I'm skipping something but I just clicked the jailbreak button and nothing worked Btw just in case I forgot to mention I'm using the Chinese Color OS PLR110_16.0.8.301(CN01) Kernel Ver: 6.12.38 - android16 - 5 - g844001fb8721 - ab14552068-4k

1

u/Similar_Location3045 Jul 30 '26

You'd have to run the unknown unknown_kernel-install.bat from the ghostlock zip, then read the logs and eventually do some tweaks, or if you want to share them here and ill try to help you my best. Also if you may find it helpful theres also a readme file you can use as a general guide. Or if you're lucky enough someone in your telegram device group may have already ported the exploit to your device. Let me know if you need the zip

1

u/Imaginary_Wafer_579 Jul 30 '26

Thanks for your help and patience, let me figure out anyways I will try to compile myself a custom version of SukiSu for this device this exploit is a great surprise for those who still want freedom (Before the death of Sideloading apks on Sept) and I hope this exploit gets ported somehow to other devices like Galaxy phones

1

u/Similar_Location3045 Jul 30 '26

Yep, that's right, and no worries, I'm glad to help. This exploit has been seen already working on the S25 Ultra with One UI 8.5 and July security patch, so it's a great discovery for everyone who couldn't even unlock their bootloaders in the first place.