[20180415]Nexus 9 root过程

网上要么好多一键root、以及各种刷机工具说得天花乱坠，要么年代太久远或者方法太繁琐，

整理下：

1. 下载NRT：

http://www.wugfresh.com/nrt/

目前版本2.1.9

包括了全自动识别，一键unlock，root，一键返回出厂，一键救砖…

坑1:之前装了刷机精灵，有个shuame_helper.exe进程会一直占用5037端口，可能导致在Initial Setup时，无法执行adb

此时，需要结束该进程，或者查看占用5037端口的进行结束掉，

参考（

https://blog.csdn.net/wangyanan829/article/details/37593839

http://www.mz6.net/news/android/6885.html

）

2.root时准备twrp-3.0.2-1-flounder.img

（https://androidfilehost.com/?w=file-thanks&fid=24686679545610891&mid=167&download_id=57fd7177e4972d700fe35a03c6791990&tid=1523771181&hc=a5e850c2154d5d918d93453fe51c676281f62f0912003fb7cfd302883e006714）

在之前刷TWRP中，使用了最新的twrp-3.2.1-0-flounder.img，存在问题，建议使用3.0.2-1

3.日志分析参考：

Nexus Root Toolkit v2.1.9

Masterlists:

- LatestToolkitFiles.ini 3135

- AndroidDeviceListFull.ini 3135

- AndroidDeviceListFlash.ini 3135

VOLANTIS-FLOUNDER: Android *.*.* - Any Build

Live log initiated [2018-04-15]:

Checking ADB Connectivity

adb devices

adb server version (32) doesn't match this client (36); killing...

Checking ADB Connectivity

adb devices

adb server version (32) doesn't match this client (36); killing...

Checking ADB Connectivity

adb devices

HT4AHJT06005 device

 + ADB Device Connected

Rebooting your device into bootloader mode...

adb reboot bootloader

Checking Fastboot Connectivity

fastboot devices

HT4AHJT06005 fastboot

 + Fastboot Device Connected

Rebooting your device...

Waiting for your device...

Device Detected

Hashchecking...

Hash Verified!

Importing 'twrp-3.0.2-1-flounder.img' into installer...

Checking ADB/FASTBOOT Connectivity

adb devices

HT4AHJT06005 device

fastboot devices

 + ADB Device Connected

Rebooting your device into bootloader mode...

adb reboot bootloader

Checking Fastboot Connectivity

fastboot devices

HT4AHJT06005 fastboot

 + Fastboot Device Connected

 + Confirmed: Bootloader Unlocked.

Flashing Custom Recovery to RECOVERY partition...

fastboot flash recovery "C:\Program Files (x86)\WugFresh Development\Nexus Root Toolkit\data\Recovery_Custom\TWRP\twrp-3.0.2-1-flounder.img"

Temporarily Booting TWRP...

fastboot boot "C:\Program Files (x86)\WugFresh Development\Nexus Root Toolkit\data\Recovery_Custom\TWRP\twrp-3.0.2-1-flounder.img"

Checking ADB Recovery Connectivity

adb devices

adb devices

Checking ADB Recovery Connectivity

adb devices

* daemon not running. starting it now on port 5037 *

* daemon started successfully *

HT4AHJT06005 recovery

 + ADB Recovery Device Connected

Pushing root files to your device:

Pushing "SR1-SuperSU-v2.78-SR1-20160915123031.zip" to your device:

adb push "C:\Program Files (x86)\WugFresh Development\Nexus Root Toolkit\data\Root_Files\SR1-SuperSU-v2.78-SR1-20160915123031.zip" "/sdcard/!ReadyToFlash/Root_Files/SR1-SuperSU-v2.78-SR1-20160915123031.zip"

100%  /sdcard/!ReadyToFlash/Root_Files/SR1-SuperSU-v2.78-SR1-20160915123031.zip

Hash verifying file transfer:

627c4b98e7bf83293e81d3758accf753 = Local Hash

627c4b98e7bf83293e81d3758accf753 = Device hash

 + Verified!

Pushing "busybox-signed.zip" to your device:

adb push "C:\Program Files (x86)\WugFresh Development\Nexus Root Toolkit\data\Root_Files\busybox-signed.zip" "/sdcard/!ReadyToFlash/Root_Files/busybox-signed.zip"

100%  /sdcard/!ReadyToFlash/Root_Files/busybox-signed.zip

Hash verifying file transfer:

0ece645c3ca95a10f9a4344300ce0f8f = Local Hash

0ece645c3ca95a10f9a4344300ce0f8f = Device hash

 + Verified!

Pushing "quick-reboot-signed.zip" to your device:

adb push "C:\Program Files (x86)\WugFresh Development\Nexus Root Toolkit\data\Root_Files\quick-reboot-signed.zip" "/sdcard/!ReadyToFlash/Root_Files/quick-reboot-signed.zip"

100%  /sdcard/!ReadyToFlash/Root_Files/quick-reboot-signed.zip

Hash verifying file transfer:

64384a4285d14f0727ea989c17c8909b = Local Hash

64384a4285d14f0727ea989c17c8909b = Device hash

 + Verified!

Pushing "openrecoveryscript" to your device:

adb push "C:\Program Files (x86)\WugFresh Development\Nexus Root Toolkit\data\Root_Files\openrecoveryscript" "/cache/recovery/openrecoveryscript"

100%  /cache/recovery/openrecoveryscript

Hash verifying file transfer:

b42ecaae4b4c4d37d3200b874e29366b = Local Hash

b42ecaae4b4c4d37d3200b874e29366b = Device hash

 + Verified!

Rebooting your device into bootloader mode...

adb reboot bootloader

Checking Fastboot Connectivity

fastboot devices

HT4AHJT06005 fastboot

 + Fastboot Device Connected

Temporarily Booting TWRP...

fastboot boot "C:\Program Files (x86)\WugFresh Development\Nexus Root Toolkit\data\Recovery_Custom\TWRP\twrp-3.0.2-1-flounder.img"

Rooting...

Waiting for your device...

Device Detected

Automated Rooting Procedure Complete!

4.root，后安装busybox、linuxdeploy等 刷kali

参考：

http://www.freebuf.com/articles/terminal/13209.html

https://blog.csdn.net/a970973835/article/details/48858177

http://www.freebuf.com/articles/terminal/47817.html

http://tieba.baidu.com/p/3450103090?red_tag=q2579400702

http://www.pc6.com/edu/64218.html