Tool to flash the recovery image on Android phones. The so-called “one click root”.

Please note that current firmwares are patched. If you still have a phone with a cupcake (1.5) firmware, FlashRec may still work, but there are some patched cupcake firmwares too. If you get “Could not run command”, then your firmware is patched.

No longer includes CyanogenMod Recovery 1.4 , but will download the correct CyanogenMod Recovery 1.4 for your phone.

Some of you have been flashing cyanogen’s theme template after starting the installed recovery image. This will brick your phone. Please do not flash an image named “template-*.zip” using recovery mode.

New in 1.1.3:

  • RC29 support may be broken. Needs testing.
  • Sprint Hero support.
  • Samsung Behold 2 support.
  • Removed reboot button temporarily until it can be added back.

New in 1.1.2:

  • RC29 support (Works, this time – did not work in 1.1.1 due to some internal kernel struct changes)

New in 1.1.1:

Allows flashing any image (type the path or url to it).
Works on “32B” and “32A” phones.

Uses CVE-2009-2692 , which is patched in firmwares released after August 2009.
Also uses CVE-2009-3547 , which is patched in firmwares released after November 2009, requires PREEMPT, and requires mmap_min_addr to be disabled.

Also allows you to back up and restore the current image (to /sdcard/recovery-backup.img)

Bluetooth access is only used to create a socket for exploiting the bug – Bluetooth does not need to be enabled, as it is not really used.

Version 1.1.3:

Pre-compiled: flashrec-1.1.3-20091107-2.apk (Allow non-market apps on phone to install)
QR Code for pre-compiled:
SVN: flashrec on Google Code

Version 1.1.2 (No Sprint Hero/Samsung Behold 2 support – here in case RC29 does not work with 1.1.3-20091107-2):

Pre-compiled: flashrec-1.1.2-20090909.apk (Allow non-market apps on phone to install)
Source: flashrec-1.1.2-20090909.tar.gz
SVN: flashrec on Google Code