$CC -static -o su su_minimal.c Push to device and set permissions:
// su_minimal.c #include <stdio.h> #include <unistd.h> #include <sys/types.h> int main() setuid(0); setgid(0); execl("/system/bin/sh", "sh", NULL); perror("execl"); return 1; su binaries
adb push su /data/local/tmp/ adb shell chmod 4755 /data/local/tmp/su Then run su from a shell – it will immediately give root without any prompt (highly dangerous). To detect SU binaries without relying on which : $CC -static -o su su_minimal
Compile (Android NDK):
# Check common locations ls -la /system/bin/su /system/xbin/su /sbin/su /system/sbin/su timeout 2 su -c id Check running processes for root daemons ps -A | grep -E "magiskd|daemonsu|ksud" Look for Magisk's su bind mount mount | grep su Summary Table – Choose Your SU Binary | For | Use | |-----|-----| | Modern Android (8+) with SafetyNet | MagiskSU | | Kernel-integrated, minimal overhead | KernelSU | | Legacy device (Android 4–6) | SuperSU | | Custom ROM development only | LineageOS su addon | int main() setuid(0)