Vollständiger Weg: ROOT-GUIDE.md
Kurz: tools/pub/ = ausgelieferte Dateien; scripts/host/ = Host-Helfer; scripts/tv/ = TV-Skripte; artifacts/ = Original-Lib, Keys, Fingerprint.

Die Schritte

# Host
sudo root/scripts/host/prepare_usb.sh /dev/sdX      # ext4/MBR + tvi-Symlink
root/scripts/host/start_http.sh                     # :9000
# TV: http://<host-ip>:9000/recon.html
# TV-Konsole: root/scripts/host/plant_payload.js     # USB-Dev anpassen
# reboot
# TV-Konsole nach Boot: root/scripts/host/upload_to_appdata.js
# TV-Konsole: root/scripts/host/run_root_cmd.js      # deploy_sshd.sh
ssh root@192.168.188.94

# optional: SFTP (key-only, nach dem SSH-Setup)
root/scripts/host/install_sftp.sh
sftp root@192.168.188.94

Dateien

Pfad	Zweck
`tools/pub/libtvsysinfo.so`	finaler Payload (33.500 B, SHA `37b13f…`)
`tools/pub/dropbear`, `dropbearkey`	statischer ARM-Dropbear 2022.83, key-only
`tools/pub/dropbear-sftp`	Dropbear mit `SFTPSERVER_PATH=/3rd_rw/sshd/sftp-server`
`tools/pub/sftp-server`	statischer OpenSSH-9.9p1-sftp-server (ARM)
`tools/pub/authorized_keys`	dein Public Key
`tools/pub/start_sshd.sh`	Dropbear + passwd-/PTY-Bindmounts
`tools/pub/root_loop.sh`	Root-Kommandokanal
`tools/pub/hamservice-wrapper.sh`	Boot-Hook (HamService)
`tools/pub/deploy_sshd.sh`	Installiert SSH/Persistenz (als root)
`tools/pub/verify.sh`	Health-Check
`tools/pub/rollback.sh`	Rückbau
`scripts/host/prepare_usb.sh`	USB ext4/MBR + Symlinks
`scripts/host/start_http.sh`	Server/Recon
`scripts/host/plant_payload.js`	Payload durch `tvi` schreiben
`scripts/host/upload_to_appdata.js`	Dropbear/Deploy-Dateien hochladen
`scripts/host/run_root_cmd.js`	`root_cmd.sh` schreiben / `root_out` lesen
`scripts/host/build_payload.sh`	Payload reproduzieren
`scripts/host/build_dropbear.sh`	Dropbear aus `sources/` bauen
`scripts/host/build_sftp_server.sh`	statischen `sftp-server` bauen
`scripts/host/patch_dropbear_sftp.py`	`dropbear-sftp` erzeugen
`scripts/host/install_sftp.sh`	SFTP installieren/testen/auf 22 tauschen
`scripts/tv/install_sftp_stage.sh`	SFTP-Binaries + Test-Dropbear auf 2222
`scripts/tv/enable_sftp.sh`	Tausch auf 22 planen
`scripts/tv/swap_sftp.sh`	Tausch detached ausführen
`artifacts/tvi_original.so`	Original-Lib (33.220 B)
`artifacts/keys/authorized_keys`	Public Key
`artifacts/keys/host-key-fingerprint.txt`	`SHA256:7tFL…`

Keine Secrets: kein Root-Hash, kein privater SSH-Key.

Status: Root + SSH + PTY live bestätigt; Boot-Persistenz installiert (Reboot-Test offen). SFTP optional: statischer OpenSSH-sftp-server + gepatchter Dropbear; Installer testet Port 2222, dann 22. Details/Verifikation im ROOT-GUIDE.md, Modding in ../modding/.