jsbro / jsbro-autoroot
Browser-assisted root exploit chain for LG webOS TVs.
Use it → raws0kil.github.io/jsbro-autoroot
How it works
- Enter your TV's local IP in the web UI
- Accept the SSAP pairing prompt on the TV
- jsbro launches the
dangbei-overlayapp via SSAP, which downloads a root-persistence script and uses thejsserverservice to execute it as root - The script installs Homebrew Channel and removes the Developer Mode app if present
- A dialog on the TV shows the result—on success, reboot to activate persistent root
jsbro requires the dangbei-overlay app (present on most webOS 7+ firmwares). The tool checks for its existence automatically.
Prerequisites
- LG webOS TV reachable on your LAN
- Browser that supports WebSockets (Chrome recommended — self-signed cert acceptance required)
Supported webOS
WebOS 7.x up to WebOS 25
Requires the dangbei-overlay app, which is present on most webOS 7+ firmwares. The tool checks for this automatically.
If you are unsure if it's applicable for you, it can be tested without risk.
Troubleshooting
Windows Launcher If you have problems with connecting to the TV due to certificate error you can start chrome without certificate checks. Run this command within a PowerShell:
Start-Process "$env:ProgramFiles\Google\Chrome\Application\chrome.exe" -ArgumentList @(
"--user-data-dir=$env:TEMP\chrome-jsbro-insecure",
"--no-first-run",
"--ignore-certificate-errors",
"--allow-running-insecure-content",
"--disable-web-security",
"--new-window",
"https://raws0kil.github.io/jsbro-autoroot"
)
- Nothing happens on TV after launch: the
dangbei-overlayapp may not exist on your firmware. Check whether the service is present / other rooting options. - Root setup failed: check
/tmp/jsbro-root.logon the TV. - Rooting complete but no Homebrew Channel: reboot the TV. Make sure Quick Start+ is disabled (
Settings → General → Quick Start+). - IPK install error (errorCode -5): the TV's date/time is too far off. Correct it and retry.
- Certificate blocked / WSS fails instantly: open
https://<TV-IP>:3001/in your browser first and accept the self-signed certificate.
If jsbro-autoroot doesn't support your TV, see the alternative exploits below.
Alternative exploits
| Tool | Affected versions |
|---|---|
| dangbro | webOS 7.x – 25 (DVB regions) |
| dejavuln-autoroot | webOS 3.5 – 8 (many 5+ models patched) |
| faultmanager-autoroot | webOS 4.0 – 10.0 (most 5+ patched) |
| mvpd-autoroot | webOS 1 – 3.4.2 |
CanI.RootMy.TV can be used to determine which one is applicable for you.
Support
For help rooting your TV, join the OpenLGTV Discord and check #faq first. When asking for help, attach your jsbro-root.log.
Credits
jsbro is based on dangbro by azoffshowy. Root persistence via webosbrew/webos-homebrew-channel. Browser SSAP websocket proxy approach inspired by Informatic/webos-ssap-web.