-
Notifications
You must be signed in to change notification settings - Fork 24
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
This tool has magic superpowers! #2
Comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Hi dear Frédéric!
First of all, thanks for your wonderful blog. Your work and your articles about it are truly breathtaking!
Then my little miracle story
I've got bricked Mi Box 3 (MDZ-16-AB) which is based on Amlogic S905X SoC
Box is so hardly bricked that it cannot boot to uboot shell
The standard flashing process did not work for me and the only solution left is desoldering eMMC chip...
But then i found your article about hacking Amlogic S905D3 (thanks!)
I thought that maybe with
amlogic-usbdl
tool and right payload i could flash it via USBAlso i found update tool from khadas utils repo
update
tool includeread
command that can be used to read arbitrary memory at specified addressIn a silly attempt, I tried to read the BootROM memory (offset 0xd9040000 size 0x10000 for S905X), but of course I only got errors back
Then i tried to run
amlogic-usbdl
Oddly enough, the tool reported success
But the payload didn't start and nothing visible happened
Then i ran
update read
again and... my terminal was filled with juicy BootROM dump!I just couldn't believe what happened!
After converting this text dump to binary form i run some commands
As i can tell, my dump is pretty legit!
Second discussion thread
The text was updated successfully, but these errors were encountered: