History

Eljakim Herrewijnen c4fac034a1 Fully booting with ability to patch BL1		2024-08-17 12:24:47 +02:00
..
.vscode	Now booting into USB recovery. Not yet jumping back to the debugger at each boot stage	2024-08-16 18:15:53 +02:00
debugger	updated docs	2024-08-12 16:57:40 +02:00
stage1	updated docs	2024-08-12 16:57:40 +02:00
.gitignore	bl1 authenticated and jumped to	2024-08-09 22:22:16 +02:00
exploit.py	Fully booting with ability to patch BL1	2024-08-17 12:24:47 +02:00
exynos8890.dtsi
exynos8895-reference.dtsi
ghidra.py	added normal boot mode	2024-08-16 10:11:18 +02:00
modify_bin.py	updated docs	2024-08-12 16:57:40 +02:00
Readme.md

Exploit

Python implementation of Frederick's exploit. This gives a bit more insight in the bug.

Debugger

The debugger is used for chain loading the next stages. See the documentation folder for more docs

Navigate to stage1 and build it:

export ANDROID_NDK_ROOT=$TOOLCHAINENV/android-ndk-r21_Linux
make

This will build stage1

python3 exploit.py