search

MTK-bypass / bypass_utility

MIT License
459 stars 114 forks source link

MT6755 stop after Found send_dword, dumping bootrom to bootrom_326.bin #109

Closed Darkmoon1212 closed 10 months ago

Darkmoon1212 commented 11 months ago

I tried multiple time but to no avail

[2023-08-04 10:29:46.794020] Waiting for device [2023-08-04 10:30:12.155485] Found device = 0e8d:0003

[2023-08-04 10:30:12.451806] Device hw code: 0x326 [2023-08-04 10:30:12.452806] Device hw sub code: 0x8a00 [2023-08-04 10:30:12.452806] Device hw version: 0xcb00 [2023-08-04 10:30:12.453808] Device sw version: 0x1 [2023-08-04 10:30:12.454810] Device secure boot: True [2023-08-04 10:30:12.455806] Device serial link authorization: False [2023-08-04 10:30:12.456811] Device download agent authorization: False

[2023-08-04 10:30:12.457809] Disabling watchdog timer [2023-08-04 10:30:12.459808] Insecure device, sending payload using send_da [2023-08-04 10:30:12.470662] Found send_dword, dumping bootrom to bootrom_326.bin

Darkmoon1212 commented 11 months ago

doing main.py -f results in protection disabled but sp flash tool still gives verified boot enabled (yes I use UART without disconecting the device)

[2023-08-04 10:40:27.936322] Waiting for device [2023-08-04 10:41:22.909107] Found device = 0e8d:0003 [2023-08-04 10:41:23.213543] Device hw code: 0x326 [2023-08-04 10:41:23.215544] Device hw sub code: 0x8a00 [2023-08-04 10:41:23.216604] Device hw version: 0xcb00 [2023-08-04 10:41:23.217606] Device sw version: 0x1 [2023-08-04 10:41:23.218604] Device secure boot: True[2023-08-04 10:41:23.218604] Device serial link authorization: False [2023-08-04 10:41:23.219606] Device download agent authorization: False

[2023-08-04 10:41:23.220606] Disabling watchdog timer[2023-08-04 10:41:23.222561] Disabling protection [2023-08-04 10:41:23.345616] Protection disabled

image Recovery dosen't work either

Darkmoon1212 commented 11 months ago

I can hear the device disconecting after Protection disabled

Darkmoon1212 commented 10 months ago