search

dgiese / dustcloud

Xiaomi Smart Home Device Reverse Engineering and Hacking
GNU General Public License v3.0
2.22k stars 255 forks source link

Rooting the gateway v3 #205

Open prototux opened 5 years ago

prototux commented 5 years ago

Hello,

Is it possible to root the gateway v3 like the vacuum robots? i've seen your talks and references to the NXP firmware, but it seems that the newer gateway actually run linux (on the i.mx6 SoC), so it should theorically be possible to gain root access to this one, but was it done already or is it some new unexplored road?

dgiese commented 5 years ago

Yeah, technically I did it already and I am working on a public root method. Will take some time, as I had some setbacks...

prototux commented 5 years ago

Can i help? (i do have a mieu01, not a v3, but it seems they're basically the same, but with some different configuration and/or /home/root/gw), i rooted mine using the serial console, but i will probably continue to work on a "upgrade root" like for the vacuum cleaners, as it's more future proof than some temporary modification that will be gone at the next update (as updates seems to completly replace the FS just like the vacuums but this time it isn't ubuntu-based, it's a "plain" linux based on the imx6 sdk apparently).

I'll also probably work on some reverse engineering to be able to use it offline, on a repo on https://github.com/wiecosystem probably, it will change from BLE devices a bit :)

dgiese commented 5 years ago

send me a mail or a pm via telegram

prototux commented 5 years ago

I've sent you an email (i don't really use messaging apps)