Does Google Home have root/Firmware access/Ports ? - Google Home

Hi
I was wondering if Google Home has (USB) ports to access its firmware, possibly unlock bootloader, root it and analyze the software on it.
In general, I was wondering if somebody has tried to reverse engineer it?
Thanks and Regards

idk what it's for but when you remove the base there's a micro usb port

It has 256 MB NAND flash
so one could just copy/edit/replace that if all else fails.
teardown:
https://medium.com/@justlv/google-h...ot-and-giving-technology-a-voice-c59a23724a26

Related

Asus Zenfone GO (ZB551KL) IMEI NULL ( 0 )

Like the topic says, my ZB551KL Zenfone Go won't register network operators and i suspect it's because the IMEI of the phone is 0 after applying official update. I've tried to Root the phone by downgrading to version WW_V13.2.8.13 and installing KingRoot and using Xposed IMEI modules but this fuxed up the phone and sent it into a bootloop. So i reinstalled the WW_V13.2.8.13 firmware again (the only firmware that KingRoot will work on, so basically the only way to root the phone) and rooted the phone again and tried to open the diagnostics port through adb shell, but when i execute the command: "setprop sys.usb.config diag,adb" it says setprop: not found.....so i am guessing i can't open the diagnostics port this way. And Xposed IMEI changer won't work cause Xposed fux up my phone into a bootloop.
So if anyone has any idea how i could change my IMEI back to what it originally was i am all ears. I was reading something about using a HEX editor, but i don't know how to get the IMEI files out of the phone or how to write them back into the phone.
And yes i've tried installing every official firmware, factory reset many times etc.... IMEI is 0 until i somehow change it myself. And when i do my SIM cards will be able to register on the network again. So any help is very much appreciated.
Honestly, they should just ship android with rooting options. Rooting newer devices is a huge pain in the neck right now.
This device is just downgrade as someone posted before and use kingroot, the problem is to enable diag port.
How we can root zb551kl
same problem here.. pls help
dbfonseca said:
This device is just downgrade as someone posted before and use kingroot, the problem is to enable diag port.
Click to expand...
Click to collapse
yep enable diag port take the hell out of me
i enabled diagnotic mode
eyobaaa said:
yep enable diag port take the hell out of me
Click to expand...
Click to collapse
how to recover imei from zero ?? i enabled diagnostic mode on this device
Basically you have to boot to fastboot then flash CSC firmware (also called RAW firmware) to enable qualcomm diag port.
Note that there are 2 kinds of this: 1 is the kind that connects via QDLoader 9008/QFIL to recover from hardbrick, and one that installs a very raw form of android and enables the diag port. You need the latter. Since I don't have the files anymore, you basically run this bat script file that connects via fastboot and hot-boots its own kernel that allows the diag port.
Then use this program called FactoryTool_WriteIMEI_v1.0.2 (Factory_tool_wingtech_v1.0.2.0.exe) to write the IMEI (since official qpst dont support dual Sim). You may need to fire up QPST/QFIL to get a proper com port for the software to work. Then flash first old firmware and you're good to prevent it getting corrupt again.
---
Problem is that this seems to be a symptom of a failing board since ever since the LCD started to flicker when in battery mode and OK when USB is plugged in. Baseband and IMEI becomes corrupt again when you update your system. Also periodically phone shuts down and becomes a 9008 device (hardbrick) but also comes back. Left it alone for days and it was fine after but problem came back after trying a game (solder cracks?) Will try to reflow the motherboard.
May I ask if you changed your LCD? This started happening to mine when I installed a system update after replacing the LCD+digitizer. It seems the phone is downloading the Chinese software update since it detects the (chinese?) panel and installs an incompatible Chinese modem baseband firmware. Upgrading to latest downloadable firmware also corrupts the IMEI slowly (Sim 1 first then Sim 2).

Hacking MiraScreen5G dongle to become EZCast5G dongle

Hi,
I always found it saddening to notice EZCast5G (the "original") is updated at first and their knock offs are updated way later (as of writing this, there is 16602000 for EZCast5G, 16403000 for MiraScreen5G).
The update tool let's you easily analyze the update process. And if you fake the reply from this URL with (for example) miniweb to always dish out latest EZCast5G firmware then your knock off will become an original.
These are the requests made for a legit EZCast5G and a MiraScreen5G:
Code:
[COLOR="Purple"]curl http://www.iezvu.com/upgrade/ota_rx.php -d "{\"version\":1,\"vendor\":\"ezcast5g\",\"mac_address\":\"authorshxj\",\"softap_ssid\":\"000000-00000000\",\"firmware_version\":\"16602000\"}"[/COLOR]
[COLOR="Blue"]curl http://www.iezvu.com/upgrade/ota_rx.php -d "{\"version\":1,\"vendor\":\"am8252_nand_mirascreen\",\"mac_address\":\"authorshxj\",\"softap_ssid\":\"000000-00000000\",\"firmware_version\":\"16403000\"}"[/COLOR]
These are the official replys where you need to always dish out the first one and the update tool will do the rest:
Code:
[COLOR="Purple"]{"ota_conf_file":"http://cdn.iezvu.com/upgrade/ezcast5g/ezcast5g-16602000.conf","ota_fw_file":"http://cdn.iezvu.com/upgrade/ezcast5g/ezcast5g-16602000.gz","ota_enforce":true}[/COLOR]
[COLOR="Blue"]{"ota_conf_file":"http://cdn.iezvu.com/upgrade/am8252_nand_mirascreen/am8252_nand_mirascreen-16403000.conf","ota_fw_file":"http://cdn.iezvu.com/upgrade/am8252_nand_mirascreen/am8252_nand_mirascreen-16403000.gz","ota_enforce":true}[/COLOR]
When I opened mine it even read "5G EZCAST V1.4" on it - so I was pretty sure it should work. And it did. So for $17 one year ago I got myself a neat working EZCast5G. The MiraScreen5G gets into bootloader mode by pressing the one and only button right when you plug it into USB - no need to shorten pin 19 and 20 of the AM8252.
Thank you.
Some questions.
How to use this curl command with miniWeb?
Hi,
BUMP
No honestly, could you elaborate how this works ? Have 2 MiraScreen5G dongles...
Ender
Hi,
with some help from Chatty and another forum i got it done !
First i needed to add a line to my hosts file:
(On windows its found in C:\Windows\System32\drivers\etc)
Code:
127.0.0.1 www.iezvu.com
Then i downloaded miniweb and created a file containing the desired server answer.
Miniwebs web root resides in the "htdocs" folder by default, so i created a folder named "upgrade" and in that folder a file named "ota_rx.php.
I edited that file to contain this text:
Code:
{"ota_conf_file":"http://cdn.iezvu.com/upgrade/ezcast5g/ezcast5g-16602000.conf","ota_fw_file":"http://cdn.iezvu.com/upgrade/ezcast5g/ezcast5g-16602000.gz","ota_enforce":true}
I fired up miniweb with the parameter "-p 80" to listen on the stabdard web port.
THEN i started the EZ Updater app, connected my dongle in Flash mode and VOILA it detected the version i wanted it to detect.
So it flashed (took forever with several loops) my MiraScreen5G to a EZCast5G !!!!
After that initial update the dongle detected a newer version and updated okay.
Please note that AFTER the update you cannot get into flash mode by simply pressing the key. I assume that key is not considered existing anymore since the EZCast5G has none as well
So for further flash-fun we need to short the Pin like its descived by Chatty !
THANKS Chatty & all,
Ender
Just opened a K6 mirascreen and found these
nanya nt5cb64m16fp-dh 128mb ddr3 ram
am8272
samsung k9f1g08u0d 16mb flash
the pcb reads S?-EZCAST-8271-V2F
im unable to find a suitable firmware for it and no idea how to enter download mode....
---------- Post added at 06:02 PM ---------- Previous post was at 05:35 PM ----------
the firmware says 1.3707.11 btw
Hey Guys,
If someone knows, please share the knowledge.
Few Months ago when I was updating the firmware, my Dongle died due to power cut.
after reconnecting my PC couldn't read the version of my dongle. Today I wanted to revive my Dongle But have no to little experience on the Windows Debugging. I know my Dongle is not dead and it has no firmware, I also know that EZCast Repair tool can Flash the Firmware to it, I can download the firmware using the OP, I can also see that The App has options for Manually flashing the Firmware.
But I don't know how and what to do to access the areas shown in the Screenshot.
anyone please help me and point me to right direction.
Thanks in Advance.
SweenWolf said:
Hey Guys,
If someone knows, please share the knowledge.
Few Months ago when I was updating the firmware, my Dongle died due to power cut.
after reconnecting my PC couldn't read the version of my dongle. Today I wanted to revive my Dongle But have no to little experience on the Windows Debugging. I know my Dongle is not dead and it has no firmware, I also know that EZCast Repair tool can Flash the Firmware to it, I can download the firmware using the OP, I can also see that The App has options for Manually flashing the Firmware.
But I don't know how and what to do to access the areas shown in the Screenshot.
anyone please help me and point me to right direction.
Thanks in Advance.
Click to expand...
Click to collapse
Have you found any help? I have updated to EzCast firmware but now my dongle doesn't appear on wifi list and on TV only shows EzCast logo..
dLightas said:
Have you found any help? I have updated to EzCast firmware but now my dongle doesn't appear on wifi list and on TV only shows EzCast logo..
Click to expand...
Click to collapse
No I found no help.
All I need is access the flashing area.
I had 2 tools laying around (think i deleted those)
One was older and directly opened the firmware flashing page, but that doesn't have the partition table of My Dongle.
And the other tool which have the partition table, opens on main page (which is automated and does nothing)
If somehow i could access the firmware flashing area on the newer tool then I could revive my dongle.
If your dongle contained older chip of Action Electronics (earlier than 52) then the older tool can flash your dongle.
nostupidthing said:
Just opened a K6 mirascreen and found these
nanya nt5cb64m16fp-dh 128mb ddr3 ram
am8272
samsung k9f1g08u0d 16mb flash
the pcb reads S?-EZCAST-8271-V2F
im unable to find a suitable firmware for it and no idea how to enter download mode....
---------- Post added at 06:02 PM ---------- Previous post was at 05:35 PM ----------
the firmware says 1.3707.11 btw
Click to expand...
Click to collapse
Today there was a firmware upgrade available and after updating it's dead any help
Edit: OK I was able to flash using this tool (https://mirascreen.com/pages/repair-tool-for-chip-8272-products) but still nothing comes up...
Edit 2: The new firmware is 1.10505.52
MiraScreen G9 Plus
=================
[Name Model] , [Vendor String] , [Supported of the "MiraScreen G9 Plus"]
(EZCast5G) - ezcast5g - Not supported
(MiraScreen5G) - am8252_nand_mirascreen - Not supported
(EZCast 2H) - am_8270_ezcast4k-dongle_ezcast2h - Not supported
(EZCast TX) - am_8270_ezcast-tx_nand-std - Not supported
(EZCast 2) - am8271_ezcast2K - Not supported
(EZCast 4K) - ezcastduo - Not supported
(EZCast Band1) - am_8271_ezcast2-dongle_b1 - Not supported
(EZCast Ultra) - am_8275_ezcast-dongle_ultra - Not supported
(AnyCast M100) - sage_8272_mirascreen-dongle_anycast - Supported
(MiraScreen K6) - am_8272_mirascreen-dongle_std - Supported
Check Firmware over http api:
https://api.ezcast.com/api/firmware...mirascreen-dongle_std&firmware_version=1.10.3
https://www.ezcast.com/service/ota/..._8272_mirascreen-dongle_std&rx_version=1.10.3
Current official firmware version for the "Mirascreen G9 Plus": 1.10505.61
Do you know others? I would for the model "Mirascreen G9 Plus"?
"Mirascreen G9 plus" supports alternative Firmware (Firmware tested on the "MiraScreen G9 Plus"):
FW v1.13610.47: http://cdn.iezcast.com/upgrade/am_8...dongle_std_official-1.13610.47-0x99A7C4FD.img
Flash Tool: https://cdn.shopify.com/s/files/1/0017/6553/9884/files/MiraScreen_8272_Repair_Tool.rar
FW v1.10505.3: http://cdn.iezcast.com/upgrade/sage...gle_anycast_official-1.10505.3-0x937AC2AD.img
Flash Tool: https://cdn.shopify.com/s/files/1/2427/2515/files/AnyCast_M100Repair_Tool.zip
Small modification of Wi-Fi antenna:
https://forum.xda-developers.com/t/mirascreen-g9-plus-hw-fw-mods.4391225/
Hi to all, can anyone help me please with my EZ mira app and dongle device associated with it (miracast).
I have tried to upgrade software for my miracast device thru EZmira app, but suddenly Commercials pop up and my upgrade has been stuck at 10% and won't go further , worse after disconnect or reset there is no signal at all anymore it does not start /boot nor emmit wifi signal. What to do (because of stupid commercial)??
I tried to reset device several times but nothing, tried reseting thru PC but it does not load or Windows does not recognoze device to upgrade it thru web tools.
Please can anyone get that firmware back in my device and restore it .
Much appriciated and thanks in advance!
Anton TNT said:
Hi to all, can anyone help me please with my EZ mira app and dongle device associated with it (miracast).
I have tried to upgrade software for my miracast device thru EZmira app, but suddenly Commercials pop up and my upgrade has been stuck at 10% and won't go further , worse after disconnect or reset there is no signal at all anymore it does not start /boot nor emmit wifi signal. What to do (because of stupid commercial)??
I tried to reset device several times but nothing, tried reseting thru PC but it does not load or Windows does not recognoze device to upgrade it thru web tools.
Please can anyone get that firmware back in my device and restore it .
Much appriciated and thanks in advance!
Click to expand...
Click to collapse
Do you have a specific device?
Manufacturing publishes tools to restore some firmware here:
EZCast: https://www.ezcast.com/repair
MiraScreen:
https://mirascreen.com/pages/repair-tool-for-chip-8268-8252-products
https://mirascreen.com/pages/repair-tool-for-chip-8272-products
AnyCast:
https://any-cast.com/pages/repair-tool-for-chip-8268-8258-products
https://any-cast.com/pages/repair-tool-for-chip-8272-products
renda-l said:
Do you have a specific device?
Manufacturing publishes tools to restore some firmware here:
EZCast: https://www.ezcast.com/repair
MiraScreen:
https://mirascreen.com/pages/repair-tool-for-chip-8268-8252-products
https://mirascreen.com/pages/repair-tool-for-chip-8272-products
AnyCast:
https://any-cast.com/pages/repair-tool-for-chip-8268-8258-products
https://any-cast.com/pages/repair-tool-for-chip-8272-products
Click to expand...
Click to collapse
I have trided this solution , but no prevail, like device is dead, nothing just blank screen after failed update
Anton TNT said:
I have trided this solution , but no prevail, like device is dead, nothing just blank screen after failed update
Click to expand...
Click to collapse
This procedure works 100%, completely restores the firmware. If only an incorrect update occurred.
renda-l said:
This procedure works 100%, completely restores the firmware. If only an incorrect update occurred.
Click to expand...
Click to collapse
I'm not shure maybe I'm doing something wrong, but even windows doesn't recognize device
Anton TNT said:
I'm not shure maybe I'm doing something wrong, but even windows doesn't recognize device
Click to expand...
Click to collapse
Yes, of course, if the firmware is faulty, the device is not recognized and does not work. You must follow the Firmware Recovery Procedure. The device will most likely be repaired. Unfortunately, unless you specify a specific type, you can't be specifically advised on how to proceed.
renda-l said:
Yes, of course, if the firmware is faulty, the device is not recognized and does not work. You must follow the Firmware Recovery Procedure. The device will most likely be repaired. Unfortunately, unless you specify a specific type, you can't be specifically advised on how to proceed.
Click to expand...
Click to collapse
It is MIRACAST, I dont know chip number but it is dongle type round shaped eith EZmira app controlled
Anton TNT said:
It is MIRACAST, I dont know chip number but it is dongle type round shaped eith EZmira app controlled
Click to expand...
Click to collapse
Set your device to Recovery mode according to the procedure and use the tool for chip 8268/8252 or 8272. If the response is "device connected", it is a given chip set.
renda-l said:
Set your device to Recovery mode according to the procedure and use the tool for chip 8268/8252 or 8272. If the response is "device connected", it is a given chip set.
Click to expand...
Click to collapse
on which side is pin 7 and 8 ? Chip on my board is square shaped and got pins on all sides. Just to be sure not to fry anything, which side is NAND memory
Anton TNT said:
on which side is pin 7 and 8 ? Chip on my board is square shaped and got pins on all sides. Just to be sure not to fry anything, which side is NAND memory
Click to expand...
Click to collapse
If your device has a button, first try to enter recovery mode, press the button and connect USB.
In the procedure is a photo of the MCU and these pins are shown.

Samsung galaxy tab e 8.0 sm-t377p locked out!

I have an issue with a bunch of these tablets from Sprint at my company.
Before stepping in they were used and locked with a PIN that I dont have.
I would like to restore these and deploy them but it seems like everything I try i cannot get
passed MDM to flash any image.
On top of being locked out these tablets have some sort of deployment software that applies security policies so its completely unaccesible
even through ADB.
Does anyone have a trick for this situation? Would utilizing a JTAG be able to force wipe or reload firmware?
if anyone has any approaches that would be much appreciated!
only partial way to bypass is flashing combi+installing some sort of launcher
i did jtag but tablet wont boot (i need emmc dump to fix it via SDcard)

Can not read from port COM Mi Flash

I think I finally destroyed my cell phone. I tried to install the Chinese version firmware on my Mi 9T Pro Global and it's on a Hard Brick: It doesn't turn on fastboot or recovery. Opening the phone, I managed to connect to EDL to try to recover by Mi Flash and only the error "Can not read from port com" appears and I've tried everything! I tried several different ROMS, changed the Firehose file that prevents unauthorized accounts by MI Auth, changed Mi Flash versions, installed all necessary drivers several times, changed the USB port to 2.0 and 3.0 and nothing happened. I also tried alternative programs like Qualcomm's QPST/QFIL, and also a Virtual Box. I just found a thread that taught a method where I would have to pay 15 dollars to recover the phone, but what if I hard brick it again , I'll always have to pay 15 dollars to retrieve the cell phone, and I can't do that, not to mention that I don't even know if this method would work. Holy s*** I don't think I've ever been so desperate hahahaha has anyone retrieved any Mi 9T Pro through EDL, or at least knows how to solve this port COM problem?
XxGardenXx said:
I think I finally destroyed my cell phone. I tried to install the Chinese version firmware on my Mi 9T Pro Global and it's on a Hard Brick: It doesn't turn on fastboot or recovery. Opening the phone, I managed to connect to EDL to try to recover by Mi Flash and only the error "Can not read from port com" appears and I've tried everything! I tried several different ROMS, changed the Firehose file that prevents unauthorized accounts by MI Auth, changed Mi Flash versions, installed all necessary drivers several times, changed the USB port to 2.0 and 3.0 and nothing happened. I also tried alternative programs like Qualcomm's QPST/QFIL, and also a Virtual Box. I just found a thread that taught a method where I would have to pay 15 dollars to recover the phone, but what if I hard brick it again , I'll always have to pay 15 dollars to retrieve the cell phone, and I can't do that, not to mention that I don't even know if this method would work. Holy s*** I don't think I've ever been so desperate hahahaha has anyone retrieved any Mi 9T Pro through EDL, or at least knows how to solve this port COM problem?
Click to expand...
Click to collapse
Paying someone is the only way to make EDL work these days.
Also ensure your cable works. My port didn't seem to work with any Xiaomi cables for data, however it fortunately worked with a magnetic end charging cable as my port is presumably a tad damaged.
You will get your money back with the guy I did it with if it doesn't work.
So touching those pins are the only way you can get any sort of output to the screen?
[Edit]
The price of a new motherboard is really expensive. I'd probably rule that out.
Also if you can get to download mode in any way, I'd use Linux. I've not managered to get ADB working on Windows this year. However Linux has been fine. EDL flashing worked in Windows for me.
Turbine1991 said:
Paying someone is the only way to make EDL work these days.
Also ensure your cable works. My port didn't seem to work with any Xiaomi cables for data, however it fortunately worked with a magnetic end charging cable as my port is presumably a tad damaged.
You will get your money back with the guy I did it with if it doesn't work.
So touching those pins are the only way you can get any sort of output to the screen?
[Edit]
The price of a new motherboard is really expensive. I'd probably rule that out.
Also if you can get to download mode in any way, I'd use Linux. I've not managered to get ADB working on Windows this year. However Linux has been fine. EDL flashing worked in Windows for me.
Click to expand...
Click to collapse
My cable seems to be working as it charges my mom's cell phone, and the PC also recognizes the EDL, though I haven't tried using other cables.
Yes, Test Point is the only answer the phone gives me that it's still alive, as the PC recognizes the EDL, even though the phone doesn't turn on the screen (it doesn't even vibrate when I hold the power button or try to turn it on on the fastboot/recovery)
If it's a motherboard problem, I'll follow your advice and buy another cell phone, it wouldn't be worth it to just send it for assistance and pay a fortune
Finally, I don't have access to any linux unfortunately, but I was also having problems with ADB, and that's exactly why I accidentally installed Chinese Firmware lol
Mine got all the way up to the flashing point and it failed until I changed cable. Just because it charges, doesn't mean it'll work for data.
And you've tried vol up + hold power? And try detach the battery so it's definitely off of EDL.
I mean a motherboard will fix it, but that's just to replace your emmc memory. But you're better off trying the EDL pay service regardless.
What do you mean you don't have access to Linux? It's free and one doesn't need to install it to boot into it.
After you recover to an ancient Chinese rom through EDL, one still needs to unlock the bootloader to go back to something better like Miui.eu.
Turbine1991 said:
Mine got all the way up to the flashing point and it failed until I changed cable. Just because it charges, doesn't mean it'll work for data.
And you've tried vol up + hold power? And try detach the battery so it's definitely off of EDL.
I mean a motherboard will fix it, but that's just to replace your emmc memory. But you're better off trying the EDL pay service regardless.
What do you mean you don't have access to Linux? It's free and one doesn't need to install it to boot into it.
After you recover to an ancient Chinese rom through EDL, one still needs to unlock the bootloader to go back to something better like Miui.eu.
Click to expand...
Click to collapse
About the cable I didn't know it could be detected by the pc and at the same time not being able to transfer data, thanks! I will try to change the cable in the next attempts
Yes, I tried to hold the volume and power, but nothing happened. I also tried it with the battery ribbon cable plugged in and unplugged, but both didn't work either.
I don't know anything about PC OS hahaha mb, for me installing linux in my pc, would be like installing IOS on a Samsung. So I think I have access to Linux
About the bootloader I don't think I'll have any problems, I've already unlocked the phone, rooted it and changed the ROM to an AOSP-based one
Oh, and forgot to say: a friend also hard bricked his Mi 8 Lite and retrieved it via EDL. He said that the problem I'm having, he was also, and he only managed to solve it after downloading the rom and files of a guy here in Brazil, but unfortunately on the site he didn't have the Mi 9T Pro files He said he changed firehose, persist, patch0 and rawprogram0 (all files present in the images folder of ROM) and it worked! Mi Auth was bypassed and the system came out of the brick.

Remove VMware Hub bloatware

Hello,
I'm writing this post 'cause I'd like to know if it's a possibility to "unlock", if I can say this, my phone. My company installs on my phone VMware Hub and the Debug USB is locked because I cannot unlock the related menu. I've tried to format the phone from original recovery by wiping data and nothing changed. So, I've run my phone into bootloader in order to overwrite the original firmware with a new original one. The process is ok but when I restart my phone, VMware is installed and configured.
Now, a question, is it possible to remove it withouth root or debug USB? I'm so annoyed because it is possible to check everything I do in my phone.
Thanks

Categories

Resources