Skip to content

Latest commit

 

History

History
20 lines (17 loc) · 1.1 KB

README.md

File metadata and controls

20 lines (17 loc) · 1.1 KB

This project is a very simple emulator of an I2C flash for AVR microcontrollers, designed to trigger BootROM recovery mode on Amlogic SoCs like the S905Y2. See here and here for prior work. Unlike the Arduino sketch in the Exploitee.rs release, which was designed for the ARM core on an Arduino Due, this implementation is fast enough to avoid clock stretching on an AVR core, which is critical since Amlogic's BootROM I2C master does not support clock stretching.

I've tested this on an Arduino Duemilanove, but it will definitely work on any board with an ATmega48/88/168/328, and possibly others. Just set MCU appropriately in the Makefile.

To use, attach the SCL and SDA DDC lines (pins 15 and 16, respectively) of an HDMI breakout to the I2C lines on your AVR (which are PC5 and PC4, respectively, on the ATmega48/88/168/328), connect the HDMI port to your target device, then apply power to the device. It should enter BootROM USB DFU mode with no additional interaction needed.