Commit graph

19 commits

Message SHA1
feat: download LinuxLoader-p118.pe with curl before executing exploit 1.0
Signed-off-by: Cuynu <cuynu@proton.me>

Cuynu   commited 2026-03-02 00:42:03 +07:00
eb152e96e3
feat!: remove target-p114.c
Signed-off-by: Cuynu <cuynu@proton.me>

Cuynu   commited 2026-03-01 23:24:03 +07:00
1e0fcbbc27
feat! no longer requires o77, p114, q207 bootloader files
as this fork is supposed to only works with TAMA platform with only bootloader unlock/relock function, there is no reason to requiring o77, p114, q207

p118 is enough.

Signed-off-by: Cuynu <cuynu@proton.me>

Cuynu   commited 2026-03-01 23:20:10 +07:00
1cf4d9c6cf
feat!: remove various tests and misc changes
Signed-off-by: Cuynu <cuynu@proton.me>

Cuynu   commited 2026-03-01 23:10:41 +07:00
4e8f1fda93
fix segfault bug that could happen in rare fail code path of test5
Thread 1 "xperable" received signal SIGSEGV, Segmentation fault.
0x0814d191 in memcpy ()

j4nn   commited 2026-01-17 22:29:02 +01:00
0bf7060a96
fix bug that failed to do PE relocs when built as 32bit binary
previously void pointer has been used as user arg with callback
to fix relocations - that worked when built in 64bit mode but produced
incorrect values when built in 32bit mode, making the exploit always
crash the target phone instead of succeeding

so this change now references proper 64bit value with the arg instead

j4nn   commited 2026-01-17 12:23:20 +01:00
9cf3397ef6
support build of 32bit i686 executable
this adds cross compilation support with CROSS_BUILD=i686
including compatibility changes for 32bit builds

j4nn   commited 2026-01-17 11:18:34 +01:00
638c2c10d3
fix use of std c++14 - should be used with all c++ sources
otherwise object files might be incompatible, so this change
forces the -std=c++14 option into the whole pe-parse lib build

the use of c++14 std might be questionable as pe-parse strictly
requires c++17, so it might be better to revert it from previous
commit instead

j4nn   commited 2026-01-17 09:19:13 +01:00
6427236a0a
minor changes for macos compatibility
conditionally comment out detaching usb device kernel drivers with apple builds
as macos makes this almost impossible to work - see libusb faq here:

https://github.com/libusb/libusb/wiki/FAQ#how-can-i-run-libusb-applications-under-mac-os-x-if-there-is-already-a-kernel-extension-installed-for-the-device-and-claim-exclusive-access

this change has been cherry picked from https://github.com/j4nn/xperable/pull/1
only the "macos port" commit from @m1zole, adapted as suggested in the comment
https://github.com/j4nn/xperable/pull/1#issuecomment-3716696929

j4nn   commited 2026-01-17 08:38:34 +01:00
9fd2563406
replace unistd file access with stdio to fix windows port
it seems read() unistd call does not return complete file
when running on windows built via mingw64 :-(

j4nn   commited 2025-12-21 02:25:59 +01:00
914a83b781
tama exploit extensions work in progress
it could boot twrp one time

j4nn   commited 2025-12-13 22:04:29 +01:00
6c2a2484e5
document usage examples for tama
j4nn   commited 2025-12-08 23:10:11 +01:00
49e94e7218
readme with xperable documentation focused on usage with yoshino
j4nn   commited 2025-11-16 22:21:34 +01:00
9748f006ab
Xperia ABL fastboot Exploit for Tama
CVE-2021-1931 based fastboot exploit for SDM845 LA2_0_P_118 bootloader

j4nn   commited 2025-09-13 23:46:35 +01:00
bdf36236dd
Xperia ABL fastboot Exploit for Yoshino
CVE-2021-1931 based fastboot exploit for MSM8998 LA2_0_P_114 bootloader

j4nn   commited 2025-07-20 22:53:16 +01:00
82b1f4156c
add funding yaml
j4nn   commited 2025-07-20 22:17:03 +01:00
5539ea3150
add gitignore and pe-parse submodule
j4nn   commited 2025-07-19 00:41:52 +01:00
ca6ee3de4c
host linux kernel patch to support allocation of big usb buffers
j4nn   commited 2025-03-08 19:59:20 +01:00
6487b333d5
initial commit with just the license file
j4nn   commited 2025-03-08 10:17:53 +01:00
60403bf0d1