mirror of
https://github.com/bkerler/mtkclient.git
synced 2026-08-17 02:42:35 -04:00
MTK reverse engineering and flash tool
- Python 96.1%
- C 3.7%
- Makefile 0.1%
| Filename | Latest commit message | Latest commit date |
|---|---|---|
0542a87299
Some checks failed
Python application / Test (push) Has been cancelled
DJTusheniyTapochek). For critical unlocks (which should be the default for many, but will brick RabbitOS etc. devices, use --critical option) Signed-off-by: Bjoern Kerler <info@revskills.de> |
||
| .github | ||
| examples | ||
| mtkclient | ||
| Setup/Linux | ||
| src/stage1 | ||
| Tools | ||
| .flake8 | ||
| .gitignore | ||
| learning_resources.md | ||
| LICENSE | ||
| MANIFEST.in | ||
| mtk.bat | ||
| mtk.py | ||
| mtk_api.py | ||
| mtk_console.spec | ||
| mtk_gui.bat | ||
| mtk_gui.py | ||
| mtk_iot_api.py | ||
| mtk_standalone.spec | ||
| mtk_tcpip_client.py | ||
| mtk_tcpip_server.py | ||
| pyproject.toml | ||
| README-INSTALL.md | ||
| README-INSTALL.zh-CN.md | ||
| README-USAGE.md | ||
| README-USAGE.zh-CN.md | ||
| README-WINDOWS.md | ||
| README-WINDOWS.zh-CN.md | ||
| README.md | ||
| README.zh-CN.md | ||
| requirements.txt | ||
| run.example | ||
| shell.nix | ||
| stage2.py | ||
| uv.lock | ||
Language:
🇺🇸
🇨🇳
MTKClient
Just some mtk tool for exploitation, reading/writing flash and doing crazy stuff. For windows, you need to install the stock mtk port and the usbdk driver (see instructions below). For linux, a patched kernel is only needed when using old kamakiri (see Setup folder) (except for read/write flash).
Once the mtk script is running, boot into brom mode by powering off device, press and hold either vol up + power or vol down + power and connect the phone. Once detected by the tool, release the buttons.
MT6781, MT6789, MT6855, MT6886, MT6895, MT6983, MT8985
- These chipsets use a new protocol called V6 and the bootrom is patched. You need to use the --loader option and a proper loader from the Loaders/V6 directory. Bootrom won't work, you need to use preloader mode (no hw buttons pressed, just connect). On some devices, preloader is deactivated, but you can reactivate it by running "adb reboot edl".
Credits
- kamakiri [xyzz]
- linecode exploit [chimera]
- heapbait exploit [chimera], creds to [R0rt1z2],[Shomy]
- Chaosmaster
- Geert-Jan Kreileman (GUI, design & fixes)
- All contributors
Installation
See linux/macos installation hints
See windows installation hints
See automated Windows installer
Usage
Use Re LiveDVD (everything ready to go, based on Ubuntu):
User: user, Password:user (based on Ubuntu 22.04 LTS)
I have issues ....... please send logs and full console details !
- Run the mtk tool with --debugmode. Log will be written to log.txt (hopefully)
Rules / Infos
Chip details / configs
- Go to config/brom_config.py
- Unknown usb vid/pids for autodetection go to config/usb_ids.py