Chromecast bootloader exploit: it runs Android

Stefan Mileschin · 30th July 2013, 08:52

Well that didn’t take long. The team over at GTVHacker have worked their magic on Chromecast. The HDMI dongle announced by Google last week was so popular they had to cancel their 3-free-months of Netflix perk. We think the thing is worth $35 without it, especially if we end up seeing some awesome hacks from the community.

So far this is just getting your foot in the door by rooting the device. In addition to walking through the exploit the wiki instructions give us a lot more pictures of the internals than we saw from the teardown in yesterday’s links post. There’s an unpopulated pad with seventeen connections on the PCB. You can patch into the serial connections this way, running at a 115200 8n1. But you won’t have terminal access out of the box. The exploit uses a vulnerability in the bootloader to flash a hacked system folder which provides root. After wiping the cache it reboots like normal but now you can access a root shell on port 23.

http://hackaday.com/2013/07/29/chrom...8Hack+a+Day%29

30th July 2013, 08:52	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 148,597	Chromecast bootloader exploit: it runs Android Well that didn’t take long. The team over at GTVHacker have worked their magic on Chromecast. The HDMI dongle announced by Google last week was so popular they had to cancel their 3-free-months of Netflix perk. We think the thing is worth $35 without it, especially if we end up seeing some awesome hacks from the community. So far this is just getting your foot in the door by rooting the device. In addition to walking through the exploit the wiki instructions give us a lot more pictures of the internals than we saw from the teardown in yesterday’s links post. There’s an unpopulated pad with seventeen connections on the PCB. You can patch into the serial connections this way, running at a 115200 8n1. But you won’t have terminal access out of the box. The exploit uses a vulnerability in the bootloader to flash a hacked system folder which provides root. After wiping the cache it reboots like normal but now you can access a root shell on port 23. http://hackaday.com/2013/07/29/chrom...8Hack+a+Day%29

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Google Chromecast review	Stefan Mileschin	WebNews	0	30th July 2013 08:46
Chromecast bootloader exploit surfaces	Stefan Mileschin	WebNews	0	29th July 2013 09:36
Google TV will introduce Chromecast support in a future upgrade	Stefan Mileschin	WebNews	0	26th July 2013 07:37
Garmin Monterra handheld GPS runs Android	Stefan Mileschin	WebNews	0	25th June 2013 07:39
Ekoore Python S3 3-in-1 tablet runs Windows, Linux and Android	Stefan Mileschin	WebNews	0	15th May 2013 08:48
Viber exploit lets attackers bypass Android lock screens, for now	Stefan Mileschin	WebNews	0	26th April 2013 08:19
Google CEO Larry Page confirms: yes, Google Glass runs on Android	Stefan Mileschin	WebNews	0	19th April 2013 08:03
NEC Medias Tab UL runs Android 4.0, weighs just over half a pound	Stefan Mileschin	WebNews	0	3rd October 2012 06:59
This $66 PSP clone runs Android Ice Cream Sandwich	Stefan Mileschin	WebNews	0	4th September 2012 11:08
RAMPAGE 6 notepad runs Android 2.3 in a rugged package	Stefan Mileschin	WebNews	0	23rd May 2012 09:23