FORUMS
Remove All Ads from XDA

Rooting MediaTek Based Linux Smart TV

60 posts
Thanks Meter: 20
 
By borillion_star, Member on 4th July 2015, 11:36 PM
Post Reply Email Thread
11th April 2016, 06:33 AM |#11  
OP Member
Thanks Meter: 20
 
More
Quote:
Originally Posted by tommyk999

App for rooting hisense TV, it may help you.

https://mega.nz/#!twYhHZhS!ZW_fdid_P...OEluYDrLrE0qM4

Sent from my SM-N910F using Tapatalk

Because I don't know where this came from, and what it will do to to my computer if I try to run anything in it, or on my tv. I am going to take a look at it figure it out.
Probably going to be a couple days until I get to it.

As for the Raspberry Pi, yes you can always connect any device over HDMI and disconnect it without changing the TV firmware in any way. That somewhat defeats the goal
of rooting the linux running on the tv though. :P
 
 
11th April 2016, 06:36 AM |#12  
OP Member
Thanks Meter: 20
 
More
Quote:
Originally Posted by borillion_star

Because I don't know where this came from, and what it will do to to my computer if I try to run anything in it, or on my tv. I am going to take a look at it figure it out.
Probably going to be a couple days until I get to it.

As for the Raspberry Pi, yes you can always connect any device over HDMI and disconnect it without changing the TV firmware in any way. That somewhat defeats the goal
of rooting the linux running on the tv though. :P

That zip file actually contains a root for HiSense TV's running android. You can tell because of the adb.exe and the apk file types. It doesn't apply here.
11th April 2016, 06:38 AM |#13  
OP Member
Thanks Meter: 20
 
More
I did purchase a logic board for this TV with the power board off of ebay. There is something on it that is marked as a UART with 3.3V.
I will power it up and see what I can read out white its booting, and post when I am able.
11th April 2016, 07:03 PM |#14  
Member
Thanks Meter: 10
 
More
I got some pdf file it is in chinese for led65k720uc, it is getting interestin at the end i think it describes how to get acces to the system with some description. hope this would help you.

https://mega.nz/#!sggVSJaS
11th April 2016, 08:29 PM |#15  
Member
Thanks Meter: 10
 
More
k720uc system
11th April 2016, 11:28 PM |#16  
Member
Thanks Meter: 10
 
More
Found some info on led42k220 but have to find a way how to translate pdf from Chinese to English

https://drive.google.com/file/d/0B7G...p=docslist_api

Sent from my SM-N910F using Tapatalk
12th April 2016, 08:13 AM |#17  
vache's Avatar
Recognized Developer
Flag Paris
Thanks Meter: 3,577
 
Donate to Me
More
Quote:
Originally Posted by tommyk999

App for rooting hisense TV, it may help you.

https://mega.nz/#!twYhHZhS!ZW_fdid_P...OEluYDrLrE0qM4

Sent from my SM-N910F using Tapatalk

Looks like it's for AndroidTV, while mine runs OperaTV.
12th April 2016, 08:54 AM |#18  
Member
Thanks Meter: 10
 
More
I will keep looking hope I found something with opera

Sent from my SM-N910F using Tapatalk
12th April 2016, 06:45 PM |#19  
Member
Thanks Meter: 10
 
More
What type is Chinese equivalent to 50k220gwus?

Sent from my SM-N910F using Tapatalk
18th April 2016, 09:19 AM |#20  
vache's Avatar
Recognized Developer
Flag Paris
Thanks Meter: 3,577
 
Donate to Me
More
Mouse/keyboard works on browser, but nothing to do here.

I'm trying to repack firmware after changing some interesting files to check if we can do something interesting.
I first get squashfs filesystem using dd command, then tried to mount it but no luck.
So i used unsquashfs to unpack it (like binwalk did)
Then i used mksquashfs to repack it and used dd to inject file again in upgrade_loader.pkg

OperaTV is new for me, i have to learn how it works before going further.

--------------------------------------------------------------------------------------------------------------------

Firmware Analazing (from 40EC591)


Partitions :
3rdw (Apps ?) (ext4 - /dev/mmcblk0p12 - dev/mmcblk0p11)
3rdp (Apps ?) (squashfs - dev/mmcblk0p11)
uImage (kernel - /dev/mmcblk0p5)
rootfs.bin (squashfs - /dev/mmcblk0p7)
pq.bin (? - /dev/mmcblk0p16)
aq.bin (? - /dev/mmcblk0p17)
adsp.bin (? - /dev/mmcblk0p21)
facsetdata.bin (? - /dev/mmcblk0p25)
uboot.bin (bootloader - /dev/mmcblk0p1)
uenv.bin (? - /dev/mmcblk0p2)
logo.bin (? - /dev/mmcblk0p18)
default_db.bin (? - /dev/mmcblk0p23)
hdmi_2_0_hdcp.bin (? - /dev/mmcblk0p24)
19th April 2016, 08:58 PM |#21  
vache's Avatar
Recognized Developer
Flag Paris
Thanks Meter: 3,577
 
Donate to Me
More
I've uploaded some extracted files here : http://vache-android.com/?dir=hisense

If someone want to have a look... I had no luck mounting or unpacking 3drw.img (Linux rev 1.0 ext4 filesystem data, UUID=57f8f4bc-abf4-0000-675f-946fc0f9f25b (extents) (large files))

Looks like there's a console on ttyMT0
From init : /sbin/getty -n -L ttyMT0 115200 vt100 -l /bin/sh

Interesting link : https://smarttvhacking.wordpress.com...510c-smart-tv/
Another one : http://neophob.com/2010/01/root-my-t...ilips-pfl9703/

We have a serial jack port (called "Service") on the TV, a cable like this could be used to debug : http://www.amazon.com/SF-Cable-Femal.../dp/B004T9BBJC. @borillion_star you bought somethink like this ?
Post Reply Subscribe to Thread

Tags
exploit, hisense, linux, root, smart tv

Guest Quick Reply (no urls or BBcode)
Message:
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes