[TOOL] - Topway TS10 firmware workbench

Search This thread
Hi fellows

I'm a kind of newbie in the Android world, but I created a set of shell scripts to work with Topway TS10 Firmware:


---------------------------------------------------------------------------------------------------------------

TS10-Firmware-Workbench​

Scripts intended to mount the Topway TS10 Firmware, make modifications and reassemble the firmware They can retrieve the firmware from specified location and after modification, they can put the firmware into another specified location

Files:

1-) config.ini = A file to setup parameters, paths for the original firmware and patched firmware, temp directory to work with firmware files and mount point to edit the firmware

2-) import_original.sh = Retrieves the files .0 .1 .2 and .3 from the location specified in config.ini

3-) import_patched.sh = Retrieves the same files that 'import_original.sh' but from the patched location specified in the config.ini (normally a firmware that you've already patched before)

4-) unpack.sh = Unpack the imported firmware and create the mount moint (as specified in the config.ini file) to work with the firmware

5-) repack.sh = Unmount the modified firmware from the mount point, delete the mount point, split the firmware in files .0 .1 .2 and .3 and move it to the patched directory as specified in config.ini

6-) inject_tweaks.sh = Modify locale, dataroaming and remove (if necessary) the values in ro.fota.device to avoid message "UI unauthorized, please contact the supplier"

7-) inject_mods.sh = This will copy all the contents of the '_mods' folder inside firmware. I.E. I put a 'gps_debug.cfg' inside 'system/etc/' and it will be injected into firmware overwritting the existent

:cool: inject_su.sh = This will inject su binary into firmware as a daemon, this is dangerous as the firmware is permanently rooted and the apps don't ask for permissions (they already have the root access) USE AT YOUR OWN RISK

9-) clean_local.sh = This script will unmount the firmware and delete it, it will also delete temporary files. as its name says, it cleans the dir !

External (included) tools:

tools/twt (Topwaytool) forked from https://github.com/mkotyk/topwaytool

_mods folder containing a sample file 'gps_debug.cfg'

N'joy it !


---------------------------------------------------------------------------------------------------------------
 

Attachments

  • TS10-Firmware-Workbench-main.zip
    467.5 KB · Views: 30
Last edited:

firstbob

Member
Jun 4, 2021
49
14
I'll have my Topway TS10 THEME1 HU in a week and, if I am brave enough, I'll give it a go.
 

Andason74

Senior Member
Dec 24, 2015
151
19
This will ROOT, but everything inside will have ROOT privileges, UNSAFE, but as I said, for me, it did the trick and I'm happy with this !
Hello mariodantas.
I'm trying to utilize the project you made to mount firmware and inject su.

I'm a little new to some of this, so any guidance would be grateful.

Question:
How do i know what the mount point should be while using unpack.sh in config.ini?


! Creating _mountpoint folder...

Step 4 of 4 - Mounting ready raw firmware into '_mountpoint/' folder

mount: exec /Library/Filesystems/auto.fs/Contents/Resources/mount_auto for /Users/me/Desktop/TS10-Firmware-Workbench-main/_mountpoint: No such file or directory

mount: /Users/me/Desktop/TS10-Firmware-Workbench-main/_mountpoint failed with 72

READY !!!, you can go into '_mountpoint/' folder.

But _mountpoint folder is empty.
 
Last edited:
Hello mariodantas.
I'm trying to utilize the project you made to mount firmware and inject su.

I'm a little new to some of this, so any guidance would be grateful.

Question:
How do i know what the mount point should be while using unpack.sh in config.ini?


! Creating _mountpoint folder...

Step 4 of 4 - Mounting ready raw firmware into '_mountpoint/' folder

mount: exec /Library/Filesystems/auto.fs/Contents/Resources/mount_auto for /Users/me/Desktop/TS10-Firmware-Workbench-main/_mountpoint: No such file or directory

mount: /Users/me/Desktop/TS10-Firmware-Workbench-main/_mountpoint failed with 72

READY !!!, you can go into '_mountpoint/' folder.

But _mountpoint folder is empty.
What is your platform ? OSX ?
 

binharmani

Member
Jan 10, 2008
18
4
after rooting the firmware doesn't seem to pass the checksum, everything is not working please help me ts10 1.2 ols10. ownice
 

sergente78

Senior Member
May 1, 2021
64
3
Mario good morning, if possible for you check the metode for change image car on display of ownice K7 ? Image in centrale display is very bad ifnpossible change png image with other car .......?
 

no1iulyk

New member
Mar 29, 2007
4
0
hello!

i've managed to use your tool, but there is a mention:
i've used it in a ubuntu vm (latest) and the mountpoint directory is empty if i don't run everything as root
repacked ok after this

my question is if i have to add the other files originally found in my original firmware folder with the newly repacked firmware files.

original firmware content (TS10.1.2_20210505.171701_TW1-V2):
a53f244a-9cbf-11ea-bb71-8bb1f7c98e0b.*
a71a8002-9cbf-11ea-b64e-578022b8a84a
ab2e7e2e-9cbf-11ea-bb71-fbb02866c44e

repacked firmware content:
a53f244a-9cbf-11ea-bb71-8bb1f7c98e0b.*
 

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    Can anyone give the step by step instructions on how to use this file thanks
    Clearly explained below:

    TS10-Firmware-Workbench​

    Scripts intended to mount the Topway TS10 Firmware, make modifications and reassemble the firmware They can retrieve the firmware from specified location and after modification, they can put the firmware into another specified location

    Files:

    1-) config.ini = A file to setup parameters, paths for the original firmware and patched firmware, temp directory to work with firmware files and mount point to edit the firmware

    2-) import_original.sh = Retrieves the files .0 .1 .2 and .3 from the location specified in config.ini

    3-) import_patched.sh = Retrieves the same files that 'import_original.sh' but from the patched location specified in the config.ini (normally a firmware that you've already patched before)

    4-) unpack.sh = Unpack the imported firmware and create the mount moint (as specified in the config.ini file) to work with the firmware

    5-) repack.sh = Unmount the modified firmware from the mount point, delete the mount point, split the firmware in files .0 .1 .2 and .3 and move it to the patched directory as specified in config.ini

    6-) inject_tweaks.sh = Modify locale, dataroaming and remove (if necessary) the values in ro.fota.device to avoid message "UI unauthorized, please contact the supplier"

    7-) inject_mods.sh = This will copy all the contents of the '_mods' folder inside firmware. I.E. I put a 'gps_debug.cfg' inside 'system/etc/' and it will be injected into firmware overwritting the existent

    :cool: inject_su.sh = This will inject su binary into firmware as a daemon, this is dangerous as the firmware is permanently rooted and the apps don't ask for permissions (they already have the root access) USE AT YOUR OWN RISK

    9-) clean_local.sh = This script will unmount the firmware and delete it, it will also delete temporary files. as its name says, it cleans the dir !

    External (included) tools:

    tools/twt (Topwaytool) forked from https://github.com/mkotyk/topwaytool

    _mods folder containing a sample file 'gps_debug.cfg'

    N'joy it !
    1
    Yeah I know.. but hardware is similar.. hoping this root method might work as well.

    Btw, this is coming from an armchair engineer
    Method works for FYT based platforms and not Topway based ones as the flash sequence isn't the same !
  • 3
    Hi fellows

    I'm a kind of newbie in the Android world, but I created a set of shell scripts to work with Topway TS10 Firmware:


    ---------------------------------------------------------------------------------------------------------------

    TS10-Firmware-Workbench​

    Scripts intended to mount the Topway TS10 Firmware, make modifications and reassemble the firmware They can retrieve the firmware from specified location and after modification, they can put the firmware into another specified location

    Files:

    1-) config.ini = A file to setup parameters, paths for the original firmware and patched firmware, temp directory to work with firmware files and mount point to edit the firmware

    2-) import_original.sh = Retrieves the files .0 .1 .2 and .3 from the location specified in config.ini

    3-) import_patched.sh = Retrieves the same files that 'import_original.sh' but from the patched location specified in the config.ini (normally a firmware that you've already patched before)

    4-) unpack.sh = Unpack the imported firmware and create the mount moint (as specified in the config.ini file) to work with the firmware

    5-) repack.sh = Unmount the modified firmware from the mount point, delete the mount point, split the firmware in files .0 .1 .2 and .3 and move it to the patched directory as specified in config.ini

    6-) inject_tweaks.sh = Modify locale, dataroaming and remove (if necessary) the values in ro.fota.device to avoid message "UI unauthorized, please contact the supplier"

    7-) inject_mods.sh = This will copy all the contents of the '_mods' folder inside firmware. I.E. I put a 'gps_debug.cfg' inside 'system/etc/' and it will be injected into firmware overwritting the existent

    :cool: inject_su.sh = This will inject su binary into firmware as a daemon, this is dangerous as the firmware is permanently rooted and the apps don't ask for permissions (they already have the root access) USE AT YOUR OWN RISK

    9-) clean_local.sh = This script will unmount the firmware and delete it, it will also delete temporary files. as its name says, it cleans the dir !

    External (included) tools:

    tools/twt (Topwaytool) forked from https://github.com/mkotyk/topwaytool

    _mods folder containing a sample file 'gps_debug.cfg'

    N'joy it !


    ---------------------------------------------------------------------------------------------------------------
    1
    Run as root

    only a53***** files needed !
    1
    Yes, that's right, I forgot about mount command, so you have to run it as root anyway
    1
    Absolute beginner to this so some basic questions!

    Where can I get the firmware for my unit? Ask the seller? Or can I extract from the HU (head unit)?

    I have 360 cameras and PA(park assist) is this all stored on the firmware? There will be no issues after update?

    Best way to backup existing apks? Do I need to do this? If not will I lose license keys like the post above?

    I heard of issues with a bootloop as the units have different size/resolution screens and you need to configure this. With my own firmware, do I need to do this?

    Do I need to do all the steps in your ordinal post or do I only need to get the firmware and do the 8th option if I mainly wanted root?

    Safest method for updating? Do I need to backup ROM?

    Any chance for a video or step by step guide? Lol
    1
    Chisene firmware could try to send personal data to their servers, you must snife the wifi/4G connections for potential data flow to china serversdd and what's in the packets !
    Ahhh, I see. So its a personal data privacy issue. Ok. If that is all, I can work with that. I don't plan on doing anything on my head unit involving sensitive information. The only thing that could potentially be at risk, for me anyway, is a gmail account, but I could always use an alternate account that is JUST for the head unit. The chinese can see where I go, and even listen to my music for all I care. I don't use Android Auto or CarPlay either.


    So, given the stated privacy risk, as long as I keep everything sensitive I do to my phone and PC only, and use a separate google account for just the head unit I could potentially mitigate the risk? Its really just used as a multimedia device with GPS, if I limit it to that activity I don't see a high level of risk. If im wrong, please clue me in. My phone does mostly everthing else better anyway and is on me when driving.