Hisense Android TV - Revision history

Zenofex at 04:21, 8 March 2015

2015-03-08T04:21:08Z

← Older revision		Revision as of 04:21, 8 March 2015
Line 29:		Line 29:

	For the Hisense device specifically, you can mount the /system partition, which is EXT4. From here, just copy over the SuperSU APK into app, and the su binary to bin. Ensure that you properly chown the su binary (4755). This will allow for root access via ADB, and further examination of the system internals.		For the Hisense device specifically, you can mount the /system partition, which is EXT4. From here, just copy over the SuperSU APK into app, and the su binary to bin. Ensure that you properly chown the su binary (4755). This will allow for root access via ADB, and further examination of the system internals.

			==eMMC Root Demo==
			{{#ev:youtube\|da9U-zcrBz4}}

Zenofex at 09:59, 31 December 2014

2014-12-31T09:59:49Z

← Older revision		Revision as of 09:59, 31 December 2014
Line 24:		Line 24:
	VCC, VSS, CMD, CLK, DAT0 (These lines all normally accessible via SMD resistors)		VCC, VSS, CMD, CLK, DAT0 (These lines all normally accessible via SMD resistors)

	~~GTVHacker~~ recommends using a device like the SD Card Sniffer from Sparkfun to interface between your SD card reader, and the flash. By adding pins to the SD Card sniffer board, it facilitates easy analysis of the correct pinout, and also reduces the risk of damage due to repeated soldering to your SD card reader.		Exploitee.rs recommends using a device like the SD Card Sniffer from Sparkfun to interface between your SD card reader, and the flash. By adding pins to the SD Card sniffer board, it facilitates easy analysis of the correct pinout, and also reduces the risk of damage due to repeated soldering to your SD card reader.

	The Hisense Android TV utilizes an EMMC flash. Using the pinouts above, you can connect the flash to a SD card reader, and rewrite it's contents.		The Hisense Android TV utilizes an EMMC flash. Using the pinouts above, you can connect the flash to a SD card reader, and rewrite it's contents.

	For the Hisense device specifically, you can mount the /system partition, which is EXT4. From here, just copy over the SuperSU APK into app, and the su binary to bin. Ensure that you properly chown the su binary (4755). This will allow for root access via ADB, and further examination of the system internals.		For the Hisense device specifically, you can mount the /system partition, which is EXT4. From here, just copy over the SuperSU APK into app, and the su binary to bin. Ensure that you properly chown the su binary (4755). This will allow for root access via ADB, and further examination of the system internals.

Zenofex: 1 revision: Moving from DC22 to main site.

2014-08-17T08:22:59Z

1 revision: Moving from DC22 to main site.

← Older revision	Revision as of 08:22, 17 August 2014
(No difference)

CJ at 01:24, 7 August 2014

2014-08-07T01:24:59Z

New page

__FORCETOC__
{{Disclaimer}}
[[File:HisenseAndroidTV.jpg|200px|left|thumb]]
[[Category:Televisions]]
This page will be dedicated to a general overview, descriptions, and information related to the Hisense Android TV.

== Hisense Android TV ==

The Hisense Android TV is the first television on the market to feature "Google Services", and runs Android 4.2.2. Using a newer Marvell chipset, the hardware is essentially identical to that of a second generation Google TV.

== EMMC Pinout ==
<gallery>
file:Hisense_Vision_TV_EMMC_Pinout.jpg
</gallery>

== Exploitation ==

EMMC refers to an Embedded Multi-Media Card which has native Linux support. This means it works just like an SD card, and for our purposes, just filesystem access. Error Correcting Code and Out of Bounds data, which are usually a large hassle with NAND flash memory is handled in hardware, and is transparent, which makes it easier for reading and writing.

Although eMMC memory can have 9 Pins (VCC, VSS, CMD, CLK, DAT0-DAT4) it can also operate on SPI / Single Bit mode using only 1 DAT line. In short, reading/writing an eMMC chip can be done with only 5 wires, which does not require specialized hardware or software tools.

Required Minimum Connections:
VCC, VSS, CMD, CLK, DAT0 (These lines all normally accessible via SMD resistors)

GTVHacker recommends using a device like the SD Card Sniffer from Sparkfun to interface between your SD card reader, and the flash. By adding pins to the SD Card sniffer board, it facilitates easy analysis of the correct pinout, and also reduces the risk of damage due to repeated soldering to your SD card reader.

The Hisense Android TV utilizes an EMMC flash. Using the pinouts above, you can connect the flash to a SD card reader, and rewrite it's contents.

For the Hisense device specifically, you can mount the /system partition, which is EXT4. From here, just copy over the SuperSU APK into app, and the su binary to bin. Ensure that you properly chown the su binary (4755). This will allow for root access via ADB, and further examination of the system internals.