Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Select an option

  • Save CypherpunkSamurai/969eb2ab498809e7528c0ec03f592713 to your computer and use it in GitHub Desktop.

Select an option

Save CypherpunkSamurai/969eb2ab498809e7528c0ec03f592713 to your computer and use it in GitHub Desktop.
Spreadtrum and Unisoc Flashing Tools and Reverse Engineering

Random Spreadtrum and Unisoc Tools

I got on a journey to unlock Spreadtrum Unisoc device last week. I'm used to flashing MTK and Qualcomm device, my research so far is listed here:

  1. https://github.com/onekey-sec/ubi_reader
  2. https://github.com/TomKing062/spreadtrum_flash
  3. https://github.com/ilyakurdyukov/spreadtrum_flash
  4. https://github.com/TomKing062/CVE-2022-38694_unlock_bootloader
  5. https://github.com/divinebird/pacextractor
  6. https://github.com/HadiKhoirudin/spreadtrum_unisoc_at
  7. https://gitlab.com/suborg/uniflash
  8. https://github.com/Mani-Sadhasivam/uwpflash
  9. [DRIVERS from CM2] https://dl1.infinity-box.com/00/pub/?dir=/soc-drivers
  10. [CM2 Tools. Use the CM2SP3, and the CM2SP2 for the BootPack (FDL Collection)] https://dl1.infinity-box.com/00/pub/?dir=/software
  11. [More CM2 Archives Maybe usable?] https://dl1.infinity-box.com/00/
  12. https://github.com/iscle/subut - web tool for unlocking bootloader with spreadtrum crypto key and fastboot (didnt work for T760)
  13. https://github.com/unisoc-android/unisoc-android.github.io - same
  14. [More BootRoom Collection] https://github.com/TomKing062/unisoc_bootrom
  15. VMBeta Creator - https://github.com/werasik2aa/SPD-VBMETA-TOOL
  16. https://github.com/ilyazx/bzpwork
  17. Simple FDL Bootrom loader - https://github.com/iscle/sprdclient
  18. C# Spreadtrum Flash tool - https://github.com/HadiKhoirudin/iReverse-UniSPD-FRP-Tools-Non-Console-x86-CSharp
  19. https://github.com/fxsheep/sharkalaka - Spreadtrum Unisoc Tool
  20. sign BootChain images and vbmeta - https://github.com/TomKing062/vendor_sprd_proprietories-source_packimage
  21. .pac file unpacker in go- https://github.com/NasdaqGodzilla/UNISOC_SPRD_PAC_UNPAC
  22. VB.net Tool for Unisoc and Spreadtrum - https://github.com/HadiKhoirudin/ireverse_unisoc_flash_download_nonconsole
  23. .pac flasher for unisoc and spreadtrum - https://github.com/Mani-Sadhasivam/unisoc-dloader
  24. unisoc bootrom flasher protocol in webusb - https://github.com/iscle/sprd-flash
  25. unpack .pac - https://github.com/iscle/unpac
  26. SPRD write IMEI - https://github.com/Alephgsm/SPD-WriteIMEI-R1.6.4.1
  27. Write Unisoc Dload - https://github.com/Alephgsm/DLoader
  28. Python Fastboot OEM Puller - https://github.com/TomKing062/python-fastboot-oem-pull
  29. Yet another Spreadtrum Talker - https://github.com/kagaimiq/sprdproto
  30. Spreadtrum Flash - https://github.com/emtee40/spreadtrum_flash
  31. Spreadtrum flashing tool - https://github.com/jhswartz/usx
  32. https://github.com/brucexu12345/Full-set-of-mass-production-software-and-hardware-materials-for-Spreadtrum-UNISOC-T760-T820.

What I've Learnt

  1. FDL1 and FLD2 are flashed to the ram to allow flashing other partitions. These two are like micro kernels that allow EDL communication etc.
  2. U2S or Usb 2 Serial Diag allow serial communication but that only stays active for a few seconds, you need to activate diag mode to flash FDL
  3. CM2SP3 is the latest version of CM2SPD CM2SP CM2SP2 tools. It does not come with the boot
  4. Spreadtrum T760 has the same as SC9620 (Check the CM2SP3_234b2.7z from CM2SP3 it has the boot files, also check firmware unlock by TomKing)
[main]
soc=T760
link=SoC\sc9620
  1. .pac files are firmware files that

Related Info and Thread

FDLs Collections

@davidnoruwa
Copy link

thanks boss so what was the solution mine stopped at fdl 2

@CypherpunkSamurai
Copy link
Author

@davidnoruwa possibly invalid FDL file, or FDL sizes are wrong. find right fdl file

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment