You will be solely responsible for any damage caused to your hardware/software/warranty/data/cat/etc...

Amlogic bootrom supports booting from USB. This method of boot requires an USB host to send a signed bootloader to the bootrom via USB port.

This tool exploits a vulnerability in the USB download mode to load and run unsigned code in Secure World.

• s905d3 : Khadas VIM3L, Chromecast with Google TV
• s905d2 : Spotify Car Thing

$ ./amlogic-usbdl <target_name> <input_file> [<output_file>]
	target_name: s905d3 s905d2
	input_file: payload binary to load and execute (max size 65280 bytes)
	output_file: file to write data returned by payload

Payloads are raw binary AArch64 executables. Some are provided in directory payloads/.

Please see LICENSE.