Payload injection through android

fotomihalos · Jan 30, 2023

Hello everyone,
So, I am trying to inject fusee (1.3) through my Redmi 8.0 android phone with no success. I inject the same payload through RCMloader and through PC (TegraRCMGUI) with no problem. I have tried NXloader and Rekado, same result, the RCM switch is recognized right away but I get the message SUBMITURB Failed

The phone is OTG capable and activated (I have tried e.g. connecting a ps4 controller and works right away). I have used 1) a type c> type c cable for data transfer (bothways) and 2) an OTG USB adapter (TPlink UC400 is the model) with the following setup Phone>type C male to A female adapter> A male to C male to switch. I am guessing it's the cable? Does anyone have any experience with a particular cable working with Redmi 8 device? Thank you very much!

thesjaakspoiler · Jan 30, 2023

Someone mentions in the thread below that not all phones that support OTG do actually work.
https://github.com/MenosGrante/Rekado/issues/3#issuecomment-454383993
You need an Android phone with XHCI support.
I also don't know the details but it seems that all payload injectors need that in order to work.
https://gzipwtf.com/what-is-the-difference-between-xhci-and-ehci/

binkinator · Jan 31, 2023

You might be on to something then…

The Enhanced Host Controller Interface (EHCI) specification describes the register-level interface for a host controller for the Universal Serial Bus (USB) Revision 2.0.

XHCI Mode = Smart Auto – The on-board USB 3.0 port function like a 2.0 port before OS USB 3.0 driver load. If you reboot the OS, during this reboot BIOS phase, BIOS is “Smart” enough to avoid downgrade the USB 3.0 port back to 2.0 functionality before OS USB 3.0 driver load

https://www.gsmarena.com/xiaomi_redmi_8-9800.php

LightBeam · Jan 31, 2023

I've stumbled on that https://forum.xda-developers.com/t/...-usb-2-0-devices-to-behave-like-xhci.3835603/

I've got a Mi 10 Lite 5G, which seems to have the same specs (USB C 2.0, OTG), I'm using the exact same setup with the adapter and all, and it works fine. So my guess is that I have an xhci driver but you don't (you have ehci). I have a custom rom installed (xiaomi.eu, latest stable MIUI 13 available for my device) so maybe it's thanks to that ? Idk. Did you rooted and installed a custom rom on your phone or is it stock ?
I don't see any magisk module on the manager repo that could help so I have no clue how to fix that, but at least you know the cause

guily6669 · Jan 31, 2023

You can also try SXTools 1.1, it injects pretty fine for me even if forced closed on android, despite being SX stuff (stolen code blah blah blah) it allows to change the payload for whatever you want...

Though it will probably not work due to the mentioned above reason but you don't lose anything in trying.

I think there was a simple app to test on your device that would give you a general idea if it works or not to send the payload but I don't have a clue on its name.

Also the OTG cable need to be on the phone side and not on switch...

Ps: gladly all my current devices work (Sony Xperia Z2, Nvidia shield tablet and TCL 10 Pro)...

Edit: forgot to say Samsung 4 example is usually not very friendly and I wouldn't be surprised that even having the needed driver would automatically work on all models cause they want you to use UBC port mostly for charging only and they want you to only install apps from samsung store and use only basic features and also they don't want you to repair their phones lately just like apple :hateit:

Even the screen sharing is a pain in the ass with Samsung to some devices unless it's a Samsung TV which should work fine all the time LOL

fotomihalos · Jan 31, 2023

Thank you all for the immediate and detailed answers and informative links.
@binkinator
"If you reboot the OS, during this reboot BIOS phase, BIOS is “Smart” enough to avoid downgrade the USB 3.0 port back to 2.0 functionality before OS USB 3.0 driver load".
I don't think I got you there. Is this a possible solution? I am so unfamiliar with android...

LightBeam said:
Did you rooted and installed a custom rom on your phone or is it stock ?

No, my phone is stock and unfortunately I do not have the experience or knowledge of android systems to be in position to root my device or change the kernel.

LightBeam said:
I don't see any magisk module on the manager repo that could help so I have no clue how to fix that, but at least you know the cause

Bittersweet...

guily6669 said:
You can also try SXTools 1.1...

I just did but it doesn't work either. I do not get a log message at all, but the switch needs to be rebooted, just like when I get the "SUBMITURB FAILED" message; and to be more specific, I need to hold down the power button for 10seconds, release and then tap it again to boot into OFW.

guily6669 · Jan 31, 2023

You will have to probably ("sadly") root the phone and add the needed driver... The forum posted here on @LightBeam post above XDA is one of the best for such stuff, they will probably be able to help you there unless someone here can give you a full tutorial for your device which I have 0 clue...

I only rooted a old Wiko my self and Nvidia Shield Tablet (this one was authorized by Nvidia it self since I had problems, they told me I could do it without loosing warranty in my case and also I forwarded the mail to the store to get a replacement cause sadly it didn't fix anything I needed, it was hardware problems, not anything to do with switch payloads...)...

EDIT: Some brands might allow you to root without loosing warranty, at least a friend with some Motorola told me in his model motorola allows to root and even give the needed software, but this is probably very unlikely to happen with maybe 99% of phones out there. If you have any hardware problem and you can still unroot it, you should do it and lock the bootloaded to default before sending to any repair to the brand cause most will probably deny warranty if you root which is STUPID.

Though you can always mail the manufacturer and explain the situation and that you need to root it to add this needed feature to see if they allow it without loosing warranty (if you are out of warranty, forget about it or if you just don't care, just root it).

https://forum.xda-developers.com/all-forums-by-manufacturer

binkinator · Jan 31, 2023

fotomihalos said:
Thank you all for the immediate and detailed answers and informative links.
@binkinator
"If you reboot the OS, during this reboot BIOS phase, BIOS is “Smart” enough to avoid downgrade the USB 3.0 port back to 2.0 functionality before OS USB 3.0 driver load".
I don't think I got you there. Is this a possible solution? I am so unfamiliar with android...

Those were just quotes I found in the links in the message I responded to that talk about the difference between the two Host Controller Interface specs. I think it has merit.

You will probably need to do more research on your particular phone and if it can do XHCI. @guily6669 ’s link is probably the best place to start digging.

Payload injection through android

Member

Well-Known Member

Garfield’s Fitness Coach

Well-Known Member

GbaTemp is my Drug

Member

GbaTemp is my Drug

Garfield’s Fitness Coach

Similar threads

Popular threads in this forum