R0rt1z2’s Dumpster

Public

View Channel

3.9M

775K

290

Can't Join? @r0rt1z2_dumpster

1.3k Members

Updated: May 4, 2026 at 2:12 PM

R0rt1z2’s Dumpster

A dumpster for personal projects and random stuff some people might find interesting

Join @r0rt1z2_dumpster for exclusive people and interesting content and discussions in 1

Ranking

Global Ranking

#456

Language Ranking

#45

Category Ranking

#23

-1

Participant Growth (Last 2 Days)

Total: 1.3K

24h growth: +19 2%

Latest Posts

R0rt1z2’s Dumpster

Apr 27, 2026, 06:02 PM

Nothing has patched fenrir with the latest NOS 4 stable OTA update, but it’s still possible to use it because they left the fix out of the NOS 4 beta release. As a result, you need to mix the beta Preloader with the stable LK for it to work on NothingOS 4.…

2,710

R0rt1z2’s Dumpster

Apr 27, 2026, 06:02 PM

Dropping this here as well, might be of interest to anyone with this phone ;) https://xdaforums.com/t/unlock-motorola-moto-g05-g15-lamu.4763522

3,490

R0rt1z2’s Dumpster

Apr 27, 2026, 06:02 PM

📷 Photo

MediaTek DA2 exploit: heapb8

After weeks of reverse engineering and countless hours of debugging, https://github.com/shomykohai/ and I finally cracked the DA2 V6 exploit everyone's been talking about!

We decided to call it heapb8 ("heapbait"), because Chimera baited us into chasing the wrong vulnerability for way too long.

Full writeup with all the technical details: https://blog.r0rt1z2.com/posts/exploiting-mediatek-datwo/

https://github.com/shomykohai/penumbra/commits/main/

21,800

135

R0rt1z2’s Dumpster

Apr 27, 2026, 06:02 PM

📷 Photo

Back in 2024 (before this channel existed) https://blog.r0rt1z2.com/posts/hacking-2014-tablet, which has a MT8135 SoC.

Nobody had ever done this before and this SoC is very quirky. BROM USBDL mode is disabled, the Preloader is split into two parts, and only 3 devices in the world use this SoC.

I managed to do everything, even gain PL3 (ARMv7 equivalent of EL3) arbitrary code execution, but every attempt at dumping BROM at 0x0 returned a fake far jump instruction pointing to the Preloader entry instead of actual ROM data.

This pretty much had me stuck for almost 2 years and I eventually gave up.

Turns out the Preloader powers down the Boot ROM after boot by setting a bit in SRAMROM_SEC_CTRL, which makes the bus interface return a generated jump instead of real ROM contents.

.. one bit flip later, the full BROM dumped cleanly :D

https://github.com/Zenofex/SoC-BootROMs/pull/23

(I know this is useful to pretty much nobody, but it feels like a trophy to me.)

3,090

R0rt1z2’s Dumpster

Apr 27, 2026, 06:02 PM

📷 Photo

By the way, I know this is kind of funny (and a bit stupid, especially coming from me), but the phone lasted less than a day. I hard bricked it by flashing the wrong Preloader image and came to two conclusions that might help others: - Always verify which…

4,960

R0rt1z2’s Dumpster

Apr 27, 2026, 06:02 PM

Not tech-related, but here’s a picture channel that a few others and I run, in case anyone here is interested in photography.

It’s not professional photography, but you can still find some nice wallpapers :)

https://t.me/gsmc_pics

3,220

R0rt1z2’s Dumpster

Apr 27, 2026, 06:02 PM

The 1st Generation Echo Show 8 (2019), "crown", joins the party! The unlock process is the same as the Echo Show 5. Special thanks to @fieryflames for all the testing and support, and to @TheVancedGamer and @bengris32 for figuring out how to properly reset…

3,290

R0rt1z2’s Dumpster

Apr 27, 2026, 06:02 PM

📷 Photo

Nothing has patched fenrir with the latest NOS 4 stable OTA update, but it’s still possible to use it because they left the fix out of the NOS 4 beta release.

As a result, you need to mix the beta Preloader with the stable LK for it to work on NothingOS 4.

This release supports the latest NothingOS 4 stable OTA/update:
Nothing/Pacman/Pacman:16/BP2A.250605.031. A3/2511201747:user/release-keys

As usual, to make this work, your bootloader must be unlocked, and you must flash the included Preloader along with fenrir.

No issues have been observed when combining the beta Preloader with the stable LK.

THIS IS ONLY FOR THE NOTHING PHONE 2A.

Flashing a Preloader from any other device will hard-brick the phone. Proceed with extreme caution.

You are responsible for anything that happens to your device.

Installation
- Ensure the bootloader is unlocked and the device is already on NothingOS 4 (stable).

- Reboot into bootloader mode (not fastbootd) using adb reboot bootloader or Power + Volume Up.

- Flash the Preloader to your active slot (example uses slot a):
fastboot flash preloader_a preloader_raw.img

- Flash fenrir to LK:
fastboot flash lk pacman-fenrir.bin

- Reboot with fastboot reboot. A factory reset may be required.

Read more and download everything from the GitHub releases section: https://github.com/R0rt1z2/fenrir/releases/tag/pacman-v2.0

R0rt1z2’s Dumpster

Apr 27, 2026, 06:02 PM

📷 Photo

I really wonder whether the Lab126 employee who developed the Echo Dot firmware and “backported” A/B got fired.

If the device fails to boot properly three times in a row (for example, due to a bad boot image or a bad recovery image), it will brick itself and refuse to go past the Preloader.

At that point, you’re forced to open it and short the eMMC data lines to access BROM and reset the BCB boot counter.

This isn’t really meant to be an informative post, more of a rant, because I just got absolutely owned by this piece of code that someone thought was a good idea to include.

2,570

R0rt1z2’s Dumpster

Apr 27, 2026, 06:02 PM

Happy to announce that I’ve just released the new version of kaeru I’ve been working on for the past few months! This new version supports multiple devices and features a modular framework that makes it easy to customize the bootloader’s behavior by editing…

3,420

Showing 10 of 10 posts

No more posts

Loading posts...

Rating

User Reviews (0)

No reviews yet. Be the first to share your experience!

Loading reviews...

Related Telegram Channels

Magic Tipster 🧙

970

tapswap community

12.5m0

alpine linux espanol

Loading recommended channels...

R0rt1z2’s Dumpster

R0rt1z2’s Dumpster

Ranking

Participant Growth (Last 2 Days)

Latest Posts

Rating

User Reviews (0)

Related Telegram Channels

Magic Tipster 🧙

tapswap community

alpine linux espanol

FreeFont.Pro — Best Free Fonts Daily

EZKROW

Tricks Hub | Latest Tricks

[🛡] MTProxyBoy

clover's corner.𖥔 ݁ ˖𓂃.☘︎ ݁˖

Related Telegram Channels

Magic Tipster 🧙

tapswap community

alpine linux espanol

FreeFont.Pro — Best Free Fonts Daily

EZKROW

Tricks Hub | Latest Tricks

[🛡] MTProxyBoy

clover's corner.𖥔 ݁ ˖𓂃.☘︎ ݁˖

User Reviews (0)

Latest Posts