Finally there is code execution on this Shi**y Realtek RTL8752H and RTL8762ESL ARM SoC🥳

Full custom firmware goes Brrrrr

These chinese vendors like Realtek Bluetrum and Jieli only care about copy protection and cribble down a perfectly fine ARM Core with their tooling🙄

DOOM on a Vape via ScreenSharing and custom Firmware 😁

Source code on Github here:
github.com/atc1441/Vape...

And find a full video on Youtube with more details:
youtu.be/rVsvtEj9iqE

Thats Code execution on the infamous

AB5682B BLE SoC used in the cheap headsets and other BLE hardware🥳

This Bluetrum Chip series is ugly 😅 Debug via 1 Wire UART and a somewhat secured proto

This code now runs from RAM since we next need a loader to dump an write to Flash

One more Doom port^^

This time on an Epaper Translator🥳

Running an XR872at SoC and an 296x152 BW E-Paper display with around 400ms of refresh time

Find a teardown done some time ago here:
x.com/atc1441/stat...

Full Youtube video here:
youtu.be/PvTJpbVPxUo

Lets take a closer look inside an 20€ Aliexpress Alarmo clone "Smart AI Kids clock" based on the XR872ats SoC

And of course port Doom to it😅

Full Teardown Youtube video:
youtu.be/QutpZBTJRDY

Github repo with full source code:
github.com/atc1441/XR87...

DOOM on a Toothbrush? Sure!

Info's to this,
The Toothbrush contains an ESP32-C3 with 4MB Flash.
With the codebase from Spritetm github.com/Spritetm/esp... and wad github.com/fragglet/min... I was able to get the complete size down to the 4MB🥳

(Reupload from you know where for the sake of history)

Mendatory Dong DOOM ...

In depth details in this Youtube Video:
www.youtube.com/watch?v=rAE1...

(Reupload from you know what platform for the sake of history)