Marcel
banner
mgdproductions.com
Marcel
@mgdproductions.com
- Cat lover
- AKA ProgrammeerMeneer
- Marceld505 on the bird app
- Web, App and WebApp developer
- Just doing some dumb shit as always
- Breaking and exploiting random Android devices
Subway surfers on a vending machine payment terminal that somehow is in debug mode (the seller did not mention this fact, but thanks anyways lol)
August 18, 2025 at 5:41 PM
Newer helios gen zebra devices have now also been unlocked by patching the bootloader signature check out and setting an automatic relock system to a very big number 😅

This uses the same concept as unlocking the quest VR headsets. Zebra lets you downgrade to a vulnerable bootloader!
April 21, 2025 at 4:29 PM
So apparently the password for the zebra scanners bootloader unlock on the older atlas generation of devices is just hardcoded in the bootloader. With some help from claude i managed to figure it out, zebra_atlas. Could have even guessed that one tbh LOL

Image credit: tamay_idk on the bird app
April 21, 2025 at 4:29 PM
There are also tickets that have a HOLD or DELETED state.

HOLD:
IGNITE ($1,400): 300
FUEGO ($5,000): 200
PHOENIX ($25,000): 50
PROMETHEUS ($1,100,000): 8

DELETED:
IGNITE ($1,400): 700
FUEGO ($5,000): 500
PHOENIX ($25,000): 1340
PROMETHEUS ($1,100,000): 0

(2/3)
April 13, 2025 at 7:28 PM
Looking at the ticketing site for FYRE Festival 2 and i noticed it makes a request that returns a shit ton of data, turns out you can see how many tickets have sold.

IGNITE ($1,400): 79
FUEGO ($5,000): 22
PHOENIX ($25,000): 6
PROMETHEUS ($1,100,000): 0

(1/3)
April 13, 2025 at 7:28 PM
If there is anyone interested in messing with the playstation portal, dumps of a few different android rom versions (launch fw to current) have been made and are now on tadiphone.

dumps.tadiphone.dev/dumps/playst...
April 12, 2025 at 11:17 PM
Gotta say this emmc reader is the best thing i have purchased recently. Been dumping all sorts of android devices with it!
March 9, 2025 at 12:02 PM
Vodafone?!?!?!
March 8, 2025 at 12:32 PM
So as it turns out, the Humane AI Pin has debug pins that provide a usb connection behind the moon on the back. Currently it stays unauthorized in adb because it requires a certificate to authenticate. But i think the team is working on removing that so everyone can access it!
February 23, 2025 at 12:40 PM
Yo @niagaralauncher.bsky.social fix your launcher, it doesn’t even work properly on the Ubiquiti G2 reader pro!!!

/s
February 20, 2025 at 8:04 PM
Cheating in geometry dash by seeing more of the level
February 20, 2025 at 8:04 PM
Flappy bird impossible edition
February 20, 2025 at 8:04 PM
Full android firmware for the facebook portal is now available on tadiphone thanks to a dev unit falling into my hands: dumps.tadiphone.dev/dumps/facebo...

If you like to break android devices open, we need you! Facebook is slowly nerfing these devices without providing a bootloader unlock! 1/4
February 17, 2025 at 10:28 PM
Btw this is like a worldwide licencing deal across tons of brands which use the frameo software on their (cheap) picture frames
January 25, 2025 at 2:14 PM
The frameo app also checks for "Blacklisted hardware" which in this case means that there is either a mic or cam present. Frameo frames are not allowed to include a camera or microphone.
January 25, 2025 at 2:14 PM
All frameo picture frames get assigned a licence before they are allowed to work, this also makes it more secure so no one can just read/send arbitrary pictures to the frames because every frame uses a unique licence key to encrypt its data
January 25, 2025 at 2:14 PM
If you own a picture frame that works with the frameo app, congrats, basically all of them ship with root access out of the box as per the manufacturer instructions that i was able to obtain through simple subdomain scanning and html inspecting the manufacturer dashboard...
January 25, 2025 at 2:14 PM
Humane published their android open source notices and it confirms that the AI pin runs android 11 or 12

humane.com/legal/copyri...
January 4, 2025 at 6:09 PM
I broke the windows terminal
January 4, 2025 at 6:08 PM
me rn
December 25, 2024 at 10:06 PM
New AI robot thing from looirobot.com has their api keys up for grabs when you decomp the android app. Also it's chinese crapware soooo yeahhhh
December 20, 2024 at 11:28 PM
Well that was that
December 13, 2024 at 9:20 PM
Chat we finally did it
December 13, 2024 at 5:45 PM
BTW THEY STILL HAVEN'T ROTATED THE KEY
December 13, 2024 at 11:06 AM
Lies because a security noob (me) http inspected the app, changed a value and got access to someone else's chats lol
December 13, 2024 at 11:06 AM