Resources to run a custom OS like Ubuntu on Google Nest Hub (2nd Gen) (elaine) by exploiting a vulnerability in U-Boot.

• Exploitation tool CHIPICOPWN

1. Install ubuntu-22.04-preinstalled-desktop-arm64 raspi.img on USB flash drive :

$ dd if=ubuntu-22.04-preinstalled-desktop-arm64 raspi.img of=/dev/<device> bs=1M

2. Copy the following files in partition system-boot :

• u-boot-elaine.bin : U-Boot image for elaine
• u-boot-elaine.cmd : U-Boot environment file
• boot.img : Boot image (Kernel for elaine, DTB, initrd)

See https://github.com/frederic/chipicopwn#usage

The provided ramdisk initrd.img comes from Ubuntu preinstalled image for ARM64, and has been repacked to integrate the touchscreen firmware used by elaine device.

# Unpack
gzip -cd initrd-ubuntu.img | cpio -i
# Repack
find . | cpio -o -H newc | gzip -9 > initrd.img