collection of references

[orangecms]

quick intro

Qualcomm's initial protocol is called Sahara, binary over USB. 🏜️

They have a next-stage, signed loader based on XML messages.

Their fastboot implementation is in a fork of LK (little kernel).

tools and docs

https://github.com/bkerler/edl

https://github.com/bkerler/edl/blob/master/edlclient/Library/sahara_defs.py

https://github.com/bkerler/edl/blob/master/edlclient/Config/qualcomm_config.py

https://wiki.postmarketos.org/wiki/Lk2nd/lk1st

https://github.com/orangecms/qtools/blob/main/README_en.md

https://git.codelinaro.org/linaro/qcomlt/qdl.git

https://github.com/linux-msm/qbootctl

https://github.com/openpst/sahara

https://github.com/shinyquagsire23/sxr2250_edl_prog

https://github.com/hoplik/Firehose-Finder

https://www.qualcomm.com/content/dam/qcomm-martech/dm-assets/documents/qpss22-christopher-wade.pdf

vendor binaries

https://static.tp-link.com/upload/beta/2022/202202/20220221/M7650(EU)1.1_recoverFirmware_1.1.8_Build_201110_Rel.1026n_Only_AP.zip