MTK Client 1.6.3命令行参数

最新推荐文章于 2026-05-02 08:31:37 发布

翻译最新推荐文章于 2026-05-02 08:31:37 发布 · 1k 阅读

标签

#batch

本文介绍了MTKFlash/ExploitClientV1.6.3，一个针对MTK平台的命令行工具，用于执行各种操作，包括读写分区、刷写固件、提取BIOS信息、执行payload和进行安全测试。

MTK Flash/Exploit Client V1.6.3 (c) B.Kerler 2018-2023

usage: mtk [-h]
{script,printgpt,gpt,r,rl,rf,rs,ro,w,wf,wl,wo,e,es,ess,footer,reset,dumpbrom,dumpsram,dumppreloader,payload,crash,brute,gettargetconfig,peek,stage,plstage,logs,meta,da}
...

MTK Flash/Exploit Client V1.6.3 (c) B.Kerler 2018-2023

positional arguments:
{script,printgpt,gpt,r,rl,rf,rs,ro,w,wf,wl,wo,e,es,ess,footer,reset,dumpbrom,dumpsram,dumppreloader,payload,crash,brute,gettargetconfig,peek,stage,plstage,logs,meta,da}
Valid commands are: printgpt, gpt, r, rl, rf, rs, w,
wf, wl, e, es, footer, reset, dumpbrom, dumpsram,
dumppreloader, payload, crash, brute, gettargetconfig,
peek, stage, plstage, da, script
script Run text script
printgpt Print GPT Table information
gpt Save gpt table to given directory
r Read flash to filename
rl Read all partitions from flash to a directory
rf Read whole flash to file
rs Read sectors starting at start_sector to filename
ro Read flash starting at offset to filename
w Write partition from filename
wf Write flash from filename
wl Write partitions from directory path to flash
wo Write flash starting at offset from filename
e Erase partition
es Erase partition with sector count
ess Erase sector with sector count
footer Read crypto footer from flash
reset Send mtk reset command
dumpbrom Try to dump the bootrom
dumpsram Try to dump the sram
dumppreloader Try to dump the preloader
payload Run a specific kamakiri / da payload, if no filename
is given, generic patcher is used
crash Try to crash the preloader
brute Bruteforce the kamakiri var1
gettargetconfig Get target config (sbc, daa, etc.)
peek Read memory in patched preloader mode
stage Run stage2 payload via boot rom mode (kamakiri)
plstage Run stage2 payload via preloader mode (send_da)
logs Read logs
meta Enter meta mode
da Run da special commands