Alex Vanderpot edited this page Jan 13, 2017 · 4 revisions

Amazon Echo Hardware Root via eMMC Debug Pins

The pages that follow describe the methods through which our small group of independent researchers have successfully rooted the Amazon Echo, allowing it to run a custom Linux kernel and to run custom code. The basic summary of the steps is:

Summary

  1. Format an SD card with this image: debian-sd.tgz (mirror)

  2. Connect an SD card adapter to the Amazon Echo debug pins as outlined in this diagram:

Echo Debug Pinout

Note that you will need to supply external power to the card reader as the +3v on the Echo is not active

  1. Insert the previously formatted SD card into the adapter

  2. Using a UART-USB reader connect to the serial terminal using the pinout in the diagram above in step 2 You can use a program like putty or other various software to read from the USB reader. The Armorview PL2303 device should work well and can be found on the Amazon store.

  3. Power on the Echo using the power cable supplied by Amazon.

  4. You should see a U-Boot log, followed by a login prompt. The username:password is:

root:echo

Resources

Clone this wiki locally
You can’t perform that action at this time.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session.
Press h to open a hovercard with more details.