edlrooter

By Roee Hay (@roeehay), Aleph Research

adb shell -> root exploit for Google Nexus 6 using a leaked Qualcomm Emergency Download (EDL) Mode programmer

Exploits CVE-2017-13174 for downgrading ABOOT to a CVE-2016-10277 (initroot susceptible version).

Please note:

1. Google could not reproduce our PoC (getting into EDL).
2. Our test device has a relocked bootloader.

More details:

1. Blog
2. Advisory