I got bored tonight and saw this for a short amount of time after resetting and going to "about" in the setting. i should have screen-recorded this lol

never mind yall after going into the menu nothing seems to work. Too bad Dji will not open up the OS.

gamergamigguy42 Posted at 1-4 21:02
[view_image]

never mind yall after going into the menu nothing seems to work. Too bad Dji will not open up the OS.

Hi,
So I've been doing some homework.
What I've done so far:
When you use the rcfcc hack it authorizes adb (the "unauthorized" is changed to "device", so now the device accepts adb install, push etc.
Now you can install apps like "android hidden settings" and "Activity Launcher" to get to various settings.
In the settings you can push the "software information" several times to activate "developer setting".
There you can activate usb-debugging (which should be, of course, active). Then you can activate "OEM-unlocking".
When you install apps like "x-plore file manager" etc. you can give them "install from unknown sources" permission, so now you can install apps even without adb.
Then you can go "adb reboot bootloader"
And there you can go "fastboot oem unlock-go" to unlock the bootloader.
Now you can flash custom recovery, custom ROM etc.... If anyone would make custom ROM for the DJI RC.
The biggest bummer for the DJI RC is, that even though it has the armv8a achritecture, the ROM still runs at 32-bit armv7a so applications like Litchi etc. can't be installed. Even the official DJI FLY app need 64 bit system, so I believe the DJI made some "lightweight" app for this system.

C:\Program Files (x86)\Minimal ADB and Fastboot>fastboot oem device-info
...
(bootloader)    Device tampered: false
(bootloader)    Device unlocked: true
(bootloader)    Device critical unlocked: false
(bootloader)    Charger screen enabled: false
(bootloader)    Display panel:
OKAY [  0.070s]
finished. total time: 0.071s

After doing so, the DJI RC is stuck at "optimising apps" boot and nothing else happens.

WarCharlie Posted at 1-15 05:34
Hi,
So I've been doing some homework.
What I've done so far:

did you pay for the rcfcc hack?

Thanks for the info!

djiuser_ur6gtA6xXCb8 Posted at 2022-6-3 15:00
The easiest way is to get to developer options and enable USB debug. But it's difficult to find the system version to enable the developer options.

How can I get to developer-options?

WarCharlie Posted at 1-15 05:34
Hi,
So I've been doing some homework.
What I've done so far:

likely to preserve the battery power saving requirements of the device and antennas

anyway, have you stepped into building a ROM from Android Source for this as yet ? It's a bit of a scope...

Guys im new here. Whats the processor in this thing? Can someone give me full specs (ram, storage, cpu, gpu, etc) Im quite interested in porting UEFI (and in the future Windows) (idk it would be cool). Thanks!

Also I have been able to go in fastboot and edl on the RC 2 using power + r1 and edl with power + r2. I'm not ready to unlock the controller, so if anyone is interested in custom firmware for one of these things (RC 1 and 2) contact me so we can do things together. I don't check here often so please contact me on discord (@uguuuuorig)

I am just curious if the debug modes "tricks" and any combo keys/buttons- change between the firmware updates. Thus- what works for one firmware version does not apply if you update the box too the next firmware. In such might I suggest you add your firmware version when posting a comment?

That brings up my theory of paranoia- these DJI forums are being watched closely.  As we discover the Secrets that they try too hide/prevent and never mention... if one is noted as a vital concern... a patch (new firmware update is created and pushed out). Perhaps even too keep the consumer community guessing?

For Example- has anyone discovered how too reach the actual flight mode screed with the drone turned off (and its user settings) in the DJI mini 3, rc 2. firm- 1.03.1200?

.....Its rather easy ja know I just cant see any real useful purpose in doing so as all the settings are tied too the actual drone (which is not tuned on!

Takes about 5 seconds too do so.

User Removed the comments

it has been long time since I visited here. I see some of you have been discussing about doing a custom firmware.
Is that possible now ?
I assume developer options is only available after purchasing and installing the FCC hack.
Is that correct ?
And even then , it does not work with new firmware. ?

Nobody has revealed the secret done by FCC app ?

Guys, my goal in trying to access the DJI RC system is to be able to transmit the Drone's screen to my computer, do you think that after granting access to ADB it is possible to use the SCRCPY tool on the device?

Good Luck!

Hello everyone!

First I want to say something about DJIFCC. Its very obfuscated (the code is written in such a way, that its hard to decompile).
Second, the DJI RC and drones and things are controlled in DJI Assistant via the DJIService.exe file. It downloads firmware and flashes it, which tells me that it has the ability to authorize ADB.
Third, I want to say something about the modes I mentioned in my previous comment. I have found two modes: purple LED mode (EDL mode) and white LED mode (Android Safe mode I think) which im not sure what we can use for. The EDL mode is part of the processor, so with it we can flash firmwares and other things, but to use it we need the firehose files, which idk where to find. I managed to get the OTA update files, and I was able to find that the processor is likely the Snapdragon 820. If we get the firehose files we can unlock the bootloader via an exploit and unlock android. The exploit cant be patched.
https://github.com/Giovix92/EDLUnlock

I forgot to say that Im talking about the RC 2.
So we can take the following routes:
1. Find other modes with key combinations (again, we know the purple and white modes) (higher priority is fastboot, followed by recovery)
2. Check the processor by disassembling the device (not 100% sure about the processor being MSM8996)
3. Unlock bootloader from EDL if locked
4. Reverse engineer DJIService.exe or DJIFCC to unlock ADB (very hard)
How to enter purple mode:
Camera (not red circle) + C2 + Power press and hold until the screen turns off. Continue holding Camera + C2 + press and release the power button and it will enter that state.
DJI Firmware is based on Android 11
Processor is probably the Snapdragon 620 (MSM8996)
I don't think its possible to remove these combinations, I dont think we should worry. Also I suggest we move our conversations to other forums/Telegram.
Thats all that I know about the RC 2

I have created a telegram group for our effords and others:
https://t.me/+qJzOh4CuQ0UzNTVk

JukFiuuTech Posted at 6-8 12:55
I forgot to say that Im talking about the RC 2.
So we can take the following routes:
1. Find other modes with key combinations (again, we know the purple and white modes) (higher priority is fastboot, followed by recovery)

I got upated firmware I can got to Purple mode but the screen is off
I can't find a way to unlock adb with the latest firmware I have.

How to install old dji fly app version in that Rc2?

JukFiuuTech Posted at 6-9 02:10
I have created a telegram group for our effords and others:
https://t.me/+qJzOh4CuQ0UzNTVk

Hi, is there already a new link? This one seems unavailable...
Also, do you already know, how to authorize ADB on te RC2?

If you want to watch 4k videos, then all you need to do is open the android files app and play the videos from there.

JukFiuuTech Posted at 6-8 12:42
Hello everyone!

First I want to say something about DJIFCC. Its very obfuscated (the code is written in such a way, that its hard to decompile).

shouldn't we be able to do so? We have all the fiels we need (I think). ANybody wanna try this out on the RC-N2?
the firehose file is https://github.com/zenlty/Qualcomm-Firehose/blob/master/MSM8996.mbn
and as JukFiuuTech already mentioned, https://github.com/Giovix92/EDLUnlock to do so. Maybe we can get one step further through this. I dont take any responsibility.

Whoever wants to join the Telegram group, DM me on Discord first. My username is "uguuuuorig".

JukFiuuTech Posted at 8-23 05:08
Whoever wants to join the Telegram group, DM me on Discord first. My username is "uguuuuorig".

Request sent on discord. Would like to join telegram channel too,hoping I can help with something

Any updates?

Hello everyone! School has started and i have no more time to try and crack the RC!
Here is an invite link, you will have to get approved, but once you do we can all talk on this topic outside of this forum full of dji admins, devs and higher ups

Here: https://t.me/+DA2iuVgKenU2Mzlk

Here's something I did. Tutorial soon, you don't need to pay for anything.

whatbeato Posted at 10-12 01:20
Here's something I did. Tutorial soon, you don't need to pay for anything. [view_image]

Please ;)
Like lots of people, I'm interested.

So strange to avoid using those full features !!

JukFiuuTech Posted at 8-23 05:08
Whoever wants to join the Telegram group, DM me on Discord first. My username is "uguuuuorig".

I tried to dm you on discord but you only Accept messages from Friends, could Accept the request to join the Telegram group, my user is "Pablo"

Soiry if english bad i'm from spain

Doesn’t work with the mini 3 pro rc

when should i press the button whrn the rc is on?

idarlund Posted at 2022-6-2 12:17
ADB on my controller has always been on. I've also discovered it's accessible trough the TCP port 5555. More details in this post: https://forum.dji.com/forum.php?mod=viewthread&tid=265554
The problem is that since you're not in "developer mode" you cannot whitelist a new computer (key) in ADB on the controller. So it will look something like this:
$ adb devices

how do i accses develeper mode?

maao666 Posted at 2022-7-3 23:53
I found that holding both the RTH and the power button for 10 seconds and then powering on the remote controller would make it work. Two green buttons in the middle keep blinking and the status LED turns light blue. However, I could not find anything extra I could do. For example, ADB Is still unauthorized and I don't know how to inject a key to it.

After doing this how did you turn it off now my drone won't connect

whatbeato Posted at 2024-10-12 01:20
Here's something I did. Tutorial soon, you don't need to pay for anything. [view_image]

Hi did you get a chance to make some update on this?
Thanks in advance.

Fw071 Posted at 2023-2-18 10:15
Im connected and can even run this tool:

[view_image]

Ich kann nicht. Sagen Sie mir, wie das geht.

I am not the best with android but I figured out how to use adb with the remote. First plug in the controller into your pc, then go to https://app.webadb.com/ you can select the controller and use adb. I have no idea how to use adb so I need someone else to figure this out.

ADBAPPCONTROLR 1.7.9.1ver
I've tried all the methods here (except the paid ones) but it doesn't work. What I know: White LED mode: With the power off, press and hold the Home Point (Stop) button, the C2 button, and the Power button for 10 seconds. Without releasing the C2 button and the Home Point (Stop) button, press the Power button once, wait 3 seconds, press the Power button once again, and press and hold the Power button to enter the White LED mode. Purple LED mode: It seems that there are two types in the details of the Purple LED mode. 1. Mode where the green blinks slowly change. 2. Mode where the green blinks quickly change. I entered mode 2 by reading someone's post, but I've forgotten it now, so I'll tell you how to enter mode 1. With the power off, press and hold the Power button, Home Point (Stop) button, C2, and the Camera (photo, white, not red) button for 10 seconds. Release only the Power button, press the Power button once, wait 3 seconds, press the Power button again, and immediately press and hold the Power button. I am using DJI RC2, and since DJI also operates as an Android-based service, I checked it with a general Android phone recovery tool, and when I turned on the power normally, Motorola something or other appeared during booting, and when booting was complete, the connection was disconnected and DJI RC 2 was displayed 2 seconds later. In purple LED mode, it was not recognized by Windows OS such as Windows File Explorer, but a strange name and serial number appeared in the recovery app, and an interesting fact is that I can go to MTP host on my phone Galaxy A24 and go to DJI RC 2 > Internal storage > Android > File > DJI.Go.V5 > DJI, but I can't go to DJI on my computer. When I go to DJI, there is a file called Upgrade Debugging, and when I go to that file, there are two PNP files. However, I don't know much about ADB debugging and I need help. By the way, I am Korean, so I use a translator, so the grammar may not be correct, so please understand. I saw someone accessed DJI RC 2 with ADB APP controller, and the version was 1.7.9.1, so I worked hard for 2 hours to get it, uploaded it to Google Drive, and I'll give you the link. Also, when I went to the YouTube video links in this post, most of them were deleted or private. If you need to help me or contact me, please contact me on Discord. (@mok_9900) Thank you.

mangyatt984 Posted at 2-2 11:11
I am not the best with android but I figured out how to use adb with the remote. First plug in the controller into your pc, then go to https://app.webadb.com/ you can select the controller and use adb. I have no idea how to use adb so I need someone else to figure this out.

I can't do that.

tbsoup Posted at 2024-8-3 11:12
shouldn't we be able to do so? We have all the fiels we need (I think). ANybody wanna try this out on the RC-N2?
the firehose file is https://github.com/zenlty/Qualcomm-Firehose/blob/master/MSM8996.mbn
and as JukFiuuTech already mentioned, https://github.com/Giovix92/EDLUnlock to do so. Maybe we can get one step further through this. I dont take any responsibility.

I can't do that.