Unlike my previous project, kaeru, this is a legit exploit that probably affects a bunch of newer MediaTek SoCs (even though I've only tested this with Pacman for now).

I'm still working on a PoC that should let you do pretty much whatever you want (similar to what kaeru can do right now) at the bootloader level.

That includes things like disabling boot warnings, adding your own custom fastboot commands, or even faking the TEE lock state on devices where kaeru can't be used.

More details coming soon, hopefully.