7 Eleven uses custom hardware and a custom android rom for their terminals, this is a prime candidate for some GAMING Managed to put geometry dash on it with trigger as jump, but this thing was pretty locked down in unexpected ways. 🧵on the hack, with help from lmore377

When i booted it up for the first time i got to a login screen with seemingly no way to escape. My default methods did not work. No navbar, no keyboard settings, no share sheet, nothing really. Only a notification panel, details panel and a store alert app which didn't load.

If i spammed the home and back buttons i could catch a glimp of a logged in state with a few more apps, and i could abuse this if i was very fast to get into any of these apps. I only ever got into the Lottery book app and Retail inventory app but they didn't offer much use.

Some fun things in the meantime, this thing has a blue mechanical switch in the trigger handle for uhh reasons? The outside usb port does not support otg or data, but there is a hidden inside usbc port for an inbuilt card reader. But this is limited to the card reader somehow.

I took it apart and quickly noticed pads for uart, hooking that up and it was speaking to me! But i couldn't speak back, it offered no input from my side. Also this message is pretty funny even though we can't profit from it.

This thing uses a mediatek chip and has usb pads on the inside, so surely it must be a quick mtkclient and we are root right? Wrong, the pads weren't talking to me and gave me a usb decriptor request failed error...

I also noticed there is a connector on the back, normally on BBPOS devices (that is the manufacturer btw) you can put them in a dock for hardwired ethernet. So i figured out the pinout but i got the exact same usb descriptor not found error.

Until @lmore377 somehow got it working themselves via the rings on the back??? She soldered the trigger connector for usb connectivity to the inside of the ring connector and got a stable mtkclient connection on boot, i quickly followed up with my worse rendition...

A quick mtk unlock + factory reset later and i was in! The issue was my probes all along (although the internal pads never worked anyways) Although, i wasn't really in just yet, i could reach pretty much the entire kinda stock android 9 OS on it. But i couldn't install any app.

Installing apps from an sd card failed with "App not installed". By this point we figured out the urls of all the possible 7 eleven apps it could download and downloaded some of them, for some reason they are ✨special ✨ apps and the certs are wonky

I made twrp and flashed magisk and superSU, both didn't do anything. You could manually put apps into the /system/app/ directory but most of them would just crash as they never were intended to be used as system apps and wouldn't play nice with native libs.

You could enable adb from the developer settings, but it would just kill all usb connectivity for some reason.

So a GSI flash it was, not after modifying the boot partition to completely nuke SELinux as it was bootlooping any gsi install. But after installing it, everything was working normally (except ofc the scanner module etc but i just wanted to run GD on it at this point)

So that's it, a rooted, gsi booted 7 Eleven terminal. Don't do this during your shift at 7 Eleven cause it is very unpractical + you will get fired It will lock you out if it is outside of the store. I got it from ebay and it never locked, i just taped over the gps antenna pins