Hacking 10$ Nexus Phone Into a Hacking Machine

I saw Nexus 6P on Facebook Marketplace for $10. Owner forgot the PIN, just wanted it gone. I already know Kali NetHunter support this phone officially. So I bought immediately without a second thought. Literaly drove 25 miles after college to pick it up. First I spent a couple hours researching how to get in without the PIN. Wanted to do it properly and then i found CVE-2016-8467. Tried it. It worked. Here's the full story on how come. The Phone Nexus 6P : Inside name angler. Made by Huawei, Google flagship from 2015. $ fastboot getvar version-bootloader version-bootloader: 03.61 Bootloader 03.61. This one is weak. Safe version is 03.64 and above. When I see this number I actually pump my fist lol. CVE-2016-8467 It's a High risk cve and was already fixed in January 2017, but the phone wasn't even updated since then. A big plus point for me ;P So, to summarize this, | CVE | CVE-2016-8467 | |---------------|-------------------------------------| | Type | Boot mode bypass | | Risk | High…