Hansem Ro

Branch with Linux+Windows support: https://github.com/hansemro/pok3rtool/tree/holtek-isp-libusb-linux-windows-poc Reboot delays may need to be extended if libusb fails to find/reopen devices as done with ISP protocol. Cherry-pick this commit to build and install...

Branch with Linux+Windows+macOS support: https://github.com/hansemro/pok3rtool/tree/holtek-isp-libusb-linux-windows-macos-poc Demo with cooler-master-dev branch included: [](https://asciinema.org/a/539116)

@ChaoticEnigma Possibly coming in the near future: dump firmware from flash-secured devices: [](https://asciinema.org/a/9JlWn2M2NsOHoi5lTpsas8eWS)

Not sure if the vulnerability can be assigned CVE since the vendor is not based in the US and not in the database, but I will still try to reach...

> Is the flash just not protected via the ISP read command? Read command obeys flash security at least by reading out 0s to the endpoint buffers. > Or did...

Found a new workaround that does not require WinUSB driver filter step or libusb. Relevant change: https://github.com/hansemro/pok3rtool/commit/1259eb514b5dee9b679a6ed0d590cce45654295c Branch: https://github.com/hansemro/pok3rtool/tree/holtek-isp-dev

Decided to write a standalone tool for flashing ISP devices: https://github.com/hansemro/ht32-dfu-tool

I am going to drop/revert control transfer support in this PR so that it can be included alongside ISP protocol support.

@ChaoticEnigma This is ready for review.

Having issues with Windows again. It works for detecting ISP but not keyboards. The error is related to matching Usage and Usage Page in the HID Report descriptor.