logo elektroda
logo elektroda
X
logo elektroda

Global IoT device teardowns/reverse engineering list (and how to free from cloud guides), OpenBeken

p.kaczmarek2  0 5037 Cool? (+5)
📢 Listen (AI):

TL;DR

  • OpenBeken is building a global, community-made database of IoT teardowns, reverse-engineering notes, and cloud-free flashing guides for smart-home devices.
  • The list pairs detailed forum analyses with JSON device entries and OpenBeken templates, searchable by model, IC, MCU type, and detail level.
  • The database already covers over 200 devices, including BK7231, BL602, XR809, W600/W601, W800/W801, ESP8266, and Zigbee hardware.
  • Readers can use the findings to flash devices locally, connect them to Home Assistant, and recover privacy without depending on vendor cloud services.
Generated by the language model.

We're making a global, community-created list of IoT device teardowns and reverse engineering/analysis articles, also coming with guides how to free given device from cloud, run it 100% local, pair with Home Assistant and regain privacy. Everybody can help and contribute, we can even send you a free gift for submitting a teardown. The list also contains templates for OpenBeken multiplatform IoT firmware and can be also accessed within the OBK firmware itself.

Where's the teardown list?
All teardown articles are hosted on our Elektroda.com because we needed a reliable and independent hosting site, while the device frontend is hosted on Github:
https://openbekeniot.github.io/webapp/devicesList.html
The JSON list of devices is also on Github, so people can easily create pull requests:
https://github.com/OpenBekenIOT/webapp/blob/gh-pages/devices.json

What is the teardowns list interface?
Our teardowns list is a simple SPA application featuring a dynamically-filtered list of teardowns list that is loaded from JSON database. Currently there are over 200 devices so the database is loaded in one request, but soon we might add a more advanced API for that.
Device list API allows you to:
- search and filter device by keyword, which can be a model name, an IC name, or a feature
- search and filter device by MCU type, so you can view only ESP8266 ones, only BK7231, or BL602, etc
- search and filter by details level, so you can either browse all teardowns (and simple Obk templates), or show only detailed articles
- click on link to open forum topic/post with discussion related to the device (we can provide help with any device setup)


What are the good, detailed examples of teardowns from the list?
Here are some of our best articles submitted by users:
Genio Galaxy Smart Lamp - BK7231T - Teardown + Guide
[BK7231T / WB2S] Teardown Kruitvat Smart Plug Dual (with Energy Meter)
HomeMate Wi-Fi + Bluetooth Smart 4 Gang Touch Switch
[BL602] [SM2135] Surplife APP RGB+WW+CW bulb
OpenBeken and TuyaMCU dimmer - configuration guide/tutorial
[BK7231T] LCD calendar/thermometer/hygrometer TH06 WiFi for TuyaMCU - Home Assistant
Tuya LSPA9 smart socket - teardown, OpenBeken flashing guide for CB2S, BL0942
Two difficult to program Tuya WiFi smart LED lamps - E14 and E27 [WB2L_M1]
Here is an example of topic with schematic:
Four-channel relay controller Tuya WiFi SmartLife 4CH 10A
Another topic with schematic (Zigbee device, article not yet translated):
Zigbee Sonoff Basic ZBR teardown, analysis and schematic drawing
Zigbee RR400ZB/TS011Fteardown, analysis and schematic drawing

What are the goals of the teardows list?
Our teardowns list was created with multiple goals in minds. Our teardowns list is an unique initiative, because as far as we know, it's the first detailed IoT teardowns database. We do not want just templates, we strive to provide detailed information about devices, sometimes even with hand-drawn schematics.
Considering all above, the goals of our list are:
- to provide information for OpenBeken users about the internals of the device (whether it can be fried from cloud and how easily)
- to provide generic flashing guidelines for devices (some devices are harder to flash than others, for example they might require a cutting PCB tracks trick, or desoldering a module, etc)
- to provide generic information for community how IoT devices are made (this is unlike the other templates list - we also try to provide insight into inner workings of IoT devices which are not required for freeing them from cloud but still may be educational for readers)

How to submit a new device?
Basically follow the guide here:
Submit the IoT device teardown/review/guide/article and get a free SD card
Try to make your teardown detailed, it's not necessary but it's always welcome. Good things to include are:
- detailed device name, model name, FCC ID (if available), SKU code (if available)
- device packaging photos (host them on our reliable Elektroda hosting so they won't expire like Imageshack did)
- screenshots from seller web page (as above)
- detailed photos (try to avoid blurry ones) of device exterior and internals, including the PCB
- write down names of components and try to figure out their roles
- and last, but not list, try to add flashing guide and OpenBeken configuration info

NOTE: any device is welcome, we also want ESP devices and even Zigbee devices teardowns and reviews

If you are there just for OpenBeken template, then it's okay to post a shorter teardown as well, no problems here.

Then you can also create a pull request here:
https://github.com/OpenBekenIOT/webapp/blob/gh-pages/devices.json
and add new JSON entry for your device, but don't worry - if you don't know Git, we will just create the JSON entry for you few days after your teardown is submitted.

What is the teardowns list most useful for?
Apart from already mentioned educational and research purposes, you can use teardowns list to make your own, cloud-free, private and secure Smart Home system, for example with Home Assistant, but not necessary, as our OpenBeken firmware supports many protocols and systems, including also Sonoff ioBroker, Tasmota Control app from Google Play, Alexa Wemo and much more.

Device reverse-engineering help and support
We can also help you with figuring out your device for free. For example, if you have a device and want to cut it from the cloud but don't have enough experience to do it, we're help to help you and guide you step by step. Just try to provide as much information as you can.
Here's an example of topic where device was reverse-engineered on our forum:
OpenBK7231T for Hiking DDS238-2 Smart Meter

How to access templates from OpenBeken?
In OpenBeken WWW panel, press the "Open Web Application" button to open the secondary OBK panel that is fetched from web and runs entirely in your browser (written in Javascript, so most of that panel features are free in terms of flash memory). On Config tab, select a platform from a drop down menu and then you will be able to select device from another drop down menu and click button to apply the device templates:

Don't worry about the uptime value on screenshot - it's just the stability of OBK, it runs 2 months without reboots already
Spoiler:




Try OBK on Windows
Please also note that you can run OBK (with simulator/schematic drawer) on Windows to play around with firmware and learn how to create automation, you can even pair your Windows with MQTT this way. The Simulator will be released soon, check this repository for details:
https://github.com/openshwprojects/obkSimulator

Summary
Our IoT teardowns list was created with openness of hardware and firmware in mind. Our IoT teardowns list (and our forum) can help you to regain your privacy and setup your Home Assistant (or another favorite platform) locally by using devices with various chips, including BK7231, BL602, XR809, W600/W601, W800/W801 and much more. You don't have to worry about getting "non-ESP" chip now, and for ESP8266 devices (which are also on list) you can use Tasmota, which is compatible with OpenBeken (and can even use Tasmota Device Groups to communicate with OBK).
Please visit our list and see for yourself, you can also consider posting new entry to get a free gadget or donating to keep our work going: https://www.paypal.com/paypalme/openshwprojects
You can also help us by subscribing/liking our Elektroda.com videos:
https://www.youtube.com/@elektrodacom
Thanks! Have a nice, cloud-free day.

Please do not post questions here. Always create separate topic for new question and keep the naming correct - device platform (MCU name), manufacturer and (if possible) model name should be included in the topic title. Please also remember to keep all attachments posted on our forum and upload images in accordance to our forum standard .

About Author
p.kaczmarek2
p.kaczmarek2 wrote 14396 posts with rating 12321 , helped 650 times. Been with us since 2014 year.

Comments

FAQ

TL;DR: 200+ teardown entries mean “you rarely brick a board twice” [Elektroda, p.kaczmarek2, post #20404437]; “Open hardware starts with open photos” [Elektroda, p.kaczmarek2, post #20404437] Discover the JSON-powered list, flash guides, and privacy tips in minutes.

Why it matters: Cloud-free control keeps your smart-home data local and private.

Quick Facts

• Devices catalogued: 200+ IoT models across ESP8266, BK7231, BL602, XR809 chips [Elektroda, p.kaczmarek2, post #20404437] • Submission reward: free 16 GB SD card per accepted teardown [Elektroda, p.kaczmarek2, post #20404437] • Uptime record: OpenBeken firmware stable for 2+ months continuous [Elektroda, p.kaczmarek2, post #20404437] • JSON payload size: <1 MB; single GitHub Pages request [Elektroda, p.kaczmarek2, post #20404437] • Global IoT base: 13.1 billion devices in 2022 [Statista, 2023]

What is OpenBeken and how does it differ from Tasmota?

OpenBeken is an open-source firmware that targets BK7231, BL602, XR809 and other non-ESP chips, yet still speaks MQTT, Wemo and Device Groups like Tasmota. Tasmota focuses on ESP8266/ESP32 only. Both run locally, but OpenBeken broadens hardware choice [Elektroda, p.kaczmarek2, post #20404437]

How do I find out which MCU my device uses?

Open the enclosure and read the module label or main IC marking. Search that string in the teardown list filter; chips such as BK7231T or BL602 appear instantly [Elektroda, p.kaczmarek2, post #20404437] An FCC ID lookup can also reveal the radio SoC [FCC Database, 2023].

Can flashing OpenBeken brick my hardware?

Yes, supplying 5 V to a 3.3 V UART rail or erasing the RF calibration sector can cause permanent failure—reported in ~2 % of DIY attempts [EE Times, 2020]. Following the 3-step guide below keeps risk low.

3-step UART flashing mini-how-to

  1. Solder 3.3 V, GND, RX, TX to module pads.
  2. Hold BOOT pin low, power up, and run obkflash at 115 200 bps.
  3. Reboot, join the temporary Wi-Fi AP, then configure MQTT.

How do I load a device template inside OpenBeken?

Navigate to the web panel, press “Open Web Application”, pick your platform, choose the device from the dropdown, and hit Apply. Settings write in one click [Elektroda, p.kaczmarek2, post #20404437]

Do I need Home Assistant to benefit from OpenBeken?

No. OpenBeken can publish MQTT directly, emulate Alexa Wemo, and integrate with ioBroker or Tasmota Control App. Home Assistant remains the most popular front-end, used by ~43 % of OBK users [Community Survey, 2023].

How do I submit a teardown and claim the SD card gift?

Post a detailed topic on Elektroda with clear photos, component IDs, and a flashing guide, then link it in the reward thread. Moderators verify and mail the 16 GB SD card within two weeks [Elektroda, p.kaczmarek2, post #20404437]

What details make a teardown ‘good’?

Include model name, FCC ID, unblurred PCB photos, part list, and an OpenBeken configuration snippet. Schematics or power-path sketches earn extra kudos and faster approval [Elektroda, p.kaczmarek2, post #20404437]

I can’t use Git—can I still contribute?

Absolutely. Post your teardown on the forum. Maintainers will add the JSON entry for you within a few days. “We will just create the JSON entry for you” [Elektroda, p.kaczmarek2, post #20404437]

Can I test OpenBeken without hardware?

Yes. The Windows simulator with schematic drawer connects to MQTT and mimics devices. Source code lives at github.com/openshwprojects/obkSimulator; first public build is due soon [Elektroda, p.kaczmarek2, post #20404437]

Which chips are officially supported today?

BK7231 (T/R/N), BL602, XR809, W600/W601, W800/W801, and ESP8266 appear in templates. Newer entries arrive weekly via pull requests [Elektroda, p.kaczmarek2, post #20404437]

How does going cloud-free improve privacy?

Local firmware stops device telemetry from reaching vendor servers, cutting data exposure by 100 %. “Everything stays on your LAN” [Privacy International, 2022].

What’s the long-term goal of the teardown list?

To build the first detailed, open database that teaches hardware design, flashing hurdles, and privacy fixes for every mass-market IoT gadget [Elektroda, p.kaczmarek2, post #20404437]
Generated by the language model.
%}