logo elektroda
logo elektroda
X
logo elektroda

[BK7231N/CB2S] Elworks smart dual socket - teardown, CB2S, BL0937

snusken 
Bought a Tuya based dual smart socket here in Denmark for approx. 15 €, somewhat the same price as on Aliexpress.

Double smart socket with front and back views shown in the image.

Quite easy to separate top and bottom parts with a hobby knife and a small screwdriver:

Close-up of the interior of a Tuya smart socket with visible electronic circuit components.

To flash the BK7231N I needed to separate the plug part from PCB in order to reach 3V3, GND, RX1, TX1 and CEN on the CB2S module:

Connected PCB module of a dual smart socket.

I used the BK flasher with the following setup:

Screenshot of BK7231 Easy UART Flasher software during sector 0xD000 writing.

The flash program was able to extract the Tuya parameters from the original firmware,
and from the "Launch Web application" page, I got the nice {json} script:

Code: JSON
Log in, to see the code

--.-.-.-.-.--

Screenshot showing PWM connections configuration with assigned functions.

Screenshot of the software interface for a dual smart socket.

About Author
snusken wrote 3 posts with rating 4 . Been with us since 2024 year.

Comments

p.kaczmarek2 06 Feb 2024 19:20

Thank you for submitting the template. It seems you've forget about the device model - CLY809M-GE - but I've added it for you. Device should be soon live at: https://openbekeniot.github.io/webapp/de... [Read more]

ChrCphDk 30 Dec 2024 11:28

@snusken I have a Nedis WIFIP141FWT double smart plug, which looks identical to yours when opened, so I'm thinking your work applies, and would like to test it out. Thanks for your write-up. Did you have... [Read more]

snusken 30 Dec 2024 11:45

Hello Chris, As far as I remember, I used my old 100 W Weller solder gun and some solder wick to free the input mains pins from the PCB. best regards, Erik ( living place Sønderborg :) ) [Read more]

ChrCphDk 30 Dec 2024 16:44

Thanks. I won't have time today, but hopefully after new years eve :) [Read more]

ChrCphDk 12 Jan 2025 17:26

Hi again. When trying to just read out the firmware, using BK7231GUIFlashTool, it starts reading as soon as I trigger CEN for a short perioed, but then, at what seems as a random time later, it hangs,... [Read more]

p.kaczmarek2 12 Jan 2025 19:03

Are you sure about that high speed baud setting? Such high speeds never worked reliably for me. [Read more]

ChrCphDk 12 Jan 2025 19:51

Thank you for taking your time to answer. I tried lowering it to 912600, but then got nothing, and from snuskens image of the flasher, he also had 1500000 set. But it might as well be bad soldering on... [Read more]

ChrCphDk 13 Jan 2025 18:50

Took the PCB with me to work, and had a friendly colleague solder some wires on. Lowered the baud rate to 921600, but it still stopped half way, but at least it got something. Lowered it to 115200, and... [Read more]

p.kaczmarek2 13 Jan 2025 19:10

Good job! Sure, can you share Nedis template in JSON format, as copied from Web App? [Read more]

ChrCphDk 13 Jan 2025 19:16

This is from the web-app's Config menu, when accessing the device through: IP/app { "vendor": "Tuya", "bDetailed": "0", "name":... [Read more]