I thought I'd present my own USB micro smart switch sold under the brand ONENUO with model ZHQ01. I see there's an identical device here but maybe this qualifies as a 'new' device that others may not find if searching for 'HC-S050-WIFI'. Opening was easy using a thin prying tool along the top...

Thank you, device has been added in this commit: It should be soon live at:

OBK Template Code: JSONLog in, to see the code

The 3 channel version uses a CBU instead of the BK7231N on the main PCB, perhaps for reasons of space. a solderless release from Tuya boot from TX2 Code: TextLog in, to see the code firmware 1.3.18 - not cloudcutter exploitable Code: JSONLog in, to see the code OBK template Code: JSONLog in, to see the code

Merged, thank you. We should have soon 650 devices. I am interested in the solderless method. Would you be able to write a short guide about that for our Tutorials section? Maybe we could help some more people to flash devices that way. Not everybody have soldering iron and can solder. When solderless UART flash is possible and reasonable?

ONENUO ZHQ01 Smart USB Switch Teardown & Boot Log Analysis [BK7231N]

divadiow 2682 4

Reply | New topic

Helpful post

#1 20871539 21 Dec 2023 17:00

divadiow divadiow

Level 34
Helpful post
Post #1
20871539 21 Dec 2023 17:00

I thought I'd present my own USB micro smart switch sold under the brand ONENUO with model ZHQ01. I see there's an identical device
here but maybe this qualifies as a 'new' device that others may not find if searching for 'HC-S050-WIFI'.

Opening was easy using a thin prying tool along the top edge of the unit. There isn't much glue so lifting one edge, once loose, will crack the rest out of place and allow you to open it.

Silkscreen PCB numbers:
DLX-USB-BK7231N 12V
FR-4 L2MM

I managed to guess TP6/7 were the TX1/RX1 so have attached the boot log.

TP3 - CEN
TP4 - TX0
TP5 - RX0
TP6 - TX1
TP7 - RX1

Code: JSON
Log in, to see the code

Code: text Expand Select all Copy to clipboard
Device configuration, as extracted from Tuya: - Button (channel 1) on P24 - Pair/Toggle All Button on P8 - WiFi LED on P6 - Relay (channel 1) on P7 Device seems to be using CB2S module, which is using BK7231N. And the Tuya section starts, as usual, at 2023424

Attachments:

onenuo_zhq01_oem_bk7231n_control_switch_BK7231N_QIO_2023-21-12-15-43-47.bin Download (2 MB)

UART2BOOT.txt Download (10.46 KB)
ADVERTISEMENT
#2 20871543 21 Dec 2023 17:04

divadiow divadiow

Level 34

Topic author Helpful post? (0)

Post #2
20871543 21 Dec 2023 17:04

OBK Template

Code: JSON
Log in, to see the code
ADVERTISEMENT
Helpful post

#3 20876895 26 Dec 2023 15:46

p.kaczmarek2 p.kaczmarek2

Moderator Smart Home

Helpful post? (+2)

Helpful post
Post #3
20876895 26 Dec 2023 15:46

Thank you, device has been added in this commit:
https://github.com/OpenBekenIOT/webapp/commit/d0d987431aa069adc9cf0f324a2e7192956ab377
It should be soon live at:
https://openbekeniot.github.io/webapp/devicesList.html

I am creating multiplatform open source firmware (Tasmota replacement), right now supporting BK7231T, BK7231N, XR809, BL602, W800, W600, LN882H and soon supporting RTL and W701:
https://github.com/openshwprojects/OpenBK7231T
If you like my work, support me at: https://paypal.me/openshwprojects

Helpful post? Buy me a coffee.
ADVERTISEMENT
#4 21284444 31 Oct 2024 20:49

divadiow divadiow

Level 34
Topic author Helpful post? (0)

Post #4
21284444 31 Oct 2024 20:49

The 3 channel version uses a CBU instead of the BK7231N on the main PCB, perhaps for reasons of space.

a solderless release from Tuya

boot from TX2

Code: Text
Log in, to see the code

firmware 1.3.18 - not cloudcutter exploitable

Code: JSON
Log in, to see the code

OBK template

Code: JSON
Log in, to see the code

https://github.com/OpenBekenIOT/webapp/pull/1...mits/669f2bb6a0647a00648e1cbb9ff2b54decbc330d

Attachments:

readResult_BK7231N_QIO_2024-31-10-14-58-25.bin Download (2 MB)
#5 21284920 01 Nov 2024 10:19

p.kaczmarek2 p.kaczmarek2

Moderator Smart Home

Helpful post? (0)

Post #5
21284920 01 Nov 2024 10:19

Merged, thank you.

We should have soon 650 devices.

I am interested in the solderless method. Would you be able to write a short guide about that for our Tutorials section? Maybe we could help some more people to flash devices that way. Not everybody have soldering iron and can solder. When solderless UART flash is possible and reasonable?

I am creating multiplatform open source firmware (Tasmota replacement), right now supporting BK7231T, BK7231N, XR809, BL602, W800, W600, LN882H and soon supporting RTL and W701:
https://github.com/openshwprojects/OpenBK7231T
If you like my work, support me at: https://paypal.me/openshwprojects

Helpful post? Buy me a coffee.
Create an account, log in and become active in a forum and ads will not appear. You will receive points by participating in discussions.
Join this discussion.

Install the application

Didn't find an answer? Ask Artificial Intelligence

*I agree to send the question to OpenAI, Anthropic PBC, Perplexity AI, Inc., Kagi Inc., Google LLC - owners of language models in order to prepare the best response. The companies may monitor and log information entered into the form.

*I agree to publicly display my question and answer. The question and answer will be publicly available to everyone. The process may take a few minutes. Upon completion, you will be redirected to the page with the answer.

Wait...(2min)