EM Fault Injection : Glitching the NXP LPC2388 Aaron Christophel 2024-08-01 | Take a look at part 1 : The POC , here:youtu.be/q9o9sKY2hk8
Hacking of the 1,20€ Smartwatch , Custom OTA Firmware Aaron Christophel 2024-10-18 | The TLSR8232 Features 512KB of Flash and 16KB of RAM for plenty of firmwarePart 1 here: youtu.be/MpSVU3t1J38The price will be shown higher in the link, check out the "From $0,99" / "3 From 2,99€" offers until you find the one from the link.Link to the Watch: https://s.click.aliexpress.com/e/_DmzEqAtNo guarantees that your watch will have the same SoC as they seem to switch the model at random!Used WebFlasher:atc1441.github.io/BLE_EPaper_OTA.htmlrbaron's work on a similar watch:rbaron.net/blog/2021/07/06/Reverse-engineering-the-M6-smart-fitness-band.html
Hacking of the 1,20€ Smartwatch , First overview Aaron Christophel 2024-10-17 | The TLSR8232 Features 512KB of Flash and 16KB of RAM for plenty of firmwarePart 2 here: youtu.be/NvNtfvvK60EThe price will be shown higher in the link, check out the "From $0,99" / "3 From 2,99€" offers until you find the one from the link.Link to the Watch: https://s.click.aliexpress.com/e/_DmzEqAtNo guarantees that your watch will have the same SoC as they seem to switch the model at random!
E-Paper Wall 3.0 Aaron Christophel 2024-09-15 | This video shows the function and making of the E-Paper Wall 3.0Find the E-Paper wall 1.0 and 2.0 videos here:youtu.be/CLmotCeMlq0youtu.be/CAxm5W5JiooFollow me on Twitter: https://x.com/atc1441
Battery Replacement on closed 7.5 E-Paper display Aaron Christophel 2024-09-06 | Quick video on how to retrofit a new battery on the closed E-Paper displaysYou can find the same battery holder as in the video here(Affiliate): https://s.click.aliexpress.com/e/_DmVDkCbFollow me on Twitter: https://x.com/atc1441
Fidget toy teardown, mystery buttons Aaron Christophel 2024-08-28 | Just a quick teardown video of some Kids (un)-friendly Fidget toy.Since I could not let go of the idea to know how the buttons work you now will know it as well!Follow me on Twitter: https://x.com/atc1441
7.5 Price Tag Telink TLSR OpenEPaperLink Flashing How-To Aaron Christophel 2024-08-15 | This video shows how to access the Flashing pins of the 7.5" E-paper Price Tag and how to flash the Custom firmware.The custom firmware is released here, very Alpha as of now:github.com/jjwbruijn/OpenEPaperLink/tree/master/ARM_Tag_FW/OpenEPaperLink_TLSRCompiled firmware is here:github.com/OpenEPaperLink/OpenEPaperLink/blob/master/binaries/Tag/TLSR_HS_BWY_75.binThe flashing tool used in the Video is my WebFlasher: atc1441.github.io/ATC_TLSR_Paper_UART_Flasher.htmlFollow me on Twitter: twitter.com/atc1441
DOOMed Smart Planter Aaron Christophel 2024-08-06 | Get the smart planter here(Affiliate): https://s.click.aliexpress.com/e/_DCWnpkr
EM Fault Injection POC of the NXP LPC2388 via PicoEMP Aaron Christophel 2024-07-30 | Take a look at part 2 : The Success , here:youtu.be/tcqLgjmzUzM
Inclinometers : Digital Spirit Level Teardown Aaron Christophel 2024-07-11 | Teardowns of an assortment of Inclinometers
Dong DOOM The special pleasing experience Aaron Christophel 2024-07-08 | This video shows a stupid project of a special DOOM port...Get your DOOM device here:de.aliexpress.com/item/1005006925557526.htmlOnly possible by the great work of Spritetm:github.com/Spritetm/esp32c3-doom-bauble
AirPod Case with Display? Teardown time Aaron Christophel 2024-07-08 | Quick video of such Bluetooth Headphones which include a display in their base with an incredible refresh rate.Both models can be found here:https://s.click.aliexpress.com/e/_DCJh4afandhttps://s.click.aliexpress.com/e/_DlVSod9
Loooong 30 Android display Teardown and insights Aaron Christophel 2024-06-29 | This extra long Android running Display is normally used for advertising but offers basically a real Android Tablet experience:Infos:Main SoC Rockchip PC308GB Flash1GB RAMAndroid 8Wifi/BLE
Bluetooth Ring Hacking, OTA Firmware upload Aaron Christophel 2024-06-20 | This video shows how to upload a custom firmware onto the Colmi Smart Bluetooth ring via my WebBluetooth enabled tool.Get the Colmi Smart Ring here:https://s.click.aliexpress.com/e/_DcyUheTThe Repository and tool can be found here: github.com/atc1441/ATC_RF03_RingPart 1:youtu.be/w90RVspTkt8Follow me on Twitter: twitter.com/atc1441
Hacking a tiny Bluetooth Smart Ring Aaron Christophel 2024-06-13 | Get the Colmi Smart Ring here:https://s.click.aliexpress.com/e/_DcyUheTIn this video we will take a deeper look into the Colmi Bluetooth Smart Ring R02 and its SoCPart 2:youtu.be/IOMqtFrNpTIThe Repository and tool can be found here: github.com/atc1441/ATC_RF03_RingSDK From BlueX:gitee.com/BXMicro/SDK3bluexmicro.com/wp-content/uploads/BLE_SDK_V2.1-V2.1.zipFollow me on Twitter: twitter.com/atc1441
Teardown of the 3.7 E-Paper iPhone case, bad ending... Aaron Christophel 2024-05-30 | Lets take a look inside of the 3.7" E-Paper iPhone case https://s.click.aliexpress.com/e/_DFpaNPZInside we can find the Fudan FMSC Chip which is not very much known aboutFollow me on Twitter: twitter.com/atc1441
DOOM on the Industrial Robot Denso RC8 / RC8a Scara Aaron Christophel 2024-05-13 | Quick demo of DOOM on the Denso RC8 / RC8a
E-Paper Matrix Live Drawing Aaron Christophel 2024-05-07 | Draw here: atc1441.github.io/Draw_paper.html
Sticker Rewinder prototype demo , LeoMat retrofit Aaron Christophel 2024-04-25 | Short video with a basic overview of an old project
Teardown of the 10€ Action self rotating selfie stand + Sequre ES666 ES555 Screwdriver review Aaron Christophel 2024-04-01 | Quick look inside of the 10€ Action Self Rotation Selfie Standaction.com/de-de/p/3203284/nor-tec-selfie-halterListenai website:listenai.comPartial SDK of Listenai device:cloud.listenai.com/zephyrSequre screwdriverES666 Oled variant:sequremall.com/products/electric-screwdriverES555 LED Variant:sequremall.com/collections/screwdriver/products/sequre-es555-smart-screwdriver-with-electric-manual-modes-support-fixed-automatic-working-modes-suitable-for-repair-disassembly-assembly-rc-models-drones-mobile-phones-computers-electronics
DOOM on Toothbrush , Doomsbrush Aaron Christophel 2024-02-28 | DOOM on the WIFI Toothbrush,See here for more info's:youtu.be/-qvn0YUiH5o Find a few more updates in between on Twitter:twitter.com/atc1441/status/1761321813412282668Only working because of these 2 great Repos from wonderful people:github.com/Spritetm/esp32c3-doom-baublegithub.com/fragglet/miniwad
Hacking the WIFI Toothbrush, Custom firmware goes Brrr Aaron Christophel 2024-02-24 | This video shows you 2 interesting flaws in the WIFI Toothbrush that consists of an ESP32-C3 Custom firmware and firmware uploader here:github.com/atc1441/ATC_Wifi_ToothbrushFind a few more updates in between on Twitter:twitter.com/atc1441/status/1761321813412282668
OpenEPaperLink and BLE E-Paper upload Aaron Christophel 2024-02-10 | This video shows a demo of Gicisky / PICKSMART BLE Displays being directly used via the ESP32 running OpenEPaperLinkFirst video about the displays: youtube.com/watch?v=Cp4gNXtlbGkOpenEPaperLink How-To Guide video: youtu.be/8oQdo9bJ7RkFollow me on Twitter: twitter.com/atc1441
IDA Firmware Reverse Engineering how-to Aaron Christophel 2024-01-10 | This video goes into every step in Realtime included to get the screen of the 30€ Spot Welder rotated by 180° as being annoyed by and talked about in this first video:youtu.be/LBL6pVpHpdEGet it here for sometimes as low as 26€ from Aliexpress:https://s.click.aliexpress.com/e/_DmPOIJxFollow me on Twitter: twitter.com/atc1441( Of course there might be better, faster or different solution go get there or use IDA! this is just my way :) )
Cheapest Hotplate with a Display? testing and Teardown Aaron Christophel 2024-01-07 | Quick overview and teardown of the 20€ Hotplate you can get from Aliexpresshttps://s.click.aliexpress.com/e/_Det686ZMentioned STC Soldering iron Custom firmware and video:youtube.com/watch?v=mId_FW86pwQgithub.com/atc1441/ATC_stc_solder_ironFollow me on Twitter: twitter.com/atc1441
3.5 Price Tag Telink TLSR OpenEPaperLink Flashing How-To Aaron Christophel 2024-01-07 | This video shows how to access the Flashing pins of the 3.5" E-paper Price Tag and how to flash the Custom firmware.The custom firmware is released here, very Alpha as of now:github.com/jjwbruijn/OpenEPaperLink/tree/master/ARM_Tag_FW/OpenEPaperLink_TLSRCompiled firmware is here:github.com/jjwbruijn/OpenEPaperLink/blob/master/binaries/Tag/TLSR_HS_35_ALPHA.binThe flashing tool used in the Video is my WebFlasher: atc1441.github.io/ATC_TLSR_Paper_UART_Flasher.htmlFollow me on Twitter: twitter.com/atc1441
Is the 30€ Spot Welder any good? Review and Teardown Aaron Christophel 2024-01-07 | This video shows you the inside and usage of the 30€ LCD Battery Spot Welder that you can sometimes get for as low as 26€ from Aliexpress:https://s.click.aliexpress.com/e/_DmPOIJxFollow me on Twitter: twitter.com/atc1441
Xiaomi Mi Band 8 Custom firmware display update Aaron Christophel 2023-11-25 | Previous MiBand 8 posts:twitter.com/atc1441/status/1722039843578859661twitter.com/atc1441/status/1724012261230993709Follow me on Twitter: twitter.com/atc1441
Hacking the Battery less NFC E-Paper display from Waveshare + Custom Firmware Aaron Christophel 2023-11-09 | This videos shows how I got from an undocumented TN2115S2 SoC to a full custom firmware on the:Waveshare Passive NFC E-Paper displaySource Code Repository:github.com/atc1441/Waveshare_NFC_E-Paper_Display_custom_firmwareThere are multiple different sizes available and all seems to use the same SoC insidewaveshare.com/2.13inch-nfc-powered-e-paper.htmFollow me on Twitter: twitter.com/atc1441
Hacking the Bluetooth Smart Reminder ZIKR Ring Aaron Christophel 2023-11-05 | In this video I show a teardown and the upload of a custom firmware to the ZIKR Ring which can be found on AliexpressFollow me on Twitter: twitter.com/atc1441
Teardown of the Phosphor E-Paper Watch Aaron Christophel 2023-10-08 | In this video lets see how the Phosphor E-Paper watch is able to offer a double design in a Segment only displayFollow me on twitter: twitter.com/atc1441
OpenEPaperLink running on the nRF52811 ARM SoC E-Paper price tag Aaron Christophel 2023-07-14 | A first look at the OpenEPaperLink firmware ported to an ARM SoC: nRF52811
How-To build the OpenEPaperLink NanoAP Aaron Christophel 2023-06-20 | In this video you will see how to build the NanoAP for the OpenEPaperLink Project.This allows you to drive E-Paper Price Tags with a custom firmware and show your favorite content on themThanks to PCBway for sponsoring this video and the Flex PCBsGo and check them out: pcbway.comPCB and STL files are available here:github.com/jjwbruijn/OpenEPaperLink/tree/master/Hardware/2.9-1.54%20NanoAP%20by%20ATC1441OpenEPaperLink GitHub Repo:github.com/jjwbruijn/OpenEPaperLinkhttps://openepaperlink.de/OpenEPaperLink Getting started video:youtu.be/Etonkolz9BsHow to flash the display Firmware step by step:youtu.be/98fOzZs__fc?t=719Home Assistant integration:github.com/jonasniesner/open_epaper_link_homeassistantFollow me on twitter:twitter.com/atc1441You can find the SEQURE SI012 Pro Max Soldering iron here:9%OFF code: NEWsequremall.com/products/sequer-si012-pro-max-portable-oled-soldering-iron-with-color-ambience-light-chinese-english-and-russian-menu-applicable-t12-ts-si-soldering-iron-tips-support-pd-qc-3s-6s-battery-power-supplyUnterstützt durch Produktplazierungen
Hacking the Philips Sonicare NFC Password Aaron Christophel 2023-06-09 | You can find the calculation example code here:gist.github.com/atc1441/41af75048e4c22af1f5f0d4c1d94bb56Special bonus video:youtu.be/OkfS_z0FrlEA thread of this reverse engineering session can also be found on Twitter:twitter.com/atc1441/status/1667252413051424773
Exploit Friday: WCH CH573 Memory Read-out Protection bypass Aaron Christophel 2023-06-09 | This video shows you an overview of the WCH CH573 Memory Read-out Protection bypass exploit08.06.2023 - Bypass was found and reported to WCH09.06.2023 - WCH Confirmed the bypass and noted that newer the ISP Tool allows to set the erase length which allow to erase more than the 6-8K bytes as shown in this video. This makes the User of the CH573 responsible for the firmware protection. 6-8K bytes will be always erased.WCH Noted that the 6-8K bytes where chosen to speed up the erasing.As per WCH the erase length option does not need an update of the Bootloader.Tested Bootloader version: 2.80Follow me on twitter:twitter.com/atc1441
Disney MagicBand Hacking Part 2 -RF Firmware reversing Aaron Christophel 2023-06-01 | In this Part 2 of the Disney MagicBand Hacking I will show you how I reversed the firmware of the nRF31512 8051 SoC step by step in a shaky video format.The NFC part of the band is not locked into as this is not the interesting part.Demo code on GitHub:github.com/atc1441/Disno_band_NRF31512Part 1 of the Hardware hacking and Firmware extracting can be found here:youtu.be/C-UCr9mJ9bYYou can find a Tweet writeup here on twitter:twitter.com/atc1441/status/1662192314649833472
Hacking the Disney MagicBand that tracks you! + nRF31512 Glitching Aaron Christophel 2023-05-28 | This video shows you a small Journey on how I reverse engineered and hacked the Disney MagicBandFind Part 2 with the firmware reversing here:youtu.be/i91RUKcc3ewYou can find a Tweet writeup here on twitter:twitter.com/atc1441/status/1662192314649833472This video reveals an exploit on how to glitch the nRF31512 and presumably also the:nRF31502nRF31504nRF24LE1nRF24LU1+nRF24E1nRF24E2The talked of nRF51 Glitching info's can be found here:youtu.be/tMPD0kBG_So
ESP32 controlled E-Paper price tags The OpenEPaperLink startup guide Aaron Christophel 2023-05-12 | This video shows you step by step and in seperate sections how to:- Flash a custom firmware on the ZBS243 based E-Paper Price tags - How to connect such a display to an ESP32 as Access point- How to flash this Access Point- How to use the OpenEPaperLink firmware to drive displays wireless and simpleOpenEPaperLink Github Repo:github.com/jjwbruijn/OpenEPaperLinkhttps://openepaperlink.de/Home Assistant integration:github.com/jonasniesner/open_epaper_link_homeassistantZBS_Flasher:github.com/atc1441/ZBS_FlasherHow to flash the display Firmware step by step:youtu.be/98fOzZs__fc?t=719Follow me on twitter:twitter.com/atc1441
15€ OLED soldering iron T12 custom firmware tests Aaron Christophel 2023-03-05 | GitHub repo: github.com/atc1441/ATC_stc_solder_ironSolder iron:vi.aliexpress.com/item/1005003373147424.htmlMore info's on Twitter: twitter.com/atc1441/status/1631957971725942785
Triink Assembly - Hackaday.io Project Aaron Christophel 2023-02-24 | This video is an short assembly video for this Hackaday.io project:hackaday.io/project/189695-triink-low-power-ble-e-paper-clock
Hacking the Sumup Solo Payment Terminal + DOOM Aaron Christophel 2023-02-24 | This videos tells you about how I found 3 issues in the Sumup Solo Payment Terminal.The issues where disclosed to Sumup in private and closed, said by Sumup, in newer Firmware versionTimeline:20.03.2022 - Release of "Doom" video on Twitter, without disclosing any exploit or issues23.03.2022 - Contacted by the Security team of Sumup followed by a disclose of the issues shown in this video to Sumup18.02.2023 - An E-Mail written to Sumup with info about the release of the issues after 1 Year21.02.2023 - Answer from Sumup and acknowledge of the releasing from Sumup22.02.2023 - Release of this video to Sumup via E-Mail23.02.2023 - Release of this video and the shown issues to the PublicFind the mentioned Twitter posts here:twitter.com/atc1441/status/1505591252766576645twitter.com/atc1441/status/1506024219540606978twitter.com/atc1441/status/1487084797382037504twitter.com/atc1441/status/1485660721493028873twitter.com/atc1441/status/1484506242370478083Doom used:github.com/maximevince/fbDOOM
E-Paper Station Firmware using CC2652 or CC1352 (P) Aaron Christophel 2023-02-16 | This video shows you a demonstration of the ZigBee / 802.15.4 firmware that i wrote to make the CC2652 or CC1352 compatible to the E-Paper Station shown in some earlier videos from Daniel It is used to act as an Access Point interface for E-Paper price tags that run a custom firmware from Dmitry, see the linked video for more info's on that.CC2652/CC1352 Firmware:github.com/atc1441/ZBS_Flasher/tree/main/CC2531_station/EPaperStation_cc13x2_cc26x2_DriverE-Paper Firmware:Source: github.com/atc1441/ZBS_FlasherVideo: youtu.be/98fOzZs__fcTi Flash Programmer 2:ti.com/tool/download/FLASH-PROGRAMMER-2/1.8.2Ti CCS Studio:ti.com/tool/CCSTUDIO
E-Paper Wall 2.0 E-Ink Price Tag Hacking Aaron Christophel 2023-01-20 | Custom Firmware video 2.9" E-Paper Price Tag: youtu.be/98fOzZs__fc7.4" E-Paper Price Tag: youtu.be/kPy8rIQ75NUCustom firmware GitHub Link: github.com/atc1441/ZBS_FlasherDmitrys Price Tag Reversing: http://dmitry.gr/?r=05.Projects&proj=29.%20eInk%20Price%20TagsFollow me on twitter:twitter.com/atc1441
Fiber Laser Engraver Retrofit. New EZCad Controller Aaron Christophel 2022-12-29 | This is a small "blog" type video about retrofitting a new Fiber Laser controller into an industrial type Machine setup.The old controller board is sadly intended to be used in an automatic matter for mass production and not so much to tinker around and engrave funny things into metal
7.4 E-Paper Price tag NFC Image Upload Aaron Christophel 2022-12-28 | Last video about the 88MZ100:youtu.be/kPy8rIQ75NUFollow me on twitter:twitter.com/atc1441
E-Paper Pricetag compressed image uploads on the custom firmware Aaron Christophel 2022-12-24 | Last video about the 88MZ100:youtu.be/DRuVUtqFqcgFollow me on twitter:twitter.com/atc1441
7.4 E-Paper Pricetag full custom firmware for Zigbee 88MZ100 Aaron Christophel 2022-12-22 | Last video about the 88MZ100:youtu.be/aAmc0V1FIa8Follow me on twitter:twitter.com/atc1441
E-Paper Firmware for 88MZ100 Closed SOC Reversed Zigbee Communication Aaron Christophel 2022-12-21 | Last video about the 88MZ100:youtu.be/XdeNul8OkhIFollow me on twitter:twitter.com/atc1441
