Hacking Build your own dongle (Research and development thread)

[yakuma]

@Wierd_w
hi can u share how to build doggle on zsun?

 

[Wierd_w]

@Wierd_w
hi can u share how to build doggle on zsun?

I really need to update the first post of this thread.

My new test candidate zsun arrived only yesterday. I am in the process of building packages again. Sadly, I am also preparing for a much needed vacation at this time.

I would actively recommend that people either flash one of the "with battery" variants of the A5V11 hardware, or program and solder together one of those trinket/feather kits in the meantime. The zsun will require hardware modifications that require almost superhuman soldering skills. I have a plan of action on how to proceed, but am way behind the others at this point.

My objective with starting this thread (get at least one DIY dongle working) has been met-- We have working prototypes of several unique designs. I would encourage those who have developed prototypes to post nice, clean how-to posts of their own, so that people who arent interested in the actual hardware hacking aspects of dongle developent and just want to get to having a dongle of their own can quickly get to it without wading through 15+ pages.

 

[yakuma]

I really need to update the first post of this thread.

My new test candidate zsun arrived only yesterday. I am in the process of building packages again. Sadly, I am also preparing for a much needed vacation at this time.

I would actively recommend that people either flash one of the "with battery" variants of the A5V11 hardware, or program and solder together one of those trinket/feather kits in the meantime. The zsun will require hardware modifications that require almost superhuman soldering skills. I have a plan of action on how to proceed, but am way behind the others at this point.

My objective with starting this thread (get at least one DIY dongle working) has been met-- We have working prototypes of several unique designs. I would encouragev those who have developed prototypes to post nice, clean how-to posts of their own, so that people who arent interested in the actual hardware hacking aspects of dongle developent and just want to get to having a dongle of their own can quickly get to it without wading through 15+ pages.

ok thanks for the respon.
i already read but from the cost is chep if i use zsun. if use trinker m0 is expensive.

 

[Sodapopcan]

Well if anyone’s interested I managed to hook a ps4 controller battery into the trinket and it worked like a charm. My controller was broke already so it was a perfect fit.

 

[Joxley192]

I did the same but with a joy con battery and thinking about putting the trinket m0 inside my switch

 

[Sodapopcan]

I did the same but with a joy con battery and thinking about putting the trinket m0 inside my switch

that's a good one. thinking about it i probably could have used the charge grip battery...

 

[Wierd_w]

ok thanks for the respon.
i already read but from the cost is chep if i use zsun. if use trinker m0 is expensive.

The A5V11 hardware is like, 7$.

Contains a battery already, comes in an injection molded housing already, and is completely solderless. Just needs a custom firmware flashed onto it, and a pigtail cable.

 

[M-O-B]

I used the trinket m0 which works a treat, however now I want to try and build another one using the trinket m0 but this time instead off soldering the data+ & data- wires to the micro usb port on the trinkets, I after using a Usb 3 1 Type C Male Connector To Micro Usb Male Adapter.

but all I can find are these two versions.

Usb 3.1 Type C Male To Micro Usb 2.0 Female Adapter

Micro USB Male to Usb 3 1 Type C Female Data Adapter

i could always remove the micro usb female port from the Usb 3.1 Type C Male To Micro Usb 2.0 Female Adapter and replace it with a micro usb port.

but I was hoping someone may have come across the Type C Male Connector To Micro Usb Male Adapter to save me the hassle of soldering.

this is my version 1, could do with a slightly smaller battery but it will do till I find other bits to do a version 2 of it.



something like in the image below.

 

[Poketrekker]

The A5V11 hardware is like, 7$.

Contains a battery already, comes in an injection molded housing already, and is completely solderless. Just needs a custom firmware flashed onto it, and a pigtail cable.

Have you got it working? I flashed @jcrorxp bin file but now there is no Wifi and when I connected it via ethernet I am unable to ssh/telnet into it...

I followed this guide: https://wiki.openwrt.org/toh/unbranded/a5-v11
The English (QualComm) Factory Firmware part and I flashed the firmware and used
u-boot 256.

 

[Wierd_w]

Have you got it working? I flashed @jcrorxp bin file but now there is no Wifi and when I connected it via ethernet I am unable to ssh/telnet into it...

I followed this guide: https://wiki.openwrt.org/toh/unbranded/a5-v11
The English (QualComm) Factory Firmware part and I flashed the firmware and used
u-boot 256.

You might need to get a 3.3v usb UART cable, and attach to the serial header pads. The serial console will give you a root shell even if SSH/Telnet is not running. This is what jcrorxp is referring to when he says he connected a TTY. These cables are an indispensable item when doing embedded device hacking. They are well worth the investment.

This cable would be adequate.
https://www.adafruit.com/product/954

Usually, the device will default to something like 192.168.0.1 on a fresh lede/openwrt install, and will listen on telnet until you set a root password. Then SSH will be enabled. I have been waiting (oh, have I been waiting! Damn slow boats from china!! *shakes fist angrily*) "patiently" for my A5V11 with battery for some time, and it has still not arrived in the mail. It is not quite june yet, but it is entirely possible that it will take that long to get here. Regardless, if faced with the situation you are citing, I would put my wired network interface into that private subnet with a statically assigned IP-- say, something like 192.168.0.10 or something--- and then try to telnet to 192.168.0.1. If that failed, I would attach header pins to the ground, TX, and RX pins on the device, and attach a 3.3v serial UART, and grab the serial console.

 

[Poketrekker]

Thank you for the detailed reply

I found a cheap version here: https://www.aliexpress.com/item/PL2...nverter-Serial-Adapter-Cable/32834894166.html

I will try different IPs and see if that gets me anywhere since that cable will take a while to come....

Does it come with a default Payload do you know? Because it doesn't seem to do anything when I load up RCM either...

 

[Wierd_w]

Thank you for the detailed reply

I found a cheap version here: https://www.aliexpress.com/item/PL2...nverter-Serial-Adapter-Cable/32834894166.html

I will try different IPs and see if that gets me anywhere since that cable will take a while to come....

Does it come with a default Payload do you know? Because it doesn't seem to do anything when I load up RCM either...

Yes, it should display the fusee-gelee rocket ship and some debug info with the default payload, if I read correctly. It is possible that it is not getting the correct vendor ID from your NX, and thus not triggering. You would need serial console to check that if you cannot get root shell.

Also, I am leery of that cable being the correct level voltage. It *NEEDS* to be 3.3v levels. TTL is usually 5v levels. It would nuke the router if you connected a 5v serial interface.

 

[Poketrekker]

Yeah I thought it came with the default fusee payload but I am not getting anything so something is definitely wrong...I guess I will just have to wait for the UART cable.

Is the one I posted above decent or would this one suit better?

https://www.aliexpress.com/item/10P...-CP2104-STC-PRGMR-Than-CP2102/1865455799.html

Edit: Yeah I noticed it didn't have 3.3v this one does seem to have it though...

Thanks for the help

 

[sweetlilmre]

Here is my trinket based payload delivery system.
Basically a micro to full size SD Card adapter sandwiched between the trinket and the charger, I'm calling it a Hackwich


-(e)

 

[Wierd_w]

Yeah I thought it came with the default fusee payload but I am not getting anything so something is definitely wrong...I guess I will just have to wait for the UART cable.

Is the one I posted above decent or would this one suit better?

https://www.aliexpress.com/item/10P...-CP2104-STC-PRGMR-Than-CP2102/1865455799.html

Edit: Yeah I noticed it didn't have 3.3v this one does seem to have it though...

Thanks for the help

The second one outright states that it uses 3.3v on the RX and TX lines, so it will work. DO NOT CONNECT +5V wire!! Only ground, TX, and RX!!

 

[PsychoRabbit]

I used the trinket m0 which works a treat, however now I want to try and build another one using the trinket m0 but this time instead off soldering the data+ & data- wires to the micro usb port on the trinkets, I after using a Usb 3 1 Type C Male Connector To Micro Usb Male Adapter.

but all I can find are these two versions.

Usb 3.1 Type C Male To Micro Usb 2.0 Female Adapter

Micro USB Male to Usb 3 1 Type C Female Data Adapter

i could always remove the micro usb female port from the Usb 3.1 Type C Male To Micro Usb 2.0 Female Adapter and replace it with a micro usb port.

but I was hoping someone may have come across the Type C Male Connector To Micro Usb Male Adapter to save me the hassle of soldering.

this is my version 1, could do with a slightly smaller battery but it will do till I find other bits to do a version 2 of it.

I'm waiting for some components to be shipped to do the same Type-C male to Micro USB male adapter.
I couldn't come with one in my search, so I'm going to do a soldered version.
But found these adapters that can be a workaround for a non-soldering version.


Options:

1 Micro Usb to USB A converter like https://aliexpress.com/item/12pcs-O...le-to-Female-Connector-May24/32880831945.html
connected to one Type-C to USB A OTG adapter https://aliexpress.com/item/Type-C-...S8-Note8-Android-Phone-May24/32879698758.html


Or this triple adapter https://es.aliexpress.com/item/USB-...-Xiaomi-Huawei-Android-May24/32878181736.html

 

[M-O-B]

I just ordered some micro usb male and micro male to type c female adapter, to test out if all goes to plan then I'll get some type c male to replace the type c female with.

 

[Rainbowfied Pokemaster]

So I got this router: http://s.aliexpress.com/mMfaQFZB

I flashed the firmware on it but when I connect it to the battery and then the Switch in rcm, nothing happens.

 

[Wierd_w]

So I got this router: http://s.aliexpress.com/mMfaQFZB

I flashed the firmware on it but when I connect it to the battery and then the Switch in rcm, nothing happens.

Do you have ssh to the unit? I am interested in the output of dmesg after plugging in the NX.

 

[Rainbowfied Pokemaster]

Do you have ssh to the unit? I am interested in the output of dmesg after plugging in the NX.

How can I do that?