Hacking Question Updating a knock-off switch dongle

[eskinner3742]

So, I ordered a cheap "NS SX Pro OS Crack Tool Connector Disk for Switch" off of ebay. It's just a dongle that pushes a CTCaer hekate v3.2 payload. Problem is, there is no micro USB port like on the R4s so I can't update the payload and I just updated to 6.0 using ChoidujourNX which isn't supported in v3.2. I tired connecting it to my phone's USB-C port and it just charges.

My question is, since it's a cheap-o ebay dongle there is no support site for it, does anyone know what kind of board this is and how I can change the payload? I took the casing apart and there are no buttons or hidden micro usb port to see. I've included pictures so maybe someone with more knowledge could help me out, I mean, they had to flash the initial payload somehow.

 

[x65943]

So, I ordered a cheap "NS SX Pro OS Crack Tool Connector Disk for Switch" off of ebay. It's just a dongle that pushes a CTCaer hekate v3.2 payload. Problem is, there is no micro USB port like on the R4s so I can't update the payload and I just updated to 6.0 using ChoidujourNX which isn't supported in v3.2. I tired connecting it to my phone's USB-C port and it just charges.

My question is, since it's a cheap-o ebay dongle there is no support site for it, does anyone know what kind of board this is and how I can change the payload? I took the casing apart and there are no buttons or hidden micro usb port to see. I've included pictures so maybe someone with more knowledge could help me out, I mean, they had to flash the initial payload somehow.

View attachment 144864 View attachment 144868 View attachment 144869

I know maybe a crapshoot, but have you tried contacting the seller?

 

[eskinner3742]

I know maybe a crapshoot, but have you tried contacting the seller?

I did message the seller but no response as of yet. I just installed 6.0 like 30 minutes ago and ran into the issue.

 

[corim123]

Looks like the board is missing the reset switch. If you soldered one on you can likely put it into flashing mode. It then may show up in your computer like the other devices like the trinket and switchme do over USB-C. If that doesn't work you may need to reflash it some other way using the programming pads on the back.

 

[Albytrozz]

It looks like they might have used some kind of pin or jtag header to program the chip instead of using a microusb port. I believe that's what that white rectangle on the bottom is, the place where the programming header would touch.

If that's the case they probably just quickly write to each of them once with their header setup never intending the user to be able to do it themselves.

Looks like each pin is labeled but I wouldn't know how to connect them to USB.

 

[rrocha]

it does seem to have the RST line exposed. If this has an ATSAMD21 with the UFS bootloader, you should be able to get to by using a wire and, while connected to your computer's USB port, have one of the wire tips touching GND and tap twice with the other end on the RST pad.

If it does enter into UFS, drag your desired UFS package or fire up Arduino Studio and compile your own version

 

[jj56185]

It can not change the payload. now there is another version 2 came out in china, add a sd card in the dongle,to update the payload.

 

[xKDCx]

I have the one with the sd, how can I update it? There are no instructions.

 

[mattytrog]

You can change the payload. Quite involved though.

I want one of these things so I can get the chainloader made.

Someone want to send me one? Swap for a trinket m0?

 

[Flying Scotsman]

I have the one with the sd, how can I update it? There are no instructions.

If they're .bin files - just download whatever payload you want and replace + rename it to whatever the existing payload was called. That's what my RCMLoader dongle uses (with a text file with the default payload to launch).

If it's a .uf2 - that's more involved as you'll have to figure out what chip the dongle is using before finding an updated .uf2 file (in Mattytrog's extremely useful payload thread).

 

[ShadyGame]

I have one also, been talking to the seller for one month now, he's always asking me to be patient, bla bla...

 

[xKDCx]

If they're .bin files - just download whatever payload you want and replace + rename it to whatever the existing payload was called. That's what my RCMLoader dongle uses (with a text file with the default payload to launch).

If it's a .uf2 - that's more involved as you'll have to figure out what chip the dongle is using before finding an updated .uf2 file (in Mattytrog's extremely useful payload thread).

Well it has a sd slot but there was no sd card in it so I don't know which format it needs to have.
I tried an ad in fat32 and one with NTFS with a payload.bin reinx.bin and a boot.dat on it but it didn't even turn on when in rcm. If the switch is in horizon the led turns green so it doesn't seem to be defective.

 

[nanchan]

Anyone found a solution to this problem? I have the exact RCM injector as OP with the 2 blue capacitors at the end. I tried to double tap using a wire from GND to RST but nothing happens aside from the red LED turning green twice.

 

[SylverReZ]

So, I ordered a cheap "NS SX Pro OS Crack Tool Connector Disk for Switch" off of ebay. It's just a dongle that pushes a CTCaer hekate v3.2 payload. Problem is, there is no micro USB port like on the R4s so I can't update the payload and I just updated to 6.0 using ChoidujourNX which isn't supported in v3.2. I tired connecting it to my phone's USB-C port and it just charges.

My question is, since it's a cheap-o ebay dongle there is no support site for it, does anyone know what kind of board this is and how I can change the payload? I took the casing apart and there are no buttons or hidden micro usb port to see. I've included pictures so maybe someone with more knowledge could help me out, I mean, they had to flash the initial payload somehow.

View attachment 144864 View attachment 144868 View attachment 144869

There are test points on the back side of the board to wire it up to a USB breakout board and program new code onto it. After all, this is simply a Trinket M0 development board with a USB-C connector.

 

[nanchan]

There are test points on the back side of the board to wire it up to a USB breakout board and program new code onto it. After all, this is simply a Trinket M0 development board with a USB-C connector.

appreciate the feedback, but the back side has RST, 3.3V, GND, DIO, CLK. How do I connect it to USB which requires Vcc, D-, D+, and GND?

 

[SylverReZ]

appreciate the feedback, but the back side has RST, 3.3V, GND, DIO, CLK. How do I connect it to USB which requires Vcc, D-, D+, and GND?

https://learn.adafruit.com/how-to-program-samd-bootloaders/trinket-m0-wiring

Maybe next time don't necrobump threads.

 

[The Real Jdbye]

appreciate the feedback, but the back side has RST, 3.3V, GND, DIO, CLK. How do I connect it to USB which requires Vcc, D-, D+, and GND?

That isn't USB, it could be JTAG or I2C. But whatever it is, it's probably for programming.

There are test points on the back side of the board to wire it up to a USB breakout board and program new code onto it. After all, this is simply a Trinket M0 development board with a USB-C connector.

Definitely not. The main chip doesn't even have the same pin count as the ATSAMD21.

 

[nanchan]

That isn't USB, it could be JTAG or I2C. But whatever it is, it's probably for programming.

Definitely not. The main chip doesn't even have the same pin count as the ATSAMD21.

Guess I am out of luck. Was going to try wiring a USB to it using (Vcc to 3.3V, GND to GND, D+ to DIO, and D- to CLK) per SylverReZ's feedback.

 

[The Real Jdbye]

Guess I am out of luck. Was going to try wiring a USB to it using (Vcc to 3.3V, GND to GND, D+ to DIO, and D- to CLK) per SylverReZ's feedback.

The link they provided never suggested you do such a thing, all it talks about is a breakout board (but doesn't even explain what this breakout board is used for)
It could still be a SAMD chip, I couldn't say. All the SAMD chips are programmed the same way, using a special USB dongle (which is not mentioned in the link, but plugs into that little connector on the breakout)
Without knowing for sure what chip it is (I don't see any markings on the pictures in the OP) it's hard to say what device is required for flashing it. Chips from different series are programmed differently.
Unless somebody has figured out for sure what chip is used, it's gonna be tough.
On the plus side, RCM dongles are cheap from China.

 

[Nephiel]

Vcc to 3.3V

Don't. USB Vcc would be 5V and likely to damage the chip.