search

tuya-cloudcutter / tuya-cloudcutter

A tool that disconnects Tuya IoT devices from the cloud, allowing them to run completely locally.
MIT License
1.06k stars 78 forks source link

(Tuya) tira_iwiik_iwwctlrgb-v1.0.2 dump custom profile not working #359

Closed Yamacore closed 1 year ago

Yamacore commented 1 year ago

Hello, after i tried the lightleak app which told me the device is not exploitable i connected one of them via uart and dumped the firmware with the BK7231 Flasher(New one) As result i got the attached file iwiik_tria-led-stripe-v1.0.2-BK7231T.bin.zip When i try to create a custom profile with this dump i get a new folder and in the cli i see that the schema already exists. Sadly when i copy over the generated profile and try to use it it always aborts with "exploit failed"

May someone look over this and tell me if it is doable to use cloudcutter with this dump?

Edit more info: the product code is IWWCTLRGB these are led strip controllers with wifi+ir they got an BK7231T (https://developer.tuya.com/en/docs/iot/wb3s-module-datasheet?id=K9dx20n6hz5n4)

Thanks in advance.

kuba2k2 commented 1 year ago

Which flasher did you use? I see that the produced dump is "swapped" i.e. bootloader is at the end of flash. This is not the issue in your case, but I wonder if you just used an older version of the flasher (in which case you should update) or the flasher is still producing incorrect dumps.

Yamacore commented 1 year ago

Hello there, i used this one "https://github.com/openshwprojects/BK7231GUIFlashTool/releases/tag/v1.0.7"

kuba2k2 commented 1 year ago

If that's the latest version that you took this dump with, then you should report an error on their issues page. Binary swapping is clearly an issue, and I've asked the author before to fix it (and he did), so something must have stopped working again.

Cossid commented 1 year ago

Added as IWIIK IWWCTLRGB RGBCT LED Light Strip