Cheap WiFi Outlets Reflashed; Found to Use ESP8266

There’s a bunch of simple WiFi-enabled outlets on the market today, and all of these blister-pack goodies seem to have something in common – crappy software. At least from the hacker’s point of view; there always seems to be something that you want to do that the app just doesn’t support. Stuck in this position, [scootermcgoober] did the smart thing and reflashed his cheap IoT outlets.

Although [scooter]’s video is very recent, and he says he got his plugs at Home Depot, we were unable to find them listed for sale at any store near us. Walmart lists the same device for a paltry $15, though, so the price is right for repeating his experiment. The video after the break shows his teardown, which locates all the major components, including a mystery module that was revealed to be an ESP8266 upon decapping. Pins were traced, leads were tacked to his serial-to-USB adapter, and soon new firmware was flashing. [scooter]’s new app is simple, but there’s plenty of room for improvement once you’ve got the keys. All the code is up on GitHub.

WiFi outlets like this and the WeMo have proved to be fertile ground for hacking. Of course, if you’re not into the whole blister-pack thing, you could always roll your own WiFi outlet.

Continue reading “Cheap WiFi Outlets Reflashed; Found to Use ESP8266”

ESP8266 Transmits Television on Channel 3

We’ve seen a lot of ESP8266 projects in the past, but this one most definitely qualifies as a hack. [Cnlohr] noticed that the ESP8266, when overclocked, could operate the I2S port at around 80MHz and still not lose DMA data. He worked out how to create bit patterns that generate RF around 60MHz. Why is that interesting? Analog TVs can receive signals around that frequency on channel 3.

As you can see in the video below, the output is monochrome only and is a little snowy. It also will lose frames on some WiFi events, but this is all forgivable when you consider this very inexpensive module isn’t meant to do video output at all.

Continue reading “ESP8266 Transmits Television on Channel 3”

Hacklet 93 – Robotics Toolkit and ESP8266 Packet Injection

You never know where a hack will take you. Sometimes a simple project will take on a life of its own and become a huge software framework. Other times, a reading blog can turn into a weekend project. is the place to upload every project, big, small, or somewhere in between. This week on the Hacklet, we’re taking a look at two projects – one big, one small.

wifi1[Rand Druid] recently spent a Weekend on the Dark Side, creating an ESP8266 packet injector. The project started when [Rand] read about [Kripthor’s] deauth packet injection attacks right here on Hackaday. He initially created the WiFi denial of service throwie mentioned in the article. The basic Bill of Materials (BOM) for this device is an ESP8266 module, a DC/DC converter, a 9V battery, connectors, and a few resistors. This worked well, but some devices (most notably [Rand’s] son’s Android Phone) would disconnect and reconnect so quickly the attack had no practical impact.


double-wifi[Rand] fixed the problem by adding a second ESP8266 module. The first is the listener. It listens for WiFi access points. Once an AP is found, it sends this information to the second jammer” module via a unidirectional single line serial link. The jammer module pumps out deauth packets at full speed. He even managed to create a single executable which performs as both listener and jammer. At boot, the software sends out a series 0xFF bytes through the serial port. The listener has its serial transmit pin directly connected to the jammer’s serial receive line. When the jammer receives the 0xFF bytes, it jumps into the correct function. This was more than enough to kick that pesky Android phone off the network. As with the original article, we have to stress that you should only use modules like these for testing on your own equipment. Be careful out there folks!


bowler[Kevin Harrington] loves robots, but hates reinventing the wheel every time he creates a new machine. He’s built BowlerStudio: A robotics development platform to combat this problem. BowlerStudio was a semifinalist in the 2015 Hackaday Prize. BowlerStudio is a soup-to-nuts platform for creating all sorts of robots. [Kevin] has integrated Computer Aided Design (CAD), 3D modeling, kinematics, machine vision, and a simulation engine complete with physics modeling into one whopper of a software package. To prove how versatile the system is, he designed a hexapod robot in the CAD portion of the program. The robot then taught itself to walk in the simulation. Once the design was 3D printed, the real robot walked right off the bread board. [Kevin] linked the hardware and software with DyIO, another of his projects.

BowlerStudio is a huge boon for just about any robotics hacker, as well as educators. An entire curriculum could be created around the system. Thanks to its Java roots, BowlerStudio is also a multi-platform. [Kevin] has binaries ready to go for Windows, Mac, and Ubuntu.

The newest feature in BowlerStudio is JBullet. JBullet is a Java port of the Bullet physics library. Physics means that important real world effects like gravity and surface friction can now be added to simulations. In [Kevin’s] own words “This project is starting to feel more and more like a game engine targeted towards designing robotics and engineering tools.”

 That’s it for this week’s Hacklet. As always, see you next week. Same hack time, same hack channel, bringing you the best of!

ESP8266 Killer?

We’ve seen rumors floating around the Twittersphere about a new integrated microprocessor and WiFi SOC: the NL6621 from Nufront. Details are still scarce, but that doesn’t seem to be because the chip is vaporware: you could buy modules on and eBay right now for between two-and-a-half and three bucks, and Nufront’s website says they’ve produced a million modules since 2013.

The NL6621 WiFi SOC is powered by a 160 MHz ARM Cortex-M3 with 448 KB of RAM, and everything else is integrated in the SOC. The module has 32 GPIOs, SPI, I2C, I2S digital audio, and most of the peripherals that you’d expect. They say they have a completely open source SDK, but we can’t find a link to it anywhere. An English-language forum has sprung up in anticipation of the next new thing, and they say that they’ve contacted Nufront about the SDK, so that’s probably as good a place as any to lurk around if you’re interested. With an ARM core, it shouldn’t be long before someone gets GCC working on these things anyway.

It’s also worth noting that we’ve announced ESP8266 killers before, and it hasn’t come to pass. The mixture of community and official support that (eventually) came out of Espressif seems to be the main factor determining the ESP8266’s success, and we don’t see that yet with the NL6621. So take the question mark in the title seriously, but if this turns out to be the next big thing, remember where you heard it first, ok?

Thanks [David Hunt] for the tip!

Adorable Quadruped Robot Hops and Walks

The ESP8266 is finding its way into all sorts of projects these days. It’s a capable little device, to be sure, but we’d have to say that finding it running a quadruped robot that can hop and run was a little unexpected. And to have it show up in such an adorable design was pretty cool too.

From the looks of [Javier Isabel]’s build log, he put a lot of thought into [Kame]. All the body parts and linkages are 3D printed from PLA, with the nice touch of adding a contrasting color. The legs are powered by eight high-speed Turnigy servos, and good quality bearings are used in the linkages. A NodeMCU runs the show with custom oscillator algorithms that control the various gaits, including the hopping motion. The BOM even lists “Adhesive 12mm diameter eyes” – perhaps that’s some sort of slang for the more technically correct “googly eyes.”

Built primarily as a test platform for studying different gaits, there doesn’t seem to be much in the way of sensors in [Kame]’s current incarnation. But with an ESP8266 under the hood, the possibilities for autonomous operation are good. We look forward to seeing where this project goes next. And we kid about the cuteness factor, but never doubt the power of an attractive design to get the creative juices flowing.

We’ve covered a lot of quadruped robots before, and a lot of them seem to trend toward the cute end of the spectrum. Check out this baby-quad that’s learning to walk or this quad that thinks it’s a puppy.

Continue reading “Adorable Quadruped Robot Hops and Walks”

Truly Versatile ESP8266 WiFi Webcam Platform

[Johan Kanflo] built a sweet little ESP8266-based wireless camera. It’s a beautiful little setup, and that it’s all open and comes with working demo code is gravy on the cake! Or icing on the potatoes. Or something.

[Johan]’s setup pairs an ESP8266-12 module with an Arducam, which looks like essentially an SPI breakout board for the ubiquitous small CMOS image sensors. The board naturally has a power supply and headers for programming the ESP module as well as connectors galore. Flash in some camera code, and you’ve got a custom WiFi webcam. Pretty slick.

pogo_pin_animBut since [Johan] designed the ESP-8266 board with standard female headers connecting to the ESP, it could also be used as a general-purpose ESP dev board. [Johan] built a few daughterboards to go along with it, including a bed-of-nails ESP8266 tester (since you can never tell when you’re going to get a dud ESP unit) and WiFi-to-RFM69 radio bridge. That’s two awesome applications for a tidy little system, and a reminder to design for extensibility when you’re laying out your own projects.

We’ve previously covered [Johan]’s Skygrazer project, which tracks planes as they fly overhead and displays them on a gutted old Mac. Is it any surprise, then, that he’s also created an ADS-B-controlled moodlight? This guy is on fire!

Five Bucks, Three Parts: WiFi Camera Remote

It’s just ridiculous how cheap and easy it is to do some things today that were both costly and difficult just two or three years ago. Case in point: user [gamaral] built a WiFi remote control for his Canon E3 camera out of just three parts: an ESP8266 module, a voltage regulator, and a stereo plug that the camera uses as its remote trigger.

And the codebase is just about as minimal, although it’s not without its nice touches. Control is easy — just pull down a pin for focus or shutter. The ESP listens to a custom port, and when it gets the message, “presses” or “releases” the pins. It’s a good, simple example of how to work with the ESP IOT SDK.

The timing is all on the client side. [gamaral] knew that he was going to want to play around with how long to hold down the focus button, for instance, so he left that flexible. Using Netcat makes the client-side code completely trivial: echo -n "SHUTTER HOLD" | nc -w 1 -q 1 roosevelt 9021. Bam. And it worked first time. Check the well-done video just below for more details.

And keep your eye on [gamaral]’s page, because he’s going to make another video when the PCBs arrive in the mail.

Continue reading “Five Bucks, Three Parts: WiFi Camera Remote”