a.edenhauser/Shelly-Loqed-Touch
1
1
Fork 0
Code Issues 3 Pull Requests Actions Packages Projects Releases Wiki Activity

doc0 - adjust image sizes

Browse Source
This commit is contained in:
a.edenhauser
2026-10-19 09:31:33 +02:00
parent 1430ec79b8
commit 3b450d2a12
1 changed files with 15 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Document0-Initial_Information_Gathering.md
+15 -11
View File
@@ -42,7 +42,7 @@ The packaging contains:
The lock is surrounded by a plastic packaging with molds for eah component. Within the box it is kept in place with some cardboard. The box itself is held shut by a small magnet.
![Contents of the box](img/unpacking.jpg)
<img src="img/unpacking.jpg" alt="Contents of the box" width="400">
## 1.2 || 2.2 Outer Inspection
@@ -50,11 +50,11 @@ The lock is surrounded by a plastic packaging with molds for eah component. With
The outer module is a touch sensor surrounded by a plastic shell with two screws and one cable inside.
![Back of the touch module](img/touch_back.jpg)
<img src="img/touch_back.jpg" alt="Back of the touch module" width="400">
During installation, the cable is supposed to connect to the motor module.
![Cable position of the touch module](img/touch_cable.jpg)
<img src="img/touch_cable.jpg" alt="Cable position of the touch module" width="400">
### Inner Module
@@ -62,7 +62,7 @@ The inner module includes the motor module, which is connected using cables to:
- the power supply
- the touch module
![The inner module including the motor module](img/inner.jpg)
<img src="img/inner.jpg" alt="The inner module including the motor module" width="400">
Unopened, it is surrounded by a metal shell which can easily be removed by pulling a plastic strap, as this is necessary during installation.
@@ -71,7 +71,7 @@ Unopened, it is surrounded by a metal shell which can easily be removed by pulli
The bridge is to be placed within 3 meters of the lock. It is used to connect the lock to the app.
It features a reset button.
![The bridge](img/bridge.jpg)
<img src="img/bridge.jpg" alt="The bridge" width="400">
## 1.3 && 1.4 Open Casing / HW Inspection
@@ -85,29 +85,29 @@ What you can spot immediately is:
- WiFi & Bluetooth/BLE capable
- [Datasheet](docs/esp32_datasheet.pdf)
![PCB inside the bridge](img/bridge_pcb.jpg)
<img src="img/bridge_pcb.jpg" alt="PCB inside the bridge" width="400">
Under the PCB is HW for the power supply.
![Power supply beneath PCB](img/bridge_under_pcb.jpg)
<img src="img/bridge_under_pcb.jpg" alt="Power supply beneath PCB" width="400">
### Outer Module
There are three screws on the back of the touch module, however, it's additonally glued together. It can't be opened without being (probably) permanently damaged.
![Back of the touch module with screws removed](img/touch_inside.jpg)
<img src="img/touch_inside.jpg" alt="Back of the touch module with screws removed" width="400">
### Inner Module
As I'm working with an already opened device, I'm not interiley sure hw many screws were intially needed to open the motor module, but I'm assuming it were four. After unscrewing these the plastic shell can be removed by gently wiggling it until it comes loose.
![Inside of the motor module](img/motor_inside.jpg)
<img src="img/motor_inside.jpg" alt="Inside of the motor module" width="400">
Once again you can immedatiely spot UART.
After unplugging all cables, the PCB can be leveraged out of the shell with a flat screwdriver, without causing any damage.
![Other side of the motor module PCB](img/motor_inside_2.jpg)
<img src="img/motor_inside_2.jpg" alt="Other side of the motor module PCB" width="400">
Here you can see:
- UART
@@ -118,9 +118,13 @@ Here you can see:
## 1.5 Software Components from Firmware Analysis
## 1.6 Collect "fresh" Firmware Dump
## 1.6 Collect "Fresh" Firmware Dump
As the lock has been tampered with before, the FW dump is not entirely "fresh."
### Bridge
### Outer Module
## 1.7 && 2.3 Initial setup