Original Sonoff 4CH Pro dump (bricked firmware)

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Dannyx
    CertifiedAxhole
    • Aug 2016
    • 3912
    • Romania

    #1

    Original Sonoff 4CH Pro dump (bricked firmware)

    Good day folks. A friend of mine told me his Sonoff 4CH light switch recently stopped working. It wouldn't respond to any commands and would appear as offline. Not having done any major work on these home automation devices before, we both concluded the firmware got corrupted, so we set about to find a way to reprogram it.

    It turns out these things have got a STM32 inside of it and an ESP32, so given the open-source nature of these components, there's a variety of different firmware and interfaces you can upload to them......in theory. Ideally, we wanted to use the original one it came with, but as it turns out this is not easy to get hold of: if you haven't made a backup of the original contents of the thing, you can't simply download the dump from somewhere (at least we were unable to).....

    The way you flash it to the device is also pretty difficult to pull off: you first connect it to the PC with a serial to USB adapter, which we have (a CH341). I can assume this works because if I open a terminal window, I DO get some info from the Sonoff when powering it on. Then, you have to pull a GPIO pin of the ESP to GND to go into download mode and then use a piece of software to actually flash it with the firmware you want - official or third party. I tried doing this with a "Tasmota" firmware which seems to be very common, just to check if I can do this AT ALL and it didn't work. Granted, I was in a bit of hurry and probably didn't dig deep enough, but now all it does is it has 3 of the 4 "CH" LEDs come on in red when you turn it on, so I assume it DID wipe the flash somehow but didn't write anything back to it....

    If someone happens to have one of these and are willing to share a backup of their original flash so I can try again, it would be greatly appreciated. My buddy really likes this device and he tailored his whole house around it, so he really needs it
    Wattevah...
  • stj
    Great Sage 齊天大聖
    • Dec 2009
    • 31294
    • Albion

    #2
    Re: Original Sonoff 4CH Pro dump (bricked firmware)

    that firmware is junk,
    99.9999% of people who buy sonof reflash it with tasmota before they even turn it on.
    https://github.com/arendst/Tasmota
    https://www.youtube.com/c/AndreasSpi...?query=tasmota

    Comment

    • Dannyx
      CertifiedAxhole
      • Aug 2016
      • 3912
      • Romania

      #3
      Re: Original Sonoff 4CH Pro dump (bricked firmware)

      Originally posted by stj
      that firmware is junk,
      99.9999% of people who buy sonof reflash it with tasmota before they even turn it on.
      https://github.com/arendst/Tasmota
      https://www.youtube.com/c/AndreasSpi...?query=tasmota
      Could be

      The fact remains I was unable to flash even the Tasmota one.....I now know I needed to install Python for this to work, so it's not as easy as it seemed at first...
      Wattevah...

      Comment

      Related Topics

      Collapse

      • cr4zychriss
        [Problem/ Request] Bricked TongFang GK7MRFR BIOS
        by cr4zychriss
        Hello everyone,
        I am requesting urgent assistance to unbrick my laptop, a rebranded TongFang GK7MRFR chassis. The laptop is completely dead following a faulty in-OS EC flash attempt.
        I have successfully used a CH341A programmer and can read/write/verify both flash chips, but using my backups/extractions has failed to restore power. The root cause is likely a corrupted Intel Management Engine (ME) region or an incompatible EC/BIOS pairing. System & Hardware Details
        • Barebone / Chassis: TongFang GK7MRFR
        • MB: MB: GK5MP5X V1.0 Prod :GK5MRFV10T04201310281
        • Rebrand: PC Specialist
        ...
        11-14-2025, 04:04 PM
      • Ahari
        Request HP Proliant Microserver Gen 8 (J06) BIOS dump to restore system firmware
        by Ahari
        Hi all,

        This is my first post here (I am very new to forums!) and I hope someone can help. I am looking for a full dump of the BIOS of a HP Proliant Microserver Gen 8 so that I can get this mini server running again. (BIOS version J06 2019-04-04, chip 25Q064A). I think my board was partially bricked after a failed BIOS update.

        I got it second hand in this state and all the normal attempts at bios restoration have not worked. I have even desoldered the chip and tried to load the actual BIOS from HP, but it is missing some parts needed to boot the system.

        I...
        08-13-2025, 06:12 AM
      • maximus-bullitt
        Request: Dell PowerEdge R340 iDRAC9 SPI dump (Winbond 25Q032)
        by maximus-bullitt
        Hi everyone,

        I’m working on a Dell PowerEdge R340 (Service Tag: JTMLKB2).
        The iDRAC is bricked — system hangs at “iDRAC initializing,” fans at 100%, and no VGA output.
        The cause is a bad firmware flash to the iDRAC SPI.

        Board details:
        - Model: Dell PowerEdge R340 (14G)
        - iDRAC version: iDRAC9
        - Flash chip: Winbond 25Q032 (32 Mbit / 4 MB)
        - Location: iDRAC EEPROM near the BMC (ASPEED AST chip)
        - Tool used: CH341A programmer

        What I need:
        - A clean, working 4 MB `.bin` dump of the 25Q032 from another R340...
        09-28-2025, 04:22 PM
      • macabook
        🛠️ MSI GP75 Leopard MS-17E71 – No Display, Deep BIOS/EC Troubleshooting
        by macabook
        Hello everyone,

        I’m currently working on a dead MSI GP75 Leopard (MS-17E71) motherboard (i7 CPU, NVIDIA GPU) with a no display/no backlight issue initially. After extensive investigation, I’m at a critical stage involving EC firmware, BIOS/ME region interaction, and possible deep corruption. I'm seeking advanced insight from anyone with experience in EC/BIOS sync issues or PCH-level behavior. Here’s a full breakdown:
        🧩 Initial Issue
        • Board powers on (fans spin, keyboard lights up and can be adjusted, caps lock led lights), but no display or backlight
        • External display (HDMI) shows
        ...
        07-24-2025, 02:17 PM
      • zoltor
        Canon G3430 has a lightning flash after the firmware
        by zoltor
        Good afternoon. The Canon G3430 is lit by lightning after the firmware, it does not respond to the buttons. I did not flash it, they brought it with traces of soldering, and all three chips. SPI - IC401 25Q128, IC402 25Q32, IC403 M24128. The SPI flash drives may have been confused in places. The QM8-0985 formatter. I've tried all the firmware available on the Internet, and the result is the same. I ask you to send dumps of chips, if someone has the same revision of the board, also tell me if the location of the SPI flash corresponds to the position numbers. Thank you very much in advance.
        09-17-2025, 12:40 AM
      • Loading...
      • No more items.
      Working...