Elvica LSPA9 support

[dj-fiorex]

Hell, i have a pair of cheap smart plug Elivca LSPA9 that seems based on BK7231S, i tried to install the app but i was only T and S version on the chip, i tried the first 10 profiles but the app seems stuck at Wait for CustomerAP termination and then gives an error "Timed out while scanning for SSID "LightleadIdle"". What can i do?
Thanks!

[kuba2k2]

How do you know they're based on BK7231S? Did you read the marking on the chip?

[dj-fiorex]

Yes, not me
https://zry.io/archives/799
I would like to install also cloudcutter
Please i need some help thanks

[kuba2k2]

The post you linked shows CB2S, which is BK7231N, not S. I have the same plug that is based on BK7231T, so you never know which one you have.

Try the "Lightleak - BK7231T" or N profiles; other profiles won't work anyway. Also, this is a pretty advanced method currently, so if you're not sure what you're doing, try cloudcutter first. It might already have a matching profile. Please read the instructions here.

[dj-fiorex]

I'm a software engineer and i work daily with this type of microcontroller, this is why i want to use lightleak before using cloudcutter to help with a device dump.
I tried LightLeak T and N on the app, but it stops with this error: "Timed out while scanning for SSID "LightleakIdle"".

[kuba2k2]

Post the screenshot of the error, along with last successful lines in the log window above. If your device connected to the Lightleak CustomAP, you can try choosing state "Configured to join CustomAP" in the dialog at the start.

Also, pair the device with TuyaSmart/SmartLife and check its firmware version. This will help to determine if it's BK7231N or T. Then you can choose the correct Lightleak profile in the app.

[dj-fiorex]

This is the screenshot

[dj-fiorex]

My smart plug is in freezed state right now

Same error with the other two scripts

[kuba2k2]

What does it mean "in freezed state"? The app didn't run any exploit yet, so how can it be frozen?

What device are you using for customAP? Is it close enough to the smart plug?

[dj-fiorex]

Update:
Tried again with the T scripts and this time the error is different

Of course same hardware, an esp32 that is really close to the smart plug

[dj-fiorex]

What does it mean "in freezed state"? The app didn't run any exploit yet, so how can it be frozen?

You are right, it was not freezed.

What device are you using for customAP? Is it close enough to the smart plug?

When the app can't connect to LightLeakIdle i can see the network

[kuba2k2]

So the BK7231T profile you tried did freeze the device. Then you need to try the BK7231N profile and hopefully make it complete the "waiting for CustomAP termination" step. (as you see on the last screenshot, it does work sometimes)
Sometimes it helps to turn WiFi off and on, when it's "waiting for CustomAP termination".