Tradfri PIR Motion Sensor Hacking

Back to overview

Tearing down a tradfri motion sensor, and seeing where we can go with it

Connor Huffine

Back to overview
Files 0
Components 0
logs 2
Instructions0
Discussion 1

« Back to project details Sort by:

PCB Schematic
08/14/2020 at 23:53 • 0 comments

I've built a schematic from the PCB, it looks like everything is accessible. Next step is to try and get a JTAG link up with the processor.

This information will be very useful.
Opening the case
08/14/2020 at 19:09 • 0 comments

Popping the case open reveals the spartan interior:
Not much to mention here, we have a PIR sensor, a PIR dedicated chip, and a radio module.
The PIR chip is an Elmos E931.96 IC with two signals: Interrupt/Serial Out and Serial In.
So far this looks extremely hackable. I could easily replace the module with my own header, plug this into an arduino or raspberry pi and call it a day. I don't think that's enough though, I want to see if I can break into the module.