ControlSteam

Steam Gaming Controller Modification.

Brandon Dunson

Following Follow project

Liked Like project

Become a Hackaday.io member

Just one more thing

To make the experience fit your profile, pick a username and tell us what interests you.

OK, I'm done! Skip

Similar projects worth following

2.2k views

9 comments

19 followers

7 likes

View Gallery

Description

The Steam Controller is available for pre-order but as soon as we get our hands on it it's getting cracked open, thoroughly analyzed, and quickly modified.

Details

MCU: NXP LPC11U37F ARM Cortex-M0

Radio: Nordic nRF51822 Soc, ARM Cortex-M0, BLE

Discussions

fanciestBanana wrote 07/12/2016 at 20:53

So is this project dead already?

Are you sure? yes | no

Blixa Morgan wrote 11/20/2015 at 01:08

Parsed hex packets being sent during the firmware update: https://drive.google.com/file/d/0B9noT-h9uevldl9FcFU4RnFUZjA/view?usp=sharing

Already stripped out the usb header info, so just the hex data is there. Each packet starts with 92 32, so that may be some sort of pointer, and there are several packets with nothing but FF or 00 bytes. Also, near the end there is a section that says VALVE WEAK and TESTdozewipe. Not sure what those mean, but I'm running a disassembler on it to see if i can pick out any actual firmware activity

Are you sure? yes | no

Blixa Morgan wrote 11/19/2015 at 08:57

Finally captured the firmware update. It's in wireshark format. https://drive.google.com/a/projectmakeit.com/file/d/0B9noT-h9uevlaHRwUUVBVXVvV00/view?usp=sharing

Are you sure? yes | no

miek wrote 11/11/2015 at 21:55

Dongle internals: http://imgur.com/a/0J4iL

Are you sure? yes | no

zaguarman wrote 03/14/2017 at 18:45

I made my account only to thank you for tearing the dongle apart and upload these awesome photos, really, thank you guy!

Are you sure? yes | no

Blixa Morgan wrote 11/10/2015 at 21:08

Just got my controllers in, starting a teardown this evening.

Are you sure? yes | no

miek wrote 11/07/2015 at 10:29

http://blog.includesecurity.com/2015/11/NordicSemi-ARM-SoC-Firmware-dumping-technique.html might be of interest :)

Are you sure? yes | no

Blixa Morgan wrote 11/03/2015 at 18:22

@egoodchild considering they are making it "open and hackable", I doubt they have any flash security. I get both of mine on Friday, so I'll pull the flash then to be sure.

Are you sure? yes | no

egoodchild wrote 11/03/2015 at 05:18

The ploy they are using with the SWD port is not uncommon. Neither is the coupling of a BLE radio of NXP parts.

Pin-out would fallow for both parts:

1.VCC

2.SWDIO

3.nRESET

4.SWCLK

5.GND

6.SWO (only needed for trace debugging)

They likely used the same IDE to develop firmware for both parts. It will be interesting to see if Valve locked the flash security in either part.

Are you sure? yes | no

Similar Projects

The MCP2515 from Microchip Technology is a standalone Controller Area Network (CAN) controller that supports the CAN specification, version

ControlSteam

Description

Details

Discussions

Similar Projects

MCP2515-I/P CAN Controller

NRF51-based SNES Controller

Star Wars 2BB-2 Droid/ BB-8 Hero hacked

The BeeHaven

ControlSteam

Become a Hackaday.io member

Just one more thing

Description

Details

Enjoy this project?

Discussions

Become a Hackaday.io Member

Similar Projects

MCP2515-I/P CAN Controller

NRF51-based SNES Controller

Star Wars 2BB-2 Droid/ BB-8 Hero hacked

The BeeHaven

Does this project spark your interest?

Report project as inappropriate

Send message

Remove Member