A firmware flashing instruction video was posted on Station B: https://www.bilibili.com/video/BV1RG4y1i7Hr/?vd_source=4967e9e531a7717131595edbd51d96ec
1. Solemn statement:
1. The purpose of this sharing is to learn and exchange microcontroller application software and hardware. It is not intended to be used for any practical applications. Please do not use this thing for any illegal purposes;
2. Chameleon is sold in large quantities on a certain website. If you want to use the function of Chameleon, you can buy it directly. There is no need to go far and make it yourself, especially when the price of ATXMEGA32A4U is so high that it reaches the quantum state;
3. Please check the method of using Chameleon by yourself. Don’t ask me, I won’t either. Understand;
2. Hardware design:
ChameleonMini is based on a piece of hardware for multi-band and multi-type RFID simulation designed by a German university when studying RFID security. Realize functions such as M1 card simulation and key sniffing.
After being open sourced, ChameleonMini branched into G version and E version. The E version was modified by the big guys and developed into ChameleonMini RevE Rebooted.
This design mainly refers to the project released by iceman1001 on github. I made some modifications based on the components on hand and the actual debugging situation:
I have released the Chameleon Mini before . The board is relatively large, and the positive electrode of the battery and the TYPEC socket (ground) are relatively prominent. If it is carried with the key, it is easy to short-circuit, so I made this version.
Main features:
1. It is composed of two boards: the main board layer and the antenna layer. The two layers are connected by plugging or welding;
2. All components are wrapped by two boards and are not exposed, effectively solving the risk of short circuit;
3. Compact size : Size 54mm*36mm*6mm;
4. The circuit is almost the same as ChameleonMini , except that the antenna has been redesigned, the area is greatly reduced, the number of hits is increased, and the total inductance is consistent with the original antenna. The measured signal is stable.
Soldered motherboard:
Assembled (since the short-pin connector has not yet arrived, this one only has the antenna connection terminals simply soldered for testing, and the others are all virtual connections)
Compared with ordinary water drop-shaped access control cards, the size is not too large:
The 8 LED lights used for display when the card is switched are designed to be side-mounted, but I soldered ordinary 0603 packaged LEDs, and I can see clearly:
Using TYPEC uplink computer, the power supply and selection switch are side-mounted (2*4*3.5mm, this switch feels average)
Back of the motherboard: In order not to affect the signal, it is recommended not to apply copper. I signed a name on the solder mask. You can remove it if you don’t like it when making the board.
3. Firmware flashing:
Here we only introduce the official firmware flashing steps. This method is provided by fellow fan scetc2008. Thank you very much! ! !
All software and packages used are in the attachment "Official Firmware Flash Package.zip"
1. Flash the bootloader:
Use the modified USBASP flasher (see USBASP with PDI interface for details ), use the PDI interface to connect the Chameleon PDI interface, and flash the atxmega32a4u bootloader. The file name is: ChameleonMiniRDV2.0_ATxmega32A4U.hex
Flash the BOOTLOADER statement:
avrdude -c usbasp -p x32a4u -e
avrdude -c usbasp -p x32a4u -U flash:w:ChameleonMiniRDV2.0_ATxmega32A4U.hex
Note that when flashing firmware for Chameleon, the output voltage selection jumper on USBASP must be set to 3.3V and the PDI switch shorted.
2. Check whether the bootloader is flashed successfully:
Use a USB cable to connect the Chameleon to the computer and check in the device manager whether atxmega32a4u is recognized. For non-win10 computers, please install the driver first:
3. Use USB cable to flash the official firmware:
Run BOOT_LOADER_EXE.exe and make sure there are official firmware files in the same directory as BOOT_LOADER_EXE.exe: myfile.bin, myfilee.bin
The flashing process is as follows:
D:workingRevE1.02, connect to computer and flash firmware>BOOT_LOADER_EXE.exe
old_driver_bootloader
Erasing flash... Success
Checking memory from 0x0 to 0x6FFF... Empty.
0% 100% Programming 0x20 bytes...
[>>>>>> >>>>>>>>>>>>>>>>>>>>>>>>>>] Success
0% 100% Reading 0x400 bytes...
0% 100% Programming 0x5800 bytes...
[> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>] Success
0% 100% Reading 0x7000 bytes...
load_success!
4. Test connection to the host computer:
Re-insert and unplug the USB cable connected to Chameleon, run the official PC program to see if it is connected:
All reference designs on this site are sourced from major semiconductor manufacturers or collected online for learning and research. The copyright belongs to the semiconductor manufacturer or the original author. If you believe that the reference design of this site infringes upon your relevant rights and interests, please send us a rights notice. As a neutral platform service provider, we will take measures to delete the relevant content in accordance with relevant laws after receiving the relevant notice from the rights holder. Please send relevant notifications to email: bbs_service@eeworld.com.cn.
It is your responsibility to test the circuit yourself and determine its suitability for you. EEWorld will not be liable for direct, indirect, special, incidental, consequential or punitive damages arising from any cause or anything connected to any reference design used.
Supported by EEWorld Datasheet