Chuango CG-AW1 WiFi Alarm System Review / Test

I bought the Chuango CG-AW1 as replacement for my old CG-G5 system (GSM based Alarm System) some weeks ago.
The System is controlled from a app called AW1 (Android, iPhone). The CG-G5 also uses a app but the communication between App and Alarm System is SMS based. The new System uses a UDP based communication.


  • Uses existing WiFi infrastructure (for base station)
  • 433Mhz Sensors (the old one from the CG-G5 System are compatible)


  • No open protocol (see bellow)
  • No support from manufacturer


I would like to integrate the system (arm, disarm, status) into my pimatic installation. But unfortunately the system does not use a standard protocol. My findings so far:

  • Communication between Alarm System and App
  • Communication between Alarm System and IOTC (Internet of Thing Cloud) Platform – for Push messages
  • UDP based, package length: 60-300 bytes
  • Packages are encrypted

I was unable to contact the manufacturer yet 🙁

Alarm Station

On the Alarm System a main binary (MIPS32 r2) is running (chuango) that handles all connections/functions.
Help needed: How can decompile the file above?

Output of file chuango: chuango: ELF 32-bit LSB executable, MIPS, MIPS32 rel2 version 1, dynamically linked, interpreter /lib/, corrupted section header size
Output of strings chuango: strings.txt

No comments yet.

Write a comment: