Toniebox Hacking – How to get started

Over the last three years we, the Team RevvoX (formed in Nov. 2019) came up with a lot of information regarding all the possibilities that can be done with Tonieboxes besides the origin features.

We achieved to bring, own content, own NFC tags, customization and even some hardware mods to the Toniebox. In addition we have supported a lot of repairs for otherwise ‘dead’ boxes with our knowledge of the different revisions of the PCB to check or exchange the right components (we even have a complete reverse engineered hardware layout within our wiki).

Within this Blog Post I would like to give a short introduction to all new community members that are interested in tinkering with the new toy that their children got for Christmas or any other occasion.


Teardown of the TECHNIFANT by TechniSat

Boxine reinvented the Childrens Audio Player Market by establishing an alternative control for kids besides of handling old cassettes or CDs in September 2016. Since then several other players tried to jump onto the train and came up with either their own development to improve the kids access to audio content or just came up with a more or less copied process where the music is not controlled by a figurine but with a card or a chip / round token.

TechniSat, well known for several electronics like Radios, TVs or satellite dishes, just started to sell their own interpretation of a kids audio player. The TECHNIFANT.


Overview of the Children’s Audio Player Market – Q1/2021

This article will take an actual view into the Children’s Audio Player market by giving a quick view onto the Toniebox by Boxine, the TigerBox Touch by TigerMedia, the Kekz Headset by Kekz-Media and the Technifant by TechniSat.


Custom Tags for Toniebox

A step by Step Guide to implement your own custom RFID tags.

ATTENTION: IF YOU ARE NEW TO TONIEBOX HACKING YOU WILL FIND A BETTER INTRODUCTION AND MORE UPDARTED VERSION HERE: “Toniebox Hacking – How to get started“. This article is very interesting due to the detailed information, as well, but you should start with the other blog post!

In this Blog post the focus is on custom tags that works with the Toniebox. I will guide you through the steps of using own RFID tags with Content that is already on your build in SD card of the Toniebox.

Like I described in earlier posts, within the Tonie figurines is a RFID Chip installed. This Chip consists of a total of 40 bytes length. 8 bytes are used for the UID, a unique identifier, and 32 bytes are used within the tag memory (4 blocks with 8 bytes each). The UID, like it is said by the U for unique is a identification number that only exists once within the whole Tonie universe (or only once within the RFID Standard according to NXP).


Teaser Video – using 3rd party NFC tag with custom content by [Team RevvoX]

[Team RevvoX] released another Video showing their upcoming Toniebox Tool. This time they are not just decoding and encoding their own custom audio files, but in addition they show how to get the files onto the SD-Card AND use a 3rd party NFC tag to play their own custom audio content. All this is done on a Toniebox without any firmware modification.

Toniebox hack: encode own audio, write to SD-Card and play with 3rd party NFC tag