Recent content by Lucky G.

I found that the Ipctool from OpenIPC project detects this data as "xmcrypto", so as I thought it seems to be some vendor specific encrypted data. At this point I give up, I already spent too much time with this. I am going to try OpenIPC for one last time and if the IRcut still doesn't work, I...

Thank you. Meanwhile I moved forward a bit. After a lot of trials/errors I found out, that the critical part is the data located in the last 1024 bytes of U-Boot partition. If I erase the whole U-Boot partition and write a new (or the same) bootloader, it lets me to change the MAC address in...

You're right. The MAC address is defined in env variable (ethaddr), but changing has effect only while in U-Boot, after starting the main system it gets overwritten. I cannot figure out, where else it's saved. I suspected the MTD partition, I tried to wipe it, no help. It still gets the MAC from...

I have an answer to my own question: In this case - NO. After I tried at least 5 different firmware files, I gave up and disassembled another IP camera with the same board and same flash (XT25F128B), dumped the whole 16MB of flash content and flashed it into "broken" camera with W25WQ128FV. It...

Uh oh, I probably found the mistake, the board is actually IVG-85HG50PYA-S. I'm going to try to find a suitable firmware and try it. EDIT: So no, the manufacturer's product site links to the same FW I've used. I'm out of ideas.

Hi all, I have a chinese IP Camera (PN BRIP5AF) with Hi3516EV300 + SONY IMX335 on board marked as 85H50AI. I think these are common cameras. One day the camera stopped working, I found out the data on flash is corrupt and the system cannot boot. I tried reflashing it via U-Boot, but turns out...

Sure. It wasn't easy to get rid of the password. I changed the admin password countless times, I did a factory reset, created all the user accounts (guest1 - guest7), rebooted many times; THE PASSWORD WAS STILL THERE! Unbelievable... So I just rewrote it in hex editor to random characters. I was...

Oh, you're trying to enter commands that were supposed to be used on source camera via telnet during firmware extraction. You don't need to do that since you already have the files downloaded from me. So here's the detailed guide what you need to do, only to get those files to your camera to...

I had the same problem. If the prompt says "Hit any key to stop", just connect the TX and RX line of the camera for that moment. It worked for me. But if it's waiting for exact key like CTRL+C then I don't know. I didn't understand that behavior, it's like the input channel wasn't working at...

I was successful with unbricking my SV3C camera so I'd like to share my HOW TO, maybe it might help someone: My camera model: SV3C h264 dome 1080p with POE Camera part number: SV-D02POE-1080P After trying to extract partition images from original firmware file and forcing them to get into the...