Custom 4MP Firmware

[alastairstevenson]

No, I don't definitely know, I have to admit I haven't flashed a camera with 5.3.1 to explore it - just tried to unwrap it. Where it looks just like 5.3.3
Why don't you share what you think will work?
The usual way to bypass psh is to modify the startup script to symlink it to something more useful such as the full Busybox. But the file encryption in the firmware gets in the way of that.
And the 'backtick' ` is now properly trapped. In 5.3.3

 

[Enabler]

The plan was just to

ssh root@<IP of camera> "ash -c 'mv /bin/psh /bin/old_psh'"

Like mentioned at https://www.ipcamtalk.com/showthread.php/3533-Hikivision-firmware-5-3-0?p=35553&viewfull=1#post35553

This doesn't work with 5.3.3 (I don't think) but might work with the earlier 5.3.1

 

[alastairstevenson]

That little loophole has been closed in 5.3.3 "Not Support 3", not sure in 5.3.1 as I don't have a camera with that, yet.

 

[Enabler]

That little loophole has been closed in 5.3.3 "Not Support 3", not sure in 5.3.1 as I don't have a camera with that, yet.

I think you are propably right - 5.3.1 is likely the best way to do this.

 

[Enabler]

Also I've just realised there is 5.3.2 also (build date 150603). So that's worth trying also.

 

[boounga]

I have 5.3.3 on my 3345, I am willing to experiment.. I'm just a newbie though. I managed to get sharing with SMB working to a linux laptop

 

[Enabler]

Thanks for the offer!

That's a 3xx5 though and not the right type. My 4MP thread title was poorly chosen. Sorry

Here's the list again so it's on page 2


Camera list that uses the type I am interested in:

DS-2CD2F12F-I(W)(S)Z

DS-2CD2F22FWD-I(W)(S)

DS-2CD2F42FWD-I(W)(S)

DS-2CD2F52F-I(W)(S)

DS-2CD2T22WD-I3'I5'I8

DS-2CD2T42WD-I3'I5'I8

DS-2CD2T52-I3'I5'I8

DS-2CD2022WD-I

DS-2CD2042WD-I

DS-2CD2052-I

DS-2CD2122FWD-(W)(S)

DS-2CD2122FWD-I(W)(S)

DS-2CD2142FWD-I(W)(S)

DS-2CD2152F-I(W)(S)

DS-2CD2322WD-I

DS-2CD2342WD-I

DS-2CD2352-I

DS-2CD2522FWD-I(W)(S)

DS-2CD2542FWD-I(W)(S)

DS-2CD2552F-I(W)(S)

DS-2CD2622FWD-I(S)(Z)

DS-2CD2642FWD-I(S)(Z)

DS-2CD2652F-I(S)(Z)

DS-2CD2722FWD-I(S)(Z)

DS-2CD2742FWD-I(S)(Z)

DS-2CD2752F-I(S)(Z)

People were kind enough to have a look on 5.3.3, but we can't get past protected shell. I'd like to try with 5.3.1 or 5.3.2 if anyone still hasn't upgraded