Dahua Firmware Mod Kit + Modded Dahua Firmware

JeroenV

n3wb
Joined
Feb 4, 2022
Messages
14
Reaction score
8
Location
Netherlands
Good luck…
Even if I do manage to pull the Chinese (English) Aliexpress firmware from my working IPC-HDW4631C-A, I doubt if it's useful to flash on another same version camera. According to this topic, the firmware looks into both MAC and Serial Number and require modding before use. I will give it a try once my bios reader arrives and let you guys know and even might post a link to the .bin file. Fingers crossed!

P.S. What does the Ambarella chip do?
 

Attachments

Last edited:

kuzco

Young grasshopper
Joined
Jan 17, 2020
Messages
87
Reaction score
5
Location
Germany
I do not really believe, that the FW will verify the MAC address.
However, I have checked a *.bin of a VTH. There is the MAC address in clear text. Probably, it is possible to edit it directly with a hex-editor.
Anyway, happy if you can share the *.bin.
 

JeroenV

n3wb
Joined
Feb 4, 2022
Messages
14
Reaction score
8
Location
Netherlands
I do not really believe, that the FW will verify the MAC address.
However, I have checked a *.bin of a VTH. There is the MAC address in clear text. Probably, it is possible to edit it directly with a hex-editor.
Anyway, happy if you can share the *.bin.
Ofcourse, no problem! You have any clue what the Ambrella chip is used for?
 

kuzco

Young grasshopper
Joined
Jan 17, 2020
Messages
87
Reaction score
5
Location
Germany
Not quite sure, but I think this chip is responsible for the network connection.
have checked the "uboot printenv" and there is
.....
"dw": "tftp 0x02000000 web-x.squashfs.img; flwrite",
"ethact": "ambarella mac",
"ethaddr": "BC:32:5A:1A:86:38",
"fileaddr": "2000000",
....
 

kuzco

Young grasshopper
Joined
Jan 17, 2020
Messages
87
Reaction score
5
Location
Germany
@JeroenV : were you able to read the firmware of the „good“ IPC ?
Have opened a 6431, but not sure which Chip has the Bios/FW .
 

JeroenV

n3wb
Joined
Feb 4, 2022
Messages
14
Reaction score
8
Location
Netherlands
@JeroenV : were you able to read the firmware of the „good“ IPC ?
Have opened a 6431, but not sure which Chip has the Bios/FW .
Today I received my CH341A reader. I'm having a hard time finding a 2nd IPC-HDW4631C-A. My 2nd and 3rd unit are very hard to reach and the LAN cable is partially plastered. I can try to pull my firmware (bricked) from the broken unit first so I know how to operate the CH341A reader.
 

JeroenV

n3wb
Joined
Feb 4, 2022
Messages
14
Reaction score
8
Location
Netherlands
To bad, it doesn't seem to read the chip. Neoprogrammer v2.2.0.10 does has support for the Winbond W25Q256FV [3.3v] version...
 

kuzco

Young grasshopper
Joined
Jan 17, 2020
Messages
87
Reaction score
5
Location
Germany
There are many other programmer available. If necessary I can send you some programmer I have used for my VTH.
 

alastairstevenson

Staff member
Joined
Oct 28, 2014
Messages
15,963
Reaction score
6,794
Location
Scotland
To bad, it doesn't seem to read the chip.
Are you doing an 'in-situ' read attempt?
This can work - but not always.
A potential problem is when more than one signal source tries to drive the same pin, such as CS (chip select).
If the CH341A can't overcome what the camera board is driving, the read will not work.

And doing it while the camera is powered on or off?
This can sometimes help when the camera circuitry loads down the 3.3v from the CH341A too much.

And have you jumpered the CH341A for 5v or 3.3v operation?
 

myhaitza20

n3wb
Joined
Aug 25, 2022
Messages
1
Reaction score
0
Location
Romania
Hello all!

Can you help me please with a problem?
I bought from a private person an ip camera version IPC-HFW4438M-L1 but i didn't know that is a chinese version. Oviously is not working with my NVR (EU version).
Can you help me with an english firmware, or with a solution to make that camera to work?

The present version of firmware is:

2.622.0000000.39.R, Build Date: 2018-08-14

Thank you guys!
 

evilzinc

n3wb
Joined
Jul 14, 2023
Messages
1
Reaction score
0
Location
Singapore
Hi, Possible to provide international firmware for DH-IPC-HFW1430M-A-I1? I'm very sure this is a china/chinese camera. My NVR should be on international firmware and i cannot add the China camera into the NVR.

My NVR is DHI-NVR5216-16P-4KS2E
V4.002.0000000.3.R, Build Date: 2022-03-22

This is the new firmware link from Dahua China website:
 
Last edited:

Defender666

Getting the hang of it
Joined
Dec 19, 2015
Messages
193
Reaction score
25
Does the Firmwar Modkit work with VTH and VTO devices? Dont want to brick it but like to put new sound files inside
 

Tso-jie Ng

n3wb
Joined
Oct 24, 2014
Messages
11
Reaction score
1
I have one question
SO .. I got a chineses IPC totaly in Chinese Lang... Translation via Browser.. But I cannot add it to my XVR.
Do you have a way to add it to my XRV. cause ONVIF also not working

Its a: IPC-HDW2433DT-A. but that model dont exist ..so was wondering if there is an Equiv Firmware to it that might work to add in NVR/XVR
 

Biostim

n3wb
Joined
Aug 22, 2023
Messages
1
Reaction score
1
Location
Portugal
After trying to upgrade an IPC-HFW4431R-Z, I ended up with a brick. So, TFTP and all that jazz and I could recover it.
I've used a regular international build and I've patched it with the files from @cor35vet (BotoX).
In the end, I've made a build without telnet, removed Russian and added Portuguese.
For those who need it, here it is.
 

Attachments

camkeke

n3wb
Joined
Feb 19, 2020
Messages
15
Reaction score
6
Location
USA
Anyone knows if the NVR5216-4KS2 firmware can be successfully modified? I would like to modify the diagnose tool so I can drop into a busybox shell.
 

misternote

n3wb
Joined
May 17, 2023
Messages
3
Reaction score
0
Location
England
Could someone post a decrypted Firmware image including an extracted squasfs somewhere? I was able to the img files, but was not able to mount or extract the squasfs files.

Would lovely check what is inside.

Thank you
 
Joined
Mar 28, 2019
Messages
5
Reaction score
0
Location
Brazil
Can't change the Chinese to English language.
But can change P2P server.
After changing the server, can from play store or app store to download "Imou lift" to use.
For those don’t have a China mobile phone number, it’s easy to add a new cam.
This involves commercial interests, I not provide teaching.
View attachment 84037

View attachment 84038
please share how to make this mod to add easy4ip in my chinese dahua cam. i really need this feature.
 
Top