Help identify bricked PTZ camera

vmsguy

Young grasshopper
Jul 27, 2016
30
1
Hello,
First post here, but have been actively reading ipcamtalk forums for past few weeks.

I applied what I thought was a new version of firmware for this camera, but the firmware bricked the camera.
I've tried reaching out to the vendor on Amazon to get a copy of the original firmware but have not had any luck yet.

The camera still boots, and is listening on ports 23, and 20203. The default IP address before and after errant firmware is 192.168.1.110.
When I putty to port 23, I get "ipc login:" as the prompt, but none of the passwords I have tried for root will work. When I putty to 20203, the camera just echos back whatever is typed.

I have tinkered around in the past flashing devices with an rs-232 interface, so I feel fairly confident I can recover this camera if I can identify its origins
and find some firmware that will work with it.

Thanks for any help,

Brent

Here are some pictures: (i still need to take camera module apart to get more details)
 

Attachments

  • 61qlcq3RlxL._SL1001_.jpg
    61qlcq3RlxL._SL1001_.jpg
    68.6 KB · Views: 58
  • IMG_5533.JPG
    IMG_5533.JPG
    1.2 MB · Views: 67
  • IMG_5534.JPG
    IMG_5534.JPG
    930.8 KB · Views: 57
  • IMG_5536.JPG
    IMG_5536.JPG
    1.2 MB · Views: 50
  • IMG_5537.JPG
    IMG_5537.JPG
    1.2 MB · Views: 55
wow you dont even know what who makes the camera, yet you did a firmware update anyhow..

fe6e4391eed57c7329e79d65e288d6c1206eaf6a4d3e654f622841a310c092cc.jpg
 
  • Like
Reactions: hmjgriffon
I have seen this ui in a generic cam. Even Longse had it I believe
 
Is that 'vms' the Digital/Compaq/HP operating system, or like multiple virtual machines?
If it's the o/s, howdy from a long-time VMS user/operator/manager.
If it's a bunch of virtual machines, sorry to have bothered you.
 
I'd guess the console serial port is that small 4-pin connection, next to the QC sticker. The right-most pin appears to be GND, but that's just a guess. A meter could tell you for certain. The other three pins would be TX, RX, and probably a 3.3VDC input. All you need are GND, TX, and RX.
IMG_5533.JPG
 
Is that 'vms' the Digital/Compaq/HP operating system, or like multiple virtual machines?
If it's the o/s, howdy from a long-time VMS user/operator/manager.
If it's a bunch of virtual machines, sorry to have bothered you.

yes, worked for DEC from '84 to '94 in software services, great time to work there, left just after Palmer took over and theCompaq deal.

brent
 
Thanks for the replies so far, I'll check out some of the links to see what I can find.
Brent
 
The PTZ 3rd from the bottom has descriptive text matching the Amazon product info.
Of course it could just be a copy/paste job - but maybe not:
http://www.sanan-cctv.com/product.php?id=96
Unfortunately no firmware download links, but there is contact info here : http://sanan-cctv.en.made-in-china.com/


Longse PTZ with the same UI:
http://www.aliexpress.com/item/7-Inc...a-75d336fe0648


Longse firmware site:
http://www.herospeed.net/en/index.ph...=lists&catid=9
 
Still an HTML file for me.
Maybe you have an app installed that handles '.ifu' files, whatever they are.
I need to disappear off to bed now - I'd been going to see what passwd hashes there were in the firmware you loaded, so maybe you could get root shell access.
But I see that a certain @VorlonFrog beat me to it by some devious method.
 
Last edited by a moderator: