root shell on ds-7608ni-k2

[yolo1602]

Hi guys, i have a little problem with my ds-7608ni-k2 by getting complete root access (to be honest i don't know if there's any public way or if they're not that public because hikvision could kill it )

i used montecrypto's hikpack 2.5 to unpack successfully the firmware but unfortunately i can't manage to repack with the proper order the structure of the firmware. (i'm trying to substitute PSH restricted shell with the /bin/sh)

an original firmware comes like this :

Magic   : 484b5753
hdr_crc : 00004933 (OK)
lang_id : 00000001
date_hex: 20200320
devclass: 0000003d
File: headEx, CRC OK
File: uImage, CRC OK
File: start.sh, CRC OK
File: sys_app.tar.lzma, CRC OK
File: gui_res.tar.lzma, CRC OK
File: webs.tar.lzma, CRC OK
File: new_10.bin, CRC OK
=== Tail record:
File: new_20.bin, CRC OK

instead once i repack the firmware it becomes:

Magic   : 484b5753
hdr_crc : 00004202 (OK)
lang_id : 00000001
date_hex: 20200320
devclass: 0000002a
File: gui_res.tar.lzma, CRC OK
File: headEx, CRC OK
File: start.sh, CRC OK
File: sys_app.tar.lzma, CRC OK
File: uImage, CRC OK
File: webs.tar.lzma, CRC OK
=== Tail record:
File: new_20.bin, CRC OK

so essentially, for some reason it swaps the resources.

and i can see (via uart debug console) that there's a problem exactly because of this. is there any way i can give the proper order while packing ?

or...

do you know if there's an easier way to achieve full root access to the nvr ? whatever suggestion is accepted !

 

[alastairstevenson]

See my response in your duplicate other post ...

 

[yolo1602]

See my response in your duplicate other post ...

Sorry to be honest i was scared of not getting attention in the other thread since was related to cameras and not to nvrs, that's why i decided to open one here.

Eventually i'll close/deleted if i'm breaking any of the rules.

 

[alastairstevenson]

Don't worry, it's not a problem.
The forum is pretty attentive to almost anything anywhere that comes along.