SWANN NHD-887MSFB failed firmware update

wernersaurus

wernersaurus

n3wb
Mar 7, 2021
5
0
MYSTERTON, QLD AUSTRALIA
Hello,

my first post here and here I go:

I have 2 SWANN NHD-887MSFB cameras where the firmware update failed (it's a SWANN issue with multi parallel upgrades apparently failing even though the host does allow to do so).
These cameras do NOT have a reset button - I have been advised by SWANN that if that happens the camera is a write-off.

Anyway - I now find that both cameras do start up, identify at IP 192.168.1.168 but are not accessible with a browser. I have however discovered that they do respond to telnet:

C:\> telnet 192.168.1.168
(none) login:

So - I am thinking if I do find the username/password credentials I actually may be able to load the firmware anyway.

Would anyone in these forums know what the credentials may be???

Thanks

Werner
 
wernersaurus said:
Not that one -

root:Al19!@:0:0::/root:/bin/sh does work...
Click to expand...
Ah, OK - from the Raysharp Firmware thread:

Raysharp Firmware

Yeah it is
ipcamtalk.com ipcamtalk.com

They probably change the hard-coded root password on each firmware version.

I used the firmware download for your camera from here :

And if you wanted to explore the contents, here is a splitter script. The offsets are by visual inspection, will no doubt vary with the version:
Code: 
#!/bin/sh
# This script holds the steps to unpack the firmware for the Swann camera that @wernersaurus posted about on ipcamtalk.
# The offsets will very likely be specific to that version of firmware. There is no attempt to
# use logic to make it universal - it's as much a memory-jogger as anything.
#
   
#env                              
#98 03                                            
#00 02                                            
dd if=CHX48M_F128M_SF_ENU_swann_V14.45.5.0-210903_r8970_W.sw of=env bs=1 skip=$((0x0398)) count=$((0x0200))

#V200715
#98 05 00
#D0 59 14                                        
dd if=CHX48M_F128M_SF_ENU_swann_V14.45.5.0-210903_r8970_W.sw of=V200715_1 bs=1 skip=$((0x0598)) count=$((0x1459d0))
                                         
#V200715
#68 5F 14                                        
#04 9A 1F                                        
dd if=CHX48M_F128M_SF_ENU_swann_V14.45.5.0-210903_r8970_W.sw of=V200715_2 bs=1 skip=$((0x145f68)) count=$((0x1f9a04))

#V200720
#6C F9 33                                        
#00 50 8C                                        
dd if=CHX48M_F128M_SF_ENU_swann_V14.45.5.0-210903_r8970_W.sw of=V200720 bs=1 skip=$((0x33f96c)) count=$((0x8c5000))
sudo unsquashfs -d V200720_contents V200720

#V210903
#6C 49 C0                                        
#00 E0 E0 01                                        
dd if=CHX48M_F128M_SF_ENU_swann_V14.45.5.0-210903_r8970_W.sw of=V210903 bs=1 skip=$((0xc0496c)) count=$((0x01e0e000))
sudo unsquashfs -d V210903_contents V210903

#V150327
#6C 29 A1 02                                      
#00 F8 E5 03                                        
dd if=CHX48M_F128M_SF_ENU_swann_V14.45.5.0-210903_r8970_W.sw of=V150327 bs=1 skip=$((0x2a1296c)) count=$((0x03e5f800))

#V190828
#64 0F A5 02                                      
#00 00 20 2D                                        
dd if=CHX48M_F128M_SF_ENU_swann_V14.45.5.0-210903_r8970_W.sw of=V190828 bs=1 skip=$((0x02a50f64)) count=$((0x2d200000))
sudo unsquashfs -d V190828_contents V190828
 
You must log in or register to reply here.
Top Bottom