Sannce I21AG Support #625
Comments
|
I have escam g02 and can test. |
|
@codedmind : Do you have a serial connection to the camera? |
|
I can have it connected via USB if is that you asking
…On Wed, Aug 8, 2018, 21:51 Elias Kotlyar ***@***.***> wrote:
@codedmind <https://github.com/codedmind> : Do you have a serial
connection to the camera?
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
<#625 (comment)>,
or mute the thread
<https://github.com/notifications/unsubscribe-auth/ACxnX7h4tU0eXb-Ijm-WcNOExLN5gsmXks5uO08zgaJpZM4Vw8KI>
.
|
|
Okey. I assume that it still should work out. Can you please do the following:
2.3 Provide this files in a Zip-File for recovery purposes |
|
Hello, I'm not able to connect using digma smarcam, always get invalid uid.
Using camhi is online....
…On Thu, Aug 9, 2018, 09:31 Elias Kotlyar ***@***.***> wrote:
Okey. I assume that it still should work out. Can you please do the
following:
1. Connect via Telnet to the camera.
1.1 Download the APP "Digma" from Google Play Store.
1.2 Connect to Camera using Digma. Go to Settings -> Advanced Settings
-> Telnet-Access -> Enable it
1.3. Connect via Telnet to Camera using following credentials:
root:hslwificam
2.1 cd /mnt/sdcard
2.2 Dump the content of the following partitions to microsd:
dd if=/dev/mtdblock2 of=rootfs.bin
dd if=/dev/mtdblock3 of=system.bin
dd if=/dev/mtdblock4 of=factory.bin
dd if=/dev/mtdblock5 of=param.bin
2.3 Provide this files in a Zip-File for recovery purposes
2. Check the cmdline and dump the output here
cat /proc/cmdline
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
<#625 (comment)>,
or mute the thread
<https://github.com/notifications/unsubscribe-auth/ACxnX2cNCZzI1PxnqY0t4wlIxZz75bl8ks5uO_NWgaJpZM4Vw8KI>
.
|
|
Ok i found this site : https://blog.sengotta.net/short-security-overview-of-the-escam-g02/ In the meantime i think i brik de camera, i can't reset it and it won't boot |
|
Ok, after i restore the camera. But then dd is missing... |
|
Can you try: ? |
|
dd: Applet not found
# busybox
BusyBox v1.18.1 (2017-08-11 16:47:04 CST) multi-call binary.
Copyright (C) 1998-2009 Erik Andersen, Rob Landley, Denys Vlasenko
and others. Licensed under GPLv2.
See source distribution for full notice.
Usage: busybox [function] [arguments]...
or: busybox --list[-full]
or: function [arguments]...
BusyBox is a multi-call binary that combines many common Unix
utilities into a single executable. Most people will create a
link to busybox for each function they wish to use and BusyBox
will act like whatever it was invoked as.
Currently defined functions:
arping, ash, awk, basename, bash, cat, chmod, cp, cttyhack, date, df, dhcprelay, dmesg, dnsdomainname, du, dumpleases, echo, egrep, false, fdisk, fgrep, free, getty, grep,
gunzip, gzip, halt, hostname, id, ifconfig, init, insmod, kill, killall, linuxrc, ln, login, ls, lsmod, lsusb, mdev, mesg, mkdir, mknod, mount, mv, netstat, ping, poweroff,
printenv, printf, ps, pwd, reboot, rm, rmmod, route, sed, seq, sh, sleep, stat, su, sulogin, sync, tar, telnetd, tftp, top, touch, true, udhcpc, udhcpd, umount, unzip,
usleep, vi, wc, zcat
…On Sun, Aug 19, 2018, 22:11 Elias Kotlyar ***@***.***> wrote:
Can you try:
busybox dd
?
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
<#625 (comment)>,
or mute the thread
<https://github.com/notifications/unsubscribe-auth/ACxnX-i_8C-ujL6a6ZUxXe-FvjE_Re1Sks5uSdSdgaJpZM4Vw8KI>
.
|
|
Hello Elias |
|
@codedmind I have the same escam g02. However the default username is not working for me. Is there anything I'm missing? |
|
root:hichiphx
…On Thu, Aug 30, 2018, 12:21 Ashwin Prasad ***@***.***> wrote:
@codedmind <https://github.com/codedmind> I have the same escam g02.
However the default username is not working for me. Is there anything I'm
missing?
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
<#625 (comment)>,
or mute the thread
<https://github.com/notifications/unsubscribe-auth/ACxnXy6rx-V5oN-XikZXLXtptJsawl_kks5uV8qhgaJpZM4Vw8KI>
.
|
|
@codedmind thanks, i followed the link you posted and i'm able to access it now @EliasKotlyar i think ESCAM G02 doesn't use Ingenic processor, take a look at the dmesg outout |
|
@EliasKotlyar any update about this camera? |
|
Here ya go Sannce i21ag cam.
|
|
@thgab Did you come any further? |
|
@DoeEensGek No. I have dumped mtblocks, and thats all. I'm interested about i21ag cfw firmware, but i dont have more information. |
|
I have 2 G02 here aswell, one with december 2017 firmware and one with july 2018 firmware. Received a firmware update by mail from Escam "GK7102CHX_V13.1.6.1.30-20180329". Both cams look identical and are telnet enabled. Can't change anything as the whole filesystem is read-only and unchangable. Some mounts are writeable. Been able to dump mtdblocks of the one with the older firmware. My versions do not have a /system so it is different from the G02 as named on 4pda.ru. There is another thread about G02 with firmware updates and a tool. Am looking for those as the links do not work.
mtdblocks available if needed. Dumped with 'cat'.
|
|
SANNCE I21AG; MixSight HX-I2110T2; WanScam HW0036; icam608 and other, have two revisions
mtd4_factory - only config with device_id ipcam |
|
I have a Sannce I21AG and i'm interested in getting this FW going. What is the current state? I have so far been able to access the camera through telnet using the info provided in this thread but I need to get an sd-card as I had no spare available. |
|
Maybe someone can use it:
|
|
I bought a camera before digging into the instructions for this, but yep, im interested as well. I grabbed a cheapo Wanscam |
|
Hello everyone, I have created a tutorial for the installation of the bootloader on a Sannce. Can someone test if its working on a Sannce? Attention: It may break your camera. Also we can start collecting images for other devices. Here is the tutorial: next steps: i have already compiled a kernel and the rootfs from the dafang can still be used. I hope i have time to release soon. |
|
There is new version (cams sold in 2018) with closed ports and communication tied only to JoyLite application (can not be accessed by Digma - invalid device id,without possibility to manage ports, users, login data (basically they made botnet camera). Any idea 💡 how to aproach |
|
sannce_v1.bin - not work/ I got a brick/ |
|
Hey. I have made a full tutorial for hacking a Sannce Camera. It should basically work on any T10 based Device, so if someone have some spare time, give it a try. |
|
Any feedback on the esgam g02?
|
|
@codedmind : Do you have a serial connection attached? If so, please provide a bootlog and dump the firmware and i can tell you if you can install the bootloader of the sannce safely. |
|
@EliasKotlyar i don't have serial... but i can access via telnet/ssh the problem is that in that model don't have dd commands so i can not provide you the bootlog and dump follow the tutorial to do so... Any alternative methods? |
|
@codedmind : please use the following issue. I provided you a small tutorial, how you can install the dd commands back. |
|
Update: I am now able to replicate @codedmind steps (i think). I extracted bg0806.bin and sensor_bg0806.ko from the original firmware. I placed bg0806.bin in /etc/sensor/, and insmod'ed sensor_bg0806.ko in /etc/init.d/rcS. But I still don't have video. @EliasKotlyar is this caused by v4l2rtspserver only supporting jxf22 and jxf23, and not bg0806? See logfile below @codedmind still curious about your uEnv and rcS. |
|
So, if I'm suffering from #921 (comment) is my only option to solder up some serial pins and go in via uboot? |
|
@xatr0z I just back from holiday |
|
so escam G02 is not supported? i am basicly a noob and bought it to use with homebridge/homekit |
|
…is there a smooth path to use DafangHack on Sannce I21AG, or is the support experimental? |
|
I tried your "Installation of the open source bootloader on generic devices"… |
|
Hi, I bought a I21AG with this hack in mind but I got one with the ports closed as mentioned by @elkapetano
I am going to check which TestPad (if any) on the pcb are the serial pads because I don't see any RX/TX markings on the board. The header as shown on the russian forum is not present on my version. If I understood correctly from reading this issue, I need a telnet or serial connection to the device to backup and update the bootloader. Right? Correct me if I'm wrong or if there is a better way, since this cam might as well be useless now... |
|
I got some UART output on TP3 with a logic analyser. So TP3 is probably TX and TP2 RX, points located in between the T20 processor and the microsd card slot.
|
|
Want test for camera: WANSCAM HW0021 |
|
Hello. I bought a I21AG with ports closed. I have connected tx, rx and gnd as @FHFS showed us. What username and password I have to use in order to access? |
|
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. |
|
Hi, |
|
@EliasKotlyar Hi. I have a Sannce I21AG camera. There's a software problem. He goes online, but doesn't make a connection. I've reset it many times but it still says user or password error. How can I solve this? |
|
I have this ugly device, I dumped a flash drive through spi, maybe I can help you too?` ` |
|
Whats the status of this? I have an old Wanscam camera sitting around but its not clear from this thread what the latest is. I would propose removing the front page showing support for these line of cams until its properly supported. |
|
I have a WANSCAM HW0036 if that helps. |
|
My model only supports the phone app. It does not translate etc flows and is therefore useless. I think my piece of iron is newer. Do you have a dump of the full memory of your camera? |
|
Hi I have this cam. It s working but reset button is down. how can I reset it ? or how can I get my wifi name and pwd? any suggestion |
|
@EliasKotlyar, let me know if you still want to test the Sannce device. |
Hi |
|
I can do some tests too, FW version T10.7.1.17.9E. With working serial port access. |
|
I must be mad: |
|
log into the web interface and set up a new mail alert, include the following in the Sender, SMTP Server, SMTP User,
click setup and then test, this should open a telnet port allowing you to connect. |
|
can anyone advise, I've managed to flash the boot firmware to allow the Custom firmware to boot from the SD Card. [ 2.027757] VFS: Mounted root (ext3 filesystem) on device 179:1. boot setting are: bootargs=console=ttyS1,115200n8 mem=39M@0x0 ispmem=5M@0x2700000 rmem=20M@0x2c00000 init=/linuxrc root=/dev/mmcblk0p1 rootwait rootfstype=ext3 rw mtdparts=jz_sfc:256k(boot),2176k(kernel),3328k(root),2304k(system),64k(factory),64k(param) any help is appreciated. |
|
I have a Digoo BB-M2. Ready to test :-). --> instructions please :-) |
|
Hey everyone! I've been having some difficulty following the installation process for Sannce I24AG, mainly because there are no clear, step-by-step instructions specifically tailored to Sannce and other T10/T20 devices. While it might be simple for most of you, I'm feeling a bit lost. The instructions for other cameras like DaFang ATC are clear and easy to find, but unfortunately, I can't seem to locate any for I24AG or T10. I've come across several links suggesting different approaches, but as a beginner, it's not so straightforward. It looks like all the other supported cameras have comprehensive documentation, except for this one. Is there anyone who could lend me a hand with this or perhaps create a step-by-step instruction? I would really appreciate your help! Thank you so much in advance for any assistance you can provide. I got RX TX soldered, but not able to connect with PuTTY. |
and others
Beta Testers needed. I have successfully created a CFW for such a device. Please report here if you are interessted in testing. I will provide instructions as soon as i have someone to test.
PS: According to https://4pda.ru/forum/index.php?showtopic=807259&st=2100, it should also work on MixSight HX-I2110T2; WanScam HW0036; Escam G02 because they are identical.
The text was updated successfully, but these errors were encountered: