Recent content by garbage-1

Interesting. I ran both the -passwd and passwd DES/DES128 hashes through HashCat and did not yield any results. How did you get the cleartext? Another approach is to enable telnet/ssh, rebundle the firmware, flash, and then login with root credentials. If you look at the raysharp_dvr it also...

Thanks @alastairstevenson I was hoping i could just tap onto the pins. But sometimes due to board design, current is sent to other components like the CPU when the programmer goes to read the chip. This sometimes causes a short. So I had no choice but to remove it from the board. But all good...

As promised. Dumped firmware from the flash.

UART boot output for Redline firmware.

Not much luck last night dumping the flash due to it being soldered on the board and causing shorts. So will de-solder today and then try again.

Will dump tonight. So hopefully tomorrow we have something to play around with.

I am almost certain the chip set for the DVR8-4575 is Hi3521.

Yes i was thinking about building my own system for the board. But not being able to flash the board with my own firmware it was a dead end. I also have the SDK : Hi3521_SDK_V1.0.2.0 @ 631MB. But i think that's further down the path.

Excellent. Just what i wanted to hear. I will try and get that dump done soon.

Yes my dumper supports that chip. Rather than de-solder I will tap some wires onto it. Less chance i will destroy pads etc. Once the flash is dumped, whats the plan? As no one will be able to use it unless they have the ability to directly re-flash the chip. Curious as to the next step once...

Hmm, so flash dump or broke. Damn. Do you know what flash chip it is? I maybe able to de-solder and dump it with my flash dumper.

Right. So thats why your trying to dump the flash memory directly. I may connect via UART when I have time and see if i can login. This would make it alot easier to update the locales.

I assume its a locale file somewhere. So once you expand the squashfs it should be an easy enough substitution. Then repackage and flash. https://resources.infosecinstitute.com/reversing-firmware-part-1/ I doubled check the firmware and it only supports Russian. The Redline Windows tools are...

I must forever thank you @ellirion I used the Redline MHD8p device (rs-dm-324b) firmware on my Swann DVR8-4575 (rs-dm-307b) with great success!!!! 8-канальный MHD видеорегистратор c IVA RedLine RL-MHD8p.pebble The motherboards are almost identical except the RS-DM-324B was made 2016-01-31 and...