Search results

Hi guys I have a very bricked DH-IPC-HFW1435SP-W camera. the 25Q256 flash chip is toast. No uboot etc. any chance I can get a complete chip rom dump ? or working uboot files ? I have tried several dhboot-min.bin.img's at 0x00000000 dhboot-min.bin.img's at 0x00080000 and...

hm. that could be whats causing my issue.. i have flashed a handful of different firmware's over TFTP. and a good few of them boot up to GUI, functional. (no channels) and as soon as i start clicking around it freeze and it does pop up and complain about default MAC address by chance i have...

finally. haha i managed to cram a u-boot back on the spi flash chip and am now once again able to update via U-boot over TFTP. I'm attaching my flashable binary here for the next guy my board says NBD8008R-U V1.03 but it was bought as, and my firmware seems to be called NBD8025R-PL i used...

:facepalm: :banghead: i found the idea for my approach to dd padding over here: https://unix.stackexchange.com/questions/196715/how-to-pad-a-file-to-a-desired-size? but ofcourse.. did not actually check the results before programming.... thanks for catching that. i need a faster SPI...

starting the cooking over.. haha General_General_NBD8008R-PL_V4.02.R11.7601.Nat.OnvifC.20180928.bin root@odroidxu4:~# dd if=u-boot.bin.img bs=1 skip=64 count=4717676 of=u-boot.bin (strip uimage header 64 byte) root@odroidxu4:~# dd if=u-boot.bin of=flash-u-boot.bin bs=1 count=1...

hm. so it took a couple of hours for flashrom to read in, write and verify u-boot.bin.img.stripped (u-boot.bin)? through my buspirate. (successfully) but no luck on boot up. my uboot is only 139.373 byte ? root@odroidxu4:~# binwalk u-boot.bin.img (before stripping uimage header)...

i'm trying to find where i got the 0x1000000 from... in my various screen logs.. oh well. i will give 0x0 a go first.. i have converted my board to DIP8 now.. :winktongue: R

ok, i got a stripped u-boot file now, just cobbling together a programmer (just ordered a dedicated one online) but i got a few options here. i think my buspirate is the go-to for this u-boot should be programmed, star starting 0x1000000 i believe? R

okay. thanks for trying.. im 100% now that i need to replace the flash chip. so i need to program the whole thing, uboot and all. so stripping the uImage header off one of my user-x.cramfs.img files as per above should produce a flashable file ? R

i think something along these lines should dump the whole 128kbit flash chip to RAM, and then push to TFTP ? # sf probe 0;sf read 0x82000000 0x0 0x1600000 # tftp 0x82000000 flash.bin 0x1600000 but i'm not entirely sure? also not sure if that's usable to program direct onto the 25q128 with...

hm.. well if that's the case, then im in a bit of a pinch. i have tried several firmwares. unpack into my TFTP folder and flashed with "run da" , du,dr,dw,dl,dc my most current boot up U-Boot 2010.06-svn1009 (Apr 23 2018 - 15:33:45) Check Flash Memory Controller v100 ... Found SPI Nor(cs...

bit of pinout i found / fixed

i have the same board. and i have unfortunately bricked it. (working U-boot) but corroupted kernel i have not been able to find the kernel in any update files yet. any chance you have a complete dump file, individual files to help me recover via TFTP? u-boot.bin.img user-x.cramfs.img...

i have ordered a replacement flash chip. will see if that can fix the problem

so.. i have tried changing some environmental stuff over Serial port / UBOOT bootdelay 3 dh_keyboard 0 saved to flash hisilicon # setenv dh_keyboard 0 hisilicon # setenv bootdelay 3 hisilicon # saveenv Saving Environment to SPI Flash... at sf_saveenv() start unlock spi flash. unlock all...

unfortunately its not a Dahua.. its a xiongmaitech product.. could be a clone ofcourse uses the NETsurvailance web interface. not similar to my dahua cameras.. i will try those commands for sure.. .id love to get root access to this thing serial,telnet,ssh but besides uboot. pretty locked...

i have cleared to factory default several times. which removes any logs that might take up flash. i do have the pinout of the 3.3v ttl serial, it runs 115200 on this board. and do get startup log messages. but they seize to flow once the system goes online. just the initial boot up stuff...

Hi guys. new to the forum here. i have a cheap chineese NVR board NBD8025r-pl currently V4.02.R11.C6380197.12201.140000.00000 and its been working okay. but its now stopped saving any changes. be it ip address, camera setups etc. after reboot it just reverts to the same state (not...