Search results

Forgot to write, I tried to reset password using reset tool, but unseccesfull.

Hello everyone I have a DS-2CD3T36WD-I5 camera, platform G0, firmware version 5.4.41. Updated via tftp to reset the IP parameters and password. But unsuccessfully! Firmware updated to version 5.5.0, but the IP parameters and password are not reset even through tftp! Can anyone help reset...

Understand. For me, the software method is more difficult. I'm not good at programming. But thank you for your help! You've done a great job!

I mean the area in the memory chip. In the NVR E-series, this area is located at 0x2E000. In the DVR series F / N, this area is located at the address 0x3F000. I change it using a programmator, previously desoldering the chip.

Hello. @montecrypto, do you plan to add the boot params decryption key to your tool? Ready to donate bitcoins.

@montecrypto, thank you very much. Release works fine

Hello everybody. @montecrypto, thanks for continue developing the tool. I tried to repack the K41 firmware, but the device did not accept it. The tool after repacking adds two files after the cramfs image, and in the original firmware only one new_20.bin. Can you check it? P.S. Ready to donate...

Hi guys! I bought at tao bao HDTVI DVR DS-7804HUH-F1 / N. With the traditional Chinese language. I tried to modify the firmware using the @montecrypto's hikpack, but have failed. Somebody tried to modify the firmware of this DVR?

Somebody tried to modify the NVR firmware 76,77 series using this tool? Or HDTVI DVR 78,79 series?

Thanks for the explanation. If I will try get a dump of the memory chip, it will help solve the problem? I myself would not be able to solve the problem of decrypting the dump, need assistance of @montecrypto.

Pay Pal always says like this

Oh, and here's one more thing. Warning message after packing.

I have received CN camera on G0 platform (2135F-IW) and I modified original firmware by switching default language on EN in configuration file. But after repacking modified firmware, device did not accept it. The firmware ver. 5.4.0. Does anyone had success with this version?

Hello montecrypto. Thanks for the work you've done. I want to transfer you some donations, but cant do it through Paypal, the payment does not pass. Do you have webmoney?

I think you can use the same procedure as with the NVR. But IP cameras use Nand flash. To desoldering it you need to have some skills. And not all programmators can read it correctly. You can also use the program method, as wrote Monteсrypto, but it requires the hacker skills.

Yes you are right sector is 0x2e000. 0x2e010, I meant the the total offset of memory dump. How this can be done in the software? I can not to bypass protected shell. For me desoldering the chip it takes a few minutes. So for me, this procedure easier. But after the encryption of the sector, it...

Mayfer. If you have NVR on firmware 3.3.4, then the block in which the region code is stored, is not encrypted. Easy way for you is to uncouple memory chip MX25L12835FMI (it is located on the back side of the motherboard in your NVR), read dump using programmer, change region code byte to 01 in...

It was easy earlier. But now this sector is encrypted. And it has 258 byte in new NVR and 517 byte in XVR. In new XVR this block is stored at sector 0x3F000.

Alastairstevenson, sorry, accidentally I put my reply to your original post:). I do this all the time. In my opinion the easiest way.

Yes, I've been thinking about it. But in the new XVR, which I bought on Taobao, the encrypted area is not 256 bytes, as it was in previous models, and 512 bytes. If I replace a block of 256 bytes, the device can be a brick.

Yes. I was just working on a kernel decompilation. But, as I said before, my knowledge level in this area is not so high, so this will take some time

Hello everyone. Montecrypto, thank you for your post. Really useful information. But unfortunately, my knowledge is not enough to use it. Alastairstevenson, thank you very much for your detailed answer to Jansko. It helped me solve my problems with some NVR. But now, an area in memory chip of...