Dahua Firmware Mod Kit + Modded Dahua Firmware

Hi, I've a DH-CA-HZ2030 BLOCK Camera with firmware 2.210.3.0
in this firmware preset function of the zoom doesn't.t work...
I would upgrade but it's very difficult find firmware version for this camera...
I tried this version --> dh_sd-eos_eng_p_stream3_v2.420.0000.4.r.20160229 that I found for camera DH-SDZ2030S-N (that is the same of mine with a box)
but during update it got me error "send upgrade data error"....
someone could help me, please ???
Thanks in advance
Giovanni
 
Curious if there are any plans for the DH-IPC-HDW4631C-A camera for modded English firmware. I've successfully updated my IPC-HDW4431C-A-V2 and am considering one more camera(maybe a HDW4631C-A for a well lit location) in the near future.

Also, I can't seem to import/export config on my IPC-HDW4431C-A-V2 so not sure if that is normal on this modded fw or do I need to reset and redo the modded firmware again....
 
Last edited:
Pilot04 said:
Curious if there are any plans for the DH-IPC-HDW4631C-A camera for modded English firmware. I've successfully updated my IPC-HDW4431C-A-V2 and am considering one more camera(maybe a HDW4631C-A for a well lit location) in the near future.

Also, I can't seem to import/export config on my IPC-HDW4431C-A-V2 so not sure if that is normal on this modded fw or do I need to reset and redo the modded firmware again....
Click to expand...
I think import/export only works with the shitty dahua plugin, try internet explorer?

I've actually just finished the FW for the HDW4631C-A yesterday for a seller on aliexpress.
He sent me a camera and paid me for it, so I guess I'll wait a bit before releasing it to the public?

I haven't been able to actually even test the picture quality or anything besides the firmware functionality on the HDW4631C-A.
However I am pleasantly surprised that the base is made out of aluminum, unlike on the HDW4431C-A.
 
cor35vet said:
I think import/export only works with the shitty dahua plugin, try internet explorer?

I've actually just finished the FW for the HDW4631C-A yesterday for a seller on aliexpress.
He sent me a camera and paid me for it, so I guess I'll wait a bit before releasing it to the public?

I haven't been able to actually even test the picture quality or anything besides the firmware functionality on the HDW4631C-A.
However I am pleasantly surprised that the base is made out of aluminum, unlike on the HDW4431C-A.
Click to expand...
I tried it from IE11 where it worked fine with my 5231ZE. The one thing I'm experiencing is that each Dahua unit is asking to reinstall plugin to get it to work but then the previous IPC/NVR fails so maybe I need to redo the plugin for each IPC/NVR before it'll let me import/export?

Thanks for the great news on the FW you've modified for HDW4631C-A and hope to get that camera soon! I saw the metal base verification on the other thread so like it better than the plastic on HDW4431C-A especially since it's not much more for the 6MP version.
 
Import/Export works now on my modded HDW4431C-A-V2 after I just reinstalled plugin in IE that overwrote the previously installed plugin from my HDW5231R-ZE. I'll just have to remember to reinstall the plugin as first troubleshooting step with new camera/nvr as this newbie continues to learn how to properly use Dahua equipment:)
 
  • Like
Reactions: cor35vet
bashis said:
Thanks for info, will look at that FW.
Click to expand...

Looks like the 4mp through the 8mp are patched in some way.

Device Type IPC-HDBW4431F-AS
Software Version 2.460.0000.9.R,
Build Date: 2017-04-28

Will not start telnet either

Remote target IP: 192.168.1.234
Remote target PORT: 80
[>] Requesting session ID
[<] 200 OK
Detected generation 3 encryption
[>] Logging in
[<] 200 OK
[<] Login OK
[>] Enable telnetd: True
[<] 200 OK
{u'session': 1977186046, u'params': {u'options': None}, u'id': 1, u'result': True}
Logging out
[<] 200 OK
{u'session': 1977186046, u'id': 10001, u'result': True}

Nmap scan report for 192.168.1.234
Host is up (0.00067s latency).
PORT STATE SERVICE VERSION
23/tcp closed telnet
 
Hi! i try modify firmware from camera dh-ipc-eb5400 but i receive this error:

IPC-HX5\(4\)XXX_Eng_P_Stream3_IVS_V2.420.0000.12.R.20151021.bin
ERROR Could not autodetect config!
INFO Please use -c to select the correct config from the following list:
INFO HX4XXX-Eos4
INFO HX4XXX-Eos
INFO HX4X2X-Themis
INFO HX4XXX-NAND-Eos
INFO HX5X3X-Rhea
INFO HX8XXX-Eos
INFO HX8XXX-Demeter
INFO SD-Mao-Rhea
INFO SD-Mao-Themis
INFO SD-Zi-Themis
INFO VTO2000A
INFO NVR4XXX-4KS2
INFO NVR4XXX-4K
INFO NVR4xxx
INFO HCVR5x04
 
I got IPC-HFW4431R-Z camera from China market, loaded it with @cor35vet firmware from topic Dahua Firmware Mod Kit + Modded Dahua Firmware
https://i.botox.bz/DH_IPC-HX4XXX-Eos_EngFraSpaRus_PN_Stream3_V2.420.0000.22.R.20161209.bin
Software Version: 2.420.0000.22.R, Build Date: 2016-12-09
MD5Sum: 1332430392def5d9becd4e883d26f7d8
SHASum: 1bc476b78fd706b225243c12a334631971ea6a7c
Click to expand...
And found that the camera try to connect to internet and use a lot of bandwidth (over 100Kb/s), 400MB/less than 1 hour. If I change the DNS to 1.0.0.1 then the camera uses only few KBs. Anyone experiences with this?
 
nhocti said:
I got IPC-HFW4431R-Z camera from China market, loaded it with @cor35vet firmware from topic Dahua Firmware Mod Kit + Modded Dahua Firmware

And found that the camera try to connect to internet and use a lot of bandwidth (over 100Kb/s), 400MB/less than 1 hour. If I change the DNS to 1.0.0.1 then the camera uses only few KBs. Anyone experiences with this?
Click to expand...
Did you turn off P2P in the camera settings?
 
cor35vet said:
Did you turn off P2P in the camera settings?
Click to expand...
Yes, I turned the P2P off. I also setup a private VPN server to access to these cameras so I disable all P2P, uPNP, everything that may connects to Dahua or internet. I will try to look at which IP the camera try to connect to and get you back soon.
The the strange thing is that I could not see this behavior on other Dahua cams (I have bunches of IPC-HDW4431A-C and 1225C, those from China market, not international version)
 
Would it be possible to modify the Firmware of a Dahua VTH1550CH in a way that it would automatically answer the call from another indoor station? (Without having to press the green accept button)
 
cor35vet said:
I've actually just finished the FW for the HDW4631C-A yesterday for a seller on aliexpress.
He sent me a camera and paid me for it, so I guess I'll wait a bit before releasing it to the public?
Click to expand...

Any chance we get access to the FW for the HDW4631C-A version over New Years holiday weekend? My HDW4631C-A was delivered this afternoon and I have been playing with it but not hooked up to internet yet until I can get a modified FW installed on it:) I do like the aluminum base compared to the plastic 4431C-A.
 
Hi,
I have a Dahua Model DH-SD22204T-GN.
After the camera crashed while adjusting some presets, I try to do an update to an other firmware (Camera are connected by POE) the update failed and since the camera not do anything. If I try a power adaptor or POE, no lamp is lit.
Is the cam broken, or maybe the methode with an UART-Adaptor can help?
My Camera has one UART-Connector (4 pins) on it.
Maybe someone can help me (and recommend an adapter)?
 
despair666 said:
Hi,
I have a Dahua Model DH-SD22204T-GN.
After the camera crashed while adjusting some presets, I try to do an update to an other firmware (Camera are connected by POE) the update failed and since the camera not do anything. If I try a power adaptor or POE, no lamp is lit.
Is the cam broken, or maybe the methode with an UART-Adaptor can help?
My Camera has one UART-Connector (4 pins) on it.
Maybe someone can help me (and recommend an adapter)?
Click to expand...

Dahua IPC unbricking / recovery over serial UART and TFTP

CP2102 or FT232R, make sure you only use 3.3V uart dongles.
 
  • Like
Reactions: despair666
despair666 said:
@cor35vet: thank you for your quick reply.
Will this work even though my camera seems already dead (without a lamp lit)?
Click to expand...
It'll only work if your camera still has a working bootloader, you'll notice that it prints text on the serial console while booting if it does.

If it doesn't have a bootloader anymore then your only chance is flashing the SPI chip directly. This is not a trivial task.
You have to identify the flash chip on the PCB then grab the datasheet.
Get a SOIC8 or SOIC16 clip (ebay/aliexpress - get one with cables!!), depending on which package the SPI chip comes in.

I used a raspberry pi with flashrom: flashrom
Following schematic:
pfeNyTV.png


I can explain the rest later if needed.
 
Hello guys, i have bricked mine HDBW4431R-Z. Bootloader crash. Haven't any open ports. Only ping. I flashed directly flash 25Q128 with dump from another camera: HDBW4431M-I2, and now camera working but both cameras use same MAC address, and HDBW4431R-Z lose zoom/focus functions.

I need original backup dump from this camera - HDBW4431R-Z with SPI-Flash 25Q128 - dump 16MB file.

I will post working dump from HDBW4431M-I2 tomorow. It will be very useful for someone like me.

Thanks you
 
  • Like
Reactions: JulieD
oem said:
Hello guys, i have bricked mine HDBW4431R-Z. Bootloader crash. Haven't any open ports. Only ping. I flashed directly flash 25Q128 with dump from another camera: HDBW4431M-I2, and now camera working but both cameras use same MAC address, and HDBW4431R-Z lose zoom/focus functions.

I need original backup dump from this camera - HDBW4431R-Z with SPI-Flash 25Q128 - dump 16MB file.
Thanks you
Click to expand...
you can change the mac address in the bootloader with printenv / setenv

and about the zoom function, look for the official firmware there should be two bins, the small one is for some special partition which does the zoom.
if not the probably the HWID of your camera is wrong, you can change that with setenv too if you know what it is....
and devalias too
 
I can't understand this (printenv / setenv)

Yes after flashed HWID is also the same as another camera. Problem is not in the firmware, because for both cameras firmwares are the same. I think bootloader problem.
 
hi . please help me .

DH_NVR4XXX-4KS2_Chn_V3.215.0000000.3.R.171106.bin
https://www.dahuatech.com/download/832.html

root@kalilinux:~/Desktop/Dahua-Firmware-Mod-Kit-master# ./extract.py -c NVR4XXX-4KS2 smart.bin
WARNING Found config: NVR4XXX-4KS2
Traceback (most recent call last):
File "./extract.py", line 238, in <module>
extractor.Extract(args.source)
File "./extract.py", line 61, in Extract
self.ZipFile = zipfile.ZipFile(self.SourceFile)
File "/usr/lib/python3.6/zipfile.py", line 1108, in __init__
self._RealGetContents()
File "/usr/lib/python3.6/zipfile.py", line 1175, in _RealGetContents
raise BadZipFile("File is not a zip file")
zipfile.BadZipFile: File is not a zip file

 
You must log in or register to reply here.
Top Bottom