Dahua Firmware Mod Kit + Modded Dahua Firmware

older firmware

root@kalilinux:~/Desktop/Dahua-Firmware-Mod-Kit-master# python3.6 ./extract.py -c NVR4XXX-4KS2 DH_NVR4XXX-4KS2_Chn_V3.215.0000000.1.R.170902.bin
WARNING Found config: NVR4XXX-4KS2
INFO Extracting 8 files to: 'DH_NVR4XXX-4KS2_Chn_V3.215.0000000.1.R.170902.bin.extracted'
INFO Processing 'Install.lua'.
INFO Processing 'u-boot.bin.img'.
INFO Processing 'uImage.img'.
INFO Processing 'romfs-x.squashfs.img'.
INFO Processing 'web-x.squashfs.img'.
INFO Processing 'custom-x.squashfs.img'.
INFO Processing 'logo-x.squashfs.img'.
CRITICAL Missing dependency: 'cramfsck'
ERROR 'CramFS' handler returned non-zero return value for file: 'logo-x.squashfs.img.raw'
Traceback (most recent call last):
File "./extract.py", line 238, in <module>
extractor.Extract(args.source)
File "./extract.py", line 113, in Extract
raise Exception("Handler returned non-zero return value!")
Exception: Handler returned non-zero return value!
 
CRITICAL Missing dependency: 'cramfsck'
It looks like you are missing a Linux tool :
Code:
alastair@PC-I5 ~ $ cramfsck -h
usage: cramfsck [-hv] [-x dir] file
 -h         print this help
 -x dir     extract into dir
 -v         be more verbose
 file       file to test
alastair@PC-I5 ~ $
sudo apt-get install cramfsprogs
 
It looks like you are missing a Linux tool :
Code:
alastair@PC-I5 ~ $ cramfsck -h
usage: cramfsck [-hv] [-x dir] file
 -h         print this help
 -x dir     extract into dir
 -v         be more verbose
 file       file to test
alastair@PC-I5 ~ $
sudo apt-get install cramfsprogs

not working

root@kalilinux:~# sudo apt-get install cramfsprogs
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Unable to locate package cramfsprogs
root@kalilinux:~#
 
WARNING Autodetected config: NVR4XXX-4KS2
INFO Extracting 8 files to: 'DH_NVR4XXX-4KS2_Chn_V3.215.0000000.1.R.170902.bin.extracted'
INFO Processing 'Install.lua'.
INFO Processing 'u-boot.bin.img'.
INFO Processing 'uImage.img'.
INFO Processing 'romfs-x.squashfs.img'.
INFO Processing 'web-x.squashfs.img'.
INFO Processing 'custom-x.squashfs.img'.
INFO Processing 'logo-x.squashfs.img'.
WARNING Unrecognized file: 'sign.img'.
 
sudo python3.6 ./extract.py -c NVR4XXX-4KS2 DH_NVR4XXX-4KS2_Chn_V3.215.0000000.3.R.171106.bin
WARNING Found config: NVR4XXX-4KS2
Traceback (most recent call last):
File "./extract.py", line 238, in <module>
extractor.Extract(args.source)
File "./extract.py", line 61, in Extract
self.ZipFile = zipfile.ZipFile(self.SourceFile)
File "/usr/lib/python3.6/zipfile.py", line 1108, in __init__
self._RealGetContents()
File "/usr/lib/python3.6/zipfile.py", line 1175, in _RealGetContents
raise BadZipFile("File is not a zip file")
zipfile.BadZipFile: File is not a zip file
 
WARNING Unrecognized file: 'sign.img'.
To be expected when it's not listed in NVR4XXX-4KS2

I think the idea is that you develop / extend and contribute the mod-kit config files as the firmware develops.
As originally posted by @cor35vet :
Code:
from .config import *

DAHUA_FILES = OrderedDict([
    ("Install.lua", {
        "required": True,
        "type": DAHUA_TYPE.Plain
    }),
    ("u-boot.bin.img", {
        "required": True,
        "type": DAHUA_TYPE.Plain,
        "size": 0x00300000
    }),
    ("uImage.img", {
        "required": True,
        "type": DAHUA_TYPE.Plain,
        "size": 0x00a00000
    }),
    ("romfs-x.squashfs.img", {
        "required": True,
        "type": DAHUA_TYPE.uImage | DAHUA_TYPE.SquashFS,
        "size": 0x03600000
    }),
    ("web-x.squashfs.img", {
        "required": True,
        "type": DAHUA_TYPE.uImage | DAHUA_TYPE.SquashFS,
        "size": 0x00a00000
    }),
    ("custom-x.squashfs.img", {
        "required": True,
        "type": DAHUA_TYPE.uImage | DAHUA_TYPE.SquashFS,
        "size": 0x00200000
    }),
    ("logo-x.squashfs.img", {
        "required": True,
        "type": DAHUA_TYPE.uImage | DAHUA_TYPE.CramFS,
        "size": 0x00300000
    })
])
 
Even when you are success in modifying the firmware, there is no way to install it on the device. Latest firmware checks its folder by the checksum, and overall, the sign.img. So if you want to modify any file, you have to make a checksum again for that folder, and sign the firmware. As @cor35vet, it's impossible task.

However, if you have uart dongle, then it's a easy task to upgrade firmware :)

To be expected when it's not listed in NVR4XXX-4KS2

I think the idea is that you develop / extend and contribute the mod-kit config files as the firmware develops.
As originally posted by @cor35vet :
Code:
from .config import *

DAHUA_FILES = OrderedDict([
    ("Install.lua", {
        "required": True,
        "type": DAHUA_TYPE.Plain
    }),
    ("u-boot.bin.img", {
        "required": True,
        "type": DAHUA_TYPE.Plain,
        "size": 0x00300000
    }),
    ("uImage.img", {
        "required": True,
        "type": DAHUA_TYPE.Plain,
        "size": 0x00a00000
    }),
    ("romfs-x.squashfs.img", {
        "required": True,
        "type": DAHUA_TYPE.uImage | DAHUA_TYPE.SquashFS,
        "size": 0x03600000
    }),
    ("web-x.squashfs.img", {
        "required": True,
        "type": DAHUA_TYPE.uImage | DAHUA_TYPE.SquashFS,
        "size": 0x00a00000
    }),
    ("custom-x.squashfs.img", {
        "required": True,
        "type": DAHUA_TYPE.uImage | DAHUA_TYPE.SquashFS,
        "size": 0x00200000
    }),
    ("logo-x.squashfs.img", {
        "required": True,
        "type": DAHUA_TYPE.uImage | DAHUA_TYPE.CramFS,
        "size": 0x00300000
    })
])
 
Need help after FW update on a VTH1550chw2

Hello friends,

After trying to flash a knew fw-update to my vth1550chw2 it remains with a black screen.

I the configtool the ip of the device vt1550chw2 is not lister anymore.

I guess I have to connect the device now with com or tftp..
The chw2 model is 2 wire model which receives power and data through these to wires only.

The device on the backside seems to be on because there are some led lights going on and off.

Does anyone has an idea how to get the old FW back on to the device?

Thank you very much!
 
I have a ipc-hdw4431c-a.is this one upgradeable with file in 1st post? I bought from this seller.

Build 2016-06-21
Software version
2.460.0000.4.r



Dahua 4MP dome camera IPC-HDW4431C-A-V2 replace IPC-HDW4431C-A IR Mini Camera POE Built-in MIC cctv network multiple language
Dahua 4MP dome camera IPC HDW4431C A V2 replace IPC HDW4431C A IR Mini Camera POE Built in MIC cctv network multiple language -in Surveillance Cameras from Security & Protection on Aliexpress.com | Alibaba Group to clipboard
(from AliExpress Android)

Sent from my Z978 using Tapatalk
 
cor35vet - After overcoming my fear of bricking them, I upgraded a small bunch of 4431M and 4431R-Z cameras from the 21R version to your 22R firmware. 100% success on the first try! As a career software person I think I have a feel for the talent, time, and effort that went into this, and want to pass on a big THANK YOU for doing such a good job and making it available. The upgrade has given me two main things: (1) All the 4431 cameras play nice with the NVR now, and (2) I don't have to play games any more switching versions of the web components (which are "hugely" different between the 21R and 22R versions). Since you're a student, I'm assuming your age and can say that you remind me of myself 50 years ago in the age of the IBM 1620, PDP-8, PDP-10, etc. What you're learning from this effort is likely more valuable than anything from the classroom.
 
  • Like
Reactions: mat200 and Bramboo
Not sure why do you want to upgrade firmware for a camera which has already supported multiple languages. From the link of seller, I believe the camera firmware is newer than the one in first post.
I have a ipc-hdw4431c-a.is this one upgradeable with file in 1st post? I bought from this seller.

Build 2016-06-21
Software version
2.460.0000.4.r



Dahua 4MP dome camera IPC-HDW4431C-A-V2 replace IPC-HDW4431C-A IR Mini Camera POE Built-in MIC cctv network multiple language
Dahua 4MP dome camera IPC HDW4431C A V2 replace IPC HDW4431C A IR Mini Camera POE Built in MIC cctv network multiple language -in Surveillance Cameras from Security & Protection on Aliexpress.com | Alibaba Group to clipboard
(from AliExpress Android)

Sent from my Z978 using Tapatalk
 
Well I see ivs option but I can't select it.it won't let me draw.the new cam works great with ivs.but I think I need to tweak the sensitivity bar on new cam.i have chickens and it picks up all of them crossing the tripwire.

Sent from my Z978 using Tapatalk
 
Is it possible to disable auto focus with this firmware hack? Having issues with LPR and focus creeping at night.
 
hello i have a ip cam brand as IPC c35
Is it a good idea to view the http API through unpacking the firmware? Which partition should I look for for cgi-bin?
Thanks
 
Bought 6 IPC-HDW4233C-A cameras. Four of them came with the firmware in English (and able to select between French, Russian and Spanish). The last two were from another vendor because they had the different lens sizes I needed; but they came with the firmware in Chinese, with no other options to change to. Is there anyway to extract the firmware from one of the multilanguage ones to update the firmware in the last two which show in Chinese?

They all show the same info:

Multilanguage ones:
Device TypeIPC-HDW4233C-A-V2
System Version2.622.0000000.6.R, Build Date: 2017-10-17
WEB Version3.2.1.506361
ONVIF Version16.12(V2.4.0.485616)

Chinese ones:
设备类型IPC-HDW4233C-A-V2
系统版本2.622.0000000.6.R, Build Date: 2017-10-17
WEB版本3.2.1.506361
ONVIF版本16.12(V2.4.0.485616)
国标版本号V2.1.4.500306
 
Hallo, after installing linux system Ubuntu in a virtualbox, I got the script running. Was my first time using linux and commands out of my dreambox.

So I have one question: Is it possible to extract the firmware of a dahua indoor station VTH1510CH or 1550CH. I want to change the language of the buttons. I tried to decrypt with VTO2000A but it doesn't work correct...I can't open the decryptet files an a lot of error messages.
 
Hello Cor35vet,
Can you mod this firmware? Is for the DH-NVR4208
DH_NVR4xxx_Chn_P_V3.205.0000000.0.R.171013.bin

Thanks!
 
[QUOTE = "AutoExec, должность: 139547, член: 20291"] Привет! Пожалуйста, помогите мне! Мне нужен патч «Соня» в следующей прошивке для IPC-HFW1225M. Прошивка: 大华股份
Спасибо !!! [/ QUOTE]

Hello!
Please give me modified firmware, English, Russian for IPC-HFW1225M