Dahua Firmware Mod Kit + Modded Dahua Firmware

Has anyone successfully reversed/decrypted the Dahua IPC firmware .bin they started encrypting around V2.8XX (or maybe it started with V2.6XX)?

@iTuneDVR : You seem pretty active in this space. Anything you've run across?
 
For IPC-HX4X2X-Themis ("Eco-savvy 2.0" 2nd gen) cameras:

Software Version: 2.400.0000.34.R, Build Date: 2016-08-01
MD5Sum: 3a6d937e453c91202ab64542d83f1a38
SHASum: c5bfae26ff027d5c3a2c03e73dcbb9cf3e978759

Does anyone still have the above firmware for IPC-HX4X2X-Themis (the link isn't working for me)?
My camera stopped working suddenly but does have port 23 and 3800 available, so I want to try a reflash.
 
Last edited:
Does anyone have any solution for this issue:

./extract.py DH_SD-Gauss_MultiLang_PN_Stream3-xiaobei_V2.821.0000006.1.R.230316.bin
ERROR Could not autodetect config!
INFO Please use -c to select the correct config from the following list:
INFO HX4XXX-Eos4
INFO HX4XXX-Eos
INFO HX4X2X-Themis
INFO HX4XXX-NAND-Eos
INFO HX5X3X-Rhea
INFO HX8XXX-Eos
INFO HX8XXX-Demeter
INFO SD-Mao-Rhea
INFO SD-Mao-Themis
INFO SD-Zi-Themis
INFO VTO2000A
INFO NVR4XXX-4KS2
INFO NVR4XXX-4K
INFO NVR4xxx
INFO HCVR5x04



I've tried different manual configurations, unfortunately none did work.
 
Hey, everybody.
I got a DH-IPC-HFW4433F-ZSA camera.

Received it in a state of not booting.
I managed to download the firmware DH_IPC-HX4XXX-Eos_Chn_PN_Stream3_V2.680.0000000.46.R.231027.bin via tftp.

The camera started up, I can access its web interface (only in Chinese) or configure it via SmartPSS.

I can add the camera to the Dahua recorder (Europe) on the old firmware of the recorder.
I can NOT add a camera to Dahua (Europe) on the new firmware of the recorder 4+....

Is there any broken firmware for this camera, so that it works with Dahua recorders (not Chinese) with firmware version 4+... ??
 
i.botoz links are not working? where can I find these firmware? thanks!
For IPC-HX4XXX-Eos ("Eco-savvy 2.0" 3rd gen) cameras:
For IPC-HX4XXX-NAND-Eos (-ZS models) cameras:

I have a few IPC-HDBW4431R-ZS, they get the "can't find network host error loop" after adding the camera to new n98a nvr. I am upgrading from nvr608 to n98a recorder. I see that I have two batches of 4431r-zs; some with software version 2.420.0000.22.R (BD:2016-12-09) and 2.420.0000.21.R (BD:2016-07-24). They all work fine on the nvr608; but only the ###.22.R will stay connected on the n98a; I am hoping that flashing the IPC-HX4XXX-Eos image will fix this error...
 

Attachments

  • 4431R-ZS.PNG
    4431R-ZS.PNG
    108.3 KB · Views: 7
Unable to access the web. Need firmware IPC-HDBW4631R-S
Firmware has been installed 2.640.0000002.0.R, Build Date: 2018-05-23
Have a serial number & HWID & mac
UART works!

Camera purchased on alliexpress ))
 
I want to use the mod, but there is a problem. How to solve it?? Do you need below python version?
/tmp/Dahua-Firmware-Mod-Kit# ./extract.py DH_IPC-HX5X3X-Rhea_Internal_PN_Stream3_V2.640.0000002.0.R.180523.bin
/tmp/Dahua-Firmware-Mod-Kit/./extract.py:6: DeprecationWarning: The distutils package is deprecated and slated for removal in Python 3.12. Use setuptools or check PEP 632 for potential alternatives
import distutils.spawn
/tmp/Dahua-Firmware-Mod-Kit/./extract.py:210: DeprecationWarning: The 'warn' method is deprecated, use 'warning' instead
Logger.warn("Autodetected config: %s", Config)
WARNING Autodetected config: HX5X3X-Rhea
INFO Extracting 13 files to: 'DH_IPC-HX5X3X-Rhea_Internal_PN_Stream3_V2.640.0000002.0.R.180523.bin.extracted'
INFO Processing 'Install'.
INFO Processing 'check.img'.
INFO Processing 'dhboot-min.bin.img'.
INFO Processing 'dhboot.bin.img'.
INFO Processing 'kernel.img'.
INFO Processing 'romfs-x.squashfs.img'.
CRITICAL Missing dependency: 'unsquashfs'
ERROR 'SquashFS' handler returned non-zero return value for file: 'romfs-x.squashfs.img.raw'
Traceback (most recent call last):
File "/tmp/Dahua-Firmware-Mod-Kit/./extract.py", line 238, in <module>
extractor.Extract(args.source)
File "/tmp/Dahua-Firmware-Mod-Kit/./extract.py", line 108, in Extract
raise Exception("Handler returned non-zero return value!")
Exception: Handler returned non-zero return value!

./build.py DH_IPC-HX5X3X-Rhea_Internal_PN_Stream3_V2.640.0000002.0.R.180523.bin.extracted/
/tmp/Dahua-Firmware-Mod-Kit/./build.py:6: DeprecationWarning: The distutils package is deprecated and slated for removal in Python 3.12. Use setuptools or check PEP 632 for potential alternatives
import distutils.spawn
/tmp/Dahua-Firmware-Mod-Kit/./build.py:283: DeprecationWarning: The 'warn' method is deprecated, use 'warning' instead
Logger.warn("Autodetected config: %s", Config)
WARNING Autodetected config: HX5X3X-Rhea
INFO Checking required files/directories.
INFO Creating 'build' directory.
INFO Starting build process.
INFO Processing 'Install'.
INFO Processing 'kernel.img'.
INFO Processing 'dhboot-min.bin.img'.
INFO Processing 'dhboot.bin.img'.
INFO Processing 'romfs-x.squashfs.img'.
Image Name: romfs
Created: Sun Nov 10 18:57:26 2024
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 3321856 Bytes = 3244.00 KiB = 3.17 MiB
Load Address: 01b80000
Entry Point: 01fd0000
ERROR Generated file 'romfs-x.squashfs.img' exceedes maximum allowed filesize!
Traceback (most recent call last):
File "/tmp/Dahua-Firmware-Mod-Kit/./build.py", line 311, in <module>
builder.Build(args.source)
File "/tmp/Dahua-Firmware-Mod-Kit/./build.py", line 146, in Build
raise Exception("File exceeds maximum allowed filesize!")
Exception: File exceeds maximum allowed filesize!
 
Last edited:
It seems that the topic has died. I was able to compile the firmware. I have one question. If the CAMERA is Chinese, then this mod can reassemble the firmware and it will be possible to connect to new DVRs?