Dahua IPC-HDW1320S rebranded as WatchNet mpix-30irbf-k28, change to dahua firmware?

1.21 jiggawatts!

Young grasshopper
Joined
Aug 29, 2018
Messages
87
Reaction score
15
Location
toronto canada
i got a WatchNet mpix-30irbf-k28 ip camera which looks exactly like and has the same specs as Dahua IPC-HDW1320S .




the WatchNet GUI is identical to the Dahua GUI, only branded as WatchNet. i can access the camera on a browser, even view it in blue iris but for some reason, i can't get video on dahua NVR or use gdmss to view it. i selected the proper ports, etc. but no cigar.

is it possible to put dahua branded firmware on this camera?

where can i get IPC-HDW1320S firmware?

this is what is on the camera now:

Software Version 2.400.WT00.0.R, Build Date: 2016-11-02

WEB Version 3.2.1.352914

ONVIF Version 2.4.2
 

iTuneDVR

Pulling my weight
Joined
Aug 23, 2014
Messages
678
Reaction score
121
Location
www.iTuneDVR.ru
this is what is on the camera now:

Software Version 2.400.WT00.0.R, Build Date: 2016-11-02
Current firmware at attach.
Here HWID from check.img inside
Code:
      "IPC-HDW2120R-Z:01:02:02:37:16:00:01:00:00:00:04:258:00:00:00:00:00:01:00:00:100",
      "IPC-HDW2120R-Z:01:02:02:37:16:00:01:00:00:00:00:258:00:00:00:00:00:01:00:00:100",
      "IPC-HDW2220R-Z:01:02:02:33:18:00:01:00:00:00:04:258:00:00:00:00:00:01:00:00:100",
      "IPC-HDW2220R-Z:01:02:02:33:18:00:01:00:00:00:00:258:00:00:00:00:00:01:00:00:100",
      "IPC-HDW2320R-Z:01:02:02:19:18:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HDW2320R-Z:01:02:02:19:18:00:01:00:00:00:00:258:00:00:00:00:00:00:00:00:100",
      "IPC-HDBW2120R-ZS:01:02:02:37:16:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HDBW2220R-ZS:01:02:02:33:18:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HDBW2320R-ZS:01:02:02:19:18:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HDBW2320R-ZAS:01:02:02:19:18:00:01:06:01:01:04:258:03:00:00:00:00:00:00:00:100",
      "IPC-HDBW2121R-ZS:01:02:05:35:18:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HDBW2121R-ZS:01:02:05:35:18:00:01:06:01:01:04:258:03:00:00:00:00:00:00:00:100",
      "IPC-HDBW2221R-ZS:01:02:05:36:18:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HDBW2221R-ZS:01:02:05:36:18:00:01:06:01:01:04:258:03:00:00:00:00:00:00:00:100",
      "IPC-HDBW2421R-ZS:01:02:02:23:19:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HDBW2421R-ZS:01:02:02:23:19:00:01:06:01:01:04:258:03:00:00:00:00:00:00:00:100",
      "IPC-HFW2120R-ZS:01:02:02:37:16:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HFW2220R-ZS:01:02:02:33:18:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HFW2320R-ZS:01:02:02:19:18:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HFW2120R-VFS:01:02:02:37:16:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HFW2220R-VFS:01:02:02:33:18:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HFW2320R-VFS:01:02:02:19:18:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HFW2120R-VFS:01:02:02:37:16:00:01:06:01:01:04:258:03:00:00:00:00:00:00:00:100",
      "IPC-HFW2220R-VFS:01:02:02:33:18:00:01:06:01:01:04:258:03:00:00:00:00:00:00:00:100",
      "IPC-HFW2320R-Z:01:02:02:19:18:00:01:00:00:00:00:258:00:00:00:00:00:00:00:00:100",
      "IPC-HFW2420R-VFS:01:02:02:23:19:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HFW2420R-ZS:01:02:02:23:19:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HFW2120R-VFS:01:02:05:37:16:00:01:06:01:01:04:258:03:00:00:00:00:00:00:00:100",
      "IPC-HFW2220R-VFS:01:02:05:33:18:00:01:06:01:01:04:258:03:00:00:00:00:00:00:00:100",
      "IPC-HFW2121R-VFS:01:02:02:35:18:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HFW2121R-ZS:01:02:02:35:18:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HFW2221R-VFS:01:02:02:36:18:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HFW2221R-ZS:01:02:02:36:18:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HFW2421R-VFS:01:02:02:23:19:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HFW2421R-ZS:01:02:02:23:19:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HFW2421R-ZS:01:02:02:23:19:00:01:06:01:01:04:258:03:00:00:00:00:00:00:00:100",
      "IPC-HFW2121R-ZS:01:02:02:35:18:00:01:06:01:01:04:258:03:00:00:00:00:00:00:00:100",
      "IPC-HFW2221R-ZS:01:02:02:36:18:00:01:06:01:01:04:258:03:00:00:00:00:00:00:00:100",
      "IPC-HFW1220R:01:02:02:36:18:00:01:00:00:00:00:258:00:00:00:00:00:00:00:00:100",
      "IPC-HFW1420R:01:02:02:23:19:00:01:00:00:00:00:258:00:00:00:00:00:00:00:00:100",
      "IPC-HD1320C:01:02:06:19:18:00:01:00:00:00:00:258:00:00:00:00:00:00:00:00:100",
      "IPC-HDW1320S:01:02:05:19:18:00:01:00:00:00:00:258:00:00:00:00:00:00:00:00:100",
      "IPC-HDW1320S:01:02:05:19:18:00:01:00:00:00:04:258:00:00:00:00:00:00:00:00:100",
      "IPC-HDPW1420F:01:02:02:23:19:00:01:06:03:01:04:258:03:00:00:00:00:00:00:00:100"
 

Attachments

1.21 jiggawatts!

Young grasshopper
Joined
Aug 29, 2018
Messages
87
Reaction score
15
Location
toronto canada
i've tried the following dahua firmware:



but it would not update the camera.


this one in the above post worked:


but it is the same as the version i have installed but in pal version.
 

iTuneDVR

Pulling my weight
Joined
Aug 23, 2014
Messages
678
Reaction score
121
Location
www.iTuneDVR.ru
It's OEM IPC & OEM firmware with other transformed name inside, so via web no way.
Open ipc, conect to TTL using TTL2USB adapter or use TFTP scheme update from files and update your ipc.
Of course you need clean config area.
You need more fresh firmware witout hole & vuln?
 

1.21 jiggawatts!

Young grasshopper
Joined
Aug 29, 2018
Messages
87
Reaction score
15
Location
toronto canada
It's OEM IPC & OEM firmware with other transformed name inside, so via web no way.
Open ipc, conect to TTL using TTL2USB adapter or use TFTP scheme update from files and update your ipc.
Of course you need clean config area.
You need more fresh firmware witout hole & vuln?
is tftp the easier route?
what do you mean by needing a clean config area?
 

iTuneDVR

Pulling my weight
Joined
Aug 23, 2014
Messages
678
Reaction score
121
Location
www.iTuneDVR.ru

1.21 jiggawatts!

Young grasshopper
Joined
Aug 29, 2018
Messages
87
Reaction score
15
Location
toronto canada
You can try, but more effective is TTL


If reset button is present so try with it, or using TTL or othe way at boot need execute
eracfg
or other command? to be sure that all oem artefact is clened

there's no reset button on the camera. can't even do a factory reset from the GUI. there is only a default button in the GUI which puts some settings back to default but not the IP address or admin account.

where do i physically connect to the camera with a usb to ttl cable? i have done some arduino ide to esp8266 over ttl before.
 

VorlonFrog

Known around here
Joined
Aug 3, 2015
Messages
1,980
Reaction score
3,454
Location
Charlotte
pin 3 is GND,
pins 1, 2 and 4 measure 3.3v when the camera is powered on.
Grab a USB-to-TTL adapter cable (you DO have one laying around, right?)
Connect the ground wire, then take the RCV or RX or RXD wire and touch it temporarily to each of the other three pins while the camera is booting. Use PuTTY at 115200, 8 bits, No parity. You'll soon find out which pin is TxD fairly quickly. ;)
Then do the same with the TRX or TX or TXD wire with the remaining two pins. Try typing a few characters on your keyboard while connected. When they echo back, you're golden. The remaining unconnected pin is probably Vcc, 3.3VDC.
 

1.21 jiggawatts!

Young grasshopper
Joined
Aug 29, 2018
Messages
87
Reaction score
15
Location
toronto canada
Grab a USB-to-TTL adapter cable (you DO have one laying around, right?)
Connect the ground wire, then take the RCV or RX or RXD wire and touch it temporarily to each of the other three pins while the camera is booting. Use PuTTY at 115200, 8 bits, No parity. You'll soon find out which pin is TxD fairly quickly. ;)
Then do the same with the TRX or TX or TXD wire with the remaining two pins. Try typing a few characters on your keyboard while connected. When they echo back, you're golden. The remaining unconnected pin is probably Vcc, 3.3VDC.
i found a pl2303 but the positive voltage line is 5 volts. is this ok?
 
Top