If you have a chance to browse the files of your camera check the start.sh and tell me if you have "devmem" commands: on my cameras I found it 8 times at the lines 54, 55,56, 57, 573, 574, 581 and 582 (see AJ_HC1703L_Teardown/tmp/start.sh at main · Jalecom/AJ_HC1703L_Teardown) and I have no idea of the purpose. I can figure out a low level write to enable a device; maybe the whatchdog ?!? Maybe a GPIO configuration ?!?
Additionally if yourstart.shis similar to mine, you can put in thedebug_cmd.shonly the commands you need and exclude the unwanted ones. If you don't need to access the camera from outside your network, you can stop/block/prevent the comunication with the chinese server with thehostsfile (see zsgx1hacks/readonlysd/hack/hosts.new at master · ant-thomas/zsgx1hacks). You can even kill thestart.shitself.
Hi Jalecom, long time no see, I apologise for the really long delay, i've had school and just completely forgot about this until a couple days ago, decided to try and hack the camera again, So I tried the script from the github repo, however i'm having an issue where nothing is happening at all from what I can see, no web ui, no ssh, no ftp, if I had to guess my camera does something different from the rest, and so I am trying to use UART, and I got a device which can read it, however my wires are quite thick which would mean it would take a while for me to even get them on the correct pin, and I was wondering, if you could potentially see any pins which could be the TX pin? (I posted an image of the wire for reference) I know in an earlier post you told me a potential one, but it's been a couple months and you might've learnt something since then. I do apologise for this, but it's just because I haven't had much experiences with circuit boards.
Hi GYKGAMER, I am also trying to get more information about this camera, in particular I'd like to understand the structure of the upgrade file.
Thanks for sharing the file!
Can you point to the source of that file or where I can find other versions of the firmware upgrade?
About the UART connection, I managed to access the bootloader logs by connecting the UART adapter directly to the SoC pins marked by Jalecom in this post, using self made wires with sewing needles at the tip.
The bootloader on my camera disables the linux kernel logs by default, so you'll need to edit the bootargs in the env to enable it.
My source is that I used the app to update the camera, and then the file got saved to the micro sd card. I don't know what server they used, or the link to it. So I do apologise. However are you sure that those pins are correct? Are you able to send a photo of your setup and what you did?
