How to reset password on DS-2CD2123FWD-I IP camera?

[alastairstevenson]

ok. the cfg0 section is a jffs2 image. when I mounted that i saw ipc_db and ipc_db_backup similar to what you show earlier.

Did you just cut out the cfg0 partition as defined in the mtd list?
is it mounted ro or rw ?
If rw I wonder if it would be possible to delete those 2 files and still have a usable jffs2 partition if it was written back.

I'm still wondering about the tftp updater not clearing the config - I've used that on lots of different devices and never seen it retain the configuration.
But there is an exception to every rule, they say.

 

[protocold]

yes, I cut out cfg0 partition and under linux I can mount it and delete the 2 files. However I would have to re-create the jffs2 images as I cant just "edit" it.

This is a time waster and pain. I am about to try putting the new jffs2 back onto the image and write it back.

 

[protocold]

FYI. This is the content of the cfg0 partiton:

root@osboxes:/home/osboxes/hikvision# jffs2reader cfg0
-rwxr--r-- 1 0 0 652 /db_op_info.log
-rw-r--r-- 1 0 0 4096 /netOsd.bin
-rw-r--r-- 1 0 0 1054 /servkey.pem
-rw-r--r-- 1 0 0 24 /...\
--w---x--T 1 0 0 4096 /DS-2CD2123FWD-I20181113AAWRC67720447.log
-rw-r--r-- 1 0 0 4096 /ipc_db_backup
-rw-r--r-- 1 0 0 4096 /ipc_db
-rw-r--r-- 1 0 0 1024 /networksec.db
-rw-r--r-- 1 0 0 928 /servcert.pem
root@osboxes:/home/osboxes/hikvision#

are you aware of the networksec.db? it is another sqlite database.

 

[alastairstevenson]

I can mount it and delete the 2 files.

Doesn't that mean when it's unmounted the jffs2 image file will still be valid, without the files?

 

[protocold]

Doesn't that mean when it's unmounted the jffs2 image file will still be valid, without the files?

This is the newly created jffs2 image and its content:

root@osboxes:/home/osboxes/hikvision# jffs2reader new_cfg0
--w---x--T 1 0 0 4096 /DS-2CD2123FWD-I20181113AAWRC67720447.log
-rwxr--r-- 1 0 0 652 /db_op_info.log
-rw-r--r-- 1 0 0 4096 /netOsd.bin
-rw-r--r-- 1 0 0 2048 /networksec.db
-rw-r--r-- 1 0 0 928 /servcert.pem
-rw-r--r-- 1 0 0 1054 /servkey.pem
root@osboxes:/home/osboxes/hikvision#

ipc_db and ipc_db_backup are gone now.

 

[alastairstevenson]

are you aware of the networksec.db

Not that I recall - just grepping a folder tree for it.

 

[protocold]

guess what... deleting the 2 db didnt work.

However... when I do 'erase' in bootloader, it prompt me to select which partition to erase. i selected cfg0 and boom!

things got reset and SADP now said inactive. I am in business.

So much messing around...

 

[alastairstevenson]

Well that's quite an unexpected result! But a good one.
Well done for getting there, these can be fun journeys if you don't care about valuing your time but just enjoy doing it for the experience.

And it's good to share, others can benefit and learn.

 

[protocold]

Well done for getting there, these can be fun journeys if you don't care about valuing your time but just enjoy doing it for the experience.

The cost of these things are negligible compare to the time cost. It is always doing it for fun I guess.

People now know what to do when the TFTP doesnt work.

 

[watchful_ip]

The cost of these things are negligible compare to the time cost. It is always doing it for fun I guess.

People now know what to do when the TFTP doesnt work.

I'm doing work with the E3 for fun also PM sent if you get a chance to help. Cheers.

edit: no need - managed to find a way