R0 / DS-2CD2x32 BrickfixV2 brick recovery and full upgrade tool - enhanced.

Gostaria de agradecer pelo post, sensacional.
Já havia tentado outras alternativas, sem sucesso.
Segui os passos do post e consegui resusitar minha Câmera IP, inclusive com a última versão do firmeware.

Parabéns pelo trabalho.
 
Taking advantage, does anyone know where to find new firmware updates for the Hikvision DS-7616NI-SE / P NVR?
I've tried it on several sites and can not find it.
I am using the firmeware: v3.0.15 2015/12/30
 
Wow! I was at a point to sell the dome and buy a new upgrade-able one since I couldn't do the upgrades on the CCCH versions. I allready bought a second DS-2CD2342WD-I20160531BBWRxxxxxxxxx to avoid I couldn't do the upgrades.

I managed also to upgrade mine DS-2CD2332-I20150207CCCHxxxxxxxxx from 5.2.5 hacked EN (141201) with the mtdblock1 and mtdblock6 mod.

I updated in incremental steps to be sure that the dome migrated my configuration. Probably I could also go directly to 5.4.41 but you never know how good they programmed the software :P

V5.2.5 build 141201 => IPC_R0_EN_STD_5.3.0_151016 => IPC_R0_EN_STD_5.4.0_160530 => IPC_R0_EN_STD_5.4.5_170123 => IPC_2XX2_EN_STD_5.4.41_170312

The best way to upgrade is using Internet Explorer. Great work!
 
  • Like
Reactions: alastairstevenson
hello and happy new year from France
I use google translation, hope it will be understandable.
I installed a video intercom from hikvision Chinese version.
English was installed on the original firmware version (Chinese crak).
with the change that allows to load a Chinese language firmware in English, I was able to upgrade to version V1.471, but the display on the inner screen has become unreadable.

I tried to proceed to the "brick-fixV2 tool" because the name of my firmware is "digicap.dav", without success:
I took care to connect the internal screen live with the PC, with the right addresses,
but by launching "tftpserve.exe" it remains on "TFTP server [192.0.0.64] initialized". the ping is nevertheless correct.
Question:
is the firmware so different from a brand camera?
does the magician "alastairstevenson" have a solution to my problem.
I can obviously answer all the questions posed by those who wish to invest in my problem.

I just want an English version that can be upgraded
the firmware is loaded from the Hikvision Europe site
Home »portal» Product Firmware »Access Control & Video Intercom» Intercom Video »IP Video Intercom» V1.4.71 Firmware
 
patdeFrance said:
I installed a video intercom from hikvision Chinese version.
Click to expand...
That is not an R0 / DS-2CD2x32 IP camera.
patdeFrance said:
is the firmware so different from a brand camera?
Click to expand...
Firmware and hardware are a lot different - the brickfix tool is not compatible with the video intercom.

[QUOTE = "patdeFrance, post: 240088, Member: 45836"] J'ai installé un intercom vidéo de Hikvision version chinoise. [/QUOTE]
Ce n'est pas une caméra IP R0/DS-2CD2x32.
[QUOTE = "patdeFrance, post: 240088, Member: 45836"] le firmware est-il si différent d'un appareil photo de marque? [/QUOTE]
Le firmware et le matériel sont beaucoup différents-l'outil brickfix n'est pas compatible avec l'interphone vidéo.
 
Hi, Thanks for the guide.
I went from bricked to up and running v5.2.5.
Should I upgrade further ? is it worth the hassle after already bricking it once ?
 
styliek said:
Should I upgrade further ? is it worth the hassle after already bricking it once ?
Click to expand...
If you have done the 'enhanced mtd hack' the camera will be fully upgradeable using the EN/ML stock firmware, to a version (5.4.5) that does not have the widely exploited 'Hikvision backdoor' vulnerability.
 
Yes I have thank you. Reading the release notes for 5.4.5 I just dont see anything jumping out at me to make me want to upgrade. I will check the previous release notes but might stay put with 5.2.5 and play it safe.
 
Hi, I’ve just upgraded 2 non bricked Chinese hacked to English 2332’s one on 5.2.0 and the other on 5.2.3. Thanks so much for the video and guide it’s so simple!

Does anyone know whether I can perform a similar upgrade with grey imported DS-2CD2335-I ? Thanks
 
good evening alastairstevenson,

I know this forum deals with the camera "IP R0 / DS-2CD2x32."
I suspect that Firmware and hardware are a lot different,

but I am deeply convinced that it is on this forum that I would find the solution.
a security camera must be better protected than an intercom.
I am sure that on this forum, someone has the tools to explore the software used and knows the coding logic of Hikvision engineers.
this logic should not be very different since it is possible to change the 'Language' flag of the intercom firmware in the same way as for a camera.
you say :
Firmware and hardware are a lot different
Have you explored the firmware of the intercom without finding any similarity with a DS-2 ...?
Do you think that the system of coding the language is necessarily different?

do you know the tools that would allow me to explore the heart of the intercom and do you think I would be able to access it?

That's a lot of questions, and I'd love to read the answers you'll want to give me.
thank you
 

Attachments

  • cracke.png
    cracke.png
    34.6 KB · Views: 74
patdeFrance said:
Have you explored the firmware of the intercom without finding any similarity with a DS-2 ...?
Click to expand...
Assuming we are talking about the Hik doorbell with this firmware : VIS_03_H2_EN_STD_V1.4.61_170731 -
Yes, I did have a look at at, and it seemed to me that the firmware was most similar to the Hikvision NVR firmware.
The firmware is wrapped as a cramfs file, and has within that file-naming conventions similar to the NVR firmware.
It also uses DES3 encryption, just like the NVR firmware, though with a different encryption key.
patdeFrance said:
Do you think that the system of coding the language is necessarily different?
Click to expand...
I didn't derive the encryption key, so I wasn't able to check out if the same method for masquerading the language as in the NVRs would be available such that modified firmware could be created.
patdeFrance said:
do you know the tools that would allow me to explore the heart of the intercom and do you think I would be able to access it?
Click to expand...
If / when someone extracts the DES3 encryption key, the @montecrypto hikpack tool should do all that's needed.
Alternatively, if a telnet/SSH root shell can be obtained (I don't know if the 'psh' shell is a feature), then the in-built 'dec' program can be used to decrypt / encrypt the firmware files.
 
[QUOTE = "alastairstevenson, poste: 240902, membre: 1907"] En supposant que nous parlons de la sonnette Hik avec ce firmware: VIS_03_H2_EN_STD_V1.4.61_170731


the intercom model is as follows:

Hikvision DS KH8301 A (DS KH8301 WT) Intérieure Vidéo Écran Tactile 7 pouces Moniteur 1024X600 0.3MP caméra, fente pour Carte TF, filaire interphone dans Intérieur Moniteur de Sécurité et Protection sur AliExpress.com | Alibaba Group a2g0w.search0104.3.32.WW0TZV & ws_ab_test = searchweb0_0, searchweb201602_2_10152_10151_10065_10068_10344_10342_10343_10340_10341_10084_10083_10305_10304_10307_10306_10302_10059_10184_10314_10534_100031_10604_10103_10142, searchweb201603_36, ppcSwitch_5 & algo_expid = 969fd324-d7a3-473a-bdf4-f51aca753bf9-5 & algo_pvid = 969fd324-d7a3-473a-bdf4-f51aca753bf9 & priceBeautifyAB = 0

and for the door phone:

DS KV8102 1A Métal interphone Visuel sonnette Vidéo de Contrôle D'accès IC carte, IP interphone remplacer DS KV8102 IM avec boîte de montage dans Vidéo Interphone de Sécurité et Protection sur AliExpress.com | Alibaba Group a2g0w.search0104.3.172.WW0TZV & ws_ab_test = searchweb0_0 2Csearchweb201602_2_10152_10151_10065_10068_10344_10342_10343_10340_10341_10084_10083_10305_10304_10307_10306_10302_10059_10184_10314_10534_100031_10604_10103_10142%%% 2Csearchweb201603_36 2CppcSwitch_5 & algo_expid = 969fd324-d7a3-473a-bdf4-f51aca753bf9-27 & algo_pvid = 969fd324-d7a3-473a-bdf4-f51aca753bf9 & priceBeautifyAB = 0

the last firmware I managed to load is V1.4.71
it is mainly the monitor that I wish "craked". the door phone is not important

the last paragraph is a bit of Chinese for my level.
I only used "hiktools05R1.exe"
I do not know hikpack, but I only ask to learn !!!
 
After a like bit of playing with a bricked 3410 (Chinese cube) which was MTD hacked by CBX Originally.
It was working on 5.20 which I upgraded to 5.30 all still good, then up to 5.40 then bricked being a XXX0 I thought a bit more was needed to recover, but thanks to @alastairstevenson his v2 brickfix it was so easy. So I can confirm the some models XXX0 models can also be recovered.

Using Tftp 1st use the v2 brickfix,
once you get the completed message close the tftp.

Now run Tftp again with a lower firmware, I used 5.30 for this test, this time allow for the Tftp to fully complete.

again close the Tftp and power off the camera. Power on again and wait after 2mins your camera will start again full working.

Also Intresting mine also stayed in English after the recover.

Now more testing to see if the Advanced MTD hack will work on the XXX0 camera's.
 
You must log in or register to reply here.
Top Bottom