Alastair-
First, thank you for the great tutorial. I've been bumming around firmware for years, and this is very concise and well laid out.
Unfortunately I think my experience has come back to bite me.
I couldn't get the camera to reset- although I was able to log into it and force a factory reset. At that point it picked up the
tftp server, did the EN-digicap download... and then it did nothing.
Manually rebooted after a long while, but was never able to get it to reset or connect again.
Wireshark shows some activity- I was able to capture a couple of ARP (broadcast packet below).
The odd thing was the IP came back as 192.168.1.64 - so I moved everything over to 1.128- still no bites though, and no activity on wireshark to indicate reachout to the tftp server.
I isolated completely from switches and direct plugged it into the PC... no go.
So now it's in 4 pieces on my desk, and I'm about to solder in a header connector. Saw a cute little plug though- wondering what it is.
I'm about to do a serial reprogramming on it- any last words to stop me?
Or suggestions to try before I head down this path? I've not fired up binwalk in a looong time....
Code:
0000 ff ff ff ff ff ff c4 2f 90 00 35 4f 80 33 21 01 ......./..5O.3!.
0010 01 f6 00 00 00 02 06 04 01 02 3c 89 c4 2f 90 00 ..........<../..
0020 35 4f c0 a8 01 40 ff ff ff ff ff ff 00 00 00 00 5O...@..........
0030 ff ff ff 00 44 53 2d 32 43 44 32 30 33 32 46 2d ....DS-2CD2032F-
0040 49 30 31 32 30 31 35 30 37 32 04 43 43 52 52 35 I012015072.CCRR5
0050 33 30 35 39 32 30 39 37 00 00 00 00 00 00 00 00 30592097........
0060 00 00 00 00 00 00 98 26 00 00 1f 40 00 00 00 00 .......&...@....
0070 00 00 00 00 56 34 2e 30 2e 38 62 75 69 6c 64 20 ....V4.0.8build
0080 31 35 30 34 30 31 00 00 00 00 00 00 00 00 00 00 150401..........
0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00d0 00 00 00 00 32 30 31 39 2d 30 37 2d 31 36 20 30 ....2019-07-16 0
00e0 36 3a 31 38 3a 30 37 00 00 00 00 00 00 00 00 00 6:18:07.........
00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0100 00 00 00 00 02 9c 60 52 c0 a8 01 01 00 00 00 00 ......`R........
0110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0120 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 ............@...
0130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0170 44 53 2d 32 43 44 32 30 33 32 46 2d 49 00 00 00 DS-2CD2032F-I...
0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Oh I saw this - hah- some of the info I need
Manual: Create console/serial access to Hikvision DS-2CD2032F-I
Sounds like the camera is stuck and the reset button isn't working. Hrmm...