R0 / DS-2CD2x32 BrickfixV2 brick recovery and full upgrade tool - enhanced.

Hi Guys,

does this firmware upgrade method work on ip cameras which have lost passwords ?
Tried the password reset methods and they did not work so was wondering if I could flash the camera with older firmware and then retry the backdoor method.
thanks,

L
 
Yes, the brickfixV2 method works independently of any passwords as the initial install used the tftp updater.
This clears the device configuration, so any passwords would be lost.

If the existing firmware, as seen by SADP, is version 5.4.4 or earlier, the backdoor configuration file extract process could be used to recover the existing password.
 
I just have the phone just now, so no access to the usual resources.
Is that an R0 series camera? The brickfixV2 method is specific to R0.
Lots of R0 firmware in the forum 'downloads' section.

Is the problem that you have lost the password?
If so, what does SADP show for the firmware version?
 
Has someone information, if this brickfix also works on the TrendNet TV-IP312PI? I've checked the whole tutorial and at the end the update is installed but after last reboot, I still can't see it in my network or on "Camera Reset Tool".
I'm happy for every hint...
 
at the end the update is installed but after last reboot, I still can't see it in my network or on "Camera Reset Tool".
What version of firmware did you use for the final update? TrendNet or Hikvision?
If Hikvision 5.4.41 - then that will not work. If so, you need to repeat the brickfixV2 process.
The newest Hikvision update for the update at the end of the process should be 5.4.5 or earlier.
I'd expect the TrendNet 5.3.4 linked to by @iTuneDVR should be OK.
 
What version of firmware did you use for the final update? TrendNet or Hikvision?
If Hikvision 5.4.41 - then that will not work. If so, you need to repeat the brickfixV2 process.
The newest Hikvision update for the update at the end of the process should be 5.4.5 or earlier.
I'd expect the TrendNet 5.3.4 linked to by @iTuneDVR should be OK.

I think that brickfix should work, because in the past I already used the firmware from Hikvision to modify my TrendNet. (Trendnet tv-ip312pi = Hikvision S-2CD2232-I5)

This hikvision firmware run a long long time and last days, I did a hard reset in the maintenance to have a clean firmware again. Here the problem starts.

I used the brickfix several times. Attached you can find the log which is showing well. I don't have to modify the mtd6ro_orig because the values are "ok" from my point of view. So the steps 1-3 are running fine.
For the last step (3) I used almost all firmwares which I've found in the internet. Trendnet firmware mention from @iTuneDVR and also from this first post here
R0 series DS-2CD2x32x-Ixx IP camera firmware

Maybe someone can give me a hint if it's possible to use this brickfix with Trendnet or if it's really doesn't work.

Thanks in advance.
 

Attachments

Hello!

I'm french and would like to thank for this tuto. It helped me to un-brick my DS-2CD2132F-IS. (I'm now on V5.4.41_Build170312 )

My appologies if the question have already been asked but I just would like to know if it is normal that I can't update my camera with the web interface... the browse button is not functional and I can't select an other firmware to update my little camera...


upload_2019-9-29_19-30-51.png
 
Last edited:
It helped me to un-brick my DS-2CD2132F-IS.
Well done! A good result.

I just would like to know if it is normal that I can't update my camera with the web interface...
Those symptoms are due to the 'webcomponents' plugin for IE11 not being loaded. As shown in red at the bottom left of your sceenshot.
If you are not using the IE11 browser - you would see the same result.

I can't select an other firmware to update my little camera...
The 5.4.41 is the latest firmware for the R0 series cameras. There is no newer firmware. available.
 
Not sure what I've done wrong - I have updated the firmware on 3 of my cameras and they all work if only one is plugged in at a time. If I plug more than one in then none will work. After spending hours trying to sort this out I have noticed that all 3 cameras have the same serial number and the same mac address??
 
It sounds like you have used the mtd6ro_mod from one camera for all three.
That will duplicate the MAC address, serial number and other data and break the networking.
Do you still have the original mtd6ro_orig for each camera?
Each file is specific to each camera and needs to be kept separate.
 
No I didn't make a copy
There are ways to retrieve the original data :

If you are a purist and would like to retain the previous serial numbers, MAC addresses etc, mtd5ro also holds copies of the same bootpara data.
This can be copied / pasted in to the mtd6ro_mod when going through the BrickfixV2 process again.

At the telnet root shell after Stage 1, the command to extract mtd5ro would be :
Code:
cat /dev/mtd5ro > /mtd5ro_orig
tftp -p -l mtd5ro_orig -b 1400 192.0.0.128

Then, using HxD, copy from mtd5ro_orig the bytes from 0x644 (hex) to 0x743 (hex) and paste/overwrite in to the mtd6ro_orig at the beginning, byte 0
Then do the changes to language, devType and checksum again.
Keeping the files separate for each camera ...

Good luck!
 
There are ways to retrieve the original data :

If you are a purist and would like to retain the previous serial numbers, MAC addresses etc, mtd5ro also holds copies of the same bootpara data.
This can be copied / pasted in to the mtd6ro_mod when going through the BrickfixV2 process again.

At the telnet root shell after Stage 1, the command to extract mtd5ro would be :
Code:
cat /dev/mtd5ro > /mtd5ro_orig
tftp -p -l mtd5ro_orig -b 1400 192.0.0.128

Then, using HxD, copy from mtd5ro_orig the bytes from 0x644 (hex) to 0x743 (hex) and paste/overwrite in to the mtd6ro_orig at the beginning, byte 0
Then do the changes to language, devType and checksum again.
Keeping the files separate for each camera ...

Good luck!

I've just been looking at the different mtd6ro_mod files i have (and opened them with notepad) and the first line has the serial number and the model number - it looks like i do have 2 different files so I have managed to get a second camera working.
I will try your advise on the 3rd.
 
  • Like
Reactions: alastairstevenson
It was going well until Stage 3 (Chinese DS-2CD2332-I)

Trying to use fimware from: IPC_R0_EN_STD_5.4.41_170312.zip

Fixup log:

[Brick-fix tool] Initialising fixup_log.txt
Payload dropped, rollback re-enabled
Initialising fixup current status to stage1
[Brick-fix tool] Initiating reboot into min-system
Checking that tftp works OK ...
[stage start] fixup_log.txt successfully transferrred to the PC via tftp
Extracting the original mtdblocks ...
Extracted the original mtdblock6 as mtd6ro_orig
Extracted the original mtdblock1 as mtd1ro_orig
Transferring out mtd6ro_orig via tftp ...
Successfully transferred out mtd6ro_orig via tftp
Transferring out mtd1ro_orig via tftp ...
Successfully transferred out mtd1ro_orig via tftp
Fixup Stage1 is completed - Extracted the original mtdblocks
End of script - ready for the next run.
.
Checking that tftp works OK ...
[stage start] fixup_log.txt successfully transferrred to the PC via tftp
Successfully transferred in mtd6ro_mod via tftp
Written mtd6ro_mod to mtdblock6 ...
Initialising fixup next status to stage3 ...
End of script - ready for the next run.
.
Checking that tftp works OK ...
[stage start] fixup_log.txt successfully transferrred to the PC via tftp
Successfully transferred in digicap.dav via tftp
Attempting a firmware update ...
*** error doing the firmware update. ****
End of script - ready for the next run.

Any suggestions?