-
Notifications
You must be signed in to change notification settings - Fork 6
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
EMOS IP-300 #6
Comments
@jkolo your firmware dump seems good. Do you know the exact firmware version you're running ? this looks like one of the newer firmware versions 5.2x or newer where they have removed the S80network script which allowed the boot settings to work. You can probably patch your initrun.sh and flash it directly into the device to root it (assuming you have the tools/skills for it). Your device should 'detect' ppsFactoryTool.txt from a quick look at it but please notice some features may only work if you have already added the device to the phone app (or the device will stay in a 'brand new' state which disables basically everything until you enroll it on the phone app). |
@jkolo it is usually possible to flash using the bootloader, but it's always risky so using a hardware programmer allows you to make a backup and restore it if you do something wrong. If you already have ONVIF, then likely you have RTSP too (it's basically part of ONVIF). Telnet/rooting will probably not help a lot, but you could poke around their code and make something to do motion detection (monitoring the log output) and control rotation (rotation control can take time though). Most of the devices I've seen require you to remove the SPI flash from the board before reading/writing it, so keep that in mind as these boards are very fragile and you'll need the right tools and skills to do it (i.e. heat gun and some practice on old broken boards). |
I am requesting support to get RTSP up and running and get rid of cloud connectivity for an EMOS IP-300 camera.
None of the ways I found on your github are working. The only thing is that I managed to dump flash using ppsMmcTool.txt (hopefully whole and correctly).
I also managed to connect to the camera uart.
The ppsFactoryTool.txt file unfortunately does nothing. I am however also able to connect the camera to the network using the QRCode and it is pingable. Unfortunately nmap shows that only port 6668 is open. I connected the camera to a wifi network without internet access.
Below pictures of PCB:
The text was updated successfully, but these errors were encountered: