Hey, I'm trying to gain access to a HI3518 based camera, the camera is this one: http://www.aliexpress.com/item/1-0-Megapixel-S6211Y-WRA-Wireless-Wifi-IP-Camera-HD-720P-P2P-Network-Security-Camera-Support/32256002689.html
made by SIEPEMS.
I tried to access the serial console, but when I was soldering cables to the UART pins I lifted the TX solder pad and I can't find follow the trace to any other place where it's accessible to solder a wire.
The firmware of the camera is in http://cd.365cam.net/s5030_en.html
. I downloaded it and took a look at it with an HEX editor and found what look like two password hashes in the firmware:
I have been trying to crack those but I haven't had any luck yet.
The other thing that I tried was to change the hashes in the firmware for one that I know the password, but the camera refuses to upgrade with my modified firmware, I think it must have some sort of signature/error checking that I'm breaking with my changes, but I haven't found it yet.
Any suggestions on how I might go about gaining telnet access?