Registered a URL and setup a forum as the IPCam stuff really needed its own site vs my irregular blog posts about IPCam hacking at

Recent Posts

Pages: 1 [2] 3 4 ... 10
Firmware / Re: VACRON firmware format
« Last post by temp0727 on July 28, 2017, 07:36:03 am »
I grabbed some other files they provide for other cams. One of those files was JFFS, from which I got "update.cgi", but couldn't understand the algoright for it. Anyway, they seem to pack kernel and fs into that binary file. Attached some flowcharts from IDA and original update.cgi
Firmware / Re: Wanscam HW0021 firmware
« Last post by sirbossa on July 28, 2017, 04:26:36 am »
Does someone have the FW of the HW0021? I have seemed to install a wrong FW, and now my cam is all black and white, with very poor resolution. Want to get back to the original FW, but can't find it..:-S.
Firmware / Re: VACRON firmware format
« Last post by admin on July 28, 2017, 01:16:26 am »
I downloaded the rar file, unpacked and took a cursory look at the bin file.

Looks like its possibly encrypted or compressed post header, as I don't see many FF's or 00 strings in the file after the initial header.
strings also doesn't show any readable text, which ties in with it being compressed or encrypted.

A scan with binwalk ( ) to see if it finds any recognizable FS or compression in there shows nothing.

I'm guessing its probably encrypted with some custom method.

You'd need more firmware files to look at in order to proceed.
Hacking & Modding / Re: In over my head/dumb questions
« Last post by admin on July 27, 2017, 06:24:45 am »
Post 5 messages, and the restriction is lifted,  its a spammer block, unfortunately if you don't make it difficult then the boards get inundated with spam.

I have removed some of the non relevant questions (the ones related to the older forum template).

Firmware / VACRON firmware format
« Last post by temp0727 on July 27, 2017, 05:12:16 am »

I have this IP camera from, I checked their firmware and couldn't find anything about it. I mean it either encypted or compressed.

Suppose it's possible to unpack/decrypt firmware. Would it be possible to modify the linux inside it and upload it back?
Firmware / Re: U-boot corrupted. Looking for recovery procedure
« Last post by miky_boy on July 24, 2017, 07:51:01 am »
Hi my friend,

You had success on booting from SD Card?

I have the same problem now.. :(

Thanks and regards
Firmware / Re: Firmware Recovery - method #2
« Last post by miky_boy on July 23, 2017, 07:40:07 pm »
Hi guys,

Trying to recover my IP Cam using the serial port i accidently deleted my bootloader.

Anybody cam help me to recever the  u-boot please?

Now when i connect the IP Cam nothing happens on Serial Port :(

Hacking & Modding / Re: In over my head/dumb questions
« Last post by salukikev on July 22, 2017, 04:19:41 pm »
Sorry I didn't get a notice of this reply until I happened back here to research!   That is a lot of info to process!  It certainly looks like there's a lot to learn!  Isn't there an option to use "pelco" protocol which addresses this directly (without having to "hack" anything?).  Also, I picked this camera board specifically due to it's diminutive size on a single board (32mm x 32mm).  If there are any more appropriate camera boards which are of this size or smaller I would be very interested in buying one of those instead!

ps.  It seems to be drastically difficult to post responses here as I have first a captcha, and then three additional questions, at least one of which is very difficult/ambiguous to answer.  For example:  "What number comes before Yan An Zhong lu in the address? (use numbers):"   What- the URL address?  The mailing address?   Nothing is listed here on this page or the home page of the site.  I have to repost this until I get a manageable question and this seems to happen each time even though I'm logged in!
Site Announcements / Forum, software updates
« Last post by admin on July 14, 2017, 03:20:24 am »
Updated forum software to 2.0.14, changed default template to the traditional default, as I need to work on the old template to make it compatible.

Added some boards for the XiaoMi camera range, as I have some, and will probably fiddle with them!

Xiaoyi Camera (小蚁) / Region lock fix
« Last post by admin on July 14, 2017, 03:08:48 am »
From my page here -

Essentially -

Enable telnet.
Kill the watchdog, and kill the camera app.
rename the api call to check the country.

Create a folder named test on an SD card.
Create a plain text file called in that folder, and add the following bash script:

Code: [Select]
# Telnet
if [ ! -f "/etc/init.d/S88telnet" ]; then
echo "#!/bin/sh" > /etc/init.d/S88telnet
echo "telnetd &" >> /etc/init.d/S88telnet
chmod 755 /etc/init.d/S88telnet
dr=`dirname $0`
# fix bootcycle
mv $dr/ $dr/

The script will enable telnet on the camera, and then rename the script so it doesn’t run again on the next boot.

Stick the prepared card into the camera, power on, and it should reboot (twice).
If you check the open ports on the camera ip you should now see port 23 (telnet) is open.

Login with the default user/pass (as below) via telnet

User: root
Password: 1234qwer

Once telnet’d in, enter the following, line by line –

Find and kill the watchdog process

killall watch_process

Find and kill /home/cloud process so we can edit it without the watchdog watch_process restarting it

killall cloud

Change the check within /home/cloud executable to query a fake domain so it never returns a failure, then reboot.

Code: [Select]
sed -i 's|||g' /home/cloud
Pages: 1 [2] 3 4 ... 10