Open IP Camera Forum

Development => Hacking & Modding => Topic started by: astroza on November 11, 2014, 03:24:22 pm

Title: HI3518 firmware recovery
Post by: astroza on November 11, 2014, 03:24:22 pm
   I wrote an article about how to back up and recover the firmware in cameras based on HI3518 chip (

It can be useful for beginners.

Title: Re: HI3518 firmware recovery
Post by: Teed on March 18, 2015, 01:54:54 pm
Didn't work for me with 3518a board... I was able to locate RxTx pins on the board, got a very clear U-boot log but then the shell became non-active (I can type anything without any reaction from the camera) although it was different for 3516 and 3518c... for those I was able to extract /etc/password and decrypt the hash...
And if I interrupt the U-boot in the very beginning it jumps into a very strange environment... no typing "root" gives any result... any thoughts?
Title: Re: HI3518 firmware recovery
Post by: VorlonFrog on August 02, 2015, 06:41:53 pm
Felipe, thank you VERY MUCH for your excellent 8) blog post.  It allowed me to backup my Hi3518E camera firmware very quickly.  I posted a download link in the Firmware forum that also provides a fully-featured busybox 1.23.2 executable for the Hi3518A/C/E cameras.  When executed from an NFS share, it allows performing many more Linux operations than the stock/crippled executable in the default firmware.
Title: Re: HI3518 firmware recovery
Post by: ddeep on December 07, 2015, 09:40:24 pm
Hello Filipe,

How do you manage to enter telnet after uboot because when I type "root" he said incorrect order. Can you help me? Thank you.

U-Boot 2010.06-svn777 (Mar 06 2014 - 17:24:24)

Check spi flash controller v350... Found
Spi(cs1) ID: 0xEF 0x40 0x18 0x00 0x00 0x00
Spi(cs1): Block:64KB Chip:16MB Name:"W25Q128B"
In:    serial
Out:   serial
Err:   serial
Hit any key to stop autoboot:  0
hisilicon # root
Unknown command 'root' - try 'help'