Registered a URL and setup a forum as the IPCam stuff really needed its own site vs my irregular blog posts about IPCam hacking at

Author Topic: Zosi ZG2622MW partition addresses  (Read 11902 times)

  • No avatar
  • *
May 12, 2020, 04:51:05 pm
So connected my working IPCAM with UART
Want to download the 16mb with tftp for my birkced cam, but i Don't know the adresses.

I have this information:
Creating 4 MTD partitions on "hi_sfc":
0x000000000000-0x000000100000 : "boot"
0x000000100000-0x000000400000 : "kernel"
0x000000400000-0x000000f80000 : "rootfs"
0x000000f80000-0x000001000000 : "config"

so the boot download goes a little something like this:
sf read 0x82000000 0 0x100000
tftp 0x82000000 mtdblock0 0x100000

sf read 0x82000000 0x100000 0x400000
tftp 0x82000000 mtdblock1 0x400000

Rootfs: fails with this:
sf read 0x82000000 0x400000 0xf80000
tftp 0x82000000 mtdblock2 0xf80000

It says something like out of range...
SO i guess i don't know the address..

I have to say I'm new at this IPCAM stuf.. just started yesterday to explorerand fool arround (also bricked 2 ip cameras cause I wrote to the boot sector (uboot)woops! Any way to put a new uboot on those?


  • No avatar
  • *****
May 14, 2020, 06:55:14 am
If you've nuked the uboot, will need an spi flasher or similar to reflash.

Have a look at the forums for routers eg (dd/open)wrt, as people do that a lot, and its described in more detail than I'm willing to type :)