zsgx1hacks icon indicating copy to clipboard operation
zsgx1hacks copied to clipboard

Wanscam K* firmware on INQMEGA HIP291

Open slydiman opened this issue 5 years ago • 52 comments

FYI We have just released the patch of the latest Wanscam K21 firmware 16.06.00.52 to use it on the camera INQMEGA IL-HIP291G-2M-AI with the sensor gc2033. https://4pda.ru/forum/index.php?showtopic=928641&st=900#entry89274008 Note the description is Russian. We have patched few drivers to work on GK7102 instead of GK7102S and gpio pins map inside the main app. It seems that the firmware Wanscam K series has been developed by ZSCam company. It works with SAP HD app and clones (YSee, WISE VR, Eyedot). It has very good and stable Onvif, RTSP and Web UI implementation. We have added telnet, ftp and other tools. We can help to adapt this firmware for other GK7102 cameras.

slydiman avatar Sep 28 '19 21:09 slydiman

Mod_Hip_02 HIP_Mod_Hip_03

paus56 avatar Oct 05 '19 09:10 paus56

Hi, the download link does work on 4pda.ru, it give 404 error

svastarija avatar Oct 05 '19 20:10 svastarija

To download files from 4pda.ru you need to register and login to your account

I have attached the firmware mod file here... description of the installation to read on 4pda

HIP291G_Mod_ENG_04102019.ZIP

paus56 avatar Oct 06 '19 08:10 paus56

Where can I get INQMEGA IL-HIP291G-1M-AI firmware ?

nishant2019 avatar Oct 06 '19 11:10 nishant2019

To download files from 4pda.ru you need to register and login to your account

I have attached the firmware mod file here... description of the installation to read on 4pda

HIP291G_Mod_ENG_04102019.ZIP

Thanks.. greatly appreciated. I have tried to create an account on 4PDA but it is very hard for non RUS, since CAPTCHA is asking to add numbers in russian, making it very hard to gues.. anyway.. thanks

svastarija avatar Oct 08 '19 19:10 svastarija

To download files from 4pda.ru you need to register and login to your account I have attached the firmware mod file here... description of the installation to read on 4pda HIP291G_Mod_ENG_04102019.ZIP

Thanks.. greatly appreciated. I have tried to create an account on 4PDA but it is very hard for non RUS, since CAPTCHA is asking to add numbers in russian, making it very hard to gues.. anyway.. thanks

Try this website https://doorsgeek.blogspot.com/2015/08/4pdaru-loginregister-captcha-tutorial.html

nishant2019 avatar Oct 09 '19 13:10 nishant2019

Обновление MOD прошивки от 20191014

Обновил mod прошивку для камер HIP291G

  • добавил поддержку сенсора gc1034 ( камера HIP291G-1M-AI )
  • добавил поддержку сенсора gc2053 ( камера HIP291G-2M-AI )

подробнее на 4PDA...

скачать прошивку также можно там: HIP291G_Mod_ENG_20191014

paus56 avatar Oct 14 '19 18:10 paus56

Обновление MOD прошивки от 20191014

Обновил mod прошивку для камер HIP291G

* добавил поддержку сенсора **gc1034** ( камера HIP291G-1M-AI )

* добавил поддержку сенсора **gc2053** ( камера HIP291G-2M-AI )

подробнее на 4PDA...

скачать прошивку также можно там: HIP291G_Mod_ENG_20191014

как можно прошить мою камеру этой прошивкой? Можно ли использовать Uboot для этого?

nishant2019 avatar Oct 15 '19 03:10 nishant2019

как можно прошить мою камеру этой прошивкой? Можно ли использовать Uboot для этого?

  • можно использовать U-boot
  • также можно просто скопировать 3 файла из архива в корень SD карты.

paus56 avatar Oct 15 '19 04:10 paus56

  • можно использовать U-boot

  • также можно просто скопировать 3 файла из архива в корень SD карты.

получать это сообщение Mod FW programming eyeplus_ipc_gks_001 Unknown target.

камера IL-HIP291G-1M-AI

nishant2019 avatar Oct 15 '19 12:10 nishant2019

Will this work on GK7102S based IL-HIP291G-1M-AI gc1034

nishant2019 avatar Oct 15 '19 12:10 nishant2019

no work on GK7102S

paus56 avatar Oct 15 '19 18:10 paus56

no work on GK7102S

any firmware for GK7102S

nishant2019 avatar Oct 18 '19 02:10 nishant2019

I'm trying to D/L the Backup/restore zip files from the links in post 94, but am getting 404 errors... Can you post them here please.

https://4pda.ru/pages/go/?u=https%3A%2F%2Ftranslate.googleusercontent.com%2Ftranslate_c%3Fdepth%3D1%26rurl%3Dtranslate.google.com%26sl%3Dauto%26sp%3Dnmt4%26tl%3Den%26u%3Dhttps%3A%2F%2F4pda.ru%2Fforum%2Findex.php%253Fs%253D%2526showtopic%253D928641%2526view%253Dfindpost%2526p%253D81185843%26xid%3D17259%2C15700021%2C15700186%2C15700190%2C15700256%2C15700259%2C15700262%2C15700265%2C15700271%26usg%3DALkJrhiVLjS2CmRqiucvWJElFHn4MH4JcA&e=89925251

THX

rufussckingston avatar Oct 18 '19 20:10 rufussckingston

Firmware also works on a INQMega PTZ381 https://www.banggood.com/2019-NEW-INQMEGA-PTZ381-HD-1080P-PTZ-360-Panoranic-Waterproof-IP-Camera-IR-Night-Version-Two-way-Audio-p-1542643.html?cur_warehouse=CN

IMG_20191101_220909 (2)

Thanks!

Keeze avatar Nov 02 '19 22:11 Keeze

I wish there was modded firmware for the gk7102S version

Op za 2 nov. 2019 23:19 schreef Kees [email protected]:

Firmware also works on a INQMega PTZ381 https://www.banggood.com/2019-NEW-INQMEGA-PTZ381-HD-1080P-PTZ-360-Panoranic-Waterproof-IP-Camera-IR-Night-Version-Two-way-Audio-p-1542643.html?cur_warehouse=CN

[image: IMG_20191101_220909 (2)] https://user-images.githubusercontent.com/6306958/68077634-40439180-fdc7-11e9-8efb-5c386e609e38.jpg

Thank!

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/ant-thomas/zsgx1hacks/issues/129?email_source=notifications&email_token=AI3ZKQQA2FWVDOEMOSAJIZTQRX4IZA5CNFSM4I3PXDQ2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEC5GI5A#issuecomment-549086324, or unsubscribe https://github.com/notifications/unsubscribe-auth/AI3ZKQV32LNMR76XHJQQGNDQRX4IZANCNFSM4I3PXDQQ .

kirelam avatar Nov 02 '19 22:11 kirelam

Keeze Firmware also works on a INQMega PTZ381

This firmware supports all the functionality of the INQMega PTZ381 camera? PTZ works correctly with this firmware ? What type of sensor does your camera have?

paus56 avatar Nov 03 '19 07:11 paus56

Firmware seems to fully support all features, including PTZ, had to flip the controls though (this cam hangs from a mount). Sensor is

# ls /tmp | grep -F gc
gc2033

Keeze avatar Nov 03 '19 09:11 Keeze

Собрал прошивку для камер на процессоре GK7102S скачать можно там: Hip_Mod_20191103_ENG_7102S

возможны проблемы с голосовыми сообщениями... подробности на 4PDA

paus56 avatar Nov 04 '19 16:11 paus56

!!!!! Возможны проблемы с мод прошивкой для камер на процессоре GK7102S подробнее читать там: http://4pda.ru/forum/index.php?s=&showtopic=928641&view=findpost&p=91290366

paus56 avatar Nov 27 '19 11:11 paus56

Hi,

could you share a log of "ipc" working correctly via console(=uart)? (of course, do censor if there's any UIDs/private info in it), thanks in advance:]

i have a camera with GK7102S(exactly like in this pic), and currently running the ipc from Hip_Mod_20191103_ENG_7102S does cause reboot almost instantly.

apparently it might atleast support the sensor(sc1135) my camera has: # strings /home/ipc | grep -C9 sc1135 ipc.c sensortype=%s [%d %s,%s, %d ]=>ret=%d, val:%s sc1145 [%d %s,%s, %d ]=>sc1145 sc2135 [%d %s,%s, %d ]=>sc2135 ov9750 [%d %s,%s, %d ]=>ov9750 sc1135 [%d %s,%s, %d ]=>sc1135 sc2315 [%d %s,%s, %d ]=>sc2315 sc2232 [%d %s,%s, %d ]=>sc2232 sc2235 [%d %s,%s, %d ]=>sc2235 jxf23 [%d %s,%s, %d ]=>jxf23 /tmp/.sensortype.ini

i guess i should begin reverse-engineering ipc, to figure out how to 'satisfy' the cause of reboot, since there was no obviously fatal errors visible via console.. the camera came with p2pcam originally, but i'd like to replace that.

aalm avatar Nov 30 '19 08:11 aalm

вот лог загрузки камеры на процессоре GK7102

20191130_mod_out.zip

paus56 avatar Nov 30 '19 15:11 paus56

@paus56 Thank you for the log & all the info you've shared about these cams :]

fwiw., i began taking a closer look at what "ipc" does, and i built strace(1) for that, which i wasn't able to find else where.

this is the last version that was on sourceforge from iirc. 2018, but i will try to get around to building a newer version from the official source later: static-strace-4.21.zip

about the failure i'm having, i'm now wondering if it's related to this: 04:08:09.418298 [76e8b384] open("/proc/mounts", O_RDONLY) = 12</proc/179/mounts> 04:08:09.421802 [76e8b4a4] read(12</proc/179/mounts>, "rootfs / rootfs rw 0 0\n/dev/root / ext2 rw,relatime,errors=continue 0 0\nproc /proc proc rw,relatime 0 0\ntmpfs /dev tmpfs rw,rela"..., 4096) = 483

so "ipc" is obviously looking at the mounts, and might not like seeing squashfs missing and/or ext2 there?

having rootfs/storage on anything but the 8M spi flash would be ideal for testing/hacking on these "firmwares".

aalm avatar Nov 30 '19 21:11 aalm

I tried this on the camera INQMEGA PTZ but it must have bricked it. Once I loaded the firmware on SD card and restart it.. I restart device in 3-5 minutes and it never come back online.

Now I have tried to connect to UART and access UBoot but I am getting no output at all from it.. did the flash chip get killed? wtf.

Anon0ne avatar Dec 18 '19 04:12 Anon0ne

Got a replacement today, and I dumped the mtd0 throught mtd4 and I cannot find a way to download the merge tool to share this firmware.

Anon0ne avatar Jan 14 '20 02:01 Anon0ne

теперь мод Wanscam K21 firmware может работать на этих камерах с SD карты без прошивки флеш... файлы и описание подробно там: http://4pda.ru/forum/index.php?s=&showtopic=928641&view=findpost&p=92865876

paus56 avatar Jan 14 '20 10:01 paus56

@paus56 i saw this was missing, works for me:] edit_config.arm.zip

aalm avatar Jan 16 '20 09:01 aalm

I need the edit devParam.dat and image merge tool from 4pda. The FTP file would help too but I cannot make am account there for anything.

If people want a copy of the newer firmware, and home folder. I want to take my info our first.

Anon0ne avatar Jan 16 '20 11:01 Anon0ne

Firmware seems to fully support all features, including PTZ, had to flip the controls though (this cam hangs from a mount). Sensor is

# ls /tmp | grep -F gc
gc2033

Careful I got a PTZ381 recently that did not take the firmware very well. In fact the flash chip quit responding all together. I will have to desolder old one to burn in CH341A.

There are ways to mod the new one with the zxsg hacks manually and safely.

Anon0ne avatar Jan 16 '20 11:01 Anon0ne