cjj25
cjj25
It's certainly a firmware I've not seen before! I'd love to have a copy to create a payload for it. Keep us in the loop!
That should do the trick. Do you have access to a soldering iron? I remove my chips before reading them as attempting while still soldered to the PCB often fails.
> So bingo, I got it. 8MB of pure happiness. binwalk says there is tons of interesting inside. Here you go @cjj25 : https://mega.nz/folder/eeZk0QSB#HUh2Q7p-OytEX52cmvk68g > > I'll leave chip detached(kh25l6436f)...
Please see this issue posted on my[ other repo (exact same firmware)](https://github.com/cjj25/RTS3903N-Tools/issues/1) and how he managed to use my other RTSPServer. (edit: Looks like you were already aware of it)...
> I was able to get telnet access, tried to find any possible secret option to enable rtsp in an easy way, but no luck so far. I've not flashed...
Awesome thanks, what's the output of the following: - ps -a (or ps -aux) - mount
Ok, place this patched binary on your sd card. Use `ps` to find the pid of the currently running application, for example the output shows **403**.. kill it via `kill...
Try this one [dgiot.patched.zip](https://github.com/cjj25/Yi-RTS3903N-RTSPServer/files/10237587/dgiot.patched.zip)
I believe that's reconnecting to WiFi. Can you perform the same actions but this time pipe the output to a log file. For example ./dgiot.patched > /tmp/output.log Then reconnect to...
It could also be setting up an access point (looking at the code!)