Chillout

👍🏼 I have some more to add, I'll put them in the first post. Currently recovering my device, after formatting it by accident (one of the URLs does that 😉...

While I feared I had bricked my doorbell, I got an additional one, which turned out to be this V5.05 version. I took it apart, and took pictures of the...

that's the old board, which is already hacked 😉 see the dates on the board.

Yes, I thought so too. Unfortunately, my soldering skills (and iron) aren't as precise to be able to solder into such a small spot... I wonder if there's anything useful...

Yeah, that's what I normally use as well, but on the new board, there are no holes, just pads. I need to get myself a smaller soldering tip and a...

Allright all, a small success here! :-D Putting ppsFactoryTool.txt from https://github.com/guino/Merkury720 on it opened up port 8090, and I was able to reach http://IP:8090/proc/cmdline Output: `console=/dev/null LX_MEM=0x3fe0000 mma_heap=mma_heap_name0,miu=0,sz=0x1d00000 pcbversion=BELL5S_S1_V10 sensor=sc3335mipi`...

Dumping useful info here, updating as I go along http://IP:8090/proc/mounts ``` rootfs / rootfs rw,size=17068k,nr_inodes=4267 0 0 proc /proc proc rw,relatime 0 0 sysfs /sys sysfs rw,relatime 0 0 tmpfs...

Yes, ONVIF is working :-) And I've checked most of the file paths I know from my other doorbell by using the http://IP:8090/proc/self/root/ method, and was able to confirm most...

Allright. Too bad.. I just had an idea.. what if we spoof Tuya by using the 'old' Doorbell, but with modified hardware ID and software version, so the Tuya app...

Thanks! Saving to Golf8 format isnt fully functional yet. I'll have to do some work on it, but havent got the time currently.