5MP Chinese Webcam: No Browser Access, Fixed IP & Telnet Password Solution Needed

Question

Hello. I have this webcam Unfortunately, it cannot be accessed via the website and the Carecam application has very limited functions. I would like to turn off dhcp on the webcam and set a fixed IP because I do not have such a possibility in the router. Anyone playing with this webcam? Did you...

gradek83 · Accepted Answer

Have you reset it to factory settings? Logging in with the login and password is the same login and password, entering ONVIF Device Manager instead of admin admin will allow you to access the information. As for the root password, you need to decrypt it from what I can see, it is rather not long. You would have to throw it in for some online decryption or on Linux with some supporting program Code: text Expand Select all Copy to clipboardroot:X.pOwnufFAWYQ:0:0:root:/:/bin/sh I used to do it with such a cool program but forgot the name: / Firmware info: Spoiler: Show Code: text Expand Select all Copy to clipboardPRODUCT_NAME=XM530_R80X20-PQ_DSSRPSRPS_VIDEOCloudStorageIA_PED_NetIPONVIFHIK_None_General_General_SQUASHFS_V1.000.00.0.R CHIP_ID=XM530 DEVICE_ID=R80X20-PQ EXTENFUNC_PRE=DSS,RPS,RPS_VIDEO,CloudStorage,IA_PED NET_PROTOCOL=NetIP,ONVIF,HIK FIXED_DAYNIGHT_COLORS=None VSP=General ISP=General CompMode=SQUASHFS NET_UPGRADE_FILE=General_IPC_XM530_R80X20-PQ_WIFIXM711.711.Nat.dss.OnvifS.HIK_V5.00.R02.20191025_all.bin BURN_FILE=upall_General_IPC_XM530_R80X20-PQ_WIFIXM711.711.Nat.dss.OnvifS.HIK.20191025.bin LOGNAME=chenlishuo OLD: General_IPC_XM530_R80X20-PQ_WIFIXM711.711.Nat.dss.OnvifS.HIK.20191025.bin NEW: General_IPC_XM530_R80X20-PQ_WIFIXM711.711.Nat.dss.OnvifS_V5.00.R02.20200818_all.bin Hardware: XM530_R80X20-PQ_8M Latest:

sosarek · Answer

You mocked Chinese wonder without a web interface, so what do you expect?

amigos · Answer

I expect that not only via the web interface can be configured. Applications as well as telnet can be used for this. In particular, I expect an answer, whether someone has tried to get through telnet, for example, or knows better system support software. This is not my first Chinese camera and I don't complain about it.
This "Chinese miracle" has a much better image and infrared than Hikvision DS-2CD2032-I, or DS-2CD2132-I 3MP, which also include I have. It can record on a recorder so it meets my expectations. The problem is that DHCP is not turned off, which certainly needs to be done at least after telnet. However, you need to know the password that someone may have already read.

gradek83 · Answer

Check password: Spoiler: Show Code: text Expand Select all Copy to clipboardxmhdipc The camera, if it responds to the ping, but cannot be accessed via the browser, you will probably have to configure it by the appropriate application. The camera from the QRcode reads, for example, the wi-fi data of the local network that you share with it and then it should be active. Check if ONVIF Device Manager can see the camera there, more information can be read. After turning ONVIF Device Manager on, log into ONVIF Device Manager as admin admin. Check what system the camera is on, I bet on the XM530 Check on the applications: YCC365 Plus and iCSeea If you can read it, enter the firmware version. alternatively, if you can, make a DUMP dump of the SPI FLASH memory.

amigos · Answer

Thank you for your response. Unfortunately, the password does not work with root and admin

After checking in ONVIF Device Manager, I have info "Sender not authorized" under all options. This is the one with IP 192.168.8.114
Generally, the webcam fires up, I can connect it to the recorder after onvif and control it via the Carecam application. However, it has blocked network settings. Permanently on DHCP and cannot be changed.

edit:

YCC365 and ICSeea cannot find the webcam.
Below are photos of the tiles and a memory dump. If nothing can be done about it, maybe someone will come in handy someday

sosarek · Answer

Good, since there is no WEB interface, how do you want to configure it?

amigos · Answer

This is my camera information? Is it on the XM530? Pulled out of that bin? As for the root password, I will fight Hydra on Kali. We'll see if anything comes out. The password on Onvif DM does not change anything Still no other information.

gradek83 · Answer

3x yes As for the root password, check this: Spoiler: Show Code: text Expand Select all Copy to clipboard1ia1aiii..iiiiiiii Have you reset the camera to factory settings with the RESET button?

amigos · Answer

Approx. Thanks a lot. Password does not come up. I'll fight tomorrow. I will try to reprogram to the soft you sent. Hope it doesn't overwrite anything but the flash. If so, I will return to the read

I reset the camera several times. The only thing I can change is, after connecting, I can set a different IP as AP, but it only matters for a direct connection to the phone via wifi.

gradek83 · Answer

Take a look here .
After UART, when you connect to the board via the adapter, you can kind of fumble.
Above you are supposed to change the environment variables, and maybe from this level, for example, the bootloader, you can turn off the DHCP server. And enter the IP manually. Only if after restarting the camera it will not turn on again. I didn't play with these blocks that much.
Interesting info worth a look. As you handle Linux, it should probably be understandable to you.

unless I'm not mistaken you will be more or less:

It's just worth checking out first.
You do not connect 3.3V.

I do not know about you, but if you connect the camera to the power supply but without the Ethernet LAN cable plugged in, the camera fires if clean as only with the option of searching for a configuration to connect to Wi-Fi. For this, check if you turn off the power for the camera and connect it to the LAN cable, then if you turn on the info in ONVIF Device Manager for admin admin will appear. And the ability to enter the browser.

amigos · Answer

To connect as AP I have to hold reset and turn on the power. In order for it to connect via wifi, I have to turn it on without a cable. It always connects via the cable when the sponge is connected.
Now I noticed that I still have such data in Carecam as in the screenshot.

In addition, I see that there will be a problem with uploading other firmware because it only has the option of updating via the Internet and it will not go from the file.

UART you described well.

U-Boot 04/04/2014 (Dec 17 2019 - 15:47:31)

CPU: XM530
DRAM: 64 MiB
MMC: arasan: 0
In: serial
Out: serial
Err: serial
Net: dwmac.10010000
Press Ctrl + C to stop autoboot
### CRAMFS load complete: 1468336 bytes loaded to 0x81000000
## Booting kernel from Legacy Image at 81000000 ...
Image Name: Linux-3.10.103+
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 1468272 Bytes = 1.4 MiB
Load Address: 80008000
Entry Point: 80008000
Loading Kernel Image ... OK

Starting kernel ...

Uncompressing Linux ... done, booting the kernel.
y1111111111yyyyyyy1111yyyyyyy1yyyyyyyy111111111111111111111111111111111

I am in no rush so I will slowly search the web how to spoil it

I have to look for some input on the XM530 for the 5MP webcam.

Edit:

For posterity

The root password on this webcam is ccadmin.

44ramzes · Answer

I have the same camera. Can you help me connect it to the NVR. The NVR is detecting but I cannot configure it.

amigos · Answer

I had a problem with that too. Tomorrow I will check how I am connected. Seems he found it as onvif and the problem was logging. In setting the login and password

I have port 8899 set and user: admin. I forgot my password, now I have asterisks. I don't know if it was set by Onvif Device Manager

44ramzes · Answer

Thanks for the help. The Chinese says he doesn't have any password. Onvif device manager shows the message:
The HTTP request is not authorized based on the client authentication scheme 'anonymus'. The authentication header received from the server is "Digest realm =" happytimesoft ", qop =" auth ", nonce =" 4785C05C082104F4 "".

amigos · Answer

I don't know what recorder you have. For me it looks like in the picture. I select the channel and search with the info option. I find my camera as onvif on port 80. I change port to 8899, leave user: admin and no password. It works instantly.

kedzirob · Answer

In my same webcam, the login for ODM is admin and the password is: 123456 What should be the data in empty http fields etc? I tried port 80 and below 443 but it gets service not suported, i changed port to 8899 and below 443 still the same :(

amigos · Answer

If you have the same webcam as I do, you won't change anything in these positions.

kedzirob · Answer

Have you tried to update the firmware from this post, e.g. using ODM? I noticed that there is such a possibility - but I'm not sure if this update is for my camera

amigos · Answer

I did not try. In my free time I will check what you write. Interesting. I didn't notice how I was having fun with ODM.

mipix · Answer

Hello

I also have a camera in this housing.

Firmware: HMT.CM2005-v210104.1124 (displayed on CareCamPro)
SDK Version 2020202

Firmware: V100.ONVIF 16.12 (displayed in ONVIF APP)

From what I noticed, it is some kind of universal housing and inside it you can find quite different equipment. In the offers from Aliexpress, these cameras are supported by various applications. The software can only be changed by online update in the application CareCamPro . Neither version CareCam does not work, does not show the picture. I checked all archives.

The only thing I was able to do with ONVIF is to create a new media profile where you can choose one of the three available image formats from the list.
Profile_000 (H264: 2304x1296 ); Profile_001 (H264: 640x360 ); Profile_002 (JPEG: 640x360 ). You can save a new profile with any name, but the memory of this action remains until the first reset.
The PRESET call and write function also does not work. Selecting any will move the camera all the way to the left and to the top.
The data shows that 5MP is not, but rather 3MP. Such a marketing "chick" like 1 dummy antenna. The Chinese says he sent the wrong model. But the box and the camera itself have 5MP stickers.

What is the real resolution of your cameras?
Is the voice from the microphone blocked by the 50Hz mains hum? For me, you have to shout to the camera for the sound to break through this noise. Changing the power supply does not help.

amigos · Answer

Mine is the same as yours. It is certainly not 5Mpx. Recently, pink has started to appear in my picture. In night mode, the picture is normal black and white. Something went wrong with her. I don't have a problem with the sound. Outside you hear loud and clear. I did not check the other way, but currently I do not have it connected.

damianos1981 · Answer

Hello. In my art of exactly the same device, the resolution in EXIF info is: dimensions 2304x1296, H / V resolution 96 dpi, depth 24 bit. So it's like 3 MP, but it's not crazy. As for the mains hum, for the first days of operation it did not occur at all and the sound was really clear and loud, but after a few days the same problem appeared as with you. From observation while playing with this miracle of technology, when I was looking for loose connections, I noticed that the hum disappears if you touch the backlight heat sink with your finger Overall, my experience with what was supposed to be a camera is terrible. After about a week of use, there was a problem with the sound, a few days later it stopped connecting to the wifi (I tightened the lan), then maybe twice a day I was able to go into the preview - the rest of the time I saw the message camera offline. At the same time, she once saw the SD card and once failed (I tested several different cards), RESET helped for a while. After another week, the paths in the tape connecting the modules broke (I made a new one taken out of some printer), it worked for a few days until the backlight wires broke off, making a small fire on the Poe module PCB If any of my colleagues could share a photo of this plate with me to identify what should be there, I would give francy one last chance to come back alive.

amigos · Answer

Please. It must be the regulator

gradek83 · Answer

JW5027 for ali 20 pieces for 35 PLN

damianos1981 · Answer

Thank you very much.

mipix · Answer

After dismantling the housing and fumbling with the wires, the hum disappeared and appeared randomly. Touching the backlight heat sink or the memory card connector housing cuts this hum to zero. Disconnecting the microphone leaves only the hum of the amplifier. Sometimes, when it does not hum, it is enough to bring your hand closer to the microphone for a few centimeters and the hum returns in direct proportion to the distance of the hand from the microphone. There was also a moment when the sound was clear for several hours. After rebooting and changing the tab, the hum came back.

gradek83 · Answer

If the Chinese did not give such an option, it simply is not there. And the camera is controlled by an app on the phone. If the camera was on a HiSilicon chipset, alternative firmware could be uploaded OpenWRT But I'm afraid it is not so who knows, maybe one day it will arise.

leotdipl · Answer

Hello,

I have 2 cameras like the author of the thread (+ 32GB and 64GB / Samsung / cards).

I need help with the cards microSD Card .
Well, while the cameras (for testing) worked inside the house - the cards were seen.

Since I mounted them outside - both cards They are not seen (included in the equipment).
I get the following message: "Warning. No SD card was found in this IP camera! "

No PC formatting steps help. Of course, you can't access the "FORMAT" option from the app itself - CareCamPro .

comments:
- I will add that I used 10m and 15m low voltage extension cords (possible reason is a voltage drop? - the cameras work without any problems)
2.4GHz WiFi signal strength - 61% and 69%
- or maybe after 1 month (no cloud subscription) the app itself blocks these cards?

Any ideas (?)

Thank you :-)

gradek83 · Answer

Check on other memory cards not larger than 8GB

5MP Chinese Webcam: No Browser Access, Fixed IP & Telnet Password Solution Needed

Post #1

Post #2

Post #3

Post #4

Post #5

Post #6

Post #7

Post #8

Post #9

Post #10

Post #11

Post #12

Post #13

Post #14

Post #15

Post #16

Post #17

Post #18

Post #19

Post #20

Post #21

Post #22

Post #23

Post #24

Post #25

Post #26

Post #27

Post #28

Post #29

Post #30

Topic summary