logo elektroda
logo elektroda
X
logo elektroda
Advanced Search
logo elektroda

Flashing Chinese IP Camera

bartord1ys 657 16
ADVERTISEMENT
Reply | New topic
  • #1 21542380
    bartord1ys
    Level 2  
    Hello, I would like my camera to be compatible with the home assistant. It is a cheap camera from China, which has very weak software that does not allow it to transmit RTSP. I tried to upload some firmware from GitHub, which made the camera sit in recovery mode and wait for the next firmware. I didn't have a backup, so the old one was gone, but I have another device of the same kind, so if I needed it, I can try to recover the firmware from that one and upload it to this one. I performed all activities with a UART adapter and I would like to send the new software with it as well, and I used phoenixMC to send the software. I'm a beginner in this topic and I would like to ask for a detailed explanation of what I can do in this case.

    Close-up of a green printed circuit board with integrated circuits, connectors, and wires.
    PhoenixMC program window showing a Verify boot error! message during device bootloader verification on COM4.
    AI: Could you please provide the exact brand and model of your IP camera?
    idk
    AI: Which specific firmware from GitHub did you try to upload (a link or the name would be helpful)?
    some of these https://github.com/openshwprojects/OpenBK7231T_App/releases
  • ADVERTISEMENT
  • #2 21543205
    p.kaczmarek2
    Moderator Smart Home  
    Do you have original 1MB flash backup?
    This is XF16, which is XR872. Our firmware can boot onto it, but don't have camera driver yet, so it won't provide image...
    Also calling - @divadiow
    Helpful post? Buy me a coffee.
  • #3 21543209
    bartord1ys
    Level 2  
    I don't have it, but if it's required, I have another identical camera and I can do it on it
  • ADVERTISEMENT
  • #4 21543214
    p.kaczmarek2
    Moderator Smart Home  
    Try to read flash of second one, here is phoenixMC translation:
    https://www.elektroda.com/rtvforum/topic4115856.html
    And flash to the broken one, but I'm not sure about the MAC and AP name.

    Please also attach flash dump here - unless, it was paired with your account? Then maybe not...

    Here is video access method without flashing, maybe it will work: https://www.elektroda.com/rtvforum/topic4117962.html
    Helpful post? Buy me a coffee.
  • ADVERTISEMENT
  • #5 21543223
    divadiow
    Level 34  
    p.kaczmarek2 wrote:
    Please also attach flash dump here - unless, it was paired with your account? Then maybe not...

    happy to receive privately so I can reset, join to test AP, reset, if this is the case

    Would be good to get another XF16 dump.

    p.kaczmarek2 wrote:
    This is XF16, which is XR872

    ah. I see you tried to flash XR809 file

    If you have any more pics of the outside of the cam, any labels, other side of PCB, that would be cool too. thank you
  • #6 21543343
    bartord1ys
    Level 2  
    >>21543214 I'll try to do it later

    Dodano po 2 [minuty]:

    >>21543223
    Close-up of a circuit board with wires inside a plastic casing.
    Close-up of a camera module with a lens, PCB board, and a connector with colored wires.
    Electronic camera module with a visible lens and connected wires.
    Open casing of an electronic device showing a circuit board and a small motor.
    White surveillance camera on a rectangular mount, placed on a light surface.
    A white surveillance camera with two antennas stands on a light-colored surface.
  • #7 21546343
    bartord1ys
    Level 2  
    @divadiow
    Do you have any firmware for this camera that will allow me to connect via rtsp?
  • #9 21546393
    bartord1ys
    Level 2  
    Thx, I will try it
  • #11 21547328
    divadiow
    Level 34  
    did you manage to take a backup of the flash?
  • #13 21552521
    bartord1ys
    Level 2  
    >>21547328I will do it tomorrow
  • #14 21553840
    bartord1ys
    Level 2  
    how can I do it via UART?
  • #15 21553929
    divadiow
    Level 34  
    well it looks like these two are RX/TX. Do you get text log output from TX at 115200 baud from one of them?

    Part of a PCB with a connector and a marked area for a jumper or component.
  • ADVERTISEMENT
  • #16 21554242
    bartord1ys
    Level 2  
    I have access to the UART, I also got the password but half of the commands of this system and there are not many of them are deleted. I will send logs and command list tomorrow
  • #17 21554303
    divadiow
    Level 34  
    well if those two are definitely RX/TX and assuming the original firmware has the console stuff enabled then you should just be able to dump with PhoenixMC without grounding any PB02/PB03 type pins.

    See here for backup process, it also applies to XF16 https://www.elektroda.com/rtvforum/topic4115856.html

    Simply ignore the instructions to ground PB02/PB03 and connect up RX/TX to USB-TTL. Then run PhoenixMC and see if you get open comm port! message and are able to dump to file.
Reply | New topic
Report a violation of the law

Topic summary

The discussion centers on flashing firmware to a low-cost Chinese IP camera lacking native RTSP support, aiming for Home Assistant compatibility. The camera uses an XF16 board with an XR872 chip. The original firmware backup is missing, but a second identical camera is available for flash dumping via UART using a USB-TTL adapter and PhoenixMC software. Users recommend reading the flash from the working unit and writing it to the bricked one, noting concerns about MAC address and access point name preservation. Attempts to flash incompatible XR809 firmware caused recovery mode activation. No known RTSP-enabled firmware exists; the closest alternative is the third-party cam-reverse project, which supports MJPEG streaming but not RTSP. UART access provides console output at 115200 baud, facilitating firmware dumping without grounding specific pins. Detailed guides and community resources on flashing and recovery processes are referenced, including Elektroda forum threads and GitHub repositories. The user is advised to capture flash dumps, share logs, and provide additional camera images for further assistance.
Summary generated by the language model.
ADVERTISEMENT