logo elektroda
logo elektroda
X
logo elektroda

Random BK7252U Firmware Dump: Pix-Link 'A9' Cam, CYCAM_RW101P_v19_1010

divadiow 384 2
ADVERTISEMENT
  • #1 21762291
    divadiow
    Level 37  
    Found a BK7252U firmware dump on Discord to be paired with an app I've not seen before.

    No information about the device it came from apart from "its an A9 cam uses the pix-link app".

    It boots on an encryption key free BK7252U.

    Boot log from P0

    Code: Text
    Log in, to see the code


    Then silent on both UARTs.

    AP broadcast
    Screenshot showing Wi-Fi network name PIXA-180431-XLPNL on dark background

    Pairs with the Pix-Link Cam app

    Pix-Link Cam app splash screen with camera icon and version 8.8.20250421 Camera setup screen in Pix-Link app, detected device named PIXA-180431-XI PNI Device list screen showing one online network camera in a mobile app Camera settings screen with QR code and options for Wi-Fi, alarm, and user configuration.

    Strings of interest in the dump

    Code: Text
    Log in, to see the code


    It’s using a PPCS-style (Peer-to-Peer Connection Service) P2P cloud stack

    There are loads of strings like:

    Code: Text
    Log in, to see the code


    ΡΙΧΑ-180431-XLPNL

    The apparent product name and version CYCAM_RW101P_v 19_1010 seen in the app might link it to the RW101P Snowman https://www.pix-link.com/rw101p-snowman
    White security camera with labeled parts: microphone, lens, speaker, power port, Micro SD card slot

    but that doesn't quite tally with it being described as an "A9".

    backup file: https://github.com/divadiow/FlashDumps/blob/m...%CE%91-180431-XLPNL_CYCAM_RW101P_v19_1010.bin

    Partitions info
    Code: Text
    Log in, to see the code
  • ADVERTISEMENT
  • #2 21762696
    p.kaczmarek2
    Moderator Smart Home
    Interesting, but that's a separate app, not just a reskin of another solution?

    This IP - http://120.79.76.240:9093 - seems to be offline. It doesn't look local. Strange that they use HTTP.
    Helpful post? Buy me a coffee.
  • #3 21762700
    divadiow
    Level 37  
    Well, immediately after playing with the BK7252U dump I opened a tiny BK7252N device that uses the CY365 app. So PIX-LINK could be re-skin of that, it's all the same inside.

    CY365 app splash screen with a camera logo and version numberCamera setup screen with QR code and options for Wi-Fi, user, and device settings
ADVERTISEMENT