search

guino / BazzDoorbell

125 stars 22 forks source link

Another actions #57

Open Benoulimou opened 2 years ago

Benoulimou commented 2 years ago

Hello, I'm looking to find out if it's possible to recover the actions of the doorbell? by mqtt for example. I'm not sure if it's possible. I'm not sure if it's possible to get the rtsp stream on the BE8S_S1_V10_433 in firmware 5. There is no need to do a hack. It can be recovered easily.

Thanks for the work, it's great!

guino commented 2 years ago

All firmware 5.x we have seen is non-linux, so there’s no easy way to hack it. You’re welcome to try the existing hacks and see if you get to telnet into it, if you get telnet working you can parse the log the get motion and doorbell push notifications sent with mqtt or web requests.

without hacking you’re limited to whatever is available on the app, ie some apps/brands allow for IFTTT alerts. My tuya app supports ifttt but my doorbell brand does NOT so hacking was the only way for me.

Benoulimou commented 2 years ago

Thank you for your quick response.

So I have to do as you do for your doorbell if I want to find the mqtt request?

guino commented 2 years ago

For mqqt you would need to hack it and setup the log parser, you don’t need to patch ppsapp for rtsp/onvif for mqtt.

you can try the steps to hack it on any firmware if it doesn’t work it won’t hurt anything.

Benoulimou commented 2 years ago

For information on tuyIO I found this I do not know if it can be useful

curl --request GET "https://openapi.tuyaeu.com/v1.0/devices/sonnette/functions" --header "sign_method: HMAC-SHA256" --header "client_id: x9" --header "t: 163" --header "mode: cors" --header "Content-Type: application/json" --header "sign: DF7B3" --header "access_token: 445"

{ "code": 1106, "msg": "permission deny", "success": false, "t": 1635062012403 }

guino commented 2 years ago

@Benoulimou I am not familiar with the tuya api and we have never used it for anything here other than try to get URLs for firmware updates (which has been of little to no help). If you tried the steps described in #13 and https://github.com/guino/Merkury1080P#conclusion and they did not work then the only thing that may help on anything is to get a firmware dump (required hardware flash programmer and likely soldering work) -- but even if you wanted to go down that route i will tell you in advance that all firmware 5.x we have seen does not run linux (runs rtos) and will not be compatible with anything we have done here.