guino
commented
2 years ago @six1 I want to make sure you followed step 5 from #13 -- your files seem ok but it does not seem like the hack was installed correctly. the '.../hack' URLs you posted do not 'install' the hack they only serve to verify if the hack was installed.
If you followed step 5, there are two possibilities:
1-you could have a defective reset button on the device (which you can try by pressing it to see if it does anything after booting up). A while back I remember a user that was able to apply the hack to one device but not the other despite the fact the reset button appeared to be working.
2-your SD card may not be working correctly (during boot). You could try a different SD card or formatting the SD card (FAT32) with a different tool/computer. I have seen reports of people not being able to apply the hack when the SD card was formatted by the phone app and others that only had success after formatting it in linux. I personally have seen my device not work with some SD cards on boot, but it reads all cards after booting up -- what I am trying to say is: despite the fact that the SD card is working (to record video) it doesn't mean it is working during boot which is what we need to apply the hack. After the hack is installed you can use any card you like (even one that did not work to install it).
six1
ThijsMaas
sinclairfr
KapitanKapitan
aladin2000
Hi, i own a Doorbell from Action Market Germany. I want to hack, because i want to use rtsp. So far, I tried all, i can found, but no luck at all :-)
I modified ppsFactoryTool.txt, and Port 80 is working.
Files on SD Card: ppsFactoryTool.txt, env, initrun.sh, ppsMmcTool.txt
http://admin:056565099@192.168.1.6/devices/deviceinfo
{"devname":"Smart Home Camera","model":"Bell 8S","serialno":"061208572","softwareversion":"2.10.5","hardwareversion":"BE8S_H1_V10_433","firmwareversion":"ppstrong-c51-tuya2_lcs-2.10.5.20210806","authkey":"tl0OfBcSMHd76hUHDoeqL96d60MaZotE","deviceid":"pp01d28dffbde156c4e0","identity":"MR2005212301201042","pid":"aaa","WiFi MAC":"7c:25:da:1b:c9:e9"}http://admin:056565099@192.168.1.6/proc/cmdline
mem=37M console=ttyAMA0,115200n8 mtdparts=hi_sfc:192k(bld)ro,64k(env)ro,64k(enc)ro,64k(sysflg)ro,3136k(sys),4352k(app),320k(cfg) ppsAppParts=5 ppsWatchInitEndhttp://admin:056565099@192.168.1.6/proc/self/root/etc/init.d/S90PPStrong `#!/bin/sh
export PATH=/usr/bin:/sbin/:/usr/sbin:/bin
RED="[1;31m" NORMAL="[0;39m"
echo "${GREEN} 2015 PPStrong Tech Cop.Ltd.${NORMAL}"
mkdir -p /opt/pps MTDNUM=
cat /proc/cmdline | sed 's/.*ppsAppParts=\([0-9]\).*/\1/'debug
MTDNUM=5
echo "------------->mtdnum:${MTDNUM}"
case $MTDNUM in 5) mount -t cramfs /dev/mtdblock$MTDNUM /opt/pps break ;; 7|8) mount -t cramfs /dev/mtdblock$MTDNUM /opt/pps break ;; 0)
sleep 10 mount -t vfat /dev/mmcblk0p1 /opt/pps break ;; *) MTDNUM=5 mount -t cramfs /dev/mtdblock$MTDNUM /opt/pps ;; esac
echo "/opt/pps/" > /tmp/PPStrong.runpath [ -e /opt/pps/initrun.sh ] && cp /opt/pps/initrun.sh /tmp/PPStart && chmod +x /tmp/PPStart && /tmp/PPStart`
I tried to change Sleep Time in initrun.sh from 10 to 30 seconds.
I also tried following to execute hack: http://admin:056565099@192.168.1.6/proc/self/root/tmp/hack and
http://admin:056565099@192.168.1.6/proc/self/root/mnt/mmc01/hack
but result is always: HTTP ERROR 500
Device can write to sd card, if i enable motion detection. (data files) What else can i do?
Doorbell.zip