guino
commented
10 months ago The main issue is that we don't have the full source for the application (so we can add the code+compile it) and there's no code in the existing main application to handle the audio packets from the device. So we can't just add a 'command' to initialize the audio since it won't be handled correctly.
I do have a working device now, but that doesn't change the issue. If hey make a newer firmware for it, then we may want to look into that new version as it is possible/likely that it will have RTSP audio handling even if just for factory testing (but we can make use of it).
Right now the only way I know of getting RTSP audio on this device is using https://www.scrypted.app/ .
berobloom
Hey. I have been following your work lately. I was able to patch some lines in order to use the camera offline. Seems you have more experience reverse engineering stuff. I am frustrated that the vendor did not added an audio stream to the RTSP stream. I also found out it is using the LIVE555 library to provide RTSP functionality. Furthermore I found the lines where the streams are created using Ghidra, but sadly not enough experience to patch some audio in it.
If you interested I can donate one camera for you, since you have bricked yours. By the way I was able to get into uboot, to flash the chip. Just short 2 pins during boot and you get into the bootloader.