SWANN NHD-887MSFB failed firmware update

Joined
Mar 7, 2021
Messages
4
Reaction score
0
Location
MYSTERTON, QLD AUSTRALIA
Hello,

my first post here and here I go:

I have 2 SWANN NHD-887MSFB cameras where the firmware update failed (it's a SWANN issue with multi parallel upgrades apparently failing even though the host does allow to do so).
These cameras do NOT have a reset button - I have been advised by SWANN that if that happens the camera is a write-off.

Anyway - I now find that both cameras do start up, identify at IP 192.168.1.168 but are not accessible with a browser. I have however discovered that they do respond to telnet:

C:\> telnet 192.168.1.168
(none) login:

So - I am thinking if I do find the username/password credentials I actually may be able to load the firmware anyway.

Would anyone in these forums know what the credentials may be???

Thanks

Werner
 

alastairstevenson

Staff member
Joined
Oct 28, 2014
Messages
15,963
Reaction score
6,794
Location
Scotland
Not that one -

root:Al19!@:0:0::/root:/bin/sh does work...
Ah, OK - from the Raysharp Firmware thread:

They probably change the hard-coded root password on each firmware version.

I used the firmware download for your camera from here :

And if you wanted to explore the contents, here is a splitter script. The offsets are by visual inspection, will no doubt vary with the version:
Code:
#!/bin/sh
# This script holds the steps to unpack the firmware for the Swann camera that @wernersaurus posted about on ipcamtalk.
# The offsets will very likely be specific to that version of firmware. There is no attempt to
# use logic to make it universal - it's as much a memory-jogger as anything.
#
   
#env                              
#98 03                                            
#00 02                                            
dd if=CHX48M_F128M_SF_ENU_swann_V14.45.5.0-210903_r8970_W.sw of=env bs=1 skip=$((0x0398)) count=$((0x0200))

#V200715
#98 05 00
#D0 59 14                                        
dd if=CHX48M_F128M_SF_ENU_swann_V14.45.5.0-210903_r8970_W.sw of=V200715_1 bs=1 skip=$((0x0598)) count=$((0x1459d0))
                                         
#V200715
#68 5F 14                                        
#04 9A 1F                                        
dd if=CHX48M_F128M_SF_ENU_swann_V14.45.5.0-210903_r8970_W.sw of=V200715_2 bs=1 skip=$((0x145f68)) count=$((0x1f9a04))

#V200720
#6C F9 33                                        
#00 50 8C                                        
dd if=CHX48M_F128M_SF_ENU_swann_V14.45.5.0-210903_r8970_W.sw of=V200720 bs=1 skip=$((0x33f96c)) count=$((0x8c5000))
sudo unsquashfs -d V200720_contents V200720

#V210903
#6C 49 C0                                        
#00 E0 E0 01                                        
dd if=CHX48M_F128M_SF_ENU_swann_V14.45.5.0-210903_r8970_W.sw of=V210903 bs=1 skip=$((0xc0496c)) count=$((0x01e0e000))
sudo unsquashfs -d V210903_contents V210903

#V150327
#6C 29 A1 02                                      
#00 F8 E5 03                                        
dd if=CHX48M_F128M_SF_ENU_swann_V14.45.5.0-210903_r8970_W.sw of=V150327 bs=1 skip=$((0x2a1296c)) count=$((0x03e5f800))

#V190828
#64 0F A5 02                                      
#00 00 20 2D                                        
dd if=CHX48M_F128M_SF_ENU_swann_V14.45.5.0-210903_r8970_W.sw of=V190828 bs=1 skip=$((0x02a50f64)) count=$((0x2d200000))
sudo unsquashfs -d V190828_contents V190828
 
Top