{"action":"created","issue":{"url":"https://api.github.com/repos/btsimonh/826-x-ip-camera/issues/2","repository_url":"https://api.github.com/repos/btsimonh/826-x-ip-camera","labels_url":"https://api.github.com/repos/btsimonh/826-x-ip-camera/issues/2/labels{/name}","comments_url":"https://api.github.com/repos/btsimonh/826-x-ip-camera/issues/2/comments","events_url":"https://api.github.com/repos/btsimonh/826-x-ip-camera/issues/2/events","html_url":"https://github.com/btsimonh/826-x-ip-camera/issues/2","id":338105441,"node_id":"MDU6SXNzdWUzMzgxMDU0NDE=","number":2,"title":"TTHS005 Camera","user":{"login":"stacksjb","id":2865491,"node_id":"MDQ6VXNlcjI4NjU0OTE=","avatar_url":"https://avatars3.githubusercontent.com/u/2865491?v=4","gravatar_id":"","url":"https://api.github.com/users/stacksjb","html_url":"https://github.com/stacksjb","followers_url":"https://api.github.com/users/stacksjb/followers","following_url":"https://api.github.com/users/stacksjb/following{/other_user}","gists_url":"https://api.github.com/users/stacksjb/gists{/gist_id}","starred_url":"https://api.github.com/users/stacksjb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stacksjb/subscriptions","organizations_url":"https://api.github.com/users/stacksjb/orgs","repos_url":"https://api.github.com/users/stacksjb/repos","events_url":"https://api.github.com/users/stacksjb/events{/privacy}","received_events_url":"https://api.github.com/users/stacksjb/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":9,"created_at":"2018-07-04T01:56:21Z","updated_at":"2018-07-30T16:58:09Z","closed_at":null,"author_association":"NONE","body":"Hello,\r\n\r\nFound this repo by way of this post (http://www.openipcam.com/forum/index.php/topic,1429.msg5004.html#msg5004), the site appears to be nonfunctional (couldn't reply).\r\n\r\nI have a TaoTronics TT-HS005 camera I picked up on a flash deal at one point. The manual is located here: https://www.taotronics.com/media/downloads/88-20005-181_TT-HS005%20User%20Guide%20(PC)%20-%20V1.1(20170307).pdf \r\n\r\nIt connects remotely to the \"ehawk.taotronics.com\" URL, which appears to be identical to the MIPC website (though skinned slightly different), so I believe it is a similar clone. \r\n\r\nI'd like to use locally with my camera server, however I can't seem to locate a feed. I found my way to your post after an NMAP showed a similar \"Tmrmt_hello\" response. NMAP result below:\r\n\r\n> Starting\r\n>  Nmap 7.70 ( https://nmap.org ) at 2018-07-03 19:16 MDT\r\n> NSE: Loaded 148 scripts for scanning.\r\n> NSE: Script Pre-scanning.\r\n>  Initiating NSE at 19:16\r\n> Completed NSE at 19:16, 0.00s elapsed\r\n> Initiating NSE at 19:16\r\n> Completed NSE at 19:16, 0.00s elapsed\r\n> Initiating ARP Ping Scan at 19:16\r\n> Scanning 172.16.0.195 [1 port]\r\n> Completed ARP Ping Scan at 19:16, 0.01s elapsed (1 total hosts)\r\n> Initiating Parallel DNS resolution of 1 host. at 19:16\r\n> Completed Parallel DNS resolution of 1 host. at 19:16, 0.00s elapsed\r\n> Initiating SYN Stealth Scan at 19:16\r\n> Scanning 172.16.0.195 [65535 ports]\r\n> Discovered open port 80/tcp on 172.16.0.195\r\n> Discovered open port 8600/tcp on 172.16.0.195\r\n> Discovered open port 7010/tcp on 172.16.0.195\r\n> Completed SYN Stealth Scan at 19:16, 19.72s elapsed (65535 total ports)\r\n> Initiating Service scan at 19:16\r\n> Scanning 3 services on 172.16.0.195\r\n> Service scan Timing: About 33.33% done; ETC: 19:20 (0:02:42 remaining)\r\n> Service scan Timing: About 66.67% done; ETC: 19:19 (0:01:00 remaining)\r\n> Completed Service scan at 19:19, 151.24s elapsed (3 services on 1 host)\r\n> Initiating OS detection (try #1) against 172.16.0.195\r\n> Retrying OS detection (try #2) against 172.16.0.195\r\n> adjust_timeouts2: packet supposedly had rtt of -1085677 microseconds.  Ignoring time.\r\n> adjust_timeouts2: packet supposedly had rtt of -1085677 microseconds.  Ignoring time.\r\n> Retrying OS detection (try #3) against 172.16.0.195\r\n> Retrying OS detection (try #4) against 172.16.0.195\r\n> adjust_timeouts2: packet supposedly had rtt of -1225849 microseconds.  Ignoring time.\r\n> adjust_timeouts2: packet supposedly had rtt of -1225849 microseconds.  Ignoring time.\r\n> Retrying OS detection (try #5) against 172.16.0.195\r\n> NSE: Script scanning 172.16.0.195.\r\n> Initiating NSE at 19:19\r\n> Completed NSE at 19:19, 0.25s elapsed\r\n> Initiating NSE at 19:19\r\n> Completed NSE at 19:19, 1.07s elapsed\r\n> Nmap scan report for 172.16.0.195\r\n> Host is up (0.0025s latency).\r\n> Not shown: 65532 closed ports\r\n> PORT     STATE SERVICE      VERSION\r\n> 80/tcp   open  http?\r\n> | http-methods: \r\n> |_  Supported Methods: GET HEAD POST OPTIONS\r\n> |_http-title: IPC\r\n> 7010/tcp open  ups-onlinet?\r\n> 8600/tcp open  asterix?\r\n> | fingerprint-strings: \r\n> |   DNSStatusRequestTCP: \r\n> |     y%2&\r\n> |     Tmrmt_hello\r\n> |     1jfiegbp5sfdq\r\n> |   DNSVersionBindReqTCP, GenericLines, GetRequest, HTTPOptions, Help, NULL, RPCCheck, RTSPRequest: \r\n> |     Tmrmt_hello\r\n> |_    1jfiegbp5sfdq\r\n> 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :\r\n> SF-Port8600-TCP:V=7.70%I=7%D=7/3%Time=5B3C1FF9%P=x86_64-apple-darwin13.4.0\r\n> SF:%r(NULL,6C,\"8\\0\\0\\0l\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\|\\xf9\\xb5h\\0\r\n> SF:\\0\\0\\0\\xbc\\x1c\\xc5\\xb6\\0\\0\\0\\0\\xf5\\x8f\\x05Tmrmt_hello\\0\\0\\0\\0\\0\\0\\0\\0\\0\r\n> SF:\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x0e\\0\\0\\0\\xe0\\x1c\\xc5\\xb6\\0\\0\\0\\x001\r\n> SF:jfiegbp5sfdq\\n\\0\\0\")%r(GenericLines,6C,\"8\\0\\0\\0l\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\\r\n> SF:0\\0\\0\\0\\0\\0\\0\\0\\|\\xf9\\xb5h\\0\\0\\0\\0\\xbc\\x1c\\xc5\\xb6\\0\\0\\0\\0\\xf5\\x8f\\x05T\r\n> SF:mrmt_hello\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x0e\\0\\0\\\r\n> SF:0\\xe0\\x1c\\xc5\\xb6\\0\\0\\0\\x001jfiegbp5sfdq\\n\\0\\0\")%r(GetRequest,6C,\"8\\0\\0\r\n> SF:\\0l\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0z\\xf5\\x9dc\\0\\0\\0\\0@\\$\\xc5\\xb6\\\r\n> SF:0\\0\\0\\0\\xf5\\x8f\\x05Tmrmt_hello\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\\r\n> SF:0\\0\\0\\0\\0\\0\\x0e\\0\\0\\0d\\$\\xc5\\xb6\\0\\0\\0\\x001jfiegbp5sfdq\\n\\0\\0\")%r(HTTPO\r\n> SF:ptions,6C,\"8\\0\\0\\0l\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xa8\\?\\x98\\x0f\r\n> SF:\\0\\0\\0\\0@\\$\\xc5\\xb6\\0\\0\\0\\0\\xf5\\x8f\\x05Tmrmt_hello\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\\r\n> SF:0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x0e\\0\\0\\0d\\$\\xc5\\xb6\\0\\0\\0\\x001jfiegbp5\r\n> SF:sfdq\\n\\0\\0\")%r(RTSPRequest,6C,\"8\\0\\0\\0l\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\r\n> SF:\\0\\0\\0\\x81g\\(x\\0\\0\\0\\x008\\+\\xc5\\xb6\\0\\0\\0\\0\\xf5\\x8f\\x05Tmrmt_hello\\0\\0\\\r\n> SF:0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x0e\\0\\0\\0\\\\\\+\\xc5\\xb6\\0\r\n> SF:\\0\\0\\x001jfiegbp5sfdq\\n\\0\\0\")%r(RPCCheck,6C,\"8\\0\\0\\0l\\0\\0\\0\\0\\0\\0\\0\\0\\0\r\n> SF:\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0<\\xd4/5\\0\\0\\0\\x008\\+\\xc5\\xb6\\0\\0\\0\\0\\xf5\\x8f\\x05Tmr\r\n> SF:mt_hello\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x0e\\0\\0\\0\\\r\n> SF:\\\\+\\xc5\\xb6\\0\\0\\0\\x001jfiegbp5sfdq\\n\\0\\0\")%r(DNSVersionBindReqTCP,6C,\"8\r\n> SF:\\0\\0\\0l\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\xb7\\$\\xccV\\0\\0\\0\\x008\\+\\x\r\n> SF:c5\\xb6\\0\\0\\0\\0\\xf5\\x8f\\x05Tmrmt_hello\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\r\n> SF:\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x0e\\0\\0\\0\\\\\\+\\xc5\\xb6\\0\\0\\0\\x001jfiegbp5sfdq\\n\\0\\0\")\r\n> SF:%r(DNSStatusRequestTCP,6C,\"8\\0\\0\\0l\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\r\n> SF:\\0y%2&\\0\\0\\0\\0\\xc4\\x07\\xc5\\xb6\\0\\0\\0\\0\\xf5\\x8f\\x05Tmrmt_hello\\0\\0\\0\\0\\0\r\n> SF:\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x0e\\0\\0\\0\\xe8\\x07\\xc5\\xb6\\0\\\r\n> SF:0\\0\\x001jfiegbp5sfdq\\n\\0\\0\")%r(Help,6C,\"8\\0\\0\\0l\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\\r\n> SF:0\\0\\0\\0\\0\\0\\0\\0\\x1b\\x85\\xc0y\\0\\0\\0\\0\\xc4\\x07\\xc5\\xb6\\0\\0\\0\\0\\xf5\\x8f\\x0\r\n> SF:5Tmrmt_hello\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\x0e\\0\\\r\n> SF:0\\0\\xe8\\x07\\xc5\\xb6\\0\\0\\0\\x001jfiegbp5sfdq\\n\\0\\0\");\r\n> MAC Address: AE:CA:05:FE:91:47 (Unknown)\r\n> No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ).\r\n> TCP/IP fingerprint:\r\n> OS:SCAN(V=7.70%E=4%D=7/3%OT=80%CT=1%CU=34710%PV=Y%DS=1%DC=D%G=Y%M=AECA05%TM\r\n> OS:=5B3C2099%P=x86_64-apple-darwin13.4.0)SEQ(SP=104%GCD=1%ISR=10B%TI=Z%CI=Z\r\n> OS:%II=I%TS=U)SEQ(CI=Z%II=I%TS=U)SEQ(CI=Z%II=I)OPS(O1=M582NNSNW2%O2=M582NNS\r\n> OS:NW2%O3=M582NW2%O4=M582NNSNW2%O5=M582NNSNW2%O6=M582NNS)WIN(W1=3714%W2=371\r\n> OS:4%W3=3714%W4=3714%W5=3714%W6=3714)ECN(R=Y%DF=Y%T=40%W=3714%O=M582NNSNW2%\r\n> OS:CC=Y%Q=)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=Y%DF=Y\r\n> OS:%T=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)T5(R=Y%DF=Y%T=40%W=0%S=Z%A=S+%F=AR%O=%R\r\n> OS:D=0%Q=)T6(R=Y%DF=Y%T=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)T7(R=Y%DF=Y%T=40%W=0%\r\n> OS:S=Z%A=S+%F=AR%O=%RD=0%Q=)U1(R=Y%DF=N%T=40%IPL=164%UN=0%RIPL=G%RID=G%RIPC\r\n> OS:K=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S)\r\n> \r\n> NSE: Script Post-scanning.\r\n> Initiating NSE at 19:19\r\n> Completed NSE at 19:19, 0.00s elapsed\r\n> Initiating NSE at 19:19\r\n> Completed NSE at 19:19, 0.00s elapsed\r\n> Read data files from: /usr/local/bin/../share/nmap\r\n> OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .\r\n> Nmap done: 1 IP address (1 host up) scanned in 188.81 seconds\r\n>            Raw packets sent: 66075 (2.911MB) | Rcvd: 65974 (2.642MB)`\r\n> \r\n\r\nIn the WebGUI, there are two versions listed, neither which match up with the uploads you provided. It appears to be running a slightly different version - I've tried uploading the ones on this site to no avail.\r\n<img width=\"1343\" alt=\"image\" src=\"https://user-images.githubusercontent.com/2865491/42252663-f571540e-7efa-11e8-807f-1ad25358f8df.png\">\r\n\r\nAre there upgrade.sh files I can copy to an SD card, can I modify the upgrade files, or any potential suggestions? I'm happy to pop it open and JTAG it if that's the next steps (done plenty of similar cracking of models; in the past I would unlock Vonage boxes for usage with FreePBX/Asterisk via serial console :))"},"comment":{"url":"https://api.github.com/repos/btsimonh/826-x-ip-camera/issues/comments/408935269","html_url":"https://github.com/btsimonh/826-x-ip-camera/issues/2#issuecomment-408935269","issue_url":"https://api.github.com/repos/btsimonh/826-x-ip-camera/issues/2","id":408935269,"node_id":"MDEyOklzc3VlQ29tbWVudDQwODkzNTI2OQ==","user":{"login":"Phil-Rei","id":41670855,"node_id":"MDQ6VXNlcjQxNjcwODU1","avatar_url":"https://avatars1.githubusercontent.com/u/41670855?v=4","gravatar_id":"","url":"https://api.github.com/users/Phil-Rei","html_url":"https://github.com/Phil-Rei","followers_url":"https://api.github.com/users/Phil-Rei/followers","following_url":"https://api.github.com/users/Phil-Rei/following{/other_user}","gists_url":"https://api.github.com/users/Phil-Rei/gists{/gist_id}","starred_url":"https://api.github.com/users/Phil-Rei/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Phil-Rei/subscriptions","organizations_url":"https://api.github.com/users/Phil-Rei/orgs","repos_url":"https://api.github.com/users/Phil-Rei/repos","events_url":"https://api.github.com/users/Phil-Rei/events{/privacy}","received_events_url":"https://api.github.com/users/Phil-Rei/received_events","type":"User","site_admin":false},"created_at":"2018-07-30T16:58:09Z","updated_at":"2018-07-30T16:58:09Z","author_association":"NONE","body":"> P.S. be careful working with SD cards - it seems to like to format them with it's own FS, as yet not recognised, if the SD card is not that FS. The Uboot seems to have SD support, and you can mount an SD in linux (maybe only if you kill their app?).\r\n\r\nThere is a Tool to Export Data from the SD-Card\r\nhttp://us10.mipcm.com:2080/pub/windows/sdtool/v5.7.1.1807031100/windows_sdtool_v5.7.1.1807031100.exe\r\n\r\nIt seems the export.min.js decrypts the contents of the sd-card useing also the CryptoJS Library"}}
{"actor":{"display_login":"Phil-Rei"}}