#Best cameras for blue iris update
#Best cameras for blue iris software
#Best cameras for blue iris code
#Best cameras for blue iris crack

#Best cameras for blue iris update

The camera exhibited a remarkable lack of behavioral reform: no new ports opened, nothing.ДЇor comparison, I downloaded and unpacked a firmware update for a different Reolink camera that did support RTSP. $ flashrom -p ft2232_spi:type=2232H,port=A -w pwned.bin $ dd if=new-squashfs.img of=pwned.bin bs=1 seek=$((0x370000)) conv=notrunc $ mksquashfs new-squashfs-root/ new-squashfs.img -comp xz -b 262144 -all-root -noappend I desoldered the flash and soldered on a socket instead. I was wanting to try out a really neat little SOIC socket I had discovered and ordered on Taobao a little while back. My previous disassembly of the camera has already indicated that it uses SPI NOR flash-bog standard for a small Linux system like this.

#Best cameras for blue iris crack

With the protocol not immediately accessible, it was time to crack this camera open. This is just a cost-saving measure and definitely not vendor lock-in, hmmm? Pwning the camera So вЂњallвЂќ IвЂ™d have to do is reverse engineer the rest of the protocol.Д®asy peasy, right? Why doesnвЂ™t this camera support RTSP?ДЄs a quick aside, itвЂ™s natural to wonder why this camera doesnвЂ™t support RTSP and/or ONVIF.ДЄfter all, plenty of other Reolink cameras do.Д«ecause IвЂ™d like to give them the benefit of the doubt, IвЂ™ll propose the possibility that Reolink ran out of storage on this camera and had to axe some features.ДЄfter all, a 16MB flash chip would cost a whole 20 cents extra. I felt pretty confident that the underlying video was using a well-known protocol (especially since the camera seemed to have dedicated video encoding hardware). In order to figure out whatever encryption and/or obfuscation the protocol was using, I planned to reverse engineer the firmware. Now Wireshark could show me the payload lengths and message IDs. This was easy and fun: Wireshark lets you write dissectors in Lua ( disclaimer: your definition of fun may vary). With what I knew, I was able to write a вЂњBaichuanвЂќ protocol dissector for Wireshark using MikaвЂ™s awesome tutorial. In my experience, such tools immediately pay back your time investment by a factor of 4 or more. Dissecting traffic with WiresharkДЄlways, always spend time developing debug or analysis tools. Time to extract what I could-the header layout was correct-and move on.

#Best cameras for blue iris code

The payload appeared to be encrypted in my captures.ДЇurthermore, the code wouldnвЂ™t even run due to some questionable pointer juggling. On a lark, I Googled this, and actually found a project on GitHub from 2015 which was attempting to retrieve data from Swann cameras!ДЄ quick look at the code told me that although they share the sync word and packet header, the protocols for my camera and these older cameras were very different. The only thing that jumped out to me was the appearance of a sync word at the beginning of each packet, 0xf0debc0a.

#Best cameras for blue iris software

The end result is a new piece of open-source software called Neolink, which allows Blue Iris, Shinobi, or other NVR software to receive video from unmodified Reolink cameras.ДЄs a first step, I fired up Wireshark and captured traffic between the camera and its official Reolink PC client 1. Most non-triumphant.Д«ogus enough that I decided to pwn the camera, reverse engineer the protocol, and write my own software to get the video stream. This was, in the immortal words of Bill and Ted, bogus. Then, barely outside my return window, Reolink updated their support page to say that the cameras would only work with their 8-channel NVR or proprietary viewer apps. However, I bought these cameras because I believed they supported open standards such as ONVIF, so IвЂ™d just swap the NVR for a copy of Blue Iris running on my server.ДЄt the time, the Reolink support page clearly indicated that all of their non-battery-powered cameras supported RTSP.ДЄfter the system was installed, it became apparent that the cameras did not in fact support RTSP-the only port open on them was port 9000. Unfortunately, the NVR is pretty anemic: itвЂ™s clearly an existing model with slight changes to support 4K cameras, and it struggles to support more than one viewer at a time. It came in a вЂњkitвЂќ of six cameras and an NVR (a dedicated recording box that also powers the cameras). ItвЂ™s fairly nice hardware, actually-it has a 4K video sensor, a microphone, power over Ethernet, and is nominally waterproof. Way back in late 2019, I dissected a Reolink B800 IP camera to demonstrate the various parts of an embedded Linux system. A brief history of the Baichuan protocol.