Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ppsapp patch files only #1

Open
guino opened this issue Dec 8, 2020 · 3 comments
Open

ppsapp patch files only #1

guino opened this issue Dec 8, 2020 · 3 comments

Comments

@guino
Copy link
Owner

guino commented Dec 8, 2020 •
edited
Loading

I will leave this issue open so anyone can post RTSP patch files for their ppsapp -- NOT FOR DISCUSSION/REQUESTS.
The idea is to post patch files (created by users) which are small and are not property of any company which means there's no legal question on being able to share them.

NOTE: If you have a version that supports ONVIF you likely can use it without patching ppsapp -- For this simply change the line #/mnt/mmc01/set onvif_enable 1 to /mnt/mmc01/set onvif_enable 1 (just remove the # ) in custom.sh

4.0.x NOTE: It's been reported that firmware versions 4.0.x may allow you to use ONVIF without patching by following these steps: guino/Merkury1080P#9 (comment) -- it's worth a try if there's no patch for your firmware.

Here's how to patch ppsapp

  • After the hack is installed: power off the device, remove the SD card and take it to a computer
  • Go to https://www.marcrobledo.com/RomPatcher.js/ DO NOT CLICK ON CREATOR MODE
  • Click ‘choose file’ in front of ‘ROM file’ and select the original ppsapp file under /home/app/ppsapp on the SD card (assuming you didn’t do anything to it since the hack was installed)
  • VERIFY that the md5 value displayed matches the md5 from the list below (listed with the patch for your ppsapp)
  • Click ‘choose file’ in front of ‘Patch file’ and select the zip file you downloaded from the list below
  • Click ‘apply patch’ and save/download the file to the root of the SD card (the default file name will likely be ppsapp-rtsp)
  • Rename the saved/downloaded file on the root of the SD card to ppsapp (make sure it has no .txt or any extension) — verify the size is exactly the same as the size of /home/app/ppsapp in the SD card (which should be a few megabytes)
  • Properly eject/unmount the SD card from computer (i.e. windows using the tray icons, linux umount command, etc)
  • Insert SD card to device and power it on
  • Wait for it to boot - you likely will hear the startup sound 2 times. After the 2nd startup time you can try to view the rtsp feed under rtsp://ip:8554 (unless you're on 2.9.7 in which case you use the links provided with the patch).

This section is only is for users POSTING new patches:

The patch file format should be one supported in https://www.marcrobledo.com/RomPatcher.js/ which you can use (in creator mode) to generate the patch file by loading the original and patched ppsapp files. As a standard I recommend naming the patch ppsapp-rtsp.zip (with ppsapp-rtsp.ips inside of it).

At a minimum we need the MD5 and the patch file but it would be nice to include details like below (which is the information from my own device). You can get the information for the table with http://admin:056565099@IP/devices/deviceinfo and the md5 is also displayed on the ROM patcher site when creating the patch (but any md5 hash tool should work).

Bazz doorbell patch

firmware version hardware version original ppsapp MD5 device
ppstrong-c51-tuya2_bazz-2.9.6.20200422 BE8S_H1_V10_915 8c03189bcfa0c691bc2f409c15a329da Bell 8S

ppsapp-rtsp.zip please use steps above to patch it.
snap.cgi and mjpeg.cgi address: 0x0042ac2c (already set in the files from https://github.com/guino/BazzDoorbell)
play.cgi address: 0x42d6e4 (already set in the files from https://github.com/guino/BazzDoorbell)

firmware version hardware version original ppsapp MD5 device
ppstrong-a2-tuya2_geeni-2.7.3.20190720 M7C_AK_V10_1245 8e1e260bab10759e5de5a2a039685d50 Mini 7C

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.jpg and mjpeg.cgi address: 0x002d6648

firmware version hardware version original ppsapp MD5 device
ppstrong-c51-tuya2_geeni-2.9.6 cw017-101W-1080P ec64bd06e807db52f50c3009827ab676 Mini 7S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.jpg and mjpeg.jpg address: 0x00427b3c

(Original post by @russinnes -- Energizer Connect Doorbell)

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_xtremeecho-2.9.7.20200730 BE5S_H1_V10_915 4eb36e8475abde161c5c1290de86b88b Bell 5S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.jpg and mjpeg.jpg address: 0x0046f7f4

(Originl post by @adwiraguna)

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_bardi-2.9.7.20200907 B4S_V10_H1_2063 f4874ce6f40ff1a32e2bc1232e157105 Bullet 4S

ppsapp-rtsp-HD.zip please use this HOW TO PATCH GUIDE
ppsapp-rtsp-SD.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x00475b64

(Original post by @m11tch)
LSC Smart Connect Smart Doorbell

firmware version hardware version original ppsapp MD5 device
ppstrong-c51-tuya2_lcs-2.9.6.20200628 BE8S_H1_V10_433 50ad9c96c65c0e446d8b3d5c8c828957 Bell 8S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0047494c
play.cgi request address: 0x0477404

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_lcs-2.9.7.20201020 BE8S_H1_V10_433 e8900ce76220279a6e33ef65fd1d407b Bell 8S

NOTE: This version is reported have RTSP available without patching at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 -- see: guino/BazzDoorbell#2 (comment)

NOTE2: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, and in that case you can try patching with one of the patches below (I recommend disabling ONVIF first):

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
ppsapp-rtsp-8555.zip same as above but on port 8555 (rtsp://IP:8555) as ONVIF may already be using port 8554, please use this HOW TO PATCH GUIDE

snap.cgi and mjpeg.cgi address: 0x00551634
play.cgi request address: 0x005540ec

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_teco2-2.9.6.20200413 BE5S_H1_V10_433 037ae4e296c18e585044ca54a5fdf4a9 Bell 5S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x00429c2c

(Original post by @lesleyvanrijn)

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_lcs-2.9.7.20201020 BE8S_H1_V10_433 e8900ce76220279a6e33ef65fd1d407b Bell 8S

NOTE: Off-cloud patch only! No RTSP patching, since firmware 2.9.7 has ONVIF support by default.
ONVIF service: http://IP:8000/onvif/device_service with credentials admin:admin

To enable onvif you need to block internet access (and keep it blocked), might change this later:

Modify initrun.sh:
Add above the while loop

if [ ! -e /mnt/mmc01/tuya_config_original.json ]; then cp /home/cfg/tuya_config.json /mnt/mmc01/tuya_config_original.json; fi

Add inside the while loop below sleep 10:

if [ -e /mnt/mmc01/tuya_config.json ]; then
 cp /mnt/mmc01/tuya_config.json /home/cfg/tuya_config.json;
fi

Boot the doorbell once, it will create the tuya_config_original.json file, copy it and rename it to tuya_config.json, open it and set onvif_enable to 1.
ppsapp_patched.ips.zip please use this HOW TO PATCH GUIDE

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_kjell-2.9.6.20200417 M8S_H1_V10_F23 27e750da764d9b9201fa12406399f758 Mini 8S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0042ac2c

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_geeni-2.9.5.20200324 M11S_H1_V10_F23 33cd946bc3e4004db60c612133bdd066 Mini 11S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0044ed94

(Orion Grid Connect Pan & Tilt Camera Model SC009HA)

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c5-tuya2_arlec009-2.9.0.20190808 S5X_H1_V10_F23 6e807138fc0ad43f81c4b9b293b6f7cc Speed 5X

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x00481acc
play.cgi address: 0x004824e0

(Nedis camera model WIFICI20CGY)

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a2-tuya2_teco-2.7.4.20191111 S4C_A1_V10_1245 82b64e6d50aa8a2eca7d5d7eb786d284 Speed 4C

ppsapp-rtsp.zip for normal/online, please use this HOW TO PATCH GUIDE
ppsapp-rtspoffline.zip for no internet usage, please use this HOW TO PATCH GUIDE -- time will be wrong unless you set it manually by adding the ntpd line like HERE

snap.cgi and mjpeg.cgi address: 0x002c8010

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a2-tuya2_geeni-2.7.5.20200520 M7C_AK_V10_1245 c34616420599196a506b00b8b0e7491f Mini 7C

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x002ca428

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a2-tuya2_geeni-2.7.5.20200221 M7C_AK_V10_1245 3be0c33cd393acfa16047e45a5e86aab Mini 7C

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x002c8450

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_teco2-2.9.3.20191230 BE5S_H1_V10_433 f4c20b9b478aeaa413ee999281ab0f4c Bell 5S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0047721c

Author @exaultu

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_geeni-2.9.6.20200528 B4S_V10_H1_2063 a4a50713eaa055b0492d96a3022ba9b5 Bullet 4S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x00427b3c
play.cgi address: 0x0042a5f4

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a2-tuya2_geeni-2.7.3.20190917 M7C_AK_V10_1245 671a7f2b18a289880b1bd3b4f2cafdcf Mini 7C

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x002e2f30
play.cgi address: 0x002e3084

(Orion Grid Connect Pan & Tilt Camera Model SC009HA)

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c5-tuya2_arlec009-2.9.0.20190808 S5X_H1_V10_F23 6b0a73d31c4e01e700c367a570ab910c Speed 5X

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE -- REQUIRES ADDITIONAL SETUP
snap.cgi and mjpeg.cgi address: 0x00481acc
play.cgi address: 0x004824e0

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_bardi-2.10.0.20201222 B4S_V10_H1_2063 49b3952a658586eabd756e3b45574a69 Bullet 4S

This firmware may have native onvif although reported non-functional: guino/BazzDoorbell#20 (comment)
Please note port 80 is disabled in this firmware.

ppsapp-rtsp.zip for RTSP on rtsp://IP:8555 (notice port 8555 instead of port 8554) please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x005b97e8
play.cgi address: 0x005bd0cc

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a2-tuya2_geeni-2.7.6.20210207 M7C_AK_V10_1245 d39b6dc4f80e3d6d8b131b5034f9e4ae Mini 7C

ppsapp-rtsp.zip (HIGH DEFINITION RTSP) please use this HOW TO PATCH GUIDE
ppsapp-rtsp-sd.zip (LOW DEFINITION RTSP) please use this HOW TO PATCH GUIDE
ppsapp-offline.zip (OFFLINE PATCH - CAN BE COMBINED WITH RTSP PATCH) please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x02c8d60
play.cgi address: 0x02c8eb8

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_positivo-2.9.6.20200424 S5S_H1_V10_F23 6db5588886b6f532f35a96db7a7156be Speed 5S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0042ac2c
play.cgi address: 0x0042d6e4

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_akaso-2.9.5.20200331 B3S_V10_H1_2063 5222b303db8c2ff3360ea837d204a07e Bullet 3S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0424634
play.cgi address: 0x04270ec

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a3-tuya2_merkury-4.0.6.20210207 M11S_A2_V10_F37 e5e559715d01cf8060d56ba97ce4a79c Mini 11S

After patching RTSP is available at rtsp://IP:8554/Streaming/Channels/101 and rtsp://IP:8554/Streaming/Channels/102 user admin and password admin. Onvif should be available on port 8000.

NOTE: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, there are also reports that the onvif profile has errors which prevent it from working on certain applications.

ppsapp-onvif.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0375b1c
play.cgi request address: 0x0376328

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_arlec-2.9.2.20191111 BE5S_H1_V10_433 103a20358b922cf9aceeb06426e12296 Bell 5S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x04ee69c
play.cgi request address: 0x04ef0b8

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_teco2-2.9.0.20190801 BE5S_H1_V10_433 29e5ac1ce7b294ad93e848ffb67ec8b8 Bell 5S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0488d4c
play.cgi request address: 0x0489760

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_teco-2.9.8.20201120 M5S_H1_V11_F23 bcd16f22ad6d420a3d33c9ae6231a065 Mini 5S

NOTE: This version is reported have RTSP available without patching at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 -- see: guino/BazzDoorbell#2 (comment). Onvif should be available on port 8000 (user admin and password admin).

NOTE2: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, and in that case you can try patching with the patches below:

ppsapp-rtsp.zip use rtsp://IP:8555 (notice port is 8555 to not conflict with Onvif) please use this HOW TO PATCH GUIDE

snap.cgi and mjpeg.cgi address: 0x056e7d0
play.cgi request address: 0x05720b4

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_shf-2.9.1.20190907 S4S_H1_V10_F23 aab5c31154c90af60927bd17f99d285c Speed 4S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x048d5e4
play.cgi request address: 0x048dff8

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c4-tuya2_geeni-2.7.7.20210207 MINI5C_V12 4f855b587f36c3a92842fe6683331eff Mini 5C

ppsapp-rtsp.zip Required hardware programmer as described in: https://github.com/guino/Geeni720P
snap.cgi and mjpeg.cgi address: 0x03cf358
play.cgi request address: 0x03d0504

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_geeni-2.10.1.20210207 M11S_H1_V10_F23 a5fe2eac0f6aa506707d63558fc800b4 Mini 11S

After patching RTSP is available at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 user admin and password admin. Onvif should be available on port 8000.

NOTE: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, there are also reports that the onvif profile has errors which prevent it from working on certain applications.

I also patched this one to have the old style RTSP available at rtsp://IP:8555 (notice port 8555, no user/password)

ppsapp-onvif.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x056b6f0
play.cgi request address: 0x056efd4

firmware version hardware version original ppsapp MD5 device
ppstrong-c51-tuya2_calex-2.9.6.20200409 M7S_H1_V11_F23 cf48c7045fbf8f0f61b239e8d38e21a7 Mini 7S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.jpg and mjpeg.jpg address: 0x03a32c0
play.cgi request address: 0x042d6e4

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a3-tuya2_merkury-4.0.2.20200929 M11S_A2_V10_F37 f66274e835bd4f1034dc251679bec61e Mini 11S

After patching RTSP is available at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 user admin and password admin. Onvif should be available on port 8000.

NOTE: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, there are also reports that the onvif profile has errors which prevent it from working on certain applications.

ppsapp-onvif.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x037b3ac
play.cgi request address: 0x037bb1c

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_geeni-2.9.1.20190821 F2S_V10_H1_2063 d45f47d6ef4e4ce3b8cac55085e7773d Flight 2S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x048a4fc
play.cgi request address: 0x048af10

firmware version hardware version original ppsapp MD5 device
ppstrong-c51-tuya2_calex-2.9.6.20200522 M7S_H1_V11_F23 c035aef31d4ba53015af696769f336cf Mini 7S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
ppsapp-offline.zip (OFFLINE PATCH - CAN BE COMBINED WITH RTSP PATCH) please use this HOW TO PATCH GUIDE
snap.jpg and mjpeg.jpg address: 0x042ac34
play.cgi request address: 0x042d6ec

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_panam-2.9.2.20191107 B2S_V10_H1_2063 7ffb374de97a9802aba1150a7fbc0f33 Bullet 2S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x04e53bc
play.cgi address: 0x04e5dd8

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_xtreme-2.9.7.20200730 BE5S_H1_V10_915 ba34e6f9e375e0c962b02133434ce55a Bell 5S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.jpg and mjpeg.jpg address: 0x046f7f4
play.cgi request address: 0x04722ac

(If you have this one you likely can update your device -- please check before doing the work)

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_xtreme-2.8.0.20190725 BE5S_H1_V10_915 6e97e7a6dae966eeaf3c4629c678f3b7 Bell 5S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.jpg and mjpeg.jpg address: 0x0480a54
play.cgi request address: 0x0481468

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_teco-2.9.2.20191106 B2S_V10_H1_2063 2e9eb43c6cffce86275b175498d182b1 Bullet 2S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x04ee69c
play.cgi address: 0x04ef0b8

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_istar-2.9.7.20200814 BE5S_H1_V10_433 54c58b61771c65ed1f870385cd77c7d7 Bell 5S

NOTE: This version should have RTSP available without patching at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 -- see: guino/BazzDoorbell#2 (comment). Onvif should be available on port 8000 (user admin and password admin).

NOTE2: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, and in that case you can try patching with the patch below:

ppsapp-rtsp.zip use rtsp://IP:8555 (notice port is 8555 to not conflict with Onvif) please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x05504b4
play.cgi request address: 0x0552f6c

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_laxihub-2.9.7.20201028 S3S_H1_V10_F23 a4cd739334efbb719f21454802dce9d2 Speed 3S

NOTE: This version should have RTSP available without patching at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 -- see: guino/BazzDoorbell#2 (comment)

NOTE2: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, and in that case you can try patching with the patch below:

ppsapp-rtsp.zip use port 8555 (rtsp://IP:8555) as ONVIF may already be using port 8554, please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0551634
play.cgi request address: 0x05540ec

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_akaso-2.9.2.20191108 B2S_V10_H1_2063 609b109497dba30edc69fded30070dca Bullet 2S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x04e84ac
play.cgi address: 0x04e8ec8

(Orion Grid Connect Pan & Tilt Camera Model SC009HA)

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c5-tuya2_arlec009-2.9.6.20200414 S5X_H1_V10_F23 ebdf087b5cd384eadea3e921f0948f2e Speed 5X

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x00434a0c
play.cgi address: 0x004374c4

(Orion Grid Connect Pan & Tilt Camera Model SC009HA)

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c5-tuya2_arlec009-2.9.6.20200702 S5X_H1_V10_F23 e2cc37a3b73bac14c0df2d5ad9edb110 Speed 5X

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0047e71c
play.cgi address: 0x004811d4

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a2-tuya2_geeni-2.7.7.20210311 M7C_AK_V10_1245 7a64af87b9658d832709d3e24c226618 Mini 7C

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x02c17b0
play.cgi request address: 0x02c1fbc

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_kogan-2.9.1.20190821 F1S_V10_H1_2063 ebca33b869c435378420c3cff3d35c67 Flight 1S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x048d5ec
play.cgi request address: 0x048e000

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a3-tuya2_lsc-4.0.6.20210311 M16S_A2_V10_F37 363543651299a6178a4ba77727cc39b5 Mini 16S

ppsapp-onvif.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x037c2f4
play.cgi request address: 0x037cb00

Patch made by: @xinterix

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a3-tuya2_merkury-4.0.6.20210310 M11S_A2_V10_F37 5ea293a904a3a7c1790be74cc5f7b095 Mini 11S

After patching RTSP is available at rtsp://IP:8554/Streaming/Channels/101 and rtsp://IP:8554/Streaming/Channels/102 user admin and password admin. Onvif should be available on port 8000.

NOTE: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, there are also reports that the onvif profile has errors which prevent it from working on certain applications.

ppsapp-onvif.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x03821a4
play.cgi request address: 0x03829b0

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a3-tuya2_electro-4.0.6.20210329 B4S_V10_A2_2063 e4db68f012aaebc9ef0524590a40d70f Bullet 4S

After patching RTSP is available at rtsp://IP:8554/Streaming/Channels/101 and rtsp://IP:8554/Streaming/Channels/102 user admin and password admin. Onvif should be available on port 8000.

NOTE: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, there are also reports that the onvif profile has errors which prevent it from working on certain applications.

ppsapp-onvif.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x037c354
play.cgi request address: 0x037cb60

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a2-tuya2_geeni-2.7.7.20210306 M7C_AK_V10_1245 f0949066c211bfc99b81a333c3f0d219 Mini 7C

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x02c17b0
play.cgi request address: 0x02c1fbc

firmware version hardware version original ppsapp MD5 device
ppstrong-c51-tuya2_globe-2.9.6.20200415 BE8S_H1_V10_915 e30f8238a9770a2d926d2e6176205e36 Bell 8S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.jpg and mjpeg.jpg address: 0x042ac2c
play.cgi request address: 0x0042d6e4

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_akaso-2.10.0.20210803 B2S_V10_H1_2063 186f5fcaa67456547f00d3931e3811f1 Bullet 2S

NOTE: This version should have RTSP available without patching at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 -- see: guino/BazzDoorbell#2 (comment)

NOTE2: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, and in that case you can try patching with the patch below:

ppsapp-rtsp.zip use port 8555 (rtsp://IP:8555) as ONVIF may already be using port 8554, please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x05694b0
play.cgi address: 0x056cd94

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_lcs-2.10.5.20210806 BE8S_H1_V10_433 fa879a12c0194222afb9d3d0e80dafea Bell 8S

NOTE: This version should have RTSP available without patching at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 -- see: guino/BazzDoorbell#2 (comment)

NOTE2: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, and in that case you can try patching with the patch below:

ppsapp-rtsp.zip use port 8555 (rtsp://IP:8555) as ONVIF may already be using port 8554, please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x056e6b0
play.cgi address: 0x0571f94

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a3-tuya2_shada-4.0.4.20210115 M14S_A2_V10_F37 4871b6a7701c50c97c2e852a62361826 Mini 14S

After patching RTSP is available at rtsp://IP:8554/Streaming/Channels/101 and rtsp://IP:8554/Streaming/Channels/102 user admin and password admin. Onvif should be available on port 8000.

NOTE: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, there are also reports that the onvif profile has errors which prevent it from working on certain applications.

ppsapp-onvif.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x037795c
play.cgi request address: 0x037811c

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_kjell-2.10.6.20210818 BE5S_H1_V10_433 ca4501c9b50bf6bbbfddb9057049554d Bell 5S

NOTE: This version should have RTSP available without patching at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 -- see: guino/BazzDoorbell#2 (comment)

NOTE2: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, and in that case you can try patching with the patch below:

ppsapp-rtsp.zip use port 8555 (rtsp://IP:8555) as ONVIF may already be using port 8554, please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x056e6b0
play.cgi address: 0x0571f94

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_geeni-2.10.6.20210819 B4S_V10_H1_2063 53e21b3e67bed930a6e2762629c83d2d Bullet 4S

NOTE: This version should have RTSP available without patching at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 -- see: guino/BazzDoorbell#2 (comment)

NOTE2: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, and in that case you can try patching with the patch below:

ppsapp-rtsp.zip use port 8555 (rtsp://IP:8555) as ONVIF may already be using port 8554, please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x056b5c0
play.cgi address: 0x0056eea4

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a3-tuya2_electro-4.0.7.20210624 B4S_V10_A2_2063 ae716b1f71f808bf8af89e9b0b9f2ae7 Bullet 4S

After patching RTSP is available at rtsp://IP:8554/Streaming/Channels/101 and rtsp://IP:8554/Streaming/Channels/102 user admin and password admin. Onvif should be available on port 8000.

NOTE: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, there are also reports that the onvif profile has errors which prevent it from working on certain applications.

ppsapp-onvif.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0395918
play.cgi request address: 0x0396714

Patch created by @jilleb

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a3-tuya2_lsc-4.0.6.20210311 M16S_A2_V10_F37 323fc1b9791a6dcd37ceabb849f120f4 Mini 16S

OFFLINE PATCH ONLY: After patching the camera should enable ONVIF when it boots disconnected from the internet.
ppsapp-offline.zip please use this HOW TO PATCH GUIDE

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_caliber-2.9.1.20190912 BE5S_H1_V10_433 84032b8961ba1553cea065db3ad2b20a Bell 5S

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x048d5e4
play.cgi request address: 0x048dff8

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a3-tuya2_laxi-4.0.6.20210409 M9S_A2_V10_F37 2efaff6d96431564ab6eb2481538c8ed Mini 9S

This firmware does NOT need patching to use ONVIF/RTSP -- just enable it as described here
OFFLINE PATCH ONLY: After patching the camera should enable ONVIF when it boots disconnected from the internet.
ppsapp-offline.zip please use this HOW TO PATCH GUIDE

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a3-tuya2_general-4.0.7.20210513 BE8S_A2_V10_433 96729b630ee4f088fda3307a2370d050 Bell 8S

This firmware does NOT need patching to use ONVIF/RTSP -- just enable it as described here
snap.cgi and mjpeg.cgi address: 0x0395cbc
play.cgi request address: 0x03964cc

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a3-tuya2_lsc-5.2.4.20211015 M16S_A2_V10_MIS ea82f8dee86047a82404b9bdc715ae75 Mini 16S

This firmware does NOT need patching to use ONVIF/RTSP -- just enable it as described here
snap.cgi and mjpeg.cgi address: 0x0305ba4
play.cgi request address: 0x03069a8

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a2-tuya2_teco2-2.7.4.20191108 M7C_AK_V10_1245 bb735b8460cb39ba723fabaff43b0ee4 Mini 7C

ppsapp-rtsp.zip Please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x2c8000
play.cgi request address: 0x02c8158

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a2-tuya2_geeni-2.7.10.20220105 M7C_AK_V10_GC4 7ad2ec371d1faded1f910c21732fed47 Mini 7C

ppsapp-rtsp.zip Please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x02c17b0
play.cgi request address: 0x02c1fbc

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-c51-tuya2_shf-2.10.6.20210906 S4S_H1_V10_F23 5e442e5843694fd05c825972b4033559 Speed 4S

ppsapp-rtsp.zip Please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x056e6b0
play.cgi request address: 0x571f94

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a3-tuya2_laxi-4.0.6.20210326 M7S_A2_V10_F37 d0ed467db21a9a3101b646da692dae58 Mini 7S

This firmware does NOT need patching to use ONVIF/RTSP -- just enable it as described here
snap.cgi and mjpeg.cgi address: 0x37c354
play.cgi request address: 0x37cb60

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a3-tuya2_feit-4.0.8.20210806 M8S_A2_V10_F37 ab4e7e6afdaca800e0124e106154a2a6 Mini 8S

This firmware does NOT need patching to use ONVIF/RTSP -- just enable it as described here
snap.cgi and mjpeg.cgi address: 0x038c300
play.cgi request address: 0x38d100

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a2-tuya2_geeni-2.7.12.20220621 M7C_AK_V10_1245 745a93ff16b90d37522475845a1e4d27 Mini 7C

ppsapp-rtsp.zip Please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x02c17a8
play.cgi request address: 0x02c1fb4
@guino guino mentioned this issue Dec 8, 2020
Closed
@guino guino pinned this issue Dec 8, 2020
@guino guino mentioned this issue Dec 9, 2020
Closed
@lesleyvanrijn lesleyvanrijn mentioned this issue Dec 12, 2020
Open
@guino guino mentioned this issue Dec 19, 2020
Open
Repository owner deleted a comment from MokanHan Dec 24, 2020
This was referenced Jan 3, 2021
Open
Open
Closed
Repository owner deleted a comment from bcmans Jan 27, 2021
This was referenced Feb 2, 2021
Open
Open
@guino guino mentioned this issue Mar 1, 2021
Open
@SamThing SamThing mentioned this issue Mar 15, 2021
Open
This was referenced Mar 24, 2021
Open
Open
Repository owner deleted a comment from JonSingleton Mar 26, 2021
@guino guino mentioned this issue Mar 31, 2021
Open
Repository owner deleted a comment from Lollo9191 Mar 31, 2021
@guino guino closed this as completed Apr 28, 2021
@guino guino reopened this Apr 28, 2021
This was referenced Apr 28, 2021
Closed
Open
Open
@guino guino mentioned this issue May 5, 2021
Open
Repository owner deleted a comment from danielsan79 May 5, 2021
@guino guino mentioned this issue May 12, 2021
Open
Repository owner deleted a comment from stack0423 May 12, 2021
This was referenced May 14, 2021
Open
Open
This was referenced Jan 11, 2022
Open
Open
Open
This was referenced Feb 12, 2022
Closed
Closed
This was referenced Feb 24, 2022
Open
Open
@guino guino mentioned this issue Apr 3, 2022
Closed
@guino guino mentioned this issue Apr 27, 2022
Closed
This was referenced May 24, 2022
Closed
Open
@andrewjbates
Copy link

andrewjbates commented May 31, 2022 •
edited by guino
Loading

Firmware Version Hardware Version Original ppsapp MD5 device
ppstrong-a2-tuya2_geeni-2.7.8.20210514 M7C_AK_V10_1245 b6243b45108ccc5299f560301ae07d6c Mini 7C

ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE

snap.cgi and mjpeg.cgi address: 0x02c17b0
play.cgi address: 0x02c1fbc

The 2.7.8 firmware is notable for having been compiled with symbols, so in many (most?) instances we can see the original Tuya function names instead of guessing them.

It required an instruction change to always start RTSP in the Echo Show function, but did already call the Echo Show function and so didn't require a instruction change to override a function call.

@guino guino mentioned this issue Jun 2, 2022
Open
Repository owner deleted a comment from andrewjbates Jun 2, 2022
@guino guino mentioned this issue Jul 6, 2022
Open
Repository owner deleted a comment from SoloAsh Jul 6, 2022
This was referenced Aug 5, 2022
Open
Open
@guino guino mentioned this issue Sep 16, 2022
Open
@LucaNeel LucaNeel mentioned this issue Sep 18, 2022
Closed
This was referenced Oct 4, 2022
Open
Open
@desiue desiue mentioned this issue Nov 4, 2022
Open
@guino guino mentioned this issue Apr 4, 2023
Open
@adjivas adjivas mentioned this issue Apr 15, 2023
Closed
@sle118
Copy link

sle118 commented Apr 21, 2023

firmware version hardware version original ppsapp MD5 device
ppstrong-c51-tuya2_bazz-2.10.0.20210801 BE8S_H1_V10_915 ad654f758e11da31a077130709c2a456 Bell 8S

ppsapp-rtsp.zip please use steps above to patch it.
snap.cgi and mjpeg.cgi address: 0x0056e6b0
play.cgi address: 0x571f94

@guino guino mentioned this issue Aug 28, 2023
Open
Repository owner deleted a comment from NigelSamhain Aug 28, 2023
@guino guino mentioned this issue Jun 20, 2024
Open
@halinet
Copy link

halinet commented Nov 17, 2024

firmware version hardware version original ppsapp MD5 device
ppstrong-c51-tuya2_intelbras-2.10.6.20210826 BE8S_H1_V10_433 827ff358c9a8051b463f411d0129ebca Bell 8S

ppsapp-rtsp.zip please use steps above to patch it.
snap.cgi and mjpeg.cgi address: 0x0056f6c0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@guino @sle118 @andrewjbates @halinet