ppsapp patch requests #1
Comments
|
You're amazing man! I'm so happy you finally got it working, you genius :) Could you please patch my ppsapp? |
|
@solidssss your ppsapp patch is posted here: guino/ppsapp-rtsp#1 (comment) |
|
@guino Hmm, it's not working properly. I can enter the adresses http://user:password@IP:8080/cgi-bin/snap.cgi and http://user:password@IP:8080/cgi-bin/mjpeg.cgi, but they do not display anything, it's just empty. I've tried to get the RTSP stream in VLC and other softwares, but it's not working either. |
|
@solidssss are you able to telnet into the device ? |
|
Oh sorry, I didn't know about the rompatcher. I took my home\app\ppsapp & ppsapp-rtsp.ips and patched them, put them on the root of the SD card as 'ppsapp' without any file extension but I still cannot get RTSP to work. I'm still supposed to keep the old ppsapp in the home\app\ folder right? I had missed the part about patching the adresses of mjpeg/snap.cgi. After I patched the adreses it works! But I really would want the RTSP to work too. |
|
that's progress nonetheless. After you copied ppsapp (the one you got from rom patcher) to the root of the SD card (as ppsapp) -- did you reboot the device ? You should hear the startup sound 2 times when the device boots -- RTSP should work after the second startup sound at rtsp://IP:8554 - please confirm you heard the startup sound 2 times and confirm the rtsp URL. I checked the patch and everything looks good so I would expect the patch to work. |
|
Yes, I rebooted after I placed the patched ppsapp. I do hear two startup sounds, but I cannot get anything with VLC, Home Assistant or Perfect IP Camera app. |
|
Ok, you can't disable internet access to the device -- if you block it the device won't fully start (and won't start RTSP). Please allow internet access to the device then try again. If that doesn't fix the issue we'll have to do some debugging, in which case: please do this:
Without the log to review there's not much I can do. |
|
Oh my god, it's working now! Thank you so much for your hard work @guino |
|
softwareversion":"2.7.5","hardwareversion":"M7C_AK_V10_1245","firmwareversion":"ppstrong-a2-tuya2_geeni-2.7.5.20200520 --deleted-- If you would be so kind! |
|
@solidssss These devices are very slow so yeah it takes some time for it to boot up entirely and startup the application completely. I appreciate your feedback and donation! @Dsm20001 I'll take a look soon and post a patch for it. |
|
@Dsm20001 should be done here: guino/ppsapp-rtsp#1 (comment) |
|
Hi guino! Thanks for all the work so far! I've searched the current patch list for both my firmware and ppsapp md5 and not seeing it there. Since I looked over what would be required to do the patch myself, and that's way outside my wheelhouse, here's the requested info for whenever you or someone else has the time: "softwareversion":"2.7.5","hardwareversion":"M7C_AK_V10_1245","firmwareversion":"ppstrong-a2-tuya2_geeni-2.7.5.20200221" --deleted-- Thanks! |
|
@Mathurian I'll patch it soon. |
|
@Mathurian this is done here: guino/ppsapp-rtsp#1 (comment) |
|
Awesome! Thank you! |
|
Thank you finally got it. I had to use a different Rom Patcher, but finally got it!!!! now if i can get my outdoor camera's the same way lol. Thank you so much!!! |
|
Here's another Merkury 720 ppsapp - same version/firmware as your initial posting on this camera, but a different MD5 hash. Smart Home Camera - Mini7C |
|
@russinnes I will patch it soon. |
|
@russinnes I think you may have got a bad copy of ppsapp (the one you posted above). It is mostly the same file as guino/ppsapp-rtsp#1 (comment) but there's a 64Kb section in the file that is different and appears to be all 'garbage'. This could be an issue with the SD card or just a side-effect from powering off the camera too fast after applying the hack (to get the file).
Please notice I am asking you to rename the home directory instead of deleting it so the new home directory is saved in a different area of the SD card (to rule out an issue with bad sectors). Let me know the results. |
Good catch - Was just about to open it to patch it manually. |
No Go - Here's round 2 attached (unpatched) |
|
@russinnes This one has a different bad area, meaning: the part that was bad on the 1st one you posted is now ok, but there's a different section of the file that is bad. I am 100% sure now that the firmware is the same as the one I posted on guino/ppsapp-rtsp#1 (comment) -- You may want to repeat the process above but instead of using /devices/reboot to restart it, you can login by telnet and execute /mnt/mmc01/busybox sync then umount /mnt/mmc01 then remove the card and copy ppsapp and check the md5. |
|
3rd time finally got the same MD5 as your initial patch. Out of interest (and perhaps the issue), this camera is paired with the generic tuya app - there is no setting for record. Upon detection of SD, it is always recording, with no option to turn it off. It wouldnt unmount via any normal means as it was constantly being written to. I ended up killing the ./ppsapp PID via telnet to finally get it to stop writing. Hence the prior bad sectors/writes/etc. Try #4 coming up. |
Like a charm - unbelievable. Good catch. |
|
@russinnes yes, it records 24/7 by default with no settings in the tuya app but you can modify it on the json file like I did in my write up so it only records motion (or disable it). You can also turn off the LED and/or disable/force night mode (I did it to try), but like you said no settings in the app for any of that. |
|
For anyone following the project I just uploaded some changes to snap.cgi/mjpeg.cgi along with a jpeg-arm file which should prevent the occasional image glitches that we had with the original version (which was very much a rig). The new version uses a custom written C application with a double buffer to verify the buffer/image wasn't changed by the device while reading it. If you use snap.cgi/mjpeg.cgi and want to take advantage of the glitch free version you have to copy jpeg-arm to the SD card root and copy snap.cgi + mjpeg.cgi (to cgi-bin/) and make sure the address is set for your ppsapp. |
Ran the native app, an RTSP stream, and an mjpeg stream all simultaneously and only capped at ~65% cpu. Much cleaner than using dd! I'm going to add some custom motion detection scriptability to what you have done, I've been digging around a little bit, just need to dig out a VM with the arm toolchain to test. |
|
@Stormtracker221 NO - it should NOT show as a text document - this likely means you have .txt in the filename and you need to enable ‘show extension’ in the settings to be able to remove the extension and make the filename just ‘ppsapp’. Or just use a ‘good’ we browser that saves the file with the correct name and avoid dealing with the filename. |
|
@guino Wow, that was easy! |
|
Removed |
|
Hello Guino, thank you for you work. I managed to make the hack work on my camera and enable Telnet. Can you help me please ?
Thank you :) |
|
@pbethune98 I can patch it for you but I need you to post a zip with your ppsapp so I can do it. |
|
Hi, |
|
@pbethune98 Please try this patch and let me know so I can post it in the main list (I expect it to work): ppsapp-rtsp.zip Please follow this how to patch guide guino/ppsapp-rtsp#1 (comment) |
|
Hello @guino I confirm you that it is working well :) Thank you very much ! |
|
Hi, do you have a patch for Would be a big help, I got like 8 of these cameras everywhere. :) |
|
@mikaelssen it is the one listed above: #1 (comment) |
|
Hey I would appreciate some help with a patch for this Merkury 720p version: I was attempting to patch it myself but Ghidra does not show any functions in the decompiler so I've not been able to get very far with it. Thank you! |
|
@illest23 post a zip of the ppsapp file and I can take a look. |
|
@guino ah sorry, here it is |
|
Try this patch ppsapp-rtsp.zip following this HOW TO PATCH GUIDE I'd appreciate it if you let me know it works ok so I can post it in the main list of patches -- I don't expect any issues with it (should just work). |
|
@guino So it seems the patch took and I am able to navigate to the snap and mjpeg links, however there are issues with them, and the RTSP stream is not working at all. snap link mjpeg link rtsp not streaming Should this all go into a separate issue thread? |
|
@illest23 snap/mjpeg should work even without the patched ppsapp on the SD card, so just make sure the address is set in the snap/mjpeg cgi file and it should work even without patching ppsapp. For RTSP the patched ppsapp should be in the root of the SD card and should be named exactly ppsapp and you need to restart the device after the file is in place. feel free to post a zip of the patched ppsapp an/or the snap/mjpeg cgi file so I can review them — if everything is fine I can double check the patch and addresses. |
|
@guino Alright so snap/mjpeg are fixed, had a typo in both somehow, haha. I double checked the ppsapp and even repatched and retried it, still no luck. I'll attach it here. Thank you so much for your help! |
|
@illest23 your patched ppsapp looks fine, I'll double check the changes I made and let you know. Meanwhile the only thing I can recommend is that you double check the file is named ppsapp and it is in the root of the SD card (not on any directory like home/app). If you edited anything in initrun.sh or custom.sh you may also want to check that the editor you used didn't add any windows end-of-line characters which would break the scripts (I doubt that's the case since you say mjpeg/snap are working now). Do you hear the startup sound 2 times when you power up the device ? |
|
@guino yes it is placed in the root of the sd card and named only ppsapp with no extension. Yes it played two startup sounds. Those two .she files are fine as well. |
|
@illest23 sorry I've been traveling and have not had a chance to double check the patch for you but it is still in my list of things to do so I'll take a look at it when I have a chance (just providing an update). |
|
@illest23 sorry it took so long busy with travel/work/life. I had a chance to review the patch and would like you to try the following: Place the patched ppsapp on the root of the SD card named as ppsapp (no .txt, etc on the name). You should likely hear 2 (TWO) startup sounds when the device boots up -- that would be indication that the patched ppsapp is running. If for some reason it still doesn't work I'd like you to zip the contents of the SD card (without the SDT folder) and post it so I can review it. |
|
@guino the 2.7.10 patch It is working for me able to get the rtsp working fine other then the stream being low fps and freezing is there a better way to view the live feed? |
|
@Randompersonthe thanks for the feedback. These devices are very low power and 2.4ghz wifi can be quite crowded and full of interference so that's likely the reason for low fps/lag/freezing (it is my experience at least). My devices always lag when they detect motion (and start a notification/recording), and other times I have slow stream (even from their phone app) when there's congestion on the 2.4ghz band from other routers, etc. Not much we can do other than try a different wifi channel. |
|
Hey I would appreciate some help with a patch for this Merkury 720p version: Attached is the original rom. |
|
@agentben96 sorry I had not yet put it in the main list but there's a patch for that firmware already: guino/ppsapp-rtsp#44 (comment) |
|
/@guino, wondering if you could create a patch for the following. Thank you! I realize that this is probably not the right place to post this, as this is a Bazz doorbell. Edit firmwareversion:ppstrong-c51-tuya2_bazz-2.10.0.20210801 |
|
@sle118 sorry I haven't had much time to work on this -- nice going on getting it patched yourself! |
|
I've got the CW051 camera (See: https://github.com/guino/Merkury1080P and https://github.com/DouglasFreshHabian/MerkCamFirm). I tried following guino's instructions, but no ports opened up on my cam (nmap shows ports 80, 8090 and 8554 are still closed). Any ideas? |
|
Just for anyone looking at this in the future there was some info on the CW051 camera posted here: guino/Merkury1080P#52 |
and others
IF your ppsapp is not listed HERE, feel free to post your ppsapp patch requests here along with the firmwareversion, hardwareversion information from http://admin:056565099@IP/devices/deviceinfo for your device along with the MODEL (ie merkury 720p or geeni 720p, etc).
I will look at it when I have a chance and post it in the list above (and will remove it from here).
The text was updated successfully, but these errors were encountered: