Kruidvat Smart Indoor IP Camera

[muebau]

Hello,
I tried this Tuya camera and it works perfectly with the Tuya app.
https://www.kruidvat.nl/kruidvat-smart-indoor-ip-camera/p/5314128

Every time I tried the method described in this repo I end up with a sd card with the following content.

Is this a sign that this camera does not work with this repo or is there something I miss?

# ls -l
total 39M
-rw-r--r-- 1 user user    0 Okt 24  2015 dg00000.avs
-rw-r--r-- 1 user user    0 Okt 24  2015 dg00001.avs
-rw-r--r-- 1 user user 5,8M Nov  4  2021 dg00002.avs
-rw-r--r-- 1 user user    0 Okt 24  2015 dg00003.avs
.
.
.
-rw-r--r-- 1 user user    0 Okt 24  2015 dg00221.avs
-rw-r--r-- 1 user user 8,0M Nov  4  2021 index00.bin
-rw-r--r-- 1 user user 8,0M Nov  4  2021 index01.bin
-rw-r--r-- 1 user user 1,2M Okt 24  2015 photo.bin
-rw-r--r-- 1 user user  16M Okt 24  2015 session.log

Oh not to forget I tried with many different sd cards even with a freshly bought EVO select 32 GB.

[muebau]

I was able to find the firmware version in the Tuya app and I think its similar to #12 as the firmware is 5.x too.
Is there something I could do to make some progress?

[guino]

There's no mod/hack available for 5.x firmware. If you have the tools and skills to open the device and get a dump of the flash we could try to look into making changes to it but it but it would be limited to what code is available in the firmware and there's no way to implement any of these features: telnet, mqtt (or any web requests notification), mjpeg, snap, play sound. Really best case scenario would be to enable RTSP/ONVIF but it would require a hardware programmer.

[muebau]

Oh ok. Good to know.
Is there a way to downgrade the firmware and make it compatible this way?

[guino]

In theory if you found another device on older firmware with the same exact hardware you could dump the flash from one onto the other and use it only offline.

[tosiara]

There's no mod/hack available for 5.x firmware. If you have the tools and skills to open the device and get a dump of the flash

@guino
Do you have an example how to dump the flash? I could try to solder UART to my device and will test

[guino]

@tosiara in the recent months we found that some 5.2.x versions actually work with our hacks. Namely the 5.0.x versions are known not to work.

The only 'for sure' way of dumping the flash is with a hardware programmer which may require removing the chip from the board using a heat gun (soldering iron will likely damage the board). In order to dump the flash using UART you need to be able to stop the bootloader and execute commands in it (many of these devices don't allow for that).

If you want to try the UART approach you need a TTL-USB (3.3V) adapter then locate the RX/TX pins and connect the adapter (along with any ground point), then you should see some boot messages when powering up the device and hopefully you can stop the process (it may ask for a password) -- if you get to that point send me an email (my address is on my github profile) and I can give you some pointers.

[tosiara]

Thanks, I'm in a progress of soldering UART. So far identified that UART actually works and u-boot writes something, I;m on the right track. Further findings will be logged here: guino/Merkury1080P#46

[guino]

I replied to your email with some info.