Products > Thermal Imaging
Files from infisense-doc.cn (the public ones, sure)
nikitasius:
Story / Legal: Installed Viewer 0.6.3, it's updated to 0.6.4, checked via wireshark how it goes: win app request http://versionmanage.infisense-doc.cn/v/p2viewer-0.6.3.rc-offical-android and in json there are "downloadUrl" w/ URL "http://39.106.229.41:8084/v/download/31". Downloaded all from 0 untill it gives something.
Here are all files if you don't wanna download it yourself: gdrive https://drive.google.com/drive/folders/1_1XPhG4l8dIK-rHd1Noxkm6KoBWHQNnB
there are tools and firmware (which could be interrested for folks who reverse it).
ArsenioDev:
Oh this is interesting as hell.
Good ole URL fuzzing is fun and sometimes comes up with interesting stuff.
real Ghidra hours now
nikitasius:
They use 302 redirect, so there are locations:
0 : `failed`
1 : `https://box.infisense-doc.cn:9500/l/sFkpmq`
2 : `https://box.infisense-doc.cn:9500/l/TFkclW`
3 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/M2_FW-standard-1.0.4.0.bin`
4 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/M2_FW-standard-1.5.0.0.bin`
5 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/FalconApplication-official-1.2.0.beta.zip`
6 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/FalconApplication-official-0.10.6.0.zip`
7 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/P2Viewer-official-0.2.0.alpha.exe`
8 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/P2Viewer-official-0.1.5.alpha.exe`
9 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/P2Viewer-official-0.1.0.alpha.zip`
10 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/FirmwareP2-p2_module-0.0.3.07.bin`
11 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/FirmwareP2-p2-0.0.3.07.bin`
12 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/FirmwareP2-p2-0.0.3.06.bin`
13 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/FirmwareP2-p2-0.0.3.05.bin`
14 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/FirmwareP2-p2_module-0.0.3.05.bin`
15 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/FirmwareP2-p2_module-0.0.3.06.bin`
16 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/P2Viewer-official-0.4.0.alpha.exe`
17 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/P2Viewer-official-0.4.1.alpha.exe`
18 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/P2Viewer-official-0.4.7.beta.exe`
19 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/P2Viewer-official-0.4.8.beta.exe`
20 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/P2Viewer-official-0.4.9.rc.exe`
21 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/P2Viewer-official-0.4.10.rc.exe`
22 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/P2Viewer-official-0.4.11.rc.exe`
23 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/P2Viewer-official-0.5.2.rc.exe`
24 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/P2Viewer-official-0.5.3.alpha.exe`
25 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/P2Viewer-official-0.5.6.beta.exe`
26 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/P2Viewer-official-0.6.0.rc.exe`
27 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/P2Viewer-official-0.6.1.rc.exe`
28 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/test-official-1.0.0.0.zip`
29 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/P2Viewer-official-0.6.3.rc.exe`
30 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/FirmWare_X3-official-1.0.0.0.zip`
31 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/P2Viewer-official-0.6.4.rc.exe`
32 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/FirmWare_X3-official-1.0.0.0.zip`
33 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/FirmWare_X3-official-0.0.4.16.zip`
34 : `http://fireware-manage.oss-cn-hangzhou.aliyuncs.com/test-official-0.0.5.0.zip`
35 : `failed`
36 : `failed`
37 : `failed`
38 : `failed`
39 : `failed`
40 : `failed`
41 : `failed`
42 : `failed`
43 : `failed`
44 : `failed`
45 : `failed`
46 : `failed`
47 : `failed`
48 : `failed`
49 : `failed`
nikitasius:
Whats interesting, there are `FirmWare_X3-official` and inside there are `XH15 @ X3 XH15 X3-20230724 default_data/dead_pixel.bin` etc.
I did not found the X3 device, but it could exists.
"XH15 @ X3" looks familiar to "XH09 @ X2", probably another 50Hz camera w/ x3 optical magnification.
If they use same ASIC we could mod that firmware the way we want and flash XH09 model.. Anyway it's not my "area" to dig info firmwares, i can just repeat the guides :)
nikitasius:
Some strings from firmware_EXT_0.0.4.16.bin & firmware_EXT_1.0.0.0.bin
> `***********mini2384 preview**********` changed to `***********X3 preview start**********`
suggestions? Well, possibly that XH15 (x3) based on a "mini2 384" module https://www.infiray.com/products/mini384-640-lwir-micro-thermal-camera-module.html . Why "mini2"? New mini modules?
This module have 50Hz. Probably XH09 (x2) is based on "mini2 256", but whats weird is that specs says 25Hz instead of 50hz. Under debian i get natively
--- Code: ---Resolution: 256 x 384
Aspect ratio: 0.666667
Format: rawvideo
Bitrate: 39319 kbps
Frames per second: 25.000000
Selected codec: rawvideo
--- End code ---
under windows it gives 50fps & 256x192
> it have `2006 - 2019 Copyright by rt-thread team`
probably https://www.rt-thread.io/ & https://github.com/RT-Thread/rt-thread
> firmware 01.00.00 is originally 00.00.04.15 just wrong named file
> they call the device `Camera X3` in both firmwares
> `MT29F2G01AAAED` / `MX35LF2G14AC` / `W25N01GWZEIG`
looks like flash memory
https://datasheetspdf.com/datasheet/MT29F2G01AAAED.html
https://www.digikey.com/en/products/detail/macronix/MX35LF2G14AC-Z4I/7915134
https://eu.mouser.com/ProductDetail/Winbond/W25N01GWZEIG
Navigation
[0] Message Index
[#] Next page
Go to full version