Hikvision DS-2TP31 series Thermal Camera Teardown

[SpeedProg]

Hi Pixar,
I tried to jailbrake, but it didn't work.
I am using windows 10, so I had to customize the COM port.
I don't know if there is anything else to customize in script to make it work.
the installed fw version is V5.4.38build200922.

what could be the reason why it did not work

Code: [Select]

(c) 2024 by pixar
Jailbreak IR Camera from HIKVision. Only use with V5.4.38build200922 firmware as patch addresses are hardcoded! No harm can be done, as all writes are in volatile RAM (Jailbreak needs to be repeated after every reboot.)
Please press the ON button on the camera now...
System startup
U-Boot 2010.06-788427 (Mar 27 2020 - 11:37:08)
SPI Nor:"W25M512JV", Block:64KB, Chip:64MB
Hit Ctrl+u to stop autoboot:  0
Going into the console...
booting from pri part...
Load kernel to 0x81800000 ... Done!
## Booting kernel from Legacy Image at 81800000 ...
   Image Name:   LiteOS-0.1.0-e2
   Image Type:   ARM Linux Kernel Image (lzma compressed)
   Data Size:    5017040 Bytes = 4.8 MiB
   Load Address: 80008000
   Entry Point:  80008000
   Uncompressing Kernel Image ... OK
Starting kernel ...
osAppInit
<4>parse_cmdline_info: parse IP= failed!
<4>parse_cmdline_info: parse SERVER= failed!
<4>parse_cmdline_info: parse MASK= failed!
<4>parse_cmdline_info: parse dbg= failed!
<4>parse_cmdline_info: parse MS_ACTION= failed!
<6>hikcommon init ...
<4>mmc0 power register success!
<6>watchdog init ...
<6>hik_rtc init ...
<6>uart_dev init ...
<6>uart232 init ...
cur support uart: uart1(rs485)
 uart2(rs232)

uart1 cken enable!
uart2 cken enable!
Successfully insmod uart232 module!
<6>spi_dev init ...
<6>spi_io init ...
<6>dmac init ...
<6>i2c_dev init ...
<6>temp init ...
<6>pmic init ...
<6>ran_dev init ...
<6>mem_dev init ...
<6>framebuffer init ...
<6>proc_fs init ...
Mount procfs finished.
<6>cppsys init ...
<6>gpio_dev init ...
<6>SD_MMC_Host init ...
********mmc host init ! ********
<6>spinor init ...
Spi Nor ID:0xEF 0x71 0x19 0x00 0x00 0x00 0x00 0x00
Spi Nor Flash Info:
Name:"W25M512JV" Size:64MB Block:64KB
spinor_chip_write_protect(168): write protect info: addr:0, size:0 enable:0!
spinor_chip_write_protect(168): write protect info: addr:0, size:0x1d00000 enable:1!
<6>hik_partition init ...
<6>st7789V init ...
<6>hikkeys init ...
<6>fuel_gauge init ...
<6>revision init ...
<6>pwm init ...
<6>led init ...
<3>led_init: bd_get_dev_desc error!
<6>net_init init ...
Calling lwIPRegSecSspCbk
enter hisi_eth_init!
hisi_eth init begin.
hisi_eth: User did not set phy mode, use default=rmii
hisi_eth: User did not set phy addr, auto scan...
Can't find PHY device - id: 0
<6>cm
# # [01-01 00:00:00][pid:0][SYSINIT][ERROR][hardwareif/e2l/main.c 301][user_sysinit]hik_bsp_ini# # [01-01 00:00:00][pid:0][SYt finish!
SINIT][ERROR][hardwareif/e2l/main.c 301][user_sysinit]hik_bsp_ini# # [01-01 00:00:00][pid:0][
'#' Not Supported, Try 'help'
# # SYt finish!SINIT][ERROR][hardwareif/e2l/main.c 301][user_sysinit]hik_bsp_ini# # [01-01 00:00:00][pid:0]['#' Not Supported, Try 'help'# # SYt finish!SINIT][ERROR][hardwareif/e2l/main.c 301][use
'#' Not Supported, Try 'help'

[/list]How does the output of the jailbreak look like?

I hope you already figured this out by yourself, but just in case you did not and are still interested.
I had the same thing until I connected a USB cable from the PC to the Thermal Cam in addition to the Serial.