zeroeth

Reverse Engineering of Hikam S6 (HI3518 E)

Why?

I wanted to integrate the camera into my home security system. The only problem is that I want to toggle the alarm of the camera based on the security system status. Currently, this is only available via the app or a time trigger which is booth not sufficient for me. So the main target was to change the alarm status without the app.

What I've done so far:

My first try was to capture the TCP packages between the Android app and the camera. Soon I realized that they are only TCP+SSL (not pinned) requests to a cloud service of Hikam. So I installed an emulator with the Hikam app and Wireshark. I've seen some packages but the payload is very strange and even if I send the UDP commands again the status won't change. So this was a dead end for me.

zeroeth

Map	Name	Designer(s)
	The Beginning
start	Welcome to Quake	John Romero
	Dimension of the Doomed (shareware episode)
e1m1	Slipgate Complex	John Romero
e1m2	Castle of the Damned	Tim Willits
e1m3	The Necropolis	Tim Willits
e1m4	The Grisly Grotto	Tim Willits
e1m5	Gloom Keep	Tim Willits

zeroeth

⌘⇧P

🖱up

🐭 ⇣

zeroeth

# -*- coding: utf-8 -*-
# KORG monotribe firmware decoder by:
# Ludovic Lacoste (aka Ludo6431) -- http://ludolacoste.com
#
# thanks to :
#   Th0mas @ http://gravitronic.blogspot.com/2011/12/decoding-korg-monotribe-firmware.html
#   nitro2k01 @ http://blog.gg8.se/wordpress/2011/12/04/korg-monotribe-firmware-20-analysis/


# decoder.py <input ascii bits file> <output file prefix>

zeroeth

a.out
zeros.bin
output.txt

zeroeth

This paragraph has some cool animation-timing-function: 3ms; mentioned in it. Isn't that the greatest.

zeroeth

// ===== 1 ======= 2 ======= 3 ======= 4 ======= 5 ======= 6 ======= 7 ======= 8 ======= 9 ======= 10
// Copyright 2002-2003 by Tor Olav Kristensen, except for the textures
// Email: t o r . o l a v . k [_A_T_] g m a i l . c o m
// http://subcube.com
// ===== 1 ======= 2 ======= 3 ======= 4 ======= 5 ======= 6 ======= 7 ======= 8 ======= 9 ======= 10

#version 3.7;
global_settings {
  assumed_gamma 2.2
  }

zeroeth

find . -type f -name '*' -exec sh -c '7z l "{}" 2>/dev/null | grep -i MYFILENAME' \; -print

zeroeth

"""
Generates SQL to populate a table of item IDs mapped to icon names.

* Step 1. Convert `Item.dbc` and `ItemDisplayInfo.dbc` to CSV files, e.g. with
          `http://www.mediafire.com/?1sydm4aoi9i`
* Step 2. Export item quality to CSV with this command:
          `mysql -utrinity -p world --execute "SELECT entry, quality `
          `INTO OUTFILE '/tmp/item_quality.sql' FIELDS TERMINATED BY ','`
          `OPTIONALLY ENCLOSED BY '\"' LINES TERMINATED BY '\n'`
          `FROM item_template"`

zeroeth

# WoW Map Tiler
require 'chunky_png'

# find tiles

print "Finding tiles..."

tile_image_names = Dir.glob("input/**/map*.png").sort