firmware modification without soldering?

[scottlamb]

Thanks for writing this up! Very interesting.

Looks like the procedure in README.md is based on soldering something onto J9 to get to the uboot prompt, copying the firmware off the camera, and copying altered firmware back.

Has anyone tried altering a .pak file and uploading it through the camera's web UI? I don't know if Reolink uses signed firmware or something to prevent this. It'd be nice to have a way of getting ssh access without any hardware modification.

[scottlamb]

Never mind; of course right after filing this I saw #5 which does exactly that: "The unpack-novatek-firmware.pl gets a new -i parameter. With it will inject a new squashfs image into an existing pak firmware update file, so it can be deployed via the web UI, without serial console"