ppsapp patch files only
guino opened this issue · comments
I will leave this issue open so anyone can post RTSP patch files for their ppsapp -- NOT FOR DISCUSSION/REQUESTS.
The idea is to post patch files (created by users) which are small and are not property of any company which means there's no legal question on being able to share them.
NOTE: If you have a version that supports ONVIF you likely can use it without patching ppsapp -- For this simply change the line #/mnt/mmc01/set onvif_enable 1 to /mnt/mmc01/set onvif_enable 1 (just remove the # ) in custom.sh
4.0.x NOTE: It's been reported that firmware versions 4.0.x may allow you to use ONVIF without patching by following these steps: guino/Merkury1080P#9 (comment) -- it's worth a try if there's no patch for your firmware.
Here's how to patch ppsapp
- After the hack is installed: power off the device, remove the SD card and take it to a computer
- Go to https://www.marcrobledo.com/RomPatcher.js/ DO NOT CLICK ON CREATOR MODE
- Click ‘choose file’ in front of ‘ROM file’ and select the original ppsapp file under /home/app/ppsapp on the SD card (assuming you didn’t do anything to it since the hack was installed)
- VERIFY that the md5 value displayed matches the md5 from the list below (listed with the patch for your ppsapp)
- Click ‘choose file’ in front of ‘Patch file’ and select the zip file you downloaded from the list below
- Click ‘apply patch’ and save/download the file to the root of the SD card (the default file name will likely be ppsapp-rtsp)
- Rename the saved/downloaded file on the root of the SD card to ppsapp (make sure it has no .txt or any extension) — verify the size is exactly the same as the size of /home/app/ppsapp in the SD card (which should be a few megabytes)
- Properly eject/unmount the SD card from computer (i.e. windows using the tray icons, linux umount command, etc)
- Insert SD card to device and power it on
- Wait for it to boot - you likely will hear the startup sound 2 times. After the 2nd startup time you can try to view the rtsp feed under rtsp://ip:8554 (unless you're on 2.9.7 in which case you use the links provided with the patch).
This section is only is for users POSTING new patches:
The patch file format should be one supported in https://www.marcrobledo.com/RomPatcher.js/ which you can use (in creator mode) to generate the patch file by loading the original and patched ppsapp files. As a standard I recommend naming the patch ppsapp-rtsp.zip (with ppsapp-rtsp.ips inside of it).
At a minimum we need the MD5 and the patch file but it would be nice to include details like below (which is the information from my own device). You can get the information for the table with http://admin:056565099@IP/devices/deviceinfo and the md5 is also displayed on the ROM patcher site when creating the patch (but any md5 hash tool should work).
Bazz doorbell patch
| firmware version | hardware version | original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_bazz-2.9.6.20200422 | BE8S_H1_V10_915 | 8c03189bcfa0c691bc2f409c15a329da | Bell 8S |
ppsapp-rtsp.zip please use steps above to patch it.
snap.cgi and mjpeg.cgi address: 0x0042ac2c (already set in the files from https://github.com/guino/BazzDoorbell)
play.cgi address: 0x42d6e4 (already set in the files from https://github.com/guino/BazzDoorbell)
| firmware version | hardware version | original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a2-tuya2_geeni-2.7.3.20190720 | M7C_AK_V10_1245 | 8e1e260bab10759e5de5a2a039685d50 | Mini 7C |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.jpg and mjpeg.cgi address: 0x002d6648
| firmware version | hardware version | original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_geeni-2.9.6 | cw017-101W-1080P | ec64bd06e807db52f50c3009827ab676 | Mini 7S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.jpg and mjpeg.jpg address: 0x00427b3c
(Original post by @russinnes -- Energizer Connect Doorbell)
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_xtremeecho-2.9.7.20200730 | BE5S_H1_V10_915 | 4eb36e8475abde161c5c1290de86b88b | Bell 5S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.jpg and mjpeg.jpg address: 0x0046f7f4
(Originl post by @adwiraguna)
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_bardi-2.9.7.20200907 | B4S_V10_H1_2063 | f4874ce6f40ff1a32e2bc1232e157105 | Bullet 4S |
ppsapp-rtsp-HD.zip please use this HOW TO PATCH GUIDE
ppsapp-rtsp-SD.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x00475b64
(Original post by @m11tch)
LSC Smart Connect Smart Doorbell
| firmware version | hardware version | original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_lcs-2.9.6.20200628 | BE8S_H1_V10_433 | 50ad9c96c65c0e446d8b3d5c8c828957 | Bell 8S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0047494c
play.cgi request address: 0x0477404
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_lcs-2.9.7.20201020 | BE8S_H1_V10_433 | e8900ce76220279a6e33ef65fd1d407b | Bell 8S |
NOTE: This version is reported have RTSP available without patching at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 -- see: guino/BazzDoorbell#2 (comment)
NOTE2: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, and in that case you can try patching with one of the patches below (I recommend disabling ONVIF first):
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
ppsapp-rtsp-8555.zip same as above but on port 8555 (rtsp://IP:8555) as ONVIF may already be using port 8554, please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x00551634
play.cgi request address: 0x005540ec
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_teco2-2.9.6.20200413 | BE5S_H1_V10_433 | 037ae4e296c18e585044ca54a5fdf4a9 | Bell 5S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x00429c2c
(Original post by @lesleyvanrijn)
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_lcs-2.9.7.20201020 | BE8S_H1_V10_433 | e8900ce76220279a6e33ef65fd1d407b | Bell 8S |
NOTE: Off-cloud patch only! No RTSP patching, since firmware 2.9.7 has ONVIF support by default.
ONVIF service: http://IP:8000/onvif/device_service with credentials admin:admin
To enable onvif you need to block internet access (and keep it blocked), might change this later:
Modify initrun.sh:
Add above the while loop
if [ ! -e /mnt/mmc01/tuya_config_original.json ]; then cp /home/cfg/tuya_config.json /mnt/mmc01/tuya_config_original.json; fi
Add inside the while loop below sleep 10:
if [ -e /mnt/mmc01/tuya_config.json ]; then
cp /mnt/mmc01/tuya_config.json /home/cfg/tuya_config.json;
fi
Boot the doorbell once, it will create the tuya_config_original.json file, copy it and rename it to tuya_config.json, open it and set onvif_enable to 1.
ppsapp_patched.ips.zip please use this HOW TO PATCH GUIDE
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_kjell-2.9.6.20200417 | M8S_H1_V10_F23 | 27e750da764d9b9201fa12406399f758 | Mini 8S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0042ac2c
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_geeni-2.9.5.20200324 | M11S_H1_V10_F23 | 33cd946bc3e4004db60c612133bdd066 | Mini 11S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0044ed94
(Orion Grid Connect Pan & Tilt Camera Model SC009HA)
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c5-tuya2_arlec009-2.9.0.20190808 | S5X_H1_V10_F23 | 6e807138fc0ad43f81c4b9b293b6f7cc | Speed 5X |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x00481acc
play.cgi address: 0x004824e0
(Nedis camera model WIFICI20CGY)
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a2-tuya2_teco-2.7.4.20191111 | S4C_A1_V10_1245 | 82b64e6d50aa8a2eca7d5d7eb786d284 | Speed 4C |
ppsapp-rtsp.zip for normal/online, please use this HOW TO PATCH GUIDE
ppsapp-rtspoffline.zip for no internet usage, please use this HOW TO PATCH GUIDE -- time will be wrong unless you set it manually by adding the ntpd line like HERE
snap.cgi and mjpeg.cgi address: 0x002c8010
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a2-tuya2_geeni-2.7.5.20200520 | M7C_AK_V10_1245 | c34616420599196a506b00b8b0e7491f | Mini 7C |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x002ca428
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a2-tuya2_geeni-2.7.5.20200221 | M7C_AK_V10_1245 | 3be0c33cd393acfa16047e45a5e86aab | Mini 7C |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x002c8450
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_teco2-2.9.3.20191230 | BE5S_H1_V10_433 | f4c20b9b478aeaa413ee999281ab0f4c | Bell 5S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0047721c
Author @exaultu
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_geeni-2.9.6.20200528 | B4S_V10_H1_2063 | a4a50713eaa055b0492d96a3022ba9b5 | Bullet 4S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x00427b3c
play.cgi address: 0x0042a5f4
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a2-tuya2_geeni-2.7.3.20190917 | M7C_AK_V10_1245 | 671a7f2b18a289880b1bd3b4f2cafdcf | Mini 7C |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x002e2f30
play.cgi address: 0x002e3084
(Orion Grid Connect Pan & Tilt Camera Model SC009HA)
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c5-tuya2_arlec009-2.9.0.20190808 | S5X_H1_V10_F23 | 6b0a73d31c4e01e700c367a570ab910c | Speed 5X |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE -- REQUIRES ADDITIONAL SETUP
snap.cgi and mjpeg.cgi address: 0x00481acc
play.cgi address: 0x004824e0
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_bardi-2.10.0.20201222 | B4S_V10_H1_2063 | 49b3952a658586eabd756e3b45574a69 | Bullet 4S |
This firmware may have native onvif although reported non-functional: guino/BazzDoorbell#20 (comment)
Please note port 80 is disabled in this firmware.
ppsapp-rtsp.zip for RTSP on rtsp://IP:8555 (notice port 8555 instead of port 8554) please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x005b97e8
play.cgi address: 0x005bd0cc
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a2-tuya2_geeni-2.7.6.20210207 | M7C_AK_V10_1245 | d39b6dc4f80e3d6d8b131b5034f9e4ae | Mini 7C |
ppsapp-rtsp.zip (HIGH DEFINITION RTSP) please use this HOW TO PATCH GUIDE
ppsapp-rtsp-sd.zip (LOW DEFINITION RTSP) please use this HOW TO PATCH GUIDE
ppsapp-offline.zip (OFFLINE PATCH - CAN BE COMBINED WITH RTSP PATCH) please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x02c8d60
play.cgi address: 0x02c8eb8
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_positivo-2.9.6.20200424 | S5S_H1_V10_F23 | 6db5588886b6f532f35a96db7a7156be | Speed 5S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0042ac2c
play.cgi address: 0x0042d6e4
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_akaso-2.9.5.20200331 | B3S_V10_H1_2063 | 5222b303db8c2ff3360ea837d204a07e | Bullet 3S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0424634
play.cgi address: 0x04270ec
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a3-tuya2_merkury-4.0.6.20210207 | M11S_A2_V10_F37 | e5e559715d01cf8060d56ba97ce4a79c | Mini 11S |
After patching RTSP is available at rtsp://IP:8554/Streaming/Channels/101 and rtsp://IP:8554/Streaming/Channels/102 user admin and password admin. Onvif should be available on port 8000.
NOTE: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, there are also reports that the onvif profile has errors which prevent it from working on certain applications.
ppsapp-onvif.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0375b1c
play.cgi request address: 0x0376328
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_arlec-2.9.2.20191111 | BE5S_H1_V10_433 | 103a20358b922cf9aceeb06426e12296 | Bell 5S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x04ee69c
play.cgi request address: 0x04ef0b8
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_teco2-2.9.0.20190801 | BE5S_H1_V10_433 | 29e5ac1ce7b294ad93e848ffb67ec8b8 | Bell 5S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0488d4c
play.cgi request address: 0x0489760
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_teco-2.9.8.20201120 | M5S_H1_V11_F23 | bcd16f22ad6d420a3d33c9ae6231a065 | Mini 5S |
NOTE: This version is reported have RTSP available without patching at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 -- see: guino/BazzDoorbell#2 (comment). Onvif should be available on port 8000 (user admin and password admin).
NOTE2: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, and in that case you can try patching with the patches below:
ppsapp-rtsp.zip use rtsp://IP:8555 (notice port is 8555 to not conflict with Onvif) please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x056e7d0
play.cgi request address: 0x05720b4
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_shf-2.9.1.20190907 | S4S_H1_V10_F23 | aab5c31154c90af60927bd17f99d285c | Speed 4S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x048d5e4
play.cgi request address: 0x048dff8
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c4-tuya2_geeni-2.7.7.20210207 | MINI5C_V12 | 4f855b587f36c3a92842fe6683331eff | Mini 5C |
ppsapp-rtsp.zip Required hardware programmer as described in: https://github.com/guino/Geeni720P
snap.cgi and mjpeg.cgi address: 0x03cf358
play.cgi request address: 0x03d0504
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_geeni-2.10.1.20210207 | M11S_H1_V10_F23 | a5fe2eac0f6aa506707d63558fc800b4 | Mini 11S |
After patching RTSP is available at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 user admin and password admin. Onvif should be available on port 8000.
NOTE: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, there are also reports that the onvif profile has errors which prevent it from working on certain applications.
I also patched this one to have the old style RTSP available at rtsp://IP:8555 (notice port 8555, no user/password)
ppsapp-onvif.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x056b6f0
play.cgi request address: 0x056efd4
| firmware version | hardware version | original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_calex-2.9.6.20200409 | M7S_H1_V11_F23 | cf48c7045fbf8f0f61b239e8d38e21a7 | Mini 7S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.jpg and mjpeg.jpg address: 0x03a32c0
play.cgi request address: 0x042d6e4
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a3-tuya2_merkury-4.0.2.20200929 | M11S_A2_V10_F37 | f66274e835bd4f1034dc251679bec61e | Mini 11S |
After patching RTSP is available at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 user admin and password admin. Onvif should be available on port 8000.
NOTE: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, there are also reports that the onvif profile has errors which prevent it from working on certain applications.
ppsapp-onvif.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x037b3ac
play.cgi request address: 0x037bb1c
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_geeni-2.9.1.20190821 | F2S_V10_H1_2063 | d45f47d6ef4e4ce3b8cac55085e7773d | Flight 2S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x048a4fc
play.cgi request address: 0x048af10
| firmware version | hardware version | original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_calex-2.9.6.20200522 | M7S_H1_V11_F23 | c035aef31d4ba53015af696769f336cf | Mini 7S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
ppsapp-offline.zip (OFFLINE PATCH - CAN BE COMBINED WITH RTSP PATCH) please use this HOW TO PATCH GUIDE
snap.jpg and mjpeg.jpg address: 0x042ac34
play.cgi request address: 0x042d6ec
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_panam-2.9.2.20191107 | B2S_V10_H1_2063 | 7ffb374de97a9802aba1150a7fbc0f33 | Bullet 2S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x04e53bc
play.cgi address: 0x04e5dd8
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_xtreme-2.9.7.20200730 | BE5S_H1_V10_915 | ba34e6f9e375e0c962b02133434ce55a | Bell 5S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.jpg and mjpeg.jpg address: 0x046f7f4
play.cgi request address: 0x04722ac
(If you have this one you likely can update your device -- please check before doing the work)
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_xtreme-2.8.0.20190725 | BE5S_H1_V10_915 | 6e97e7a6dae966eeaf3c4629c678f3b7 | Bell 5S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.jpg and mjpeg.jpg address: 0x0480a54
play.cgi request address: 0x0481468
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_teco-2.9.2.20191106 | B2S_V10_H1_2063 | 2e9eb43c6cffce86275b175498d182b1 | Bullet 2S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x04ee69c
play.cgi address: 0x04ef0b8
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_istar-2.9.7.20200814 | BE5S_H1_V10_433 | 54c58b61771c65ed1f870385cd77c7d7 | Bell 5S |
NOTE: This version should have RTSP available without patching at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 -- see: guino/BazzDoorbell#2 (comment). Onvif should be available on port 8000 (user admin and password admin).
NOTE2: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, and in that case you can try patching with the patch below:
ppsapp-rtsp.zip use rtsp://IP:8555 (notice port is 8555 to not conflict with Onvif) please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x05504b4
play.cgi request address: 0x0552f6c
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_laxihub-2.9.7.20201028 | S3S_H1_V10_F23 | a4cd739334efbb719f21454802dce9d2 | Speed 3S |
NOTE: This version should have RTSP available without patching at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 -- see: guino/BazzDoorbell#2 (comment)
NOTE2: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, and in that case you can try patching with the patch below:
ppsapp-rtsp.zip use port 8555 (rtsp://IP:8555) as ONVIF may already be using port 8554, please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0551634
play.cgi request address: 0x05540ec
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_akaso-2.9.2.20191108 | B2S_V10_H1_2063 | 609b109497dba30edc69fded30070dca | Bullet 2S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x04e84ac
play.cgi address: 0x04e8ec8
(Orion Grid Connect Pan & Tilt Camera Model SC009HA)
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c5-tuya2_arlec009-2.9.6.20200414 | S5X_H1_V10_F23 | ebdf087b5cd384eadea3e921f0948f2e | Speed 5X |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x00434a0c
play.cgi address: 0x004374c4
(Orion Grid Connect Pan & Tilt Camera Model SC009HA)
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c5-tuya2_arlec009-2.9.6.20200702 | S5X_H1_V10_F23 | e2cc37a3b73bac14c0df2d5ad9edb110 | Speed 5X |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0047e71c
play.cgi address: 0x004811d4
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a2-tuya2_geeni-2.7.7.20210311 | M7C_AK_V10_1245 | 7a64af87b9658d832709d3e24c226618 | Mini 7C |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x02c17b0
play.cgi request address: 0x02c1fbc
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_kogan-2.9.1.20190821 | F1S_V10_H1_2063 | ebca33b869c435378420c3cff3d35c67 | Flight 1S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x048d5ec
play.cgi request address: 0x048e000
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a3-tuya2_lsc-4.0.6.20210311 | M16S_A2_V10_F37 | 363543651299a6178a4ba77727cc39b5 | Mini 16S |
ppsapp-onvif.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x037c2f4
play.cgi request address: 0x037cb00
Patch made by: @xinterix
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a3-tuya2_merkury-4.0.6.20210310 | M11S_A2_V10_F37 | 5ea293a904a3a7c1790be74cc5f7b095 | Mini 11S |
After patching RTSP is available at rtsp://IP:8554/Streaming/Channels/101 and rtsp://IP:8554/Streaming/Channels/102 user admin and password admin. Onvif should be available on port 8000.
NOTE: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, there are also reports that the onvif profile has errors which prevent it from working on certain applications.
ppsapp-onvif.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x03821a4
play.cgi request address: 0x03829b0
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a3-tuya2_electro-4.0.6.20210329 | B4S_V10_A2_2063 | e4db68f012aaebc9ef0524590a40d70f | Bullet 4S |
After patching RTSP is available at rtsp://IP:8554/Streaming/Channels/101 and rtsp://IP:8554/Streaming/Channels/102 user admin and password admin. Onvif should be available on port 8000.
NOTE: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, there are also reports that the onvif profile has errors which prevent it from working on certain applications.
ppsapp-onvif.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x037c354
play.cgi request address: 0x037cb60
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a2-tuya2_geeni-2.7.7.20210306 | M7C_AK_V10_1245 | f0949066c211bfc99b81a333c3f0d219 | Mini 7C |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x02c17b0
play.cgi request address: 0x02c1fbc
| firmware version | hardware version | original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_globe-2.9.6.20200415 | BE8S_H1_V10_915 | e30f8238a9770a2d926d2e6176205e36 | Bell 8S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.jpg and mjpeg.jpg address: 0x042ac2c
play.cgi request address: 0x0042d6e4
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_akaso-2.10.0.20210803 | B2S_V10_H1_2063 | 186f5fcaa67456547f00d3931e3811f1 | Bullet 2S |
NOTE: This version should have RTSP available without patching at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 -- see: guino/BazzDoorbell#2 (comment)
NOTE2: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, and in that case you can try patching with the patch below:
ppsapp-rtsp.zip use port 8555 (rtsp://IP:8555) as ONVIF may already be using port 8554, please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x05694b0
play.cgi address: 0x056cd94
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_lcs-2.10.5.20210806 | BE8S_H1_V10_433 | fa879a12c0194222afb9d3d0e80dafea | Bell 8S |
NOTE: This version should have RTSP available without patching at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 -- see: guino/BazzDoorbell#2 (comment)
NOTE2: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, and in that case you can try patching with the patch below:
ppsapp-rtsp.zip use port 8555 (rtsp://IP:8555) as ONVIF may already be using port 8554, please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x056e6b0
play.cgi address: 0x0571f94
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a3-tuya2_shada-4.0.4.20210115 | M14S_A2_V10_F37 | 4871b6a7701c50c97c2e852a62361826 | Mini 14S |
After patching RTSP is available at rtsp://IP:8554/Streaming/Channels/101 and rtsp://IP:8554/Streaming/Channels/102 user admin and password admin. Onvif should be available on port 8000.
NOTE: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, there are also reports that the onvif profile has errors which prevent it from working on certain applications.
ppsapp-onvif.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x037795c
play.cgi request address: 0x037811c
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_kjell-2.10.6.20210818 | BE5S_H1_V10_433 | ca4501c9b50bf6bbbfddb9057049554d | Bell 5S |
NOTE: This version should have RTSP available without patching at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 -- see: guino/BazzDoorbell#2 (comment)
NOTE2: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, and in that case you can try patching with the patch below:
ppsapp-rtsp.zip use port 8555 (rtsp://IP:8555) as ONVIF may already be using port 8554, please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x056e6b0
play.cgi address: 0x0571f94
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_geeni-2.10.6.20210819 | B4S_V10_H1_2063 | 53e21b3e67bed930a6e2762629c83d2d | Bullet 4S |
NOTE: This version should have RTSP available without patching at rtsp://IP:8554//Streaming/Channels/101 and rtsp://IP:8554//Streaming/Channels/102 -- see: guino/BazzDoorbell#2 (comment)
NOTE2: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, and in that case you can try patching with the patch below:
ppsapp-rtsp.zip use port 8555 (rtsp://IP:8555) as ONVIF may already be using port 8554, please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x056b5c0
play.cgi address: 0x0056eea4
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a3-tuya2_electro-4.0.7.20210624 | B4S_V10_A2_2063 | ae716b1f71f808bf8af89e9b0b9f2ae7 | Bullet 4S |
After patching RTSP is available at rtsp://IP:8554/Streaming/Channels/101 and rtsp://IP:8554/Streaming/Channels/102 user admin and password admin. Onvif should be available on port 8000.
NOTE: Some people reported issues with ffmpeg not being able to play RTSP at the above URLs, there are also reports that the onvif profile has errors which prevent it from working on certain applications.
ppsapp-onvif.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x0395918
play.cgi request address: 0x0396714
Patch created by @jilleb
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a3-tuya2_lsc-4.0.6.20210311 | M16S_A2_V10_F37 | 323fc1b9791a6dcd37ceabb849f120f4 | Mini 16S |
OFFLINE PATCH ONLY: After patching the camera should enable ONVIF when it boots disconnected from the internet.
ppsapp-offline.zip please use this HOW TO PATCH GUIDE
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_caliber-2.9.1.20190912 | BE5S_H1_V10_433 | 84032b8961ba1553cea065db3ad2b20a | Bell 5S |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x048d5e4
play.cgi request address: 0x048dff8
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a3-tuya2_laxi-4.0.6.20210409 | M9S_A2_V10_F37 | 2efaff6d96431564ab6eb2481538c8ed | Mini 9S |
This firmware does NOT need patching to use ONVIF/RTSP -- just enable it as described here
OFFLINE PATCH ONLY: After patching the camera should enable ONVIF when it boots disconnected from the internet.
ppsapp-offline.zip please use this HOW TO PATCH GUIDE
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a3-tuya2_general-4.0.7.20210513 | BE8S_A2_V10_433 | 96729b630ee4f088fda3307a2370d050 | Bell 8S |
This firmware does NOT need patching to use ONVIF/RTSP -- just enable it as described here
snap.cgi and mjpeg.cgi address: 0x0395cbc
play.cgi request address: 0x03964cc
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a3-tuya2_lsc-5.2.4.20211015 | M16S_A2_V10_MIS | ea82f8dee86047a82404b9bdc715ae75 | Mini 16S |
This firmware does NOT need patching to use ONVIF/RTSP -- just enable it as described here
snap.cgi and mjpeg.cgi address: 0x0305ba4
play.cgi request address: 0x03069a8
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a2-tuya2_teco2-2.7.4.20191108 | M7C_AK_V10_1245 | bb735b8460cb39ba723fabaff43b0ee4 | Mini 7C |
ppsapp-rtsp.zip Please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x2c8000
play.cgi request address: 0x02c8158
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a2-tuya2_geeni-2.7.10.20220105 | M7C_AK_V10_GC4 | 7ad2ec371d1faded1f910c21732fed47 | Mini 7C |
ppsapp-rtsp.zip Please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x02c17b0
play.cgi request address: 0x02c1fbc
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_shf-2.10.6.20210906 | S4S_H1_V10_F23 | 5e442e5843694fd05c825972b4033559 | Speed 4S |
ppsapp-rtsp.zip Please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x056e6b0
play.cgi request address: 0x571f94
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a3-tuya2_laxi-4.0.6.20210326 | M7S_A2_V10_F37 | d0ed467db21a9a3101b646da692dae58 | Mini 7S |
This firmware does NOT need patching to use ONVIF/RTSP -- just enable it as described here
snap.cgi and mjpeg.cgi address: 0x37c354
play.cgi request address: 0x37cb60
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a3-tuya2_feit-4.0.8.20210806 | M8S_A2_V10_F37 | ab4e7e6afdaca800e0124e106154a2a6 | Mini 8S |
This firmware does NOT need patching to use ONVIF/RTSP -- just enable it as described here
snap.cgi and mjpeg.cgi address: 0x038c300
play.cgi request address: 0x38d100
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a2-tuya2_geeni-2.7.12.20220621 | M7C_AK_V10_1245 | 745a93ff16b90d37522475845a1e4d27 | Mini 7C |
ppsapp-rtsp.zip Please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x02c17a8
play.cgi request address: 0x02c1fb4
| Firmware Version | Hardware Version | Original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-a2-tuya2_geeni-2.7.8.20210514 | M7C_AK_V10_1245 | b6243b45108ccc5299f560301ae07d6c | Mini 7C |
ppsapp-rtsp.zip please use this HOW TO PATCH GUIDE
snap.cgi and mjpeg.cgi address: 0x02c17b0
play.cgi address: 0x02c1fbc
The 2.7.8 firmware is notable for having been compiled with symbols, so in many (most?) instances we can see the original Tuya function names instead of guessing them.
It required an instruction change to always start RTSP in the Echo Show function, but did already call the Echo Show function and so didn't require a instruction change to override a function call.
| firmware version | hardware version | original ppsapp MD5 | device |
|---|---|---|---|
| ppstrong-c51-tuya2_bazz-2.10.0.20210801 | BE8S_H1_V10_915 | ad654f758e11da31a077130709c2a456 | Bell 8S |
ppsapp-rtsp.zip please use steps above to patch it.
snap.cgi and mjpeg.cgi address: 0x0056e6b0
play.cgi address: 0x571f94