WyzeCam V2

Wyze Cam V2 (WYZEC2)

Default Login: root:ismart12

Some Links

• Wyze camera local firmware hack
• The WyzeCam / Xiaomi Fang
  • Apparently, it's an arm-based system running linux...
• Hacking a $30 IoT camera to do more than it’s worth.
• How to connect to serial port of Xiaomi Xiaofang IP Camera
• Collection of modifications for the XiaoFang WiFi Camera

Dafang-Hacks

• EliasKotlyar/Xiaomi-Dafang-Hacks
  • My effort to convert a $20 Xiaomi / WyzeCam v2 into a Synology IP Cam that connects to Home Assistant.
  • Help With Flashing Firmware to -"Xiaomi-Dafang-Hacks"

Steps to actually get the silly thing flashed

1. Wipe the SD card clean!  (gparted - Device - Create Partition Table)
2. Create a 512MB FAT32 partition.
3. Put demo.bin on the root of the card.
4. Insert the card in the camera.
5. Power up the camera with the setup button held.  (hold until the light goes back to yellow...)

Setting up the OS

1. Wipe the SD card clean!  (gparted - Device - Create Partition Table)
2. Create a FAT32 partition. (Size no longer matters... OS takes ~36MB)
3. Copy all of the "WyzeCam OS" to this new partition.
4. Insert the card in the camera.
5. Power up the camera.

MQTT Monitoring & Control

So far, pretty much all of the MQTT documentation I've managed to find for using the MQTT capabilities I have found by accident... :(

(also: mqtt-control.sh)

In the following examples, the location (TOPIC) is "CamTest" & the device_name (PREFIX) is "WyzeCam" and my local MQTT server is "SkyNet". So, the MQTT topic will start with "CamTest/WyzeCam"

Monitoring

If you really want to watch ALL of the messages sent by the camera...

mosquitto_sub -h SkyNet -t "CamTest/WyzeCam/#" -v

Available Topics:

			Returns
TOPIC/PREFIX			JSON payload with connection info
	/init
	/leds	/blue	ON / OFF
	/leds	/yellow	ON / OFF
	/leds	/ir	ON / OFF
	/ir_cut		ON / OFF
	/rtsp_h264_server		ON / OFF
	/rtsp_mjpeg_server		ON / OFF
	/night_mode		ON / OFF
	/night_mode	/auto	ON / OFF
	/brightness		#######	Apparently, higher numbers mean darker...
	/motion		ON / OFF	ON = Camera has detected motion
	/motion	/detection	ON / OFF
	/motion	/tracking	ON / OFF
	/motion	/send_mail	ON / OFF
	/motion	/send_telegram	ON / OFF
	/recording		ON / OFF
	/motors	/vertical	####
	/motors	/horizontal	####

Control

Look Here

Notes

• WiFi Credentials are stored in config/wpa_supplicant.conf
• Ethernet over USB adapter
• SD card is mounted at /system/sdcard
• Resetting password
• Setting a static IP
  • Just include something like
  • killall udhcpc
  • ifconfig wlan0 192.168.180.102 netmask 255.255.255.0
  • route add default gw 192.168.180.1
  • echo "nameserver 192.168.180.1" > /tmp/resolv.conf
  • in run.sh
• FIX INCLUDED: SW Nightmode not working #1301
  • (Web UI borks it...)
• Whole Bunches of More Stuff Needs Researching...

openfang

• On GitHub