So, I bought two cameras from temu, cant remember how much they cost, i will check

to see if i can find exact links if still available in my purchase history. My

camera, has port 23 open, and i am able to telnet to it with no password needed.

\ | /

RT - Thread Operating System

/ | \ 3.1.0 build May 15 2023
2006 - 2018 Copyright by rt-thread team
current firmware name: app, version: 7252_CY_IPC_2305171919, timestamp:
1684408518

I was able to locate the firmware at the site which was listed earlier and i
mirrored it to a new github repo to keep the files safe.

These are the commands that are compiled into the version my camera is running,
RT-Thread shell commands:
start_ap_direct - This is start_ap_direct
testLedDemo - This is testLedDemo
mac - set_or_read_mac
rxsens - do_rx_sens
txevm - do_tx_evm
video - video
wifi_demo - wifi_demo command
rfcali_show_data - rfcali show data
rfcali_cfg_tssi_g - rfcali cfg tssi
rfcali_cfg_rate_dist - rfcali cfg rate_dist
rfcali_cfg_mode - rfcali cfg mode
rfcali_cfg_tssi_b - rfcali cfg tssi
camera_param_test - camera_param_test
camera_anti_flicker_test - camera_fps_test
camera_fps_test - camera_fps_test
camera_ppi_test - camera_ppi_test
camera_effect_test - camera_effect_test
camera_contrast_test - camera_contrast_test
camera_flip_test - camera_flip_test
camera_bringtness_test - camera_bringtness_test
camera_inf_write_reg_value - camera_inf_write_reg_value
camera_inf_read_reg_value - camera_inf_read_reg_value
camera_reg_read_test - camera_reg_read_test
video_test - This is video_test
registAudioLiveStream - This is registAudioLiveStream
batteryDemo - This is batteryDemo
buttonServiceInit - This is buttonServiceInit
VideoTransferTcpStart - This is VideoTransferTcpStart
testFlash - This is testFlash
testBurn - This is testBurn
testFatctor - This is testFatctor
getPHParamAndSetItFromSDTest - getPHParamAndSetItFromSDTest
photoresistorGetTest - photoresistorGetTest
photoresistorSetTest - photoresistorSetTest
testOtaDemo - This is testOtaDemo
testTFCardOta - This is testTFCardOta
gpio_test - gpio_test
testSetMotorDirection - testSetMotorDirection
motorInit - motorInit
apMatchCancel - apMatchCancel
apMatchStart - apMatchStart
reBleConfigNet - reBleConfigNet command
destroyBle - destroyBle command
registerBle - registerBle command
PHDemo - This is PHDemo
testDevice - This is testDevice
ringtonePlayerTest - ring tone Player Play
startUpTonePlay - startUpTonePlay
tonePlayerServiceInit - tonePlayerServiceInit
testAppCheckOta - this is testAppCheckOta
testDeviceSearch - This is testDeviceSearch
registVideoLiveStream - This is registVideoLiveStream
registVideoRealTimeStream - This is registVideoRealTimeStream
setFirstBuy - This is setFirstBuy
read_sensitive - read_sensitive
set_sensitive - set_sensitive
audio_dump - audio_dump
wdg_stop - wdg_stop
wdg_refresh - wdg_refresh
wdg_start - wdg_start
reboot - reboot system
set_log - set_log on or off
stack - rt_hw_stack_print
resetenv - Reset all envrionment variable to default.
getvalue - Get an envrionment variable by name.
saveenv - Save all envrionment variables to flash.
printenv - Print all envrionment variables.
setenv - Set an envrionment variable.
iperf - the network bandwidth measurement tool
netio_init - netio server
ntp_sync - Update time by NTP(Network Time Protocol)
ping - ping network host
telnet_server - startup telnet server
ble_command - ble_command
bk_ble_netconfig_stop - bk_ble_netconfig_stop
bk_ble_netconfig_start - bk_ble_netconfig_start
ble_netconfig_sample - ble_netconfig_sample
button_test - button test
http_ota - OTA by http client: http_ota [url]
memtrace - dump memory trace information
list_fd - list file descriptor
list_device - list device in system
list_timer - list timer in system
list_mempool - list memory pool in system
list_memheap - list memory heap in system
list_msgqueue - list message queue in system
list_mailbox - list mail box in system
list_mutex - list mutex in system
list_event - list event in system
list_sem - list semaphore in system
list_thread - list thread
version - show RT-Thread version information
help - RT-Thread shell help.
free - Show the memory usage in the system.
time - Execute command with time.
ps - List threads in the system.
netstat - list the information of TCP / IP
dns - list the information of dns
ifconfig - list the information of network interfaces
echo - echo string to file
df - disk free
mkfs - format disk with file system
mkdir - Create the DIRECTORY.
pwd - Print the name of the current working directory.
cd - Change the shell working directory.
rm - Remove(unlink) the FILE(s).
cat - Concatenate FILE(s)
mv - Rename SOURCE to DEST.
cp - Copy SOURCE to DEST.
ls - List information about the FILEs.
fal - FAL (Flash Abstraction Layer) operate.
date - get date and time or set [year month day hour min sec]
wifi - wifi command
play_audio_init - play_audio_init
stopAudioEncoderStream - This is stopAudioEncoderStream
startAudioEncoderStream - This is startAudioEncoderStream
testTFCard - This is testTFCard
stopVideoEncoderStream - This is stopVideoEncoderStream
startVideoEncoderStream - This is startVideoEncoderStream

Netstat output
Listen PCB states:
#0 local port 23 state: LISTEN
#1 local port 10003 state: LISTEN
#2 local port 10002 state: LISTEN
TIME-WAIT PCB states:
Active UDP PCB states:
#0 0 0.0.0.0:32108 <==> 0.0.0.0:0
#1 0 0.0.0.0:18581 <==> 0.0.0.0:0
#2 4 0.0.0.0:68 <==> 0.0.0.0:67
#3 0 0.0.0.0:8600 <==> 0.0.0.0:0

output from printenv

user=user
factoryflag=0
cchipupdate=0
language=2
led_onoff=1
ir_led=2
alarm_type=0
Audio_alarm_param=NULL
Video_alarm_param=NULL
alarm_switch=0
video_detect_sensitive=0
audio_detect_sensitive=0
alarm_beep=0
alarm_interval_time=0
speaking=0
WhiteLight=2
systemvolume=86
username0=admin
recmode=1
restartTone=1
isPushPic=0
isPushVideo=0
pirenable=0
pirPush=1
pirvideo=0
pirvideotime=10
pirsensitive=3
pirDelayTime=120
AalarmInterval=2
pirCloudUpCount=50
flashOrTf=1
uploadType=0
creatTime=00000000
days=0
buyType=1
cyToken=0
check_pwd=046798
airkissflag=1
userpasswd0=6666
pushIp=47.106.144.32
pushPort=9093
pushInterval=30
cyAdmin=admin
cyPwd=admin123
ssid0=testlan
passwd0=password123
workmode=sta
fistMatchNet=0

Not sure if would be useful but the documentation for rtthread which is the os
being used has an ipcam example and they have a demo for rtsp in there, havent had
a chance to play with it, just got done reading this long thread :slight_smile:
https://github.com/RT-Thread/IoT_Camera/tree/master/firmware/platform 16

firmware files backup copy

GitHub
GitHub - beyonddiana/bk7252: Files and notes relating to cheap cameras using... 30

Files and notes relating to cheap cameras using bk7252 - GitHub -

beyonddiana/bk7252: Files and notes relating to cheap cameras using bk7252

not sure if mine im using is the release or debug version but its the one that
matches the date posted above in the hb66 folders