Xiaoyi

1 Hardware

• IP Camera SoC: Hisilicon Hi3518
• WiFi: Media Tek MT7601UN
• Flash: Spansion FL127S (128Mb SPI flash)

2 Hacking

1. Connect the memory card to a computer via a card reader

2. Create a directory named “test” on the sdcard root

3. Edit file X:\test\equip_test.sh with notepad or your favorite text editor.

4. Add this content:

#!/bin/sh
# Telnet
if [ ! -f "/etc/init.d/S88telnet" ]; then
echo "#!/bin/sh" > /etc/init.d/S88telnet
echo "telnetd &" >> /etc/init.d/S88telnet
chmod 755 /etc/init.d/S88telnet
fi
dr=`dirname $0`
# fix bootcycle
mv $dr/equip_test.sh $dr/equip_test.sh.moved
reboot

5. Safetly detach sdcard, put it into your camera, it will reboot twice.

The login details are:

• User: root
• Password: 1234qwer

3 Reference

• http://diy.2pmc.net/solved-xiaomi-xiao-yi-ant-home-camera-can-used-china/
• http://nemon.org/ipcam-ipr1631x/
• https://github.com/fritz-smh/yi-hack
• https://github.com/4clouds/yi-stream