So I have a KY46_V5 wifi drone camera module thing from a broken drone, I managed to get it working independently of the drone but was wondering if there's a way to modify the code on it easily, to make it work on a different app or change the wifi name or something. It has 4 pins, GND, 3v3, RX and TX. I know in theory what all of these do, but have no idea what to do with them, or what RX and TX can access. Any ideas?
#KY46_V5 Drone Camera Project
versed juniper
It currently creates its own wifi network and you use the drones app to access the camera feed
Someone suggested MITM'ing the connection and trying to analyze how the thing works but idk how to do that
versed juniper
Further info: the camera does not allow more than 1 device to connect at once, and Nmap had nothing useful as far as we can tell
versed juniper
as for hardware testing, the rx and tx don't output a serial, but it has other pads on the back
UTX, URX, RST, SWC, SWD, 3V3
update, tx does output a serial, but it's for controlling the drone as that's what it was wired to originally
although that leaves RX for testing
RX seems to just send itself back through TX, anything i send is sent back
you know, for a cheap chinese drone they really don't like people messing with their stuff
next idea is decompiling the app
seems like this could be of use
it's http video
well it's not 2229 afaik
versed juniper
looks to be sending data from 1234 on the drone to 49989 on the pc
vlc doesn't read udp video from 1234 or 49989
so idk if it's encoded a special way that only the drone app understands or what
spark wave
it wont be a special protocol, the manufacturers are way way too lazy to implement that, it will be either mjpeg or RTSP. If it creates its own wifi network then connect to that network using your computer, use ipconfig and find your default gateway, then do a port scan on whatever ip address it gives to see if you can find anything there
could you post some pictures of the camera its self?
versed juniper
@spark wave
A lot of these wires I soldered on because there's what seems to be 2 UARTs, neither of which reveal anything of use
At any baud
SWD, SWK, What'd that be?
ivory moon
Oh sweet Jesus