Momentum Axel-720P

Revision as of 20:00, 24 April 2018 by Rchase (talk | contribs) (Root: Custom Firmware with Telnet)

"Although the information we release has been verified and shown to work to the best our knowledge, we cant be held accountable for bricked devices or roots gone wrong." ADC-v520IR.jpg

This page will be dedicated to a general overview, descriptions, and information related to the ADC-v520IR.


The ADC-v520IR is a network (Wifi/Ethernet) camera w/ IR LEDs provided by



Root: Custom Firmware with Telnet

Telnet to root shell can be enabled by creating a custom firmware, naming it 'ezviz.dav', placing it on the SD card, and rebooting:

1. Download Hikvision packer/unpacker (to Linux PC):

2. Download original firmware:

3. ./hikpack -t r0 -x digicap.dav -o newfw

4. cd newfw

5. unsquahsfs app.img

6. cd squashfs-root

7. nano and add '/bin/busybox telnetd &' to the end to enable telnet (or make any changes you want)

8. cd ..

9. mksquashfs squashfs-root/ app.img -comp xz -b 256K -noappend -force-uid 4145 -force-gid 4148

10. rm -rf squashfs-root

11. ./hikpack -t r0 -p ezviz.dav -o newfw

12. Copy ezviz.dav to SD card

13. Insert SD card to camera

14. Reboot camera

15. Log in to telnet with root/EHLGVG

  • NOTE: This works because the current version of the firmware checks for the existence of 'ezviz.dav' when booting up. Also, the root password is hard-coded to all devices.