Fang Reverse Engineering (2018)

I describe here some facts about a SN986 chip and an accompanying firmware that I have learned during development of my own board support package for the Xiaofang WiFi camera.

I'm very grateful to the fang-hacks community for giving me the first knowledge about this camera and for pointers of how to hack it.

My work however is not related to the fang-hacks project. My aim is to develop a full-stack custom firmware that could be flashed to the internal SPI flash memory replacing the stock firmware. On the other hand the aim of the fang-hacks project is to provide an application-layer overlay for an existing firmware with an ability to enable or disable stock features at any time.

There is another reason for this wiki. There are a lot of useful information about a sn986-based camera in the fang-hacks community. Details are spread across dozens of GitHub issues and comments and are highly unstructured. It seems to be very useful to put together all that info in one place and provide a table of contents and an ability to search.