Hikvision camera admin password reset tool

Parek

n3wb
Joined
Sep 22, 2023
Messages
1
Reaction score
0
Location
Czechia
Hello,
I have one DS-2CD1323G0-I camera with lost password. SN: DS-2CD1323G0-I20180911AAWRC50195392

1695409833283.png

Please can you suggest me how to download configuration from the camera?

Regards

Marek
 

alastairstevenson

Staff member
Joined
Oct 28, 2014
Messages
15,930
Reaction score
6,778
Location
Scotland
Please can you suggest me how to download configuration from the camera?
That would require the admin password for that version of firmware, the 'backdoor vulnerability' has been fixed.

You need to try the 'password reset' process using SADP, which exports a reset request XML file that you send to Hikvision technical support and hope for a response.
The alternative is to attempt to re-apply the 5.5.53 firmware via the Hikvision tftp updater, which would normally reset the camera back to 'Inactive'.
 

legidep887

n3wb
Joined
Oct 20, 2023
Messages
4
Reaction score
0
Location
Slovakia
Hello guys, i have DS-7604NI-Q1 / 4P with access to user account, and partly admin ( i know the pattern login) to nvr.
My Firmware Version: V3.4.108 build 191014
Encoding Version: V5.0 build 190410
Web Version: V4.0.1 build 191014
Plugin Version: V3.0.7.1

What i need is admin password tho, or hash so i can hashcat it. Is there a way to extract it ?
 

alastairstevenson

Staff member
Joined
Oct 28, 2014
Messages
15,930
Reaction score
6,778
Location
Scotland
Is there a way to extract it ?
Depending on firmware versions, and if the NVR has not been configured to use a camera-specific password for activating cameras, the NVR password may be able to be extracted from the attached cameras.

What model cameras are connected, and what firmware versions are they running?
 

legidep887

n3wb
Joined
Oct 20, 2023
Messages
4
Reaction score
0
Location
Slovakia
Depending on firmware versions, and if the NVR has not been configured to use a camera-specific password for activating cameras, the NVR password may be able to be extracted from the attached cameras.

What model cameras are connected, and what firmware versions are they running?
V5.5.82
2 added with plug and play, one was added manually
 

legidep887

n3wb
Joined
Oct 20, 2023
Messages
4
Reaction score
0
Location
Slovakia
Depending on firmware versions, and if the NVR has not been configured to use a camera-specific password for activating cameras, the NVR password may be able to be extracted from the attached cameras.

What model cameras are connected, and what firmware versions are they running?
Also model DS-2CD2141G1-IDW1
 

alastairstevenson

Staff member
Joined
Oct 28, 2014
Messages
15,930
Reaction score
6,778
Location
Scotland
Ok, 5.5.82 is too new to pull the configuration file with no authentication, so the Trojan horse method is out.
Worth trying, though no guarantee they will respond to you, is the 'forgot password' button in SADP.
 

Oleglevsha

Getting the hang of it
Joined
Jan 25, 2015
Messages
299
Reaction score
77
Location
Россия г.Волгоград
Hello guys, i have DS-7604NI-Q1 / 4P with access to user account, and partly admin ( i know the pattern login) to nvr.
My Firmware Version: V3.4.108 build 191014
Encoding Version: V5.0 build 190410
Web Version: V4.0.1 build 191014
Plugin Version: V3.0.7.1

What i need is admin password tho, or hash so i can hashcat it. Is there a way to extract it ?
- Open the following URL in your browser:

http://192.168.0.64/System/configurationFile?auth=YWRtaW46MTEK

Where 192.168.0.64 - IP address of your camera. You can find out IP using the SADP Tool
 

Chud123

n3wb
Joined
Jan 8, 2024
Messages
1
Reaction score
0
Location
South Africa
Hi,

I have a pair of Hikvision Face recognition terminals (DS-K1T607MFW), i got these from company that was throwing them out, they seem to work 100%, but no-one know the password.

Am i right, that the only way i can use these is the XML export and Hikvision replying to my request with the unlock file?

Regards
Chud

HikFace1.JPG
 
Top