Help reseting password/ Factory reset Chinese NVR

KrusherPT

n3wb
Joined
Nov 4, 2021
Messages
7
Reaction score
1
Location
Portugal
Hi everyone I've been banging my head :banghead: trying to repair my nvr, I forgot my admin password (paranoia of a backdoor and stealing password resulting in a strange password). Tried most superpassword generators, no reset pins/buttons only jtag, and no reset button at login.
If anyone could help me i would be grateful!

 

Attachments

Last edited:

KrusherPT

n3wb
Joined
Nov 4, 2021
Messages
7
Reaction score
1
Location
Portugal
Thanks for spending time trying to help me but unfortunately this device doesn't have reset button/pin in the pcb as I said before. And yes strangely it shows a router login page but is a NVR XD
 

KrusherPT

n3wb
Joined
Nov 4, 2021
Messages
7
Reaction score
1
Location
Portugal
UPDATE:
I soldered some pins on j25 and got serial comms, I can somehow get inside the uboot and then some sort of root (modifying uboot env params) without Iface BUT it doenst have the files for the web interface/GUI, and with some further research it somehow starts another "machine" on another IP with telnet but I cannot find the password, the serial output gives no information about the other telnet interface.

I have some ref about the chipset and board but i cannot find info about it.

load vgs.ko for Hi3521A...OK!

[FILE: BuildModel.cpp][FUNC: BuildDeviceDescriptionByID_4HD7200HVR][LINE: 168] nBoardID= 5004,nModel= 1

NEYE3C|HC|20190619|HVR_V300

[1B][0;32m[SDK][hisdk.c Higheasy_SDK_InfoDump 37][1B][0;39mHi3521_SDK version is: Hi3521A_MPP_V1.0.0.0 B00 Release

BoardID = 0x5004
BoardTypeName = HVR6004H
 
Last edited:

KrusherPT

n3wb
Joined
Nov 4, 2021
Messages
7
Reaction score
1
Location
Portugal
Finally dumped all files using sf read, md.b, binwalk and jefferson and after some troubleshooting(wrong understanting how sf read works) I got the db file from the flash memory (config mtd partition) yay!!!
 
Joined
Nov 24, 2021
Messages
3
Reaction score
1
Location
Weston Oregon 97886
Well all I can say is I did the same thing as you and changed the original admin password to something unique and have been banging my head against the wall and banging it and banging it and I've tried all the super code things but I'm honestly not a very tech savy person. Not that I don't enjoy and play with this and that but I'm not able to read or write code and everything I'm reading on here and other posts are losing me quick fast and in a hurry. That's my fault though not anyone else's. I need my cameras back up and running but I don't have a computer to do what you all seem to be doing. 2yrs I've been locked out. I've got wireless ip cameras in the meantime but I'd rather have the 8 I already have set back up and running again. Any advice? I'll add pictures if that helps at all.
 

Attachments

KrusherPT

n3wb
Joined
Nov 4, 2021
Messages
7
Reaction score
1
Location
Portugal
I'm not sure but that CN10 on the pcb should be jtag (i can be wrong), solder 4 pins, get an serial to usb adapter and try to see if you can get serial connection
 
Joined
Nov 24, 2021
Messages
3
Reaction score
1
Location
Weston Oregon 97886
I'm sorry but none of that made sense. I can see that I'm gonna have problems understanding just what is meant and exactly how to execute them properly. I don't know of anyone capable of it either. Anyone I do know is 2500 miles away. I think I'm gonna be wasting everyone's time and effort and nobody should have to hold someone's hand explaining everything like they would a child. Which I'm afraid may be the case for me here. I think I'll see if I can get a new one or maybe a used one if push comes to shove. I appreciate the help and apologize for wasting your time.
 

KrusherPT

n3wb
Joined
Nov 4, 2021
Messages
7
Reaction score
1
Location
Portugal
Get soldering iron, and some pins or wires and solder 4 on CN10( 4th image 1 square hole and 3 round ones), then get serial to usb adapter (ft232rl) and conect them (check with multimeter iwch one is the vcc/live and ground they are 1st and 4th pins), the middles ones are rx tx, you need to test them but usualy is VCC RX TX GND (IIRC) and try to get something on console using putty, all this informations are available on youtube/forums, if you manage to get something i will help you dump things. Cant do more for now.
 
Joined
Jun 5, 2022
Messages
1
Reaction score
0
Location
United States
Hi everyone I've been banging my head :banghead: trying to repair my nvr, I forgot my admin password (paranoia of a backdoor and stealing password resulting in a strange password). Tried most superpassword generators, no reset pins/buttons only jtag, and no reset button at login.
If anyone could help me i would be grateful!

If it is xmeye try this
Click the minus in upper left of xmeye pro app, then on the nvr click the red code symbal beside the login, then the scanable code will appear. Scan that code with xmeye app, it will give a five digit passcode to login with. Then NVR will pops up a screen that says login with super password and reset password to default. Click yes and it will reboot and admin password will be cleared.
 
Top