Alternative way of recovering HikVision NVR password

Hey, having issues with these ones. I actually got the reset file back from Hikvision but it's telling me the "encrytion file is empty, check the key content". I've attached the two config files (one for each camera), would be great if someone can tell me the admin password please?
 

Attachments

Hi everybody.
Help pls.

I tried all possible input options and the serial number, and took the date from the serial number. Nothing works.

Info from SADP
Model: DS-7216HWI-SH
Serial: DS-7216HWI-SH1620130820AAWR430980102WCVU
Short Serial: 430980102
Start time: 2024-04-19 19:08:16

Firmware: V2.2.7 build 130626 (from web of DVR, i have access to config like "operator")


Time settings on DVR using NTP.
 
Last edited:
These are not config files, they are just password reset request files, no passwords contained in them.
Thanks, any idea how I can get the config file? I tried using the URL that others have but I get prompted for credentials which I don't have.
I've also tried factory resetting the cameras, but the password never goes what the default should be.
 
Thanks, any idea how I can get the config file? I tried using the URL that others have but I get prompted for credentials which I don't have.
I've also tried factory resetting the cameras, but the password never goes what the default should be.
That was an exploit(some might say backdoor :)) which was updated later on, hence you cant get configuration file like that on newer firmware's.

Only possible reset method is via authorized distributer or hikvision itself.

OR flashing same firmware or tad older might factory reset it.
 
  • Like
Reactions: alastairstevenson
Hello,
I´m having problems with a camera, I can get the config file, but when I use the WormChickenWizard tool, it crashes after the decrypting step, when I try to save the decrypted file. I don´t know if I´m doing somethig wrong.

Thanks in advance
 

Attachments

Figured you guys may want to decrypt your own config files


decrypter download: Releases · WormChickenWizard/hikvision-decrypter

instructions:

Usage​

In order to use this program, you first must obtain a camera's configuration file. If the camera is running firmware 5.4.4 or below, you can use the following url to retrieve it.
One you obtain the configuration file, simply load it into the program, decrypt it, and save it.Then you can use a hex editor to search for the passwords. At some point, I would like to implement the ability to read and edit the database from inside of the program.

once you save the unencrypted config file, open it in notepad, search for your camera username, usually "admin" and in the next line after admin, your password should be visible in clear text.