Dahua Branded DVR Telnet Access Help

bv1717

bv1717

n3wb
Dec 15, 2016
9
1
Hi there,

So I have a Dahua DVR from a retailer called Q-see. I followed the Dahua enable telnet steps and I can't seem to find out why it won't let me in. I tried all combinations of root, admin, and 66666.

Model: Dahua (under Q-see) QC958

Telnet access achieved but I can't log in.

IP address also changes on reboot.
 
what's telnet access going to accomplish for you?

rebrands often come with customized firmware; they could have seeded it differently.
 
nayr said:
what's telnet access going to accomplish for you?

rebrands often come with customized firmware; they could have seeded it differently.
Click to expand...

Well I want to view the web UI on my mac but it doesn't have a pre installed web plugin for OSX. I also would like to see if it is possible to unlock telnet.

Since you said that is it repackaged. I asked the company and they buy the hardware and resell it from Dahua. Dahua is the parent company of Q-See. The steps you listed allowed me to enable telnet. Two accounts admin and root are both enabled in telnet. I can't get the admin or root passwords to work.
 
you cant do anything via telnet like that, try downloading SmartPSS for mac..

its a read-only system with a single massive binary doing all the work, once you telnet in there is nothing to be done unless your trying to hack the software via reverse engineering..
 
nayr said:
you cant do anything via telnet like that, try downloading for mac..

its a read-only system with a single massive binary doing all the work, once you telnet in there is nothing to be done unless your trying to hack the software via reverse engineering..
Click to expand...

Thanks. Also I have hacked BusyBox before. I modified a WD MyCloud Gen 2 to run Chrooted Debian with a limited XFCE desktop over VNC.

I will give SmartPSS a try. Hopefully it works because it looks like a modified Dahua board with Q-see branding. (Similar to Lorex a smaller Costco brand)
 
you have about 6MB of flash space to work with and almost all of it is taken by the binaries on there; not much left for custom binaries.. and none of the code running the camera hardware is open/available so you cannot do much at all with the hardware directly.. the most Ive seen accomplished is burning a statically compiled ffmpeg into the default image and using that to push RTSP over localhost to an external streaming service like YouTube.. any more than that and you would need to wipe out everything on the camera and build your own software from reverse engineering entirely.. quite the daunting task.

@cor35vet has developed some tools to unpack and rebundle firmware images, and he's decompiled and debugged the software running on it to make very simple modifications directly to the binaries such as allowing multiple language files to be loaded without throwing a fit.. but there's only so much that can be done by flipping some bits around and cracking binaries.. disable a check, easy peasy if you are savvy enough with cracking.. changing the underlying functionality entirely, thats a big ass can o worms.
 
nayr said:
6MB of flash space to work
Click to expand...
That's even less than I have to work with on the MyCloud! On the MyCloud the Root has 100MB of space and the rest is the 2TB drive.

Anyway I don't know if it's my system or not but SmartPSS keeps crashing. I can't find an official download from Dahua though.

It seems like too much work to use telnet anyway. The only thing is that no software that I found yet can access this DVR. It's basically like my old DVR which fried itself overnight (internally and I woke up to smoke).

Anything else that you recommend I use to view this on my Mac?
 
Yeah and unlike your MyCloud it dont have a local HDD to stash more stuff on, would have to load everything up off a NFS share or something.. thats how I run my own binaries on the hardware directly or make a backup of the flash by dumping it to a NFS mount.

Dahua Wiki
Troubleshoot/NVR/How To Install Chrome Extension - Dahua Wiki

and there's always good ole direct RTSP via VLC
 
nayr said:
Yeah and unlike your MyCloud it dont have a local HDD to stash more stuff on, would have to load everything up off a NFS share or something.. thats how I run my own binaries on the hardware directly or make a backup of the flash by dumping it to a NFS mount.

Dahua Wiki
Troubleshoot/NVR/How To Install Chrome Extension - Dahua Wiki

and there's always good ole direct RTSP via VLC
Click to expand...

Well I taught that the recording HDD works as a local HDD?

I am going to try the chrome extension. Also if you don't mind can you explain the RTSP via VLC? Thanks
 
nope the binary blob writes to the disks directly; no filesystem is used..

open network stream in VLC with a URI such as:
Code: 
rtsp://username:pass@host:554/cam/realmonitor?channel=1&subtype=0
 
nayr said:
nope the binary blob writes to the disks directly; no filesystem is used..

open network stream in VLC with a URI such as:
Code: 
rtsp://username:pass@host:554/cam/realmonitor?channel=1&subtype=0
Click to expand...

As an update the steps to install the web plugin don't work. I am trying the VLC method. I will repost if it works.
 
did you copy the SmartPSS.app to your Applications folder? if you try to run it out of a compressed file it will fail.

Ive got it on a few mac's of various versions w/out problem.. dont have all the features the windows SmartPSS does but I use it 24/7/365

web plugin also works for me; but only in Safari
 
nayr said:
did you copy the SmartPSS.app to your Applications folder? if you try to run it out of a compressed file it will fail.

Ive got it on a few mac's of various versions w/out problem.. dont have all the features the windows SmartPSS does but I use it 24/7/365

web plugin also works for me; but only in Safari
Click to expand...

Yes I copied the web pugin to the applications folder and used the login admin/admin (I assumed it would work or give me password incorrect if it didn't.)

Web Plugin on this DVR doesn't have a mac variant only a windows version (Copy and paste web UI)

I think the RTSP method works well. Although limited to one camera I don't mind for now. Still looking into solutions. I have a Windows Server machine laying around maybe SmartPSS can work on it?
 
Last edited:
You must log in or register to reply here.
Top Bottom