Hikvision backdoor IP camera

[saniaowner]

Hello
With the help of Mr. alastairstevenson and a few instructions ( WormChickenWizard/hikvision-xor-decrypter), I managed to create a tool a few months ago to reset the password of Hikvision IP cameras with firmware 5.4.4 and below. I was a little surprised when I noticed that this tool has already begun to be actively used, and it makes me happy.
I am from Ukraine, and I don’t know English very well, therefore I use a translator. I'm sorry
This tool will help decrypt the password for your camera without resorting to reset it.

MANUAL
Step1.
Go to the following IP address in your browser
http://camera_ip/System/configurationFile?auth=YWRtaW46MTEK
Where, camera_ip - IP address of the camera. You can find out IP using the SADP program
If you are lucky, then the configurationFile is downloaded, it has no extension

Step2.
After that, open the link below, and select the downloaded file (configurationFile), then click for Decrypt and Download File
https://hikvision-world.space/hik_reset.php



The file that you downloaded from the server (the file will have the name 6bf2bc3e2e31b280d83051dfa7444e22plaintextOutput, the name changes every time) should be uploaded to the site with the online HEX editor
https://hexed.it



After that, enter “admin” in the search (as in the screenshot) and click the Search button. As a result, you will find 2 or 3 matches with this word. Among them there is a password from the camera in the open form



Click on 2 found match. As a result, you will find the Login and Password for your camera.


Step3.
Use the camera web interface and Internet Explorer to enter the camera

VIDEO MANUAL



If this method did not work for you, and technical support refused to reset the password, you can use my paid password reset service
https://world-cctv.space/manual/

 

[watchful_ip]

Also can likely reset with a UART TTL connection.
Some cameras also reset if TFTP digicap.dav to them (but many do not)

 

[saniaowner]

Also can likely reset with a UART TTL connection.
Some cameras also reset if TFTP digicap.dav to them (but many do not)

You are right, the TFTP server or UART method will also help reset the password. But you need to have firmware, or an adapter.

 

[watchful_ip]

Well the adapter is a few dollars, and the firmware is $0

 

[alastairstevenson]

I managed to create a tool a few months ago to reset the password of Hikvision IP cameras with firmware 5.4.4 and below.

Is this Method 3 your work also, or did they copy it from yours :

Alternative way of recovering HikVision NVR password

Thanks so much, that was the password that I put originally, but the system does not respond to that password it says that the password is incorrect (cameras and NVR). Any ideas what could be happening? Regards Carlos

ipcamtalk.com

I don't know how long that's been up there.

And I posted about the config file decrypt just over 2 years ago -

Hikvision FIRMWARE TOOLS - change language, extract files and create own firmware

i used this command to extract the dav file test@test-VirtualBox:~$ ./hikpack -t k41 -i digicap.dav -o contents Magic : 484b5753 hdr_crc : 00001d1a (OK) lang_id : 00000001 date_hex: 20150315 devclass: 00000043 File: cramfs.img, CRC OK WARN: missing new_20.bin trailer file Extra tail at the end...

ipcamtalk.com

It sounds like we're doing some good sharing around the globe.

 

[saniaowner]

They just put my reset method on their site. However, this is not important, I did it for everyone. You are right, the decryption tool was created a long time ago, but only in the version for Linux. I just made it more convenient as a website.

 

[watech89]

Any plans for an offline tool?

 

[watech89]

Any plans for an offline tool?

Looks like one was released last week:
WormChickenWizard/hikvision-decrypter