Hikvision camera admin password reset tool

[alastairstevenson]

Only Hikvision can process that export for you.
What version of firmware does SADP show?
If it's 5.4.4 or earlier, use this URL to extract the configuration file :
http://<camera_IP_address>/System/configurationFile?auth=YWRtaW46MTEK

 

[slabbetje]

Only Hikvision can process that export for you.
What version of firmware does SADP show?
If it's 5.4.4 or earlier, use this URL to extract the configuration file :
http://<camera_IP_address>/System/configurationFile?auth=YWRtaW46MTEK

Dear,

The version is; 5.5.82.

I have already contacted Hikvision for a decrypted export.
That file are only valid for 24 hours.

I see everytime; Reset password failed
in the SADP tool.

Regards

 

[saniaowner]

Hello
Thank you so much for the password reset instructions. I managed to reset using TFTPServ, and also using this link http: / <camera_IP_address> / System / configurationFile? Auth = YWRtaW46MTEK On a test camera with firmware 5.4.2, the password was successfully opened in the HEX editor. Unfortunately, I did not find instructions on the Internet how to do this, but if necessary I can do it for you and put the finished VirtualBox image file. Also, if someone doesn’t have any of the methods listed on the forum, I have a tech support friend who can generate an XML file for $ 20. It doesn’t matter which country you are from or whom you bought the camera or DVR / NVR for. I also have Xiongmai cameras / DVR / NVR reset accesses

 

[alastairstevenson]

Unfortunately, I did not find instructions on the Internet how to do this

Multiple how-to references on this forum. Example :

DS-CD2035-1 password changed, hacked or a fault?

Hi, I've lost connection to a couple of Chinese DS-CD2035 (v5.4.0) camera's on my network. I'm not sure how but my password is no longer valid, I've also tried the default 12345 with no luck. I've tried contacting HIKvision, but naturally they're not able to provide a code. Is there anything...

ipcamtalk.com

 

[alastairstevenson]

I have a tech support friend who can generate an XML file for $ 20.

Is that a person with a remote logon to the Hikvision OA system that generates the XML reset keys?

 

[saniaowner]

Is that a person with a remote logon to the Hikvision OA system that generates the XML reset keys?

Yes, he is a support employee at a dealer company. He showed me how to do it. They have an XML reset site, but Hikvision gives them a special activation key to reset passwords

 

[saniaowner]

Multiple how-to references on this forum. Example :

DS-CD2035-1 password changed, hacked or a fault?

Hi, I've lost connection to a couple of Chinese DS-CD2035 (v5.4.0) camera's on my network. I'm not sure how but my password is no longer valid, I've also tried the default 12345 with no luck. I've tried contacting HIKvision, but naturally they're not able to provide a code. Is there anything...

ipcamtalk.com

Thank you, but this is part of the manual .. Complete on Github
I also think that I can automate the process of generating the final file. And you will only need a password using the HEX editor

 

[alastairstevenson]

Thank you, but this is part of the manual .. Complete on Github

Hmm.. where is that, I haven't found it.

 

[saniaowner]

Hmm.. where is that, I haven't found it.

GitHub - WormChickenWizard/hikvision-xor-decrypter: Used for breaking XOR encryption on Hikvision configuration files that have been decrypted using aes-128-ecb

Used for breaking XOR encryption on Hikvision configuration files that have been decrypted using aes-128-ecb - WormChickenWizard/hikvision-xor-decrypter

github.com

 

[alastairstevenson]

Thanks for that, I had a look. It's good to share these type of things.

By the way, just for info, configuration files from firmware revisions that have the Hikvision backdoor are not in Sqlite3 format - just a binary file.
Later versions of the firmware do use a Sqlite3 database for the configuration elements, but, sensibly, the admin password is held in a hashed format, not plaintext.

 

[hariskar]

I am trying to reset NVR DS-7204HUHI-K1 with software 3.5.50 without success till now. I tried with SADP tool with the serial number. Date is correct, I took the serial from SADP and tried without DS-7204HUHI-K1 in front of it.
I also tried with tftps but it gives Connect client falure,0. IP is correct (192.0.0.128), I tried with direct connection and with router with the same result.
I also sent *.xml to hik support, but they replied that they don;t support end customers, only the company.

Any other ideas?

 

[alastairstevenson]

I also tried with tftps but it gives Connect client falure,0.

I'm speculating that the digicap.dav for what I believe is a K72 series DVR is just over the 32MB size limit of the Hikvision tftp updater.
What others have used that works, if that is the problem, is to run a standard tftp server at the same time, such as the Jounin tftpd32 from here :

Tftpd32: an opensource free firewall friendly dhcp, syslog sntp and tftp server/service for windows, tftp client

A free tftp and dhcp server for windows, freeware tftp server

tftpd32.jounin.net

I'm not sure what order it's needed to start them in.

 

[hariskar]

Thanks a lot for reply! The digicap.dav is about 15MB. DOWNLOAD EU PORTAL

So the problem is something else..
Why is everything failing?

 

[saniaowner]

Thanks a lot for reply! The digicap.dav is about 15MB. DOWNLOAD EU PORTAL

So the problem is something else..
Why is everything failing?

Hi
Send me a sticker photo from the DVR and export the xml file. I will try to reset the settings. After exporting the file, do not turn off the DVR and do not restart it

 

[hariskar]

Thanks a lot for the file, it works!!!

 

[failpizza]

Can anyone help me to get access to my Camera.

Last night I did a test setup added a password and answered the question. Didn't safe the file aagh :fire:

it's a IPC-D140H on the box SADP reported a IPC-D121H firmware is v5.5.73

HikPasswordHelper and also the url zip didn't helped

many thanks in advnace!

 

[saniaowner]

Can anyone help me to get access to my Camera.

Last night I did a test setup added a password and answered the question. Didn't safe the file aagh :fire:

it's a IPC-D140H on the box SADP reported a IPC-D121H firmware is v5.5.73

HikPasswordHelper and also the url zip didn't helped

many thanks in advnace!

Hello
Have you tried contacting Hikvision Technical Support?
You can also try to reset the password using the firmware of your camera utility TFTPServ

Your camera firmware version is too new, and does not have known vulnerabilities

 

[failpizza]

They stoppes responding after I was not able to reset it with the files.
I turned of the camera after I send the files

where would I find the firmware for the camera?

with the tftp methot, I do not get a connect from the camera on 192.0.0.128
the subnetmask is 255.255.255.0 any guesses.
turning off the cam replug for a boot

 

[richardw38fly]

Hi all, we acquired a DVR-208Q-F1 when we moved into a new building. Previous tenants left it attached to the cameras. I cant get the password reset page to give me code that works. Could someone please decode this xml file?

 

[OICU2]

I need some assistance with a Hik DS-2CD2332-I2 camera. It was supposed to be 'new' from eBay but it looks like it was already activated. I can see it in SADP but can't change any settings because I don't have a password. The firmware is 5.3.0 build 151016. I tried the tool but it doesn't seem to work. Any other way to reset this?