Hikvision camera admin password reset tool

RICHARD A POWELL said:
could someone who has used the tool for resetting a hikvision dvr try it to see if they closed the loop hone i have spent hours trying to no avail here is my info please any help would be gratly appreciated
DS-7208HGHI-SH
192.168.0.23
8000
V3.1.15build 170217
192.168.0.1
80
DS-7208HGHI-SH0820170519AAWR763175413WCVU
255.255.255.0
18-68-cb-83-1c-20
8
V5.0, build 160202
2018-03-11 22:14:21
2604:2d80:400e:96a8:1a68:cbff:fe83:1c20
fe80::725a:9eff:fe0f:20d0
64
Yes
No
Yes
ON
N/A
N/A
Click to expand...

DS-7208HGHI-SH password remove via spi flasher backup dump download file here hik vision DS-7208HGHI-SH.rar

password of NVR dump file admin1234
 
hi all,
i am new in this board, i really confuse now .. because the hikvision ip camera DS-2CD1021-I b,.. i do not know the admin password. i have tried any ways to reset the password but it's all not work,
current firmware = v5.5.54Build 180821,
IP address: 110.0.0.72
1. i have tried using Hikvision Password Reset 1.1.0.1 but i got error: (404) Not Found
2. i have tried download configuration file at , i got Access Error: 404 -- Not Found (..may be because the firmware version)
3. i have tried the web of Hikvision Camera Password Reset Utility with any part of no.serial number input trying, i still failed...with failed result "Other:2020"
4. i have tried using Hikvision TFTP server for downgrade (to v5.4.81 build 180203) or upgrade (to v5.5.83 build190620) the firmware but the process stuck only at "Complete file (...) transmit.", i wait until 1 hour but there is not message "Device update complete", next, i restart the ip camera and it still use existing firmware (no changed)
(btw i set my ip pc :192.168.1.128, to transmit via TFTP to the ip camera, because when i use ip 192.0.0.128 on my PC, the process only initialize.)
5. in my frustrated... i have send email to the hiksvision local suppord with key request file (*.xml). but until now i did not get response from them.

anyone can save me.......

Capture.JPGCapture2.JPG
 
Last edited:
dePoet said:
hi all,
i am new in this board, i really confuse now .. because the hikvision ip camera DS-2CD1021-I b,.. i do not know the admin password. i have tried any ways to reset the password but it's all not work,
current firmware = v5.5.54Build 180821,
IP address: 110.0.0.72
1. i have tried using Hikvision Password Reset 1.1.0.1 but i got error: (404) Not Found
2. i have tried download configuration file at , i got Access Error: 404 -- Not Found (..may be because the firmware version)
3. i have tried the web of Hikvision Camera Password Reset Utility with any part of no.serial number input trying, i still failed...with failed result "Other:2020"
4. i have tried using Hikvision TFTP server for downgrade (to v5.4.81 build 180203) or upgrade (to v5.5.83 build190620) the firmware but the process stuck only at "Complete file (...) transmit.", i wait until 1 hour but there is not message "Device update complete", next, i restart the ip camera and it still use existing firmware (no changed)
(btw i set my ip pc :192.168.1.128, to transmit via TFTP to the ip camera, because when i use ip 192.0.0.128 on my PC, the process only initialize.)
5. in my frustrated... i have send email to the hiksvision local suppord with key request file (*.xml). but until now i did not get response from them.

anyone can save me.......

View attachment 65121View attachment 65122
Click to expand...
Case Close ..
i have reset my DS-2CD1021-I, by received encrypt xml file from support hikvision, all done now.. and thank you for you all,.... many thanks for response, support and help especially from @SamM,
regards.
finish.JPG
 
  • Like
Reactions: gorg, djernie, looney2ns and 1 other person
Hi all,

Inherited an LTS 4-channel NVR, model # LTN8704-P4

SADP tells me it's running old/vulnerable firmware - V3.3.2build151208

For the life of me, I can't get the password reset tool to give me a code that works. I've read that for NVRs you're supposed to remove the model number from the serial number. So according to SADP, the serial number is:

LTN8704-P40420160923AARR123456789WCVU (removed the actual serial number)

I've tried the tool using:

LTN8704-P40420160923AARR123456789WCVU
0420160923AARR123456789WCVU
123456789

to no avail. The NVR has a working clock battery because the date is correct/current according to SADP. So I have been using today's date in the password reset tool.

I have read about the TFTP method and the backdoor method using a Hik camera with old firmware in one of the PoE ports on the NVR and exporting its config file. I will go to those lengths if need be, but before I do that I wanted to see if anyone had any ideas as to why I can't get the secure code method to work.

In case it matters, the method I'm trying to use to enter it is via the HDMI interface (double clicking the hidden button in the lower left of the login dialog box). I initially tried SADP but I'm wondering if you have to use an old version. When I click "Forgot password" in SADP it only offers me the option of the export/import XML file. I don't get the option to enter a security code.

Any ideas would be welcome.
 
alastairstevenson said:
It sounds like you don't have a suitable camera to connect to the NVR, is that correct?
Click to expand...

Thanks for the reply. I do probably have one that's old enough to have had a vulnerable firmware, but all my cameras have been upgraded to newer firmware, so would have to track down an old version and hassle with tftp, etc.

From what I've read, this "secure code" method is supposed to work on Hik NVRs, so that's why I'm pursuing this method first.
 
I updated a DS-7616NI-I2/16P 1620170114CCRR706923119WCVU as the "serial " in SADP.

When i try the password reset it doesn't work, but the firmware is a new one v4.40.015

Is there anyway to get this password reset. We actually knew the password but apparently it reset the config going from V3 to V4.

I have attached the XML too.

Thanks
 

Attachments

Many thanks to the OP! Just used this tool to unlock a 7608NI-I2 I got on eBay. Yes, the NVR was legit and NOT stolen. But the owner did not know the password.
 
Which point of contact do you all use for resetting Hikvision NVR passwords? My client can get in via his own login, but the moron that he is...he reset my password and screwed the system over. He's also a deadbeat that never pays his bills and is trying to hold a 6k check until I fix his 3 year old NVR that he reset the password on.

I've tried reset tool to no avail. I've tried contacting Hikvision via the website by uploading my xml file...per the norm they didn't respond because they want me to spend 3x the money to buy the "US" version of products.
 
Mucko said:
I've tried reset tool to no avail. I've tried contacting Hikvision via the website by uploading my xml file...per the norm they didn't respond because they want me to spend 3x the money to buy the "US" version of products.
Click to expand...
If the NVR has PoE ports and you have a Hikvision camera running firmware 5.4.0 or earlier (ie has the 'backdoor vulnerability') you can extract the NVR password if you reset the camera to 'Inactive' and plug it in to the NVR to 'Activate' it.
Check out this thread :

Alternative way of recovering HikVision NVR password

Hello, I am @Pjlord from Carmel in California, and I am new to this board, but I have been working with a couple HikVision systems for several years now. Hopefully, I posted this in the right forum section. Recently, I purchased a new home which had a HikVision system with 3 cameras installed...
ipcamtalk.com ipcamtalk.com
 
I've moved into a property and inherited a Hikvision system with 5 POE cameras. The NVR is a DS-7608NI-K2/8P, with 4 DS2CD2363G0-I cameras and 1 DS-2CD2355FWD-I cam. I haven't been left with any instructions or passcodes, and it seems like it's all relatively up to date, with the NVR being on v3.4.99 and the cams v5.5.51. Nothing I've done has worked and Hik won't help, I'm not sure what to do. Any help or advice would be appreciated.
 
What's the firmware versions on the cameras, any at 5.4.0 or earlier?
You can check this by connecting a PC to an unused NVR PoE port, SADP will show their details.

SADP Tool

Locate Hikvision brand cameras within the same network, including their IP address and port.
ipcamtalk.com ipcamtalk.com
 
borkensnoot said:
Nope, all at v5.5.51.
Click to expand...
That's a pity, but not unexpected.
No backdoors (that we know of) in that version.

Do you know anyone who may have a camera with older firmware?
There is a sneaky method where a camera with the 'Hikvision backdoor vulnerability' can be used to extract the actual NVR password.
 
Where are you based?
I have a Hikvision camera I could lend you to do the 'trojan horse NVR password extract' method that generally works OK.
Let me know if you want to try that.
 
You must log in or register to reply here.
Top Bottom