Hello, I need to recover the NVR password, is it possible to do it with hex/bin dump of eeprom (exploit not work on this fw. version 3.4.96 build 171130) ?
I've been working on it for a while and searching the unpacked dump and I can't find. I have a large installation that needs to be modernized and there are several cameras there and I don't know password for cameras and NVR.
The camera firmware is 5.5.4, which is also already patched.Does anyone know what offset the cfg is in from which the password can be extracted. I try this method (Reset Admin Password on HikVision NVR Model : KEPLER-7604/4P) but not from tftp because in my U-boot command "sf" no exist.
I worked on a dump straight from memory read with the spi programmer.
NVR: Hikvision DS-7104NI-E1
uboot info form command printenv:
bootcmd=tftp 0x82000000 $(bootfile);bootm 0x82000000; default=cramfsload 0x82000000 uImage; sec=tftp 0x82000000 Ky2015-5-6-H352x-uImage_sec;bootm 0x82000000;
Regards
I've been working on it for a while and searching the unpacked dump and I can't find. I have a large installation that needs to be modernized and there are several cameras there and I don't know password for cameras and NVR.
The camera firmware is 5.5.4, which is also already patched.Does anyone know what offset the cfg is in from which the password can be extracted. I try this method (Reset Admin Password on HikVision NVR Model : KEPLER-7604/4P) but not from tftp because in my U-boot command "sf" no exist.
I worked on a dump straight from memory read with the spi programmer.
NVR: Hikvision DS-7104NI-E1
uboot info form command printenv:
bootcmd=tftp 0x82000000 $(bootfile);bootm 0x82000000; default=cramfsload 0x82000000 uImage; sec=tftp 0x82000000 Ky2015-5-6-H352x-uImage_sec;bootm 0x82000000;
Regards