how to find/reset username on hikvision OEM

Sep 11, 2020
3
0
Australia
doing a rewire on a house and this includes replacing the cctv,
pulled out the old cameras and trying to reset them, they all seem like OEM with zero branding and weird software,
however the Domes work with Dahua ip and had a hard reset.

My issue is with the bullets, ive been over every inch of the inside trying to find a hard reset, there is none. they talk ok with hikvisions SADP, and i was able to successfully reset the password using its date (which seems stuck on 3 years ago) and serial number to gain a security code. however it seems like someone changed the username (and this doesnt get reset),
so i cant access the camera via a browser which needs a correct username/password combo.

is there anyway to find out the username?? or to reset this device?

yes its oem and a throw away most likely, but ive spent a day on it, replacing the corroded terminal, working out what wires to place where in an rj45 and getting it up and running, and researching this issue, now its becoming almost a principle thing,
not to mention ive learnt an extreme amount of information in the process
software version:HC200C2_AF_V0_Y_EN_L V2.3.11 build 2018-03-06 1

cheers guys
 
they all seem like OEM with zero branding and weird software,
I'd hazard a guess that they are off-brand Chinese, with a 'hikserver' capability that responds to a subset of the Hikvision API such that SADP works with them.
That's pretty common these days.

Can you scan their IP address with nmap or fing to see if telnet access is available?
 
Can you scan their IP address with nmap or fing to see if telnet access is available?

lots of new things to research, what i found out so far wasnt very encouraging though, i can test common ports like 80 which are open, telnet port 23 is closed however :/
will keep digging.

just to clarify, i have a default password on it, this works to apply SADP settings and change the ip, however without the username, any form of login grinds to a halt
 
I'm just wondering how big a subset of the Hikvision API the presumed 'hikserver' is supporting.
It's usually quite limited, such as being found by SADP, changing network settings in SADP (usually with no password needed).
It's unlikely to do anything - but easy to try - see if the 'export config file' URL works :
http://<camera_IP_address>/System/configurationFile?auth=YWRtaW46MTEK

i can test common ports like 80 which are open, telnet port 23 is closed however :/
Did you do a full port scan including the high ports?
Usually the 'command and control' ports provide an indication of whose firmware is running.
 
i appreciate the interest your taking in this little project of mine, its doing my head in but at the same time, its quite exciting and i think will be good experience as i move from electrical to security :thumb:
I'm just wondering how big a subset of the Hikvision API the presumed 'hikserver' is supporting.
It's usually quite limited, such as being found by SADP, changing network settings in SADP (usually with no password needed).
hmmm, before i reset the password, SADP failed any changes, and after i reset the password and SADP started working, the web login failed while citing incorrect user or password (password set to default leading to the conclusion its a username issue, RSTP also fails while attempting login with default username)

that said, ill try exporting the config file and see what happens

Did you do a full port scan including the high ports?
Usually the 'command and control' ports provide an indication of whose firmware is running.
ill try a rescan, fing was freezing on me and only allows 1 attempted port scan per day, might try nmap. again, appreciate your input and will post any useful findings i get.
cheers man