Need help with unv camara reset.

[Abdul123]

Hi. I have 4 used univew ip camaras. I just want to know how to reset them so they can work with my hikvision nvr. Also what is the procedure to add to hikvision nvr. Step by step guide would be great as i am a beginner. Any help would be appreciated thanks in advance.

 

[alastairstevenson]

I just want to know how to reset them so they can work with my hikvision nvr

From my notes on a couple of used WGCC/Uniview domes I bought off eBay about a year ago :

On the UNIPC-3204WD-I
=====================

No external reset button, none internal either.
Some searching didn't yield any useful reset codes.
So I took the dome off, found the serial console pads and took it from there.

The serial console booted to a login prompt.
I found later that root/123456 gave access to a restricted (but still useful) command shell provided by the /usr/bin/uvsh
program referenced in passwd.
root:dIkAjCy0Zma2s:0:0::/root:/usr/bin/uvsh

The bootloader had an interesting sfbin command which I used to do a full flash dump, which was then able to be unpacked.
The Webadmin password is in there - but encoded, looks like an MD5 hash of various items.
Maybe see if hashcat can work on that.

Having grabbed the full flash dump, I used the resetconfig command at the serial console shell to set the camera back to defaults.
It works perfectly well, supports ONVIF, quite good low-light (OV4689) and connects OK to the 7604NI-K1 NVR.
Manufacturing date appears to be 16Jan 2019 - it looks unused.

Quite interesting to get inside and look around - and see how another manufacturer does their firmware.
The kernel supports bootargs parameter 'single' - so a full shell prompt can be used.
But it doesn't support NFS, so I used tftp to extract the contents.

 

[alastairstevenson]

used WGCC/Uniview domes I bought off eBay about a year ago

Not that it matters - I had a look back and it was Gumtree.

The Webadmin password is in there - but encoded, looks like an MD5 hash of various items.
Maybe see if hashcat can work on that.

And hashcat did indeed make short work of the web admin password, not that I needed it :

How to use hashcat on the md5 hash used for the webadmin.
I just tried with mostly default settings.
hashcat -m 0 -a 3 hash_file_1.txt

And appeared to get a result ... see below.


0090c47c9e371931f2753fa2fd85e46a:dziwka5                 
                                                          
Session..........: hashcat
Status...........: Cracked
Hash.Type........: MD5
Hash.Target......: 0090c47c9e371931f2753fa2fd85e46a
Time.Started.....: Mon Aug  5 13:37:34 2019 (21 mins, 41 secs)
Time.Estimated...: Mon Aug  5 13:59:15 2019 (0 secs)
Guess.Mask.......: ?1?2?2?2?2?2?2 [7]
Guess.Charset....: -1 ?l?d?u, -2 ?l?d, -3 ?l?d*!$@_, -4 Undefined
Guess.Queue......: 7/15 (46.67%)
Speed.Dev.#1.....: 75666.2 kH/s (9.60ms)
Recovered........: 1/1 (100.00%) Digests, 1/1 (100.00%) Salts
Progress.........: 119888412672/134960504832 (88.83%)
Rejected.........: 0/119888412672 (0.00%)
Restore.Point....: 1490944/1679616 (88.77%)
Candidates.#1....: 3igtnxg -> 4yrbgoz
HWMon.Dev.#1.....: Temp: 79c Fan: 65%

Started: Mon Aug  5 13:36:49 2019
Stopped: Mon Aug  5 13:59:16 2019



And this was what it made of the has for the default password of admin
It look just 3 seconds!

21232f297a57a5a743894a0e4a801fc3:admin                   
                                                          
Session..........: hashcat
Status...........: Cracked
Hash.Type........: MD5
Hash.Target......: 21232f297a57a5a743894a0e4a801fc3
Time.Started.....: Mon Aug  5 14:05:24 2019 (0 secs)
Time.Estimated...: Mon Aug  5 14:05:24 2019 (0 secs)
Guess.Mask.......: ?l?l?l?l?l [5]
Guess.Queue......: 1/1 (100.00%)
Speed.Dev.#1.....: 86900.0 kH/s (9.73ms)
Recovered........: 1/1 (100.00%) Digests, 1/1 (100.00%) Salts
Progress.........: 851968/11881376 (7.17%)
Rejected.........: 0/851968 (0.00%)
Restore.Point....: 0/456976 (0.00%)
Candidates.#1....: sarie -> hwvgo
HWMon.Dev.#1.....: Temp: 64c Fan: 50%

Started: Mon Aug  5 14:05:22 2019
Stopped: Mon Aug  5 14:05:25 2019