Download the Hikvision Backdoor exploit tool. Obviously, you need the IP camera information to be able to configure the software properly, and I strongly recommend that you use this tool on the Hikvision IP cameras you own or have authorization to run security tests.
You don't suppose to hack CCTV camera that doesn't belong to you. The Hikvision exploit tool can be used to test your IP cameras and make sure they have the security vulnerability corrected by firmware update. OK, now that you know you don't suppose to be hacking other people IP cameras, let's talk about the Hikvision exploit tool.
The exploit can hack CCTV camera by getting the IP camera internal user list and setting a new password for one of them according to your choice.
To use the software just follow the steps below:. Type the camera IP and port. Click "get user list". Select the user to change the password. Type a new password and click the button. After following these steps, you just need to type the camera IP and port on a Web Browser and login by using the credential you just created.
See below the Hikvision camera models that are affected by this security vulnerability issue. If you have one of them just upgrade the firmware to correct to problem so you don't have your CCTV camera hacked. It's also possible to hack Hikvision camera by just sending a specific command that gets the camera information or take a screen shot.
The same models and firmware version described above are affected by this issue. If you type the camera IP and port followed by the command below you will see the camera details, such as device name, model and firmware version. The camera returns the information just like shown in the image below:. Just by issuing a similar command it's possible to take the IP camera screenshot and see what is behind the CCTV camera. It's a security flaw. See below the command to get the IP camera screenshot.
After issue this command to the Hikvision IP camera the image below is displayed in the Web Browser without the need for authentication. Screenshot from a Hikvision IP camera click to enlarge. Disclaimer: The image above is from a Hikvision camera which was using an old firmware version as previously described in this article.
The company has a fix for this issue so the new models don't have this security flaws. Just imagine the CCTV camera is using a password that is based on a regular word that can be find on a dictionary such as " god, home, secret ", etc. Somebody could get hack the CCTV camera by just trying different all those passwords until find the correct one. That is something that works. Alright, you are thinking now that this method is too hard and slow since it's complicated to type any word that is available in a dictionary just to try to find the one that is going to work to login into the CCTV camera, right?
Well, if you let this task to a software that can test hundreds or thousands passwords per minute you can have a better chance to succeed. Take a look at the diagram below to understand how this technique works. You can use Hydra for Linux or Windows and you just need to have your password file ready will the words you want to use and issue the command. The software runs and start trying different words it gets from the txt file and keep doing this until there's a match.
If the CCTV camera allows for those fast tries it's just a question of time to the software find the correct password. Modern IP CCTV cameras don't allow this type of brute force attack because they block themselves for some time after too many login attempts. There are different ways to hack CCTV camera and all of them involves at least some basic skills from the attacker that must be able to understand at least a little bit about Internet and how to use a computer and software. The idea behind this article is to help people to understand how a CCTV camera can be hacked and how to minimize the chances of an attacker.
I used some example just to show what is possible to do and most of the techniques used by hackers can work with different devices. Note: I'm not supporting any CCTV camera manufacturer or brand and I also don't recommend any attempt to hack into somebody else's camera. Search for: Search. Use a website that shows hacked CCTV cameras. Hack CCTV camera using default passwords. How to find the IP camera on the Internet. Click Next. Click Install. Click Finish. Hikvision hacked DVR click to enlarge.
Hack CCTV camera process details. How CCTV camera hacking work diagram click to enlarge. How to hack CCTV camera diagram click to enlarge. Hack CCTV camera using shodan. Shodan shows the details about the IP device. Details about the device location and owner. Details about the device ports. Hack CCTV camera using exploit tool software. The Hikvision IP camera security flaw. How the IP camera exploit works.
The Hikvision IP camera exploit tool. Cameras that are affected by the security vulnerability. Hack CCTV camera using a simple command. How to get the IP camera information. How to take a camera screenshot. Hack CCTV camera by brute force attack. See below the syntax. Final words and conclusion. Share 0. Star MIT License. Branches Tags. Could not load branches. Could not load tags. Latest commit. Git stats commits. Failed to load latest commit information.
CI: Added workflow configuration. Dec 14, Set downloads from github to use tls1. Apr 26, Jul 16, Jan 23, Initial commit. Jan 4, Mar 15, View code.
0コメント