A tool which exploits a backdoor in Hikvision camera firmwares circa 2014-2016 (ICSA-17-124-01) to help the owner change a forgotten password.
Home Support Videos Operation Password Reset&Device Activation Search Product Select Category Network Camera Thermal Camera Analog Camera PTZ Network Video Recorder Digital Video Recorder Kits Video Encode & Decode Card Encoder Mobile Video Intercom Access Control Traffic Transmission & Display Enterprise Network Storage Alarm HiLook. This is often done using the reset button on the back of your router. You may have to use a paperclip to push a recessed button on the back of the router. Unplug the router, push and hold the reset button while you plug the power cord back in. Continue holding the reset button for up to 30 seconds and let the router boot as normal.
Usage
Download HikvisionPasswordResetHelper.exe
from the releases tab and run the exe.
There are 5 simple steps to reset a password, and you can even skip steps 3 and 4 in many cases.
Requirements
.NET Framework 4.5.2 - This is included in any modern Windows installation.
A Hikvision device that is vulnerable to ICSA-17-124-01.
Here is an incomplete list of camera firmwares that have been reported to be vulnerable or not. This list is compiled from various sources and the camera models are unspecified. Some camera models are reportedly vulnerable at different ranges of firmware versions, so I would not put complete faith in the accuracy of this list for all camera models.
Hikvision Camera Firmware Versions
Special Thanks
This tool was make possible thanks to the efforts of user montecrypto from the ipcamtalk forum.
See Also
If your firmware is too old to use this method to reset a lost password, you can try the reset code method:
If your firmware is too new, then I'm afraid you are out of luck because the reset code method won't work either.