Search results

  1. TIGOS1

    Hacked DAHUA cam and added that names

    I've also seen many videos of how this vulnerability is exploited. Found a way to check if my camera is vulnerable to these vulnerabilities. ( GitHub - umair-aziz025/dahua-cve-research: Dahua IP camera CVE research toolkit (CVE-2021-33044/33045, CVE-2025-31700/31701) ) But that's all just...
  2. TIGOS1

    Hacked DAHUA cam and added that names

    There are quite a few reasons to sometimes turn on your camera for online broadcasting. That's why I created this thread. Not to find out what happens if you isolate the camera from the internet. We're looking for a way to secure the broadcast. Do you have a better idea than creating all...
  3. TIGOS1

    Hacked DAHUA cam and added that names

    This is what I've been writing about here since the beginning. The only problem is, I couldn't find a description of the vulnerability and how to work around it. My countermeasure, which I described in the first post, is based on assumptions: I assume that this is simply done through scripts...
  4. TIGOS1

    Where can I find the latest firmware for a Chinese Dahua NVRs?

    I'm looking for firmware that understands the cloud. The interface language isn't important to me. A long time ago I already asked about this reg here, but it wasn’t very important then. Dahua NVR5432-i The current firmware version is V4.000.0000000.1 2019-08-09 There's an identical version...
  5. TIGOS1

    Hacked DAHUA cam and added that names

    Will they be? They already are. Dahua just doesn't announce it. And Dahua doesn't care about cameras that are more than three years old. There are no new firmware updates for them. And yet, users around the world continue to trust them with their business.
  6. TIGOS1

    Hacked DAHUA cam and added that names

    This is an old hacking system. It's been publicly available for a long time. It only works with cameras for which Dahua doesn't release firmware updates. I'd like to point out that everything written in this thread concerns hacking new cameras with new firmware. We're talking about cameras...
  7. TIGOS1

    Hacked DAHUA cam and added that names

    :rofl: :lol: :winktongue: 800 cameras are in one of the apartment buildings I provide technical support for. I have a small company in this line of work. I have 23 such buildings in my region. The most interesting thing is that these added users are constantly and periodically used. This...
  8. TIGOS1

    Hacked DAHUA cam and added that names

    All my cameras that were hacked over a year ago, which is why I created this thread, all had the same logs: Camera access was via P2P No username was used during access A new user with admin rights was created The unnamed user disconnected No brute force or other attacks were used. The...
  9. TIGOS1

    Hacked DAHUA cam and added that names

    My clients have dozens of dashcams in their apartment complexes. Even statistically, it's impossible for them not to be hacked. And that's true. On average, out of 20 dashcams/NVRs, one or two have been hacked via P2P, and these are the ones with the names listed in the screenshot a few posts...
  10. TIGOS1

    Hacked DAHUA cam and added that names

    Dahua claimed all the problems were due to using old P2P apps, but that's not true. I have about 800 cameras in just one apartment complex, and over 100 were hacked via P2P. When hacked, the password isn't used. A log entry appears: an unnamed user connected via P2P. The user added a new...
  11. TIGOS1

    Hacked DAHUA cam and added that names

    I created this thread about a year ago. Back then, my cameras were hacked via P2P. But for the users of this forum, this is unbelievable. I feel like they've been living in a world of unicorns and pink clouds for years.
  12. TIGOS1

    Hacked DAHUA cam and added that names

    A-ha-ha-ha....:lol::winktongue::rofl:
  13. TIGOS1

    Hacked DAHUA cam and added that names

    Please send that group`s Trying to come up with a way to counter-hacks cameras with old firmware But these ideas are not automatic. It's not like a manufacturer releasing updates. It's an attempt to come up with something. Have a few ideas for this Already figured out how to massively turn...
  14. TIGOS1

    Is it possible to install non-standard video resolution in Dahua cameras?

    Thought about it. But it seems to me that the application that wanted 4:3 and glitched at 16:9 will also glitch for 9:16 But I'll try
  15. TIGOS1

    Is it possible to install non-standard video resolution in Dahua cameras?

    This might be funny, but I have exactly this problem with a 2431 series camera (IPC-HDW2431TP-ZS-S2)
  16. TIGOS1

    Is it possible to install non-standard video resolution in Dahua cameras?

    I use an app to work with a video stream in RTSP from a Dahua camera. This app need an aspect ratio of 4:3 Only 4:3 In menu of my camera I see only these resolutions: 2688*1520 2560*1440 2304*1296 1920*1080 1280*960 1280*720 Only 1280*960 is 4:3 aspect ratio But i need better quality The...
  17. TIGOS1

    Permanently Disable p2p protocol in DAHUA devices using API

    Thank you ALL, your answers were very, very helpful in answering the question I asked.
  18. TIGOS1

    Permanently Disable p2p protocol in DAHUA devices using API

    I'll answer myself (I think that this will help someone many times, unlike unsolicited advice ) Permanent disable P2P Dahua service: http://<ip>/cgi-bin/configManager.cgi?action=setConfig&VSP_PaaS.Online=false http://<ip>/cgi-bin/configManager.cgi?action=setConfig&VSP_PaaS.Enable=false...
  19. TIGOS1

    Permanently Disable p2p protocol in DAHUA devices using API

    Thank you. But UPNP is always disabled by default in my routers. This is the first thing I check when setting up a network. Much better if you help me with the API command I'm looking for
  20. TIGOS1

    Permanently Disable p2p protocol in DAHUA devices using API

    Downloaded many different APIs dpcuments for Dahua devices Searched for a long time how to disable the use of p2p networks, using API commands All I found was this: http://<ip>/cgi-bin/configManager.cgi?action=setConfig&T2UServer.Enable=false But this allows you to get rid of P2P only until...
  21. TIGOS1

    Hacked DAHUA cam and added that names

    Thank you wery much... And thank you for your read fully my message at all :) It was these tips of yours that really helped in solving the problem described. But if I answer you seriously: I can advise you to check each of your cameras for hacking just in case I really hope that YOUR vpn...
  22. TIGOS1

    Hacked DAHUA cam and added that names

    For now, I'm trying to protect my clients from botnet attacks. Botnet doesn't analyze what I have there and how, it adds its user according to a template. That's why I would like to have the names that botnets added to your cameras
  23. TIGOS1

    Hacked DAHUA cam and added that names

    Your all answers were very helpful in the task I described in the topic. Thank you all very much :) I would like to collect in this topic not advice "to turn off video surveillance" to be safe I would like everyone who has encountered this to write lists of new users added to you after the...
  24. TIGOS1

    Hacked DAHUA cam and added that names

    I don't use port forwarding. I don't see the point. Besides, it's the most common vulnerability for hacking. To add cameras, I first set up NVR inside the local network Then I add cameras to this NVR (I don't use the KR code of the cameras. And I don't understand why this is necessary) And of...
  25. TIGOS1

    How to bulk get users lists from all local cameras DAHUA <getUserInfoAll> to text file?

    As I answered there - then the cameras will be hacked through VPN. Or are you 100% sure that your VPN will be impenetrable?
  26. TIGOS1

    Hacked DAHUA cam and added that names

    Should P2P also be turned off on NVR? Port forwarding has not been used for many years (if I am not mistaken) Maybe simply turn it off?
  27. TIGOS1

    Hacked DAHUA cam and added that names

    VPN is also access. This is how the network works You either turn off the network or not
  28. TIGOS1

    How to bulk get users lists from all local cameras DAHUA <getUserInfoAll> to text file?

    I responded to a similar suggestion in another post: Maybe yes. But how then to use access to the NVR from the phone? Hire a security guard for every home? Not use video surveillance? If everything is so terrible, then why do you need to update the firmware of the cameras? After all, someday a...
  29. TIGOS1

    Hacked DAHUA cam and added that names

    Maybe yes. But how then to use access to the NVR from the phone? Hire a security guard for every home? Not use video surveillance?
  30. TIGOS1

    Hacked DAHUA cam and added that names

    I guess your theory is that I have port forwarding done on each camera? I may disappoint you. The process of adding a new hacked user was found in the logs: A connection was made using p2p without a user name but with administrator rights. After that, a new user was added That's it.