Jump to content

Require admin login and password - IP Camera


Recommended Posts

Posted

I cam across this site while searching how to obtain the login credentials for an unknown IP camera that I had gotten off an online auction (like the guy from here).

 

So far, what I know is that the IP cam is made by Shenzhen Gwelltimes Technology Co., Ltd (found in Advanced IP Scanner & Angry IP Scanner). There is no make, brand or model number listed. I have only the picture of what I had purchased from a vendor (picture of IP Cam from vendor's site attached below).

 

I have attempted to scan for open ports only to come up with 2.. 554/tcp (rtsp) and 5000/tcp (upnp) [done with ubuntu 16.04 LTS's nmap]

I have got it running on onvif1 but the ip camera is capable of 960p instead of 180p (displayed in rtsp stream). This IP camera runs off an app (android) named yoosee. The reason why I require the admin login credentials is because when I try to add the ip camera on pc (CMSClient), it asks for the login credentials. Without the login credentials, I am unable to view the live stream in 960p nor can I view the playback that is recorded on the local microSD. The only way to view the camera is to share the camera through a link from yoosee and use the link in CMS resulting in the limitation of functions for the IP camera. This IP camera does not have PTZ features.

 

Tried to search how to hydra or john the ripper this but it's taking forever (3 days and going coz of slow pc).

 

Any guide would be appreciated or help with attempting to retrieve the credentials would be most welcome. I could post the share link if needed but it's only valid for around 30mins or less. Thanks for reading this and if this post is in the wrong section, please do move my post to the correction section.

 

Image of the IP Camera >>here<<.

Posted

Have you tried contacting the supplier?

There are plenty of sites that give lists of default IP camera credentials, I'd go through them and give them all a try. These things usually reuse firmware so there is a lot of password reuse.

Posted
15 hours ago, digininja said:

Have you tried contacting the supplier?

There are plenty of sites that give lists of default IP camera credentials, I'd go through them and give them all a try. These things usually reuse firmware so there is a lot of password reuse.

@digninjai, Yes i've tried contacting the supplier, though, no response from them yet. As for the vendor, they don't seem to know the id and password as well. I've tried all the known logins from here and here.

Posted

Just did a deeper scan and found these.. thought I have no idea how to extract / dump these files out onto an external storage / source :S

Posted

He might not be able to send it back - buying it from an online auction. They might pull the "well we don't know what the guy before you did with it - you bought it, you should check it" card. Which, in my opinion, is perfectly valid - unless the auction is some official one where things are bought as new, not "as is".

Unless, of course, it is still under warranty.

Would the IP camera's MAC address be in the range 4C:B0:08:xx:xx:xx? The name "Shenzhen Gwelltimes Technology Co., Ltd" would have probably been retrieved from that.

Chinese MAC matching a Chinese camera.

Posted (edited)
On 3/21/2018 at 6:34 AM, Dave-ee Jones said:

He might not be able to send it back - buying it from an online auction. They might pull the "well we don't know what the guy before you did with it - you bought it, you should check it" card. Which, in my opinion, is perfectly valid - unless the auction is some official one where things are bought as new, not "as is".

Unless, of course, it is still under warranty.

Would the IP camera's MAC address be in the range 4C:B0:08:xx:xx:xx? The name "Shenzhen Gwelltimes Technology Co., Ltd" would have probably been retrieved from that.

Chinese MAC matching a Chinese camera.

@Dave-ee Jones yes, it happens to be as you said. Unfortunately i am unable to connect to any rtsp urls except for the onvif2 stream which isnt listed in the nmap results :(

 

On 3/20/2018 at 4:26 PM, digininja said:

I'd send it back as not usable under warranty then if you can't log in and use it.

@digininja I'd thought about that and decided to contact the vendor to ask for a refund. Unfortunately. they're one of those who decide once sold, items are non-refundable. Hence I'm stuck trying to breach the security issue and accessing the login details, which till today, still hasn't achieved anything yet and still running :S

Edited by rEcaP

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...