decrypt hik 2725 firmware

[sc8029]

I am trying to decrypt Hikvision firmware for a 2725 camera and can not seem to find anything that works. I saw this note on here re: decrypting hikvision firmware. The hikpak_25.zip is not available from rghost and the openssl command fails for me. Any help is appreciated - thanks

 

[alastairstevenson]

Do you have a link to the firmware you'd like to be unpacked?

 

[sc8029]

here is the link to the firmware on Hik's site.

 

[rearanger]

g1 ML 5.5 use leecher's unpacker

That firmware is rsa protected so you cannot repack and edit . unless you use montecrypto's G1 minsys

BTW 5.6.2 is out for this cam

see below for some G1 info

Hikvision G1 5.5+ firmware Exploring the Cam & attempting unlock

 

[sc8029]

thanks @rearanger and @alastairstevenson here is the updated link to the 5.6.2 version

 

[rearanger]

thanks @rearanger and @alastairstevenson here is the updated link to the 5.6.2 version

Yes you can unpack it.

just use leachers unpacker (in Linux)

./hik_repack10 -u digicap.dav en (to unpack)

./hik_repack10 -r digicap.dav en newdav (to repack if using montecrypto's minisys)

 

[sc8029]

@rearanger thank you for your help. I was able to locate leachers unpacker and use it. I was hoping to have digicap.dav decrypted but not extracted in one step. it sounds like I need montecrypto's minisys. I did a quick search and the only relevant link I found is back to this discussion. do you know where I can find that tool?

 

[rearanger]

See the g1 thread I posted a link too for montecrypto's minisys

. Unsure what you actually want to do to the cam. G1 firmware is protected with an RSA key.

 

[sc8029]

thanks again @rearanger and @alastairstevenson this worked well. I appreciate the help and donated to ipcamtalk as a thank you. Now I am want to try the same with Dahua which is also encrypted. Do you know of similar tool for this firmare for the N45DL7Z?

 

[TL1096r]

I can add no real value but just curious what is the point of doing this?

 

[rearanger]

I can add no real value but just curious what is the point of doing this?

it can be used to enable ftp, telnet ssh update busybox make cam region free. Enable rollback. Really it makes the cam unrestricted in its use.

All my cams are all unlocked and region free with updated busybox.

 

[sc8029]

I was able to use the hik sdk to help with some of that as well, but yes, more is needed. i wish i found this site sooner

 

[avwiseav]

Yes you can unpack it.

just use leachers unpacker (in Linux)

./hik_repack10 -u digicap.dav en (to unpack)

./hik_repack10 -r digicap.dav en newdav (to repack if using montecrypto's minisys)

Could you give a copy of leachers unpacker?

 

[rearanger]

The author removed the source and requested i do not distribute the compiled file. I must respect his wishes.