Discovering a Hardcoded Root Password - Hacking the VStarcam CB73 Security Camera

Comments · 437

• DA

  @Dawidds77 · 2 years ago · pinned

  Got a question. Is it legal to upload videos like this (with precise procuct model and reverse enginneered pass)? Or it maybe depends somehow on the product/country/license/...?<br>Great work on this channel i see, subscribed :)

  57

• WI

  @WilcovanBeijnum · 2 years ago

  You should be able to tell ghidra to decode the password as a string! To do this, select the variable (local_8c, later renamed to password), and change its type to `char [9]` (8 letters plus null byte) by pressing ctrl+l (or right click and retype variable). Then, ghidra should hopefully change the hex value to a string!

  150

• CR

  @crashowerride · 2 years ago

  I recently discovered this channel and has become by far the most interesting one I have found in the last couple of years. I just have to say you are an incredible presenter, and every video just flies by. Looking forward to the next one. Cheers!

  84

• JO

  @JoeBurnett · 2 years ago

  The YouTube algorithms have gifted me the knowledge of your channel today! Looking forward to watching more of your videos!

  42

• UW

  @uwu_meow. · 2 years ago (edited)

  <a href="https://www.youtube.com/watch?v=lbSalKp_ldA&amp;t=1785">29:45</a> the reason why the rand seed is the same within a close time period is because the way that calling time(NULL) or as gihdra is showing it to be time(0x0) which is null and time() returns the unix timestamp &nbsp;to the second it was called so when u spam run the program the hashes will be very close and since the camera has no way of persisting time on bootup will always return the same salt which means rand() will always output the same &quot;randomness&quot;

  63

• RA

  @RandyFortier · 2 years ago

  Literally as simple as a binary CTF challenge, as long as you can get the firmware.<br><br>This is great content!

  21

• TH

  @TheShutterNinja · 2 years ago

  Please keep spoiling us all with frequent video releases!

  27

• CH

  @cherrymountains72 · 2 years ago

  Very nice Matt, your channel is gaining traction which is well-deserved!

  14

• AL

  @AlanAshton · 2 years ago

  With modern consumer GPU throughput, I might even expect brute forcing an 8 digit password to be faster than the IO from a 100MB file. <br><br>Now, with that said, I found your way to be pretty awesome. One of my favorite moments when it comes to cracking firmware password was watching the discord server for Marco Reps when an unsecured STM32 was read and we were all sortof looking at the binary dump and there was this random word in it. He tries it, and it works!

  3

• MI

  @milicode5756 · 2 years ago

  As a programmer, I scare more every time I watch Matt`s videos 😂 this a the best channel I ever could find.

  2

• RE

  @realavdhut · 2 years ago

  bro found this channel 2 days ago almost binge watched all your fkin videos. you are amazing

  4

• KA

  @Kabodanki · 2 years ago

  very cool to do that, my young nephew is having a blast trying hack into an old router. my dude knows more than me

  3