News:

Re-organized the forum to more cleanly delineate the development section, as the end user support side appears to have taken a life of its own!

Author Topic: password to decrypt firmware for Foscam FI9821W V2.1?  (Read 4199 times)

  • No avatar
  • *
February 19, 2016, 03:41:53 pm
I'm trying to figure out the password to decrypt the firmware for the above mentioned camera, specifically versions 2.21.1.127 and 2.x.2.18 (images FosIPC_B_app_ver2.x.1.127_20140920.bin for the former, and Step1_FosIPCAll_B_sys_ver1.5.3.13.bin and Step2_FosIPC_B_app_ver2.x.2.18.bin for the latter).

I've seen mention of different passwords elsewhere on this forum, and I do know Foscam tends to use aes-128-cbc for encryption, but none of the passwords I've found for other Foscam images appear to work for these.

If someone can enlighten me as to how these passwords were recovered, I may be able to try with these images.

Thanks!

  • No avatar
  • *
October 18, 2016, 07:28:17 am
Try:  Wxift*v2

I just decrypted 2.x.2.18 and 2.x.2.27 with it

edit: This is an old password I found here just now, with 'v2' added to the end, as I had seen they did that with some other passwords so tried it and to my surprise it worked for the current firmware version and the older one included in the same zip and mentioned in your post (Step1_FosIPCAll_B_sys_ver1.5.3.13.bin and Step2_FosIPC_B_app_ver2.x.2.18.bin)
« Last Edit: October 18, 2016, 07:31:25 am by anomaly »

  • *
October 18, 2016, 08:15:17 pm
I've found one password in the vmlinux image, in the /usr/sbin/recovertool. If you search for "openssl" in that one, you'll find the line:

Code: [Select]
openssl enc -d -aes-128-cbc -k WT8Nk*v2 -in %s > %s

But I can't find the password for the app firmware. (The password changed for the FI9831W with the 2.x.1.119 update.)

  • No avatar
  • *
October 18, 2016, 09:21:53 pm
@mbirth did you try Wxift*v2  for the app firmware?  Worked for me here

  • *
October 19, 2016, 03:47:29 am
@mbirth did you try Wxift*v2  for the app firmware?  Worked for me here


Yes, tried that, too. Without success.