Skip to content

Authority:check failure. #46

@seisdr

Description

@seisdr

I'm trying to retrieve the admin password that i forgot i added a user called root with all system permissions and after trying to get configuration i get this , xvr 4.0

(.venv) root@localhost:~/DahuaConsole# ./Console.py --logon netkeyboard --rhost 192.168.31.199  --proto dhip --rport 80  --auth root:ROOT12345
[*] [Dahua Debug Console 2019-2021 bashis <mcw noemail eu>]
[*] logon type "netkeyboard" with proto "dhip" at 192.168.31.199:80
[+] Opening connection to 192.168.31.199 on port 80: Done
[-] Dahua Debug Console: Attach Console failed, using local only
[+] Login: Success
[+] keepAlive thread: Started
[*] [Active Users]
    root@192.168.31.224 since 2025-08-09 14:59:15 with "NetKeyboard" (Id: 12)
[*] Remote Model: DH-XVR1B08-I, Class: HCVR, Time: 2025-08-09 14:59:15
[Console]# config all
[-] [config_members] Error: {'code': 285278249, 'message': 'Authority:check failure.'}
[Console]#

When i try onvif


(.venv) root@localhost:~/DahuaConsole# ./Console.py --logon onvif:digest --rhost 192.168.31.199  --proto dhip --rport 80  --auth root:ROOT12345 --dump device
[*] [Dahua Debug Console 2019-2021 bashis <mcw noemail eu>]
[*] logon type "onvif:digest" with proto "dhip" at 192.168.31.199:80
[+] Opening connection to 192.168.31.199 on port 80: Done
[q] Login                                                                         [▁] Login: global.login: {'code': 268632071, 'message': 'Component error: password[-]  valid!'}LM: Login to 288055a39be58cd83ff34a17690c6b80                        /root/DahuaConsole/net.py:2032: BytesWarning: Text is not bytes; assuming ASCII, no guarantees. See https://docs.pwntools.com/#bytes
  req.send(rtsp)
[*] Closed connection to 192.168.31.199 port 80

Traceback (most recent call last):
  File "/root/DahuaConsole/./Console.py", line 888, in <module>
    main()
  File "/root/DahuaConsole/./Console.py", line 882, in main
    DebugConsole(dargs=dargs)
  File "/root/DahuaConsole/./Console.py", line 25, in __init__
    self.dump()
  File "/root/DahuaConsole/./Console.py", line 362, in dump
    self.dh.getRemoteInfo('device')
AttributeError: 'NoneType' object has no attribute 'getRemoteInfo'
[*] Closed connection to 192.168.31.199 port 80
(.venv) root@localhost:~/DahuaConsole#

(.venv) root@localhost:~/DahuaConsole# ./Console.py --logon onvif:digest --rhost 192.168.31.199  --proto dhip --rport 80  --auth root:ROOT12345

[*] [Dahua Debug Console 2019-2021 bashis <mcw noemail eu>]


[*] logon type "onvif:digest" with proto "dhip" at 192.168.31.199:80
[+] Opening connection to 192.168.31.199 on port 80: Done
[◢] Dahua Debug Console: Trying
[-] Dahua Debug Console: Failed
[-] Login: global.login: {'code': 268632071, 'message': 'Component error: password not valid!'}LM: Login to 288055a39be58cd83ff34a17690c6b80
/root/DahuaConsole/net.py:2032: BytesWarning: Text is not bytes; assuming ASCII, no guarantees. See https://docs.pwntools.com/#bytes
  req.send(rtsp)
[*] Closed connection to 192.168.31.199 port 80
[*] All done
[*] Closed connection to 192.168.31.199 port 80
(.venv) root@localhost:~/DahuaConsole#

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions