Reverse engineering Dahua DVR devices: the legit way to write a "keygen" at work. 📹🎞️🩻🪚🗝️
Security researcher Antonio Vázquez Blanco shares the results of his internal security training that became a solid research presentation: reverse engineering and security analysis of Dahua video recorders.
The focus of this research: two devices that are widely used around the world and banned in the US - DHI-NVR2104-4KS2 and DH-XVR4104HS-I. From disassembly to reverse engineering and finding vulnerabilities, and as a result - a “keygen” for bootloader passwords. Impressive!
This research is another good reason why I encourage senior R&D managers to give their team members time and resources for side projects and hands-on training. It’s one of the best types of perks for curious minds.
Enjoy, learn, and feel free to share it with your colleagues and friends. Thanks!
More details:
Presentation [Youtube]: https://lnkd.in/dsFaDVGk
Slides [PDF]: https://github.com/TarlogicSecurity/Talks/blob/main/2025_BlackAlps_VideoSurveillance.pdf
Article [Blog]: https://www.tarlogic.com/blog/reverse-engineering-dahua-nvr-xvr-devices/


