
Log in to the camera's web page by modifying the packets sent by the browser to /RPC2_Login.
Here, a mitmproxy script is used to implement the relevant functionality. Similar functionality can also be implemented using Fiddler or Burp Suite.
Usage:
mitmweb --showhost --set block_global=false -s mitm.py
Then, set mitmproxy as the HTTP proxy in the browser.
References:
Dahua Authentication Bypass ≈ Packet Storm https://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html
mcw0/DahuaConsole https://github.com/mcw0/DahuaConsole