Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-25012-dvr4-weak-password-encryption — Decrypts weak encrypted passwords from Argus Surveillance DVR systems via CVE-2022-25012, reconstructing plaintext credentials from DVRParams.ini ciphertext. | Kitploit
Tools/GitHubGitHub/m1kb0k/cve-2022-25012-dvr4-weak-password-encryption
Encryption/Decryption ToolsPassword AttacksVulnerability AnalysisExploitation
GitHubm1kb0k/cve-2022-25012-dvr4-weak-password-encryption

CVE-2022-25012-dvr4-weak-password-encryption

Decrypts weak encrypted passwords from Argus Surveillance DVR systems via CVE-2022-25012, reconstructing plaintext credentials from DVRParams.ini ciphertext.

View Repository

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
125 days agoNot yet reviewed

This is an improved version of the exploit by deathflash1411

Original exploit: https://www.exploit-db.com/exploits/50130

Improved Features

  • Cracked password is now output as reconstructed password string instead of only output character by character
  • The encrypted password string is now entered as an arguement instead of hardcoded
  • The exploit now supports the decryption of all special characters

Usage

The cyphertext can be found at

root@kitploit:~
C:\ProgramData\PY_Software\Argus Surveillance DVR\DVRParams.ini

Once you have obtained the cyphertext password

root@kitploit:~
./exploit.py <encrypted password>

or

root@kitploit:~
python3 exploit.py <encrypted password>

Footnote

#, &, ', and " are not present in the exploit code because it was found that argus surveillance strips these characters out if you enter them into the password field

Download Tool