# \[Pentesting\] ONVIF (CCTV cameras) auth

DevFeed: [\[Pentesting\] ONVIF (CCTV cameras) auth](<https://devfeed.tech/articles/pentesting-onvif-cctv-cameras-auth-20544.md>)

Original publisher: [Read original article](<https://yurichev.com/blog/ONVIF/>)

Published: 2025-11-27T23:00:00Z

Content type: tutorial

Language: en

Sources: [Dennis Yurichev](<https://devfeed.tech/sources/dennis-yurichev.md>)

Topics: [passwords](<https://devfeed.tech/topics/passwords.md>), [XML](<https://devfeed.tech/topics/xml.md>), [Python](<https://devfeed.tech/topics/python.md>)

Tags: [auth](<https://devfeed.tech/tags/auth.md>), [camera](<https://devfeed.tech/tags/camera.md>), [cameras](<https://devfeed.tech/tags/cameras.md>), [password](<https://devfeed.tech/tags/password.md>), [python](<https://devfeed.tech/tags/python.md>), [tcp](<https://devfeed.tech/tags/tcp.md>), [xml](<https://devfeed.tech/tags/xml.md>)

## AI overview

This article examines ONVIF authentication for CCTV cameras over TCP. It explains the username, password digest, nonce, and date fields, gives the digest calculation, and describes using Hashcat to crack a known password digest.

## Source excerpt

[Pentesting] ONVIF (CCTV cameras) auth