HKC Flash Analyser Portal

Step 1: Select Manufacturer

HKC Security

SecureWatch & SecureWave panels

🛡️

Honeywell Galaxy

G2, Dimension series · RS485 bus

📷

Hikvision CCTV

Cameras & NVRs · firmware 5.4.0 and below

Step 3: What would you like to do?

Flash Dump

Read Flash Chip (Offline)

De-power the panel and clip a programmer onto the external flash chip. Location differs by board revision: V1 is on the front, V2 and V3 are on the back. Upload the resulting 4MB .bin file for full analysis of all codes, zones, and panel config.

Required equipment

⚙️ CH341A USB programmer

🪛 SOIC-8 test clip

💻 AsProgrammer software (free)

📖 Chip Guide

Bus Monitor

Keypad Bus Diagnostic

Passively listen to the RS-485 keypad bus. See which keypads are registered, live keypresses, zone open/close events, arm and disarm activity, and tamper alerts: all without touching the panel configuration.

Required equipment

🔌 USB to RS-485 adapter

💻 Chrome or Edge browser

🔗 Connect to A/B terminals on panel

Serial

Read Codes (1070 / 10270 firmware)

Reads all user codes, zones, and panel options from a 1070 panel running later (10270) firmware. Uses the field agent (HkcEngineDriver.exe) running on the laptop — connects to the panel via SecureComm and returns the full config.

Required equipment

🔌 USB to RS232 adapter + HKC panel cable

💻 HkcEngineDriver.exe running on the field laptop

🔑 Remote code for the panel

Panel Details

Site Address *

Current Alarm Company *

Notes (optional)

Flash File (.bin)

📁

Drop .bin file here or click to browse

IS25LP032 EEPROM dump: max 10MB

Credits

-

Available Credits

Each successful upload (with a valid panel ID) costs 1 credit.

Invalid files (unrecognised flash format) are not charged.

Contact admin to top up credits.

What's Extracted

✓ Panel ID (hex & decimal)
✓ Firmware version
✓ Site name
✓ Partition names
✓ User codes & hashes
✓ Zone names & types
✓ Engineer lock status
✓ Raw XML (all versions)
✓ Hex region viewer

Panel Details

Site Address *

Current Alarm Company *

Notes (optional)

Flash File (.bin)

📁

Drop .bin file here or click to browse

HKC 8/12 Casino EEPROM dump: max 10MB

About HKC 8/12

The HKC 8/12 (Casino hardware) stores codes
in a proprietary binary format.

Codes are extracted directly from the EEPROM
and decoded server-side.

Default codes:
✓ User 1: 1111
✓ Engineer: 4567
✓ Remote default: 1111 or 139008

What's Extracted

✓ All 64 user codes (plain text)
✓ 7 remote user codes
✓ User names
✓ Zone names (up to 70)
✓ Partition names
✓ Site name
✓ Active/inactive user flags
✓ Panel ID (if present)

Target Device

Camera / NVR IP Address

HTTP Port

How it works

Downloads the configuration file from the device using a known endpoint present in firmware 5.4.0 and below. The file is decrypted locally by the agent and passwords are extracted. No credentials needed.

If the device returns a 404 or authentication error the firmware is likely too new.

Compatible Devices

Cameras: DS-2CD series, DS-2DE series
NVRs: DS-7600, DS-7700, DS-7800 series
DVRs: DS-7200, DS-7300 series
Requirement: Firmware 5.4.0 or below
Default port: 80 (try 8080 if 80 fails)

If it fails

404 error: Firmware too new, endpoint removed
Auth error: Device has custom auth enabled
Timeout: Wrong IP, wrong port, or firewall blocking
No passwords: Different encryption in this firmware build

Enter an IP address and click Extract to begin

Scan Subnet

Subnet (first 3 octets)

Probes .1 through .254 for open HTTP/RTSP ports.
Takes 1–3 minutes depending on network size.

Devices Found

Enter subnet and click Scan

📂

Loading...

-

Total Users

-

Total Uploads

-

Valid Panels

-

Last 7 Days

User	Role	Wallet	Uploads	Status	Last Login	Actions

Date	User	Address	Company	Panel ID	Site Name	FW	Valid	View

Partitions

Panel Options