So I’m trying to hack my friend’s IP Camera (He knows and gave consent) and I thought it would be pretty routine. He told me there was a two letter lowercase password, and that the username was “admin”. I figured I could bruteforce it pretty quickly, however when I tried to look at the authentication request I would have to replicate in order to bruteforce, I noticed the password is hashed. I did some research and discovered it’s a non-standard hash. Is there any way I can still write a program (preferably in python) that will run the wordlist through the hash algorithm before it sends the authentication request? If it helps he’s using the “IP Camera” app for android. Also, I have no way of accessing any directory listings or filenames because the authentication is required in a popup upon browsing to the web camera’s home web directory.
Thanks in advance, let me know if there’s anything I need to clarify!