Security investigation of Besder 6024PB-XMA501 IP camera.

A Wireshark dissector for DVRIP/Sofia protocol running on port 34567 and found in Xiongmai based IP cameras

Python script for cracking DVRIP/Sofia password hash. Existing vulnerabilities are being exploited for hash retrieval

Proof-of-concept code (Bash and Python) for CVE-2025-65856 where ONVIF implementation in in Xiongmai XM530 IP cameras allows for unauthenticated access to sensitive device information and live video streams

Collection of DVRIP/Sofia return and command codes (with payloads for some of the codes) found on Xiongmai-based IP cameras