---
layout: post
title: Foscam VMS not showing device username/password
date: 2021-04-12 20:27
author: rick
categories: 
---

I changed a username/password to of one of my foscam devices, which I forgot to write down. The password was stored in the 'Foscam VMS' application, how-ever the GUI did not allow me to retrieve it.

Luckily for me the application was written in .NET and was very well debug-able.
With tooling like [ILSpy](https://github.com/icsharpcode/ILSpy) and [dnSpy](https://github.com/dnSpy/dnSpy), the the database was found to be SQLite with encrypting using Legacy_CryptoAPI, which is [deprecated/removed](https://system.data.sqlite.org/index.html/tktview?name=9c330a3e03).

Wrote some glue-code (see attached) to remove encryption from the database. The decryption password was stored plain text in code.

Next browsing the database with [SQLite Browser](https://sqlitebrowser.org/) and mission accomplished.