EVL 4, DSC and lost installer code - hacking my own system

[1fiercefish]

You generally don't have to do this as Honeywell panels have the "back door" method. See our Honeywell Installation Guide on your portal under Support.

You're absolutely right about the back door method. I'm working on an install that only has the tuxedo touch keypads, which don't boot fast enough to be able to use that method, so the options are either purchasing a different keypad (~$100) or brute forcing it. Given that I already have the Envisalink installed, it's worth a shot.

For any other Honeywell Vista owners who find this later, I did eventually find a thread with guidance for brute forcing Vista panels here: https://forum.eyezon.com/viewtopic.php?t=4947

[elkhaircaddis]

Curious if anyone has had the following come up when running the perl script:

1. Keypad lockout in partition 1 as the sequential codes are being tried

2. The program indicating that xxxx is the user code but it doesn't work and continuing to run the program yields new "successful" user codes.

3. When running the program again, "successful" user codes that were identified previously no longer come up as "successful" codes

[elkhaircaddis]

An update to my own post and some help for future users who have keypad lockout enabled on their systems.

My system allowed for 4 incorrect codes to be entered before keypad lockout occurred. The lockout lasted for a minute and then four more attempts could be tried. Every 20 minutes the system tried to dial out to the central station (I had my phone lines disabled) to report that incorrect codes/lockout was occuring which led to a 3-4 minute delay before attemps could resume.

All of this meant that it took a very long time for the perl script to run. Unfortunately, my installer code was at the tail end of the spectrum, so it took a long time - 72 hours.

So, the script works for those of us who have keypad lockout enabled in their systems.

[gcottick]

Big thank you to script author and everyone who has posted their experience with the script.

I was able to install Strawberry Perl and have the installer code identified in less than a couple hours. Fantastic community here!!

My system is a DSC 5015, installed well over a decade ago. I went IP as we just dropped our phone line and alarm company was not offering reasonably priced IP monitoring option (wanted to switch out whole system). Loving the new functionality!!

[vecchio]

Thanks so much to all those that worked on the script and posted instructions.

After 10+ year I cancelled my $20 per month monitoring from the local installer (who got 10+ years of monitoring from the previous owner) and the guy didn't want to give me the installer code to get rid of the trouble due to cancelling phone monitoring.

I have a DSC 1864, I ran the script on a Ubuntu VM, ran for about 1 hours (my code was toward in the 1,0000s), ran perfectly the first time I launched.

[RoySmith142]

Hello all. I'm in the same situation as others - bought a new home with a Power 832 Alarm. I installed a Envisalink Duo which has been running great.
I need to replace a DSC wireless CO Sensor WS4913 which has reached "End of Life". To install a new one I need the Installers Code.

boaboa's code returns: DEBUG: Cannot connect to EnvisaLink. REASON: Invalid argument
I have the correct IP address entered.
The Envisalink DUO has both a User name which is default "user", and a Passcode which is default to the last 6 digits of the MAC ID. Also when I access the DUO directly it communicates over port 2. I have tried both the "4025" & "2' ports and tried both "user" and the six digit MAC based passcode and get the same error. I am able log into the DUO using these so I know they are right.

Does any one know how to modify the PERL script to connect to the DUO? Once the script can connect it should work.

[RoySmith142]

Re: Finding Installer's Code on Envisalink Duo

I tried again with port number 4025 and with my 6 digit passcode. Initially I got an error "Cannot determine peer address at EnvisalinkHack.pl line 181"
Further reading pointed to needing to turn off other programs/devices accessing the Envisalink on that port. I turned off my Homebridge, tried again and it worked ! In approximately 4 hours I had the installers code.

Thank-you all for this wonderful script.
Roy

[shawnt]

I'm running the script using Strawberry perl, but it seems like nothing is happening. It just gets stuck at the following. Does anyone have any ideas?

C:\Kaz Perl>perl DSC_Installer_Code.pl
[20231217_204712] DEBUG: Connected to EnvisaLink
[20231217_204712] response: '' (length 0)
[20231217_204712] sent data '005user54\r\n' (length )
[20231217_204712] response: '' (length 0)
[20231217_204712] DEBUG: Start installer mode entry cycle
[20231217_204712] sent data '0711*82B\r\n' (length )

[sidewild]

Need some help. Purchased a house that has a system 1832 panel. Did some renos and now my system has some troubles. Senors removed etc. I want to recover my installer code but I am getting compounded codes. Instead of gettting a 922 I get something like '51080FE\r\n8411CE\r\n9229D\r\n'.

Is there a way that the script could be adjusted for this:

Code: Select all

[20231217_152825] DEBUG: Connected to EnvisaLink
[20231217_152825] response: '5053CD\r\n' (length 8)
[20231217_152825] sent data '005user54\r\n' (length 11)
[20231217_152825] response: '5000052A\r\n5051CB\r\n' (length 18)
[20231217_152825] DEBUG: Correct EnvisaLink password
[20231217_152825] DEBUG: Start installer mode entry cycle
[20231217_152825] sent data '0711*82B\r\n' (length 10)
[20231217_152825] response: '5000712D\r\n' (length 10)
[20231217_152826] response: '51080FE\r\n8411CE\r\n9229D\r\n' (length 24)
[20231217_152827] response: '60900231\r\n' (length 10)
[20231217_152828] response: '61000229\r\n' (length 10)
[20231217_152829] response: '60900231\r\n' (length 10)

[shawnt]

Solved the issue. Ran command prompt in admin mode and it worked.

I'm running the script using Strawberry perl, but it seems like nothing is happening. It just gets stuck at the following. Does anyone have any ideas?

C:\Kaz Perl>perl DSC_Installer_Code.pl
[20231217_204712] DEBUG: Connected to EnvisaLink
[20231217_204712] response: '' (length 0)
[20231217_204712] sent data '005user54\r\n' (length )
[20231217_204712] response: '' (length 0)
[20231217_204712] DEBUG: Start installer mode entry cycle
[20231217_204712] sent data '0711*82B\r\n' (length )