Hikvision devices use a customized firmware that supports various protocols, including FTP, for configuration, updates, and data transfer. The FTP protocol allows users to transfer files between devices, but its plaintext transmission and lack of encryption make it vulnerable to eavesdropping and tampering.
: When you power-cycle the Hikvision device while the TFTP tool is running, the device sends a "handshake" request. The tool then automatically transmits the firmware file to the device.