This page has been robot translated, sorry for typos if any. Original content here.

Hacking on-door speakerphones Eltis, Vizit, Texkom, Metakom, Cyfral, Factorial, Keyman

On the page:


Взлом домофонов Eltis, Vizit, Texkom, Metakom, Cyfral, Факториял, Keyman

Everyone knows that public utilities open the intercoms of a huge number of houses, without carrying a huge bag with the keys to all these devices. They use the entrance to the programming mode, in which opening the door is far from the most difficult function.

Manufacturers do not pay due attention to the complication of access to the program mode, as a result of which it becomes possible for an ordinary person who does not have special professional skills in the field of programming electronic devices to implement keyless entry into the entrances of apartment buildings equipped with intercoms.

Hacking on-door speakerphones "ELTIS"

Two quick and easy options: Call - 2323; Call - 7273.

Codes from Cyfral`a are sometimes suitable for Eltis on-door speakerphones!

Codes may not work due to a change in the master password.

Calling the system menu for the Eltis 'SYS' on-door speakerphone:

  • Press button 'B' and hold for 7 seconds.
  • After the inscription 'SYS' on the display, enter the system password (stupid lazy system engineers often do not bother to change the password, which is the default - 1234)

If the input is correct, the intercom will show a firmware of the form '6_7x', where x is the firmware number, after which the '_FUNC' menu will load.

From this menu:

  • '1' - 'PAS' will appear, after the input field to change the old password for entering this menu (dial 4 digits and the intercom will return to '_FUNC'
  • '2' - menu '_ LOC' to enable / disable the common input password (buttons 1/0, respectively)
  • '3' - menu '_ dig' for changing the general login password. Press 3, 4 or 5, '____C' will appear. Depending on the button pressed, you can set a new password, respectively, 3, 4 or 5 digit. (type new password)
  • '4' - menu '_beep'. This option turns on / off the opening signal with an individual apartment code in this apartment (the handset rings when opened by default code, 1/0 buttons)
  • '5' - does not exist
  • '6' - menu '_FLOC' to enable / disable individual entry codes for apartments (to check, press 'in' in normal mode, if 'F' is lit, it means it is on)
  • '7' - does not exist
  • '8' - menu '_OREN'- to change the duration of the door opening (the number of signals will change, decrease / increase the buttons from 1 to 9)
  • '9' - does not exist
  • '0' - exit

Intercom Serial Number

  • Press 'in' and hold for 20 seconds. 5 digits will appear and then reset.

Enter engineering code (system menu 'CODE' for work on apartments)

  • 1) Dial any NUMBER and hold until the inscription 'CODE', then a field for entering a password will appear;
  • 2) Enter the system password (by default 1234 as in the first case);
  • 3) If the input is correct, then the firmware will appear, then the menu '_FUNC'.

From this menu:

  • '1' - Set a new password for entering this menu (similar to the first case, see above).
  • '2' - Set a new shared password for login (4-digit).
  • '3' - work on the passwords of the apartments: '_FUNC' -> press '3' -> 'F' -> enter the apartment number and press 'in' -> '____ C' -> enter the new code (but not 0000, because by entering it, you will prohibit the use of the code for this apartment) -> dialing to the apartment will go -> ask to press the 'open door' button TWO times -> the code is accepted, '_FUNC'. '4', '5'- menu' __ LF ', but different numbers hide different options.
  • '4' - disable / enable individual handsets in apartments. Dial the apartment number, then press 'in'. '*** #' will appear, where *** is the apartment number, and # is the number 1 or 0 (on or off). Click the value you want.
  • '5' - encoding keys. Dial the apartment number and press the 'in' button (see above). '*** LF' will appear, where *** is the apartment number. Lean the key against the reader. If you have not encoded the key before, the inscription 'ADD' will appear; if encoded, the apartment number will appear on which key the key is recorded. After encoding, you can open the door with this key, after logging out.
  • '6' - the menu '__ dF'. Option to delete keys. Dial the apartment and press the 'c' button. '_ DEL' will appear, press 1- the number of keys that have been deleted will appear. (* dEL). Press 0 to exit to '_FUNC'.
  • '7' - does not exist
  • '8' - does not exist
  • '9' - does not exist
  • '0' - exit

Hacking Intercoms "METAKOM"

Three ways to open METAKOM on-door speakerphones:

  • Pressing the call button, then dial the number of the first apartment in the entrance and again press the call button. The letters COD should appear on the display, we carry out a set of numbers - 5702.
  • 65535 - call - 1234 - 8.
  • call - 1234 - 6 - call - 4568.

Door opening:

  • B-1-B-5702
  • B-5-B-4253
  • B-6-B-4568
  • B-1234567
  • 65535-B-1234-B-8

Change system passwords:

  • 65535-B-1234-B-9-3-new code-B = Change master password (default 1234)
  • 65535-B-1234-B-0-new code-B = Change shared password (default 1234567)
  • 65535-В-1234-В-В-flat number-В-0-new code- В = Change the apartment password (each has its own default 4 characters)

Work with keys:

  • 65535-В-1234-В-В-flat number-В-7 = Write key to apartment number
  • 65535-В-1234-В-В-flat number-В-7-0-111 = Removing all keys from apartment No.
  • 65535-B-1234-B-9-7-111 = Delete all master keys
  • 65535-B-1234-B-9-9 = Recording a new master key
  • 65535-B-1234-B-9-9-0-111 = Deleting a new master key

Codes for entering the doorphone menus:

  • 65535-B-1234-B = Service menu
  • 65535-B-1234-B-B = Custom Menu
  • 65535-B-1234-B-9 = System menu

Hacking Intercoms "CYFRAL"

Codes from Cyfral`a are sometimes suitable for Eltis on-door speakerphones!

Codes may not work due to a change in the master password.

Two opening options:

  • If there is a mark "M" on the intercom. Press: 07054, or - call - 41, or - call - 1410.
  • If there are three-digit apartment numbers. Call - apartment number (100, 200) - call - 2323; 7272; 7273 (one of 3 rooms).

PIN codes of admin Cyfral in Troyeschina:

  • 9104 and 2904

Door opening:

  • B-100-B-7273
  • B-200-B-7273
  • B-300-B-7273

Access code for changing the parameters and settings of the Cyfral CCD-2094M on-door speakerphone:

  • First dial 0000 and press " c ", the word " cod " will appear.
  • Then enter 123456 and press " in ".
  • If the code came up, the inscription " f0 " will appear - the system menu.

Hacking Intercoms "FACTORIAL"

The current way to open the intercom Factorial:

  • Push the numbers: 000000; 123456, in case of failure, press - 5 - 180 180 - call - 4 call.

Hacking Intercoms "Keyman"

The most problematic in accessing.

The current way to open the Keyman intercom:

  • K - 100 - 789 - short sound - 123456 - 8
  • K - 170862 - short sound - 0

Hacking Intercoms "VIZIT"

If the factory settings are not changed, there are 4 code options: * # 423; 12 # 345; 67 # 890; * # 4230 .

To access using the service menu: # 999 . After two intermittent signals, enter: 1234 (standard) , with an error, enter: 0000; 9999; 3535; 12345; 6767 . The access signal is one sound, failure - two sounds.

The way to access the service menu using three buttons: Press "2", (wait a couple of seconds), "#" (another couple of seconds), "3535" - then the door opens. After pressing “*”, the program mode is exited.

To open the door, you can try to dial: * # 423 (not always suitable) .

Entering the service mode is quite simple at the VIZIT doorphone: # 999 — picks up 2 times — enter the master code, by default 1234, if you go up — picks up 1 time, if the code is incorrect, it picks up a two-tone signal and the red LED lights up.

Transcript of operations:

  • 2-setting individual codes for apartments
  • 3-key programming for login
  • 4-erasing keys from memory
  • * -exit from the mode
  • # -confirm installation (save changes).
  • 1,5,6,7,8,9,0- does not exist.

Key coding (example, if the master code came up):

  • # 999 (2 peaks) 1234 (1 peak) 3 (1 peak) {apartment number} attach the key (picked) # and then *

VIZIT doorphones also have a special mode in which you can change everything - even the master code!

The transition to this mode is carried out from the usual state as follows (taken from the instructions):

  • turn off power intercom
  • disconnect the two programming wires in the central unit
  • turn on the power.

As can be seen from the above, the block with the buttons must be removed.

Hacking the TECHCOM on-door speakerphone

In the manufacture of the following values ​​are set (see Table. No. 1 ):

Tab. No. 1
Range of apartment numbers from 0 to 99
Programming password 1-2-3-4 (master_mog_change ..!)
Common code disconnected
lock opening duration 4 sec
Individual codes disconnected
Ring Tone Volume Levels level 3
Key memory TK-13M cleared
Call panel volume maximum
Lock type lock without PU
* Any of these options can be changed.


To enter the programming mode, you must simultaneously press buttons 2-5-8 and hold for several seconds (button 2 is pressed first). Entering the programming mode is confirmed by highlighting on the indicator “- - - -”.

After this, enter the code 1-2-3-4 (factory setting of the programming password - Table. No. 1 ). If the password is entered successfully, “F” will be displayed on the indicator; if the password is incorrect, the intercom will go into standby mode. After entering the password, select the desired mode ( Table No. 2 ) and press the "B" button.

Tab. Number 2
Button Mode
0 Entering a new password to enter programming mode
one Entering the number of the initial apartment
2 Erase all apartment keys and shared keys
3 Key Entry
4 Turn off the apartment tube
5 Enter or change individual ringtone volume levels
6 Call panel signal level change
7 Deny shared code
8 Entering or changing individual codes
nine Entering or changing a common code
10 Setting the lock opening time
eleven Castle Type Selection
12 Sound confirmation of door opening with a key


Where:

0 - new password entry mode for programming mode
After pressing the “0” button, the indicator will display “F0”. Then press “B” (no indication).
Next, you need to dial a 4-digit password code and confirm it by pressing the "B" button.
If a new password was entered, it should be remembered and entered at the subsequent entry into the programming mode.
The value of the new password should not begin with the number “0”.
The operation is carried out when installing the intercom and as necessary.
ATTENTION! If the password is lost, the possibility of further reprogramming the intercom, including adding PROXI keys, will be lost and it will be possible to restore it only by contacting the manufacturer.
Exit the mode - press the “X” button for 2-3 seconds.

1 - input apartment number entry mode
After pressing the “1” button, “F1” will be displayed on the indicator. Then press button “B” (no indication).
Next, you need to dial a new value for the number of the initial apartment and confirm by pressing the "B" button.
(A shift is possible only by an integer number of tens).
Exit the mode - press the “X” button for 2-3 seconds.

2 - key erase mode
After pressing the “2” button, the indicator will display “F2”.
Then press “B” (no indication). To erase the keys recorded by the apartment number, you need to dial the apartment number and press the "B" button.
All data on previously registered keys for this apartment is erased.
To erase the keys recorded on the general list, the apartment number is not entered, you must double-click "B".
Exit the mode - press the “X” button for 2-3 seconds.

3 - key input (add) mode
After pressing the “3” button, the indicator will display “F3”. Then press “B” (no indication)
Apartment key entry:
Dial the apartment number and “B”, then attach a recordable key, after reading and registering which one sound signal will sound. If the key is already registered in the call unit, two beeps will sound and the intercom will wait for the next key. The apartment number is entered before each key.
Entering keys according to the general list:
When “F3” is displayed on the indicator, press “B” twice and enter the keys.
The operation is carried out when installing the intercom and as necessary.
Exit the mode - press the “X” button for 2-3 seconds.

4 - mode off the apartment tube
After pressing the “4” button, “F4” will be displayed on the indicator.
Then press “B” (no indication).
Dial the apartment number and press “B” (no indication).
Press: “1” or “2”; and button "B".
1 - corresponds to the switched on handset
2 - corresponds to the off handset
Exit the mode - press the “X” button for 2-3 seconds.

5 - input mode for ring volume levels
After pressing the “5” button, the indicator will display “F5”. Then press “B” (no indication).
Dial the apartment number and press “B” (no indication). Press: “1”, “2” or “3”; and button "B".
1 - corresponds to low volume
2 - corresponds to the average volume
3 - corresponds to high volume
Exit the mode - press the “X” button for 2-3 seconds.

6 - input mode for the volume level of the calling panel
After pressing the “6” button, the indicator will display “F6”. Then press “B” (no indication).
Press: “1” or “2”; and button "B".
1 - corresponds to low volume
2 - corresponds to high volume
Exit the mode - press the “X” button for 2-3 seconds.

7 - general access code ban mode
After pressing the "7" button, the indicator will show "F7". Then press “B” (no indication).
Press: “1” or “2”; and button "B".
1 - corresponds to the permission to use the shared code
2 - corresponds to the prohibition of the use of a shared code
Exit the mode - press the “X” button for 2-3 seconds.

8 - mode for entering or changing individual access codes
After pressing the “8” button, the indicator will display “F8”.
Then press “B” (no indication).
Dial the apartment number and press the "B" button (no indication).
Then dial a 4-digit individual access code and confirm it by pressing the “B” button (no indication).
!!! Values ​​of individual codes should not begin with the digit “0”.
The operation is performed as necessary.
Exit the mode - press the “X” button for 2-3 seconds.

9 - common code input mode
After pressing the “9” button, the indicator will display “F9”. Then press “B” (no indication).
Next, you need to dial a 4-digit common access code and confirm it by pressing the "B" button (no indication).
!!! The value of the common code should not begin with the digit “0”.
The operation is performed as necessary.
Exit the mode - press the “X” button for 2-3 seconds.

10 - setting mode for the duration of opening the lock
After pressing “10”, the indicator will display “F10”. Then press “B” (no indication).
Next, you need to dial the time to open the lock and press button "B".
The lock opening time is set in units, 1 unit corresponds to? seconds.
Example: writing the number 40 corresponds to 10 seconds of opening the lock.
Exit the mode - press the “X” button for 2-3 seconds.

11 - lock type setting mode
After pressing “11”, the indicator will display “F11”.
Then press “B” (no indication).
Press: “1” or “2”; and button "B".
1 - corresponds to a lock without a control board
2 - corresponds to a lock with a control board or an electromechanical lock
Exit the mode - press the “X” button for 2-3 seconds.

12 - sound confirmation mode for opening the door with a key
In this case, the apartment intercom signals with one short beep.
After pressing “12”, the indicator will display “F12”. Then press “B” (no indication).
Dial the apartment number and press “B” (no indication).
Press: “1” or “2”; and button "B".
1 - corresponds to the inclusion of this mode
2 - this mode is disabled
Exit the mode - press the “X” button for 2-3 seconds.
This function is provided when entering keys at the apartment.

Download instructions for doorphone TECHCOM Instructions for doorphone TECHCOM Instructions for doorphone TECHCOM Virus Free by KAV
Домофон CyfralДомофон EltisДомофон MetakomДомофон TexkomДомофон Vizit

Frequently Asked Questions FAQ

Q: How can I call from one handset to another?
A: No way.

Q: Can I call from the handset to the intercom?
A: Yes, but first you need to get into the engineering menu of the intercom.

Q: How can I eavesdrop on a conversation?
A: You can eavesdrop simply by cutting to the line.

Q: How to make a clone tube?
A: Open the pipe body, there are several jumpers that set the number of the apartment, a pipe is installed in the bark (relevant for Rainkman).

Q: How to enter the service menu of the Cifral intercom?
A: Press any number and hold until the inscription appears, then enter the engineering code.

Q: How to enter the Cifral intercom system menu?
A: Press the bell and hold until the inscription appears, then enter the engineering code.

Q: How to enter the service menu of the Rainmann intercom (Rainmann 2000 etc. and others)?
A: Press the button "key" and enter 9 8 7 6 5 4, you should hear a double beep. Then enter 1 2 3 4 5 6, the letter P will appear. You have entered the intercom control system.
Now remember:
1 - Advanced settings of the intercom, I advise myself not to dig there, but just enter this menu and go drink some sand nearby. Puzzled residents will do everything for you.
2 - Normal doorphone settings.
3 - Signaling.
4 - Door lock.
5 - ????
6 - ???? (the intercom hangs)
7 - ????
8 - Open the door.
nine - ????
This is valid unless the settings are touched, instead of 987654 there may be a different code.
Plows on intercoms where on the screen the dot is on the left.

Q: How to enter the VIZIT doorphone service menu?
A: # 999-will pop 2 times- (master code, by default 1234) -will pop 1 time; if the code is not correct, it will beep by two tones
button values:
one - ???
2 - Installation of individual codes for apartments.
3 - Programming keys for entry.
4 - Erasing keys from memory.
5 - ???
6 - ???
7 - ???
8 - ???
nine - ???
* - Exit the mode.
# - Installation confirmation.

Q: How to enter the service menu of the Eltis intercom?
A: Just like in Cifral.

Q: How to enter the METACOM doorphone service menu?
A: On the keyboard, dial 65535 V (or #) then 1234 V (or #) if everything is normal, then [] will appear on the display.

Q: How to temporarily disable a doorphone with a key-tablet?
A: We take a piece from an electric lighter, and give a discharge to the key receiver, it helps rarely, it is better to use a shocker.

Q: How to reset the memory of the intercom?
A: To do this, you need to find where the intercom is powered from, usually in the flap on the ground floor, there is a small block there, it is usually very well hidden, to reset it to zero, give 1, 6, 8 and 12 m +1 1.5 volts a-on 2 the foot and memory of the intercom will be as clean as that of a baby.
But the specialist will restore it in 5 minutes.
There is also a COM port, but how to use it is not known.

Q: How to open the door of a Cifral doorphone?
A: If there are apartments with numbers 100, 200, 300, 400, etc. at the entrance, then you can try to enter:
call 100 call 7272
call 200 call 7272
call 300 call 7272
call 400 call 7272
call 500 call 7272
call 600 call 7272
call 700 call 7272
call 800 call 7272
call 900 call 7272
call 100 call 7273
call 200 call 7273
call 300 call 7273
call 400 call 7273
call 500 call 7273
call 600 call 7273
call 700 call 7273
call 800 call 7273
call 900 call 7273

Q: How else can I open Cifral?
A: CALL 41 CALL 1410 Or just enter 07054. Sometimes it helps.

Q: How can I open an Eltis intercom?
A: B 100 B 7273 V 100 V 2323 You can also try the options from Cifral.

Q: How to open the door of a VIZIT doorphone?
A: If the standard settings did not change then * # 4230 and the door will open. Still sometimes 12 # 345 helps.

Q: How to enter the VIZIT doorphone system mode?
A: To enter the system mode, you need to connect the conclusions of the “PROGRAMMING” cable most often for this you need to remove the entire unit from the door, because these power plants do not output to the shield.

Q: What is the difference between service and system modes?
A: Service and system modes are different. If you remove the unit from the door and turn on the system mode, you can change everything. Even the master code to enter system mode.

Q: How to write my key into the memory of the VIZIT doorphone?
A: In programming mode, press 3, then the number of the hut, attach the key, press # and then *


Q: What are the default codes put on intercoms?
A: 1234, 6767, 3535, 9999, 12345, 0000, 11639 (VIZIT).

Q: How to open METAKOM?
A: In the service menu, press 8. Also B (or #) 1234567 helps.

Q: How many master keys can a METAKOM intercom have?
A: Only 1.

Q: Is it possible to kill the keys to the doorphone with a magnet, or even cripple?
A: No, you can’t.

Q: How to change the system code in the Cifral intercom?
A: In programming mode 1 (p ----) and enter a new pass.

Q: Are there special codes for intercoms for opening doors by special services?
A: No, there are no such codes.

Q: How to write my key in the memory of the Cifral intercom?
A: In service mode, press 5, then enter the apartment number, the intercom will write TOUCH, we apply the key - it is in memory.

Q: How to erase a key-tablet from the memory of the Cifral intercom?
A: In service mode, press 5, then enter the apartment number to which the key is connected, then press 9.

Q: How to write an optical (flat with holes) key into the memory of the Cifral intercom?
A: In system mode, press 5, then enter the key cell number (1, 2, 3), insert the key, click on the call.

Q: How to change the common code of the Cifral intercom?
A: In the service menu, press 2, then enter a new code, if the code is shorter than 4 digits, then after entering, press the call.

Q: How to change the individual code of the Cifral doorphone?
A: In the service menu, press 3, then the apartment number, call, enter a new code, call, then the call will go, the subscriber will have to double-click the call button.

Q: How to disconnect the subscriber of the Cifral intercom?
A: In the service menu, press 4, then 0, then the apartment number, then the call.

Q: How to connect a subscriber who was disconnected from the Cifral intercom?
A: In the service menu, press 4, then 1, then the apartment number, then the call.

Q: What are the default settings of the Cyfral CCD-2094M intercom?
A: Access code to change parameters and settings mode 123456.
Common code 1234.
The table number of the individual codes is 000.
First Subscriber Number 1.
Number of subscribers to be served 100.
Signal duration Z 1.
The mode of using the common code is ON.
The mode of using individual codes is ON.
Subscribers ON / OFF
to the service list Sound signal No. 3.
Notification of the subscriber about opening the door with an individual key ON.

Q: On the VIZIT intercom, the key * and # are not present, what to do?
A: There are C and K. C - * K - #.

Q: Is there a system menu for old doorphones (with a “stick” key)?
A: No.

Useful pictures

Click to view in full size or save to your computer ...

Взлом домофонов Eltis, Vizit, Texkom, Metakom, Cyfral, Факториял, Keyman
Взлом домофонов Eltis, Vizit, Texkom, Metakom, Cyfral, Факториял, Keyman
Взлом домофонов Eltis, Vizit, Texkom, Metakom, Cyfral, Факториял, Keyman
Взлом домофонов Eltis, Vizit, Texkom, Metakom, Cyfral, Факториял, Keyman
Взлом домофонов Eltis, Vizit, Texkom, Metakom, Cyfral, Факториял, Keyman