TRENDNet IP Cam Magic URL Searcher Bypass Authentication

Grazie a una banale vulnerabilità possiamo accedere direttamente a moltissime IP camere senza bisogno di user e password cosa significa? Che se hai un IP camera che ti sorveglia casa ti conviene spegnerla! Le ip camere sono telecamere connesse ad internet tramite un ip.
La google dork è la seguente: (Alcuni url vulnerabili: http://pastebin.com/DtCL8Nvm)

  1. inurl:”CgiStart?page=”
  2. inurl:/view.shtml
  3. intitle:”Live View / – AXIS
  4. inurl:view/view.shtml
  5. inurl:ViewerFrame?Mode=
  6. inurl:ViewerFrame?Mode=Refresh
  7. inurl:axis-cgi/jpg
  8. inurl:axis-cgi/mjpg (motion-JPEG) (disconnected)
  9. inurl:view/indexFrame.shtml
  10. inurl:view/index.shtml
  11. inurl:view/view.shtml
  12. liveapplet
  13. intitle:”live view” intitle:axis
  14. intitle:liveapplet
  15. allintitle:”Network Camera NetworkCamera” (disconnected)
  16. intitle:axis intitle:”video server”inurl:”CgiStart?page=”
  17. inurl:/view.shtml
  18. intitle:”Live View / – AXIS
  19. inurl:view/view.shtml
  20. inurl:ViewerFrame?Mode=
  21. inurl:ViewerFrame?Mode=Refresh
  22. inurl:axis-cgi/jpg
  23. inurl:axis-cgi/mjpg (motion-JPEG) (disconnected)
  24. inurl:view/indexFrame.shtml
  25. inurl:view/index.shtml
  26. inurl:view/view.shtml
  27. liveapplet
  28. intitle:”live view” intitle:axis
  29. intitle:liveapplet
  30. allintitle:”Network Camera NetworkCamera” (disconnected)
  31. intitle:axis intitle:”video server”
  32. intitle:liveapplet inurl:LvAppl
  33. intitle:”EvoCam” inurl:”webcam.html”
  34. intitle:”Live NetSnap Cam-Server feed”
  35. intitle:”Live View / – AXIS”
  36. intitle:”Live View / – AXIS 206M”
  37. intitle:”Live View / – AXIS 206W”
  38. intitle:”Live View / – AXIS 210?
  39. inurl:indexFrame.shtml Axis
  40. inurl:”MultiCameraFrame?Mode=Motion” (disconnected)
  41. intitle:start inurl:cgistart
  42. intitle:”WJ-NT104 Main Page”
  43. intitle:snc-z20 inurl:home/
  44. intitle:snc-cs3 inurl:home/
  45. intitle:snc-rz30 inurl:home/
  46. intitle:”sony network camera snc-p1?
  47. intitle:”sony network camera snc-m1?
  48. site:.viewnetcam.com -www.viewnetcam.com
  49. intitle:”Toshiba Network Camera” user login
  50. intitle:”netcam live image” (disconnected)
  51. intitle:”i-Catcher Console – Web Monitor”
  52. intitle:liveapplet inurl:LvAppl
  53. intitle:”EvoCam” inurl:”webcam.html”
  54. intitle:”Live NetSnap Cam-Server feed”
  55. intitle:”Live View / – AXIS”
  56. intitle:”Live View / – AXIS 206M”
  57. intitle:”Live View / – AXIS 206W”
  58. intitle:”Live View / – AXIS 210?
  59. inurl:indexFrame.shtml Axis
  60. inurl:”MultiCameraFrame?Mode=Motion” (disconnected)
  61. intitle:start inurl:cgistart
  62. intitle:”WJ-NT104 Main Page”
  63. intitle:snc-z20 inurl:home/
  64. intitle:snc-cs3 inurl:home/
  65. intitle:snc-rz30 inurl:home/
  66. intitle:”sony network camera snc-p1?
  67. intitle:”sony network camera snc-m1?
  68. site:.viewnetcam.com -www.viewnetcam.com
  69. intitle:”Toshiba Network Camera” user login
  70. intitle:”netcam live image” (disconnected)
  71. intitle:”i-Catcher Console – Web Monitor”

Nessun commento:

Posta un commento