Class 10 Assignment - Scan For Vulnerabilities And Hack Our Camera!

Avatar
John Scanlan
Jun 06, 2019
IPVM • IPVMU Certified

This assignment has two parts; scan for vulnerabilities and hack our camera.

Part 1: Scan for Vulnerabilities

***** *** ******** ******** **** ************* ******* ***** **** ******* *** ********** *******.

******** ** **** *** ******* *****:

***** ** * ************* ** *** scanner:

Post **** *******

* ********* ** **** ** *** network **** ****** ********** *********, ** the ******* ***** ******* *******. ** you ** *** **** ****** ** a ************ ******* ** ****, **** you *** **** *** ****** ** manually ******** **.***.***.***.

Part *: **** *** ******!

**** **** ** ********* ***** ******** and *******. *** ** *** **** recent *** ********** ******** ******** ** the ********* ***** ******. ** **** homework ********** *** **** ****** * Hikvision ****** ******* ********** ********.

**** *** *** * ********** ********* camera ****** *** ******* ** ********** with. ****** ******* ***:

****://*****************.******.*** [****: **** **** ***** **** **** strong ***** ********]. ******* *** ** *** ******** ******* ****** *** *** ******* ********* *** commands ** ****** ********* * ****** that ********** ****** ** *** ******. Some ******** *** ***** (******* "******.**" **** *** ****** ** ******* or *** ** *** ******):

******** * **** ** *** ***** and ***** *****:
****://******.**/********/*****?****=************

****** * ****** ******** ******* **************:
****://******.**/*****-****/********?****=************

*** ***** ** ***, *** *** download ****** *************:
****://******.**/******/*****************?****=************

*** *** **** *** ** *** **** *** ********* to ****** *** ********. *** *** ******** *** *** get **** **** (******* ********* *** camera) *** **** **** ******* ****!

Post **** *******

**** ** ** ******* ** **** homework *********** ****** **** ****.

* **** *** *** ** ****** the ********:

**** ****** ** *** ****** * then ******* *** ***:

****** ** *** ******* **** ** any ****** ***** **** *** **** camera, *** **** ******* ************. ** you **** *** ********* ****** *** us **** - ** *** ***** to ****.

ES
Eb Scroggins
Jun 06, 2019
IPVMU Certified

* *** *** **** ** *** the **** **** ** * **** have ***** ****** ** ******* *** needed **** **, ******** * *** able ** *** ** *** ******* of *** ******.

*** ** ***, ****** *** ** do!

(1)
Avatar
John Scanlan
Jun 06, 2019
IPVM • IPVMU Certified

** - ***** ********, *** ** rebooted **** **** **** *******.  ** looks **** **** **** *** **** DHCP ******/******* ** *********** ** ****** our *******.  *** ***/******* ** ******* is **.***.***.***.

Avatar
Jay Christgau
Jun 06, 2019
IPVMU Certified

***** **** ** ********** **

** **** ** ***** ********* *****. Scanned **** *** ** *** ****** servers.

(1)
Avatar
Bobby Mancia Jr.
Jun 07, 2019
MIZELA CORPORATION • IPVMU Certified

Part *  **** *** ***************

**** * ******* *** ******* *** found ***** *** *** ***** ****** venerable.

**** * **** **** ******

 

**** * ****** **** *** ***** even ** * ********** *** ******* Normally, ** *** **** ** *** it **** ****** ** ****.

 

 

 

(1)
Avatar
Bobby Mancia Jr.
Jun 07, 2019
MIZELA CORPORATION • IPVMU Certified

**** ** ***** **** * ****** with IExplorer ****. **** ** **** *********** assignement.

(1)
Avatar
Vidar Folgerø
Jun 07, 2019
IPVMU Certified

* ********* ** **** ** ** very ***** *******, *** ***** **** vulnerable **********.

Avatar
Vidar Folgerø
Jun 07, 2019
IPVMU Certified

**, ***** ***. **** *** ***.

 

**** **** ******. *** * **** try *****..:-))

(1)
Avatar
Vidar Folgerø
Jun 07, 2019
IPVMU Certified

 

****** * ****** ******** ******* **************:
****://**.***.***.***/*****-****/********?****=************

(1)
Avatar
Jay Christgau
Jun 07, 2019
IPVMU Certified

******** ******

******** ***** ***** ******

(1)
Avatar
Kevin Rose
Jun 07, 2019
IPVMU Certified

**** **** **** ******.  * **** getting * "******* ******* *****" **** I'm ****** ** **** *** ********* using *** ******** ****** ***.  ****** else ****** **** ******* ** ** I ***** ********* ***** ** ** end.

****** *** *** **** ** *******.

(1)
Avatar
Kevin Rose
Jun 07, 2019
IPVMU Certified

*** ** **** *** **** **.

* ******* ** ***.  ********* ** do **** ******* ** ** ***.  I *** ** *** **** ** laptop ** ** ***** ** ** able ** *** ******* ** ** office ******* *** ********** ****** ****.

(1)
pm
patrick moke
Jun 07, 2019
IPVMU Certified

******* **** ******, ********** ** ********.

**** * ******** ** *** **** camera, *** **** *** *** ****** off! 

Avatar
Kevin Rose
Jun 07, 2019
IPVMU Certified

**** *: ***************

 

**** *: ******* *** ******

* ***** ** ** *** ******* through ** **** ******** *** * kept ******* ******* ******* ******.  ** order ** *** ****** *** ******** in ** ****** * *** ** hot **** ** ***** ** ** laptop.  **** * *** **** * was **** ** *** *** ******** reset *** *** * *** ** fine.  ***** ***** ****** *** *** the ****-** ******'* **** *** * was **** ** *** * ******** to *** ****.  ***** ** ** laptop * *** **** ** **** a ******** ***.

JY
Jae Yoou
Jun 08, 2019
IPVMU Certified

****. **** *** ***!

BO
Bruce Olexa
Jun 09, 2019
IPVMU Certified

********* ***,

* ******* ** **** ******* ** see ** ** ** ****** **** up ** * *************.  ** *** not!

* **** ******* **.***.***.*** ****'* ********** HikVision ******, ***** *** ******** * vulnerability ** ********* ** *** *******.

* **** ****** **** *** ********* using **** ************* *** ******* *** image.  * *** ****** ** **** the **** **** *** ** * plug ** ***** (***** *** ******** on ****** *** ******** ******** **** no ****), ** * **** ****://**.***.***.***/*****-****/********?****=************ ** **** * ****** ****.

**** ********** *** ***!  **** * great **** ** *** ******* ********!

Avatar
Eric Foldenauer
Jun 09, 2019
IPVMU Certified

*** ****** **********, ***** ***** *** no ******* ** ** **** *******.

Avatar
Eric Foldenauer
Jun 09, 2019
IPVMU Certified

RF
R Ford
Jun 10, 2019
IPVMU Certified

**** ************* ******* *******:

(** ********* **** *** ********.  * scanned ****.  *** ******* ******* ************ on *** ****** ******* **** "***/***."  I **** *** ** *******' ******** up-to-date **** *** *** ****** ******* firmware *****.  ***** ****'* *** ** Hikvision (**), **** (*), *******  ******** (2) ******* **** ** ***************.

**** *: *******:

UI
Undisclosed Integrator #2
Jun 10, 2019

 

**** ******* ****. ***** ** *** a **** ***. ******* ******* ** site.

ED
Everton Dias
Jun 10, 2019

* ******´* **** *** ************* ** my *** **** *******. * ***** to **** ******* ******* ** ** Google ****, *** ******´* **** ************* either.

**** * ***** *** **** ** (64.121.162.169) * ***** *** ********* ****** being **** *** *** **********.

* **** ***** *** *** **********, download *** ************* ****, *** *** the ***** ****, ****** ********, *** even ****** ** ********** **** (*******). 

*******, * ******´* **** ***** ****, although * ******** *** ********* ******, installed **, ****** *** ******* (*** opened *****), *** ***** ********* ******** as ****.

 

Avatar
Warren Davies
Jun 10, 2019
IPVMU Certified

********* " ** *******"

* *** *** ************* **** ** my *** **** "** *******". * then *** *** **** ** ** public ** ******* *** * *** vulnerabilities **** ********.

* *** **** ** **** *** test ****** *** ****** * ********** by ***** *** ****** ****://**.***.***.***/*****-****/********?****=************. * was *** **** ** ******* *** "password *****" ** ** ** *** "Mac" **********.

****** ******* **** **********...* **** ******* to ************* **** ************* *******.

******

Avatar
Erik Mendes
Jun 10, 2019
IPVMU Certified

**** *: ************* ******* ***** * possible ************* *****

**** *: **** *** ******!

****** **** ** *****

***** *** ********

******** - ******* ****** **** *** rotated *** *****.

*************, **** ** ** ******** (******, Firefox *** ******** ********) ***** **** the **** ******, **** ***** ********** the ******* ******.

JH
John Hageman
Jun 10, 2019
IPVMU Certified

***** ***** *** ** ******* ** my *******, ******* *** *****.

* *** ****** *** ******** **** the ******** ***** ****, *** ********* the ********* *** ********** ****-**, *** didn't **** ******* ** ******* *** live ****.

Avatar
John Scanlan
Jun 10, 2019
IPVM • IPVMU Certified

**** - **** ****.  *** **** need ** *** ** ** **** the **** ******.

JH
John Hageman
Jun 10, 2019
IPVMU Certified

****** *** *** *****!

MH
Matthew Haupt
Jun 10, 2019

Avatar
Sean Shay
Jun 10, 2019
IPVMU Certified

* ******* *** ******** ** *********** using *** ******** **** *** ******* the ***** ***********, *** **** **** and *** ****** ****. * *** able ** *** *** ****** ****, user **** *** **** **** *** camera ***** *** ********* ******** ***** tool. * **** ******* ** ******* for ******** *************** **** * ** my ***** *******.

UE
Undisclosed End User #3
Jun 11, 2019

** ******* ***** ** *** ****** network, *** ******** ******* ****** ** be ****.

 

*** *** *****, ****** ***********!

 

LK
Lars Knoll
Jun 11, 2019
IPVMU Certified

************* ****:

* *** ** ****** ** ********* workstation *** ****, ** **** **** up **** ** **************.

***** *** ******* *** **** ******** on ** **** ******** **************.

 

******* *** ************ ****.. *** ***!

 

*** ****** ** *** **** ****,  and **** ********** ****-** ******. *** * got ****** ** *************.

 

Avatar
Ragnar Mørland
Jun 11, 2019
IPVMU Certified

Part *: **** *** ***************

 

* **** *** ****** *** ** restrictions ** ** ******* ******** *** get *** ******* **** ******* *****.

Part *: **** *** ******!

******* ***** ** ******* **** ************** credentials. :-(

 

Avatar
Ragnar Mørland
Jun 11, 2019
IPVMU Certified

Part *: **** *** ******!

*** ****** ** *** ******, *** did *** *** **** *****.

******** ****** ** *** ***** *******. 

 

*** *** **** **** ******* **** your ******.

UM
Undisclosed Manufacturer #4
Jun 11, 2019

* **** *** *** **** ************* scanner **** ******* ** *** ** my **** ****** *** ** ********** I ******* *** **** *** ******. I *** *** *** ******* *** a ******** **** **** * ****** network ** ******* *** ******* **** new **** ***** **, ***** ********

UM
Undisclosed Manufacturer #4
Jun 11, 2019

**** ** *** ********* ******* *** show *** *************** **** * *** all *** ******* ** * ********* network ** ***** ******* * *** **** **. 5 ****** ***** ******* **** *** camera ***** *** ********* ******** ***** app

* **** **** ** * ***** not **** **** *** ****** ***** downloading *** *** ********* *** ******* closing *** ******* **** *****. * will *** ***** ** *** *** to *** ** * *** **** view. 

JK
Jessica Kulback
Jun 11, 2019
IPVMU Certified

****'* *** ***** **** ** **********. Still **** ** ******** ****** ****.

JK
Jessica Kulback
Jun 11, 2019
IPVMU Certified

*****'* **** * ** *** **********, part * ********** ****. ******'* ******** plugins ** **** ********, **** **** worked **** ********* ******* ****** *** can ******** ******** *** ***

CS
Chris Stubbins
Jun 11, 2019
IPVMU Certified

** *************** ***** - ***** ******* though

Avatar
Kjetil Wiig
Jun 12, 2019
IPVMU Certified

******* ** ***** **********:

 

***** * *** *** ******* ** access **** ****** **** ** **** PC, * **** *** ** ** ***** teset ****** ** **** *** ********* backdoor *******:

OM
Ole Morten Solheim
Jun 12, 2019
IPVMU Certified

**** *. *'** *** **** ****** *** to ************ ** ** ******* ******** and ***** *** ******* *****.

**** *.

*** ****** ** *** ******, *** did *** *** **** *****.

******** ****** ** *** ***** *******.

JV
Jason Van Veenendaal
Jun 13, 2019
IPVMU Certified

AH
Amy Hanna
Jun 13, 2019
IPVMU Certified

*** **** ** *** * ********.

** **** **** ****** ****

*** **** ** *** *** ** change **

**** ** ***** 

AH
Amy Hanna
Jun 13, 2019
IPVMU Certified

** *************** ** *** *******.

ED
Emil Dodd
Jun 14, 2019

**** *

DC
Dave Costa
Jun 15, 2019
IPVMU Certified

Avatar
Michael Macans
Jun 17, 2019
IPVMU Certified

Part * 

** **** ******* *****'* **** *** devices **** *** ********** ** ****'* a *****.

 

Part *

* ******* ** ** *** * screenshot ** *** ********** ********* ****** set ** ** **** **. *'* in ****** *** *** **** ********** at **:** ***** ****, ** *** time ** *** ********** ******* *** time **** **** ** ** **. Kudos ** *** *****' **********!

JM
Jon Morton
Jun 17, 2019
IPVMU Certified

* ********* * **** ** ** network ***** *** **** ******* *** did *** **** *** ********** *******.

**** ** * ****** **** ** the ******

YT
Yared T
Jun 18, 2019
IPVMU Certified

**** *

* ********* ******** ***** ** ********* sites **** ** ****.***** * *** two ********** ******* .*** *** **** to **** **** ****.**** *** ******** LTS *******.

 

HN
Hester Ng
Jun 18, 2019
IPVMU Certified

CC
Charles Cunningham
Jun 19, 2019
IPVMU Certified

***** ****:

 

****** ****:

LD
Lasse Drageset
Jun 24, 2019
IPVMU Certified

******* ***** *******: ** ****** ***** open

******* **** ******: ******** ********* *************

****** ** ** ****** ****://*****************.******.*** ***** ****** ******* *** ******** ***** the HikvisionPasswordResetHelper.exe ***. ********* **** ** **** advantage ** ******** ***** **** ****.

MB
Michael Bernard
Jun 25, 2019
IPVMU Certified

**** *: ****

* ***’* **** ****** ** * camera *******, ** * **** *****. Results ** ********.

**** *

* **** *** **** ** *** a ******** ******* **************.

* **** *** *** ** ****** the ********:

**** ***********.

New discussion

Ask questions and get answers to your physical security questions from IPVM team members and fellow subscribers.

Newest discussions