Class 10 Assignment - Hack Our Camera!

John Scanlan

•Mar 25, 2020

IPVM • IPVMU Certified

Hack Our Camera!

This week we discussed cyber security and hacking. One of the most recent and widespread backdoor exploits is the Hikvision magic string. In this homework assignment you will access a Hikvision camera running vulnerable firmware.

**** *** *** * ********** ********* camera ****** *** ******* ** ********** with. ****** ******* ***:

*****************.******.***

[****: **** **** ***** **** **** strong ***** ********]. ******* *** ***** ******** ************* *** *** ******* ********* *** commands ** ****** ********* * ****** that ********** ****** ** *** ******. Some ******** *** ***** (******* "******.**" **** *** ****** ** ******* or *** ** *** ******):

******** * **** ** *** ***** and ***** *****:
****://******.**/********/*****?****=************

****** * ****** ******** ******* **************:
****://******.**/*****-****/********?****=************

*** ***** ** ***, *** *** download ****** *************:
****://******.**/******/*****************?****=************

*** *** ******* ** *** **** *** ********* to ****** *** ********. *** *** ******** *** *** get **** **** (******* ********* *** camera) *** **** **** ******* ****!

Post **** *******

**** ** ** ******* ** **** homework *********** ****** **** ****.

* **** *** *** ** ****** the ********:

**** ****** ** *** ****** * then ******* *** ***:

****** ** *** ******* **** ** any ****** ***** **** *** **** camera, *** **** ******* ************. ** you **** *** ********* ****** *** us **** - ** *** ***** to ****.

Reactions:

(3)

First
Previous
1(current)
2
Next
Last

Scott Gregg

•May 12, 2020

IPVM Image

* **** *** ******** **** ** get **** *** ****** **** **** I *** ** * ***** *** a *** ******* *** *****************.

Reactions:

(2)

(1)

Nishit Patel

•Jun 01, 2020

IPVMU Certified

* ** ****** ******* **** **** assignment

****** * **** *** *** ** or * **** **** ***** ** put ** **

Reactions:

(2)

Nishit Patel

•Jun 01, 2020

IPVMU Certified

In reply to Nishit Patel

** *********, * *** ********* ** correctly, **** *** ******* ** *** results *******.

***** *** * *** ***** **** admin ** *** ********.

IPVM Image

Reactions:

(1)

Jason White

•Jun 15, 2020

IPVMU Certified

IPVM Image

Reactions:

(1)

Tony Ursan

•Jul 29, 2020

*** **** *** ****** *** *** interested ** *********** *** ******. IPVM Image

Reactions:

(1)

Cory Knight

•Aug 10, 2020

NMS • IPVMU Certified

* ******* ** *** **** ** users.

IPVM Image

Reactions:

(1)

Bob Fallon Jr.

•Nov 03, 2020

IPVMU Certified

**** ****. *** **** ** *** in. *** *** *****. * **** the *** ** ****** *** ******** and **** *** **** ** ****** the ****** **** *** **** ** screen, ******* ***** *** **** ******** due ** *** ****** ***** *********** on ** **** ****** ******* ** download *** ****-** *************.***, ** * can ****.

IPVM Image

Reactions:

(1)

Bob Fallon Jr.

•Nov 03, 2020

IPVMU Certified

IPVM Image

Reactions:

(1)

Matthew Abreu

•Nov 26, 2020

IPVMU Certified

IPVM Image

* *** **** ** ***** *** create ** *** *******, ****** ****** seeing *** ****** *****. *** *** not *******, *** *** *** ***-********** plugin. * ****** *** ** ** the **** *** **** ******. *** test *** ********* ** *** ******** and ************* ********.

Reactions:

(1)

Matthew Abreu

•Nov 26, 2020

IPVMU Certified

In reply to Matthew Abreu

* *** **

IPVM Image

Reactions:

(1)

Jason Rector

•Dec 08, 2020

IPVM Image

Reactions:

(1)

Nicklaus De Witt

•Dec 30, 2020

IPVM Image * *** **** *** ****** *** added * ****.

Reactions:

(1)

Daniel Martin

•Jan 20, 2021

IPVMU Certified

* **** *** ******** ***** *** to ****** *** ***** ********.

IPVM Image

**** * *** ** *** ******, I ***** * **** *** ******* a ********. *******, * ** ****** to *** ****** ****. ** ******** a ******* ** ******** ****-**.

IPVM Image

Reactions:

(1)

Undisclosed End User #1

•Apr 04, 2021

*** ** ******** **** ****://******.**/********/*****?****=************.

*** ***** *** ** ****?

Reactions:

(1)

Andres Viteri

•Apr 23, 2021

*** **** *** ****** *** * changed *** **** ** ***** ******.

IPVM Image

Reactions:

(1)

Tyson Owens

•May 04, 2021

IPVMU Certified

* *** **** ** *** ** and **** **** ** * ******** that ***** ******* (*** *** ***** time), *** **** * **** *** configuration *** **** * ********** *******, I ***:

IPVM Image

* ** ***** ** *** *** browser.

* ******* *** ****** ** ***. I ***** *** **** ** ** browser's ******* ***** *** ********* *** Active * *******.

* *** ***** ****** ** ****** the ******. **** ****** **** *** to *** **** *****?

Reactions:

(1)

Nicholas Brisson

•Jun 25, 2021

IPVMU Certified

******* **** ******* ***** ******** *** got **.

IPVM Image

*** ******* ********** *** *** ******, so **** ****** *** **** *** MJPEG ** *** ********* ** *****...

IPVM Image

Reactions:

(1)

Charista Mroczek

•Jul 30, 2021

IPVMU Certified

**** * *** ** *** ******, an ***** ******* ****** **. * don't **** ** ******** *** ****-** at *** ******.

IPVM Image

Reactions:

(1)

Nathan Shelley

•Aug 02, 2021

IPVMU Certified

* *** ****** ** ******** *** app *** * *** **** ** view *** ****** **** *** ****** configuration ****.

IPVM Image

Reactions:

(1)

Chelsi Vining

•Aug 05, 2021

IPVMU Certified

* **** *** *** ** ****** the ********:

IPVM Image

**** * *** ** *** ******:

IPVM Image

*** * *** *** ********:

IPVM Image

Reactions:

(1)

Justice Ostapowicz

•Aug 10, 2021

IPVMU Certified

** **** ****** ** ******'* ******* to *** ******. * **** ***** on ******* ****** *** ***** *** public ** ** * *** ** a *** ***** ******** ***** **** worked. ** * ***** ********* *****?

IPVM Image

Reactions:

(1)

Jon French

•Aug 31, 2021

IPVMU Certified

* ** ****** * **** **** figuring **** *** ***

Reactions:

(1)

Jon French

•Aug 31, 2021

IPVMU Certified

IPVM Image

Reactions:

(1)

Jon French

•Aug 31, 2021

IPVMU Certified

* *** ** *** * ******* the ****** ** ****.

Reactions:

(1)

Robert Finley

•Sep 24, 2021

IPVMU Certified

IPVM Image

*** **** ** *** **** *** change ********. *** ****** ** *** live **** **** **** ****** *********.

Reactions:

(1)

Tommy Dewey

•Sep 29, 2021

IPVMU Certified

IPVM Image

** ****************>

**********>

*************************>

**********************>

*********.******************>

**-*******-******>

**-*******-**********************************>

**:**:**:**:**:************>

**.*.****************>

***** **************************>

**.*.************>

**********************>

******************>

**********>

***** *** **** **** ***.

Reactions:

(1)

Undisclosed End User #2

•Oct 13, 2021

* ******** * ******* * *** unable ** ******* ** ******.

Reactions:

(1)

Jason Giordanella

•Oct 15, 2021

**** ******** ** ******* ** *******. Test *** *** ******** ******** ***** Ip *******.

****** ****** *** ****** ***.

IPVM Image

Reactions:

(1)

Cole Agner

•Oct 16, 2021

IPVMU Certified

*** **** **** ** ** *'* doing ******** ***** ** **** ***, but * **** *** ** ** computer *** ***** ********** *** *********** plug **, *** ** ***** *** getting *** **** **** *** *** recordings. **** *** **** ***'* **** for **:

IPVM Image

Reactions:

(1)

Tyler Maclin

•Nov 02, 2021

IPVMU Certified

IPVM Image

* *** ****** ** ****** * live **** ** *** ****** ** Chrome ** ****, **** ***** ********** to ******* *** ******:

IPVM Image

Reactions:

(1)

John Scanlan

•Nov 04, 2021

IPVM • IPVMU Certified

In reply to Tyler Maclin

***'** **** ** *** ** *** your ******* ** *** **** **** (or **** ** ** ********* **** VLC)

Reactions:

(1)

Stacius Greer

•Nov 04, 2021

IPVMU Certified

******'* *** *** ******* ****** *********, instead * ***** ** **** ** an **** ****** - * *** never ******** ***** *** *** ************** either ***** ***** **** *******.

**** ****** ***:****://*****************.******.***:***/*********/********/***

IPVM Image

Reactions:

(1)

Nikita Ermolaev

•Nov 12, 2021

IPVMU Certified

IPVM Image

Reactions:

Undisclosed End User #3

•Jan 11, 2022

* ********* ******** ***** ** **** the **** *** *** ****** ** do **.

* *** *** **** ** **** the ******

Reactions:

(1)

Fawaz Owayda

•Jan 17, 2022

IPVMU Certified

****** ** ****** *****************.******.***

IPVM Image

* ***** ******* ******** ** ****.

* **** **** ******.

*** *****?

******

Reactions:

(2)

Jermaine Wilson

•Jan 17, 2022

IPVMU Certified

In reply to Fawaz Owayda

***** *****,

** **** ***** *** *****, ******* student ******* *** ** ******* *** we **** **** ***** ****. ****** let ** **** ** *** **** any *********.

**** *******,

Reactions:

(1)

Fawaz Owayda

•Jan 17, 2022

IPVMU Certified

**** ******** ******* *** *** **** to ***** *** ******** ** * was ****** ** ******* ** *** remote ******. ****! * ** ** for *** ********* ******.

IPVM Image

Reactions:

(2)

Jermaine Wilson

•Jan 17, 2022

IPVMU Certified

In reply to Fawaz Owayda

***** *****,
** **** ***** *** *****, ******* student ******* *** ** ******* *** we **** **** ***** ****. ****** let ** **** ** *** **** any *********

Reactions:

(1)

Fawaz Owayda

•Jan 17, 2022

IPVMU Certified

In reply to Jermaine Wilson

***** *** ********. * *** **** to ****** *** ****** *** ******* I **** ** ******** *** *******-******* * ** ****** ** ** so, ** **** ******** ******** ** blocking **. * ***** **** **** is ****, * ***** ** **** to **** *** ******. **** ***********.

Reactions:

(2)

Fawaz Owayda

•Jan 17, 2022

IPVMU Certified

IPVM Image

** ****** ** ********, * *** able ** *** ******* *** ******** step ** **** *** * ** happy **** * *** **** ** practice **** ****** ***-***. * ******* to ****** ********* ******** **** *** change *** ********. * **** *** to ******* ****-** *** **** ** another **** ***** ** * *** hack ***** **** **** ******.

Reactions:

(2)

Guy Guindon

•Jan 17, 2022

IPVMU Certified

IPVM Image

* *** **** ** ****** *** camera, *** * ***'* **** ** because * **** * **** ** app ********* ***** ** **** ******** won't *** ** **.

Reactions:

(2)

Undisclosed End User #4

•Jan 26, 2022

* *** **** ** *** **** the ****** *** *** *********** *** web *******. ***** * *** **, I ***** ** **** **** ****. I *** ************* ****** ** *** the ****** **** *****. * ***** to ******** *** *********** *********, *** tried ******* ***** ******** (*******, ****, internet ********) * **** ***** *** site ** * ******* **** ***** should **** ******* *** ****** *******.

IPVM Image

Reactions:

(1)

Undisclosed End User #4

•Jan 27, 2022

*** ******* ****** ****** **** ******* the **** **** **.

*** *** ** *** ***** ******** video *** * ******** **** ******. Running ** ****** ******** ******** ******.

************* - ***** ************* - ******** - ****** ** ****

IPVM Image

Reactions:

(1)

Nickel Joseph

•Feb 17, 2022

IPVMU Certified

* *** **** ** *** *** app ** ****** *** ***** ******** for ***** ******. * *** *** able ** **** *** ****** ** I ** *** **** ***** ****** on **** **** ********. **** *** assignment.

IPVM Image

Reactions:

(1)

Tyler Lynch

•Feb 20, 2022

IPVMU Certified

IPVM Image

Reactions:

(1)

Mark Homiak

•Feb 21, 2022

IPVMU Certified

IPVM Image

Reactions:

(1)

Undisclosed End User #5

•Feb 24, 2022

*'** ***** ********* ****, ****** *** Internet ********. * ****** ****** *** site. ** ***** * ******* * need ** ****** ** ******** ?

IPVM Image

Reactions:

(1)

Craig Coffed

•Mar 07, 2022

IPVMU Certified

**** ** ************* *** *** * was **** ** ***....

IPVM Image

Reactions:

(1)

Joe Defranco

•Mar 18, 2022

IPVMU Certified

IPVM Image

Reactions:

(1)

David Holt

•Mar 22, 2022

IPVMU Certified

* ******'* ******** *** **** ******* I **** * ***, *** *'* sure *'* ***** ********* ***** ** this ** **** *'* ******:

IPVM Image

Reactions:

(1)

Undisclosed #6

•Mar 27, 2022

IPVM Image

Reactions:

Undisclosed #7

•Mar 27, 2022

* *** **** ** *** ** to *** ****** ******* ****** ** install *** **** **.

IPVM Image

Reactions:

Aleksandar Pašagić

•Apr 06, 2022

IPVMU Certified

* **** *** *** ** *** in ** *** *************

IPVM Image

***** ***** * ***** ****** ** the **** ** *****

IPVM Image

Reactions:

(1)

JOHN BETSA

•May 02, 2022

* *** **** ** ****** *** admin ********

IPVM Image

*** *** **** *** ******. * could *** *** *** * **** video. * ***** ******** *** ****** configurations:

IPVM Image

* ***** *** *** ******** *** web ******* ** ********://***.***.*.**/******/*****************?****=************

Reactions:

(1)

Nate Zimmer

•May 12, 2022

*** **** **** ** ***** ***** here.

IPVM Image

Reactions:

Mike Swindells

•Jun 10, 2022

************* *'** **** ****** ** ******** this **********. * **** *** ****** ip *** **** ** *** ******** strings *** ******* *** **.

****://******.**/********/*****?****=************

****://******.**/*****-****/********?****=************

****://******.**/******/*****************?****=************

**** **** * *** ***** * get *** **** ******* **** **** site ***'* ** *******.

Reactions:

(1)

John Scanlan

•Jun 10, 2022

IPVM • IPVMU Certified

In reply to Mike Swindells

**** - "******.**" ** * ******** that ****** ** *********** **** *** IP ******* ** ***, **:****://******.**/********/*****?****=************

** *** **** ***** ******** **:

*****://*****************.******.***/********/*****?****=************

**** ******** *** ****** *****:

IPVM Image

Reactions:

(1)

Jason Forsythe

•Jun 10, 2022

IPVMU Certified

* *** **** ** *** *** GUI ** ****** *** ********.

*** **** * ********* ** *** into *** ****** ***** *** *** user **** *** ********, ** **** it ** *********. ***** ******* ***** unsuccessfully.

IPVM Image

Reactions:

(1)

Cody Richardson

•Jun 26, 2022

IPVM Image

* *** **** ** ****** ********** needed *** ***** *** ** ****** settings ** ******** ******.

IPVM Image

Reactions:

(1)

Undisclosed End User #8

•Aug 18, 2022

* ***** ** ** **** ******** but *** ******* **** "**** **** can't ** *******".

Reactions:

(1)

Kyle Clancy

•Aug 24, 2022

IPVMU Certified

* ** ****** *** **** *****, using ******** ********, * ***** *** "this **** **** ** *******".

**** ** * *******? * ******** the ********** ***** *** *** ******* others **** **** *****, ** *********** as ** ***.

Reactions:

(2)

Vincent Lai

•Sep 21, 2022

IPVMU Certified

****** *****. ******* ******* *** **** 80 ** ********* **** ** ** was *** **********, *** **** *** able ** *** **. *** **** to **** * ********** *** **** the **** ***.

IPVM Image

Reactions:

(1)

Matt Morton

•Oct 19, 2022

IPVMU Certified

* **** ** ****** ** ******** the ** ******* *** **** **** the ******** ***** **** ** ****** the ***** ********. **** ****** ** I ******* * ****

****: ************

IPVM Image

Reactions:

(1)

Brian Smith

•Oct 28, 2022

IPVMU Certified

* *** **** ** **** *** user ******** *** ****** * ***** of *** ****** IPVM Image

IPVM Image

Reactions:

(1)

Joseph Fredrick

•Nov 09, 2022

IPVMU Certified

* **** *** *** ********. IPVM Image

Reactions:

(1)

Mike Reese

•Nov 14, 2022

IPVMU Certified

* **** *** *** ** ****** the ******** *** *** **** ** login ** *** ******. * *** not **** ** ******** *** **** back **** ** **** *** *****.

IPVM Image

Reactions:

(1)

Massimiliano (Max) Alfieri

•Nov 20, 2022

IPVMU Certified

*** ******** ***** *** ****'* **** to ******* *** ******** *** **** list ** ***** *** ** ** change *** ******** (***** *****)

* *** **** ** *** *** camera ********, ***** **** *** ****** file.

****: * ***** ** **** ** see **** *** ** **** **** NVRs ** **** *** *** **** that *'** ***** ***** ** ************ with ** ** ****** ********* ** internet ******* * ******** ** *******.

IPVM Image

Reactions:

(1)

First
Previous
1(current)
2
Next
Last

New discussion

Ask questions and get answers to your physical security questions from IPVM team members and fellow subscribers.

Newest discussions