When people think about finding vulnerable devices on the Internet they may think about shadan.
While shodan does great at finding a lot of IoT devices that have been accidently connected to the
Internet and leak too much information, we can use Google dorking as well.
Camera login and viewing pages are usually HTTP.
That means that Google will index them and provide them for viewing,
if you know the right search string.
My advice is to use a vpn or a tor connection and not to expose your real IP address when connecting
to these devices.
One common format for a webcam strings is searching for "top.htm" in the URL with the string
current time included.
You'll find a lot of results of this way inurl:top.htm and inurl:currenttime
Once again you are not allowed to log into a device if it's asking for a password even though the password
is written in clear text.
This is unauthorized access and is illegal in most countries.
This is the first camera.
Let's try other dorks to find public accessible webcams: inurl:”CgiStart?page
=”
Wow!
Very interesting!
There is a lot of us snow!
And another one intitle:”live view” and intitle:
axis
It's not working well.
Let's try another one.
This one! There is a very nice lake in a mountain area.
In fact all you have to know is the content of the default page of a specific webcam brand.
intitle:"IP CAMERA Viewer" intext:"setting | Client setting"
And we found a lot of cameras!
This vertical bar is the " or " logical operator and will show you all sites that contain setting or
client setting. At the end of this lecture
I want to show you a website called the Google Hacking Database.
This website! It contains an index of thousands of search queries or darks used to find publicly available
information intended for pen testers and security researchers.