Unprotected Security Cams

Recently my asshole father installed a bunch of cameras all over the house, after a sleepless night where he threatened to kick me out and accused me of stealing his iphone and razor. So it was either cameras or a homeless shelter. With how little privacy I have now (I used to cook food and talk to myself for hours in the kitchen, dont feel comfortable doing that anymore with big brother watching), this got me thinking about all of those unprotected security cameras that anyone can easily figure out the passwords to, and play creepy sounds/noise music to mess with people. I'm seriously considering doing this to scare the fuarrrk out of him nonstop so he'll return them. Does anyone still dabble in this sport? I'm assuming the same methods of finding ip cameras still apply.

Why did you steal your father's iphone and razor, though?

>>16255 >iphone No thanks >razor I don't shave often, and even if I did I could just buy my own razor. I'm not that fuarrrking broke

Figure out who stole his phone.

>>16255 >>16257 The absolute state of /sec/

OP's father found! http://87.54.90.35/

>>16259 Ok, if that is really him, then that is pretty cool!

>>16259 So pretty, summer is here

>>16259 there is an older man and younger man there, but there are no kitchen cameras and no sound. I'm curious how you found this though.

>>16262 Not to mention the son has an iphone and the house is likely the parents house which the son doesn't live in. it's not creepy that I watched all these videos, right?

Why don't you apply your ingenuity and time to getting out of this house entirely?

>>16261 >OP's dad when he finds this /sec/ thread gets blamed for stealing iphones and razors.

>>16262 >I'm curious how you found this though Damn, Lainchanners don't even know about the shodan technique anymore? This place really is teen hell

>>16259 >>16269 Lel, neiss. DuckdDucking intitle:ContaCam : http://94.198.4.28:8800/ http://68.118.161.194:8800/ https://161.49.123.83:8443/ http://91.103.208.66:8800/ http://68.145.130.182:5190/ http://91.109.207.103:8800/ http://70.69.56.36:8800/ https://203.255.181.124:8443/ http://80.11.130.245:8080/ http://178.130.30.210/ http://178.130.30.211/ https://5.94.184.188:8443/ http://91.109.207.103:8800/ http://124.212.120.211:8800/ http://114.32.133.187:8888/ http://180.2.141.97:8800/ http://176.62.180.41:7777/ https://203.255.181.134:8443/ https://202.30.25.13:8443/ More with Shodan or direct port scanning.

>>16254 Thank you for inquiring the Lainchan Camera Hacking Services Incorporated. We're pleased to assist you in your business. The following information is required to assess the difficulty of your task: - Make, model, software version of installed cameras. - Internal structure of your network: make, model, software version of modems, routers, switches. - Strength of passwords your father use, supposed dictionary of words. - Description of your technical skill to assist us. - Your network's public IP address.

>>16269 I don't want to make/pay for an account. Besides a free account is pretty gimped with what you can do even with the api

>>16311 >he doesn't know how to steal api keys.

>lainons please lend OP a hand, with some records of a neet life in return Where's your mom? Does it scare visitors the fuarrrk out?

>>16254 Anon why don't you get a job and move out? If you are going to h*ck the cameras, tell me are the cameras wireless?

>>16300 based and kekd lmao

>>16254 If you specified what brand and model they are it would be useful. Probably better to just move out than fuarrrk around with your dads $20 ipcams

>>16256 >dont shave often kek welcome to /sec/

>>16330 What does that mean?

>>17393 it means you should murk loar

>>17395 Is it hidden tor lingo? Teach me.

>>17397 >hidden tor lingo did you just find this place or are you trolling?

>>17397 y3s. w3, th3 s3cr3t s0ci3ty 0f T0R, l0ves th0s3 w3ird slangs. "lurk moar" m3ans y0u sh0uld int3ract m0r3. h3r3 ar3 m0r3 slangs f0r ya: (ya m3ans y0u) c0p3: wh3n s0m30n3 d03s n0t lik3 s0m3thing, y0u sh0uld r3ply with "c0p3." bas3d: wh3n s0m30n3 says s0m3thing w3ird, y0u sh0uld r3ply with "bas3d." lain: n00bs w0uld think w3 ar3 talking ab0ut s3rial 3xp3rim3nts lain, but "lain" is an0th3r f0rm 0f saying tayl0r, that stands for tayl0r swift, th3 fam0us actr3ss. w3 lov3 tayl0r swift and h3r b00ks. g00d luck and lurk m0ar.

>>17399 8453d 4nd k3k kkk

https://youtu.be/ZsJSDX0DfSA

>>17399 You're not even getting jargon right. Lurk more new user.

>sleepless night where he threatened to kick me out and accused me of stealing his iphone and razor. So it was either cameras or a homeless shelter. sounds like you got bigger problems

>>16316 teach us please anon

>>18649 Seconded >T he b ody w as t oo s hort o r e mpty.

Bruted some RTSPs in Ukraine to see soliders

>>18827 to see the soldiers*

>>18827 Any way to get live feed to us?

>>18829 Military guys standing around is still up. Other two have changed ip/been turned off/been blown to bits rtsp://93.73.0.193:554 - just open as network stream in VLC

>>18830 It really works! Thanks lainon.

>>18827 How did you find the ip? Looks like a beautiful day in ukraine

>>18827 Please threat this as it can be fake. Why russian troops using video streams? How you get ip ranges for brute? I don't trust you.

>>18833 rtsp://93.73.0.193:554 This stream works? How could it be fake as you can clearly see it by yourself.

>>18827 >Bruted Lol. Reminds me of when I went through the front door of the world's largest e-commerce site. Those were the days. Commerce cares more about money than security, that never changes - therefore your pic related. >>18833 .>I don't trust you. Huh? Why would you need "trust" lainon? Why do you think he would care if you "trust" him? Or are you not smart enough to realize you outed yourself as a $echo "t.r.o.l.l." | tr 'tor' 'sih' ?

>>16316 >he doesn't know how to steal api keys. >needing to steal >not generating lainon I...

>>16270 the russian chick that hangs out in the backroom of http://94.198.4.28:8800/ is kinda cute

>>18830 The camera turned black and white suddenly. Do all of these cameras lose colors always at the same time of day?

>>18832 Downloaded 50k Ukranian RTSP servers off shodan and tried admin:admin etc. Ended up with 800 working (about 1.6% success). >>18833 I don't know what side the troops are from. There's some sort of logo on the car people's coats. The other military guys have been standing in Kiev not moving much for a couple days.

>asshole father installed a bunch of cameras all over the house paranoid pervert abusing power

Where are all of these cameras recording from? Russia or Ukraine?

>>18838 Probably a light sensor that decects low light which switches to IR mode which is why it appears black and white.

How are you all figuring out where cameras are located? Just looking up the ip address?

>>18827 rtsp://91.145.204.71:554/1 rtsp://admin:admin@31.43.33.76:554 rtsp://91.145.255.222:554/1 rtsp://94.232.178.150:554 rtsp://91.145.233.83:554/1

>>18845 Good work lainon. I'm actually impressed

>>18845 Someone please record and archive these

>>18847 Any reason why you don't do it yourself?

>>18845 found this camera! https://www.google.com/maps/@49.8145812,30.0794273,448m/data=!3m1!1e3

>>18867 lainchan didn't let me post picrel for some reason, this is the camera I was talking about

>>18868 Lain I will be really mad at you if you don't let this post trough >;(( https://files.catbox.moe/grpoj9.png

>>18855 Not tech savvy enough

Is there a big enough risk watching some cams that hiding ones IP is a must or is it just an optional precaution? Like can the person running the cams usually see info on whos watching them?

>>18884 If there is an access dashboard or some sort of firewall, then they will notice. But since these cameras are unprotected already, people operating them are probably not aware that someone might watch, if too many people start accessing resulting in denial of service, they might sus something and then check the logs. Using free VPNs, proxies and Tor is most of the time enough to hide yourself.

>>18886 That actually makes me think if masses of people are wanting to watch the same cam it would be wiser if it was rebroadcast for others to view it more indirectly to avoid a denial of service.

>>18827 Haven't seen any fighting yet

>>18939 Find anyone with an Azov emblem yet?

>>18886 >free VPNs >free lolwat

>>18945 There are honeypot VPNs that are "free".

>>18946 Yes I've heard of these, one is marketed under name T O R, openly operated by CIA from their dirty drug operations, do not touch!

Pretty view. http://96.84.75.105/view/view.shtml?id=215&imagepath=%2Fmjpg%2Fvideo.mjpg&size=1

>>19023 I like this a great deal. Watching the fog rollin and out. Thanks lain, you've brought a smile to my day.

http://68.116.33.170:4005/view/

>>16254 ip cameras are usually connected via layer 2 and they do not have any kind of firewall protection for purposes of accessing the camera over the wan being open for ddns or other soykaf technology. those have extremely terrible security and even simply grabbing the user@local DHCP hostname of the device can be used to generate its password (in most cases they have extra admin accounts that have default password or users never bother to change them and are open to bruteforcing) these IP cameras also have accessible gateway premises page that can make anyone in with internet access be able to access your IP camera (and this also includes exploits on exposing the XML files locally stored in the camera to generate session or grab password, so yeah it's a literal ZERO day device). just be more cautious lainon. there's nothing you can do. are you forgetting the fact that all people around you have microphone spyware and hotword/voiceassitant with them 24/7? there's also that alexa/nest system with far field microphone that can hear your whispers inside your room! don't underestimate microphones, they are very sensitive especially with a top-grade ADC and far-field technology along with special algorithms!

>>18837 Nice find Lainon. >>16270 > DuckdDucking intitle:ContaCam : Cool. I had no idea you can find cams this way. So far I knew only about Shodan. I have to write this down. Thanks Lainon.

>>18847 >>18855 >>18870 > record and archive these > Not tech savvy enough Wait what? You are "not tech savvy enough" to record a video? I hope this is a joke... >>19577 Cute kitteh to be honest

>>18840 yes very much yes Any lainons know how to fuarrrk up these wireless cameras without physically destroying them? I have to live with these soykafty things constantly. It was redundant before and are especially redundant now.Would magnets work or some taser? >>19537 is there any actual step by step guides on hacking cameras since wireless security cameras are notoriously and ironically very vulnerable?

>>19537 >ip cameras are usually connected via layer 2 >ip >layer 2

http://131.130.50.123/view/view.shtml

Shhｈhhhｈｈｈｈｈｈｈｈｈｈｈhhhhhh........👽

Cool story, what do ypu really need this info for? Also, what brand are the cameras?

This thread is for discussing unsecured webcams and related. I feel like something that doesn't get talked about online are unsecured webcams. In some you can pan tilt and move the camera, which is neat. Here are some sites: shodan.io https://d4msec.wordpress.com/2015/09/05/google-dorks-of-live-webcams-cctv-etc-google-unsecured-ip-cameras/ https://www.exploit-db.com/

A lot of cities have publicly-viewable weather and traffic cams, and random ass webcams. You can spy on the city remotely.

We have a thread >>>/sec/16254

>shodan why not use masscan to the whole internet or subset of internet (ie ISP or corporation) ?

>>20253 Well masscan always looked complicated to me, and shodan is pretty easy to use. But I haven't really actually looked into masscan.

https://www.youtube.com/watch?v=aeUt53DAq1c

>>16254 >>16256 did you finally move out of your dads house?

This one's purty http://109.233.191.130:8080/

>>22426 That was a lot of crows

>>22426 No fuarrrkin way, I remember dorking for cams on Google and came across this myself! This is in Novi Pazar (New Bazaar), Serbia. I did a Google earth mapping of the cameras' locations, at least as close as I could get them. http://0x0.st/Hy-t.kml

>>16254 The best way for messing with wifi cams is simply just a deauth attack. Try to map your network to tie physical cameras with their MAC addresses so you know which is which. Since this is on you local network and not over a WAN this is much easier. Just a simple host discovery should be enough. Also do a port scan and try to find their web interfaces. Try logging in with default credentials.

I myself have been looking into iSpy recently, open source, can access cameras through a web browser, and is supported on multiple OS platforms. I would not be surprised some people put in easily jacked passphrases, or not at all.

>>16254 So you can't provide for yourself and you complain about the people who are giving you free real state?

>>17399 HAHAHAHAHAHHAHAHAHAHAHAHA admin put this post as banner. seriously.

Anybody here hear about the guy who hacked into a bunch of Ring cameras and taunted homeowners via the camera's microphone?

OP you need to answer at some point, no info equals no help, scan your network and see what comes up >>22741 camera jacking provides geoguessr type gaming! >>23753 there is/was so much stuff on youtube with this, look up ip camera trolling

>>23753 I used to get invited to skype groups where people would do this. They would prank schools, businesses and baby monitors. I recall the latter happening in one group, and their harassment ended up getting featured on the news, and I remember the entire group was collectively soykafting themselves, scared of getting caught

>>16254 What kind of cameras are they? If they're something he can check when he's out of the house (like Nest or Arlo), you might be able to get some of his old passwords from data breaches and try a bunch of variations of them against his account. >>23758 This post was literally in 2021 his dad probably threw him out between then and now

Is it actually possible to easily find a specific camera or specific area or is it just a random chance on if you stumble on one?

ok, i stole your dad's iphone, and i can see why he's so upset about it. tell him if he ever kicks you out of the house he's liable to wind up in a lot of trouble.

i remember finding random ip cameras with scanner tools like shodan and others

Damn, people really do leave their "security" camera open to anybody. Some of them are pretty foolish if you ask me. Anyways, here is a small compilation: North America: http://23.84.38.171:8800/ : Just a garden. Though there would be a pretty nice view into the neighbours' home if the resolution was a bit better https://71.75.47.74:8443/ : Another garden. There are some recordings and the software is smart enough to show the moments when things were happening, so you don't even need to keep watching to stalk them http://70.228.65.151:4080/ : Many cameras around the house here. I could see the kids being driven to school earlier. http://23.240.184.186:8800/ : One camera at each entrance presumably. http://98.184.154.183:40000/ : A garden, a car (probably two sometimes), and a storm-drain. https://71.145.197.198:8443/ : This guy isn't missing anyone walking down the street. Better to come at night without a light, since the street doesn't seem to be lit-up. http://104.158.246.17:8805/ : Another street-stalker http://130.44.103.174:8800/ : Some camera-lovers right here. You can look at the trees being trimmed on the other side of the road. It seems their car is malfunctioning as well, maybe someone here can help them? Europe: http://80.15.215.5:8080/ : A French skateshop. Today is a public holiday, so not much to see. http://88.97.10.13:8088/ : A British squirrel cam http://87.54.90.35/ : Some Danish bike, car, and counter-top. http://80.201.193.59:8800/ : A Belgian parking, as seen through the door. Not sure why part of the door is masked http://77.24.105.165:8855/ : Nothing to see here. Just a German pavement Asia: http://52.220.125.161:8800/ : Not sure what this is. It looks like a sort of heatmap, but it doesn't seem to be updating. Hosted by Amazon Singapore. http://110.25.101.191:8800/ : Again, not sure what I'm looking at. It looks like some sort of cleaning equipment? Taiwan

>>24070 How do you get a live feed of these cameras? For me it only showing previous footage

Which ones? I've tried a couple and they are live, if I were to believe the timestamps.

>>24100 I was browing the first 5 or so. Whenever i click any of the links on the front page i only get a bunch of footage from various timeslots and a picture of whats on the camera now.

Yeah, that seems to be how the software works. You need to enable javascript or otherwise reload the image to update the current view.

>>24069 I don't know how to use Shodan well. Why do so many webcam results have "honeypot" written below them?

Reverse engineered some Qualvision/Tecvoz NVRs/IPCams for their backdoor login code: https[:]//search.censys[.]io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=strLangType - The backdoor code is based on the date for the NVR, so you might need to adjust your local time for timezones/change the code. - "0x2710 * 24" is hardcoded for 2024 IIRC so just change based on year. - Most of them need internet explorer and their ActiveX plugins to view :S (use a vm ig) #include <stdio.h> #include <time.h> int main() { struct tm *localTime; time_t currentTime; long code; currentTime = time(NULL); localTime = localtime(&currentTime); code = 0xD61ADLL * ((0x64 * (localTime->tm_mon + 1)) + (0x2710 * 24) + localTime->tm_mday); printf("Backdoor code is: %06ld\n", code % 1000000); return 0; }

>>24626 (username is admin and can use the backdoor as the pwd)

>>16259 omg there's a kitty by the garage

>>18649 >>18826 scrape them from github, a ton of API keys on there, some are even student or paid keys

>>16316 >>24700 Holy soykaf I tested it out and and got one in like 2 minutes. No wonder Github is trying everything they can to prevent key commits lol

>>24626 Where can I find format of default password for different ISP routers? Like default WiFi password is for example random upper lower string of certain length so I can make text file with every possible variation to break the hash?

>>24961 eBay listing usually include images of the stickers with default passwords I guess

>>24679 why is that things tail sticking up like that

>>16254 https://docs.google.com/document/d/1tCj-ToUhZGWCLqVsW3gCEFHUVBKsX8h4Jkl6v5Giq1U/edit?tab=t.0

http://194.183.167.109:8800 Someone's office but with ridiculous blur (Kiev, Ukraine)

>>24679 That thing's fuarrrkin possessed

>>26600 What happened? I don't see anything unusual in the recording

>>26601 I am dee cat weespurer

>>24070 >http://130.44.103.174:8800/ Some TV action >>24099 Depends on the camera I think

This is a potentially stupid question but is it absolutely necessary to hide your IP? Or chances are no one will even notice you're viewing an insecure camera or even if they do notice they are too tech illiterate to do anything?

>>26620 Chances are no one will even notice you're viewing an insecure camera or even if they do notice they are too tech illiterate to do anything. Do be paranoid and hide your IP though, they don't block Tor or VPNs anyways.

Get job and move in with a roommate. You are also going to need dumb phone, laptop, electric bike, backpack, portable charger, some sort of weapon for protection, etc.