Follow us on Twitter!
It is the path of least resistance that makes rivers and men crooked. - Bj Palmer
Wednesday, April 23, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 26
Guests Online: 20
Members Online: 6

Registered Members: 82885
Newest Member: ConiBE
Latest Articles
View Thread

HellBound Hackers | Events | General

Author

ironkey and AXIS 211 Network Camera


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 10-01-09 12:25
I have two questions.

1.) What do you guys think of the Iron key flash drive. i looked throught the search function and only got to hits and they where both just a mention and no discussion on it.

2.) I was playing around with google and did the whole view/shtml thing and got alot of hits on AXIS cameras but they all require you to log in via a username and password in order to see through them or to control them. I also noticed that the urls look like this

ip.ad.dr.ess/view/view.shtml?id=116&imagePath=/mjpg/quad/video.mjpg&size=1

Well i was playing around i hit one that allowed me to take a snapshot even though i had no rights to the camera so i click snapshot and i see the pic. well if i keep clicking refresh it will be pretty much like an video since the timestamp says its live. but the url for that is

ip.ad.dr.ess/view/snapshot.shtml?picturepath=/jpg/image.jpg

so i switched it up and made this

ip.ad.dr.ess/view/snapshot.shtml?picturepath=/jpg/image.jpg&id=116&imagePath=/mjpg/video.mjpg

Well now there are two pics but one is moving since i guess its the actual live feed and i could control them with the controls in the little window. Also on two of them i was able to do ../../../../../../etc/passwd and i got a file with a load of gibberish in it.

Heres the question. I know the dir transversal is a vuln but is the camera thing a vuln since i cant turn them off or anything. only move them around.

Thanks in advance for your time.




Edited by on 10-01-09 12:29
Author

RE: ironkey and AXIS 211 Network Camera

K3174N 420
Member



Posts: 296
Location: In a grow room, growing cannabis.
Joined: 14.09.08
Rank:
Hacker Level 1
Warn Level: 69
Posted on 10-01-09 12:31
Theres an article here called google hacking or somthing, and that shows a nice little search query that lists lots of controlable camera's... Not to sure about your point#1

EDIT

Not the article i was tinking of, but looks just as gd...

http://www.hellboundhackers.org/articles/835-Camera-Hacking-with-Google.html


Thanks Yours31f!
img114.imageshack.us/img114/1497/keiran420cy2.jpg
Make poverty history... Cheaper drugs now! - Frank gallagher
[small][center]Einstein climbs to the top of Mt. Sinai to get close enough to talk to God.
Looking up, he asks the Lord...
"God, what does a million years mean to you?"
The Lord replies, "A minute."
"Einstein asks, "And what does a million pounds mean to you?"
The Lord replies, "A penny."
Einste

Edited by K3174N 420 on 10-01-09 12:35
http://keiran420.ueuo.com/