+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: IoT, Embedded Systems, Electronics, Gadgets, and DIY (https://hackforums.net/forumdisplay.php?fid=193)
+---- Thread: Security Camera bug (/showthread.php?tid=6201030)
Security Camera bug - phodkiewicz - Apr 11, 2022
I own one of these cameras that is mention in this exploit https://www.welivesecurity.com/2020/06/15/warning-issued-hackable-security-cameras/
I thought it may be a good guinea pig.
Pretty new to this stuff, how would you guys go about attacking it?
RE: Security Camera bug - Beladonis - Apr 11, 2022
Here is a list of some ressources to read/watch about IoT hacking (including IP cams):
http://archive.hack.lu/2013/ipcams-research-falcon-riva.pdf
https://www.youtube.com/watch?v=Z_gKEF76oMM
https://github.com/nebgnahz/awesome-iot-hacks
https://github.com/fkie-cad/awesome-embedded-and-iot-security
RE: Security Camera bug - phodkiewicz - Apr 11, 2022
(Apr 11, 2022 05:55 PM)shatter Wrote: That defcon talk covers a lot. OP - you're honestly really fucking lazy. You did no research and expected someone to show how to poc a 0 day (since no active pocs are currently active).
mfw there's a github page of the exploit
https://github.com/pmarrapese/iot/tree/master/exploits/cve-2020-9529
Sorry I must have missed that. Maybe people should get over their fucking selves. The op's Lazy, they are also a fecking noob! I'd rather ask than fuck up! This is the problem with forums, too many knobbers that want to flex muscle rather than help. Aren't we all here to learn?
(Apr 11, 2022 05:26 PM)Beladonis Wrote: Here is a list of some ressources to read/watch about IoT hacking (including IP cams):
http://archive.hack.lu/2013/ipcams-research-falcon-riva.pdf
https://www.youtube.com/watch?v=Z_gKEF76oMM
https://github.com/nebgnahz/awesome-iot-hacks
https://github.com/fkie-cad/awesome-embedded-and-iot-security
Thanks Beladonis, much appreciated.
RE: Security Camera bug - phodkiewicz - Apr 11, 2022
(Apr 11, 2022 11:06 PM)shatter Wrote: Not about flexing anything, you could've asked with more context and shown more effort in what you wanted to learn and asked for direction in accordance to demonstrating interest.
Oh sorry, no hard feelings. Instead of being a dick from the outset, why not ask the poster a few questions instead of going into an outright attack on them? I've got interest, believe me, otherwise I wouldn't be asking. I just wanted to learn the correct process.
Opinions are like arseholes, everyones got one. Peace out dude/tte. 😗😗
RE: Security Camera bug - phodkiewicz - Apr 26, 2022
(Apr 24, 2022 10:06 PM)phantomman55 Wrote: I agree with [mention=4963606] you should spend more time researching and finding things yourself or at least make an attempt. Your original post speaks alot about wanting to be spoon fed. I read all comments and I can say for sure your original post shows you don't have interest to learn but interest to have someone do it for you for free. There's been resources provided to you. It's how you worded it. Next time tell us what you found and did before asking for direction. No one will spoon feed you. 🙄
You went and told me didn't you? 😭😭😭😭😆😆😆😆😆😆😆😆 So I found that the camera was vulnerable, I guess a ghost did that part? I just wanted to know what the next steps might consist of. Is it a case of trying a 1000 things and still getting it wrong, or do you reach out to the big wide world. Fucking cock jockeys everywhere man. Asking for help isn't a sign of spoonfeeding, I'd say that it is someone looking to learn. I was always taught to ask questions, that way you get more information on the subject that you are intersted in.
Anyway don't spend too long getting your knickers in a twist, life's too short.
RE: Security Camera bug - phodkiewicz - Apr 26, 2022
(Apr 26, 2022 09:34 AM)phantomman55 Wrote: You're a complete idiot. Yes, what you're doing is the definition of being spoon fed. Did you find the vulnerability? No, you read an article that an expert is alerting people that there's vulnerabilities to the camera. You read that and then came over here asking now how do you do this? He gave you the info that there's a security issue. Now, you are directly asking us exactly how to exploit the vulnerability. You did zero research about it and didn't make any attempts to try it yourself. You just came here for answers.
You need to google search the definition of being spood-fed.
OOOPS I made a huge mistake...sorry for asking you to actually lookup the definition of being spoon-fed I think that's too hard for you.
Here's the definition "provide (someone) with so much help or information that they do not need to think for themselves.
"certain students enjoy finding out things for themselves; others prefer being spoon-fed" "
spoon-fed simply means you don't want to bother doing actual work finding things out for yourself but instead want to get straight to the answer by demanding us to giving it out for free.
Getting help means you tried yourself and need to be pointed in the right direction not at all giving an answer. You would still have to find the answer yourself.
😆😆😆😆😆😆😆😆😆😆😆😆😆😆😆😆😆😆😆😆😆😆
So don't supply a walk thru. Point that said person in the right direction instead of being a the biggest dick on earth.
Come on, what have you actually achieved, apart from replying to a thread to a thread that had gone dormant for the last week or more to get your bullish 2 cents in?
I never said that I found the vulnerability, I was referring to the fact, that at least I'd done the research to even see if there was a vulnerability with the camera.
Jesus, when there are shits like you about, no wonder some people are frightened to post on forums.
RE: Security Camera bug - phodkiewicz - Apr 26, 2022
(Apr 26, 2022 11:28 AM)phantomman55 Wrote: I achieved more than you dumbass. You didn't do research. You read an article giving you that information that there's a vulnerability. You then came here for us to take your hand and pretty mush think for you. Why bother pointing someone in the right direction if they're coming here asking us to think for them. There's no point to a person that doesn't know how to think for themselves. The reason no one will help you on here is because it's a waste of time if you expect us to do it for you for free.
Researching isn't reading an article that says there's unrealities and then asking everyone on earth for answers. How do you do this. Then getting pissed off if no one will waste their time for free do the work for you for free. You said it yourself you don't want to figure out things on your own. You just want answers for free. 🤣😭 have fun in life with that attitude. 🙄
You actually made me spit my coffee out with that reply. 😆😆😆😆😆😆😆😆😆😆😆😆😆😆😆😆
I didn't say that I didn't want to figure shit out! Did you clean your teeth this morning, if you have, you haven't done a very good job at scraping that bull shit away from the back of your teeth, people can smell it a mile off.
RE: Security Camera bug - phodkiewicz - Apr 26, 2022
(Apr 26, 2022 12:19 PM)phantomman55 Wrote: You just confirmed that retardation exist and you're evidence of this. 😭🤣🤣😆
Have a nice day my friend. 🙂
(Apr 26, 2022 12:19 PM)phantomman55 Wrote: You just confirmed that retardation exist(s), and you're evidence of this. 😭🤣🤣😆
Thought I'd also correct your retarded spelling mistake as well. If you are going to call someone retarded, at least get the spelling correct in that said sentance.
RE: Security Camera bug - migalo57x - Aug 31, 2025
its possible