+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: HOW TO HACK IP CAMS THROUGH RTSP BRUTE FORCING (/showthread.php?tid=6254790)
HOW TO HACK IP CAMS THROUGH RTSP BRUTE FORCING - voltkey - Oct 25, 2023
Hello guys, so basically in this thread I am gonna show you how break in to ip cams, brute forcing the rtsp protocol.
I`ve made a video about it on my youtube channel, but got removed from youtube like 2 h after uploaded it.
So I want to post here a tutorial on how to do it.
Lets start talking about what is RTSP.
RTSP is a protocol used really common on ip cams, to be able to connect them and watch the content, for example, you can use VLC and add a rtsp route from a ip cam, and watch the videos saved from it.
This protocol, most of the time, is used on the port 554, so we will brute force it to try to get the credentials.
This is most effective than do it on the web configuration page, because this one, most of the time, have a login attemps limitation, and the RTSP one not.
Also, the rtsp and web configuration login, uses same credentials, so, if the rtsp credentials are admin:admin on the login of the web configuration, will be the same admin:admin
RTSP routes
Very important thing here, to connect to the rtsp of a ip cam, you also have to specify the route of the login, for example, 127.8.6.3/steam1
So you have also to brute force the routues, so then you are able to use the credentials to login. But dont worry, this is really easy, with a tool that I am gonna show you, you gonna do it all automatically
INSTALLING RTSPBRUTE
First of all, lets start installing the tool, called rtspbrute from: https:// pypi. org/project/rtspbrute/
You have to run this command: pip install rtspbrute on your console
Also, these requirements:
Code
av
Pillow
Rich
After this, you have succesfully installed the tool.
Now, you have to get some ips to target, you can get them with shodan.
You have to use this dork, "rtsp" , and with this one, you gonna find all devices exposed with this banner.
So, knowing this, you are able to target specific countrys, like usa for example, with country:USA "rtsp"
Grab some ips, and convert them to a ip range, like 82.43.0.0-82.43.24, make a file and paste them on it.
And you are done, you only have to edit the credentials file, if you want to specify customs credentials, if not, you can leave them as default.
Now, you have to run the folowing command: rtspbrute -p 554 ips.txt
And BOOM, you are starting hacking the ip cams, when the tool hacks one, it gonna save a snapchot on a folder.
Remember to leave a like if you liked the thread!RE: HOW TO HACK IP CAMS THROUGH RTSP BRUTE FORCING - LeetSpeed - Oct 25, 2023
Thanks for this guide!
RE: HOW TO HACK IP CAMS THROUGH RTSP BRUTE FORCING - B3A - Oct 26, 2023
Interesting guide, looking up to it now.
RE: HOW TO HACK IP CAMS THROUGH RTSP BRUTE FORCING - black_knight_9494 - Mar 8, 2025
does ip camera restrict when many wrong creds from that tool, and can i use my wordlist instead default?
RE: HOW TO HACK IP CAMS THROUGH RTSP BRUTE FORCING - jerr - Mar 17, 2025
(Mar 8, 2025 07:25 PM)black_knight_9494 Wrote: does ip camera restrict when many wrong creds from that tool, and can i use my wordlist instead default?
In most cases no on some of the cheap Chinese models, as far as I have found the webportal its either 3-5 or none, but on RTSP there is hardly a lockout if its even secured