search

Ullaakut / cameradar

Cameradar hacks its way into RTSP videosurveillance cameras
MIT License
4.05k stars 513 forks source link

Option to use both credentials and a channel path together in one login attempt? #306

Closed Keynan0 closed 2 years ago

Keynan0 commented 2 years ago

I have a question about the dictionary attacks. To me it appears as if the streaming channel gets checked without any credentials and the credentials get checked without any channels as you can see below. Is there a way for me to change this so it will be possible to try to login using both credentials and a channel at the same time? I would like to do this because the camera I want to attack has both a channel and credentials. Thanks in advance.

Perform failed for "rtsp://:@192.168.0.182:554//0x8b6c42" (auth 3): curl: RTSP CSeq mismatch or invalid CSeq Perform failed for "rtsp://:@192.168.0.182:554/" (auth 3): curl: RTSP CSeq mismatch or invalid CSeq Perform failed for "rtsp://:@192.168.0.182:554//live/ch01_0" (auth 3): curl: RTSP CSeq mismatch or invalid CSeq

(I have picked a few out but all of them are the same. These are all without any credentials)

Perform failed for "rtsp://:Administrator@192.168.0.182:554//" (auth 3): curl: RTSP CSeq mismatch or invalid CSeq Perform failed for "rtsp://:aiphone@192.168.0.182:554//" (auth 3): curl: RTSP CSeq mismatch or invalid CSeq Perform failed for "rtsp://:camera@192.168.0.182:554//" (auth 3): curl: RTSP CSeq mismatch or invalid CSeq

(As you can see the channels are missing here)

Ullaakut commented 2 years ago

Hi @Keynan0,

Cameradar checks for:

Are you sure you checked all of the logs?

Keynan0 commented 2 years ago

cameradar.txt This is the output I got. The stream I would like to get checked is: "rtsp://admin1:111111@192.168.0.182:554/1/stream1" which is not included

Ullaakut commented 2 years ago

Ah I didn't see that you had the curl: RTSP CSeq mismatch or invalid CSeq error. This is why it's not working. See the following issues that deal with the same problem:

Most likely the error is that you are: