How to Bulk Discover Internet "open" cameras in python

Now there are more and more cameras to use both at home and in the company, but what about security? Today I'll talk about several more commonly used cameras, and how to bulk check for weak passwords using Python.

The first "Hoi Kang Wei Vision":

Some time ago, the camera with the view of the Sea Conway has the problem of default weak password, then collect the information first.

About Get IP: can shodan,zoomeye such as to search or call API bulk acquisition, keyword "Hikvision-webs", about other keywords can be self-mining ... You can also perform port scans using NMAP or S-scanners

By Shodan I found that most devices have developed ports within 80 81 8080 82, so you can scan these ports using the Port scan Tool

Next we will log in and get the login information for the following python. I opened the one casually. Try weak password admin/12345

With code discovery, Psia/system/deviceinfo can obtain information about the device.

Need to be verified, the account password is the same as before

Then we'll use this page to write Python.

Code implementation:

Basically, use requests to access the/psia/system/deviceinfo page and use RE to get information.

The next step is to implement a simple multithreading:

Of course, if someone changes the password, you can also write a weak password list to scan:

After a lot of nonsense, about the Conway view on this. Then look at the next.

A second "Hanbang":

It's the same. There is a default weak password problem: admin/888888 (How do I know?) You open a certain degree search Hanbang default password, I believe you can.)

As before we look for IP, use Shodan to search for NVR Webserver

Well, you can try sweeping these ports ...

Open one, try the default weak password admin/888888

The dust simply came in ... Then look at the code: Find the address that gets the device information is almost/isapi/system/deviceinfo, and do not verify

Code:

The first one can be the same as before

Direct access to ... But what if someone changes the password?

The second Kind

Next is multithreading (in fact, almost the same as before ...) Put it in the line = =):

Just dozens of lines of simple code is done, this for novice friends, simple rough, easy to read. Improvements to the code ... You can modify it yourself ...

For other brands of the camera, you can explore on their own. Basically all the same.

How to Bulk Discover Internet "open" cameras in Python