Jump to content

I Need Help Exploiting My TENVIS JPT3815W IP Camera


Computer_Security

Recommended Posts

Okay let me start off by saying that I am not doing anything malicious I am just trying to break into my ip camera that I bought and is on my network so hold back all of your comments of how this is illegal because IT IS NOT! okay now that that is out of the way let me say that my inspiration to take on this task was when I watched Craig Heffner at Black Hat https://www.youtube.com/watch?v=B8DjTcANBx0

I just don't understand how he gets into the camera's and can anyone help my try to exploit MY IP CAMERA which the antenna doesn't work on it so I have to use Ethernet :dry: and would not having the option of wifi limit me in any way? I'm 99% sure that this camera has security flaws because it is a cheap 40$ camera that I picked up on amazon and then I got a 15$ rebate so it was technically a 25$ camera and Heffner showed multi-thousand dollar cameras being exploited so...... yea! If any of you guys can help me that will be great since I am very interested in how Ip-Camera's can be exploited and yea for the final time this will be on my network!

-Thanks Guys

Link to comment
Share on other sites

High price doesn't equal high security. Actually, more often than not it means more security problems because the high price means lots of features and each feature is potentially a security risk.

I mean, you can buy an AP for like 20 bucks that will be next to impossible to break into yet every so often exploits are found for the Cisco's and Juniper's and Huawei's of today...

Link to comment
Share on other sites

Asking how to break into your camera is like asking how to fix a rattle on a car, without much more information it could be a pen rolling around in the glove box or something deep inside the engine. You could google for your camera's name and see if anything has already been published but if not you are looking at a vulnerability assessment to look for weaknesses.

Link to comment
Share on other sites

Guest spazi

I believe the common way to find exploits on embedded systems is to look at the firmware. Sometimes it's just luck.

Take it apart with binwalker and ida pro.

Understand how it works and check for common exploits like common passwords, cgi code execution etc.

The security on embedded systems can sometimes be horrible.

Link to comment
Share on other sites

High price doesn't equal high security. Actually, more often than not it means more security problems because the high price means lots of features and each feature is potentially a security risk.

I mean, you can buy an AP for like 20 bucks that will be next to impossible to break into yet every so often exploits are found for the Cisco's and Juniper's and Huawei's of today...

Yea i figured

Link to comment
Share on other sites

This link just gives me the default creds I already know the creds I just want to break into it another way like what spazi said

I believe the common way to find exploits on embedded systems is to look at the firmware. Sometimes it's just luck.

Take it apart with binwalker and ida pro.

Understand how it works and check for common exploits like common passwords, cgi code execution etc.

The security on embedded systems can sometimes be horrible.

I will check out binwlker and ida pro! thanks

and ill do a lot of googling! (DIGININJA)

Link to comment
Share on other sites

Guest spazi

If you are interested in hacking embedded devices you should look into Praeda by Deral Heiland.

I just stumbled over this tool, haven't really had the time to check it out properly, but it seems very cool :)

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...