{"id":20706743,"url":"https://github.com/TasosY2K/camera-exploit-tool","last_synced_at":"2025-05-10T20:30:57.465Z","repository":{"id":64847696,"uuid":"578802860","full_name":"TasosY2K/camera-exploit-tool","owner":"TasosY2K","description":"Automated exploit scanner for cameras on the internet","archived":false,"fork":false,"pushed_at":"2024-03-19T18:47:57.000Z","size":3341,"stargazers_count":169,"open_issues_count":2,"forks_count":34,"subscribers_count":7,"default_branch":"main","last_synced_at":"2024-11-17T01:28:50.275Z","etag":null,"topics":["camera","camera-exploitation","camera-hacking","exploit","iot","scanner","shodan","vulnerability"],"latest_commit_sha":null,"homepage":"https://blog.tmeletlidis.tech/ilovecameras/","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/TasosY2K.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-12-15T23:14:31.000Z","updated_at":"2024-11-11T05:24:09.000Z","dependencies_parsed_at":"2024-03-19T19:59:38.937Z","dependency_job_id":null,"html_url":"https://github.com/TasosY2K/camera-exploit-tool","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TasosY2K%2Fcamera-exploit-tool","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TasosY2K%2Fcamera-exploit-tool/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TasosY2K%2Fcamera-exploit-tool/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TasosY2K%2Fcamera-exploit-tool/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/TasosY2K","download_url":"https://codeload.github.com/TasosY2K/camera-exploit-tool/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253480284,"owners_count":21915245,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["camera","camera-exploitation","camera-hacking","exploit","iot","scanner","shodan","vulnerability"],"created_at":"2024-11-17T01:23:53.472Z","updated_at":"2025-05-10T20:30:55.053Z","avatar_url":"https://github.com/TasosY2K.png","language":"Python","funding_links":[],"categories":["Exploit Automation Tools"],"sub_categories":[],"readme":"## Internet Camera Exploitation Tool\n\nThis is a tool meant to assist cyber security researchers on discovering outdated and vulnerable camera systems on the internet by utilizing shodan.io\n\nI was able to discover thousands of vulnerable cameras using it\n\n![](/screenshots/Screenshot_20221216_015844.png)\n\n![](/screenshots/Screenshot_20221216_021346.png)\n\n![](/screenshots/Screenshot_20221216_023903.png)\n\n## Vendors Affected\n\n[+] Hikvision\n\n[+] Avtech\n\n[+] TVT\n\n[+] Cacti\n\nmore to come...\n\n## Features\n\n- Fetching of hosts from shodan.io\n- Check for vulnerable cameras\n- Automatically run commands on exploited devices (Only Hikvision for now)\n- Automatically grab camera credentials (Only for Avtech)\n- Multi-threading for faster scanning\n- Usage of Socks5 proxies for anonymity\n- Storing results in Sqlite3 database\n- Logging all actions in log files \n\n## Prerequisites\n\nTo use this tool you need to have the following:\n- Shodan API key (Membership required for more than 1 page)\n- Socks5 authenticated proxies\n\n## Installation\n\n```\ngit clone https://github.com/TasosY2K/camera-exploit-tool\npip install -r requirements.txt\npython3 scanner.py --help\n```\n\n## Usage\n\n##### Collect hosts in database\n\n```\n# Collect Hikvision hosts\npython3 scanner.py --shodan --api-token \u003cshodan_token\u003e --query 'product:\"Hikvision IP Camera\"' --pages 1\n\n# Collect Avtech hosts\npython3 scanner.py --shodan --api-token \u003cshodan_token\u003e --query 'linux upnp avtech' --pages 1\n\n# Collect TVT hosts\npython3 scanner.py --shodan --api-token \u003cshodan_token\u003e --query 'product:\"Cross Web Server\"' --pages 1\n\n# Collect Cacti hosts\npython3 scanner.py --shodan --api-token \u003cshodan_token\u003e --query 'Login to Cacti' --pages 1\n```\n\n##### Check hosts for exploit\n\n```\npython3 scanner.py --check --proxy-file proxies.txt --threads 20\n```\n\n##### Automatically run command on exploited hosts\n\n```\npython3 scanner.py --autopwn --proxy-file proxies.txt --payload \"id\"\n```\n\n## About this tool\n\nThis tool is purely educational and is inteded to make the internet more secure\n\n**I will not be responsible for any direct or indirect damage caused due to the usage of this tool, it is for educational purposes only.**\n\nAny PR's or suggestions on improving this project are welcome\n\n## Exploits Used\n[https://www.exploit-db.com/exploits/40500](https://www.exploit-db.com/exploits/40500)\n\n2021-36260 [https://www.exploit-db.com/exploits/50441](https://www.exploit-db.com/exploits/50441)\n\n[https://github.com/k1p0d/h264_dvr_rce](https://github.com/k1p0d/h264_dvr_rce)\n\nCVE-2022-46169 [https://github.com/sAsPeCt488/CVE-2022-46169](https://github.com/sAsPeCt488/CVE-2022-46169)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FTasosY2K%2Fcamera-exploit-tool","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FTasosY2K%2Fcamera-exploit-tool","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FTasosY2K%2Fcamera-exploit-tool/lists"}