{"id":13473679,"url":"https://github.com/jimywork/shodanwave","last_synced_at":"2025-10-14T10:42:00.277Z","repository":{"id":50676869,"uuid":"95827748","full_name":"jimywork/shodanwave","owner":"jimywork","description":"Shodanwave is a tool for exploring and obtaining information from Netwave IP Camera. ","archived":false,"fork":false,"pushed_at":"2020-11-15T09:47:59.000Z","size":58,"stargazers_count":256,"open_issues_count":3,"forks_count":74,"subscribers_count":32,"default_branch":"master","last_synced_at":"2025-09-13T14:36:54.119Z","etag":null,"topics":["camera","exploit","ipcamera","netwave-ip-cameras","python","shodan","shodan-api","vulnerability-scanners"],"latest_commit_sha":null,"homepage":"https://twitter.com/6IX7ine","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jimywork.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-06-29T23:11:28.000Z","updated_at":"2025-08-26T19:55:03.000Z","dependencies_parsed_at":"2022-09-17T08:31:07.497Z","dependency_job_id":null,"html_url":"https://github.com/jimywork/shodanwave","commit_stats":null,"previous_names":["hackatnow/shodanwave"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/jimywork/shodanwave","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jimywork%2Fshodanwave","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jimywork%2Fshodanwave/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jimywork%2Fshodanwave/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jimywork%2Fshodanwave/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jimywork","download_url":"https://codeload.github.com/jimywork/shodanwave/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jimywork%2Fshodanwave/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279018785,"owners_count":26086452,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-14T02:00:06.444Z","response_time":60,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["camera","exploit","ipcamera","netwave-ip-cameras","python","shodan","shodan-api","vulnerability-scanners"],"created_at":"2024-07-31T16:01:05.925Z","updated_at":"2025-10-14T10:42:00.244Z","avatar_url":"https://github.com/jimywork.png","language":"Python","funding_links":[],"categories":["Uncategorized","Python (1887)","Python","Exploit Automation Tools"],"sub_categories":["Uncategorized"],"readme":"# Shodanwave \n\nShodanwave is a tool for exploring and obtaining information from cameras specifically Netwave IP Camera. The tool uses a search engine called shodan that makes it easy to search for cameras online.\n\nWhat does the tool to? Look, a list!\n\n * Search \n * Brute force\n * SSID and WPAPSK Password Disclosure\n * E-mail, FTP, DNS, MSN Password Disclosure \n * Exploit\n \nThis is an example of shodan wave running, the password was not found through raw force so the tool tries to leak the camera's memory. If the tool finds the password it does not try to leak the memory.\n\n[![asciicast](https://asciinema.org/a/G7gVOiReMiv43V8wlMbB4mm9B.png)](https://asciinema.org/a/G7gVOiReMiv43V8wlMbB4mm9B?autoplay=1)\n\n### How to use?\nTo use shodanwave you need an api key which you can get for free at https://www.shodan.io/, then you need to follow the next steps.\n\n### Installation\n\n```\n$ cd /opt/\n$ git clone https://github.com/fbctf/shodanwave.git\n$ cd shodanwave\n$ pip install -r requirements.txt\n```\n### Usage\n```\nUsage: python shodanwave.py -u usernames.txt -w passwords.txt  -k Shodan API key --t OUTPUT\n       python shodanwave.py --help \n         __              __                                   \n   _____/ /_  ____  ____/ /___ _____ _      ______ __   _____ \n  / ___/ __ \\/ __ \\/ __  / __ `/ __ \\ | /| / / __ `/ | / / _ \\\n (__  ) / / / /_/ / /_/ / /_/ / / / / |/ |/ / /_/ /| |/ /  __/\n/____/_/ /_/\\____/\\__,_/\\__,_/_/ /_/|__/|__/\\__,_/ |___/\\___/ \n                                                              \n\nThis tool is successfully connected to shodan service\nInformation the use of this tool is illegal, not bad.\n\nusage: shodanwave.py [-h] [-s SEARCH] [-u USERNAME] [-w PASSWORD] [-k ADDRESS]\n\noptional arguments:\n  -h, --help            show this help message and exit\n  -s SEARCH, --search SEARCH\n                        Default Netwave IP Camera\n  -u USERNAME, --username USERNAME\n                        Select your usernames wordlist\n  -w PASSWORD, --wordlist PASSWORD\n                        Select your passwords wordlist\n  -k ADDRESS, --shodan ADDRESS\n                        Shodan API key\n  -l LIMIT, --limit LIMIT\n                        Limit the number of registers responsed by Shodan\n  -o OFFSET, --offset OFFSET\n                        Shodan skips this number of registers from response\n  -t OUTPUT, --output OUTPUT\n                        Save the results\n  -p, --tor\n\t\t        All Requests/Wgets go through Tor \n\t                \n\n```\n### Attention\nUse this tool wisely and not for evil. To get the best performece of this tool you need to pay for shodan to get full API access\nOptions --limit and --offset may need a paying API key and consume query credits from your Shodan account.\n\n### Disclaimer\nCode samples are provided for educational purposes. Adequate defenses can only be built by researching attack techniques available to malicious actors. Using this code against target systems without prior permission is illegal in most jurisdictions. The authors are not liable for any damages from misuse of this information or code.\n\n### Required if using Proxy!!!\nModify your Tsocks config!!\n* Add/Modify the following at the bottom:\n* server = \u003cYour Tor Port\u003e \n* server_type = \u003c4 or 5\u003e \n* server_port = \u003cYour Tor Port\u003e\n* default_pass = \u003cyour Pass\u003e (Might be required for proxy)\n\n## Donations\n* XMR: `49m12JEEC6HPCHkLMX5QL4SrDQdKwh6eb4Muu8Z9CwA9MwemhzFQ3VcgHwyuR73rC22WCymTUyep7DVrfN3GPt5JBCekPrR `\n### References:\n\n * [Shodan API](https://www.shodan.io/)  search engine for Internet-connected devices.\n * [Requests](http://docs.python-requests.org/en/master/) Requests: HTTP for Humans\n * [Netwave Exploit](https://www.exploit-db.com/exploits/41236/) Netwave IP Camera - Password Disclosure\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjimywork%2Fshodanwave","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjimywork%2Fshodanwave","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjimywork%2Fshodanwave/lists"}