https://github.com/zveriu/cctv-ddns-shodan-censys

List of Shodan/Censys queries and DDNS services locating/hosting camera/IPcam/CCTV/DVR/NVR/VSS systems.
https://github.com/zveriu/cctv-ddns-shodan-censys

Last synced: about 2 months ago
JSON representation

List of Shodan/Censys queries and DDNS services locating/hosting camera/IPcam/CCTV/DVR/NVR/VSS systems.

• Host: GitHub
• URL: https://github.com/zveriu/cctv-ddns-shodan-censys
• Owner: zveriu
• License: gpl-3.0
• Created: 2016-09-29T08:01:56.000Z (almost 8 years ago)
• Default Branch: master
• Last Pushed: 2016-09-29T08:25:42.000Z (almost 8 years ago)
• Last Synced: 2024-04-22T01:22:12.718Z (5 months ago)
• Size: 18.6 KB
• Stars: 36
• Watchers: 2
• Forks: 3
• Open Issues: 0
• Metadata Files:
  • Readme: README
  • License: LICENSE

Awesome Lists containing this project

• awesome-starred - zveriu/cctv-ddns-shodan-censys - List of Shodan/Censys queries and DDNS services locating/hosting camera/IPcam/CCTV/DVR/NVR/VSS systems. (others)

README

        
*** Intro ***

Compiled by Andrei Costin ( andrei [at] firmware [dor] re )

Shodan queries for finding camera/IPcam/CCTV/DVR/NVR/VSS systems

http://firmware.re/vulns

https://github.com/zveriu/cctv-ddns-shodan-censys

My latest estimates are 1M+ systems/IP being returned by these queries. 

The systems found using these queries are most likely used in projects like:

http://insecam.org/

http://www.forbes.com/sites/thomasbrewster/2016/09/25/brian-krebs-overwatch-ovh-smashed-by-largest-ddos-attacks-ever/#71fa21af6fb6

*** License/Credits ***

You are free to use this data in whatever way you want.

I would greatly appreciate if you do cite the following works when using 

this data or results obtained using this data (in part or in whole):

@inproceedings{costin2016security,

  title={Security of CCTV and Video Surveillance Systems: Threats, Vulnerabilities, Attacks, and Mitigations},

  author={Costin, Andrei},

  booktitle={TrustED'16: International Workshop on Trustworthy Embedded Devices Proceedings},

  year={2016}

}

@inproceedings{costin2014large,

  title={A Large Scale Analysis of the Security of Embedded Firmwares},

  author={Costin, Andrei and Zaddach, Jonas and Francillon, Aur{\'e}lien and Balzarotti, Davide and Antipolis, Sophia},

  booktitle={USENIX Security Symposium},

  year={2014},

  organization={USENIX}

}

@article{con-poc2013,

  year={2013},

  author={Costin, Andrei},

  title={{Poor Man's Panopticon -- Mass CCTV Surveillance for the Masses}},

  booktitle={{PowerOfCommunity}}

  howpublished="\url{http://www.powerofcommunity.net/poc2013/slide/andrei.pdf‎}"

}

*** Description ***

cctv_online_shodan.txt

    List of queries to be used with Shodan to locate online 

    camera/IPcam/CCTV/DVR/NVR/VSS systems.

    My latest estimates are 1M+ systems/IP being returned by these queries. 

    Preferably to be used via API, e.g.,:

    https://github.com/achillean/shodan-python

    

cctv_online_censys.txt

    List of queries to be used with Censys to locate online 

    camera/IPcam/CCTV/DVR/NVR/VSS systems.

cctv_ddns_docs.txt

    List of PDF guides documenting the use and configuration of DDNS for 

    CCTV systems.

cctv_ddns_services.txt

    List of DDNS services that are intended/advertised particularly for 

    CCTV systems. NOTE: this does not prevent these DDNS to host systems/pages 

    that are totally unrelated to CCTV.

    This list ideally would be used as input for TLDR (TLD records) project:

    https://github.com/mandatoryprogrammer/TLDR

generic_ddns_services.txt

    List of DDNS services that are generic, and can host CCTV systems as well.

    This list ideally would be used as input for TLDR (TLD records) project:

    https://github.com/mandatoryprogrammer/TLDR

*** Notes ***

Patches and more data or insights are more than welcome :)!

Author is disclaimed for any use, abuse, misuse, whatever-use of the data 

herein.