Hack My CCTV

Think the ability to SEE, HEAR and CONTROL this...

cctv-from-bbc.jpg
...is cool? If so, read on!

CCTV, it's bloody everywhere. The majority of companies have some kind of CCTV installed as it allows them to keep an eye on their physical security. However, when it also allows us to keep an eye on their physical security over the internet too then it becomes slightly worrying.

I'm not talking about webcams, I'm talking about IP cameras such as the likes of Axis, etc. which allow you to plug straight into an ethernet/wireless network and has a fully functional interface capable of running itself without the need for a computer. These IP cameras have come down in price over the years and there are numerous advantages of plugging your internal CCTV system into your computer network. However, there are also some disadvantages.

Many of these cameras are accessible over the internet. Whoever setup and installed these cameras obviously didn't think of the fact that just because the location (or URL) isn't advertised on the net that it will not be found. Google will pick up absolutely anything and amazes me even more each day when it mirrors something I did a few hours ago. By using google you are able to find these cameras and even control them (zoom in/out, pan about, etc), some even allow you to hear sound - madness!

This poses an obvious security risk if you hadn't already realised not to mention lack of privacy. Do the employee's on the camera actually realise they are now part of some internet broadcast? They pick their nose in the office and now John Smith in New York and also Joe Bloggs in London (and whoever else) now knows they did.

This is a prime exactly of when security goes wrong and common sense isn't really being applied. The device you installed to increase your security turns out to do the opposite.

Next time you see a CCTV camera pan to your location have a think to yourself... did the security guard just do that or 11 year old Joe Bloggs from England? ;o)

Even when you're at the BBC. ;o)

http://cam0.mh.bbc.co.uk/indexFrame.html
http://cam1.mh.bbc.co.uk/indexFrame.html
http://opscam.mh.bbc.co.uk/axis-cgi/mjpg/video.cgi?resolution=704x480
http://cam.thdo.bbc.co.uk/
http://cam1.thdo.bbc.co.uk/
http://cam.thny.bbc.co.uk/

This traffic management system looks like fun: http://193.226.118.238/

Wonder what casino security actually do? Watch them pan about and zoom in on some weird weird things: http://24.234.255.102/view/indexFrame.shtml

This one is quite fun for moving about, etc: http://webcam.salisbury.edu/view/indexFrame.shtml

This data centre obviously forgot the fact that people can read private documents, monitors, etc (pan right): http://216.59.197.9/indexFrame.shtml?newstyle=One&cam=1 - don't turn right too much... I think they put it up against the wall even though it turns 360 degrees. There's gonna be a few dents in that wall! Also, zoom in on the monitors or check the pre-sets out... some lovely private information being disclosed there, ack!

Go visit http://cam1.east-ayrshire.gov.uk/view/index.shtml and put it full screen and find yourself some chavs... sound too.

Use some of the URLs below to find some interesting stuff:

http://www.google.com/search?q=intitle%3Aliveapplet+inurl%3ALvAppl
http://www.google.com/search?q=intitle:%22EvoCam%22+inurl:%22webcam.html%22&hl=en&lr=&c2coff=1&start=0&sa=Nurl
http://www.google.com/search?q=intitle:%22Live+NetSnap+Cam-Server+feed%22
http://www.google.com/search?q=intitle%3A%22Live+View+%2F+-+AXIS%22&btnG=Google+Search
http://www.google.com/search?q=intitle%3A%22Live+View+%2F+-+AXIS%20206M%22&btnG=Google+Search
http://www.google.com/search?q=intitle%3A%22Live+View+%2F+-+AXIS%20206W%22&btnG=Google+Search
http://www.google.com/search?q=intitle%3A%22Live+View+%2F+-+AXIS%20210%22&btnG=Google+Search
http://www.google.com/search?hl=en&ie=UTF-8&q=inurl%3AindexFrame.shtml+Axis&btnG=Google+Search
http://www.google.com/search?hl=en&ie=UTF-8&q=inurl%3A%22ViewerFrame%3FMode%3D%22&btnG=Google+Search
http://www.google.com/search?hl=en&ie=UTF-8&q=inurl%3A%22MultiCameraFrame%3FMode%3DMotion%22&btnG=Google+Search
http://www.google.com/search?hl=en&ie=UTF-8&q=intitle%3Astart%20inurl:cgistart&btnG=Google+Search
http://www.google.com/search?num=100&hl=en&lr=&ie=UTF-8&safe=off&q=intitle%3A%22WJ-NT104+Main+Page%22&btnG=Search
http://www.google.com/search?hl=en&ie=UTF-8&q=intext%3A%22MOBOTIX+M1%22+intext%3A%22Open+Menu%22&btn
http://www.google.com/search?hl=en&ie=UTF-8&q=intext%3A%22MOBOTIX+M10%22+intext%3A%22Open+Menu%22&btn
http://www.google.com/search?hl=en&ie=UTF-8&q=intext%3A%22MOBOTIX+D10%22+intext%3A%22Open+Menu%22&btn
http://www.google.com/search?hl=en&ie=UTF-8&q=intitle%3Asnc-z20+inurl%3Ahome%2F+&btnG=Google+Search
http://www.google.com/search?hl=en&ie=UTF-8&q=intitle%3Asnc-cs3+inurl%3Ahome%2F+&btnG=Google+Search
http://www.google.com/search?num=100&hl=en&lr=&ie=UTF-8&safe=off&q=intitle%3Asnc-rz30+inurl%3Ahome%2F+&btnG=Search
http://www.google.com/search?num=100&hl=en&lr=&ie=UTF-8&safe=off&q=intitle%3A%22sony%20network%20camera%20snc-p1%22+&btnG=Search
http://www.google.com/search?num=100&hl=en&lr=&ie=UTF-8&safe=off&q=intitle%3A%22sony%20network%20camera%20snc-m1%22+&btnG=Search
http://www.google.com/search?num=100&hl=en&lr=&safe=off&q=site%3A.viewnetcam.com+-www.viewnetcam.com
http://www.google.com/search?num=100&hl=en&lr=&ie=UTF-8&safe=off&q=intitle%3a%22Toshiba+Network+Camera%22+user+login+&btnG=Google+Search
http://www.google.com/search?num=100&hl=en&lr=&ie=UTF-8&safe=off&q=intitle%3a%22netcam%20live%20image%22&btnG=Google+Search
http://www.google.com/search?num=100&hl=en&lr=&ie=UTF-8&safe=off&q=intitle%3a%22i-Catcher%20Console%20-%20Web%20Monitor%22&btnG=Google+Search


Now with Google Earth and this, it makes the Enemy of the State film very very real indeed.

Other Posts

Introducing Ncrack, a Network Brute Forcer on Crack
"Ncrack is an open source tool for network authentication cracking. It was designed for high-speed parallel cracking using a dynamic…
Hash Me Up (Mac OS X Styleee)
On a good day you'll catch me on my MacBook Pro like any other Apple fanboy.  However, I was on…
Kneber Botnet - The End is Nigh! Not Quite!
Just a quick one this morning...  A botnet has been discovered that has apparently hijacked more than 75,000 boxes across…
Web 2.0 + People = New Challenges
This article originally appeared on Verizon Business' ThinkForward blog.  It is written by me with a different audience in mind…
Nmap 5.20 released
More than 150 significant improvements,30+ new Nmap Scripting Engine (NSE) scriptsEnhanced Performance and Reduced Memory ConsumptionProtocol-specific Payloads for more Effective…
BackTrack Final 4 released
BackTrack 4 (Final) is officially released. If you didn't already know, "BackTrack is a Linux-based penetration testing arsenal that aids…
Second GSM Cipher Fail - A5/3
The GSM encryption algorithm A5/1 has been known to be broken for some time now... about 10 years to be…
Attack on PHP sessions and random numbers
PHP random numbers and session IDs weaker than thought.  Proof of concept code and further information at http://samy.pl/phpwn/…
Friend or foe? Automated Malware Analysis and Identification
I am doing a PhD on the subject so it's only right I post something up related to it.  Whether…
Give us a flash! Introducing SWFScan, the Flash Security Scanner
The nice people at the Web Security Research Group over at HP have created a bit of goodness that will…