Mirrors/cctv-ddns-shodan-censys
2
0
Fork 0
mirror of https://github.com/zveriu/cctv-ddns-shodan-censys synced 2024-12-03 16:49:14 +00:00
Code Issues Projects Releases Packages Wiki Activity
No description
2 commits 1 branch 0 tags 44 KiB
Text 100%
Find a file
zveriu fa760dd40b Initial commit. 
Initial commit.
Added Shodan queries, specific DDNS services and docs, generic DDNS services.
2016-09-29 10:25:41 +02:00
cctv_ddns_docs.txt Initial commit. 2016-09-29 10:25:41 +02:00
cctv_ddns_IP_to_hostname_example.txt Initial commit. 2016-09-29 10:25:41 +02:00
cctv_ddns_services.txt Initial commit. 2016-09-29 10:25:41 +02:00
cctv_online_censys.txt Initial commit. 2016-09-29 10:25:41 +02:00
cctv_online_shodan.txt Initial commit. 2016-09-29 10:25:41 +02:00
generic_ddns_services.txt Initial commit. 2016-09-29 10:25:41 +02:00
LICENSE Initial commit 2016-09-29 10:01:56 +02:00
README Initial commit. 2016-09-29 10:25:41 +02:00

README

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

*** Intro ***

Compiled by Andrei Costin ( andrei [at] firmware [dor] re )
Shodan queries for finding camera/IPcam/CCTV/DVR/NVR/VSS systems
http://firmware.re/vulns
https://github.com/zveriu/cctv-ddns-shodan-censys

My latest estimates are 1M+ systems/IP being returned by these queries. 

The systems found using these queries are most likely used in projects like:
http://insecam.org/
http://www.forbes.com/sites/thomasbrewster/2016/09/25/brian-krebs-overwatch-ovh-smashed-by-largest-ddos-attacks-ever/#71fa21af6fb6


*** License/Credits ***

You are free to use this data in whatever way you want.
I would greatly appreciate if you do cite the following works when using 
this data or results obtained using this data (in part or in whole):

@inproceedings{costin2016security,
  title={Security of CCTV and Video Surveillance Systems: Threats, Vulnerabilities, Attacks, and Mitigations},
  author={Costin, Andrei},
  booktitle={TrustED'16: International Workshop on Trustworthy Embedded Devices Proceedings},
  year={2016}
}

@inproceedings{costin2014large,
  title={A Large Scale Analysis of the Security of Embedded Firmwares},
  author={Costin, Andrei and Zaddach, Jonas and Francillon, Aur{\'e}lien and Balzarotti, Davide and Antipolis, Sophia},
  booktitle={USENIX Security Symposium},
  year={2014},
  organization={USENIX}
}

@article{con-poc2013,
  year={2013},
  author={Costin, Andrei},
  title={{Poor Man's Panopticon -- Mass CCTV Surveillance for the Masses}},
  booktitle={{PowerOfCommunity}}
  howpublished="\url{http://www.powerofcommunity.net/poc2013/slide/andrei.pdf‎}"
}



*** Description ***

cctv_online_shodan.txt
    List of queries to be used with Shodan to locate online 
    camera/IPcam/CCTV/DVR/NVR/VSS systems.
    My latest estimates are 1M+ systems/IP being returned by these queries. 
    Preferably to be used via API, e.g.,:
    https://github.com/achillean/shodan-python
    
cctv_online_censys.txt
    List of queries to be used with Censys to locate online 
    camera/IPcam/CCTV/DVR/NVR/VSS systems.


cctv_ddns_docs.txt
    List of PDF guides documenting the use and configuration of DDNS for 
    CCTV systems.


cctv_ddns_services.txt
    List of DDNS services that are intended/advertised particularly for 
    CCTV systems. NOTE: this does not prevent these DDNS to host systems/pages 
    that are totally unrelated to CCTV.

    This list ideally would be used as input for TLDR (TLD records) project:
    https://github.com/mandatoryprogrammer/TLDR


generic_ddns_services.txt
    List of DDNS services that are generic, and can host CCTV systems as well.

    This list ideally would be used as input for TLDR (TLD records) project:
    https://github.com/mandatoryprogrammer/TLDR


*** Notes ***
Patches and more data or insights are more than welcome :)!

Author is disclaimed for any use, abuse, misuse, whatever-use of the data 
herein.