mirror of
https://github.com/zveriu/cctv-ddns-shodan-censys
synced 2024-11-10 05:54:14 +00:00
87 lines
2.8 KiB
Text
87 lines
2.8 KiB
Text
|
*** Intro ***
|
|||
|
|
|
|||
|
|
Compiled by Andrei Costin ( andrei [at] firmware [dor] re )
|
|||
|
|
Shodan queries for finding camera/IPcam/CCTV/DVR/NVR/VSS systems
|
|||
|
|
http://firmware.re/vulns
|
|||
|
|
https://github.com/zveriu/cctv-ddns-shodan-censys
|
|||
|
|
|
|||
|
|
My latest estimates are 1M+ systems/IP being returned by these queries.
|
|||
|
|
|
|||
|
|
The systems found using these queries are most likely used in projects like:
|
|||
|
|
http://insecam.org/
|
|||
|
|
http://www.forbes.com/sites/thomasbrewster/2016/09/25/brian-krebs-overwatch-ovh-smashed-by-largest-ddos-attacks-ever/#71fa21af6fb6
|
|||
|
|
|
|||
|
|
|
|||
|
|
*** License/Credits ***
|
|||
|
|
|
|||
|
|
You are free to use this data in whatever way you want.
|
|||
|
|
I would greatly appreciate if you do cite the following works when using
|
|||
|
|
this data or results obtained using this data (in part or in whole):
|
|||
|
|
|
|||
|
|
@inproceedings{costin2016security,
|
|||
|
|
title={Security of CCTV and Video Surveillance Systems: Threats, Vulnerabilities, Attacks, and Mitigations},
|
|||
|
|
author={Costin, Andrei},
|
|||
|
|
booktitle={TrustED'16: International Workshop on Trustworthy Embedded Devices Proceedings},
|
|||
|
|
year={2016}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
@inproceedings{costin2014large,
|
|||
|
|
title={A Large Scale Analysis of the Security of Embedded Firmwares},
|
|||
|
|
author={Costin, Andrei and Zaddach, Jonas and Francillon, Aur{\'e}lien and Balzarotti, Davide and Antipolis, Sophia},
|
|||
|
|
booktitle={USENIX Security Symposium},
|
|||
|
|
year={2014},
|
|||
|
|
organization={USENIX}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
@article{con-poc2013,
|
|||
|
|
year={2013},
|
|||
|
|
author={Costin, Andrei},
|
|||
|
|
title={{Poor Man's Panopticon -- Mass CCTV Surveillance for the Masses}},
|
|||
|
|
booktitle={{PowerOfCommunity}}
|
|||
|
|
howpublished="\url{http://www.powerofcommunity.net/poc2013/slide/andrei.pdf}"
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
*** Description ***
|
|||
|
|
|
|||
|
|
cctv_online_shodan.txt
|
|||
|
|
List of queries to be used with Shodan to locate online
|
|||
|
|
camera/IPcam/CCTV/DVR/NVR/VSS systems.
|
|||
|
|
My latest estimates are 1M+ systems/IP being returned by these queries.
|
|||
|
|
Preferably to be used via API, e.g.,:
|
|||
|
|
https://github.com/achillean/shodan-python
|
|||
|
|
|
|||
|
|
cctv_online_censys.txt
|
|||
|
|
List of queries to be used with Censys to locate online
|
|||
|
|
camera/IPcam/CCTV/DVR/NVR/VSS systems.
|
|||
|
|
|
|||
|
|
|
|||
|
|
cctv_ddns_docs.txt
|
|||
|
|
List of PDF guides documenting the use and configuration of DDNS for
|
|||
|
|
CCTV systems.
|
|||
|
|
|
|||
|
|
|
|||
|
|
cctv_ddns_services.txt
|
|||
|
|
List of DDNS services that are intended/advertised particularly for
|
|||
|
|
CCTV systems. NOTE: this does not prevent these DDNS to host systems/pages
|
|||
|
|
that are totally unrelated to CCTV.
|
|||
|
|
|
|||
|
|
This list ideally would be used as input for TLDR (TLD records) project:
|
|||
|
|
https://github.com/mandatoryprogrammer/TLDR
|
|||
|
|
|
|||
|
|
|
|||
|
|
generic_ddns_services.txt
|
|||
|
|
List of DDNS services that are generic, and can host CCTV systems as well.
|
|||
|
|
|
|||
|
|
This list ideally would be used as input for TLDR (TLD records) project:
|
|||
|
|
https://github.com/mandatoryprogrammer/TLDR
|
|||
|
|
|
|||
|
|
|
|||
|
|
*** Notes ***
|
|||
|
|
Patches and more data or insights are more than welcome :)!
|
|||
|
|
|
|||
|
|
Author is disclaimed for any use, abuse, misuse, whatever-use of the data
|
|||
|
|
herein.
|
|||
|
|
|