xp-webcam: XP Webcam Viewer Page

2025-08-01 xp webcam PoC Public

Description

Searches for exposed webcams by querying the /mobile.html endpoint and the existence of webcamXP in the body.

PoC

id: xp-webcam

info:
  name: XP Webcam Viewer Page
  author: aashiq
  severity: medium
  description: Searches for exposed webcams by querying the /mobile.html endpoint and the existence of webcamXP in the body.
  metadata:
    max-request: 1
  tags: webcam,iot,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/mobile.html"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "webcams and ip cameras server for windows"
        part: body

      - type: word
        words:
          - "Please provide a valid username/password to access this server."
        part: body
        negative: true
# digest: 4b0a00483046022100b63060ffa0f72a027512463922c81602b296a08227bab9496f9bcfe732fb30a4022100976adfe50b8c31e4c3af3890ef22acc4e7ea7e917e0c0c1238ec729313ebbf55:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/iot/xp-webcam.yaml

References

Related Vulnerabilities