漏洞描述
Searches for exposed webcams by querying the /mobile.html endpoint and the existence of webcamXP in the body.
id: xp-webcam
info:
name: XP Webcam Viewer Page
author: aashiq
severity: medium
description: Searches for exposed webcams by querying the /mobile.html endpoint and the existence of webcamXP in the body.
metadata:
max-request: 1
tags: webcam,iot,discovery
http:
- method: GET
path:
- "{{BaseURL}}/mobile.html"
matchers-condition: and
matchers:
- type: word
words:
- "webcams and ip cameras server for windows"
part: body
- type: word
words:
- "Please provide a valid username/password to access this server."
part: body
negative: true
# digest: 4b0a00483046022100b63060ffa0f72a027512463922c81602b296a08227bab9496f9bcfe732fb30a4022100976adfe50b8c31e4c3af3890ef22acc4e7ea7e917e0c0c1238ec729313ebbf55:922c64590222798bb761d5b6d8e72950