xp-webcam: XP Webcam Viewer Page

日期: 2025-08-01 | 影响软件: xp webcam | POC: 已公开

漏洞描述

Searches for exposed webcams by querying the /mobile.html endpoint and the existence of webcamXP in the body.

PoC代码[已公开]

id: xp-webcam

info:
  name: XP Webcam Viewer Page
  author: aashiq
  severity: medium
  description: Searches for exposed webcams by querying the /mobile.html endpoint and the existence of webcamXP in the body.
  metadata:
    max-request: 1
  tags: webcam,iot,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/mobile.html"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "webcams and ip cameras server for windows"
        part: body

      - type: word
        words:
          - "Please provide a valid username/password to access this server."
        part: body
        negative: true
# digest: 4b0a00483046022100b63060ffa0f72a027512463922c81602b296a08227bab9496f9bcfe732fb30a4022100976adfe50b8c31e4c3af3890ef22acc4e7ea7e917e0c0c1238ec729313ebbf55:922c64590222798bb761d5b6d8e72950