How To Hack IoT Cameras

Obvious disclaimer and as mentioned in the video: Do not do this on any device you don't own! That would be illegal and could have serious consequences.
This is a recording from a lecture I gave at a Sydney Based University. In this video I demonstrated the vulnerabilities of IoT devices and how they need the same protection as any other device we expose to the internet.
Obviously to fit within a 15-minute time frame, this process is expedited, and the scanning and information gather / enumeration phases would take much longer. As well as the exploit phase could rely on a CSRF attack as opposed to a brute-force. Regardless, the aim was to demonstrate the same vulnerabilities can still be present of devices we may not expect to have them.
Brought to you by INE (AKA eLearnSecurity) Check out their range of training materials for all things tech here get.ine.com/2h...
Links:
__________________________________________
Website: www.jsonsec.com
X: x.com/jsonsec
LinkedIn: / jasonford2
Github: www.github.com...
Buy me a ko-fi: ko-fi.com/jsonsec
About JSON SEC
___________________________________________
JSON SEC is a channel dedicated to helping you advance your cyber security career, whether you're on the Red Team or Blue Team side. Focusing on Training and Course reviews, exam prep guides, career guidance and advice as well as hacking tutorials.
Please consider subscribing if you enjoyed this video.

[@jasonliu8757]

Nice video! I'm in jail now~

[@JSONSEC]

Hack your way out!

[@adeifepraise7509]

😂😂😂😂

[@garrysingh8387]

😂

[@omkarbajiraopawar627]

Police are allowing smartphones in jail😂

[@rehaanshaikh8764]

😂😂

[@pauljamesharper]

Great demo. The other issue with these cheap IoT devices is that the version of Linux they are often running is out of date and unpatched or unpatchable.

[@thechettri447]

😂

[@psknhegem0n593]

Technically clear, nicely done, a touch of humor... Subscribed!

[@LouiesLog]

Well done with this, it's interesting. Also nicely done with the speech! Public speaking would terrify me

[@Basieeee]

Its a nice introduction to these tools, thanks dude.

[@prawnstarrr]

normally the admin web interface for these platforms are vulnerable to a multitude of web based attacks ie CSRF, directory traversal file inclusion etc

[@JSONSEC]

Yep! We were going to do a csrf attack to get into the web interface, but keeping it within the allocated time limit was challenging.

[@Securitybros]

Thanks! Very interesting. Many IP cameras will lock you out after a few failed attempt, making brute force not possible, correct?

[@JSONSEC]

Entirely depends on the camera. Generally speaking, basic auth lacks brute force protection.. However, if it was blocked, look for other vulnerabilities, like CSRF vuln on this camera Thanks for your question 🙂

[@maakthon5551]

I think you can spoof your IP and User-agent to avoid it !

[@shawnmendrek3544]

LOL. IP cams are vulernable. Trust me, a backdoor takes 5 seconds to install. Anyone in your home can install one EASILY on your phones or IP cams. A simple small harmless device can look like a normal device can pull all kinds of data...

[@shawnmendrek3544]

@@JSONSEC 100% agree, just because you cannot brute force(LOL old tech) there is always new vulnerabilities via new updates or tech aka loopholes. But the best way to hack someone is to gain access to their business/home.

[@PhantomGlow077]

Can you teach me ?​@@shawnmendrek3544

[@sanjupoi6723]

Thank you so much!!! It did work and took less than 5 minutes!

[@spider19728]

Rocku database?

[@Little-bird-told-me]

very good video. Linux is everywhere. IOT device are most vulnerable nobody bothers to make them secure. I was surprised he couldn't login in with just admin/password

[@ashleygrady9474]

Hi, would you be able to help me find out who is hacking into my blink camera system?

[@peterjamesmontes3249]

THANK YOU SO MUCH I REALLY NEEDED THIS IT WORKED

[@VipX1Development]

Once a hacker has physical access to a network all bets are off, meaning you can't stop the hacker. CCTV cameras are both inside & outside a premises therefore placing the network outside the premises & giving easy access to said hacker for a man in the middle attack.

[@EmmanuelNyakoe]

great hope one day ill be recognised here in kenya

[@everargo6618]

You can do it

[@voulyful]

In order to make this step at 3:38 you have to have a connection to the network before right? So the first step would be to hack into the wifi is that correct?

[@spider19728]

I believe it would work as long as you have the IP to the webcam

[@DC13371]

Great demonstration

[@naledimfolwe6359]

It actually worked 🎉🎉❤❤

[@burntchickennugget191]

Honestly Id be more curious on how the websites worked. How to decode and how to find the back doors without brute forceing our way in. Its interesting and helps me prepare my security systems the right way

[@NoName-nx6dl]

isnt brute forcinga style of backdoor. and if your security something you want to know how to test to prevent such attacks

[@shawnmendrek3544]

@@NoName-nx6dl Brute forcing is not a backdoor. Big difference from a trojan.

[@naijachess7359]

Was the camera connected on the Sam WiFi as your laptop?

[@JSONSEC]

Yep, for the purpose of this demonstration we had to connect it to the same network. But this exact camera will be exposed directly to the internet, which we see when we're browsing Shodan

[@naijachess7359]

@@JSONSEC Is it possible to access the camera's management interface from outside the WiFi network?

[@JSONSEC]

Yes, If poorly configured and the interface is exposed to the internet

[@faysalhasan1729]

This is really nice explaination

[@emmetg888]

what if the username isnt default like admin, how does the brute force attack proceed from there?

[@JSONSEC]

You could leverage the CSRF vulnerability we saw on CVE details. Obviously had to keep it quick for the presentation

[@emmetg888]

@@JSONSEC ok great thank you for your swift reply sir.

[@jordanhotman7670]

What is that device you use?

[@adamp185]

I don't like the way that all of a sudden w/o a word of explanation, after browsing some public address, this guy switches to connecting to some priv ip addr. What was that?

[@JSONSEC]

I did mention it, obviously we can't attack any public IPs so I admit this is a stretch of the imagination to some point. But the only way I could realistically cover the attack.

[@ILikeAltRock]

@@JSONSEC i love hacking public crap that i dont own lol, get a grip dude

[@soloklang8679]

Good job

[@JSONSEC]

Thanks!

[@ab565188]

Great vid,so basically ur saying fixed ips are a major security risk!This wouldn't happened with CGNat

[@naghmehsalimi2991]

tNice tutorials, good luck- you'll go far

[@marlymutos1000]

Great video

[@snakeeyes237]

That´s why IoT is a big danger for everyone, so I am avoiding smart devices at any cost!

[@shawnmendrek3544]

Smart indeed(no pun intended)

[@madmackenzie3459]

wow eye opening this was just a camera set up for this demostration but this could have been someones home security set up maybe they didnt know anything about http or https and bought a really cheap set up and then before they know it theyre being watched by anyone in the world through the same system thats supposed to protect them like a physical trojan

[@ngrobert5054]

where does he get the DSL camera IP address 192.168.2.3

[@you122789]

That IP address is not reachable or does not work

[@GloryOrBust]

@@you122789 believe that's because it's a private IP address

[@muhammadatiq-ur-rehman9788]

I can’t understand how you find IP address please explain after you click website and no information about how to find IP address

[@shawnmendrek3544]

There is a lot ways to find an IP address. The easier is to make a fake website, once the person clicks the link you have the IP. HOWEVER if their IP is not static yet dynamic, it becomes different in difficulty. THOUGH remember, dynamic IP have an IP range, meaning it is not infinite.

[@btechwallahbypw]

Amazing sir , i love it .

[@miravlix]

That is not a IoT camera, that is a random INTERNET DEVICE. It is like selling a windows PC to people, my test showed putting a Windows PC on the net just purchased to download security fixes would get it hacked before you get the fixes downloaded. Your trying to look smart but you never explain how STUPID the setup is that allow people direct access to devices. All modern setups is build around NOT ALLOWING DIRECT ACCESS. The device, whatever PC or otherwise make OUTBOUND connections, so you need to be INSIDE the "firewall" to attack it or attack a remote "cloud" service that the device connect to and other devices connect to in order for the two device to talk.

[@JSONSEC]

Hey mate, you're not wrong. I did say that in the intro that this is a simplified configuration. That being said, if you're on the same network or someone has configured something wrong this is all valid. The point is to demonstrate how this could be an attack vector.

[@2brostech]

But if not password in. Wordlist than possible or not

[@JSONSEC]

If password isn't in the list then we look for other vulnerabilities, like the CSRF vulnerability for that version

[@Phillshack__OnInstagram]

Contact phillshack_ on Instagram he’d help you out he’s amazing

[@hengkyju2444]

Sory if my language is bad....Is possible when i have a cctv wifi and someone steal my cctv...And then he can use the camera? EZVIZ C1HC. But the Paper of Barcode and Password I Have already unpluged the papper

[@JSONSEC]

If they stole it and had physical possession of it, they could most likely reset the firmware with a safety pin and take it as their own

[@hengkyju2444]

@@JSONSEC thanks for the information Sir🙏

[@hengkyju2444]

@@JSONSEC aa...Can u make a tutorial/there is a tutorial when someone steal cctv WiFi? And how to reset the firmware?

[@shawnmendrek3544]

CCTV or die. But remember your wires can be 'modded'. I suggest anyone with CCTV check their wires to make sure it is not spliced. Jam cams are 100% real yet highly illegal, but very cheap, yes we can jam your cameras of all kinds even CCTV, make sure to do perimeter checks to make sure your cam works and it not jammed(hacked) to produce a single still frame for as long as a hacker wants. You never know who is watching you. I suggest folk just open their eyes, if I can think it, they are probably doing it. What I said is not saying I approve of these things. It is an illegal attack on someone. But be aware, you are not secure just because you have a paid for security for the home. Nothing is 100% secure. Don't believe me? Look at them folk with security systems, gates ect and still get robbed. Get a dog, cameras, guns, problems solved, but remember those close to you who are in good standing w/you, your dog will not bark at them if they broke in your home most likely. So...

[@not4bllc11]

thanks bro

[@michaelpatrick777]

why u not using chrome?

[@JSONSEC]

Not supported on the camera web interface

[@resurrectedChickens]

I'm a offline, hard wired, anti wireless guy.

[@shafi6576]

Good for you

[@thebest3600]

You can't hide from God, repent your sin mortals.

[@agiliteaV]

After all these years, no one asked him how he wrote that...

[@shaikbyte]

grate....dude

[@cytheonltd7106]

Join the 'Hacking IoT' online course from Digital Defense Academy. For details, please visit the link below: www.digitaldefense.academy/course/hacking-iot-ble Course fee: 29 GBP for enrollments till 30-Sep-2020. Join now!

[@marthanjanike5609]

Yeah😊

[@nataliafigueredo7126]

wow, never got me more paranoid now

[@you122789]

Just letting you know there's lots of scammers in your comment box ☑️🤖👁️

[@Si3r3]

A good way to kill your career before it starts😂

[@ilove-or2wn]

Hello sir, how can i contact you to make a some business, we will pay you good.

[@JSONSEC]

Not interest sorry

[@stevencharles8574]

Kindly contact hotz_hacker on Instagram now for your hack or disabled account recovery he’s a real professional

[@you122789]

You are Not telling people you have to pay for that website you are on $59 in order to monitor IP address .

[@JSONSEC]

No, you don't have to pay. It's free for basic searches

[@DickeyHorace]

Gonzalez Ruth Williams Sharon White Jason

[@t.charan7860]

We can hack any camera

[@ByteBash]

I could have sworn your hair was much longer. 🤔

[@JSONSEC]

It's longer now, I recorded this about a year ago

[@therebelliousgeek4506]

We google...uses bing.

[@JSONSEC]

Haha good catch, Haven't changed the default on IE

[@obamabinladen1380]

Your channel is infected by bots lol

[@SuzanneFleming-nj5cc]

Brown Anthony Wilson Michael Robinson Karen

[@jeffmccormick6382]

It doesnt work. Scam fake video. Dont watch it. Completely a waste of time

[@JSONSEC]

Hey, sorry you didn't like it. I reject it's a scam because I'm not asking for any payment, information or anything of the sort. I'm efforts to improve my content, could you please help me understand what didn't work?

[@PhantomGlow077]

​@@JSONSECcan you teach me how to attack cctv ?

[@mer_meh]

Very disappointed. No one puts security cameras in their showers.

[@JSONSEC]

That's just creepy

[@MuhammedAYDIN]

whatcha gonna do when you see people naked?

[@lakshmiravichandra7889]

The most discreet security Cameras ever : HD Mask hd-mask-usa.kckb.st/690d3517

[@MarkAnthonyMarkAnthony-u2e]

Where i can contact you i need some help please

[@Urketadic]

Im going to do this to devices I do not own. No fun in hacking my own devices.

[@JSONSEC]

Be prepared for the consequences then.

[@Urketadic]

@@JSONSEC Damn straight I expect nothing less.

[@ILikeAltRock]

good job

[@RandomFandomOfficial]

@@Urketadic 🚓🚔🚁👮🏼👮‍♀️👮‍♂️ FBI OPEN UP!

[@Urketadic]

@@RandomFandomOfficial I dont live in the United States so FBI can suck my balls.

[@itsme7570]

Good place to start is of course.... Google! Proceeds to use bing 😅