Intercept Images from a Security Camera Using Wireshark [Tutorial]

Get Our Premium Ethical Hacking Bundle (90% Off): nulb.app/cwlshop
How to Use Wireshark to Hijack Pictures from Wi-Fi Cameras
Full Tutorial: bit.ly/SecCamShark
Subscribe to Null Byte: goo.gl/J6wEnH
Kody's Twitter: / kodykinzie
Wireshark is a powerful Wi-Fi sniffing tool for intercepting communications between devices on a network. Today, we'll show you how to intercept images from a security camera on this episode of Cyber Weapons Lab.
Recommended network adapter: www.amazon.com/dp/B004Y6MIXS/...
Most people watching security cameras rely on the usually insecure HTTP web server that's running on the camera in order to watch the security feed or change settings on the camera. This is commonly HTTP rather than HTTPS, and most people don't really bother to make the distinction or prefer to buy one that's secure because they don't understand the risk that it poses.
Now, on a network that has security, like a WPA network that has passwords, if you just have one person on the network, you're probably going to be okay if you have a pretty strong password and nobody can see the traffic that's going through it.
But the second somebody else gets your password or if it's on an open or shared network, then you can really start to get in trouble because anybody can see these insecure HTTP requests over the network.
What this boils down to is we can actually see what the person is seeing on their screen, so if they're watching the security camera or if they have a dedicated monitor set up to watch it somewhere in their business or home, then we can literally just download the packets as they're transferring from one device to another, and then use Wireshark to export them and look at them on our screen.
Follow Null Byte on:
Twitter: / nullbytewht
Flipboard: flip.it/3.Gf_0
Weekly newsletter: eepurl.com/dE3Ovb

[@redzaizudin6231]

So many stickers on the laptop. Definitely a hacker

[@mcbazzauk]

I dunno. If I've learnt anything from TV & movies, it's that hackers all wear dark hoodies with the hood up. ;)

[@TheTravisweb]

Sry but nobody Quote hacks with a computer worth a bunch of money, use and burn

[@averagehuman3788]

But he is missing his hacker hoodie

[@TheTravisweb]

@@averagehuman3788 he's wearing his fake hacker hair

[@j0hn4th4nd03]

mcbazzauk that’s only incognito mode. When things get serious lol.

[@KhangLe-fe9wq]

Everyone should really have a friend like you . Perfect example of the pen is mightier than the sword. I love your channel man. Keep up the amazing work.

[@colemanbergad6865]

Odds are you do have a friend like that. They just might not let on as much as they really know

[@charli3824]

how do i get mdk3

[@r3sx]

which pen

[@seosamhohaodha3040]

you guys are a god send, i have learned so much from watching your channel content, please keep doing what you guys do, much respect

[@charli3824]

how do i get mdk3

[@AmeerHamza-cy6km]

Make a backup of your videos i heard KZbin is removing hacking content

[@theeyenzier8190]

Hacking isn't illegal its KZbin trying to stop people from learning This

[@buddinglearner7085]

he already did on his website

[@redpilledpatriot6868]

You're welcome. >>>> www.bitchute.com/channel/xeRnV2Dkjyie/

[@Maplesyrup416]

@@theeyenzier8190 no, its youtube trying to brain wash ppl with waste of time content they dont want you learning bra

[@Maplesyrup416]

@@buddinglearner7085 what is his website

[@gg-oy7lb]

This is cool. It's even more cool that you can do all of this with only those stickers infront of you!

[@ceemihail]

Awesome video. I really like your channel, learning a lot, thank you.

[@neonutopia6487]

You never cease to amaze.

[@CyberAstra]

I am not surprise with your knowledge since I am following your website and now your channel from college days and know your availabilities, (always unique). Thumbs up friend!!

[@antdad24]

Bruh, i clicked on your video on accident and am glad i did! Awesome and engaging content my guy. Much respect!

[@thehound3961]

this is way NullByte us one of my favorite channels .... great job

[@Theblackthreat]

get more videos of kali tools

[@techemically]

Interesting wireshark usage, thanks for the tut. The bit about grabbing a 4 way handshake and then jumping to entering the WPA password into wireshark is leaving out the laborious and computationally expensive process of having to crack the handshake in order to get the password. Without that very important and difficult step (unless you have a nice password cracking rig and some inside info on what the password might be) the rest will not be so easily accomplished. Still, a very nice vid. Thanks Mr. Byte :)

[@charli3824]

how do i get mdk3

[@xdelic6485]

Now I can finally figure out whose been stealing my sandwiches from The hub fridge

[@georgewbushcenterforintell147]

Ransomware

[@beatlejuice7755]

Alfred Kinsey, Sexual Behavior in the Human Male, table 34

[@OzoneX4]

What is the background music I hear? It sounds like the same as Jeremy Eithers.

[@quantumleap7964]

thx dude, you really are making cyberspace a lot safer

[@stellabckw2033]

(sorry for my ignorance :P) but when you capture the handshake you should decrypt it first, right?

[@dkmodder4405]

So this is what Dokkaebi and Vigil specialize in, I see...

[@zeechy]

Vigil just writes https on his forehead with a crayon and that’s how he becomes invisible to drones and cams hijacked by dokkaebi

[@dkincorporated3060]

Surprised to see a siege reference here

[@2priime]

Who else didn’t bother to attempt to ddos nullbytes ip knowing he could potentially destroy us at any given moment?

[@CleverCheats]

I DDosed immediately. I'm now sitting in prison beside El Chapo, he says "I kill your family". Good times...

[@w1z4rd9]

EZ Cheats lmao

[@RicondaRacing]

I don't want to DDoS him, he's giving us newbs free knowledge.

[@Aaron-uz8xt]

@sup rcpu explain your ways or youre cappin

[@triplethreat5781]

sup rcpu u mean u doanate to getting a tesla

[@lelandclayton5462]

I'm a Security/AV Integrator and constantly I am asked about Wireless Security and CCTV. It's fun to show people how easy it is to breach the Network.This gives me a chance to sale them a better CCTV System, Security Panel and at times a better Network Router such as a Netgate pfSense Box. Now I can tote around a crummy Wi-Fi Camera and with this Wireshark method to pull up images to really scare the "pro wireless" users. You would be surprised how many people think Wi-Fi is better then a hardline. The scary thing is how many people think they're secured but not even close.

[@Luftbubblan]

So are you going to lie to your costumers by doing this while already connected to their network? Or are you going to phish or brute force the handshake on the fly?

[@x.a.k.i5858]

As ususal an amazing informative video which helps alot thank you

[@TheDodge1996]

Thant's what i am talking about... It's you again! Glad to see yet another hot topic from you!

[@airforce1969]

This is a fantastic tutorial! Thanks heaps!

[@rajkumar-ik8cd]

Really the perfect tech guy i've ever seen

[@teresitajimenez5305]

I love the way this is done for me! It's always a great day to see him uploading hacks! Massive props to the team WhillsworldNet

[@JacobZigenis]

Great tutorial! Also, blurring MAC addresses was a good move, but keep in mind that geolocation can be done with SSIDs as well.

[@laurenzv5682]

How does that work?

[@magmafalse559]

@@laurenzv5682 they intercept your traffic than call your mother asking where you live and use that data - Geroge Washington (probably)

[@charli3824]

how wdo i get mdk3

[@FlyinZX10R]

Someone (google?) has a vehicle that drives around and tries to put SSIDs to their addresses (or close to). This is then uploaded to a map that’s visible online. You want to name your router as something like this Name_optout_nomap “Name” being the name of your wifi. The optout/nomap part is a request not to be added to whatever they are using it for. That’s why by your wifi should never have any identifying related to you. Also, turn your wifi off on your phone when you leave home so it’s not pinging every router it encounters on your journey.

[@PrinceAndrewFucksKids]

​@laurenzv5682 you can use a Hack RF One to spoof your GPS.

[@skunkhead2007]

again another great tutorial ;-)

[@mocromo2010]

Great vid! Keep the good work.

[@Dcthetruth85]

I know this is a crazy question, Will resetting the modem accomplish the same thing as far as kicking everyone off the network?

[@izzyplayingidk]

I like your content. I wanna learn stuff like this and you help me out.

[@splint3rsec]

‘’From insecure wifi security cameras’’

[@mty4821]

Funny thing to know: you can hack cams just knowing the model and so the firmware, then use some reverse engineering to the downloaded firmware and you can get root ssh access! :) Try this!

[@shibbyshaggy]

its not so simple these days at exploits are released, a lot of what we saw 5 years ago are patched. example of TVT, all those GitHub python scripts don't work

[@KayvonGz]

Captain Underpants 😂

[@aidangomez9852]

Bill McDondald try a default password script and use shodan to find camera ips

[@MatthewHensley8304]

@@shibbyshaggy yeah but they still have crap for security if they even have security

[@NeonNotch]

Gee Kay shut the fuck up

[@allistair61]

Cool video, love the channel and keep up the good work. As I have a young love you, I'll have to share this video with my family.

[@NullByteWHT]

Thanks, I'm glad you've learned something from the content!

[@bestmixesonline7744]

when checking traffic for data going outside the computer is the =post the only command to see what is being taken out? or are there other commands to check?

[@joshuacommisso5721]

Bro he's got a defcon sticker. I did defcon this year and won. What a throwback.

[@YoutubeShorties69]

Please Make A Video How To Do MITM Attacks

[@tejasmandre666]

Pretty cool ! 👏

[@michaelmichael8406]

So, before you deauth the clients and get the password, how are you decrypting the http traffic to find the target client?

[@matej_stepan]

Can I use ethernet interface as monitoring interface, or this stuff works just on packets sent by 802.11 ?

[@robertobaldizon8206]

Great tutorial. Thank you very much...!!!!

[@grahamelliott9506]

'insecure security cameras' you'd think this wouldn't be as much of a thing as it is but its very, very, very much a thing lol

[@opalatrium3923]

great video! you keep mentioning the handshake required after deauthentication; could you possibly provide a step-by-step outline of that process? everything was clear cut and im quite a novice, except for this required step in the tutorial. thanks a bunch!

[@charli3824]

how do i get mdk3

[@therrrmite6846]

Do you have to save the handshake anywhere? Or does Wireshark automatically know you have it?

[@theonefrancis696]

When the Decrypt option is ticked, the handshake key is automatically saved in preferences.

[@profiluefter]

Nice "easter egg" with the password you chose for the camera!

[@inadaizz]

hak5 sticker, defcon, Tor... this checks out. When I clicked your video I thought it said it was by Nill. A significantly smaller creator I enjoy. Been wanting to improve at wireshark.

[@Frankie_Freedom]

So which networks adapter do y'all recommend? Or if I can even replace my wifi card inside my laptop

[@akvartz]

Great tutorial 💯and it works for RTP video/audio streams @everyone plz do not do this to the networks that are not yours, and probably shouldn't deauth random people too ✌️

[@chuxxsss]

So I just brought a outdoor webcam. I done like the interface it came with, and just want a stand alone app, which I can add up to 6 camera too. Is there such a program out there to do this ask in Linux or Android please. Stay safe and have a wonderful day.

[@therrrmite6846]

Also how are you connected to the network while in monitor mode?

[@MrFurriephillips]

You should have a word with your neighbours & tell 'em to stop using channels 5 & 7

[@meh5812]

confusion 100 for them

[@nobeltnium]

idk why but i notice ppl tend to overlap channel alot. Where i live i count ~25APs and am the only one who doesnt use channel 11. My guess is all of their routers got configured by the same guy XD

[@MrFurriephillips]

I should probably explain that the only 2.4Ghz channels that should be used, are 1, 6, or 11, as these are the only ones that don’t overlap with each other.

[@MrFurriephillips]

Here’s a nice explanation of why kzbin.info/www/bejne/jmTcnKCAmNRgoas

[@Theblackthreat]

get more videos of kali tools

[@JNET_Reloaded]

i have a few handshakes but dno what to do with them tut on handshakes?

[@pachow2617]

for the ip you put so you can filter did you put your home ip or the victims ip

[@terrymalfoy7384]

Is any course in UK which can provide me with knowledge like this? Like Kali Linux and the tools contained at the distribution

[@cljdolland1807]

Hey null wondering if you could help with wifi camera issue I'm having the image is different from sound in background wondering if you can help thanks

[@sail3sh703]

Where can we get the stickers you have on your laptop

[@gamertaubat9263]

i want to ask when i open my IEEE and details on the decryption key i dont have the decryption key what do i do can you help me

[@Shmancy_pants_69]

I'm a bit confused, how did you get that IP address host at the start?

[@imNotZack_]

how did you get signal strength and channel showing on there?

[@s.pruett2114]

What is the big coding book (yellow title) behind your cat picture? And, would you recommend it?

[@harryjohnson615]

Imagine you're working in a highly secure data centre when you suddenly see this fella walking slowly past the perimeter fence clutching his laptop as he stares at you with those eyes as that creeping sensation of feeling lot less *secure* starts to wash over you.

[@timbaker8928]

So what's the best thing to use to do this a laptop or home computer??

[@RunOs3]

Thank you!

[@trolltroll6965]

good video mate

[@AwesomeNickGaming]

This is why network admins should put their security cameras on their own VLAN separate from other devices

[@paulstubbs7678]

Nah, get a cableer in and wire them up

[@HarunSkender]

you are the realworld mr.robot

[@user-ri7qy1en7l]

Everytime I watched his videos I always thought my playback speed is not normal HAHAHa

[@timmooney7528]

If a nvr is used to capture a wireless camera's feed, is it receiving http traffic or some other method? Could the footage be intercepted the same way if it was being accessed directly by a browser?

[@ronniethompson8304]

That was so sick bro

[@jakeaber432]

Do you know if this would work on Ring cameras?

[@MyurrDurr]

Why do you blur out the time/date in the center of the panel?

[@ssekitolekoisrael805]

Which courses should I take to atleast for one time be on course with you guys coz I feel dumb

[@xyhard8603]

Is Kali Linux has a tools what tries wi fi passwords for wi fi networks?

[@abwinks]

Hey Brother can I know what type of laptop you are using and give brief description please brother. So I can practice and get a job in cybersecurity

[@icetray9281]

pls make a Spotify playlist of your background music (and music of the same style)

[@NullByteWHT]

check the playlists here for "4 while u hax"

[@leonclaassen8617]

Great informative videos that you create, thanks man. Just a question, whats your intro track called used in your videos?

[@jlapointe]

@@leonclaassen8617 Vibrasphere - Sweet September kzbin.info/www/bejne/mYncfmd_pbt7jas

[@beatlejuice7755]

Alfred Kinsey, Sexual Behavior in the Human Male, table 34

[@jonhille]

could you somehow use this to feed the same camera a loop?

[@camw9354]

luv your vids :D

[@johnbrandt2167]

At around 8:00 , couldn't you filter for the key-related packet you sought to save time?

[@jacobusburger]

Is it possible to stream the video from the camera to some video player after intercepting it?

[@thelebbies]

Great video

[@ZvendZved]

Vibrasphere are you fucking serious?? YES you are, you're serious about music! And you just won a subscription before I've even seen this video haha.

[@may-kq8tj]

You can also Use driftnet to view images.

[@coverboy1050]

I remember when you were working the door at the Echo.

[@onions5113]

this youtuber improve my knowledge can i thank you sir ?

[@NullByteWHT]

Glad to hear that

[@garrysingh4484]

You are the best 👍

[@johnadams9558]

Can you please get a mouse that clicks louder? That laptop clicker wasn’t driving me crazy enough. How do you put up with it?

[@Enzo-dz8df]

What is that filter he uses i dont know what to do

[@drisselkasmi4876]

thank you

[@icarusswitkes986]

So could you also write a program to do this really quickly and put the images together to get a video feed? If you were to do this how would you program it? Can you write programs for wireshark to perform?

[@tarallokhande3]

a simple monitoring program would do.. otherwise go for ffmpeg with piping

[@t.h9291]

Great tutorial! What security camera did you use that relies on http web server?

[@NullByteWHT]

I don't remember, something cheap from china

[@ClevelandRocks216]

This dude is a legend

[@ir4640]

What are the books on the shelf

[@Riborwahz]

Worth watching !!! Don't give up BTW make some new content or video bcz you got one more subscriber

[@blindradio7634]

So you have to first crack the camera's wifi?

[@i-use-arch-btw3954]

Pull an image from thin air, sounds like black magic.

[@chriskaprys]

I understand you needed the wifi SSID and password (or PSK) to allow WireShark to decrypt the traffic, but what happened with the handshake information? Did WireShark simply automatically implement it somehow once it was included in the capture? I thought you'd have to point WireShark to that information somehow.

[@miaudottk9080]

Cheaper solution: create 2 wpa2-aes protected APN's on your router, then connect your insecure camera(s) to one of these. The other apn is for the person watching the cameras. Also create an open apn for guests to connect to and insulate it from your network. Use strong passwords and keep them safe. If a password will get compromised, it'll likely be the guard's, so you can easily change it. All you'll need is a cheap router with OpenWRT flashed on it (it'll cost an extra ~usd 5 over the cheapest router you can find).

[@JuanjoHerrera-hx1ls]

I'm interested in this, do you know any tutorial?

[@rickduran4515]

Hi, I just wanted to know which University you go to

[@kkendall99]

Looks easy, all you need to to do is enter the super secret decryption key and then you can decrypt

[@takanikebrogad1307]

does that terminal request works for windows?

[@MRright101_pubg]

How is hikvision cctv system is it secure or not ?

[@ashleygrady9474]

Hi, is there a way to find out who is hacking into my Blink camera system? How would I be able to find out this information?

[@GHOST-hp2ji]

Nice, where do you get those stickers???