AXIS Network Camera Live View - Detect

ID: liveview-axis-camera

Severity: info

Author: dhiyaneshDK,f1she3

Tags: axis,edb,iot

Description

AXIS Network Camera live view was detected.

YAML Source

id: liveview-axis-camera

info:
  name: AXIS Network Camera Live View - Detect
  author: dhiyaneshDK,f1she3
  severity: info
  description: AXIS Network Camera live view was detected.
  reference:
    - https://www.exploit-db.com/ghdb/6843
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
    max-request: 2
  tags: axis,edb,iot

http:
  - method: GET
    path:
      - '{{BaseURL}}/view/viewer_index.shtml'
      - '{{BaseURL}}/pics/logo_70x29px.gif'

    host-redirects: true
    max-redirects: 2
    stop-at-first-match: true

    matchers-condition: or
    matchers:
      - type: dsl
        name: stream-view
        dsl:
          - 'contains(tolower(body), "live view  - axis")'
          - 'contains(tolower(body), "live view - axis")'
        condition: or

      - type: dsl
        name: logo
        dsl:
          - 'status_code == 200'
          - '"1106649083" == mmh3(base64_py(body))'
        condition: and

    extractors:
      - type: regex
        part: body
        group: 1
        regex:
          - 'AXIS (.*) Network Camera</title>'
# digest: 4a0a00473045022100a1f02067cddc531db2202ae9d45a4bd12aca9fad5e7eb4a24dc7defce087f9f402201bdf84013434397417dd72298f513e39782a85f44e5c99b3bedd238a58e003a3:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/iot/liveview-axis-camera.yaml"

View on Github