XP Webcam Viewer Page

ID: xp-webcam

Severity: medium

Author: aashiq

Tags: webcam,iot

Description

Searches for exposed webcams by querying the /mobile.html endpoint and the existence of webcamXP in the body.

YAML Source

id: xp-webcam

info:
  name: XP Webcam Viewer Page
  author: aashiq
  severity: medium
  description: Searches for exposed webcams by querying the /mobile.html endpoint and the existence of webcamXP in the body.
  metadata:
    max-request: 1
  tags: webcam,iot

http:
  - method: GET
    path:
      - "{{BaseURL}}/mobile.html"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "webcams and ip cameras server for windows"
        part: body

      - type: word
        words:
          - "Please provide a valid username/password to access this server."
        part: body
        negative: true
# digest: 490a004630440220581d5a276d3b0f4348c0bdf2708bf9320d8e9265f47a2679f150e8f3c44b8b0f022041ee0649371f91e67a64ffd951ed7a907249d84d1c748ff93f31d5819e4626c6:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/iot/xp-webcam.yaml"

View on Github