Finding Camera Stream Paths - Revision history

Burger: /* Reverse Engineering Links */

2026-04-12T13:08:38Z

Reverse Engineering Links

← Older revision		Revision as of 09:08, 12 April 2026
Line 130:		Line 130:
	*https://hackaday.com/2026/02/14/reverse-engineering-a-dash-robot-with-ghidra/ - Ghidra disassembly of binaries.		*https://hackaday.com/2026/02/14/reverse-engineering-a-dash-robot-with-ghidra/ - Ghidra disassembly of binaries.
	*https://www.robopenguins.com/reverse-dash/ - From the previous link.		*https://www.robopenguins.com/reverse-dash/ - From the previous link.
	*https://fippi.io/reverse-engineering-adventure-canoe/ - Finding passwords with ghidra and gdb for an old arcade game. This is pretty well written and easy to follow. A good example of shallow reverse engineering (i.e. not going into something too difficult).		*https://fippi.io/reverse-engineering-adventure-canoe/ - Finding passwords with ghidra and gdb for an old arcade game. This is pretty well written and easy to follow. A good example of shallow reverse engineering (i.e. not going into something too difficult). Also rearranges the files for MAME.
	[[Category:Dummies_Guide]]		[[Category:Dummies_Guide]]

2026-04-12T13:08:14Z

Reverse Engineering Links

← Older revision		Revision as of 09:08, 12 April 2026
Line 130:		Line 130:
	*https://hackaday.com/2026/02/14/reverse-engineering-a-dash-robot-with-ghidra/ - Ghidra disassembly of binaries.		*https://hackaday.com/2026/02/14/reverse-engineering-a-dash-robot-with-ghidra/ - Ghidra disassembly of binaries.
	*https://www.robopenguins.com/reverse-dash/ - From the previous link.		*https://www.robopenguins.com/reverse-dash/ - From the previous link.
	*https://fippi.io/reverse-engineering-adventure-canoe/ - Finding passwords with ghidra and gdb for an old arcade game.		*https://fippi.io/reverse-engineering-adventure-canoe/ - Finding passwords with ghidra and gdb for an old arcade game. This is pretty well written and easy to follow. A good example of shallow reverse engineering (i.e. not going into something too difficult).
	[[Category:Dummies_Guide]]		[[Category:Dummies_Guide]]

2026-04-12T12:50:45Z

Reverse Engineering Links

← Older revision		Revision as of 08:50, 12 April 2026
Line 130:		Line 130:
	*https://hackaday.com/2026/02/14/reverse-engineering-a-dash-robot-with-ghidra/ - Ghidra disassembly of binaries.		*https://hackaday.com/2026/02/14/reverse-engineering-a-dash-robot-with-ghidra/ - Ghidra disassembly of binaries.
	*https://www.robopenguins.com/reverse-dash/ - From the previous link.		*https://www.robopenguins.com/reverse-dash/ - From the previous link.
			*https://fippi.io/reverse-engineering-adventure-canoe/ - Finding passwords with ghidra and gdb for an old arcade game.
	[[Category:Dummies_Guide]]		[[Category:Dummies_Guide]]

2026-02-24T09:09:42Z

Reverse Engineering Links

← Older revision		Revision as of 05:09, 24 February 2026
Line 128:		Line 128:
	*https://hackaday.com/2024/01/19/alarm-panel-hack-defeats-encryption-by-ignoring-it/ - Sometimes you can just go right to the display and buttons and ignore the rest of the device		*https://hackaday.com/2024/01/19/alarm-panel-hack-defeats-encryption-by-ignoring-it/ - Sometimes you can just go right to the display and buttons and ignore the rest of the device
	*https://youtu.be/uGfVn-cyz3o https://youtu.be/lbSalKp_ldA IP Camera firmware extraction and disassembly of a hardcoded password		*https://youtu.be/uGfVn-cyz3o https://youtu.be/lbSalKp_ldA IP Camera firmware extraction and disassembly of a hardcoded password
			*https://hackaday.com/2026/02/14/reverse-engineering-a-dash-robot-with-ghidra/ - Ghidra disassembly of binaries.
			*https://www.robopenguins.com/reverse-dash/ - From the previous link.
	[[Category:Dummies_Guide]]		[[Category:Dummies_Guide]]

2024-12-20T20:49:43Z

Overview

← Older revision		Revision as of 16:49, 20 December 2024
Line 13:		Line 13:
	*Search online resources and forums		*Search online resources and forums
	*Get access to the camera shell		*Get access to the camera shell
	*~~Sniff~~ network packets with TCPDump or Wireshark		*Intercept network packets with TCPDump or Wireshark
	*Reverse Engineer		*Reverse Engineer

2024-07-26T12:40:07Z

Reverse Engineering Links

← Older revision		Revision as of 08:40, 26 July 2024
Line 127:		Line 127:
	*https://youtu.be/Y7Z5Q_sNqUw SUPERCON 2022: Kuba Tyszko Cracks Encrypted Software		*https://youtu.be/Y7Z5Q_sNqUw SUPERCON 2022: Kuba Tyszko Cracks Encrypted Software
	*https://hackaday.com/2024/01/19/alarm-panel-hack-defeats-encryption-by-ignoring-it/ - Sometimes you can just go right to the display and buttons and ignore the rest of the device		*https://hackaday.com/2024/01/19/alarm-panel-hack-defeats-encryption-by-ignoring-it/ - Sometimes you can just go right to the display and buttons and ignore the rest of the device
			*https://youtu.be/uGfVn-cyz3o https://youtu.be/lbSalKp_ldA IP Camera firmware extraction and disassembly of a hardcoded password

	[[Category:Dummies_Guide]]		[[Category:Dummies_Guide]]

2024-07-10T04:51:58Z

Camera Shell

← Older revision		Revision as of 00:51, 10 July 2024
Line 85:		Line 85:
	$ nmap --script rtsp-url-brute -p 554 <ipaddress>		$ nmap --script rtsp-url-brute -p 554 <ipaddress>
	</pre>		</pre>
	~~e.g.~~

	===Wireshark/TCPdump===		===Wireshark/TCPdump===

2024-07-10T04:51:49Z

Camera Shell

← Older revision		Revision as of 00:51, 10 July 2024
Line 81:		Line 81:
	$ nmap -p1-65535 <ipaddressofcamera>		$ nmap -p1-65535 <ipaddressofcamera>
	</pre>		</pre>
			Also try (from:https://ipcamtalk.com/threads/imou-ranger-pro-rtsp-problems-solved.60271/)
			<pre>
			$ nmap --script rtsp-url-brute -p 554 <ipaddress>
			</pre>
			e.g.

	===Wireshark/TCPdump===		===Wireshark/TCPdump===

2024-04-04T13:13:59Z

Wireshark

← Older revision		Revision as of 09:13, 4 April 2024
Line 82:		Line 82:
	</pre>		</pre>

	===Wireshark===		===Wireshark/TCPdump===

	Watch the packets coming from the camera when accessing the video stream, and determine where the stream is located if possible. Some cameras require custom authentication, so if your camera is proprietary, then things are more difficult. This is the danger of purchasing cameras that don't follow the standard (onvif).		Watch the packets coming from the camera when accessing the video stream, and determine where the stream is located if possible. Some cameras require custom authentication, so if your camera is proprietary, then things are more difficult. This is the danger of purchasing cameras that don't follow the standard (onvif). Some cameras will also announce the camera stream URL when they boot on the network. Wireshark and or TCPdump can be useful for this. At the least, they may indicate the IP address.

	===Reverse Engineering===		===Reverse Engineering===

2024-04-04T13:12:47Z

Testing out a Camera

← Older revision		Revision as of 09:12, 4 April 2024
Line 34:		Line 34:
	If you want to test from the terminal without X, you can use ffmpeg		If you want to test from the terminal without X, you can use ffmpeg
	$ ffmpeg -i rtsp://<username>:<password>@<ipaddress>:<port>/<somepath> output.mp4		$ ffmpeg -i rtsp://<username>:<password>@<ipaddress>:<port>/<somepath> output.mp4
	~~alt~~ (from X)		or (from X)
	$ ffplay rtsp://<username>:<password>@<ipaddress>:<port>/<somepath>		$ ffplay rtsp://<username>:<password>@<ipaddress>:<port>/<somepath>