IOT Security: Pentesting on IP Cameras: Difference between revisions
| Line 15: | Line 15: | ||
== Description == | == Description == | ||
A penetration test in general consists of several stages: | A penetration test in general consists of several stages: | ||
Revision as of 19:24, 12 June 2022
Summary
This is a documentation on pentesting (information gathering and vulnerability scans) performed on TP-link Kasa Cam Smart Home Camera KC120, Ezviz CS-C1C and Abus PPIC32020.
Requirements
- Operating system: Kali Linux 2022.2
- TP-link Kasa Cam Smart Home Camera KC120
- Ezviz CS-C1C
- Abus PPIC32020
- Kasa Smartphone application (IOS or Android)
- Ezviz Smartphone application (IOS or Android)
- ABUS App2Cam Plus Smartphone application (IOS or Android)
Description
A penetration test in general consists of several stages:
- Planning
Working with a consumer to absolutely outline and report evaluation objectives, scope, and policies of engagement.
- Gathering Information
Collecting and examing key data approximately the software and its infrastructure.
- Discovering Vulnerabilities
Finding current vulnerabilities, the usage of each guide, and automatic techniques.
- Reporting
Providing a complete file with deep evaluation and suggestions on the way to mitigate the found vulnerabilities.
Planning
You need to set it up to your camera at home together along with your phone app and allow it to connect with the identical WiFi that your smartphone is using.
Step 1
Enter these commands in the shell
$sudo nmap -O 192.168.8.103
Step 2
Used Hardware
TP-Link Kasa Smart Home Camera KC120