IOT Security: Pentesting on IP Cameras
Summary
This is a documentation on pentesting (information gathering and vulnerability scans) performed on TP-link Kasa Cam Smart Home Camera KC120, Ezviz CS-C1C and Abus PPIC32020.
Requirements
- Operating system: Kali Linux 2022.2
- TP-link Kasa Cam Smart Home Camera KC120
- Ezviz CS-C1C
- Abus PPIC32020
- Kasa Smartphone application (IOS or Android)
- Ezviz Smartphone application (IOS or Android)
- ABUS App2Cam Plus Smartphone application (IOS or Android)
Description
Description
A penetration test in general consists of several stages:
- Planning
Working with a consumer to absolutely outline and report evaluation objectives, scope, and policies of engagement.
- Gathering Information
Collecting and examing key data approximately the software and its infrastructure.
- Discovering Vulnerabilities
Finding current vulnerabilities, the usage of each guide, and automatic techniques.
- Reporting
Providing a complete file with deep evaluation and suggestions on the way to mitigate the found vulnerabilities.
Step 1
Enter these commands in the shell
$sudo nmap -O 192.168.8.103
Step 2
Used Hardware
TP-Link Kasa Smart Home Camera KC120