My first and most fun post about hacking Google for webcams! w00t!
You are probably saying right now: “OMG wtf??!? w3 c4N s33 pPl 0n 7h13R W3bC4mZ?!!?” And you should know that unless you take precautions, the answer is yes you can…
Here’s the way it works:
It is very important to know what almost all webcams are insecure, which means anyone with the right knowledge can access them over the internet. To help you, I am going to list all the ways to access a webcam from Google in the hopes that people will take this knowledge and use it for thier self-protection.
Some examples of webcams that can be compromised are: security cams, public cams, office cams, etc., and this works for both digital and analog based networked cameras.
Since Google is just such a powerful search engine, you can send queries (searches) to certain pockets of the web that are considered the “Deep Web” which in most cases haven’t been hashed (logged/recorded) in search databases, which I went over in my previous post. Basically, though, if you know how to refine your search queries you will be able to access the closed end networks that have been hashed by Google. The networks which you query will give you listings of webcams depending on your query and the brand name of the camera that is in the server. Basically what I want you to get out of this is that you will be able to know how people could see most CCTV cams as well as webcams that are networked. Also the easiest ones to access are the networked based cam-systems that are both a cam and a computer in one unit.
Image of a network webcam setup
And here’s how to do it:
And now for the EZ part! The following are lists of sample queries you would send to Google to access the listings of all unprotected cams in the world!
First you would use commands such as these in Google and replace “AXIS” with whatever brand name camera you are looking to access (Brand specific searches):
“/view/view.shtml axis”
“Live view – / – AXIS”
“indexFrame.html axis”
“Live web imaging unleashed”
Or can use any of these queries in Google for a broader range of cameras. However, some of these queries return false positives:
“view.shtml”
“view/index.shtml”
“liveapplet”
“Network Camera NetworkCamera”
“Frame?Mode=” -dvcreators.net “
Or you can use these queries in Google for mainly University Cameras. However, they types of queries you are searching are never 100% accurate, and will sometimes give you false positives or misleading results:
“inurl:.edu/ AND inurl:(axis-cgi/mjpg ”
“inurl:/view.shtml”
“axis-cgi/mjpg”
“ViewerFrame?Mode=) “
Finally, these last bits of search strings are for different network types, which are distinct from searching for something like brand, for instance. The following strings will give you more specific results and are less likely to return false positives:
inurl:”axis-cgi/mjpg”
inurl:”ViewerFrame?Mode=”
inurl:”view/index.shtml”
inurl:”MultiCameraFrame?Mode=” -yxur.com”"
Last but not least, if you know what you are doing you can do a multitude of things for making your searches more specific. For example, in the Google search engine you can use commands like OR, AND, (etc)… But the easiest thing to do is mix and match the strings with the “|” command. An example of this would be:
inurl:”ViewerFrame?Mode=” | “Live view – / – AXIS” | “inurl:.edu/ AND inurl:(axis-cgi/mjpg”
This search query would be used if I knew the brand, type and where the camera was. In this case we searched for an AXIS live view cam, with an extra viewer frame mode that is on any university campus.
That’s all for now folks! Stay tuned next week for the really crazy stuff… Muhahhahahahaha
Feel free to try this out in Google: www.google.com
Posted in 
Tags: