PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Kiểm tra vài camera Trung Quốc và cái kết

blog.viettelcybersecurity.com | blog | #rce | #iot | #command-injection | #default-credentials | #camera | #cctv
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A researcher tests three cheap Chinese cameras, finding default telnet credentials, command injection in CGI functions and unauthenticated RCE via firmware update parsing.
Published
Collected

Related coverage

blog · blog.viettelcybersecurity.com
The first step to PWN2OWN - A sad one
A researcher's first find: LAN-side command injection in the NETGEAR RAX30 UPnP service via a malicious SOAPACTION header embedded into a logger command; patched just before Pwn2Own Toronto 2022.
blog · blog.viettelcybersecurity.com
Thành phố thông minh có thể bị hack như thế nào
Researchers assessing Akuvox smart intercoms used in smart cities found command injection, hardcoded Android credentials, default-cert web config and unauthenticated RTSP camera flaws, now patched.
blog · blog.viettelcybersecurity.com
Lỗ hổng điều khiển các thiết bị SmartHome Lumi
Researcher analyzes Lumi smart home devices, finding hardcoded MQTT credentials in firmware and weak controls that let attackers manipulate lights and locks via local Wi-Fi or the cloud.
blog · blog.viettelcybersecurity.com
Cuộc chiến White Box và Black Box trong truy tìm lỗ hổng bảo mật ở thiết bị IoTs
Two researchers independently found auth-bypass flaws ZDI-20-1176 and ZDI-20-1451 in NETGEAR's mini_httpd; the post compares their white-box source analysis and black-box approaches.
blog · blog.viettelcybersecurity.com
Research IOT - Analyze Bootloader - notBootSecure
A researcher reverse engineers an encrypted Hikvision camera firmware, using UART access to dump the bootloader and recover the decryption key, a practical guide to IoT firmware extraction.
blog · blog.viettelcybersecurity.com
Lỗ hổng trên dòng ONT IGate GW040
Research on ONT IGate GW040 routers: the crontab and weakly secured TR-069 features allow easy botnet recruitment, and firmware analysis uncovered command injection in /bin/httpd via IPSec requests.
Back