# Title: MOBOTIX Live camera Vulnerability # Author: h4shur # date:2020-05-05 # Vendor Homepage: http://www.mobotix.com/ # Software Link: http://www.mobotix.com/ # Version: MOBOTIX [x] # Tested on: Windows 10 & Google Chrome # Category : Web Application Bugs # Dork : inurl:"/control/userimage.html" intext:"© 2001-2020 MOBOTIX AG, Germany · http://www.mobotix.com/" ### Note: * Cyber ​​Live Webcam has not applied any security filters or access restrictions to its cameras, and attackers and aggressors can use it against the organization in which the company's cameras are used, causing significant damage. * This organization can cause damage due to lack of attention to camera security and non-compliance with security filters and lack of access to cameras. * Set security filters and restrict access so that no ordinary person can access the live control menu and direct camera playback. * An attacker can collaborate with a group of offenders and, by abusing live broadcast, can control all inputs and outputs and may manipulate to make it easier for the offending group. This is an example of an operation that can benefit from this damage. * With Google Hacking and other search engines, you can access the company's cameras by searching for dorks such as (inurl:"/control/userimage.html") and (intext:"© 2001-2020 MOBOTIX AG, Germany · http://www.mobotix.com/"). * Once you've found the camera's IP, you can access the control menu as well as the live streaming of the Target camera by adding the address to the end of the IP address. * You can achieve many goals by expanding dorks. This security flaw has a direct impact not only on virtual security but also on physical security, as mentioned earlier. ### Poc : [+] target/control/userimage.html ### Demo: [+] http://92.82.35.11:8882/control/userimage.html [+] http://194.94.76.134/control/userimage.html [+] http://178.75.212.73/control/userimage.html [+] http://194.164.144.234/control/userimage.html [+] http://85.8.92.1/control/userimage.html [+] http://31.193.25.62:10001/control/userimage.html [+] http://61.115.78.205/control/userimage.html ### Contact Me : * Telegram : @h4shur * Email : h4shursec@gmail.com * Instagram : @netedit0r * twitter : @h4shur