{"id":611,"date":"2021-10-16T21:15:21","date_gmt":"2021-10-16T12:15:21","guid":{"rendered":"https:\/\/rfsec.ddns.net\/db\/?p=611"},"modified":"2021-10-17T07:43:06","modified_gmt":"2021-10-16T22:43:06","slug":"%e3%83%8d%e3%83%83%e3%83%88%e3%83%af%e3%83%bc%e3%82%af%e3%82%ab%e3%83%a1%e3%83%a9-atom-cam2%e3%81%a7%e9%81%8a%e3%81%b6","status":"publish","type":"post","link":"https:\/\/rfsec.ddns.net\/db\/?p=611","title":{"rendered":"\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30ab\u30e1\u30e9 ATOM Cam2\u3067\u904a\u3076"},"content":{"rendered":"\n

AT<\/a>OM Cam2<\/a>\u306f\u3001\u9632\u6c34\u3068\u306a\u3063\u3066\u3044\u3066\u5c4b\u5916\u306b\u3082\u8a2d\u7f6e\u3067\u304d\u305d\u3046\u306a\u306e\u3067\u3001\u6d41\u661f\u306e\u9332\u753b\u30fb\u89b3\u6e2c\u5411\u304d\u304b\u3082\u3057\u308c\u306a\u3044\u3002<\/p>\n\n\n\n

\n
\n
\"\"<\/figure>\n<\/div>\n<\/div>\n\n\n\n

\u3053\u3061\u3089\u306e\u30d6\u30ed\u30b0\u3092<\/a>\u53c2\u7167\u3057\u3066\u5fc5\u8981\u306a\u30d5\u30a1\u30a4\u30eb\u3092\u9332\u753b\u7528\u306eSD\u30ab\u30fc\u30c9\u3078\u914d\u7f6e\u3059\u308b\u3060\u3051\u3067\u3001telnet\/ftp\/rtsp\u3092\u5229\u7528\u3067\u304d\u308b\u3002<\/p>\n\n\n\n

\u914d\u7f6e\u306e\u624b\u9806\u306a\u3069\u306f\u3001\u3053\u3061\u3089\u306egithub\u306b<\/a><\/p>\n\n\n\n

\u30d5\u30a1\u30a4\u30eb\u3092\u914d\u7f6e\u3057\u3066\u30ab\u30e1\u30e9\u3092reboot\u3057\u3001\u3068\u308a\u3042\u3048\u305anmap\u3067OS,\u30b5\u30fc\u30d3\u30b9\u306e\u60c5\u5831\u3092\u8868\u793a\u3057\u3066\u307f\u308b\u3002<\/p>\n\n\n\n

<\/p>\n\n\n\n

$ sudo nmap -O 192.168.68.74\nStarting Nmap 7.70 ( https:\/\/nmap.org ) at 2021-10-16 21:05 JST\nNmap scan report for 192.168.68.74\nHost is up (0.010s latency).\nNot shown: 998 closed ports\nPORT   STATE SERVICE\n21\/tcp open  ftp\n23\/tcp open  telnet\nMAC Address: 7C:DD:E9:01:F0:F1 (Atom Tech)\nDevice type: general purpose\nRunning: Linux 2.6.X|3.X\nOS CPE: cpe:\/o:linux:linux_kernel:2.6 cpe:\/o:linux:linux_kernel:3\nOS details: Linux 2.6.32 - 3.10\nNetwork Distance: 1 hop\n\n$ nmap -A 192.168.68.74\nStarting Nmap 7.70 ( https:\/\/nmap.org ) at 2021-10-16 21:04 JST\nNmap scan report for 192.168.68.74\nHost is up (0.013s latency).\nNot shown: 998 closed ports\nPORT   STATE SERVICE VERSION\n21\/tcp open  ftp     BusyBox ftpd (D-Link DCS-932L IP-Cam camera)\n23\/tcp open  telnet  BusyBox telnetd\nService Info: Host: Ingenic; Device: webcam; CPE: cpe:\/h:dlink:dcs-932l<\/code><\/pre><\/div>\n\n\n\n
RTSP\u3089\u3057\u3044\u30dd\u30fc\u30c8\u304c\u898b\u3048\u306a\u3044\u304c\u3001\u8aac\u660e\u306b\u3088\u308b\u30688554\/TCP\u3089\u3057\u3044\u306e\u3067\u30dd\u30fc\u30c8\u3092\u6307\u5b9a\u3057\u3066\u3001\u518d\u3073nmap\u3002<\/p>\n\n\n\n
$ sudo nmap -p8554 -A 192.168.68.74\nStarting Nmap 7.70 ( https:\/\/nmap.org ) at 2021-10-16 21:25 JST\nNmap scan report for 192.168.68.74\nHost is up (0.0036s latency).\n\nPORT     STATE SERVICE VERSION\n8554\/tcp open  rtsp    DoorBird video doorbell rtspd\n|_rtsp-methods: OPTIONS, DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE, GET_PARAMETER, SET_PARAMETER\nMAC Address: 7C:DD:E9:01:F0:F1 (Atom Tech)\nWarning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port\nDevice type: general purpose\nRunning: Linux 2.6.X|3.X\nOS CPE: cpe:\/o:linux:linux_kernel:2.6 cpe:\/o:linux:linux_kernel:3\nOS details: Linux 2.6.32 - 3.10\nNetwork Distance: 1 hop\nService Info: Device: webcam<\/code><\/pre><\/div>\n\n\n\n
\u3068\u3044\u3046\u3053\u3068\u3067\u30018554\/TCP\u304c\u7a7a\u3044\u3066\u3044\u308b.<\/p>\n\n\n\n
VLC\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u30c8\u30ea\u30fc\u30e0\u3092\u958b\u304d\u3001\u3000rtsp:\/\/[IP\u30a2\u30c9\u30ec\u30b9]:8554\/unicast<\/strong>\u3000\u3067\u7121\u4e8b\u52d5\u753b\u3092\u8868\u793a\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u305f\u3002<\/p>\n\n\n\n
\u30d6\u30ed\u30b0\u306b\u3088\u308b\u30688080\/TCP\u3067Web\u30a2\u30af\u30bb\u30b9\u3067\u304d\u3066\u3001\u8a73\u7d30\u306a\u8a2d\u5b9a\u304c\u53ef\u80fd\u3068\u3044\u3046\u3053\u3068\u3060\u304c\u3001ATOM Cam2\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u304c\u9055\u3046\u306e\u304b\u30018080\/TCP\u306f\u958b\u3044\u3066\u3044\u306a\u3044\u3088\u3046\u3060\u3002<\/s><\/p>\n\n\n\n
\u30cf\u30c3\u30af\u306e\u65b0\u30d0\u30fc\u30b8\u30e7\u30f3<\/a>\u304c\u516c\u958b\u3055\u308c\u3066\u3044\u307e\u3057\u305f\u3002\u65b0\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u4e0a\u66f8\u304d\u8a2d\u7f6e\u3057\u3001nmap\u3092\u5b9f\u884c\u3057\u305f\u7d50\u679c\u306f\u3001\u6b21\u306e\u3068\u304a\u308a\u3067\u3057\u305f\u3002\u30d6\u30e9\u30a6\u30b6\u3067 http:\/\/[IP\u30a2\u30c9\u30ec\u30b9]:8080\/cgi-bin\/honeylab.cgi<\/strong> \u3092\u958b\u304f\u3068\u3001\u8a2d\u5b9a\u753b\u9762\u3084\u30b9\u30c6\u30fc\u30bf\u30b9\u304c\u8868\u793a\u3055\u308c\u3001ftp\u3068rtsp\u306e\u6709\u52b9\u5316(ON\/OFF)\u304c\u53ef\u80fd\u3068\u306a\u308a\u307e\u3057\u305f\u3002\u521d\u671f\u72b6\u614b\u3067\u306fftp\/rtsp\u304c\u7121\u52b9\u5316\u3055\u308c\u3066\u3044\u308b\u3002<\/p>\n\n\n\n
PORT     STATE SERVICE\n23\/tcp   open  telnet\n8080\/tcp open  http-proxy\n9999\/tcp open  abyss<\/code><\/pre><\/div>\n\n\n\n
telnet\u3067\u30ed\u30b0\u30a4\u30f3\u3057\u3066(root\/atomcam2)\u3000free\u30b3\u30de\u30f3\u30c9\u3067\u30e1\u30e2\u30ea\u30fc\u5bb9\u91cf\u3092\u78ba\u8a8d\u3057\u305f\u308975K\u30d0\u30a4\u30c8\u306e\u3088\u3046\u3060<\/p>\n\n\n\n
<\/p>\n\n\n\n
 telnet 192.168.68.74\nTrying 192.168.68.74...\nConnected to 192.168.68.74.\nEscape character is '^]'.\n\nIngenic login: root\nPassword:\n\n[root@Ingenic:~]# free\n             total         used         free       shared      buffers\nMem:         75084        55300        19784            0          200\n-\/+ buffers:              55100        19984\nSwap:            0            0            0\n\n# df -h\nFilesystem                Size      Used Available Use% Mounted on\n\/dev\/root                 3.6M      3.6M         0 100% \/\ntmpfs                    36.7M      8.0K     36.7M   0% \/dev\ntmpfs                    36.7M      9.8M     26.9M  27% \/tmp\ntmpfs                    36.7M      4.0K     36.7M   0% \/run\nmedia                    36.7M         0     36.7M   0% \/media\n\/dev\/mtdblock3            3.6M      3.6M         0 100% \/system\n\/dev\/mtdblock6          384.0K    120.0K    264.0K  31% \/configs\n\/dev\/mmcblk0p1           29.1G      1.1G     28.0G   4% \/media\/mmc\n\/dev\/mmcblk0p1           29.1G      1.1G     28.0G   4% \/tmp\/mmc\ntmpfs                    36.7M      9.8M     26.9M  27% \/bin\/busybox\ntmpfs                    36.7M      9.8M     26.9M  27% \/bin\n\/dev\/loop0               45.2M     40.1M      2.0M  95% \/tmp\/newroot\ntmpfs                    36.7M      9.8M     26.9M  27% \/etc\/passwd\ntmpfs                    36.7M      9.8M     26.9M  27% \/etc\/shadow\n\/dev\/loop0               45.2M     40.1M      2.0M  95% \/tmp\/newroot\/mnt\/usr\/lib\n\/dev\/loop0               45.2M     40.1M      2.0M  95% \/usr\n\/dev\/loop0               45.2M     40.1M      2.0M  95% \/usr\/lib<\/code><\/pre><\/div>\n\n\n\n
\u53c2\u7167\u3057\u305f\u30d6\u30ed\u30b0\u306b\u3088\u308b<\/a>\u3068\u3001\u72ec\u81ea\u306e\u30ab\u30fc\u30cd\u30eb\u3067\u8d77\u52d5\u3059\u308b\u3053\u3068\u3082\u53ef\u80fd\u3089\u3057\u3044\u3002\u4eca\u5f8c\u306e\u5c55\u958b\u304c\u697d\u3057\u307f\u3060\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
ATOM Cam2\u306f\u3001\u9632\u6c34\u3068\u306a\u3063\u3066\u3044\u3066\u5c4b\u5916\u306b\u3082\u8a2d\u7f6e\u3067\u304d\u305d\u3046\u306a\u306e\u3067\u3001\u6d41\u661f\u306e\u9332\u753b\u30fb\u89b3\u6e2c\u5411\u304d\u304b\u3082\u3057\u308c\u306a\u3044\u3002 \u3053\u3061\u3089\u306e\u30d6\u30ed\u30b0\u3092\u53c2\u7167\u3057\u3066\u5fc5\u8981\u306a\u30d5\u30a1\u30a4\u30eb\u3092\u9332\u753b\u7528\u306eSD\u30ab\u30fc\u30c9\u3078\u914d\u7f6e\u3059\u308b\u3060\u3051\u3067\u3001telnet\/ftp\/rtsp\u3092\u5229\u7528\u3067\u304d\u308b […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[2,3],"tags":[],"class_list":["post-611","post","type-post","status-publish","format-standard","hentry","category-camera","category-network"],"featured_image_src":null,"author_info":{"display_name":"mars","author_link":"https:\/\/rfsec.ddns.net\/db\/?author=1"},"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/rfsec.ddns.net\/db\/index.php?rest_route=\/wp\/v2\/posts\/611","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rfsec.ddns.net\/db\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rfsec.ddns.net\/db\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rfsec.ddns.net\/db\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rfsec.ddns.net\/db\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=611"}],"version-history":[{"count":5,"href":"https:\/\/rfsec.ddns.net\/db\/index.php?rest_route=\/wp\/v2\/posts\/611\/revisions"}],"predecessor-version":[{"id":621,"href":"https:\/\/rfsec.ddns.net\/db\/index.php?rest_route=\/wp\/v2\/posts\/611\/revisions\/621"}],"wp:attachment":[{"href":"https:\/\/rfsec.ddns.net\/db\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=611"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rfsec.ddns.net\/db\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=611"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rfsec.ddns.net\/db\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=611"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}