He's definitely not BSing. Even in IT, I will find that I can access a system, that isn't documented, 10%-30% of the time, using the Default Password for that Model (which you can just Google, by the way). I would imagine that whoever set them up, likely assumed that the Firewall will keep the intruders out, which isn't always the case, of course.

Great one as always OTW! Love your books as well have learned so much from you!

Another amazing video, Yaniv! I especially enjoyed how OTW talked about how a web login can be hardened against brute force, but RTSP has less security, making it a useful attack target. Great stuff 👍💯

Great video Yaniv I love your content. Be safe mate. From Aussie.

This reminds me of that Will Smith and Gene Hackman movie Enemy of the State. Amazing video! I'm looking forward to more! I'd love to hear more about the cyber war against Russia and how round 2 is going!

Wonderful Thanks Yaniv and OccupyTheWeb !

Very cool topic! I'm sure it will be great content indeed!

Question - remote ip streaming rtsp 554 ,me using vlc to view the stream, stop, change my ip via vpn and get a different camera, same remote ip. I don't see any mention of this anywhere on the web. What's happening?

I have got to say.. I've seen OccupyTheWeb on a few channels now and I don't know why but he gives me huge Jeff Bridges vibes with his voice with a mixture of the Dude and Kevin Flynn

Parabéns pelo excelente conteúdo e didática... Uma verdadeira aula de OSINT...

Used to find so many servers and home networks that were unsecured like this back in the days, same as all the very early nanny cams and online trail cams. Some people had no idea at all.

Am watching u guys... Thnkz so much both of u guys ☕👋✌

a surprise. Since I started podcasting. I love the life hack podcast. learn more. We also understand the difficulty a person may experience and the warning messages that may occur. Keep going my friend. Someday it will become your channel. The best channels to learn cyber security . ❤❤❤🎉

Thank You for this information!

You gained another subscriber and I'm interested in your books !!🇧🇷✨

28:18 most amazing part of the video... This hacker is not revealing his true typing speed...

Really intriguing stuff from OTW as usual. Also not totally clear where the line between illegal and legal is, as usual.

אלוף שיחקת אותה שמח שיש אחד ישראלי תמשיך עם הכתוביות 😅 עדיין לא מאסטרים באנגלית

Sending love from Sierra Leone ❤❤

great video sir i learned a lot thank you so much

Greetings to you from Saudi Arabia ❤OTW

Thanks a lot Occupy The Web.... following you from David,Yaniv they u enjoy watching Mr. Rabot it's like me watching your video and get Skills

Great video thanks

can i take my ip camera knowing the IP and MAC address and take it off the cloud storage

Nice one

Great video!!! But if my cameras don't appear on Shodan, what does it mean?? They use others protocols??

great video!

Master OTW!!

I want to learn how to see the video stream cause, with my own cameras i cannot see my camera outside the icsee app

Thankyou so much for this

the master is here 😊

Hello Yaniv, when i type "sudo apt install docker" i have an error about Docker "Package docker is not available, but is referred to by another package and the following packages replace is: wmdocker" ... Whats wrong ? Cheers and thanks

Thanks Yavi

Can you do a payload creation obfuscation vedio with otw mayb focusing on av evasion like that

Always good to listen to three_cube talking about hacking!

Pls Make more video on ip camera hacking

Isn't using password lists to hack into someone's camera illegal? I'm not trying to be the cops, but I'm wondering for my own self, if I try this stuff out (to later understand if my stuff is secure), and I'm finding some camera IP on the internet and then basically guessing someone's default password and getting in, isn't that illegal? Sure the password was easy, but just like if you pick someone's front door lock with a paperclip, even if they have a very cheap front door lock, isn't that still illegal? What makes it legal/illegal?

we would love a subscription sale offer for H-A , just saying

Don’t stop! More OTW

Nice Sir. New Subscriber 24,5k :D

MOST security integrators (the actual installers) are uneducated, unguided and or mislead in network security on top of the fact that they generally don't care. They're paid to slap cameras in , and they do that with the least resistance possible i.e. default creds among many other things. I would say all, but this is likely wrong as I have not touched every brand of camera on the planet (But I have touched the vast majority of the big brands) cannot have their default admin user removed or changed, Axis for example, prevents you from doing this so you will always find root in the user list. You can also find out a LOT of information about the camera by looking at the model number, they bake a lot of info about the device into it. Like the one he showed DH-SD(speed dome)5(5inch)9 (IR speed dome) 230( 2MP 30x optical zoom) U (unsure here,) HNI ( High speed ,network, intelligent).

your israeli accent is actually easier to understand than american accent :)

3:15 Q: Google search. So ip cameras can rank on Google? I mean I know they do but you know how when you have a website and you have to activate to let the Google bot crawl your website to index it so that its included in Google searches... so who would activate the Google bot to crawl through the camera IP to index it? I want to know how it gets in Google database...

This voice is so similiar which I listen in David channel

Very interesting! What I don't understand; how secure is this for the hacker? I mean, doing this over plain internet is easy to backtrace to the hacker. Is Kali enough to be secure or do you need other securymeasures as well?

Niceeee ❤❤❤ 💯

thanks!

Did I just stumble on the Israeli David Bombal? סבבה

Please Make Video On Kali Linux to Synology NAS Hack Vulnerabilities, Password Bypass etc.

Yes i have all of them books ❤

Creating ground level project to show skills for each LLM Agents. Be a judge? 1. CodeCraft Duel: Super Agent Showdown 2. Pixel Pioneers: Super Agent AI Clash 3. Digital Duel: LLM Super Agents Battle 4. Byte Battle Royale: Dueling LLM Agents 5. AI Code Clash: Super Agent Showdown 6. CodeCraft Combat: Super Agent Edition 7. Digital Duel: Super Agent AI Battle 8. Pixel Pioneers: LLM Super Agent Showdown 9. Byte Battle Royale: Super Agent AI Combat 10. AI Code Clash: Dueling Super Agents Edition

מלך

hi there how will i hack cctv near back yard

What do I do to hack a specific camera ???

ואוו הבאת את OTW מרשים!

according to subtitles, website was created 1520 years ago

Spanish translate... thanks you❤

"Hundreds if not thousands of cameras" That is odd, only found 19 cameras

Shalom alechem!

Could you please adjust the focus on your video recording? The blurring does not do justice to the quality of the instruction being passed on and makes it difficult to follow along.

היי יניב, איך אני יכול לבצע חיפוש של כתובות אייפי של מצלמות סביבי ולנסות לחפש חולשות לפריצה?

Get to the Chopper!!!!!

Thumbnail and OTW Attract to see this Video😄

hello yaniv, i have a particular problem with my online works. i found out that my phone is hacked and there is an online tracking app attached to every work i do online. this have retarded most of my works. because they use theses apps to manipulate what i do. my online courses,webiners, businesses and others. i thereby installed some anti hacking apps on my phone, it identify some unknown malicious apps like the 'dark'. my questions or request from you is that how much probability can these people be tracked?

OTW, is very good

Can I buy his books as pdf

Thnx Jeff wink wink

A1

thats ryan montgomery

Hi i want some help from you for hacking

i cant install docker

Is it possibly to see who’s hacking the cameras?

Is hacking super difficult??

אין על הישראלים ימלך

Guys I need help,how to hack ip camera?

I see a lot of cameras with Putin messages - now i know who and why🙊

Well that's kindergarten lesson cuz that's just ip cameras we're talking about, i mean why don't you say the ral powerful tool you know what, which scans the internet, it's way more useful, you can even send specific packets to expect specific response and there are thousand more ways, why you're telling still about kali linux? It's just an operating system with python scripts, not that's not useful but i expect more from a language such as golang of course creating your own tools with AI not the AI you're all saying, but your own AI which you can get very useful ideas from and actually get an idea of an exploit which can be made and done very very fast especially with a language such as golang which is extremely fast. I'm not going to mention more hacks because i feel i gotta have a problem, not because i'm using hacks or exploits and yea i'm not a hacker not even close to a programmer i'm just a user still a user. But i can't minimize the importance of this, give something more extraordinary to the people, even if they don't understand it the results gonna talk and they are gonna get more excited, saying "let's gonna hack an ip camera" who can't do that? Who doesn't know that every single device even computers with specific cpus have vulnerabilities, who doesn't know that? That's why there are patches and updates and all of that. Otherwise we would be doomed. And if you're telling me that you're giving us knowledge to be cyber security right? Why don't you do something good and learn the people the Snort 3, which is VERY VERY VERY VERY easy syntactically right now, very easy guide them through compiling it getting some community rules and even create your own ones, create an alert system which then you're going to connect that alert system with a tcp connection (locally) with a language which you can do stuff like detecting exploits and detecting packets and other stuff maybe include to this wireshark and tcpdump and using the pcap driver to capture packets and identify them programmatically, why you just show off shodan? You know it very well there is a tool specific tool which you can scan all the world yourself so not only banners but you can do a hell of a lot more thinks... I mean give to the people knowledge! that's all i'm asking.

are you from israel? (I guessed from the accent)

(y)

אתה ישראלי? אני מלמדת את עצמי

Generic pfp template u downloaded off Google images

"Master hacker" and the homie uses Google dorking techniques from 2001 lmao. Careful dude, bout to be phased out. Keep up with the times, you're wardialing in 2010 over here, master hacker Edit: Yaniv, your videos are great though, keep em going! If you want some connections for a plumber that actually know their way around a sink, let me know

Го так-же но на русском

Did you just find out , too kid ... ? ?

Hacking IP cameras 🤣🤣🤣

He is lebanese hhhhh

So slow

questions are childish, at least know what youre asking

scam

where i can contact you i need some help please

I don't wanna hack the camera , that's lame , I want to hack the output, I want to change what it's showing on the servers lol for example, if they log in the camera , they see some other video

Absolutely bullshit. As a Dahua/Hikvision Security expert, i know the whole protocol, including their RPC and RTSP Endpoints. RTSP is not a protocol and mostly based on HTTP (headers) and TCP, sometimes also extended as UDP. Hacking Dahua-Cameras on 37777 is very easy and doesnt even require a valid login since session hijacking is still possible in 2023 (including firmware updates until end of 2022). Everyone who describe himself as an hacker using shodan and brute forcing, is not a hacker. Also shodan returns more results using RTSP has_screenshot:true. Beside of that it doesn't show channels, only main images of RTSP. That's like basic knowledge from an IT Student after 2 weeks. Edit: RTSP for Dahua cams also locks out after the same attempts, since the security layer is placed far behind the output encoders. Also saying that you got hired by ukraine goverment for hacking cams using bruteforcing is absolutely a lie and doesn't make you a hacker at all. A real "hacker" code their own exploits and tools and won't use windows or kali. Kali is nothing but an outdated filled up linux distro having public tools like msf. Funny how my comment get deleted over and over agian.

rtspbrute is faster