rtsp://ip_camera:8001
login admin
password: admin
Check this
Meisort camera ports can be looked over nmap request
nmap -AT4 ip_camera
First of all thanks for the reply friend.
First i tried nmap -AT4 192.168.1.9 and i got
Starting Nmap 7.60 (
Nmap: the Network Mapper - Free Security Scanner ) at 2018-01-09 16:40 GTB Standard Time
Nmap scan report for 192.168.1.9 (192.168.1.9)
Host is up (0.035s latency).
Not shown: 995 closed ports
PORT STATE SERVICE VERSION
23/tcp open telnet
| fingerprint-strings:
| GenericLines:
| CAMERA login:
| CAMERA login: IP CAMERA login:
| GetRequest:
| HTTP/1.0
| CAMERA login:
| Help:
| HELP
| CAMERA login:
| NCP:
| DmdT^@^@^@
| ^@^@^@^A^@^@^@^@^@
| NULL:
| CAMERA login:
| RPCCheck:
| ^@^@(r
| SIPOptions:
| OPTIONS sip:nm SIP/2.0
| Via: SIP/2.0/TCP nm;branch=foo
| From: <sip:nm@nm>;tag=root
| <sip:nm2@nm2>
| Call-ID: 50000
| CSeq: 42 OPTIONS
| Max-Forwards: 70
| Content-Length: 0
| Contact: <sip:nm@nm>
| Accept: application/sdp
| CAMERA login:
| tn3270:
| ^@IBM-3279-4-E
|_ ^YIP CAMERA login:
843/tcp open unknown
| fingerprint-strings:
| DNSStatusRequest, GenericLines, GetRequest, HTTPOptions, Help, JavaRMI, LANDesk-RC, LDAPBindReq, LPDString, NCP, RTSPRequest, TerminalServer, X11Probe, afp:
|_ <cross-domain-policy> <allow-access-from domain="*" to-ports="*" /> </cross-domain-policy>
5050/tcp open mmcc?
7103/tcp open tcpwrapped
8001/tcp open rtsp
| fingerprint-strings:
| FourOhFourRequest:
| HTTP/1.1 404 Not Found
| Server: TAS-Tech IPCam
| Date: Wed, 9 Jan 118 14:40:25 GMT
| Content-Length: 9
| Cache-Control: no-cache
| Found
| GetRequest:
| HTTP/1.1 404 Not Found
| Server: TAS-Tech IPCam
| Date: Wed, 9 Jan 118 14:40:20 GMT
| Content-Length: 9
| Cache-Control: no-cache
| Found
| HTTPOptions:
| HTTP/1.1 405 Method Not Allowed
| Server: TAS-Tech IPCam
| Date: Wed, 9 Jan 118 14:40:30 GMT
| Content-Length: 18
| Cache-Control: no-cache
| Method Not Allowed
| RTSPRequest:
| RTSP/1.0 200 OK
| CSeq: 0
| Server: TAS-Tech Streaming Server V100R001
|_ Public: DESCRIBE, SET_PARAMETER, SETUP, TEARDOWN, PAUSE, PLAY
|_rtsp-methods: DESCRIBE, SET_PARAMETER, SETUP, TEARDOWN, PAUSE, PLAY
3 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at
Nmap Fingerprint Submitter 2.0 :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port23-TCP:V=7.60%I=7%D=1/9%Time=5A54D456%P=i686-pc-windows-windows%r(N
SF:ULL,20,"\xff\xfd\x01\xff\xfd\x1f\xff\xfb\x01\xff\xfb\x03\r\r\nIP\x20CAM
SF:ERA\x20login:\x20")%r(GenericLines,46,"\xff\xfd\x01\xff\xfd\x1f\xff\xfb
SF:\x01\xff\xfb\x03\r\r\nIP\x20CAMERA\x20login:\x20\r\n\r\nIP\x20CAMERA\x2
SF:0login:\x20IP\x20CAMERA\x20login:\x20")%r(tn3270,31,"\xff\xfd\x01\xff\x
SF:fd\x1f\xff\xfb\x01\xff\xfb\x03\r\r\n\^@IBM-3279-4-E\xfb\^YIP\x20CAMERA\
SF:x20login:\x20")%r(GetRequest,32,"\xff\xfd\x01\xff\xfd\x1f\xff\xfb\x01\x
SF:ff\xfb\x03\r\r\nGET\x20/\x20HTTP/1\.0\r\n\r\nIP\x20CAMERA\x20login:\x20
SF:")%r(RPCCheck,19,"\xff\xfd\x01\xff\xfd\x1f\xff\xfb\x01\xff\xfb\x03\r\r\
SF:n\x80\^@\^@\(r\xfe\^\]")%r(Help,26,"\xff\xfd\x01\xff\xfd\x1f\xff\xfb\x0
SF:1\xff\xfb\x03\r\r\nHELP\r\nIP\x20CAMERA\x20login:\x20")%r(SIPOptions,FF
SF:,"\xff\xfd\x01\xff\xfd\x1f\xff\xfb\x01\xff\xfb\x03\r\r\nOPTIONS\x20sip:
SF:nm\x20SIP/2\.0\r\nVia:\x20SIP/2\.0/TCP\x20nm;branch=foo\r\nFrom:\x20<si
SF

:nm@nm>;tag=root\r\nTo:\x20<sip:nm2@nm2>\r\nCall-ID:\x2050000\r\nCSeq:
SF:\x2042\x20OPTIONS\r\nMax-Forwards:\x2070\r\nContent-Length:\x200\r\nCon
SF:tact:\x20<sip:nm@nm>\r\nAccept:\x20application/sdp\r\n\r\nIP\x20CAMERA\
SF:x20login:\x20")%r(NCP,49,"\xff\xfd\x01\xff\xfd\x1f\xff\xfb\x01\xff\xfb\
SF:x03\r\r\nDmdT\^@\^@\^@\x08\x20\x08\x08\x20\x08\x08\x20\x08\x08\x20\x08\
SF:x08\x20\x08\x08\x20\x08\x08\x20\x08\x08\x20\x08\x08\x20\x08\x08\x20\x08
SF:\^@\^@\^@\^A\^@\^@\^@\^@\^@");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port843-TCP:V=7.60%I=7%D=1/9%Time=5A54D456%P=i686-pc-windows-windows%r(
SF:GenericLines,5B,"<cross-domain-policy>\x20<allow-access-from\x20domain=
SF:\"\*\"\x20to-ports=\"\*\"\x20/>\x20</cross-domain-policy>\0")%r(GetRequ
SF:est,5B,"<cross-domain-policy>\x20<allow-access-from\x20domain=\"\*\"\x2
SF:0to-ports=\"\*\"\x20/>\x20</cross-domain-policy>\0")%r(HTTPOptions,5B,"
SF:<cross-domain-policy>\x20<allow-access-from\x20domain=\"\*\"\x20to-port
SF:s=\"\*\"\x20/>\x20</cross-domain-policy>\0")%r(RTSPRequest,5B,"<cross-d
SF

main-policy>\x20<allow-access-from\x20domain=\"\*\"\x20to-ports=\"\*\"
SF:\x20/>\x20</cross-domain-policy>\0")%r(DNSStatusRequest,5B,"<cross-doma
SF:in-policy>\x20<allow-access-from\x20domain=\"\*\"\x20to-ports=\"\*\"\x2
SF:0/>\x20</cross-domain-policy>\0")%r(Help,5B,"<cross-domain-policy>\x20<
SF:allow-access-from\x20domain=\"\*\"\x20to-ports=\"\*\"\x20/>\x20</cross-
SF:domain-policy>\0")%r(X11Probe,5B,"<cross-domain-policy>\x20<allow-acces
SF:s-from\x20domain=\"\*\"\x20to-ports=\"\*\"\x20/>\x20</cross-domain-poli
SF:cy>\0")%r(LPDString,5B,"<cross-domain-policy>\x20<allow-access-from\x20
SF:domain=\"\*\"\x20to-ports=\"\*\"\x20/>\x20</cross-domain-policy>\0")%r(
SF:LDAPBindReq,5B,"<cross-domain-policy>\x20<allow-access-from\x20domain=\
SF:"\*\"\x20to-ports=\"\*\"\x20/>\x20</cross-domain-policy>\0")%r(LANDesk-
SF:RC,5B,"<cross-domain-policy>\x20<allow-access-from\x20domain=\"\*\"\x20
SF:to-ports=\"\*\"\x20/>\x20</cross-domain-policy>\0")%r(TerminalServer,5B
SF:,"<cross-domain-policy>\x20<allow-access-from\x20domain=\"\*\"\x20to-po
SF:rts=\"\*\"\x20/>\x20</cross-domain-policy>\0")%r(NCP,5B,"<cross-domain-
SF

olicy>\x20<allow-access-from\x20domain=\"\*\"\x20to-ports=\"\*\"\x20/>
SF:\x20</cross-domain-policy>\0")%r(JavaRMI,5B,"<cross-domain-policy>\x20<
SF:allow-access-from\x20domain=\"\*\"\x20to-ports=\"\*\"\x20/>\x20</cross-
SF:domain-policy>\0")%r(afp,5B,"<cross-domain-policy>\x20<allow-access-fro
SF:m\x20domain=\"\*\"\x20to-ports=\"\*\"\x20/>\x20</cross-domain-policy>\0
SF:");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port8001-TCP:V=7.60%I=7%D=1/9%Time=5A54D458%P=i686-pc-windows-windows%r
SF

GetRequest,8A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nServer:\x20TAS-Tech
SF:\x20IPCam\r\nDate:\x20Wed,\x209\x20Jan\x20118\x2014:40:20\x20GMT\r\nCon
SF:tent-Length:\x209\r\nCache-Control:\x20no-cache\r\n\r\nNot\x20Found")%r
SF

FourOhFourRequest,8A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nServer:\x20T
SF:AS-Tech\x20IPCam\r\nDate:\x20Wed,\x209\x20Jan\x20118\x2014:40:25\x20GMT
SF:\r\nContent-Length:\x209\r\nCache-Control:\x20no-cache\r\n\r\nNot\x20Fo
SF:und")%r(HTTPOptions,9D,"HTTP/1\.1\x20405\x20Method\x20Not\x20Allowed\r\
SF:nServer:\x20TAS-Tech\x20IPCam\r\nDate:\x20Wed,\x209\x20Jan\x20118\x2014
SF::40:30\x20GMT\r\nContent-Length:\x2018\r\nCache-Control:\x20no-cache\r\
SF:n\r\nMethod\x20Not\x20Allowed")%r(RTSPRequest,87,"RTSP/1\.0\x20200\x20O
SF:K\r\nCSeq:\x200\r\nServer:\x20TAS-Tech\x20Streaming\x20Server\x20V100R0
SF:01\r\nPublic:\x20DESCRIBE,\x20SET_PARAMETER,\x20SETUP,\x20TEARDOWN,\x20
SF

AUSE,\x20PLAY\r\n\r\n");
MAC Address: 00:0C:43:90:A4:9E (Ralink Technology)
Device type: general purpose
Running: Linux 2.6.X|3.X
OS CPE: cpe:/o:linux:linux_kernel:2.6 cpe:/o:linux:linux_kernel:3
OS details: Linux 2.6.32 - 3.10
Network Distance: 1 hop
TRACEROUTE
HOP RTT ADDRESS
1 34.66 ms 192.168.1.9 (192.168.1.9)
OS and Service detection performed. Please report any incorrect results at
Nmap OS/Service Fingerprint and Correction Submission Page .
Nmap done: 1 IP address (1 host up) scanned in 59.55 seconds
RTSP request
rtsp://192.168.1.9:8001
login admin
password: admin
does not work, any ideas ?