Opporturnities from having my cams hacked!

[sofducas]

Recently got my cams hacked,first thing first, I have disconnected my cams from internet.

Fortunately, no damage that i can see. Only one cam (the Hikvision's one ) got reset to defaults which prevented the cam being further hacked, by being then disconnected from the local network (by getting the IP restored to inital IP).

So got a Hikvision and Avtech IP cams... all of them have older firmware which have security issues.

But I never dared to upgrade the firmware, as once, I got one cam bricked (Avtech) and it seems there are no known solution to unbrick an AVTECH cam. I was lucky it was still in warranty.

So I went to look on internet and tried to hack my own cameras to check how safe I was.
And that was is interesting.

First of all, i was able to run 'root' commands on my AVTECH commands from scripts.
Then I found out that i was able to enable TELNET on my old AVTECH cams.
Then that I could enable a FTP server too and download scripts (only in http) with WGET.

Wow! A bit like when the WII was hacked.

THE BEST: Now I can mod/hack my cam to put scripts, change html codes, etc...now we can somehow create our own programs.

THE WORST: Those security issues are also a big problem since a hacker can found out the same stuffs as I did and can use my cams as a server to perform other evil tasks, or use it as a bot.

.... what's next with all these objects connected to Internet?

 

[alastairstevenson]

THE WORST: Those security issues are also a big problem since a hacker can found out the same stuffs as I did and can use my cams as a server to perform other evil tasks, or use it as a bot.

Welcome to the IoT botnet herder world. Millions out there for rent.

 

[weigle2]

Simply deny access to the Internet, inbound and outbound, of all your cameras and NVR. Then setup VPN Server in your router and connect this way to view cameras and NVR. Make sure you disable uPnP in the router, so none of the devices can re-enable things. like phoning home.