Script to make checking for default pw cams less tedious

Name
Email
Subject
Comment *
File	Select/drop/paste files here
* = required field	[▶ Show post options & limits] Confused? See the FAQ.

Embed	(replaces files and can be used instead)
Options	Do not bump (you can also write sage in the email field) Spoiler images (this replaces the thumbnails of your images with question marks)
Password	(For file and post deletion.)
Allowed file types: jpg, jpeg, gif, png, webm, mp4 Max filesize is 8 MB. Max image dimensions are 10000 x 10000. You may upload 5 per post.

File: 1425300275407.png (26.08 KB, 929x362, 929:362, link gopher example.png)

Script to make checking for default pw cams less tedious zxc 03/02/15 (Mon) 12:44:35 896857 No.499

I wanted to look for low-hanging cams (default l/p combos) but was too annoyed at all the fucking typing I'd have to do. After playing with a few methods to simplify this, I found the very handy AutoHotkey program, which has a scripting language, and wrote a script that tries the 3 basic l/p combos on the URL that is currently in the clipboard.

http://pastebin.com/x57gK7LD

Instructions are included in the comments of the script. Basically just download AutoHotkey, paste this script in, save, reload the script, and now you can use Win+Z, Win+X and Win+C to automatically open a new tab and try the default login/password combos. Tested with Firefox and Chrome.

Recommend you also get a link grabber such as Link Gopher for Firefox. Pic related. Makes life a lot easier. Just triple-click a line, ctrl+C, then win+z/x/c to try out the defaults. ezpz.

Note that this will not work on cams that don't use the standard HTTP login form. Windows only, too, sorry.

If this helps you, consider tossing me a cam you find using it. I haven't been on IRC yet, but, uh, yeah, I probably will be eventually, heh.

Anonymous 03/03/15 (Tue) 02:58:15 ee0186 No.508

>>499
This is good stuff, I'll try it out in Windows. I was going to get all burly and see if I could make a Linux port thinking that this was a browser extension. Not so much.

There is a similar app for Linux but fucked if I know how to write the appropriate scripts in python.

https://code.google.com/p/autokey/

Updated version: now with multiple URLs zxc 03/03/15 (Tue) 04:50:54 2db3a6 No.511

File: 1425358254331.jpg (13.41 KB, 200x196, 50:49, remember.jpg)

After using this a bit more I made some changes.

- All hotkeys will now work with multiple URLs. 1 per line. All must start with http://. Having a clean list made with Link Gopher or another tool will really speed things up.
- Win+C now runs all 3 default password tests at once. Should probably only use this on 3-4 cam IPs at a time. LOT of extra tabs, heh. Win+Z is now a good way to sniff out a ton of easy admin/(nopass) cams in almost no time flat. You can do this on the Shodan list of 50 in less than 10 minutes now. This makes sorting by city even more useful now, too, because the bottleneck is more just the number of IPs you can get, rather than the time it takes to try logins.
- Separated Firefox and Chrome scripts.

For Firefox v2: http://pastebin.com/bm6DuuCC
For Chrome v2: http://pastebin.com/sC1ieFyQ

>>508
Thanks. Yeah, I was bummed that it wouldn't run on Linux (or Mac). Initially wanted to do a browser extension, but it seemed like more trouble than it was worth. This is a good balance between effort and payoff.

Anonymous 03/03/15 (Tue) 05:30:13 e9593e No.513

wouldn't this be far easier accomplished in a python/perl/ruby script we can easily read? I can't be the only person lol'ing at running random *exes from random chans

Anonymous 03/03/15 (Tue) 06:52:54 61eabc No.514

>>513
Understand qualms about the file downloader (uGet is better anyhow), but AutoHotkey is open source and has been around for 12 years. Was not made on a chan. If you're that paranoid, compile it yourself.

As for the scripts, you can clearly see they aren't malicious. It's like 15 lines of script code and they just launch a browser with IPs stripped from the clipboard.

joe 03/16/15 (Mon) 04:58:49 c636de No.541

File: 1426481929525.png (387.69 KB, 849x678, 283:226, script.PNG)

I didn't want to make a new thread because I don't think it is worthy enough, but I put together a greasemonkey (or Tampermonkey for chrome) script that adds default-password previews for IPs on Shodan. pic related

http://pastebin.com/R1nymQfL

Anonymous 03/16/15 (Mon) 12:08:56 aebadc No.542

>>541
>Didn't think it's worthy enough
What the fuck am I reading? That sounds awesome. Thanks man. Trying now.

Anonymous 03/16/15 (Mon) 17:00:37 51be43 No.545

>>541

Based as ever.