Cameradar
A penetration testing tool that discovers and accesses RTSP video surveillance cameras through network scanning and dictionary attacks.
What is Cameradar?
Cameradar is a penetration testing tool that hacks its way into RTSP video surveillance cameras. It scans networks for RTSP endpoints, identifies camera models, and uses dictionary attacks to brute-force credentials and stream routes. The tool helps security professionals test the security of video surveillance systems by automating the discovery and access process.
Security professionals, penetration testers, and ethical hackers who need to assess the security of RTSP-based video surveillance cameras on networks they own or have permission to test.
Developers choose Cameradar because it provides a specialized, automated solution for RTSP camera security testing that combines network discovery with credential brute-forcing in a single tool. Its Docker-first approach and support for custom dictionaries make it flexible and easy to deploy for targeted security assessments.
Overview
Cameradar hacks its way into RTSP videosurveillance cameras
Use Cases
Best For
- Security assessments of IP camera networks
- Penetration testing of video surveillance systems
- Discovering exposed RTSP streams on internal networks
- Testing default credentials on security cameras
- Automating RTSP endpoint discovery during security audits
- Educational purposes in ethical hacking courses
Not Ideal For
- Network administrators needing comprehensive vulnerability scanning for all services, not just RTSP cameras
- Teams preferring graphical user interfaces for interactive security testing and visualization
- Projects focused on passive, non-intrusive network monitoring without active penetration testing
- Ethical hackers seeking tools with built-in exploits for specific camera vulnerabilities beyond credential guessing
Pros & Cons
Pros
Leverages nmap or masscan to efficiently scan for open RTSP hosts on common ports like 554 and 8554, as shown in the Docker run examples for network targeting.
Detects the specific camera model streaming the RTSP feed, aiding in targeted security assessments and vulnerability mapping.
Allows mounting custom route and credential files via Docker volumes, enabling tailored attacks for specific camera brands, as detailed in the configuration section.
Presents results in a terminal UI and can generate an M3U playlist of discovered streams, providing both human-readable and machine-usable outputs.
Cons
The README outlines a multi-step, dependency-heavy process for Android/Termux setup, indicating that native installation can be cumbersome without Docker.
Relies solely on dictionary-based brute-forcing for credentials and routes, lacking support for more advanced exploitation techniques like zero-day vulnerabilities.
Requires nmap or masscan for discovery, adding setup complexity and potential compatibility issues, especially in restricted environments.
Frequently Asked Questions
Related Projects
ageA simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
legoLet's Encrypt/ACME client and library written in Go
CertMagicAutomatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal
CorazaOWASP Coraza WAF is a golang modsecurity compatible web application firewall library
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.