"Hack" eBay camera to get access to videostream?

burton666
Posts: 106
Joined: Monday 17 August 2015 21:25
Target OS: Raspberry Pi
Domoticz version:
Contact:

"Hack" eBay camera to get access to videostream?

Post by burton666 » Sunday 09 April 2017 7:54

I recently bought a cheap ip-camera from ebay but noticed after I recieved it that you had to use android/ios apps to get access to it. And after reading the ebay info again it actually says that it is only compatible with Android/IOS.

http://www.ebay.com/itm/360-Degree-960P ... mDhjvnn-eQ

After setting up the wifi from the app I thought that it would be easy to log in using port 8080, 80 or similar and just find the correct path to the videostream.
I have done a portscan and port 80 and 23 is open and I also found that port 22334 is used from spying on the packets from my android phone.

I tried a lot of paths using iSpys camera url generator but none of them work. if I just enter <IP>:80 in a browser I get a file downloaded witch contains only this: "<H1>Index of /mnt/web/</H1>"
I also tried hydra on the telnet port 23 using some camera password-lists from github. But it takes forever to complete. I also tried all random telnet user/pass combinations I could think of like: admin:admin, admin:(blank), root:root, etc.

Anyone knows how I should proceed? And would access to telnet get me anywhere? My goal is to be able to get the videostream by URL so that I can add it in some camera software.
When capturing the packets from the app the trafik was pretty big, like ~1Mb for around 30s of capturingtime so I guess that that port 22334 is probably used for the videostream.

On the box it says: 360Eye S
Model: EC11-I6

And when trying to log in using telnet this comes up:
IPC365 Login:

kubrik
Posts: 54
Joined: Wednesday 30 November 2016 16:07
Target OS: Raspberry Pi
Domoticz version:
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by kubrik » Sunday 09 April 2017 9:57

Try if Onvif device manager detects it:
https://sourceforge.net/projects/onvifdm/

If it does..you can retrieve streaming url.

freijn
Posts: 387
Joined: Friday 23 December 2016 17:40
Target OS: Raspberry Pi
Domoticz version:
Location: Netherlands Purmerend
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by freijn » Sunday 09 April 2017 10:39

Very interested in your findings / progress.

I have the same issue with a Digoo camera with same behaviour :-(

https://www.facebook.com/DigooTeam/

tjabas
Posts: 177
Joined: Sunday 11 December 2016 14:51
Target OS: Raspberry Pi
Domoticz version:
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by tjabas » Sunday 09 April 2017 11:28

kubrik wrote:Try if Onvif device manager detects it:
https://sourceforge.net/projects/onvifdm/

If it does..you can retrieve streaming url.
Hi!

i also have the same problem with 2 cheap china ip cameras, i have installed the onvif device manager and it picks up the 2 cameras as a onvif device, but how can i see what url the camera uses for the stream?

kubrik
Posts: 54
Joined: Wednesday 30 November 2016 16:07
Target OS: Raspberry Pi
Domoticz version:
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by kubrik » Sunday 09 April 2017 11:53

Under the stream video you can see the streaming url:

ipcam.png
ipcam.png (106.29 KiB) Viewed 15470 times

IDANIT
Posts: 86
Joined: Saturday 07 November 2015 11:01
Target OS: Raspberry Pi
Domoticz version: Beta
Location: Poland
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by IDANIT » Tuesday 11 April 2017 16:20

I found the streaming url, put it in to Domoticz... but still no videostream in Domoticz. Digoo DG-M1Q Onvif Camera
Domoticz (4).png
Domoticz (4).png (24.61 KiB) Viewed 15402 times

SweetPants
Posts: 2287
Joined: Friday 12 July 2013 21:24
Target OS: Linux
Domoticz version: V4.10069
Location: The Netherlands
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by SweetPants » Tuesday 11 April 2017 16:36

I'm not sure if domotics supports rtsp:// for the URL. Http only i think
Last edited by SweetPants on Tuesday 11 April 2017 16:38, edited 1 time in total.
Ubuntu 16.04.5 LTS, Intel NUC, MySensors 2.3.0-alpha, Pro Mini 3.3/8M RFM69(HW), ESP8266 (SDK2.2.0), Sonoff, RFLink, RFXcom, MQTT, NodeRed, Domoticz Beta (from source)

User avatar
emme
Posts: 901
Joined: Monday 27 June 2016 11:02
Target OS: Raspberry Pi
Domoticz version: latest
Location: Milano, Italy
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by emme » Tuesday 11 April 2017 16:38

domoticz does not support streams, but snapshot...

look for the snapshot link and use it in the camera config
The most dangerous phrase in any language is:
"We always done this way"

IDANIT
Posts: 86
Joined: Saturday 07 November 2015 11:01
Target OS: Raspberry Pi
Domoticz version: Beta
Location: Poland
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by IDANIT » Tuesday 11 April 2017 17:29

Where can I Find this snapshot link?

SweetPants
Posts: 2287
Joined: Friday 12 July 2013 21:24
Target OS: Linux
Domoticz version: V4.10069
Location: The Netherlands
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by SweetPants » Tuesday 11 April 2017 18:55

IDANIT wrote:Where can I Find this snapshot link?
In the manual of your camera
Ubuntu 16.04.5 LTS, Intel NUC, MySensors 2.3.0-alpha, Pro Mini 3.3/8M RFM69(HW), ESP8266 (SDK2.2.0), Sonoff, RFLink, RFXcom, MQTT, NodeRed, Domoticz Beta (from source)

kubrik
Posts: 54
Joined: Wednesday 30 November 2016 16:07
Target OS: Raspberry Pi
Domoticz version:
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by kubrik » Wednesday 12 April 2017 1:05

These cheap cameras probably don't have any snapshot url (like mine).
You can use "motion" ( https://www.domoticz.com/wiki/Camera_Se ... ion_sensor ) to detect motion and then run another script to take snapshots or saving stream video.

astolat
Posts: 1
Joined: Sunday 16 April 2017 4:20
Target OS: OS X
Domoticz version:
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by astolat » Sunday 16 April 2017 4:24

I have the M1Q camera working with the following URL:

rtsp://USERNAME:PASSWORD@CAMERA_IP/onvif1

(onvif2 also works with smaller video)

The username defaults to admin (I haven't found a way to change it) and the default password is 20160404. You can change the password in the app.

I can access this from VLC; had some issues opening the stream with Open CV in Python 3, but was able to get it open with pyav.

SweetPants
Posts: 2287
Joined: Friday 12 July 2013 21:24
Target OS: Linux
Domoticz version: V4.10069
Location: The Netherlands
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by SweetPants » Monday 17 April 2017 13:41

astolat wrote:I can access this from VLC; had some issues opening the stream with Open CV in Python 3, but was able to get it open with pyav.
Still leaves the question "Can I use it with Domoticz?" I think the answer is "NO"
Ubuntu 16.04.5 LTS, Intel NUC, MySensors 2.3.0-alpha, Pro Mini 3.3/8M RFM69(HW), ESP8266 (SDK2.2.0), Sonoff, RFLink, RFXcom, MQTT, NodeRed, Domoticz Beta (from source)

bobMERHI
Posts: 1
Joined: Tuesday 23 May 2017 23:11
Target OS: Raspberry Pi
Domoticz version:
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by bobMERHI » Tuesday 23 May 2017 23:45

burton666 wrote:I recently bought a cheap ip-camera from ebay but noticed after I recieved it that you had to use android/ios apps to get access to it. And after reading the ebay info again it actually says that it is only compatible with Android/IOS.

http://www.ebay.com/itm/360-Degree-960P ... mDhjvnn-eQ

After setting up the wifi from the app I thought that it would be easy to log in using port 8080, 80 or similar and just find the correct path to the videostream.
I have done a portscan and port 80 and 23 is open and I also found that port 22334 is used from spying on the packets from my android phone.

I tried a lot of paths using iSpys camera url generator but none of them work. if I just enter <IP>:80 in a browser I get a file downloaded witch contains only this: "<H1>Index of /mnt/web/</H1>"
I also tried hydra on the telnet port 23 using some camera password-lists from github. But it takes forever to complete. I also tried all random telnet user/pass combinations I could think of like: admin:admin, admin:(blank), root:root, etc.

Anyone knows how I should proceed? And would access to telnet get me anywhere? My goal is to be able to get the videostream by URL so that I can add it in some camera software.
When capturing the packets from the app the trafik was pretty big, like ~1Mb for around 30s of capturingtime so I guess that that port 22334 is probably used for the videostream.

On the box it says: 360Eye S
Model: EC11-I6

And when trying to log in using telnet this comes up:
IPC365 Login:
hi,
i 've been playing with my IPC365 yesterday night.
and i found 5 ports open

23/tcp
80/tcp
9527/tcp
22334/tcp
34567/tcp


go ahead and download CMS from the link below
http://www.colincctv.com/Upload/%E8%B5% ... r%20PC.zip
add the device using the ip address given by your dhcp
use the port 34567
username : admin password: 123456
you will only connect to main stream
aswell you can login to configuration and change many other paramenters.

Hope this helps you
Attachments
configure ip360 on cms.jpg
configure ip360 on cms.jpg (132.11 KiB) Viewed 14671 times
3437DF36-2711-42E7-B31C-7B98042C6CED.JPG
3437DF36-2711-42E7-B31C-7B98042C6CED.JPG (388.36 KiB) Viewed 14671 times

burton666
Posts: 106
Joined: Monday 17 August 2015 21:25
Target OS: Raspberry Pi
Domoticz version:
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by burton666 » Wednesday 24 May 2017 15:48

@bobMERHI
Wow, thanks. Have you also managed to figure out what url to use to get access to video/snapshot?

burton666
Posts: 106
Joined: Monday 17 August 2015 21:25
Target OS: Raspberry Pi
Domoticz version:
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by burton666 » Wednesday 24 May 2017 17:41

I tried using wireshark but could not find anything useful. Here is the file if someone more skilled than me would like to check.
https://ufile.io/7isve

MrGee
Posts: 16
Joined: Thursday 04 September 2014 16:51
Target OS: Raspberry Pi
Domoticz version: 3.5837
Location: NL
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by MrGee » Wednesday 31 May 2017 15:35

I've been thinking, to me it sounds impossible to have a url for this device, let me explain.

The device runs on 4 x AA batteries, ergo having this on 24/7 would drain them pretty quickly
I suspect the pushbutton(1) activates the wifi which in turn (likely) sends a push notification to the Digoo server (and notifies the phone),
starts the stream & recording..

Hacking this would likely be a similar solution as the amazon dash buttons (i would expect)

Please note i'm just a noob on this subject, i might be wrong :D

burton666
Posts: 106
Joined: Monday 17 August 2015 21:25
Target OS: Raspberry Pi
Domoticz version:
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by burton666 » Friday 02 June 2017 16:05

I think you replied to the wrong thread? This camera is powered by USB

munkiepus
Posts: 3
Joined: Tuesday 13 June 2017 13:16
Target OS: OS X
Domoticz version:
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by munkiepus » Tuesday 13 June 2017 13:20

Hi

Ive got the same camera, with the same problem.

Does getting it running in CMS give any hint as to if it's An OVNIF, RTSP or mjpeg stream, (or something else) I can't use the CMS software as I'm on a Mac.

Thanks

kentnguyen
Posts: 1
Joined: Wednesday 28 June 2017 7:49
Target OS: OS X
Domoticz version:
Contact:

Re: "Hack" eBay camera to get access to videostream?

Post by kentnguyen » Wednesday 28 June 2017 7:56

SUCCESS! :D

Based on the info above, i have able to view this 360 camera (same as what burton666 bought) to my iOS viewer app.
So i have all my cameras in one place. Of course the downside is that I can only view the stream as a circular blob instead of pan&tilt 360 video.

The iOS i'm using is IP Cam Viewer Pro, available for both iOS and Android https://itunes.apple.com/vn/app/ip-cam- ... 56416?mt=8

I don't think there is a HTTP stream or URL that can be accessed. But this is good enough for my personal use.
Attachments
IMG_0271.PNG
IMG_0271.PNG (282.81 KiB) Viewed 13831 times
IMG_0270.PNG
IMG_0270.PNG (292.62 KiB) Viewed 13831 times

Post Reply

Who is online

Users browsing this forum: No registered users and 2 guests