diff --git a/iot/xp-webcam.yaml b/iot/xp-webcam.yaml new file mode 100644 index 0000000000..f9942032ad --- /dev/null +++ b/iot/xp-webcam.yaml @@ -0,0 +1,26 @@ +id: xp-webcam + +info: + name: XP Webcam Viewer Page + author: aashiq + severity: medium + description: Searches for exposed webcams by querying the /mobile.html endpoint and existance of webcamXP in the body + tags: webcam,iot + +requests: + - method: GET + path: + - "{{BaseURL}}/mobile.html" + + matchers-condition: and + matchers: + - type: word + words: + - "webcams and ip cameras server for windows" + part: body + + - type: word + words: + - "Please provide a valid username/password to access this server." + part: body + negative: true \ No newline at end of file