id: liveview-axis-camera info: name: AXIS Network Camera Live View - Detect author: dhiyaneshDK,f1she3 severity: info description: AXIS Network Camera live view was detected. reference: - https://www.exploit-db.com/ghdb/6843 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N cvss-score: 0.0 cwe-id: CWE-200 tags: axis,network,edb,iot requests: - method: GET path: - '{{BaseURL}}/view/viewer_index.shtml' - '{{BaseURL}}/pics/logo_70x29px.gif' host-redirects: true max-redirects: 2 stop-at-first-match: true matchers-condition: or matchers: - type: dsl name: stream-view dsl: - 'contains(tolower(body), "live view - axis")' - 'contains(tolower(body), "live view - axis")' condition: or - type: dsl name: logo dsl: - 'status_code == 200' - '"1106649083" == mmh3(base64_py(body))' condition: and extractors: - type: regex part: body group: 1 regex: - 'AXIS (.*) Network Camera' # Enhanced by md on 2023/03/08