id: xp-webcam

info:
  name: XP Webcam Viewer Page
  author: aashiq
  severity: medium
  description: Searches for exposed webcams by querying the /mobile.html endpoint and the existence of webcamXP in the body.
  metadata:
    max-request: 1
  tags: webcam,iot

http:
  - method: GET
    path:
      - "{{BaseURL}}/mobile.html"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "webcams and ip cameras server for windows"
        part: body

      - type: word
        words:
          - "Please provide a valid username/password to access this server."
        part: body
        negative: true

# digest: 4a0a00473045022100a435ebb71da78f120da21b3a41e2dc738c4a89d58184864b14162c511961cf9902205e84e119bca58b017260c792c99fafd18f2dd0e414e439d119bad04929610fd2:922c64590222798bb761d5b6d8e72950