Created
July 25, 2014 14:26
-
-
Save achillean/a45351496736ef389b9f to your computer and use it in GitHub Desktop.
An updated version of the camscan.py script to search Shodan for webcams. This script uses the new Shodan API documented at https://developer.shodan.io as well as the new search_cursor() method to easily iterate over results.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
import shodan | |
import socket | |
# Configuration options | |
API_KEY = 'YOUR API KEY' | |
SEARCH_QUERY = 'netcam' | |
CONNECTION_TIMEOUT = 1.5 | |
def is_camera(ip_str): | |
"""Check whether the given IP operates a valid webcam by checking for the existence of a URL.""" | |
try: | |
# Connect to the camera | |
sock = socket.socket(socket.AF_INET,socket.SOCK_STREAM) | |
sock.settimeout(CONNECTION_TIMEOUT) | |
sock.connect((ip_str,80)) | |
sock.send('GET /anony/mjpg.cgi HTTP/1.0\r\n\r\n') | |
res = sock.recv(100) | |
if(res.find('200 OK') > 0): | |
return True | |
return False | |
except: | |
return False | |
if __name__ == '__main__': | |
# Setup the Shodan API connection | |
api = shodan.Shodan(API_KEY) | |
with open('cameras.txt', 'w') as fout: | |
try: | |
# Search Shodan for the camera and iterate over the results | |
for banner in api.search_cursor(SEARCH_QUERY): | |
if is_camera(banner['ip_str']): | |
data = 'http://%s/anony/mjpg.cgi' % banner['ip_str'] | |
print(data) | |
fout.write(data + '\n') | |
except Exception, e: | |
print('Error: %s' % str(e)) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment