Attention!
Use this tool wisely and not for evil. To get the best performece of this tool you need to pay for shodan to get full API access Options –limit and –offset may need a paying API key and consume query credits from your Shodan account.
Shodanwave is a tool for exploring and obtaining information from cameras specifically Netwave IP Camera. The tool uses a search engine called shodan that makes it easy to search for cameras online.
What does the tool to? Look, a list!
+ Search
+ Brute force
+ SSID and WPAPSK Password Disclosure
+ E-mail, FTP, DNS, MSN Password Disclosure
+ Exploits
This is an example of shodan wave running, the password was not found through raw force so the tool tries to leak the camera’s memory. If the tool finds the password it does not try to leak the memory.
Dependencies:
+ python2.7
+ shodan apikey https://www.shodan.io/
Usage:
git clone https://github.com/fbctf/shodanwave && cd shodanwave pip install -r requirements.txt create user.txt (for dictionary user) create password.txt (for dictionary password) python shodanwave.py -u user.txt -w password.txt -k (your shodan api key)
Source: https://github.com/fbctf