Skip to content

Latest commit

 

History

History
148 lines (105 loc) · 4.62 KB

README.en.md

File metadata and controls

148 lines (105 loc) · 4.62 KB
Raw
Ingram
Platform Python Version GitHub Github Checks GitHub Last Commit (master) Languages Count

English | 简体中文

Intro

This is a web camera device vulnerability scanning tool, which already supports Hikvision, Dahua and other devices

run

Installation

There are still bugs running on windows, so linux or mac is recommended. Please make sure you have installed Python >= 3.7

  • Firstly, clone this repo:
git clone https://github.com/jorhelp/Ingram.git
  • Then, go to the repo dir, create a virtual environment and activate it:
cd Ingram
pip3 install virtualenv
python3 -m virtualenv venv
source venv/bin/activate
  • After that, install dependencies:
pip3 install -r requirements.txt

So far, it has been installed!

Run

  • Since it is configured in a virtual environment, pls activate the virtual environment before each running

  • You need to prepare an object file, let's name it input, which contains the targets that will be scanned. The input file content can be:

# use '#' to comment

# single ip
192.168.0.1

# ip with a port
192.168.0.2:80

# ip segment ('/')
192.168.0.0/16

# ip segment ('-')
192.168.0.0-192.168.255.255
  • With the input, we start scanning:
python run_ingram.py -i input -o output
  • If you specified the port like: x.x.x.x:80, then the 80 port will be scanned, otherwise common ports will be scanned(defined in Ingram/utils/config.py). And you can also override it with the -p argument such as:
python run_ingram.py -i input -o output -p 80 81 8000
  • The number of coroutines can be controlled by the -t argument:
python run_ingram.py -i input -o output -t 300
  • all arguments：
optional arguments:
  -h, --help            print help info
  -i IN_FILE, --in_file IN_FILE
                        the input file
  -o OUT_DIR, --out_dir OUT_DIR
                        the output file
  -p PORT [PORT ...], --port PORT [PORT ...]
                        port
  -t TH_NUM, --th_num TH_NUM
                        coroutines number
  -T TIME_OUT, --time_out TIME_OUT
                        time out
  --debug               debug

Port scanner

  • We can use powerful port scanner to obtain active hosts, thereby reducing the scanning range of Ingram and improving the running speed. The specific method is to organize the result file of the port scanner into the format of ip:port and use it as the input file of Ingram

  • Here is a brief demonstration of masscan as an example (the detailed usage of masscan will not be repeated here).

  • First, use masscan to scan the surviving host on port 80 or 8000-8008 (you sure can change the port anything else if you want): masscan -p80,8000-8008 -iL INPUT -oL OUTPUT --rate 8000

  • After masscan is done, sort out the result file: grep 'open' OUTPUT | awk '{printf"%s:%s\n", $4, $3} > input'

  • Then, start your show: python run_ingram.py -i input -o output

Output

.
├── not_vulnerable.csv
├── results.csv
├── snapshots
└── log.txt
  • results.csv contains the vulnerable devices: ip,port,device-type,user,passwd,vul:
Ingram

  • not_vulnerable.csv contains the not vulnerable devices

  • snapshots contains some snapshots of a part of devices (not all device can have a snapshot!!!):

Ingram

Thanks & Reference

Thanks to Aiminsun for CVE-2021-36260
Thanks to chrisjd20 for hidvision config file decryptor
Thanks to mcw0 for DahuaConsole