Re: Webcams

["rajat swarup" <rajats () gmail com>]

On 8/25/07, Jan Heisterkamp <janheisterkamp () web de> wrote:
> Why don't you query the webcamserver or for webcamserverfiles?
> You can find, only for example,  webcams in the internet with a simple
> googling for example with inurl:/view/index.shtml or
> inurl:"ViewerFrame?Mode="...this won't help you in  your case, but you
> have admin rights, you should be able to find them..you don't need a
> scanner for this job.
>
> Richard Lane schrieb:
> > You could try GFi LANGuard's Network Security Scanner -
> > http://www.gfi.com/lannetscan/ .  IT allows you to remotely query the
> > machine's to determine a wide range of info - including installed software,
> > registry settings, USB devices (currently and previously connected).  I've
> > just used it to audit our infrastructure (around 700 devices) and a client
> > (around 3000 devices), and it highlighted a number of people running webcams
> > (amongst other unauthorised stuff, which NSS is great for identifying).
> >
> >
> > -----Original Message-----
> > From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
> > Behalf Of Holstein, Robert - BLS CTR
> > Sent: 24 August 2007 06:27
> > To: pen-test () securityfocus com
> > Subject: Webcams
> >
> > Does anyone have a method for remotely detecting webcams installed on
> > Windows hosts?  I have the need to conduct an audit to find out if
> > certain staff are using webcams. I may have administrative rights to the
> > targets remotely, but no physical, or console access.
> > Any input would be appreciated.
> >
> > Robert C. Holstein

Hi Robert,
I'm not an expert on WMI but maybe this might be of some help to you.

http://packages.debian.org/unstable/python/wmi-client

Are you sure that all webcams would be definitely using WMI interface
only?  I've seen that some scanners don't use it.  May be it's worth
researching.
Just my 2 cents.

HTH,
-- 
Rajat Swarup

http://rajatswarup.blogspot.com/

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------