Connext Connect IP Camera - Login Details?

M

McGuywer

Executive Member
Joined
Jun 28, 2006
Messages
8,224
Reaction score
1,527
Location
Infinity and Beyond
Hi There,
Received one of these as a gift:

Smart Wi-Fi 1080P Outdoor Bullet IP Camera – Connex Connect

connexconnect.com connexconnect.com

I can use the camera on my phone on the app, but I would like to stream the footage on my PC.
http://192.168.4.201/main.html, needs a username and password.

Anyone know what might be?


McGuywer $ sudo nmap -AT4 192.168.4.201
Password:
Starting Nmap 7.91 ( https://nmap.org ) at 2020-12-28 15:04 SAST
Nmap scan report for camera (192.168.4.201)
Host is up (0.015s latency).
Not shown: 998 closed ports
PORT STATE SERVICE VERSION
80/tcp open http
| fingerprint-strings:
| FourOhFourRequest:
| HTTP/1.1 401 Unauthorized
| WWW-Authenticate: Digest realm="www-user@ppstrong",qop="auth",nonce="1609160653",opaque="160516063"
| SIPOptions:
| HTTP/1.1 401 Unauthorized
|_ WWW-Authenticate: Digest realm="www-user@ppstrong",qop="auth",nonce="1609160661",opaque="160516039"
6668/tcp open irc?
|_irc-info: Unable to open connection
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.91%I=7%D=12/28%Time=5FE9D7CD%P=x86_64-apple-darwin19.6.0
SF:%r(FourOhFourRequest,82,"HTTP/1\.1\x20401\x20Unauthorized\r\nWWW-Authen
SF:ticate:\x20Digest\x20realm=\"www-user@ppstrong\",qop=\"auth\",nonce=\"1
SF:609160653\",opaque=\"160516063\"\r\n\r\n")%r(SIPOptions,82,"HTTP/1\.1\x
SF:20401\x20Unauthorized\r\nWWW-Authenticate:\x20Digest\x20realm=\"www-use
SF:r@ppstrong\",qop=\"auth\",nonce=\"1609160661\",opaque=\"160516039\"\r\n
SF:\r\n");
MAC Address: 48:46:C1:B4:6A:B2 (Fn-link Technology Limited)
Device type: general purpose
Running: Linux 2.6.X|3.X
OS CPE: cpe:/o:linux:linux_kernel:2.6 cpe:/o:linux:linux_kernel:3
OS details: Linux 2.6.32 - 3.10
Network Distance: 1 hop

TRACEROUTE
HOP RTT ADDRESS
1 15.07 ms camera (192.168.4.201)

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 187.47 seconds
McGuywer$
 
McGuywer said:
Hi There,
Received one of these as a gift:

Smart Wi-Fi 1080P Outdoor Bullet IP Camera – Connex Connect

connexconnect.com connexconnect.com

I can use the camera on my phone on the app, but I would like to stream the footage on my PC.
http://192.168.4.201/main.html, needs a username and password.

Anyone know what might be?


McGuywer $ sudo nmap -AT4 192.168.4.201
Password:
Starting Nmap 7.91 ( https://nmap.org ) at 2020-12-28 15:04 SAST
Nmap scan report for camera (192.168.4.201)
Host is up (0.015s latency).
Not shown: 998 closed ports
PORT STATE SERVICE VERSION
80/tcp open http
| fingerprint-strings:
| FourOhFourRequest:
| HTTP/1.1 401 Unauthorized
| WWW-Authenticate: Digest realm="www-user@ppstrong",qop="auth",nonce="1609160653",opaque="160516063"
| SIPOptions:
| HTTP/1.1 401 Unauthorized
|_ WWW-Authenticate: Digest realm="www-user@ppstrong",qop="auth",nonce="1609160661",opaque="160516039"
6668/tcp open irc?
|_irc-info: Unable to open connection
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.91%I=7%D=12/28%Time=5FE9D7CD%P=x86_64-apple-darwin19.6.0
SF:%r(FourOhFourRequest,82,"HTTP/1\.1\x20401\x20Unauthorized\r\nWWW-Authen
SF:ticate:\x20Digest\x20realm=\"www-user@ppstrong\",qop=\"auth\",nonce=\"1
SF:609160653\",opaque=\"160516063\"\r\n\r\n")%r(SIPOptions,82,"HTTP/1\.1\x
SF:20401\x20Unauthorized\r\nWWW-Authenticate:\x20Digest\x20realm=\"www-use
SF:r@ppstrong\",qop=\"auth\",nonce=\"1609160661\",opaque=\"160516039\"\r\n
SF:\r\n");
MAC Address: 48:46:C1:B4:6A:B2 (Fn-link Technology Limited)
Device type: general purpose
Running: Linux 2.6.X|3.X
OS CPE: cpe:/o:linux:linux_kernel:2.6 cpe:/o:linux:linux_kernel:3
OS details: Linux 2.6.32 - 3.10
Network Distance: 1 hop

TRACEROUTE
HOP RTT ADDRESS
1 15.07 ms camera (192.168.4.201)

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 187.47 seconds
McGuywer$
Click to expand...

Is this an South African product, only seem to find local links? Is there also just two ports open, 80 & 6668, specs doesn't say if it can support RTSP (port 554) which is what you want. Also try scanning the camera with an ONVIF scanner and see if it can support ONVIF.

You can also open up the camera and see if there are any board numbers or CPU and search for a similar rebranded device. Lastly I would run a dictionary against the password sometimes you get lucky.
 
krieg said:
Is this an South African product, only seem to find local links? Is there also just two ports open, 80 & 6668, specs doesn't say if it can support RTSP (port 554) which is what you want. Also try scanning the camera with an ONVIF scanner and see if it can support ONVIF.

You can also open up the camera and see if there are any board numbers or CPU and search for a similar rebranded device. Lastly I would run a dictionary against the password sometimes you get lucky.
Click to expand...
I can login via the webpage, if I know the password.
I figured I could get lucky, perhaps someone knows anything about this.

Yes, it does look like a rebranded camera, not sure if I can open it, will have to check.
 
McGuywer said:
I can login via the webpage, if I know the password.
I figured I could get lucky, perhaps someone knows anything about this.

Yes, it does look like a rebranded camera, not sure if I can open it, will have to check.
Click to expand...

Try running your password cracker of choice against the webserver, password is usually shorter than 8 characters. Another avenue would be looking at vulnerabilities in the webserver as that camera is running a pretty old version of Linux.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X