"Hack" eBay camera to get access to videostream?

[burton666]

I recently bought a cheap ip-camera from ebay but noticed after I recieved it that you had to use android/ios apps to get access to it. And after reading the ebay info again it actually says that it is only compatible with Android/IOS.

http://www.ebay.com/itm/360-Degree-960P ... mDhjvnn-eQ

After setting up the wifi from the app I thought that it would be easy to log in using port 8080, 80 or similar and just find the correct path to the videostream.
I have done a portscan and port 80 and 23 is open and I also found that port 22334 is used from spying on the packets from my android phone.

I tried a lot of paths using iSpys camera url generator but none of them work. if I just enter <IP>:80 in a browser I get a file downloaded witch contains only this: "<H1>Index of /mnt/web/</H1>"
I also tried hydra on the telnet port 23 using some camera password-lists from github. But it takes forever to complete. I also tried all random telnet user/pass combinations I could think of like: admin:admin, admin:(blank), root:root, etc.

Anyone knows how I should proceed? And would access to telnet get me anywhere? My goal is to be able to get the videostream by URL so that I can add it in some camera software.
When capturing the packets from the app the trafik was pretty big, like ~1Mb for around 30s of capturingtime so I guess that that port 22334 is probably used for the videostream.

On the box it says: 360Eye S
Model: EC11-I6

And when trying to log in using telnet this comes up:
IPC365 Login:

[kubrik]

Try if Onvif device manager detects it:
https://sourceforge.net/projects/onvifdm/

If it does..you can retrieve streaming url.

[freijn]

Very interested in your findings / progress.

I have the same issue with a Digoo camera with same behaviour

https://www.facebook.com/DigooTeam/

[tjabas]

Try if Onvif device manager detects it:
https://sourceforge.net/projects/onvifdm/

If it does..you can retrieve streaming url.

Hi!

i also have the same problem with 2 cheap china ip cameras, i have installed the onvif device manager and it picks up the 2 cameras as a onvif device, but how can i see what url the camera uses for the stream?

[kubrik]

Under the stream video you can see the streaming url:

ipcam.png (106.29 KiB) Viewed 36558 times

[IDANIT]

I found the streaming url, put it in to Domoticz... but still no videostream in Domoticz. Digoo DG-M1Q Onvif Camera

Domoticz (4).png (24.61 KiB) Viewed 36490 times

[SweetPants]

I'm not sure if domotics supports rtsp:// for the URL. Http only i think

[emme]

domoticz does not support streams, but snapshot...

look for the snapshot link and use it in the camera config

[IDANIT]

Where can I Find this snapshot link?

[SweetPants]

Where can I Find this snapshot link?

In the manual of your camera

[kubrik]

These cheap cameras probably don't have any snapshot url (like mine).
You can use "motion" ( https://www.domoticz.com/wiki/Camera_Se ... ion_sensor ) to detect motion and then run another script to take snapshots or saving stream video.

[astolat]

I have the M1Q camera working with the following URL:

rtsp://USERNAME:PASSWORD@CAMERA_IP/onvif1

(onvif2 also works with smaller video)

The username defaults to admin (I haven't found a way to change it) and the default password is 20160404. You can change the password in the app.

I can access this from VLC; had some issues opening the stream with Open CV in Python 3, but was able to get it open with pyav.

[SweetPants]

I can access this from VLC; had some issues opening the stream with Open CV in Python 3, but was able to get it open with pyav.

Still leaves the question "Can I use it with Domoticz?" I think the answer is "NO"

[bobMERHI]

I recently bought a cheap ip-camera from ebay but noticed after I recieved it that you had to use android/ios apps to get access to it. And after reading the ebay info again it actually says that it is only compatible with Android/IOS.

http://www.ebay.com/itm/360-Degree-960P ... mDhjvnn-eQ

After setting up the wifi from the app I thought that it would be easy to log in using port 8080, 80 or similar and just find the correct path to the videostream.
I have done a portscan and port 80 and 23 is open and I also found that port 22334 is used from spying on the packets from my android phone.

I tried a lot of paths using iSpys camera url generator but none of them work. if I just enter <IP>:80 in a browser I get a file downloaded witch contains only this: "<H1>Index of /mnt/web/</H1>"
I also tried hydra on the telnet port 23 using some camera password-lists from github. But it takes forever to complete. I also tried all random telnet user/pass combinations I could think of like: admin:admin, admin:(blank), root:root, etc.

Anyone knows how I should proceed? And would access to telnet get me anywhere? My goal is to be able to get the videostream by URL so that I can add it in some camera software.
When capturing the packets from the app the trafik was pretty big, like ~1Mb for around 30s of capturingtime so I guess that that port 22334 is probably used for the videostream.

On the box it says: 360Eye S
Model: EC11-I6

And when trying to log in using telnet this comes up:
IPC365 Login:

hi,
i 've been playing with my IPC365 yesterday night.
and i found 5 ports open
23/tcp
80/tcp
9527/tcp
22334/tcp
34567/tcp

go ahead and download CMS from the link below
http://www.colincctv.com/Upload/%E8%B5% ... r%20PC.zip
add the device using the ip address given by your dhcp
use the port 34567
username : admin password: 123456
you will only connect to main stream
aswell you can login to configuration and change many other paramenters.

Hope this helps you

[burton666]

@bobMERHI
Wow, thanks. Have you also managed to figure out what url to use to get access to video/snapshot?

[burton666]

I tried using wireshark but could not find anything useful. Here is the file if someone more skilled than me would like to check.
https://ufile.io/7isve

[MrGee]

I've been thinking, to me it sounds impossible to have a url for this device, let me explain.

The device runs on 4 x AA batteries, ergo having this on 24/7 would drain them pretty quickly
I suspect the pushbutton(1) activates the wifi which in turn (likely) sends a push notification to the Digoo server (and notifies the phone),
starts the stream & recording..

Hacking this would likely be a similar solution as the amazon dash buttons (i would expect)

Please note i'm just a noob on this subject, i might be wrong

[burton666]

I think you replied to the wrong thread? This camera is powered by USB

[munkiepus]

Hi

Ive got the same camera, with the same problem.

Does getting it running in CMS give any hint as to if it's An OVNIF, RTSP or mjpeg stream, (or something else) I can't use the CMS software as I'm on a Mac.

Thanks

[kentnguyen]

SUCCESS!

Based on the info above, i have able to view this 360 camera (same as what burton666 bought) to my iOS viewer app.
So i have all my cameras in one place. Of course the downside is that I can only view the stream as a circular blob instead of pan&tilt 360 video.

The iOS i'm using is IP Cam Viewer Pro, available for both iOS and Android https://itunes.apple.com/vn/app/ip-cam- ... 56416?mt=8

I don't think there is a HTTP stream or URL that can be accessed. But this is good enough for my personal use.