Page 1 of 2
"Hack" eBay camera to get access to videostream?
Posted: Sunday 09 April 2017 7:54
by burton666
I recently bought a cheap ip-camera from ebay but noticed after I recieved it that you had to use android/ios apps to get access to it. And after reading the ebay info again it actually says that it is only compatible with Android/IOS.
http://www.ebay.com/itm/360-Degree-960P ... mDhjvnn-eQ
After setting up the wifi from the app I thought that it would be easy to log in using port 8080, 80 or similar and just find the correct path to the videostream.
I have done a portscan and port 80 and 23 is open and I also found that port 22334 is used from spying on the packets from my android phone.
I tried a lot of paths using iSpys camera url generator but none of them work. if I just enter <IP>:80 in a browser I get a file downloaded witch contains only this: "<H1>Index of /mnt/web/</H1>"
I also tried hydra on the telnet port 23 using some camera password-lists from github. But it takes forever to complete. I also tried all random telnet user/pass combinations I could think of like: admin:admin, admin:(blank), root:root, etc.
Anyone knows how I should proceed? And would access to telnet get me anywhere? My goal is to be able to get the videostream by URL so that I can add it in some camera software.
When capturing the packets from the app the trafik was pretty big, like ~1Mb for around 30s of capturingtime so I guess that that port 22334 is probably used for the videostream.
On the box it says: 360Eye S
Model: EC11-I6
And when trying to log in using telnet this comes up:
IPC365 Login:
Re: "Hack" eBay camera to get access to videostream?
Posted: Sunday 09 April 2017 9:57
by kubrik
Try if Onvif device manager detects it:
https://sourceforge.net/projects/onvifdm/
If it does..you can retrieve streaming url.
Re: "Hack" eBay camera to get access to videostream?
Posted: Sunday 09 April 2017 10:39
by freijn
Very interested in your findings / progress.
I have the same issue with a Digoo camera with same behaviour
https://www.facebook.com/DigooTeam/
Re: "Hack" eBay camera to get access to videostream?
Posted: Sunday 09 April 2017 11:28
by tjabas
Hi!
i also have the same problem with 2 cheap china ip cameras, i have installed the onvif device manager and it picks up the 2 cameras as a onvif device, but how can i see what url the camera uses for the stream?
Re: "Hack" eBay camera to get access to videostream?
Posted: Sunday 09 April 2017 11:53
by kubrik
Under the stream video you can see the streaming url:

- ipcam.png (106.29 KiB) Viewed 37516 times
Re: "Hack" eBay camera to get access to videostream?
Posted: Tuesday 11 April 2017 16:20
by IDANIT
I found the streaming url, put it in to Domoticz... but still no videostream in Domoticz. Digoo DG-M1Q Onvif Camera

- Domoticz (4).png (24.61 KiB) Viewed 37448 times
Re: "Hack" eBay camera to get access to videostream?
Posted: Tuesday 11 April 2017 16:36
by SweetPants
I'm not sure if domotics supports rtsp:// for the URL. Http only i think
Re: "Hack" eBay camera to get access to videostream?
Posted: Tuesday 11 April 2017 16:38
by emme
domoticz does not support streams, but snapshot...
look for the snapshot link and use it in the camera config
Re: "Hack" eBay camera to get access to videostream?
Posted: Tuesday 11 April 2017 17:29
by IDANIT
Where can I Find this snapshot link?
Re: "Hack" eBay camera to get access to videostream?
Posted: Tuesday 11 April 2017 18:55
by SweetPants
IDANIT wrote:Where can I Find this snapshot link?
In the manual of your camera
Re: "Hack" eBay camera to get access to videostream?
Posted: Wednesday 12 April 2017 1:05
by kubrik
These cheap cameras probably don't have any snapshot url (like mine).
You can use "motion" (
https://www.domoticz.com/wiki/Camera_Se ... ion_sensor ) to detect motion and then run another script to take snapshots or saving stream video.
Re: "Hack" eBay camera to get access to videostream?
Posted: Sunday 16 April 2017 4:24
by astolat
I have the M1Q camera working with the following URL:
rtsp://USERNAME:PASSWORD@CAMERA_IP/onvif1
(onvif2 also works with smaller video)
The username defaults to admin (I haven't found a way to change it) and the default password is 20160404. You can change the password in the app.
I can access this from VLC; had some issues opening the stream with Open CV in Python 3, but was able to get it open with pyav.
Re: "Hack" eBay camera to get access to videostream?
Posted: Monday 17 April 2017 13:41
by SweetPants
astolat wrote:I can access this from VLC; had some issues opening the stream with Open CV in Python 3, but was able to get it open with pyav.
Still leaves the question "Can I use it with Domoticz?" I think the answer is "NO"
Re: "Hack" eBay camera to get access to videostream?
Posted: Tuesday 23 May 2017 23:45
by bobMERHI
burton666 wrote:I recently bought a cheap ip-camera from ebay but noticed after I recieved it that you had to use android/ios apps to get access to it. And after reading the ebay info again it actually says that it is only compatible with Android/IOS.
http://www.ebay.com/itm/360-Degree-960P ... mDhjvnn-eQ
After setting up the wifi from the app I thought that it would be easy to log in using port 8080, 80 or similar and just find the correct path to the videostream.
I have done a portscan and port 80 and 23 is open and I also found that port 22334 is used from spying on the packets from my android phone.
I tried a lot of paths using iSpys camera url generator but none of them work. if I just enter <IP>:80 in a browser I get a file downloaded witch contains only this: "<H1>Index of /mnt/web/</H1>"
I also tried hydra on the telnet port 23 using some camera password-lists from github. But it takes forever to complete. I also tried all random telnet user/pass combinations I could think of like: admin:admin, admin:(blank), root:root, etc.
Anyone knows how I should proceed? And would access to telnet get me anywhere? My goal is to be able to get the videostream by URL so that I can add it in some camera software.
When capturing the packets from the app the trafik was pretty big, like ~1Mb for around 30s of capturingtime so I guess that that port 22334 is probably used for the videostream.
On the box it says: 360Eye S
Model: EC11-I6
And when trying to log in using telnet this comes up:
IPC365 Login:
hi,
i 've been playing with my IPC365 yesterday night.
and i found 5 ports open
23/tcp
80/tcp
9527/tcp
22334/tcp
34567/tcp
go ahead and download CMS from the link below
http://www.colincctv.com/Upload/%E8%B5% ... r%20PC.zip
add the device using the ip address given by your dhcp
use the port 34567
username : admin password: 123456
you will only connect to main stream
aswell you can login to configuration and change many other paramenters.
Hope this helps you
Re: "Hack" eBay camera to get access to videostream?
Posted: Wednesday 24 May 2017 15:48
by burton666
@bobMERHI
Wow, thanks. Have you also managed to figure out what url to use to get access to video/snapshot?
Re: "Hack" eBay camera to get access to videostream?
Posted: Wednesday 24 May 2017 17:41
by burton666
I tried using wireshark but could not find anything useful. Here is the file if someone more skilled than me would like to check.
https://ufile.io/7isve
Re: "Hack" eBay camera to get access to videostream?
Posted: Wednesday 31 May 2017 15:35
by MrGee
I've been thinking, to me it sounds impossible to have a url for this device, let me explain.
The device runs on 4 x AA batteries, ergo having this on 24/7 would drain them pretty quickly
I suspect the pushbutton(1) activates the wifi which in turn (likely) sends a push notification to the Digoo server (and notifies the phone),
starts the stream & recording..
Hacking this would likely be a similar solution as the amazon dash buttons (i would expect)
Please note i'm just a noob on this subject, i might be wrong

Re: "Hack" eBay camera to get access to videostream?
Posted: Friday 02 June 2017 16:05
by burton666
I think you replied to the wrong thread? This camera is powered by USB
Re: "Hack" eBay camera to get access to videostream?
Posted: Tuesday 13 June 2017 13:20
by munkiepus
Hi
Ive got the same camera, with the same problem.
Does getting it running in CMS give any hint as to if it's An OVNIF, RTSP or mjpeg stream, (or something else) I can't use the CMS software as I'm on a Mac.
Thanks
Re: "Hack" eBay camera to get access to videostream?
Posted: Wednesday 28 June 2017 7:56
by kentnguyen
SUCCESS!
Based on the info above, i have able to view this 360 camera (same as what burton666 bought) to my iOS viewer app.
So i have all my cameras in one place. Of course the downside is that I can only view the stream as a circular blob instead of pan&tilt 360 video.
The iOS i'm using is IP Cam Viewer Pro, available for both iOS and Android
https://itunes.apple.com/vn/app/ip-cam- ... 56416?mt=8
I don't think there is a HTTP stream or URL that can be accessed. But this is good enough for my personal use.