GeoVision Camera Lab

Things (IoT) hacking lab exercise as showcased at RSA 2018, Hack NYC, Hack the Capitol, and multiple BSides conferences.

This lab is for home use only and should not be used on anything other than the local camera to teach concepts around IOT security and defense. UNAUTHORIZED USE INCLUDING USING THIS ON SOMEONE ELSE’S CAMERA IS BREAKING THE LAW.

Lab Environment Setup

• A Windows Virtual Machine (VM)

  • Microsoft provides a Windows VM if you do not have one

• A GeoVision MFD3401-0F3U Camera running version 3.12

• A Kali Linux VM or a *nix environment capable of running Python

Repository Files

The following describes each file in this repository

Firmware

File: GV-BX1500_V312_170619_128M.zip
SHA256: f81dc0b015634b284956bedf3f3a15b1b4bdb5f3e68bf33060432aef7b2d7684
Description:

File: GV-IPCAM-Firmware_Manual.zip
SHA256: 48a0cc340f4592cfb86de7f689709d5d0a4733e9a11b78561e9474e50c9b38ed
Description:

File: InstallUtility.zip
SHA256: 429a6ff882049b9d4860710e4531dd9771c055d356ab6167c19ad168a2f97ff1
Description:

Exploit: https://www.exploit-db.com/exploits/43982/