[Boondock]

You ever heard the saying "He knows enough to be dangerous" Well, never is this truer than with idiots and computers, which brings us to todays Google Hacking lesson:

Finding Web Controllable Devices
(Thanks to Johnny at I hackstuff) for most of the info in this article

All sorts of neat stuff like printers, webcams, even servers are now controllable via the web from anywhere in the world. While this is a great technology, idiots who leave this information out there for anyone to access need to be punished. This is where Google comes in.

Say, we want to find web accessible webcams. We could just do a search for webcam or Sony or whatever, buts its so much easier to user operators in Google to find what you want, for example:

Canon has a series of netcams that all use the "WebView LiveScope" software. This search looks for the java applet called "LiveApplet" that is used by Canon's network camera feeds:

intitle:liveapplet inurl:LvAppl

Congrats, you now have control of their camera, and some idiots don't password protect their stuff, so you can turn the camera off, point it at the ceiling, and other general nuisance shit.

Other cams:

Heres one: WebcamXP :http://www.webcamxp.com/productsadv.html
Download the above software to connect to these cams to make whatever admin settings changes you like:
"powered by webcamXP" "Pro|Broadcast"


Basically I could spend all day showing you different searches for webcams, but lets instead turn our focus to a more fun pursuit: Web Accessible printers.

For Example:Xerox 860 and 8200 Printers.
intext:"Ready with 10/100T Ethernet"

or some Epson's:
intitle:"EpsonNet WebAssist Rev"

Brother's:
inurl:"printer/main.html" intext:"settings"

Another quick one
:intitle:"Network Print Server" filetype:shtm ( inurl:u_printjobs | inurl:u_server | inurl:a_server | inurl:u_generalhelp | u_printjobs )

If you know the default password for each style of printer, which is very easy to find using. . .GOOGLE. . . you can take control of many of these machines where people are too damn lazy to change it from default.

Basically, you have to have a little knowledge about what the is in the url of the shared device in order to do a good search for it in Google. This info can easily be gained by reading user's manuals of printers, PCs, webcams, etc. This pursuit isn't for everyone, but if you wanna have fun fucking around with idiots, its a great way to spend a few minutes.