My security camera shipped a GitHub admin token in its login page

我的安防摄像机在登录页面中泄露了GitHub管理员令牌

HN 288 分 · 105 条评论 · 作者 hhh · 来源 hhh.hn · HN 讨论

【摘要】

The author investigated Hanwha Vision security cameras after noting their increasing Linux capabilities, discovering accessible firmware blobs that contained encrypted images. By using a known passphrase scheme derived from the model number, the author successfully extracted the firmware components.

⋯ 继续阅读请登录会员 ⋯