RE: Nessus and Webcams

Good point Ron.  I know wireless cams are not an issue or our wireless
IDS and frequent wireless audits would tip us off.  Firewire, and USB
are going to be the most likely candidates.  I suppose I could perfom
some WMI queries and/or dump remote registry keys to sift for installed
drivers or webcam support software. That will take a little longer than
what the customer was hoping for. I'll give the USB enumeration plug-in
a shot to see if I get anything useable.  

-----Original Message-----
From: Ron Gula [mailto:rgula@tenablesecurity.com] 
Sent: Thursday, August 23, 2007 5:12 PM
To: Holstein, Robert - BLS CTR
Cc: nessus@list.nessus.org
Subject: Re: Nessus and Webcams

Holstein, Robert - BLS CTR wrote:
> Hey all,
>
> Does anyone know of any plug-ins that could be used to detect 
> installed webcams on Windows hosts?  I was thinking maybe the USB 
> drives enumeration plug-in might show something for USB webcams...
>
> I need to conduct an audit to search for any workstations with webcams

> installed.  The problem is it has to be done remotely. I will have 
> administrative privileges, but no physical or console access.

Starting with the USB enumeration is a good idea, but there are other
more "professional" cameras that are firewire or even standalone/IP
based which won't show up in USB.

Ron Gula
Tenable Network Security

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus