One possible way to do this is to look into Universal Plug and Play. I
recall a couple of years ago there was an issue where someone set up a
webcam that was upnp, and their connection to the internet was one of
these dedicated firewall/router/wireless combinations that also
understood upnp. The firewall saw the upnp advertisement and proceeded
to automantially open a hole in the firewall to let people on the
outside view the camera without the knowledge of the user!
________________________________
From: nessus-bounces@list.nessus.org
[mailto:nessus-bounces@list.nessus.org] On Behalf Of Holstein, Robert -
BLS CTR
Sent: Thursday, August 23, 2007 4:31 PM
To: nessus@list.nessus.org
Subject: Nessus and Webcams
Hey all,
Does anyone know of any plug-ins that could be used to detect installed
webcams on Windows hosts? I was thinking maybe the USB drives
enumeration plug-in might show something for USB webcams...
I need to conduct an audit to search for any workstations with webcams
installed. The problem is it has to be done remotely. I will have
administrative privileges, but no physical or console access.
Any input is appreciated.
Thank you,
Robert C. Holstein
IT Security Analyst
Bureau of Labor Statistics
(202)-691-7611
<html>
<body>
<p>***********************************************************************</p>
<p>The information in this email is confidential and may be legally privileged.
It is intended solely for the addressee. Access to this email by anyone else is
unauthorized. If you are not the intended recipient, any disclosure, copying,
distribution or any action taken or omitted to be taken in reliance on it, is
prohibited and may be unlawful. When addressed to our clients any opinions or
advice contained in this email are subject to the terms and conditions
expressed in the governing KPMG client engagement letter.</p>
<p>***********************************************************************</p>
</body>
</html>
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
