Why don't you query the webcamserver or for webcamserverfiles?
You can find, only for example, webcams in the internet with a simple
googling for example with inurl:/view/index.shtml or
inurl:"ViewerFrame?Mode="...this won't help you in your case, but you
have admin rights, you should be able to find them..you don't need a
scanner for this job.
Regards,
Jan
Richard Lane schrieb:
You could try GFi LANGuard's Network Security Scanner -
http://www.gfi.com/lannetscan/ . IT allows you to remotely query the
machine's to determine a wide range of info - including installed software,
registry settings, USB devices (currently and previously connected). I've
just used it to audit our infrastructure (around 700 devices) and a client
(around 3000 devices), and it highlighted a number of people running webcams
(amongst other unauthorised stuff, which NSS is great for identifying).
Good luck
Richard Lane MSc
Security Manager
Mincom, Brisbane, Australia
-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com] On
Behalf Of Holstein, Robert - BLS CTR
Sent: 24 August 2007 06:27
To: pen-test@securityfocus.com
Subject: Webcams
Does anyone have a method for remotely detecting webcams installed on
Windows hosts? I have the need to conduct an audit to find out if
certain staff are using webcams. I may have administrative rights to the
targets remotely, but no physical, or console access.
Any input would be appreciated.
Thank you,
Robert C. Holstein
IT Security Analyst
Bureau of Labor Statistics
(202)-691-7611
------------------------------------------------------------------------
This list is sponsored by: Cenzic
Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!
http://www.cenzic.com/downloads
------------------------------------------------------------------------
------------------------------------------------------------------------
This list is sponsored by: Cenzic
Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!
http://www.cenzic.com/downloads
------------------------------------------------------------------------
------------------------------------------------------------------------
This list is sponsored by: Cenzic
Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!
http://www.cenzic.com/downloads
------------------------------------------------------------------------
