Phần mềm
The string "inurl:viewerframe mode:motion" is a specialized search query, often called a "Google Dork,"
used primarily by cybersecurity professionals to identify misconfigured or insecure network cameras. It targets the specific URL structure of certain IP camera web interfaces that have been unintentionally indexed by search engines. 1. Understanding the Query
This query breaks down into specific search operators that tell Google exactly what to look for:
: Directs Google to find pages where the specified text appears anywhere within the URL. viewerframe
: A common directory or filename used by specific IP camera models (often Panasonic) to host their live viewing interface. mode:motion inurl viewerframe mode motion exclusive
: A parameter used by these systems to indicate a "motion" viewing mode, which often displays a live, moving video feed rather than a static image.
: Sometimes added to further narrow results to specific types of "exclusive" access or control modes within that interface. 2. Why This is Used Security Auditing
: Ethical hackers and IT administrators use dorks to find if their own organization's cameras are accidentally exposed to the public internet. Vulnerability Research
: Security teams use these queries to identify the scale of exposed IoT (Internet of Things) devices globally. OSINT (Open Source Intelligence) Add filetype or path constraints if relevant (e
: Investigators use it to gather visual data about a specific location if a public or misconfigured camera exists there. 3. Ethical and Legal Risks While using Google to search is legal, unauthorized access
to private camera feeds discovered through these queries is illegal in many jurisdictions. Privacy Violations
: Accessing these feeds can expose people in private homes, businesses, or sensitive areas. Malicious Use
: Cybercriminals use these dorks to find entry points into a network, potentially leading to further attacks like data theft or botnet recruitment. 4. How to Secure Your Own Cameras If you actually found a working link in
If you manage IP cameras and want to ensure they do not appear in these search results, follow these best practices:
What is Google Dorking/Hacking | Techniques & Examples - Imperva
If you actually found a working link in the wild (historically), what would you see?
When you hit the URL, the server typically returned a very simple HTML document that looked like this:
< html>
< frameset rows="100%,*" frameborder="0">
< frame src="?action=stream" name="viewerframe" />
< frame src="http://localhost:8081/" ... />
</frameset>
Because you appended mode motion exclusive, the server would respond by:
This looks like a search query (using the inurl: operator) intended to find web pages whose URLs include the phrase viewerframe and that contain the words mode, motion, and exclusive. People use queries like this to locate specific pages, embedded viewers, or components on sites that expose media viewers, embedded documents, or frames.