Hey guys.
I have an idea for a Payload but I’m pretty much a newbie with the Rubber Ducky payloads.
I’m looking for a way to either bypass or exfiltrate a password of a DVR (Digital Video Recorder). The OS is Linux Embedded and the Hardware is based in Dahua Technology. The Brand is know as Intelbras.
The real problem: I live in a condo and I travel a lot. Someone is stealing some packages of mine. And every time I ask for the security to check the area where the packages are stored (every condo owner has access), they keep saying the DVR erase everyday to start record the present day (which I think is BS).
So, anyways, i have a way to have physical access to the DVR.
With this idea of the payload, i would gain access and start monitoring by myself through the Cloud APP. I already know the user (admin 😅), the serial number and ports. And no, the factory passwords doesn’t work.
Any ideas?
Thanks in advance 🙏🏻
PS: I have the Rubber Ducky, Bash Bunny and LAN Turtle (and the Pineapple, but I don’t know if it’s a fit for the problem)
Hey guys.
I have an idea for a Payload but I’m pretty much a newbie with the Rubber Ducky payloads.
I’m looking for a way to either bypass or exfiltrate a password of a DVR (Digital Video Recorder). The OS is Linux Embedded and the Hardware is based in Dahua Technology. The Brand is know as Intelbras.
The real problem: I live in a condo and I travel a lot. Someone is stealing some packages of mine. And every time I ask for the security to check the area where the packages are stored (every condo owner has access), they keep saying the DVR erase everyday to start record the present day (which I think is BS).
So, anyways, i have a way to have physical access to the DVR.
With this idea of the payload, i would gain access and start monitoring by myself through the Cloud APP. I already know the user (admin 😅), the serial number and ports. And no, the factory passwords doesn’t work.
Any ideas?
Thanks in advance 🙏🏻
PS: I have the Rubber Ducky, Bash Bunny and LAN Turtle (and the Pineapple, but I don’t know if it’s a fit for the problem)