18 Shodan Queries for Webcam OSINT (2023)

Have you ever wondered how to uncover the hidden world of webcams using Shodan? You’re not alone. With the rise of Internet of Things (IoT) devices, webcams have become more than just a tool for video conferencing.

They’ve turned into a goldmine for open-source intelligence (OSINT) enthusiasts like us.

In this article, we’ll explore 18 Shodan search queries specifically tailored for webcam discovery. But we’re not stopping at just listing them. We’ll dive into what each query does and why it’s useful. Buckle up, because we’re about to go on a digital scavenger hunt!

What’s New?

If you’re returning to OSINT after a short break, you’ve missed some exciting developments. We believe you’ll find this post to be a valuable asset, especially if you’re a fan of Shodan like us. We’ve manually tested 18 queries, and each one delivers tangible results.

Webcam Searches: Your Starter Kit

General Searches

title:camera¹: This is your go-to query for a general search. It will pull up anything with the keyword “camera.”
webcam has_screenshot:true: This query narrows it down to IoT devices identified as webcams² that have screenshots available³.

Diving Deeper

has_screenshot:true IP Webcam: A tweak on the previous search. Curious about how results might differ? Give it a try.
server: webcampxp: WebcamXP is popular camera software for Windows. Use this query to find networks using it.
server: “webcam 7”: Less popular than WebcamXP, but still worth knowing.

Specialized Cameras

title:”blue iris remote view”: Specifically for Blue Iris webcam management services.
title:”ui3 -“: UI3 is an HTML5 interface for Blue Iris⁴.
title:”Network Camera VB-M600″: Looking for Canon security cameras? This is your query.

More Than Just Webcams

product:”Yawcam webcam viewer httpd”: Yawcam stands for Yet Another WebCAM software.
title:”IPCam Client”: Searches for IPCam Client webcam devices.
server: GeoHttpServer: GeoVision webcams, some of which have well-documented vulnerabilities.

Bonus Tips

Other Devices and Providers

ACTi: This query will find various IP camera and video management system products.
WWW-Authenticate: “Merit LILIN Ent. Co., Ltd.”: A UK-based house automation and IP camera provider.

Unsecured Devices

title:”+tm01+”: Unsecured Linksys webcams. Many come with screenshots.
server: “i-Catcher Console”: IP-based CCTV systems, another area to explore.
Netwave IP Camera Content-Length: 2574: Specific to Netwave IP cameras.
200 ok dvr port:”81″: DVR CCTV cameras accessible via HTTP.
WVC80N: Searches for Linksys WVC80N cameras.

To Conclude: Your OSINT Adventure Awaits!

So, are you ready to embark on an OSINT quest with these Shodan queries? We think this is a great way to get back into the game. And if you stumble upon something not covered here, don’t hesitate to drop it in the comments below. We’re all ears!

Did you find this article useful? Bookmark it, share it, or drop a comment to let us know what you think!