CamScanner-Pro - Defensive IP-camera security assessment for Termux

项目说明

!CI
!License
!Platform
!Bash

CAM-SEC Scanner v3.0.0

Defensi security assessment for Termux/Android (rootless) and Linux.
Single-file Bash architecture, e: every finding carries e and an
explicit state — no guessed results, no fake detections.

> AUTHORIZED USE ONLY. This tool performs non-destructi probes
> against devices you own or are explicitly permitted to assess.
> Unauthorized access to devices you do not own is illegal in most jurisdictions.
> The tool enforces this by design: pri targets by default, an
> interacti gate, and a logged --allow-public escape hatch.

Features

E fingerprinting — /model/firmware with confidence

scores; UNKNOWN when e is insufficient (ne).

assessment with 7 states —

NOT_CHECKED | NOT_APPLICABLE | NO_E | INCONCLUSIVE |
POTENTIALLY_ | LIKELY_ | .
is only emitted on concrete technical e
(e.g. an XML user list from C's unauthenticated endpoint).

RTSP/ON — bounded path testing, handshake + authentication-state

detection, timeout-guarded (no hung ffprobe/ffmpeg, no orphans).

Authentication assessment (opt-in) — --auth-test only; capped attempts,

lockout delay, stop-on-success; **passwords are ne, logged or
exported** (SHA-256 of user:pass only).

E captures (opt-in) — --captures saves RTSP frames with disk-space

checks and guaranteed cleanup.

Machine-readable reports — JSON + human TXT.

Safe config — strict KEY=VALUE parser (no source), mode 0600,

env- (SHODAN_API_KEY); secrets are redacted from logs.

Leveled logging — DEBUG/INFO/WARN/ERROR/SECURITY with rotation.

Scope guard — refuses public targets unless --allow-public (logged).

--self-test — 19 installation/runtime checks.

Shodan lookup — real API queries (optional, key ne).

Requirements

Hard: bash >= 4.3, curl.
Recommended: jq, python3, openssl (credential hashing), ffmpeg (RTSP/captures), nmap (LAN discovery accelerator).
E missing degrades to an explicit NOT_SUPPORTED — the tool ne capability.

Termux

Install & run

Reports: ~/.camsec/reports/ · Logs: ~/.camsec/logs/ · Captures: ~/.camsec/captures/

CLI reference

Exit codes: 0 ok · 1 general · 2 bad args · 3 missing dependency ·
4 target /scope failure · 5 scan incomplete.

Architecture (single file, 20 modules)

Constants → Safe config → Logging → UI → Dependency manager → Input →
Network discovery → Service detection → Fingerprinting → RTSP/ONVIF →
assessment → Auth assessment → E collection → Risk engine →
Report engine (JSON+TXT) → Cleanup/traps → Self-test → Shodan → CLI parser → Main/menu.

Testing

CI (GitHub Actions) runs the same suite on every push (.github/workflows/ci.yml).

Accuracy policy

No finding is emitted without WHY_DETECTED / WHAT_WAS_TESTED /
WHAT_RESPONSE_WAS_RECEIVED. When e is insufficient the result is
INCONCLUSIVE or NO_E — ne to look impressive.

License

MIT — see LICENSE.

项目信息

开发语言：Shell

Star 数：3

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Defensive IP-camera security assessment for Termux/Android — evidence-first, no fake detections.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。