Original tooling from the Camhak research project (camera teardown of a
rebranded UBIA / Javiscam IP camera). PyQt6 GUI on top of a curses TUI on
top of a service controller; per-service start/stop, intruder detection,
protocol fingerprinting, OAM HMAC signing, CVE verifiers, OTA bucket
probe, firmware fetcher, fuzzer, packet injection.
Tabs: Dashboard, Live Log, Intruders, Cloud API, Fuzzer, Inject, CVEs,
Config, Help. Real-time per-packet protocol detection, conntrack-based
original-destination lookup, log rotation at 1 GiB.
See SECURITY_PAPER.md for the full writeup, site/index.html for the
public report, README.md for usage. Run with:
sudo /usr/bin/python3 gui.py
Co-authored by Setec Labs.
38 lines
490 B
Plaintext
38 lines
490 B
Plaintext
# Python
|
|
__pycache__/
|
|
*.py[cod]
|
|
*.pyo
|
|
*.egg-info/
|
|
.venv/
|
|
venv/
|
|
|
|
# Logs and captures (can contain real account data — never commit)
|
|
mitm_logs/
|
|
*.pcap
|
|
*.log
|
|
*.bin
|
|
fuzz_results_*.json
|
|
auth_fuzz.json
|
|
endpoint_fuzz.json
|
|
|
|
# Local config (may contain credentials)
|
|
config.json
|
|
|
|
# TUTK / vendor source bundles (license-restricted)
|
|
lib/wyzecam/
|
|
lib/tutk/
|
|
iotc/*.so
|
|
iotc/build/
|
|
|
|
# OS / editor
|
|
.DS_Store
|
|
*.swp
|
|
*~
|
|
.idea/
|
|
.vscode/
|
|
|
|
# Don't ship any decompiled APK derivatives
|
|
ubox_*/
|
|
javiscam_*/
|
|
*.apk
|