March 2017
Intermediate to advanced
262 pages
5h 26m
Chinese
Content preview from 物联网设备安全
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
攻击无线护士站
——
破坏婴儿监视器和其他设施
｜
67
Netwave IP Camera
（最新版的
Foscam
设备，其固件采用
Boa/0.94.13
）作为返回值。使
用这一信息，借助
Shodan
很容易就能找到
Foscam
设备的
IP
地址，如图
3-3
所示。
如图
3-3
中
Shodan
的查询情况，约有
70
万个
IP
设备马上对我们的查询做出了响应。这
说明：攻击者定位如
Foscam
婴儿监控器这类设备，利用已知漏洞实施攻击是多么得容易。
图 3-3：Shodan 查询定位互联网上的 Foscam 设备
3.1.3
利用默认凭证
我们知道
Foscam
设备使用
admin
作为默认用户名，默认密码为空，大多数用户可能保
留此默认设置而不做修改（除非在安装过程中要求用户选择一个强密码，但是在存在漏
洞版本的
Foscam
设备中，并没有做这样的要求）。一个简单的
Shodan
查询就能够显示
出存在着巨大数量的个人和组织，他们根本就没有意识到他们的隐私很容易被泄露。
2013
年
8
月，
Foscam
发布了一个升级版，要求用户修改默认的空密码，允许用户选择
一个用户名而不是默认采用
admin
作为用户名。然而，如图
3-4
所示，用户必须自己动
手访问软件更新地址，然后使用
web
接口执行更新。不难想象，大多数用户并不知道有
安全更新这么一回事。
68 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.