PHStrawberrry
Forum Veteran
Hello again PHC!
This tutorial will demonstrate another ability of the metasploit framework's meterpreter: Viewing somebodies webcam! The hard part of this is actually installing Meterpreter on the victims computer. This can be done by exploiting vulnerabilities with Metasploit
Unlike just installing a command shell or a RAT on the victim computer, the Meterpreter has the power to do numerous and nearly unlimited things on the target's computer. Once the meterpreter is installed, you have the power at your fingertips. This tutorial will demonstrate a simple ability of the meterpreter.
After you have owned the victims computer, you can then get live images from the webcam without them realizing. I'm not going to question your motives for viewing someones webcam, but that is your own responsibility. Just don't be too much of a creep.
To begin, we need to simply run Metasploit and install Meterpreter on the victim's system. Once we have done that, we can then begin to view and capture images from their webcam.
1) Ensure that the victim has a webcam:
To control the webcam using meterpreter, we first need to check if there is a web cam, and if there is, get its name. We can do that by typing:
If he/she has a webcam, the system will come back with a list of all the webcams.
2) Begin getting images from the webcam:
Now that we know he/she has a webcam, we can take a snapshot from the webcam by typing:
This will save an image from the webcam into /opt/framework3/msf3, which we can open and view. The image quality depends on the victims webcam quality and light levels, etc.
3) Streaming Video from the webcam:
Capturing a single image is fine to get an indication of what is going on, what the victim looks like, the surroundings, etc. But streaming is probably the more important function. Use this command to begin recieving directly streamed video from the victims webcam:
To view the output of the stream, open the webpage file in "/var/www/webcam.htm".
The best way to protect against webcam intrusion is to cover the webcam up.
Similarly, here is how to record and listen to a remote microphone:
This tutorial will demonstrate another ability of the metasploit framework's meterpreter: Viewing somebodies webcam! The hard part of this is actually installing Meterpreter on the victims computer. This can be done by exploiting vulnerabilities with Metasploit
Unlike just installing a command shell or a RAT on the victim computer, the Meterpreter has the power to do numerous and nearly unlimited things on the target's computer. Once the meterpreter is installed, you have the power at your fingertips. This tutorial will demonstrate a simple ability of the meterpreter.
After you have owned the victims computer, you can then get live images from the webcam without them realizing. I'm not going to question your motives for viewing someones webcam, but that is your own responsibility. Just don't be too much of a creep.
To begin, we need to simply run Metasploit and install Meterpreter on the victim's system. Once we have done that, we can then begin to view and capture images from their webcam.
1) Ensure that the victim has a webcam:
To control the webcam using meterpreter, we first need to check if there is a web cam, and if there is, get its name. We can do that by typing:
Code:
meterpreter > webcam_list2) Begin getting images from the webcam:
Now that we know he/she has a webcam, we can take a snapshot from the webcam by typing:
Code:
meterpreter > webcam_snap3) Streaming Video from the webcam:
Capturing a single image is fine to get an indication of what is going on, what the victim looks like, the surroundings, etc. But streaming is probably the more important function. Use this command to begin recieving directly streamed video from the victims webcam:
Code:
meterpreter > run webcam -p /var/wwwThe best way to protect against webcam intrusion is to cover the webcam up.
Similarly, here is how to record and listen to a remote microphone:
Spoiler contents are visible only to Established Members.
