Cara mengirim Motion Detection Snapshot Alert Pada XiongMai IP Camera ke Bot Telegram

بسم الله الرحمن الرحيم

XiongMai adalah firmware yang banyak dipakai oleh IP Camera & NVR murah buatan China, banyak dijual di Aliexpress. Salah satu cirinya adalah mereka menggunakan aplikasi mobile bernama XMeye atau ICSee untuk menkonfigurasi dan meremote camera secara lokal maupun cloud.

XiongMai OEM Vendors

Jika anda mempunyai IP Camera dari salah satu vendor pada gambar diatas, bisa dipastikan IP Camera anda menggunakan XiongMai firmware. Ciri-ciri lainnya adalah mempunyai Web UI seperti berikut:


Inject Malicious Code to PHP-GD Image

بسم الله الرحمن الرحيم

On this web application, there are two ways to add an image to media library, first one is using local file upload and the second one is remote file upload from a Stock Photo website.

The first thing that came to my mind was that there might have SSRF vulnerability through the remote file upload feature. But I think it worth to test the local file upload first.

After several test on the local file upload, I can concluded that the app only allows image files (.jpg, .png, .gif and…

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store