====== Baby Monitors ====== Devices used by parents to keep an eye on their infant(s), usually with a camera and microphone/speaker. For the most part, they appear to run Linux-based OSes and utilize ARM, RISC, or MIPS chips. ===== General ===== ==== Operating Systems ==== === Various Linux-based monitors === The supplied PDF, near the end, has a list of various baby monitors with open vulnerabilities, enabling someone to mess with them via UART or something. https://www.rapid7.com/globalassets/external/docs/Hacking-IoT-A-Case-Study-on-Baby-Monitor-Exposures-and-Vulnerabilities.pdf ===== Motorola Zoom series ===== ==== Operating Systems ==== === Linux(?) === >which I’m pretty sure is the kernel image (2.6.17.14 since you ask) Motorola baby monitors are known to have open vulnerabilities. These may be no exception… https://simon.aldrich.cc/blog/2013/08/motorola-blink1-hacking/ https://simon.aldrich.cc/blog/2014/01/hacking-the-motorola-blink-1-baby-monitor-part-2/ https://www.sjoerdlangkemper.nl/2019/03/27/hacking-the-motorola-mbp88connect-wifi-camera/ ===== Nanit Pro Complete ===== ==== Operating Systems ==== === Linux === Straight from the manufacturer. Not much else. https://www.nanit.com/global/legal/open-source?locale=en ===== Summer Baby Zoom ===== ==== Operating Systems ==== === Linux === >The "systemGT.cgi" script contains a method of executing commands as a root user There is a method available for this device, which allows the execution of root commands via a simple usage of curl. How much can be done with this method, however, is unknown. [[https://www.exploitee.rs/index.php/Summer_Baby_Zoom_WiFi%E2%80%8B%E2%80%8B|https://www.exploitee.rs/index.php/Summer_Baby_Zoom_WiFi]]