RTSP - Port 554, 8554
Last updated
Was this helpful?
Last updated
Was this helpful?
Become VeryLazyTech ! 🎁
Follow us on:
✖ Twitter .
👾 Github .
📜 Medium .
📺 YouTube .
📩 Telegram .
🕵️♂️ My Site .
Visit our for e-books and courses. 📚
The Real-Time Streaming Protocol (RTSP) is a network control protocol designed for establishing and managing media sessions between endpoints. Predominantly utilized in entertainment and communication systems, RTSP enables clients to issue commands such as play, pause, and record to control media streaming from servers. While RTSP itself does not handle the transmission of streaming data, it often works in conjunction with protocols like the Real-time Transport Protocol (RTP) and Real-time Control Protocol (RTCP) to facilitate media stream delivery.
Default Ports: RTSP typically operates over ports 554 and 8554.
Effective enumeration is a critical step in assessing RTSP services. The following methodologies and tools are instrumental in this process:
Nmap offers specialized scripts tailored for RTSP enumeration:
This command probes the specified port on the target IP, utilizing RTSP-specific scripts to gather pertinent information about the RTSP service.
Direct interaction with RTSP services can yield valuable insights:
Sending a DESCRIBE Request: The DESCRIBE method retrieves the media description of the requested resource.
A successful response provides details about the media stream, including codec information and available control methods.
Handling Authentication Challenges: If the server requires authentication, it will respond with a 401 Unauthorized status, indicating the authentication scheme (e.g., Basic or Digest).
Basic Authentication: Credentials are encoded in Base64.
Replace <BASE64_ENCODED_CREDENTIALS> with the Base64-encoded string of username:password.
Digest Authentication: Involves a challenge-response mechanism where the client must compute a response based on the server's nonce value.
Several tools facilitate automated enumeration and assessment of RTSP services:
Features include:
Detection of open RTSP hosts on accessible targets.
Retrieval of host information such as hostname, port, and camera model.
Automated dictionary attacks to discover stream routes and credentials.
Generation of thumbnails for quick content previews.
Assessing RTSP services for vulnerabilities involves several key considerations:
RTSP services that require authentication may be susceptible to brute-force attacks:
: An RTSP surveillance camera access tool that detects open RTSP hosts, retrieves public information, and attempts to access their streams.
: A tool designed to perform brute-force attacks against RTSP authentication mechanisms.
: In addition to enumeration, Cameradar can execute dictionary attacks to uncover valid credentials.
Learn & practice
Become VeryLazyTech ! 🎁
✖ Twitter .
👾 Github .
📜 Medium .
📺 YouTube .
📩 Telegram .
🕵️♂️ My Site .
Visit our for e-books and courses. 📚