Tranya sells a range of wireless earbuds and the Rimor is one of their latest and best model.

They've been kind enough to send me a pair of these and here's the outcome.

The iPazzPort KP-62 is an RF remote I bought some time ago thinking it could be better than the H1 or even the unmatched TZ-P3.

XSS or Cross Site Scripting is a common vulnerability in software allowing attacker to inject code via the user interface.
Often, an input field just intended to collect a server address or user name will also accept entries of a different nature that will be interpreted by the system.

Low-cost IP Cameras, but also more professional ones, have been exposed to XSS for many years, a good reminder that such network devices should not be directly exposed to the Internet!
Hopefully that vulnerability is now well known and many manufacturers eventually "patched" their devices or reduced the attack surface by removing telnet and ftp altogether.

If your IP camera has a HTTP-based user interface, here's a working example of command injection (for learning purpose). This works great on old generation Veskys and Digoo BB-M2 (the pictures below comes from that model), and does not with the Wanscam models I tested.

First check if the admin interface of your camera as an FTP server settings page like this:



Then instead of FTP Server address, copy this command:
The actual FTP server test will report "Test  ...  Failed" which doesn't matter at all because the commands have been executed.

After that, use any telnet emulator, like Putty, and connect to the camera on port 23

As the owner of the camera, this trick allows you to gain full control on your camera.

"hslwificam"

Source: https://nm-projects.de/2017/01/hacking-ip-camera-digoo-bb-m2-part-3-getting-root-access/

More reading:
https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2010/february/busybox-command-injection/

GBMINOTE10

GBMINOTE10FB

GBMINOTE10EM

Following the rather good experience with the outdoor IP Camera HowellCam QJ05, I went on to try another smart camera, an indoor model this time: the YT08