curl: Unsupported protocol

[jepunband]

If you're reporting a bug, use the template below. Otherwise, delete this template and write your issue normally.

Context

Please select one:

• I use the docker image ullaakut/cameradar
• I use my own build of the docker image
• [*] I use the pre-compiled binary
• I use my own build of the binary
• None of the above / I don't know

Please select one:

• I use a specific version:
• [*] I use the latest commit of the master branch
• I use the latest commit of the develop branch
• I use a forked version of the repository:
• I use a specific commit:

Environment

My operating system:

• Windows
• OSX
• [*] Linux
• Other

OS version:
OS architecture: <64>

Issue

Loading credentials...ok
Loading routes...ok
Scanning the network...ok
Attacking routes of 1 streams...ok
Attempting to detect authentication methods of 1 streams...ok
Attacking credentials of 1 streams...ok

Perform failed for "rtsp://:@192.168.1.4:554//" (auth 3): curl: Unsupported protocol
Perform failed for "rtsp://:111111@192.168.1.4:554//" (auth 3): curl: Unsupported protocol
Perform failed for "rtsp://:1111111@192.168.1.4:554//" (auth 3): curl: Unsupported protocol
Perform failed for "rtsp://:1234@192.168.1.4:554//" (auth 3): curl: Unsupported protocol

What was expected

Successful attack, without errors.

What happened

got continues curl:unsupported protocol error.
when i do on my browser "rtsp://admin:password@192.168.1.7/route" , it works vlc opens up and i can see the video stream.

Logs

If your issue is with Cameradar's binary or docker image, please run it with -v to print verbose logs, and paste them here:

<cameradar logs>

[Ullaakut]

Hi @jepunband, thanks for opening this issue! This is a common issue that can come from a variety of factors:

• The camera you are trying to access might have an old firmware that does not respect the RTSP RFC -- unlikely.
• You might be using an outdated version of Cameradar, since an issue triggering these errors with cameras that use digest authentication was fixed a while back (I'm not sure, since your issue mentions that you use a pre-compiled binary, but also that you built the binary from the master branch?) -- unlikely as well.
• If you are building Cameradar manually, you might have a version of curl that is too recent, which unfortunately no longer supports RTSP digest authentication. (Explanations by the curl author himself). In this case, you will need to use libcurl-dev 7.64.0 or older. Another option is to use the Docker build, which comes out of the box with the right version of curl.

I will keep this issue open while I clarify this last case in the README.

Let me know if you think that your issue is not related to the third aforementioned point.

[jepunband]

i will re install with go get again and try. just on a side note when i open my browser "rtsp://admin:password@192.168.1.7/route" , it works vlc opens up and i can see the video stream.

[Ullaakut]

@jepunband Yes, that is because VLC does not use curl to interact with cameras, but instead forges its own RTSP requests in C code. I could do that as well, but that would make Cameradar much more complex and bloated. An easier solution would be to provide a pre-compiled binary with the right version of curl, which I might do when I have some time. Another solution would be to fix the bug in curl, but that's beyond my reach unfortunately.