Using these search strings can reveal live video feeds of private locations, businesses, or industrial sites if they are not protected by a password. Modern systems like
The Underlying Vulnerability: Legacy Firmware and Misconfiguration inurl multicameraframe mode motion exclusive
: Tells Google to search for a specific phrase within the URL structure of a webpage. Using these search strings can reveal live video
: This operator tells Google to search for the specific text within the URL of indexed pages. If you own a networked camera, ensure it
If you own a networked camera, ensure it isn't "dorkable" by following these steps:
When a user searches for this specific string, they are looking for cameras where the administrator failed to set a password or left the default credentials (such as admin/admin) active. The parameters "motion" and "exclusive" help filter results to find active, streaming feeds rather than static setup pages.
12 Mar 2020 — Google Dork Description: inurl:"MultiCameraFrame? Mode=Motion" Google Search: inurl:"MultiCameraFrame? Mode=Motion" # Google Dork: Exploit-DB Inurl Multicameraframe Mode Motion - Google Groups