CAMERAS

HD IPC H6EV100-SW-H
- Product Info: H6EV100-SW-H
- Version: V2.2.590 - 20190321 13:55:11

INESUN INS-HD46A-2.0MP+POE
- Product Info: IPD-E36Y0701-BS
- Version : V1.04.10-190222

Infos NMAP

nmap -AT4 192.168.1.118
Starting Nmap 7.70 ( https://nmap.org ) at 2019-12-05 21:15 CET
Nmap scan report for 192.168.1.118
Host is up (0.0048s latency).
Not shown: 994 closed ports
PORT     STATE SERVICE    VERSION
23/tcp   open  telnet     BusyBox telnetd
80/tcp   open  http       Cam-Webs
| fingerprint-strings: 
|   FourOhFourRequest: 
|     HTTP/1.1 404 Site or Page Not Found
|     Server: Cam-Webs
|     Date: Thu Dec 5 21:14:31 2019
|     Pragma: no-cache
|     Cache-Control: no-cache
|     Content-Type: text/html
|     <html><head><title>Document Error: Site or Page Not Found</title></head>
|     <body><h2>Access Error: Site or Page Not Found</h2>
|     <p>Cannot open URL</p></body></html>
|   GetRequest: 
|     HTTP/1.0 302 Redirect
|     Server: Cam-Webs
|     Date: Thu Dec 5 21:14:26 2019
|     Pragma: no-cache
|     Cache-Control: no-cache
|     Content-Type: text/html
|     Location: http://ipc/browse/index.asp
|     <html><head></head><body>
|     This document has moved to a new <a href="http://ipc/browse/index.asp">location</a>.
|     Please update your documents to reflect the new location.
|     </body></html>
|   HTTPOptions, RTSPRequest: 
|     HTTP/1.1 400 Page not found
|     Server: Cam-Webs
|     Date: Thu Dec 5 21:14:26 2019
|     Pragma: no-cache
|     Cache-Control: no-cache
|     Content-Type: text/html
|     <html><head><title>Document Error: Page not found</title></head>
|     <body><h2>Access Error: Page not found</h2>
|     <p>Bad request type</p></body></html>
|   Help: 
|     HTTP/1.1 400 Page not found
|     Server: Cam-Webs
|     Date: Thu Dec 5 21:14:51 2019
|     Pragma: no-cache
|     Cache-Control: no-cache
|     Content-Type: text/html
|     <html><head><title>Document Error: Page not found</title></head>
|     <body><h2>Access Error: Page not found</h2>
|_    <p>Bad request type</p></body></html>
| http-auth: 
| HTTP/1.1 401 Unauthorized\x0D
|_  Basic realm=Megapixel_IP_Camera
|_http-server-header: Cam-Webs
| http-title: Document Error: Unauthorized
|_Requested resource was http://192.168.1.118/browse/index.asp
90/tcp   open  dnsix?
554/tcp  open  rtsp
| fingerprint-strings: 
|   SIPOptions: 
|     RTSP/1.0 404 Stream Not Found
|     CSeq: 42
|_    Date: Thu, Dec 05 2019 20:15:29 GMT
|_rtsp-methods: ERROR: Script execution failed (use -d to debug)
8000/tcp open  ipcam      Hikvision IPCam control port
8088/tcp open  tcpwrapped
2 services unrecognized despite returning data. If you know the service/version, 
please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=12/5%Time=5DE9654E%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,17A,"HTTP/1\.0\x20302\x20Redirect\r\nServer:\x20Cam-Webs\r\nDate
SF::\x20Thu\x20Dec\x20\x205\x2021:14:26\x202019\r\nPragma:\x20no-cache\r\n
SF:Cache-Control:\x20no-cache\r\nContent-Type:\x20text/html\r\nLocation:\x
SF:20http://ipc/browse/index\.asp\r\n\r\n<html><head></head><body>\r\n\t\t
SF:This\x20document\x20has\x20moved\x20to\x20a\x20new\x20<a\x20href=\"http
SF:://ipc/browse/index\.asp\">location</a>\.\r\n\t\tPlease\x20update\x20yo
SF:ur\x20documents\x20to\x20reflect\x20the\x20new\x20location\.\r\n\t\t</b
SF:ody></html>\r\n\r\n")%r(HTTPOptions,131,"HTTP/1\.1\x20400\x20Page\x20no
SF:t\x20found\r\nServer:\x20Cam-Webs\r\nDate:\x20Thu\x20Dec\x20\x205\x2021
SF::14:26\x202019\r\nPragma:\x20no-cache\r\nCache-Control:\x20no-cache\r\n
SF:Content-Type:\x20text/html\r\n\r\n<html><head><title>Document\x20Error:
SF:\x20Page\x20not\x20found</title></head>\r\n\t\t<body><h2>Access\x20Erro
SF:r:\x20Page\x20not\x20found</h2>\r\n\t\t<p>Bad\x20request\x20type</p></b
SF:ody></html>\r\n\r\n")%r(RTSPRequest,131,"HTTP/1\.1\x20400\x20Page\x20no
SF:t\x20found\r\nServer:\x20Cam-Webs\r\nDate:\x20Thu\x20Dec\x20\x205\x2021
SF::14:26\x202019\r\nPragma:\x20no-cache\r\nCache-Control:\x20no-cache\r\n
SF:Content-Type:\x20text/html\r\n\r\n<html><head><title>Document\x20Error:
SF:\x20Page\x20not\x20found</title></head>\r\n\t\t<body><h2>Access\x20Erro
SF:r:\x20Page\x20not\x20found</h2>\r\n\t\t<p>Bad\x20request\x20type</p></b
SF:ody></html>\r\n\r\n")%r(FourOhFourRequest,148,"HTTP/1\.1\x20404\x20Site
SF:\x20or\x20Page\x20Not\x20Found\r\nServer:\x20Cam-Webs\r\nDate:\x20Thu\x
SF:20Dec\x20\x205\x2021:14:31\x202019\r\nPragma:\x20no-cache\r\nCache-Cont
SF:rol:\x20no-cache\r\nContent-Type:\x20text/html\r\n\r\n<html><head><titl
SF:e>Document\x20Error:\x20Site\x20or\x20Page\x20Not\x20Found</title></hea
SF:d>\r\n\t\t<body><h2>Access\x20Error:\x20Site\x20or\x20Page\x20Not\x20Fo
SF:und</h2>\r\n\t\t<p>Cannot\x20open\x20URL</p></body></html>\r\n\r\n")%r(
SF:Help,131,"HTTP/1\.1\x20400\x20Page\x20not\x20found\r\nServer:\x20Cam-We
SF:bs\r\nDate:\x20Thu\x20Dec\x20\x205\x2021:14:51\x202019\r\nPragma:\x20no
SF:-cache\r\nCache-Control:\x20no-cache\r\nContent-Type:\x20text/html\r\n\
SF:r\n<html><head><title>Document\x20Error:\x20Page\x20not\x20found</title
SF:></head>\r\n\t\t<body><h2>Access\x20Error:\x20Page\x20not\x20found</h2>
SF:\r\n\t\t<p>Bad\x20request\x20type</p></body></html>\r\n\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port554-TCP:V=7.70%I=7%D=12/5%Time=5DE96594%P=x86_64-pc-linux-gnu%r(SIP
SF:Options,50,"RTSP/1\.0\x20404\x20Stream\x20Not\x20Found\r\nCSeq:\x2042\r
SF:\nDate:\x20Thu,\x20Dec\x2005\x202019\x2020:15:29\x20GMT\r\n\r\n");
Service Info: Host: ipc

CGI

Remark:
Attribute class : parameter class. For example:

alarm_get; alarm_set, alarm_query
audio_get, audio_set, audio_query
image_get, image_set, image_query
mjpeg_get, mjpeg_set, mjpeg_query
minor_stream_get, minor_stream_set, minor_stream_query
major_stream_get, major_stream_set, major_stream_query
net_get, net_set, net_query
ptz_set, ptz_set, ptz_query
sys_get, sys_set, sys_query

Label code : response code. For example:

2xx means successfully
4xx means clienterror
5xx means server error

Label group : parameter name. For example:

Channel
DeviceInfo
- DeviceID
- Firmware
TimeInfo
- TimeMethod
- CameraTime
- DaylightEnable
- TimeZone
- NTPServerIP
StreamInfo
- Resolution
- BitRate
- FrameRate
- IPRate
- VideoQuality
ImageInfo
- Format
- Hue
- Brightness
- Saturation
- Contrast
OSDInfo
- DateFormat
- DateOSDX
- DateOSDY
- TimeOSDStatus
- TimeOSDX
- TimeOSDY
AudioInfo
- AudioCodec
- SampleRate
- BitRate
- Track
PTZCtrlInfo
- Stop
- Direction
- PanSpeed
- TiltSpeed
- Iris
- Zoom
- Focus
- AutoScan
- Preset
- PresetNumber
- PresetTitle
- Pattern
- PatternNumber
- AutoPan
- AutoPanNumbe
- Model
- Pan
- Tilt
- ZoomPosition

Label parameter : parameter name. For example:

Channel
Resolution
BitRate

Label type : parameter type. For example:

int
string

http://<servername>/cgi/<cginame>?<parameter>=<setValue>[&<parameter>=<setValue>...]

Test

rtsp://admin:passwd@192.168.1.118/MediaInput/mpeg4
rtsp://admin:passwd@192.168.1.118:554/1/h264major

http://<servername>/cgi/<cginame>?<parameter>=<setValue>[&<parameter>=<setValue>...]

http://admin:passwd@192.168.1.118/cgi/sys_get?Group=DeviceInfo
Successfully V6202IR-IMX307 V1.04.10-190222 071D3E200D7E 00:2a:2a:2d:0e:73 
IPD-E36Y0701-BS

http://192.168.1.118/cgi/sys_query?Group=DeviceInfo
Successfully

http://192.168.1.118/cgi/sys_query?Group=All
Successfully 0, 1 1 ... 1892160000 0, 1 -720, -660, -600, -540, -480, -420, -360, -300, 
-240, -210, -180, -120, -60, 0, 60, 120, 180, 210, 240, 270, 300, 330, 345, 360, 390, 420,
480, 540, 570, 600, 660, 720, 780 
valid string 

http://192.168.1.118/cgi/sys_query?Group=TimeInfo
Successfully 0, 1 1 ... 1892160000 0, 1 -720, -660, -600, -540, -480, -420, -360, -300, 
-240, -210, -180, -120, -60, 0, 60, 120, 180, 210, 240, 270, 300, 330, 345, 360, 390, 420,
480, 540, 570, 600, 660, 720, 780 
valid string 


http://192.168.1.118/cgi/audio_query?Channel=1&Group=All
Successfully 1 G711U,G711A,PCM,G726,AAC 0,1 0...9 8 

http://192.168.1.118/cgi/net_get?Group=AddressInfo
Successfully 192.168.1.118 255.255.255.0 192.168.1.254 0 208.67.222.222 208.67.220.220 

http://192.168.1.118/form/setPTZCfg?command=4&ZFSpeed=0&PTSpeed=0&panSpeed=8&tiltSpeed=8
command=4 panSpeed=8 tiltSpeed=8 HTTP/1.0 200 OK Pragma: no-cache Cache-control: no-cache 
Content-Type: text/html $STATE$=1 

Zoom In
http://192.168.1.118/form/setPTZCfg?command=13
command=13 panSpeed=0 tiltSpeed=0 HTTP/1.0 200 OK Pragma: no-cache Cache-control: no-cache 
Content-Type: text/html $STATE$=1 

Zoom Out
http://192.168.1.118/form/setPTZCfg?command=14
command=14 panSpeed=0 tiltSpeed=0 HTTP/1.0 200 OK Pragma: no-cache Cache-control: no-cache 
Content-Type: text/html $STATE$=1 

Zoom Stop
http://192.168.1.118/form/setPTZCfg?command=0


Patrouille Horizontale
http://192.168.1.118/form/setSpecialFunc?command=1&flag=2
flag=2 com_Type=1 $STATE$=1 

Présélections
http://192.168.1.118/form/presetSet?flag=4&existFlag=1&language=cn&presetNum=1
http://192.168.1.118/form/presetSet?flag=4&existFlag=1&language=cn&presetNum=2
http://192.168.1.118/form/presetSet?flag=4&existFlag=1&language=cn&presetNum=3
http://192.168.1.118/form/presetSet?flag=4&existFlag=1&language=cn&presetNum=4

http://192.168.1.118/form/presetSet?flag=4&presetNum=1

http://admin:passwd@192.168.1.118/cgi/ptz_set?Channel=1&Group=PTZCtrlInfo&Direction=8
&PanSpeed=8&TiltSpeed=8

http://admin:passwd@192.168.1.118/cgi/ptz_set?Channel=1&Group=PTZCtrlInfo&Stop=0

Flux principal (aka “majeur”):

http://admin:passwd@192.168.1.118/jpgimage/1/image.jpg

Flux principal (aka “majeur”):

rtsp://192.168.1.118:554/1/h264major

Sous flux (aka “mineur”):

rtsp://192.168.1.118:554/1/h264minor

http://192.168.1.118/cgi/ptz_set?Channel=1&Group=PTZCtrlInfo&Direction=2&
PanSpeed=8&TiltSpeed=8

How To BSD