| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-Id: <201809041539.w84Fd6gB007325@ip-100-122-145-1.us-east-1.ec2.aws.symcpe.net>
Date: Tue, 4 Sep 2018 15:39:06 GMT
From: jack.m.mckenna@...il.com
To: bugtraq@...urityfocus.com
Subject: Amcrest Cameras SSL Key Reuse Across installations
Unpacking the firmware of any given (4 tested) Amcrest Camera shows that they use the same SSL Keys.
For example, on the Amcrest_IPC-HX1X3X-LEXUS_Eng_N_AMCREST_V2.420.AC01.3.R.20180206 firware we can see hard coded SSL private keys and CAs. If we run binwalk we can see this in the folder
_Amcrest_IPC-HX1X3X-LEXUS_Eng_N_AMCREST_V2.420.AC01.3.R.20180206.bin.extracted/_user-x.squashfs.img.extracted/squashfs-root/bin/ssl
openssl x509 -in cacert.pem -text
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:34:39:30:36:38:35:39:33:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Product Root CA, C=US, ST=Taxas, L=Houston, O=Amcrest Technologies LLC, OU=Amcrest
Validity
Not Before: Mar 27 07:25:35 2017 GMT
Not After : Mar 27 07:25:35 2021 GMT
Subject: CN=Product Root CA, C=US, ST=Taxas, L=Houston, O=Amcrest Technologies LLC, OU=Amcrest
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:99:26:51:d4:6c:1d:88:28:cd:9a:ef:7d:f0:72:
37:5a:9a:12:58:4a:26:3f:ed:4a:51:5e:35:71:18:
32:fd:87:05:0c:06:a3:6d:25:20:3c:c1:42:c2:93:
4d:75:00:09:0d:5c:37:cc:65:5b:ca:b3:81:4b:94:
d6:ef:ce:fc:a6:52:aa:07:02:c8:89:2c:6b:f3:a8:
17:15:84:ef:5e:a6:c3:ef:b2:cc:24:df:8e:4f:67:
24:df:75:87:ba:60:f1:8a:05:5d:2e:bf:7d:89:d5:
c4:7e:05:8f:02:80:6b:ce:c5:f5:b7:15:0f:ec:d7:
bf:8a:c4:8c:97:9b:a4:79:47:d3:3e:7a:a1:bd:5d:
a2:9a:2a:41:25:b2:db:01:d7:a8:6d:52:1e:10:37:
80:4d:90:3b:b1:b3:31:73:37:b2:4e:48:84:08:01:
4c:f1:58:b1:c6:02:06:85:88:98:43:d0:f1:c6:d1:
f3:67:7f:37:7b:66:13:bc:41:22:6f:f5:13:7d:fb:
8f:92:f2:db:90:32:3f:21:fc:a8:41:94:a4:cc:ac:
27:d0:31:08:56:ea:17:30:5b:b8:bf:83:d1:92:b6:
ee:4f:c0:a7:4e:80:3e:12:24:e9:67:56:a3:7c:7f:
c2:1d:9d:7d:3e:db:64:22:9c:41:bd:9d:e6:34:dd:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AD:2D:97:7F:1F:FE:09:77:A7:96:FE:12:E7:3C:C6:B4:C1:FC:EC:BF
Signature Algorithm: sha256WithRSAEncryption
8d:72:fa:37:14:64:9b:d8:f2:04:d3:87:3d:0a:4b:dd:3b:c1:
b8:06:00:24:27:db:4d:8b:20:2e:bb:b8:68:99:06:73:06:45:
d8:50:48:49:12:71:04:67:66:3a:b3:78:6f:d9:59:f1:80:fb:
97:8f:e0:eb:58:02:aa:43:ce:37:f9:09:d0:4a:82:e2:61:e4:
19:bc:2e:b3:8f:13:87:f3:30:3f:eb:4d:07:5a:77:a5:f5:05:
5a:c8:0e:c1:b7:68:c3:a8:f1:2a:75:21:e9:d2:02:74:e5:c4:
c8:f0:e6:23:92:9f:eb:ad:ac:f4:d4:32:a4:eb:10:fe:49:90:
f3:85:f3:00:07:a4:2b:95:c2:d4:02:c2:21:42:aa:d5:a6:63:
68:14:a1:02:0d:1f:f7:6b:aa:4b:6c:09:63:97:37:84:0a:af:
96:a6:d2:a0:f7:48:8a:50:ac:0b:b3:47:8d:e8:f2:e9:a1:5f:
bb:27:3b:09:6a:82:a9:28:d2:a1:fa:44:9f:96:65:a1:de:6c:
da:c4:f5:99:c8:b3:ad:a4:0d:63:ef:09:c2:bc:bb:54:c7:8c:
8a:53:c4:e4:af:76:ac:61:a3:a9:51:b8:08:34:e5:37:50:1c:
c0:58:3d:ea:50:e4:6c:8c:57:fb:c8:45:40:6d:ed:0c:a5:15:
a3:43:59:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
openssl x509 -in cacert.pem -text
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:34:39:30:36:38:35:39:33:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Product Root CA, C=US, ST=Taxas, L=Houston, O=Amcrest Technologies LLC, OU=Amcrest
Validity
Not Before: Mar 27 07:25:35 2017 GMT
Not After : Mar 27 07:25:35 2021 GMT
Subject: CN=Product Root CA, C=US, ST=Taxas, L=Houston, O=Amcrest Technologies LLC, OU=Amcrest
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:99:26:51:d4:6c:1d:88:28:cd:9a:ef:7d:f0:72:
37:5a:9a:12:58:4a:26:3f:ed:4a:51:5e:35:71:18:
32:fd:87:05:0c:06:a3:6d:25:20:3c:c1:42:c2:93:
4d:75:00:09:0d:5c:37:cc:65:5b:ca:b3:81:4b:94:
d6:ef:ce:fc:a6:52:aa:07:02:c8:89:2c:6b:f3:a8:
17:15:84:ef:5e:a6:c3:ef:b2:cc:24:df:8e:4f:67:
24:df:75:87:ba:60:f1:8a:05:5d:2e:bf:7d:89:d5:
c4:7e:05:8f:02:80:6b:ce:c5:f5:b7:15:0f:ec:d7:
bf:8a:c4:8c:97:9b:a4:79:47:d3:3e:7a:a1:bd:5d:
a2:9a:2a:41:25:b2:db:01:d7:a8:6d:52:1e:10:37:
80:4d:90:3b:b1:b3:31:73:37:b2:4e:48:84:08:01:
4c:f1:58:b1:c6:02:06:85:88:98:43:d0:f1:c6:d1:
f3:67:7f:37:7b:66:13:bc:41:22:6f:f5:13:7d:fb:
8f:92:f2:db:90:32:3f:21:fc:a8:41:94:a4:cc:ac:
27:d0:31:08:56:ea:17:30:5b:b8:bf:83:d1:92:b6:
ee:4f:c0:a7:4e:80:3e:12:24:e9:67:56:a3:7c:7f:
c2:1d:9d:7d:3e:db:64:22:9c:41:bd:9d:e6:34:dd:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AD:2D:97:7F:1F:FE:09:77:A7:96:FE:12:E7:3C:C6:B4:C1:FC:EC:BF
Signature Algorithm: sha256WithRSAEncryption
8d:72:fa:37:14:64:9b:d8:f2:04:d3:87:3d:0a:4b:dd:3b:c1:
b8:06:00:24:27:db:4d:8b:20:2e:bb:b8:68:99:06:73:06:45:
d8:50:48:49:12:71:04:67:66:3a:b3:78:6f:d9:59:f1:80:fb:
97:8f:e0:eb:58:02:aa:43:ce:37:f9:09:d0:4a:82:e2:61:e4:
19:bc:2e:b3:8f:13:87:f3:30:3f:eb:4d:07:5a:77:a5:f5:05:
5a:c8:0e:c1:b7:68:c3:a8:f1:2a:75:21:e9:d2:02:74:e5:c4:
c8:f0:e6:23:92:9f:eb:ad:ac:f4:d4:32:a4:eb:10:fe:49:90:
f3:85:f3:00:07:a4:2b:95:c2:d4:02:c2:21:42:aa:d5:a6:63:
68:14:a1:02:0d:1f:f7:6b:aa:4b:6c:09:63:97:37:84:0a:af:
96:a6:d2:a0:f7:48:8a:50:ac:0b:b3:47:8d:e8:f2:e9:a1:5f:
bb:27:3b:09:6a:82:a9:28:d2:a1:fa:44:9f:96:65:a1:de:6c:
da:c4:f5:99:c8:b3:ad:a4:0d:63:ef:09:c2:bc:bb:54:c7:8c:
8a:53:c4:e4:af:76:ac:61:a3:a9:51:b8:08:34:e5:37:50:1c:
c0:58:3d:ea:50:e4:6c:8c:57:fb:c8:45:40:6d:ed:0c:a5:15:
a3:43:59:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
as well as
_Amcrest_IPC-HX1X3X-LEXUS_Eng_N_AMCREST_V2.420.AC01.3.R.20180206.bin.extracted/_user-x.squashfs.img.extracted/squashfs-root/bin/amcssl
openssl x509 -in cacert.pem -text
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 925100063 (0x3723e81f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=CA, ST=ON, L=Ottawa, O=Camcloud, OU=Camcloud, CN=Dan Burkett
Validity
Not Before: Apr 2 12:44:49 2015 GMT
Not After : Aug 18 12:44:49 2042 GMT
Subject: C=CA, ST=ON, L=Ottawa, O=Camcloud, OU=Camcloud, CN=Dan Burkett
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:ff:73:6c:6c:e1:de:b4:7d:a8:13:cf:66:3a:36:
22:30:11:f1:c4:44:33:68:b0:15:b0:0c:5a:41:10:
17:48:40:66:5d:db:d0:9e:5e:c9:85:ae:87:18:63:
40:2b:ad:d6:64:92:1c:23:99:fb:82:70:84:c1:cd:
6a:98:8a:0a:6e:de:9c:c8:34:97:c3:f6:95:51:42:
29:1f:2e:c5:92:9f:7e:f3:d8:7d:60:3b:ef:d3:3f:
34:3a:06:a5:9f:86:16:c3:ae:9b:6d:76:a3:dc:91:
84:e1:57:aa:ee:73:69:0b:6b:e6:65:72:1b:30:9b:
dd:86:0b:78:c0:81:55:e3:53:4b:5f:ef:8c:2e:ac:
c0:d7:b6:ea:5e:10:05:6a:bd:63:e7:53:5b:64:b6:
15:36:b5:08:8f:40:4f:aa:08:59:51:76:b5:73:a7:
0e:8e:f6:bf:a1:50:83:1d:4f:66:2a:77:ef:63:04:
56:c0:d9:ce:0d:18:c9:24:9c:43:11:8a:c1:95:27:
6e:bc:72:7c:ce:d0:d0:85:da:13:8c:fd:cc:56:a0:
45:82:5a:d3:c3:2f:cf:38:c1:b9:7a:1d:9b:2f:6a:
cf:6d:b8:c7:e3:b0:03:24:56:81:01:84:21:32:9c:
f6:11:6f:8e:47:2e:9c:5a:a8:b5:83:e6:bc:12:90:
80:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D4:87:CC:D7:70:3B:64:FF:6E:AE:C4:B1:37:3E:0C:1A:86:0B:CF
Signature Algorithm: sha256WithRSAEncryption
da:9e:50:c8:2d:f0:f5:3b:f6:71:75:bd:e5:e2:8d:f3:30:3e:
ed:88:91:d7:7b:55:9f:24:7b:de:7b:49:14:28:23:9f:de:fe:
1f:60:fb:68:a3:25:92:e5:e8:f5:e9:5b:06:58:24:ea:70:4f:
7d:2a:d7:86:46:c8:5e:95:13:65:66:e8:51:54:8e:b9:bc:de:
92:82:39:1e:f7:d1:95:58:03:7b:3d:1b:e7:29:9c:03:4c:d2:
2a:5c:63:9d:9f:5f:b2:58:92:40:b2:aa:c2:94:fd:10:4c:4f:
c2:19:1b:34:c1:8e:3c:14:be:3f:f3:be:2c:f6:5e:04:bf:f8:
13:b5:aa:e0:05:e5:a7:2f:c6:36:1c:bf:c1:d7:34:70:86:bc:
86:b5:ca:d1:b4:85:03:af:74:8b:ae:79:ad:94:63:27:17:99:
53:5c:6e:35:92:90:82:dd:80:c6:a0:c8:ba:f7:08:3c:5c:46:
7f:8c:b7:6f:7a:e6:66:91:86:89:0b:29:28:1c:79:3e:66:8e:
7c:6a:3f:e1:b5:5e:56:06:ac:8e:7d:6a:fb:91:94:46:b9:1d:
31:0f:a0:35:67:9f:70:c1:f7:ab:8b:4a:88:f3:20:10:10:e1:
e2:da:4c:db:3f:50:d7:dd:9e:27:bf:9a:b2:4c:7d:4c:6c:56:
7d:8a:76:54
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIENyPoHzANBgkqhkiG9w0BAQsFADBnMQswCQYDVQQGEwJD
QTELMAkGA1UECBMCT04xDzANBgNVBAcTBk90dGF3YTERMA8GA1UEChMIQ2FtY2xv
dWQxETAPBgNVBAsTCENhbWNsb3VkMRQwEgYDVQQDEwtEYW4gQnVya2V0dDAeFw0x
NTA0MDIxMjQ0NDlaFw00MjA4MTgxMjQ0NDlaMGcxCzAJBgNVBAYTAkNBMQswCQYD
VQQIEwJPTjEPMA0GA1UEBxMGT3R0YXdhMREwDwYDVQQKEwhDYW1jbG91ZDERMA8G
A1UECxMIQ2FtY2xvdWQxFDASBgNVBAMTC0RhbiBCdXJrZXR0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/3NsbOHetH2oE89mOjYiMBHxxEQzaLAVsAxa
QRAXSEBmXdvQnl7Jha6HGGNAK63WZJIcI5n7gnCEwc1qmIoKbt6cyDSXw/aVUUIp
Hy7Fkp9+89h9YDvv0z80Ogaln4YWw66bbXaj3JGE4Veq7nNpC2vmZXIbMJvdhgt4
wIFV41NLX++MLqzA17bqXhAFar1j51NbZLYVNrUIj0BPqghZUXa1c6cOjva/oVCD
HU9mKnfvYwRWwNnODRjJJJxDEYrBlSduvHJ8ztDQhdoTjP3MVqBFglrTwy/POMG5
eh2bL2rPbbjH47ADJFaBAYQhMpz2EW+ORy6cWqi1g+a8EpCAeQIDAQABoyEwHzAd
BgNVHQ4EFgQUqdSHzNdwO2T/bq7EsTc+DBqGC88wDQYJKoZIhvcNAQELBQADggEB
ANqeUMgt8PU79nF1veXijfMwPu2Ikdd7VZ8ke957SRQoI5/e/h9g+2ijJZLl6PXp
WwZYJOpwT30q14ZGyF6VE2Vm6FFUjrm83pKCOR730ZVYA3s9G+cpnANM0ipcY52f
X7JYkkCyqsKU/RBMT8IZGzTBjjwUvj/zviz2XgS/+BO1quAF5acvxjYcv8HXNHCG
vIa1ytG0hQOvdIuuea2UYycXmVNcbjWSkILdgMagyLr3CDxcRn+Mt2965maRhokL
KSgceT5mjnxqP+G1XlYGrI59avuRlEa5HTEPoDVnn3DB96uLSojzIBAQ4eLaTNs/
UNfdnie/mrJMfUxsVn2KdlQ=
-----END CERTIFICATE-----
openssl x509 -in cacert.pem -text
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 925100063 (0x3723e81f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=CA, ST=ON, L=Ottawa, O=Camcloud, OU=Camcloud, CN=Dan Burkett
Validity
Not Before: Apr 2 12:44:49 2015 GMT
Not After : Aug 18 12:44:49 2042 GMT
Subject: C=CA, ST=ON, L=Ottawa, O=Camcloud, OU=Camcloud, CN=Dan Burkett
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:ff:73:6c:6c:e1:de:b4:7d:a8:13:cf:66:3a:36:
22:30:11:f1:c4:44:33:68:b0:15:b0:0c:5a:41:10:
17:48:40:66:5d:db:d0:9e:5e:c9:85:ae:87:18:63:
40:2b:ad:d6:64:92:1c:23:99:fb:82:70:84:c1:cd:
6a:98:8a:0a:6e:de:9c:c8:34:97:c3:f6:95:51:42:
29:1f:2e:c5:92:9f:7e:f3:d8:7d:60:3b:ef:d3:3f:
34:3a:06:a5:9f:86:16:c3:ae:9b:6d:76:a3:dc:91:
84:e1:57:aa:ee:73:69:0b:6b:e6:65:72:1b:30:9b:
dd:86:0b:78:c0:81:55:e3:53:4b:5f:ef:8c:2e:ac:
c0:d7:b6:ea:5e:10:05:6a:bd:63:e7:53:5b:64:b6:
15:36:b5:08:8f:40:4f:aa:08:59:51:76:b5:73:a7:
0e:8e:f6:bf:a1:50:83:1d:4f:66:2a:77:ef:63:04:
56:c0:d9:ce:0d:18:c9:24:9c:43:11:8a:c1:95:27:
6e:bc:72:7c:ce:d0:d0:85:da:13:8c:fd:cc:56:a0:
45:82:5a:d3:c3:2f:cf:38:c1:b9:7a:1d:9b:2f:6a:
cf:6d:b8:c7:e3:b0:03:24:56:81:01:84:21:32:9c:
f6:11:6f:8e:47:2e:9c:5a:a8:b5:83:e6:bc:12:90:
80:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D4:87:CC:D7:70:3B:64:FF:6E:AE:C4:B1:37:3E:0C:1A:86:0B:CF
Signature Algorithm: sha256WithRSAEncryption
da:9e:50:c8:2d:f0:f5:3b:f6:71:75:bd:e5:e2:8d:f3:30:3e:
ed:88:91:d7:7b:55:9f:24:7b:de:7b:49:14:28:23:9f:de:fe:
1f:60:fb:68:a3:25:92:e5:e8:f5:e9:5b:06:58:24:ea:70:4f:
7d:2a:d7:86:46:c8:5e:95:13:65:66:e8:51:54:8e:b9:bc:de:
92:82:39:1e:f7:d1:95:58:03:7b:3d:1b:e7:29:9c:03:4c:d2:
2a:5c:63:9d:9f:5f:b2:58:92:40:b2:aa:c2:94:fd:10:4c:4f:
c2:19:1b:34:c1:8e:3c:14:be:3f:f3:be:2c:f6:5e:04:bf:f8:
13:b5:aa:e0:05:e5:a7:2f:c6:36:1c:bf:c1:d7:34:70:86:bc:
86:b5:ca:d1:b4:85:03:af:74:8b:ae:79:ad:94:63:27:17:99:
53:5c:6e:35:92:90:82:dd:80:c6:a0:c8:ba:f7:08:3c:5c:46:
7f:8c:b7:6f:7a:e6:66:91:86:89:0b:29:28:1c:79:3e:66:8e:
7c:6a:3f:e1:b5:5e:56:06:ac:8e:7d:6a:fb:91:94:46:b9:1d:
31:0f:a0:35:67:9f:70:c1:f7:ab:8b:4a:88:f3:20:10:10:e1:
e2:da:4c:db:3f:50:d7:dd:9e:27:bf:9a:b2:4c:7d:4c:6c:56:
7d:8a:76:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
To reproduce, download a firmware image from https://amcrest.com/firmwaredownloads
One will find a .bin file.
Install binwalk.
Run binwalk -Me amcrestfirmware.bin
navigate to
_user-x.squashfs.img.extracted/squashfs-root/bin/ssl/
and
_user-x.squashfs.img.extracted/squashfs-root/bin/amcssl/
Powered by blists - more mailing lists