Cameradar is a network reconnaissance tool that scans for RTSP videosurveillance cameras and attempts to gain access to them through credential and route discovery.
The tool addresses the problem of identifying and accessing exposed RTSP camera streams on authorized targets. It works by scanning specified network ranges for open RTSP endpoints, detecting the device models behind those streams, and then performing dictionary-based attacks to discover both common stream routes (such as `/live.sdp`) and camera credentials. Once successful, it produces a report of accessible cameras and their details.
Cameradar is designed for security professionals conducting authorized penetration tests and network assessments. It suits environments where RTSP camera security needs to be evaluated, particularly in organizations running surveillance infrastructure that may use default or weak credentials. The tool is available both as a Docker container and as a standalone binary, making it accessible whether or not Docker is available in the testing environment. It supports flexible target specification including CIDR ranges, individual IPs, IP ranges, and hostnames, and allows users to supply custom credential and route dictionaries to tailor attacks to specific environments.
The project maintains active continuous integration with automated builds and test coverage tracking. Development activity shows consistent attention to code quality and reliability through these automated checks. The tool is distributed under an open source license and available through multiple installation methods, including direct binary installation via Go tooling and support for Android environments through Termux.
