|
| 1 | +This module is a scanner which enumerates Google Chromecast via its HTTP interface (default port 8008). The WiFi access point the Chromecast is also enumerated. |
| 2 | + |
| 3 | +## Verification Steps |
| 4 | + |
| 5 | +1. Do: ```use auxiliary/scanner/http/chromecast_webserver ``` |
| 6 | +2. Do: ```set RHOSTS [IP]``` |
| 7 | +3. Do: ```run``` |
| 8 | + |
| 9 | +## Sample Output |
| 10 | + |
| 11 | +Of note, all 3 of the devices are the 1st generation Google Chromecast (USB stick looking, not circular) |
| 12 | + |
| 13 | +``` |
| 14 | +msf > use auxiliary/scanner/http/chromecast_webserver |
| 15 | +msf auxiliary(chromecast_webserver) > set threads 10 |
| 16 | +threads => 10 |
| 17 | +msf auxiliary(chromecast_webserver) > set verbose true |
| 18 | +verbose => true |
| 19 | +msf auxiliary(chromecast_webserver) > set rhosts 10.10.10.0/24 |
| 20 | +rhosts => 10.10.10.0/24 |
| 21 | +msf auxiliary(chromecast_webserver) > run |
| 22 | +
|
| 23 | +[+] 10.10.10.25:8008 - Chromecast "Guest Bedroom" is connected to Rapid7_wifi |
| 24 | +[*] Scanned 26 of 256 hosts (10% complete) |
| 25 | +[*] Scanned 52 of 256 hosts (20% complete) |
| 26 | +[*] Scanned 78 of 256 hosts (30% complete) |
| 27 | +[*] Scanned 108 of 256 hosts (42% complete) |
| 28 | +[*] Scanned 128 of 256 hosts (50% complete) |
| 29 | +[*] Scanned 154 of 256 hosts (60% complete) |
| 30 | +[*] Scanned 183 of 256 hosts (71% complete) |
| 31 | +[+] 10.10.10.192:8008 - Chromecast "Bedroom" is connected to Rapid7_wep |
| 32 | +[+] 10.10.10.196:8008 - Chromecast "cast" is connected to Rapid7_wep |
| 33 | +[*] Scanned 213 of 256 hosts (83% complete) |
| 34 | +[*] Scanned 232 of 256 hosts (90% complete) |
| 35 | +[+] 10.10.10.236:8008 - Chromecast "Basement" is connected to Rapid7_wep |
| 36 | +[*] Scanned 256 of 256 hosts (100% complete) |
| 37 | +[*] Auxiliary module execution completed |
| 38 | +``` |
0 commit comments