NSE: rtsp-url-brute (How to Connect to RTSP via VLC Media Player)
I was fumbling around with a network scan on an old machine in my lab environment and it lead me down this path of research. It had a protocol "rtsp" on port 554. So I dug in and gathered some information.
RTSP - What is it?
RTSP or Real Time Streaming Protocol is a protocol designed for controlling streaming media servers.
Kind of a weird protocol to see on a random windows 7 machine that's been living in a box for 5 years. I wanted to learn how to exploit this protocol and I stumbled on something huge.
RTSP is used in many media servers and when not properly secured can easily expose your video to the public internet.
The picture below are just 6 of the 68,213 that came up from a shodan search.
So what do we do when we find rtsp service running on a target? Well because rtsp runs kind of similar to http (similar only in that the string you use starts with rtsp:// vs http://) and one of the first things we do when we encounter http is we run directory enumeration on it, let's do the same thing for the rtsp service.