Firmware vendor site scan about ipcam

[mishaturnbull]

Result of first scan:

Port	Proto	State	Service
80	TCP	Open	Microsoft HTTPAPI httpd 2.0 SSDP/UPnP
10220	TCP	Open	Unknown
45342	TCP	Open	SSL/Unknown

[mishaturnbull]

Interesting results from test 2:

• Didn't find any CSRF vulnerabilities
• Vulnerable to IIS Short name brute guessing:

| http-iis-short-name-brute: 
|   VULNERABLE:
|   Microsoft IIS tilde character "~" short name disclosure and denial of service
|     State: VULNERABLE (Exploitable)
|       Vulnerable IIS servers disclose folder and file names with a Windows 8.3 naming scheme inside the root folder.
|       Shortnames can be used to guess or brute force sensitive filenames. Attackers can exploit this vulnerability to
|       cause a denial of service condition.
|           

• HTTP TRACE enabled, potential risk
• Likely vulnerable to SlowLoris
• OS: Microsoft Windows 2012 or Microsoft Server 2012 R2