So my house came with a Vivint security system (we did not activate) and has various sensors:
- V-CAM1
- DW-11 Window Sensors
- GB1-345 Glass Break Sensors
- DW-20 Recessed Door Sensors
Looks like the sensor are Z-Waze (just getting started with HA and need a Z Wave dongle etc). Took a run at the camera after not seeing any firm documentation on this.
If you hard reset the camera:
- Unplug
- Hold Top Grey Button
- Plug In
- Wait for Red Light
You then get a voice prompt something like “Lets set up your camera” and the light ring turns green. You then press and hold the button again for (I think 3 seconds - need to confirm this) and it will say something like “Lets connect your camera…”.
This is where you need to hit the WPS button on your WiFi. The camera will at some point say something like " Connected… Processing…" and then silently the light ring will return to flashing.
Here is the tricky part - you have no idea what the camera IP is - I lucked out as my ISP provided router shows you all connected devices and MAC address which is on the camera base.
I then tried the IP which redirects to:
http://[Camera IP]/eng/liveView.cgi
with a “Forbidden” status page.
Next I stumbled across this:
How to Scan for RTSP Urls · Victor's Blog which results in:
dan$ nmap --script rtsp-url-brute -p 554 10.0.1.144
Starting Nmap 7.91 ( https://nmap.org ) at 2025-02-14 13:24 MST
Nmap scan report for 10.0.1.144
Host is up (0.0063s latency).
PORT STATE SERVICE
554/tcp open rtsp
| rtsp-url-brute:
| discovered:
| rtsp://10.0.1.144/play1.sdp
|_ rtsp://10.0.1.144/play2.sdp
Nmap done: 1 IP address (1 host up) scanned in 0.78 seconds
Fired up the URL in a RTSP app and it works great (so far)
- not sure if you get audio
- note that the Vivint watermark is on the video
- Connects to the 2.4 GHz network
Next is to some how get into the admin interface on these - there has to be one you would think.