Critical Severity
Published: Oct 25, 2026
KAMSTRIKE Open-source surveillance security framework Discover. Analyze. Validate. A modular offensive security framework for IP cameras, CCTV, NVRs, DVRs, and other surveillance infrastructure.
<p align="center">
<img src="docs/img/banner.png" alt="KAMSTRIKE — Camera, NVR & DVR Exploitation" width="100%">
</p>
<p align="center">
<img src="https://img.shields.io/badge/Python-3.10+-3b82f6?style=flat-square&logo=python&logoColor=white">
<img src="https://img.shields.io/badge/Vendors-26-22c55e?style=flat-square">
<img src="https://img.shields.io/badge/Exploits-29-ef4444?style=flat-square">
<img src="https://img.shields.io/badge/CVEs-25-f59e0b?style=flat-square">
<img src="https://img.shields.io/badge/Templates-21-a855f7?style=flat-square">
<img src="https://img.shields.io/badge/Default_creds-114-22c55e?style=flat-square">
<img src="https://img.shields.io/badge/API_Key-Not_required-22c55e?style=flat-square">
<img src="https://img.shields.io/badge/Interface-CLI_+_Web-0ea5e9?style=flat-square">
<img src="https://img.shields.io/badge/License-MIT-6b7280?style=flat-square">
<a href="https://ko-fi.com/k0r1m"><img src="https://img.shields.io/badge/Ko--fi-Support-FF5E5B?style=flat-square&logo=kofi&logoColor=white"></a>
</p>
---
Give Kamstrike a camera, a recorder or a whole subnet and it works out what the device is
before it touches it: **vendor, model, firmware and embedded web stack** from HTTP, RTSP and
ONVIF. Then it runs only what that device is actually affected by — **29 exploits across 25
CVEs**, **114 factory-default credentials**, **21 templates**, and media discovery over RTSP,
RTMP, MJPEG, HLS and snapshot. Every finding carries its evidence, and anything it could not
prove is labelled unverified rather than claimed.
Nothing to install beyond three Python packages. No API key, no external scanner, no template
downloads.
```bash
pip install httpx pyyaml rich
python3 kamstrike.py 192.168.1.0/24 # scan a subnet
python3 kamstrike.py --web # web dashboard → http://127.0.0.1:8787
python3 kamstrike.py --exploits # everything it can find, and how
```
<p align="center">
<img src="docs/img/dash-scans.png" alt="Kamstrike web