Skip to content

Configuration Reference

Brendan Le Glaunec edited this page Mar 4, 2026 · 2 revisions

Overview

This page is the complete configuration reference for Cameradar. It covers all CLI flags and their matching environment variables.

Flags

TARGETS / --targets / -t

This variable is required. It specifies the target that Cameradar scans and attempts to access.

Examples:

  • 172.16.100.0/24
  • 192.168.1.1
  • localhost
  • 192.168.1.140-255
  • 192.168.2-3.0-255

PORTS / --ports / -p

This variable is optional and allows you to specify the ports to scan.

Default value: 554,5554,8554

Change these only if you are sure cameras stream over different ports. Most cameras use these defaults.

CUSTOM_ROUTES / --custom-routes / -r

This option is optional. It replaces the default routes dictionary used for the dictionary attack.

If unset, Cameradar uses the built-in routes dictionary.

CUSTOM_CREDENTIALS / --custom-credentials / -c

This option is optional. It replaces the default credentials dictionary used for the dictionary attack.

If unset, Cameradar uses the built-in credentials dictionary.

SCANNER / --scanner

This optional variable sets the discovery backend.

  • nmap includes service discovery and is generally more reliable when you want to specifically identify RTSP services.
  • masscan is generally more efficient for large-scale discovery, but it does not identify services and therefore can be less specific for RTSP.

Supported values: nmap, masscan

Default value: nmap

SCAN_SPEED / --scan-speed / -s

This optional variable sets nmap discovery presets for speed or accuracy. Lower it on slow networks and raise it on fast networks. See nmap timing templates.

This option is ignored when --scanner masscan is used.

Default value: 4

SKIP_SCAN / --skip-scan

This optional flag skips network discovery and assumes every target and port pair is an RTSP stream.

Use it when you already know the RTSP endpoints or when discovery is blocked. For best results, specify only RTSP ports.

Default value: false

ATTACK_INTERVAL / --attack-interval / -I

This optional variable sets a delay between attacks. Increase it for networks that may block brute-force attempts. Default: no delay.

Default value: 0ms

TIMEOUT / --timeout / -T

This optional variable sets the timeout for requests sent to the cameras. Increase it for slow networks and decrease it for fast networks.

Default value: 2000ms

DEBUG / --debug / -d

This optional variable enables more verbose output.

It outputs discovery results (nmap or masscan), cURL requests, and more.

Default: false

UI / --ui

This option selects the UI mode.

  • auto selects tui if your terminal is interactive, plain otherwise
  • tui shows a fullscreen interface with a progress bar and shows the results in a table
  • plain logs the steps taken by cameradar as plain text and is meant to be used by non-interactive terminals

Supported values: auto, tui, plain

Default: auto

OUTPUT / --output

This optional variable writes an M3U playlist of the discovered streams to the given file path.

Example: /tmp/cameradar.m3u