fix: add tlsConfig to RTSP client to skip self-signed certs

2026-03-13 03:29:18 -07:00
parent 62ab02acf0
commit d70d774be6
2 changed files with 14 additions and 5 deletions
@@ -305,6 +305,13 @@ func (a Attacker) routeAttack(ctx context.Context, stream cameradar.Stream, rout

 	if code == base.StatusMovedPermanently {
 		a.handleRedirect(&stream, headers)
+		u, urlStr, err = buildRTSPURL(stream, route, stream.Username, stream.Password)
+		if err == nil {
+			code, _, err = a.probeDescribeHeaders(ctx, u, urlStr)
+			if err == nil {
+				a.reporter.Debug(cameradar.StepAttackRoutes, fmt.Sprintf("DESCRIBE %s RTSP/1.0 (redirect followed) > %d", urlStr, code))
+			}
+		}
 	}

 	access := code == base.StatusOK || code == base.StatusUnauthorized || code == base.StatusForbidden