https://bokkapig.pages.dev/tags/zoneminder/Recent content in ZoneMinder on bokkapigHugoen-gbSat, 07 Mar 2026 00:00:00 +0000https://bokkapig.pages.dev/writeups/cctv/Sat, 07 Mar 2026 00:00:00 +0000https://bokkapig.pages.dev/writeups/cctv/Default ZoneMinder credentials lead to RCE as www-data. Lateral movement via cracked bcrypt hash to SSH as mark, then sniffing Docker inter-container traffic for sa_mark credentials. Privilege escalation by abusing motionEye running as root to inject a reverse shell into camera event hooks.