I can see that my WyzeCam is listening on TCP/IP port 80. It responds to an HTTP request to “/” as follows:
% httpget -d -f http://192.168.86.27/
Host: 192.168.86.27, URL Host: 192.168.86.27, Name: /
GET / HTTP/1.0
User-Agent: Mozilla/2.0 (Win95; I)
Pragma: no-cache
Host: 192.168.86.27
Accept: /
HTTP/1.0 200 OK
Date: Fri, 26 Jan 2018 19:04:49 GMT
Server: Boa/0.94.13
Connection: close
Last-Modified: Fri, 26 Jan 2018 19:04:49 GMT
Content-Type: text/html
Are there any “secret” URLs that the camera responds to?
Personally what I’d like to see is an HTTP response from a internal WyzeCam URL which returns a JPEG (or PNG) file of what the camera is seeing at the time the HTTP request is made. I can imagine many uses for such a simple capability.
Is that feature on your “List of Things to Do Real Soon Now”? 
Best regards,
Bruce D. Lightner
1 Like
Yes, there is one URL that shows contents of microSD card, the other ones seem to have been disabled. 
Check GitHub - samtap/fang-hacks: Collection of modifications for the XiaoFang WiFi Camera 
ShadowCam,
Thanks, but maybe I’m blind. I can’t find the URL you mentioned on that GitHub page.
Here are all the TCP ports I’ve found to be open with “nmap”:
Port State Service
80/tcp open http
10002/tcp open unknown
22306/tcp open unknown
22345/tcp open unknown
I also discovered one UDP port:
Port State Service
10000/udp open|filtered ndmp
Best regards,
Bruce D. Lightner
Heh, not blind, but you got to dig into the discussions there, like this one. Adapting fang-hacks to Wyze firmware · Issue #268 · samtap/fang-hacks · GitHub
http://<CamIP>/cgi-bin/hello.cgi
Again, not much you can do with that, except look at the contents of the microSD card.
Nice. I want to follow this one ?
What??? The stream is sent over http??? So my neighbor can use WireShark to capture my home video?
Can anyone confirm whether the http access described here still works?
If it does, can anyone provide a straight-forward explaintion of exactly what url works?
Looking to make contact with the camera and get any kind of response that proves it’s online.
Bonus, answer; whether there is any kind of query that can retrieve the video stored on the SD card.