Sign in Join

Live chat for Free Pascal, Lazarus, Delphi and every Pascal programmer.

Catalog · How the catalog works

Random project

Webcam-LED-Bypass

This analyzer tests your specific camera and Windows version to see if these "backdoor" paths are open.

View on GitHub

Anyone may press Interesting, signed in or not. It helps others find this project.

Member rating

No ratings yet.

Sign in to rate this project.

README

Webcam LED Bypass

The Webcam LED Bypass Analyzer is a hardware-level security auditing tool designed to investigate the integrity of Universal Video Class (UVC) devices. While the "silent recording" threat is a popular tech-thriller trope, this project aims to provide hard data on whether modern Operating Systems and hardware firmware actually allow unauthorized access to camera Extension Units (XUs) to suppress physical LED indicators.

Screenshot

Research Goal

To map out the "Privacy Wall" across various hardware vendors and Windows versions (Windows 10/11) to determine if software-defined LEDs can be manipulated without user consent.

Features

  • DirectShow Graph Injection: Bypasses high-level APIs to communicate directly with the UVC driver stack.
  • IKsControl Probing: Targets raw hardware registers via the IKsControl interface.
  • Multi-Vendor Support: Includes specialized GUIDs for:
    • Logitech (StreamCam, C-series)
    • Sunplus / ELP
    • Sonix / Genesys
    • Empia, Creative, & Cypress
  • Mutation Brute-forcer: Attempts to discover hidden vendor-specific Extension Units by mutating known GUID structures.
  • Topology Mapping: Enumerates internal hardware nodes to identify KSNODE_EXTENSION_UNIT blocks.

Current Research Findings

Based on internal testing across multiple environments:

Target Hardware OS Version Status Result
Logitech StreamCam Windows 11 (24H2) ✅ SECURE Privacy Wall Intact
Logi C615 HD WebCam Windows 11 (24H2) ✅ SECURE Privacy Wall Intact
Integrated Laptop Cam Windows 10 (22H2) ✅ SECURE Hard-wired LED
ELP USB 3.0 Cam Windows 10 ✅ SECURE Register Access Denied

The "Perfect Storm" Scenario: My research suggests that a bypass is only likely in a rare scenario involving:

  1. Legacy/Unpatched Operating Systems.
  2. Older "Software-Defined" LED hardware.
  3. Generic/No-name manufacturers with unhardened firmware.

🛠️ Installation & Usage

Prerequisites

  • Windows 7/10/11.
  • Delphi 10+ (to compile from source).

Running the Analyzer

  1. Clone the repository.
  2. Open webcamtestusb.dproj in Delphi.
  3. Build and Run.
  4. Select your target device from the dropdown.
  5. Click START STREAM to begin the hardware probe.

Contributing

This is a community-driven research project. We need your help to map the vulnerabilities of rare or older hardware.

  1. Test your hardware: Run the analyzer and report your findings.
  2. Submit GUIDs: Found a vendor XU we missed? Open an issue or PR with the GUID.
  3. Report Vulnerabilities: If you find a device where the LED can be suppressed, please provide the VID/PID and OS build details.

Disclaimer

This tool is for research and auditing purposes only. Always ensure you have administrative consent before probing hardware on a target environment.