this gap.17:T494,Hi HN,

I’ve been working on pwneye, a CLI tool for interacting with IP cameras exposing ONVIF and RTSP services.

During penetration tests and red team engagements, I kept running into the same friction, with discovery, authentication testing, enumeration and stream validation spread across different tools or quick one-off scripts.

pwneye was built to handle that workflow end-to-end, from discovery to actually accessing and validating streams.

Current features include:

- ONVIF discovery and authentication testing (wordlists, multithreading)

- Post-auth enumeration (device info, users, network config, media profiles)

- RTSP extraction via ONVIF

- RTSP port detection and basic vendor identification

- Vendor-aware RTSP bruteforce

- Stream validation, preview and recording

- ONVIF reboot support

It’s still early, but already usable in real-world engagements.

Would be interested in feedback, especially from people who have dealt with ONVIF/RTSP cameras or IoT security in general.

Repo: https://github.com/hackerest/pwneye18:T42e,Hi HN, Antonio here. Founder of Seltz.

Seltz is a web search API built for AI agents. We wrote the crawler, the index, and the retrieval models ourselves, in Rust, by a team that's spent years building web search at scale. In our tests, queries come back in under 200ms.

Efficiency was the first design principle. Search sits on the critical path: agents can't generate their first tokens or kick off the next tool call until results come back. When you run tens or hundreds of queries in parallel, every millisecond of tail latency compounds.

Most search APIs for agents are wrappers around Google or Bing. If your agent already has a Google tool, a second call to a Google-wrapped API returns the same ten documents. We run our own independent index, so you get different results and different rankings.

Coverage starts with US ne

Highlights from Git 2.54

Fincept Terminal

Yojam: A macOS default-browser shim that routes URLs through a rule engine

Show HN: I built an app to practice public speaking for ESL learners

Ask HN: A good self-hosted development platform for open source repositories

Multi-Gig Broadband for Techies (UK)

Show HN: AI Coding Agent Guardrails enforced at runtime

Show HN: Pwneye – discovering and accessing IP cameras (ONVIF/RTSP)

At Long Last, InfoWars Is Ours

At Long Last, InfoWars Is Ours

Google Eyes New Chips to Speed Up AI Results, Challenging Nvidia

Forbes Prediction Market Gamefies Story About Mass Shooting of 8 Children

Sorry, Mary

Computer Science Is a Trap for Smart People [video]

Screaming body, freezing temps – life lessons from a freediver

Vector Pitfalls and Memory Management [video]

Multi merge sort, or when optimizations aren't

One last trip to the internet in 2009 with The Rough Guide 14

Making Rayleigh-Bénard Convection Cells

The debug loop is broken in robotics

Show HN: Seltz – The fastest, high quality, search API for AI agents

The 18th-century English fake news that helped spawn an American sea

Cahokia

Hack Monty, Win $5k: Inside PydanticAI's Challenge

Laz's Wolfenstein 3D Page

Colorado River disappeared record for 5M years: now we know where it was

Code Is the New Assembly

The Download: murderous 'mirror' bacteria, and Chinese workers fighting AI doub

OpenData Timeseries: Prometheus-compatible metrics on object storage

The AI engineering stack we built internally – on the platform we ship

Tell HN: Codex/Claude Code one-off credit purchases are a money sink

Highlights from Git 2.54

Fincept Terminal

Yojam: A macOS default-browser shim that routes URLs through a rule engine

Show HN: I built an app to practice public speaking for ESL learners

Ask HN: A good self-hosted development platform for open source repositories

Multi-Gig Broadband for Techies (UK)

Show HN: AI Coding Agent Guardrails enforced at runtime

Show HN: Pwneye – discovering and accessing IP cameras (ONVIF/RTSP)

At Long Last, InfoWars Is Ours

At Long Last, InfoWars Is Ours

Google Eyes New Chips to Speed Up AI Results, Challenging Nvidia

Forbes Prediction Market Gamefies Story About Mass Shooting of 8 Children

Sorry, Mary

Computer Science Is a Trap for Smart People [video]

Screaming body, freezing temps – life lessons from a freediver

Vector Pitfalls and Memory Management [video]

Multi merge sort, or when optimizations aren't

One last trip to the internet in 2009 with The Rough Guide 14

Making Rayleigh-Bénard Convection Cells

The debug loop is broken in robotics

Show HN: Seltz – The fastest, high quality, search API for AI agents

The 18th-century English fake news that helped spawn an American sea

Cahokia

Hack Monty, Win $5k: Inside PydanticAI's Challenge

Laz's Wolfenstein 3D Page

Colorado River disappeared record for 5M years: now we know where it was

Code Is the New Assembly

The Download: murderous 'mirror' bacteria, and Chinese workers fighting AI doub

OpenData Timeseries: Prometheus-compatible metrics on object storage

The AI engineering stack we built internally – on the platform we ship