CVE-2021-36260

PoC misc PoC - Internet of (In)Security Things Well worth to read about these crappy (in)security things: ipvmcom/reports/security-exploits Hikvision CVE-2021-36260 2021-10-19 All credit to Watchful_IP (watchfulipgithubio/) githubcom/mcw0/PoC/blob/master/CVE-2021-36260py Dahua CVE-2021-33044, CVE-2021-33045 2021-10-06 Details: githubcom/mcw

Python实现Poc快速测试框架，基于Selenium模拟爬取Fofa目标(可以使用普通会员测试10000+目标)，批量测试。

PocSelenium Python实现Poc快速测试框架，基于Selenium模拟爬取Fofa目标(可以使用普通会员测试10000+目标)，批量测试。 测试 使用hikvision cve-2021-36260 POC 测试 [*] Checking remote "************:80" [i] ETag: "0-a99-1e0" [+] Remote is not vulnerable (Code: 401) [*] Checking remote "************:38" [i]

PoC misc PoC - Internet of (In)Security Things Well worth to read about these crappy (in)security things: ipvmcom/reports/security-exploits Hikvision CVE-2021-36260 2021-10-19 All credit to Watchful_IP (watchfulipgithubio/) githubcom/mcw0/PoC/blob/master/CVE-2021-36260py Dahua CVE-2021-33044, CVE-2021-33045 2021-10-06 Details: githubcom/mcw

PoC misc PoC - Internet of (In)Security Things Well worth to read about these crappy (in)security things: ipvmcom/reports/security-exploits Hikvision CVE-2021-36260 2021-10-19 All credit to Watchful_IP (watchfulipgithubio/) githubcom/mcw0/PoC/blob/master/CVE-2021-36260py Dahua CVE-2021-33044, CVE-2021-33045 2021-10-06 Details: githubcom/mcw

the metasploit script(POC) about CVE-2021-36260

CVE-2021-36260-metasploit the metasploit script(POC) about CVE-2021-36260 A command injection vulnerability in the web server of some Hikvision product, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands preparation POC git clone githubcom/TaroballzChen/CVE-2021-36260-metasploit cd CVE-2021-362

Proof of concept (PoC) - misc PoC - Internet of (In)Security Things

PoC misc PoC - Internet of (In)Security Things Well worth to read about these crappy (in)security things: security-exploits Hikvision CVE-2021-36260 2021-10-19 All credit to Watchful_IP CVE-2021-36260 Dahua CVE-2021-33044, CVE-2021-33045 2021-10-06 Details: Dahua Authentication Bypass Dahua Console PoC: 2021-09-06 Two independent authentication bypass Due to the very high pote

简体中文 | English 简介 主要针对网络摄像头的漏洞扫描框架，目前已集成海康、大华、宇视、dlink等常见设备

Simple script to test hikvision cameras

HikExp Simple script to test hikvision cameras (CVE-2021-36260) Installation Requirements: Python Routerscan (stascorpcom/load/1-1-0-56) Git Run to install: apt install git python3 && git clone githubcom/lisksemen/HikExp After scanning ips with routerscan export scan table to the application directory E

HikPwn, a simple scanner for Hikvision devices with basic vulnerability scanning capabilities written in Python 3.8.

HikPwn HikPwn, a simple scanner for Hikvision devices with basic vulnerability scanning capabilities written in Python 38 This project was born out of curiosity while I was capturing and watching network traffic generated by some Hikvision's software and devices Setup instructions: git clone githubcom/4n4nk3/HikPwngit cd HikPwn pip install -r requirementstxt

PoC misc PoC - Internet of (In)Security Things Well worth to read about these crappy (in)security things: ipvmcom/reports/security-exploits Hikvision CVE-2021-36260 2021-10-19 All credit to Watchful_IP (watchfulipgithubio/) githubcom/mcw0/PoC/blob/master/CVE-2021-36260py Dahua CVE-2021-33044, CVE-2021-33045 2021-10-06 Details: githubcom/mcw

PoC misc PoC - Internet of (In)Security Things Well worth to read about these crappy (in)security things: ipvmcom/reports/security-exploits Hikvision CVE-2021-36260 2021-10-19 All credit to Watchful_IP (watchfulipgithubio/) githubcom/mcw0/PoC/blob/master/CVE-2021-36260py Dahua CVE-2021-33044, CVE-2021-33045 2021-10-06 Details: githubcom/mcw

Share some archives about IoT exploits.

Awesome-IoT-exp Share some archives about IoT exploits CVE-2021-36260 NETGEAR_D7000_Authentication_Bypass TP-Link RCE CVE-2021-1965 WiFi Zero Click RCE Trigger PoC from githubcom/parsdefense/CVE-2021-1965(高通骁龙平台 CVE-2021-1965 WiFi Zero Click RCE Trigger PoC) CVE-2022-30525 (FIXED): Zyxel Firewall Unauthenticated Remote Command Injection

Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.

PoC misc PoC - Internet of (In)Security Things Well worth to read about these crappy (in)security things: ipvmcom/reports/security-exploits Hikvision CVE-2021-36260 2021-10-19 All credit to Watchful_IP (watchfulipgithubio/) githubcom/mcw0/PoC/blob/master/CVE-2021-36260py Dahua CVE-2021-33044, CVE-2021-33045 2021-10-06 Details: githubcom/mcw

Brute Hikvision CAMS with CVE-2021-36260 Exploit

hikvision_brute Brute Hikvision CAMS with CVE-2021-36260 Exploit run go run src/maingo -help to get help with running args run example go run src/maingo -infile /CVE-NEW/hikvision_listtxtbak -threads 300 -max_tries 3 -timeout 10 -delay 2000 -good good_outtxt -bad bad_outtxt -err err_outtxt -unknown unknown_outtxt

简体中文 | English 简介 主要针对网络摄像头的漏洞扫描框架，目前已集成海康、大华、宇视、dlink等常见设备

海康威视RCE漏洞 批量检测和利用工具

海康威视 CVE-2021-36260 RCE 漏洞 漏洞描述 攻击者利用该漏洞可以用无限制的 root shell 来完全控制设备，即使设备的所有者受限于有限的受保护 shell（psh）。除了入侵 IP 摄像头外，还可以访问和攻击内部网络。 FOFA header="Hikvision" app="HIKVISION-视频监控"

简体中文 | English 简介 主要针对网络摄像头的漏洞扫描框架，目前已集成海康、大华、宇视、dlink等常见设备

RemoteUploader Upload to a specific web server and run remotely Module 1: RemoteUploaderServerModule() lport:int, # Pleass 0x01 ~ 0xff in range lhost:str, # Your IP address Path:str # File path 2: RemoteUploaderUploadModule() lhost:str, # Local IP or Global IP lport:int, # Download server port rh

RemoteUploader Upload to a specific web server and run remotely Module 1: RemoteUploaderServerModule() lport:int, # Pleass 0x01 ~ 0xff in range lhost:str, # Your IP address Path:str # File path 2: RemoteUploaderUploadModule() lhost:str, # Local IP or Global IP lport:int, # Download server port rh

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 /CVE-2021-36260py --rhost 1921685720 --rport 8080 --check Safe and unsafe vulnerability/verify check: (will only use 'unsafe check' if not verified with 'safe check') $/CVE-2021-36260py --rhost 1921685720 --rport 8080 --check --reboot Unsafe vulnerability/verify check: $/CVE-2021-36260py --rhost 1921685720 --rport

CVE-2021-36260

CheckHKRCE CVE-2021-36260 Source code based on: githubcom/mcw0/PoC/blob/master/CVE-2021-36260py Install Python 38 + pip install requests Windows 10 OS, Linux (Ubuntu) Used python3 CheckHKRCEpy --rhost 192168111 --rport 80 --check CheckHKRCEexe --rhost 192168111 --rport 80 --check

RemoteUploader Upload to a specific web server and run remotely Module 1: RemoteUploaderServerModule() lport:int, # Pleass 0x01 ~ 0xff in range lhost:str, # Your IP address Path:str # File path 2: RemoteUploaderUploadModule() lhost:str, # Local IP or Global IP lport:int, # Download server port rh

command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

CVE-2021-36260 CVE-2021-36260 POC command injection vulnerability in the web server of some Hikvision product Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands Exploit Title: Hikvision Web Server Build 210702 - Command Injection Exploit Author: bashis Vendor Ho

简介 主要针对网络摄像头的漏洞扫描框架，目前已集成海康、大华、宇视等常见设备。后期会加入更多摄像头设备和路由器设备。

CVE-2021-36260 Check whether the Sleep command is executed execution 1: check() rhost:str # target_host rport:int # target_port 2: SelfCommand() rhost:str # target_host rport:int # target_port command:str # os command

简体中文 | English Introduction ======= Mainly for the vulnerability scanning framework of network cameras, it has integrated common equipment such as Hikvision, Dahua, and Uniview More camera devices and router devices will be added later

A network scanner tool with GUI.

NetEye A network scanner tool with GUI 免责声明 本工具仅供安全测试，严禁用于非法用途，后果与本团队无关 鸣谢 & 引用 Thanks to jorhelp for Ingram Thanks to Aiminsun for CVE-2021-36260 Thanks to chrisjd20 for hidvision config file decryptor Thanks to mcw0 for DahuaConsole

网络摄像头漏洞扫描工具 | Webcam vulnerability scanning tool

简体中文 | English 简介 主要针对网络摄像头的漏洞扫描框架，目前已集成海康、大华、宇视、dlink等常见设备

hikvision_brute Brute Hikvision CAMS with CVE-2021-36260 Exploit run go run src/maingo -help to get help with running args run example go run src/maingo -infile /CVE-NEW/hikvision_listtxtbak -threads 300 -max_tries 3 -timeout 10 -delay 2000 -good good_outtxt -bad bad_outtxt -err err_outtxt -unknown unknown_outtxt

简体中文 | English 简介 主要针对网络摄像头的漏洞扫描框架，目前已集成海康、大华、宇视、dlink等常见设备