CVE-2021-36260-metasploit

CVE-2021-36260-metasploit the metasploit scriptPOC about CVE-2021-36260. A command injection vulnerability in the web server of some Hikvision product, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. preparation POC...

HikPwn

HikPwn HikPwn, a simple scanner for Hikvision devices with basic vulnerability scanning capabilities written in Python 3.8. This project was born out of curiosity while I was capturing and watching network traffic generated by some Hikvision's software and devices. Setup instructions:...

CVE-2017-7921-EXP

CVE-2017-7921 Exploit An Improper Authentication issue was discovered in Hikvision devices. ​ The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. ​ This may allow a malicious user to escalate his or her privileges on the system...

CVE-2017-7921

Hikvision Camera Lister & Snapshot Tool Standalone tool to list Hikvision cameras from a file and take a snapshot from each using valid credentials HTTP Basic or Digest auth or the CVE auth bypass. Intended to run on another host for testing. Features List cameras from a text file one host or...

CVE-2017-7921-Research-Toolkit

CVE-2017-7921 Research Toolkit Security Statement: This tool is intended for authorized security research and vulnerability verification only. Table of Contents Legal and Ethical Statement Project Description Features Installation Usage Output Defense and Remediation Recommendations Technical...

HikvisionExploiter

HikvisionExploiter HikvisionExploiter is a powerful and automated exploitation toolkit targeting unauthenticated endpoints on Hikvision IP cameras , particularly those running firmware version 3.1.3.150324. It performs: Snapshot access verification Config file retrieval and decryption User...

Ingram

English | 简体中文 Intro This is a web camera device vulnerability scanning tool, which already supports Hikvision, Dahua and other devices Installation Please run it under Linux or Mac. Please make sure you have installed Python = 3.8, but 3.11 is not recommended...

hikvision_CVE-2017-7921_auth_bypass_config_decryptor

hikvisionCVE-2017-7921authbypassconfigdecryptor This python file will decrypt the configurationFile used by hikvision cameras vulnerable to CVE-2017-7921. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ Description Hikvision IP Cameras Authentication Bypass...

Hikvision-City-Hunter

The ultimate 2025 city-level reconnaissance & exploitation tool for Hikvision IP cameras, DVRs, and NVRs Live console output • DVRs/NVRs highlighted in purple • Cameras in green • Snapshot auto-download • Honeypot filtering ╔══════════════════════════════════════════════════════════╗ ║ HIKVISION...

CVE-2017-7921-EXP

CVE-2017-7921 Exploit Se descubrió un problema de autenticación inadecuada en dispositivos Hikvision. ​ La vulnerabilidad de autenticación inadecuada ocurre cuando una aplicación no autentica a los usuarios de manera adecuada o correcta. ​ Esto puede permitir que un usuario malintencionado escale...

hikvision-exploiter

CVE-2017-7921., CVE-2021-36260 actualizado 21/01/2026...

HikVision-CVE-2017-7921

HikVision-CVE-2017-7921 通过CVE-2017-7921漏洞检查或测试目标IP地址上的 /onvif-http/snapshot?auth=YWRtaW46MTEK URI，使用多线程方法快速识别潜在漏洞。 Requirements root@kitploit: python3 Python Pacakges = requests, Fakeuseragent, colorama Installation 你可以直接使用 pip 安装依赖：pip install -r requirements.txt 如果你更喜欢手动安装所需的包，可以使用 pip install...

hikvision_probe

This repository does not have a README...

HikPasswordHelper

HikPasswordHelper Una herramienta que explota una puerta trasera en los firmwares de cámaras Hikvision de aproximadamente 2014-2016 ICSA-17-124-01 para ayudar al propietario a cambiar una contraseña olvidada. Uso Descargue HikvisionPasswordResetHelper.exe desde la pestaña de lanzamientos y ejecut...

HIK-CVE-2021-36260-Exploit

hikvisionbrute Brute Hikvision CAMS with CVE-2021-36260 Exploit run go run src/main.go -help to get help with running args run example go run src/main.go -infile ../CVE-NEW/hikvisionlist.txt.bak -threads 300 -maxtries 3 -timeout 10 -delay 2000 -good goodout.txt -bad badout.txt -err errout.txt...

AnonHik

AnonHik Python script to get image from Hikvision camera with CVE-2017-7921 vulnerability Demo:...

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 POC command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. Exploit Title:...

Hikvision IP camera/NVR - Remote Command Execution

Certain Hikvision products contain a command injection vulnerability in the web server due to the insufficient input validation. An attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. id: CVE-2021-36260 info: name: Hikvisio...

HikvisionExploiter_fixed

HikvisionExploiter Educational security tool for testing unsecured Hikvision exposures and checking CVE-2021-36260 in authorized environments. ⚠️ Legal and Ethical Warning This project should be used only on systems you own or have explicit permission to test. Scanning/exploitation without...

CVE-2017-7921

CVE-2017-7921 CVE-2017-7921-EXP Cámara Hikvision Esta herramienta está destinada principalmente a profesionales de seguridad en pruebas de penetración con autorización legal y a administradores de sitios web que realizan operaciones rutinarias. ¡Nadie puede utilizarla con fines ilegales o...