HikvisionExploiter

HikvisionExploiter HikvisionExploiter é um kit de ferramentas de exploração automatizado e poderoso, direcionado a endpoints não autenticados em câmeras IP Hikvision , particularmente aquelas que executam a versão de firmware 3.1.3.150324. Ele realiza: Verificação de acesso a snapshots Recuperaçã...

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 POC vulnerabilità di command injection nel web server di alcuni prodotti Hikvision. A causa di una validazione dell'input insufficiente, un attaccante può sfruttare la vulnerabilità per lanciare un attacco di command injection inviando messaggi con comandi malevoli...

CVE-2017-7921-Research-Toolkit GUI

CVE-2017-7921 Research Toolkit Security Statement: This tool is intended for authorized security research and vulnerability verification only. Table of Contents Legal and Ethical Statement Project Description Features Installation Usage Output Defense and Remediation Recommendations Technical...

EUVD-2013-4820

Malware in sbrugna...

CVE-2013-4976

Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials...

Metasploit Weekly Wrap-Up

Zimbra with Postfix LPE CVE-2022-3569 This week rbowes added an LPE exploit for Zimbra with Postfix. The exploit leverages a vulnerability whereby the Zimbra user can run postfix as root which in turn is capable of executing arbitrary shellscripts. This can be abused for reliable privilege...

Metasploit Weekly Wrap-Up

Veritas Backup Exec Agent RCE This module kindly provided by c0rs targets the Veritas Backup Exec Agent in order to gain RCE as the system/root user. The exploit itself is actually a chain of 3 separate CVEs CVE-2021-27876, CVE-2021-27877 and CVE-2021-27878 which only makes it more impressive...

Hikvision IP Camera Unauthenticated Command Injection

This module exploits an unauthenticated command injection in a variety of Hikvision IP cameras CVE-2021-36260. The module inserts a command into an XML payload used with an HTTP PUT request sent to the /SDK/webLanguage endpoint, resulting in command execution as the root user. This module...

CVE-2013-4975

Hikvision DS-2CD7153-E IP Camera has Privilege Escalation...

Privilege escalation

Hikvision DS-2CD7153-E IP Camera has Privilege Escalation...

CVE-2013-4975

Hikvision DS-2CD7153-E IP Camera has Privilege Escalation...

Hikvision IP Camera Default Credentials (HTTP)

The remote Hikvision IP camera device is using known default credentials. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

Hikvision IP Camera Detection (HTTP)

HTTP based detection of Hikvision IP camera devices. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Hikvision IP Camera versions 5.2.0 - 5.3.9 (Builds 140721 < 170109) - Access Control Bypass Explo

Exploit for hardware platform in category web applications Exploit Title: Hikvision IP Camera versions 5.2.0 - 5.3.9 Builds: 140721 - 170109 Backdoor Date: 15-03-2018 Vendor Homepage: http://www.hikvision.com/en/ Exploit Author: Matamorphosis Category: Web Apps Description: Exploits a backdoor in...

Hikvision IP Camera Web Interface Detection

Binary data hikvisionwwwdetect.nbin...

Hikvision IP Camera Remote Authentication Bypass

The remote Hikvision IP camera is affected by an authentication bypass vulnerability. A remote, unauthenticated attacker can read configurations including account passwords, access the camera images, or modify the camera firmware. C Tenable Network Security, Inc. include'compat.inc'; if descripti...