cve-2021-33045

cve-2021-33045 Log in to the camera's web page by modifying the packets sent by the browser to /RPC2Login. Here, a mitmproxy script is used to implement the relevant functionality. Similar functionality can also be implemented using Fiddler or Burp Suite. Usage: mitmweb --showhost --set...

Netgrave

Netgrave A tool for retrieving login credentials from Netwave IP cameras using a memory dump vulnerability CVE-2018-17240. This project was inspired by expcamera and offers performance and efficiency improvements. This tool works for all platforms as it does not use any Linux CLI tools through...

CamRaptor

CamRaptor CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain network camera credentials. Features Exploits vulnerabilities in most popular camera models such as Novo, CeNova and QSee. Optimized to exploit multiple cameras at one time from list with threadin...

CVE-2025-67159

CVE-2025-67159 — Vatilon-based IP Cameras Summary Vatilon-based IP camera firmware contains an authentication bypass and plaintext credential exposure vulnerability in the /cgi-bin/web.cgi API. The web interface processes requests containing username and password parameters in plaintext without...

ezviz_lan_rce

ezvizlanrce This repository contains the slides and PoC videos for the talk SADProtocol goes to Hollywood which was presented at DEF CON 31 Hardware Hacking Village. You can also find the docker image to build binaries that run on the camera and the proof of concept exploits for CVE-2023-34551 an...

zoneminder

ZoneMinder All documentation for ZoneMinder is now online at https://zoneminder.readthedocs.org Overview ZoneMinder is an integrated set of applications which provide a complete surveillance solution allowing capture, analysis, recording and monitoring of any CCTV or security cameras attached to ...

DahuaLoginBypass

DahuaLoginBypass Chrome extension that uses vulnerability CVE-2021-33044 to log in to Dahua IP cameras and VTH/VTO video intercom devices without authentication. For other device types NVR/DVR/XVR, etc, there exists CVE-2021-33045 which cannot be exploited with an ordinary web browser. These...

CVE-2026-15315

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

CVE-2018-9995

CVE-2018-9995 CVE-2018-9995 hacking of CCTV cameras with vulnerability...

Hikvision-City-Hunter

The ultimate 2025 city-level reconnaissance & exploitation tool for Hikvision IP cameras, DVRs, and NVRs Live console output • DVRs/NVRs highlighted in purple • Cameras in green • Snapshot auto-download • Honeypot filtering ╔══════════════════════════════════════════════════════════╗ ║ HIKVISION...

dorkish

Dorkish During reconaissance phase or when doing OSINT , we often use google dorking and shodan and thus the idea of Dorkish. Dorkish is a Chrome extension tool that facilitates custom dork creation for Google and Shodan using the builder and it offers prebuilt dorks for efficient reconnaissance...

HikPasswordHelper

HikPasswordHelper A tool which exploits a backdoor in Hikvision camera firmwares circa 2014-2016 ICSA-17-124-01 to help the owner change a forgotten password. Usage Download HikvisionPasswordResetHelper.exe from the releases tab and run the exe. There are 5 simple steps to reset a password, and y...

frigate

Frigate NVR™ - 一个具有实时目标检测的本地 NVR English | 简体中文 一个完整的本地网络视频录像机（NVR），专为Home Assistant设计，具备 AI 目标/物体检测功能。使用 OpenCV 和 TensorFlow 在本地为 IP 摄像头执行实时物体检测。 强烈推荐使用 GPU 或者 AI 加速器（例如Google Coral 加速器 或者 Hailo等）。它们的运行效率远远高于现在的顶级 CPU，并且功耗也极低。 通过自定义组件与 Home Assistant 紧密集成 设计上通过仅在必要时和必要地点寻找目标，最大限度地减少资源使用并最大化性能...

Pantheon

Pantheon About Pantheon Pantheon is a GUI application that allows users to display information regarding network cameras in various countries as well as an integrated live-feed for non-protected cameras. Functionalities Pantheon allows users to execute an API crawler. There was original...

ConceptronicIPCam_MultipleVulnerabilities

Multiple vulnerabilities at Conceptronic IP Cameras with 0.61.X. web firmware. A CSRF and Denial of Service vulnerabilities have been found at Conceptronic IP Cameras. CVE| Description ---|--- CVE-2018-6407| Unauthenticated remote Denial of Service vulnerability CVE-2018-6408| CSRF allows to chan...

CVE-2017-8225

CVE-2017-8225 Install Python3 apt-get install git pip3 install requests pip3 install colorama sudo apt update apt-get install python3 Installation: git clone https://github.com/kienquoc102/CVE-2017-8225.git Code Exploit: cd CVE-2017-8225 python3 scanip.py Your File Text .txt Example: python3...

ezviz_lan_rce

ezvizlanrce Este repositorio contiene las diapositivas y los vídeos de prueba de concepto de la charla SADProtocol goes to Hollywood , presentada en DEF CON 31 Hardware Hacking Village. También puedes encontrar la imagen de docker para compilar binarios que se ejecutan en la cámara y los exploits...

Hikvision-CVE-2017-7921-decryptor

hikvisionCVE-2017-7921authbypassconfigdecryptor Este archivo de Python descifrará el archivo de configuración configurationFile utilizado por las cámaras Hikvision vulnerables a CVE-2017-7921. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ Descripción Omisión de...

CVE-2018-9995-rs

Overview This repository contains a proof-of-concept PoC exploit implemented in Rust targeting CVE-2018-9995. The code is for research and educational purposes only. CVE Details Identifier: CVE-2018-9995 Summary: Proof-of-concept exploit demonstrating the vulnerability see public advisories for...

CVE-2020-25749

CVE-2020-25749 Suggested description The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 could allow an remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a...