CamRaptor

CamRaptor CamRaptor는 인기 있는 DVR 카메라의 여러 취약점을 이용하여 네트워크 카메라 자격 증명을 획득하는 도구입니다. 기능 Novo, CeNova, QSee와 같은 가장 인기 있는 카메라 모델의 취약점을 악용합니다. 스레딩을 활성화하여 목록에서 여러 대의 카메라를 동시에 악용하도록 최적화되었습니다. 간단한 CLI 및 API 사용법. 설치 root@kitploit: pip3 install git+https://github.com/EntySec/CamRaptor 기본 사용법 CamRaptor를 사용하려면 터미널...

EUVD-2018-2747

Malware in sbrugna...

CamRaptor - Tool That Exploits Several Vulnerabilities In Popular DVR Cameras To Obtain Network Camera Credentials

CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain network camera credentials. Features Exploits vulnerabilities in most popular camera models such as Novo, CeNova and QSee. Optimized to exploit multiple cameras at one time from list with threading enabled...

CVE-2018-10676

CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices allow remote attackers to download a file and obtain sensitive credential information via a direct request for the download.rsp URI...

Information disclosure

CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices allow remote attackers to download a file and obtain sensitive credential information via a direct request for the download.rsp URI...

CVE-2018-10676

CVE-2018-10676 affects CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices. A remote attacker can download a file and obtain sensitive credential information by directly requesting the download.rsp URI, exposing a likely information-disclosure vulnerability. The CVSS data i...

Authentication flaw

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin"...

CVE-2018-9995

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a “Cookie: uid=admin”...