CVE-2018-9995-2

Tool CVE-2018-9995-2 root@kitploit: CVE: CVE-2018-9995 Exploit Author: Fernandez Ezequiel @capitanalfa Modify: Kien Quoc Version: 2.0 Install Python3 root@kitploit: apt-get install git pip3 install requests pip3 install colorama sudo apt update apt-get install python3 Quick start root@kitploit: g...

DVR_Sploit

DVRSploit Simple python3 script to automate CVE-2018-9995 Requirements: requests pip install requests Usage: root@fuckmachine: python3 dvrsploit.py Enter DVR host: 192.168.69.69 Enter DVR port: 88 Device list:...

DVRFaultNET

DVRFaultNET .NET console application that exploits DVR CVE-2018-9995 vulnerability Usage Once launched, you will be prompted to enter the URL of the DVR camera. The program add ?opt=user&cmd=list to the URL and sends a request containing "Cookie:uid=admin" header then server return a JSON string...

Tool_Exploit_Password_Camera_CVE-2018-9995

ToolExploitPasswordCameraCVE-2018-9995 CVE-2018-9995: https://vulners.com/cve/CVE-2018-9995 1. 在Google上搜索存在漏洞的设备，关键词：intitle:"DVR login". 2. 尝试访问任意设备： 我们发现设备要求输入用户名和密码才能访问。 3. 尝试检查是否能获取设备的用户名和密码： 我们将设备的对应IP和端口输入到工具中。 4. 存在漏洞的设备： 我们获取了设备对应的用户名和密码。 5. 结果： 我们使用从工具获取的用户名和密码成功登录了设备。...

HTC

Hack The CCTV DVRs Credentials Exposed | CVE-2018-9995 | The CCTV Leaked Username For Get Loggin Access How To Use? root@kitploit: Open The https://www.zoomeye.org/ Search This Keyword '/login.rsp' Wait To Get IP and Port $ python3 thecctv.py More Information OS| Language| Contact ---|---|--- Lin...

CVE-2018-9995-ModifiedByGwolfs

statement This tool is an improved version of the CVE-2018-9995 wrote by gwolfs,and is for learning use only。Do not use for illegal purposes，all the consequences resulting from this are your own.The orginal version is wrote by ezelf and is on https://github.com/ezelf/CVE-2018-9995dvrcredentials...

CVE-2018-9995-POC

CVE-2018-9995-POC CVE-2018-9995 POC python CVE-2018-9995Bata.py -proxy 127.0.0.1:9487 -f Importdata.txt -o Outputdata.txt -p 12 -f ※Batch import file Data source format example: 43.255.172.204:9200 192.168.168.5:1234 -o ※Output file -proxy ※Socks5 forwarding proxy -p ※Number of multi-threaded cor...

CVE-2018-9995-ModifiedByGwolfs

state This tools is an improved version of the CVE-2018-9995 wrote by gwolfs,and is for learning use only。Do not use for illegal purposes，all the consequences resulting from this are your own.The orginal version is wrote by ezelf and is on https://github.com/ezelf/CVE-2018-9995dvrcredentials Than...

HTC

HTC | HackTheCCTV Credenciales de DVR expuestas | CVE-2018-9995 | El nombre de usuario de CCTV filtrado para obtener acceso de inicio de sesión Uso root@kitploit: Open https://www.zoomeye.org/ Search With Keywod : /login.rsp $ python3 thecctv.py...

CVE-2018-9995-rs

Overview This repository contains a proof-of-concept PoC exploit implemented in Rust targeting CVE-2018-9995. The code is for research and educational purposes only. CVE Details Identifier: CVE-2018-9995 Summary: Proof-of-concept exploit demonstrating the vulnerability see public advisories for...

CVE-2018-9995_Batch_scanning_exp

CVE-2018-9995Batchscanningexp（last 2018-8-9） 针对CVE-2018-9995漏洞的dvr批量扫描脚本 CVE-2018-9995原利用脚本Original code 环境准备Environmental preparation python3、ubuntu root@kitploit: user@ubuntu:$ sudo pip3 install grequests user@ubuntu:$ sudo pip3 install tableprint 使用方式（usage mode） 将待扫描设备以ip:port形式存入csv文件第一列 The...

CVE-2018-9995-DVR-Credentials-Extractor

Tool show DVR Credentiales root@kitploit: Original Tool: https://github.com/ezelf/CVE-2018-9995dvrcredentials Exploit Title: "Gets DVR Credentials" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author:...

CVE-2018-9995

This repository does not have a README...

CVE-2018-9995_check

CVE-2018-9995check DVR系列摄像头批量检测 使用方法:python CVE-2018-9995.py host.txt 其中host.txt内容可以为8.8.8.8:8080或者www.baidu.com，脚本运行后对使用了DVR系列摄像头的host会保存到result.txt文件里 漏洞利用工具可访问:https://github.com/ezelf/CVE-2018-9995dvrcredentials 注:请勿非法使用...

Exploit for CVE-2018-9995

CVE-2018-9995 Exploit Tool for Python3 This Python script is d...

Hackers Exploiting 5-year-old Unpatched Vulnerability in TBK DVR Devices

Threat actors are actively exploiting an unpatched five-year-old flaw impacting TBK digital video recording DVR devices, according to an advisory issued by Fortinet FortiGuard Labs. The vulnerability in question is CVE-2018-9995 CVSS score: 9.8, a critical authentication bypass issue that could b...

Exploit for CVE-2018-9995

Tool CVE-2018-9995-2 CVE: CVE-2018-9995...

TBKvision Firmware Authentication Bypass (CVE-2018-9995)

An authentication bypass vulnerability exists in TBKvision Firmware. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

DVR-Exploiter - Bash Script Program Exploit The DVR's Based On CVE-2018-9995

DVR-Exploiter Exploit Title: DVR Credentials Exposed Date: 09/04/2018 Exploit Author: Fernandez Ezequiel DVR-Exploiter By: Belahsan Ouerghi Contact: www.facebook.com/ouerghi.belahsan Youtube Tutorial: https://www.youtube.com/watch?v=vdnATjE4II Dorks: intitle:"DVR Login" html:"/login.rsp" "Server:...

TBK DVR Login Bypass(CVE-2018-9995)

En un articulo anterior presente una vuln que me permitía obtener las credenciales de cierto modelo de DVR. Tan simple como: $ curl "http://:/device.rsp?opt=user&cmd=list" -H "Cookie: uid=admin" Resulta que el hallazgo no corresponde a un vendor en particular como originalmente supuse. Me...