25 matches found
HikvisionExploiter
HikvisionExploiter HikvisionExploiter — мощный автоматизированный эксплуатационный набор инструментов, нацеленный на неаутентифицированные конечные точки IP-камер Hikvision , особенно тех, которые работают под версией прошивки 3.1.3.150324. Он выполняет: Проверку доступа к снимкам Извлечение и...
CheckHKRCE
CheckHKRCE CVE-2021-36260 Исходный код основан на: https://github.com/mcw0/PoC/blob/master/CVE-2021-36260.py Установка Python 3.8 + pip install requests Windows 10, Linux Ubuntu Использование python3 CheckHKRCE.py --rhost 192.168.1.11 --rport 80 --check CheckHKRCE.exe --rhost 192.168.1.11 --rport...
HIK-CVE-2021-36260-Exploit
hikvisionbrute Брутфорс по камерам Hikvision с использованием эксплойта CVE-2021-36260 запуск go run src/main.go -help для получения справки по аргументам запуска пример запуска go run src/main.go -infile ../CVE-NEW/hikvisionlist.txt.bak -threads 300 -maxtries 3 -timeout 10 -delay 2000 -good...
HikvisionExploiter_fixed
HikvisionExploiter Образовательный инструмент безопасности для проверки незащищённых экспозиций Hikvision и проверки CVE-2021-36260 в авторизованных средах. ⚠️ Юридическое и этическое предупреждение Этот проект должен использоваться только на системах, которые вам принадлежат или на которые у вас...
hikvision-unauthenticated-rce-cve-2021-36260
Уязвимость RCE CVE-2021-36260 в Hikvision Описание уязвимости Используя эту уязвимость, злоумышленник может получить полный контроль над устройством с неограниченной root-оболочкой, даже если владелец устройства ограничен ограниченной защищенной оболочкой psh. Помимо взлома IP-камер, также возмож...
hikvision-exploiter
CVE-2017-7921., CVE-2021-36260 обновлено 21/01/2026...
Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware
Hikvision CVE-2021-36260 RCE Vulnerability Vulnerability D...
Hikvision Multiple Products OS Command Injection (CVE-2021-36260)
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. This plugin only works with Tenable.ot. Please vis...
Joint Advisory AA22-279A and Vulristics
Hello everyone! This episode will be about the new hot twenty vulnerabilities from CISA, NSA and FBI, Joint cybersecurity advisory CSA AA22-279A, and how I analyzed these vulnerabilities using my open source project Vulristics. Alternative video link for Russia: Americans cant just release a list...
Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware
CVE-2021-36260 Check whether the Sleep command is e...
Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware
RemoteUploader Upload to a specific web server and run remote...
Hikvision IP Camera Unauthenticated Command Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Hikvision IP Camera Unauthenticated Command Injection', 'Description' = %q This module exploits an unauthenticated command injection in a variety...
Hikvision IP Camera Unauthenticated Command Injection Exploit
This Metasploit module exploits an unauthenticated command injection in a variety of Hikvision IP cameras CVE-2021-36260. The module inserts a command into an XML payload used with an HTTP PUT request sent to the /SDK/webLanguage endpoint, resulting in command execution as the root user. This...
Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware
CheckHKRCE CVE-2021-36260 Source code based on: https://githu...
Moobot Botnet Chews Up Hikvision Surveillance Systems
Although a patch was released in September, any still-vulnerable Hikvision IP Network Video Recorder NVR products are being actively targeted by the Mirai-based botnet known as Moobot. FortiGuard Labs has released a report detailing how the Moobot botnet is leveraging a known remote code executio...
Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware
CVE-2021-36260-metasploit the metasploit scriptPOC about CVE...
Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware
CVE-2021-36260 CVE-2021-36260 POC command injection vulnerabil...
Hikvision Web Server Build 210702 Command Injection
Exploit Title: Hikvision Web Server Build 210702 - Command Injection Exploit Author: bashis Vendor Homepage: https://www.hikvision.com/ Version: 1.0 CVE: CVE-2021-36260 Reference: https://watchfulip.github.io/2021/09/18/Hikvision-IP-Camera-Unauthenticated-RCE.html All credit to WatchfulIP...
RCE Vulnerability in Hikvision Cameras (CVE-2021-36260)
Hikvision has released updates to mitigate a command injection vulnerability—CVE-2021-36260—in Hikvision cameras that use a web server service. A remote attacker could exploit this vulnerability to take control of an affected device. CISA encourages users and administrators to review Hikvision’s...