pwneye

pwneye is a focused and portable offensive security tool for working with IP cameras that expose ONVIF and RTSP services, aiming to give security researchers and hackers an easy way to handle discovery, authentication testing, metadata collection, stream validation, recording, and follow-up actio...

CVE-2025-70962

CVE-2025-70962 Use of Hard-coded Credentials in ZOSI C519M IP camera RTSP service Field| Value ---|--- CVE ID| CVE-2025-70962 Vendor| ZOSI Technology Product| ZOSI C519M smart IP camera also listed as model 1NC-519M Affected versions| Firmware V4.2.8.832C01450BA tested build; earlier versions not...

Hipcam-RTSP-Format-Validation-Vulnerability

Hipcam RealServer/V1.0 RTSP Format Validation Vulnerability Proof-of-Concept | CVE-2023-50685 Proof-of-Concept for RTSP Service Format Validation Vulnerability in Hipcam RealServer/V1.0. Description This POC exploits a format validation vulnerability in the Real Time Streaming Protocol RTSP servi...

cameradar

Cameradar RTSP stream access tool Cameradar scans RTSP endpoints on authorized targets, and uses dictionary attacks to bruteforce their credentials and routes. What Cameradar does Detects open RTSP hosts on accessible targets. Detects the device model that streams the RTSP feed. Attempts...

CVE-2026-56718

CVE-2026-56718 Unauthenticated path traversal in jdbhttpd/0.1.0 AJCloud AJY IPC firmware allowing remote reading of arbitrary files as root, including cleartext RTSP credentials. CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory Severity: CVSS 4.0 - 8.7 High Affected: AJClou...

scan-for-webcams

scan-for-webcams 📷 中文文档 Note I switched to a new method of installing this program for a better developer experience and better modifiability. As a result, the PYPI package scan-for-webcams is not maintained anymore, and should be considered deprecated. btw: we have a discord channel ! join Table...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

doona

Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...

CamXploit

If you find this GitHub repo useful, please consider giving it a star! ⭐️ CamXploit is a security reconnaissance tool designed to help researchers and defenders assess whether an IP address is hosting a potentially exposed IP camera or CCTV service. The tool performs non-intrusive checks such as...

RTSPbrute

This repository does not have a README...

RTSPbrute

RTSPBrute Inspired by Cameradar Features Find accessible RTSP streams on any target Brute-force stream routes Brute-force credentials Make screenshots on accessible streams Generate user-friendly report of the results: .txt file with each found stream on new line .html file with screenshot of eac...

RTSPServer-Code-Execution-Vulnerability

Live Networks LIVE555 streaming media RTSPServer lookForHeader code execution vulnerability CVE-2018-4013 Summary An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library. A specially crafted packet can cause a stack-based buff...

CVE-2026-107411

Memory overflow in RTSP ALG can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler...

CVE-2026-107411

A memory overflow in the RTSP ALG of Citrix NetScaler ADC and Citrix NetScaler Gateway can lead to unpredictable behavior or a Denial of Service (DoS) . The vulnerability is triggered when the NetScaler ADC is configured with a Load Balancing (LB) virtual server of type RTSP or has RTSP ALG enabl...

EUVD-2026-124827

Memory overflow in RTSP ALG can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler...

PT-2026-146311

Memory overflow in RTSP ALG can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler...

CVE-2025-9983

CVE-2025-9983 - GALAYOU G2 RTSP EXPLOIT /!\ Disclaimer: This script is provided 'as is' and exclusively for educational purposes. Users are strongly advised to exercise caution and utilize it within the boundaries of legal and ethical considerations. Description Python POC for CVE-2025-9983 , an...

CVE-2025-60458

CVE-2025-60458 UxPlay 1.72 RTSP TEARDOWN Double Free Vulnerability Description UxPlay version 1.72 contains a double free vulnerability in its RTSP request handling logic. A remote attacker can trigger multiple calls to free on the same heap memory object by sending a specially crafted RTSP...

io.netty/netty-codec-http: Netty RtspDecoder Method-Token Smuggling via Trailing Control Byte

A flaw was found in Netty RtspDecoder. The RtspMethods.valueOf function incorrectly strips trailing control bytes from method tokens in Real-Time Streaming Protocol RTSP requests. A remote attacker can exploit this by sending a specially crafted RTSP request, leading to method-token smuggling. Th...

io.netty/netty-codec-http: Netty RtspDecoder Method-Token Smuggling via Trailing Control Byte

A flaw was found in Netty RtspDecoder. The RtspMethods.valueOf function incorrectly strips trailing control bytes from method tokens in Real-Time Streaming Protocol RTSP requests. A remote attacker can exploit this by sending a specially crafted RTSP request, leading to method-token smuggling. Th...