CVE-2018-9995 PoC — TBK DVR4104和DVR4216 安全漏洞

Description

.NET console application that exploits CVE-2018-9995 vulnerability

介绍

# DVRFaultNET
.NET console application that exploits DVR [CVE-2018-9995 vulnerability](https://www.cve.org/CVERecord?id=CVE-2018-9995)


![DVRFault logo](imgs/DVRFaultMini.png)
____
# Usage
![DVRFault logo](imgs/screenshot.png)

Once launched, you will be prompted to enter the URL of the DVR camera. The program add `?opt=user&cmd=list` to the URL and sends a request containing `"Cookie:uid=admin"` header then server return a JSON string provides all users credentials.

文件快照

备注