CVE-2018-15745 PoC — Argus Surveillance DVR 路径遍历漏洞

Source

https://github.com/Jasurbek-Masimov/CVE-2018-15745

Associated Vulnerability

Title:Argus Surveillance DVR 路径遍历漏洞 (CVE-2018-15745)
Description:Argus Surveillance DVR是加拿大Argus Surveillance公司的一款硬盘录像机设备。 Argus Surveillance DVR 4.0.0.0版本中的WEBACCOUNT.CGI文件存在目录遍历漏洞。攻击者可借助‘RESULTPAGE’参数中的‘..%2F’利用该漏洞泄露文件。

Readme

# Argus Surveillance DVR 4.0.0.0 - Directory Traversal

# Disclaimer
This code is provided for educational and research purposes only.
The author is not responsible for any misuse or damage caused by this code.
You are responsible for ensuring that you have proper authorization before testing systems.
Unauthorized access to systems is illegal and punishable by law.

# Exploit for [CVE-2018-15745]

## Description

This repository contains an automated version of the original PoC for Argus Surveillance DVR 4.0.0.0: https://www.exploit-db.com/exploits/45296 .

## Affected Versions

- Argus Surveillance DVR 4.0.0.0

## Usage

```
chmod +x exploit.sh
./exploit.sh
```

File Snapshot


 [4.0K]  /data/pocs/69d193baa065a77100e1f774924af5717fb316e7
├── [3.1K]  exploit.sh
├── [1.0K]  LICENSE
└── [ 671]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!