CVE-2018-9995 PoC — TBK DVR4104和DVR4216 安全漏洞

Source

https://github.com/awesome-consumer-iot/HTC

Associated Vulnerability

Title:TBK DVR4104和DVR4216 安全漏洞 (CVE-2018-9995)
Description:TBK DVR4104和DVR4216都是高清数字录像机设备。 TBK DVR4104和DVR4216中存在安全漏洞。远程攻击者可借助Cookie: uid=admin包头利用该漏洞绕过身份验证。

Description

Hack The CCTV | DVRs; Credentials Exposed | CVE-2018-9995

Readme

# Hack The CCTV
DVRs Credentials Exposed | CVE-2018-9995 | The CCTV Leaked Username For Get Loggin Access

![](https://raw.githubusercontent.com/keyw0rds/HTC/master/img/screenshot.png)

How To Use?
=

    > Open The https://www.zoomeye.org/
    > Search This Keyword '/login.rsp'
    > Wait To Get IP and Port
    $ python3 thecctv.py 

More Information
=

<table>
    <tr>
        <th>OS</th>
        <th>Language</th>
        <th>Contact</th>
    </tr>
    <tr>
        <td>Linux Ubuntu</td>
        <td>Pythonv3</td>
        <td>IG@keyword.ly</td>
    </tr>
</table>

Keyw0rd Upload This <3

File Snapshot


 [4.0K]  /data/pocs/c95573ae544a0fe18313c0e0106ab94654593204
├── [4.0K]  img
│   ├── [  27]  License.md
│   └── [ 42K]  screenshot.png
├── [ 594]  README.md
└── [2.2K]  thecctv.py

1 directory, 4 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!