CVE-2018-9995 PoC — TBK DVR4104和DVR4216 安全漏洞

Source

https://github.com/likaifeng0/CVE-2018-9995_dvr_credentials-dev_tool

Associated Vulnerability

Title:TBK DVR4104和DVR4216 安全漏洞 (CVE-2018-9995)
Description:TBK DVR4104和DVR4216都是高清数字录像机设备。 TBK DVR4104和DVR4216中存在安全漏洞。远程攻击者可借助Cookie: uid=admin包头利用该漏洞绕过身份验证。

Description

webcam bug (python)

File Snapshot


 [4.0K]  /data/pocs/ff9753f27300119bae1e92fcd1f09b1e1ccb1665
├── [3.4K]  getDVR.py
├── [2.5K]  README.txt
├── [4.0K]  screenshot
│   ├── [4.0K]  cow
│   │   ├── [ 70K]  google_1.png
│   │   ├── [ 71K]  shodan_1.png
│   │   ├── [187K]  shodan_2.png
│   │   └── [ 91K]  zoomEyes.jpg
│   ├── [4.0K]  indoor
│   │   ├── [537K]  in_1.png
│   │   ├── [296K]  in_2.png
│   │   ├── [358K]  in_3.png
│   │   ├── [586K]  in_4.png
│   │   ├── [508K]  in_5.png
│   │   ├── [422K]  in_x1.png
│   │   └── [714K]  in_x.png
│   ├── [4.0K]  loginFront
│   │   ├── [ 24K]  login_10.png
│   │   ├── [ 27K]  login_1.png
│   │   ├── [ 68K]  login_2.png
│   │   ├── [ 68K]  login_3.png
│   │   ├── [ 49K]  login_4.png
│   │   ├── [ 70K]  login_5.png
│   │   ├── [ 95K]  login_6.png
│   │   ├── [164K]  login_7.png
│   │   ├── [ 32K]  login_8.png
│   │   └── [ 32K]  login_9.png
│   ├── [4.0K]  tbk_vision
│   │   ├── [219K]  indoor_1.png
│   │   └── [ 42K]  login_1.png
│   ├── [4.0K]  toolOutput
│   │   ├── [ 13K]  poc_1.png
│   │   ├── [ 12K]  poc_2.png
│   │   ├── [ 19K]  poc_3.png
│   │   └── [ 23K]  poc_4.png
│   └── [ 92K]  videoWall.jpg
└── [ 984]  Test_success_cases.txt

6 directories, 31 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!