CVE-2018-9995 PoC — TBK DVR4104和DVR4216 安全漏洞

Source

https://github.com/b510/CVE-2018-9995-POC

Associated Vulnerability

Title:TBK DVR4104和DVR4216 安全漏洞 (CVE-2018-9995)
Description:TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin" header, as demonstrated by a device.rsp?opt=user&cmd=list request that provides credentials within JSON data in a response.

Description

CVE-2018-9995 POC

Readme

# CVE-2018-9995-POC
CVE-2018-9995 POC
python CVE-2018-9995_Bata.py -proxy 127.0.0.1:9487 -f Importdata.txt -o Outputdata.txt -p 12

-f (※批量匯入檔案)
資料來源格式範例:
43.255.172.204:9200
192.168.168.5:1234

-o (※輸出檔案)

-proxy (※sock5轉發代理)

-p (※使用多線程核心數)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!