HikvisionExploiter

Educational security tool for testing unsecured Hikvision exposures and checking CVE-2021-36260 in authorized environments.

---

⚠️ Legal and Ethical Warning

This project should be used only on systems you own or have explicit permission to test. Scanning/exploitation without permission is illegal in all jurisdictions, including the Russian Federation.

---

Overview

HikvisionExploiter scans targets in IP:PORT format and checks a set of unsecured endpoints related to Hikvision, including CVE-2021-36260 paths.

Current scanner capabilities:

• endpoint availability check (snapshot/config/users/device info)
• attempt to download and decrypt configuration (AES + XOR logic)
• attempt to extract plaintext credentials from decrypted configuration
• CVE-2021-36260 checks:
  • header-based authentication bypass check
  • webLanguage command injection check
• structured logging per run and per-host artifacts
• JSON/CSV reporting for pipeline integration
• optional nuclei-only execution mode

---

Architecture

The project is now split into specialized modules:

• checker.py — minimal entry point
• cli.py — argument parsing, scan orchestration, logging setup
• config.py — constants and ScanConfig dataclass
• exploit.py — HTTP client, helpers for XML/config decryption, CVE checks
• scanner.py — probe + host scan + report export workflow
• api.py — embeddable API (scan_target(ip, port) -> dict)
• shell.sh — helper shell script for interacting with vulnerable hosts
• nuclei-template.yaml — nuclei template for quick endpoint checks

---

Requirements

• Python 3.8+
• pip
• dependencies:

pip install -r requirements.txt

---

License

MIT — see LICENSE.