
Exploit for CVE-2018-9995 targeting DVR devices. Sends a crafted Cookie header to retrieve plaintext admin credentials from the web control panel.
DVR, full name Digital Video Recorder (hard disk video recorder), is a digital video recorder. Compared with traditional analog video recorders, it uses hard disk recording, hence often called hard disk video recorder, also known as DVR. This vulnerability allows an attacker to access the DVR control panel by modifying "Cookie: uid=admin", returning the device's plaintext administrator credentials.
Usage: python3 cve-2018-9995.py