Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/voidsshadows/hikvision-city-hunter
ReconnaissanceVulnerability ScannersIoT SecurityPassword AttacksExploitationWeb Application ExploitationInformation GatheringRed Teaming

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
GitHub
voidsshadows/hikvision-city-hunter

Hikvision-City-Hunter

View Repository
19279 months agoNot yet reviewed

About

This tool is a modern evolution of older PoCs like those for CVE-2017-7921 and ICSA-17-124-01, updated for 2025 with live console output, threading for speed, and honeypot filtering (skips devices with >12 open ports). It's built for red teamers, bug bounty hunters, and security researchers to identify

Share

Python Shodan License Stars

The ultimate 2025 city-level reconnaissance & exploitation tool for Hikvision IP cameras, DVRs, and NVRs
Live console output • DVRs/NVRs highlighted in purple • Cameras in green • Snapshot auto-download • Honeypot filtering ╔══════════════════════════════════════════════════════════╗ ║ HIKVISION 2025 ULTIMATE CITY HUNTER ║ ║ Target: New York | Key: admin:12345 ║ ║ DVRs & NVRs = PURPLE | Cameras = Green ║ ╚══════════════════════════════════════════════════════════╝ text### Features

  • City-targeted Shodan discovery (hikvision city:"New York")
  • Exploits the legendary auth=YWRtaW46MTEK backdoor (admin:12345 – still king in 2025)
  • Full device enumeration: Model • Serial • Firmware • MAC • Device Name
  • Automatic DVR/NVR detection – highlighted in purple for instant jackpot recognition
  • Live snapshot download (/onvif-http/snapshot)
  • Honeypot filtering (skips devices with >12 open ports)
  • Threaded high-speed scanning (safe concurrency 100–180)
  • Real-time colorful console output
  • Auto-retry on Shodan rate limits + credit check
  • Clean hits file + timestamped snapshots folder
Download Tool