
oxasploits
A number of exploits and tools I've written for CVEs accredited to Marshall Whittaker/oxagast

A number of exploits and tools I've written for CVEs accredited to Marshall Whittaker/oxagast
Python Exploit for TP-Link TL-WR940N/TL-WR841N Command Injection Vulnerability

Weaponized exploit script for CVE-2020-35575, a password-disclosure vulnerability in TP-Link router web interfaces, granting remote administrative…

Python script get image from Hikvision camera with CVE-2017-7921 vulnerability

Hack The CCTV | DVRs; Credentials Exposed | CVE-2018-9995

Proof-of-concept exploit for command injection vulnerability in Aztech WMB250AC routers, enabling authenticated privilege escalation to root shell…

TOTOLINK-A702R-V1.0.0-B20161227.1023 Directory Indexing Vulnerability

Exploit tool for CVE-2017-8225 targeting IP cameras. Scans for vulnerable devices and performs credential brute-forcing to gain unauthorized access.

HomePwn - Swiss Army Knife for Pentesting of IoT Devices

(CVE-2018-9995) Get DVR Credentials

Exploit for CVE-2017-14262 targeting Samsung NVR devices: extracts admin MD5 password hash via unauthenticated CGI request and logs in with the hash…