Tools

baroi-ai/cve-2024-42658

CVE-2024-42658 An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookies…

omarhashem123/cve-2022-31269

CVE-2022-31269 Proof of Concept

mverschu/cve-2017-7921

HikVision Auth Bypass CVE, tool is able to extract credentials, and take snapshots based on magic cookie or supplied credentials.

mrali-code/cve-2018-9995_dvr_credentials

Exploit tool for CVE-2018-9995 that extracts DVR credentials via unauthenticated HTTP request to vulnerable Nov, CeNova, QSee, and other DVR devices.

remenis/cve-2025-67160

Vatilon-based IP cameras expose internal web directories without authentication, leading to information disclosure.

abizchi/cve-2018-9995_dvr_credentials

Python exploit for CVE-2018-9995 that retrieves exposed DVR credentials by bypassing authentication on vulnerable web interfaces.

weedl/cve-2025-45619

CVE proof of concept regarding the CVE-2025-45619 vulnerabillity.

likaifeng0/cve-2018-9995_dvr_credentials-dev_tool

Exploit tool for CVE-2018-9995 that extracts credentials from exposed DVR devices via HTTP request with cookie bypass, targeting multiple vendor…

gabrielavls/cve-2017-7921

CVE-2017-7921 exploit. Allows admin password retrieval and automatic snapshot download.

anonkigroup/anonhik

Python script get image from Hikvision camera with CVE-2017-7921 vulnerability

inj3ction/cve-2017-7921-exp

Exploit for CVE-2017-7921 targeting Hikvision devices with improper authentication. Retrieves user lists, camera snapshots, and configuration files…

jet-pentest/cve-2020-25747

Proof-of-concept exploit for CVE-2020-25747 demonstrating unauthenticated remote access to RTSP and ONVIF services on Rubetek RV-3406/3409/3411…

jcppeiqi/-cve-2021-46381

Python exploit for CVE-2021-46381 targeting D-Link DAP-1620 arbitrary file read vulnerability with FOFA-based device discovery.

guillermogm4/cve-2024-1303---badgermeter-moni-tool-path-traversal

Proof-of-concept exploit for CVE-2024-1303, a path traversal vulnerability in Badger Meter's moni:tool that allows authenticated attackers to…

chinayozz/cve-2020-25078

Batch exploit script for CVE-2020-25078 targeting D-Link DCS series cameras to extract account credentials via information disclosure vulnerability.

batmoshka55/cve-2018-9995_dvr_credentials

Exploit tool for CVE-2018-9995 that retrieves DVR credentials via crafted HTTP request, targeting multiple DVR vendors for security testing.

spinfosecurity/bas-guardian

Free BACnet/BMS vulnerability scanner for building automation systems. Detects CVE-2026-3611 (CVSS 10.0), CVE-2026-24060, and exposed HVAC/BAS…