
CVE-2018-9995를 악용하여 취약한 DVR에서 웹 인터페이스를 통해 자격 증명을 추출하는 Bash 스크립트로, 여러 DVR 브랜드를 지원하여 자동화된 보안 테스트를 수행합니다.
[*] Exploit Title: DVR Credentials Exposed
[*] Date: 09/04/2018
[*] Exploit Author: Fernandez Ezequiel
[*] DVR-Exploiter 제작: Belahsan Ouerghi
[*] 연락처: www.facebook.com/ouerghi.belahsan
[*] Youtube 튜토리얼: https://www.youtube.com/watch?v=vdnATjE_4II
[*] Dorks: intitle:"DVR Login"
html:"/login.rsp"
"Server: GNU rsp/1.1"

Novo
CeNova
QSee
Pulnix
XVR 5 in 1 (title: "XVR Login")
Securus, - Security. Never Compromise !! -
Night OWL
DVR Login
HVR Login
MDVR Login
$ git clone https://github.com/TunisianEagles/DVR-Exploiter.git
$ cd DVR-Exploiter
$ chmod +x DVR-Exploiter.sh
$ ./DVR-Exploiter.sh
[ 실행 후 호스트를 선택하세요. 예: 1 = 127.0.0.1 {IP } , / 2 = www.xxxxxxxx.com ]
https://www.yeahhub.com/exploitation-dvr-cameras-cve-2018-9995-tutorial/
