jorhelp
No DVR capture for CVE-2021-33044
Hi Jorhelp, are there any possibilities to have DVR snapshots for CVE-2021-33044 with zoomeye dork (":4c66" +title:"WEB SERVICE" +port:"80") as example. In most cases cameras password are the same as DVRs. In console: ./Console.py --logon loopback --rhost 192.168.57.20 --proto dhip --rport 80 config RemoteDevice
This is theoretically possible, we have only used '--logon netkeyboard' devices, not '--logon loopback' devices, we will do some testing and submit a new version.
Hello, Mflensburg, we have updated the repository, but we found that the passwds of many NVR devices are different from those of the camera devices. Do you know how to obtain the account&passwds of NVR devices?
At this moment my knowledge dos not allow me to dig so much inside. One suggestion, while going through passwords of cameras, better to skip default passwords like admin:admin, as it anyway will be checked by week passwords module, so we can avoid a lot of false positives. Some times cameras have different passwords and only one is right.