Dahua IPC/VTH/VTO devices auth bypass exploit

Last update: Dec 02, 2022

Overview

CVE-2021-33044

Dahua IPC/VTH/VTO devices auth bypass exploit

About:

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

use - python3 dahua_exploit.py http(s)://ip:port

Owner

Ashish Kunwar

Researcher at RISKIQ | I deal with 0days and malwares

GitHub Repository

'Our Drowsinessdetector detects drivers eyes if they are closed for more than 2 seconds and alerts driver'

Data analysis Document here the project: DriverDrowsinessDetector Description: Project Description Data Source: Type of analysis: Please document the

3 Jul 03, 2022

the swiss army knife in the hash field. fast, reliable and easy to use

hexxus Hexxus is a fast hash cracking tool which checks more than 30 thousand passwords in under 4 seconds and can crack the following types bcrypt sh

17 Apr 05, 2022

A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or LFI.

BurpParamFlagger A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF

118 Nov 07, 2022

This script checks for any possible SSRF dns/http interactions in xmlrpc.php pingback feature

rpckiller This script checks for any possible SSRF dns/http interactions in xmlrpc.php pingback feature and with that you can further try to escalate

33 Sep 23, 2022

CVE-2021-45232-RCE-多线程批量漏洞检测

CVE-2021-45232-RCE CVE-2021-45232-RCE-多线程批量漏洞检测 FOFA 查询 title="Apache APISIX Das

36 Sep 21, 2022

Internationalized Domain Names for Python (IDNA 2008 and UTS #46)

Internationalized Domain Names in Applications (IDNA) Support for the Internationalised Domain Names in Applications (IDNA) protocol as specified in R

204 Dec 13, 2022

HTTP security headers for Flask

Talisman: HTTP security headers for Flask Talisman is a small Flask extension that handles setting HTTP headers that can help protect against a few co

854 Dec 30, 2022

SecurAID securely connects aid organizations directly with individuals in dangerous situations to allow them to discreetly and effectively get the assistance they need.

SecurAID securely connects aid organizations directly with individuals in dangerous situations to allow them to discreetly and effec

2 Mar 23, 2022

A repository to detect the ARP spoofing in any devices and prevent Man in the Middle(MITM) attack using Python3

arp_spoof_detector A repository to detect the ARP spoofing in any devices and prevent Man in the Middle(MITM) attack using Python3 Usage: git clone ht

1 Oct 30, 2021

Click-Jack - Automatic tool to find Clickjacking Vulnerability in various Web applications

CLICK-Jack It is a automatic tool to find Clickjacking Vulnerability in various

4 Jan 10, 2022

Docker is an open platform for developing, shipping, and running applications OS-level virtualization to deliver software in packages called containers However, 'security' is a top request on Docker's public roadmap This project aims at vulnerability check for such docker containers. New contributions are accepted

Docker-Vulnerability-Check Docker is an open platform for developing, shipping, and running applications OS-level virtualization to deliver software i

103 Aug 20, 2022

Dahua IPC/VTH/VTO devices auth bypass exploit

Related tags

Overview

CVE-2021-33044

Owner

Ashish Kunwar

'Our Drowsinessdetector detects drivers eyes if they are closed for more than 2 seconds and alerts driver'

the swiss army knife in the hash field. fast, reliable and easy to use

A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or LFI.

This script checks for any possible SSRF dns/http interactions in xmlrpc.php pingback feature

CVE-2021-45232-RCE-多线程批量漏洞检测

Internationalized Domain Names for Python (IDNA 2008 and UTS #46)

HTTP security headers for Flask

SecurAID securely connects aid organizations directly with individuals in dangerous situations to allow them to discreetly and effectively get the assistance they need.

A repository to detect the ARP spoofing in any devices and prevent Man in the Middle(MITM) attack using Python3

Click-Jack - Automatic tool to find Clickjacking Vulnerability in various Web applications

💣 Bomb Crypto Bot 💣

Script for automatic dump and brute-force passwords using Volatility Framework

Python DNS Lookup: The Domain Name System (DNS) is basically the phonebook of the Internet

MS-FSRVP coercion abuse PoC

Denial Attacks by Various Methods

Steal Files on a Windows Machine

Grafana-0Day-Vuln-POC

Detection tool of malware(s) by checksum (useful for forensic)

A simple multi-threaded distributed SSH brute-forcing tool written in Python.