CVE-2022-25012-dvr4-weak-password-encryption — Updated!
This is an improved version of the exploit by deathflash1411Original exploit: https://www.exploit-d 2026-9-3 00:36:56 Author: kitploit.com(查看原文) 阅读量:5 收藏

This is an improved version of the exploit by deathflash1411

Original exploit: https://www.exploit-db.com/exploits/50130

Improved Features

  • Cracked password is now output as reconstructed password string instead of only output character by character
  • The encrypted password string is now entered as an arguement instead of hardcoded
  • The exploit now supports the decryption of all special characters

The cyphertext can be found at

C:\ProgramData\PY_Software\Argus Surveillance DVR\DVRParams.ini

Once you have obtained the cyphertext password

./exploit.py <encrypted password>

or

python3 exploit.py <encrypted password>

Footnote

#, &, ', and " are not present in the exploit code because it was found that argus surveillance strips these characters out if you enter them into the password field

Read more


文章来源: https://kitploit.com/en/posts/github-m1kb0k-cve-2022-25012-dvr4-weak-password-encryption-6863e6b46e04c121515d72d6b681c368db3e22c8c19f68f67dd068a965ea6b87
如有侵权请联系:admin#unsafe.sh