CVE-2021-36260-metasploit
the metasploit script(POC) about CVE-2021-36260. A command injection vulnerability in the web server of some Hikvision product, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.
preparation POC
git clone https://github.com/TaroballzChen/CVE-2021-36260-metasploit
cd CVE-2021-36260-metasploit
mkdir -p ~/.msf4/modules/auxiliary/scanner/http
cp hikvision_web_server_build_210702_command_injection.py ~/.msf4/modules/auxiliary/scanner/http/
chmod +x ~/.msf4/modules/auxiliary/scanner/http/hikvision_web_server_build_210702_command_injection.py
msfconsole
POC usage
set rhost <vuln ip/host>
set port <vuln port>
set ssl <default: false for http>
exploit
result
80 Dec 30, 2021
172 Nov 28, 2022
219 Nov 28, 2022
118 Dec 31, 2022
1 Feb 23, 2022
21 Sep 24, 2022
6 Dec 09, 2022
2.2k Jan 08, 2023
52 Dec 16, 2022
3 Nov 04, 2022
1.1k Aug 24, 2021
576 Dec 23, 2022
57 Nov 22, 2022
22 Oct 17, 2022
6 Mar 10, 2022
2 Oct 18, 2022
2 Feb 12, 2022
12 Nov 22, 2022
27 Dec 20, 2022
408 Jan 03, 2023