CVE-2016-20016

This Metasploit module exploits an unauthenticated remote command execution vulnerability in MVPower DVR devices by sending arbitrary commands via the 'shell' endpoint. It includes a check method to verify vulnerability and executes a reverse shell payload.

This repository contains the RouterSploit framework, an open-source exploitation toolkit for embedded devices, including exploits, scanners, and credential testing modules. The framework is designed to target vulnerabilities in routers and IoT devices, with a structured approach to module development and testing.

This Metasploit module exploits an unauthenticated remote command execution vulnerability in MVPower DVR devices by sending arbitrary commands via the 'shell' endpoint. It includes a check method to verify vulnerability and executes a command stager for payload delivery.