CVE-2017-8225

This exploit targets a command injection vulnerability in the GoAhead web server used in various IP cameras. It bypasses authentication to extract credentials and then executes arbitrary commands via crafted HTTP requests to achieve remote code execution.

This PoC exploits CVE-2017-8225, an information disclosure vulnerability in GoAhead-based Wireless IP Camera (P2P) WIFICAM devices. It retrieves credentials by accessing the /system.ini endpoint with empty login parameters, parsing binary data for usernames and passwords.

This repository contains a Python-based exploit for CVE-2017-8225, targeting vulnerable cameras with a GoAhead web server. It includes a scanner to identify vulnerable targets via Shodan and a brute-forcer to extract credentials from vulnerable devices.

This repository contains the RouterSploit framework, an exploitation toolkit for embedded devices, including exploits, scanners, and credential testing modules. The framework is designed to test and exploit vulnerabilities in routers and other embedded systems.