CVE-2021-4045

This exploit leverages an unauthenticated RCE vulnerability in TP-Link Tapo C200 cameras by injecting a reverse shell payload via the 'setLanguage' method. It uses a threading model to simultaneously listen for the reverse shell while delivering the payload.

This repository contains a functional exploit for CVE-2021-4045, a command injection vulnerability in TP-Link Tapo C200 IP cameras. The exploit leverages insufficient input validation in the `setLanguage` method to achieve unauthenticated remote code execution.

This repository contains a functional exploit for CVE-2021-4045, a command injection vulnerability in TP-Link Tapo C200 cameras. The exploit provides two modes: a reverse shell for remote code execution and an RTSP mode to manipulate camera settings.

This repository contains a functional PoC exploit for CVE-2021-4045, targeting Tapo C200 cameras. It leverages a command injection vulnerability in the `setLanguage` method to execute arbitrary commands, including setting the date, modifying `/etc/hosts`, and enabling a telnet daemon.

This PoC exploits an unauthenticated RCE vulnerability in TP-LINK Tapo C200 cameras (CVE-2021-4045) by injecting a reverse shell payload via the `setLanguage` method. It uses a threaded netcat listener to catch the shell.