{Help} Can Share Dorks about cve-2021-36260

[Cuerz]

sorry，I cannot understand the meaning of "Share Dorks"

[lolminerxmrig]

dork list
Shodan Dorks or fafa or ZoomEye

[Cuerz]

fofa: header="Hikvision" or app="HIKVISION-视频监控"
plz give a star

[lolminerxmrig]

find but not work exploit.
en plz.

[Cuerz]

command: python xxx.py -u http://192.168.1.1:80 --check
the url should be http://ipaddress:port
in this format
try more

[lolminerxmrig]

[lolminerxmrig]

[lolminerxmrig]

https://www.zoomeye.org/searchResult?q=app%3D%22HIKVISION-%E8%A7%86%E9%A2%91%E7%9B%91%E6%8E%A7%22

[Cuerz]

wait wait

[Cuerz]

You can download the new code again，I push it just now

[lolminerxmrig]

anydesk ,help me?

[Cuerz]

what？

[lolminerxmrig]

remote my pc(anydesk)

[Cuerz]

I am not very convenient，you can download the new program

[Cuerz]

try

[lolminerxmrig]

this dorks work?

https://www.zoomeye.org/searchResult?q=app%3D%22HIKVISION-%E8%A7%86%E9%A2%91%E7%9B%91%E6%8E%A7%22

[lolminerxmrig]

not work

[lolminerxmrig]

http://24.90.28.73:9000/SDK/webLanguage

[lolminerxmrig]

https://www.zoomeye.org/searchResult?q=iconhash%3A%20%2289b932fcc47cf4ca3faadb0cfdef89cf%22

https://www.shodan.io/search?query=http.favicon.hash%3A999357577

[Cuerz]

not work

the url should add port

[Cuerz]

A lot of bugs have been fixed. The payload is true in the programe,you can have a look.

[Cuerz]

[+] Remote is not vulnerable (Code: 404) ？？

try more hosts ，that mean the ip you found is not vulnerable
404 because the program request http://xxxx:80/cu/ is not found

[yyheart]

[+] 远程没有漏洞（代码：404）？？

尝试更多hosts，说明你找到的ip不是易受攻击 的404，因为程序请求http://xxxx:80/cu/没有找到

thanks

[yyheart]

thanks！

[yyheart]

您好！您的邮件我已收到，请等待回复！谢谢！