SWC(DHp2p)Exploit
Description: |625$|
SWC-DHp2p-Exploit is a professional security audit tool for Dahua IP cameras operating via a cloud-based P2P channel (DHp2p) without a direct public IP.
How it works. Automatic authentication cascade:
-
Bypassing loopback checks — CVE-2021-33045
-
Login via NetKeyboard — CVE-2021-33044
-
Full access to the device — after successful login, you get control of the camera from the command line
Opportunities:
-
list — getting a list of camera users (logins, groups, notes)
-
add / del — account management on the device
-
run — performing actions on the camera
-
shot — taking snapshots
-
configurable ports (80/443/554 by default) + range search mode
-
multithreaded batch processing based on a list of serial numbers
-
key-activated licensing system
Platform: (Windows)