spicesouls / reosploit Goto Github PK

Hi, your tool is a good basic, but have to be updated:

here is my reolink 410 camera:

nmap 10.0.224.125
Starting Nmap 7.92 ( https://nmap.org ) at 2022-02-28 16:46 CET
Nmap scan report for gedu-rlcw.gedu.info (10.0.224.125)
Host is up (0.0058s latency).
Not shown: 993 closed tcp ports (conn-refused)
PORT STATE SERVICE
443/tcp open https
554/tcp open rtsp
1935/tcp open rtmp
6001/tcp open X11:1
8000/tcp open http-alt
8089/tcp open unknown
9000/tcp open cslistener

normally for these actions you do not need authentication credentials:

Scan | Discover local Reolink Devices. | No
| Listen | Listen for Reolink Related Network Traffic. | No
| Version | Get Reolink Version Target is Running | No

Here are the results for my camera:

Version:

sudo python3 reosploit.py --ip 10.0.224.125 --action version

[+] Getting Reolink Version of Target...
Traceback (most recent call last):
File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 169, in _new_conn
conn = connection.create_connection(
File "/usr/lib/python3/dist-packages/urllib3/util/connection.py", line 96, in create_connection
raise err
File "/usr/lib/python3/dist-packages/urllib3/util/connection.py", line 86, in create_connection
sock.connect(sa)
ConnectionRefusedError: [Errno 111] Connection refused

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 699, in urlopen
httplib_response = self._make_request(
File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 394, in _make_request
conn.request(method, url, **httplib_request_kw)
File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 234, in request
super(HTTPConnection, self).request(method, url, body=body, headers=headers)
File "/usr/lib/python3.9/http/client.py", line 1285, in request
self._send_request(method, url, body, headers, encode_chunked)
File "/usr/lib/python3.9/http/client.py", line 1331, in _send_request
self.endheaders(body, encode_chunked=encode_chunked)
File "/usr/lib/python3.9/http/client.py", line 1280, in endheaders
self._send_output(message_body, encode_chunked=encode_chunked)
File "/usr/lib/python3.9/http/client.py", line 1040, in _send_output
self.send(msg)
File "/usr/lib/python3.9/http/client.py", line 980, in send
self.connect()
File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 200, in connect
conn = self._new_conn()
File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 181, in _new_conn
raise NewConnectionError(
urllib3.exceptions.NewConnectionError: <urllib3.connection.HTTPConnection object at 0x7f7a6238d2b0>: Failed to establish a new connection: [Errno 111] Connection refused

Listen:

sudo python3 reosploit.py --ip 10.0.224.125 --action listen

[+] If you are listening, please specify a Network iFace to use!

sudo python3 reosploit.py --ip 10.0.224.125 --action listen -i eth0

(the I logged in and out, camera is online):

██████╗ ███████╗ ██████╗ ███████╗██████╗ ██╗ ██████╗ ██╗████████╗
██╔══██╗██╔════╝██╔═══██╗██╔════╝██╔══██╗██║ ██╔═══██╗██║╚══██╔══╝
██████╔╝█████╗ ██║ ██║███████╗██████╔╝██║ ██║ ██║██║ ██║
██╔══██╗██╔══╝ ██║ ██║╚════██║██╔═══╝ ██║ ██║ ██║██║ ██║
██║ ██║███████╗╚██████╔╝███████║██║ ███████╗╚██████╔╝██║ ██║
╚═╝ ╚═╝╚══════╝ ╚═════╝ ╚══════╝╚═╝ ╚══════╝ ╚═════╝ ╚═╝ ╚═╝
-+ Reosploit v1.3.0 +-
--==[ 12 Actions Loaded ]==--
--==[ @SpicySoulsv ]==--
--==[ spicesouls.net ]==--

[+] Listening for Reolink Traffic on eth0...

Nothing happened. Pressed CTRL-C:

^C
Quitting...
Task exception was never retrieved
future: <Task finished name='Task-5' coro=<Capture._get_packet_from_stream() done, defined at /usr/local/lib/python3.9/dist-packages/pyshark/capture/capture.py:342> exception=EOFError()>
Traceback (most recent call last):
File "/home/nwoeske/Downloads/reosploit/reosploit.py", line 428, in
listen()
File "/home/nwoeske/Downloads/reosploit/reosploit.py", line 101, in listen
for packet in capture.sniff_continuously(packet_count=100):
File "/usr/local/lib/python3.9/dist-packages/pyshark/capture/capture.py", line 240, in _packets_from_tshark_sync
packet, data = self.eventloop.run_until_complete(
File "/usr/lib/python3.9/asyncio/base_events.py", line 629, in run_until_complete
self.run_forever()
File "/usr/lib/python3.9/asyncio/base_events.py", line 596, in run_forever
self._run_once()
File "/usr/lib/python3.9/asyncio/base_events.py", line 1854, in _run_once
event_list = self._selector.select(timeout)
File "/usr/lib/python3.9/selectors.py", line 469, in select
fd_event_list = self._selector.poll(timeout, max_ev)
KeyboardInterrupt

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/local/lib/python3.9/dist-packages/pyshark/capture/capture.py", line 369, in _get_packet_from_stream
raise EOFError()
EOFError

SCAN:

sudo python3 reosploit.py --ip 10.0.224.0/24 --action scan

██████╗ ███████╗ ██████╗ ███████╗██████╗ ██╗ ██████╗ ██╗████████╗
██╔══██╗██╔════╝██╔═══██╗██╔════╝██╔══██╗██║ ██╔═══██╗██║╚══██╔══╝
██████╔╝█████╗ ██║ ██║███████╗██████╔╝██║ ██║ ██║██║ ██║
██╔══██╗██╔══╝ ██║ ██║╚════██║██╔═══╝ ██║ ██║ ██║██║ ██║
██║ ██║███████╗╚██████╔╝███████║██║ ███████╗╚██████╔╝██║ ██║
╚═╝ ╚═╝╚══════╝ ╚═════╝ ╚══════╝╚═╝ ╚══════╝ ╚═════╝ ╚═╝ ╚═╝
-+ Reosploit v1.3.0 +-
--==[ 12 Actions Loaded ]==--
--==[ @SpicySoulsv ]==--
--==[ spicesouls.net ]==--

[+] Scanning 254 potential Hosts...

[+] Finished

I have several cameras in that network, Nothing was found.

sudo python3 reosploit.py --ip 10.0.224.125 --action enumerate -u username -p Password!01

zsh: event not found: 01