I've just disclosed creadentials leaks (ending up in clear text) from Dahua SDK to Dahua PSIRT

bashis · Feb 10, 2020

Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported. - mcw0/PoC

github.com

speidy · Feb 16, 2020

Is it applicable on new DVRs firmware as well?

bashis · Feb 29, 2020

speidy said:
Is it applicable on new DVRs firmware as well?

Yes

mat200 · Feb 29, 2020

speidy said:
Is it applicable on new DVRs firmware as well?

Welcome @speidy

Bashis did some great work here imho. ( thanks Bashis )

bashis · May 10, 2020

alastairstevenson · May 11, 2020

Wow, that is some list!

PoC: Added simple TCP/37777 DVRIP listener to display decrypted credentials in clear text

That one seems particularly bad -