Share
## https://sploitus.com/exploit?id=5D2DB41E-8DDC-532D-87E6-D954A3D5D19B
# Ingram-Pro
**Network Camera Vulnerability Scanner (Enhanced Edition)**
Based on the original [Ingram](https://github.com/jorhelp/Ingram) framework, Ingram-Pro extends coverage with **40+ POCs targeting CVEs from 2017-2024** and brand-specific weak-password detection modules.
---
## Features
- **CVE Exploitation** โ Authenticated and unauthenticated RCE, information disclosure, authentication bypass
- **Weak Password Detection** โ Default/weak credential scanning across 15+ camera brands
- **Dahua Deep Interaction** โ Integrated DahuaConsole library for advanced Dahua device enumeration, relay control, and event monitoring
- **High Concurrency** โ Built on gevent for fast, parallel scanning of large IP ranges
- **Snapshot Capture** โ Auto-fetch live snapshots from vulnerable devices when possible
---
## Brands Covered
| Brand | Weak Password | CVE POCs |
|-------|:-------------:|:--------:|
| Hikvision | โ
| 5 |
| Dahua | โ
| 6 |
| EZVIZ | โ
| 1 |
| Reolink | โ
| 1 |
| Hanwha | โ
| 1 |
| Uniview | โ | 1 |
| Xiongmai | โ
| 2 |
| Avtech | โ
| โ |
| Axis | โ
| โ |
| GeoVision | โ
| โ |
| Instar | โ
| โ |
| Netwave | โ
| โ |
| NUUO | โ
| โ |
| Reecam | โ
| โ |
| Generic IPC / DVR | โ
| 3 |
---
## CVEs Covered (2021-2024 Highlights)
| CVE | Target | Type | Year |
|-----|--------|------|------|
| CVE-2024-39943 | Dahua | RCE | 2024 |
| CVE-2023-47221 | โ | RCE | 2023 |
| CVE-2023-45222 | โ | Info Disclosure | 2023 |
| CVE-2023-28808 | Hikvision | Auth Bypass | 2023 |
| CVE-2023-27359 | โ | RCE | 2023 |
| CVE-2023-26801 | โ | โ | 2023 |
| CVE-2022-30563 | โ | โ | 2022 |
| CVE-2022-28171 | โ | RCE | 2022 |
| CVE-2022-2471 | โ | โ | 2022 |
| CVE-2022-23459 | โ | โ | 2022 |
| CVE-2021-36260 | Hikvision | RCE | 2021 |
| CVE-2021-40655 | D-Link | Info Disclosure | 2021 |
| CVE-2021-33045 | Dahua | Auth Bypass | 2021 |
| CVE-2021-33044 | Dahua | Auth Bypass | 2021 |
| + 9 additional legacy CVEs (2017โ2020) | | | |
---
## Quick Start
### Requirements
- Python 3.8+
- Linux / Windows / macOS
### Installation
```bash
git clone https://github.com/0x5477/Ingram-Pro.git
cd Ingram-Pro
pip install -r requirements.txt
```
### Usage
```bash
# Scan a single target
python run_ingram_pro.py -i 192.168.1.100
# Scan from a file (one IP per line)
python run_ingram_pro.py -f targets.txt
# Specify output directory
python run_ingram_pro.py -f targets.txt -o ./results
# Enable debug logging
python run_ingram_pro.py -f targets.txt --debug
```
Results are saved to the `out/` directory by default, including vulnerability reports and captured snapshots.
---
## Disclaimer
This tool is intended for **authorized security assessments only**. The authors assume no liability for misuse or damage caused by this program. Always obtain proper permission before scanning.
---
## Credits
- Original [Ingram](https://github.com/jorhelp/Ingram) by jorhelp
- DahuaConsole integration
- Community POC contributors