## https://sploitus.com/exploit?id=5DD6F590-34C7-58D1-884F-C012360BAD9D
This is a PoC exploit for CVE-2021-33044, an authentication bypass vulnerability in Dahua IPC, VTH, and VTO devices. The exploit targets the login process of these devices, allowing attackers to bypass device identity authentication by constructing malicious data packets. The exploit is implemented in Python and uses the `requests` library to send a POST request to the `/RPC2_Login` endpoint with a crafted JSON payload. The payload includes a `session` parameter set to 0, which is used to bypass the authentication check. The exploit is typically invoked by running `python3 dahua_exploit.py http(s)://ip:port`. The expected impact of this vulnerability is authentication bypass, allowing attackers to gain unauthorized access to the device.