Stack-based Buffer Overflow in D-Link DCS Series Wi-Fi Cameras (alphapd)

This repository provides a Python 3 exploit for a buffer overflow vulnerability in the 'alphapd' HTTP server of multiple D-Link camera models (e.g., DCS-5020L, DCS-930L, DCS-932L, and others). The exploit targets the 'WEPEncryption' parameter in the 'wireless.htm' page, which is vulnerable to buffer overflow when supplied with an overly long value. The exploit is operational and allows remote code execution on the device, typically starting a telnet server for shell access. The exploit requires valid credentials (default: admin with blank password) and network access to the device's HTTP interface. The code is modular, with device- and version-specific ROP chains defined in separate files under 'DlinkExploit/overflows/'. The main entry point is 'exploit.py', which automates detection of the device model/version, constructs the appropriate overflow payload, and sends the exploit HTTP request. The repository also includes utility code for authentication and URL encoding. No hardcoded IPs or credentials are present; all are supplied at runtime. The exploit is not part of a framework and is a standalone operational exploit.