LeakIX - Host ddd5e6b26e5092a96a2fad41.keenetic.io

Domain ddd5e6b26e5092a96a2fad41.keenetic.io

Russia

OOO Network of data-centers Selectel

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 185.162.93.96
Domain: ddd5e6b26e5092a96a2fad41.keenetic.io
Port: 80
URL: http://ddd5e6b26e5092a96a2fad41.keenetic.io

First seen 2023-07-24 04:12
Last seen 2023-12-11 20:36
Open for 140 days
- Severity: high
  Fingerprint: 321975614123c6c05f83e99be00d7104014dcbe9014dcbe9014dcbe9014dcbe9
```
Found HiSiliconDVR firmware:
Hardware: General NBD6808T-PL
Vulnerable to multiple issues : LFI, possibly RCE
```
  Found on 2023-12-11 20:36
Create report

Open service 2a03:21c0:0:227::96:80 · ddd5e6b26e5092a96a2fad41.keenetic.io

2024-06-16 13:44

HTTP/1.1 403 Forbidden
Server: NDM NDNS
Date: Sun, 16 Jun 2024 13:44:38 GMT
Content-Type: text/html
Content-Length: 975
Cache-Control: no-store, no-cache, max-age=0, private
X-Detail: Access Denied (0x14)
Set-Cookie: X-Detail=403 20; max-age=300
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">

<head>

  <base href="https://static.keenetic.net/kdns201/"/>

  <link rel="shortcut icon" href="favicon.ico" />
  <link rel="stylesheet" href="style.css" />
  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto+Condensed:400,700&amp;subset=cyrillic" />
  <meta charset="utf-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
  <meta http-equiv="Referrer-Policy" content="origin-when-cross-origin" />
  <meta http-equiv="Content-Security-Policy" content="
		default-src 'self' https://static.keenetic.net/kdns201/ ; 
		style-src 'self' 'unsafe-inline' https: ; 
		font-src 'self' https: ; 
		img-src 'self' data: 'unsafe-eval' 'unsafe-inline' https: ;
		script-src 'self' https://static.keenetic.net/kdns201/  ;
	" />
  <script defer src="script.js"></script>
  <title>Error</title>
</head>

<body>
  <noscript>403</noscript>
  <main class="template" />
</body>

</html>

Found 2024-06-16 by HttpPlugin

Create report

Open service 185.162.93.96:8443 · ddd5e6b26e5092a96a2fad41.keenetic.io

2024-06-16 13:44

HTTP/1.1 403 Forbidden
Server: NDM NDNS
Date: Sun, 16 Jun 2024 13:44:36 GMT
Content-Type: text/html
Content-Length: 975
Cache-Control: no-store, no-cache, max-age=0, private
X-Detail: Access Denied (0x14)
Set-Cookie: X-Detail=403 20; max-age=300
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">

<head>

  <base href="https://static.keenetic.net/kdns201/"/>

  <link rel="shortcut icon" href="favicon.ico" />
  <link rel="stylesheet" href="style.css" />
  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto+Condensed:400,700&amp;subset=cyrillic" />
  <meta charset="utf-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
  <meta http-equiv="Referrer-Policy" content="origin-when-cross-origin" />
  <meta http-equiv="Content-Security-Policy" content="
		default-src 'self' https://static.keenetic.net/kdns201/ ; 
		style-src 'self' 'unsafe-inline' https: ; 
		font-src 'self' https: ; 
		img-src 'self' data: 'unsafe-eval' 'unsafe-inline' https: ;
		script-src 'self' https://static.keenetic.net/kdns201/  ;
	" />
  <script defer src="script.js"></script>
  <title>Error</title>
</head>

<body>
  <noscript>403</noscript>
  <main class="template" />
</body>

</html>

Found 2024-06-16 by HttpPlugin

Create report

Open service 185.162.93.96:80 · ddd5e6b26e5092a96a2fad41.keenetic.io

2024-06-16 13:44

HTTP/1.1 403 Forbidden
Server: NDM NDNS
Date: Sun, 16 Jun 2024 13:44:38 GMT
Content-Type: text/html
Content-Length: 975
Cache-Control: no-store, no-cache, max-age=0, private
X-Detail: Access Denied (0x14)
Set-Cookie: X-Detail=403 20; max-age=300
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">

<head>

  <base href="https://static.keenetic.net/kdns201/"/>

  <link rel="shortcut icon" href="favicon.ico" />
  <link rel="stylesheet" href="style.css" />
  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto+Condensed:400,700&amp;subset=cyrillic" />
  <meta charset="utf-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
  <meta http-equiv="Referrer-Policy" content="origin-when-cross-origin" />
  <meta http-equiv="Content-Security-Policy" content="
		default-src 'self' https://static.keenetic.net/kdns201/ ; 
		style-src 'self' 'unsafe-inline' https: ; 
		font-src 'self' https: ; 
		img-src 'self' data: 'unsafe-eval' 'unsafe-inline' https: ;
		script-src 'self' https://static.keenetic.net/kdns201/  ;
	" />
  <script defer src="script.js"></script>
  <title>Error</title>
</head>

<body>
  <noscript>403</noscript>
  <main class="template" />
</body>

</html>

Found 2024-06-16 by HttpPlugin

Create report

Open service 95.213.212.50:80 · ddd5e6b26e5092a96a2fad41.keenetic.io

2024-06-16 13:44

HTTP/1.1 403 Forbidden
Server: NDM NDNS
Date: Sun, 16 Jun 2024 13:44:39 GMT
Content-Type: text/html
Content-Length: 975
Cache-Control: no-store, no-cache, max-age=0, private
X-Detail: Access Denied (0x14)
Set-Cookie: X-Detail=403 20; max-age=300
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">

<head>

  <base href="https://static.keenetic.net/kdns201/"/>

  <link rel="shortcut icon" href="favicon.ico" />
  <link rel="stylesheet" href="style.css" />
  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto+Condensed:400,700&amp;subset=cyrillic" />
  <meta charset="utf-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
  <meta http-equiv="Referrer-Policy" content="origin-when-cross-origin" />
  <meta http-equiv="Content-Security-Policy" content="
		default-src 'self' https://static.keenetic.net/kdns201/ ; 
		style-src 'self' 'unsafe-inline' https: ; 
		font-src 'self' https: ; 
		img-src 'self' data: 'unsafe-eval' 'unsafe-inline' https: ;
		script-src 'self' https://static.keenetic.net/kdns201/  ;
	" />
  <script defer src="script.js"></script>
  <title>Error</title>
</head>

<body>
  <noscript>403</noscript>
  <main class="template" />
</body>

</html>

Found 2024-06-16 by HttpPlugin

Create report

Open service 2a00:ab00:1103:20::50:80 · ddd5e6b26e5092a96a2fad41.keenetic.io

2024-06-16 13:44

HTTP/1.1 403 Forbidden
Server: NDM NDNS
Date: Sun, 16 Jun 2024 13:44:38 GMT
Content-Type: text/html
Content-Length: 975
Cache-Control: no-store, no-cache, max-age=0, private
X-Detail: Access Denied (0x14)
Set-Cookie: X-Detail=403 20; max-age=300
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">

<head>

  <base href="https://static.keenetic.net/kdns201/"/>

  <link rel="shortcut icon" href="favicon.ico" />
  <link rel="stylesheet" href="style.css" />
  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto+Condensed:400,700&amp;subset=cyrillic" />
  <meta charset="utf-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
  <meta http-equiv="Referrer-Policy" content="origin-when-cross-origin" />
  <meta http-equiv="Content-Security-Policy" content="
		default-src 'self' https://static.keenetic.net/kdns201/ ; 
		style-src 'self' 'unsafe-inline' https: ; 
		font-src 'self' https: ; 
		img-src 'self' data: 'unsafe-eval' 'unsafe-inline' https: ;
		script-src 'self' https://static.keenetic.net/kdns201/  ;
	" />
  <script defer src="script.js"></script>
  <title>Error</title>
</head>

<body>
  <noscript>403</noscript>
  <main class="template" />
</body>

</html>

Found 2024-06-16 by HttpPlugin

Create report

*.keenetic.iokeenetic.io

Fingerprint:

cd1bf4a393d074f5066ed107e527158cccabcae44c904c613fc9c5dce00b9772

CN:

keenetic.io

Key:

ECDSA-384

Issuer:

Not before:

2024-06-07 09:13

Not after:

2024-09-05 09:13

Domain summary

ddd5e6b26e5092a96a2fad41.keenetic.io 5

1 recorded

IP summary

2a03:21c0:0:227::96 1 185.162.93.96 1 95.213.212.50 1 2a00:ab00:1103:20::50 1

4 recorded

Domain ddd5e6b26e5092a96a2fad41.keenetic.io

Russia

Vulnerable HiSilicon family DVR

Create report

Create report

Create report

Create report

Create report

*.keenetic.iokeenetic.io

Domain summary

IP summary