LeakIX - Host levakhov.keenetic.pro

Domain levakhov.keenetic.pro

Finland

Hetzner Online GmbH

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 65.21.102.126
Domain: levakhov.keenetic.pro
Port: 80
URL: http://levakhov.keenetic.pro

First seen 2023-03-23 06:43
Last seen 2024-11-12 21:58
Open for 600 days
- Severity: high
  Fingerprint: 321975614123c6c05f83e99be00d7104014dcbe9014dcbe9014dcbe9014dcbe9
```
Found HiSiliconDVR firmware:
Hardware: General NBD6808T-PL
Vulnerable to multiple issues : LFI, possibly RCE
```
  Found on 2024-11-12 21:58
Create report

Open service 65.21.102.126:80 · levakhov.keenetic.pro

2024-10-02 05:44

HTTP/1.0 200 OK
Content-type: text/html
Server: uc-httpd 1.0.0
Expires: 0

Page title: NETSurveillance WEB

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <link rel="stylesheet" type="text/css" media="screen" href="m.css" />
    
    <title>NETSurveillance WEB</title>
    
    <!-- m.js -->

    <script type="text/javascript" language="JavaScript">
var ShowTipFlag=2;
	if(navigator.userAgent.indexOf('IE') < 0)
	{
		var userAgent = navigator.userAgent,   
                rMsie = /(msie\s|trident.*rv:)([\w.]+)/,   
                rFirefox = /(firefox)\/([\w.]+)/,   
                rOpera = /(opera).+version\/([\w.]+)/,   
                rChrome = /(chrome)\/([\w.]+)/,   
                rSafari = /version\/([\w.]+).*(safari)/;
		var browserMatch = uaMatch(userAgent.toLowerCase());
		 
		if(browserMatch.browser!="IE")
		{
		     location="Login.htm";
			 }
		
	}
	
	function reminder()
	{
		var nSel=$('langlist').selectedIndex;
		var cLanguage;
		switch(nSel)
		{
		case 0:
             cLanguage="English";
            
             break;
		case 1:
             cLanguage="French";
            
             break;
		case 2:
             cLanguage="Hungarian";
            
             break;
		case 3:
             cLanguage="Italian";
            
             break;
		case 4:
             cLanguage="Japanese";
             
             break;
		case 5:
             cLanguage="Portugal";
            
             break;
		case 6:
             cLanguage="Russian";
             
             break;
		case 7:
             cLanguage="SimpChinese";
            
             break;
		case 8:
             cLanguage="Spanish";
            
             break;
		case 9:
             cLanguage="TradChinese";
             
             break;
		case 10:
             cLanguage="German";
            
             break;
		case 11:
             cLanguage="Poland";
            
             break;
		case 12:
             cLanguage="Turkey";
           
             break;
		case 13:
             cLanguage="Romanian";
             break;
		case 14:
             cLanguage="Suomi";
             break;
		case 15:
             cLanguage="Korean";
             break;
		case 16:
             cLanguage="Farsi";
             break;
		case 17:
             cLanguage="Thai";
             break;
		case 18:
             cLanguage="Greek";
             break;
		case 19:
             cLanguage="Vietnamese";
             break;
		case 20:
             cLanguage="Brazilian";
             break;
		case 21:
             cLanguage="Hebrew";
             break;
		case 22:
             cLanguage="Arabic";  
             break;  
		case 23:
             cLanguage="Bulgarian";  
             break; 
		case 24:
      		 cLanguage="Czech";  
             break;
		default:
             cLanguage="English";
             break;   
		}			 
		
		if(2==ShowTipFlag)
		{
			switch(nSel)
			{
				case 0:
					cLanguage="English";
					alert("Please set the encrypted problem!");
					break;
				case 7:
					cLanguage="SimpChinese";
					alert("请先设置密保问题!");   
					break;  
				default:
					cLanguage="English";
					alert("Please set the encrypted problem!");
					break;       
			}
		}
		else
		{
			location="reminder.html?cLanguage="+cLanguage;
		}
		
	}
	
	function uaMatch(ua) {  
                    var match = rMsie.exec(ua);
		      
                    if (match != null) {  
                        return { browser : "IE", version : match[2] || "0" };  
                   }  
                    var match = rFirefox.exec(ua);  
                   if (match != null) {  
                       return { browser : match[1] || "", version : match[2] || "0" };  
                    }  
                    var match = rOpera.exec(ua);  
                    if (match != null) {

Found 2024-10-02 by HttpPlugin

Create report

Open service 65.21.102.126:80 · levakhov.keenetic.pro

2024-09-30 04:10

HTTP/1.0 200 OK
Content-type: text/html
Server: uc-httpd 1.0.0
Expires: 0

Page title: NETSurveillance WEB

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <link rel="stylesheet" type="text/css" media="screen" href="m.css" />
    
    <title>NETSurveillance WEB</title>
    
    <!-- m.js -->

    <script type="text/javascript" language="JavaScript">
var ShowTipFlag=2;
	if(navigator.userAgent.indexOf('IE') < 0)
	{
		var userAgent = navigator.userAgent,   
                rMsie = /(msie\s|trident.*rv:)([\w.]+)/,   
                rFirefox = /(firefox)\/([\w.]+)/,   
                rOpera = /(opera).+version\/([\w.]+)/,   
                rChrome = /(chrome)\/([\w.]+)/,   
                rSafari = /version\/([\w.]+).*(safari)/;
		var browserMatch = uaMatch(userAgent.toLowerCase());
		 
		if(browserMatch.browser!="IE")
		{
		     location="Login.htm";
			 }
		
	}
	
	function reminder()
	{
		var nSel=$('langlist').selectedIndex;
		var cLanguage;
		switch(nSel)
		{
		case 0:
             cLanguage="English";
            
             break;
		case 1:
             cLanguage="French";
            
             break;
		case 2:
             cLanguage="Hungarian";
            
             break;
		case 3:
             cLanguage="Italian";
            
             break;
		case 4:
             cLanguage="Japanese";
             
             break;
		case 5:
             cLanguage="Portugal";
            
             break;
		case 6:
             cLanguage="Russian";
             
             break;
		case 7:
             cLanguage="SimpChinese";
            
             break;
		case 8:
             cLanguage="Spanish";
            
             break;
		case 9:
             cLanguage="TradChinese";
             
             break;
		case 10:
             cLanguage="German";
            
             break;
		case 11:
             cLanguage="Poland";
            
             break;
		case 12:
             cLanguage="Turkey";
           
             break;
		case 13:
             cLanguage="Romanian";
             break;
		case 14:
             cLanguage="Suomi";
             break;
		case 15:
             cLanguage="Korean";
             break;
		case 16:
             cLanguage="Farsi";
             break;
		case 17:
             cLanguage="Thai";
             break;
		case 18:
             cLanguage="Greek";
             break;
		case 19:
             cLanguage="Vietnamese";
             break;
		case 20:
             cLanguage="Brazilian";
             break;
		case 21:
             cLanguage="Hebrew";
             break;
		case 22:
             cLanguage="Arabic";  
             break;  
		case 23:
             cLanguage="Bulgarian";  
             break; 
		case 24:
      		 cLanguage="Czech";  
             break;
		default:
             cLanguage="English";
             break;   
		}			 
		
		if(2==ShowTipFlag)
		{
			switch(nSel)
			{
				case 0:
					cLanguage="English";
					alert("Please set the encrypted problem!");
					break;
				case 7:
					cLanguage="SimpChinese";
					alert("请先设置密保问题!");   
					break;  
				default:
					cLanguage="English";
					alert("Please set the encrypted problem!");
					break;       
			}
		}
		else
		{
			location="reminder.html?cLanguage="+cLanguage;
		}
		
	}
	
	function uaMatch(ua) {  
                    var match = rMsie.exec(ua);
		      
                    if (match != null) {  
                        return { browser : "IE", version : match[2] || "0" };  
                   }  
                    var match = rFirefox.exec(ua);  
                   if (match != null) {  
                       return { browser : match[1] || "", version : match[2] || "0" };  
                    }  
                    var match = rOpera.exec(ua);  
                    if (match != null) {

Found 2024-09-30 by HttpPlugin

Create report

Open service 65.21.102.126:80 · levakhov.keenetic.pro

2024-09-28 09:36

HTTP/1.0 200 OK
Content-type: text/html
Server: uc-httpd 1.0.0
Expires: 0

Page title: NETSurveillance WEB

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <link rel="stylesheet" type="text/css" media="screen" href="m.css" />
    
    <title>NETSurveillance WEB</title>
    
    <!-- m.js -->

    <script type="text/javascript" language="JavaScript">
var ShowTipFlag=2;
	if(navigator.userAgent.indexOf('IE') < 0)
	{
		var userAgent = navigator.userAgent,   
                rMsie = /(msie\s|trident.*rv:)([\w.]+)/,   
                rFirefox = /(firefox)\/([\w.]+)/,   
                rOpera = /(opera).+version\/([\w.]+)/,   
                rChrome = /(chrome)\/([\w.]+)/,   
                rSafari = /version\/([\w.]+).*(safari)/;
		var browserMatch = uaMatch(userAgent.toLowerCase());
		 
		if(browserMatch.browser!="IE")
		{
		     location="Login.htm";
			 }
		
	}
	
	function reminder()
	{
		var nSel=$('langlist').selectedIndex;
		var cLanguage;
		switch(nSel)
		{
		case 0:
             cLanguage="English";
            
             break;
		case 1:
             cLanguage="French";
            
             break;
		case 2:
             cLanguage="Hungarian";
            
             break;
		case 3:
             cLanguage="Italian";
            
             break;
		case 4:
             cLanguage="Japanese";
             
             break;
		case 5:
             cLanguage="Portugal";
            
             break;
		case 6:
             cLanguage="Russian";
             
             break;
		case 7:
             cLanguage="SimpChinese";
            
             break;
		case 8:
             cLanguage="Spanish";
            
             break;
		case 9:
             cLanguage="TradChinese";
             
             break;
		case 10:
             cLanguage="German";
            
             break;
		case 11:
             cLanguage="Poland";
            
             break;
		case 12:
             cLanguage="Turkey";
           
             break;
		case 13:
             cLanguage="Romanian";
             break;
		case 14:
             cLanguage="Suomi";
             break;
		case 15:
             cLanguage="Korean";
             break;
		case 16:
             cLanguage="Farsi";
             break;
		case 17:
             cLanguage="Thai";
             break;
		case 18:
             cLanguage="Greek";
             break;
		case 19:
             cLanguage="Vietnamese";
             break;
		case 20:
             cLanguage="Brazilian";
             break;
		case 21:
             cLanguage="Hebrew";
             break;
		case 22:
             cLanguage="Arabic";  
             break;  
		case 23:
             cLanguage="Bulgarian";  
             break; 
		case 24:
      		 cLanguage="Czech";  
             break;
		default:
             cLanguage="English";
             break;   
		}			 
		
		if(2==ShowTipFlag)
		{
			switch(nSel)
			{
				case 0:
					cLanguage="English";
					alert("Please set the encrypted problem!");
					break;
				case 7:
					cLanguage="SimpChinese";
					alert("请先设置密保问题!");   
					break;  
				default:
					cLanguage="English";
					alert("Please set the encrypted problem!");
					break;       
			}
		}
		else
		{
			location="reminder.html?cLanguage="+cLanguage;
		}
		
	}
	
	function uaMatch(ua) {  
                    var match = rMsie.exec(ua);
		      
                    if (match != null) {  
                        return { browser : "IE", version : match[2] || "0" };  
                   }  
                    var match = rFirefox.exec(ua);  
                   if (match != null) {  
                       return { browser : match[1] || "", version : match[2] || "0" };  
                    }  
                    var match = rOpera.exec(ua);  
                    if (match != null) {

Found 2024-09-28 by HttpPlugin

Create report

Domain summary

levakhov.keenetic.pro 3

1 recorded

IP summary

65.21.102.126 2

1 recorded

Domain levakhov.keenetic.pro

Finland

Vulnerable HiSilicon family DVR

Create report

Create report

Create report

Domain summary

IP summary