本报告对固件 /tmp/panabit_pkg/PanabitOEM_TANGr7p8_20260414_Linux3 进行了安全审计。未发现严重安全问题。检测到 30 个外连域名和 138 个公网 IP。
| 域名 | 风险 | 分类 | 引用 |
|---|---|---|---|
report.url.cn | 🔴 high | telemetry | 1 个文件
|
api.ngrok.cc | 🟡 medium | api | 1 个文件
|
api.duapp.com | 🟡 medium | api | 1 个文件
|
api.playstation.com | 🟡 medium | api | 1 个文件
|
stun.remotepc.com | 🟡 medium | network | 1 个文件
|
account.xyaz.cn | 🟡 medium | auth | 1 个文件
|
auth.natapp.cn | 🟡 medium | auth | 1 个文件
|
update.yjwujian.cn | 🟡 medium | update | 1 个文件
|
cloud.dhgs.net | 🟡 medium | cloud | 1 个文件
|
darwin.qianxin.com | 🟡 medium | system | 1 个文件
|
api.epicgames.dev | 🟡 medium | api | 1 个文件
|
login.microsoftonline.com | 🟡 medium | auth | 1 个文件
|
cloud.huawei.com | 🟡 medium | cloud | 1 个文件
|
stun.workslink.com | 🟡 medium | network | 1 个文件
|
api.onedrive.com | 🟡 medium | api | 1 个文件
|
api.weipan.com | 🟡 medium | api | 1 个文件
|
ws.126.net | 🟡 medium | cloud | 1 个文件
|
api.bminer.me | 🟡 medium | api | 1 个文件
|
login.live.com | 🟡 medium | auth | 1 个文件
|
update.hihonorcdn.com | 🟡 medium | update | 1 个文件
|
cloud.xylink.com | 🟡 medium | cloud | 1 个文件
|
obj.data.id | 🟢 low | unknown | 56 个文件
|
download.panabit.com | 🟢 low | update | 14 个文件
|
obj.field.id | 🟢 low | unknown | 7 个文件
|
json.data.info | 🟢 low | unknown | 5 个文件
|
www.panabit.com | 🟢 low | frontend | 5 个文件
|
ti.qianxin.com | 🟢 low | unknown | 4 个文件
|
obj.data.app | 🟢 low | unknown | 4 个文件
|
d.data.id | 🟢 low | unknown | 2 个文件
|
weixin.panabit.com | 🟢 low | unknown | 2 个文件
|
| IP 地址 | 说明 |
|---|---|
183.255.234.49 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
183.255.234.8 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
183.255.234.9 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
61.241.63.175 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
139.189.127.75 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
183.255.124.46 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
183.255.234.52 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
119.147.89.245 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
183.255.124.27 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
183.255.234.33 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
183.255.234.34 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
183.255.234.43 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
183.255.124.8 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
183.255.124.20 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
183.255.234.58 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
183.255.234.60 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
183.255.234.62 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
183.255.234.35 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
183.255.234.15 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
183.255.124.18 | 1 个文件 → vcinema.com.cn, bn.netease.com, server.crossloop.com |
发现 34 个网络调用
| 操作 | 类型 | 目标 | 文件 | 代码 |
|---|---|---|---|---|
| connect | netcat | dec.tar.gz | /admin/cgi-bin/flowcontrol/ajax_malc:281 | errmsg=`openssl enc -aes-256-cbc -d -salt -md sha256 -k "${channel_key}" -in "${... |
| POST/upload | xhr | http://www.w3.org/2000/svg | /admin/html/assert/layui.all.js:1 | /** v2.13.0 | MIT Licensed */;!function(d){"use strict";var e,h=d.document,v=d.l... |
| POST/upload | xhr | https://xxxx/VPATH_test/ | /admin/html/assert/panabit.js:1 | var cLang = { "LANG0001": {"ch": "ȷ��", "en": "OK"}, "LANG0002": {"ch": "����",... |
| POST/upload | xhr | https://www.panabit.com | /admin/html/common/login.js:1 | if (window.top != window.self) parent.location.href = "../login/login.cgi?t=v"; ... |
| GET | jquery | d.src.length | /admin/html/control/malc_auth.html:1 | {{# var lang003 = {"ch": "����", "en": "Any"}, lang004 = {"ch": "��־����", ... |
| GET | jquery | https://download.panabit.com | /admin/html/control/malc_history.html:1 | {{# var lang003 = {"ch": "����", "en": "Any"}, lang004 = {"ch": "��־����", ... |
| POST/upload | jquery | json.data.length | /admin/html/control/malc_report.html:1 | {{# var lang003 = {"ch": "����", "en": "Any"}, lang004 = {"ch": "��־����", ... |
| GET | jquery | obj.data.ip | /admin/html/control/malc_user.html:1 | {{# var lang001 = {"ch": "�����û�", "en": "Hit User"}, lang002 = {"ch"... |
| GET | jquery | d.dst.length | /admin/html/control/malc_username.html:1 | {{# var lang003 = {"ch": "����", "en": "Any"}, lang004 = {"ch": "��־����", ... |
| upload | upload | https://download.panabit.com | /admin/html/control/malc_vendor.html:1 | {{# var lang001 = {"ch": "�鱨�ſ�", "en": "Intelligence Overview"}, lan... |
| GET | jquery | obj.data.proto | /admin/html/monitor/ipview_tunnel.html:1 | {{# var lang001 = {"ch": "ԴIP", "en": "Src IP"}, lang002 = {"ch": "Դ��... |
| GET | jquery | obj.data.ip | /admin/html/proto/appview_flow.html:1 | {{# var lang001 = {"ch": "�û�����", "en": "User Direction"}, lang002 = {"ch": "... |
| GET | jquery | obj.data.ip | /admin/html/proto/appview_user.html:1 | {{# var lang001 = {"ch": "�ؼ�������", "en": "Search"}, lang002 = {"ch": "���",... |
| upload | upload | json.data.deduppkt | /admin/html/proto/dpi_config.html:1 | {{# var lang001 = {"ch": "�������", "en": "DPI Engine Settings"}, lang002 = {"c... |
| upload | upload | d.sortver.split | /admin/html/sac/ap_set_upgrade.html:1 | {{# var lang001 = {"ch": "�豸��Ϣ", "en": "Device Info"}, lang002 = {"ch": "��... |
| upload | upload | json.data.ifadmin | /admin/html/system/sys_setting_web.html:1 | {{# var lang001 = {"ch": "WEB����", "en": "Web Access"}, lang002 = {"ch": "�����... |
检测到 30 个外连域名。
建议：审查所有外连通信，更换默认凭据，升级过时的加密库。