海信网络电视可以telnet进去，root密码为空

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

现在注册

已注册用户请登录

这是一个创建于 4505 天前的主题，其中的信息可能已经有所发展或是发生改变。

海信的互联网电视可以telnet进去，root没有密码，

uname：Linux Venus 2.6.12.6-VENUS #3 Fri Nov 13 10:55:54 CST 2009 mips unknown

应该是维纳斯计划的产物啊，不知道能不能修改，实现hack，比如安装个xbmc

telnet

root

海信

9 条回复 • 1970-01-01 08:00:00 +08:00

cooka

2012-07-24 20:18:18 +08:00

有shell了不给点具体的信息嘛.
cat /etc/issue
free
cat /proc/cpuinfo
ps -ef

brucebot

2012-07-24 20:20:42 +08:00

发现网络内容

/tmp # more serverList.xml
<?xml version="1.0" encoding="utf-8"?>

<source_inform version="1.0">
<ip_city_url>http://data.house.sina.com.cn/ip/app_addr.php?ip=</ip_city_url>
<weather_url>http://php.weather.sina.com.cn/xml.php?city=&password=DJOYnieT8234jlsK&day=</weather_url>
<stocks_url>http://vip.stock.finance.sina.com.cn/quotes_service/view/HisenseSuggest.php?type=1,2&key=</stocks_url>
<market_url>http://vip.stock.finance.sina.com.cn/quotes_service/view/HisenseABQuotes.php?id=</market_url>
<min_pic>http://image2.sinajs.cn/newchart/min/n/%s.gif</min_pic>
<daily_pic>http://image2.sinajs.cn/newchart/daily/n/%s.gif</daily_pic>
<weekly_pic>http://image2.sinajs.cn/newchart/weekly/n/%s.gif</weekly_pic>
<monthly_pic>http://image2.sinajs.cn/newchart/monthly/n/%s.gif</monthly_pic>
<adv_root_url>http://tvlist.dnethome.net:8088/cgi-bin/epg_index.fcgi?action=smarttv_ad&id=12</adv_root_url>
<adv1_root_url>http://tvlist.dnethome.net:8088/cgi-bin/epg_index.fcgi?action=smarttv_ad&id=12</adv1_root_url>
<adv2_root_url>http://beta.v.sina.com.cn/sina_adv_source.xml</adv2_root_url>
<new_ch7 id="7" name="娱乐">http://news.sina.com.cn/hisense/ent.xml</new_ch7>
<video_ch1 id="1" name="博客">http://api.video.sina.com.cn/ucc/index.php?category=podcasting&time=today&startIndex=</video_ch1>
<video_ch2 id="2" name="影视">http://api.video.sina.com.cn/ucc/index.php?category=movie_tv&time=today&startIndex=</video_ch2>
<video_ch3 id="3" name="访谈">http://api.video.sina.com.cn/ucc/index.php?category=vip_interview&time=today&startIndex=</video_ch3>
<video_ch4 id="4" name="新闻">http://api.video.sina.com.cn/ucc/index.php?category=news&time=today&startIndex=</video_ch4>
<play_interface>http://v.iask.com/v_play.php?vid=&plid=3102&ran=0.23757991613820195</play_interface>
<correlative_video>http://api.video.sina.com.cn/ucc/related_v.php?vid=</correlative_video>
<video_sourch>http://dy.gougou.com/btinfo?keyword=&um=&page=</video_sourch>
<hot_video_quest>http://dy.gougou.com/top_movie?num=&type=&year=&area=</hot_video_quest>
<smg_source>http://hisense.smgbb.cn/hisense/HSChannel.aspx?category=&pageindex=</smg_source>
<smg_play_interface>http://hisense.smgbb.cn/hisense/HSPlay.aspx?vid=</smg_play_interface>
<update_url>http://tvwg.dnethome.net/update/updateAction.do?method=stbUpdate&mac=&cm=&cn=</update_url>
<internet>
<music name="新浪乐库" enable="yes" msg="服务器调整，暂停服务，望谅解！"/>
<weather name="天气预报" enable="yes" msg="msg"/>
<stock name="股票在线" enable="yes" msg="msg"/>
<news name="新浪新闻" enable="yes" msg="msg"/>
<video name="东方宽频" enable="yes" msg="msg"/>
<xun_video name="影视娱乐" enable="yes" msg="msg"/>
<xun_download name="影视下载" enable="yes" msg="msg"/>
<pps name="影视娱乐" enable="no" msg="系统升级中"/>
</internet>
<kk_ctrl>
<kan_zb>http://movie.xunlei.com/hzb.php?SType=&DownType=&Page=&PageSize=</kan_zb>
<kan_b>http://movie.xunlei.com/hz.php?SType=&DownType=&Page=&PageSize=</kan_b>
<kan_z enable="0"/>
<iptv enable="0"/>
<copyright enable="1"/>
<boardlist>http://tvlist.dnethome.net:8088/cgi-bin/epg_index.fcgi?action=videolist&id=28&code=4</boardlist>
<gougou_search>http://movie.em.n0808.com/ce/search?num=50&en=utf-8&page=1&keyword=</gougou_search>
</kk_ctrl>
<xz_ctrl>
<menu1 name="电影排行榜" enable="yes"/>
<menu2 name="电视排行榜" enable="yes"/>
<menu3 name="影视剧搜索" enable="yes"/>
<menu4 name="下载器设置" enable="yes"/>
<menu5 name="已下载影视" enable="yes" msg="null"/>
<xia_m_list>http://tvlist.dnethome.net:8088/cgi-bin/epg_index.fcgi?action=videolist&id=62&code=5</xia_m_list>
<xia_tv_list>http://tvlist.dnethome.net:8088/cgi-bin/epg_index.fcgi?action=videolist&id=49&code=3</xia_tv_list>
<xia_search1>
<sea_url>http://dy.n0808.com/btinfo?keyword=&num=&page=&restype=&format=&sort=</sea_url>
<sort value="null"/>
<format value="null"/>
<restype value="null"/>
<page value="1"/>
<num value="24"/>
</xia_search1>
<xia_search2>http://ac.n0808.com/ac_box?ac=</xia_search2>
</xz_ctrl>
<pps_ctrl>
<class_url>http://tv.ppstream.com/classfortv.php?oem=hisensetv&classsize=&page=</class_url>
<sub_class_url>http://tv.ppstream.com/subclassfortv.php?oem=hisensetv&class=</sub_class_url>
<pps_list>http://tv.ppstream.com/channelsfortv.php?oem=hisensetv&class=</pps_list>
<pps_hint1 msg=" "/>
<pps_hint2 msg=" "/>
<pps_hint3 msg=" "/>
</pps_ctrl>
<url_update enable="yes"/>
<url_ver date="20100211"/>
<bss_stop enable="no"/>
</source_inform>

brucebot

2012-07-24 20:25:35 +08:00

@cooka

/tmp # cat /etc/issue
cat: /etc/issue: No such file or directory

/tmp # cat /proc/cpuinfo
system type : Realtek Venus
processor : 0
cpu model : MIPS 24K V7.8
BogoMIPS : 269.51
wait instruction : yes
microsecond timers : yes
tlb_entries : 32
extra interrupt vector : yes
hardware watchpoint : yes
ASEs implemented : mips16
VCED exceptions : not available
VCEI exceptions : not available

/tmp # free
total used free shared buffers
Mem: 120288 82828 37460 0 60
Swap: 32 0 32
Total: 120320 82828 37492

/tmp # ps -ef
PID Uid VmSize Stat Command
1 root 364 S init
2 root SWN [ksoftirqd/0]
3 root SW< [events/0]
4 root SW< [khelper]
5 root SW< [kthread]
6 root SW< [kblockd/0]
7 root SW [khubd]
8 root SW [pdflush]
9 root SW [pdflush]
11 root SW< [aio/0]
12 root SW< [cifsoplockd]
13 root SW< [cifsdnotifyd]
10 root SW [kswapd0]
14 root SW [eth0]
15 root SW [mtdblockd]
25 root 368 S init
26 root 368 S init
29 root 368 S init
32 root 368 S init
180 root 388 S inetd
192 root 168 S ./RootApp DvdPlayer
194 root 168 S ./RootApp DvdPlayer
196 root 6216 R DvdPlayer
197 root 168 S ./RootApp DvdPlayer
198 root 6216 S DvdPlayer
199 root 6216 S N DvdPlayer
200 root 6216 S N DvdPlayer
208 root 6216 S DvdPlayer
210 root 6216 S DvdPlayer
212 root 6216 S DvdPlayer
213 root 6216 S DvdPlayer
214 root 6216 S DvdPlayer
215 root 6216 S DvdPlayer
216 root 6216 S DvdPlayer
217 root 6216 S DvdPlayer
218 root 6216 S DvdPlayer
219 root 6216 S DvdPlayer
220 root 6216 S DvdPlayer
221 root 6216 S DvdPlayer
253 root 6216 S DvdPlayer
256 root 6216 S DvdPlayer
257 root 6216 S DvdPlayer
258 root 6216 S DvdPlayer
259 root 6216 S DvdPlayer
260 root 6216 S DvdPlayer
279 root 368 S /sbin/udhcpc -p /var/lock/udhcpc_eth0.pid -t 15 -b -s
284 root 6216 S DvdPlayer
286 root 6216 S DvdPlayer
290 root 308 S telnetd
291 root 544 S -sh
417 root 360 R ps -ef

csx163

2012-07-25 13:58:52 +08:00

应该是RTD1073 是的话搜RTD1073 + 刷机

brucebot

2012-07-25 17:10:48 +08:00

@csx163 这个怎么确定的？

csx163

2012-07-25 19:52:59 +08:00

不太确定，最好是拆开看看
cpu model : MIPS 24K V7.8
BogoMIPS : 269.51

brucebot

2012-07-25 21:23:31 +08:00

@csx163 还没过保修期，不太敢拆，现在只是拿来放NAS里面的电影，网络电影只是个摆设

ipconfiger

2012-07-25 21:29:58 +08:00

能进去装个pps或者小鸟么？

dndx

2012-07-25 21:34:19 +08:00

大洞啊，这要是被XXX知道并加以利用会不会以后就没有海信这个牌子了....