[cc5ab]

Today I breached the Land Surveyors Board of Kenya (LSB / lsb.go.ke), the official Kenyan government regulatory body responsible for licensing land surveyors across the Republic of Kenya.

Data Exposed:

- 175 licensed surveyors with full names, personal email addresses, postal addresses, firm/company names, license numbers, and active/inactive licensing status for the year 2026
- 730 approved survey assistants with full names, Kenyan national ID numbers, assistant registration numbers, and their supervising surveyor's name and license number
- Individual verification endpoint leaking additional PII including personal mobile phone numbers, national ID numbers, profile photo URLs, hashed identifiers, and associated assistant details
- Complete API schema documenting all endpoints, request parameters, response models, and authentication requirements
- Django administration panel with login form accepting national ID number as username
- Full Django settings disclosure including database engine (PostgreSQL), database name, database user, email server configuration (mail.govmail.ke), internal file paths, installed applications, and JWT token configuration
- Complete URL routing table revealing internal endpoint structure across account management, licensing, complaints, compliments, and surveyor verification modules
- Government resources repository containing 45+ official documents including the Constitution of Kenya, Land Act, Survey Act, Land Registration Act, Physical and Land Use Planning Act, Community Land Act, Sectional Properties Act, examination past papers from 1989-2010, and RICS/FIG international surveying guidelines
- Official news announcements and public notices from the Board dating back to 2025
- Resource categories including legislations, guidelines, exam past papers, registration procedures, and official notices

Join : https://t.me/+08CiDxqpad0zZDdh
BACKUP : https://t.me/+kgN2a-wUAms3YWZh

- 271

[lewd]

nice