Posts: 18
Threads: 14
Joined: Oct 2023
Apr 20, 2024, 02:25 PM
(This post was last modified: Apr 29, 2024, 09:06 PM by Automation.
Edit Reason: Official Information edited.
)
Hello BreachForums Community,
Today I have uploaded the Mappery Database for you to download, thanks for reading and enjoy!
https://cdn.bf.st/logo/mappery.png
In December 2018, the mapping website Mappery suffered a data breach that exposed over 205k unique email addresses. The incident also exposed usernames, the geographic location of the user and passwords stored as unsalted SHA-1 hashes. No response was received from Mappery when contacted about the incident.
Note: This is not a complete leak, the complete leak contains 205.242 unique email addresses, it also contains geographic locations and usernames in addition to the specified data. If you have this leak and you want to share it with the forum, then please contact @Baphomet or @Addka72424 or post a thread with the leak on the forum.
Compromised data: Email addresses, Geographic locations, Passwords, Usernames Contents Spoiler The .7z File's MD5 Hash is 6F44077BC67AB53B9944D39EE34C96CC. In total, there are 205242 records. The file is 55.15MB uncompressed and 12.16MB compressed.
Posts: 19,939
Threads: 357
Joined: Jun 2023
@ jacka113 it doesn't look like 2022, it looks more like it's a 2018 leak, especially considering that the last lines from this leak are in the HIBP leak 2018 (Which could not have been if the leak date was 2022).Maybe you have a version that includes geographic locations?
Posts: 18
Threads: 14
Joined: Oct 2023
(Apr 25, 2024, 01:46 PM)Addka72424 Wrote: @jacka113 it doesn't look like 2022, it looks more like it's a 2018 leak, especially considering that the last lines from this leak are in the HIBP leak 2018 (Which could not have been if the leak date was 2022).Maybe you have a version that includes geographic locations?
I looked at HIBP ( https://haveibeenpwned.com/PwnedWebsites#Mappery ) and i don't seem to have the full leak. Troy Hunt's database is more complete ( includes geographic locations) but the emails from my leak match 100% the one from HIBP
I don't have the full version.but I'll take it if someone uploads it. I don't like partial leaks
Posts: 19,939
Threads: 357
Joined: Jun 2023
(Apr 25, 2024, 04:49 PM)jacka113 Wrote: (Apr 25, 2024, 01:46 PM)Addka72424 Wrote: @jacka113 it doesn't look like 2022, it looks more like it's a 2018 leak, especially considering that the last lines from this leak are in the HIBP leak 2018 (Which could not have been if the leak date was 2022).Maybe you have a version that includes geographic locations?
I looked at HIBP ( https://haveibeenpwned.com/PwnedWebsites#Mappery ) and i don't seem to have the full leak. Troy Hunt's database is more complete ( includes geographic locations) but the emails from my leak match 100% the one from HIBP
I don't have the full version.but I'll take it if someone uploads it. I don't like partial leaks I have a version that has 1k more lines, but it's still without usernames and locations 
Posts: 1,490
Threads: 66
Joined: Jun 2023
Apr 29, 2024, 10:57 AM
(This post was last modified: Apr 29, 2024, 11:05 AM by joepa.)
Is it good data?
What is the algo of the passwords?
Posts: 1,493
Threads: 69
Joined: Jun 2023
(Apr 29, 2024, 10:57 AM)joepa Wrote: Is it good data?
What is the algo of the passwords?
passwords stored as unsalted SHA-1 hashes
I am NOT a member of any of the public Telegram chats,
everyone who impersonates me on Telegram are nonentities and scammers!
Posts: 1,490
Threads: 66
Joined: Jun 2023
(May 04, 2024, 07:05 PM)Blastoise Wrote: passwords stored as unsalted SHA-1 hashes Cannot crack a single hash. Perhaps a pepper?
Posts: 241
Threads: 20
Joined: Jun 2023
(May 06, 2024, 10:08 AM)joepa Wrote: (May 04, 2024, 07:05 PM)Blastoise Wrote: passwords stored as unsalted SHA-1 hashes Cannot crack a single hash. Perhaps a pepper? I've seen this one before, it's HMAC-SHA1 with the password in both the key and the message values.
HMAC-SHA1("123456","123456") == 74b55b6ab2b8e438ac810435e369e3047b3951d0
Not supported in Hashcat.
Formerly @God, but that username was stolen from me.
Posts: 1,490
Threads: 66
Joined: Jun 2023
(May 07, 2024, 04:07 AM)Sneed Wrote: (May 06, 2024, 10:08 AM)joepa Wrote: (May 04, 2024, 07:05 PM)Blastoise Wrote: passwords stored as unsalted SHA-1 hashes Cannot crack a single hash. Perhaps a pepper? I've seen this one before, it's HMAC-SHA1 with the password in both the key and the message values.
HMAC-SHA1("123456","123456") == 74b55b6ab2b8e438ac810435e369e3047b3951d0
Not supported in Hashcat.
Thank you! Any good tools available to crack this? Doesn't seem to be in john either (with password both as key and value).
Posts: 241
Threads: 20
Joined: Jun 2023
(May 07, 2024, 09:37 AM)joepa Wrote: (May 07, 2024, 04:07 AM)Sneed Wrote: (May 06, 2024, 10:08 AM)joepa Wrote: (May 04, 2024, 07:05 PM)Blastoise Wrote: passwords stored as unsalted SHA-1 hashes Cannot crack a single hash. Perhaps a pepper? I've seen this one before, it's HMAC-SHA1 with the password in both the key and the message values.
HMAC-SHA1("123456","123456") == 74b55b6ab2b8e438ac810435e369e3047b3951d0
Not supported in Hashcat.
Thank you! Any good tools available to crack this? Doesn't seem to be in john either (with password both as key and value).
It's probably trivial to modify one of Hashcat's existing HMAC modules like -m150 or -m160 and create a custom version if you know C. Unfortunately, I do not.
Formerly @God, but that username was stolen from me.
|
