Posts: 3
Threads: 2
Joined: Jul 2023
Patch ur shit lmao. Contains >100k customers requesting service from Ukraine Telecom. Exploit.in links expires after 1000 downloads so save it.
https://send.exploit.in/download/6ea587c...486aSrOrWg
https://send.exploit.in/download/4ff027d...7Bea8FcV4Q
Posts: 19,939
Threads: 357
Joined: Jun 2023
(Aug 31, 2023, 06:37 PM)ogrichardstallman Wrote: Patch ur shit lmao. Contains >100k customers requesting service from Ukraine Telecom. Exploit.in links expires after 1000 downloads so save it.
https://send.exploit.in/download/6ea587c...486aSrOrWg
https://send.exploit.in/download/4ff027d...7Bea8FcV4Q sample: CREATE TABLE `x808_requests_` (
`id` int(10) unsigned NOT NULL AUTO_INCREMENT,
`source` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`client_country` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`client_region` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`client_distinct` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`client_city` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`client_address` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`client_ip` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`client_email` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`client_phone` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`client_name` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`client_note` text COLLATE utf8mb4_unicode_ci,
`service_name` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`date` datetime NOT NULL,
`client_city_id` int(11) NOT NULL DEFAULT '0',
`trade_partner` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`trade_point` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`trade_worker` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`utm_source` text COLLATE utf8mb4_unicode_ci,
`utm_medium` text COLLATE utf8mb4_unicode_ci,
`utm_campaign` text COLLATE utf8mb4_unicode_ci,
`client_street` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`client_house` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`client_flat` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`processed` int(11) NOT NULL DEFAULT '0',
`host` text COLLATE utf8mb4_unicode_ci,
`host_id` int(11) NOT NULL DEFAULT '0',
`app_id` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`wlead_id` varchar(3000) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`contract` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
`token` varchar(255) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=171718 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
/*!40101 SET character_set_client = @saved_cs_client */;
LOCK TABLES `x808_requests_` WRITE;
/*!40000 ALTER TABLE `x808_requests_` DISABLE KEYS */;
INSERT INTO `x808_requests_` VALUES (1,'https://optica.ukrtelecom.ua/',NULL,'Киевская область','','м. Ирпень','TESTS','undefined','[email protected]','+38 (088) 888-88-88','TESTS',NULL,'','2020-03-15 11:06:35',0,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,1,'optica.ukrtelecom.ua',2,NULL,NULL,NULL,NULL),(2,'https://optica.ukrtelecom.ua',NULL,'Волинська','Ківерцівський','м. Ківерці','tests','185.11.29.234','','+38 (000) 000-00-00','tests',NULL,'FTTB \"100 Мбіт/с\"','2020-03-19 17:15:24',275,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,1,'https://optica.ukrtelecom.ua',2,NULL,NULL,NULL,NULL),(3,'https://optica.ukrtelecom.ua',NULL,'Вінницька','Іллінецький','м. Іллінці','tests','185.11.29.234','','+38 (000) 000-00-00','tests',NULL,'FTTB \"100 Мбіт/с\"','2020-03-19 17:16:20',20,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,1,'https://optica.ukrtelecom.ua',2,NULL,NULL,NULL,NULL),(4,'https://optica.ukrtelecom.ua',NULL,'Волинська','Ківерцівський','м. Ківерці','tests','185.11.29.234','','+38 (000) 000-00-00','tests',NU
Posts: 3
Threads: 2
Joined: Jul 2023
(Sep 01, 2023, 06:45 AM)Addka72424 Wrote: sample:[code]CREATE TABLE `x808_requests_` (
Thanks. Archive for anyone interested - https://archive.ph/vn90P
This is from a third party that manages their shit if you're interested (plus-karma[.]com). Still their customer data.
For some reason there is a file logging plaintext passwords every time someone logs into OctoberCMS? I don't know if this is a backdoor or "feature" but very stupid.
Posts: 277
Threads: 3
Joined: Jun 2024
Thanks a lot! I'm going to check it out
Posts: 1
Threads: 0
Joined: Aug 2024
Posts: 32
Threads: 0
Joined: Jul 2024
thanks for the share and as far as i understand "you shouldn't rely on third parties for your sensitive data". This forum account is currently banned. Ban Length: Permanent (N/A Remaining) Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Posts: 25
Threads: 0
Joined: Dec 2024
Thanks for sharing bro. This forum account is currently banned. Ban Length: Permanent (N/A Remaining) Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Posts: 81
Threads: 1
Joined: Oct 2023
(Aug 31, 2023, 06:37 PM)ogrichardstallman Wrote: Patch ur shit lmao. Contains >100k customers requesting service from Ukraine Telecom. Exploit.in links expires after 1000 downloads so save it.
https://send.exploit.in/download/6ea587c...486aSrOrWg
https://send.exploit.in/download/4ff027d...7Bea8FcV4Q
These links are DEAD. Plz renew them.
Posts: 4,572
Threads: 456
Joined: Jun 2023
The link in this thread is dead. Please reply to the PM you were sent to get your thread moved back to the Databases section.
Thanks @ zehq for ranks!!!
|