Posts: 2
Threads: 0
Joined: Sep 2023
If you still need help with cracking list, DM me.
Posts: 2
Threads: 0
Joined: Nov 2024
Posts: 120
Threads: 2
Joined: Sep 2023
this is big...respect and thank you
Posts: 2
Threads: 0
Joined: Mar 2025
Can you confirm whether or not the password hashes in the breach are salted?
Thanks!
Posts: 1
Threads: 0
Joined: Mar 2025
(Mar 25, 2025, 09:19 PM)rose87168 Wrote: (Mar 25, 2025, 05:49 AM)tester27 Wrote: The blogs says "The Threat Actor has now shared a 10,000-line sample to further substantiate their claims" , was there any update on that , i see its same data . if anyone has please share the link
(Mar 25, 2025, 06:10 AM)liang18 Wrote: If anyone has a 10,000 line sample please share it with me, I need to verify it, thank u.
(Mar 25, 2025, 07:19 AM)Atomiczer Wrote: If anyone has a 10,000 line sample please share. Thank You.
(Mar 25, 2025, 09:07 AM)un_kyle66 Wrote: (Mar 25, 2025, 08:52 AM)JuiceWRLDsea Wrote: (Mar 25, 2025, 08:50 AM)un_kyle66 Wrote: seems fake man... they denied it and you doing nothing??? are you kidding?? its just a joke 
which PR team do you belong to?
i think the world wanna see some real data, dont u? how many companies data he got? cant even able to show a tiny bit? arent that a joke? wanna be famous by a funny joke?
(Mar 25, 2025, 09:19 AM)n30h4x0r Wrote: OP please share the extra 10k sample in here as well.
(Mar 25, 2025, 10:11 AM)skibidi007 Wrote: the file containing the 10,000 records is called s.txt, anyone got a copy?, if so share it
(Mar 25, 2025, 10:46 AM)sergioramos Wrote: I think we would need more data to confirm if it's legit or not. Oracle keeps denying the breach....
(Mar 25, 2025, 11:56 AM)skibidi007 Wrote: Rose87168 drop some real 2025 samples. Why would you share a 10,000 records (s.txt) with Alon Gal cyber security researcher from Hudson Rock, and not this community?, is that fake or real?, is Alon lying?
(Mar 25, 2025, 01:09 PM)CG2398 Wrote: (Mar 25, 2025, 08:13 AM)JuiceWRLDsea Wrote: I guess now Oracle cant deny, even cloudsek has confirmed it. Great work champs! Also they(oracle) not rewarding you shows company doesn't respond well to bug bounty.
Oh yeah, Oracle is VERY hostile towards even bug reports. We reported a bug with their database software, and rather than thanking us they threatened to audit us into oblivion if we disclosed the bug. Horrible company. Just gotta remember what O.R.A.C.L.E. stands for: One Rich Asshole Name Larry Ellison
(Mar 25, 2025, 02:15 PM)Somewutt Wrote: (Mar 25, 2025, 01:09 PM)CG2398 Wrote: (Mar 25, 2025, 08:13 AM)JuiceWRLDsea Wrote: I guess now Oracle cant deny, even cloudsek has confirmed it. Great work champs! Also they(oracle) not rewarding you shows company doesn't respond well to bug bounty.
Oh yeah, Oracle is VERY hostile towards even bug reports. We reported a bug with their database software, and rather than thanking us they threatened to audit us into oblivion if we disclosed the bug. Horrible company. Just gotta remember what O.R.A.C.L.E. stands for: One Rich Asshole Name Larry Ellison TA works for CloudSEK
(Mar 25, 2025, 03:07 PM)Sanji667 Wrote: Does anyone know where the 10,000 samples were placed?
(Mar 25, 2025, 06:17 PM)Somewutt Wrote: (Mar 25, 2025, 04:20 PM)JustAUser1921 Wrote: (Mar 25, 2025, 04:15 PM)Somewutt Wrote: (Mar 25, 2025, 03:07 PM)Sanji667 Wrote: Does anyone know where the 10,000 samples were placed? Alon Gal got them and CloudSEK and TA or nexus if all 3 
Is there any confirmation from TA that he shared the samples with Hudson Rock? All 3 are one. They hacked, they analyzed, they received evidence. Now you wonder why oracle is not submitting to them?
about 10k sample : contact me with official/known email < only researchers can contact
TA and cloudSEK is one person ? ))) nice try Yes CloudSEK owner planned this and his employee works as rose. I work in their office and I have recording of this plan , their partner is Alon gal
Posts: 1
Threads: 0
Joined: Oct 2023
Volcano of the week!!! Jeezzz!!!
Posts: 132
Threads: 14
Joined: Dec 2024
(Mar 20, 2025, 02:40 PM)rose87168 Wrote: Hello,
Oracle traditional servers were hacked (domains : login.(region-name).oraclecloud.com )
Around 6 million user customers’ data from SSO and LDAP was stolen.
JKS files, passwords, key files, and enterprise manager JPS keys were also taken.
I’ll list the domains of all the companies in this leak. Companies can pay a specific amount to remove their employees’ information from the list before it’s sold.
oracle can send me a message through the company's official email to My Email with 72H ( we talk before )
not any test env as you see :
1- only send offers. ( add price in title )
2- only full data , no single company.
3- decryption is not crack service !
[align=left]# Matt Wallace, users, 11987096172814988, cloud.oracle.com[/align]
dn: cn=Matt Wallace,cn=users,orclMTTenantGuid=11987096172814988,dc=cloud,dc=or
acle,dc=com
orclmtuid: [email protected]
tenantadmin: cn=TenantAdminGroup,cn=Groups,orclMTTenantGuid=11987096172814988,
dc=cloud,dc=oracle,dc=com
userwriteprivilegeuc: cn=orclUserWritePrivilegeGroup,cn=SystemIDGroups,cn=Grou
ps,orclMTTenantGuid=11987096172814988,dc=cloud,dc=oracle,dc=com
userreadprivilegeuc: cn=orclUserReadPrivilegeGroup,cn=SystemIDGroups,cn=Groups
,orclMTTenantGuid=11987096172814988,dc=cloud,dc=oracle,dc=com
userwriteprefsprivilegeuc: cn=orclUserWritePrefsPrivilegeGroup,cn=SystemIDGrou
ps,cn=Groups,orclMTTenantGuid=11987096172814988,dc=cloud,dc=oracle,dc=com
orclmttenantuname: efkd-test
orclmttenantguid: 11987096172814988
orclmttenantstate: ENABLED
authpassword;oid: {SASL/MD5}UyfTnsZlxsfJ6Gyfo1sJIw==
authpassword;oid: {SASL/MD5-DN}jX6mxVjXALq1Px4a0xOWWA==
authpassword;oid: {SASL/MD5-U}V+XK5sQjGdO1E7RZNYDCfw==
userpassword:: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
=
objectclass: orclIDXPerson
objectclass: oblixPersonPwdPolicy
objectclass: oblixOrgPerson
objectclass: OIMPersonPwdPolicy
objectclass: inetorgperson
objectclass: top
objectclass: organizationalPerson
objectclass: person
oblogintrycount: 0
displayname: Matt Wallace
cn: Matt Wallace
employeetype: OTHER
uid: [email protected]
obpasswordchangeflag: true
mail: [email protected]
sn: Wallace
obpasswordexpirydate: 2018-05-24T00:00:00Z
[align=left]givenname: Matt[/align]
[align=left]USR_KEY ACT_KEY USR_LAST_NAME USR_FIRST_NAME USR_MIDDLE_NAME USR_DISPLAY_NAME USR_MANAGER USR_TYPE USR_LOCATION USR_FSS USR_TODO USR_PASSWORD USR_DISABLED USR_PWD_CANT_CHANGE USR_PWD_MUST_CHANGE USR_PWD_NEVER_EXPIRES USR_UPDATE_AD USR_CREATED USR_STATUS USR_EMP_TYPE USR_LOGIN USR_DISABLED_BY_PARENT USR_PWD_EXPIRE_DATE USR_PWD_WARN_DATE USR_MANAGER_KEY USR_POLICY_UPDATE USR_PWD_WARNED USR_PWD_EXPIRED USR_START_DATE USR_END_DATE USR_PROVISIONING_DATE USR_DEPROVISIONING_DATE USR_PROVISIONED_DATE USR_DEPROVISIONED_DATE USR_EMAIL USR_LOCKED USR_LOGIN_ATTEMPTS_CTR USR_PWD_RESET_ATTEMPTS_CTR USR_CHANGE_PWD_AT_NEXT_LOGON USR_PWD_MIN_AGE_DATE USR_DATA_LEVEL USR_CREATE USR_CREATEBY USR_UPDATE USR_UPDATEBY USR_NOTE USR_TIMEZONE USR_LOCALE USR_LOCKED_ON USR_MANUALLY_LOCKED USR_AUTOMATICALLY_DELETE_ON USR_FULL_NAME USR_COUNTRY USR_DEPT_NO USR_DESCRIPTION USR_COMMON_NAME USR_EMP_NO USR_FAX USR_GEN_QUALIFIER USR_HIRE_DATE USR_HOME_PHONE USR_LOCALITY_NAME USR_MOBILE USR_PAGER USR_HOME_POSTAL_ADDRESS USR_POSTAL_ADDRESS USR_POSTAL_CODE USR_PO_BOX USR_STATE USR_STREET USR_TELEPHONE_NUMBER USR_TITLE USR_INITIALS USR_PWD_GENERATED USR_LDAP_ORGANIZATION USR_LDAP_ORGANIZATION_UNIT USR_LDAP_GUID USR_LDAP_DN USR_ROWVER USR_ACCESSIBILITY_MODE USR_COLOR_CONTRAST USR_FONT_SIZE USR_NUMBER_FORMAT USR_CURRENCY USR_DATE_FORMAT USR_TIME_FORMAT USR_EMBEDDED_HELP USR_LANGUAGE USR_TERRITORY USR_NAME_PREFERRED_LANG USR_UDF_TENANT_GUID USR_UDF_TENANT_NAME USR_UDF_NONMT_LOGIN USR_UDF_EXTERNAL_USER_TYPE USR_UDF_FA_USER_ID USR_UDF_FA_PERSON_ID USR_UDF_FA_PARTY_ID USR_CN_GENERATED USR_SUMMARY_RISK USR_HAS_HIGH_RISK_ROLE USR_HAS_HIGH_RISK_RESOURCE USR_HAS_HIGH_RISK_ENTITLEMENT USR_HAS_HIGH_RISK_PROV_METH USR_HAS_HIGH_RISK_OPEN_SOD USR_HAS_HIGH_RISK_LAST_CERT USR_ROLE_SUMMARY_RISK USR_ACCOUNT_SUMMARY_RISK USR_ENTITLEMENT_SUMMARY_RISK USR_RISK_UPDATE_DATE USR_JOB_CODE USR_OFFICE_NAME IS_USR_FEDERATED [/align]
[align=left]'5023117 '1 'valakonda 'canary 'null '[email protected] 'null 'End-User Administrator 'null 'null 'null ' '0 'null 'null 'null 'null '2022-11-03 16:18:33.0 'Active 'Full-Time '[email protected] 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null '2022-11-03 16:18:33.0 'null '[email protected] '0 '0 '0 '1 'null 'null '2022-11-03 16:18:33.0 '4 '2022-11-03 16:18:33.0 '4 'null 'null 'null 'null 'null 'null 'null 'null 'null 'Identity Domain Administrator '[email protected] 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null 'E9F2FE7F3770CEFDE050C10A19944D4E '[email protected],cn=users,orclMTTenantGuid=57371814553534184,dc=cloud,dc=oracle,dc=com '0000000000000000 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null '57371814553534184 'canary791204852 '[email protected] 'null 'null 'null 'null '0 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null 'null[/align]
+++++++ Good Work 
Posts: 2
Threads: 0
Joined: Aug 2024
Nice one!!! I'm interested in this data!!
Posts: 298
Threads: 13
Joined: Sep 2023
more examples to be shared ??
Posts: 22
Threads: 0
Joined: Sep 2023
(Mar 26, 2025, 08:53 PM)Bart_da_fart Wrote: (Mar 25, 2025, 09:19 PM)rose87168 Wrote: (Mar 25, 2025, 05:49 AM)tester27 Wrote: The blogs says "The Threat Actor has now shared a 10,000-line sample to further substantiate their claims" , was there any update on that , i see its same data . if anyone has please share the link
(Mar 25, 2025, 06:10 AM)liang18 Wrote: If anyone has a 10,000 line sample please share it with me, I need to verify it, thank u.
(Mar 25, 2025, 07:19 AM)Atomiczer Wrote: If anyone has a 10,000 line sample please share. Thank You.
(Mar 25, 2025, 09:07 AM)un_kyle66 Wrote: (Mar 25, 2025, 08:52 AM)JuiceWRLDsea Wrote: (Mar 25, 2025, 08:50 AM)un_kyle66 Wrote: seems fake man... they denied it and you doing nothing??? are you kidding?? its just a joke
which PR team do you belong to?
i think the world wanna see some real data, dont u? how many companies data he got? cant even able to show a tiny bit? arent that a joke? wanna be famous by a funny joke?
(Mar 25, 2025, 09:19 AM)n30h4x0r Wrote: OP please share the extra 10k sample in here as well.
(Mar 25, 2025, 10:11 AM)skibidi007 Wrote: the file containing the 10,000 records is called s.txt, anyone got a copy?, if so share it
(Mar 25, 2025, 10:46 AM)sergioramos Wrote: I think we would need more data to confirm if it's legit or not. Oracle keeps denying the breach....
(Mar 25, 2025, 11:56 AM)skibidi007 Wrote: Rose87168 drop some real 2025 samples. Why would you share a 10,000 records (s.txt) with Alon Gal cyber security researcher from Hudson Rock, and not this community?, is that fake or real?, is Alon lying?
(Mar 25, 2025, 01:09 PM)CG2398 Wrote: (Mar 25, 2025, 08:13 AM)JuiceWRLDsea Wrote: I guess now Oracle cant deny, even cloudsek has confirmed it. Great work champs! Also they(oracle) not rewarding you shows company doesn't respond well to bug bounty.
Oh yeah, Oracle is VERY hostile towards even bug reports. We reported a bug with their database software, and rather than thanking us they threatened to audit us into oblivion if we disclosed the bug. Horrible company. Just gotta remember what O.R.A.C.L.E. stands for: One Rich Asshole Name Larry Ellison
(Mar 25, 2025, 02:15 PM)Somewutt Wrote: (Mar 25, 2025, 01:09 PM)CG2398 Wrote: (Mar 25, 2025, 08:13 AM)JuiceWRLDsea Wrote: I guess now Oracle cant deny, even cloudsek has confirmed it. Great work champs! Also they(oracle) not rewarding you shows company doesn't respond well to bug bounty.
Oh yeah, Oracle is VERY hostile towards even bug reports. We reported a bug with their database software, and rather than thanking us they threatened to audit us into oblivion if we disclosed the bug. Horrible company. Just gotta remember what O.R.A.C.L.E. stands for: One Rich Asshole Name Larry Ellison TA works for CloudSEK
(Mar 25, 2025, 03:07 PM)Sanji667 Wrote: Does anyone know where the 10,000 samples were placed?
(Mar 25, 2025, 06:17 PM)Somewutt Wrote: (Mar 25, 2025, 04:20 PM)JustAUser1921 Wrote: (Mar 25, 2025, 04:15 PM)Somewutt Wrote: Alon Gal got them and CloudSEK and TA or nexus if all 3
Is there any confirmation from TA that he shared the samples with Hudson Rock? All 3 are one. They hacked, they analyzed, they received evidence. Now you wonder why oracle is not submitting to them?
about 10k sample : contact me with official/known email < only researchers can contact
TA and cloudSEK is one person ? ))) nice try Yes CloudSEK owner planned this and his employee works as rose. I work in their office and I have recording of this plan , their partner is Alon gal
Please share the recording, this will be big.
|
