OpFuckMohammad - www.msd.com.mv

OpFuckMohammad

Greetings from th3inf1d3l - A small/medium leak from Maldives Securities Depository, www.msd.com.mv at 168.144.92.38. I got 752 unique emails and 193 breached accounts (notice that only 91 passwords were unique). The biggest impact with this leak is the other data. I don't speak finance but some of the dumps contain items like Broker ID No, account No, ACNO etc. May be useful. Also leaked were mobile numbers, National ID numbers etc. The full dump can be found at https://anonfiles.com/file/e3b95663c8006616352e08d558e15264 this compressed file also contains files for columns in all tables in each of DBs.

Summary:
DB: omsdb
  Table cmdauser.csv: 0 total 0 unique pwds 0 blank pwds
  Table brokers.csv: 11 total 11 unique emails
  Table omusers.csv: 1 total 1 unique emails
  Table omusers.csv: 1 total 1 unique pwds 0 blank pwds
  Table dealingcompany.csv: 4 total 3 unique emails
  Table omusers_o.csv: 38 total 22 unique emails
  Table omusers_o.csv: 84 total 60 unique pwds 0 blank pwds
  Table kycs.csv: 8 total 1 unique emails
  Table kycs.csv: 0 total 0 unique pwds 8 blank pwds
DB: mse_msd
  Table subcribers.csv: 10 total 10 unique emails
  Table contact_list.csv: 472 total 122 unique emails
  Table users.csv: 1 total 1 unique pwds 0 blank pwds
  Table registerdusers.csv: 3 total 0 unique emails
  Table registerdusers.csv: 6 total 5 unique pwds 0 blank pwds
DB: omsauth
  Table users.csv: 1 total 1 unique pwds 0 blank pwds
DB: msewebdb
  Table cpmain.csv: 4 total 4 unique emails
  Table brokers.csv: 2 total 0 unique emails
  Table ms_user.csv: 5 total 5 unique pwds 0 blank pwds
DB: msddb
  Table userlist.csv: 17 total 16 unique pwds 0 blank pwds
  Table accountholder.csv: 430 total 420 unique emails
  Table cmdauser.csv: 0 total 0 unique pwds 0 blank pwds
  Table impmsdahind.csv: 9 total 9 unique emails
  Table brokers.csv: 9 total 5 unique emails
  Table ahol.csv: 568 total 126 unique emails
  Table users.csv: 38 total 0 unique emails
  Table users.csv: 78 total 2 unique pwds 0 blank pwds
  Table dealingcompany.csv: 4 total 0 unique emails
  Table dealingfirm.csv: 4 total 2 unique emails
  Table accountholderrequest.csv.bu: 333 total 16 unique emails
1948 total 752 unique emails found
193 total 91 unique passwords found

Server Details:
web server operating system: Linux CentOS
web application technology: PHP 5.3.18, Apache 2.2.15
back-end DBMS: MySQL 5.0

DB Details:
database management system users [84]:
[*] ''@'localhost'
[*] ''@'vps-1114767-12911.manage.myhosting.com'
[*] 'niyaz'@'%'
[*] 'root'@'127.0.0.1'
[*] 'root'@'localhost'
[*] 'root'@'vps-1114767-12911.manage.myhosting.com'

database management system users password hashes:
[*] niyaz [1]:
    password hash: *E370964DB18BFAC014CD1458539B2C9EDC1D7784
[*] root [2]:
    password hash: *3CC2D0D73D5BB9091C88CD0CBD753E8DBF1EB703
    password hash: NULL

available databases [8]:
[*] information_schema
[*] msddb              -->
[*] mse_msd            --> 10 tables
[*] msewebdb           --> 11 tables
[*] mysql
[*] omsauth            -->  1 table
[*] omsdb              -->
[*] test

Database: msddb
[100 tables]
+-------------------------------+
| accountactivation             |
| accountholder                 |
| accountholderhistory          |
| accountholderrequest          |
| ahcb                          |
| ahol                          |
| aids                          |
| announcement                  |
| applicationlog                |
| atolls                        |
| authority                     |
| balance                       |
| banks                         |
| boughtnote                    |
| brokers                       |
| cancelledorders               |
| cmdauser                      |
| corporateactions              |
| country                       |
| dcliquiditymargine            |
| dealingcompany                |
| dealingcompanyannouncement    |
| dealingcompanynewannouncments |
| dealingcompanytemp            |
| dealingfirm                   |
| delistinginfo                 |
| depositrequest                |
| depositrequesthistory         |
| deposits                      |
| districts                     |
| expiredorders                 |
| holidays                      |
| iatransfer                    |
| iatransfereenote              |
| iatransferornote              |
| iatransferrequest             |
| iatransferrequesthistory      |
| impdeposits                   |
| impmsdahind                   |
| impmsdahoth                   |
| indexreport                   |
| indexreportcavalue            |
| indexvalue                    |
| islands                       |
| issuedcapitalbyyear           |
| listedcompanies               |
| listingcompaniestotalturnover |
| listingcompanydividend        |
| listingcompanyearnings        |
| listingcompanynetprofit       |
| listingcompanysharecount      |
| matchedordermessage           |
| matchedorders                 |
| matchinglist                  |
| menuitem                      |
| menus                         |
| modifiedorders                |
| msecanceledorders             |
| news                          |
| nextkin                       |
| number                        |
| ordercomission                |
| ordernumbers                  |
| orders                        |
| privilage                     |
| resource                      |
| resourceandpevilages          |
| role                          |
| rolemenu                      |
| roleresourceprivilage         |
| roles                         |
| roletask                      |
| screens                       |
| sessions                      |
| settlementreferancenumber     |
| settlementschedulelog         |
| sharecount                    |
| soldnote                      |
| stock                         |
| stockvalues                   |
| surveillance                  |
| surveillancehistory           |
| tasks                         |
| testtable                     |
| tmp_msdlist_actual            |
| tradelist                     |
| tradelistforoldyears          |
| tradelistnumber               |
| traderequest                  |
| traderequesthistory           |
| tradesupension                |
| trading                       |
| transactiondetailsreport      |
| userlist                      |
| userrole                      |
| users                         |
| usertask                      |
| withdrawals                   |
| withdrawalsrequest            |
| withdrawalsrequesthistory     |
+-------------------------------+

Database: mse_msd
[10 tables]
+-------------------+
| accountholders    |
| contact_list      |
| msdonlinebalances |
| news              |
| pages             |
| plcs              |
| registerdusers    |
| statsyearly       |
| subcribers        |
| users             |
+-------------------+

Database: msewebdb
[15 tables]
+-------------------+
| brokers           |
| cpmain            |
| last_trade        |
| ms_user           |
| mse_masix         |
| news_info         |
| share_transaction |
| stat_cpfinance    |
| stat_tboard       |
| stat_treport      |
| trade_stats       |
| user_feedback     |
| web_content       |
| web_mslog         |
| web_tablist       |
+-------------------+

Database: omsauth
[1 table]
+-------+
| users |
+-------+

Database: omsdb
[72 tables]
+-------------------------------+
| announcement                  |
| atolls                        |
| auditlog                      |
| balance                       |
| broker_orders_in              |
| brokerkyc                     |
| brokers                       |
| cancelledorders               |
| cmdauser                      |
| corporateactions              |
| dcliquiditymargine            |
| dealingcompany                |
| dealingcompanyannouncement    |
| dealingcompanynewannouncments |
| dealingcompanytemp            |
| delistinginfo                 |
| districts                     |
| expiredorders                 |
| holidays                      |
| indexreport                   |
| indexreportcavalue            |
| indexvalue                    |
| islands                       |
| issuedcapitalbyyear           |
| kycs                          |
| listedcompanies               |
| listingcompaniestotalturnover |
| listingcompanydividend        |
| listingcompanyearnings        |
| listingcompanynetprofit       |
| listingcompanysharecount      |
| matchedordermessage           |
| matchedorders                 |
| matchinglist                  |
| menuitem                      |
| modifiedorders                |
| msecanceledorders             |
| news                          |
| number                        |
| omactivities                  |
| omemail_queue                 |
| omlogin_attempts              |
| ompermissions                 |
| omrole_permissions            |
| omroles                       |
| omschema_version              |
| omsessions                    |
| omsettings                    |
| omuser_cookies                |
| omuser_meta                   |
| omusers                       |
| omusers_o                     |
| ordercomission                |
| ordernumbers                  |
| orders                        |
| ordersin                      |
| privilage                     |
| resource                      |
| resourceandpevilages          |
| role                          |
| rolemenu                      |
| roleresourceprivilage         |
| sessions                      |
| settlementreferancenumber     |
| settlementschedulelog         |
| sharecount                    |
| stockvalues                   |
| testtable                     |
| tradelist                     |
| tradelistforoldyears          |
| tradelistnumber               |
| tradesupension                |
+-------------------------------+

@th3inf1d3l