OpFuckMohammad - detam.com.tr,metab.gov.tr

OpFuckMohammad

Greetings from th3inf1d3l - 2 more small leaks from Turkey.

The first is Detam Services Institutional, www.detam.com.tr at 94.73.148.20 with 1 breached admin account (hashed password) and 137 emails from the mailing list.

web application technology: Apache
back-end DBMS: MySQL 5.0.11

database management system users [1]:
[*] 'detam_yeni_adm'@'%'

available databases [2]:
[*] detam_yeni_db
[*] information_schema

Table User
web,name,email,username,passhash
<blank>,<blank>,<blank>,admin,9d3997b198c1b8bc3706b3218bb65b138e3b80aa

Table talep_mail
id,hizmet_id,maillist
7,1,[email protected]
9,1,[email protected]
11,1,[email protected]
156,1111,[email protected]
13,1,[email protected]
14,1,[email protected]
15,1,[email protected]
16,1,[email protected]
157,25,[email protected]
19,14,[email protected]
20,14,[email protected]
21,14,[email protected]
22,14,[email protected]
23,14,[email protected]
24,14,[email protected]
25,31,[email protected]
26,31,[email protected]
27,31,[email protected]
28,31,[email protected]
29,31,[email protected]
30,31,[email protected]
31,31,[email protected]
32,31,[email protected]
33,25,[email protected]
34,25,[email protected]
35,25,[email protected]
36,25,[email protected]
37,25,[email protected]
158,25,[email protected]
161,25,[email protected]
40,25,[email protected]
41,25,[email protected]
42,25,[email protected]
43,50,[email protected]
44,50,[email protected]
45,50,[email protected]
46,50,[email protected]
47,50,[email protected]
48,50,[email protected]
49,50,[email protected]
50,60,[email protected]
51,60,[email protected]
52,60,[email protected]
53,60,[email protected]
54,60,[email protected]
55,60,[email protected]
56,60,[email protected]
57,60,[email protected]
58,17,[email protected]
59,17,[email protected]
60,17,[email protected]
61,17,[email protected]
63,17,[email protected]
64,17,[email protected]
65,17,[email protected]
66,17,[email protected]
67,71,[email protected]
68,71,[email protected]
69,71,[email protected]
70,71,[email protected]
71,71,[email protected]
72,71,[email protected]
73,71,[email protected]
74,71,[email protected]
75,71,[email protected]
76,83,[email protected]
78,83,[email protected]
79,83,[email protected]
80,83,[email protected]
81,83,[email protected]
82,83,[email protected]
83,83,[email protected]
84,86,[email protected]
85,86,[email protected]
86,86,[email protected]
87,86,[email protected]
88,86,[email protected]
89,86,[email protected]
90,86,[email protected]
91,86,[email protected]
92,93,[email protected]
93,93,[email protected]
94,93,[email protected]
95,93,[email protected]
96,93,[email protected]
97,93,[email protected]
98,93,[email protected]
99,93,[email protected]
100,93,[email protected]
101,101,[email protected]
154,1,[email protected]
103,101,[email protected]
104,101,[email protected]
105,101,[email protected]
153,101,[email protected]
152,101,[email protected]
109,101,[email protected]
110,101,[email protected]
151,101,[email protected]
112,109,[email protected]
113,109,[email protected]
114,109,[email protected]
115,109,[email protected]
116,109,[email protected]
117,109,[email protected]
118,109,[email protected]
119,109,[email protected]
120,36,[email protected]
121,36,[email protected]
122,36,[email protected]
123,36,[email protected]
124,36,[email protected]
125,36,[email protected]
126,36,[email protected]
127,112,[email protected]
128,112,[email protected]
129,112,[email protected]
130,112,[email protected]
131,112,[email protected]
132,112,[email protected]
133,112,[email protected]
134,112,[email protected]
135,25,[email protected]
137,71,[email protected]
138,71,[email protected]
139,1068,[email protected]
160,25,[email protected]
141,83,[email protected]
142,1111,[email protected]
143,1111,[email protected]
144,1111,[email protected]
145,1111,[email protected]
146,1111,[email protected]
155,1111,[email protected]
149,1111,[email protected]
150,1111,[email protected]

The second site is even smailler, www.metab.gov.tr at 109.232.217.116 with 1 breached admin account (plaintext pwd)

web application technology: Apache 2.2.19
back-end DBMS: MySQL 5.0

database management system users [1]:
[*] 'metabgov_user'@'localhost'

available databases [3]:
[*] information_schema
[*] metabgov_data
[*] metabgov_data2

Database: metabgov_data & metabgov_data2
+--------+
| album  |
| basin  |
| cat    |
| galeri |
| haber  |
| metab  |
| photos |
| sayfa  |
| user   |
+--------+

Database: metabgov_data Table: user
+----+------+------+------+-----+-------+-------+-------+-------+-------+-------+---------+------------+
| id | bid  | ip   | fax  | tip | adi   | bilgi | adres | firma | sifre | email | telefon | last_login |
+----+------+------+------+-----+-------+-------+-------+-------+-------+-------+---------+------------+
| 1  | NULL | NULL | NULL | 0   | metab | NULL  | NULL  | admin | 123   | NULL  | NULL    | NULL       |
+----+------+------+------+-----+-------+-------+-------+-------+-------+-------+---------+------------+

@th3inf1d3l