th3inf1d3l

OpFuckMohammad - www.msd.com.mv

Jan 16th, 2013
341
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. OpFuckMohammad
  2.  
  3. Greetings from th3inf1d3l - A small/medium leak from Maldives Securities Depository, www.msd.com.mv at 168.144.92.38. I got 752 unique emails and 193 breached accounts (notice that only 91 passwords were unique). The biggest impact with this leak is the other data. I don't speak finance but some of the dumps contain items like Broker ID No, account No, ACNO etc. May be useful. Also leaked were mobile numbers, National ID numbers etc. The full dump can be found at https://anonfiles.com/file/e3b95663c8006616352e08d558e15264 this compressed file also contains files for columns in all tables in each of DBs.
  4.  
  5. Summary:
  6. DB: omsdb
  7. Table cmdauser.csv: 0 total 0 unique pwds 0 blank pwds
  8. Table brokers.csv: 11 total 11 unique emails
  9. Table omusers.csv: 1 total 1 unique emails
  10. Table omusers.csv: 1 total 1 unique pwds 0 blank pwds
  11. Table dealingcompany.csv: 4 total 3 unique emails
  12. Table omusers_o.csv: 38 total 22 unique emails
  13. Table omusers_o.csv: 84 total 60 unique pwds 0 blank pwds
  14. Table kycs.csv: 8 total 1 unique emails
  15. Table kycs.csv: 0 total 0 unique pwds 8 blank pwds
  16. DB: mse_msd
  17. Table subcribers.csv: 10 total 10 unique emails
  18. Table contact_list.csv: 472 total 122 unique emails
  19. Table users.csv: 1 total 1 unique pwds 0 blank pwds
  20. Table registerdusers.csv: 3 total 0 unique emails
  21. Table registerdusers.csv: 6 total 5 unique pwds 0 blank pwds
  22. DB: omsauth
  23. Table users.csv: 1 total 1 unique pwds 0 blank pwds
  24. DB: msewebdb
  25. Table cpmain.csv: 4 total 4 unique emails
  26. Table brokers.csv: 2 total 0 unique emails
  27. Table ms_user.csv: 5 total 5 unique pwds 0 blank pwds
  28. DB: msddb
  29. Table userlist.csv: 17 total 16 unique pwds 0 blank pwds
  30. Table accountholder.csv: 430 total 420 unique emails
  31. Table cmdauser.csv: 0 total 0 unique pwds 0 blank pwds
  32. Table impmsdahind.csv: 9 total 9 unique emails
  33. Table brokers.csv: 9 total 5 unique emails
  34. Table ahol.csv: 568 total 126 unique emails
  35. Table users.csv: 38 total 0 unique emails
  36. Table users.csv: 78 total 2 unique pwds 0 blank pwds
  37. Table dealingcompany.csv: 4 total 0 unique emails
  38. Table dealingfirm.csv: 4 total 2 unique emails
  39. Table accountholderrequest.csv.bu: 333 total 16 unique emails
  40. 1948 total 752 unique emails found
  41. 193 total 91 unique passwords found
  42.  
  43. Server Details:
  44. web server operating system: Linux CentOS
  45. web application technology: PHP 5.3.18, Apache 2.2.15
  46. back-end DBMS: MySQL 5.0
  47.  
  48. DB Details:
  49. database management system users [84]:
  50. [*] ''@'localhost'
  51. [*] ''@'vps-1114767-12911.manage.myhosting.com'
  52. [*] 'niyaz'@'%'
  53. [*] 'root'@'127.0.0.1'
  54. [*] 'root'@'localhost'
  55. [*] 'root'@'vps-1114767-12911.manage.myhosting.com'
  56.  
  57. database management system users password hashes:
  58. [*] niyaz [1]:
  59. password hash: *E370964DB18BFAC014CD1458539B2C9EDC1D7784
  60. [*] root [2]:
  61. password hash: *3CC2D0D73D5BB9091C88CD0CBD753E8DBF1EB703
  62. password hash: NULL
  63.  
  64. available databases [8]:
  65. [*] information_schema
  66. [*] msddb -->
  67. [*] mse_msd --> 10 tables
  68. [*] msewebdb --> 11 tables
  69. [*] mysql
  70. [*] omsauth --> 1 table
  71. [*] omsdb -->
  72. [*] test
  73.  
  74. Database: msddb
  75. [100 tables]
  76. +-------------------------------+
  77. | accountactivation |
  78. | accountholder |
  79. | accountholderhistory |
  80. | accountholderrequest |
  81. | ahcb |
  82. | ahol |
  83. | aids |
  84. | announcement |
  85. | applicationlog |
  86. | atolls |
  87. | authority |
  88. | balance |
  89. | banks |
  90. | boughtnote |
  91. | brokers |
  92. | cancelledorders |
  93. | cmdauser |
  94. | corporateactions |
  95. | country |
  96. | dcliquiditymargine |
  97. | dealingcompany |
  98. | dealingcompanyannouncement |
  99. | dealingcompanynewannouncments |
  100. | dealingcompanytemp |
  101. | dealingfirm |
  102. | delistinginfo |
  103. | depositrequest |
  104. | depositrequesthistory |
  105. | deposits |
  106. | districts |
  107. | expiredorders |
  108. | holidays |
  109. | iatransfer |
  110. | iatransfereenote |
  111. | iatransferornote |
  112. | iatransferrequest |
  113. | iatransferrequesthistory |
  114. | impdeposits |
  115. | impmsdahind |
  116. | impmsdahoth |
  117. | indexreport |
  118. | indexreportcavalue |
  119. | indexvalue |
  120. | islands |
  121. | issuedcapitalbyyear |
  122. | listedcompanies |
  123. | listingcompaniestotalturnover |
  124. | listingcompanydividend |
  125. | listingcompanyearnings |
  126. | listingcompanynetprofit |
  127. | listingcompanysharecount |
  128. | matchedordermessage |
  129. | matchedorders |
  130. | matchinglist |
  131. | menuitem |
  132. | menus |
  133. | modifiedorders |
  134. | msecanceledorders |
  135. | news |
  136. | nextkin |
  137. | number |
  138. | ordercomission |
  139. | ordernumbers |
  140. | orders |
  141. | privilage |
  142. | resource |
  143. | resourceandpevilages |
  144. | role |
  145. | rolemenu |
  146. | roleresourceprivilage |
  147. | roles |
  148. | roletask |
  149. | screens |
  150. | sessions |
  151. | settlementreferancenumber |
  152. | settlementschedulelog |
  153. | sharecount |
  154. | soldnote |
  155. | stock |
  156. | stockvalues |
  157. | surveillance |
  158. | surveillancehistory |
  159. | tasks |
  160. | testtable |
  161. | tmp_msdlist_actual |
  162. | tradelist |
  163. | tradelistforoldyears |
  164. | tradelistnumber |
  165. | traderequest |
  166. | traderequesthistory |
  167. | tradesupension |
  168. | trading |
  169. | transactiondetailsreport |
  170. | userlist |
  171. | userrole |
  172. | users |
  173. | usertask |
  174. | withdrawals |
  175. | withdrawalsrequest |
  176. | withdrawalsrequesthistory |
  177. +-------------------------------+
  178.  
  179. Database: mse_msd
  180. [10 tables]
  181. +-------------------+
  182. | accountholders |
  183. | contact_list |
  184. | msdonlinebalances |
  185. | news |
  186. | pages |
  187. | plcs |
  188. | registerdusers |
  189. | statsyearly |
  190. | subcribers |
  191. | users |
  192. +-------------------+
  193.  
  194. Database: msewebdb
  195. [15 tables]
  196. +-------------------+
  197. | brokers |
  198. | cpmain |
  199. | last_trade |
  200. | ms_user |
  201. | mse_masix |
  202. | news_info |
  203. | share_transaction |
  204. | stat_cpfinance |
  205. | stat_tboard |
  206. | stat_treport |
  207. | trade_stats |
  208. | user_feedback |
  209. | web_content |
  210. | web_mslog |
  211. | web_tablist |
  212. +-------------------+
  213.  
  214. Database: omsauth
  215. [1 table]
  216. +-------+
  217. | users |
  218. +-------+
  219.  
  220. Database: omsdb
  221. [72 tables]
  222. +-------------------------------+
  223. | announcement |
  224. | atolls |
  225. | auditlog |
  226. | balance |
  227. | broker_orders_in |
  228. | brokerkyc |
  229. | brokers |
  230. | cancelledorders |
  231. | cmdauser |
  232. | corporateactions |
  233. | dcliquiditymargine |
  234. | dealingcompany |
  235. | dealingcompanyannouncement |
  236. | dealingcompanynewannouncments |
  237. | dealingcompanytemp |
  238. | delistinginfo |
  239. | districts |
  240. | expiredorders |
  241. | holidays |
  242. | indexreport |
  243. | indexreportcavalue |
  244. | indexvalue |
  245. | islands |
  246. | issuedcapitalbyyear |
  247. | kycs |
  248. | listedcompanies |
  249. | listingcompaniestotalturnover |
  250. | listingcompanydividend |
  251. | listingcompanyearnings |
  252. | listingcompanynetprofit |
  253. | listingcompanysharecount |
  254. | matchedordermessage |
  255. | matchedorders |
  256. | matchinglist |
  257. | menuitem |
  258. | modifiedorders |
  259. | msecanceledorders |
  260. | news |
  261. | number |
  262. | omactivities |
  263. | omemail_queue |
  264. | omlogin_attempts |
  265. | ompermissions |
  266. | omrole_permissions |
  267. | omroles |
  268. | omschema_version |
  269. | omsessions |
  270. | omsettings |
  271. | omuser_cookies |
  272. | omuser_meta |
  273. | omusers |
  274. | omusers_o |
  275. | ordercomission |
  276. | ordernumbers |
  277. | orders |
  278. | ordersin |
  279. | privilage |
  280. | resource |
  281. | resourceandpevilages |
  282. | role |
  283. | rolemenu |
  284. | roleresourceprivilage |
  285. | sessions |
  286. | settlementreferancenumber |
  287. | settlementschedulelog |
  288. | sharecount |
  289. | stockvalues |
  290. | testtable |
  291. | tradelist |
  292. | tradelistforoldyears |
  293. | tradelistnumber |
  294. | tradesupension |
  295. +-------------------------------+
  296.  
  297. @th3inf1d3l
RAW Paste Data Copied