OpFuckMohammad - www.guinee.gov.gn

OpFuckMohammad

Greetings from th3inf1d3l - I bring you the government of Guinea, www.guinee.gov.gn at 83.229.26.251. A small leak, approximately 100 unique emails. But as you can see below, cracked passwords for mysql users. Additionally, another 50 accounts were breached including some administrators. The full dump can be found at https://anonfiles.com/file/f653b54705a1d1b7b601256e75b3f463.

web server operating system: Linux Fedora
web application technology: PHP 5.2.4, Apache 2.2.6
back-end DBMS: MySQL 5.0
acajoom version 3.2.7

Found Directories:
/usr/sbin/sendmail
/components/com_acajoom/upload
/administrator/components/com_acajoom/com_acajoom.log

database management system users [80]:
[*] ''@'localhost'
[*] ''@'nimba'
[*] 'bothie'@'nimba.guinee.gov.gn'
   password hash: 077ba9ad491e17a7 clear-text password: ad
[*] 'gouv'@'localhost'
   password hash: 5518aa43563f6fc6 clear-text password: gouv
[*] 'guineewebdev'@'localhost'
   password hash: 7edbefdc1234cf51
[*] 'root'@'localhost'
   password hash: 796ea04313cde7d6
[*] 'root'@'nimba'

available databases [26]:
[y] collab
[y] commerce_data
[y] coursupreme_data
[y] datafinances
[y] ecofinancesdb
[*] ecofinancesdb1
[y] eduforum
[*] finances_data
[y] financesdata
[y] forumdiaspo
[y] gouv_data
[y] guinee
[n] information_schema  -> not looked at
[n] loi_fonda_db        -> not looked at
[y] mae_data
[y] mae_db
[y] matap_data
[y] mepuecdata
[y] metfp
[n] mysql               -> not looked at
[y] portail_gn
[y] portailgndb
[y] prdata
[n] ressources          -> not looked at
[y] sgg_data
[y] siag_db

@th3inf1d3l