We show these compromised systems so that you understand the current threat environment that surrounds us everyday and how significant it is to take the appropriate countermeasures to safeguard your critical data no matter what size your organization is as well as your individual data driven devices. Below is POC of the Exploit. As you can see no entity is immune from such attacks. Again as always be proactive not reactive in safeguarding your critical data and stay safe out there. Subsequently as you are aware this blog is provided to the public to offer education in the area of IT security, creating awareness and increasing collaboration so you can implement the appropriate countermeasures such as those described in ISO13335 to prevent yourselves from becoming victims in the current threat environment,
The Breach is provided below as I will continue to monitor the net to safeguard systems and individuals critical data. Additionally this information is provided to our readers as an addendum to the California Database Security Breach Act. Please do your part in helping to inform those who have been exploited as you would want others to notify you if your critical data had been compromised. Karma!
_______ _____ ____ ___ _ _
|__ __| | __ \|___ \ / _ \| | |
__ _| |_ __ | |__) | __) |_ _| | | | | |_
\ \/ / | '_ \| _ / |__ <\ \ / / | | | | __|
> <| | | | | | \ \ ___) |\ V /| |_| | | |_
/_/\_\_|_| |_|_| \_\____/ \_/ \___/|_|\__|
[--------------------------------]
[#]#opleak[#][#]OPMALI[#]
[--------------------------------]
[#]about the operation[#]
[--------------------------------]
:
#opleak is AN operation created by xl3gi0n hackers IN which we leak
more THAN 1000 database to show the world that they need more security.
[--------------------------------]
target: minister de defense francais/ french minister of defense
Target: http://servicehistorique.sga.defense.gouv.fr/
Web Server: Apache
DB Server: MySQL error based
Resp. Time(avg):2272 ms
Current User: shd_spip_1@10.10.10.165
Sql Version: 5.1.60-log
Current DB: SHD_php
System User: shd_spip_1@10.10.10.165
Host Name: hemsibdd1
Installation dir: /usr/
DB User: 'shd_spip_1'@'10.10.10.165'
Data Bases: information_schema
SHD_php
SHD_spip
tabels :
|---------------------------|
database: SHD_php
|__________________________|
aa_accidents_d_avions_1945_1987
aa_dossiers_officiers_avant_1909
aa_personnels_morts_en_indochine
armement_blinde
atlas_geniemaritime
embleme_cat_gend
embleme_gend
insigne_cat_gend
insigne_gend
marine_base
marine_base2
notice_armement
notice_armement_photo
notice_armement_plan
officiers_centenaires_aa
plan_bateau
plan_bateau_pdf
plan_bateau_photo
plan_bateau_tif
symbo_marine
symbolique
symbolique_arme
symbolique_type
user
|-----------------------|
current database: SHD_spip
|______________________|
config
epoque
fonds
spip_articles
spip_auteurs
spip_auteurs_articles
spip_auteurs_courriers
spip_auteurs_elargis
spip_auteurs_listes
spip_auteurs_messages
spip_auteurs_mod_listes
spip_auteurs_rubriques
spip_breves
spip_caches
spip_courriers
spip_documents
spip_documents_articles
spip_documents_breves
spip_documents_donnees
spip_documents_rubriques
spip_forms
spip_forms_articles
spip_forms_champs
spip_forms_champs_choix
spip_forms_donnees
spip_forms_donnees_articles
spip_forms_donnees_auteurs
spip_forms_donnees_champs
spip_forms_donnees_donnees
spip_forms_donnees_rubriques
spip_forum
spip_groupes_mots
spip_index
spip_index_dico
spip_listes
spip_messages
spip_meta
spip_mots
spip_mots_articles
spip_mots_breves
spip_mots_documents
spip_mots_forum
spip_mots_rubriques
spip_mots_syndic
spip_ortho_cache
spip_ortho_dico
spip_petitions
spip_recherches
spip_referers
spip_referers_articles
spip_rubriques
spip_signatures
spip_syndic
spip_syndic_articles
spip_types_documents
spip_types_tables
spip_versions
spip_versions_fragments
spip_visites
spip_visites_articles
Data Base:SHD_spip
Table:spip_auteurs
Total Rows:16
loginpasshtpass
Dominique1fd8a42da5a155c7f3b317743abeb116$1$oar96eq4$duj8kLjquP3olDQweUFI10
Hervé4699075fc35fe8c987235c0cf75dbd23$1$FHoweSL6$7aSme7WTLIupmAKIsPW72/
Nicolas74642f86e2814f0063c545586af3d058$1$LnMpLjw7$MJj4Hlrvoff8H/XTQvex./
adminac77a6607135d2571d5013ae94a7c310$1$7qWTPrUZ$QEHpXFiwDkGPIPpFZnhSM/
antoine91aed84959525bf6c4fc17e77e03caa9$1$WfhqUfJd$OjojwaOhLNAsKTEoF2YS.0
blagardedb659cb22aeb3a8625c02f7f2288866f$1$pmf4guRw$T9AYLkowVgY90OxIVwmvN.
bureau marchés5a5ddae39fc9be1c9d9d5ce0719b0b5b$1$4aLBwaUB$0lr.6Q/9NhusMw7p9vnsc.
catherineb144320f86097ad189e835eae02b272f$1$aoasQeia$jISHzx9ir/YQ3JSlE1BQQ1
hlegentild03a1ef355692aae7f074a0af47111a4$1$7fsSBSvD$tTNiXgwPt.WYSF4TTIbOR1
jean-noel1c37bf8585017d4edad28df7752dab91$1$6wrfo9kj$dGv7A8szOtPyBAzU9vL6G/
jessica0104f3038912d83c1b7488eea135e0f9$1$aaLWLUmY$wupUAkPbf33Ug1ZnEhi6o0
jmessagercc17aad76f1cb4149ef161d03f2bcab3$1$ktxo8ZL8$YGZMjKd623i0HlhkCcemo0
mdestouches8909f7e0ef12170716b5290968e91508$1$mLoVKj2p$Io7nStt3kgozhF6WK/5P01
redac2aad923019072a784598af462c6eec201$1$axTpG8tY$XQEiHYkNqp7jYmUpa3wCk/
redac300ee1367a3038c63125ef4804bca3669$1$ordJsmEN$58ZMwyLS5PbLGPKPALBYD0
vmolletdd7c49faa6816411a82f37975f77fb75$1$SaGVMZVB$GTO1G2M4IPGaT7GfWWt3x.
[----------------------------------]
[#]specials messages:[#]
[----------------------------------]
to NATO member and all those who support the attack on Mali
we are against this so you must expect us
congartuliation you are now on the list of our enemy
France/UAE/UK/US.... expect us
the message is clear
stop war we stop attack keep fier we keep hacking
we are xl3gi0n
you are nothing
you will fall in the hands of our follows sisters and brothers
we unite as one but fight as many
[#] RESPECT EXISTANCE OR EXPECT RESISTANCE [#]
[---------------------------------]
[#]for more information[#]
my facebook: http://www.facebook.com/xtnr3v0lt.legend
my twitter : http://www.twitter.com/xtnr3v0lt
my email : xtnr3v0lt@hotmail.fr
[---------------------------------]
[#]special great[#]
[---------------------------------]
special great to all xl3gi0n hackers ,media group that help IN publishing this op AND all hacked admin
[---------------------------------]
##### ###
# # # # # #### # # # # #
# # # # # # # # # ## #
## # ##### # # # # # # #
## # # # ### # # # # # #
# # # # # # # # # # # ##
# # ###### ##### #### # ### # #
hacked by firasino
# #
# # ## #### # # ###### ##### ####
# # # # # # # # # # # #
####### # # # #### ##### # # ####
# # ###### # # # # ##### #
# # # # # # # # # # # # #
# # # # #### # # ###### # # ####
[---------------------------------]
//The information contained within this publication is
//supplied "as-is"with no warranties or guarantees of fitness
//of use or otherwise. Bot24, Inc nor Bradley Sean Susser accepts
//responsibility for any damage caused by the use or misuse of
//this information