• XSS.stack #1 – первый литературный журнал от юзеров форума

TXT Forto.com / FreightHub.com

Отслеживать
nightly

nightly

root@usss-int:~#
Premium
Регистрация
03.10.2019
Сообщения
376
Реакции
413
forto.com

1710007053707.png

1710007090641.png

1710007228460.png

1710007155475.png


1710007311812.png

1710007363879.png

1710007429731.png

1710007449031.png


They tried to hide redirect from all domains... but...
1710007849006.png



Account ID,ARN,Email,Name,Status,Joined method,Joined timestamp
"543768168116","arn:aws:organizations::673970336125:account/o-o8fwiss9tl/543768168116","accounts+aws-forto-production@forto.com","freighthub-core","ACTIVE","CREATED",Tue Jul 04 2017 13:09:46 GMT+0200 (Central European Summer Time)
"673970336125","arn:aws:organizations::673970336125:account/o-o8fwiss9tl/673970336125","accounts+aws-forto-root@forto.com","Erik Muttersbach","ACTIVE","INVITED",Thu Jul 28 2016 16:23:11 GMT+0200 (Central European Summer Time)
"663620525952","arn:aws:organizations::673970336125:account/o-o8fwiss9tl/663620525952","accounts+aws-forto-ode-hack@forto.com","forto-ode-hack","ACTIVE","CREATED",Wed Aug 31 2022 17:30:00 GMT+0200 (Central European Summer Time)
"389345400137","arn:aws:organizations::673970336125:account/o-o8fwiss9tl/389345400137","accounts+aws-forto-sandbox@forto.com","freighthub-core-dev","ACTIVE","CREATED",Wed Jul 05 2017 11:39:27 GMT+0200 (Central European Summer Time)
"910845170705","arn:aws:organizations::673970336125:account/o-o8fwiss9tl/910845170705","laura.guzman@forto.com","Forto Business IT","ACTIVE","INVITED",Mon Oct 25 2021 17:10:35 GMT+0200 (Central European Summer Time)
"808806226639","arn:aws:organizations::673970336125:account/o-o8fwiss9tl/808806226639","accounts+aws-forto-redhat-subscription@forto.com","forto-redhat-subscription","ACTIVE","CREATED",Mon Aug 23 2021 13:28:56 GMT+0200 (Central European Summer Time)
"656976422955","arn:aws:organizations::673970336125:account/o-o8fwiss9tl/656976422955","accounts+aws-forto-tools@forto.com","forto-tools","ACTIVE","CREATED",Thu Apr 15 2021 16:57:25 GMT+0200 (Central European Summer Time)




AWS ID: AKIAJMPZVKDRBHTKJHJQ
AWS SEC: sNySD51Udley5cduWYaQIaV9zVw3Vva4/nGza1SA


"activity_feed_daily_digest_notification": "Not Allowed",
"activity_feed_email_notification": "Allowed",
"activity_feed_web_notification": "Not Allowed",
"admin_role_indicator": "Admin",
"billing_role_indicator": "Billing",
"booking_daily_digest_notification": "Not Allowed",
"booking_email_notification": "Allowed",
"booking_web_notification": "Not Allowed",
"company_document_update_daily_digest_notification": "Not Allowed",
"company_document_update_email_notification": "Not Allowed",
"customer_id": "C-1000",
"customs_decision_update_daily_digest_notification": "Not Allowed",
"customs_decision_update_email_notification": "Not Allowed",
"customs_status_update_daily_digest_notification": "Not Allowed",
"customs_status_update_email_notification": "Not Allowed",
"default_subscriber_indicator": null,
"deleted_at": null,
"document_update_daily_digest_notification": "Not Allowed",
"document_update_email_notification": "Allowed",
"document_update_web_notification": "Allowed",
"email": "erik.muttersbach@sky-sand.com",
"first_name": "Erik",
"last_login_at": "2017-08-09 12:45:24.654000",
"last_name": "Muttersbach",
"last_survey_at": null,
"login_count": 2,
"mailchimp_created_at": null,
"manager_role_indicator": "Not Manager",
"manual_quotes_daily_digest_notification": "Not Allowed",
"manual_quotes_email_notification": "Not Allowed",
"member_role_indicator": "Not Member",
"modified_at": "2020-12-08 16:06:02.138000",
"newsletter_email_notification": "Not Allowed",
"notification_subscriber_emails": null,
"phone_landline": null,
"phone_mobile": null,
"preferred_language": "en",


"_id": "U-1048",
"customer_id": "C-1048",
"deletedAt": null,
"email": "swittgenstein@mscgva.ch",
"firstName": "Sebastian",
"isBilling": true,
"lastLogin": null,
"lastName": "Wittgenstein",
"lastSurveyAt": null,
"loginCount": null,
"mailchimpCreatedAt": null,
"modifiedAt": null,
"newsletter": null,
"password": "a8b62f3033e702a75cab293472bea30d3b44432e885ffaafa7e716300a6b09e026ce6873cbe51b4bfd68010bdf176c58f1d7119c0271a78b632b72818ff96543",
"phoneLandline": null,
"phoneMobile": null,
"preferredLanguage": null,
"registeredAt": "2016-06-30 14:10:30.380000",
"sfSyncedAt": null,
"verifiedAt": null,
"salutation": null,
"title": null

"_id": "U-1016",
"customer_id": "C-1016",
"deletedAt": null,
"email": "christian.hensen@freighthub.com",
"firstName": "Christian",
"isBilling": true,
"lastLogin": "2019-04-10 04:04:26.174000",
"lastName": "Hensen",
"lastSurveyAt": null,
"loginCount": 105,
"mailchimpCreatedAt": null,
"modifiedAt": "2019-04-10 04:04:26.175000",
"newsletter": null,
"password": "ddb38cee5ebfebd1e97751c2a324f93bae06f337430eb0932532c1a545fc3c5c5fcd0729ee81a382183b71b41772b2279b8b3ad681dc84a20bbe7fedd3b6f6ed",
"phoneLandline": null,
"phoneMobile": null,
"preferredLanguage": "en",
"registeredAt": "2016-06-16 12:16:17.047000",
"sfSyncedAt": null,
"verifiedAt": "2016-06-16 12:16:49.610000",
"salutation": null,
"title": null
 
Source Code (Up to 14.04.2024)

Repos:
Код: 
access-nanny
account-master-data-core
activity-transformation-core
agent-bookings
agents
api-docs-core
api-tools
approbot
appsec-training
architecture-c4-documentation
asset-bundle-operator
astrolabe-frontend
astrolabe-server
audit
authorization-policies
auth-sdk
authz-platform
authz-sdk
automation-experiment
avro-common-schemas
back-end-chapter
backstage-app
backstage-components
backstage-generation
bc365-extensions
billing-core
bill-of-lading
bi-mongodb-api
booking-v2-core
bulk-dep
bulk-linter
bulk-margin-update
capacity-management-core
capacity-tilt
carbon-emissions
carriage-booking-core
cft-garden
china-saas-connectivity
circleci-orbs
cluster-nanny
Code-Quality-Task-Force
code-search
communications-core
contract-management
core-auditing-library
core-communication-library
core-data-mongodb-library
core-data-redis-library
core-httpclient-library
core-library
core-queuing-library
core-scheduling-library
core-security-library
core-standard-library
costs
customer-integration-platform
customer-master-data
customer-sdk
customs-status
data-operations-inbox
data-ops-airflow
dataprime-datastore
data-science-argo-workflows
data-science-claim-prediction
data-science-cn-prevention
data-science-demand-forecast
data-science-margin-prediction
data-science-shipment-cancellation
data-science-template
data-tradeshift-integration
decision-billing-customscalculator
decision-billing-vat
decision-manager
decision-server-pipeline
decision-tables
dem-det-core
deployment
developer-chrome-extensions
developer-productivity-docs
document-capture
documents
dogfood-core
dotnet-templates
ecr-cleaner
edge-stack-auth-service
edge-stack-authz
edge-stack-query-sticky
edge-stack-reject-all
edge-stack-ship-authn
ee-inception-poc
ee-inception-poc-frontend
elasticsearch-backup
email-template-experiment
engineering-career-framework
engineering-news
feed-core
feed-v2
fh-quotation-graph-db
fh-state-management
finance
fluffy-core
forto-api-documentation
forto-cli
forto-cli-hackday
forto-status-page
fortox-backend
fortox-frontend
fortox-transport-planning-consumer
fp-exemplar
framework
freightgate
freighthub-acceptance
freighthub-analytics-etl
freighthub-api-documentation
freighthub-api-documentation-core
freighthub-apps-script
freighthub-astrolabe-sdk
freighthub-bc365-serverless-events
freighthub-booking-core
freighthub-booking-request-core
freighthub-configuration-production
freighthub-configuration-sandbox
freighthub-corelib
freighthub-counter
freighthub-cronjobs
freighthub-currency-core
freighthub-currency-functions
freighthub-customer-core
freighthub-customer-public-api-cookiecutter
freighthub-dakosy-core
freighthub-datadog
freighthub-data-pipeline
freighthub-data-warehouse-updates
freighthub-date
freighthub-documents-core
freighthub-dumper
freighthub-e2e
freighthub-e2e-evaluation
freighthub-edi-core
freighthub-ekb-core
freighthub-ekb-sdk-unmaintained
freighthub-email-sdk
freighthub-engineering-playbook
freighthub-env
freighthub-env-vars
freighthub-escalation-core
freighthub-eventkit
freighthub-evolution
freighthub-feed-sdk
freighthub-foreign-currency-exchange-core
freighthub-fressnapf-bridge
freighthub-frontend
freighthub-frontend-sdk
freighthub-frontend-sdk-old
freighthub-ftp-core
freighthub-gardamo-public-api-core
freighthub-gateway
freighthub-generic-transportplanning-core
freighthub-glacier-sdk
freighthub-iam
freighthub-infrastructure
freighthub-init
freighthub-int-ancotrans-core
freighthub-int-ancotrans-sdk
freighthub-int-champ-core
freighthub-int-champ-sdk
freighthub-int-champ-web-hook
freighthub-int-dakosy-assets
freighthub-integrations-common
freighthub-int-ekb-core
freighthub-int-maco-core
freighthub-int-ocean-insights-core
freighthub-int-ocean-insights-webhook2sqs
freighthub-int-porath-core
freighthub-int-prahl-barsoe-core
freighthub-int-saco-core
freighthub-int-tfg-core
freighthub-int-transport-delay-core
freighthub-int-web2dto-prahl-barsoe
freighthub-int-xml2dto-tfg
freighthub-logger
freighthub-microservices-graph
freighthub-mongo2psql
freighthub-network-topology
freighthub-oceaninsights-core
freighthub-oceaninsights-sdk
freighthub-onag-bridge
freighthub-open-api
freighthub-papi-docs
freighthub-procurement-service
freighthub-products-core
freighthub-public-api-core
freighthub-public-api-customer
freighthub-public-api-e2e
freighthub-public-api-internal-docs
freighthub-quarks-common
freighthub-quotation-core
freighthub-quotation-core-legacy
freighthub-quotation-sdk
freighthub-ratehub-frontend
freighthub-rates-core
freighthub-recruiting
freighthub-reports-sdk
freighthub-rfcs
freighthub-SACO-python-sqs-publisher
freighthub-salesforce-core
freighthub-schedules-core
freighthub-schedules-sdk
freighthub-scrapers
freighthub-sdk
freighthub-sdk-migration
freighthub-serverless-template
freighthub-ship
freighthub-ship-legacy
freighthub-ship-legacy-2
freighthub-shipment-transportplan-updater-util
freighthub-shipping-sdk
freighthub-sqs2glacier
freighthub-tasks-sdk
freighthub-tms
freighthub-tms-legacy
freighthub-transportplanning-cache
freighthub-transportplanning-sdk
freighthub-websocket-core
freighthub-yarrrnicorns-docs
freighthug
frontend-infra
frontend-standards
fulfilment
gatehouse-tracking
gcr-cleaner
gmail-pipeline-create-export
go-flashpaper
hackday
hackday-api-gateway
hackday-async-api-nest-example
hackday-devolper-dashboard
hackday-functional-core
hackday-kms-demo
hackday-shipment-service
hackday-sustainability-pdf-generator
hackday-tms-api-gateway
hackday-tp-remodelling
handbook
haven
helm-charts
helm-destroyer
helm-import
helm-starter
hits-counter
homebrew-internal
hugbot
iam-monitoring
iam-test-client
iam-tools
infrastructure2020
infrastructure-helmfile
infrastructure-terraform
insights
insights-core
insights-engine
iot-tracking
jedox
jira-required-fields-notifier
jira-stats
kescher
keycloak-spi
kiwi
kubx
kubx-github
kubx-server
lighthouse-ci-server
localsnsqs
logistics-game
macro-view
main-carriage-booking-core
manage-notifications
marketing
master-data-bc-consumer
microservice-cookiecutter
mirror
mkdocs-template
mongo2sql
mongodb-atlas-backup
mongo-dumper
mot-util-scripts
nestjs-circuit-breaker
nestjs-command-dispatcher
nestjs-event-publisher
nestjs-health-check
nestjs-message-transformer
nestjs-metrics
nestjs-migration-framework
nestjs-open-api
nestjs-pact
nestjs-queue-consumer
nestjs-shared-sdk
nestjs-standard-logger
nexus
notification-center
notification-editor
ode
ode-data-backup
ode-operators
on-call-runbook
operations-api
outbox-sdk
pa-datamap
panamax
partner-booking-core
partner-contract-management-frontend
partner-master-data
pbt-experiments
permitio-data-synchronizer
permitio-pdp
phoenician-sketches
pingo
plant-fairy
platform-poc
poc-c4-generator
portbase-cargo-import
post-booking
pricing
principal-engineer-test-challenge
ProjectHelm
public-api-v2
pubsub-schema-synchronizer
pull-reminders
quotes-v2-e2e
rates-management-core
refactor-tool
repo-nanny
reports-core
revenue
roadsnaps
round-robin
round-robin-bot
routing-network
sailing-schedules
salesforce-config-manager
sandboxes
search
services-api-documentation
settings-library
sf-decompress-fn
ship-destroyer
shipment-health
shipments
shipments-vis
shipping-core
shipping-sdk
shipyard
shipyard-cli
shipyard-server
silhouette
silhouette-deprecated
slacker
spot-bot
sqs-consumer
sre-handbook
sre-utility-images
ssl
statsd-collector-mongo
subscriptions
subscriptions-orchestration
swivel-core
tasklist-core
tasklist-workflow
tasks
terraform-modules
test-aa
text-extractor-core
tiller3
tiller3-graphql
tms-bff
tms-frontend
tms-microfrontend-cookiecutter
tnt-powders
torii-integrations
tracking-engine-poc
trackoo
trade-lanes
transl8
transport-network
transport-network-v2
transport-order-automation-core
transport-plan-core
transport-plan-frontend
transportplan-front-end
transport-units
ts-sdk-template
tum-admin-app
tum-backend
tum-warehouse-app
ui-platform
unleash-deploy
user-authz-service
user-profile-core
user-service
web-api-and-workers-system-example
webhooks-core
webpack-dynamic-remote
workbench
workflow-core
workshops
yarrrnicorns-experiment-auto-pbc
yarrrns-learning-poc-frontend
yarrrs-decouple-rates-experiment
yarrrs-kafka-proto-service

У вас должно быть более 80 сообщений для просмотра скрытого контента.

 
Последнее редактирование:
Most poor company ever is Forto :) Creds changed but...

Код: 
commit f4f8eb4180e7e33e3b99233dc48f203cecb9fc9a
Refs: [main], {origin/main}, {origin/HEAD}, v2.0.2-111-gf4f8eb41
Author:     dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Mon Apr 15 11:41:25 2024 +0200
Commit:     GitHub <noreply@github.com>
CommitDate: Mon Apr 15 11:41:25 2024 +0200

    chore(deps): bump @forto-dev/auth-nestjs-sdk from 3.1.8 to 3.1.9 (#2040)

    Bumps [@forto-dev/auth-nestjs-sdk](https://github.com/freight-hub/auth-sdk) from 3.1.8 to 3.1.9.
    - [Commits](https://github.com/freight-hub/auth-sdk/commits)

    ---
    updated-dependencies:
    - dependency-name: "@forto-dev/auth-nestjs-sdk"
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...

    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 package.json |   2 +-
 yarn.lock    | Bin 599360 -> 599360 bytes


Код: 
freighthub-configuration-sandbox/secrets/maco-core.env:SLACK_TOKEN=xoxb-13002867686-583709236642-5CpGGdky37EG05TTnYvPjhcv
freighthub-configuration-sandbox/secrets/transport-delay-core.env:SLACK_TOKEN=xoxb-13002867686-583709236642-5CpGGdky37EG05TTnYvPjhcv
freighthub-configuration-sandbox/secrets/champ-core.env:SLACK_TOKEN=xoxb-13002867686-485152408674-bMcB1PCe2p2D05H17lgx76YO
freighthub-configuration-sandbox/secrets/agent-core.env:SLACK_TOKEN=xoxb-13002867686-583709236642-5CpGGdky37EG05TTnYvPjhcv
data-science-cn-prevention/notebook/Slackbot metrics.ipynb:    "params['slack_bot_oauth_secret'] = \"xoxb-13002867686-3254998911329-8K3Xl04Da1a7v52a966JEfHD\"\n",


WAREHOUSE_DB_HOST="warehouse.cgfm3wqtimct.eu-west-1.rds.amazonaws.com"
WAREHOUSE_DB_NAME="warehouse"
WAREHOUSE_DB_PASSWORD="&D8n{<Gn{D[Z9v/CK~j)ktK?"
WAREHOUSE_DB_USER="warehouse_ocean_insights"


postgres://root:MqmEWVWBgCQ%5EE.QMc9iLFWrc@warehouse.cgfm3wqtimct.eu-west-1.rds.amazonaws.com/warehouse_sandbox_ruby


Slack

Exploit.IN Send

Encrypt and send files with a link that automatically expires to ensure your important documents don’t stay online forever.
send.exploit.in


AWS Route53

Exploit.IN Send

Encrypt and send files with a link that automatically expires to ensure your important documents don’t stay online forever.
send.exploit.in

Part Of DB

Exploit.IN Send

Encrypt and send files with a link that automatically expires to ensure your important documents don’t stay online forever.
send.exploit.in
 
Последнее редактирование:
admin


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх