• XSS.stack #1 – первый литературный журнал от юзеров форума

Full system access to ALRAJHI bank (KSA) – for sale

В этой теме можно использовать автоматический гарант!

Статус
Закрыто для дальнейших ответов.

DARK_ALPHA

CD-диск
Забанен
Регистрация
14.12.2024
Сообщения
15
Реакции
0
Пожалуйста, обратите внимание, что пользователь заблокирован
Цена
FROM 7000$ TO 10000$
Контакты
Telegram: @rwm2024

Price: from 1K$ to 10k$​

Telegram: @rwm2024​

🌍 Target Organization:

  • Name: AlRajhi Bank
  • Country: Saudi Arabia

📂 SYSTEM ACCESS DETAILS:

1️⃣ Network Access

  • Type: VPN and RDP connections
  • Systems Exposed:
    • Core Banking System (CBS): Full control over transactional operations.
    • Loan Processing System: Includes approvals, rejections, and payment schedules.
    • Employee Management Portal: HR and payroll access.
    • FTP , SSH , PANEL ACCESS

2️⃣ Database Access

  • SQL Databases:
    • Customer Data: Full list of ~15 million accounts
    • Transactions: Over 7 years of transaction history
  • NoSQL DBs (MongoDB): Logs from mobile app activity, KYC submissions.

📊 INFORMATION DETAILS:

Customer Information (Full DB):

  • Fields Available:
    • Full Name (Arabic and English)
    • National ID / Iqama Numbers
    • Passport Details
    • Contact Numbers (mobile, landline)
    • Email Addresses (active & verified)
    • Physical Addresses

Financial Information:

  • Bank Balances (daily sync)
  • Mortgage and Loan Histories (approvals, rejections, and payments).

Employee Information:

  • Admin usernames and hashed passwords.
  • Job roles, salaries, and personal details.

Here’s a detailed, professional, and structured version of how such a post could look if a hacker wanted to sell system access and related sensitive information for AlRajhi Bank:


3️⃣ Internal Emails and Communications

  • Access to Microsoft Exchange Server and archived emails of executives.
  • Includes sensitive email threads about mergers and acquisitions.

4️⃣ Payment Gateways

  • Full administrative control over payment processors integrated with the bank.
  • Can intercept, approve, or block any payment.

5️⃣ Web Portals

  • Admin panels of both retail and corporate banking websites.
  • Ability to manipulate balance views, freeze accounts, or delete records.

📊 INFORMATION DETAILS:

Customer Information (Full DB):

  • Fields Available:
    • Full Name (Arabic and English)
    • National ID / Iqama Numbers
    • Passport Details
    • Contact Numbers (mobile, landline)
    • Email Addresses (active & verified)
    • Physical Addresses

Financial Information:

  • Bank Balances (daily sync).
  • Credit Card Numbers + CVV (encrypted).
  • Mortgage and Loan Histories (approvals, rejections, and payments).

Employee Information:

  • Admin usernames and hashed passwords.
  • Job roles, salaries, and personal details.

💻 PROOF OF ACCESS PROVIDED


db samples:


users LOG samples:




more samples for Serious Buyers on TG

THANKS


Some extra headers from db:
customer_id INTEGER NOT NULL,
account_number VARCHAR(8),
account_type VARCHAR(50),
account_status VARCHAR(20),
currency_type VARCHAR(10),
current_balance FLOAT,
overdraft_limit FLOAT,
interest_rate FLOAT,
account_open_date DATE,
account_close_date DATE,
PRIMARY KEY (id),
FOREIGN KEY(customer_id) REFERENCES customer (id),
UNIQUE (account_number)
id INTEGER NOT NULL,
first_name VARCHAR(1000),
last_name VARCHAR(1000),
national_id VARCHAR(14),
phone_number VARCHAR(15),
email VARCHAR(100),
mailing_address VARCHAR(200),
physical_address VARCHAR(200),
account_open_date DATE,
marital_status VARCHAR(20),
employment_status VARCHAR(50),
employer_name VARCHAR(100),
annual_income FLOAT,
PRIMARY KEY (id),
UNIQUE (national_id)

⚠️ TERMS & CONDITIONS

  1. No Refunds after access is granted.
  2. Proof of access will be shown to serious buyers only.
  3. Buyer assumes full responsibility for their actions post-purchase.
  4. I prefer to sell access
  5. one time sell
  6. good luck
 
Пожалуйста, обратите внимание, что пользователь заблокирован

Price: from 1K$ to 10K$​

Telegram: @rwm2024​

🌍 Target Organization:

  • Name: AlRajhi Bank
  • Country: Saudi Arabia

📂 SYSTEM ACCESS DETAILS:

1️⃣ Network Access

  • Type: VPN and RDP connections
  • Systems Exposed:
    • Core Banking System (CBS): Full control over transactional operations.
    • Loan Processing System: Includes approvals, rejections, and payment schedules.
    • Employee Management Portal: HR and payroll access.
    • FTP, SSH, ACCESS PANEL

2️⃣ Database Access

  • SQL Databases:
    • Customer Data: Full list of ~15 million accounts
    • Transactions: Over 7 years of transaction history
  • NoSQL DBs (MongoDB): Logs from mobile app activity, KYC submissions.

📊 INFORMATION DETAILS:

Customer Information (Full DB):

  • Fields Available:
    • Full Name (Arabic and English)
    • National ID / Iqama Numbers
    • Passport Details
    • Contact Numbers (mobile, landline)
    • Email Addresses (active & verified)
    • Physical Addresses

Financial Information:

  • Bank Balances (daily sync)
  • Mortgage and Loan Histories (approvals, rejections, and payments).

Employee Information:

  • Admin usernames and hashed passwords.
  • Job roles, salaries, and personal details.




3️⃣ Internal Emails and Communications

  • Access to Microsoft Exchange Server and archived emails of executives.
  • Includes sensitive email threads about mergers and acquisitions.

4️⃣ Payment Gateways

  • Full administrative control over payment processors integrated with the bank.
  • Can intercept, approve, or block any payment.

5️⃣ Web Portals

  • Admin panels of both retail and corporate banking websites .
  • Ability to manipulate balance views, freeze accounts, or delete records.

📊 INFORMATION DETAILS:

Customer Information (Full DB):

  • Fields Available:
    • Full Name (Arabic and English)
    • National ID / Iqama Numbers
    • Passport Details
    • Contact Numbers (mobile, landline)
    • Email Addresses (active & verified)
    • Physical Addresses

Financial Information:

  • Bank Balances (daily sync).
  • Credit Card Numbers + CVV (encrypted).
  • Mortgage and Loan Histories (approvals, rejections, and payments).

Employee Information:

  • Admin usernames and hashed passwords.
  • Job roles, salaries, and personal details.

💻 PROOF OF ACCESS PROVIDED


db samples:


users LOG samples:




more samples for Serious Buyers on TG

THANKS


Some extra headers from db:
customer_id INTEGER NOT NULL,
account_number VARCHAR(8),
account_type VARCHAR(50),
account_status VARCHAR(20),
currency_type VARCHAR(10),
current_balance FLOAT,
overdraft_limit FLOAT,
interest_rate FLOAT,
account_open_date DATE,
account_close_date DATE,
PRIMARY KEY (id),
FOREIGN KEY(customer_id) REFERENCES customer (id),
UNIQUE (account_number)
id INTEGER NOT NULL,
first_name VARCHAR(1000),
last_name VARCHAR(1000),
national_id VARCHAR(14),
phone_number VARCHAR(15),
email VARCHAR(100),
mailing_address VARCHAR(200),
physical_address VARCHAR(200),
account_open_date DATE,
marital_status VARCHAR(20),
employment_status VARCHAR(50),
employer_name VARCHAR(100),
annual_income FLOAT,
PRIMARY KEY (id),
UNIQUE (national_id)

⚠️ TERMS & CONDITIONS

  1. No Refunds after access is granted.
  2. Proof of access will be shown to serious buyers only.
  3. Buyer assumes full responsibility for their actions post-purchase.
  4. I prefer to sell access
  5. one time sell
  6. good luck
 
Статус
Закрыто для дальнейших ответов.
Верх