SQL BrandNewTube.com Database110.4K

[p3rchas]

Dumped by anthraxsec 2 days ago, passwords hash SHA-1 sample:
(1, 'BrandNewTube', ' support@brandnewtube.com ', .29.209.76 '82 ',' 775359a1b54ec5e3e4edeb48e7ec28ff78911b71 ',' ',' ',' male ',' 4e3045b11db9cb222bf299936cdf '/2020/09/kqQSZXHLuic8RjcGAszG_27_8df518bb9db04251ed1cd1a745761fcb_image.png', 'upload / photos / 2020/06 / AzyYL6DGvKjlfyRregyx_29_9d69fe71cb85758b980a788013af3183_image.png', 'upload / photos / 2020/09 / PWAGRzrZDvlXIWx8UAeP_27_e10530e6192f,' 27_e10530e6192f 1, 1, 1, 1602326093, '00 / 0000 ', 1, 579, 2147483647, 0,' 0 ', 0, 0,' ',' unlimited ', 0,' {\ "likes \": 4530, \ "dislikes \": 114, \ "views \": 85555, \ "comments \ ": 1025, \" update_time \ ": 1604188740} ', 120,' 1602892740 ',' ',' ',' ',' ', 0,' 0 ', 0,' ',' ', 0, 'fso41-1', 1, NULL, NULL),
(2, 'BNTube', ' info@brandnewtube.com ', '104.129.28.90', '8beaa736bc9b9bc62057072a44830e4092317667', '', '', 'male', '545a23610381940142f678083361dd' english2dbatar ' photos / d-cover.jpg ', NULL,' ', 226, 27, NULL,' ',' ',' ',' ', 1, 1, 1, 1602335098,' 2020/5 ', 1, 65, 285731145, 0, '0', 0, 0, '', 'unlimited', 0, NULL, 24, '1602892740', '', '', '', '', 0, '0', 0, ' ',' ', 0,' ', 0, NULL, NULL),
(3, 'SAYNOtooNWO', ' Mathaabhussain@gmail.com ', '82 .132.236.88 ',' 4a8fd1ca769e6e54143726614f67c67ce2f3ff9c ',' ',' ',' male ',' 104276e8e1b7fb16514652pg 'upload / photos / d-cover.jpg', NULL, '', 226, 0, NULL, '', '', '', '', 1, 0, 0, 1602125049, '2020/5', 0 , 4, 42746996, 0, '0', 0, 0, '', '0', 0, '{\ "likes \": 0, \ "dislikes \": 0, \ "views \": 0, \ "comments \": 0, \ "update_time \": 1590969540} ', 0,' 1602892740 ',' ',' ',' ',' ', 0,' 0 ', 0,' ',' ', 0, '', 0, NULL, NULL),
(5, 'HMALIK', ' hamza_malik_491@hotmail.com ', '2.123.181.23', '93fb975fff2b8d29e89e945c008d4b81c2c46297', '', '', 'male', 'd7e395fa946ffdf403acd /dd39', uploadfatar.pg / d-cover.jpg ', NULL,' ', 0, 0, NULL,' ',' ',' ',' ', 1, 0, 0, 1588701118,' 2020/5 ', 0, 0, 60479801 , 0, '0', 0, 0, '', '0', 0, '{\ "likes \": 0, \ "dislikes \": 0, \ "views \": 0, \ "comments \ ": 0, \" update_time \ ": 1590969540} ', 0,' 1602892740 ',' ',' ',' ',' ', 0,' 0 ', 0,' ',' ', 0,' ' , 0, NULL, NULL),
(6, 'overrider81', ' overrider81@gmail.com ', '92 .238.231.232 ',' cc6c98a59fd683ad6f68e10401176164c9b661ed ',' ',' ',' male ',' 3335746bbd052a3a27460e0b /d6634f28. / photos / d-cover.jpg ', NULL,' ', 0, 0, NULL,' ',' ',' ',' ', 1, 0, 0, 1588714281,' 2020/5 ', 0, 0 , 0, 0, '0', 0, 0, '', '0', 0, NULL, 0, '1602892740', '', '', '', '', 0, '0', 0, '', '', 0, '', 0, NULL, NULL),
(7, 'Kasu', ' k45u01@gmail.com ', '82 .40.66.239 ',' ed166f07e95fcef2248457979e3c802d4dd3d33f ',' ',' ',' male ',' ad4a4bc3fce281bde60ae3ca3accd226d30avatar ' / photos / d-cover.jpg ', NULL,' ', 0, 0, NULL,' ',' ',' ',' ', 1, 0, 0, 1588768465,' 2020/5 ', 0, 0 , 0, 0, '0', 0, 0, '', '0', 0, NULL, 0, '1602892740', '', '', '', '', 0, '0', 0, '', '', 0, '', 0, NULL, NULL),
(8, 'Paknaz', ' pak_naz@hotmail.com ', '86 .25.76.235 ',' 6c874850e11137ca9b93abac731e1530accf672f ',' ',' ',' male ',' de8789e278721ce0e6814843f881ec7237683212 ', uploadcatar-avatar-avatar-avatar-72 .jpg ',' upload / photos / d-cover.jpg ', NULL,' ', 0, 0, NULL,' ',' ',' ',' ', 1, 0, 0, 1588739212,' 2020 / 5 ', 0, 0, 0, 0,' 0 ', 0, 0,' ',' 0 ', 0, NULL, 0,' 1602892740 ',' ',' ',' ',' ', 0, '0', 0, '', '', 0, '', 0, NULL, NULL),

https://anonfiles.com/feYch2e5p1/users_8_sql

 

[MURC1ELAGO]

Сделал отдельно в файле поля: user, email, ip. Может кому-то пригодится. Автору темы спасибо

5.97 MB file on MEGA

mega.nz

 

[JohnRipper]

Не забываем поощрять ТСов, кто скачал и не поставил лайк - тот редиска.

 

[cyberbob]

На соседнем форуме рассказали как был взломан brandnewtube.com:

Edit: Due to popular demand, I will release how I did this publicly:

1) I exploited an LFI in ajax.php which allowed me to grab an administrator email address using their username.

2) I requested a password reset, and due to shitty entropy, you can brute force the code from 111 to 999 (I had a Python script wrote for me that did this)

3) With access to the administrator account, I edited the FFMPEG directory on the admin panel in order to drop a shell on the server.

And, last but not least, while the admins took 7 hours to delete my shell and declared a smug victory, I still had access to their administrator account, after stating that they had fixed the vulnerability and that all was safe.