The Alleged Database of Afasystems and Municipality of Campobasso are Leaked
In a hacker forum a new alleged databases leaks are detected for Afasystems and Municipality of Campobasso.
Afasystems + Municipality of Campobasso Breach
Hey everyone, today I'm gonna tell you how I got into the systems of the municipality of Campobasso and the company that ran those systems.
Here are the links:
AfaSystems (200GB ~) (https://www.afasystems.it/)
Municipality of Campobasso (100GB ~) (https://www.comune.campobasso.it)
Basically, it all started with a simple RCE in one of their custom mailing systems (based on CGI and PERL scripts).
From there, it was super easy to extract all the files since the server was a single server where everything was hosted. Also, users were connected to an internal LDAP server, which let me grab the list of all employees/customers/users because it allowed anonymous login from LAN.
Not much more to say, enjoy the data and PLEASE, IF YOU CAN, DOWNLOAD THEM QUICKLY SINCE MY MEGA ACCOUNT AND/OR LINKS WILL PROBABLY BE CLOSED SOON THANKS TO THOSE USELESS THREAT INTELLIGENCE COMPANIES AND ETC.