The Alleged Database of Afasystems and Municipality of Campobasso are Leaked

In a hacker forum a new alleged databases leaks are detected for Afasystems and Municipality of Campobasso.


Afasystems + Municipality of Campobasso Breach

Hey everyone, today I'm gonna tell you how I got into the systems of the municipality of Campobasso and the company that ran those systems.

Here are the links:

AfaSystems (200GB ~) (https://www.afasystems.it/)

Municipality of Campobasso (100GB ~) (https://www.comune.campobasso.it)

Basically, it all started with a simple RCE in one of their custom mailing systems (based on CGI and PERL scripts).

From there, it was super easy to extract all the files since the server was a single server where everything was hosted. Also, users were connected to an internal LDAP server, which let me grab the list of all employees/customers/users because it allowed anonymous login from LAN.

Not much more to say, enjoy the data and PLEASE, IF YOU CAN, DOWNLOAD THEM QUICKLY SINCE MY MEGA ACCOUNT AND/OR LINKS WILL PROBABLY BE CLOSED SOON THANKS TO THOSE USELESS THREAT INTELLIGENCE COMPANIES AND ETC.

Popular posts from this blog

RipperSec Conducted Cyber Attack on Serbatoio Monte San Michele

Image
In the RipperSec's telegram channel the cyber attack announcement is detected for Serbatoio Monte San Michele. Italy: Serbatoio Monte San Michele SCADA System Has Been Pawned By RipperSec :comet::it: - Serbatoio Monte San Michele is a water reservoir located in Monte San Michele, Italy, a significant site during World War I. -> :warning: Our Message :warning:: :information_source: Stop Support Israel #FreePalestine
Read more

Alleged Leak of Italian Red Cross Database Detected

Image
A new alleged data breach concerning the Italian Red Cross has been reported after a post surfaced on a hacker forum by a threat actor claiming to have accessed the organization's network. The hacker described the security measures as ineffective and detailed how they easily gained administrative privileges, exploiting several vulnerabilities to access critical data. The threat actor shared that they avoided deploying ransomware, considering it unnecessary, and instead focused on extracting and exposing internal source codes, databases, backups, and more. They bypassed large video files to avoid detection and network disruption. Additionally, the hacker claims to have left a hidden backdoor in the system, offering to share it privately for further exploitation. Proof of the breach was supported by five images showing excerpts of the stolen data, from a database management console, Microsoft SQL Management.
Read more