LeakedIn Logo
Stories About Data Leaks and Related Stuff

Posts Tagged ‘Secret Variable’

Secret Variable

0 votedvote

Detected 1 occurrence(s) of ‘(\n[a-z0-9_\-]+[:;\|][a-z0-9_\-]+){10,}’:

CREATE TABLE Order (
    id int
    ...
)
CREATE TABLE Product (
    id int,
    name text
)
CREATE TABLE OrderProduct (
    OrderId int,
    ProductId int
)
	
Order| Product
1|Burger
1|Drink
1|Fries
2|Burger
2|Drink
3|Burger
4|Burger
5|Burger
5|Drink
5|Fries
	
Queried order| Returned Orders
1|1,5
2|2
3|3,4
4|3,4
5|1,5

Source: http://pastebin.com/raw.php?i=5ngywwev

Secret Variable

0 votedvote

Detected 1 occurrence(s) of ‘\s*[a-z0-9\-_]*secret[key]+\s*[:=]+\s*[“‘]\S+[“‘]’:

oblem sejauh ini ada di security Filter IP, Auth sama Secret Key selebihnya lancar aja
*/

require_once "./application/libraries/REST_Controller.php";

class Api extends REST_Controller
{
	private $kampus = 'YAYASAN UKHUWAH BANJARMASIN';
	private $secretKey = 'ukhuwah001';

	private $allowed_ips = array('119.2.80.1', '119.2.80.2', '119.2.80.3','127.0.0.1','::1','192.168.92.1'); 

	private $allowed_collecting_agents = array('427');
	private $allowed_channels = array('TELLER', 'IBANK', 'ATM', 'SMS','MBANK');
	
	public

Source: http://pastebin.com/raw.php?i=zSc9NJ6E

Secret Variable

0 votedvote

Detected 1 occurrence(s) of ‘(\n[a-z0-9_\-]+[:;\|][a-z0-9_\-]+){10,}’:

   =
=        EJ        =
=       NCDQ       =
=        FAP       =
=        B HI      =
=       MG         =
=                  =
=                  =
=                  =
=                  =
=                  =
=                  =
====================
A:b0465abd5b1378a46eecb6ac37d995f2d2286aee45ef3a74f2624c8261640d1e9d31dea506e21d8d50469d9ef59295c7f5b915888aca8d52c01886032afa2d63347a0292935c6885782d766712cab531dd437ec1fc1a69bb845360f1a6c06102eaaea42fee6b878f9e1dc3555952f2c897805510e156ffda03d00199fc50891b
B:aaeda3884a74c7dd01be4c640ff1d33a2dfdf1a03ff5a5518bb2181f7977c971694f2cd784610d8d3bd620dc18b5d31f88aa748ff94a646d47090e9193323c4897a9b1edf1c07541ea9ceaecab852a8449ffd2ff0ca9b7fc337cfcb1199c4b336b00023e74ef9379df1dc200b119b59678f35e8b97c4a83c422b8b021fce0c1f
C:af377750f9511427ec3a44b90e7c95a0677dbd6d77a1184473da6dd151bd4459f1c4e92c806ab1833f34c65abd895d7898408fca60be0f694ec99bc7e8977985e72e0586e3aac40ca7a8f1ab61c3f6f5ff89f702d6856dd738974f35f4719a7e78a74f6f43542b62d26b98c2e4e39a60bcd81557759f6c7e3aced7ad1042fbe6
D:c5a4555bf45a99ca999a75ea98e6c18f786ffeba1cfc4386405ee65852915474a9577141f52a83f374fa7b15f71b2a2a4659205c0fb559a55d9edbc07b47a9d9ac74f00ba0f4376c561c8ac2ddc9dbdc33f02bbd7c7a47054b3b299cfe993d81557f97d2f0b9d5636f4896f06db20b4618b38dcada91f91f70fa50d707a4f365
E:5915f6f4cb5fc182919586ad562e72e704899ee63212e600356615fc87bf020e7e8f7ca351cf0344e1d64ecdc1199dc9f2d00b6b5b36b6b8d01c5ed6b4ba87dcb1b9bf02e75ba334f2251f33200b33dae0d3596935f48a9e4dd6fff0124c2d7335e8a830e5077d75efa726731f2b48664fa4fe806a352adbdcb5d2d7bba5458c
F:1d0e24a69bef00e216a457f8cbe2145a68a42cbe8c82fee015c6308f2f105efdc5e9d9230357bf40e56f32cb9fbe13b1da3489bce2151f9bd97d950e411ec10dcca4ae0316b651447fa65ec4c6f039e033000d27a95bf75c6024bbc9ba8885b4caa36005e94c1458b589984c025e2b7df66f9d71433f2dab40a487556729af52
G:623eba130a23ccee32c802ac1d7fd10ba66a98370616f9291630058eba1c8a6b4d1320d1bb5bbc3fb671eac2717b382b3a365b8253f3679853e01a7784ab5672e2e3cc203dd2e78b8b57a2e21e6cfb068915d68f478cdd5a63c9d08423a52b1ba0b3c380d0a8e268949f551be4be54d40d788d88d3a45d50b8914bf130559c05
H:1288e76999624f3eede7016f4bbfb1660cc90f5add76342d9396a9244e9bbc8165028c650def27b600357ae2f28950ae5cdcf9c1b85f9bcae4da726cb6449e214843219c5adb5b6d5030b43a4b3650d238866cafcad2251e113f49adf6696c9de318d78f5cef4ae8ae411e164a0bff6eea58f6e4ff159146d740130d7b51ae8e
I:51b6ae4ed57fff73a8e87e434858c99b346fe38f8d4c9be7b08ea9edf0f43f2a72c8c76e0dfbefca07eb47d1af146c23373aa67bafa12316e9a5cfa69239668248faec2f2153ad724d51e7463699b66e13c6a71d8fe8547321742d45f9e3a086e88a12d4c55852e61d3b0e15ff4ee7dd0a303b2c1cb724eae02c13e761bef676
J:572b705e427b1529ad954b0dbeddc3a507f361dbe56f56d31bcbae95c20ed701ac3765e665e324d0b05a9fe17fa8ef5783d4bec4c5b900f390eb159359e3e3b7da18205f7fd7f6409274d89f88df03f6a2b7be4ed00b7989064a2a51c73c0a99ba841bc064820b4795b5d4cfa3bccfd7d020b68c4d25a939769b631fd768c4d1
M:830f4b545333f2568f068b89e06cde95fbd17051db81c12d5f579ac3bd879186d9d808691ed608c0cb45bffea25bf5f48a02d0a83a9700efe4a0959a4d4805727b4501f0a364deebd07457487898c2c788422ada43f2a5e0778b8eb11ef83b10060aa392dfe7046ea064c892cf9b0893d377945033d0ac0684a510b49052f3
N:552bf414edc6a940f2a4e971508f117ba2875486d0e97cb4c9c57dc7c0b5dcad51fe5305f25ed77f1a726ddc8cc84d3b124675ca4542b611113b3f57c259885862f4ccf3cc1596072bef28786181f8dc09b848c1fb7729cc227538ed6d4fe850a1d674d720ff82940a6fb8f24d8b283214447792ab6d8cf1b87af13685b12325
P:e59a3945daf4d960c214185ae8aa9132de848940a0095248db098cbf78c2fe2a3bda76c0205e045269120de051bd153b9cda55c11cb054dfe108ccd79b54fbe1d02bf6e4f64a7f8b78a190bd42213e7abc7f2fe223b9747724235f3dbeea35b497356e4163819ab26a31e016b43d91d882eacca8429ab1e29e7e71703e51b5f0
Q:7b1021219aee9f236de804cc4bec287efe7e7dbb94d4882c799f7e0f651ac7dbe526f9978c1d33f711ff072bee5e5c220c8f744cb010c63d51e205ee8776950af9377142bc6ba52bb795e91572d07ab7475779e8fdf4cd5bea84822987e5b54c9175543e6edda807d441eaf773d7889c031d4b02124d649418197e469e57e273
T:3a5358d9edf1f0259a2bd16b8d4dbaa8f1850e87133841416b74ef4190fbbeed0f3ea020a2ad1f30ef550b68df0a40bd533701de3f9e5e2ccf295514cd12d56ad4f532571645e374350112b30a37727fd32ec4b73279ff59ac40ef5d330e4a44509b9e3cf1235081dde5f87a8f0472f93abe580763d51a1249c74b353d4ae5ca

Sau khi thắng 3 ván :)) bạn sẽ get dc flag là SVATTT{W3lc0m3_t0_****!} ! Good luck :) 
Note : Ai có cách hay hơn xin chỉ giáo mình ạ :)

Source: http://pastebin.com/raw.php?i=fdWb8cER

Simple Password

0 votedvote

Detected 3 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*[“‘][a-z0-9\-_\!\$]+[“‘]’:

e=""
$sbsdk_flow-password=""
$sbsdk_flow-ftpindirectory=""

$rnf_flow-ftpinlocation=""
$rnf_flow-username=""
$rnf_flow-password=""
$rnf_flow-ftpindirectory=""

$svtps_flow_ftpinlocation="ftp.bla.nl"
$svtps_flow_username="sahkjda2es"
$svtps_flow_password="sdjjabskjdbas3"
$svtps_flow_ftpindirectory="svtps-homedir"

$svtnps_flow-ftpinlocation=""
$svtnps_flow-username=""
$svtnps_flow-password=""
$svtnps_flow-ftpindirectory=""

$dvbsi_flow-ftpinlocation=""
$dvbsi_flow-username=""
$dvbsi_flow-password=""
$dvbsi_flow

Detected 2 occurrence(s) of ‘\s*[a-z0-9\-_]*secret[key]+\s*[:=]+\s*[“‘]\S+[“‘]’:

ucketname1 = "cdp-directimport-prod-data"
$bucketname2 = "cdp-directimport-prod-data-two"
$bucket1_accesskey = "bkdkbdkjankjdbkajsbdkjabskjdb"
$bucket1_secretkey = "bkdkbdkjankj/dbkajsbdkjabskjdb"
$bucket2_accesskey = "bkdkbdkjankjdbkajsbdkjabskjdb"
$bucket2_secretkey = "dskjdnk3/akjdbkajsbdjhsgd"
$ftp_in_pass = "59AehdVPt"
$ftp_in_user = "merapar"
$ftp_out_pass = "Em&$8Kv4"
$ftp_out_user = "ftpdusers-iidneo"
$ftpfetchlocation = "listings.bds.tv"
$ftppublishlocation = "listings.bds.tv"
$rabbitmqpassword = "SewQiojkr09734"
$rabbitmqusername 

Source: http://pastebin.com/raw.php?i=JiE0Zwq9

Secret Variable

0 votedvote

Detected 1 occurrence(s) of ‘\s*[a-z0-9\-_]*secret[key]+\s*[:=]+\s*[“‘]\S+[“‘]’:

 s.append("c="+uses);
        s.append(";");
        s.append("t="+uses);

        String payload = s.toString();
        System.out.println("payload", payload);
        return tokenId + ":" + AESUtils.encryptMessage(payload, secretKey);
    }
}
	
String secretKey = 'xxxxxxxxxxxxxxxxxxxxxx==';
            String tokenId = 'xxxxxxxxxxxx';
            Datetime d = System.now();
            String payload = 'd='+d.format('yyyyMMddHHmmssSSSZ')+';c='+10+';t='+10;
            system.debug('payload' + payload);
            String message = tokenId + 

Source: http://pastebin.com/raw.php?i=g9TtrypQ