Sell 60,000+ ElasticSearch’s data
by b000263 - Thursday June 15, 2023 at 03:03 AM
#1
Sell ElasticSearch unauthorized vulnerabilities, 60,000+ vulnerable databases around the world can be used.
Top 5 Including U.S. CN Germany India Singapore


"Elasticsearch instances are often found unsecured and can contain vast amounts of sensitive data. The Cybernews team points out that this is far from the only case where VPN user data has been exposed. Earlier this year, the team identified three databases that had been exposed due to misconfigured Elasticsearch instances that contained the data of 21 million individuals who had used the SuperVPN, GeckoVPN, and ChatVPN services. "
https://www.netsec.news/exposed-elastics...vpn-users/

samples : 52.131.219.136 (CN)
img : https://ibb.co/m9b2jmG

The amount that can be exploited globally (Top 5)
img : https://ibb.co/Z8pdgnz

DM for more information.
XMPP : [AGUNcc0ND@ubuntu-jabber.net]
Price : 1BTC

You can get all the content in the database and sell it, or use database vulnerabilities to escalate privileges to gain server access.
Reply
#2
Anyone need? PM me.
Reply
#3
Anyone need? PM me.

These two have no poc, it's just unauthorized, but it has a huge impact. Unauthorized vulnerabilities caused by configuration errors.
This vulnerability can allow you to obtain a lot of data, and you can also use the privilege escalation vulnerability to obtain server permissions.
The simplest is that you can get the data in the database and sell it, such as the Indian medical company data https://www.lloydhealthcare.org/
On average each can sell for $500-2000
If it is very important data, such as government data, it can be sold for more than $5000.
This is definitely profitable.
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  SELLING [IRAN] STEALER LOGS FROM IRAN ( 18 GB PLAIN TEXT DATA, ) - IRAN ONLY xploitleaks 0 1,281 54 minutes ago
Last Post: Automation
  SELLING +320K Thailand Shopping Customers Data r57 1 1,380 55 minutes ago
Last Post: r57
  DATABASE USA 42K House Keeping Data r57 5 928 1 hour ago
Last Post: r57
  DATABASE Indian Edu Data r57 2 495 1 hour ago
Last Post: r57
  DATABASE Gobus Egypt Data Breach 1.4M r57 6 1,176 1 hour ago
Last Post: r57

Forum Jump:


 Users browsing this thread: