full-disclosure - European Space Agency (ESA.INT) Hacked by TinKode

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <BANLkTimF2AqcLz4tToK0PxSRowEXz0Uxsw@mail.gmail.com>
Date: Sun, 17 Apr 2011 22:27:14 +0300
From: TinKode InSecurity <tinkode.isr@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: European Space Agency (ESA.INT) Hacked by TinKode

*( European Space Agency )*

The *European Space Agency* (*ESA*), established in 1975, is an
intergovernmental organisation dedicated to the exploration of space,
currently with 18 member states. *Headquartered in Paris*, ESA has a staff
of more than 2,000 with an annual budget of about *€3.99 billion / $5.65
billion US dollars* (2011).

ESA’s space flight program includes human spaceflight, mainly through the
participation in the International Space Station program, the launch and
operations of unmanned exploration missions to *other planets and the Moon,
Earth observation, science, telecommunication* as well as maintaining a
major spaceport, the Guiana Space Centre at Kourou, French Guiana, and
designing launch vehicles. The main European launch vehicle Ariane 5 is
operated through Arianespace with ESA sharing in the costs of launching and
further developing this launch vehicle.
More *here* <http://en.wikipedia.org/wiki/European_Space_Agency>.

******************************************************************
(+) Authors : TinKode
(+) WebSite : TinKode27.BayWords.Com <http://tinkode27.baywords.com/>
(+) Date    : 17.04.2011
(+) Hour    : 17:17 PM
(+) Targets : www.esa.int (European Space Agency)
(+) Document: ESA.int Full Disclosure (Hacked)
(+) Method  : UnKn0Wn
******************************************************************

 *Text Files*:

   - *Main informations about server*.  Click
*here<http://pastebin.com/raw.php?i=T0Dk2Kkr>
   *.* *
   - Main accounts from ESA.INT (*Root Accounts,  Emails, FTPs,  Admins,
   Editors,  etc*). Click *here <http://pastebin.com/raw.php?i=cXG0n0pu>*.

*Emails*:

<http://img809.imageshack.us/img809/8007/emailsesaintpublic.png>

*Preview of Root accounts,  Emails,  FTPs,  etc*:

[*Root Account*]
---------------------------------------------------------------------
Username = root
Password = *8009BCFDDF013C178B831737138F2A3D8E652B8E (SHA1)

[*DB Accounts*]
---------------------------------------------------------------------
Username = jbossuser
Password = 49c6641168b072d0

Username = psocrat
Password = 49c6641168b072d0

Username = root
Password = 49c6641168b072d0

Username = jbossuser
Password = 7fe05ad56133d52b

Username = psocrat
Password = 7fe05ad56133d52b

[*Administrator Account*]
---------------------------------------------------------------------
username = rnay06
password = eduxxxr3
admin    = y

[*Editor account*]
---------------------------------------------------------------------
Username = editor
Password = editor2005

[*FTP Accounts*]
---------------------------------------------------------------------
Password : service2004
Username : nrtservice
Webserver: localhost
Protocol : scp

Username : riverusr
Password : usrriver
WebServer: styx.esrin.esa.it
Protocol : ftp

Username : mapinject
Password : .mapinject
Webserver: ssems1.esrin.esa.int
Protocol : sftp

Password : fire
Username : wfaa
WebServer: twin.esrin.esa.int
Protocol : ftp

Password : MMvomir07.
Username : uvomir
Webserver: 193.204.231.156
More     : http://whois.domaintools.com/193.204.231.156
Protocol : sftp

Password : 12qwas
Username : kimv
Webserver: kes.esrin.esa.int
Protocol : ftp

Password : Bk7Wdkf6hY
Username : emathot
Webserver: testlab4.esrin.esa.int
Protocol : ftp

Password : MecoGPOD123
Username : MecoGPOD
Webserver: metheny.esrin.esa.int
Protocol : ftp

Password : brteon
Username : betlem
Webserver: uranus.esrin.esa.it
Protocol : ftp

Password : ch9l
Username : ftpriv
Webserver: uranus.esrin.esa.int
Protocol : ftp

Password : .mapinject
Username : mapinject
Webserver: ssems1.esrin.esa.int
Protocol : sftp

Password : esa2004
Username : Olivier
Webserver: dummy.server.esa.int
Protocol : ftp

Password : .passWIL
Username : wilkinsa
Webserver: esa-mm.esa.int
Protocol : ftp

 *The ESA Logs*:

*Thanks,
TinKode @ Slacker.*

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/