O aso nei o le a tatou vaʻavaʻai i ni mataupu se lua i le taimi e tasi - o faʻamaumauga a tagata faʻatau ma paaga a kamupani eseese e lua na maua fua "faʻafetai i" tatala Elasticsearch sapalai ma ogalaau o faʻamatalaga faiga (IS) a nei kamupani.
I le tulaga muamua, o le fiasefulu afe (ma atonu o le selau o afe) o tiketi mo faʻalapotopotoga faʻale-aganuʻu eseese (fale tifaga, kalapu, malaga i vaitafe, ma isi) faʻatau atu i le Radario system (www.radario.ru).
I le tulaga lona lua, o faʻamatalaga lea i malaga a turisi o le faitau afe (atonu o le tele o le fiasefulu afe) o tagata femalagaaʻi na faʻatau asiasiga e ala i ofisa femalagaaʻi e fesoʻotaʻi ma le Sletat.ru system (www.sletat.ru).
Ou te fia maitauina i le taimi lava lena e le gata o igoa o kamupani na faʻatagaina faʻamatalaga e faʻasalalau lautele e eseese, ae faʻapea foʻi ma le auala a nei kamupani e iloa ai le mea na tupu ma le tali mulimuli ane i ai. Ae muamua mea muamua…
Дисклеймер: вся информация ниже публикуется исключительно в образовательных целях. Автор не получал доступа к персональным данным третьих лиц и компаний. Информация взята либо из открытых источников, либо была предоставлена автору анонимными доброжелателями.
Mataupu muamua. "Radario"
I le afiafi o le 06.05.2019/XNUMX/XNUMX la matou faiga , o lo'o umia e le auaunaga fa'atau pepa fa'aeletonika Radario.
E tusa ai ma le masani faʻanoanoa, o loʻo i ai i le 'auʻaunaga faʻamatalaga auʻiliʻili o faʻamatalaga faʻamatalaga a le auʻaunaga, lea na mafai ai ona maua faʻamatalaga patino, faʻaoga tagata faʻaoga ma upu faʻaulu, faʻapea foʻi ma tiketi faʻaeletoroni lava latou mo mea eseese i le atunuʻu.
Ole aofa'iga o ogalaau na sili atu ile 1 TB.
E tusa ai ma le Shodan search engine, o loʻo avanoa faʻalauaʻitele le server talu mai Mati 11.03.2019, 06.05.2019. Na ou logoina tagata faigaluega Radario ile 22/50/07.05.2019 ile 09:30 (MSK) ma ile XNUMX/XNUMX/XNUMX ile XNUMX:XNUMX ua le avanoa le server.
O ogalaau o loʻo i ai se faʻailoga lautele (tasi) faʻatagaina, e maua ai avanoa i tiketi uma faʻatau e ala i fesoʻotaʻiga faʻapitoa, pei o:
http://radario.ru/internal/tickets/XXXXXXXX/print?access_token=******JuYWw6MDIzOWRjOTM1NzJiNDZjMTlhZGFjZmRhZTQ3ZDgyYTk
http://radario.ru/internal/orders/YYYYYYY/print?access_token=******JuYWw6MDIzOWRjOTM1NzJiNDZjMTlhZGFjZmRhZTQ3ZDgyYTkO le faʻafitauli foʻi o le faʻatatauina o tiketi, faʻaauau le faanumeraina o poloaiga na faʻaaogaina ma faigofie faʻasologa o le numera o pepa (XXXXXXXXX) po'o le fa'atonu (IYYYYYY), na mafai ona maua uma tiketi mai le faiga.
Ina ia siaki le talafeagai o faʻamaumauga, na ou faʻatau faʻamaoni ia te aʻu lava le tiketi sili ona taugofie:
ma mulimuli ane maua i luga o se server lautele i totonu o le IS logs:
http://radario.ru/internal/tickets/11819272/print?access_token==******JuYWw6MDIzOWRjOTM1NzJiNDZjMTlhZGFjZmRhZTQ3ZDgyYTkTuʻueseese, ou te fia faʻamamafa atu o tiketi na avanoa uma mo mea ua uma ona faia ma mo i latou o loʻo fuafua pea. O lona uiga, e mafai e se tagata osofaʻi ona faʻaaoga le pepa a se isi tagata e ulufale ai i le mea na fuafuaina.
I le averesi, o faʻamaumauga taʻitasi Elasticsearch o loʻo i ai ogalaau mo le aso faʻapitoa (amata mai le 24.01.2019/07.05.2019/25 i le 35/XNUMX/XNUMX) e aofia ai mai le XNUMX i le XNUMX afe tiketi.
I le faaopoopo atu i tiketi lava ia, o le faasino igoa o loʻo i ai logins (tuatusi imeli) ma upu faʻaupu mo le avanoa i faʻamatalaga patino a paaga a le Radario o loʻo faʻatau atu tiketi ia latou mea na tutupu e ala i lenei auaunaga:
Content: "ReturnUrl=&UserEmail=***@yandex.ru&UserPassword=***"I le aofa'i, e silia ma le 500 pa'aga saini/password na maua. O fa'amaumauga o fa'atauga o tiketi e va'aia i fa'amatalaga patino a paaga:
Sa fa'aalia fo'i fa'alaua'itele igoa, numera o telefoni ma tuatusi imeli o tagata fa'atau na filifili e toe fo'i mai tiketi na fa'atau muamua:
"Content": "{"name":"***","surname":"*** ","middleName":"Евгеньевна ","passportType":1,"passportNumber":"","passportIssueDate":"11-11-2011 11:11:11","passportIssuedBy":"","email":"***@mail.ru","phone":"+799*******","ticketNumbers":["****24848","****948732"],"refundReason":4,"comment":""}"I se tasi aso na filifilia, e silia ma le 500 ia faamaumauga na maua.
Na ou mauaina se tali i le mataala mai le faatonu faʻapitoa o Radario:
O aʻu o le faʻatonu faʻapitoa o Radario ma ou te fia faʻafetai mo le faʻailoaina o le faʻafitauli. E pei ona e iloa, ua matou tapunia le avanoa i le elastic ma o loʻo foia le mataupu o le toe tuʻuina atu o tiketi mo tagata faʻatau.
I sina taimi mulimuli ane na faia ai e le kamupani se faʻamatalaga aloaia:
O se faʻafitauli na maua i le Radario electronic ticket sales system ma vave faʻasaʻo, lea e mafai ona taʻitaʻia ai le liki o faʻamatalaga mai tagata faʻatau a le auʻaunaga, na taʻu atu ai e le faatonu o maketi a le kamupani, Kirill Malyshev, i le Moscow City News Agency.
"Na matou mauaina moni lava se faʻafitauli i le faʻaogaina o le faiga e fesoʻotaʻi ma faʻafouga masani, lea na faʻamautuina i le taimi lava na maua ai. O le iʻuga o le faʻafitauli, i lalo o nisi tulaga, o gaioiga le fiafia a isi vaega e mafai ona taʻitaʻia ai faʻamaumauga, ae leai ni faʻalavelave na faʻamauina. I le taimi nei, o faʻaletonu uma ua faʻaumatia, "o le tala lea a K. Malyshev.
Na faamamafa e se sui o le kamupani le faia o le faaiuga e toe tuuina atu pepa uma na faatauina atu i le taimi o le fofo o le faafitauli ina ia mafai ai ona aveese atoa le ono tulai mai o ni faiga taufaasese faasaga i tagata o loʻo tautua.
I ni nai aso mulimuli ane, na ou siakiina le maua o faʻamatalaga e faʻaaoga ai fesoʻotaʻiga lemu - o le avanoa i tiketi "faʻaalia" na ufiufi moni lava. I loʻu manatu, o se auala faʻapitoa, faʻapolofesa e foia ai le faʻafitauli o le faʻaogaina o faʻamatalaga.
Mataupu lona lua. "Fly.ru"
I le taeao po 15.05.2019/XNUMX/XNUMX DeviceLock Fa'amatalaga Soliga Atamai fa'ailoaina se 'au'aunaga Elasticsearch fa'alaua'itele ma ogalaau o se IS patino.
Mulimuli ane, na faʻamautu ai o le 'auʻaunaga o loʻo i le auaunaga filifilia o tafaoga "Sletat.ru".
Mai index cbto__0 na mafai ona maua le faitau afe (11,7 afe e aofia ai kopi) o tuatusi imeli, faʻapea foʻi ma nisi faʻamatalaga totogi (tau o tafaoga) ma faʻamaumauga o tafaoga (o afea, poʻo fea, faʻamatalaga tiketi vaalele. всех tagata malaga e aofia ai i le taamilosaga, ma isi) i le aofaʻi e tusa ma le 1,8 afe faʻamaumauga:
"full_message": "Получен запрос за создание платежного средства: {"SuccessReturnUrl":"https://sletat.ru/tour/7-1939548394-65996246/buy/?ClaimId=b5e3bf98-2855-400d-a93a-17c54a970155","ErrorReturnUrl":"https://sletat.ru/","PaymentAgentId":15,"DocumentNumber":96629429,"DocumentDisplayNumber":"4451-17993","Amount":36307.0,"PaymentToolType":3,"ExpiryDateUtc":"2020-04-03T00:33:55.217358+03:00","LifecycleType":2,"CustomerEmail":"[email protected]","Description":"","SettingsId":"8759d0dd-da54-45dd-9661-4e852b0a1d89","AdditionalInfo":"{"TourOfficeAdditionalInfo":{"IsAdditionalPayment":false},"BarrelAdditionalInfo":{"Tickets":[{"Passenger":{"FIO":"XXX VIKTORIIA"},"ReservationSystem":null,"TicketNumber":null,"IsRefundPossible":false},{"Passenger":{"FIO":"XXX ANDREI"},"ReservationSystem":null,"TicketNumber":null,"IsRefundPossible":false},{"Passenger":{"FIO":"XXX Andrei"},"ReservationSystem":null,"TicketNumber":null,"IsRefundPossible":false}],"Segments":[{"Flight":"5659","AviaCompany":null,"AviaCompanyIataCode":null,"DepartureCity":"LED","DepartureAirport":"LED","DepartureAirportIataCode":"LED","DepartureDate":"2019-04-11T02:45:00","DepartureTime":null,"ArrivalCity":"SHJ","ArrivalAirport":"SHJ","ArrivalAirportIataCode":"SHJ","ArrivalDate":"2019-04-11T09:40:00","ArrivalTime":null,"FareCode":null},{"Flight":"5660","AviaCompany":null,"AviaCompanyIataCode":null,"DepartureCity":"SHJ","DepartureAirport":"SHJ","DepartureAirportIataCode":"SHJ","DepartureDate":"2019-04-14T10:45:00","DepartureTime":null,"ArrivalCity":"LED","ArrivalAirport":"LED","ArrivalAirportIataCode":"LED","ArrivalDate":"2019-04-14T15:50:00","ArrivalTime":null,"FareCode":null}]},"Tickets":[{"Passenger":{"FIO":"XXX VIKTORIIA"},"ReservationSystem":null,"TicketNumber":null,"IsRefundPossible":false},{"Passenger":{"FIO":"XXX ANDREI"},"ReservationSystem":null,"TicketNumber":null,"IsRefundPossible":false},{"Passenger":{"FIO":"XXX Andrei"},"ReservationSystem":null,"TicketNumber":null,"IsRefundPossible":false}],"Segments":[{"Flight":"5659","AviaCompany":null,"AviaCompanyIataCode":null,"DepartureCity":"LED","DepartureAirport":"LED","DepartureAirportIataCode":"LED","DepartureDate":"2019-04-11T02:45:00","DepartureTime":null,"ArrivalCity":"SHJ","ArrivalAirport":"SHJ","ArrivalAirportIataCode":"SHJ","ArrivalDate":"2019-04-11T09:40:00","ArrivalTime":null,"FareCode":null},{"Flight":"5660","AviaCompany":null,"AviaCompanyIataCode":null,"DepartureCity":"SHJ","DepartureAirport":"SHJ","DepartureAirportIataCode":"SHJ","DepartureDate":"2019-04-14T10:45:00","DepartureTime":null,"ArrivalCity":"LED","ArrivalAirport":"LED","ArrivalAirportIataCode":"LED","ArrivalDate":"2019-04-14T15:50:00","ArrivalTime":null,"FareCode":null}]}","FinancialSystemId":9,"Key":"18fe21d1-8c9c-43f3-b11d-6bf884ba6ee0"}"I le auala, o fesoʻotaʻiga i asiasiga totogi e matua aoga lava:
I fa'asino igoa graylog_ i tusitusiga manino o loʻo i ai faʻamatalaga ma upu faʻaulu a ofisa femalagaaʻi e fesoʻotaʻi ma le Sletat.ru system ma faʻatau atu asiasiga ia latou tagata faʻatau:
"full_message": "Tours by request 155213901 added to local cache with key 'user_cache_155213901' at 5/6/2019 4:49:07 PM, rows found 0, sortedPriceLength 215. QueryString: countryId=90&cityFromId=1265&s_nightsMin=6&s_nightsMax=14&stars=403%2c404&minHotelRating=1¤cyAlias=RUB&pageSize=300&pageNumber=1&s_showcase=true&includeOilTaxesAndVisa=0&login=zakaz%40XXX.ru&password=XXX, Referer: , UserAgent: , IP: 94.154.XX.XX."E tusa ai ma aʻu faʻatusatusaga, e faitau selau paʻu saini / password na faʻaalia.
Mai le tala patino a le ofisa malaga i luga o le faitotoa agent.sletat.ru na mafai ona maua faʻamatalaga o tagata faʻatau, e aofia ai numera o tusifolau, tusi folau faavaomalo, aso fanau, igoa atoa, numera telefoni ma tuatusi imeli.
Na ou logoina le Sletat.ru auaunaga ile 15.05.2019/10/46 ile 16:00 (MSK) ma ni nai itula mulimuli ane (seia XNUMX:XNUMX) na mou atu mai lo latou avanoa saoloto. Mulimuli ane, i le tali atu i le lomiga i Kommersant, na faia e le pulega o le auaunaga se faamatalaga uiga ese e ala i le aufaasālalau:
O le ulu o le kamupani, Andrei Vershinin, na faʻamatalaina o Sletat.ru o loʻo tuʻuina atu le tele o tagata taʻalo taʻavale faʻapitoa faʻatasi ma avanoa i le talaʻaga o fesili i le masini suʻesuʻe. Ma na ia manatu na maua e le DeviceLock: "Ae ui i lea, o le faʻamaumauga faʻamaonia e le o iai faʻamatalaga o tusifolau a tagata tafafao maimoa, faʻamaumauga a le ofisa malaga ma upu faʻaulu, faʻamatalaga totogi, ma isi." Na taʻua e Andrei Vershinin e leʻi mauaina e Sletat.ru se faʻamaoniga o ia tuʻuaiga ogaoga. "O loʻo matou taumafai nei e faʻafesoʻotaʻi le DeviceLock. Matou te talitonu o se poloaiga lea. O nisi tagata e le fiafia i lo tatou tuputupu aʻe vave, ”o lana faʻaopoopo mai lea. "
E pei ona faʻaalia i luga, logins, passwords, ma faʻamaumauga o tusifolau a tagata tafafao maimoa sa i ai i le lautele mo se taimi umi (a itiiti ifo talu mai Mati 29.03.2019, XNUMX, ina ua faʻamaumau muamua le server a le kamupani i le lautele e le Shodan search engine). Ioe, e leai se tasi na faafesootaia i matou. Ou te faʻamoemoe o le mea sili na latou logoina ofisa femalagaaʻi e uiga i le liki ma faʻamalosia i latou e sui a latou uputatala.
Talafou e uiga i faʻamatalaga faʻamatalaga ma tagata e mafai ona maua i taimi uma i luga o laʻu Telegram channel "".
puna: www.habr.com