I-database ye-MongoDB engazange ifune ukuqinisekiswa ifunyenwe kwi-domain yoluntu, equlethe ulwazi oluvela kwizikhululo zonyango eziphuthumayo zaseMoscow (EMS).
Ngelishwa, le ayisiyiyo kuphela ingxaki: okokuqala, ngeli xesha idatha ivuze ngokwenene, kwaye okwesibini, lonke ulwazi olunovakalelo lugcinwe kumncedisi obekwe eJamani (Ndicela ukubuza ukuba ingaba oku kophula nawuphi na umthetho okanye imiyalelo yesebe?).
Дисклеймер: вся информация ниже публикуется исключительно в образовательных целях. Автор не получал доступа к персональным данным третьих лиц и компаний. Информация взята либо из открытых источников, либо была предоставлена автору анонимными доброжелателями.
Iseva enedatabase ebizwa ngokuba "ssmp", ibekwe kwindawo yomboneleli odumileyo wokubamba uHetzner eJamani.
Ngokusekelwe kubungqina obungathanga ngqo, kwakunokwenzeka ukuchonga umnini otyholwa ngumncedisi kunye nedatha-inkampani yaseRashiya LLC "Iinkqubo zeComputer Intelligent".
Kwiphepha c-i-systems.com/solutions/programs-smp/, inkampani isixelela:
I-EMS CIS yimveliso yesoftware eyenzelwe ukwenza ngokuzenzekelayo ukusebenza kwezitishi ezingxamisekileyo (ezikhethekileyo) zokhathalelo lwezonyango (EMS) ngaphakathi kwemida yecandelo le-Russian Federation kwaye ibonelela:
- ukufumana iminxeba;
- ukubhaliswa komnxeba kunye nokwalathisa;
- ukuqulunqwa, ukubeka iliso nokulawula amaqela ahambahambayo ezikhululo ze-EMS;
- ukuthunyelwa kwakhona ngobuninzi bamaqela eenkonzo zonyango ezingxamisekileyo ngexesha lokuphendula ngokukhawuleza;
- ukusebenza kweziko le-EMS elilodwa lokuqhuba iifowuni;
- utshintshiselwano lwedatha kunye neenkqubo zolwazi lwangaphandle.
Iziko ledatha laliyi-17.3 GB ngobukhulu kwaye liqulathe:
- umhla/ixesha lokufowuna likaxakeka
- Igama elipheleleyo labasebenzi be-ambulensi (kubandakanywa nomqhubi)
- inombolo yepleyiti yenqwelo yezigulana
- ubume bemoto yeambulensi (umzekelo, “ukufika xa ufowuna”)
- biza idilesi
- Igama elipheleleyo, umhla wokuzalwa, isini sesigulana
- Inkcazo yemeko yesigulana (umzekelo, “iqondo lobushushu>39, liyancipha kakubi, umntu omdala”)
- Igama elipheleleyo lomntu obize i-ambulensi
- inombolo YOQHAGAMSHELWANO
- nokunye okuninzi…
Idatha ekwisiseko sedatha ifana nelogi yolunye uhlobo lokuhlola/ukulandelela inkqubo yenkqubo yokugqiba umsebenzi. Inomdla yintsimi "idata"etafileni"abela_data_imbali».
(Ngokuqinisekileyo, kumfanekiso ongasentla ndizamile ukufihla yonke idatha yomntu.)
Njengoko kwakubhaliwe kwasekuqaleni, ukunqongophala kobungqina akukuphela kwengxaki ngeli xesha.
Eyona nto ibalulekileyo kukuba le datha yafunyanwa kuqala ngabahlaseli baseUkraine kwiqela THack3forU, eshiya imiyalezo eyahlukileyo kwi-MongoDB efunyenweyo kwaye itshabalalise ulwazi. Ngeli xesha amakhwenkwe azahlula ngale nto:
“Igqekezwe nguTHhack3forU! UChanel.nPutin ligeza,nMeddvédeva ligeza,nStrelkov libhanxa,nRussia yiBOTTOM!”
kwaye ngokuqinisekileyo inyani yokuba, emva kokukhuphela yonke i-17 GB, bayithumela ngefomathi ye-CSV kwifayile yokubamba I-Mega.nz. Malunga nendlela evuleleke ngayo i-database ye-MongoDB efunyenwe - .
Ngokukhawuleza ukuba umnini wedatha echongiwe, ndamthumelela isaziso ngesiphakamiso sokuvala ukufikelela kwisiseko sedatha, nangona kwakusele kusemva kwexesha - idatha "yayihamba."
Injini yokukhangela yokuqala UShodan irekhodwe le database ngomhla we-28.06.2018/08.04.2019/17, kwaye ukufikelela kuyo yavalwa ekugqibeleni ngomhla we-20/18/05, kwindawo ethile phakathi kwe-6:XNUMX kunye ne-XNUMX:XNUMX (ixesha laseMoscow). Kancinci ngaphantsi kweeyure ezi-XNUMX zidlulile ukususela kwisaziso.
Iindaba malunga nokuvuza kolwazi kunye nabangaphakathi banokuhlala befumaneka kwijelo lam leTelegram "».
umthombo: www.habr.com