02-10-2025, 03:26 PM
Hello, world.
I am selling full access to a large F&B (Food & Beverage) group of a restaurant chain in Vietnam. This includes:
- Domain Admin rights/accounts.
- Internal network access tunnel.
- All user account information in the domain, including NTLM hashes.
- Anything else you may need - I have compromised all systems within this company, I can access to CEO's email, haha.
Price: 0.5 BTC for full access, including a post-exploit guide.
Some evidence:
Commend or PM to email: ahs0kai0@proton.me
I am selling full access to a large F&B (Food & Beverage) group of a restaurant chain in Vietnam. This includes:
- Domain Admin rights/accounts.
- Internal network access tunnel.
- All user account information in the domain, including NTLM hashes.
- Anything else you may need - I have compromised all systems within this company, I can access to CEO's email, haha.
Price: 0.5 BTC for full access, including a post-exploit guide.
Some evidence:
Some internal IP.
172.20.23.154 445 TGS-MIGRATE
172.20.23.23 445 POPORTAL-UAT
172.20.23.25 445 DMP-UAT-01
172.20.23.27 445 GHERO-ERP-UAT
172.20.23.38 445 GSURVEY-UAT
172.20.23.39 445 MATERIALS-UAT
172.20.23.40 445 DMP-DB
172.20.28.163 445 WIN-K25AP0IC4HR
172.20.28.165 445 GGG-MAIL-RES
172.20.28.168 445 GSURVEY-APP
172.20.28.169 445 MATERIALS-PROD
172.20.28.224 445 DWH-FCHCM01
172.20.28.36 445 HRM-WEB
172.20.28.37 445 HRM-CVTOOL
172.20.28.38 445 GHEROAPPPROD
172.20.28.39 445 GOBACKENDPROD
172.20.28.40 445 REDISCACHEDPROD
172.20.28.41 445 IMSSOPROD
172.20.28.42 445 E-LEARNING-APP
172.20.28.45 445 SCPLANNINGAPP
172.20.28.46 445 MYSTERYSHOP-APP
172.20.28.49 445 POPORTALHN-APP
172.20.28.50 445 POPORTALHCM-APP
172.20.28.61 445 GHERORESCAHE
172.20.28.72 445 GRMS-WEB01
172.20.28.73 445 DMP-GATEWAY
172.20.28.75 445 VAT-THUYTA
172.20.29.10 445 DBSSOPROD
172.20.29.11 445 E-LEARNING-DB
172.20.29.12 445 GRMS-DB
172.20.29.13 445 DMP-DB
172.20.29.15 445 POPORTAL-HN-DB
172.20.29.16 445 POPORTALHCM-DB
172.20.29.21 445 GHERO-DB-PRODUC
172.20.29.22 445 SCPLANNINGDB
172.20.29.23 445 MYSTERYSHOP-DB
172.20.29.30 445 GHERO-COLLECT
172.20.29.37 445 WIN-K25AP0IC4HR
172.20.29.38 445 GSURVEY-DB
172.20.29.7 445 HRM-DB
172.20.29.8 445 ECHECKLISTDBPRO
172.20.29.9 445 GODBPROD
DB services:
172.20.23.25 445 DMP-UAT-01 1433 MSSQL
172.20.23.27 445 GHERO-ERP-UAT 1433 MSSQL
172.20.23.38 445 GSURVEY-UAT 1433 MSSQL
172.20.28.224 445 DWH-FCHCM01 1433 MSSQL
172.20.28.75 445 VAT-THUYTA 1433 MSSQL
172.20.29.10 445 DBSSOPROD 1433 MSSQL
172.20.29.11 445 E-LEARNING-DB 1433 MSSQL
172.20.29.12 445 GRMS-DB 1433 MSSQL
172.20.29.13 445 DMP-DB 1433 MSSQL
172.20.29.15 445 POPORTAL-HN-DB 1433 MSSQL
172.20.29.16 445 POPORTALHCM-DB 1433 MSSQL
172.20.29.21 445 GHERO-DB-PRODUC 1433 MSSQL
172.20.29.22 445 SCPLANNINGDB 1433 MSSQL
172.20.29.23 445 MYSTERYSHOP-DB 1433 MSSQL
172.20.29.30 445 GHERO-COLLECT 1433 MSSQL
172.20.29.38 445 GSURVEY-DB 1433 MSSQL
172.20.29.7 445 HRM-DB 1433 MSSQL
172.20.29.9 445 GODBPROD 3306 MySQL
172.20.23.25 445 DMP-UAT-01 5432 PostgresSQL
172.20.28.73 445 DMP-GATEWAY 5432 PostgresSQL
172.20.28.37 445 HRM-CVTOOL 5432 PostgresSQL
Has connect to internet:
172.20.23.38 445 GSURVEY-UAT
172.20.23.23 445 POPORTAL-UAT
172.20.23.25 445 DMP-UAT-01
172.20.23.40 445 DMP-DB
172.20.23.27 445 GHERO-ERP-UAT
172.20.23.39 445 MATERIALS-UAT
172.20.28.38 445 GHEROAPPPROD
172.20.28.36 445 HRM-WEB
172.20.28.41 445 IMSSOPROD
172.20.28.39 445 GOBACKENDPROD
172.20.28.75 445 VAT-THUYTA
172.20.28.37 445 HRM-CVTOOL
172.20.28.46 445 MYSTERYSHOP-APP
172.20.28.72 445 GRMS-WEB01
172.20.28.49 445 POPORTALHN-APP
172.20.28.50 445 POPORTALHCM-APP
172.20.28.40 445 REDISCACHEDPROD
172.20.28.45 445 SCPLANNINGAPP
172.20.28.42 445 E-LEARNING-APP
172.20.28.73 445 DMP-GATEWAY
172.20.28.61 445 GHERORESCAHE
172.20.28.163 445 WIN-K25AP0IC4HR
172.20.28.165 445 GGG-MAIL-RES
172.20.28.168 445 GSURVEY-APP
172.20.28.169 445 MATERIALS-PROD
172.20.28.224 445 DWH-FCHCM01
172.20.29.13 445 DMP-DBCommend or PM to email: ahs0kai0@proton.me