03-12-2024, 09:52 AM
target: devops.banregio.com
Size - 340mb
Type - doc / xlsx / csv / sql / html
Access to the control panel was obtained by decision of malfunctions and errors,
this followed the export of all projects attachments, namely, data in the HTML format with screenshots.
They have a lot of data to various admin panels, ftp access, server log files and etc.
What to do with it? You can do a lot of things, for example, find the admin panels of their clients as well as databases and accesses.
There is a lot of information and it's up to you.
Files in the data
![[Image: FYvag4n.png]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fi.imgur.com%2FFYvag4n.png)
Size - 340mb
Type - doc / xlsx / csv / sql / html
Access to the control panel was obtained by decision of malfunctions and errors,
this followed the export of all projects attachments, namely, data in the HTML format with screenshots.
They have a lot of data to various admin panels, ftp access, server log files and etc.
What to do with it? You can do a lot of things, for example, find the admin panels of their clients as well as databases and accesses.
There is a lot of information and it's up to you.
Files in the data
banking:
redis-session: true
session-time: 3600
biometrics-key: '1234567812345678'
cache:
unificacion:
enabled: true
configuration:
applications:
BEE: # Banca electronica empresarial
application-id: 1
next-application-key: BANCA_EMPRESARIAL
platform: banregio
BIZ: # Hey Biz
application-id: 2
next-application-key: BANCA_EMPRESARIAL
platform: heybanco
BEF: # Banca electronica personas fisicas
application-id: 3
next-application-key: BANCA_EMPRESARIAL
platform: banregio
YOU: # Hey You
application-id: 4
next-application-key: BANCA_EMPRESARIAL
platform: heybanco
APB: # App Banregio
application-id: 5
next-application-key: PLATAFORMA_NARANJA
platform: banregio
mobile: true
APH: # App Hey
application-id: 6
next-application-key: PLATAFORMA_NARANJA
platform: heybanco
mobile: true
PAG: # Hey pago
application-id: 7
next-application-key: HEY_PAGO
platform: banregio
W10: # W10 banregio personas
application-id: 11
ttlSession": 1200
kr-users:
ribbon:
listOfServers: http://kr-users.nebael.svc.cluster.local:8080
uri: kr-users
be-usuario-pos:
ribbon:
listOfServers: http://be-usuario-pos.nebael.svc.cluster.local:8080
uri: be-usuario-pos
be-cuenta-origen-pos:
ribbon:
listOfServers: http://be-cuenta-origen-pos.nebael.svc.cluster.local:8080
uri: be-cuenta-origen-pos
be-tarjeta-origen-pos:
ribbon:
listOfServers: http://be-tarjeta-origen-pos.nebael.svc.cluster.local:8080
uri: be-tarjeta-origen-pos
be-empresa-pos:
ribbon:
listOfServers: http://be-empresa-pos.nebael.svc.cluster.local:8080
uri: be-empresa-pos
kr-tokens:
ribbon:
listOfServers: http://kr-tokens.nebael.svc.cluster.local:8080
uri: kr-tokens
seguridad:
ribbon:
listOfServers: http://seguridad.neco.svc.cluster.local:8080
uri: seguridad
pdf-biometria-movil:
ribbon:
listOfServers: http://pdf-biometria-movil.nepn.svc.cluster.local:8080
uri: pdf-biometria-movil
sibamex-cliente:
ribbon:
listOfServers: http://sibamex-cliente.nesib.svc.cluster.local:8080
uri: sibamex-cliente
sibamex-nuevabanca:
ribbon:
listOfServers: http://sibamex-nuevabanca.nesib.svc.cluster.local:8080
uri: sibamex-nuevabanca
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
2 Aceptar el pull request de la rama NEBAEL/kr-sessions: release/DEVOPS1-10469-v1.0.0 a master
2.1 Crear el ms en namespace NEBAEL
2.2 Obtener ruta de ms para agregarlo a ymls de pasos posteriores
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
3. Crear YML nuevo en NEBAEL: kr-login.yml
3.1 Verificar que las rutas internas de los ms correspondan al ambiente correcto en el campo
Ambiente banregio
banking:
brand: banregio
HSM-validation: false
url: brmpaplica.banregio.com
port: 8950
ip: 10.1.1.7
Ambiente Hey
banking:
brand: heybanco
HSM-validation: false
url: hbo1paaplica.hey.inc
port: 8950
ip: 10.4.72.24
# Configuraciones para los aplicativos usados por este ms
caller-id:
country: 52
banking:
block-by-attempts: false
legacy-banking-session: false
legacy:
active:
false
geolocation:
enabled: true
racal:
base-encrypt-key: 85C2DCA4CBCED3DF
token-validation: false
configuration:
applications:
BEE: # Banca electronica empresarial
application-id: 1
profile-type-id: 1
multiple-banking-types: 1,9
ttl-session: 1200
encrypted-type: BASE64
encrypted-key: true
validate-geolocation-service: true
physical-profile-validation: false
customer-level-validation: false
require-token-validation: true
BIZ: # Hey Biz
application-id: 2
profile-type-id: 4
multiple-banking-types: 2,9
ttl-session: 1200
encrypted-type: BASE64
encrypted-key: true
validate-geolocation-service: true
physical-profile-validation: false
customer-level-validation: true
require-token-validation: true
BEF: # Banca electronica personas fisicas
application-id: 3
profile-type-id: 5
multiple-banking-types: 3,9
ttl-session: 1200
encrypted-type: BASE64
encrypted-key: true
validate-geolocation-service: true
physical-profile-validation: true
customer-level-validation: false
invalid-user-flow: true
YOU: # Hey You
application-id: 4
profile-type-id: 6
multiple-banking-types: 2,4,6,9
ttl-session: 1200
encrypted-type: BASE64
encrypted-key: true
validate-geolocation-service: true
physical-profile-validation: true
customer-level-validation: false
validate-context-display: true
APB: # App Banregio
application-id: 5
profile-type-id: 5
ttl-session: 1200
multiple-banking-types: 1,3,9
encrypted-type: BASE64
encrypted-key: false
validate-basic-user: true
validate-phone-number: true
validate-geolocation-service: true
physical-profile-validation: true
customer-level-validation: false
validate-redis-session: false
is-mobile: true
validate-logout-user: true
mobile-blocked-user-notification-platform: banregio
APH: # App Hey
application-id: 6
profile-type-id: 6
ttl-session: 1200
multiple-banking-types: 2,4,9
mobile-blocked-user-notification-platform: heybanco
app-profiles-platform: heybanco
encrypted-type: BASE64
encrypted-key: false
is-mobile: true
validate-geolocation-service: true
physical-profile-validation: true
customer-level-validation: false
validates-mobile-token: true
validate-redis-session: true
validate-users-restriction: true
validate-active-request: true
need-app-profiles: true
send-blocked-user-notification: true
need-app-profiles: true
app-profiles-platform: heybanco
PAG: # Hey pago
application-id: 7
profile-type-id: 7
multiple-banking-types: 5,9
ttl-session: 1200
encrypted-type: BASE64
encrypted-key: true
validate-geolocation-service: false
physical-profile-validation: false
customer-level-validation: false
W10: # W10 banregio personas
application-id: 11
ttlSession": 1200
#Estas configuraciones se agregan dependiendo de los servicios remotos que se utilizarán
kr-authentications:
ribbon:
listOfServers: http://kr-authentications.nebael.svc.cluster.local:8080
uri: kr-authentications
kr-tokens:
ribbon:
listOfServers: http://kr-tokens.nebael.svc.cluster.local:8080
uri: kr-tokens
kr-users:
ribbon:
listOfServers: http://kr-users.nebael.svc.cluster.local:8080
uri: kr-users
kr-sessions:
ribbon:
listOfServers: (poner valor obtenido en paso 9.2)
uri: kr-sessions
nivel-cliente:
ribbon:
listOfServers: http://nivel-cliente.next-sucursales.svc.cluster.local:8080
uri: nivel-cliente
hey-usuarios:
ribbon:
listOfServers: http://hey-usuarios.nepn.svc.cluster.local:8080
uri: hey-usuarios
ocw-solicitud:
ribbon:
listOfServers: http://ocw-solicitud.nocwsep.svc.cluster.local:8080
uri: ocw-solicitud
pn-banca-seguridad:
ribbon:
listOfServers: http://pn-banca-seguridad.nepn.svc.cluster.local:8080
uri: pn-banca-seguridad
onboarding:
ribbon:
listOfServers: http://onboarding.nepn.svc.cluster.local:8080
uri: onboarding
pn-lite-seguridad:
ribbon:
listOfServers: http://pn-lite-seguridad.nepn.svc.cluster.local:8080
uri: pn-lite-seguridad
geolocalizacion-clientes:
ribbon:
listOfServers: http://geolocalizacion-clientes.nepn.svc.cluster.local:8080
uri: geolocalizacion-clientes
sibamex-banca-login:
ribbon:
listOfServers: http://sibamex-banca-login.nesib.svc.cluster.local:8080
uri: sibamex-banca-login
sibamex-be-usuario:
ribbon:
listOfServers: http://sibamex-be-usuario.nesib.svc.cluster.local:8080
uri: sibamex-be-usuario
usuario-identidad-pos:
ribbon:
listOfServers: http://usuario-identidad-pos.nebael.svc.cluster.local:8080
uri: usuario-identidad-pos
sibamex-family:
ribbon:
listOfServers: http://sibamex-family.nesib.svc.cluster.local:8080
uri: sibamex-family
be-bitacora-pos:
ribbon:
listOfServers: http://be-bitacora-pos.nebael.svc.cluster.local:8080
uri: be-bitacora-pos
be-parametro-pos:
ribbon:
listOfServers: http://be-parametro-pos.nebael.svc.cluster.local:8080
uri: be-parametro-pos
pn-banca-racal:
ribbon:
listOfServers: http://pn-banca-racal.nepn.svc.cluster.local:8080
uri: pn-banca-racal
perfiles-app:
ribbon:
listOfServers: http://perfiles-app.nepn.svc.cluster.local:8080
uri: perfiles-app
sibamex-cliente:
ribbon:
listOfServers: http://sibamex-cliente.nesib.svc.cluster.local:8080
uri: sibamex-cliente
sibamex-hsm:
ribbon:
listOfServers: http://sibamex-hsm.nebael.svc.cluster.local:8080
uri: sibamex-hsm
sibamex-parametro:
ribbon:
listOfServers: http://sibamex-parametro.nesib.svc.cluster.local:8080
uri: sibamex-parametro
sibamex-nuevabanca:
ribbon:
listOfServers: http://sibamex-nuevabanca.nesib.svc.cluster.local:8080
uri: sibamex-nuevabanca
be-notificacion-orq:
ribbon:
listOfServers: http://be-notificacion-orq.nebael.svc.cluster.local:8080
uri: be-notificacion-orq
kr-operations-log-mq:
ribbon:
listOfServers: http://kr-operations-log-mq.nextht.svc.cluster.local:8080
uri: kr-operations-log-mq
pn-seguridad:
ribbon:
listOfServers: http://pn-seguridad.nepn.svc.cluster.local:8080
uri: pn-seguridad
correos:
ribbon:
listOfServers: http://correos.nextsh.svc.cluster.local:8080
uri: correos
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
4 Aceptar el pull request de la rama NEBAEL/kr-login: release/DEVOPS1-10469-v1.0.0 a master
4.1 Crear el ms en namespace NEBAEL
------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------
5. Crear YML nuevo en NEBAEL: kr-login-web-orq.yml y agregar las siguientes líneas:
kr-login:
ribbon:
listOfServers: http://kr-login.nebael.svc.cluster.local:8080
uri: kr-login
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
6 Aceptar el pull request de la rama NEBAEL/kr-login-web-orq: release/DEVOPS1-10469-v1.0.0 a master
6.1 Crear el ms en namespace NEBAEL
6.2 Obtener ruta interna de ms para agregarlo a ymls de pasos posteriores
------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------
7. Crear YML nuevo en NEBAEL: kr-login-mobile-orq.yml y agregar las siguientes líneas:
kr-login:
ribbon:
listOfServers: http://kr-login.nebael.svc.cluster.local:8080
uri: kr-login
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
8 Aceptar el pull request de la rama NEBAEL/kr-login-mobile-orq: release/DEVOPS1-10469-v1.0.0 a master
8.1 Crear el ms en namespace NEBAEL
8.2 Obtener ruta interna de ms para agregarlo a ymls de pasos posteriores
------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------
9. Crear YML nuevo en NEBAEL: kr-login-third-orq.yml y agregar las siguientes líneas:
kr-login:
ribbon:
listOfServers: http://kr-login.nebael.svc.cluster.local:8080
uri: kr-login
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
10 Aceptar el pull request de la rama NEBAEL/kr-login-third-orq: release/DEVOPS1-10469-v1.0.0 a master
10.1 Crear el ms en namespace NEBAEL
10.2 Obtener ruta interna de ms para agregarlo a ymls de pasos posteriores
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
11 Aceptar el pull request de la rama NECO/seguridad: release/DEVOPS1-10469-v1.3.0 a master
11.1 Hacer Start Build a NECO/seguridad
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
12 Aceptar el pull request de la rama NEBAEL/usuario-identidad-pos: release/DEVOPS1-10469-v2.4.20 a master
12.1 Crear el ms en namespace NEBAEL
------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------
13. Ingresar a Admon seguridad de ambiente cada ambiente (banregio y hey) y seguir los pasos del archivo admon_seguridad_configuracion.v2
.txt
14. modificar YML en NEBAEL: kr-users.yml y cambiar las siguientes líneas (Llenando username y password RESPECTIVAS DE CADA AMBIENTE) para la bd be_usuario:
datasource:
tomcat:
url:
username:
password:
14.1. Usuario para db en ambiente banregio:
Usuario Banregio: BRPUSERS
Ticket: 116638
14.2. Usuario para db en ambiente hey:
Usuario Hey: HEYPUSERS
Ticket: 116636
14.3. Hacer deploy a ms NEBAEL/kr-users
