Logo
Bezbedan Balkan / Bezbednost državnih resursa / Kompromitovani resursi /

Kompromitovane e-mail adrese zaposlenih ite.gov.rs


Threaded Mode
Kompromitovane e-mail adrese zaposlenih ite.gov.rs
VincaSec
Posting Freak
*****
Posts: 945
Threads: 551
Joined: Oct 2023
Reputation: 172
#1

02-10-2024, 01:22 AM
   
   

Code:
"root":[2 items 0:{13 items "date_uploaded":"2023-10-28T00:59:43.117Z" "stealer_family":"Lumma" "computer_name":"porodica----------" "operating_system":"Windows 10 (10.0.19045)" "antiviruses":[]0 items "employee_session_cookies":122 items [100 items 0:{5 items "url":"chat.openai.com" "domain":"openai.com" "name":"cf_clearance" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-08-06T22:06:16.000Z" } 1:{5 items "url":"accounts.google.com" "domain":"google.com" "name":"__Host-3PLSID" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T07:21:15.000Z" } 2:{5 items "url":"amazon.com" "domain":"amazon.com" "name":"x-wl-uid" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2036-01-01T08:00:05.000Z" } 3:{5 items "url":"ebay.com" "domain":"ebay.com" "name":"__uzmc" "value":"••••••••••••" "expiry":"2023-12-11T15:50:29.000Z" } 4:{5 items "url":"accounts.google.com" "domain":"google.com" "name":"__Host-1PLSID" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T07:21:15.000Z" } 5:{5 items "url":"drive.google.com" "domain":"google.com" "name":"OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T04:30:02.000Z" } 6:{5 items "url":"google.com" "domain":"google.com" "name":"NID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-02-06T19:40:04.000Z" } 7:{5 items "url":"mail.google.com" "domain":"google.com" "name":"OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 8:{5 items "url":"accounts.google.com" "domain":"google.com" "name":"LSID" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 9:{5 items "url":"google.com" "domain":"google.com" "name":"SSID" "value":"•••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 10:{5 items "url":"google.com" "domain":"google.com" "name":"__Secure-3PSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 11:{5 items "url":"paypal.com" "domain":"paypal.com" "name":"ui_experience" "value":"•••••••••••••••••••••••••••" "expiry":"2024-01-01T07:13:16.000Z" } 12:{5 items "url":"google.com" "domain":"google.com" "name":"SID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-19T08:13:17.000Z" } 13:{5 items "url":"google.com" "domain":"google.com" "name":"SAPISID" "value":"••••••••••••••••••••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 14:{5 items "url":"accounts.google.com" "domain":"google.com" "name":"__Host-GAPS" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-09-11T21:59:46.000Z" } 15:{5 items "url":"www.linkedin.com" "domain":"linkedin.com" "name":"G_ENABLED_IDPS" "value":"••••••" "expiry":"2024-05-30T20:08:15.000Z" } 16:{5 items "url":"takeout.google.com" "domain":"google.com" "name":"OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T06:49:44.000Z" } 17:{5 items "url":"amazon.com" "domain":"amazon.com" "name":"session-id" "value":"•••••••••••••••••••" "expiry":"2036-01-01T08:00:01.000Z" } 18:{5 items "url":"paypal.com" "domain":"paypal.com" "name":"ddi" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T07:13:17.000Z" } 19:{5 items "url":"takeout.google.com" "domain":"google.com" "name":"OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 20:{5 items "url":"google.com" "domain":"google.com" "name":"HSID" "value":"•••••••••••••••••" "expiry":"2024-01-19T08:13:17.000Z" } 21:{5 items "url":"paypal.com" "domain":"paypal.com" "name":"cookie_prefs" "value":"••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T07:13:18.000Z" } 22:{5 items "url":"www.dropbox.com" "domain":"dropbox.com" "name":"lid" "value":"••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-03-02T23:24:05.000Z" } 23:{5 items "url":"paypal.com" "domain":"paypal.com" "name":"d_id" "value":"•••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T07:13:00.000Z" } 24:{5 items "url":"dropbox.com" "domain":"dropbox.com" "name":"t" "value":"••••••••••••••••••••••••" "expiry":"2024-03-06T00:26:54.000Z" } 25:{5 items "url":"paypal.com" "domain":"paypal.com" "name":"enforce_policy" "value":"••••••" "expiry":"2024-01-01T07:14:10.000Z" } 26:{5 items "url":"google.com" "domain":"google.com" "name":"__Secure-1PSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 27:{5 items "url":"google.com" "domain":"google.com" "name":"AEC" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-02-03T23:14:33.000Z" } 28:{5 items "url":"dropbox.com" "domain":"dropbox.com" "name":"db-help-center-uid" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-03-02T23:24:05.000Z" } 29:{5 items "url":"google.com" "domain":"google.com" "name":"SIDCC" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-08-18T23:09:18.000Z" } 30:{5 items "url":"google.com" "domain":"google.com" "name":"SIDCC" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-02-17T21:24:22.000Z" } 31:{5 items "url":"ebay.com" "domain":"ebay.com" "name":"__uzmf" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2023-12-11T15:50:29.000Z" } 32:{5 items "url":"paypal.com" "domain":"paypal.com" "name":"login_email" "value":"•••••••••••••••••••" "expiry":"2024-01-01T07:13:16.000Z" } 33:{5 items "url":"google.com" "domain":"google.com" "name":"NID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-02-11T22:14:07.000Z" } 34:{5 items "url":"google.com" "domain":"google.com" "name":"__Secure-3PSIDCC" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-08-18T23:09:18.000Z" } 35:{5 items "url":"ebay.com" "domain":"ebay.com" "name":"nonsession" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2023-12-11T15:53:25.000Z" } 36:{5 items "url":"ebay.com" "domain":"ebay.com" "name":"__uzmd" "value":"••••••••••" "expiry":"2023-12-11T15:50:29.000Z" } 37:{5 items "url":"google.com" "domain":"google.com" "name":"__Secure-1PAPISID" "value":"••••••••••••••••••••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 38:{5 items "url":"ebay.com" "domain":"ebay.com" "name":"__uzme" "value":"••••" "expiry":"2023-12-11T15:50:29.000Z" } 39:{5 items "url":"google.com" "domain":"google.com" "name":"__Secure-3PSIDCC" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-02-17T21:24:22.000Z" } 40:{5 items "url":"ebay.com" "domain":"ebay.com" "name":"ns1" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2023-12-11T15:53:25.000Z" } 41:{5 items "url":"google.com" "domain":"google.com" "name":"__Secure-3PAPISID" "value":"••••••••••••••••••••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 42:{5 items "url":"google.com" "domain":"google.com" "name":"SAPISID" "value":"••••••••••••••••••••••••••••••••••" "expiry":"2024-01-19T08:13:17.000Z" } 43:{5 items "url":"google.com" "domain":"google.com" "name":"APISID" "value":"••••••••••••••••••••••••••••••••••" "expiry":"2024-01-19T08:13:17.000Z" } 44:{5 items "url":"google.com" "domain":"google.com" "name":"APISID" "value":"••••••••••••••••••••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 45:{5 items "url":"login.live.com" "domain":"live.com" "name":"WLOpt" "value":"••••••••••••••••••" "expiry":"2037-12-30T16:00:02.000Z" } 46:{5 items "url":"google.com" "domain":"google.com" "name":"HSID" "value":"•••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 47:{5 items "url":"facebook.com" "domain":"facebook.com" "name":"xs" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T06:27:20.000Z" } 48:{5 items "url":"accounts.google.com" "domain":"google.com" "name":"ACCOUNT_CHOOSER" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-04-08T08:31:11.000Z" } 49:{5 items "url":"amazon.com" "domain":"amazon.com" "name":"ubid-main" "value":"•••••••••••••••••••" "expiry":"2036-01-01T08:00:06.000Z" } 50:{5 items "url":"takeout.google.com" "domain":"google.com" "name":"__Secure-OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 51:{5 items "url":"developers.google.com" "domain":"google.com" "name":"_ga_devsite" "value":"••••••••••••••••••••••••••" "expiry":"2024-02-17T06:54:57.000Z" } 52:{5 items "url":"facebook.com" "domain":"facebook.com" "name":"datr" "value":"••••••••••••••••••••••••" "expiry":"2024-01-01T06:27:20.000Z" } 53:{5 items "url":"amazon.com" "domain":"amazon.com" "name":"session-id-time" "value":"•••••••••••" "expiry":"2036-01-01T08:00:06.000Z" } 54:{5 items "url":"ebay.com" "domain":"ebay.com" "name":"__uzmb" "value":"••••••••••" "expiry":"2023-12-11T15:50:29.000Z" } 55:{5 items "url":"chrome.google.com" "domain":"google.com" "name":"__utma" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-02-27T20:01:40.000Z" } 56:{5 items "url":"mail.google.com" "domain":"google.com" "name":"OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-19T08:13:17.000Z" } 57:{5 items "url":"accounts.google.com" "domain":"google.com" "name":"__Host-1PLSID" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 58:{5 items "url":"amazon.com" "domain":"amazon.com" "name":"session-token" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2036-01-01T08:00:05.000Z" } 59:{5 items "url":"mail.google.com" "domain":"google.com" "name":"__Secure-OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 60:{5 items "url":"drive.google.com" "domain":"google.com" "name":"__Secure-OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T04:30:02.000Z" } 61:{5 items "url":"ebay.com" "domain":"ebay.com" "name":"dp1" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2023-12-11T15:53:25.000Z" } 62:{5 items "url":"www.dropbox.com" "domain":"dropbox.com" "name":"jar" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-03-02T23:24:05.000Z" } 63:{5 items "url":"adobe.com" "domain":"adobe.com" "name":"s_ecid" "value":"••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T06:01:54.000Z" } 64:{5 items "url":"google.com" "domain":"google.com" "name":"AID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-05-31T07:00:25.000Z" } 65:{5 items "url":"google.com" "domain":"google.com" "name":"__Secure-1PSIDCC" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-08-18T23:09:18.000Z" } 66:{5 items "url":"auth0.openai.com" "domain":"openai.com" "name":"did" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-05-06T23:27:27.000Z" } 67:{5 items "url":"chat.google.com" "domain":"google.com" "name":"__Secure-OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 68:{5 items "url":"www.dropbox.com" "domain":"dropbox.com" "name":"gvc" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2026-03-02T23:24:05.000Z" } 69:{5 items "url":"dropbox.com" "domain":"dropbox.com" "name":"last_active_role" "value":"••••••••" "expiry":"2024-03-02T23:24:56.000Z" } 70:{5 items "url":"google.com" "domain":"google.com" "name":"SNID" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-02-06T23:15:08.000Z" } 71:{5 items "url":"amazon.com" "domain":"amazon.com" "name":"session-id" "value":"•••••••••••••••••••" "expiry":"2036-01-01T08:00:06.000Z" } 72:{5 items "url":"facebook.com" "domain":"facebook.com" "name":"c_user" "value":"••••••••••" "expiry":"2024-01-01T06:27:20.000Z" } 73:{5 items "url":"amazon.com" "domain":"amazon.com" "name":"sp-cdn" "value":"•••••••••" "expiry":"2036-01-01T08:00:05.000Z" } 74:{5 items "url":"google.com" "domain":"google.com" "name":"SID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 75:{5 items "url":"chat.google.com" "domain":"google.com" "name":"OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 76:{5 items "url":"google.com" "domain":"google.com" "name":"__Secure-1PSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-19T08:13:17.000Z" } 77:{5 items "url":"live.com" "domain":"live.com" "name":"MH" "value":"••••" "expiry":"2037-12-30T16:00:01.000Z" } 78:{5 items "url":"dropbox.com" "domain":"dropbox.com" "name":"locale" "value":"••" "expiry":"2026-03-02T23:24:05.000Z" } 79:{5 items "url":"ebay.com" "domain":"ebay.com" "name":"cid" "value":"•••••••••••••••••••••••••••••" "expiry":"2023-12-11T15:49:45.000Z" } 80:{5 items "url":"google.com" "domain":"google.com" "name":"SNID" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2023-12-01T13:07:58.000Z" } 81:{5 items "url":"www.dropbox.com" "domain":"dropbox.com" "name":"__Host-js_csrf" "value":"••••••••••••••••••••••••" "expiry":"2024-03-06T00:26:54.000Z" } 82:{5 items "url":"google.com" "domain":"google.com" "name":"__Secure-1PAPISID" "value":"••••••••••••••••••••••••••••••••••" "expiry":"2024-01-19T08:13:17.000Z" } 83:{5 items "url":"google.com" "domain":"google.com" "name":"__Secure-1PSIDCC" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-02-17T21:24:22.000Z" } 84:{5 items "url":"takeout.google.com" "domain":"google.com" "name":"__Secure-OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T06:49:44.000Z" } 85:{5 items "url":"google.com" "domain":"google.com" "name":"__Secure-3PAPISID" "value":"••••••••••••••••••••••••••••••••••" "expiry":"2024-01-19T08:13:17.000Z" } 86:{5 items "url":"play.google.com" "domain":"google.com" "name":"__Secure-OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T07:20:20.000Z" } 87:{5 items "url":"dropbox.com" "domain":"dropbox.com" "name":"bjar" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-03-02T23:24:05.000Z" } 88:{5 items "url":"auth0.openai.com" "domain":"openai.com" "name":"did_compat" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-05-06T23:27:27.000Z" } 89:{5 items "url":"play.google.com" "domain":"google.com" "name":"OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T07:20:20.000Z" } 90:{5 items "url":"c.paypal.com" "domain":"paypal.com" "name":"sc_f" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T07:13:18.000Z" } 91:{5 items "url":"accounts.google.com" "domain":"google.com" "name":"__Host-3PLSID" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 92:{5 items "url":"google.com" "domain":"google.com" "name":"SEARCH_SAMESITE" "value":"••••••••" "expiry":"2023-11-04T04:31:45.000Z" } 93:{5 items "url":"linkedin.com" "domain":"linkedin.com" "name":"bcookie" "value":"••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-08-06T22:25:33.000Z" } 94:{5 items "url":"amazon.com" "domain":"amazon.com" "name":"session-id-time" "value":"•••••••••••" "expiry":"2036-01-01T08:00:01.000Z" } 95:{5 items "url":"amazon.com" "domain":"amazon.com" "name":"session-token" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2036-01-01T08:00:01.000Z" } 96:{5 items "url":"linkedin.com" "domain":"linkedin.com" "name":"bcookie" "value":"••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-05-06T17:34:36.000Z" } 97:{5 items "url":"play.google.com" "domain":"google.com" "name":"OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 98:{5 items "url":"chat-dl.google.com" "domain":"google.com" "name":"__Secure-OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-04-08T08:31:11.000Z" } 99:{5 items "url":"chat-dl.google.com" "domain":"google.com" "name":"OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-04-08T08:31:11.000Z" } ] [22 items 100:{5 items "url":"accounts.google.com" "domain":"google.com" "name":"LSID" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T07:21:15.000Z" } 101:{5 items "url":"www.researchgate.net" "domain":"researchgate.net" "name":"ptc" "value":"••••••••••••••••••••••••••••••••••" "expiry":"2024-02-18T07:40:32.000Z" } 102:{5 items "url":"ebay.com" "domain":"ebay.com" "name":"__deba" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2023-12-11T15:52:45.000Z" } 103:{5 items "url":"paypal.com" "domain":"paypal.com" "name":"cookie_check" "value":"•••" "expiry":"2024-01-01T07:13:00.000Z" } 104:{5 items "url":"paypal.com" "domain":"paypal.com" "name":"ts_c" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T07:14:11.000Z" } 105:{5 items "url":"accounts.google.com" "domain":"google.com" "name":"__Host-GAPS" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T07:21:15.000Z" } 106:{5 items "url":"facebook.com" "domain":"facebook.com" "name":"sb" "value":"••••••••••••••••••••••••" "expiry":"2024-01-17T17:14:40.000Z" } 107:{5 items "url":"play.google.com" "domain":"google.com" "name":"__Secure-OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-09-10T22:05:53.000Z" } 108:{5 items "url":"paypal.com" "domain":"paypal.com" "name":"ts" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T07:14:11.000Z" } 109:{5 items "url":"paypal.com" "domain":"paypal.com" "name":"KHcl0EuY7AKSMgfvHl7J5E7hPtK" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T07:13:17.000Z" } 110:{5 items "url":"adobe.com" "domain":"adobe.com" "name":"kndctr_9E1005A551ED61CA0A490D45_AdobeOrg_identity" "value":"••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-02-17T20:40:53.000Z" } 111:{5 items "url":"photos.google.com" "domain":"google.com" "name":"__Secure-OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T04:30:19.000Z" } 112:{5 items "url":"amazon.com" "domain":"amazon.com" "name":"i18n-prefs" "value":"•••" "expiry":"2036-01-01T08:00:05.000Z" } 113:{5 items "url":"google.com" "domain":"google.com" "name":"SSID" "value":"•••••••••••••••••" "expiry":"2024-01-19T08:13:17.000Z" } 114:{5 items "url":"mail.google.com" "domain":"google.com" "name":"__Secure-OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-19T08:13:17.000Z" } 115:{5 items "url":"ebay.com" "domain":"ebay.com" "name":"__uzma" "value":"••••••••••••••••••••••••••••••••••••" "expiry":"2023-12-11T15:50:29.000Z" } 116:{5 items "url":"photos.google.com" "domain":"google.com" "name":"OSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-01T04:30:19.000Z" } 117:{5 items "url":"dropbox.com" "domain":"dropbox.com" "name":"blid" "value":"••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-03-02T23:24:05.000Z" } 118:{5 items "url":"openai.com" "domain":"openai.com" "name":"intercom-device-id-dgkjq2bp" "value":"••••••••••••••••••••••••••••••••••••" "expiry":"2024-02-07T22:20:07.000Z" } 119:{5 items "url":"google.com" "domain":"google.com" "name":"__Secure-3PSID" "value":"•••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••" "expiry":"2024-01-19T08:13:17.000Z" } 120:{5 items "url":"google.com" "domain":"google.com" "name":"CONSENT" "value":"•••••••••••••••••••••••" "expiry":"2038-01-10T07:59:59.000Z" } 121:{5 items "url":"www.dropbox.com" "domain":"dropbox.com" "name":"__Host-ss" "value":"••••••••••" "expiry":"2024-03-06T00:26:54.000Z" } ] "date_compromised":"2023-10-28T00:26:56.758Z" "credentials":[1 item 0:{5 items "type":"employee" "url":"•••••••••••••••••••••" "domain":"ite.gov.rs" "username":"•••••••" "password":"•••••••••••••••••" } ] "stealer":"•••••••••••••••••••" "employeeAt":[...]6 items "clientAt":383 items [0 - 100] [100 - 200] [200 - 300] [300 - 383] "ip":"•••••••••••••••" "malware_path":"•••••••••" } 1:{...}13 items ]
There is no patch for stupidity - Kevin Mitnick
(This post was last modified: 02-10-2024, 02:03 AM by VincaSec.)
Website Find
Reply
VincaSec
Posting Freak
*****
Posts: 945
Threads: 551
Joined: Oct 2023
Reputation: 172
#2

02-10-2024, 01:33 AM
       
There is no patch for stupidity - Kevin Mitnick
Website Find
Reply
VincaSec
Posting Freak
*****
Posts: 945
Threads: 551
Joined: Oct 2023
Reputation: 172
#3

02-10-2024, 02:21 AM
   
   


   
There is no patch for stupidity - Kevin Mitnick
(This post was last modified: 02-14-2024, 03:56 PM by VincaSec.)
Website Find
Reply
1van
Posting Freak
*****
Posts: 1,731
Threads: 666
Joined: Sep 2022
Reputation: 134
#4

02-10-2024, 09:14 PM
mail.gov.rs 195.222.99.252
ite.gov.rs 195.222.99.250
pos.ite.gov.rs 195.222.99.250
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Website Find
Reply
1van
Posting Freak
*****
Posts: 1,731
Threads: 666
Joined: Sep 2022
Reputation: 134
#5

02-10-2024, 09:40 PM
Podaci sa SOCRadar-a ukazuju da ima više kompromitovanih institucija koje koriste POS sistem.
Ovo je izgleda neko iz Bečeja:

Code:
Infected Device - Accounts for "ite.gov.rs" were observed for sale on the Russian Market, On May 02, 2023 {     "country": "RS",     "date": "2023.04.25",     "files": "archive.zip",     "id": "10632084",     "isp": "Sat-Trakt D.O.O.",     "links": [         "192.168.0.1",         "zeroboard.org",         "opensubtitles.org",         "accounts.alluc.ee",         "secure.sorbs.net",         "ers.alsu.gov.rs",         "account.samsung.com",         "tncore.com",         "sso.blic.rs",         "eon.tv",         "demos.telerik.com",         "10.117.2.211",         "knjigoteka.org",         "kinozal.tv",         "asmp.a1.rs",         "gpsurl.com",         "mega.nz",         "asmp.a1.rs",         "login.teamviewer.com",         "eventim.rs",         "login.aliexpress.com",         "192.168.0.5",         "balkandownload.org",         "megasrbija.com",         "accounts.google.com",         "login.live.com",         "euprava.gov.rs",         "signup.liltmedia.com",         "vsetutonline.com",         "apps.spiceworks.com",         "id7.cloud.huawei.com",         "10.117.108.20",         "buyspotify.net",         "sbb.rs",         "192.168.10.208",         "accounts.google.com",         "127.0.0.1",         "192.168.2.40",         "passport.alibaba.com",         "balkandownload.org",         "livetv.sx",         "warez-bb.org",         "192.168.0.1",         "myaccount.google.com",         "192.168.0.50",         "smboemi.com",         "lilplay.com",         "mobile.support.huawei.com",         "a1.rs",         "crowarez.org",         "yubraca.net",         "myqnapcloud.com",         "ottplayer.tv",         "cp10.cpanelhosting.rs",         "panel.paragraf.rs",         "music.spotify.com",         "airdroid.sand.com",         "knjigoteka.org",         "sportsaccess.se",         "balkandownload.org",         "sapgw.mk-group.org",         "users.iptvsmarters.com",         "prijemni.ftn.uns.ac.rs",         "best.aliexpress.com",         "torrenthr.org",         "gateway.hbogo.rs",         "warez-bb.org",         "findmymobile.samsung.com",         "eon.tv",         "facebook.com",         "192.168.2.41",         "login.skype.com",         "megasrbija.com",         "cp10.cpanelhosting.rs",         "rutracker.org",         "herba-srbija.com",         "netflix.com",         "192.168.0.2",         "thirdparty.aliexpress.com",         "edit.duplexiptv.com",         "10.117.2.26",         "speedtest.net",         "localhost",         "propissoft.profisistem.rs",         "serije.online",         "ibm.com",         "moj.stcable.net",         "accounts.spotify.com",         "ssluzba.ftn.uns.ac.rs",         "radiobalkanmusic.com",         "cp10.cpanelhosting.rs",         "eon.tv",         "account.booking.com",         "localhost",         "eon.tv",         "192.168.1.1",         "scribd.com",         "elms.ftn.uns.ac.rs",         "webplayer.stcable.tv",         "servisi.pio.rs",         "5kforchange.org",         "domaci.de",         "stripotekaforum.com",         "novinarnica.net",         "sbb.rs",         "eon.tv",         "edit.duplexiptv.com",         "login.aliexpress.com",         "balkandownload.org",         "aliexpresshd.alibaba.com",         "10.117.2.5",         "rtsplaneta.rs",         "prva.rs",         "freetvall.com",         "megasrbija.com",         "192.168.1.2",         "login.microsoftonline.com",         "rookplay.com",         "a1.rs",         "scribd.com",         "login.live.com",         "accounts.google.com",         "uniportal.huawei.com",         "passport.aliexpress.com",         "freelancer.com",         "sbb.rs",         "netflix.com",         "webmail.stcable.net",         "yts.lt",         "192.168.0.1",         "cp10.cpanelhosting.rs",         "192.168.2.253",         "balkandownload.org",         "sr-rs.facebook.com",         "trust.zone",         "account.qnap.com",         "us04web.zoom.us",         "forum.benchmark.rs",         "mega.nz",         "ottplayer.tv",         "uk-it.us",         "192.168.2.5",         "facebook.com",         "vidbliss.com",         "prijemni.ftn.uns.ac.rs",         "speedtest.net",         "megasrbija.com",         "facebook.com",         "profile.oracle.com",         "192.168.0.1",         "sbb.rs",         "astroconquest.com",         "my.vmware.com",         "login.tidal.com",         "vk.com",         "facebook.com",         "megasrbija.com",         "aliexpress.com",         "edit.duplexiptv.com",         "dropbox.com",         "thetradersden.org",         "reid.apr.gov.rs",         "hungarianpod101.com",         "accounts.spotify.com",         "accounts.google.com",         "accounts.google.com",         "prva.rs",         "192.168.2.1",         "account.samsung.com",         "yubraca.net",         "10.117.2.26",         "accounts.google.com",         "accounts.google.com",         "login.microsoftonline.com",         "sttv.stcable.net",         "moj.stcable.net",         "balkandownload.org",         "livesports-pass.com",         "10.117.2.21",         "192.168.2.26",         "moj.stcable.net",         "kupujemprodajem.com",         "opensubtitles.org",         "megasrbija.com",         "lutrija.rs",         "serbianforum.org",         "accounts.google.com",         "euprava.gov.rs",         "listing.telekom.rs",         "10.117.2.26",         "login.teamviewer.com",         "performancemanager.successfactors.eu",         "accounts.spotify.com",         "serbianforum.org",         "us04web.zoom.us",         "warezhr.org",         "192.168.1.1",         "freelancer.com",         "login.aliexpress.com",         "login.oracle.com",         "warezhr.org",         "webmail.stcable.net",         "vk.com",         "shoppingcart.aliexpress.com",         "reid.apr.gov.rs",         "login.microsoftonline.com",         "vk.com",         "crm.mi-system.co.rs",         "deezer.com",         "demonoid.is",         "10.117.2.1",         "rutracker.org",         "accounts.google.com",         "moj.stcable.net",         "balkandownload.org",         "yubraca.net",         "gpspower.net",         "accounts.google.com",         "signup.lunemedia.com",         "accounts.google.com",         "opensubtitles.org",         "accounts.google.com",         "reid.apr.gov.rs",         "dl.reg.163.com",         "signup.live.com",         "login.live.com",         "account.samsung.com",         "mojtv.net",         "192.168.0.11",         "accounts.google.com",         "warezhr.org",         "192.168.2.21",         "accounts.google.com",         "opensubtitles.org",         "auth.dpass.us.deloitte.com",         "webmail.yunet.rs",         "trakt.tv",         "192.168.0.21",         "192.168.0.11",         "novinarnica.plus",         "balkandownload.org",         "uploadable.ch",         "accounts.google.com",         "radiosumadinac.org",         "accounts.google.com",         "forum.iptvsmarters.com",         "192.168.0.3",         "surveys.kornferry.com",         "sap.com",         "accounts.google.com",         "account.protonvpn.com",         "satelitskiforum.com",         "sr-rs.facebook.com",         "stripotekaforum.com",         "192.168.2.21",         "spotify.com",         "10.117.2.253",         "moj.stcable.net",         "mega.nz",         "192.168.0.11",         "warezhr.org",         "winwin.rs",         "panel.paragraf.rs",         "mojsbb.rs",         "netflix.com",         "englishclass101.com",         "megasrbija.com",         "nitro.download",         "nitroflare.com",         "10.117.2.5",         "mojvip2.vipmobile.rs",         "katana.facebook.com",         "etarskaibiljnaulja.rs",         "login.teamviewer.com",         "morahalomkartya.hu",         "fitpro.xiaofengkj.cn",         "m.facebook.com",         "accounts.lidl.com",         "10.117.2.23",         "outlook.office.microsoft.com",         "skupstina.becej.rs",         "privreda.becej.rs",         "192.168.44.2",         "2baksa.net",         "login.opendns.com",         "192.168.200.1",         "87.237.205.239",         "ecd.rs",         "herbalfun.net",         "pos.ite.gov.rs",         "tobecej1.mycpanel.rs",         "profile.oracle.com",         "esalter.rgz.gov.rs",         "ucinak.skgo.org",         "filmezz.eu",         "timetracking.oblaci.rs",         "192.168.44.6",         "forums.mydigitallife.net",         "192.168.1.1",         "netiks.rs",         "reid.apr.gov.rs",         "portal.mcloud.rs",         "opinionstage.com",         "192.168.111.1",         "demonoid.info",         "helpdesk.pksca.rs",         "informator.eu.meteorapp.com",         "192.168.44.1",         "lexonline.paragraf.rs",         "192.168.44.91",         "192.168.44.11",         "plagiarisma.net",         "87.237.205.239",         "support.smart.rs",         "reid.apr.gov.rs",         "esalter.rgz.gov.rs",         "192.168.44.222",         "erofishki.cc",         "i.btc.com",         "realfishki.net",         "erofishki.cc",         "192.168.44.91",         "ncore.cc",         "filmezz.co",         "212.200.91.145",         "ncore.pro",         "appsrviti-pri",         "192.168.101.1",         "test.becej.rs",         "sttv.stcable.net",         "opinionstage.com",         "192.168.1.100",         "87.237.205.155",         "192.168.44.226",         "informator.eu.meteorapp.com",         "sorozatbarat.online",         "skupstina.becej.rs",         "192.168.44.227",         "netacademia.hu",         "192.168.111.1",         "potisje-becej.rs",         "signup.opendns.com",         "login.yahoo.com",         "nulledbb.com",         "portal.mcloud.rs",         "192.168.44.2",         "ncore.cc",         "91.102.231.142",         "login.oracle.com",         "localhost",         "bithorlo.info",         "videohouse.me",         "localhost",         "188.93.126.42",         "192.168.44.2",         "exchange.ecd.rs",         "localhost",         "account.nexiuslearning.com",         "login.oracle.com",         "192.168.1.1",         "portal.mcloud.rs",         "auth.wetransfer.com",         "nulled.ch",         "coursehero.com",         "global.bittrex.com",         "accounts.google.com",         "wp.2baksa.net",         "192.168.44.2",         "cert.rs",         "ztracker.org",         "192.168.1.1",         "87.237.205.155",         "music.spotify.com",         "stamparijapokloni.com",         "online-prodaja.ribbon-cms.com",         "ims.bentley.com",         "customerconnect.vmware.com",         "pod2.stat.gov.rs",         "twirpx.com",         "activate.hbomax.com",         "play.hbomax.com",         "192.168.1.2",         "noip.com",         "jnportal.ujn.gov.rs",         "bl.flirthits.com",         "webmail.becej.rs",         "github.com",         "account.live.com",         "192.168.0.106",         "192.168.0.106",         "192.168.0.106",         "grammarly.com",         "login.tidal.com",         "192.168.1.1",         "zoom.us",         "skyshowtime.com",         "uptobox.com",         "discord.com",         "yts.mx",         "192.168.44.2",         "istcapi.stat.gov.rs",         "login.microsoftonline.com",         "my.anydesk.com",         "webapi1.srbvoz.rs",         "192.168.45.15",         "becej.rs",         "192.168.11.3",         "accounts.spotify.com",         "forum.titlovi.com",         "192.168.45.1",         "localhost",         "informator.poverenik.rs",         "rik.parlament.gov.rs",         "nitroflare.com",         "turbobit.net",         "login.microsoftonline.com",         "moj.mts.rs",         "mts.rs",         "1fichier.com",         "uptobox.com",         "warez-bb.org",         "netflix.com",         "asmp.a1.rs",         "192.168.1.10",         "asmp.a1.rs",         "passport.alibaba.com",         "a1.rs",         "warez-bb.org",         "english-online.rs",         "192.168.1.1",         "pod2.stat.gov.rs",         "signup.opendns.com",         "pod2.stat.gov.rs",         "facebook.com",         "app.plex.tv",         "192.168.0.1",         "87.237.205.239",         "opensubtitles.org",         "filmezz.eu",         "ers.alsu.gov.rs",         "account.samsung.com",         "tncore.com",         "discord.com",         "eon.tv",         "demos.telerik.com",         "10.117.2.211",         "kinozal.tv",         "192.168.45.15",         "gpsurl.com",         "mega.nz",         "asmp.a1.rs",         "eventim.rs",         "192.168.0.5",         "balkandownload.org",         "login.live.com",         "euprava.gov.rs",         "signup.liltmedia.com",         "id7.cloud.huawei.com",         "10.117.108.20",         "buyspotify.net",         "sbb.rs",         "webmail.becej.rs",         "megasrbija.com",         "192.168.1.1",         "192.168.10.208",         "127.0.0.1",         "ims.bentley.com",         "192.168.0.1",         "ncore.cc",         "192.168.0.106",         "192.168.0.50",         "smboemi.com",         "potisje-becej.rs",         "lilplay.com",         "mobile.support.huawei.com",         "yubraca.net",         "myqnapcloud.com",         "localhost",         "localhost",         "exchange.ecd.rs",         "192.168.1.1",         "nulled.ch",         "coursehero.com",         "ottplayer.tv",         "ecd.rs",         "pos.ite.gov.rs",         "cp10.cpanelhosting.rs",         "panel.paragraf.rs",         "music.spotify.com",         "knjigoteka.org",         "sportsaccess.se",         "sapgw.mk-group.org",         "englishclass101.com",         "users.iptvsmarters.com",         "prijemni.ftn.uns.ac.rs",         "best.aliexpress.com",         "87.237.205.239",         "212.200.91.145",         "torrenthr.org",         "warez-bb.org",         "sorozatbarat.online",         "findmymobile.samsung.com",         "katana.facebook.com",         "188.93.126.42",         "account.nexiuslearning.com",         "portal.mcloud.rs",         "192.168.2.41",         "wp.2baksa.net",         "mojsbb.rs",         "herbalfun.net",         "megasrbija.com",         "cp10.cpanelhosting.rs",         "netiks.rs",         "rutracker.org",         "jnportal.ujn.gov.rs",         "demonoid.info",         "192.168.0.2",         "edit.duplexiptv.com",         "music.spotify.com",         "serije.online",         "ibm.com",         "opinionstage.com",         "netacademia.hu",         "accounts.spotify.com",         "ssluzba.ftn.uns.ac.rs",         "radiobalkanmusic.com",         "account.booking.com",         "turbobit.net",         "localhost",         "eon.tv",         "scribd.com",         "global.bittrex.com",         "elms.ftn.uns.ac.rs",         "192.168.0.106",         "cert.rs",         "webplayer.stcable.tv",         "servisi.pio.rs",         "192.168.200.1",         "novinarnica.net",         "zeroboard.org",         "login.aliexpress.com",         "rtsplaneta.rs",         "prva.rs",         "accounts.alluc.ee",         "secure.sorbs.net",         "login.microsoftonline.com",         "login.live.com",         "accounts.google.com",         "uniportal.huawei.com",         "netflix.com",         "informator.poverenik.rs",         "192.168.111.1",         "yts.lt",         "192.168.0.1",         "192.168.44.1",         "sso.blic.rs",         "account.live.com",         "192.168.44.11",         "192.168.44.2",         "192.168.2.5",         "facebook.com",         "prijemni.ftn.uns.ac.rs",         "esalter.rgz.gov.rs",         "192.168.44.222",         "knjigoteka.org",         "erofishki.cc",         "m.facebook.com",         "megasrbija.com",         "profile.oracle.com",         "asmp.a1.rs",         "megasrbija.com",         "facebook.com",         "fitpro.xiaofengkj.cn",         "dropbox.com",         "reid.apr.gov.rs",         "login.yahoo.com",         "portal.mcloud.rs",         "login.teamviewer.com",         "accounts.google.com",         "prva.rs",         "login.aliexpress.com",         "192.168.2.1",         "megasrbija.com",         "videohouse.me",         "online-prodaja.ribbon-cms.com",         "yubraca.net",         "10.117.2.26",         "accounts.google.com",         "192.168.44.2",         "10.117.2.23",         "sttv.stcable.net",         "balkandownload.org",         "moj.stcable.net",         "auth.wetransfer.com",         "10.117.2.21",         "vsetutonline.com",         "bl.flirthits.com",         "192.168.2.26",         "apps.spiceworks.com",         "192.168.11.3",         "privreda.becej.rs",         "uptobox.com",         "login.opendns.com",         "accounts.google.com",         "serbianforum.org",         "login.tidal.com",         "10.117.2.26",         "accounts.spotify.com",         "activate.hbomax.com",         "192.168.1.1",         "accounts.google.com",         "portal.mcloud.rs",         "192.168.2.40",         "warezhr.org",         "passport.alibaba.com",         "balkandownload.org",         "helpdesk.pksca.rs",         "livetv.sx",         "skyshowtime.com",         "login.microsoftonline.com",         "vk.com",         "warez-bb.org",         "10.117.2.1",         "rutracker.org",         "customerconnect.vmware.com",         "myaccount.google.com",         "moj.stcable.net",         "ncore.pro",         "forum.titlovi.com",         "accounts.google.com",         "accounts.google.com",         "dl.reg.163.com",         "192.168.111.1",         "signup.opendns.com",         "192.168.2.21",         "a1.rs",         "crowarez.org",         "auth.dpass.us.deloitte.com",         "webmail.yunet.rs",         "192.168.0.21",         "91.102.231.142",         "novinarnica.plus",         "uploadable.ch",         "balkandownload.org",         "outlook.office.microsoft.com",         "radiosumadinac.org",         "accounts.google.com",         "192.168.0.3",         "twirpx.com",         "mts.rs",         "satelitskiforum.com",         "spotify.com",         "192.168.2.21",         "accounts.google.com",         "login.teamviewer.com",         "192.168.45.1",         "ztracker.org",         "warezhr.org",         "192.168.0.11",         "panel.paragraf.rs",         "5kforchange.org",         "domaci.de",         "stripotekaforum.com",         "192.168.44.2",         "edit.duplexiptv.com",         "192.168.0.106",         "aliexpresshd.alibaba.com",         "10.117.2.5",         "esalter.rgz.gov.rs",         "ucinak.skgo.org",         "freetvall.com",         "airdroid.sand.com",         "rookplay.com",         "a1.rs",         "scribd.com",         "passport.aliexpress.com",         "freelancer.com",         "balkandownload.org",         "cp10.cpanelhosting.rs",         "192.168.2.253",         "balkandownload.org",         "192.168.44.91",         "sr-rs.facebook.com",         "plagiarisma.net",         "trust.zone",         "us04web.zoom.us",         "forum.benchmark.rs",         "ottplayer.tv",         "support.smart.rs",         "vidbliss.com",         "reid.apr.gov.rs",         "speedtest.net",         "facebook.com",         "192.168.0.1",         "sbb.rs",         "my.vmware.com",         "astroconquest.com",         "vk.com",         "87.237.205.155",         "gateway.hbogo.rs",         "aliexpress.com",         "edit.duplexiptv.com",         "skupstina.becej.rs",         "192.168.44.227",         "accounts.spotify.com",         "accounts.spotify.com",         "istcapi.stat.gov.rs",         "etarskaibiljnaulja.rs",         "ncore.cc",         "becej.rs",         "localhost",         "eon.tv",         "192.168.1.2",         "accounts.google.com",         "accounts.google.com",         "login.microsoftonline.com",         "localhost",         "login.oracle.com",         "facebook.com",         "moj.stcable.net",         "opensubtitles.org",         "skupstina.becej.rs",         "megasrbija.com",         "login.skype.com",         "pod2.stat.gov.rs",         "tobecej1.mycpanel.rs",         "profile.oracle.com",         "login.teamviewer.com",         "performancemanager.successfactors.eu",         "play.hbomax.com",         "us04web.zoom.us",         "login.microsoftonline.com",         "warezhr.org",         "login.aliexpress.com",         "herba-srbija.com",         "login.oracle.com",         "192.168.1.1",         "netflix.com",         "shoppingcart.aliexpress.com",         "informator.eu.meteorapp.com",         "mojvip2.vipmobile.rs",         "github.com",         "lexonline.paragraf.rs",         "my.anydesk.com",         "deezer.com",         "accounts.google.com",         "uptobox.com",         "thirdparty.aliexpress.com",         "10.117.2.26",         "i.btc.com",         "realfishki.net",         "192.168.44.91",         "speedtest.net",         "localhost",         "propissoft.profisistem.rs",         "accounts.google.com",         "appsrviti-pri",         "moj.stcable.net",         "sttv.stcable.net",         "test.becej.rs",         "signup.lunemedia.com",         "192.168.1.100",         "moj.mts.rs",         "192.168.44.226",         "informator.eu.meteorapp.com",         "signup.live.com",         "account.samsung.com",         "192.168.0.11",         "netflix.com",         "cp10.cpanelhosting.rs",         "opensubtitles.org",         "eon.tv",         "192.168.0.11",         "forum.iptvsmarters.com",         "192.168.1.1",         "sr-rs.facebook.com",         "stripotekaforum.com",         "192.168.44.2",         "moj.stcable.net",         "morahalomkartya.hu",         "sbb.rs",         "stamparijapokloni.com",         "eon.tv",         "balkandownload.org",         "megasrbija.com",         "nitroflare.com",         "192.168.1.2",         "timetracking.oblaci.rs",         "forums.mydigitallife.net",         "reid.apr.gov.rs",         "10.117.2.5",         "nitro.download",         "sbb.rs",         "webmail.stcable.net",         "account.qnap.com",         "mega.nz",         "uk-it.us",         "erofishki.cc",         "accounts.lidl.com",         "login.tidal.com",         "thetradersden.org",         "hungarianpod101.com",         "nulledbb.com",         "login.oracle.com",         "accounts.google.com",         "noip.com",         "account.samsung.com",         "grammarly.com",         "livesports-pass.com",         "kupujemprodajem.com",         "192.168.1.1",         "87.237.205.155",         "lutrija.rs",         "2baksa.net",         "euprava.gov.rs",         "listing.telekom.rs",         "serbianforum.org",         "192.168.44.6",         "opinionstage.com",         "freelancer.com",         "login.microsoftonline.com",         "webmail.stcable.net",         "vk.com",         "1fichier.com",         "reid.apr.gov.rs",         "crm.mi-system.co.rs",         "demonoid.is",         "balkandownload.org",         "yubraca.net",         "gpspower.net",         "filmezz.co",         "192.168.101.1",         "opensubtitles.org",         "zoom.us",         "reid.apr.gov.rs",         "login.live.com",         "webapi1.srbvoz.rs",         "mojtv.net",         "accounts.google.com",         "rik.parlament.gov.rs",         "warezhr.org",         "accounts.google.com",         "yts.mx",         "192.168.44.2",         "trakt.tv",         "bithorlo.info",         "accounts.google.com",         "nitroflare.com",         "surveys.kornferry.com",         "accounts.google.com",         "sap.com",         "account.protonvpn.com",         "10.117.2.253",         "mega.nz",         "winwin.rs",         "crm.lpa.gov.rs",         "192.168.44.3",         "192.168.44.2",         "instagram.com",         "hbomax.com",         "rik.parlament.gov.rs",         "rs.jooble.org",         "gpspower.net",         "etarskaibiljnaulja.rs",         "192.168.2.21",         "realfishki.net",         "eon.tv",         "vk.com",         "prva.rs",         "forum.iptvsmarters.com",         "informator.eu.meteorapp.com",         "signup.opendns.com",         "aliexpress.com",         "accounts.google.com",         "scribd.com",         "webmail.yunet.rs",         "deezer.com",         "rtsplaneta.rs",         "accounts.google.com",         "prijemni.ftn.uns.ac.rs",         "moj.stcable.net",         "us04web.zoom.us",         "prva.rs",         "mojsbb.rs",         "freelancer.com",         "192.168.44.2",         "sbb.rs",         "account.protonvpn.com",         "pos.ite.gov.rs",         "netflix.com",         "account.samsung.com",         "speedtest.net",         "demonoid.is",         "192.168.1.100",         "appsrviti-pri",         "filmezz.co",         "accounts.google.com",         "ers.alsu.gov.rs",         "shoppingcart.aliexpress.com",         "passport.aliexpress.com",         "webmail.stcable.net",         "192.168.44.226",         "login.microsoftonline.com",         "sts.mk-group.org",         "ztracker.org",         "lilplay.com",         "netflix.com",         "test.becej.rs",         "radiobalkanmusic.com",         "login.teamviewer.com",         "192.168.0.1",         "192.168.2.21",         "a1.rs",         "login.oracle.com",         "buyspotify.net",         "192.168.0.21",         "192.168.2.40",         "auth.dpass.us.deloitte.com",         "megasrbija.com",         "winwin.rs",         "my.eunethosting.com",         "sts.mk-group.org",         "erofishki.cc",         "trakt.tv",         "reid.apr.gov.rs",         "gateway.hbogo.rs",         "192.168.111.1",         "euprava.gov.rs",         "novinarnica.plus",         "account.samsung.com",         "87.237.205.239",         "performancemanager.successfactors.eu",         "127.0.0.1",         "lutrija.rs",         "tmkeep.mk-group.org",         "mojvip2.vipmobile.rs",         "yubraca.net",         "mail.mk-group.org",         "192.168.0.1",         "euprava.gov.rs",         "192.168.1.2",         "192.168.44.91",         "mega.nz",         "novinarnica.net",         "accounts.google.com",         "apps.spiceworks.com",         "cp10.cpanelhosting.rs",         "lutrija.rs",         "login.tidal.com",         "radiosumadinac.org",         "87.237.205.155",         "192.168.2.253",         "ibm.com",         "login.opendns.com",         "facebook.com",         "login.live.com",         "uniportal.huawei.com",         "crm.mi-system.co.rs",         "nitroflare.com",         "212.200.91.145",         "crm.mi-system.co.rs",         "signup.lunemedia.com",         "tncore.com",         "192.168.1.1",         "login.skype.com",         "ncore.pro",         "dropbox.com",         "becej.rs",         "localhost",         "webplayer.stcable.tv",         "accounts.lidl.com",         "stripotekaforum.com",         "opinionstage.com",         "sttv.stcable.net",         "10.117.2.21",         "accounts.google.com",         "skupstina.becej.rs",         "music.spotify.com",         "ottplayer.tv",         "accounts.google.com",         "global.bittrex.com",         "ncore.cc",         "192.168.0.11",         "serbianforum.org",         "10.117.2.253",         "esalter.rgz.gov.rs",         "188.93.126.42",         "eon.tv",         "informator.eu.meteorapp.com",         "thetradersden.org",         "reid.apr.gov.rs",         "192.168.2.1",         "my.eunethosting.com",         "reid.apr.gov.rs",         "ers.alsu.gov.rs",         "edit.duplexiptv.com",         "filmezz.eu",         "192.168.44.2",         "10.117.2.26",         "10.117.2.23",         "mkonekt.mk-group.org",         "opensubtitles.org",         "accounts.google.com",         "opensubtitles.org",         "ssluzba.ftn.uns.ac.rs",         "astroconquest.com",         "10.117.2.26",         "dl.reg.163.com",         "192.168.2.41",         "servisi.pio.rs",         "asmp.a1.rs",         "localhost",         "mobile.support.huawei.com",         "freetvall.com",         "megasrbija.com",         "localhost",         "cert.rs",         "sorozatbarat.online",         "airdroid.sand.com",         "accounts.google.com",         "profile.oracle.com",         "my.eunet.rs",         "skupstina.becej.rs",         "my.eunethosting.com",         "192.168.2.5",         "signup.liltmedia.com",         "music.spotify.com",         "mail.mk-group.org",         "webmail.eunet.rs",         "speedtest.net",         "livesports-pass.com",         "demonoid.info",         "eon.tv",         "account.nexiuslearning.com",         "accounts.google.com",         "auth.wetransfer.com",         "192.168.44.2",         "privreda.becej.rs",         "10.117.2.5",         "katana.facebook.com",         "aliexpresshd.alibaba.com",         "192.168.0.1",         "warez-bb.org",         "192.168.1.1",         "trust.zone",         "netiks.rs",         "5kforchange.org",         "fitpro.xiaofengkj.cn",         "my.vmware.com",         "netiks.rs",         "87.237.205.239",         "netacademia.hu",         "sts.mk-group.org",         "ers.alsu.gov.rs",         "englishclass101.com",         "login.live.com",         "videohouse.me",         "login.teamviewer.com",         "login.aliexpress.com",         "domaci.de",         "ers.alsu.gov.rs",         "nulled.ch",         "opinionstage.com",         "portal.mcloud.rs",         "livetv.sx",         "prijemni.ftn.uns.ac.rs",         "passport.alibaba.com",         "uploadable.ch",         "eventim.rs",         "sbb.rs",         "kupujemprodajem.com",         "surveys.kornferry.com",         "esalter.rgz.gov.rs",         "sts.mk-group.org",         "localhost",         "192.168.10.208",         "moj.stcable.net",         "192.168.44.222",         "opensubtitles.org",         "sso.blic.rs",         "91.102.231.142",         "i.btc.com",         "panel.paragraf.rs",         "reid.apr.gov.rs",         "hungarianpod101.com",         "myqnapcloud.com",         "redmine.mk-group.org",         "megasrbija.com",         "192.168.200.1",         "stripotekaforum.com",         "dropbox.com",         "support.smart.rs",         "sbb.rs",         "kinozal.tv",         "192.168.1.1",         "gpsurl.com",         "potisje-becej.rs",         "outlook.office.microsoft.com",         "accounts.google.com",         "crm.mi-system.co.rs",         "coursehero.com",         "192.168.0.50",         "192.168.0.5",         "192.168.0.11",         "ers.alsu.gov.rs",         "192.168.0.1",         "account.booking.com",         "ucinak.skgo.org",         "netflix.com",         "2baksa.net",         "reid.apr.gov.rs",         "192.168.44.6",         "serije.online",         "torrenthr.org",         "warezhr.org",         "login.microsoftonline.com",         "vk.com",         "moj.stcable.net",         "nulledbb.com",         "login.yahoo.com",         "plagiarisma.net",         "192.168.44.91",         "192.168.1.1",         "herbalfun.net",         "accounts.spotify.com",         "10.117.2.1",         "helpdesk.pksca.rs",         "users.iptvsmarters.com",         "sapgw.mk-group.org",         "outlook.office.microsoft.com",         "192.168.44.227",         "asmp.a1.rs",         "sbb.rs",         "10.117.108.20",         "facebook.com",         "accounts.spotify.com",         "lexonline.paragraf.rs",         "192.168.1.1",         "mojtv.net",         "webmail.stcable.net",         "thirdparty.aliexpress.com",         "cpanel.pikbecej.mycpanel.rs",         "ncore.cc",         "my.eunethosting.com",         "balkandownload.org",         "192.168.44.1",         "a1.rs",         "account.qnap.com",         "rutracker.org",         "192.168.2.26",         "192.168.101.1",         "my.eunet.rs",         "secure.sorbs.net",         "sttv.stcable.net",         "sportsaccess.se",         "opensubtitles.org",         "demos.telerik.com",         "mail.mk-group.org",         "erofishki.cc",         "vidbliss.com",         "zeroboard.org",         "m.facebook.com",         "yts.lt",         "10.117.2.5",         "best.aliexpress.com",         "mkonekt.mk-group.org",         "bithorlo.info",         "us04web.zoom.us",         "satelitskiforum.com",         "accounts.alluc.ee",         "sr-rs.facebook.com",         "forum.benchmark.rs",         "myaccount.google.com",         "nitro.download",         "accounts.google.com",         "rutracker.org",         "my.eunet.rs",         "smboemi.com",         "findmymobile.samsung.com",         "rookplay.com",         "my.eunet.rs",         "eon.tv",         "elms.ftn.uns.ac.rs",         "edit.duplexplay.com",         "edit.duplexplay.com",         "sap.com",         "crowarez.org",         "panel.paragraf.rs",         "uk-it.us",         "login.teamviewer.com",         "signup.live.com",         "ottplayer.tv",         "spotify.com",         "edit.duplexiptv.com",         "ers.alsu.gov.rs",         "portal.mcloud.rs",         "eon.tv",         "timetracking.oblaci.rs",         "reid.apr.gov.rs",         "megasrbija.com",         "wp.2baksa.net",         "portal.mcloud.rs",         "vsetutonline.com",         "listing.telekom.rs",         "serbianforum.org",         "id7.cloud.huawei.com",         "morahalomkartya.hu",         "forums.mydigitallife.net",         "87.237.205.155",         "warez-bb.org",         "warezhr.org",         "accounts.google.com",         "192.168.0.3",         "yubraca.net",         "192.168.44.11",         "accounts.google.com",         "rtsplaneta.rs",         "accounts.google.com",         "propissoft.profisistem.rs",         "sr-rs.facebook.com",         "edit.duplexiptv.com",         "ecd.rs",         "192.168.0.2",         "192.168.111.1",         "login.oracle.com",         "reid.apr.gov.rs",         "login.oracle.com",         "10.117.2.26",         "herba-srbija.com",         "balkandownload.org",         "ers.alsu.gov.rs",         "192.168.44.2",         "moj.stcable.net",         "knjigoteka.org",         "netflix.com",         "localhost",         "exchange.ecd.rs",         "profile.oracle.com",         "cp10.cpanelhosting.rs",         "10.117.2.211",         "tobecej1.mycpanel.rs",         "192.168.0.1",         "zeroboard.org",         "opensubtitles.org",         "accounts.alluc.ee",         "secure.sorbs.net",         "ers.alsu.gov.rs",         "account.samsung.com",         "tncore.com",         "sso.blic.rs",         "eon.tv",         "demos.telerik.com",         "10.117.2.211",         "knjigoteka.org",         "kinozal.tv",         "asmp.a1.rs",         "gpsurl.com",         "mega.nz",         "asmp.a1.rs",         "login.teamviewer.com",         "eventim.rs",         "login.aliexpress.com",         "192.168.0.5",         "balkandownload.org",         "megasrbija.com",         "accounts.google.com",         "login.live.com",         "euprava.gov.rs",         "signup.liltmedia.com",         "vsetutonline.com",         "apps.spiceworks.com",         "id7.cloud.huawei.com",         "10.117.108.20",         "buyspotify.net",         "sbb.rs",         "192.168.10.208",         "accounts.google.com",         "127.0.0.1",         "192.168.2.40",         "passport.alibaba.com",         "balkandownload.org",         "livetv.sx",         "warez-bb.org",         "192.168.0.1",         "myaccount.google.com",         "192.168.0.50",         "smboemi.com",         "lilplay.com",         "mobile.support.huawei.com",         "a1.rs",         "crowarez.org",         "yubraca.net",         "myqnapcloud.com",         "ottplayer.tv",         "cp10.cpanelhosting.rs",         "panel.paragraf.rs",         "music.spotify.com",         "airdroid.sand.com",         "knjigoteka.org",         "sportsaccess.se",         "balkandownload.org",         "sapgw.mk-group.org",         "users.iptvsmarters.com",         "prijemni.ftn.uns.ac.rs",         "best.aliexpress.com",         "torrenthr.org",         "gateway.hbogo.rs",         "warez-bb.org",         "findmymobile.samsung.com",         "eon.tv",         "facebook.com",         "192.168.2.41",         "login.skype.com",         "megasrbija.com",         "cp10.cpanelhosting.rs",         "rutracker.org",         "herba-srbija.com",         "netflix.com",         "192.168.0.2",         "thirdparty.aliexpress.com",         "edit.duplexiptv.com",         "10.117.2.26",         "speedtest.net",         "localhost",         "propissoft.profisistem.rs",         "serije.online",         "ibm.com",         "moj.stcable.net",         "accounts.spotify.com",         "ssluzba.ftn.uns.ac.rs",         "radiobalkanmusic.com",         "cp10.cpanelhosting.rs",         "eon.tv",         "account.booking.com",         "localhost",         "eon.tv",         "192.168.1.1",         "scribd.com",         "elms.ftn.uns.ac.rs",         "webplayer.stcable.tv",         "servisi.pio.rs",         "5kforchange.org",         "domaci.de",         "stripotekaforum.com",         "novinarnica.net",         "sbb.rs",         "eon.tv",         "edit.duplexiptv.com",         "login.aliexpress.com",         "balkandownload.org",         "aliexpresshd.alibaba.com",         "10.117.2.5",         "rtsplaneta.rs",         "prva.rs",         "freetvall.com",         "megasrbija.com",         "192.168.1.2",         "login.microsoftonline.com",         "rookplay.com",         "a1.rs",         "scribd.com",         "login.live.com",         "accounts.google.com",         "uniportal.huawei.com",         "passport.aliexpress.com",         "freelancer.com",         "sbb.rs",         "netflix.com",         "webmail.stcable.net",         "yts.lt",         "192.168.0.1",         "cp10.cpanelhosting.rs",         "192.168.2.253",         "balkandownload.org",         "sr-rs.facebook.com",         "trust.zone",         "account.qnap.com",         "us04web.zoom.us",         "forum.benchmark.rs",         "mega.nz",         "ottplayer.tv",         "uk-it.us",         "192.168.2.5",         "facebook.com",         "vidbliss.com",         "prijemni.ftn.uns.ac.rs",         "speedtest.net",         "megasrbija.com",         "facebook.com",         "profile.oracle.com",         "192.168.0.1",         "sbb.rs",         "astroconquest.com",         "my.vmware.com",         "login.tidal.com",         "vk.com",         "facebook.com",         "megasrbija.com",         "aliexpress.com",         "edit.duplexiptv.com",         "dropbox.com",         "thetradersden.org",         "reid.apr.gov.rs",         "hungarianpod101.com",         "accounts.spotify.com",         "accounts.google.com",         "accounts.google.com",         "prva.rs",         "192.168.2.1",         "account.samsung.com",         "yubraca.net",         "10.117.2.26",         "accounts.google.com",         "accounts.google.com",         "login.microsoftonline.com",         "sttv.stcable.net",         "moj.stcable.net",         "balkandownload.org",         "livesports-pass.com",         "10.117.2.21",         "192.168.2.26",         "moj.stcable.net",         ...     ],     "outlook": "-",     "price": "10.00",     "province": "Vojvodina",     "size": "0.17Mb",     "stealer": "Racoon ",     "vendor": "M5####te bronze" }
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
(This post was last modified: 02-10-2024, 09:41 PM by 1van. Edit Reason: Formatiranje. )
Website Find
Reply
1van
Posting Freak
*****
Posts: 1,731
Threads: 666
Joined: Sep 2022
Reputation: 134
#6

02-12-2024, 04:15 PM
Sve je Google lepo složio. Potvrda da je "pos.ite.gov.rs" POS sistem, a i da je kompromitovana lokacija pristupala i drugim zanimljivim državnim sajtovima koje smo dokumentovali na forumu.

     
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Website Find
Reply
milos_rs
Administrator
*******
Posts: 2,126
Threads: 884
Joined: Sep 2022
Reputation: 375
#7

02-14-2024, 01:59 PM
Još neke zanimljivosti sa drugog alata (https://www.hudsonrock.com/threat-intell...rime-tools)

   

ovi poddomeni deluju da su za internu upotrebu:
  • glpi.ite.gov.rs - "Your open source tool to manage Helpdesk and IT assets!" - glpi-project.org - nema eksterni DNS vidljiv javnosti
  • dokumentacija.ite.gov.rs - popularan DocuWiki, nema eksterni DNS vidljiv javnosti
  • sts.ite.gov.rs - ne znam šta je, ima DNS IP: 195.222.96.45 ali nema ništa na njemu, shodan takođe prazan za njega, na crt.sh ima jedan stari sertifikat iz 2021 https://crt.sh/?id=3655563369

neki moji zaključci:

GLPI i dokumentacija su, prema ovom izvoru, HTTP dakle nemaju sertifikat i očigledno se koriste samo interno, nema ih ni u crt.sh.  Nije isključeno da redirektuju na HTTPS što bi značilo da možda imaju svoj CA unutar mreže za sertifikate.

STS je takođe HTTP tako da je možda sada interni a nekad je bio eksterni zato ima stari SSL i IP adresu u javnom DNS-u na kojoj nema ništa, ili je IP dostupan samo interno  ali je nekako procureo nečijom greškom na javni DNS?

Ovo je ili neko kompromitovan unutar same fizičke kancelarije ITE ili neko ko pristupa servisima preko VPNa. Pošto na Hudson-u piše "External Attack Surface" naginjem ka VPN-u ali ne znam koja je definicija Hudson-a za "External Attack Surface"

S obzirom da je ovaj GLPI namenjen IT kadru, možda neko iz IT-a?
(This post was last modified: 02-14-2024, 02:03 PM by milos_rs.)
Find
Reply
1van
Posting Freak
*****
Posts: 1,731
Threads: 666
Joined: Sep 2022
Reputation: 134
#8

02-14-2024, 03:32 PM
Zone za glpi.ite.gov.rs i dokumentacija.ite.gov.rs nema ni SecurityTrails History. Definitivno interni servisi.
Dal se logovao preko VPN/IPSec/iznajmljenog voda ili iz neke od kancelarija je čini mi se manje važno (u ovom slučaju je sve problem).
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
(This post was last modified: 02-14-2024, 03:33 PM by 1van. Edit Reason: Typo. )
Website Find
Reply
VincaSec
Posting Freak
*****
Posts: 945
Threads: 551
Joined: Oct 2023
Reputation: 172
#9

02-14-2024, 04:19 PM
Preko sajta https://pentester.com/ sam pronašao procurele podatke zaposlenih i običnih korisnika koji su imali dodir sa sajtom ite.gov.rs. Pronađeni podaci uključuju šifre naloga različitih trećih strana sajtova na kojima su imali naloge, kao i na državnim sajtovima. Takođe su dostupni e-mailovi, informacije o tome da li su šifre enkriptovane ili u čistom tekstu, datum kada su detektovani i imena sajtova sa kojih su podaci procureli. Svi ovi podaci su javno dostupni.

   
   
   
   
There is no patch for stupidity - Kevin Mitnick
(This post was last modified: 02-14-2024, 04:24 PM by VincaSec.)
Website Find
Reply
1van
Posting Freak
*****
Posts: 1,731
Threads: 666
Joined: Sep 2022
Reputation: 134
#10

03-20-2024, 11:55 AM
Izgleda da je svašta još nešto pored mejlova (za Zokija i ekipu iz Kancelarije) kompromitovano. Evo dokaza sa https://sosintel.co.uk/.

dokumentacija.ite.gov.rs
prijava-test.ite.gov.rs
itinventar.ite.gov.rs
glpi.ite.gov.rs
bombasticno.ite.gov.rs

sinergija.live
my.elementor.com
bitrix24.net
account.foxit.com

   
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Website Find
Reply
« Next Oldest | Next Newest »


Forum Jump:


Users browsing this thread: 1 Guest(s)