[Skull1172]

Filtered by EsqueleSquad TEAM









All .gob.ar and .edu.ar websites were compromised between 2024 and 2026. Today we will be filtering a sample, showing vulnerable APIs that were scraped with URLs. These contained phones, usernames, passwords, CUILs/DNI numbers, and license plates. We have a total of over 80,000,000 lines.

compromised webmail: 154.654 conversations
credentials (phones/dni/emails/passwords): 80,000,000

AFFECTED PAGES

auth.afip.gob.ar ( 11,8 mill ) servicioscorp.anses.gob.ar id.argentina.gob.ar becasprogresar.educacion.gob.ar  ( 650k ) login.buenosaires.gob.ar autenticar.gob.ar sube.gob.ar portalempleo.gob.ar progresar.educacion.gob.ar login.abc.gob.ar miba.buenosaires.gob.ar clusterapw.agip.gob.ar lbapw.agip.gob.ar gde.gob.ar cas.gde.gob.ar front-app.argentina.gob.ar tarjetasube.sube.gob.ar gobiernodigital.chaco.gob.ar curso.seguridadvial.gob.ar becasmanuelbelgrano.educacion.gob.ar +900 PAGES

autogestion.uner.edu.ar autogestion.untref.edu.ar autogestion.unvm.edu.ar autogestion.untdf.edu.ar autogestion.ucu.edu.ar autogestion.usal.edu.ar autogestion.uno.edu.ar autogestion.unpilar.edu.ar autogestion.upc.edu.ar autogestion.upateco.edu.ar autogestion.sistemas.unam.edu.ar autogestion2.ugd.edu.ar administration.unlam.edu.ar

API'S SCRAPPED
https://cnmza.org.ar/escribano/renaper/v...enaper.php = +32MILLION IMAGES/CODE64
https://ap.anses.gob.ar/v1/beneficios?documento=[DNI]&tipo=&estado= = +11.8MILLION DATA

============= CRONICA.COM  (SENSIBLE DATA)==========
By accessing the administration panels and chronicle metrics, we found information about workers and sensitive panels; apparently, they receive money from the Argentine government (probably to lie).

In the sample, we'll detail everything about Cronica.

Employees + Admin Panel + FTP

Compiled thanks to EsqueleStealer and OSINT + Exploits API's


Link: Sample

[Shadow905]

Nice bro!!

[Skull1172]

Filtered by EsqueleSquad TEAM


All .gob.ar and .edu.ar websites were compromised between 2024 and 2026. Today we will be filtering a sample, showing vulnerable APIs that were scraped with URLs. These contained phones, usernames, passwords, CUILs/DNI numbers, and license plates. We have a total of over 80,000,000 lines.
compromised webmail: 154.654 conversations
credentials (phones/dni/emails/passwords): 80,000,000
AFFECTED PAGES

auth.afip.gob.ar ( 11,8 mill ) servicioscorp.anses.gob.ar id.argentina.gob.ar becasprogresar.educacion.gob.ar  ( 650k ) login.buenosaires.gob.ar autenticar.gob.ar sube.gob.ar portalempleo.gob.ar progresar.educacion.gob.ar login.abc.gob.ar miba.buenosaires.gob.ar clusterapw.agip.gob.ar lbapw.agip.gob.ar gde.gob.ar cas.gde.gob.ar front-app.argentina.gob.ar tarjetasube.sube.gob.ar gobiernodigital.chaco.gob.ar curso.seguridadvial.gob.ar becasmanuelbelgrano.educacion.gob.ar +900 PAGES autogestion.uner.edu.ar autogestion.untref.edu.ar autogestion.unvm.edu.ar autogestion.untdf.edu.ar autogestion.ucu.edu.ar autogestion.usal.edu.ar autogestion.uno.edu.ar autogestion.unpilar.edu.ar autogestion.upc.edu.ar autogestion.upateco.edu.ar autogestion.sistemas.unam.edu.ar autogestion2.ugd.edu.ar administration.unlam.edu.ar

API'S SCRAPPED
https://cnmza.org.ar/escribano/renaper/v...enaper.php = +32MILLION IMAGES/CODE64
https://ap.anses.gob.ar/v1/beneficios?documento=[DNI]&tipo=&estado= = +11.8MILLION DATA
============= CRONICA.COM  (SENSIBLE DATA)==========
By accessing the administration panels and chronicle metrics, we found information about workers and sensitive panels; apparently, they receive money from the Argentine government (probably to lie).
In the sample, we'll detail everything about Cronica.
Employees + Admin Panel + FTP
Compiled thanks to EsqueleStealer and OSINT + Exploits API's
Link: Sample

[Mrx009]

than youuuuuuuu

[jurgendeangelis]

thank you

[rishok94]

Filtered by EsqueleSquad TEAM









All .gob.ar and .edu.ar websites were compromised between 2024 and 2026. Today we will be filtering a sample, showing vulnerable APIs that were scraped with URLs. These contained phones, usernames, passwords, CUILs/DNI numbers, and license plates. We have a total of over 80,000,000 lines.

compromised webmail: 154.654 conversations
credentials (phones/dni/emails/passwords): 80,000,000

AFFECTED PAGES

auth.afip.gob.ar ( 11,8 mill ) servicioscorp.anses.gob.ar id.argentina.gob.ar becasprogresar.educacion.gob.ar  ( 650k ) login.buenosaires.gob.ar autenticar.gob.ar sube.gob.ar portalempleo.gob.ar progresar.educacion.gob.ar login.abc.gob.ar miba.buenosaires.gob.ar clusterapw.agip.gob.ar lbapw.agip.gob.ar gde.gob.ar cas.gde.gob.ar front-app.argentina.gob.ar tarjetasube.sube.gob.ar gobiernodigital.chaco.gob.ar curso.seguridadvial.gob.ar becasmanuelbelgrano.educacion.gob.ar +900 PAGES

autogestion.uner.edu.ar autogestion.untref.edu.ar autogestion.unvm.edu.ar autogestion.untdf.edu.ar autogestion.ucu.edu.ar autogestion.usal.edu.ar autogestion.uno.edu.ar autogestion.unpilar.edu.ar autogestion.upc.edu.ar autogestion.upateco.edu.ar autogestion.sistemas.unam.edu.ar autogestion2.ugd.edu.ar administration.unlam.edu.ar

API'S SCRAPPED
https://cnmza.org.ar/escribano/renaper/v...enaper.php = +32MILLION IMAGES/CODE64
https://ap.anses.gob.ar/v1/beneficios?documento=[DNI]&tipo=&estado= = +11.8MILLION DATA

============= CRONICA.COM  (SENSIBLE DATA)==========
By accessing the administration panels and chronicle metrics, we found information about workers and sensitive panels; apparently, they receive money from the Argentine government (probably to lie).

In the sample, we'll detail everything about Cronica.

Employees + Admin Panel + FTP

Compiled thanks to EsqueleStealer and OSINT + Exploits API's


Link: Sample

thank

[unknowk99]

Thx for sharing!