[CamelliaBtw]

I would like to clarify that my previous post regarding the database was incorrect; no such database exists. Our further investigation into other potential critical vulnerabilities has yielded no results. There was no large-scale breach. I continue to follow the development of the MAX state messenger with great respect and interest. Thank you for your understanding.

UPD: I was honestly surprised by such a wild reaction from Telegram channels. To be fair, the part about RCE should have been a dead giveaway that it was a fake. Have a great day! :3

[KingOrigin]

Хорошая работа! В самом деле, я же не просто так налоги платил на которые клепали приложение. Надеюсь увижу, как и что у них было внутри.

Да судя из примера и так все уже видно. Если сессии будут живы на момент слива , хорошего мало будет . Как платили походу так и накодили что сказать еще )

---

I would like to clarify that my previous post regarding the database was incorrect; no such database exists. Our further investigation into other potential critical vulnerabilities has yielded no results. There was no large-scale breach. I continue to follow the development of the MAX state messenger with great respect and interest. Thank you for your understanding.

UPD: I was honestly surprised by such a wild reaction from Telegram channels. To be fair, the part about RCE should have been a dead giveaway that it was a fake. Have a great day! :3

Так ты просто пиздабол выходит :D

[xannexation]

Западный кликбейт

[MakRuhA]

All Russians are waiting for the first 5 GB of data)))

[Pedersen]

Exactly one year ago, on March 26, 2025, Max Messenger was launched with loud promises of "unrivaled security" and a "new era of privacy." They claimed to be the "Telegram Killer." Today, that era ends before it even truly began.
It took us exactly 12 months to dismantle the security layers they spent years building. As of this morning, we have successfully exfiltrated the entire production database. The "unbreakable" has been broken.
Leaked Data Specifications (Total Volume: 142 GB Compressed):

• User Profiles: 15.4 million records containing Full Names, Usernames, and verified Phone Numbers.
  
• Auth Tokens & Keys: Valid session tokens that allow account hijacking bypassing 2FA, along with Bcrypt password hashes.
  
• The Metadata Archive: Full communication logs (timestamps, sender/receiver IDs) since the launch day in March 2025.
  
• Infrastructure Access: Internal SSH keys, API documentation, and AWS S3 bucket configurations containing unencrypted media assets.
  
• Backend Source Code: The "proprietary" encryption module, including several hardcoded backdoors we discovered.
  

Technical Overview: The breach was executed via a critical 0-day RCE (Remote Code Execution) vulnerability within the messenger’s media processing engine. By injecting a malformed payload into a sticker pack metadata file, we gained persistent access. We discovered that this vulnerability existed since the beta phase in early 2025 and was never patched.
The Ultimatum: The developers have been notified, but their silence is deafening. We have already verified the accounts of several high-profile politicians and corporate executives who joined the platform during its "security hype" last year.
If a "bug bounty" is not negotiated within the next 24 hours, the first 5 gigabytes of raw SQL data will be mirrored across 10+ public torrent trackers.
Happy Anniversary, Max Messenger. Privacy is a myth. 

fbichan

---

It`s great job, dude

[Mayonezzik]

I would like to clarify that my previous post regarding the database was incorrect; no such database exists. Our further investigation into other potential critical vulnerabilities has yielded no results. There was no large-scale breach. I continue to follow the development of the MAX state messenger with great respect and interest. Thank you for your understanding.

UPD: I was honestly surprised by such a wild reaction from Telegram channels. To be fair, the part about RCE should have been a dead giveaway that it was a fake. Have a great day! :3

Ясно, тухлодырый хохлопрогон.

[domingo]

I would like to clarify that my previous post regarding the database was incorrect; no such database exists. Our further investigation into other potential critical vulnerabilities has yielded no results. There was no large-scale breach. I continue to follow the development of the MAX state messenger with great respect and interest. Thank you for your understanding.

UPD: I was honestly surprised by such a wild reaction from Telegram channels. To be fair, the part about RCE should have been a dead giveaway that it was a fake. Have a great day! :3

At least you decided not to pull the “oh guys I got paid so nevermind” stunt. Appreciate the honesty so have a great day as well. Got introduced to a great forum thanks to your performance :)

[HectorManiac]

hmmm....

---

нас всех тотально наебали но похуй лол

[shinano]

кто бы мог подумать)))

не удивлюсь что это сделал снгоид

[agonots]

Do you intend to publish any sample of that data? :-)