05-09-26, 03:55 AM
Sonora Municipal Government
- 16 identical WordPress multisite config backups (.bak) exposed across Sonora ayuntamiento portals (*.gob.mx) same shared install behind transparenciasonora.org (19 subsites).
- Leaked: DB name wp_multisite, user wp_admin, live DB password, all 10 auth salts, multisite/subdomain layout.
- Login oracle on the hub distinguishes wp_admin (existing) from nonexistent users. account confirmed real. Multisite root exposes 3 users via REST (administrador, difucion, soporte-edesarrollos) + public "sesiones" CPT (session records).
- Also: 7 PHP debug logs (SQL, DB paths, internal structure) from CA + MX gov portals, adminer + phpinfo on cmm.gob.mx.
- Files: 16 wp-config.bak + 7 debug logs.
Full Data:
https://mega.nz/folder/Rd5UQBID#8kMOkf9qFYN2d8bHsAIUcg
Salud
- CB
Ban reason: public data post (Permanent)