04-12-25, 10:31 PM
![[Image: logo-bhisa-landscape.png]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fbhisa.id%2Fimg%2Flogo-bhisa%2Flogo-bhisa-landscape.png)
Yo beasts,
Christmas came early this year.
Just popped Bhisa.ID (big Indonesian Travel player).
Rooted their main ERP cluster harder than a $5 VPS on Black Friday.
What’s inside:
- 21 MySQL databases (full dumps .sql.gz)
- Complete source code (CodeIgniter 3.x, custom modules, admin panels)
- 200k+ real user records (names, emails, phone, encrypted passwords)
- Internal API keys, payment gateway secrets (Winpay, BCA, Mandiri, etc.)
- Employee panel + HR database (gaji, NPWP, everything)
- 2016–2025 financial reports (unaudited, lol)
Total size: ~187 GB
They still haven’t patched the RCE i chained with the misconfigured CI session driver.
Shoutout to their dev who left debug=true in production LMAO.
Seed or bleed.
No re-uploads to clearnet, stay dark.

