[ByteToBreach]

--

RCE_TEST : https://dump.li/image/db067a9180b1c160.png
INITIALFOOTHOLD : https://dump.li/image/8a4a181c8afc00a3.png
JAILBREAK : https://dump.li/image/7802542cde62a6f9.png
JENKINS_SSH_PIVOT : https://dump.li/image/f16ea8ecc6e8e983.png
API_DOC_SIGNING : https://dump.li/image/9b612a1bf9e569b3.png
STAFF_DATABASE :
https://dump.li/image/b85269db537da3f7.png

-- Intro :

It's very unclear how i should phrase this post, since i am still unable to fully grasp the responsibilities here.
The swedish e-governement is the most affected, of course, but the vulnerabilities happened through the sole responsibilities of CGI Sverige heavily compromised infrastructure.
This is the entire E-Gov platform source code - not just config snippets, in addition to the citizens databases collected (PII) and documents (for electronic signing), which are sold separately.
I put the source code for free. Real hackers / security researchers, unlike me and the other monkeys on the darkweb, will find possible vulnerabilities by reviewing it's code and analyzing it.
IMPORTANT NOTE : Since it's become a common lying line of defense to reject the responsibilities on imaginary 'third parties' (i.e Viking Line, and Slavia Pojistovna), i will start clearly stating to which company the compromised infrastructures belongs to. In this case, this is CLEARLY a CGI infrastructure.

- Vulnerabilities:

* Jenkins full compromise
* Docker escape (Jenkin user being in docker group)
* SSH privKey pivots
* Analysis of local net hprof file for local recon.
* SQL Copy To Progrma pivots

- Links :

BACKUP 1 : https://www.dropbox.com/scl/fo/4mh2885id...0kepo&dl=0
BACKUP 2 : https://drive.google.com/drive/folders/1...drive_link
BACKUP 4 : https://ln5.sync.com/dl/40d13a0a0#5q64c8...n-t2pwffnr

Two links already taken down, so i am adding two :

BACKUP 4 : https://1drv.ms/f/c/03C8F1FA5CE98F1B/IgA...Y?e=LQqkis
BACKUP 5 : https://e.pcloud.link/publink/show?code=...bVbp9xgHS7

- Contacts:

Signal : @ByteToBreach.33
Session: 05c2db4775cb46350f16814dfe3bfa856664f315585653e4c368af08ce50b0c31b
Telegram: @Bytetobreach33
Email : [email protected] / [email protected]
X: @GgsFafagas
Webiste : Bytetobreach.com

PS: Prefer messages on Session / Signal.

JESSUS IS KING.