Posts: 118
Threads: 0
Joined: Sep 2025
thanks
Ban reason: Leeching (Permanent)
Reply
Reply
Reply
Reply
Reply
Posts: 2
Threads: 0
Joined: Sep 2025
(14-06-25, 07:51 PM)0xCAFE Wrote: 大家好，DarkForums！
这是我的第一篇帖子。很高兴见到大家。）
最近，我成功访问了越南地方政府的邮件服务器，并泄露了772GiB的数据，加密了他们的整个系统。
但他们似乎不愿意支付赎金，所以我泄露了这个数据作为样本。
我很快会出售包含邮件转储在内的全部数据。如果您感兴趣，请继续关注！
泄露信息
泄露者：Darkforums用户0xCAFE（我！）
泄露日期：大约2025年2月 -
组织名称：越南平阳省地方政府
大小：总计111.8MiB（*部分数据）
这是什么？
1.“SSL-Geotrust”
文件夹包含证书信息。
2.“names.nsf”
是一个原始数据库二进制文件，包含用户凭证、账户身份、用户信息等。
.nsf 是 IBM Lotus/HCL Domino 的专用格式，因此您需要 Domino 许可证或其他东西才能读取它们。3
.“mail.tinhuybinhduong.vn.names.nsf.csv”
它是通过 Web 界面转储的 names.nsf。它很有用，但不包含所有 names.nsf 内容，仅包含部分内容。
它包含：
用户名、邮件地址、真实姓名、散列密码、物理位置、客户信息等，
共 948 行。
目录结构
[剧透]
[4.0K] ./
═── [4.0K] SSL-Geotrust/
│ ═── [4.0K] 04-4-2021/
│ │ ═── [2.2K] certificate.cer
│ │ ═── [1.1K] certreq.txt
│ │ ═── [1.6K] intermediate.cer
│ │ ═── [ 32K] keyring2020.kyr
│ │ ═── [ 129] keyring2020.sth
│ │ ═── [ 33K] keyring2021.kyr
│ │ ═── [ 129] keyring2021.sth
│ │ ═── [1.3K] root.cer
│ │ └── [5.5K] server.txt
│ ═── [4.0K] 2022 年5 月 4 日 /
│ ... 129 ] keyring2022.sth │ ...
│
...
[ 5.6K ] server.txt
│ ... │ │ │ └── [4.0K] w32/ │ │ │ └── [ 42K] kyrtool.exe │ │ │ └── [ 54K] kyrtool.exe │ │ └── [1.6K] readme.txt │ │ ── [ 32K] keyring2020.kyr │ │ ── [ 129] keyring2020.sth │ └── [ 84K] kyrtool.zip │ ── [317K] mail.tinhuybinhduong.vn.names.nsf.csv └── [112M] names.nsf [/spoiler]示例：点击此处下载：
DisplayName,DisplayMailAddress,dspFirstName,FirstName,dspFullName,ShortName,HTTPPassword,ClientType,Owner,ClntDate,CompanyName,Location,MailSystem,MailDomain,MailServer,MailFile,InternetAddress,MessageStorage,EncryptIncomingMail,CertificateDisplay,UserCertificateDisplay,CheckPassword,PasswordChangeInterval,PasswordGracePeriod,HTTPPasswordChangeDate,DocumentAccess,CryptoCap,Person_Main,Person_Detail,Person_Cert,ClntMachine,ClntBld,ClntPltfrm,JobTitle,City
SuLT/TUBinhDuong/DCS/VN,[email protected],Lâm,Lâm,SuLT/TUBinhDuong/DCS/VN; SuLT,SuLT,(G0IGOxsyDIka16e9C31H),0,SuLT/TUBinhDuong/DCS/VN,Lâm,Bac Tan uyen,Huyen uy Bac Tan uyen,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\sult,[email protected],1,0,1,0,0,0,0,09/09/2020 10:35:59 AM ZE7,[UserModifier],0,0,0,0,,,,,
AnPV/TUBinhDuong/DCS/VN,[email protected],Phạm,Phạm,AnPV/TUBinhDuong/DCS/VN; AnPV,AnPV,(GdL+wtoRwtTRYbIOWwtr),0,AnPV/TUBinhDuong/DCS/VN,Phạm,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\anpv,[email protected],1,0,1,0,0,0,0,06/04/2019 04:15:17 PM ZE7,[UserModifier],0,0,0,0,,,,,
TrungNH/TUBinhDuong/DCS/VN,[email protected],Nguyễn,Nguyễn,TrungNH/TUBinhDuong/DCS/VN; TrungNH,TrungNH,(Gt1b3QZ7jJzGJsWevVxY),0,TrungNH/TUBinhDuong/DCS/VN,Nguyễn,CS Phuoc Hoa,,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\trungnh,[email protected],1,0,1,0,0,0,0,11/20/2023 10:19:36 AM ZE7,[UserModifier],0,0,0,0,,,,,
QuangHQ/TUBinhDuong/DCS/VN,[email protected],Huỳnh,Huỳnh,QuangHQ/TUBinhDuong/DCS/VN; QuangHQ,QuangHQ,(Gs+DRw7vtmaC4RXTo1ey),0,QuangHQ/TUBinhDuong/DCS/VN,Huỳnh,Dau Tieng,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\quanghq,[email protected],1,0,1,0,0,0,0,09/29/2020 09:50:36 AM ZE7,[UserModifier],0,0,0,0,,,,,
thanhbm/TUBinhDuong/DCS/VN,[email protected],Bùi,Bùi,thanhbm/TUBinhDuong/DCS/VN; thanhbm,thanhbm,(GHsW5Xfg/M1AY6kiUFhA),0,thanhbm/TUBinhDuong/DCS/VN,Bùi,Ben Cat,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\thanhbm,[email protected],1,0,1,0,0,0,0,04/19/2018 08:20:14 AM ZE7,[UserModifier],0,0,0,0,,,,,
ldtbxh.dti/TUBinhDuong/DCS/VN,[email protected],,,ldtbxh.dti/TUBinhDuong/DCS/VN; ldtbxh.dti,ldtbxh.dti,(Gi2uewpDSLXOgseHRM2i),0,ldtbxh.dti/TUBinhDuong/DCS/VN,,Dau Tieng,Dau Tieng,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\ldtbxhdti,[email protected],1,0,1,0,0,0,0,01/17/2024 09:31:49 AM ZE7,[UserModifier],0,0,0,0,,,,,
cbcctha.bca/TUBinhDuong/DCS/VN,[email protected],Chi bộ,Chi bộ,cbcctha.bca/TUBinhDuong/DCS/VN; cbcctha.bca,cbcctha.bca,(GYCPhdvCe4LOHv5wwddS),0,cbcctha.bca/TUBinhDuong/DCS/VN,Chi bộ,Ben Cat,,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\cbccthab,[email protected],1,0,1,0,0,0,0,11/26/2018 11:09:01 AM ZE7,[UserModifier],0,0,0,0,,,,,
trungvt/TUBinhDuong/DCS/VN,[email protected],Võ,Võ,trungvt/TUBinhDuong/DCS/VN; trungvt,trungvt,(GCdGIkLY8kwDCQnB82e2),0,trungvt/TUBinhDuong/DCS/VN,Võ,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\trungvt,[email protected],1,0,1,0,0,0,0,01/12/2018 03:33:31 PM ZE7,[UserModifier],0,0,0,0,,,,,
LuanNH/TUBinhDuong/DCS/VN,[email protected],Nguyễn,Nguyễn,LuanNH/TUBinhDuong/DCS/VN; LuanNH,LuanNH,(GOvklOEbWmw8TVv5T1TM),0,LuanNH/TUBinhDuong/DCS/VN,Nguyễn,Bau Bang,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\luannh,[email protected],1,0,1,0,0,0,0,03/16/2021 07:42:11 AM ZE7,[UserModifier],0,0,0,0,,,,,
truongtanbinh.btu/TUBinhDuong/DCS/VN,[email protected],Trường,Trường,truongtanbinh.btu/TUBinhDuong/DCS/VN; truongtanbinh.btu,truongtanbinh.btu,(GqjKBJjqIq0zMAoYRQgf),0,truongtanbinh.btu/TUBinhDuong/DCS/VN,Trường,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\truongtanbinh.btu,[email protected],1,0,1,0,0,0,0,03/28/2017 08:05:37 AM ZE7,[UserModifier],0,0,0,0,,,,,
LMPhuc/TUBinhDuong/DCS/VN,[email protected],Lê,Lê,LMPhuc/TUBinhDuong/DCS/VN; LMPhuc,LMPhuc,(GpyrhCLKKIftPEmRVKpu),0,LMPhuc/TUBinhDuong/DCS/VN,Lê,Ben Cat,,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\lmphuc,[email protected],1,0,1,0,0,0,0,03/06/2023 08:57:03 AM ZE7,[UserModifier],0,0,0,0,,,,,
nnptnt.bca/TUBinhDuong/DCS/VN,[email protected],CB Ngân hàng,CB Ngân hàng,nnptnt.bca/TUBinhDuong/DCS/VN; nnptnt.bca,nnptnt.bca,(GIs42QOYO2DlVoqXYLfJ),0,nnptnt.bca/TUBinhDuong/DCS/VN,CB Ngân hàng,Ben Cat,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\nnptntbc,[email protected],1,0,1,0,0,0,0,09/15/2020 03:23:55 PM ZE7,[UserModifier],0,0,0,0,,,,,
gianghtc/TUBinhDuong/DCS/VN,[email protected],Huỳnh,Huỳnh,gianghtc/TUBinhDuong/DCS/VN; gianghtc,gianghtc,(GrKopGoX6n3rIaB38KMz),0,gianghtc/TUBinhDuong/DCS/VN,Huỳnh,Bau Bang,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\gianghtc,[email protected],1,0,1,0,0,0,0,08/17/2018 07:51:17 AM ZE7,[UserModifier],0,0,0,0,,,,,
liendoanlaodong.btu/TUBinhDuong/DCS/VN,[email protected],Liên đoàn lao động,Liên đoàn lao động,liendoanlaodong.btu/TUBinhDuong/DCS/VN; liendoanlaodong.btu,liendoanlaodong.btu,(GdmeSCKQoVVfES0H4AXY),0,liendoanlaodong.btu/TUBinhDuong/DCS/VN,Liên đoàn lao động,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\liendoan,[email protected],1,0,1,0,0,0,0,03/17/2020 10:59:49 AM ZE7,[UserModifier],0,0,0,0,,,,,
pyte.btu/TUBinhDuong/DCS/VN,[email protected],Phòng Y tế,Phòng Y tế,pyte.btu/TUBinhDuong/DCS/VN; pyte.btu,pyte.btu,(GITBK+nfDMRL5Am5gJM4),0,pyte.btu/TUBinhDuong/DCS/VN,Phòng Y tế,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\pytebtu,[email protected],1,0,1,0,0,0,0,05/22/2017 09:21:05 AM ZE7,[UserModifier],0,0,0,0,,,,,
Reply
Reply
Reply
Reply
Reply
Posts: 12
Threads: 0
Joined: Sep 2025
thanks
Reply
Reply
Reply
Reply
Reply
Posts: 2
Threads: 0
Joined: Sep 2025
keke lol
Reply
Reply
Reply
Reply
Reply
Posts: 8
Threads: 0
Joined: May 2024
wow, amazing
Reply
Reply
Reply
Reply
Reply
Posts: 94
Threads: 0
Joined: Aug 2025
thanks
Ban reason: leeching (Permanent)
Reply
Reply
Reply
Reply
Reply
Posts: 99
Threads: 0
Joined: Aug 2025
thanks
Reply
Reply
Reply
Reply
Reply
Posts: 13
Threads: 0
Joined: Sep 2025
(14-06-25, 07:51 PM)0xCAFE Wrote: Hello DarkForums!
it's my first posting. good to see you all))
recently I've got access for a Vietnamese Local Government mail server, and then leaked 772GiB of data and encrypted their whole system.
but it seems they don't want to pay me the ransom, so I'm leaking this for sample.
I'll sale the entire data which includes mail dumps with soon. If you are interested, stay tuned!
Breach info
Breached by: Darkforums user 0xCAFE (me!)
Breached date: about feb 2025 -
Organisation name: Binh Duong province local government, Vietnam
Size: total 111.8MiB (*it's partial data)
What is this?
1. "SSL-Geotrust"
folder contains certifications things.
2. "names.nsf"
it is raw database binary file that contains user credentials, account identities, user information and more.
.nsf is exclusive format for IBM Lotus/HCL Domino, so you need a Domino licence or something to read them.
3. "mail.tinhuybinhduong.vn.names.nsf.csv"
it is dump of names.nsf through the web interface. it is useful but not contains all of the names.nsf contents, just partial.
it contains:
usernames, mail addresses, real names, hashed passwords, physical locations, client information, and more
total 948 rows.
Directory Structure
Show Content
Spoiler
[4.0K] ./
├── [4.0K] SSL-Geotrust/
│ ├── [4.0K] 04-4-2021/
│ │ ├── [2.2K] certificate.cer
│ │ ├── [1.1K] certreq.txt
│ │ ├── [1.6K] intermediate.cer
│ │ ├── [ 32K] keyring2020.kyr
│ │ ├── [ 129] keyring2020.sth
│ │ ├── [ 33K] keyring2021.kyr
│ │ ├── [ 129] keyring2021.sth
│ │ ├── [1.3K] root.cer
│ │ └── [5.5K] server.txt
│ ├── [4.0K] 05-4-2022/
│ │ ├── [4.0K] mail.tinhuybinhduong.vn/
│ │ │ ├── [2.4K] certificate.cer
│ │ │ └── [1.6K] intermediate.cer
│ │ ├── [1.1K] certreq.txt
│ │ ├── [ 30K] keyring2022.kyr
│ │ └── [ 129] keyring2022.sth
│ ├── [4.0K] 06-5-2022/
│ │ ├── [2.7K] certificate.crt
│ │ ├── [1.6K] intermediate.cer
│ │ ├── [2.0K] key.pem
│ │ ├── [ 33K] keyring2022.kyr
│ │ ├── [ 129] keyring2022.sth
│ │ ├── [1.6K] private.key
│ │ ├── [5.6K] server.txt
│ │ └── [3.5K] tinhuybinhduong_geotrust_5-5-2022.pfx
│ ├── [4.0K] 10-7-2024/
│ │ ├── [ 33K] keyring2024.kyr
│ │ ├── [ 129] keyring2024.sth
│ │ └── [5.6K] server.txt
│ ├── [4.0K] 21-7-2022/
│ │ ├── [1.6K] cabundle.crt
│ │ ├── [2.3K] certificate.crt
│ │ ├── [ 225] CMD.txt
│ │ ├── [2.0K] key.pem
│ │ ├── [ 33K] keyring2022.kyr
│ │ ├── [ 129] keyring2022.sth
│ │ ├── [1.6K] private.key
│ │ └── [5.6K] server.txt
│ ├── [4.0K] 27-6-2023/
│ │ ├── [ 33K] keyring2023.kyr
│ │ ├── [ 129] keyring2023.sth
│ │ └── [5.7K] server.txt
│ ├── [4.0K] backup/
│ │ ├── [ 32K] keyring2020.kyr
│ │ └── [ 129] keyring2020.sth
│ ├── [4.0K] kyrtool/
│ │ ├── [4.0K] linux32/
│ │ │ └── [ 45K] kyrtool
│ │ ├── [4.0K] linux64/
│ │ │ └── [ 52K] kyrtool
│ │ ├── [4.0K] w32/
│ │ │ └── [ 42K] kyrtool.exe
│ │ ├── [4.0K] w64/
│ │ │ └── [ 54K] kyrtool.exe
│ │ └── [1.6K] readme.txt
│ ├── [ 32K] keyring2020.kyr
│ ├── [ 129] keyring2020.sth
│ └── [ 84K] kyrtool.zip
├── [317K] mail.tinhuybinhduong.vn.names.nsf.csv
└── [112M] names.nsf
Sample:
DisplayName,DisplayMailAddress,dspFirstName,FirstName,dspFullName,ShortName,HTTPPassword,ClientType,Owner,ClntDate,CompanyName,Location,MailSystem,MailDomain,MailServer,MailFile,InternetAddress,MessageStorage,EncryptIncomingMail,CertificateDisplay,UserCertificateDisplay,CheckPassword,PasswordChangeInterval,PasswordGracePeriod,HTTPPasswordChangeDate,DocumentAccess,CryptoCap,Person_Main,Person_Detail,Person_Cert,ClntMachine,ClntBld,ClntPltfrm,JobTitle,City
SuLT/TUBinhDuong/DCS/VN,[email protected],Lâm,Lâm,SuLT/TUBinhDuong/DCS/VN; SuLT,SuLT,(G0IGOxsyDIka16e9C31H),0,SuLT/TUBinhDuong/DCS/VN,Lâm,Bac Tan uyen,Huyen uy Bac Tan uyen,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\sult,[email protected],1,0,1,0,0,0,0,09/09/2020 10:35:59 AM ZE7,[UserModifier],0,0,0,0,,,,,
AnPV/TUBinhDuong/DCS/VN,[email protected],Phạm,Phạm,AnPV/TUBinhDuong/DCS/VN; AnPV,AnPV,(GdL+wtoRwtTRYbIOWwtr),0,AnPV/TUBinhDuong/DCS/VN,Phạm,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\anpv,[email protected],1,0,1,0,0,0,0,06/04/2019 04:15:17 PM ZE7,[UserModifier],0,0,0,0,,,,,
TrungNH/TUBinhDuong/DCS/VN,[email protected],Nguyễn,Nguyễn,TrungNH/TUBinhDuong/DCS/VN; TrungNH,TrungNH,(Gt1b3QZ7jJzGJsWevVxY),0,TrungNH/TUBinhDuong/DCS/VN,Nguyễn,CS Phuoc Hoa,,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\trungnh,[email protected],1,0,1,0,0,0,0,11/20/2023 10:19:36 AM ZE7,[UserModifier],0,0,0,0,,,,,
QuangHQ/TUBinhDuong/DCS/VN,[email protected],Huỳnh,Huỳnh,QuangHQ/TUBinhDuong/DCS/VN; QuangHQ,QuangHQ,(Gs+DRw7vtmaC4RXTo1ey),0,QuangHQ/TUBinhDuong/DCS/VN,Huỳnh,Dau Tieng,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\quanghq,[email protected],1,0,1,0,0,0,0,09/29/2020 09:50:36 AM ZE7,[UserModifier],0,0,0,0,,,,,
thanhbm/TUBinhDuong/DCS/VN,[email protected],Bùi,Bùi,thanhbm/TUBinhDuong/DCS/VN; thanhbm,thanhbm,(GHsW5Xfg/M1AY6kiUFhA),0,thanhbm/TUBinhDuong/DCS/VN,Bùi,Ben Cat,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\thanhbm,[email protected],1,0,1,0,0,0,0,04/19/2018 08:20:14 AM ZE7,[UserModifier],0,0,0,0,,,,,
ldtbxh.dti/TUBinhDuong/DCS/VN,[email protected],,,ldtbxh.dti/TUBinhDuong/DCS/VN; ldtbxh.dti,ldtbxh.dti,(Gi2uewpDSLXOgseHRM2i),0,ldtbxh.dti/TUBinhDuong/DCS/VN,,Dau Tieng,Dau Tieng,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\ldtbxhdti,[email protected],1,0,1,0,0,0,0,01/17/2024 09:31:49 AM ZE7,[UserModifier],0,0,0,0,,,,,
cbcctha.bca/TUBinhDuong/DCS/VN,[email protected],Chi bộ,Chi bộ,cbcctha.bca/TUBinhDuong/DCS/VN; cbcctha.bca,cbcctha.bca,(GYCPhdvCe4LOHv5wwddS),0,cbcctha.bca/TUBinhDuong/DCS/VN,Chi bộ,Ben Cat,,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\cbccthab,[email protected],1,0,1,0,0,0,0,11/26/2018 11:09:01 AM ZE7,[UserModifier],0,0,0,0,,,,,
trungvt/TUBinhDuong/DCS/VN,[email protected],Võ,Võ,trungvt/TUBinhDuong/DCS/VN; trungvt,trungvt,(GCdGIkLY8kwDCQnB82e2),0,trungvt/TUBinhDuong/DCS/VN,Võ,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\trungvt,[email protected],1,0,1,0,0,0,0,01/12/2018 03:33:31 PM ZE7,[UserModifier],0,0,0,0,,,,,
LuanNH/TUBinhDuong/DCS/VN,[email protected],Nguyễn,Nguyễn,LuanNH/TUBinhDuong/DCS/VN; LuanNH,LuanNH,(GOvklOEbWmw8TVv5T1TM),0,LuanNH/TUBinhDuong/DCS/VN,Nguyễn,Bau Bang,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\luannh,[email protected],1,0,1,0,0,0,0,03/16/2021 07:42:11 AM ZE7,[UserModifier],0,0,0,0,,,,,
truongtanbinh.btu/TUBinhDuong/DCS/VN,[email protected],Trường,Trường,truongtanbinh.btu/TUBinhDuong/DCS/VN; truongtanbinh.btu,truongtanbinh.btu,(GqjKBJjqIq0zMAoYRQgf),0,truongtanbinh.btu/TUBinhDuong/DCS/VN,Trường,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\truongtanbinh.btu,[email protected],1,0,1,0,0,0,0,03/28/2017 08:05:37 AM ZE7,[UserModifier],0,0,0,0,,,,,
LMPhuc/TUBinhDuong/DCS/VN,[email protected],Lê,Lê,LMPhuc/TUBinhDuong/DCS/VN; LMPhuc,LMPhuc,(GpyrhCLKKIftPEmRVKpu),0,LMPhuc/TUBinhDuong/DCS/VN,Lê,Ben Cat,,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\lmphuc,[email protected],1,0,1,0,0,0,0,03/06/2023 08:57:03 AM ZE7,[UserModifier],0,0,0,0,,,,,
nnptnt.bca/TUBinhDuong/DCS/VN,[email protected],CB Ngân hàng,CB Ngân hàng,nnptnt.bca/TUBinhDuong/DCS/VN; nnptnt.bca,nnptnt.bca,(GIs42QOYO2DlVoqXYLfJ),0,nnptnt.bca/TUBinhDuong/DCS/VN,CB Ngân hàng,Ben Cat,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\nnptntbc,[email protected],1,0,1,0,0,0,0,09/15/2020 03:23:55 PM ZE7,[UserModifier],0,0,0,0,,,,,
gianghtc/TUBinhDuong/DCS/VN,[email protected],Huỳnh,Huỳnh,gianghtc/TUBinhDuong/DCS/VN; gianghtc,gianghtc,(GrKopGoX6n3rIaB38KMz),0,gianghtc/TUBinhDuong/DCS/VN,Huỳnh,Bau Bang,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\gianghtc,[email protected],1,0,1,0,0,0,0,08/17/2018 07:51:17 AM ZE7,[UserModifier],0,0,0,0,,,,,
liendoanlaodong.btu/TUBinhDuong/DCS/VN,[email protected],Liên đoàn lao động,Liên đoàn lao động,liendoanlaodong.btu/TUBinhDuong/DCS/VN; liendoanlaodong.btu,liendoanlaodong.btu,(GdmeSCKQoVVfES0H4AXY),0,liendoanlaodong.btu/TUBinhDuong/DCS/VN,Liên đoàn lao động,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\liendoan,[email protected],1,0,1,0,0,0,0,03/17/2020 10:59:49 AM ZE7,[UserModifier],0,0,0,0,,,,,
pyte.btu/TUBinhDuong/DCS/VN,[email protected],Phòng Y tế,Phòng Y tế,pyte.btu/TUBinhDuong/DCS/VN; pyte.btu,pyte.btu,(GITBK+nfDMRL5Am5gJM4),0,pyte.btu/TUBinhDuong/DCS/VN,Phòng Y tế,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\pytebtu,[email protected],1,0,1,0,0,0,0,05/22/2017 09:21:05 AM ZE7,[UserModifier],0,0,0,0,,,,,
Download here: im reading
Reply
Reply
Reply
Reply
Reply
Posts: 24
Threads: 0
Joined: Sep 2025
Thanks
Reply
Reply
Reply
Reply
Reply
Posts: 6
Threads: 0
Joined: Oct 2025
(14-06-25, 07:51 PM)0xCAFE Wrote: Hello DarkForums!
it's my first posting. good to see you all))
recently I've got access for a Vietnamese Local Government mail server, and then leaked 772GiB of data and encrypted their whole system.
but it seems they don't want to pay me the ransom, so I'm leaking this for sample.
I'll sale the entire data which includes mail dumps with soon. If you are interested, stay tuned!
Breach info
Breached by: Darkforums user 0xCAFE (me!)
Breached date: about feb 2025 -
Organisation name: Binh Duong province local government, Vietnam
Size: total 111.8MiB (*it's partial data)
What is this?
1. "SSL-Geotrust"
folder contains certifications things.
2. "names.nsf"
it is raw database binary file that contains user credentials, account identities, user information and more.
.nsf is exclusive format for IBM Lotus/HCL Domino, so you need a Domino licence or something to read them.
3. "mail.tinhuybinhduong.vn.names.nsf.csv"
it is dump of names.nsf through the web interface. it is useful but not contains all of the names.nsf contents, just partial.
it contains:
usernames, mail addresses, real names, hashed passwords, physical locations, client information, and more
total 948 rows.
Directory Structure
Show Content
Spoiler
[4.0K] ./
├── [4.0K] SSL-Geotrust/
│ ├── [4.0K] 04-4-2021/
│ │ ├── [2.2K] certificate.cer
│ │ ├── [1.1K] certreq.txt
│ │ ├── [1.6K] intermediate.cer
│ │ ├── [ 32K] keyring2020.kyr
│ │ ├── [ 129] keyring2020.sth
│ │ ├── [ 33K] keyring2021.kyr
│ │ ├── [ 129] keyring2021.sth
│ │ ├── [1.3K] root.cer
│ │ └── [5.5K] server.txt
│ ├── [4.0K] 05-4-2022/
│ │ ├── [4.0K] mail.tinhuybinhduong.vn/
│ │ │ ├── [2.4K] certificate.cer
│ │ │ └── [1.6K] intermediate.cer
│ │ ├── [1.1K] certreq.txt
│ │ ├── [ 30K] keyring2022.kyr
│ │ └── [ 129] keyring2022.sth
│ ├── [4.0K] 06-5-2022/
│ │ ├── [2.7K] certificate.crt
│ │ ├── [1.6K] intermediate.cer
│ │ ├── [2.0K] key.pem
│ │ ├── [ 33K] keyring2022.kyr
│ │ ├── [ 129] keyring2022.sth
│ │ ├── [1.6K] private.key
│ │ ├── [5.6K] server.txt
│ │ └── [3.5K] tinhuybinhduong_geotrust_5-5-2022.pfx
│ ├── [4.0K] 10-7-2024/
│ │ ├── [ 33K] keyring2024.kyr
│ │ ├── [ 129] keyring2024.sth
│ │ └── [5.6K] server.txt
│ ├── [4.0K] 21-7-2022/
│ │ ├── [1.6K] cabundle.crt
│ │ ├── [2.3K] certificate.crt
│ │ ├── [ 225] CMD.txt
│ │ ├── [2.0K] key.pem
│ │ ├── [ 33K] keyring2022.kyr
│ │ ├── [ 129] keyring2022.sth
│ │ ├── [1.6K] private.key
│ │ └── [5.6K] server.txt
│ ├── [4.0K] 27-6-2023/
│ │ ├── [ 33K] keyring2023.kyr
│ │ ├── [ 129] keyring2023.sth
│ │ └── [5.7K] server.txt
│ ├── [4.0K] backup/
│ │ ├── [ 32K] keyring2020.kyr
│ │ └── [ 129] keyring2020.sth
│ ├── [4.0K] kyrtool/
│ │ ├── [4.0K] linux32/
│ │ │ └── [ 45K] kyrtool
│ │ ├── [4.0K] linux64/
│ │ │ └── [ 52K] kyrtool
│ │ ├── [4.0K] w32/
│ │ │ └── [ 42K] kyrtool.exe
│ │ ├── [4.0K] w64/
│ │ │ └── [ 54K] kyrtool.exe
│ │ └── [1.6K] readme.txt
│ ├── [ 32K] keyring2020.kyr
│ ├── [ 129] keyring2020.sth
│ └── [ 84K] kyrtool.zip
├── [317K] mail.tinhuybinhduong.vn.names.nsf.csv
└── [112M] names.nsf
Sample:
DisplayName,DisplayMailAddress,dspFirstName,FirstName,dspFullName,ShortName,HTTPPassword,ClientType,Owner,ClntDate,CompanyName,Location,MailSystem,MailDomain,MailServer,MailFile,InternetAddress,MessageStorage,EncryptIncomingMail,CertificateDisplay,UserCertificateDisplay,CheckPassword,PasswordChangeInterval,PasswordGracePeriod,HTTPPasswordChangeDate,DocumentAccess,CryptoCap,Person_Main,Person_Detail,Person_Cert,ClntMachine,ClntBld,ClntPltfrm,JobTitle,City
SuLT/TUBinhDuong/DCS/VN,[email protected],Lâm,Lâm,SuLT/TUBinhDuong/DCS/VN; SuLT,SuLT,(G0IGOxsyDIka16e9C31H),0,SuLT/TUBinhDuong/DCS/VN,Lâm,Bac Tan uyen,Huyen uy Bac Tan uyen,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\sult,[email protected],1,0,1,0,0,0,0,09/09/2020 10:35:59 AM ZE7,[UserModifier],0,0,0,0,,,,,
AnPV/TUBinhDuong/DCS/VN,[email protected],Phạm,Phạm,AnPV/TUBinhDuong/DCS/VN; AnPV,AnPV,(GdL+wtoRwtTRYbIOWwtr),0,AnPV/TUBinhDuong/DCS/VN,Phạm,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\anpv,[email protected],1,0,1,0,0,0,0,06/04/2019 04:15:17 PM ZE7,[UserModifier],0,0,0,0,,,,,
TrungNH/TUBinhDuong/DCS/VN,[email protected],Nguyễn,Nguyễn,TrungNH/TUBinhDuong/DCS/VN; TrungNH,TrungNH,(Gt1b3QZ7jJzGJsWevVxY),0,TrungNH/TUBinhDuong/DCS/VN,Nguyễn,CS Phuoc Hoa,,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\trungnh,[email protected],1,0,1,0,0,0,0,11/20/2023 10:19:36 AM ZE7,[UserModifier],0,0,0,0,,,,,
QuangHQ/TUBinhDuong/DCS/VN,[email protected],Huỳnh,Huỳnh,QuangHQ/TUBinhDuong/DCS/VN; QuangHQ,QuangHQ,(Gs+DRw7vtmaC4RXTo1ey),0,QuangHQ/TUBinhDuong/DCS/VN,Huỳnh,Dau Tieng,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\quanghq,[email protected],1,0,1,0,0,0,0,09/29/2020 09:50:36 AM ZE7,[UserModifier],0,0,0,0,,,,,
thanhbm/TUBinhDuong/DCS/VN,[email protected],Bùi,Bùi,thanhbm/TUBinhDuong/DCS/VN; thanhbm,thanhbm,(GHsW5Xfg/M1AY6kiUFhA),0,thanhbm/TUBinhDuong/DCS/VN,Bùi,Ben Cat,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\thanhbm,[email protected],1,0,1,0,0,0,0,04/19/2018 08:20:14 AM ZE7,[UserModifier],0,0,0,0,,,,,
ldtbxh.dti/TUBinhDuong/DCS/VN,[email protected],,,ldtbxh.dti/TUBinhDuong/DCS/VN; ldtbxh.dti,ldtbxh.dti,(Gi2uewpDSLXOgseHRM2i),0,ldtbxh.dti/TUBinhDuong/DCS/VN,,Dau Tieng,Dau Tieng,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\ldtbxhdti,[email protected],1,0,1,0,0,0,0,01/17/2024 09:31:49 AM ZE7,[UserModifier],0,0,0,0,,,,,
cbcctha.bca/TUBinhDuong/DCS/VN,[email protected],Chi bộ,Chi bộ,cbcctha.bca/TUBinhDuong/DCS/VN; cbcctha.bca,cbcctha.bca,(GYCPhdvCe4LOHv5wwddS),0,cbcctha.bca/TUBinhDuong/DCS/VN,Chi bộ,Ben Cat,,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\cbccthab,[email protected],1,0,1,0,0,0,0,11/26/2018 11:09:01 AM ZE7,[UserModifier],0,0,0,0,,,,,
trungvt/TUBinhDuong/DCS/VN,[email protected],Võ,Võ,trungvt/TUBinhDuong/DCS/VN; trungvt,trungvt,(GCdGIkLY8kwDCQnB82e2),0,trungvt/TUBinhDuong/DCS/VN,Võ,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\trungvt,[email protected],1,0,1,0,0,0,0,01/12/2018 03:33:31 PM ZE7,[UserModifier],0,0,0,0,,,,,
LuanNH/TUBinhDuong/DCS/VN,[email protected],Nguyễn,Nguyễn,LuanNH/TUBinhDuong/DCS/VN; LuanNH,LuanNH,(GOvklOEbWmw8TVv5T1TM),0,LuanNH/TUBinhDuong/DCS/VN,Nguyễn,Bau Bang,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\luannh,[email protected],1,0,1,0,0,0,0,03/16/2021 07:42:11 AM ZE7,[UserModifier],0,0,0,0,,,,,
truongtanbinh.btu/TUBinhDuong/DCS/VN,[email protected],Trường,Trường,truongtanbinh.btu/TUBinhDuong/DCS/VN; truongtanbinh.btu,truongtanbinh.btu,(GqjKBJjqIq0zMAoYRQgf),0,truongtanbinh.btu/TUBinhDuong/DCS/VN,Trường,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\truongtanbinh.btu,[email protected],1,0,1,0,0,0,0,03/28/2017 08:05:37 AM ZE7,[UserModifier],0,0,0,0,,,,,
LMPhuc/TUBinhDuong/DCS/VN,[email protected],Lê,Lê,LMPhuc/TUBinhDuong/DCS/VN; LMPhuc,LMPhuc,(GpyrhCLKKIftPEmRVKpu),0,LMPhuc/TUBinhDuong/DCS/VN,Lê,Ben Cat,,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\lmphuc,[email protected],1,0,1,0,0,0,0,03/06/2023 08:57:03 AM ZE7,[UserModifier],0,0,0,0,,,,,
nnptnt.bca/TUBinhDuong/DCS/VN,[email protected],CB Ngân hàng,CB Ngân hàng,nnptnt.bca/TUBinhDuong/DCS/VN; nnptnt.bca,nnptnt.bca,(GIs42QOYO2DlVoqXYLfJ),0,nnptnt.bca/TUBinhDuong/DCS/VN,CB Ngân hàng,Ben Cat,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\nnptntbc,[email protected],1,0,1,0,0,0,0,09/15/2020 03:23:55 PM ZE7,[UserModifier],0,0,0,0,,,,,
gianghtc/TUBinhDuong/DCS/VN,[email protected],Huỳnh,Huỳnh,gianghtc/TUBinhDuong/DCS/VN; gianghtc,gianghtc,(GrKopGoX6n3rIaB38KMz),0,gianghtc/TUBinhDuong/DCS/VN,Huỳnh,Bau Bang,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\gianghtc,[email protected],1,0,1,0,0,0,0,08/17/2018 07:51:17 AM ZE7,[UserModifier],0,0,0,0,,,,,
liendoanlaodong.btu/TUBinhDuong/DCS/VN,[email protected],Liên đoàn lao động,Liên đoàn lao động,liendoanlaodong.btu/TUBinhDuong/DCS/VN; liendoanlaodong.btu,liendoanlaodong.btu,(GdmeSCKQoVVfES0H4AXY),0,liendoanlaodong.btu/TUBinhDuong/DCS/VN,Liên đoàn lao động,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\liendoan,[email protected],1,0,1,0,0,0,0,03/17/2020 10:59:49 AM ZE7,[UserModifier],0,0,0,0,,,,,
pyte.btu/TUBinhDuong/DCS/VN,[email protected],Phòng Y tế,Phòng Y tế,pyte.btu/TUBinhDuong/DCS/VN; pyte.btu,pyte.btu,(GITBK+nfDMRL5Am5gJM4),0,pyte.btu/TUBinhDuong/DCS/VN,Phòng Y tế,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\pytebtu,[email protected],1,0,1,0,0,0,0,05/22/2017 09:21:05 AM ZE7,[UserModifier],0,0,0,0,,,,,
Download here: thanks bro
Reply
Reply
Reply
Reply
Reply
|
