Posts: 8
Threads: 0
Joined: Jul 2025
awesome
Reply
Reply
Reply
Reply
Reply
Posts: 3
Threads: 0
Joined: Sep 2025
(14-06-25, 07:51 PM)0xCAFE Wrote: Hello DarkForums!
it's my first posting. good to see you all))
recently I've got access for a Vietnamese Local Government mail server, and then leaked 772GiB of data and encrypted their whole system.
but it seems they don't want to pay me the ransom, so I'm leaking this for sample.
I'll sale the entire data which includes mail dumps with soon. If you are interested, stay tuned!
Breach info
Breached by: Darkforums user 0xCAFE (me!)
Breached date: about feb 2025 -
Organisation name: Binh Duong province local government, Vietnam
Size: total 111.8MiB (*it's partial data)
What is this?
1. "SSL-Geotrust"
folder contains certifications things.
2. "names.nsf"
it is raw database binary file that contains user credentials, account identities, user information and more.
.nsf is exclusive format for IBM Lotus/HCL Domino, so you need a Domino licence or something to read them.
3. "mail.tinhuybinhduong.vn.names.nsf.csv"
it is dump of names.nsf through the web interface. it is useful but not contains all of the names.nsf contents, just partial.
it contains:
usernames, mail addresses, real names, hashed passwords, physical locations, client information, and more
total 948 rows.
Directory Structure
Show Content
Spoiler
[4.0K] ./
├── [4.0K] SSL-Geotrust/
│ ├── [4.0K] 04-4-2021/
│ │ ├── [2.2K] certificate.cer
│ │ ├── [1.1K] certreq.txt
│ │ ├── [1.6K] intermediate.cer
│ │ ├── [ 32K] keyring2020.kyr
│ │ ├── [ 129] keyring2020.sth
│ │ ├── [ 33K] keyring2021.kyr
│ │ ├── [ 129] keyring2021.sth
│ │ ├── [1.3K] root.cer
│ │ └── [5.5K] server.txt
│ ├── [4.0K] 05-4-2022/
│ │ ├── [4.0K] mail.tinhuybinhduong.vn/
│ │ │ ├── [2.4K] certificate.cer
│ │ │ └── [1.6K] intermediate.cer
│ │ ├── [1.1K] certreq.txt
│ │ ├── [ 30K] keyring2022.kyr
│ │ └── [ 129] keyring2022.sth
│ ├── [4.0K] 06-5-2022/
│ │ ├── [2.7K] certificate.crt
│ │ ├── [1.6K] intermediate.cer
│ │ ├── [2.0K] key.pem
│ │ ├── [ 33K] keyring2022.kyr
│ │ ├── [ 129] keyring2022.sth
│ │ ├── [1.6K] private.key
│ │ ├── [5.6K] server.txt
│ │ └── [3.5K] tinhuybinhduong_geotrust_5-5-2022.pfx
│ ├── [4.0K] 10-7-2024/
│ │ ├── [ 33K] keyring2024.kyr
│ │ ├── [ 129] keyring2024.sth
│ │ └── [5.6K] server.txt
│ ├── [4.0K] 21-7-2022/
│ │ ├── [1.6K] cabundle.crt
│ │ ├── [2.3K] certificate.crt
│ │ ├── [ 225] CMD.txt
│ │ ├── [2.0K] key.pem
│ │ ├── [ 33K] keyring2022.kyr
│ │ ├── [ 129] keyring2022.sth
│ │ ├── [1.6K] private.key
│ │ └── [5.6K] server.txt
│ ├── [4.0K] 27-6-2023/
│ │ ├── [ 33K] keyring2023.kyr
│ │ ├── [ 129] keyring2023.sth
│ │ └── [5.7K] server.txt
│ ├── [4.0K] backup/
│ │ ├── [ 32K] keyring2020.kyr
│ │ └── [ 129] keyring2020.sth
│ ├── [4.0K] kyrtool/
│ │ ├── [4.0K] linux32/
│ │ │ └── [ 45K] kyrtool
│ │ ├── [4.0K] linux64/
│ │ │ └── [ 52K] kyrtool
│ │ ├── [4.0K] w32/
│ │ │ └── [ 42K] kyrtool.exe
│ │ ├── [4.0K] w64/
│ │ │ └── [ 54K] kyrtool.exe
│ │ └── [1.6K] readme.txt
│ ├── [ 32K] keyring2020.kyr
│ ├── [ 129] keyring2020.sth
│ └── [ 84K] kyrtool.zip
├── [317K] mail.tinhuybinhduong.vn.names.nsf.csv
└── [112M] names.nsf
Sample:
DisplayName,DisplayMailAddress,dspFirstName,FirstName,dspFullName,ShortName,HTTPPassword,ClientType,Owner,ClntDate,CompanyName,Location,MailSystem,MailDomain,MailServer,MailFile,InternetAddress,MessageStorage,EncryptIncomingMail,CertificateDisplay,UserCertificateDisplay,CheckPassword,PasswordChangeInterval,PasswordGracePeriod,HTTPPasswordChangeDate,DocumentAccess,CryptoCap,Person_Main,Person_Detail,Person_Cert,ClntMachine,ClntBld,ClntPltfrm,JobTitle,City
SuLT/TUBinhDuong/DCS/VN,[email protected],Lâm,Lâm,SuLT/TUBinhDuong/DCS/VN; SuLT,SuLT,(G0IGOxsyDIka16e9C31H),0,SuLT/TUBinhDuong/DCS/VN,Lâm,Bac Tan uyen,Huyen uy Bac Tan uyen,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\sult,[email protected],1,0,1,0,0,0,0,09/09/2020 10:35:59 AM ZE7,[UserModifier],0,0,0,0,,,,,
AnPV/TUBinhDuong/DCS/VN,[email protected],Phạm,Phạm,AnPV/TUBinhDuong/DCS/VN; AnPV,AnPV,(GdL+wtoRwtTRYbIOWwtr),0,AnPV/TUBinhDuong/DCS/VN,Phạm,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\anpv,[email protected],1,0,1,0,0,0,0,06/04/2019 04:15:17 PM ZE7,[UserModifier],0,0,0,0,,,,,
TrungNH/TUBinhDuong/DCS/VN,[email protected],Nguyễn,Nguyễn,TrungNH/TUBinhDuong/DCS/VN; TrungNH,TrungNH,(Gt1b3QZ7jJzGJsWevVxY),0,TrungNH/TUBinhDuong/DCS/VN,Nguyễn,CS Phuoc Hoa,,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\trungnh,[email protected],1,0,1,0,0,0,0,11/20/2023 10:19:36 AM ZE7,[UserModifier],0,0,0,0,,,,,
QuangHQ/TUBinhDuong/DCS/VN,[email protected],Huỳnh,Huỳnh,QuangHQ/TUBinhDuong/DCS/VN; QuangHQ,QuangHQ,(Gs+DRw7vtmaC4RXTo1ey),0,QuangHQ/TUBinhDuong/DCS/VN,Huỳnh,Dau Tieng,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\quanghq,[email protected],1,0,1,0,0,0,0,09/29/2020 09:50:36 AM ZE7,[UserModifier],0,0,0,0,,,,,
thanhbm/TUBinhDuong/DCS/VN,[email protected],Bùi,Bùi,thanhbm/TUBinhDuong/DCS/VN; thanhbm,thanhbm,(GHsW5Xfg/M1AY6kiUFhA),0,thanhbm/TUBinhDuong/DCS/VN,Bùi,Ben Cat,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\thanhbm,[email protected],1,0,1,0,0,0,0,04/19/2018 08:20:14 AM ZE7,[UserModifier],0,0,0,0,,,,,
ldtbxh.dti/TUBinhDuong/DCS/VN,[email protected],,,ldtbxh.dti/TUBinhDuong/DCS/VN; ldtbxh.dti,ldtbxh.dti,(Gi2uewpDSLXOgseHRM2i),0,ldtbxh.dti/TUBinhDuong/DCS/VN,,Dau Tieng,Dau Tieng,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\ldtbxhdti,[email protected],1,0,1,0,0,0,0,01/17/2024 09:31:49 AM ZE7,[UserModifier],0,0,0,0,,,,,
cbcctha.bca/TUBinhDuong/DCS/VN,[email protected],Chi bộ,Chi bộ,cbcctha.bca/TUBinhDuong/DCS/VN; cbcctha.bca,cbcctha.bca,(GYCPhdvCe4LOHv5wwddS),0,cbcctha.bca/TUBinhDuong/DCS/VN,Chi bộ,Ben Cat,,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\cbccthab,[email protected],1,0,1,0,0,0,0,11/26/2018 11:09:01 AM ZE7,[UserModifier],0,0,0,0,,,,,
trungvt/TUBinhDuong/DCS/VN,[email protected],Võ,Võ,trungvt/TUBinhDuong/DCS/VN; trungvt,trungvt,(GCdGIkLY8kwDCQnB82e2),0,trungvt/TUBinhDuong/DCS/VN,Võ,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\trungvt,[email protected],1,0,1,0,0,0,0,01/12/2018 03:33:31 PM ZE7,[UserModifier],0,0,0,0,,,,,
LuanNH/TUBinhDuong/DCS/VN,[email protected],Nguyễn,Nguyễn,LuanNH/TUBinhDuong/DCS/VN; LuanNH,LuanNH,(GOvklOEbWmw8TVv5T1TM),0,LuanNH/TUBinhDuong/DCS/VN,Nguyễn,Bau Bang,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\luannh,[email protected],1,0,1,0,0,0,0,03/16/2021 07:42:11 AM ZE7,[UserModifier],0,0,0,0,,,,,
truongtanbinh.btu/TUBinhDuong/DCS/VN,[email protected],Trường,Trường,truongtanbinh.btu/TUBinhDuong/DCS/VN; truongtanbinh.btu,truongtanbinh.btu,(GqjKBJjqIq0zMAoYRQgf),0,truongtanbinh.btu/TUBinhDuong/DCS/VN,Trường,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\truongtanbinh.btu,[email protected],1,0,1,0,0,0,0,03/28/2017 08:05:37 AM ZE7,[UserModifier],0,0,0,0,,,,,
LMPhuc/TUBinhDuong/DCS/VN,[email protected],Lê,Lê,LMPhuc/TUBinhDuong/DCS/VN; LMPhuc,LMPhuc,(GpyrhCLKKIftPEmRVKpu),0,LMPhuc/TUBinhDuong/DCS/VN,Lê,Ben Cat,,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\lmphuc,[email protected],1,0,1,0,0,0,0,03/06/2023 08:57:03 AM ZE7,[UserModifier],0,0,0,0,,,,,
nnptnt.bca/TUBinhDuong/DCS/VN,[email protected],CB Ngân hàng,CB Ngân hàng,nnptnt.bca/TUBinhDuong/DCS/VN; nnptnt.bca,nnptnt.bca,(GIs42QOYO2DlVoqXYLfJ),0,nnptnt.bca/TUBinhDuong/DCS/VN,CB Ngân hàng,Ben Cat,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\nnptntbc,[email protected],1,0,1,0,0,0,0,09/15/2020 03:23:55 PM ZE7,[UserModifier],0,0,0,0,,,,,
gianghtc/TUBinhDuong/DCS/VN,[email protected],Huỳnh,Huỳnh,gianghtc/TUBinhDuong/DCS/VN; gianghtc,gianghtc,(GrKopGoX6n3rIaB38KMz),0,gianghtc/TUBinhDuong/DCS/VN,Huỳnh,Bau Bang,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\gianghtc,[email protected],1,0,1,0,0,0,0,08/17/2018 07:51:17 AM ZE7,[UserModifier],0,0,0,0,,,,,
liendoanlaodong.btu/TUBinhDuong/DCS/VN,[email protected],Liên đoàn lao động,Liên đoàn lao động,liendoanlaodong.btu/TUBinhDuong/DCS/VN; liendoanlaodong.btu,liendoanlaodong.btu,(GdmeSCKQoVVfES0H4AXY),0,liendoanlaodong.btu/TUBinhDuong/DCS/VN,Liên đoàn lao động,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\liendoan,[email protected],1,0,1,0,0,0,0,03/17/2020 10:59:49 AM ZE7,[UserModifier],0,0,0,0,,,,,
pyte.btu/TUBinhDuong/DCS/VN,[email protected],Phòng Y tế,Phòng Y tế,pyte.btu/TUBinhDuong/DCS/VN; pyte.btu,pyte.btu,(GITBK+nfDMRL5Am5gJM4),0,pyte.btu/TUBinhDuong/DCS/VN,Phòng Y tế,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\pytebtu,[email protected],1,0,1,0,0,0,0,05/22/2017 09:21:05 AM ZE7,[UserModifier],0,0,0,0,,,,,
Download here:
Reply
Reply
Reply
Reply
Reply
Posts: 763
Threads: 0
Joined: Apr 2025
thx, checking this
Reply
Reply
Reply
Reply
Reply
Posts: 5
Threads: 0
Joined: May 2025
many thanks
Reply
Reply
Reply
Reply
Reply
Posts: 17
Threads: 0
Joined: Nov 2025
Thanks
Reply
Reply
Reply
Reply
Reply
Posts: 3
Threads: 0
Joined: Nov 2025
thanks
Reply
Reply
Reply
Reply
Reply
Posts: 83
Threads: 0
Joined: Aug 2025
thanks
Reply
Reply
Reply
Reply
Reply
Posts: 4
Threads: 0
Joined: Sep 2025
good jobs
Reply
Reply
Reply
Reply
Reply
Posts: 21
Threads: 0
Joined: Nov 2025
hello
Reply
Reply
Reply
Reply
Reply
Posts: 29
Threads: 0
Joined: Jun 2025
thanks
Reply
Reply
Reply
Reply
Reply
|
