DBHunter
Infinity Member
Golden Member
- Joined
- August 23, 2025
- Messages
- 2,369
- Reaction score
- 5,405
- Points
- 113
- Thread Author
- #1
Yo beasts,
Just popped Bhisa.ID (big Indonesian Travel player).
Rooted their main ERP cluster harder than a $5 VPS on Black Friday.
What’s inside:
Just popped Bhisa.ID (big Indonesian Travel player).
Rooted their main ERP cluster harder than a $5 VPS on Black Friday.
What’s inside:
- 21 MySQL databases (full dumps .sql.gz)
- Complete source code (CodeIgniter 3.x, custom modules, admin panels)
- 200k+ real user records (names, emails, phone, encrypted passwords)
- Internal API keys, payment gateway secrets (Winpay, BCA, Mandiri, etc.)
- Employee panel + HR database (gaji, NPWP, everything)
- 2016–2025 financial reports (unaudited, lol)
Total size: ~187 GB
They still haven’t patched the RCE i chained with the misconfigured CI session driver.
Shoutout to their dev who left debug=true in production LMAO.
Seed or bleed.
No re-uploads to clearnet, stay dark.
They still haven’t patched the RCE i chained with the misconfigured CI session driver.
Shoutout to their dev who left debug=true in production LMAO.
Seed or bleed.
No re-uploads to clearnet, stay dark.