New IT dump for sale
Data spanning : 2018 - 2026
9.9M of financial records
12K companies exposed
Quick details :
Purchase invoices ( incoming )
Issued sale invoices ( outgoing )
Till/POS receipts/transactions ( retail revenue )
Other related docs.
@half
Data spanning : 2018 - 2026
9.9M of financial records
12K companies exposed
Quick details :
Purchase invoices ( incoming )
Issued sale invoices ( outgoing )
Till/POS receipts/transactions ( retail revenue )
Other related docs.
@half
https://dollarbird.co/ Partial dump ( 33k out of 300k tot users )
Email | Name | Surname
All financial related
Sadly the vuln got patched mid-dumping
@half
Email | Name | Surname
All financial related
Sadly the vuln got patched mid-dumping
@half
Dollarbird
Collaborative smart calendar for your finances with a spark of AI.
Selling bangladesh payment processor access :
- Full db access ( READ/WRITE/DELETE perm. )
- AWS S3 full access
- Email and SMS keys of the target
- Hash Hide SALT ( You can decrypt everything )
- Symfony session forgery ( You can forge any requests you want )
@Half
- Full db access ( READ/WRITE/DELETE perm. )
- AWS S3 full access
- Email and SMS keys of the target
- Hash Hide SALT ( You can decrypt everything )
- Symfony session forgery ( You can forge any requests you want )
@Half
Equity Bank Kenya Dump :
- Kenya agents : 11,047 individual agent or agency business records, each with the legal trading name and precise GPS coordinates (latitude, longitude).
- Kenya agent codes : 11,213 mappings from unique agent code numbers to registered agent names.
- Kenya branches and ATMs: 129 branch locations and 129 ATM locations with name and GPS coordinates.
- Rwanda branches and ATMs: 12 branches and 12 ATMs.
- Tanzania branches and ATMs: 14 branches and 14 ATMs.
- Uganda branches and ATMs: 32 branches and 32 ATMs.
Total: 22,634 records across four countries.
@half
- Kenya agents : 11,047 individual agent or agency business records, each with the legal trading name and precise GPS coordinates (latitude, longitude).
- Kenya agent codes : 11,213 mappings from unique agent code numbers to registered agent names.
- Kenya branches and ATMs: 129 branch locations and 129 ATM locations with name and GPS coordinates.
- Rwanda branches and ATMs: 12 branches and 12 ATMs.
- Tanzania branches and ATMs: 14 branches and 14 ATMs.
- Uganda branches and ATMs: 32 branches and 32 ATMs.
Total: 22,634 records across four countries.
@half
New UK p2p platform dump :
1950 total Investors
dumps include :
- Investor report ( Legasl name, Lender id, Total GBP Balance, Non GBP founds, Amount in lends )
- BACS bank coordinates ( Sort code , Account number, GBP Amount, Payment date, Internal REF id )
- Daily Loan Books ( Investor name, Name and address of estate propieties, Amount invested for each lend, Interest % of certficates, ID ISA, Type of investiment, Name of wealth manager, Name of SSAS/SIPP operators )
- Fiscal Declaration files ( PDF, Fiscal resumee for 2025-2026 )
- ISA Transfers ( Documents of trasfers ISA between providers )
- Documents of Mortgage
- Daily credit/debit movements of the full platform
@half for info
1950 total Investors
dumps include :
- Investor report ( Legasl name, Lender id, Total GBP Balance, Non GBP founds, Amount in lends )
- BACS bank coordinates ( Sort code , Account number, GBP Amount, Payment date, Internal REF id )
- Daily Loan Books ( Investor name, Name and address of estate propieties, Amount invested for each lend, Interest % of certficates, ID ISA, Type of investiment, Name of wealth manager, Name of SSAS/SIPP operators )
- Fiscal Declaration files ( PDF, Fiscal resumee for 2025-2026 )
- ISA Transfers ( Documents of trasfers ISA between providers )
- Documents of Mortgage
- Daily credit/debit movements of the full platform
@half for info
If any of you are intrested here is a BURP AI closed beta leak
I think this version of burp will be crazy , its basically claude code for auditing/exploiting
It can invoke burp usual tools and use them , probably custom built AI, very good at exploiting
I think this version of burp will be crazy , its basically claude code for auditing/exploiting
It can invoke burp usual tools and use them , probably custom built AI, very good at exploiting
PostePay | 6439
Intesa Sanpaolo | 5568
UniCredit | 2543
Poste Italiane BancoPosta | 1832
Banca Hype | 1360
Isybank | 1166
Intesa Sanpaolo rete locale (ABI 08xxx non in elenco) | 1119
BPER Banca | 1093
Banco BPM | 888
Credit Agricole Cariparma | 868
BBVA Italia | 626
Banca Mediolanum | 606
FinecoBank | 469
BNL BNP Paribas | 462
Monte dei Paschi di Siena | 428
ING Italia | 367
Banca Popolare di Sondrio | 297
ABI_32532_non_mappato | 269
Banca Sella | 215
Sudtiroler Volksbank Alto Adige | 174
ABI_06085_non_mappato | 137
Intesa Sanpaolo ex Pop Vicenza | 135
Intesa Sanpaolo ex Pop Novara | 117
ABI_03669_non_mappato | 111
ABI_03442_non_mappato | 102
Findomestic Banca | 101
N26 | 79
Credit Agricole Italia | 76
Mediobanca | 64
ABI_03674_non_mappato | 57
CheBanca | 55
Volksbank Banca | 52
ABI_06270_non_mappato | 52
ABI_36003_non_mappato | 35
ABI_07084_non_mappato | 33
ABI_03025_non_mappato | 33
ABI_03395_non_mappato | 31
ABI_03589_non_mappato | 30
ABI_03075_non_mappato | 28
Banca Agricola Popolare Ragusa | 27
Cassa Risparmio Bolzano Sparkasse | 25
Banca Popolare Puglia Basilicata | 25
ABI_05018_non_mappato | 24
ABI_05156_non_mappato | 23
ABI_05424_non_mappato | 20
ABI_05080_non_mappato | 20
ABI_32875_non_mappato | 19
ABI_06305_non_mappato | 17
Intesa Sanpaolo ex Pop Bari | 16
ABI_06170_non_mappato | 15
ABI_06370_non_mappato | 14
ABI_06175_non_mappato | 14
ABI_03263_non_mappato | 14
ABI_07090_non_mappato | 13
ABI_07085_non_mappato | 13
ABI_07076_non_mappato | 12
ABI_05385_non_mappato | 12
ABI_05216_non_mappato | 12
ABI_03365_non_mappato | 11
ABI_03048_non_mappato | 11
ABI_05428_non_mappato | 10
ABI_07070_non_mappato | 9
ABI_05336_non_mappato | 9
ABI_06150_non_mappato | 8
ABI_03441_non_mappato | 8
ABI_03138_non_mappato | 8
Intesa Sanpaolo ex Banco Popolare | 7
ABI_05652_non_mappato | 7
ABI_03667_non_mappato | 7
ABI_36964_non_mappato | 6
ABI_05372_non_mappato | 6
ABI_03425_non_mappato | 6
ABI_07091_non_mappato | 5
ABI_07066_non_mappato | 5
ABI_06220_non_mappato | 5
ABI_05296_non_mappato | 5
ABI_05036_non_mappato | 5
ABI_03493_non_mappato | 5
ABI_03242_non_mappato | 5
ABI_07048_non_mappato | 4
ABI_07012_non_mappato | 4
ABI_05824_non_mappato | 4
ABI_05792_non_mappato | 4
ABI_05297_non_mappato | 4
ABI_03239_non_mappato | 4
ABI_36092_non_mappato | 3
ABI_36064_non_mappato | 3
ABI_07092_non_mappato | 3
ABI_07086_non_mappato | 3
ABI_05584_non_mappato | 3
ABI_05496_non_mappato | 3
ABI_03446_non_mappato | 3
ABI_03387_non_mappato | 3
ABI_03124_non_mappato | 3
Banca Popolare Cortona | 2
ABI_07078_non_mappato | 2
ABI_07062_non_mappato | 2
ABI_07056_non_mappato | 2
ABI_06701_non_mappato | 2
ABI_06160_non_mappato | 2
ABI_06030_non_mappato | 2
ABI_06010_non_mappato | 2
ABI_05772_non_mappato | 2
ABI_05602_non_mappato | 2
ABI_05232_non_mappato | 2
ABI_05142_non_mappato | 2
ABI_05033_non_mappato | 2
ABI_05030_non_mappato | 2
ABI_03665_non_mappato | 2
ABI_03437_non_mappato | 2
ABI_03332_non_mappato | 2
ABI_03317_non_mappato | 2
ABI_03273_non_mappato | 2
ABI_03250_non_mappato | 2
ABI_03185_non_mappato | 2
ABI_03159_non_mappato | 2
ABI_03158_non_mappato | 2
ABI_03083_non_mappato | 2
ABI_01010_non_mappato | 2
Intesa Sanpaolo | 5568
UniCredit | 2543
Poste Italiane BancoPosta | 1832
Banca Hype | 1360
Isybank | 1166
Intesa Sanpaolo rete locale (ABI 08xxx non in elenco) | 1119
BPER Banca | 1093
Banco BPM | 888
Credit Agricole Cariparma | 868
BBVA Italia | 626
Banca Mediolanum | 606
FinecoBank | 469
BNL BNP Paribas | 462
Monte dei Paschi di Siena | 428
ING Italia | 367
Banca Popolare di Sondrio | 297
ABI_32532_non_mappato | 269
Banca Sella | 215
Sudtiroler Volksbank Alto Adige | 174
ABI_06085_non_mappato | 137
Intesa Sanpaolo ex Pop Vicenza | 135
Intesa Sanpaolo ex Pop Novara | 117
ABI_03669_non_mappato | 111
ABI_03442_non_mappato | 102
Findomestic Banca | 101
N26 | 79
Credit Agricole Italia | 76
Mediobanca | 64
ABI_03674_non_mappato | 57
CheBanca | 55
Volksbank Banca | 52
ABI_06270_non_mappato | 52
ABI_36003_non_mappato | 35
ABI_07084_non_mappato | 33
ABI_03025_non_mappato | 33
ABI_03395_non_mappato | 31
ABI_03589_non_mappato | 30
ABI_03075_non_mappato | 28
Banca Agricola Popolare Ragusa | 27
Cassa Risparmio Bolzano Sparkasse | 25
Banca Popolare Puglia Basilicata | 25
ABI_05018_non_mappato | 24
ABI_05156_non_mappato | 23
ABI_05424_non_mappato | 20
ABI_05080_non_mappato | 20
ABI_32875_non_mappato | 19
ABI_06305_non_mappato | 17
Intesa Sanpaolo ex Pop Bari | 16
ABI_06170_non_mappato | 15
ABI_06370_non_mappato | 14
ABI_06175_non_mappato | 14
ABI_03263_non_mappato | 14
ABI_07090_non_mappato | 13
ABI_07085_non_mappato | 13
ABI_07076_non_mappato | 12
ABI_05385_non_mappato | 12
ABI_05216_non_mappato | 12
ABI_03365_non_mappato | 11
ABI_03048_non_mappato | 11
ABI_05428_non_mappato | 10
ABI_07070_non_mappato | 9
ABI_05336_non_mappato | 9
ABI_06150_non_mappato | 8
ABI_03441_non_mappato | 8
ABI_03138_non_mappato | 8
Intesa Sanpaolo ex Banco Popolare | 7
ABI_05652_non_mappato | 7
ABI_03667_non_mappato | 7
ABI_36964_non_mappato | 6
ABI_05372_non_mappato | 6
ABI_03425_non_mappato | 6
ABI_07091_non_mappato | 5
ABI_07066_non_mappato | 5
ABI_06220_non_mappato | 5
ABI_05296_non_mappato | 5
ABI_05036_non_mappato | 5
ABI_03493_non_mappato | 5
ABI_03242_non_mappato | 5
ABI_07048_non_mappato | 4
ABI_07012_non_mappato | 4
ABI_05824_non_mappato | 4
ABI_05792_non_mappato | 4
ABI_05297_non_mappato | 4
ABI_03239_non_mappato | 4
ABI_36092_non_mappato | 3
ABI_36064_non_mappato | 3
ABI_07092_non_mappato | 3
ABI_07086_non_mappato | 3
ABI_05584_non_mappato | 3
ABI_05496_non_mappato | 3
ABI_03446_non_mappato | 3
ABI_03387_non_mappato | 3
ABI_03124_non_mappato | 3
Banca Popolare Cortona | 2
ABI_07078_non_mappato | 2
ABI_07062_non_mappato | 2
ABI_07056_non_mappato | 2
ABI_06701_non_mappato | 2
ABI_06160_non_mappato | 2
ABI_06030_non_mappato | 2
ABI_06010_non_mappato | 2
ABI_05772_non_mappato | 2
ABI_05602_non_mappato | 2
ABI_05232_non_mappato | 2
ABI_05142_non_mappato | 2
ABI_05033_non_mappato | 2
ABI_05030_non_mappato | 2
ABI_03665_non_mappato | 2
ABI_03437_non_mappato | 2
ABI_03332_non_mappato | 2
ABI_03317_non_mappato | 2
ABI_03273_non_mappato | 2
ABI_03250_non_mappato | 2
ABI_03185_non_mappato | 2
ABI_03159_non_mappato | 2
ABI_03158_non_mappato | 2
ABI_03083_non_mappato | 2
ABI_01010_non_mappato | 2
CoinRoyale's "provably fair" has a hole 🎰
The verifier checks sha256(server_data|server_seed) === digest and that the roll is consistent — but it never proves the digest existed before your bet. No signed timestamp, no pre-bet anchor.
How a dishonest house cheats: it receives your bet (say hi), then generates random server_data values until it finds one whose roll makes you lose (~2 tries, since 60% of candidates already lose). Reveals that one → your verification still passes, because digest + roll are perfectly coherent.
The "32-bit seed" thing is a red herring (parseInt(sha256(...).slice(-8),16)). It's just code smell, not the vector — grinding works the same with a full 256-bit seed.
You can't predict as a player: server_data is hidden pre-roll, fresh & independent each round, no chain. Confirmed on
a real live round (roll 976155 reproduced ✓)
Only way to catch them: statistics — 1000+ rolls at fixed target + chi-square. A grinding house shows win-rate systematically below the expected 40%. Single roll: invisible.
Missing the real fix: a proof the digest premp / hash chain / player commit before seeing digest). Without it, "provably fair" = "trust us, bro."
The verifier checks sha256(server_data|server_seed) === digest and that the roll is consistent — but it never proves the digest existed before your bet. No signed timestamp, no pre-bet anchor.
How a dishonest house cheats: it receives your bet (say hi), then generates random server_data values until it finds one whose roll makes you lose (~2 tries, since 60% of candidates already lose). Reveals that one → your verification still passes, because digest + roll are perfectly coherent.
The "32-bit seed" thing is a red herring (parseInt(sha256(...).slice(-8),16)). It's just code smell, not the vector — grinding works the same with a full 256-bit seed.
You can't predict as a player: server_data is hidden pre-roll, fresh & independent each round, no chain. Confirmed on
a real live round (roll 976155 reproduced ✓)
Only way to catch them: statistics — 1000+ rolls at fixed target + chi-square. A grinding house shows win-rate systematically below the expected 40%. Single roll: invisible.
Missing the real fix: a proof the digest premp / hash chain / player commit before seeing digest). Without it, "provably fair" = "trust us, bro."
Selling pack opening site exploit
50$ -> unlimited balance
deposits are in crypto , withdrawals with US bank account
Payment processor for withdrawals : coinflow.cash
Have only been exploited on a test account , will not be resold/used after sale
Around 1100 online players in the moment im sending this message
@half for offers
50$ -> unlimited balance
deposits are in crypto , withdrawals with US bank account
Payment processor for withdrawals : coinflow.cash
Have only been exploited on a test account , will not be resold/used after sale
Around 1100 online players in the moment im sending this message
@half for offers
1.96K
Another exploit for sale
Crypto Exchange ( 35k users on telegram group )
The exchange gives you daily rewards based on vip level ( higher the vip level = higher payout )
My exploits gives you duplicate prizes ( up to 10x per account , per day )
Im not looking to work on % , the exploit has only been tested on my test account + tested a 10$ withdraw ( successful )
Only decent offers , no brokies please
@half
Crypto Exchange ( 35k users on telegram group )
The exchange gives you daily rewards based on vip level ( higher the vip level = higher payout )
My exploits gives you duplicate prizes ( up to 10x per account , per day )
Im not looking to work on % , the exploit has only been tested on my test account + tested a 10$ withdraw ( successful )
Only decent offers , no brokies please
@half
Selling chinese wechat app access
Its a clone of tiktok shop but on wechat
Redis access exposing (around 5000 sellers), contains active sessions :
nick_name
phone
address
avatar_url
shop_examine
shop_examine_info
shop_list
shop_user
- WeChat App Secret
- RabbitMQ access
- Aliyun OSS access
- JWT secret able to impersonificate every user
@half for offers
Its a clone of tiktok shop but on wechat
Redis access exposing (around 5000 sellers), contains active sessions :
nick_name
phone
address
avatar_url
shop_examine
shop_examine_info
shop_list
shop_user
- WeChat App Secret
- RabbitMQ access
- Aliyun OSS access
- JWT secret able to impersonificate every user
@half for offers