UGH, Why can't people understand. I was the first guy to ever have and sell PoodleCorp DB, i dumped it from their server when i still had access to the box. I then sold the database to some skids for $150 - $200 - $80 - $50 Some kiddies decided to leak it to other skids who leaked it to other skids and that's how "Mercy" has their copy of the breach. FYI, i gave those kids only 60% of the official database, so i am the only one with the full copy of the database. ty
i'm not doubting you or anything but got proof? You talk big but show nothing. I"m told Verom dumped it. Another says that it was a XSS vulnerability turned into a SQL vulnerability in the ticket system. So please tell me how you "dumped" it
I'm verom:fp: I had FTPto PoodleCorp box to fix their paypal ipn, i decided to dump the db from the server just incase some shit happens(Created a PHP file named it some random letters and that dumped the full database)
Thus why the database says backup-something.sql There was no SQli, i did spot a CSRF with their ticket system but that's it.
09-08-2016, 04:55 PM
Inanimate Wrote: what if you gave us a "sample" of the db so that we know that it is user:pass?
also, i seriously doubt that you were the first to get the db.
if so, and if poodlecorp were to find out, you would be in
deep
deep
deep
deep
shit.
PoodleCorp are the biggest skids i've ever talked to. They wanted me to help them install vestaCP LOL!