Posts: 3
Threads: 2
Joined: Apr 2026
(Jan 23, 2026, 08:06 PM)nobodycares Wrote: Cool! Do you have any info about the point of compromise? Did you leak it yourself?
Hello! I leaked it myself : I found a vulnerability in their website which promoted me to admin and they had multiple admin panels where you could extract raw data from the database.
I wrote different scripts to iterate on all entries and put them in multiple JSON, the ones you can download here. This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Posts: 3
Threads: 0
Joined: Apr 2026
gratz good finding, thx sharing it, that's good job This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Posts: 210
Threads: 1
Joined: Jan 2025
(Jan 24, 2026, 01:22 PM)XxDarkHackerxX-sama Wrote: (Jan 23, 2026, 08:06 PM)nobodycares Wrote: Cool! Do you have any info about the point of compromise? Did you leak it yourself?
Hello! I leaked it myself : I found a vulnerability in their website which promoted me to admin and they had multiple admin panels where you could extract raw data from the database.
I wrote different scripts to iterate on all entries and put them in multiple JSON, the ones you can download here.
Very interesting, thank you for sharing this with us, and well done!
Posts: 28
Threads: 0
Joined: Sep 2023
Really nice share dude, just found 79495 unique emails.
Posts: 57
Threads: 0
Joined: Sep 2024
Posts: 90
Threads: 0
Joined: Apr 2026
Thanks for sharing this interesting content. This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Posts: 28
Threads: 6
Joined: Apr 2026
Good job, thank you! This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Posts: 36
Threads: 13
Joined: Apr 2026
(Jan 23, 2026, 04:28 PM)XxDarkHackerxX-sama Wrote: Hi everyone! It's my first time here~
Today, I'm uploading 4 dumps of the following ticketing French app : scoring.fit
Includes
- `users.json`: user type (athlete, orga, admin), email, phone number, full name username
- `organizations.json` : name, email, phone number, owner full name, stripe account id (if configured)
- `orders.json` : each orders of every events (key is event number id), an order contains the address of the buyer and each athletes birth date, email, gender, phone number, full name and even more options depending on custom options defined by the event
- `volunteers.json` : similar to `orders.json` but this time with volunteers and not athletes, no address info in this one though...
Samples
users.json
{
"_id": "68a45c1027eee10033d73264",
"organisation_settings": {
"payzen": { "enabled": false },
"currency": "eur",
"taxe_rate": "20",
"invoice_address": "2 Traverse Ratto, Aubagne (13400), FRANCE",
"phone_number": { "phone": "6 20 00 06 63", "code": 33, "short": "FR" }
},
"type": "admin",
"banned": false,
"email": "sales@scoring.fit",
"firstName": "Chloé",
"lastName": "BEAUCHET",
"phoneNumber": { "phone": "668858608", "code": 33, "short": "FR" },
"createdAt": "2025-08-19T11:12:16.974Z",
"updatedAt": "2025-11-14T19:38:45.039Z",
"organisation": "CrossFit Camp Major"
}
organizations.json
{
"_id": "695b8b22ffc85b0033da0caa",
"organisation_settings": {
"phone_number": { "code": 33, "phone": "625899172", "short": "FR" },
"stripe": { "account_id": "acct_1Co9W5Bi8QiFx6Pt" }
},
"email": "crossfitinitium@yahoo.fr",
"phoneNumber": { "phone": "0625899172", "code": 33, "short": "FR" },
"createdAt": "2026-01-05T09:57:54.124Z",
"organisation": "Initium Family Race",
"username": "Quentin Vignot",
"stripeAccountStatus": "Functional"
}
orders.json
{
"1114": [
{
"paid": {
"currency": "eur",
"total_ticket_price": "40000",
"total_ticket_fees": "0",
"total_goodies_price": "0",
"total_goodies_fees": "0",
"total_fees": "0",
"total_price": "40000",
"donation_amount": "0",
"ticket_commission_percentage": {
"$numberDecimal": "0"
}
},
"goodies": [],
"state": "booked",
"checkInState": "pending",
"customInputs": [],
"withPayzen": false,
"_id": "62b482d2e802480004fad187",
"athletes": [
{
"customInputs": [],
"date": "1990-03-21",
"email": "geoffrey.prioux.staps@gmail.com",
"gender": "man",
"phoneNumber": {
"phone": "0645783784",
"code": 33,
"short": "FR"
},
"size": "",
"username": "Geoffrey PRIOUX",
"_id": "62a8a7cf249d6200044f03fc"
},
{
"customInputs": [],
"date": "1987-02-08",
"email": "paris.pierre@hotmail.fr",
"gender": "man",
"size": "",
"phoneNumber": {
"phone": "612084561",
"code": 33,
"short": "FR"
},
"username": "PIERRE PARIS",
"_id": "61fd082b89859d00047ce007"
},
{
"customInputs": [],
"date": "1984-10-03",
"email": "myriammic@gmail.com",
"gender": "woman",
"size": "",
"phoneNumber": {
"phone": "0608356718",
"code": 33,
"short": "FR"
},
"username": "MYRIAM MICHEL",
"_id": "609801fc2cea940004628d13"
},
{
"customInputs": [],
"date": "1986-07-08",
"email": "olivia.campy@gmail.com",
"gender": "woman",
"size": "",
"phoneNumber": {
"phone": "0620115826",
"code": 33,
"short": "FR"
},
"username": "OLIVIA CALEYRON",
"_id": "6198d045ac56e60004213b11"
}
],
"number": "VALMEINIER THROWDOWN 2022_2022_1",
"initialNumber": "VALMEINIER THROWDOWN 2022_2022_1",
"orga_id": "607fef222205710004227e99",
"user_paid": {
"_id": "62a8a7cf249d6200044f03fc",
"firstName": "Geoffrey",
"lastName": "PRIOUX",
"email": "geoffrey.prioux.staps@gmail.com",
"phoneNumber": {
"phone": "0645783784",
"code": 33,
"short": "FR"
}
},
"competition_id": "616da856a4f60e0004c65177",
"division": "62a87a3d83fb490004f2c355",
"club": "CROSSFIT DES PENTES",
"team": "Encorutilfaluquejelesus",
"delivery_address": "",
"agreedToTermsOfUse": "true",
"participant_id": "62b482d2e802480004fad172",
"__v": 0,
"changesHistory": [],
"vender": {
"organisation_settings": {
"stripe": {
"account_id": "acct_1IfKpfCCooFSazGE"
},
"invoice_address": "72 esplanade des Islettes, Valmeinier, FRANCE",
"phone_number": {
"code": 33,
"phone": "0772330692",
"short": "FR"
},
"taxe_rate": "0"
},
"_id": "607fef222205710004227e99",
"organisation": "OFFICE DE TOURISME DE VALMEINIER",
"email": "digital@valmeinier.com",
"phoneNumber": {
"code": 33,
"phone": "0772330692",
"short": "FR"
},
"firstName": "Valmeinier",
"lastName": "Office"
}
}
]
}
volunteers.json
{
"1348": [
{
"_id": "63f23c436498a6003242f2bf",
"customInputs": [
{
"target": "volunteer",
"options": [
"Juge",
"Build",
"Logistique"
],
"_id": "63ea3c450516fa00323d7b0d",
"type": "list",
"title": "Poste souhaité",
"required": true,
"value": "Juge"
},
{
"target": "volunteer",
"options": [
"OUI",
"NON"
],
"_id": "63ea5dda62a7ea003287ee0e",
"type": "list",
"title": "Disponibilité jeudi 4 mai 2023 ? (mise en place)",
"required": true,
"value": "NON"
},
{
"target": "volunteer",
"options": [
"OUI",
"NON"
],
"_id": "63ea5dda62a7ea003287ee0f",
"type": "list",
"title": "Disponibilité vendredi 5 mai 2023 ? (mise en place)",
"required": true,
"value": "NON"
},
{
"target": "volunteer",
"options": [
"OUI",
"NON"
],
"_id": "63ea5dda62a7ea003287ee10",
"type": "list",
"title": "Disponibilité samedi 6 mai 2023 ? (évènement)",
"required": true,
"value": "OUI"
},
{
"target": "volunteer",
"options": [
"OUI",
"NON"
],
"_id": "63ea5dda62a7ea003287ee11",
"type": "list",
"title": "Disponibilité dimanche 7 mai 2023 ? (évènement)",
"required": true,
"value": "OUI"
},
{
"target": "volunteer",
"options": [
"OUI",
"NON"
],
"_id": "63ea5dda62a7ea003287ee12",
"type": "list",
"title": "Disponibilité lundi 8 mai 2023 ? (mise en place)",
"required": true,
"value": "NON"
},
{
"target": "volunteer",
"options": [
"XS",
"S",
"M",
"L",
"XL",
"XXL"
],
"_id": "63ea5dda62a7ea003287ee13",
"type": "list",
"title": "Taille de T-shirt",
"required": true,
"value": "M"
},
{
"target": "volunteer",
"options": [
"OUI",
"NON"
],
"_id": "63ea5dda62a7ea003287ee14",
"type": "list",
"title": "Expérience Judging course",
"required": true,
"value": "OUI"
},
{
"target": "volunteer",
"options": [
"OUI",
"NON"
],
"_id": "63ea5dda62a7ea003287ee15",
"type": "list",
"title": "Expérience Judging vidéo",
"required": true,
"value": "OUI"
},
{
"target": "volunteer",
"options": [],
"_id": "63ea5dda62a7ea003287ee16",
"type": "text",
"title": "Votre ville",
"required": true,
"value": "Bron"
},
{
"target": "volunteer",
"options": [],
"_id": "63ea5dda62a7ea003287ee17",
"type": "text",
"title": "Code postal",
"required": true,
"value": "69500"
},
{
"target": "volunteer",
"options": [],
"_id": "63ea5dda62a7ea003287ee18",
"type": "text",
"title": "Allergie",
"required": false
}
],
"_competition": "6336dbaae4674e0004db34ed",
"_user": "63f23a286498a6003242f059",
"state": "booked",
"volunteer": {
"username": "Kevin RAVOAJANAHARY",
"email": "kevinravotr@gmail.com",
"date": "2001-09-28",
"phoneNumber": {
"phone": "619243658",
"code": 33,
"short": "FR"
},
"gender": "Man"
},
"number": "LYON SHOWDOWN 2023_2023_1",
"changesHistory": [],
"createdAt": "2023-02-19T15:12:03.040Z",
"updatedAt": "2023-02-19T15:12:03.040Z",
"__v": 0
}
]
}
Download (FREE)
Enjoy ! thx for the send is good link bro waw This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Posts: 6
Threads: 0
Joined: Apr 2026
(Jan 23, 2026, 04:28 PM)XxDarkHackerxX-sama Wrote: Hi everyone! It's my first time here~
Today, I'm uploading 4 dumps of the following ticketing French app : scoring.fit
Includes
- `users.json`: user type (athlete, orga, admin), email, phone number, full name username
- `organizations.json` : name, email, phone number, owner full name, stripe account id (if configured)
- `orders.json` : each orders of every events (key is event number id), an order contains the address of the buyer and each athletes birth date, email, gender, phone number, full name and even more options depending on custom options defined by the event
- `volunteers.json` : similar to `orders.json` but this time with volunteers and not athletes, no address info in this one though...
Samples
users.json
{
"_id": "68a45c1027eee10033d73264",
"organisation_settings": {
"payzen": { "enabled": false },
"currency": "eur",
"taxe_rate": "20",
"invoice_address": "2 Traverse Ratto, Aubagne (13400), FRANCE",
"phone_number": { "phone": "6 20 00 06 63", "code": 33, "short": "FR" }
},
"type": "admin",
"banned": false,
"email": "sales@scoring.fit",
"firstName": "Chloé",
"lastName": "BEAUCHET",
"phoneNumber": { "phone": "668858608", "code": 33, "short": "FR" },
"createdAt": "2025-08-19T11:12:16.974Z",
"updatedAt": "2025-11-14T19:38:45.039Z",
"organisation": "CrossFit Camp Major"
}
organizations.json
{
"_id": "695b8b22ffc85b0033da0caa",
"organisation_settings": {
"phone_number": { "code": 33, "phone": "625899172", "short": "FR" },
"stripe": { "account_id": "acct_1Co9W5Bi8QiFx6Pt" }
},
"email": "crossfitinitium@yahoo.fr",
"phoneNumber": { "phone": "0625899172", "code": 33, "short": "FR" },
"createdAt": "2026-01-05T09:57:54.124Z",
"organisation": "Initium Family Race",
"username": "Quentin Vignot",
"stripeAccountStatus": "Functional"
}
orders.json
{
"1114": [
{
"paid": {
"currency": "eur",
"total_ticket_price": "40000",
"total_ticket_fees": "0",
"total_goodies_price": "0",
"total_goodies_fees": "0",
"total_fees": "0",
"total_price": "40000",
"donation_amount": "0",
"ticket_commission_percentage": {
"$numberDecimal": "0"
}
},
"goodies": [],
"state": "booked",
"checkInState": "pending",
"customInputs": [],
"withPayzen": false,
"_id": "62b482d2e802480004fad187",
"athletes": [
{
"customInputs": [],
"date": "1990-03-21",
"email": "geoffrey.prioux.staps@gmail.com",
"gender": "man",
"phoneNumber": {
"phone": "0645783784",
"code": 33,
"short": "FR"
},
"size": "",
"username": "Geoffrey PRIOUX",
"_id": "62a8a7cf249d6200044f03fc"
},
{
"customInputs": [],
"date": "1987-02-08",
"email": "paris.pierre@hotmail.fr",
"gender": "man",
"size": "",
"phoneNumber": {
"phone": "612084561",
"code": 33,
"short": "FR"
},
"username": "PIERRE PARIS",
"_id": "61fd082b89859d00047ce007"
},
{
"customInputs": [],
"date": "1984-10-03",
"email": "myriammic@gmail.com",
"gender": "woman",
"size": "",
"phoneNumber": {
"phone": "0608356718",
"code": 33,
"short": "FR"
},
"username": "MYRIAM MICHEL",
"_id": "609801fc2cea940004628d13"
},
{
"customInputs": [],
"date": "1986-07-08",
"email": "olivia.campy@gmail.com",
"gender": "woman",
"size": "",
"phoneNumber": {
"phone": "0620115826",
"code": 33,
"short": "FR"
},
"username": "OLIVIA CALEYRON",
"_id": "6198d045ac56e60004213b11"
}
],
"number": "VALMEINIER THROWDOWN 2022_2022_1",
"initialNumber": "VALMEINIER THROWDOWN 2022_2022_1",
"orga_id": "607fef222205710004227e99",
"user_paid": {
"_id": "62a8a7cf249d6200044f03fc",
"firstName": "Geoffrey",
"lastName": "PRIOUX",
"email": "geoffrey.prioux.staps@gmail.com",
"phoneNumber": {
"phone": "0645783784",
"code": 33,
"short": "FR"
}
},
"competition_id": "616da856a4f60e0004c65177",
"division": "62a87a3d83fb490004f2c355",
"club": "CROSSFIT DES PENTES",
"team": "Encorutilfaluquejelesus",
"delivery_address": "",
"agreedToTermsOfUse": "true",
"participant_id": "62b482d2e802480004fad172",
"__v": 0,
"changesHistory": [],
"vender": {
"organisation_settings": {
"stripe": {
"account_id": "acct_1IfKpfCCooFSazGE"
},
"invoice_address": "72 esplanade des Islettes, Valmeinier, FRANCE",
"phone_number": {
"code": 33,
"phone": "0772330692",
"short": "FR"
},
"taxe_rate": "0"
},
"_id": "607fef222205710004227e99",
"organisation": "OFFICE DE TOURISME DE VALMEINIER",
"email": "digital@valmeinier.com",
"phoneNumber": {
"code": 33,
"phone": "0772330692",
"short": "FR"
},
"firstName": "Valmeinier",
"lastName": "Office"
}
}
]
}
volunteers.json
{
"1348": [
{
"_id": "63f23c436498a6003242f2bf",
"customInputs": [
{
"target": "volunteer",
"options": [
"Juge",
"Build",
"Logistique"
],
"_id": "63ea3c450516fa00323d7b0d",
"type": "list",
"title": "Poste souhaité",
"required": true,
"value": "Juge"
},
{
"target": "volunteer",
"options": [
"OUI",
"NON"
],
"_id": "63ea5dda62a7ea003287ee0e",
"type": "list",
"title": "Disponibilité jeudi 4 mai 2023 ? (mise en place)",
"required": true,
"value": "NON"
},
{
"target": "volunteer",
"options": [
"OUI",
"NON"
],
"_id": "63ea5dda62a7ea003287ee0f",
"type": "list",
"title": "Disponibilité vendredi 5 mai 2023 ? (mise en place)",
"required": true,
"value": "NON"
},
{
"target": "volunteer",
"options": [
"OUI",
"NON"
],
"_id": "63ea5dda62a7ea003287ee10",
"type": "list",
"title": "Disponibilité samedi 6 mai 2023 ? (évènement)",
"required": true,
"value": "OUI"
},
{
"target": "volunteer",
"options": [
"OUI",
"NON"
],
"_id": "63ea5dda62a7ea003287ee11",
"type": "list",
"title": "Disponibilité dimanche 7 mai 2023 ? (évènement)",
"required": true,
"value": "OUI"
},
{
"target": "volunteer",
"options": [
"OUI",
"NON"
],
"_id": "63ea5dda62a7ea003287ee12",
"type": "list",
"title": "Disponibilité lundi 8 mai 2023 ? (mise en place)",
"required": true,
"value": "NON"
},
{
"target": "volunteer",
"options": [
"XS",
"S",
"M",
"L",
"XL",
"XXL"
],
"_id": "63ea5dda62a7ea003287ee13",
"type": "list",
"title": "Taille de T-shirt",
"required": true,
"value": "M"
},
{
"target": "volunteer",
"options": [
"OUI",
"NON"
],
"_id": "63ea5dda62a7ea003287ee14",
"type": "list",
"title": "Expérience Judging course",
"required": true,
"value": "OUI"
},
{
"target": "volunteer",
"options": [
"OUI",
"NON"
],
"_id": "63ea5dda62a7ea003287ee15",
"type": "list",
"title": "Expérience Judging vidéo",
"required": true,
"value": "OUI"
},
{
"target": "volunteer",
"options": [],
"_id": "63ea5dda62a7ea003287ee16",
"type": "text",
"title": "Votre ville",
"required": true,
"value": "Bron"
},
{
"target": "volunteer",
"options": [],
"_id": "63ea5dda62a7ea003287ee17",
"type": "text",
"title": "Code postal",
"required": true,
"value": "69500"
},
{
"target": "volunteer",
"options": [],
"_id": "63ea5dda62a7ea003287ee18",
"type": "text",
"title": "Allergie",
"required": false
}
],
"_competition": "6336dbaae4674e0004db34ed",
"_user": "63f23a286498a6003242f059",
"state": "booked",
"volunteer": {
"username": "Kevin RAVOAJANAHARY",
"email": "kevinravotr@gmail.com",
"date": "2001-09-28",
"phoneNumber": {
"phone": "619243658",
"code": 33,
"short": "FR"
},
"gender": "Man"
},
"number": "LYON SHOWDOWN 2023_2023_1",
"changesHistory": [],
"createdAt": "2023-02-19T15:12:03.040Z",
"updatedAt": "2023-02-19T15:12:03.040Z",
"__v": 0
}
]
}
Download (FREE)
Enjoy ! This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Posts: 34
Threads: 0
Joined: Apr 2026
Thanks for posting this This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
|
