Nov 22, 2024, 09:16 PM
Municipality of Jesus Maria (Lima, Peru) has a web page without proper authorization checks, so this allow to directly download files by simply manipulating the URL.
As a result of that, I was able to leak 41K people and each one of them has a PDF that includes ID, full name, home address and user/password to access to pagosenlinea.munijesusmaria.gob.pe (yep, credentials are plaintext). I also created a single JSON file with consolidated data after using some programming code to analyze all of the files.
DETAILS OF THE LEAK:
- Organization: MUNICIPALITY OF JESUS MARIA
- Country: PERU
- File format: PDF & JSON
- Leak size: 355 GB
- # of files: 41,439
SAMPLE:
LEAK DOWNLOAD LINKS (Upload in progress):
HACK THE PLANET!!!
