Yesterday, 04:04 PM
$1500 for just dealership documents (ref #01)]
everything all together BIN 30K (negotiable)
almost everything owned by BMW mapped
you will get access to every BMW post sale form (ref #01), this contains the dealership information, as long as with a list of licensed representatives
exfiltrated data includes: 20 thousand categories. pii includes Brand, Connections, Email, Links, Phone prefered brand, Prodiver, Data provider, Telefax, Website, City, Country, Address, Title
Data of every BMW Group in every country's Workspace Chats, along with any of the brands included in (Ref #03)
Root PEM for BMW Group (could be used to sign malware) (Ref #04 & Ref #05)
BMW Download Manager (Ref #06, Ref #09) , BMW TIS Search (Ref #07) & more
Unauthenticated AWS Lambda Logging Endpoint, if you fuck up, or simply want to pin someone else for it, you can inject logs to prod, along with being able to flood logs if a mistake is made.
(Ref #08)
BMW's fuckup has also caused the data of the following companies to be included:
Abarth, Alfa Romeo, Audi, Cadillac, Chevrolet, Citroen, Corvette, Cupra, Dacia, DS, Fiat, Ford, GM, Honda, Hyundai, Jaguar, Jeep, Kia, Lada, Land Rover, Mazda, Mercedes-Benz, MG, MINI, Mitsubishi, Nissan, Opel, Peugot, Porsche, Renault, Seat, Skoda, Subaru, Suzuki, Toyota, Volkswagen, Tesla, Volvo, Polestar
(Ref #03 1)
Shell Tankstelle/Shell gas station, Names, address zip brand names, email phone, website links providers, country, long lat
Buyer will get ability to upload files (Instant IA, along with the IDOR, the portals, data endpoints, plus all our recon data for pivoting)
Buyer will also get all documentation of ours on BMW, along with leads for other companies that were exposed through BMWs failure
having this access would allow you to pull from any car the (Mileage, Email, Number, Fulls, Address, Car cost, Dealer name, Car history)
also includes:
[NEW] k8s leads
[NEW] pii leaks for employees AND customers all around the world (tens of thousands with standard PII, ie full names, addresses, cars, vins, etc)
IDOR exploit still for sale
a bunch of configuration data
[NEW] a bunch of api data
[NEW] almost every subsidiary owned by bmw has been mapped
[NEW] new car companies include Mazda, Toyota, Audi, Ford, plus 32 more
[NEW] hundreds of other brands PIIs (Brand, connections, email, links, phone preferred brand, provider, data provider, telefax, website, city country, address, title, etc)
[NEW] gas station data
[NEW] order data
[NEW] vin lookups
[NEW] order pii
DLM includes:
"assets/ca/IncludedRootsPEM.pem"
"assets/data/WBA1B51020P686377_full_updates.json"
"assets/data/WBAJA91020CE60070_full_updates.js
"assets/data/ WBY51EJ0X00449892_full_updates.json"
"assets/data/d1m_session.json" "assets/data/local_macos_devices.json" "assets/data/local_windows_devices.json" "assets/data/usb_devices.json" "assets/data/usb_macos_devices.json" "assets/data/usb_windows_devices.json" & more
Sample of included post-sale form PDFs:
Ihr Ansprechpartner, Motorradzentrum Hannover
Lissabonner Allee 3
30539 Hannover
Tel. (0511) 626202
Email: Thorsten.Windrich@bmw.de;Simon.Bechtold@bmw.de
Handelsregister Amtsgericht München
Handelsregisternr. HRB 42243
Ust.-Id Nr DE129273398
Vertretungsberechtigt Bayerische Motoren Werke
Aktiengesellschaft
Vorstand/Board of Management: Oliver Zipse
(Vorsitzender/Chairman),
Ilka Horstmeier, Milan Nedeljković, Pieter
Nota,
Nicolas Peter, Frank Weber, Joachim Post.
Vorsitzender des Aufsichtsrats/Chairman of
the Supervisory Board: Norbert Reithofer
Sitz und Registergericht/Domicile and Court
of Registry: München HRB-42243
Upon purchase, you will receive:
- all relevant data to BMW Group
- all documentation from the initial exploitation
- all recon for BMW Group
- any data obtained of the afformentioned 32 other affected companies and subsidiaries
- IA Vectors (file upload, IDOR, portals etc)
- Shell access to Mazda (via BMW)
- Shell (Gas Station/Tankstelle) info (Names, address zip brand names, email phone, website links providers, country, long lat) from BMW
- More, yet to be specified as this post is long. DM to enquire
Referrences:
Ref #01 Translated
Ref #03 2
misc
thanks to DarkRomance, our contact info:
05c8ae06e40a63cfd94d3307a3461ca668aa88bb18686083d6927e969249501075 on Session or 300B2D5FD09996D9DCFD714A3E7C0059EF70825AF78ED544880DC9990EBF9859B798CC8F2B03 on Tox to purchase / enquire.