[henrymans0n]

INTRODUCTION

Hello breach forums, i am here to announce that I have breached into the lower niger river basin development government website that is related to Nigeria, being non other than:

lnrbda.gov.ng

Note: (Their database is kind of empty to be honest.)

Database includes:

[0x01] Personal information: Full names - Emails - Addresses - Numbers - Surname - State - Graduation year - Date of Birth | Lines: 64 | Column/File name: applicant_info

[0x02] Credentials: Emails and passwords - Time of registry | Lines: 9 | Column/File name: gyes_usr

[0x03] Identification: Passcode - Number | Lines: 42 | Column/File name: validation

INFORMATION

Database information

1 - Breach type: Database dump

2 - File type/extension: CSV

3 - Back-end database: MYSQL

4 - Folder size: 418Kb

5 - Database name: lnrbda

Vulnerabilities

1 - XSS (Reflected + Possible DOM based)

2 - SQLI

|

|----(There is a possibility of csrf and ssrf but I have not scanned for them)

Picture taken from applicant_info:  https://postimg.cc/njS3gXkF

DOWNLOAD

You can install the full database through this mega link:

Download ----->  https://mega.nz/folder/EZghVDrK#JTuIJbM-_B9VTBKjAJ1KgA

Enjoy <333

Final note: (Recon and exploitation done by HenryMans0n [me])

[y9p]

Credentials: Emails and passwords - Time of registry | Lines: 9 | Column/File name: gyes_usr  weeeeeeeeeeeeeeee