Today, i bring you the userbase scrape of GeoHive Maxar Technologies, a space technology company headquartered in Westminister, Colorado, United States.
Their API had a vulnerability where you could see every single user's email address, full name, IP address, Phone numbers, sessionToken, etc. I exploited this vulnerability to scrape as much user info as i possibly can from their website.
I tried to scrape the whole userbase (around 8k) but they took the API down before i could. I had only scraped 5k users.
anyways, enjoy!
SAMPLES
NOTE:
MOST FIRSTNAME AND LASTNAME ENTRIES ARE NULL BUT IT STILL HAS EMAIL + IP ADDRESSES
big thanks to @enpar and https://crime.sbs/copidopi for helping me out on this, means a lot!
Their API had a vulnerability where you could see every single user's email address, full name, IP address, Phone numbers, sessionToken, etc. I exploited this vulnerability to scrape as much user info as i possibly can from their website.
I tried to scrape the whole userbase (around 8k) but they took the API down before i could. I had only scraped 5k users.
anyways, enjoy!
SAMPLES
{
"firstName": "Martin",
"middleName": "Louis",
"lastName": "Brink",
"dateOfBirth": "1977-08-30",
"emailAddress": "mbrink@icloud.com",
"homePhone": "813-803-5010",
"cellPhone": "727-643-9569",
"user_details": {
"userName": "mbrinkg8tr",
"mturkId": "mbrinkg8tr",
"lastSeen": "2024-06-12T11:43:14.436225-04:00",
"confirmed": true,
"confirmedOn": "2021-02-24T08:40:34-05:00",
"active": true,
"accountLocked": false,
"accountDisabled": false,
"disableSubmissions": false,
"getsMarketing": false,
"isGroup": false,
"sessionToken": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJtYnJpbmtnOHRyIiwiZXhwIjoxNzE4MjkzMzk0fQ.DUReb4hTctWLC1wT6hGq1wkuabkVv-EEvQQUoM-6RvZyHODTQ1l0VTAJ15okJfs9RD7hlOOzIxhWSh4xt5SrYQ",
"remarks": "null",
"failedLoginAttempts": 0,
"role": "admin",
"avatar": null,
"ipAddress": "47.207.23.178"
}
},
{
"firstName": "Sheldon",
"middleName": null,
"lastName": "Stone",
"dateOfBirth": null,
"emailAddress": "sheldon.stone@maxar.com",
"homePhone": "NULL",
"cellPhone": "NULL",
"user_details": {
"userName": "sstone",
"mturkId": null,
"lastSeen": "2023-04-20T10:21:57.937506-04:00",
"confirmed": true,
"confirmedOn": null,
"active": true,
"accountLocked": false,
"accountDisabled": false,
"disableSubmissions": false,
"getsMarketing": false,
"isGroup": false,
"sessionToken": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJzc3RvbmUiLCJleHAiOjE2ODIwMDQ0Njl9.LrGwilyZPtT3bnC8rSJVpGTxaQwhIUJkBtzKiZO6pSMjKeQoIZsRNc1S4NBlz12RqCId0HZ-Wr82x_n4vt-RqA",
"remarks": "",
"failedLoginAttempts": 0,
"role": "user",
"avatar": null,
"ipAddress": "173.242.16.19"
}
},
{
"firstName": "Andy",
"middleName": null,
"lastName": "Tran",
"dateOfBirth": null,
"emailAddress": "mickeytran2111@gmail.com",
"homePhone": "NULL",
"cellPhone": "NULL",
"user_details": {
"userName": "andy1412",
"mturkId": null,
"lastSeen": "2023-12-01T23:06:24.88939-05:00",
"confirmed": false,
"confirmedOn": null,
"active": true,
"accountLocked": false,
"accountDisabled": false,
"disableSubmissions": false,
"getsMarketing": false,
"isGroup": false,
"sessionToken": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJhbmR5MTQxMiIsImV4cCI6MTcwMTU3NjM4NH0.0XdFeGAdbxR8_Y_k1_6mNszgoIH6QB3bKlfg1OUVhrNE53gGgXfo8p5vhpbZygHW6oxJ-EQ3NMzhNzEKnSYbeQ",
"remarks": "",
"failedLoginAttempts": 0,
"role": "user",
"avatar": null,
"ipAddress": "171.225.185.0"
}
},NOTE:
MOST FIRSTNAME AND LASTNAME ENTRIES ARE NULL BUT IT STILL HAS EMAIL + IP ADDRESSES
big thanks to @enpar and https://crime.sbs/copidopi for helping me out on this, means a lot!
![[Image: htq9Vnhd.gif]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ffiles.offshore.cat%2Fhtq9Vnhd.gif)
