[stride2168]

Peruvian Universities Leak (Edu.pe)

So basically if you are a student you have an Azure AD user within its domain, and you can use that user see the other members information including staff (thousand of them)
Permissions are not well settled, huh?
Domains: UDCH (Universidad de Chiclayo)

Sample:

cealvanin@udch.edu.pe,CESAR JAIRZINHO ALVAN,ALVAN INGA,cealvanin@udch.edu.pe,CESAR JAIRZINHO,ef20cfc0-d759-4de8-b684-c027374fe139,Member,Estudiante,Adminsitracion,True,PE,NULL,NULL,Perú,000000,NULL,14001,000-000-000,000-000-000,,,,,,,,,udchedu.onmicrosoft.com,9/29/2020 11:59:03 PM
cgilg@udch.edu.pe,CRYSS MELCHORA GIL GUEVARA,GIL GUEVARA,cgilg@udch.edu.pe,CRYSS MELCHORA,ef282ff7-f73f-4672-beaf-8502bbf96237,Member,Estudiante,Medicina Humana,True,PE,,Chiclayo,Perú,,,,,,,,,,,,,,udchedu.onmicrosoft.com,2/14/2022 5:32:00 PM
lijulcaar@udch.edu.pe,LIDIA MARGOT JULCA,JULCA ARTEAGA,lijulcaar@udch.edu.pe,LIDIA MARGOT,ef28c9f1-87d6-41f2-882d-a03cfc4589cb,Member,Estudiante,Contabilidad,True,PE,,Jaén,Perú,,,,,,,,,,,,,,udchedu.onmicrosoft.com,9/28/2020 2:28:12 PM
edesquenl@udch.edu.pe,ESMITH DAVID ESQUEN LEON,ESQUEN LEON,edesquenl@udch.edu.pe,ESMITH DAVID,ef4343f7-8784-4982-a61c-c2a350247685,Member,Egresado,Tecnologia Medica,True,PE,,Chiclayo,Perú,,,,,,,,,,,,,,udchedu.onmicrosoft.com,1/24/2022 11:26:44 PM
datorresta@udch.edu.pe,DARWIN ROLANDO TORRES,TORRES TARMA,datorresta@udch.edu.pe,DARWIN ROLANDO,ef4a670b-989f-424d-9e6d-fe3a5a199b00,Member,Estudiante,Adminsitracion,True,PE,NULL,NULL,,000000,NULL,Perú,000-000-000,000-000-000,,,,,,,,,udchedu.onmicrosoft.com,9/30/2020 12:34:45 AM
grivast@udch.edu.pe,GLADYS DEL MILAGRO RIVAS TERAN,RIVAS TERAN,grivast@udch.edu.pe,GLADYS DEL MILAGRO,ef4b4b46-a245-4b32-b739-dbb7368f8245,Member,,,False,PE,,Chiclayo,Perú,,,,,979377798,,,,,,,,,udchedu.onmicrosoft.com,8/12/2021 8:24:45 PM
frequejo@fiis.udch.edu.pe,Fiorella Del Carmen Requejo Quiñones,Requejo Quiñones,frequejo@fiis.udch.edu.pe,Fiorella Del Carmen,ef5171de-bbd2-4783-aee4-316a9e774ef4,,,,True,PE,,,,,,,,,,,,,,,,,udchedu.onmicrosoft.com,
ofriasyovera_gmail.com#EXT#@udchedu.onmicrosoft.com,ofriasyovera,,ofriasyovera@gmail.com,,ef5edf2f-04f5-4eeb-a47c-91b2a875a8c1,Guest,,,True,,,,,,,,,,ofriasyovera@gmail.com,,,,,Invitation,,Accepted,Multiple,6/30/2023 2:16:13 PM
gpisfila@udch.edu.pe,GERMAN PISFIL AGAPITO,PISFIL AGAPITO,gpisfila@udch.edu.pe,GERMAN,ef6ca4b7-8255-4684-b4e7-f43d55bbb931,Member,Egresado,Derecho,True,PE,,Chiclayo,Perú,,,,,,,,,,,,,,udchedu.onmicrosoft.com,8/29/2022 4:43:52 PM
jbecerrat@udch.edu.pe,JENNIFER DEL PILAR BECERRA TAPIA,BECERRA TAPIA,jbecerrat@udch.edu.pe,JENNIFER DEL PILAR,ef75aba4-09cb-426d-a6f8-f244e3294ff9,Member,,,True,PE,,,,,,,,,,,,,,,,,udchedu.onmicrosoft.com,11/5/2020 8:39:35 PM
sllacsauangas@udch.edu.pe,SAIRA TATIANA LLACSAUANGA SAMAME,LLACSAUANGA SAMAME,sllacsauangas@udch.edu.pe,SAIRA TATIANA,ef84d530-a4ed-4403-825b-e64f63343147,Member,,,True,PE,,,,,,,,,,,,,,,,,udchedu.onmicrosoft.com,3/12/2021 7:19:18 PM
investigacion_fsalud@udch.edu.pe,Investigación Ciencias de la Salud,Ciencias de la Salud,investigacion_fsalud@udch.edu.pe,Investigacion,ef8b22e6-3abc-4f20-90fa-9ca96c0d1599,Member,,,True,PE,,,,,,,,,,,,,,,,,udchedu.onmicrosoft.com,10/1/2020 6:57:15 PM
lilopezcr@udch.edu.pe,LIDIA ANALI LOPEZ,LOPEZ CRUZ,lilopezcr@udch.edu.pe,LIDIA ANALI,ef956bee-4fab-4b36-a14e-d1cbc7dc51cd,Member,Estudiante,Adminsitracion,True,PE,NULL,NULL,Perú,000000,NULL,14001,000-000-000,000-000-000,,,,,,,,,udchedu.onmicrosoft.com,9/28/2020 2:27:52 PM
udch47@udch.edu.pe,udch47,47,udch47@udch.edu.pe,udch,efa7aa61-bbb1-4b08-aaf1-22baed1e9762,Member,zoom,ti,True,PE,Carretra Pimentel 3.5,,Peru,0,Chiclayo,,,,,,,,,,,,udchedu.onmicrosoft.com,9/12/2020 4:30:01 PM
jealvanru@udch.edu.pe,JEYSI ESTEFANY ALVAN,ALVAN RUIZ,jealvanru@udch.edu.pe,JEYSI ESTEFANY,efbabf0c-a75f-4f16-ad87-ef25d651cafa,Member,Estudiante,Adminsitracion,True,PE,NULL,NULL,Perú,000000,NULL,14001,000-000-000,000-000-000,,,,,,,,,udchedu.onmicrosoft.com,9/29/2020 11:58:09 PM
hhidalgo@fiis.udch.edu.pe,Harrison Marvin Hidalgo Peralta,Hidalgo Peralta,hhidalgo@fiis.udch.edu.pe,Harrison Marvin,efe20927-1925-4204-b00c-302d197322f5,,,,True,PE,,,,,,,,,,,,,,,,,udchedu.onmicrosoft.com,
naolivossa@udch.edu.pe,NATALY PAOLA OLIVOS,OLIVOS SALDAÑA,naolivossa@udch.edu.pe,NATALY PAOLA,efe93de7-3bed-4f70-abcd-d824c1481df4,Member,Estudiante,Educacion,True,PE,,Jaén,Perú,,,,,,,,,,,,,,udchedu.onmicrosoft.com,9/30/2020 6:37:20 AM
mtafura@udch.edu.pe,ALFONSO BALTAZAR MARCHENA TAFUR,MARCHENA TAFUR,mtafura@udch.edu.pe,ALFONSO BALTAZAR,eff2e69e-7800-4e62-b523-e01325654738,Member,Administrador de TI,Tecnolog�as de la informaci�n,True,PE,6 Microsoft way,Wa,Estados Unidos,123456,Redmond,98057,123-555-1211,123-555-6641,pedroarmijo@contoso.com,,,,,,,,udchedu.onmicrosoft.com,11/12/2020 5:43:34 PM
udch23@udch.edu.pe,Fac. Medicina y Odonotologia UDCH,UDCH,udch23@udch.edu.pe,Fac. Medicina y Odonotologia,eff9a089-fb42-42d4-95db-e1698001c459,Member,,,True,PE,,,,,,,,,,,,,,,,,udchedu.onmicrosoft.com,5/8/2020 1:11:27 AM
jchupillon@fiis.udch.edu.pe,Juan Carlos Chupillon Tantajulca,Chupillon Tantajulca,jchupillon@fiis.udch.edu.pe,Juan Carlos,f01feb45-3dbf-4542-ab56-211d425bcc26,,,,True,PE,,,,,,,,,,,,,,,,,udchedu.onmicrosoft.com,

Download:

Hidden Content

You must register or login to view this content.

[knock7]

thank u , lets see.....

[Mejra77]

thank u , lets see.....

[Blastoise]

Peruvian Universities Leak (Edu.pe)

So basically if you are a student you have an Azure AD user within its domain, and you can use that user see the other members information including staff (thousand of them)
Permissions are not well settled, huh?
Domains: UDCH (Universidad de Chiclayo)

So do you have data on students of this university or not?

[osintlosenaltd]

thank you bro!!!!

[injectioninferno]

link is dead please change it

[Tanaka]

The link in this thread is dead. Please reply to the PM you were sent to get your thread moved back to the Databases section.