Booz Allen Hamilton Gets Served!!!

Hello Thar! Today we want to turn our attention to Booz Allen Hamilton, whose core business is contractual work completed on behalf of the US federal government, foremost on defense and homeland security matters, and limited engagements of foreign governments specific to U.S. military assistance programs. So in this line of work you'd expect them to sail the seven proxseas with a state- of-the-art battleship, right? Well you may be as surprised as we were when we found their vessel being a puny wooden barge. We infiltrated a server on their network that basically had no security measures in place. We were able to run our own application, which turned out to be a shell and began plundering some booty. Most shiny is probably a list of roughly 90,000 military emails and password hashes (md5, non-salted of course!). We also added the complete sqldump, compressed ~50mb, for a good measure. We also were able to access their svn, grabbing 4gb of source code. But this was deemed insignificant and a waste of valuable space, so we merely grabbed it, and wiped it from their system. Additionally we found some related datas on different servers we got access to after finding credentials in the Booz Allen System. We added anything which could be interesting. And last but not least we found maps and keys for various other treasure chests buried on the islands of government agencies, federal contractors and shady whitehat companies. This material surely will keep our blackhat friends busy for a while. A shoutout to all friendly vessels: Always remember, let it flow! #AntiSec

IT IS ON!!!!

Hoping it wasn't a honeypot style decoy. Else they're gunna get screwed...

reply to post by AzureSky

I'm getting the impression that everyone is afraid to act on this data. In my opinion this would be a tactical error. I'm not trying to imply that there are real sides to this, but it seems to me that many people would have multiple good reasons for showing interest in this information.

reply to post by AzureSky
I guess you guys really have other things on your mind right now. You know the $H1+ storm that is coming from multiple angles......

For military personnel to check if your account was leaked, dazzlepod.com...