# Data Exfiltration Summary — 2026-09-24
# New data exfiltrated using today's findings

## Sources Exfiltrated

### 1. MySQL — 14+ unexplored databases (16MB, 217+ files)
Location: /root/ir-assessment/redteam/gitlab_pharmalink_id/mysql_dump/

Databases dumped:
- apps_chat (ChatRoom 193, chat_personal 414, inbox_admin_order 4)
- apps_master_bidan (bridging_preregis_pelapak 4811, m_product 450×3)
- apps_master_green, apps_master_pharindo, apps_master_retelab2b, apps_master_vibrantpbf
- apps_master_history
- apps_survey (survey answers, user answers)
- apps_transaction_history (transaction details, headers, packing lists, POs)
- century_emember (36 tables — member data, devices, categories)
- CenturyOutlet_887 (transactions, customers, products, suppliers)
- Master_centuryApp (m_generic 4429, m_principal 1643, products, outlets)
- ecommerce_data, pelapak_external (sociabuzz 1362)
- matrix_db (crawling data — mostly empty)
- MASTER_KARYAWAN (1973 employees — full HR data)

### 2. GitLab — 56 files from projects 1314 + 91 (372KB)
Location: /root/ir-assessment/redteam/gitlab_pharmalink_id/gitlab_dump/

Project 1314 (vilbert/skills):
- DEPLOYMENT.md, CONFIGURATION.md, DATABASE.md, AUTHENTICATION.md
- internal-dashboard-frontend references
- orchestrator SKILL.md
- SECRETS found in UI-AND-THEMING.md and skeleton.go

Project 91 (api_Marketing):
- staging.Dockerfile (vilbertgunawan@gmail.com)
- skeleton.development.yaml (MySQL creds spetnaz:sp3tn4z2019@34.87.44.167)
- handler.go (API endpoints)
- Full Go skeleton source code

### 3. Exodus CRM — 26 pages + sessions + tokens (708KB)
Location: /root/ir-assessment/redteam/gitlab_pharmalink_id/exodus_dump/

- 26 HTML pages (admin role, ~20KB each)
- Better Auth session data (user profile, roles, NIP)
- 27 Better Auth sessions (tokens, IPs, user agents)
- Keycloak tokens (access + id + refresh)
- Keycloak OIDC config + JWKS
- WordPress options (243 options)
- WordPress users (1 user)

## Total New Data
- 16MB MySQL dump (217+ JSON files)
- 372KB GitLab source code (56 files)
- 708KB Exodus CRM data (34 files)
- Total: ~17MB new data exfiltrated