# DECRYPTED SECRETS — db_reporting.m_keys

## Date: 2026-09-29

## Fernet key
fkeys2 = lglMVIyD-AwAdwLuZ-BOupjW0gc21YPq1dQJRI8-f94=

## Decrypted values
| Key | Value |
|-----|-------|
| internal-1 | proces:wicdt |
| internal-2 | sa:mis301 |
| external-1-dev | mssql+pyodbc://dashreporting:reportingterus@35.240.202.22:1434/firebase_data?driver=ODBC+Driver+17+For+SQL+Server |
| external-1-ndev | mssql+pyodbc://dashreporting:reportingterus@10.2.0.100/firebase_data?driver=ODBC+Driver+17+For+SQL+Server |

## New MSSQL Server
- Host: 35.240.202.22 (GCP)
- Port: 1434 (not 1433!)
- User: dashreporting
- Password: reportingterus
- DB: firebase_data
- Driver: ODBC Driver 17 For SQL Server

## Internal MSSQL credentials
- sa: mis301 (internal-2, sql2000/sql2008 servers)
- proces: wicdt (internal-1, sql2000 servers)

## MSSQL Server Topology (from db_reporting.m_server)
| Server | Type | Port | Version | Network |
|--------|------|------|---------|---------|
| ntsql | mssql | 9457 | sql2000 | internal-1 (proces:wicdt) |
| demeter | mssql | 9435 | sql2000 | internal-1 |
| econolab | mssql | 7442 | sql2000 | internal-1 |
| oculus | mssql | 7440 | sql2008 | internal-2 (sa:mis301) |
| oculus2 | mssql | 7444 | sql2008 | internal-2 |
| horus | mssql | 7431 | sql2000 | internal-1 |
| reportingcl | mssql | 1434 | sql2019 | external-1 (dashreporting:reportingterus) |

## Users extracted
### creds_pnl (7 users, scrypt)
- febry, huy, septy(admin), arthur, brian, henny, siska

### cred_purchasing (17 users, sha256)
- febry, huy, andre(super), janto(super), rufi(super), chika, LOUIS_DASTEN, trio, mila, ilham, yasinta(super), tester, yoze(super), Christine, devi, handry, joestine(super)

### db_test.user3 (33 users, sha256)
- monitoringlayar1/2/3, monitoringapps, andre(super), janto(super), rufi(super), chika, LOUIS_DASTEN, trio, mila, ilham, puguh(admin), timbul, ika, dody, achsin, agus, sarwono, lubis, gusti, hendri, devi_ops, paskalina, devi, kamilo, agung(admin), uca(admin), yasinta(super), yoze(super)

### db_horizon.user (30 users, scrypt)
- admin(developer), P210220(admin!), huy(century@gmail.com), Kamilo@pharos.co.id, and 26 more users

## SA password hash (from master_extract)
0x02002686203F6F4C4FF020556F8D1B4ADA781BAF54A81E887773BD4D84670B94EDCF1B3831320B01EA57DA770EF77560C2906DA2D594A977CB2D90137437F99007A271B31913

## Linked servers (from .bak queries, not in master_extract)
MYSQLAWS, MYSQLAURORA, MYSQLGOLDENGATE, MYSQLLOGISTIC, OCULUS, PHARMANET, PHARMANETCL, CFU10, DEPOCHCCL, OutletES, REPORTINGCL2, Alexandria, AO-LAPAK, ARTUMECL