# Secrets Collection — NIP + Phone Pairs
# Date: 2026-09-07

## Source

`golden-gate__authentication.sql` — `importnip` table

## NIP-Phone Pairs Found

| Total | 113 |
|-------|-----|

## Sample

| NIP | Phone |
|-----|-------|
| 190666P | 082162377780 |
| 190660P | 081269816458 |
| 191057P | 083804083684 |
| 210559P | 087777736232 |
| 210430P | 089609753646 |
| 210580P | 085265987773 |
| 200218P | 089620492790 |
| 210319P | 087882796713 |
| 210553P | 083822155076 |
| 210555P | 081776798822 |

## Usage

These NIP-phone pairs can be used for:
1. **api.pharmalink.id** login (NIP + password)
2. **OTP bypass** — phone number known
3. **Social engineering** — call/SMS phishing

## Password Recovery

bcrypt hashes from `login_simpapi`:
- 133 accounts = "admin" (default)
- 1 account = "123456"
- 1 account = "654321"
- Rest = unknown

## Next Steps

1. **Test NIP login** — api.pharmalink.id with NIP + common passwords
2. **OTP bypass** — use phone for OTP reset
3. **Phish** — SMS to employees