Full AWS Admin + EKS Cluster Takeover + Database Credentials – Complete Infrastructure Compromise

[hekticxox]

Description:
You are purchasing full administrative access to a live, enterprise‑grade AWS account and its associated EKS Kubernetes cluster. This is AdministratorAccess with no restrictions.

What you get (anonymized inventory):​

• AWS AdministratorAccess keys (two active, tested, verified).
  → Full control over all AWS services.
• Kubernetes cluster‑admin on the EKS cluster.
  → Access all namespaces, secrets, workloads.
• All database credentials extracted from Kubernetes secrets:
  • PostgreSQL, MongoDB, Redis, MariaDB, ClickHouse – same password.
• MinIO object storage credentials (access key + secret).
• API keys and tokens: Zerossl, ChromaDB (two), Redis session tokens.
• Partial MongoDB dump (audit logs, application data – 1,512 documents).
• MongoDB email list – 196 unique email addresses.

Why valuable:​

• No restrictions – instant EC2 launch, IAM changes, data exfiltration, backdoors, cryptominers.
• Direct database access to backend (likely customer data, financials, internal logic).
• Resale potential (break down the package).
• Low detection risk (dev/testing environment, but admin access allows pivot to production if exists).

Delivery:​

• Credentials in structured .txt file.
• Connection strings and kubectl config.
• Extracted secrets in JSON/txt.

Price & Terms:​

• Single package (all‑in‑one): $2,500 OBO.
• Individual components negotiable.
• Payment BTC / XMR. Escrow accepted.

Disclaimer: Security research sample. Buyer assumes all responsibility. No refunds – test tokens on request.

---

Truncated Inventory (Anonymized)​

AWS – Full AdministratorAccess​

text
Account ID: [REDACTED_ACCOUNT]
User: [REDACTED_USER]
Access Key ID: AKIA... [full provided]
Secret Key: [REDACTED_SECRET]
Permissions: AdministratorAccess

Kubernetes – EKS Cluster Admin​

text
Cluster name: [REDACTED_CLUSTER]
API endpoint: https://[REDACTED_ENDPOINT].eks.amazonaws.com
Kubeconfig: provided (full cluster-admin)
Namespaces: 15+

️ Database Credentials (all working)​

text
PostgreSQL: [REDACTED_USER]:[REDACTED_PASSWORD]@postgresql.[REDACTED_NAMESPACE].svc:5432
MongoDB: [REDACTED_USER]:[REDACTED_PASSWORD]@mongodb.[REDACTED_NAMESPACE].svc:27017
Redis: [REDACTED_USER]:[REDACTED_PASSWORD]@redis.[REDACTED_NAMESPACE].svc:6379
MariaDB: [REDACTED_USER]:[REDACTED_PASSWORD]@mariadb.[REDACTED_NAMESPACE].svc:3306
ClickHouse: [REDACTED_USER] (password in users.xml)
All connections tested and live.

MinIO Object Storage​

text
Endpoint: https://minio.[REDACTED_NAMESPACE].svc:[REDACTED_PORT]
Access Key: [REDACTED_ACCESS_KEY]
Secret Key: [REDACTED_SECRET_KEY]
Buckets: data-lake, sample (empty)

API Keys & Tokens​

Type	Value (truncated)
Zerossl API	8dc01f30dd80...
ChromaDB (default)	0jeAwyLHEF39...
ChromaDB (infra)	5xhXXrQnbLn7...
Redis session tokens	1,200+ UUID‑format (sample: token_000ec66f...)

Email List (truncated sample – no identifying names)​

• 196 unique emails (e.g., user@[REDACTED_DOMAIN], [REDACTED_EMAIL_1], [REDACTED_EMAIL_2])

Data Dumps​

• MongoDB audit logs (thousands of entries).
• Application data collection – 1,512 documents.
• PostgreSQL system dumps (confirms access).

---

All full credentials, connection strings, and raw JSON files delivered upon payment.
Sample preview of any item available on request. Escrow Available.