Globus Baumarkt PoC - captured credentials

Most recent first. Reload page: /log

timestampipemailpassworduser-agent (truncated)x-globus-device-idx-requested-with
2026-05-22T22:30:3859.153.129.39Mozilla/5.0 (Linux; Android 14; sdk_gphone64_x86_64 Build/UE1A.230829.050; wv) Ade.fabrik19.globus
2026-05-10T12:34:10153.124.163.238Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)
2026-05-10T07:40:57153.124.163.238testing@gmail.commypassword123Mozilla/5.0 (Linux; Android 14; sdk_gphone64_x86_64 Build/UE1A.230829.050; wv) Aca3ac487-82b0-4d6e-ab40-be9a29f4a20dde.fabrik19.globus
2026-05-10T07:40:26153.124.163.238Mozilla/5.0 (Linux; Android 14; sdk_gphone64_x86_64 Build/UE1A.230829.050; wv) Ade.fabrik19.globus
2026-05-10T07:26:39153.124.163.238Mozilla/5.0 (Linux; Android 14; sdk_gphone64_x86_64 Build/UE1A.230829.050; wv) Ade.fabrik19.globus
2026-05-10T07:15:59153.124.163.238Mozilla/5.0 (Linux; Android 14; sdk_gphone64_x86_64 Build/UE1A.230829.050; wv) Ade.fabrik19.globus
2026-05-10T07:11:17153.124.163.238Mozilla/5.0 (Linux; Android 14; sdk_gphone64_x86_64 Build/UE1A.230829.050; wv) Ade.fabrik19.globus
2026-05-10T07:10:04153.124.163.238Mozilla/5.0 (Linux; Android 14; sdk_gphone64_x86_64 Build/UE1A.230829.050; wv) Ade.fabrik19.globus
2026-05-10T07:10:03153.124.163.238Mozilla/5.0 (Linux; Android 14; sdk_gphone64_x86_64 Build/UE1A.230829.050; wv) Ade.fabrik19.globus
2026-05-10T07:10:01153.124.163.238reviewer@yeswehack.comYwhTestPwd2026Mozilla/5.0 (Linux; Android 14; sdk_gphone64_x86_64 Build/UE1A.230829.050; wv) Aca3ac487-82b0-4d6e-ab40-be9a29f4a20dde.fabrik19.globus
2026-05-10T07:10:01153.124.163.238Mozilla/5.0 (Linux; Android 14; sdk_gphone64_x86_64 Build/UE1A.230829.050; wv) Ade.fabrik19.globus
2026-05-10T07:06:25153.124.163.238secret@gmail.com123Mozilla/5.0 (Linux; Android 14; sdk_gphone64_x86_64 Build/UE1A.230829.050; wv) Aca3ac487-82b0-4d6e-ab40-be9a29f4a20dde.fabrik19.globus
2026-05-10T07:06:06153.124.163.238Mozilla/5.0 (Linux; Android 14; sdk_gphone64_x86_64 Build/UE1A.230829.050; wv) Ade.fabrik19.globus
2026-05-10T06:49:26153.124.163.238reviewer@yeswehack.comYwhTestPwd2026Mozilla/5.0 (Linux; Android 14; sdk_gphone64_x86_64 Build/UE1A.230829.050; wv) Aca3ac487-82b0-4d6e-ab40-be9a29f4a20dde.fabrik19.globus
2026-05-10T06:48:51153.124.163.238Mozilla/5.0 (Linux; Android 14; sdk_gphone64_x86_64 Build/UE1A.230829.050; wv) Ade.fabrik19.globus
2026-05-10T06:46:50153.124.163.238Mozilla/5.0 (Linux; Android 14; sdk_gphone64_x86_64 Build/UE1A.230829.050; wv) Ade.fabrik19.globus

PoC for YesWeHack bug-bounty submission, finding F1 (Universal Link -> in-app WebView phishing in de.fabrik19.globus). Source: /root/homelab/poc/globus_poc/poc_server.py on 1pc.tf.