Return to forum
Guns.com config
by - Thursday, January 1, 1970 at 12:00 AM
Bossman
Owner
Posts: 3270
Threads: 0
Joined: N/A
Reputation: 3785

Shoutbox AddictGOD Gifter
#1
October 31, 2022 at 3:51 AM
This website is owned by the dumbest people ever, these secrets were grabbed over a year ago and they've never changed any of them. They were also hacked numerous times

The zendesk token still works, and the login for https://app.skuvault.com/, haven't checked the rest


$_SERVER['USER'] www-data
$_SERVER['HOME'] /var/www
$_SERVER['HTTP_ACCEPT'] */*
$_SERVER['HTTP_HOST'] 13.68.205.40
$_SERVER['SCRIPT_FILENAME'] /datadrive/admin.guns.com/current/public/index.php
$_SERVER['REDIRECT_STATUS'] 200
$_SERVER['SERVER_NAME'] adminstg1.guns.com
$_SERVER['SERVER_PORT'] 443
$_SERVER['SERVER_ADDR'] 10.170.1.4
$_SERVER['REMOTE_PORT'] 39460
$_SERVER['SERVER_SOFTWARE'] nginx/1.14.0
$_SERVER['GATEWAY_INTERFACE'] CGI/1.1
$_SERVER['HTTPS'] on
$_SERVER['REQUEST_SCHEME'] https
$_SERVER['SERVER_PROTOCOL'] HTTP/1.1
$_SERVER['DOCUMENT_ROOT'] /datadrive/admin.guns.com/current/public
$_SERVER['DOCUMENT_URI'] /index.php
$_SERVER['SCRIPT_NAME'] /index.php
$_SERVER['CONTENT_LENGTH'] no value
$_SERVER['CONTENT_TYPE'] no value
$_SERVER['REQUEST_METHOD'] GET
$_SERVER['QUERY_STRING'] no value
$_SERVER['FCGI_ROLE'] RESPONDER
$_SERVER['PHP_SELF'] /index.php
$_SERVER['REQUEST_TIME_FLOAT'] 1633402538.9621
$_SERVER['REQUEST_TIME'] 1633402538
$_SERVER['APP_ENV'] dev
$_SERVER['APP_SECRET'] base64:Dn9hQ6bOJLqFcqPc7YlqncOrd4YEVIy6u8saThFBwBU=
$_SERVER['DATABASE_URL'] mysql://GDC:[email protected]/guns_prod
$_SERVER['MAILER_URL'] smtp://smtp.office365.com:587?encryption=tls&auth_mode=login&[email protected]&password=@htFzSUVIaBP51KDb7@eQwNxnhQc8ltNxV@
$_SERVER['MAILER_USERNAME'] [email protected]
$_SERVER['MAILER_PASSWORD'] sjhkrywtzrfxrlhp
$_SERVER['ZENDESK_TOKEN'] V8QOfcE0Lar4C1DU60lvf44fS1MxyWIt2LcdZ3ud
$_SERVER['ZENDESK_USERNAME'] [email protected]
$_SERVER['ZENDESK_URL'] https://guns.zendesk.com/
$_SERVER['VUE_APP_ZENDESK_URL'] https://guns.zendesk.com/
$_SERVER['VUE_APP_ZENDESK_API'] https://adminstg.guns.com/api/zendesk
$_SERVER['VUE_APP_FFL_ENDPOINT'] https://fflstaging.guns.com
$_SERVER['FFL_ENDPOINT'] https://fflstaging.guns.com
$_SERVER['ADMIN_ENDPOINT'] https://adminstg.guns.com
$_SERVER['ADMIN_LRV_ENDPOINT'] http://staginglrv.guns.com
$_SERVER['IMAGES_ENDPOINT'] https://img.guns.com
$_SERVER['FTP_ENDPOINT'] https://images.guns.com/temp
$_SERVER['LIVE_ENDPOINT'] https://staginglrv.guns.com
$_SERVER['WP_ENDPOINT'] http://wp.guns.local
$_SERVER['SPORTS_SOUTH_USERNAME'] 99994
$_SERVER['SPORTS_SOUTH_CUSTOMER_NUMBER'] 99994
$_SERVER['SPORTS_SOUTH_PASSWORD'] 99999
$_SERVER['SPORTS_SOUTH_SOURCE'] 21544
$_SERVER['SPORTS_SOUTH_INVENTORY_URL'] http://webservices.theshootingwarehouse.com/smart/inventory.asmx/DailyItemUpdate
$_SERVER['SPORTS_SOUTH_ORDER_WSDL'] http://webservices.theshootingwarehouse.com/smart/orders.asmx?wsdl
$_SERVER['SPORTS_SOUTH_INVENTORY_WSDL'] http://webservices.theshootingwarehouse.com/smart/inventory.asmx?wsdl
$_SERVER['SPORTS_SOUTH_INVOICE_WSDL'] http://webservices.theshootingwarehouse.com/smart/invoices.asmx?wsdl
$_SERVER['SPORTS_SOUTH_INVENTORY_SPECIAL_WSDL'] http://webservices.theshootingwarehouse.com/smart/InventorySpecial.asmx?wsdl
$_SERVER['SHIPSTATION_URL'] https://ssapi.shipstation.com
$_SERVER['SHIPSTATION_KEY'] b276d71361dc45459bba1ce869aaef02
$_SERVER['SHIPSTATION_SECRET'] 67c6db469b2b4251bff20131d4d5a6dc
$_SERVER['SHIPPING_TESTMODE'] true
$_SERVER['BILL_HICKS_USERNAME'] [email protected]
$_SERVER['BILL_HICKS_PASSWORD'] gdc-Bill-Hicks
$_SERVER['BILL_HICKS_HOST'] billhicksco.hostedftp.com
$_SERVER['STORAGE_PATH'] /storage
$_SERVER['ROll_BAR'] 8a61c9b30936428dbe581627f293ee1d
$_SERVER['PAYMENT_URL'] https://paymentstg.guns.com
$_SERVER['COMPLIANCE_LIST'] ct
$_SERVER['PAYMENTS_API_KEY'] d8f02c6e7e57dc51e292dfbd652e02d398928792
$_SERVER['DOTMAILER_USERNAME'] [email protected]
$_SERVER['DOTMAILER_PASSWORD'] Xantia1*
$_SERVER['DOTMAILER_REGION'] https://r2-api.dotmailer.com
$_SERVER['DOTMAILER_IS_TEST_MODE'] true
$_SERVER['DOTMAILER_TEST_EMAIL'] [email protected]
$_SERVER['DOTMAILER_TEST_CONTACT_ID'] 144504532
$_SERVER['APP_AES_KEY'] 1234567890123456
$_SERVER['RABBITMQ_USER'] admin
$_SERVER['RABBITMQ_PASS'] 091409Hh
$_SERVER['RABBITMQ_HOST'] 13.90.143.79
$_SERVER['RABBITMQ_PORT'] 5672
$_SERVER['RABBITMQ_QUEUE'] pi.products.dirty
$_SERVER['RABBITMQ_FAIL_QUEUE'] pi.products.failed
$_SERVER['VERTEX_USERNAME'] 3853AFFC91044631ACBA4C25C73CC542
$_SERVER['VERTEX_PASSWORD'] R=o3q7{N
$_SERVER['VERTEX_CLIENT_ID'] REST-API-Guns.com
$_SERVER['VERTEX_CLIENT_SECRET'] 2368e1e40cb0f4965a880c5521bd7739
$_SERVER['VERTEX_COMPANY_CODE'] HINZ
$_SERVER['VERTEX_TAX_URL'] https://restconnect.vertexsmb.com
$_SERVER['VERTEX_AUTH_URL'] https://auth.vertexsmb.com/identity/connect/token
$_SERVER['SKU_VAULT_URL'] https://app.skuvault.com/
$_SERVER['SKU_VAULT_EMAIL'] [email protected]
$_SERVER['SKU_VAULT_PASSWORD'] Password1
$_SERVER['LABEL_PATH'] /datadrive/admin.guns.com/current/storage/
$_SERVER['GOOGLE_API_KEY'] AIzaSyCBWp9frmYl_pl-domFAy06-Mqk8Z-n8x8
$_SERVER['NON_DELIVERABLE_STATES'] ca,nj
$_SERVER['DEALER_PORTAL'] https://dealersstg.guns.com
$_SERVER['RABBITMQ_EMARSYS_HOST'] 10.170.1.5:5672
$_SERVER['RABBITMQ_EMARSYS_USER'] admin
$_SERVER['RABBITMQ_EMARSYS_PASS'] 0HdE@5WHshiq1fAYz8f
$_SERVER['RABBITMQ_CREDOVA_HOST'] 10.170.1.5:5672
$_SERVER['RABBITMQ_CREDOVA_USER'] admin
$_SERVER['RABBITMQ_CREDOVA_PASS'] 0HdE@5WHshiq1fAYz8f
$_SERVER['RABBITMQ_CREDOVA_VHOST'] credova
$_SERVER['EMARSYS_API_URL'] https://api.emarsys.net/api/v2/
$_SERVER['EMARSYS_API_USERNAME'] guns_com004
$_SERVER['EMARSYS_API_PASSWORD'] l8CJKfqYMNqaAFp8Cy35
$_SERVER['EMARSYS_TEST_MODE'] true
$_SERVER['EMARSYS_TEST_EMAIL_BUYER'] [email protected]
$_SERVER['EMARSYS_TEST_EMAIL_DEALER'] [email protected]
$_SERVER['EMARSYS_VHOST'] emarsys
$_SERVER['EMARSYS_EMAIL_EX'] emails
$_SERVER['EMARSYS_CONTACT_EX'] contacts
$_SERVER['EMARSYS_NOTIFICATION_QUEUE'] notification
$_SERVER['EMARSYS_NOTIFICATION_ROUTING_KEY'] emarsys-notification-email
$_SERVER['EMARSYS_EMAIL_QUEUE'] transactional-email
$_SERVER['EMARSYS_EMAIL_ROUTING_KEY'] emarsys-transactional-email
$_SERVER['EMARSYS_CONTACT_QUEUE'] contact
$_SERVER['EMARSYS_CONTACT_ROUTING_KEY'] emarsys-contact
$_SERVER['EMARSYS_DEAD_LETTERS_EX'] dead-letters
$_SERVER['EMARSYS_DEAD_LETTERS_KEY'] unhandled-errors
$_SERVER['EMARSYS_SALES_API_URL'] https://admin.scarabresearch.com
$_SERVER['EMARSYS_SALES_TOKEN'] Vn1Xp0HdN6dN4X4R5DK4-Fig4lneUx7gJQpwS-mfMY3YFhQ4ZVIXmLYokTtD5MzZgZKQZD1H2s3Bjx_qpupEMA
$_SERVER['EMARSYS_MERCHANT_ID'] 109847B7C06D1AC7
$_SERVER['RSR_ID'] 42640-11
$_SERVER['COMPLIANCE_VHOST'] compliance
$_SERVER['S3_BUCKET'] gunsdotcom
$_SERVER['S3_ACCESS_KEY'] W7NXNNJXGXRP00R0OURR
$_SERVER['S3_SECRETE_KEY'] ciKbqXWfJz4SpLbBSb5vNX4zClnaiA4X84AFwZIF
$_SERVER['S3_REGION'] us-east-1
$_SERVER['S3_URL'] https://s3.us-east-1.wasabisys.com
$_SERVER['LARAVEL_URL'] https://staginglrv.guns.com
$_SERVER['PACKAGE_PROTECTION_CLAIM_KEY'] guns2021IsTheBest
$_SERVER['CREDOVA_API_BASE_URI'] https://sandbox-lending-api.credova.com/
$_SERVER['CREDOVA_API_USERNAME'] QRH000
$_SERVER['CREDOVA_API_KEY'] mC-Z_!0W@v6BPXSG23F@na8Su$U?Bh1D9a@-4i1RO0yjt@X82S6!XSe?2J7_!68L
$_SERVER['CREDOVA_STORE_CODE'] QRH000
$_SERVER['YOTPO_ACCOUNT_ID'] 308240
$_SERVER['YOTPO_APP_KEY'] ew2BRfAuQJhAbBSqAnrKItGf9rI56c0dsDFa5Tbv
$_SERVER['YOTPO_SECRET_KEY'] 5m0MkofPh7Kplo5jHLeiBOIeyyyyAqcUmuDINXDd
$_SERVER['YOTPO_URL'] https://api.yotpo.com
$_SERVER['YOTPO_NOTIFICATION_RECIPIENT'] [email protected]
$_SERVER['YOTPO_CALLBACK_URL'] https://adminstg.guns.com/callback/yotpo/sync
$_SERVER['PRICING_ANALYSIS_REPORT_RECIPIENTS'] [email protected]
$_SERVER['KISSMETRICS_WEB_TOKEN'] 60fda5be3f063114fd5dfa65cc742ef59fff41af
$_SERVER['AVANTLINK_FRP_PWD'] no value
$_SERVER['GUNSINTERNATIONAL_ZENDESK_ID'] 1517970894962
$_SERVER['APP_DEBUG'] 1
$_SERVER['SHELL_VERBOSITY'] 3
$_ENV['APP_ENV'] dev
$_ENV['APP_SECRET'] base64:Dn9hQ6bOJLqFcqPc7YlqncOrd4YEVIy6u8saThFBwBU=
$_ENV['DATABASE_URL'] mysql://GDC:[email protected]/guns_prod
$_ENV['MAILER_URL'] smtp://smtp.office365.com:587?encryption=tls&auth_mode=login&[email protected]&password=@htFzSUVIaBP51KDb7@eQwNxnhQc8ltNxV@
$_ENV['MAILER_USERNAME'] [email protected]
$_ENV['MAILER_PASSWORD'] sjhkrywtzrfxrlhp
$_ENV['ZENDESK_TOKEN'] V8QOfcE0Lar4C1DU60lvf44fS1MxyWIt2LcdZ3ud
$_ENV['ZENDESK_USERNAME'] [email protected]
$_ENV['ZENDESK_URL'] https://guns.zendesk.com/
$_ENV['VUE_APP_ZENDESK_URL'] https://guns.zendesk.com/
$_ENV['VUE_APP_ZENDESK_API'] https://adminstg.guns.com/api/zendesk
$_ENV['VUE_APP_FFL_ENDPOINT'] https://fflstaging.guns.com
$_ENV['FFL_ENDPOINT'] https://fflstaging.guns.com
$_ENV['ADMIN_ENDPOINT'] https://adminstg.guns.com
$_ENV['ADMIN_LRV_ENDPOINT'] http://staginglrv.guns.com
$_ENV['IMAGES_ENDPOINT'] https://img.guns.com
$_ENV['FTP_ENDPOINT'] https://images.guns.com/temp
$_ENV['LIVE_ENDPOINT'] https://staginglrv.guns.com
$_ENV['WP_ENDPOINT'] http://wp.guns.local
$_ENV['SPORTS_SOUTH_USERNAME'] 99994
$_ENV['SPORTS_SOUTH_CUSTOMER_NUMBER'] 99994
$_ENV['SPORTS_SOUTH_PASSWORD'] 99999
$_ENV['SPORTS_SOUTH_SOURCE'] 21544
$_ENV['SPORTS_SOUTH_INVENTORY_URL'] http://webservices.theshootingwarehouse.com/smart/inventory.asmx/DailyItemUpdate
$_ENV['SPORTS_SOUTH_ORDER_WSDL'] http://webservices.theshootingwarehouse.com/smart/orders.asmx?wsdl
$_ENV['SPORTS_SOUTH_INVENTORY_WSDL'] http://webservices.theshootingwarehouse.com/smart/inventory.asmx?wsdl
$_ENV['SPORTS_SOUTH_INVOICE_WSDL'] http://webservices.theshootingwarehouse.com/smart/invoices.asmx?wsdl
$_ENV['SPORTS_SOUTH_INVENTORY_SPECIAL_WSDL'] http://webservices.theshootingwarehouse.com/smart/InventorySpecial.asmx?wsdl
$_ENV['SHIPSTATION_URL'] https://ssapi.shipstation.com
$_ENV['SHIPSTATION_KEY'] b276d71361dc45459bba1ce869aaef02
$_ENV['SHIPSTATION_SECRET'] 67c6db469b2b4251bff20131d4d5a6dc
$_ENV['SHIPPING_TESTMODE'] true
$_ENV['BILL_HICKS_USERNAME'] [email protected]
$_ENV['BILL_HICKS_PASSWORD'] gdc-Bill-Hicks
$_ENV['BILL_HICKS_HOST'] billhicksco.hostedftp.com
$_ENV['STORAGE_PATH'] /storage
$_ENV['ROll_BAR'] 8a61c9b30936428dbe581627f293ee1d
$_ENV['PAYMENT_URL'] https://paymentstg.guns.com
$_ENV['COMPLIANCE_LIST'] ct
$_ENV['PAYMENTS_API_KEY'] d8f02c6e7e57dc51e292dfbd652e02d398928792
$_ENV['DOTMAILER_USERNAME'] [email protected]
$_ENV['DOTMAILER_PASSWORD'] Xantia1*
$_ENV['DOTMAILER_REGION'] https://r2-api.dotmailer.com
$_ENV['DOTMAILER_IS_TEST_MODE'] true
$_ENV['DOTMAILER_TEST_EMAIL'] [email protected]
$_ENV['DOTMAILER_TEST_CONTACT_ID'] 144504532
$_ENV['APP_AES_KEY'] 1234567890123456
$_ENV['RABBITMQ_USER'] admin
$_ENV['RABBITMQ_PASS'] 091409Hh
$_ENV['RABBITMQ_HOST'] 13.90.143.79
$_ENV['RABBITMQ_PORT'] 5672
$_ENV['RABBITMQ_QUEUE'] pi.products.dirty
$_ENV['RABBITMQ_FAIL_QUEUE'] pi.products.failed
$_ENV['VERTEX_USERNAME'] 3853AFFC91044631ACBA4C25C73CC542
$_ENV['VERTEX_PASSWORD'] R=o3q7{N
$_ENV['VERTEX_CLIENT_ID'] REST-API-Guns.com
$_ENV['VERTEX_CLIENT_SECRET'] 2368e1e40cb0f4965a880c5521bd7739
$_ENV['VERTEX_COMPANY_CODE'] HINZ
$_ENV['VERTEX_TAX_URL'] https://restconnect.vertexsmb.com
$_ENV['VERTEX_AUTH_URL'] https://auth.vertexsmb.com/identity/connect/token
$_ENV['SKU_VAULT_URL'] https://app.skuvault.com/
$_ENV['SKU_VAULT_EMAIL'] [email protected]
$_ENV['SKU_VAULT_PASSWORD'] Password1
$_ENV['LABEL_PATH'] /datadrive/admin.guns.com/current/storage/
$_ENV['GOOGLE_API_KEY'] AIzaSyCBWp9frmYl_pl-domFAy06-Mqk8Z-n8x8
$_ENV['NON_DELIVERABLE_STATES'] ca,nj
$_ENV['DEALER_PORTAL'] https://dealersstg.guns.com
$_ENV['RABBITMQ_EMARSYS_HOST'] 10.170.1.5:5672
$_ENV['RABBITMQ_EMARSYS_USER'] admin
$_ENV['RABBITMQ_EMARSYS_PASS'] 0HdE@5WHshiq1fAYz8f
$_ENV['RABBITMQ_CREDOVA_HOST'] 10.170.1.5:5672
$_ENV['RABBITMQ_CREDOVA_USER'] admin
$_ENV['RABBITMQ_CREDOVA_PASS'] 0HdE@5WHshiq1fAYz8f
$_ENV['RABBITMQ_CREDOVA_VHOST'] credova
$_ENV['EMARSYS_API_URL'] https://api.emarsys.net/api/v2/
$_ENV['EMARSYS_API_USERNAME'] guns_com004
$_ENV['EMARSYS_API_PASSWORD'] l8CJKfqYMNqaAFp8Cy35
$_ENV['EMARSYS_TEST_MODE'] true
$_ENV['EMARSYS_TEST_EMAIL_BUYER'] [email protected]
$_ENV['EMARSYS_TEST_EMAIL_DEALER'] [email protected]
$_ENV['EMARSYS_VHOST'] emarsys
$_ENV['EMARSYS_EMAIL_EX'] emails
$_ENV['EMARSYS_CONTACT_EX'] contacts
$_ENV['EMARSYS_NOTIFICATION_QUEUE'] notification
$_ENV['EMARSYS_NOTIFICATION_ROUTING_KEY'] emarsys-notification-email
$_ENV['EMARSYS_EMAIL_QUEUE'] transactional-email
$_ENV['EMARSYS_EMAIL_ROUTING_KEY'] emarsys-transactional-email
$_ENV['EMARSYS_CONTACT_QUEUE'] contact
$_ENV['EMARSYS_CONTACT_ROUTING_KEY'] emarsys-contact
$_ENV['EMARSYS_DEAD_LETTERS_EX'] dead-letters
$_ENV['EMARSYS_DEAD_LETTERS_KEY'] unhandled-errors
$_ENV['EMARSYS_SALES_API_URL'] https://admin.scarabresearch.com
$_ENV['EMARSYS_SALES_TOKEN'] Vn1Xp0HdN6dN4X4R5DK4-Fig4lneUx7gJQpwS-mfMY3YFhQ4ZVIXmLYokTtD5MzZgZKQZD1H2s3Bjx_qpupEMA
$_ENV['EMARSYS_MERCHANT_ID'] 109847B7C06D1AC7
$_ENV['RSR_ID'] 42640-11
$_ENV['COMPLIANCE_VHOST'] compliance
$_ENV['S3_BUCKET'] gunsdotcom
$_ENV['S3_ACCESS_KEY'] W7NXNNJXGXRP00R0OURR
$_ENV['S3_SECRETE_KEY'] ciKbqXWfJz4SpLbBSb5vNX4zClnaiA4X84AFwZIF
$_ENV['S3_REGION'] us-east-1
$_ENV['S3_URL'] https://s3.us-east-1.wasabisys.com
$_ENV['LARAVEL_URL'] https://staginglrv.guns.com
$_ENV['PACKAGE_PROTECTION_CLAIM_KEY'] guns2021IsTheBest
$_ENV['CREDOVA_API_BASE_URI'] https://sandbox-lending-api.credova.com/
$_ENV['CREDOVA_API_USERNAME'] QRH000
$_ENV['CREDOVA_API_KEY'] mC-Z_!0W@v6BPXSG23F@na8Su$U?Bh1D9a@-4i1RO0yjt@X82S6!XSe?2J7_!68L
$_ENV['CREDOVA_STORE_CODE'] QRH000
$_ENV['YOTPO_ACCOUNT_ID'] 308240
$_ENV['YOTPO_APP_KEY'] ew2BRfAuQJhAbBSqAnrKItGf9rI56c0dsDFa5Tbv
$_ENV['YOTPO_SECRET_KEY'] 5m0MkofPh7Kplo5jHLeiBOIeyyyyAqcUmuDINXDd
$_ENV['YOTPO_URL'] https://api.yotpo.com
$_ENV['YOTPO_NOTIFICATION_RECIPIENT'] [email protected]
$_ENV['YOTPO_CALLBACK_URL'] https://adminstg.guns.com/callback/yotpo/sync
$_ENV['PRICING_ANALYSIS_REPORT_RECIPIENTS'] [email protected]
$_ENV['KISSMETRICS_WEB_TOKEN'] 60fda5be3f063114fd5dfa65cc742ef59fff41af
$_ENV['AVANTLINK_FRP_PWD'] no value
$_ENV['GUNSINTERNATIONAL_ZENDESK_ID'] 1517970894962


https://pompur.in
Reply
⭐️⭐️⭐️⭐️⭐️
GOD
Posts: 354
Threads: 0
Joined: N/A
Reputation: 1483

LeakerHackerShoutbox AddictDonator III
#2
October 31, 2022 at 3:53 AM
They dont give a shit about security. That is a shame show them how things work in our world.

Reply
BreachForums User
Member
Posts: 0
Threads: 0
Joined: N/A
Reputation: 0

#3
October 31, 2022 at 3:59 AM
That's crazy lol.

Why on earth would anyone use $_ENV to pass and store tokens/passwords? Such bad practice
Reply


 Users viewing this thread: Guns.com config: No users currently viewing.