Skip to content

Instantly share code, notes, and snippets.

@gelicia
Last active August 4, 2016 21:51
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 2 You must be signed in to fork a gist
  • Save gelicia/19ba488097b5b263d2a9 to your computer and use it in GitHub Desktop.
Save gelicia/19ba488097b5b263d2a9 to your computer and use it in GitHub Desktop.
hacking team exploits
Code Customer Country Area Agency Channel Or Direct Number of Targets Year first bought Annual Maitenance Total Client Revenue
PP Polizia Postale Italy Europe LEA Direct unlimited 2004 100000 808833.2
CNI / CNI-old, Prod, Test CNI Spain Europe Intelligence Direct unlimited 2006 52000 538000
IDA IDA SGP Singapore APAC Intelligence Direct unlimited 2008 89000 1209967
MKIH Information Office Hungary Europe Intelligence Channel 50 2008 41000 885000
CSDN CSDN Morocco MEA Intelligence Direct 300 2009 140000 1936050
CSH Italy - DA - Rental Italy Europe Other Direct 80 2009 50000 628250
MACC MACC Malaysia APAC Intelligence Channel 30 2009 77000 789123
PCIT PCM Italy Europe Intelligence Direct unlimited (partially) 2009 90000 764297.48
SSNS SSNS - Ungheria Hungary Europe Intelligence Direct 50 2009 64000 1011000
ROS CC - Italy Italy Europe LEA Direct 20 2010 50000 497348.51
GIP GIP Saudi Saudi MEA Intelligence Direct 50 2010 45000 600000
INTECH-CONDOR IR Authorities (Condor) Luxemburg Europe Other Channel 20 2010 45000 446000
SEGOB La Dependencia y/o Cisen Mexico LATAM Intelligence Direct 140 2010 130000 1390000
UZC UZC Czech Rep. Europe LEA Channel 25 2010 55000 689779
GNSE Egypt - MOD Egypt MEA Other Channel 20 2011 70000 598000
PHOEBE FBI USA North America LEA Channel 35 2011 100000 697709.8
ORF Oman - Intelligence Oman MEA Intelligence Direct 20 2011 30000 500000
PANP President Security Panama LATAM Intelligence Channel 40 2011 110000 750000
TNP Turkish National Police Turkey Europe LEA Direct 50 2011 45000 440000
MOI UAE - MOI UAE MEA LEA Channel 15 2011 90000 634500
NSS NSS Uzbekistan Europe Intelligence Channel - NICE 25 2011 50000 917038
DOD DOD USA North America LEA Channel 10 2011 190000
BSGO Bayelsa State Government Nigeria MEA Intelligence Channel - NICE 10 2012 75000 450000
PGJ MEX Estado del Mexico Mexico LATAM LEA Channel 100 2012 120000 783000
INSA Information Network Security Agency Ethiopia MEA Intelligence Channel - NICE 150 2012 80000 750000
INTECH-FALCON State security (Falcon) Luxemburg Europe Other Channel 5 2012 38000 315999.6667
SIO Italy - DA - Rental Italy Europe Other Direct 30 2012 60000 496000
MYMI MAL - MI Malaysia APAC Intelligence Channel 25 2012 77000 552000
AlFahad Morocco - DST Morocco MEA Intelligence Channel 2000 2012 160000 1237500
NISS01-02 NISS - National Intelligence and Security Services Sudan MEA Intelligence Direct 240 2012 76000 960000
KVANT Russia - KVANT Russia Europe Intelligence Channel 25 2012 72000 451017
TCC-GID Saudi - GID Saudi MEA LEA Direct 200 2012 114000 1201000
KNB SIS of NSC Kazakistan Europe Intelligence Direct 110 2012 140000 1012500
SKA The 5163 Army Division S. Korea APAC Other Channel 20 2012 67000 686400
UAEAF UAE - Intelligence UAE MEA Other Direct 1100 2012 150000 1200000
KATIE-1 DEA USA North America Other Channel 10 2012 70000 567983.6249
CBA CBA Poland Poland Europe LEA Direct 10 2012 35000 249199.6667
MOD MOD Saudi Saudi MEA Other Direct 1000 2013 220000 1108687
PMO PMO Malaysia APAC Intelligence Channel 40 2013 64500 520000
EDQ Estado de Qeretaro Mexico LATAM LEA Channel 5 2013 48000 234500.32
AZSN Azerbajan NS Adjerbaijan NSS Europe Intelligence Channel 10 2013 32000 349000
GEDP Governo de Puebla Mexico LATAM Other Channel 10 2013 64000 428835.27
SDUC Governo de Campeche Mexico LATAM Other Channel 25 2013 78000 386296.3
MOACA AC Mongolia Mongolia APAC Intelligence Direct 200 2013 100000 799000
THDOC Dept. of Correction Thai Police Thailand APAC LEA Channel 25 2013 52000 286482.27
SENAIN SENAIN Ecuador LATAM LEA Channel 10 2013 75000 535000
MDNP DIPOL Colombia LATAM LEA Channel 35 2013 35000 335000
SCICO Guardia di Finanza Italy Europe LEA Direct 2013 80000 400000
CIS Intelligence Cyprus Europe LEA Direct 5 2013 40000 375625
BHR Midworld Barhein Bahrein MEA Intelligence Channel 2013 210000
PEMEX Mexico - pemx Mexico LATAM LEA Channel 2013 321120
Malysia K Malaysia APAC LEA Channel 2013 0
HON Honduras Honduras LATAM LEA Channel - NICE 2014 355000
SSPT Mex Taumalipas Mexico LATAM 2014 322900.3568
SEPYF Sec. De Planeacion y Finanzas Mexico LATAM LEA Channel 2014 91000 371035
ARIEL AREA Italia Europe 2014 430000
YUKI Mexico Yucatan Mexico LATAM LEA Channel 2014 401788
DUSTIN Mexico Durango Mexico LATAM LEA Channel 2014 421397
PHANTOM DIE Chile Chile LATAM LEA Channel 2014 2289155
JASMINE Jalisco Mexico Mexico LATAM LEA Channel 2014 748003
TIKIT Royal Thai Army Thailand APAC LEA Channel 2014 360000
VIKYS Vietnam GD5 Vietnam APAC Channel 2014 281170
ZUEGG Kantonspolizei Zurich Switzerland Europe LEA Direct 2014 486500
VIRNA Vietnam GD1 Vietnam APAC LEA Channel 50 2015 543810
TREVOR Egypt TRD GNSE Egypt MEA LEA Channel 25 2015 137500
LIVIA Lebanon Army Forces Lebanon MEA LEA Direct 100 2015
BRENDA Brasil PF Brasil LATAM LEA Channel 2015
{"description":"hacking team exploits","endpoint":"","display":"div","public":true,"require":[],"fileconfigs":{"inlet.js":{"default":true,"vim":false,"emacs":false,"fontSize":12},"exploits.csv":{"default":true,"vim":false,"emacs":false,"fontSize":12},"_.md":{"default":true,"vim":false,"emacs":false,"fontSize":12},"config.json":{"default":true,"vim":false,"emacs":false,"fontSize":12},"clients.csv":{"default":true,"vim":false,"emacs":false,"fontSize":12}},"fullscreen":false,"play":false,"loop":false,"restart":false,"autoinit":true,"pause":true,"loop_type":"pingpong","bv":false,"nclones":15,"clone_opacity":0.4,"duration":3000,"ease":"linear","dt":0.01,"ajax-caching":true,"thumbnail":"http://i.imgur.com/Uk7G11H.png","inline-console":true}
month Customer Exploit type Requested Downloaded Succeeded
01 ARIEL Internet Explorer (Hosted) 3 0 0
01 ARIEL Word document 2 1 0
01 CSH Android browser (hosted) 6 3 0
01 CSH Word document 3 1 0
01 FAE-FURLAN Internet Explorer (Hosted) 3 1 1
01 FAE-FURLAN Word document 3 1 1
01 FAE-INVERNIZZI Android browser (hosted) 3 1 1
01 FAE-MARTINEZ Android browser (hosted) 1 0 0
01 FAE-MARTINEZ Word document 4 0 0
01 FAE-SOLIS Android browser (hosted) 4 1 1
01 FAE-SOLIS Internet Explorer (Hosted) 3 3 1
01 FAE-WOON Internet Explorer (Hosted) 16 14 7
01 FAE-WOON PowerPoint presentation 17 3 2
01 FAE-WOON Word document 16 12 8
01 NSS Internet Explorer (Hosted) 1 1 0
01 NSS Internet Explorer (HTML) 4 0 0
01 PHANTOM Android browser (hosted) 3 0 0
01 PHANTOM Internet Explorer (Hosted) 1 0 0
01 PHOEBE Android browser (hosted) 1 0 0
01 ROS Android browser (hosted) 6 0 0
01 ROS Android browser (HTML) 6 1 1
01 SEGOB Word document 1 0 0
01 SEPYF Word document 6 4 4
01 SIO Word document 1 1 0
01 SKA Android browser (hosted) 40 12 2
01 SKA Internet Explorer (Hosted) 8 3 3
01 SKA PowerPoint presentation 5 4 3
01 SKA Word document 5 4 2
01 UZC Internet Explorer (Hosted) 4 0 0
01 UZC PowerPoint presentation 3 0 0
01 UZC Word document 4 0 0
02 ARIEL Android browser (hosted) 11 1 0
02 ARIEL Word document 1 0 0
02 CIS Android browser (hosted) 2 2 0
02 CIS Internet Explorer (Hosted) 1 1 0
02 CSH Android browser (hosted) 2 1 0
02 CSH Word document 3 1 0
02 GEDP Word document 2 0 0
02 JASMINE Word document 3 1 1
02 MDNP Android browser (hosted) 2 0 0
02 SEGOB Word document 1 1 1
02 SEPYF Internet Explorer (Hosted) 10 5 1
02 SEPYF Word document 21 2 2
02 SKA SKA-iehosted 2 0 0
02 SKA Android browser (hosted) 41 11 4
02 SKA Internet Explorer (Hosted) 7 6 5
02 UZC Word document 3 0 0
02 YUKI Android browser (hosted) 16 6 0
02 ZUEGG Internet Explorer (HTML) 1 1 0
02 ZUEGG Word document 1 1 1
03 ARIEL Android browser (hosted) 9 0 0
03 CIS Word document 1 0 0
03 CSDN Word document 1 1 1
03 CSH Android browser (hosted) 5 1 0
03 CSH Internet Explorer (Hosted) 1 1 0
03 CSH Word document 1 0 0
03 FAE-FURLAN Internet Explorer (Hosted) 2 1 0
03 JASMINE Internet Explorer (Hosted) 1 0 0
03 JASMINE Word document 1 1 0
03 ORF Android browser (hosted) 2 0 0
03 PHANTOM Android browser (hosted) 3 0 0
03 SEPYF Internet Explorer (Hosted) 1 1 1
03 SEPYF Word document 7 0 0
03 SKA Android browser (hosted) 48 4 0
03 SKA Internet Explorer (Hosted) 8 0 0
03 ZUEGG Android browser (hosted) 1 1 0
04 ARIEL Android browser (hosted) 5 0 0
04 CSDN Internet Explorer (Hosted) 2 1 1
04 CSDN Word document 2 2 1
04 CSH Android browser (hosted) 1 0 0
04 ORF Android browser (hosted) 1 0 0
04 ORF Word document 7 3 1
04 PHANTOM Android browser (hosted) 3 0 0
04 ROS Android browser (HTML) 20 3 2
04 SEPYF Word document 2 0 0
04 SKA Android browser (hosted) 32 3 0
04 SKA PowerPoint presentation 5 2 1
04 SKA Word document 5 3 3
04 UZC PowerPoint presentation 1 0 0
04 UZC Word document 5 0 0
04 VIKYS Word document 10 2 0
05 ARIEL Android browser (hosted) 8 1 0
05 ARIEL Multibrowser (hosted) 8 8 8
05 ARIEL Multibrowser (HTML) 1 1 1
05 ARIEL Word document 6 4 2
05 BRENDA Android browser (hosted) 6 0 0
05 CSH Android browser (hosted) 2 2 0
05 FAE-INVERNIZZI Android browser (hosted) 1 1 1
05 GEDP Word document 10 4 2
05 INTECH-CONDOR Multibrowser (hosted) 4 0 0
05 KNB Word document 5 1 0
05 MDNP PowerPoint presentation 1 0 0
05 SEPYF PowerPoint presentation 2 1 1
05 SEPYF Word document 4 1 1
05 SKA Android browser (hosted) 13 6 0
05 SKA PowerPoint presentation 2 0 0
05 SKA Word document 2 0 0
05 TCC-GID Word document 1 0 0
05 UZC Multibrowser (hosted) 8 6 5
05 UZC Word document 8 3 2
05 VIKYS Word document 18 8 3
//Helpfully copied to http://pastebin.com/Zrf9QM27
//Made some modifications to better match data to clients
//https://wikileaks.org/hackingteam/emails/emailid/1094694
//Data taken off the pst was placed here:
//https://gist.github.com/gelicia/ea673ac3eced6995359b
//Was able to get client matches to all but FAE-*
//FAE = field application engineer (I think) so who knows where they were?
var clientData = tributary.clients;
var exploitData = tributary.exploits;
var exploitNest = d3.nest().key(function(d){ return d.Customer;}).entries(exploitData);
for (var i = 0; i < exploitNest.length; i++) {
var customerCode = exploitNest[i].key;
var clientMatch = clientData.filter(function(d){return d.Code === customerCode;})[0];
if (clientMatch !== undefined){
exploitNest[i].customerData = clientMatch;
}
}
//console.log(exploitNest)
var display = d3.selectAll("div#display");
//display.append("table");
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment