ODINT
Hosts Search
Donate
Survey plate · Ecuador Traverse the grid
A01B02C03D04E05F06G07H08ECUADOR1.64S 78.70W

Atlas · Ecuador · published

Nothing Hidden in Ecuador | Ecuador Cyber Tour

Audit of Ecuador's executive, military, police, telecom, tax, and emergency infrastructure, exposing public APIs, shared CMS credentials, outdated mail servers, and 26.25 GB of evidence across 55+ public domains.

ODINT Investigation Team · 2026-01-19

Record
INV-544102
Status
published
Assets
0
Documents
0
National route
24

Nothing Hidden in Ecuador

Audit of Ecuador's executive, military, police, telecom, tax, and emergency infrastructure, exposing public APIs, shared CMS credentials, outdated mail servers, and 26.25 GB of evidence across 55+ public domains.

By ODINT Investigation Team — 2026

ECUADOR STATE OF EMERGENCY 26.25 GB OSINT Investigation

Campaign Statistics

The Ecuador drop combines target harvesting, passive reconnaissance, source code review, exposed credential analysis, public API mapping, and government source code review across civilian and critical infrastructure targets.

26.25 GBEvidence Mirrored
4,714Domains in Scope
27,272Files Catalogued
55+Government Domains
659Government Emails
691+National IDs
559+Phones
93IMEIs

Why Ecuador Matters

Ecuador is operating under an internal armed conflict framework while gangs, ports, prisons, and state institutions remain under pressure. That context makes exposed government infrastructure more consequential: telecom regulators, emergency systems, tax services, military mail, and executive branch sites all sit on the same national attack surface.

minka.gob.ec / sitio-32 / oraculo
Shared government CMS stack across executive and regulator infrastructure
Vector: Public source code and exposed WordPress patterns Impact: Shared credentials, salts, and predictable deployments Status: Publicly observable
sri.gob.ec
National Tax Authority
Vector: JSONWS API exposure Impact: Full service catalog and attack mapping Status: Reachable at /api/jsonws
ecu911.gob.ec / eppetroecuador.ec / arcotel.gob.ec
Emergency, energy, and telecom infrastructure
Vector: Legacy mail exposure and repeated admin pattern Impact: User enumeration, internal hostnames, and mail surfaces Status: Publicly fingerprintable

Critical Findings

Oraculo Credentials in Public SourceCritical
The Sitio-32 government theme exposes the Oraculo password SNAPsitio30v and the salt ALRTOPER984TNMGDGFDH, enabling forgery or decryption of centralized CMS traffic.
Read Report
SRI JSONWS ExposureCritical
SRI exposes its Liferay JSONWS catalog at /api/jsonws, providing a detailed map of document, organization, user, permission, and export services.
Read Report
Military and Emergency Mail ExposureHigh
ECU911 and Petroecuador expose legacy Exchange infrastructure, while multiple security targets leak usernames, internal hostnames, and webmail surfaces.
Open Annex
Citizen PII in Public DumpsHigh
ARCOTEL and Inclusion ministry datasets reveal cedulas, names, phones, emails, and IMEIs through public-facing endpoints and indexed dumps.
Open Annex

Raw Data & Downloads

All collected material has been reproduced as HTML annexes inside this repo so the publication keeps the same ODINT viewing flow as the other cyber tours.

Master Intelligence Report— Country-wide master report and severity ranking.
Open Annex
Military Infrastructure— Defense, Air Force, ISSFA, and .mil.ec findings.
Open Annex
Energy, Oil and Telecom— CNEL, Petroecuador, ARCOTEL, CNT, CELEC, and EcuCERT.
Open Annex
Executive Branch— Presidency, vice presidency, communication, and planning findings.
Open Annex
Police and Security— ECU911, bomberos, police, prison, and transport findings.
Open Annex
Finance, Tax and Social Security— SRI, IESS, customs, finance, banking, and regulator findings.
Open Annex
Mail Exchange Recon— Government mail server reconnaissance annex.
Open Annex
WordPress Recon
Open Annex
Raw User Enumeration— Consolidated user enumeration evidence.
Open Annex

OSINT Disclaimer

This report is based entirely on open-source intelligence (OSINT). No classified information was accessed. No confidential sources were used. No authentication mechanisms were bypassed.

The significance lies in connecting exposed tax services, military mail, telecom regulators, public GitLab code, and shared CMS credentials into one coherent picture of state weakness.

Compiled 2026 — Classification: OSINT — Open Source
Observatory for Digital Infrastructure and Network Transparency (ODINT)

Inside the Ecuador file

National route

24 records · 0 indexed assets

  1. 01
    INV-203151

    Energy, Oil and Telecom

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  2. 02
    INV-959777

    Exchange and Mail Servers

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  3. 03
    INV-814050

    Executive Branch Recon

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  4. 04
    INV-511809

    Executive Branch

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  5. 05
    INV-409949

    Finance Tax Recon

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  6. 06
    INV-170004

    Finance, Tax and Social Security

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  7. 07
    INV-202571

    FirmaEC Endpoints

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  8. 08
    INV-661840

    Government Emails

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  9. 09
    INV-952109

    Mail Exchange Recon

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  10. 10
    INV-052311

    Master Intelligence Report

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  11. 11
    INV-159686

    Military Infrastructure

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  12. 12
    INV-508177

    Minka GitLab Source Code

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  13. 13
    INV-848821

    Government GitLab

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  14. 14
    INV-565050

    Oraculo Credentials

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  15. 15
    INV-535556

    PII Exposure Summary

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  16. 16
    INV-093480

    Police and Security

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  17. 17
    INV-703336

    Raw User Enumeration Dump

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  18. 18
    INV-255716

    Security Law Enforcement Recon

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  19. 19
    INV-201195

    SRI JSONWS API

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  20. 20
    INV-245671

    SugarCRM Credentials

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  21. 21
    INV-974654

    TCTelevision Git Exposure

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  22. 22
    INV-565072

    Universities Dump

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  23. 23
    INV-026143

    WordPress Recon

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10

  24. 24
    INV-133616

    WordPress REST Bulk Dump

    ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.

    published
    2026-04-10