# SONABHY Strapi CMS — Complete Intelligence Dump
**Date:** 2026-03-04
**Target:** cms.sonabhy.bf (CNAME → king-prawn-app-6bsvl.ondigitalocean.app)
**Hosting:** DigitalOcean App Platform behind Cloudflare
**CMS:** Strapi (Node.js headless CMS)
**Severity:** HIGH — 46 content types, 27 accessible, ~2MB structured data

---

## Attack Surface Summary

| Endpoint Category | Accessible | Blocked (403) | Not Found (404) |
|-------------------|-----------|---------------|-----------------|
| Content types     | 27        | 5             | 14              |
| Admin endpoints   | 2 (/admin, /admin/init) | 1 (/admin/information) | — |
| User endpoints    | — | 2 (/api/users, /api/users-permissions/roles) | — |

**Admin UUID:** `a5ca9d48-8f90-4ff2-ac19-4b50b6cad297`
**DigitalOcean App ID:** `29a0ca2c-c79c-4070-9970-bd7e16f51a32`

**Cloudinary CDN Accounts:**
- `dmk8wryvz` — newer uploads (2024-2025)
- `itexvivo` — older uploads (2024)
- Both under `sonabhy/` folder

---

## Executive Team — 24 Members

| ID | Name | Title | Photo |
|----|------|-------|-------|
| 1 | TRAORE Lamine | Directeur de cabinet | itexvivo CDN |
| 2 | OUATTARA Soma Alassane | Conseiller Technique | — |
| 3 | YAMEOGO Jean | Conseiller Fiscal | itexvivo CDN |
| 4 | KABORE Ousmane | Conseiller Technique | dmk8wryvz CDN |
| 5 | SIDIBE Siméon | Conseiller Technique | itexvivo CDN |
| 6 | HIEN Serge Ibrahim | Directeur Stratégique Trading & Approvisionnement | dmk8wryvz CDN |
| 7 | — | Directeur Central des Opérations | — |
| 8 | DIALLO Tidjane | Directeur du Contrôle de Gestion | dmk8wryvz CDN |
| 9 | OUEDRAOGO Saïdou | Directeur Central du Support | itexvivo CDN |
| 10 | OUEDRAOGO Justin | **Responsable Sécurité des Systèmes d'Information** | itexvivo CDN |
| 11 | OUEDRAOGO Désiré | Directeur de la Planification et des Projets | dmk8wryvz CDN |
| 12 | ILBOUDO Barké | Directeur Financier et Comptable | itexvivo CDN |
| 13 | BASSOLE Yannick | Directeur des Marchés Publics | itexvivo CDN |
| 14 | OUATTARA Salifou | **Directeur des Systèmes d'Information** | itexvivo CDN |
| 15 | GUIRA Moustapha | Directeur de l'Audit Interne | itexvivo CDN |
| 16 | NIKIEMA Mouni | Conseiller Technique | itexvivo CDN |
| 17 | OUEDRAOGO Dieudonné | Directeur Commercial et Marketing | dmk8wryvz CDN |
| 18 | YOUGBARE Barnabé | Directeur Juridique et du Contentieux | itexvivo CDN |
| 19 | MILLOGO Dada Fidèle | Directeur des Ressources Humaines | dmk8wryvz CDN |
| 20 | SANGO Jonas | Directeur du dépôt de Bingo | itexvivo CDN |
| 21 | KONDOMBO Yannick | Directeur du dépôt de Bobo | dmk8wryvz CDN |
| 22 | BOUYAIN Nadia | Directrice Qualité, Hygiène, Sécurité et Environnement | itexvivo CDN |
| 23 | TAPSOBA Kader | Directeur de la Communication et des Relations Publiques | itexvivo CDN |
| 24 | KABRE Rebecca | Directrice du Centre de Référence du Pétrole et des Moteurs | dmk8wryvz CDN |

**Key IT Personnel:**
- **OUATTARA Salifou** — DSI (Director of Information Systems)
- **OUEDRAOGO Justin** — RSSI (Information Systems Security Officer)

**Social Media:**
- LinkedIn: https://bf.linkedin.com/company/ste-nationale-burkinabe-d%27hydrocarbures-sonabhy-
- Facebook: https://www.facebook.com/sonabhy.bf/

---

## Board of Directors — 9 Members

| ID | Name | Representing |
|----|------|-------------|
| 1 | YONLI Hadi Honoré | Ministry of Industrial Development, Commerce, Craft & SME |
| 2 | TIEMTORE Ragnang-newindé Isidore | **Présidence du Faso** |
| 3 | BOUDA Arouna | **Prime Minister's Office** |
| 4 | ZOUBGA Maoloud | Ministry of Economy, Finance and Prospective |
| 5 | NABARE/TOURE Aïcha Hafçatou | Ministry of Infrastructure and Development |
| 6 | SORGHO/SOKOUNDO Haoua | Ministry of Industrial Development |
| 7 | SEBEGO Touwendaobo Ange Hubert | Ministry of Energy, Mines and Quarries |
| 8 | PARE Laoko Dit Pascal | **Staff Representative** |
| 9 | BARRO Oumarou | Observer — Ministry of Industrial Development |

---

## Critical Infrastructure — Storage Facilities

### 3 Fuel Depots
1. **Dépôt de Bingo** — Primary depot, Ouagadougou area
   - Installation de Produits Blancs (white products)
   - Butane gas sphere (3rd sphere under construction)
   - Centre emplisseur (bottling center)

2. **Dépôt de Péni** — Southern depot
   - 2nd butane sphere (2,000T) completed 2022
   - Hydrocarbon liquid storage expansion

3. **Dépôt de Bobo** — Western depot (Bobo-Dioulasso)

### Transport Fleet
- **~4,000 tank trucks** (camions-citernes)
- 120 dedicated to butane gas transport
- Capacity: 15-40 tonnes per truck

### Import Corridors
Delivery at Terminal (DAT) locations:
- **Lomé, TOGO** (primary)
- **Cotonou, BENIN**
- **Tema, GHANA**

---

## Active Projects (13)

| ID | Project | Date |
|----|---------|------|
| 13 | **Construction d'un immeuble R+10** (10-story HQ building) | 2025-01 |
| 14 | Aménagement nouveau bâtiment siège R+3 | 2024-06 |
| 15 | Travaux de sécurisation du site du Siège | 2024-05 |
| 9 | **Construction dépôt pétrolier à OUAGA-EST** | 2024-06 |
| 10 | **Construction dépôt pétrolier à Pô** | 2024-06 |
| 11 | **Construction dépôt de gaz liquéfié à Kaya** | 2024-04 |
| 12 | Construction centre emplisseur à Andemtenga (Koupéla) | — |
| 1 | 3è sphère de stockage gaz butane — Bingo | 2020-11 |
| 2 | Extension capacités stockage produits liquides — Bingo | 2020-10 |
| 3 | Construction dépôt hydrocarbures liquides — Péni | 2021-07 |
| 4 | Construction centre emplisseur gaz — Péni | 2022-02 |
| 5 | Centre emplisseur bouteilles gaz 12.5/6 kg — Bingo | 2023-05 |
| 6 | 2è sphère stockage gaz butane 2000T — Péni | 2022-09 |

**Key expansion:** New depots at Ouaga-Est, Pô, and Kaya = expanding fuel storage capacity across country.

---

## Procurement Intelligence

**Active Tender (June 2025):**
- Reference: `25/519/MICA/SONABHY/DG/DSTA`
- Object: **190,000 TM ±10% of petroleum products**
- Deadline: 2025-07-14
- Agrément required: Yes

**Pricing Mechanism:**
- Based on PLATT'S European Marketscan (FOB MED BASIS ITALY)
- Super: "Gasoline Prem Unleaded 10ppmS FOB Med Cargo"
- Gasoil: "Gasoil 0,1%S FOB Med Cargo (NextGen MOC)"
- Fuel Oil: "FO 1%S FOB Med Cargo"
- Jet A1: "Jet FOB Med Cargo"
- Butane: PLATT'S LPGASWIRE "butane" under "NWE FOB Seagoing" + "West Med FOB"
- Payment: Telegraph transfer, 60 days from receipt

**Origin restriction:** Products must originate from World Bank member countries, Switzerland, or Taiwan. Other origins explicitly excluded.

**Distributor requirements:**
- Minimum capital: **100 million FCFA** (~$160,000 USD)
- Must build 10 gas stations in 5 years
- Must source exclusively from SONABHY

---

## Fuel Products

1. Super 91 (unleaded gasoline)
2. Gasoil (diesel)
3. DDO (Distillate Diesel Oil / domestic fuel oil)
4. Jet A1 (aviation kerosene)
5. Gaz Butane (LPG)
6. Fuel Oil (heavy fuel)
7. Pétrole Lampant (lamp kerosene)

---

## Consumer Price Regulation

Two joint ministerial decrees from February 11, 2025:
- `ARRETE CONJOINT N°2025-001/MICA/MEF` — Consumer retail prices
- `ARRETE CONJOINT N°2025-002/MICA/MEF` — Consumer retail prices

Prices set jointly by Ministry of Commerce (MICA) and Ministry of Finance (MEF).

---

## YouTube Intelligence (16 videos)

Supply chain documentary: https://youtu.be/A-eQw9zg5y4
Strategic Plan 2027: https://youtu.be/djsBJ8e7KH0
Bingo depot visit: https://youtu.be/JyvP6GFKX6U
Fraud prevention: https://youtu.be/TEY1e1ZBUc8

---

## Files Dumped

| File | Size | Content |
|------|------|---------|
| equipe-dirigeantes.json | 55 KB | 24 executives with photos |
| conseil-d-administrations.json | 19 KB | 9 board members |
| projets.json | 33 KB | 13 infrastructure projects |
| actualites.json | 201 KB | 25 news articles |
| phototheques.json | 1,471 KB | 25 photo gallery entries |
| le-courriers.json | 24 KB | 13 newsletters |
| services.json | 17 KB | 4 service descriptions |
| stockage.json | 15 KB | Storage infrastructure |
| fournisseur.json | 14 KB | Supplier/procurement procedures |
| demarche-qses.json | 12 KB | QSE procedures |
| produits.json | 10 KB | 7 fuel products |
| heroes.json | 10 KB | Homepage hero sections |
| apropos-sonabhy.json | 7 KB | About page content |
| carrieres.json | 6 KB | 3 job postings |
| documents-cles.json | 6 KB | Key documents |
| tarif-consommateurs.json | 5 KB | Consumer prices |
| impacts.json | 5 KB | Impact statistics |
| missions.json | 5 KB | Mission statements |
| marketeur.json | 5 KB | Distributor requirements |
| transporteur.json | 5 KB | Transporter info |
| videotheques.json | 4 KB | 16 YouTube links |
| partenaire-commercials.json | 4 KB | 6 commercial partners |
| appels-d-offres.json | 3 KB | 4 procurement tenders |
| faqs.json | 3 KB | 3 FAQs |
| transport.json | 3 KB | Transport fleet info |
| importation.json | 3 KB | Import procedures |
| vue-d-ensemble-pro.json | 3 KB | Professional overview |
| **TOTAL** | **~2 MB** | **27 content types** |
