01-05-26, 07:26 PM
Hello DarkForums Community,
Today I am releasing a private real-name verification abuse tool
targeting 3DMGame Chinese gaming platform (mweb.3dmgame.com).
What this tool does:
Target Info:
- Platform: 3DMGame (mweb.3dmgame.com)
- Endpoint: POST /api/identityh5
- Country: China
- Vulnerability: Weak 2-Factor Identity Verification / Session Reuse
Capabilities:
- Input: Chinese Name + ID Card Number
- Output: Verification pass/fail + server message
- Method: Form-encoded POST with captured session cookies
- Auth: Hardcoded userid + gamesign from packet capture
- Loop mode for batch testing
Use Case:
- Verify leaked identity combos against gaming platform
- Bypass real-name registration requirements
- Account verification before resale
- Test validity of ID datasets on live service
Tool Features:
[+] Working session cookies included
[+] URL encoding handled automatically
[+] JSON response parsing
[+] Interactive batch mode
[+] Clean Python 3 code
Note:
- Session cookies are active but may expire
- Update userid/gamesign if targeting different account
Deliverables included:
[+] 20260224-220924.py - clean Python script
Download:
Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/
Today I am releasing a private real-name verification abuse tool
targeting 3DMGame Chinese gaming platform (mweb.3dmgame.com).
What this tool does:
Target Info:
- Platform: 3DMGame (mweb.3dmgame.com)
- Endpoint: POST /api/identityh5
- Country: China
- Vulnerability: Weak 2-Factor Identity Verification / Session Reuse
Capabilities:
- Input: Chinese Name + ID Card Number
- Output: Verification pass/fail + server message
- Method: Form-encoded POST with captured session cookies
- Auth: Hardcoded userid + gamesign from packet capture
- Loop mode for batch testing
Use Case:
- Verify leaked identity combos against gaming platform
- Bypass real-name registration requirements
- Account verification before resale
- Test validity of ID datasets on live service
Tool Features:
[+] Working session cookies included
[+] URL encoding handled automatically
[+] JSON response parsing
[+] Interactive batch mode
[+] Clean Python 3 code
Note:
- Session cookies are active but may expire
- Update userid/gamesign if targeting different account
Deliverables included:
[+] 20260224-220924.py - clean Python script
Download:
Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/
