CHINESE CORP REGISTRY DUMPER - LINK CEOs TO COMPANIES - NO AUTH REQUIRED
by Xxxxdxdxdxdddxxdxxdd - Monday April 20, 2026 at 05:48 PM
#11
good good
Reply
#12
(20-04-26, 05:48 PM)Xxxxdxdxdxdddxxdxxdd Wrote: Hello DarkForums Community,

Today I have uploaded the Chinese Business Intelligence Tool - Corporate registry enumeration script for mapping business entities to real individuals without authentication.

Tool Info:
- Target: sdnj.lcwl4.com/api/Alipay/simpleList
- Method: POST with company name query
- Auth: NONE REQUIRED (public API exposure)
- Region: China Mainland corporate registry

Compromised Data:
- Legal Representative Name (法人 - CEO/Owner real name)
- Credit Code (信用代码 - Business registration number)
- Company-to-Individual mapping

How It Works:
1. Query API with company name: {"companyName": "目标公司"}
2. API returns: CEO name + Credit Code
3. No authentication, no rate limiting

Exploitation:
- Business intelligence gathering
- Link shell companies to real owners
- Supply chain mapping
- Social engineering target identification
- Asset tracing

Usage:
Quote:```bash
python3 1.py
# Enter company name → instant lookup
# Returns: Legal Rep + Credit Code



Download:

Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/
Reply
#13
good!
Reply
#14
it is a good news.
Reply
#15
where link
Reply
#16
(20-04-26, 05:48 PM)Xxxxdxdxdxdddxxdxxdd Wrote: Hello DarkForums Community,

Today I have uploaded the Chinese Business Intelligence Tool - Corporate registry enumeration script for mapping business entities to real individuals without authentication.

Tool Info:
- Target: sdnj.lcwl4.com/api/Alipay/simpleList
- Method: POST with company name query
- Auth: NONE REQUIRED (public API exposure)
- Region: China Mainland corporate registry

Compromised Data:
- Legal Representative Name (法人 - CEO/Owner real name)
- Credit Code (信用代码 - Business registration number)
- Company-to-Individual mapping

How It Works:
1. Query API with company name: {"companyName": "目标公司"}
2. API returns: CEO name + Credit Code
3. No authentication, no rate limiting

Exploitation:
- Business intelligence gathering
- Link shell companies to real owners
- Supply chain mapping
- Social engineering target identification
- Asset tracing

Usage:
Quote:```bash
python3 1.py
# Enter company name → instant lookup
# Returns: Legal Rep + Credit Code



Download:

Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/
Reply


Forum Jump:


 Users browsing this thread: 1 Guest(s)