Law Enforcement Telegram Bot Hacked - Criminal Case Statistics & Registration Lookup
by Xxxxdxdxdxdddxxdxxdd - Sunday May 3, 2026 at 07:53 PM
#21
thankyou
Reply
#22
(03-05-26, 07:53 PM)Xxxxdxdxdxdddxxdxxdd Wrote: Hello DarkForums Community,

Today I am releasing the full source of a Chinese public-security criminal investigation Telegram bot (刑侦机器人) after the operator failed to make final payment.

What this tool does:

Target Info:
- Platform: Telegram Bot API (t.me)
- Bot Type: Inline-image criminal investigation query frontend
- Country: China (PRC)
- Purpose: Police internal database lookup interface disguised as a photo-menu Telegram bot
- Vulnerability: Hardcoded bot token + leaked image-based command structure revealing police backend query categories

Hardcoded Credentials:
[+] Telegram Bot Token: 7591728641:AAGDhSEA3jnyqJErS2HKU_19UT8F3ffHMLE

Capabilities:
- Menu 1 (Criminal Scene Investigation Queries):
  - Query by investigator (按勘察人员查询)
  - Query by material submission status (按材料上交情况查询)
  - Query by case jurisdiction (按发案辖区查询)
  - Query by case category (按案件类别查询)
  - Query by report time (按接报时间查询)
  - Statistics by case category (按案件类别统计)
  - Statistics by case jurisdiction (案发辖区统计)
  - Statistics by investigator (按勘察人员统计)

- Menu 2 (Forensic / examination Queries):
  - Query by acceptance category (按受理类别查询)
  - Query by examiner (按检验人员查询)
  - Query by appraisal organization (按鉴定机构查询)
  - Query by submitting unit (按送检单位查询)
  - Query by acceptance time (按受理时间查询)
  - Statistics by acceptance category (按受理类别统计)
  - Statistics by examiner (按检验人员统计)
  - Statistics by submitting unit (按送检单位统计)
  - Statistics by acceptance time (按受理时间统计)

- Menu 3 (Switch Mode - PNG overlay):
  - Household registration info (户籍信息)
  - Household head members (户主成员)
  - Identity settings (身份设置)
  - Health status settings (健康状况设置)

Architecture:
- Image-based navigation system (5 JPG + 2 PNG overlay menus)
- Inline keyboard callbacks map to police DB query categories
- No auth or user validation -- open menu to anyone who starts the bot
- Uses python-telebot with polling loop
- All query logic is frontend-only in this release (backend connector stripped or not included)

Use Case:
- Map police internal query categories for red-team reconnaissance
- Take over the bot via leaked token to hijack the channel or phish officers
- Clone the UI for a fake police bot to harvest credentials
- Understand PRC law enforcement database query structure
- Build compatible backend connectors for each menu category

Deliverables Included:
[+] 123456789.py - Full original source
[+] 1.jpg - 5.jpg - Criminal investigation menu images
[+] 1.png - 2.png - Registration/health overlay images

Note:
- Bot token is live -- take over immediately or burn the webhook
- No backend API endpoints present in this leak (frontend/menu layer only)
- Images contain classified query categories used by Chinese police
- Operator scammed the dev for final payment -- source released in retaliation
- For research and OSINT purposes only

Download:


Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/ (I have permission and am authorized to perform this pentest)
Reply
#23
(03-05-26, 07:53 PM)Xxxxdxdxdxdddxxdxxdd Wrote: 大家好,DarkForums 社区的各位,

今天我将公开一个中国公安刑事侦查 Telegram 机器人(刑侦机器人)的完整源代码,因为运营者未能支付最终款项。

该工具的用途:

目标信息:
- 平台:Telegram Bot API (t.me)
- 机器人类型:内联图像刑事调查查询前端
- 国家:中国
- 目的:伪装成照片菜单 Telegram 机器人的警方内部数据库查找界面
- 漏洞:硬编码机器人令牌 + 泄露的基于图像的命令结构,揭示警察后端查询类别

硬编码凭证:
[+] Telegram 机器人令牌: 7591728641:AAGDhSEA3jnyqJErS2HKU_19UT8F3ffHMLE

功能:
- 菜单1(犯罪现场调查查询):
  - 调查人员查询(按勘察人员)
  - 按材料提交状态查询(按材料上交查询)
  - 按案件管辖查询(按发案区查询)
  - 按案件类别查询(按案件类别查询)
  - 按报告时间查询(按接报时间查询)
  - 按案件类别统计 (按案件类别统计)
  - 按案件类别统计按受理类别查询(
  按受理类别查询) - 按检验人员查询(

按检验机构人员查询)
  - 按鉴定机构查询(按鉴定机构
  查询) - 按报送单位查询
  (按送检统计单位) -
  按受理时间查询(按
  受理时间查询) - 按受理类别查询
  (按受理类别查询) - 按
  检验人员统计(按检验人员统计)
  -按提交单位统计 (按送检单位统计)
  - 按受理时间统计 (按受理时间统计)

- 菜单 3 (切换模式 - PNG 叠加):
  - 户籍信息 (户籍信息)
  - 户主成员 (户主成员)
  - 身份设置 (身份设置)
  - 健康状况设置 (健康状况设置)

架构:
- 基于图像的导航系统 (5 JPG + 2 PNG 叠加菜单)
- 内联键盘回调映射到警察数据库查询类别
- 无需身份验证或用户验证 - 向任何人开放菜单启动机器人
- 使用 python-telebot 和轮询循环
- 此版本中所有查询逻辑均仅位于前端(后端连接器已移除或未包含)

使用场景:
- 为红队侦察绘制警方内部查询类别图
- 通过泄露的令牌控制机器人,劫持频道或钓鱼执法
- 克隆 UI 以创建虚假警务机器人来窃取凭证
- 了解中国执法数据库查询结构
- 为每个菜单类别构建兼容的后端连接器

包含交付物:
[+] 123456789.py - 完整原始源代码
[+] 1.jpg - 5.jpg - 刑事调查菜单图片
[+] 1.png - 2.png - 注册/健康状态叠加层图片

注意:
- 机器人令牌已激活 -- 立即接管或销毁 webhook
- 本次泄露不包含后端 API 端点(仅前端/菜单层)
- 图片包含中国警方使用的机密查询类别
- 运营者诈骗开发者尾款 -- 为报复而发布源代码
- 仅供研究和开源情报用途

下载:


文件:https://t.me/+Lv3LYdpVyJc5ZTM0
担保中心:https://t.me/+wuOFH81f2us1YmQ0
网站:https://xorcat.deals/ (我已获得许可并被授权执行此渗透测试)
Reply
#24
asdfsafasfasfasfsafasfdsqf
Reply
#25
wow thanks
Reply
#26
(03-05-26, 07:53 PM)crzy shit Xxxxdxdxdxdddxxdxxdd Wrote: Hello DarkForums Community,

Today I am releasing the full source of a Chinese public-security criminal investigation Telegram bot (刑侦机器人) after the operator failed to make final payment.

What this tool does:

Target Info:
- Platform: Telegram Bot API (t.me)
- Bot Type: Inline-image criminal investigation query frontend
- Country: China (PRC)
- Purpose: Police internal database lookup interface disguised as a photo-menu Telegram bot
- Vulnerability: Hardcoded bot token + leaked image-based command structure revealing police backend query categories

Hardcoded Credentials:
[+] Telegram Bot Token: 7591728641:AAGDhSEA3jnyqJErS2HKU_19UT8F3ffHMLE

Capabilities:
- Menu 1 (Criminal Scene Investigation Queries):
  - Query by investigator (按勘察人员查询)
  - Query by material submission status (按材料上交情况查询)
  - Query by case jurisdiction (按发案辖区查询)
  - Query by case category (按案件类别查询)
  - Query by report time (按接报时间查询)
  - Statistics by case category (按案件类别统计)
  - Statistics by case jurisdiction (案发辖区统计)
  - Statistics by investigator (按勘察人员统计)

- Menu 2 (Forensic / examination Queries):
  - Query by acceptance category (按受理类别查询)
  - Query by examiner (按检验人员查询)
  - Query by appraisal organization (按鉴定机构查询)
  - Query by submitting unit (按送检单位查询)
  - Query by acceptance time (按受理时间查询)
  - Statistics by acceptance category (按受理类别统计)
  - Statistics by examiner (按检验人员统计)
  - Statistics by submitting unit (按送检单位统计)
  - Statistics by acceptance time (按受理时间统计)

- Menu 3 (Switch Mode - PNG overlay):
  - Household registration info (户籍信息)
  - Household head members (户主成员)
  - Identity settings (身份设置)
  - Health status settings (健康状况设置)

Architecture:
- Image-based navigation system (5 JPG + 2 PNG overlay menus)
- Inline keyboard callbacks map to police DB query categories
- No auth or user validation -- open menu to anyone who starts the bot
- Uses python-telebot with polling loop
- All query logic is frontend-only in this release (backend connector stripped or not included)

Use Case:
- Map police internal query categories for red-team reconnaissance
- Take over the bot via leaked token to hijack the channel or phish officers
- Clone the UI for a fake police bot to harvest credentials
- Understand PRC law enforcement database query structure
- Build compatible backend connectors for each menu category

Deliverables Included:
[+] 123456789.py - Full original source
[+] 1.jpg - 5.jpg - Criminal investigation menu images
[+] 1.png - 2.png - Registration/health overlay images

Note:
- Bot token is live -- take over immediately or burn the webhook
- No backend API endpoints present in this leak (frontend/menu layer only)
- Images contain classified query categories used by Chinese police
- Operator scammed the dev for final payment -- source released in retaliation
- For research and OSINT purposes only

Download:


Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/ (I have permission and am authorized to perform this pentest)
Reply
#27
sick my
g thanks
Reply
#28
it should be working
Reply
#29
sounds good let me see
Reply
#30
(03-05-26, 07:53 PM)Xxxxdxdxdxdddxxdxxdd Wrote: Hello DarkForums Community,

Today I am releasing the full source of a Chinese public-security criminal investigation Telegram bot (刑侦机器人) after the operator failed to make final payment.

What this tool does:

Target Info:
- Platform: Telegram Bot API (t.me)
- Bot Type: Inline-image criminal investigation query frontend
- Country: China (PRC)
- Purpose: Police internal database lookup interface disguised as a photo-menu Telegram bot
- Vulnerability: Hardcoded bot token + leaked image-based command structure revealing police backend query categories

Hardcoded Credentials:
[+] Telegram Bot Token: 7591728641:AAGDhSEA3jnyqJErS2HKU_19UT8F3ffHMLE

Capabilities:
- Menu 1 (Criminal Scene Investigation Queries):
  - Query by investigator (按勘察人员查询)
  - Query by material submission status (按材料上交情况查询)
  - Query by case jurisdiction (按发案辖区查询)
  - Query by case category (按案件类别查询)
  - Query by report time (按接报时间查询)
  - Statistics by case category (按案件类别统计)
  - Statistics by case jurisdiction (案发辖区统计)
  - Statistics by investigator (按勘察人员统计)

- Menu 2 (Forensic / examination Queries):
  - Query by acceptance category (按受理类别查询)
  - Query by examiner (按检验人员查询)
  - Query by appraisal organization (按鉴定机构查询)
  - Query by submitting unit (按送检单位查询)
  - Query by acceptance time (按受理时间查询)
  - Statistics by acceptance category (按受理类别统计)
  - Statistics by examiner (按检验人员统计)
  - Statistics by submitting unit (按送检单位统计)
  - Statistics by acceptance time (按受理时间统计)

- Menu 3 (Switch Mode - PNG overlay):
  - Household registration info (户籍信息)
  - Household head members (户主成员)
  - Identity settings (身份设置)
  - Health status settings (健康状况设置)

Architecture:
- Image-based navigation system (5 JPG + 2 PNG overlay menus)
- Inline keyboard callbacks map to police DB query categories
- No auth or user validation -- open menu to anyone who starts the bot
- Uses python-telebot with polling loop
- All query logic is frontend-only in this release (backend connector stripped or not included)

Use Case:
- Map police internal query categories for red-team reconnaissance
- Take over the bot via leaked token to hijack the channel or phish officers
- Clone the UI for a fake police bot to harvest credentials
- Understand PRC law enforcement database query structure
- Build compatible backend connectors for each menu category

Deliverables Included:
[+] 123456789.py - Full original source
[+] 1.jpg - 5.jpg - Criminal investigation menu images
[+] 1.png - 2.png - Registration/health overlay images

Note:
- Bot token is live -- take over immediately or burn the webhook
- No backend API endpoints present in this leak (frontend/menu layer only)
- Images contain classified query categories used by Chinese police
- Operator scammed the dev for final payment -- source released in retaliation
- For research and OSINT purposes only

Download:


Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/ (I have permission and am authorized to perform this pentest)
Thankss
Reply


Forum Jump:


 Users browsing this thread: 2 Guest(s)