Law Enforcement Telegram Bot Hacked - Criminal Case Statistics & Registration Lookup

breachforumsdacaiji · 15-07-26, 07:56 AM

sssssssss

usman786 · 02-09-26, 10:11 PM

(03-05-26, 07:53 PM)Xxxxdxdxdxdddxxdxxdd Wrote: Hello DarkForums Community,

Today I am releasing the full source of a Chinese public-security criminal investigation Telegram bot (刑侦机器人) after the operator failed to make final payment.

What this tool does:

Target Info:
- Platform: Telegram Bot API (t.me)
- Bot Type: Inline-image criminal investigation query frontend
- Country: China (PRC)
- Purpose: Police internal database lookup interface disguised as a photo-menu Telegram bot
- Vulnerability: Hardcoded bot token + leaked image-based command structure revealing police backend query categories

Hardcoded Credentials:
[+] Telegram Bot Token: 7591728641:AAGDhSEA3jnyqJErS2HKU_19UT8F3ffHMLE

Capabilities:
- Menu 1 (Criminal Scene Investigation Queries):
- Query by investigator (按勘察人员查询)
- Query by material submission status (按材料上交情况查询)
- Query by case jurisdiction (按发案辖区查询)
- Query by case category (按案件类别查询)
- Query by report time (按接报时间查询)
- Statistics by case category (按案件类别统计)
- Statistics by case jurisdiction (案发辖区统计)
- Statistics by investigator (按勘察人员统计)

- Menu 2 (Forensic / examination Queries):
- Query by acceptance category (按受理类别查询)
- Query by examiner (按检验人员查询)
- Query by appraisal organization (按鉴定机构查询)
- Query by submitting unit (按送检单位查询)
- Query by acceptance time (按受理时间查询)
- Statistics by acceptance category (按受理类别统计)
- Statistics by examiner (按检验人员统计)
- Statistics by submitting unit (按送检单位统计)
- Statistics by acceptance time (按受理时间统计)

- Menu 3 (Switch Mode - PNG overlay):
- Household registration info (户籍信息)
- Household head members (户主成员)
- Identity settings (身份设置)
- Health status settings (健康状况设置)

Architecture:
- Image-based navigation system (5 JPG + 2 PNG overlay menus)
- Inline keyboard callbacks map to police DB query categories
- No auth or user validation -- open menu to anyone who starts the bot
- Uses python-telebot with polling loop
- All query logic is frontend-only in this release (backend connector stripped or not included)

Use Case:
- Map police internal query categories for red-team reconnaissance
- Take over the bot via leaked token to hijack the channel or phish officers
- Clone the UI for a fake police bot to harvest credentials
- Understand PRC law enforcement database query structure
- Build compatible backend connectors for each menu category

Deliverables Included:
[+] 123456789.py - Full original source
[+] 1.jpg - 5.jpg - Criminal investigation menu images
[+] 1.png - 2.png - Registration/health overlay images

Note:
- Bot token is live -- take over immediately or burn the webhook
- No backend API endpoints present in this leak (frontend/menu layer only)
- Images contain classified query categories used by Chinese police
- Operator scammed the dev for final payment -- source released in retaliation
- For research and OSINT purposes only

Download:

Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/ (I have permission and am authorized to perform this pentest)

tapnbd918a · 06-09-26, 06:03 PM

thank youuu!

memhbGsa · 07-09-26, 08:39 PM

(03-05-26, 07:53 PM)Xxxxdxdxdxdddxxdxxdd Wrote: Hello DarkForums Community,

Today I am releasing the full source of a Chinese public-security criminal investigation Telegram bot (刑侦机器人) after the operator failed to make final payment.

What this tool does:

Target Info:
- Platform: Telegram Bot API (t.me)
- Bot Type: Inline-image criminal investigation query frontend
- Country: China (PRC)
- Purpose: Police internal database lookup interface disguised as a photo-menu Telegram bot
- Vulnerability: Hardcoded bot token + leaked image-based command structure revealing police backend query categories

Hardcoded Credentials:
[+] Telegram Bot Token: 7591728641:AAGDhSEA3jnyqJErS2HKU_19UT8F3ffHMLE

Capabilities:
- Menu 1 (Criminal Scene Investigation Queries):
- Query by investigator (按勘察人员查询)
- Query by material submission status (按材料上交情况查询)
- Query by case jurisdiction (按发案辖区查询)
- Query by case category (按案件类别查询)
- Query by report time (按接报时间查询)
- Statistics by case category (按案件类别统计)
- Statistics by case jurisdiction (案发辖区统计)
- Statistics by investigator (按勘察人员统计)

- Menu 2 (Forensic / examination Queries):
- Query by acceptance category (按受理类别查询)
- Query by examiner (按检验人员查询)
- Query by appraisal organization (按鉴定机构查询)
- Query by submitting unit (按送检单位查询)
- Query by acceptance time (按受理时间查询)
- Statistics by acceptance category (按受理类别统计)
- Statistics by examiner (按检验人员统计)
- Statistics by submitting unit (按送检单位统计)
- Statistics by acceptance time (按受理时间统计)

- Menu 3 (Switch Mode - PNG overlay):
- Household registration info (户籍信息)
- Household head members (户主成员)
- Identity settings (身份设置)
- Health status settings (健康状况设置)

Architecture:
- Image-based navigation system (5 JPG + 2 PNG overlay menus)
- Inline keyboard callbacks map to police DB query categories
- No auth or user validation -- open menu to anyone who starts the bot
- Uses python-telebot with polling loop
- All query logic is frontend-only in this release (backend connector stripped or not included)

Use Case:
- Map police internal query categories for red-team reconnaissance
- Take over the bot via leaked token to hijack the channel or phish officers
- Clone the UI for a fake police bot to harvest credentials
- Understand PRC law enforcement database query structure
- Build compatible backend connectors for each menu category

Deliverables Included:
[+] 123456789.py - Full original source
[+] 1.jpg - 5.jpg - Criminal investigation menu images
[+] 1.png - 2.png - Registration/health overlay images

Note:
- Bot token is live -- take over immediately or burn the webhook
- No backend API endpoints present in this leak (frontend/menu layer only)
- Images contain classified query categories used by Chinese police
- Operator scammed the dev for final payment -- source released in retaliation
- For research and OSINT purposes only

Download:

Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/ (I have permission and am authorized to perform this pentest)

sane manaaaa

bin · 15-09-26, 02:58 AM

(03-05-26, 07:53 PM)Xxxxdxdxdxdddxxdxxdd Wrote: Hello DarkForums Community,

Today I am releasing the full source of a Chinese public-security criminal investigation Telegram bot (刑侦机器人) after the operator failed to make final payment.

What this tool does:

Target Info:
- Platform: Telegram Bot API (t.me)
- Bot Type: Inline-image criminal investigation query frontend
- Country: China (PRC)
- Purpose: Police internal database lookup interface disguised as a photo-menu Telegram bot
- Vulnerability: Hardcoded bot token + leaked image-based command structure revealing police backend query categories

Hardcoded Credentials:
[+] Telegram Bot Token: 7591728641:AAGDhSEA3jnyqJErS2HKU_19UT8F3ffHMLE

Capabilities:
- Menu 1 (Criminal Scene Investigation Queries):
- Query by investigator (按勘察人员查询)
- Query by material submission status (按材料上交情况查询)
- Query by case jurisdiction (按发案辖区查询)
- Query by case category (按案件类别查询)
- Query by report time (按接报时间查询)
- Statistics by case category (按案件类别统计)
- Statistics by case jurisdiction (案发辖区统计)
- Statistics by investigator (按勘察人员统计)

- Menu 2 (Forensic / examination Queries):
- Query by acceptance category (按受理类别查询)
- Query by examiner (按检验人员查询)
- Query by appraisal organization (按鉴定机构查询)
- Query by submitting unit (按送检单位查询)
- Query by acceptance time (按受理时间查询)
- Statistics by acceptance category (按受理类别统计)
- Statistics by examiner (按检验人员统计)
- Statistics by submitting unit (按送检单位统计)
- Statistics by acceptance time (按受理时间统计)

- Menu 3 (Switch Mode - PNG overlay):
- Household registration info (户籍信息)
- Household head members (户主成员)
- Identity settings (身份设置)
- Health status settings (健康状况设置)

Architecture:
- Image-based navigation system (5 JPG + 2 PNG overlay menus)
- Inline keyboard callbacks map to police DB query categories
- No auth or user validation -- open menu to anyone who starts the bot
- Uses python-telebot with polling loop
- All query logic is frontend-only in this release (backend connector stripped or not included)

Use Case:
- Map police internal query categories for red-team reconnaissance
- Take over the bot via leaked token to hijack the channel or phish officers
- Clone the UI for a fake police bot to harvest credentials
- Understand PRC law enforcement database query structure
- Build compatible backend connectors for each menu category

Deliverables Included:
[+] 123456789.py - Full original source
[+] 1.jpg - 5.jpg - Criminal investigation menu images
[+] 1.png - 2.png - Registration/health overlay images

Note:
- Bot token is live -- take over immediately or burn the webhook
- No backend API endpoints present in this leak (frontend/menu layer only)
- Images contain classified query categories used by Chinese police
- Operator scammed the dev for final payment -- source released in retaliation
- For research and OSINT purposes only

Download:

Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/ (I have permission and am authorized to perform this pentest)

darksky123 · 16-09-26, 12:05 PM

Thanks for sharing, interesting release.

jimibimbi · (This post was last modified: 16-09-26, 01:42 PM by jimibimbi.)

(03-05-26, 07:53 PM)Xxxxdxdxdxdddxxdxxdd Wrote: Hello DarkForums Community,

Today I am releasing the full source of a Chinese public-security criminal investigation Telegram bot (刑侦机器人) after the operator failed to make final payment.

What this tool does:

Target Info:
- Platform: Telegram Bot API (t.me)
- Bot Type: Inline-image criminal investigation query frontend
- Country: China (PRC)
- Purpose: Police internal database lookup interface disguised as a photo-menu Telegram bot
- Vulnerability: Hardcoded bot token + leaked image-based command structure revealing police backend query categories

Hardcoded Credentials:
[+] Telegram Bot Token: 7591728641:AAGDhSEA3jnyqJErS2HKU_19UT8F3ffHMLE

Capabilities:
- Menu 1 (Criminal Scene Investigation Queries):
- Query by investigator (按勘察人员查询)
- Query by material submission status (按材料上交情况查询)
- Query by case jurisdiction (按发案辖区查询)
- Query by case category (按案件类别查询)
- Query by report time (按接报时间查询)
- Statistics by case category (按案件类别统计)
- Statistics by case jurisdiction (案发辖区统计)
- Statistics by investigator (按勘察人员统计)

- Menu 2 (Forensic / examination Queries):
- Query by acceptance category (按受理类别查询)
- Query by examiner (按检验人员查询)
- Query by appraisal organization (按鉴定机构查询)
- Query by submitting unit (按送检单位查询)
- Query by acceptance time (按受理时间查询)
- Statistics by acceptance category (按受理类别统计)
- Statistics by examiner (按检验人员统计)
- Statistics by submitting unit (按送检单位统计)
- Statistics by acceptance time (按受理时间统计)

- Menu 3 (Switch Mode - PNG overlay):
- Household registration info (户籍信息)
- Household head members (户主成员)
- Identity settings (身份设置)
- Health status settings (健康状况设置)

Architecture:
- Image-based navigation system (5 JPG + 2 PNG overlay menus)
- Inline keyboard callbacks map to police DB query categories
- No auth or user validation -- open menu to anyone who starts the bot
- Uses python-telebot with polling loop
- All query logic is frontend-only in this release (backend connector stripped or not included)

Use Case:
- Map police internal query categories for red-team reconnaissance
- Take over the bot via leaked token to hijack the channel or phish officers
- Clone the UI for a fake police bot to harvest credentials
- Understand PRC law enforcement database query structure
- Build compatible backend connectors for each menu category

Deliverables Included:
[+] 123456789.py - Full original source
[+] 1.jpg - 5.jpg - Criminal investigation menu images
[+] 1.png - 2.png - Registration/health overlay images

Note:
- Bot token is live -- take over immediately or burn the webhook
- No backend API endpoints present in this leak (frontend/menu layer only)
- Images contain classified query categories used by Chinese police
- Operator scammed the dev for final payment -- source released in retaliation
- For research and OSINT purposes only

Download:

Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/ (I have permission and am authorized to perform this pentest)

gooood

Nexus065 · 20-09-26, 12:35 AM

(03-05-26, 07:53 PM)Xxxxdxdxdxdddxxdxxdd Wrote: Hola comunidad de DarkForums,

hoy publico el código fuente completo de un bot de Telegram chino para la investigación criminal de seguridad pública (刑侦机器人) después de que el operador no realizara el pago final.

Qué hace esta herramienta:

Información del objetivo:
- Plataforma: API de bots de Telegram (t.me)
- Tipo de bot: Interfaz de consulta de investigación criminal con imágenes integradas
- País: China (RPC)
- Propósito: Interfaz de búsqueda en la base de datos interna de la policía disfrazada de bot de Telegram con menú de fotos
- Vulnerabilidad: Token de bot codificado + estructura de comandos basada en imágenes filtrada que revela las categorías de consulta del backend policial

Credenciales codificadas:
[+] Token de bot de Telegram: 7591728641:AAGDhSEA3jnyqJErS2HKU_19UT8F3ffHMLE

Capacidades:
- Menú 1 (Consultas de investigación de la escena del crimen):
- Consulta por investigador (按勘察人员查询)
- Consulta por estado de envío de material (按材料上交情况查询)
- Consulta por jurisdicción del caso (按发案辖区查询)
- Consulta por categoría de caso (按案件类别查询)
- Consulta por tiempo de informe (按接报时间查询)
- Estadísticas por categoría de caso (按案件类别统计)
- Estadísticas por jurisdicción de caso (案发辖区统计)
- Estadísticas por investigador (按勘察人员统计)

- Menú 2 (Consultas forenses/exámenes):
- Consulta por categoría de aceptación (按受理类别查询)
- Consulta por examinador (按检验人员查询)
- Consulta por entidad tasadora (按鉴定机构查询)
- Consulta por unidad de envío (按送检单位查询)
- Consulta por tiempo de aceptación (按受理时间查询)
- Estadísticas por categoría de aceptación (按受理类别统计)
- Estadísticas por examinador (按检验人员统计)
- Estadísticas por unidad de envío (按送检单位统计)
- Estadísticas por hora de aceptación (按受理时间统计)

- Menú 3 (Modo de cambio - superposición PNG):
- Información de registro del hogar (户籍信息)
- Miembros del jefe de hogar (户主成员)
- Configuración de identidad (身份设置)
- Configuración del estado de salud (健康状况设置)

Arquitectura:
- Sistema de navegación basado en imágenes (5 JPG + 2 menús superpuestos PNG)
- Las devoluciones de llamada del teclado en línea se asignan a las categorías de consulta de la base de datos policial
- Sin autenticación ni validación de usuario: el menú se abre a cualquiera que inicie el bot
- Utiliza python-telebot con un bucle de sondeo
- Toda la lógica de consulta es solo de frontend en esta versión (el conector de backend se ha eliminado o no se incluye)

Caso de uso:
- Mapear las categorías de consulta internas de la policía para el reconocimiento del equipo rojo
- Tomar el control del bot mediante un token filtrado para secuestrar el canal o realizar phishing a los oficiales
- Clonar la interfaz de usuario de un bot policial falso para obtener credenciales
- Comprender la estructura de consulta de la base de datos de las fuerzas del orden de la República Popular China
- Crear conectores de backend compatibles para cada categoría del menú

Entregables incluidos:
[+] 123456789.py - Código fuente original completo
[+] 1.jpg - 5.jpg - Imágenes del menú de investigación criminal
[+] 1.png - 2.png - Imágenes de superposición de registro/salud

Nota:
- El token del bot está activo: tome el control inmediatamente o queme el webhook
- No hay puntos finales de API de backend presentes en esta filtración (solo la capa de frontend/menú)
- Las imágenes contienen categorías de consulta clasificadas utilizadas por la policía china
- El operador estafó al desarrollador para obtener el pago final: la fuente se publicó en represalia
- Solo para fines de investigación y OSINT

Descargar:

Archivos: https://t.me/+Lv3LYdpVyJc5ZTM0adajdhjask
Centro de vales: https://t.me/+wuOFH81f2us1YmQ0
Sitio web: https://xorcat.deals/ (Tengo permiso y estoy autorizado para realizar esta prueba de penetración)

iceforsun · 20-09-26, 03:36 AM

(03-05-26, 07:53 PM)Xxxxdxdxdxdddxxdxxdd Wrote: Hello DarkForums Community,

Today I am releasing the full source of a Chinese public-security criminal investigation Telegram bot (刑侦机器人) after the operator failed to make final payment.

What this tool does:

Target Info:
- Platform: Telegram Bot API (t.me)
- Bot Type: Inline-image criminal investigation query frontend
- Country: China (PRC)
- Purpose: Police internal database lookup interface disguised as a photo-menu Telegram bot
- Vulnerability: Hardcoded bot token + leaked image-based command structure revealing police backend query categories

Hardcoded Credentials:
[+] Telegram Bot Token: 7591728641:AAGDhSEA3jnyqJErS2HKU_19UT8F3ffHMLE

Capabilities:
- Menu 1 (Criminal Scene Investigation Queries):
- Query by investigator (按勘察人员查询)
- Query by material submission status (按材料上交情况查询)
- Query by case jurisdiction (按发案辖区查询)
- Query by case category (按案件类别查询)
- Query by report time (按接报时间查询)
- Statistics by case category (按案件类别统计)
- Statistics by case jurisdiction (案发辖区统计)
- Statistics by investigator (按勘察人员统计)

- Menu 2 (Forensic / examination Queries):
- Query by acceptance category (按受理类别查询)
- Query by examiner (按检验人员查询)
- Query by appraisal organization (按鉴定机构查询)
- Query by submitting unit (按送检单位查询)
- Query by acceptance time (按受理时间查询)
- Statistics by acceptance category (按受理类别统计)
- Statistics by examiner (按检验人员统计)
- Statistics by submitting unit (按送检单位统计)
- Statistics by acceptance time (按受理时间统计)

- Menu 3 (Switch Mode - PNG overlay):
- Household registration info (户籍信息)
- Household head members (户主成员)
- Identity settings (身份设置)
- Health status settings (健康状况设置)

Architecture:
- Image-based navigation system (5 JPG + 2 PNG overlay menus)
- Inline keyboard callbacks map to police DB query categories
- No auth or user validation -- open menu to anyone who starts the bot
- Uses python-telebot with polling loop
- All query logic is frontend-only in this release (backend connector stripped or not included)

Use Case:
- Map police internal query categories for red-team reconnaissance
- Take over the bot via leaked token to hijack the channel or phish officers
- Clone the UI for a fake police bot to harvest credentials
- Understand PRC law enforcement database query structure
- Build compatible backend connectors for each menu category

Deliverables Included:
[+] 123456789.py - Full original source
[+] 1.jpg - 5.jpg - Criminal investigation menu images
[+] 1.png - 2.png - Registration/health overlay images

Note:
- Bot token is live -- take over immediately or burn the webhook
- No backend API endpoints present in this leak (frontend/menu layer only)
- Images contain classified query categories used by Chinese police
- Operator scammed the dev for final payment -- source released in retaliation
- For research and OSINT purposes only

Download:

Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/ (I have permission and am authorized to perform this pentest)

sqdfsdqfsqdfsqdfsqfqsdfqsfqsfsdqfsqdfqsfqfqsfsqdfsq

alienonthekeyboard · 20-09-26, 04:07 AM

aint no fkn way LMFAO