Posts: 30
Threads: 0
Joined: May 2025
Thank you bro!
Reply
Reply
Reply
Reply
Reply
Posts: 118
Threads: 0
Joined: Feb 2025
thank you, let me see
Reply
Reply
Reply
Reply
Reply
Posts: 4
Threads: 0
Joined: May 2026
(20-04-26, 05:46 PM)xorcat Wrote: Hello DarkForums Community,
Today I have uploaded the WeChat Identity Verification API Exploit - Mass KYC bypass tool targeting Chinese identity verification service with complete identity matching capabilities.
Tool Info:
- Target: fws.xuanyanmeng.com (Identity Verification Service)
- Endpoint: /api/wechat/updataInfo + /api/wechat/xcx_register
- Method: POST with hardcoded API token
- Auth: NONE REQUIRED (exposed token)
Compromised Capability:
- Query any Name + WeChat ID combination
- Verify if real name matches WeChat account (KYC bypass)
- Mass enumeration without rate limiting
- Build database of real name → WeChat associations
How It Works:
1. Send POST request with person_name + wx_code (WeChat ID)
2. API responds with match/no-match based on account linkage
3. No authentication needed - token hardcoded in source
Exploitation:
- Input: Target's real name + WeChat ID guess
- Output: ✅ Match confirmed / ❌ No match
- Use case: Identity verification bypass, social engineering prep, KYC fraud
Download:
Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/
Reply
Reply
Reply
Reply
Reply
Posts: 53
Threads: 0
Joined: Oct 2025
thank you
Reply
Reply
Reply
Reply
Reply
Posts: 10
Threads: 0
Joined: May 2026
(20-04-26, 05:46 PM)Xxxxdxdxdxdddxxdxxdd Wrote: Hello DarkForums Community,
Today I have uploaded the WeChat Identity Verification API Exploit - Mass KYC bypass tool targeting Chinese identity verification service with complete identity matching capabilities.
Tool Info:
- Target: fws.xuanyanmeng.com (Identity Verification Service)
- Endpoint: /api/wechat/updataInfo + /api/wechat/xcx_register
- Method: POST with hardcoded API token
- Auth: NONE REQUIRED (exposed token)
Compromised Capability:
- Query any Name + WeChat ID combination
- Verify if real name matches WeChat account (KYC bypass)
- Mass enumeration without rate limiting
- Build database of real name → WeChat associations
How It Works:
1. Send POST request with person_name + wx_code (WeChat ID)
2. API responds with match/no-match based on account linkage
3. No authentication needed - token hardcoded in source
Exploitation:
- Input: Target's real name + WeChat ID guess
- Output: ✅ Match confirmed / ❌ No match
- Use case: Identity verification bypass, social engineering prep, KYC fraud
Download:
Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/ LET ME CHECK
Reply
Reply
Reply
Reply
Reply
Posts: 6
Threads: 0
Joined: Jun 2026
thanks
Reply
Reply
Reply
Reply
Reply
Posts: 8
Threads: 0
Joined: Jun 2026
let me see bro
Reply
Reply
Reply
Reply
Reply
Posts: 1
Threads: 0
Joined: Jun 2026
(20-04-26, 05:46 PM)Xxxxdxdxdxdddxxdxxdd Wrote: Hello DarkForums Community,
Today I have uploaded the WeChat Identity Verification API Exploit - Mass KYC bypass tool targeting Chinese identity verification service with complete identity matching capabilities.
Tool Info:
- Target: fws.xuanyanmeng.com (Identity Verification Service)
- Endpoint: /api/wechat/updataInfo + /api/wechat/xcx_register
- Method: POST with hardcoded API token
- Auth: NONE REQUIRED (exposed token)
Compromised Capability:
- Query any Name + WeChat ID combination
- Verify if real name matches WeChat account (KYC bypass)
- Mass enumeration without rate limiting
- Build database of real name → WeChat associations
How It Works:
1. Send POST request with person_name + wx_code (WeChat ID)
2. API responds with match/no-match based on account linkage
3. No authentication needed - token hardcoded in source
Exploitation:
- Input: Target's real name + WeChat ID guess
- Output: ✅ Match confirmed / ❌ No match
- Use case: Identity verification bypass, social engineering prep, KYC fraud
Download:
Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/
Reply
Reply
Reply
Reply
Reply
Posts: 66
Threads: 1
Joined: Apr 2026
(20-04-26, 05:46 PM)Xxxxdxdxdxdddxxdxxdd Wrote: Hello DarkForums Community,
Today I have uploaded the WeChat Identity Verification API Exploit - Mass KYC bypass tool targeting Chinese identity verification service with complete identity matching capabilities.
Tool Info:
- Target: fws.xuanyanmeng.com (Identity Verification Service)
- Endpoint: /api/wechat/updataInfo + /api/wechat/xcx_register
- Method: POST with hardcoded API token
- Auth: NONE REQUIRED (exposed token)
Compromised Capability:
- Query any Name + WeChat ID combination
- Verify if real name matches WeChat account (KYC bypass)
- Mass enumeration without rate limiting
- Build database of real name → WeChat associations
How It Works:
1. Send POST request with person_name + wx_code (WeChat ID)
2. API responds with match/no-match based on account linkage
3. No authentication needed - token hardcoded in source
Exploitation:
- Input: Target's real name + WeChat ID guess
- Output: ✅ Match confirmed / ❌ No match
- Use case: Identity verification bypass, social engineering prep, KYC fraud
Download:
Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/ Thanks
Reply
Reply
Reply
Reply
Reply
Posts: 8
Threads: 3
Joined: Mar 2026
谢谢兄弟啊
Reply
Reply
Reply
Reply
Reply
|