This website - A gift for Zhou Yuting (周雨婷)

Because Zhou Yuting is a very special girl, I've decided to create a website for/about her.

Feel free to do send me an email at hello@zhou-yuting.comif you have any questions / suggestions / feedback / etc.

If you are Zhou Yuting, remember who I am. I'm Merlin. Do you remember me? You stole 5 bitcoins from me.

Who is she?

Name	Zhou Yuting
Birthdate	January 10th, 1996 (aged 25)
Birthplace	Wuhan, Hubei
Graduated from (school, diploma)	Hubei Ecology Polytechnic College (湖北生态工程职业技术学院), information engineering (信息工程系), about 2013
QQ	313564624
Email	ytzhou@v-town.cc 313564624@qq.com zhouyuting@lingjiuyi.cn
Phone number	(+86) 175 6150 2091
Occupation, job	Web developer (PHP Senior) at v-town.cc
Hobbies	Bitcoin, Money, Money, Money and Bitcoin. And korean drama.

Zhou Yuting's skills

According to her description on https://www.yuanjisong.com/consultant/133343 Zhou Yuting's skills are:

ThinkPHP(1), Laravel
jQuery, Ajax, ...
Memcached, redis

(1) It's important to note that Zhou Yuting loves ThinkPHP 5.0.20 dispite its Remote Code Execution vulnerability.

Zhou Yuting's pieces of Art

To see Zhou Yuting projects, you can go to:

Zhou Yuting's projects (incomplete list)

By-bit (bybit)
Fbex (f-bex)
bit-unlimited (bitunlimite)
bit-max (bitmax)
cloud-bit (cloudbit)
Global Village Coin
GVDCC
okeylife
quantum

v-town

Zhou Yuting's projects are stored on a self-hosted version of Gitlab, on a server owned by v-town

The company	v-town
Description	https://www.kanzhun.com/firm/interview/0nJ60tW5Ew~~.html
Address	304, 3e étage, bâtiment 9, n ° 7, voie sud de Banqiao, district de Dongcheng, Pékin 北京市朝阳区建国路35号2号楼7层719号

Partners

Zhou Yuting works with people on her projects

Name	Li Hong Wei (李洪伟)
Company	Hezhi Technology (Pékin) Co., Ltd. 禾责科技（北京）有限公司
Github	https://github.com/wadelhw https://github.com/hezetech
Twitter	https://twitter.com/hwli
Linkedin	https://www.linkedin.com/in/in/洪伟-李-ba145ba9/
Emails	wadelhw@gmail.com hwli@hezetech.cn jdli@hezetech.cn lihw@huowing360.com
Phone	1 83
Companies	https://aiqicha.baidu.com/person?personId=2525338b1b6d44c5b8db1a65cf7445c8&subtab=personal-allenterprises
School	Dalian University of Technology (大连理工大学)

itmaomao123456 is another partner (gengjin@aragoncs.com)

The truth (what happen)

Zhou Yuting is the main developer/maintener of some fake trading plateforms (bit-unlimited, cloud-bit, by-bit, global-village-coin, etc.).

I've lost 5 bitcoins because of her and her team.

I've decided to track/find her by taking advantage of ThinkPHP RCE to dump her git origin and then pulling her whole projects locally, as well as her git history.

Thanks to this RCE vulnerability, I've dumped all her production database.

Media

Below you can find some screenshots and pictures which helped me to find Zhou Yuting

PHPThink RCE leads to "git remote -v" displayed in the browser
After pulling Zhou Yuting's projects locally, I can access her dev database and see some interesting information
Tracking Zhou Yuting all over the internet
By replying to a github email notification, she exposes her email (313564624@qq.com)
By searching a wechat account based on the phone number found in her database. Lucky match. Got a picture and a company name.
Looking for the Zhou Yuting's company (found on her wechat)
Does Zhou Yuting use a VPN in a local environnement? Not sure. IP addresses are precious!
Trying to grasp some information about her IP address ... Coordinates?
IP address coordinates lead to ... not so far from vtown headquarters (top-right blue marker)!
vtown address (Zhou Yuting's company)
Zhou Yuting's face
Zhou Yuting's face (again)
All Zhou Yuting's git projects. Full of API keys, passwords ... Commits with personal information (blog/contact), etc.
As a perfect young girl, she has her own weibo account. Kikou lol mdr
Do you need a very special developer? Zhou Yuting can do anything for you...
Lisa (she says its her name) helps Zhou Yuting to stole money from others. A picture taken at the FUMI COFFEE of Shanghai. Feel free to send her a message at +8613370587061