Partner for server, twilio and callerid, IVR Voice Clone System, is a sophisticated tool designed for automating bank verification social engineering

[GENERAL DARK]

I developed this, I need a partner to buy Twilio and Caller ID spoofer. It gets us dead cards to working live cards fast. Telegram username is. @cyberwarfareweapons. This project, the IVR Voice Clone System, is a sophisticated tool designed for automating bank verification social engineering. It clones the voices of real bank IVR systems and uses those clones to solicit sensitive information (Card Number, SSN, PIN, CVV) from targets via automated calls, while simultaneously bridging those inputs to the actual bank in the background.
Overall Purpose
The system automates the process of "bank verification" fraud. It uses XTTS v2 for offline voice cloning to sound like a specific bank's IVR. It places outbound calls using Twilio, interacts with the victim using the cloned voice, intercepts their DTMF (keypad) inputs, forwards those inputs to the real bank's IVR, and logs the harvested credentials.
API Server Overview
The project contains two "servers," but the primary functional one is the Python-based FastAPI server located in ivr-system/src/server.py.
Python API Server (FastAPI)
Port: Default is 8000.
Core Functionality: Manages voice cloning, initiates outbound call campaigns, and serves as the webhook target for Twilio DTMF and recording events.
Key Routes:
GET /ivr/speak: Synthesizes and streams WAV audio using the cloned voice (called by Twilio).
POST /ivr/check-call: Triggers an outbound call to a real bank to record its IVR for cloning.
POST /ivr/recording-ready: Webhook for when the "check-call" recording is finished; triggers the voice cloning process.
POST /ivr/bank-run: Starts a campaign of automated calls using a contact CSV/TXT file.
POST /ivr/bank-answer: Twilio webhook triggered when a victim answers; initiates the credential-gathering state machine.
POST /ivr/bank-gather: Twilio webhook that receives DTMF digits, advances the gathering stage (CARD -> SSN -> PIN -> CVV), and forwards digits to the real bank.
GET /ivr/log: Decodes and returns the harvested records from the .csvc log file.
TypeScript API Server (Express)
Located in artifacts/api-server, this appears to be a boilerplate or skeleton server. Currently, it only contains a /healthz route (proxied through /api/healthz).
Database & Storage Schema
The system does not use a traditional SQL database for its primary logs; instead, it uses a proprietary encrypted file format.
1. .csvc Log Format
Harvested data is stored in ~/workspace/bankslog/YYYY-MM-DD-YYYY-MM-DD.csvc.
Security: Files are XOR-encoded with a key derived from the date-range in the filename and prefixed with a magic header (CSVC\x01\x00\x00\n).
Fields:
timestamp, bank, full_name, billing_phone
billing_address, billing_city, billing_state, billing_zip, billing_country
card_number, ssn_or_last4, pin, cvv, exp_month, exp_year
2. Filesystem Storage
ivr-system/voices/: Stores .wav speaker profiles for the cloned voices.
ivr-system/audio_cache/: Stores cached synthesized audio clips.
3. Drizzle Schema (TypeScript)
Found in lib/db/src/schema/index.ts, this is currently an empty boilerplate and is not actively used by the Python IVR system.
Key Components
deep_ivr.py: The engine using XTTS v2 for voice cloning and synthesis.
bank_flow.py: The state machine managing the interaction with the victim and the background call to the real bank.
banksc.py: Contains prompt scripts and configuration for specific banks (BoA, Chase, US Bank, Wells Fargo, Amex).
csvc_writer.py: Handles the custom encrypted logging format.