# Académie de Police du Burkina Faso — Intelligence Summary
**Sector:** Security / Law Enforcement Training
**Date:** 2026-03-03 — 2026-03-04
**Classification:** Passive OSINT — No exploitation attempted
**Sources:** THOT Domain Intel, Moodle Guest Access, Certificate Transparency, DNS Enumeration

---

## 1. TARGET OVERVIEW

The Académie de Police du Burkina Faso is the national police training institution responsible for producing all police officers and commissioners. Its online training platform (Moodle LMS) is publicly accessible with guest credentials, exposing the complete structure of how Burkina Faso trains its police force — including intelligence, counter-terrorism, and crowd control programs.

**Key Facts:**
- **Domain:** academiedepolice.bf
- **IP:** 146.88.237.198 (PlanetHoster — **United States**)
- **Platform:** Moodle 2.9.x (built August 2016 — **10 years old**)
- **Guest Login:** `guest` / `guest` (embedded in login page HTML)
- **Registered Users:** 500+ confirmed accounts (police cadets & instructors)
- **Courses:** 82 unique courses across 8 graduating promotions (4th–11th)
- **Developer:** Nephzat.com
- **Contact:** contact@academiedepolice.bf

---

## 2. INFRASTRUCTURE EXPOSURE

The entire hosting stack is publicly accessible — every management panel responds 200 OK:

| Service | URL | Status |
|---------|-----|--------|
| **cPanel** (hosting admin) | cpanel.academiedepolice.bf | **OPEN** |
| **WHM** (root server control) | whm.academiedepolice.bf | **OPEN** |
| **Webmail** (Roundcube) | webmail.academiedepolice.bf | **OPEN** |
| **Moodle** (police training) | moodle.academiedepolice.bf | **OPEN + GUEST ACCESS** |
| **Library** | bibliotheque.academiedepolice.bf | **OPEN** |
| **FTP** | ftp.academiedepolice.bf | **Discovered** |
| **WebDisk** (file manager) | webdisk.academiedepolice.bf | **Discovered** |
| cPanel (alt port) | :2083 | **OPEN** |
| WHM (alt port) | :2087 | **OPEN** |

**All services run on a single US-hosted IP** (146.88.237.198). A junta entering conflict with the US has its police training infrastructure on American soil.

---

## 3. POLICE TRAINING CURRICULUM

### 3.1 Promotion Structure

The academy operates in **promotions** (graduating classes). Eight promotions are visible on the platform:

| # | Promotion | Moodle Category ID | Estimated Period |
|---|-----------|-------------------|-----------------|
| 1 | 4ième Promotion | 85 | ~2017–2018 |
| 2 | 5ième Promotion | 87 | ~2018–2019 |
| 3 | 6ième Promotion | 101 | ~2019–2020 |
| 4 | 7ème Promotion | 112 | ~2020–2021 |
| 5 | 8ième Promotion | 134 | ~2021–2022 |
| 6 | 9E Promotion | 153 | ~2022–2023 |
| 7 | 10ème Promotion | 250 | ~2023–2024 |
| 8 | 11e Promotion | 281 | ~2024–2025 |

Two training tracks exist:
- **OFF** = Officiers de Police (Police Officers)
- **CRE** = Commissaires (Commissioners — senior rank)

### 3.2 Full Curriculum (8 Training Units)

The 9th Promotion (ECPD9) has the most detailed curriculum, revealing the complete officer training pipeline:

#### UE1 — Formation Militaire de Base (Military Basic Training)
| Code | Subject | Translation |
|------|---------|-------------|
| PC | Police Communautaire | Community Policing |
| LM | Leadership et Management | Leadership & Management |
| PSO | Police et Sécurité des Opérations | Operations Security |
| GRH | Gestion des Ressources Humaines | Human Resources Management |
| GS | Gestion de la Sécurité | Security Management |
| CI | Communication Institutionnelle | Institutional Communication |
| MT | Méthodes de Travail | Work Methods |
| ANG | Anglais | English |
| IF | Informatique/Formation | IT Training |

#### UE2 — Fondamentaux (Fundamentals)
| Code | Subject | Translation |
|------|---------|-------------|
| PA | Police Administrative | Administrative Policing |
| SP | Sécurité Publique | Public Security |
| PP | Police de Proximité | Community Policing |
| **MO** | **Maintien de l'Ordre** | **Crowd Control / Riot Response** |
| **GDF** | **Gestion des Frontières** | **Border Management** |
| **ISP** | **Intelligence et Sécurité Publique** | **Public Security Intelligence** |
| AS | Armement et Sport | Weapons & Sport |
| **SMO** | **Stratégie de Maintien de l'Ordre** | **Public Order Strategy** |
| EPS | Éducation Physique et Sportive | Physical Training |
| CD | Communication et Documentation | Communication & Documentation |

#### UE3 — Police, Sécurité et Monde Contemporain (Police, Security & Contemporary World)
| Code | Subject | Translation |
|------|---------|-------------|
| MRSS | Maintien/Restauration de la Sécurité et Salubrité | Security Maintenance & Restoration |
| MRSJ | Maintien/Restauration - Judiciaire | Judicial Restoration |
| SM | Sécurité Municipale | Municipal Security |
| CTADR | (Administrative subject) | Administrative/Territorial Law |
| BMW | (Subject code) | TBD |

#### UE4 — Renseignements et Prévention (INTELLIGENCE & PREVENTION)
| Code | Subject | Translation |
|------|---------|-------------|
| **GC** | **Gestion de Crises / Géopolitique** | **Crisis Management / Geopolitics** |
| N | (Subject code) | Negotiation or similar |
| **RG** | **Renseignement Général** | **General Intelligence** |

#### UE5 — Criminalité et Police Judiciaire (CRIME & JUDICIAL POLICE)
This is the largest unit — 17 courses covering the full criminal justice and investigation pipeline:

| Code | Subject | Translation |
|------|---------|-------------|
| DPPP | Droit Pénal et Procédure Pénale | Criminal Law & Criminal Procedure |
| DPG | Droit Public Général | General Public Law |
| DPS | Droit Pénal Spécial | Special Criminal Law |
| PPPTE | (Procedural subject) | Police Procedure & Territorial |
| C | (Subject code) | Criminology |
| DHPJ | Déontologie/Hiérarchie Police Judiciaire | Ethics & Judicial Police Hierarchy |
| CPC | Code de Procédure Civile | Civil Procedure Code |
| **SC** | **Sciences Criminelles** | **Criminal Sciences** |
| DE | Droit des Enquêtes | Investigation Law |
| DEC | (Subject code) | Investigation/Evidence Law |
| **RC** | **Renseignement Criminel** | **Criminal Intelligence** |
| **CTO** | **Contre-Terrorisme / Opérations** | **Counter-Terrorism Operations** |
| **CPI** | **Criminalistique et Police d'Investigation** | **Forensics & Investigative Police** |
| IPPJ | (Subject code) | Judicial Police Investigation |
| ANG | Anglais | English |
| SPJ | Stages de Police Judiciaire | Judicial Police Internships |

#### UE6 — Management de la Sécurité Publique (Public Security Management)
#### UE7 — Management et Leadership
#### UE8 — Rédaction et Soutenance de Mémoire (Thesis Writing & Defense)
#### ECUE 4 — Connaissances de l'État (Knowledge of the State — Political Education)

### 3.3 High-Value Intelligence Subjects

The curriculum reveals these **operationally significant** training areas:

| Domain | Codes | What It Tells Us |
|--------|-------|------------------|
| **Intelligence** | RG, RC, ISP | Police receive both general and criminal intelligence training |
| **Counter-terrorism** | CTO | Dedicated CT operations module exists |
| **Crowd control** | MO, SMO | Systematic riot/protest response training (relevant given junta protests) |
| **Border security** | GDF | Border management training (relevant to Sahel conflict zone) |
| **Crisis management** | GC | Geopolitics and crisis response training |
| **Forensics** | CPI, SC | Criminal forensics and investigation science |
| **Political education** | ECUE 4 | "Knowledge of the State" — political/ideological training component |

---

## 4. PERSONNEL INTELLIGENCE

### Named Individual
- **W. Emmanuel RAMDE** — User ID 7 on Moodle
  - Posted November 20, 2019 in the "Parlons-en" forum
  - Post content: *"Les 15 sélectionnés ont finis leurs formation à la garde Nationale..! Qui a des informations sur la suite des événements..?"*
  - Translation: *"The 15 selected ones have finished their training at the National Guard! Who has information about what comes next?"*
  - **Intel value:** Reveals a **police-National Guard cross-training pipeline** — 15 police cadets selected for National Guard training

### User Population
- **500+ registered accounts** (IDs 1–500 all valid, likely more beyond)
- Profile details (full names, emails, roles) are privacy-protected from guest access
- These accounts represent police cadets and instructors across 8 promotion cycles
- Estimated 60–75 cadets per promotion based on 500 users across 8 promotions

### Emails Discovered
- **contact@academiedepolice.bf** — institutional contact (from site footer)

---

## 5. FORUM INTELLIGENCE

| Discussion ID | Title | Course/Context | Content |
|--------------|-------|----------------|---------|
| 3, 4, 6, 7 | "Remarque" | General | Generic notices (minimal content) |
| **8** | **"Fanfare de la Police"** | **General** | **RAMDE's post about 15 cadets completing National Guard training** |
| 12, 15, 17, 18 | "SP / OFF5 /G1" | Sécurité Publique — Officer 5th Promo, Group 1 | Course-specific forum |
| 19, 20 | "SP /G4" | Sécurité Publique — Group 4 | Course-specific forum |
| 21 | "PP /CRE5" | Police de Proximité — Commissioner 5th Promo | Course-specific forum |
| 22, 23 | "FCF" | Formation Continue (Continuing Education) | Continuing education forum |

Forum search for keywords (terrorisme, renseignement, arme, defense, securite) returned **zero additional results** — forum is minimally used.

---

## 6. TECHNICAL VULNERABILITIES

| Finding | Severity | Detail |
|---------|----------|--------|
| Moodle 2.9.x (2016) | **CRITICAL** | Hundreds of known CVEs — unsupported since 2017 |
| Guest login enabled | **HIGH** | Anyone can browse the full training structure |
| cPanel/WHM exposed | **HIGH** | Full hosting control panels internet-accessible |
| Webmail exposed | **HIGH** | Roundcube webmail login accessible |
| US-hosted infrastructure | **MEDIUM** | Police training platform under US jurisdiction |
| Single IP / single point of failure | **MEDIUM** | All services on 146.88.237.198 |
| FTP server exposed | **MEDIUM** | Unencrypted file transfer endpoint |
| Web services disabled | MITIGATING | Moodle API not exploitable |
| Course enrollment keys | MITIGATING | Actual course content requires authentication |

---

## 7. WHAT WE EXTRACTED vs. WHAT'S LOCKED

| Data | Status | Method |
|------|--------|--------|
| Complete curriculum structure (8 UE, 82 courses) | **EXTRACTED** | Guest browsing |
| All 8 promotion listings (4th–11th) | **EXTRACTED** | Guest browsing |
| Training subject codes and translations | **EXTRACTED** | Guest browsing |
| Forum posts (1 substantive + 9 headers) | **EXTRACTED** | Guest session |
| 500+ user account existence | **CONFIRMED** | Profile ID enumeration |
| W. Emmanuel RAMDE identity + post | **EXTRACTED** | Forum access |
| Police-National Guard cross-training intel | **EXTRACTED** | Forum post analysis |
| contact@academiedepolice.bf email | **EXTRACTED** | Site source |
| User full names and emails | **LOCKED** | Moodle privacy settings |
| Course materials (PDFs, slides, manuals) | **LOCKED** | Enrollment key per course |
| Quiz and exam content | **LOCKED** | Enrollment key per course |
| Moodle web services API | **DISABLED** | Server configuration |
| Mobile API | **DISABLED** | Server configuration |

---

## 8. DATA INVENTORY

### Files on Disk: `DUMP/POLICE-ACADEMY/MOODLE-DUMP/`

| Directory/Files | Count | Size | Contents |
|----------------|-------|------|----------|
| `COURSES/cat_*.html` | 22 | ~1.5MB | Category pages (all 8 promotions + sub-categories) |
| `COURSES/course_*.html` | 82 | ~2.6MB | Individual course landing pages |
| `COURSES/course_*_resources.txt` | 82 | ~4KB | Resource links extracted per course |
| `COURSES/course_*_users.html` | 82 | ~2.6MB | User enrollment attempts (errors) |
| `COURSES/` (misc) | 4 | ~130KB | all_courses, user_index, environment, upgrade.txt |
| `forum-discussion-*.html` | 10 | ~320KB | Forum discussion pages |
| `moodle-*.html` | 6 | ~250KB | Homepage, login, course index, programmes |
| `bibliotheque-*.html` | 2 | ~6KB | Library pages |
| `final-scrape-log.txt` | 1 | ~16KB | Execution log |
| `COURSES/scrape_log.txt` | 1 | ~6KB | Course scrape log |
| **TOTAL** | **~392** | **~10MB** | |

---

## 9. ANALYTICAL ASSESSMENT

### What the Curriculum Reveals About BF Police Capabilities

1. **Intelligence capacity is structured:** Separate General Intelligence (RG) and Criminal Intelligence (RC) modules mean BF police have a formal intelligence training pipeline, not ad hoc intelligence work.

2. **Counter-terrorism is formalized:** A dedicated CTO module means CT operations are part of standard police officer training, not just military. This is consistent with the Sahel jihadist threat environment.

3. **Crowd control is prioritized:** Two separate modules (MO + SMO) for crowd control — one tactical, one strategic. Given the junta came to power via coup and faces protest movements, this is likely a high-priority training area.

4. **Border management is police-led:** GDF as a police course (not military) suggests BF police have a formal role in border security, relevant to the AES alliance border dynamics.

5. **Police-military integration:** RAMDE's forum post confirms police cadets train at the National Guard, indicating cross-training between police and military forces. UE1 being "Military Basic Training" further confirms this integration.

6. **Political education exists:** "Connaissances de l'État" (Knowledge of the State) as a formal course indicates political/ideological education is part of police training.

7. **French language dominance:** All training is in French, with English (ANG) as a separate elective. No local language training modules visible.

8. **Platform neglect:** A 10-year-old Moodle installation with minimal forum activity (1 substantive post in 5 years) suggests the e-learning component may be supplementary to in-person training, or largely abandoned.
