POLICE AI EXPOSED
ia.policia.gov.co
Colombian National Police AI Platform on AWS
● AWS Account ID: 926162397524
● S3 Bucket: pon-prod-ai-platform exposed
● 20+ AI subdomains discovered
● Session cookies & STS credentials captured
@RINGMAST4R
10 AI TOOLS
POLICE INTELLIGENCE
10 AI subdomains on ia.policia.gov.co
● NADIA - AI chatbot (Amazon Bedrock)
● ANTICIPACION - Predictive policing
● HOUNDOC - Document analysis
● AITRANSCRIBE - Audio/video transcription
● EXPERTOPOL - Investigation expert system
● MAPS.ANALYTICS - Crime mapping
● AISEARCHENGINE - AI-powered search
● ADDCAPAS - GIS layer integration
● CATALOG - AI service catalog
● FORMS - Data collection platform
@RINGMAST4R
GUSTAVO PETRO
US SANCTIONED PRESIDENT
Colombian President on OFAC SDN List - October 24, 2025
● Former M-19 guerrilla member (joined age 17)
● Accused of drug trafficking ties
● Visa revoked, assets frozen
● Entire family sanctioned by US Treasury
@RINGMAST4R
ARCGIS WIDE OPEN
NO AUTHENTICATION
Colombian government GIS server publicly accessible
● ergit.presidencia.gov.co - OPEN
● 300+ map services enumerated
● ArcGIS Enterprise 11.3.0
● REST API queries - no login needed
@RINGMAST4R
MILITARY MAPS
4 OPERATIONAL MAPS
Colombian military intelligence maps publicly accessible
● CNR_SEP_2025_MIL1 - September 2025
● CNR_julio_2025_MIL1 - July 2025
● Mapa_AT_MIL1 - AT zones
● Mapa_Caso_03_MIL1 - Case 03 investigation
@RINGMAST4R
87 TERRITORY ZONES
ARMED GROUPS MAPPED
Complete territorial control data for all armed groups
● ELN: 11 zones mapped
● Clan del Golfo (AGC): 22 zones
● Disidencias EMC: 22 zones
● Segunda Marquetalia: 21 zones
@RINGMAST4R
VIOLENCE STATISTICS
2016-2025 DATA
Comprehensive violence records exposed
● 1,822 homicide records mapped
● 490 massacre incidents
● Peace signatories: 29 killed, 68 threatened
● Full coordinates for each incident
@RINGMAST4R
24 AETCR CAMPS
GPS COORDINATES
Former FARC reintegration camp locations exposed
● CONDORES, TIERRA GRATA (North)
● CAÑO INDIO, FILIPINAS (Northeast)
● LA VARIANTE, EL ESTRECHO (Southwest)
● Exact GPS coordinates downloadable
@RINGMAST4R
CREDENTIALS EXPOSED
EMAILS & HASHES
Government employee data found in public services
● 460+ email addresses extracted
● 113 government (.gov.co) emails
● 103 hashes/GUIDs collected
● 3 usernames identified
@RINGMAST4R
996 TERRITORIES
INDIGENOUS & AFRO
Protected community boundaries publicly mapped
● 785 indigenous reserves (Resguardos)
● 211 Afro-Colombian communities
● Complete territorial boundaries
● Could enable illegal mining/logging
@RINGMAST4R
COCA CULTIVATION
93 MB POLYGON
Illicit coca zones mapped from government data
● Complete 2023 cultivation polygon
● 56 PNIS substitution zones
● 90% of US cocaine from Colombia
● Production "exploded" under Petro
@RINGMAST4R
POLICE AI PLATFORM
AWS POWERED
Official predictive policing for 40M+ citizens
● ia.policia.gov.co - 20+ subdomains
● 85% crime prediction accuracy
● AWS Account ID: 926162397524
● Built by Nuvu + TD Synnex
@RINGMAST4R
NADIA AI
POLICE CHATBOT
Internal AI assistant for Colombian police officers
● nadia.ia.policia.gov.co
● Amazon Bedrock (enterprise LLM)
● Query crime databases via chat
● Document analysis & summarization
@RINGMAST4R
DNI INTELLIGENCE
AGENCIES MAPPED
Colombian intelligence infrastructure enumerated
● DNI: 15 subdomains (birmania, denver, kuwait)
● Fiscalia: 30+ subdomains
● DIJIN Pandora case management
● GIS apps, payroll, recording systems
@RINGMAST4R
513+ SUBDOMAINS
MILITARY ENUMERATED
Complete Colombian military infrastructure mapped
● ejercito.mil.co: 147 subdomains
● armada.mil.co: 94 subdomains
● fac.mil.co: 79 subdomains
● policia.gov.co: 60+ subdomains
@RINGMAST4R
PALACE OF JUSTICE
98+ DEAD
M-19 guerrillas stormed Colombia's Supreme Court (1985)
● 35 M-19 commandos took 300+ hostages
● 12 Supreme Court Justices KILLED
● Petro arrested same year for M-19
● Now he's PRESIDENT of Colombia
@RINGMAST4R
ESCOBAR-M19 LINK
$2M PAYMENT
Did Pablo Escobar fund the Palace of Justice attack?
● Escobar's extradition files were inside
● Building burned - files DESTROYED
● Son & mistress claim $1-2M payment
● Petro denies M-19 took drug money
@RINGMAST4R
CARTEL DE LOS SOLES
PETRO-MADURO LINK
US accuses Petro of ties to Venezuelan military cartel
● "Cartel of the Suns" = generals' insignia
● Venezuelan military in drug trade
● Treasury: Petro "allied" with them
● Key ally Maduro now captured
@RINGMAST4R
COLUMBUS SHIPS
THE IRONY
Anti-imperialist president's servers named after colonizer's fleet
● lanina.presidencia.gov.co - La Niña
● lapinta.presidencia.gov.co - La Pinta
● santamaria.presidencia.gov.co - Santa María
● COLOMBIA = named after COLUMBUS
@RINGMAST4R
12 MAPS CREATED
LEAFLET.JS RENDERED
Downloaded data converted to interactive visualizations
● Military maps (Sept/July 2025, AT, Case03)
● Armed groups, AETCR camps, attacks
● Coca, violence, indigenous territories
● ringmast4r.github.io/Colombia/HTML/
@RINGMAST4R
CRITICAL OPSEC FAILURE
GOVERNMENT EXPOSED
Colombian government left military intel on open internet
● No authentication on REST API
● Anyone can query any layer
● Cartels could map rivals
● Peace signatories at risk
@RINGMAST4R
FINAL TALLY
COLOMBIA PWNED
Total Colombian government exposure documented
● 2.79 GB data | 544+ files | 300+ services
● 513+ subdomains | 12 interactive maps
● 494 emails (113 .gov.co) | 103 hashes
● github.com/Ringmast4r/Colombia
@RINGMAST4R