DoublePulsar Backdoor

This post explains DoublePulsar Backdoor and how WannaCry Ransomware uses it to spread Itself.

EternalBlue Installing DoublePulasr Backdoor


EternalBlue exploits vulnerability in SMB protocol and execute shell code.Offset of shell code in EternalBlue binary that is present in shadow broker dump.


Shellcode finds address of srv.sys (SMB Driver) and replace address of srv!SrvTransactionNotImplemented function in srv!SrvTransaction2DispatchTable with its own function address as shown below.












Offset of function code in EternalBlue binary which replaces srv!SrvTransactionNotImplemented function address in srv!SrvTransaction2DispatchTable.









Before overwriting srv!SrvTransactionNotImplemented function in srv!SrvTransaction2DispatchTable with  its own function address shell code allocates memory using ExAllocatePool API and write function bytes.





Function code is stored at 0x48 offset from memory address return by ExAllocatePool API.



















Signature Value is calculated as shown below -

(Dword Value ^ (Memory Address Return by ExAllocatePool+0x1000) ^ Address of ExAllocatePool API ^ Address of ExFreePool ^ Address of srv!SrvTransaction2DispatchTable)

0x872d9158 ^ (0x85355000+0x1000) ^ 0x82a1e976 ^ 0x82b35a67 ^ 0x92d5a530 = 0x90DFE779

How WannaCry uses DoublePulsar backdoor to spread itself
The configuration xml file of DoublePulsar from shadow broker dump shows it supports below function
1. Ping
2. RunDLL
3. RunShellcode.



When WannaCry Starts spreading it checks whether Double Pulsar Backdoor is already present for which WannaCry sends Ping command to backdoor.
Request for Ping command is as shown below-
































As soon as DoublePulsar backdoor receives request. It reads Trans2.Timeout value to get command byte.








Converting Trans2.Timeout value to command byte.











In above request Trans2.Timeout = 01 34 ee 00.
Command value = (0x01 + 0x34 + 0xee + 0x00) & 0xFF = 0x123 & FF = 0x23
Command Bytes is 0x23 which is Ping Request. In response to Ping request Backdoor sends the Signature Value mentioned above in SMBHeader.Signature.








Backdoor uses SMBHeader.Multiplex ID as status field. If request is successful backdoor increments the Multiplex ID in request packet by 0x10(16).As shown above Multiplex ID in Ping request is 0x41(65) therefore MultiplexID in response will be 0x51(81).

















Response Packet as shown below. SMBHeader.Signature set to 0x79E7DF90 and MultiplexID set to 0x51(81).























As soon as WannaCry receives response from Backdoor it checks the MutiplexID value of SMB Header. If value is 0x51(81) that means Ping Request is successful and DoublePulsar Backdoor is present on remote machine. WannaCry reads SMBHeader.Signature value and derives XOR key which will be used to encrypt the payload.












Deriving XOR key from SMBHeader.Signature value 0x90dfe779



















XOR key = ((((0x90dfe779 & 0xFF00) or (0x90dfe779 << 0x10)) << 8) | (((0x90dfe779 & 0x0FF0000) or (0x90dfe779 >> 0x10)) >> 8)) ^ ((0x90dfe779 + 0x90dfe779))

XOR key = (0x79e70000 or 0xdf90) ^ (0x21bfcef2)
XOR key = 0x79e7df90 ^ 0x21bfcef2 = 0x58581162.

Xoring payload(shellcode and wannacry dll) with derived XOR key.





send the payload(shellcode + wanacry dll) in chunk of 0x1000(4096) bytes  to backdoor.




































When backdoor receives the request it reads the command value from Trans2.Timeout.
Trans2.Timeout = 25 89 1a 00
Command = (0x25 + 0x89 + 0x1a + 0x00) & 0xFF = 0xC8 & 0xFF = 0xC8.
As mentioned above 0xC8 means RunShellCode.
Encrypted payload is in Trans2.SESSION_SETUP.Data field.
Trans2.SESSION_SETUP.Parameters is of 0xC (12) bytes and contains below information encrypted by XOR key.
1. Total Size of Payload
2. Chunk Size
3. Offset of Chunk in Payload








Trans2.SESSION_SETUP.Parameters value = 6a620858 62015858 62115858
  1. Total Size of Payload = (0x5808626a) ^ (0x58581162) = 0x507308
  2.  Chunk Size = (0x58580162) ^ (0x58581162) = 0x1000(4096)
  3. Offset of Chunk in Payload = (0x58581162) ^ (0x58581162) = 0

Another example of Trans2.SESSION_SETUP.Parameters value = 6a620858 62015858 62015858
  1. Total Size of Payload = (0x5808626a) ^ (0x58581162) = 0x507308
  2. Chunk Size = (0x58580162) ^ (0x58580162) = 0x1000(4096)
  3. Offset of Chunk in Payload = (0x58580162) ^ (0x58581162) = 0x1000(4096)

Backdoor Allocates Memory of total size of payload (0x507308) using ExAllocatePool API. Copies the chunk to allocated memory.




Decrypt chunk using XOR key. When all the chunks of shell code is received and decrypted. Backdoor begin with execution of payload.


Comments

  1. Testimony on how i received my programmed blank atm card to withdraw a maximum of $5,000 daily.

    I would without reservation recommend working with ATM GENIUS LINKS, My Name is Raul Marcos. Programmed Blank Atm Card is no longer a news or a new trend I've been reluctant in purchasing this blank Atm Card all because of what i heard about it online everything seems too good to be true, But i was convinced & shocked when my friend at my place of work got a Programmed Blank Atm Card from ATM GENIUS LINKS & today we both confirmed it really works, without delay i gave it a go. Ever since then I've been able to make a with-drawer of $5,000 daily from the Programmed Atm Card. I'm so excited that ever since i ordered & paid for delivery of the Programmed Atm Card, I didn't get scammed & now i have been able to arrange my life with this Programmed Atm Card, I own a House & a business now kindly contact them today for more inquiries and enlightenment via E-mail: atmgeniuslinks@gmail.com or WhatsApp +1-781-656-7138.

    Your Satisfaction is there Aim and your working with them will be of a good experience, kindly contact them today for more inquiries and enlightenment via E-mail: atmgeniuslinks@gmail.com or WhatsApp +1-781-656-7138.

    ReplyDelete
    Replies
    1. Here We Go..

      If you are in search of legit Tools, Fullz & Tutorials for
      Hac-king, Car-ding, Sp-amming, Spying, Cyber Attacking
      We will provide you.

      @killhacks / TG/Icq
      peeterhacks / Wickr/Skype

      All tools will be genuine, verified, guaranteed
      Fullz available in bulk order
      Dumps with pins Track 101-202

      You just asked what you need
      We'll provide you stuff
      We don't do any job, just selling the stuff
      Replacement available only/N0 Refund

      C.C FULLZ
      S.S.N DOB D.L FULLZ
      HIGH.CREDIT.SCORES FULLZ
      Business EIN Fullz
      Office365 Logins/Emails Leads
      C-panels/Shells/SMTP's/Rdp's/Brute's
      Mailers/Senders/SMS Sender/Bulk Email Senders
      Key-Logger's/VPN's/RAT's/Viruses
      BTC Cracker/Flasher
      Kali.Linux Master Class With Complete Guide
      FB/WA H-ack-ing Tutorials/Tips/Tricks
      Sever Pene-tra-tion/SQLi Injector
      I.p's/Combos/Proxies
      PayPal/Coinbase/Amazon/Netflix/E-bay/Spotify Logins
      C-rackers/Extractors
      Fr**d B***e 2021/2022
      E.T.C

      @killhacks / TG/Icq
      peeterhacks / Wickr/Skype

      You can asked whatever you want
      We will fulfil your demands
      Just Try Our services

      Delete
  2. PLEASE READ!!Hello Guys!!!I am Caro I live in Ohio USA I’m 32 Years old, am so happy I got my blank ATM card from Adriano. My blank ATM card can withdraw $4,000 daily. I got it from Him last week and now I have withdrawn about $10,000 for free. The blank ATM withdraws money from any ATM machines and there is no name on it because it is blank just your PIN will be on it, it is not traceable and now I have money for business, shopping and enough money for me and my family to live on.I am really glad and happy i met Adriano because I met Five persons before him and they could not help me. But am happy now Adriano sent the card through DHL and I got it in two days. Get your own card from him right now, he is giving it out for small fee to help people even if it is illegal but it helps a lot and no one ever gets caught or traced. I’m happy and grateful to Adriano because he changed my story all of a sudden. The card works in all countries that is the good news Adriano’s email address is adrianohackers01@gmail.com.

    ReplyDelete
  3. PLEASE READ!!Hello Guys!!!I am Caro I live in Ohio USA I’m 32 Years old, am so happy I got my blank ATM card from Adriano. My blank ATM card can withdraw $4,000 daily. I got it from Him last week and now I have withdrawn about $10,000 for free. The blank ATM withdraws money from any ATM machines and there is no name on it because it is blank just your PIN will be on it, it is not traceable and now I have money for business, shopping and enough money for me and my family to live on.I am really glad and happy i met Adriano because I met Five persons before him and they could not help me. But am happy now Adriano sent the card through DHL and I got it in two days. Get your own card from him right now, he is giving it out for small fee to help people even if it is illegal but it helps a lot and no one ever gets caught or traced. I’m happy and grateful to Adriano because he changed my story all of a sudden. The card works in all countries that is the good news Adriano’s email address is adrianohackers01@gmail.com.

    ReplyDelete
  4. i was lost with no hope for my wife was cheating and had always got away with it because i did not know how or

    always too scared to pin anything on her. with the help a friend who recommended me to who help hack her phone,

    email, chat, sms and expose her for a cheater she is. I just want to say a big thank you to

    SUPERIOR.HACK@GMAIL.COM . am sure someone out there is looking for how to solve his relationship problems, you can also contact him for all sorts of hacking job..he is fast and reliable. you could also text +1 213-295-1376(whatsapp) contact and thank me later

    ReplyDelete
  5. Testimony on how I received my programmed blank atm card to withdraw a maximum of $6,000 daily.

    I would without reservation recommend working with ATM GENIUS LINKS, My Name is Rodriguez Puyol. Programmed Blank Atm Card is no longer a news or a new trend I've been reluctant in purchasing this blank Atm Card all because of what I heard about it online everything seems too good to be true, But I was convinced & shocked when my friend at my place of work got a Programmed Blank Atm Card from ATM GENIUS LINKS & today we both confirmed it really works, without delay I gave it a go. Ever since then I've been able to make a with-drawer of $6,000 daily from the Programmed Atm Card. I'm so excited that ever since I ordered & paid for the delivery of the Programmed Atm Card, I didn't get scammed & now I have been able to arrange my life with this Programmed Atm Card, I own a House & a business now kindly contact them today for more inquiries and enlightenment via E-mail: atmgeniuslinks@gmail.com / ICQ: https://icq.im/Anouymous_CC

    Your Satisfaction is their Aim and your working with them will be of a good experience, kindly contact them today for more inquiries and enlightenment via E-mail: atmgeniuslinks@gmail.com / Telegram: @Anonymous_Ccs / WhatsApp: +1-713-389-6778.

    ReplyDelete
  6. HAVE YOU LOST YOUR MONEY TO BINARY OPTION SCAM OR ANY ONLINE SCAM WHATSOEVER?.DO YOUR DESIRE CREDIT REPAIR[EQUIFAX, EXPERIAN, TRANSUNION? WELL, YOU HAVE FOUND REDEMPTION IN ASORE CORP.
    asorehackcorp@gmail.com

    Asore Corp is a group of multinational Hacker's, an affiliate of Evil Corp. We make sure by all means necessary that our clients get the best of services on a🔐PAYMENT AFTER JOB IS DONE BASIS✅. Rather than send money and trust a criminal to fulfill your deal, you can make sure the job is done before WORKMANSHIP is paid for. You'll get excellent customer service.
    That's a 100% guarantee. Our Cyber security Technicians are on standby 24/7 to receive your job requests.

    ⚠️ BEWARE OF FRAUDSTARS looking to hoax.
    if you have been a VICTIM, contact : ✉️cyberprecinct@gmail.com for directives.
    Here, it's always a win for you.

    🔸OUR SERVICES🔸
    ➡️Binary Option funds recovery
    ➡️Social media hack
    ➡️Recovery of loan scam
    ➡️Credit repair (Equifax,Experian,Transunion)
    ➡️E mail hack
    ➡️College score upgrade
    ➡️Android & iPhone Hack
    ➡️Website design
    ➡️Website hack
    And lots more.

    DISCLAIMER: Asore Cyber Corp accepts no responsibility for any information,previously given to anybody by clients on as regarding the job. Asore Cyber Corp will not distribute contact information collected on any hacking job other than in the Asore corps Hacker's listings themselves, and will not sell contact information to third parties.

    CONTACT INFO:
    📧 asorehackcorp@gmail.com
    cyberprecinct@gmail.com

    Copyright ©️
    Asore Cyber Corp 2021.
    All rights reserved.

    ReplyDelete

  7. Are you in financial crisis, looking for money to start your own business or to pay your bills?
    I got mine from Mia Garret . My blank ATM card can withdraw $2,000 daily. I got it from Her last week and now I have $14,000 for free. The blank ATM withdraws money from any ATM machines and there is no name on it, it is not traceable and now i have money for business and enough money for me and my family to live on .

    GET YOUR BLANK ATM CREDIT CARD AT AFFORDABLE PRICE
    *They sell this cards to all customers and interested buyers worldwide,the card has a daily withdrawal limit of €2000 to €5000 and up to €50,000 spending limit in stores and unlimited on POS.*

    *email: int.hackers002@gmail.com
    *you can also call or whatsapp +1(765) 705-0044 us Contact us today for more enlightenment

    ReplyDelete
  8. ****Contact****
    *ICQ :748957107
    *Gmail :fullzvendor111@gmail.com
    *Telegram :@James307
    *Skype : Jamesvince$
    <><><><><><><>
    USA SSN FULLZ WITH ALL PERSONAL DATA+DL NUMBER
    -FULLZ FOR PUA & SBA
    -FULLZ FOR TAX REFUND
    $2 for each fullz/lead with DL num
    $1 for each SSN+DOB
    $5 for each with Premium info
    ID's Photos For any state (back & front)
    (Price can be negotiable if order in bulk)
    <><><><><><><><><><><>
    +High quality and connectivity
    +If you have any trust issue before any deal you may get few to test
    +Every leads are well checked and available 24 hours
    +Fully cooperate with clients
    +Any invalid info found will be replaced
    +Payment Method(BTC,USDT,ETH,LTC & PAYPAL)
    +Fullz available according to demand too i.e (format,specific state,specific zip code & specifc name etc..)
    <><><><><><><><><><>
    +US cc Fullz
    +(Dead Fullz)
    +(Email leads with Password)
    +(Dumps track 1 & 2 with pin and without pin)
    +Hacking & Carding Tutorials
    +Smtp Linux
    +Safe Sock
    +Server I.P's
    +HQ Emails with passwords
    <><><><><><><><>
    *Let's do a long term business with good profit
    *Contact for more details & deal

    ReplyDelete
  9. DO YOU NEED A PERSONAL/BUSINESS/INVESTMENT LOAN? CONTACT US TODAY VIA WhatsApp +19292227023 Email drbenjaminfinance@gmail.com

    HELLO
    Loan Offer Alert For Everyone! Are you financially down and you need an urgent credit/financial assistance? Or are you in need of a loan to start-up/increase your business or buy your dream house. Are you in search of a legit loan? Tired of Seeking Loans and Mortgages? Have you been turned down by your banks? Have you also been scammed once? Have you lost money to scammers or to Binary Options and Cryptocurrency Trading, We will help you recover your lost money and stolen bitcoin by our security FinanceRecovery Team 100% secured, If you are in financial pains consider your financial trauma over. We Offer LOANS from $3,000.00 Min. to $30,000,000.00 Max. at 2% interest rate NO MATTER YOUR CREDIT SCORE. GET YOUR INSTANT LOAN APPROVAL 100% GUARANTEED TODAY VIA WhatsApp:+19292227023 Email: drbenjaminfinance@gmail.com


    ReplyDelete
  10. Hello everyone, Are you looking for a professional trader, forex and binary manager who will help you trade and manager your account with good and massive amount of profit in return. you can contact Mr. Anderson for your investment plan, for he helped me earned 8,000usd with little investment funds. Mr Anderson you're the best trader I can recommend for anyone who wants to invest and trade with a genuine trader, he also helps in recovery of loss funds..you can contact him on his whatsapp: (+447883246472) Email (tdameritrade077@gmail.com)I advice you shouldn't hesitate He's great.

    ReplyDelete
  11. TOOLS&FULLZ SHOP
    _______________

    hi EveryonE!

    Are you been stuck for looking valid products or been scammed by scammers :(

    Here the Valid store available for all kind of tools,tutorials & Fullz with quality

    Learn hacking and spamming and do it on your own way & enjoy..........

    _______________

    1)FRESHLY SPAMMED USA FULLZ
    2)HACKING & SPAMMING TOOLS
    3)TUTORIALS
    _______________

    *Contact*
    *ICQ :748957107
    *Gmail : groothighx@gmail.com
    *Telegram : @James307
    *Skype : Jamesvince$
    _______________
    USA SSN FULLZ WITH ALL PERSONAL DATA+DL NUMBER
    -FULLZ FOR PUA & SBA
    -FULLZ FOR TAX REFUND
    *fullz/lead with DL num
    *SSN+DOB
    *Premium info
    ID's Photos For any state (back & front)
    ________________
    +US cc Fullz
    +(Dead Fullz)
    +(Email leads with Password)
    +(Dumps track 1 & 2 with pin and without pin)
    +HACKING & CARDING TUTORIALS
    +SMTP LINUX
    +SAFE SOCK
    +CPANEL
    +RDPs
    +Spamming Tutorial
    +SERVER I.Ps
    +EMAIL COMBO
    +DUMPS TUTORIAL
    +BTC FLASHER
    +KEYLOGGER COMP&MOB
    +EMAIL BOMBER
    +SQLI INJECTOR
    +ETHICAL HACKING TUTORIAL
    +GMAIL HACKING TUTORIAL
    +PENETRATION TESTING TUTORIAL
    +PayPal Cracker
    +BTC Cracker
    +BLUE PRINTS BLOCKCHAIN
    +EMAIL BLASTER
    +SMS SENDER
    +NORD VPN
    +ONION LINKS AND TOR BROWSER (LATEST VERSION)
    +DARK HORSE TROJAN
    +NETFLIX CHECKER
    +IP ROUTING
    +KEYSTROKE LOGGER
    +WESTERN UNION LOGINs
    +ALI BABA IPs
    +KEYLOGGER
    +SHELL SCRIPTING
    _______________
    *Let's do a long term business with good profit
    *Contact for more details & deal

    *Contact*
    *ICQ :748957107
    *Gmail: groothighx@gmail.com
    *Telegram :@James307
    *Skype : Jamesvince$
    *https://fullzshop.blogspot.com

    ReplyDelete
  12. **Contact 24/7**
    Telegram > @killhacks
    ICQ > 752822040
    Skype > Peeterhacks
    Wicker me > peeterhacks

    **HIGH CREDIT SCORES SSN FULLZ AVAILABLE**

    >For tax filling/return
    >SSN DOB DL all info included
    >For SBA & PUA
    >Fresh spammed & Fresh database

    **TOOLS & TUTORIALS AVAILABLE FOR HACKING SPAMMING
    CARDING CASHOUT CLONING SCRIPTING**

    Fullz info included
    NAME+SSN+DOB+DL+DL-STATE+ADDRESS
    Employee & Bank details included
    High credit fullz with DL 700+
    (bulk order preferable)
    **Payment in all crypto currencies will be accepted**

    ->You can buy few for testing
    ->Invalid or wrong info will be replaced
    ->Serious buyers contact me for long term business & excellent profit
    ->Genuine & Verified stuff

    TOOLS & TUTORIALS AVAILABLE:

    "SPAMMING" "HACKING" "CARDING" "CASH OUT"
    "KALI LINUX" "BLOCKCHAIN BLUE PRINTS" "SCRIPTING"

    **TOOLS & TUTORIALS LIST**

    =>US CC Fullz
    =>Ethical Hacking Tools & Tutorials
    =>Bitcoin Hacking
    =>Kali Linux
    =>Keylogger & Keystroke Logger
    =>Bulk SMS Sender
    =>Facebook & Google Hacking
    =>Bitcoin Flasher
    =>SQL Injector
    =>Logins Premium (PayPal/Amazon/Coinbase/Netflix/FedEx/Banks)
    =>Bitcoin Cracker
    =>SMTP Linux Root
    =>Shell Scripting
    =>DUMPS with pins track 1 and 2 with & without pin
    =>SMTP's, Safe Socks, Rdp's brute
    =>PHP mailer
    =>SMS Sender & Email Blaster
    =>Cpanel
    =>Server I.P's & Proxies
    =>Viruses & VPN's
    =>HQ Email Combo (Gmail, Yahoo, Hotmail, MSN, AOL, etc)

    ==>Contact 24/7<==
    Telegram> @killhacks
    ICQ> 752822040
    Skype> Peeterhacks
    Wicker me > peeterhacks

    *Serious buyers are always welcome
    *Big Discount in bulk order
    *Offer gives monthly, quarterly, half yearly & yearly
    *Hope we do a great business together

    **You should try at least once**

    ReplyDelete
  13. Loading the following Accounts lets make this money together..

    *Bank Transfer/Logs

    •Cash App Money Loading/Accounts
    $50 ——— $500
    $120 ——— $1000
    $180 ——— $1500
    $240 ——— $2000

    •PayPal Money Loading/Accounts
    $50 ——— $500
    $120 ——— $1000
    $180 ——— $1500
    $240 ——— $2000

    •Venmo Money Loading/Accounts
    $75 ——— $500
    $150 ——— $1000
    $225 ——— $1500
    $300 ——— $2000

    •WesternUnion Transfer
    $75 ——— $500
    $200 ——— $1000
    $300 ——— $1500
    $400 ——— $2000

    •Zelle Loading
    $50 ——— $500
    $100 ——— $1000
    $150 ——— $1500
    $200 ——— $2000

    •Skrill Loading
    $60 ——— $500
    $120 ——— $1000
    $180 ——— $1500
    $240 _____$2000
    ##Creditcards for 15btc ..Dumps+pin,Fullz,

    contact#
    xploitt.com@gmail.com

    ReplyDelete
  14. hi Every-onE!----------

    Here the Valid store available for all kind of t-ools,t-utorials & F-ullz with quality
    Learn h-acking and s-pamming and do it on your own way & enjoy...

    _______________

    1)FRESHLY USA F-ULLZ/PROS
    2)H-ACKING & S-PAMMING TOOLS
    3)T-UTORIALS
    _______________

    *Contact*
    *I-C-Q :-748-957-107
    *TG :-- @James307
    _______________
    USA S-SN F-ULLZ WITH ALL PERSONAL DATA+DL NUMBER
    -F-ULLZ FOR P-U-A & S-B-A
    -F-ULLZ FOR TAX RE-FUND
    *F-ullz/lead with DL num
    *F-ullz with Good credit score(Any state)
    *S-SN+DOB
    *Premium info
    *EIN PIN L-EADS
    (TAX RETURN)
    *ELECTRONIC FILING L-EADS

    -Invalid or Wrong f-ullz can be replaced
    -Free samples can be provided only for big Deals
    -Can get specific state,zip code,age etc...

    *ID's Photos For any state (back & front)
    *Passport Photos
    ________________
    +US c-c F-ullz
    +(Dead F-ullz)
    +(Email leads with Password)
    +(D-umps track 1 & 2 with pin and without pin)
    +H-ACKING & C-ARDING TUTORIALS
    +S-MTP LINUX
    +S-AFE SOCK
    +C-PANEL
    +R-DPs
    +S-pamming Tutorial
    +SERVER I.Ps
    +EMAIL COMBO
    +D-UMPS TUTORIAL
    +BTC FLASHER
    +K-EYLOGGER COMP&MOB
    +EMAIL B-OMBER
    +S-QLI INJECTOR
    +E-THICAL H-ACKING TUTORIAL
    +GMAIL H-ACKING TUTORIAL
    +PENETRATION TESTING TUTORIAL
    +PayPal Cracker
    +BTC Cracker
    +EMAIL BLASTER
    +SMS SENDER
    +NORD VPN
    +ONION LINKS AND TOR BROWSER (LATEST VERSION)
    +D-ARK HORSE T-ROJAN
    +NETFLIX CHECKER
    +IP ROUTING
    +KEY-STROKE LOGGER
    +WESTERN UNION LOGINs
    +ALI BABA IPs
    +K-EYLOGGER
    +S-HELL SCRIPTING
    _______________
    *Let's do a long term business with good profit
    *Contact for more details & deal

    *Contact*
    *I-C-Q :748-957-107
    *TG--: @James307

    ReplyDelete
  15. Here We Go..

    If you are in search of legit Tools, Fullz & Tutorials for
    Hac-king, Car-ding, Sp-amming, Spying, Cyber Attacking
    We will provide you.

    @killhacks / TG/Icq
    peeterhacks / Wickr/Skype

    All tools will be genuine, verified, guaranteed
    Fullz available in bulk order
    Dumps with pins Track 101-202

    You just asked what you need
    We'll provide you stuff
    We don't do any job, just selling the stuff
    Replacement available only/N0 Refund

    C.C FULLZ
    S.S.N DOB D.L FULLZ
    HIGH.CREDIT.SCORES FULLZ
    Business EIN Fullz
    Office365 Logins/Emails Leads
    C-panels/Shells/SMTP's/Rdp's/Brute's
    Mailers/Senders/SMS Sender/Bulk Email Senders
    Key-Logger's/VPN's/RAT's/Viruses
    BTC Cracker/Flasher
    Kali.Linux Master Class With Complete Guide
    FB/WA H-ack-ing Tutorials/Tips/Tricks
    Sever Pene-tra-tion/SQLi Injector
    I.p's/Combos/Proxies
    PayPal/Coinbase/Amazon/Netflix/E-bay/Spotify Logins
    C-rackers/Extractors
    Fr**d B***e 2021/2022
    E.T.C

    @killhacks / TG/Icq
    peeterhacks / Wickr/Skype

    You can asked whatever you want
    We will fulfil your demands
    Just Try Our services

    ReplyDelete
  16. Grow taller Ayurvedic Urea Powder for sale
    ayurvedic urea for sale
    where to buy urea powder
    ayurveda home remedies
    ayurvedic urea pills
    grow taller ayurvedic urea
    ayurvedic urea grows taller
    ayurvedic urea medication
    ayurvedic urea medication price
    ayurvedic urea in Isreal
    Who can use Ayurvedic Urea (Liquid and Powder) to

    grow taller?

    Contact the Authorized agent via the contact details below.

    WhatsApp# ‪+44 7931 491607
    Email ID ( oxydrhere @ g mail . c o m )

    http://ayurvedic-urea-authorized-agent.que.tm/

    Buy world's legit height increasing and grow taller
    medicine Ayurvedic Urea, original ayurvedic urea with valid UIC and SERIAL NUMBER Well, It's basically a Herb, Dhatrumurgasiniy Herb, World's rarest Herb. Ayurvedic Urea aka DhatrumurgasiniyOur customers trust us and reliably return for extra for the quality, reasonable expense, and trustworthiness we provide. Our clients come from around the world and our shop has a variety of products gathered together to suit our customer's needs.

    Contact the Authorized agent via the contact details below.

    WhatsApp# ‪+44 7931 491607

    Email ID ( oxydrhere @ g mail . c o m )

    legal genuine vendor of Ayurvedic Urea powder online
    http://ayurvedic-urea-authorized-agent.que.tm/

    Grow taller Ayurvedic Urea Powder for sale
    ayurvedic urea for sale
    where to buy urea powder
    ayurveda home remedies
    ayurvedic urea pills
    grow taller ayurvedic urea
    ayurvedic urea grows taller
    ayurvedic urea medication
    ayurvedic urea medication price
    ayurvedic urea in Isreal
    Who can use Ayurvedic Urea (Liquid and Powder) to

    grow taller?

    ReplyDelete

Post a Comment

Popular posts from this blog

VIrtual Machine Detection Techniques

Analyzing ATM Malwares

Memory Forensics : Tracking Process Injection

Samsung CTF : Chicken or Egg Reversing Challenge

FireEye FLARE CTF 2017 : APK Challenge 8

Debugging MBR : IDA Pro and Bochs Emulator

FireEye FLARE CTF 2017 : PEWPEWBOAT Challenge 5

Windows Registry Forensics

Google CTF 2017 : Android RE Challenge