#FXPGUNZop const - GZ THE SIGKILL The infamous tales of the sharpest death of a Gunz The duel serverr that prolib initiated it destruction by starting a beef that was dormant / finished to impress is pseudo online friends before throwing them under the bus .
/

SIGKILL EM & F - X-PEE Shatter

Bitch watch me pivot loadin up the babydraco
Racks turn to heaters these cycles turn to monero
Sift through these diffs when they patchin all they shit code
Windows get broke they fix em but then i reload
Connections bounce untraceable accounts
Active directory domain names i can't pronounce
Im in ya house enumeratin routes
Despite the dirty traffic BGP will still announce
Server closet hot my heart is so cold
I'mma show you what the fuck i mean when i say pwned
Ain't grippin chrome got firefox and nitron
Evaluate my headers and get turned into a drone
Ring ring ring ring on the SIP phone
It ain't worth resistin you don't got the fuckin ohms
Thinkin I am history but my presence has grown
It may be yo domain but your network is my home

[Ohm-I]
I ain't scanning networks for practice
Checking ya ports I am scanning for access
Enumeratin' services better apply your patches
I'll search sploits. exploitDB knows what the hack is
Yo, you need fortify heavily
I see your database services and version 1 SMB
You know what this nerd gon' do payloads I'mma turn on you
This quad 4 make you sad forever that's ETERNALBLUE
Dumpin' hashes when I'm loading up that mimikatz
Creds to my boy John see how many he can crack
I smash and I grab on that lateral path
Ain't movin' blunts when I say that I'm passin the hash
Not a script kiddie they ain't the level I'm on
I'm a snake charmer watch me dance around some Python
And generate shellcode for services I find on ya network
Pop a shell I get right on

[Hook]
Your network security level way down
Nothing can stop us we'll find my way round
Taking over ya DC nothing is safe now
This might be your network but it's our domain now
Your network security level way down
Nothing can stop us we'll find my way round
Taking over ya DC nothing is safe now
This might be your network but it's our domain now

[yung innanet]
DNS fully qualified but ya admin's not
ASP.NET you deserve to rot
Yes I'mma grow this net till until the routes drop
Tell the ATF this an arm-brace this is not a stock
Babydraco make them opps go
Pippity pop pop pop now they die slow
Got the siggy on me if i need to touch some MIPSel
Memory small but yo credentials gon a big sell
Fuck electron my crodies some cloodhounds
Free atmos illkid from the dog pound
Find us in yo server and find us in ya damn clouds
When the cops come we vanish and we don't make a sound
Lookin like I talk a lot but I ain't never say shit
I don't fucking trust the cops so i could never ever be a snitch
Givin to the poor the resources we takin from the rich
Catch me creepin round layer 2 on your corporate switch

[Ohm-I]
No anti-virus products guess you never heard of those
I'm on that Willy Wonka got the golden ticket, Kerberos
You actively blind I'm tappin' ya lines, homey
All ya unsecure traffic is mine, homey
Why ya boss browsing porno in the work day
No good he 'bout a catch a virus in the worst way
He's staring at a lot of chicks but all that I'm gettin' out of it
That site he's peepin' is mining Monero with some Javascript
And I bet he won't like that
I'm just tryna get paid to be a white hat
Open my report and I'mma write that and
Show the impact of an attacker and put ‘em on the right track
I'll advise you invest
In a HIDS or a NIDS or a fly IPS
Better firewall ya ports and deny that egress
Or I'll deliver a payload right to ya chest

[Hook]
Your network security level way down
Nothing can stop us we'll find my way round
Taking over ya DC nothing is safe now
This might be your network but it's our domain now
Your network security level way down
Nothing can stop us we'll find my way round
Taking over ya DC nothing is safe now
This might be your network but it's our domain now

Domain (Remix)

ICMP

SMTP

L2TP

АΗʗІ

Ether'sOfPsyop

op const - GZ THE SIGKILL The infamous tales of the sharpest death of a Gunz The duel serverr that prolib initiated it destruction by starting a beef that was dormant / finished to impress is pseudo online friends before throwing them under the bus .
You shall have let the kid alone and play other arena shooter instead of trying to pointblank the attentions you crave. -
fxpgunz.com fxp fxpgunz fxp gunz #GUNZ #FXPGUNZ #FXPGUNZ.COM
#ARP-SPOOFED #NETWORK #GUNZTHEDUEL #GUNZ #GAMINGfxpgunz.com fxp fxpgunz fxp gunz #GUNZ #FXPGUNZ from ragegunz, to fxpgunz.com , to his military practice he left his windows compiler path  pdb in it.  Which is how i found his name ( Ohad ) . I also broke vmprotect on all the gunz.exe he served. The launcher purposely use an oudated .net, deprecated ssl version . His old host used  beer.consistdev.co.il  b4 moving to another host provider.  He works as a programmer as a job but this is his side project. 
Make sure to look at both relations and behaviour
https://www.virustotal.com/gui/file/3c67b3fc77d4807aa3af755118f748aef373f878e602e1e49884ce96db128c77/behavior
https://www.virustotal.com/gui/file/5db24f34d010fd728dbe788e96bd3aa11cd512a85a28642604945dd1b30d8e57/behavior
0asc.scd
https://www.virustotal.com/gui/file/7dcf268fb73001c6d5a618702120329b4004ddea4ccbec9f6abcdedd10faf389/relations
D3DX9D.dll
https://www.virustotal.com/gui/file/0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f/detection
couple gunz.exe from fxp
https://www.virustotal.com/gui/file/2a3b955a2ba3c4329a26b56d29d6ae7baa9053f2d184155632bcff9109b32e26/detection
https://www.virustotal.com/gui/file/d39828a33a07af259921811a52513f0f5824ccb3aa56151ff6bab3b51847a45f?nocache=1
https://www.virustotal.com/gui/file/d39828a33a07af259921811a52513f0f5824ccb3aa56151ff6bab3b51847a45f/relations
https://www.virustotal.com/gui/file/d9071790a18cd1c7db2a14824115efca7bb2b806dd799a378b34fdaef71bb0a9/behavior
sharp/ohad tested several exe b4 using them on fxp domain , often he bundled those inside a zip.
https://www.virustotal.com/gui/file/250bba2b5f30bcc38cce29d985f80fc1f48a98ce33d38287466481866e264ab1?nocache=1
https://www.virustotal.com/gui/file/cb2faf786fe5fd22dde9894fc0e16b32006e495dbba92e5e6612fbea475c290e/relations
in depth data https://cryptpad.fr/code/#/2/code/view/M23D6IXLH4aCR8XWOAxCQ6YbzsmxZCZ4jQrBYQ+yuFo/

Hypervisor backdoor taking the hobbits to isengard

Popular tracks