【ヒプノシスマイク-Division Rap Battle- Championship Tournament】Fling Posse VS Matenrou

BATTLE ANIMA+02 - Hypnosis Mic

BATTLE ANIMA+03 - Hypnosis Mic

Buster Bros rap (From drama track 'My Genaration')

始まりのラストソング (hajimari no rasuto songu) - Hifumi Izanami

05. 夢喰い白黒バク／Nem feat. 増田俊樹

Yo, check the mic, one two, n.p.m. packages armed,
Threat actors slide in silent, ready to do real harm.
No fairy tales here, just facts in the internet streets,
Supply chain persistent backdoor, hackin' to this beat

Register infected machine as self-hosted runners, you bouta get wrecked
This pull requests be trippin', should've used branch protection checks.
Payloads be sneaky hidin' in open sources repos your devs adore,
n.p.m. install droppin’ malicious workflow yamls, oh there's more
Openin' discussions in Github by executin' commands runnin' deep,
Collectin' all your secrets in repo, initial access is what they reap.

Deletin' exfiltration activities while lootin’ secrets on the low,
Artifacts out the vault, good hackers are quiet, no show.
A.W.S., Azure, GCP creds spillin’,
Your A.D. flipped, root shell chillin’.
Privilege escalation, container escape game,
Their access boosted, your data they claim.

Don't n.p.m. install random shit to prevent this kinda attack
Remote code execution, their commands hittin’ like a slap,
Sprints movin’ too fast, devs cuttin' corners, that’s the trap,
No vet, No Q.A., no check, hackers exploit this security gap.
Shai-Hulud out here, shellcode schemes in play,
They livin’ rent-free, in your networks they stay.

Backdoor persistent, hackers get remote code,
Reverse shell open, runnin’ silent mode.
Self-hosted runner comin’ in with commands,
Chainin' vulnerabilities, hackers livin' off the land.
Shells poppin’ off,  hijacking accounts ever so sly,
Pivotin' through networks, disable SIEMs so no alibi.

Supply chain attacks hit hard so don’t take the bait,
Secure your pipeline builds, before it’s too late.
Host your own artifacts, check every file,
Limit who can merge, track with nerdy style.
S-BOM’s your friend, trackin' what's inside the app,
Follow company policy, procurement got your back,

Don't n.p.m. install random shit to prevent this kinda attack
Follow the rules, procurement got your back,
remote code execution, their commands hittin’ like a slap,
Sprints movin’ too fast, devs cuttin' corners, that’s the trap,
No vet, No Q.A., no check, hackers exploit this security gap.
Shai-Hulud out here, shellcode schemes in play,
They livin’ rent-free, in your networks they stay.

Hackers pumpin’ stars, fake clout inflated,
GitHub repo bling, trust manipulated.
Bots addin' stars to make it all seem legit,
Fake repo reppin', but it's all counterfeit.
You see those numbers, jumpin’ to the install,
Not knowin’ it’s a trick, the biggest hustle of all.

Shift-left by securing repo and branch configurations are key,
Dev's keep it smart, review repo code before you install, see?
Cuz Shai-Hulud 2.0 is comin', hackers ready to invade, bet
n.p.m. maybe be free, but you'll pay the price if you don't vet
Fake fame, fake game, trust is the cost,
Vibe coders suck, get a real dev or get lost.

始まりのラストソング (hajimari no rasuto songu) - Hifumi Izanami

кирячян