· 8 years ago · Apr 10, 2018, 09:22 PM
1 .--.-.
2 ( ( )__
3(_, \ ) ,_)
4 '- \\---'
5 _\\ ~ua
6 \\ .
7 '.\:.'
8 .':`(\
9 ' \\ skids
10 \\
11 \\
12 \\
13 \\
14 \\
15 \\ _
16 \\/@)
17 /(&\
18 (@(\&\ <*****>
19 ` \/ \.=^=. .""". .=^=.
20 \ \```\\(/x x\)//```\\
21 \ \ ( L ) }}
22 {\ \ __ \ = / }} -dead
23 {{\ '--,/'-'\,---. }}
24 {{ \ |`-._/\_.-'| \ }}
25 {{ \| || |\ \}}
26 {{ |___o()o___| > )}
27 {{ |__((<>))__|` .'}}
28 {{ \ o\/o /`` }}
29 {{ ,'\ || / ', }}
30 {{.' \ || /| '.}}
31 |'.||.' |
32 | : |
33 | : |
34 | : |
35 | : |
36 | : |
37 | : |
38 |____:__|
39 (_/ \_)
40
41"And we're very, very pissed off. The first rule of Fight Club is: You do not talk about Fight Club.
42The second rule of Fight Club is: You do not talk about Fight Club. Third rule of Fight Club: someone
43yells stop, goes limp, taps out, the fight is over". > The Reb1r7h.
44
45
46\\ ** || 0x00 The halls of lest || ** //
47
48----------------------------|```````````````````````````````````````\\```````````````\\````````````//`````````````\\````[]``````````\``````````````````.
49|Enoch 39:4 There I saw another vision; I saw the habitations and resting places of the saints. There my eyes beheld their habitations with the angels,
50| and their resting places with the holy ones. They were entreating, supplicating, and praying for the sons of men; while righteousness like water flowed
51| before them, and mercy like dew was scattered over the earth. And thus shall it be with them for ever and for ever.â€Â//////////////////////////////////////
52_
53
54
55-- -- -- --
56
57Table Of Contents;
58
590x00 The halls of lest
600x01 registrar_redpill[0].txt
610x02 ~UA vs FD
620x03 Suterusu patch PoC
630x04 0dayz
640x05 sk1dz gal0r3
650x06 gr33tz / outro
66
67-- -- -- --
68
69
70
71 ____ ,
72 /---.'.__ ____//
73 '--.\ /.---'
74 _______ \\ //
75 /.------.\ \| .'/ ______
76 // ___ \ \ ||/|\ // _/_----.\__
77 |/ /.-.\ \ \:|< >|// _/.'..\ '--'
78 // \'. | \'.|.'/ /_/ / \\
79 // \ \_\/" ' ~\-'.-' \\
80 // '-._| :H: |'-.__ \\ ~cr4wl1ng
81 // (/'==='\)'-._\ ||
82 || \\ \|
83 || \\ '
84 |/ \\
85 ||
86 ||
87 \\
88 '
89
90
910x01; th3_cr4wL ; k33p th17 in m1nd, ascr1b3 4LL Pur17y..
92
93(icann.org removes all their ns / txt records lolol ; 4/6/2018 ; gave away ranges exposed before to different ircd's)
94joe@ubuntu:~$ dig icann.org any
95
96; <<>> DiG 9.10.3-P4-Ubuntu <<>> icann.org any
97;; global options: +cmd
98;; Got answer:
99;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 36570
100;; flags: qr rd ra: QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
101
102;; OPT PSEUDOSECTION
103; EDNS: version: 0, flags:; udp: 65494
104;; QUESTION SECTION:
105;icann.org. IN ANY
106
107;; Query time: 688 msec
108;; Server: 127.0.0.53#53(127.0.0.53)
109;; WHEN: Fri Apr 06 13:14:52 CDT 2018
110;; MSG SIZE rcvd: 38
111
112\\** ^ original icann.org ranges found elsewhere ;PpPpP **//
113
114199.122.123.250/32 199.122.124.194/32 (Pm Zodiac from irc.xmpp.land/6697 #security about that lost mail.equifax.com:80 backdoor..)
115
116(aspmx.googlemail.com servers.mcsv.net mail.zendesk.com --> ip4:69.64.159.23/32) --> yeah, definitely should patch...
117
118-- -- -- --
119
1200x02; ~UA vs FD /// A disgruntled full-disclosure staff member named Matthew Fernandez; our argument upon ~ua's double-free bypass bug ;D
121 Reference(s): https://raw.githubusercontent.com/undergroundagency/disclosure/master/satirical_analysis.txt
122
123http://seclists.org/fulldisclosure/2018/Mar/70 (mirror)
124
125----
126From: Matthew Fernandez <matthew.fernandex() gmail.com>
127Date: Tue, 27 Mar 2018 12:06:59-0700
128
129Maybe I'm misunderstanding something, but what is the vulnerability here? It looks like you are just demonstrating that
130a program can corrupt its own heap, which it can already do in numerous other ways.
131
132BEGIN_EMAIL_FEED(){
133<<** // Full-disclosure moderator Matthew Fernandez getting passive-aggressive after ~UA proves double-free bypass bug exists \\ **>>
134
135Matthew Fernandez <matthew.fernandez@gmail.com>
13627 Mar (10 days ago)
137to me, fulldisclosure
138Maybe I am misunderstanding something, but what is the vulnerability here? It looks like you are just demonstrating that a program can corrupt its own heap, which it can already do in numerous other ways.
139> _______________________________________________
140> Sent through the Full Disclosure mailing list
141> https://nmap.org/mailman/listinfo/fulldisclosure
142> Web Archives & RSS: http://seclists.org/fulldisclosure/
143
144keliikoa kirland <keliikoakirland@gmail.com>
1455 Apr (1 day ago)
146to Matthew
147Hey I'm back ;PpPpP
148It's an actual mmap() bug, https://github.com/torvalds/linux/blob/master/mm/mmap.c#L212
149
150 /*
151 * Check against rlimit here. If this check is done later after the test
152 * of oldbrk with newbrk then it can escape the test and let the data
153 * segment grow beyond its set limit the in case where the limit is
154 * not page aligned -Ram Gupta
155 */
156 if (check_data_rlimit(rlimit(RLIMIT_DATA), brk, mm->start_brk,
157 mm->end_data, mm->start_data))
158 goto out;
159
160 newbrk = PAGE_ALIGN(brk);
161 oldbrk = PAGE_ALIGN(mm->brk);
162 if (oldbrk == newbrk)
163 goto set_brk;
164
165
166albeit.
167
168
169fulldisclosure-owner@seclists.org
17010:59 (1 hour ago)
171to me
172Your request to the Fulldisclosure mailing list
173
174 Posting of your message titled "In response to Matthew Fernandez
175<matthew.fernandex@gmail.com> Double-free() bypass"
176
177has been rejected by the list moderator. The moderator gave the
178following reason for rejecting your request:
179
180"It's not clear what you are demonstrating here. The comment says
181they need to have rlimit check before the oldbrk test and they do. It
182looks like the comment and the test have been there for years, so they
183didn't just add this as a fix. You may be right about there being a <--- lol
184bug, but perhaps you can resend this to the list but with more clarity <---- lol
185as to what it is so the listmembers better understand what you're
186saying? Thanks!"
187
188Any questions or comments should be directed to the list administrator
189at:
190
191 fulldisclosure-owner@seclists.org
192
193
194keliikoa kirland <keliikoakirland@gmail.com>
19512:47 (4 minutes ago)
196to fulldisclosure.
197Eh? That's exactly what I was trying to exclaim; albeit, "It
198looks like the comment and the test have been there for years, so they
199didn't just add this as a fix." That's the bug Matthew; self-explanatory, thanks.
200}
201
202-- -- -- --
203
204
205
206 \`\
207 \ \
208 \ \
209 \ \
210 \.\
211 \.\
212 \.\
213 _ \.\/)
214 _ _-' ')__ (\.\/)
215 / / \.'`'-\/)\\
216 \__ ,.-'(_ Y (_\.\)
217 / < o O \ \ ,\\.\\
218 \_ \ _. /y(_| : |\.\|
219 _\_\\ | : | \.\
220 ( `'-._>/ ) \| \.\
221 \ `:=. (\ \.\
222 \_ ( `--._)`--'\.\=7
223 _/|\_ \-._ `-:_ /```-3
224 / | `- \ t--._ Y _3
225 ,-' | / | /``'-.\--T x\
226 _/ _( ,./ / ( \ x\
227 _.-/ \ / < \ \ x\
228 <`' / |\/ `-. : \_x\
229 \ / | `. |
230 \_| / `.
231 | / `.
232 / _/\ /
233
234
235
2360x03; Suterusu patch PoC; A patch / technique for detecting Suterusu / inline-hooked LKM rootkits..
237 Reference(s): https://raw.githubusercontent.com/undergroundagency/ua/master/suterusu_patch_poc.txt
238
239\\ ** Tested on.. ** //
240
241LSD_RELEASE: Ubuntu 12.04 LTS
242Kernel: 3.2.0-23-generic (the_end_of_d4yzzz...)
243ARCH: x86_64
244
245--
246
247\\** Makefile 'z **//
248obj-m += blah.o
249
250all:
251 sudo make -C /lib/modules/$(shell uname -r)/build M=$(PWD) modules
252
253clean:
254 sudo make -C /lib/modules/$(shell uname -r)/build M=$(PWD) modules
255
256--
257
258obj-m += blah2.o
259
260all:
261 sudo make -C /lib/modules/$(shell uname -r)/build M=$(PWD) modules
262
263clean:
264 sudo make -C /lib/modules/$(shell uname -r)/build M=$(PWD) modules
265
266--
267
268\\** EoS.txt End_of_Sin.txt **//
269-- -- -- -- -- -- -- -- -- -- --
270
271// Suterusu patch / detection via double_fault()
272
273// step-by-step (2 LKM'z)
274// - $ make (blah.o)
275// - $ sudo insmod ./blah.ko
276// - $ make (blah2.o)
277// - $ sudo insmod ./blah2.ko
278
279--
280
281Result (sh17 th4t m4tt3rz..):
282Call Trace:
283[13702.987626] [<ffffffff81014302>] do_double_fault+0x72/0x80
284[13702.987860] [<ffffffff81666ab5>] double_fault+0x25/0x30
285
286[13702.989334] RIP [<ffffffff81056622>] update_curr+0x42/0x230
287
288////////////////\\\\\\\\\\\\\\\\\\\\
289
290#include <linux/module.h>
291#include <linux/kernel.h>
292#include <linux/slab.h>
293#include <linux/syscalls.h>
294#include <asm/uaccess.h>
295
296// macros
297#define HIJACK_SIZE 12
298/////////////////////////////////
299
300struct sym_hook{
301 void *addr;
302 unsigned char o_code[HIJACK_SIZE];
303 unsigned char n_code[HIJACK_SIZE];
304 struct list_head list;
305};
306
307LIST_HEAD(hooked_syms);
308
309/////////////////////////////////
310
311// globals
312unsigned long **sys_call_table;
313//////////////////////
314
315// prototypes
316/////////////////////////////
317
318void hijack_start(void *target, void *new);
319void hijack_pause(void *target);
320void hijack_resume(void *target);
321void hijack_stop(void *target);
322
323asmlinkage long (*original_sys_read)(unsigned int fd, char __user *buf, size_t count);
324//////////////////////////////////////////
325
326// functions
327//////////////////////
328
329inline unsigned long disable_wp(void){
330 unsigned long cr0;
331
332 preempt_disable();
333 barrier();
334
335 cr0 = read_cr0();
336 write_cr0(cr0 & ~X86_CR0_WP);
337
338 return cr0;
339}
340
341inline void restore_wp(unsigned long cr0){
342 write_cr0(cr0);
343
344 barrier();
345 preempt_enable();
346}
347
348void hijack_start(void *target, void *new){
349 struct sym_hook *sa;
350 unsigned char o_code[HIJACK_SIZE], n_code[HIJACK_SIZE];
351
352 unsigned long o_cr0;
353
354 // mov rax, $addr; jmp rax
355 memcpy(n_code, "\x48\xb8\x00\x00\x00\x00\x00\x00\x00\x00\xff\xe0", HIJACK_SIZE);
356 *(unsigned long *)&n_code[2] = (unsigned long)new;
357
358 printk(KERN_INFO "Hooking function with 0x%p with 0x%p\n", target, new);
359
360 memcpy(o_code, target, HIJACK_SIZE);
361 o_cr0 = disable_wp();
362 memcpy(target, n_code, HIJACK_SIZE);
363 restore_wp(o_cr0);
364
365 sa = kmalloc(sizeof(*sa), GFP_KERNEL);
366 if(!sa)
367 return;
368
369 sa->addr = target;
370 memcpy(sa->o_code, o_code, HIJACK_SIZE);
371 memcpy(sa->n_code, n_code, HIJACK_SIZE);
372
373 list_add(&sa->list, &hooked_syms);
374}
375
376void hijack_pause(void *target){
377 struct sym_hook *sa;
378
379 list_for_each_entry(sa, &hooked_syms, list){
380 if(target == sa->addr){
381 unsigned long o_cr0 = disable_wp();
382 memcpy(target, sa->o_code, HIJACK_SIZE);
383 restore_wp(o_cr0);
384 }
385 }
386}
387
388void hijack_resume(void *target){
389 struct sym_hook *sa;
390
391 list_for_each_entry(sa, &hooked_syms, list){
392 if(target == sa->addr){
393 unsigned long o_cr0 = disable_wp();
394 memcpy(target, sa->o_code, HIJACK_SIZE);
395 restore_wp(o_cr0);
396 }
397 }
398}
399
400void hijack_resume(void *target){
401 struct sym_hook *sa;
402
403 list_for_each_entry(sa, &hooked_syms, list){
404 if(target == sa->addr){
405 unsigned long o_cr0 = disable_wp();
406 memcpy(target, sa->n_code, HIJACK_SIZE);
407 restore_wp(o_cr0);
408 }
409 }
410}
411
412void hijack_stop(void *target){
413 struct sym_hook *sa;
414 printk(KERN_INFO "Unhooking function 0x%p\n", target);
415
416 list_for_each_entry(sa, &hooked_syms, list){
417 if(target == sa->addr){
418 unsigned long o_cr0 = disable_wp();
419 memcpy(target, sa->o_code, HIJACK_SIZE);
420 restore_wp(o_cr0);
421
422 list_del(&sa->list);
423 kfree(sa);
424 break;
425 }
426 }
427}
428
429static unsigned long **acquire_sys_call_table(void){
430 unsigned long int offset = PAGE_OFFSET;
431 unsigned long **sct;
432
433 printk(KERN_INFO "Starting syscall table scan from: %lx\n", offset);
434 while(offset < ULLONG_MAX){
435 sct = (unsigned long **)offset;
436
437 if(sct[__NR_close] == (unsigned long *)sys_close){
438 printk(KERN_INFO "syscall table found at: %lx\n", offset);
439 return sct;
440 }
441
442 offset += sizeof(void *);
443 }
444
445 return NULL;
446}
447
448asmlinkage long new_sys_read(unsigned int fd, char __user *buf, size_t count){
449 long ret;
450
451 printk(KERN_INFO "sys_read() hooked!#$%%\n");
452
453 hijack_pause(original_sys_read);
454 ret = original_sys_read(fd, buf, count);
455 hijack_resume(original_sys_read);
456
457 return ret;
458}
459
460/////////////////////////////////
461
462int init_module(void){
463 printk(KERN_INFO "Hello\n");
464
465 sys_call_table = acquire_sys_call_table();
466
467 original_sys_read = (void *)sys_call_table[__NR_read];
468 hijack_start(original_sys_read, &new_sys_read);
469
470 return 0;
471}
472
473void cleanup_module(void){
474 printk(KERN_INFO "goodbye\n");
475 hijack_stop(original_sys_read);
476}
477
478MODULE_LICENSE("GPL");
479MODULE_AUTHOR("UndergroundAgency");
480
481-- -- -- --
482
483
484 ,-._,-._ .----------------------------------.
485 _,-\ o O_/; | All |
486 / , ` `| | of |
487 | \-.,___, / ` | your 0dayz!! |
488 \ `-.__/ / ,.\ `----------------------------------'
489 / `-.__.-\` ./ \'
490 / /| ___\ ,/ `\
491 ( ( |.-"` '/\ \ `
492 \ \/ ,, | \ _
493 \| o/o / \.
494 \ , / /
495 ( __`;-;'__`) \\
496 `//'` `||` `\
497 _// || ;
498 .-"-._,(__) .(__).-""-. `
499 / \ / \ '
500 \ / \ / `
501 `'-------` `--------'` ;
502 '
5030x04; 0dayz `'
504 ;
505
506-- -- -- -- -- --
507
508
509\* h3xch4t iz th3 b3st, r4n 1t as r00t */
510
511// n1c3 0v3rf10w b1tch3z
512
513(((((((((( hexchat[30394]: segfault at 7f0ca6862199 ip 00007f0ca67a5993 sp 00007ffd83fab310 error 4 in libpcre.so.3.13.3[7f0ca678b000+70000] ))))))))))
514
515*someone flooded Supernets with ascii etc, then their client crashed >> L0L! >>> 0v3rf10w
516
517-- -- -- -- -- --
518
519* Now talking on #superbowl
520* Topic for #superbowl is: < koa> fuck wormsec | 1 BTC BOUNTY FOR KOA FULL DOX | [02:48:40 ][ koa ] yup, watch the zine time | [02:48:48 ][ koa ] it's gonna feature u!
521* Topic for #superbowl set by pyrex (Mon Apr 9 19:50:33 2018)
522<MIKEJONEZ> bruh
523<MIKEJONEZ> wb
524<MIKEJONEZ> koa:
525<koa> thanks
526<MIKEJONEZ> np
527<MIKEJONEZ> mist u
528<koa> ik, what u up to
529<MIKEJONEZ> rollin a spliff
530<MIKEJONEZ> with some kush
531<MIKEJONEZ> bout 2 smoke it
532<MIKEJONEZ> u
533<MIKEJONEZ> hows that zine?
534<MIKEJONEZ> coming along
535<MIKEJONEZ> i could help u
536<MIKEJONEZ> if u want
537<MIKEJONEZ> with it
538<koa> it's done, waiting on solar
539<MIKEJONEZ> nice zine
540<MIKEJONEZ> whens the
541<koa> what do u mean
542<MIKEJONEZ> release
543<koa> are u trolling again
544<MIKEJONEZ> what
545<MIKEJONEZ> nigga
546<MIKEJONEZ> link 2 zine
547<MIKEJONEZ> . . .
548<koa> >it's done, waiting on solar; 0x04 0dayz ft. solar
549<MIKEJONEZ> link
550<koa> unless he doesn't pull through, been a while since i heard back()
551<koa> link 2 what, the first one?
552<MIKEJONEZ> me feature
553<MIKEJONEZ> link 2 it
554<MIKEJONEZ> i like 2 read about myself
555<MIKEJONEZ> and then jerk off
556<koa> you're not getting featured, ik u were trolling so i got rid of logs
557<MIKEJONEZ> while reading
558<MIKEJONEZ> %% what
559<koa> yeah, im not going to shit on you, it's ok
560<MIKEJONEZ> this is 2 goofy, lemme go smoke this spliff
561<MIKEJONEZ> ill brb in a min
562<MIKEJONEZ> dont emo quit
563<MIKEJONEZ> faggot
564<pyrex> %%'d
565<MIKEJONEZ> ok
566<MIKEJONEZ> ok
567<MIKEJONEZ> ok
568<MIKEJONEZ> ok
569<MIKEJONEZ> smoked
570<MIKEJONEZ> half of it
571<pyrex> ok
572<MIKEJONEZ> kept laughing
573<MIKEJONEZ> at this
574<MIKEJONEZ> convo
575<MIKEJONEZ> in me head
576<MIKEJONEZ> koa: u there
577<MIKEJONEZ> koa: i heard u
578<koa> yeah
579<MIKEJONEZ> 1> cant chat
580<MIKEJONEZ> 2> cant hack
581<MIKEJONEZ> 3> cant flood
582<MIKEJONEZ> 4> cant packet
583<MIKEJONEZ> 5> dont have a sex life
584<MIKEJONEZ> 6> are fat irl
585<MIKEJONEZ> 7> doesnt have alot of sex
586<MIKEJONEZ> (pause)
587<MIKEJONEZ> can u
588<MIKEJONEZ> confirm
589<MIKEJONEZ> or deny
590<MIKEJONEZ> these
591<MIKEJONEZ> alligations
592<MIKEJONEZ> which
593<MIKEJONEZ> are
594<MIKEJONEZ> being
595<MIKEJONEZ> stated
596<MIKEJONEZ> by
597<MIKEJONEZ> the
598<MIKEJONEZ> chat
599<MIKEJONEZ> god
600<MIKEJONEZ> <-----------------------
601<MIKEJONEZ> (pause)
602<MIKEJONEZ> (pause)
603<koa> You're just a chatter MIKEJONEZ, gg. <-- karma, now you're getting zine'd faggot ;PpPP
604
605-- -- -- -- -- --
606
607Reference(s): https://raw.githubusercontent.com/undergroundagency/ua/master/unicode_bash_bug.txt
608
609\\ ** SURROGATES N0T ALL0W3D !!%%#@ **/
610
611joe@ubuntu:~$ `echo -e "\xcc";`
612Sorry, command-not-found crashed! Please file a bug report at:
613https://bugs.launchpad.net/command-not-found/+filebug
614Please include the following information with the report:
615
616command-not-found version: 0.3
617Python version: 3.4.3 final 0
618Description: Ubuntu 14.04.5 LTS
619Release: 14.04
620Codename: trusty
621Exception information:
622
623'utf-8' codec can't encode character '\udccc' in position 0: surrogates not allowed
624Traceback (most recent call last):
625 File "/usr/lib/python3/dist-packages/CommandNotFound/util.py", line 24, in crash_guard
626 callback()
627 File "/usr/lib/command-not-found", line 90, in main
628 if not cnf.advise(args[0], options.ignore_installed) and not options.no_failure_msg:
629 File "/usr/lib/python3/dist-packages/CommandNotFound/CommandNotFound.py", line 265, in advise
630 packages = self.getPackages(command)
631 File "/usr/lib/python3/dist-packages/CommandNotFound/CommandNotFound.py", line 157, in getPackages
632 result.update([(pkg, db.component) for pkg in db.lookup(command)])
633 File "/usr/lib/python3/dist-packages/CommandNotFound/CommandNotFound.py", line 85, in lookup
634 result = self.db.lookup(command)
635 File "/usr/lib/python3/dist-packages/CommandNotFound/CommandNotFound.py", line 41, in lookup
636 key = key.encode('utf-8')
637UnicodeEncodeError: 'utf-8' codec can't encode character '\udccc' in position 0: surrogates not allowed
638
639joe@ubuntu:~$ uname -a
640Linux ubuntu 4.4.0-31-generic #50~14.04.1-Ubuntu SMP Wed Jul 13 01:07:32 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
641
642-- -- -- --
643
644
645 /^\ ~ua
646 L L / \ L L
647 __/|/|_ / . \ _|\|\__
648 /_| [_[_\ / .-\ /_]_] |_\
649 /__\ __`-\_____ / . \ _____/-`__ /__\
650 /___] /=@> _ {> /-. \ <} _ <@=\ [___\
651 /____/ /` `--/ / . \ \--` `\ \____\
652 /____/ \____/`-._> / \ <_.-`\____/ \____\
653 /____/ /__/ /-._ . _.- \ \__\ \____\
654 /____/ /__/ / . \ \__\ \____\
655|____/_ _/__/ / . \ \__\_ _\____|
656 \__/_ ``_|_/ / -._ . _.-\ \_|_`` _\___/
657 /__`-`__\ <_ `-; _> /__`-`__\
658 `-` `-._ ; _.-` `-`
659 `-._ ; _.-`
660 `-._.-` skidz()
661
662
663
664
6650x05; sk1dz g4l0r3
666
667/ empty threats and a house of lies
668// h1nt h1nt; merkii aka @xFBIz cann0t h4ck! (n0t a surpr1se)
669
670
671<koa> who dis
672
673
674<MerKii> i need to know this
675<MerKii> okay, so ur the real AB members?
676
677<koa> no, just me
678<koa> other 2 members are friends
679
680<MerKii> are u intel?
681
682<koa> no
683
684<MerKii> are u koa?
685
686<koa> yeah
687<koa> ac1db1tch3z koa
688<koa> double-free() bypass buf
689<koa> bug*
690<koa> on FD
691
692<MerKii> but aren't u guys trolling MLT? <-- autism
693
694<koa> no, im cool with them now
695<koa> @insecurity albeit
696<koa> chillin in their group chat etc
697
698<MerKii> i was in insec too (: <-- real hacker guyz
699<MerKii> matteo created the @ group
700
701<koa> nerfnet, u, z, matteo
702<koa> haven't done shit
703<koa> for ua
704
705<MerKii> they left
706
707<koa> they couldn't do shit even if they tried
708
709<MerKii> cuz uno
710<MerKii> uni
711
712<koa> tell nerfnet he's a joke
713<koa> tell matteo he's a joke
714<koa> know that you're a joke
715<koa> and that your discord is a joke
716<koa> and that you're a skid
717<koa> including matteo, z, nerfnet, etc
718
719<MerKii> no shit my @ discord is a joke
720
721<koa> gg
722
723
724<MerKii> why are u mad?
725<MerKii> at @ me
726
727<koa> im not, im just astonished / elated that i get to zine all of you now
728<koa> thanks for the logs
729<koa> ;pPpPP
730
731<MerKii> kEk
732<MerKii> make sure to link it (:
733
734<koa> i will
735<koa> u idiot
736<koa> lol
737<koa> tell matteo to suck a dick
738<koa> you faggot
739<koa> ;)
740
741<MerKii> u can also get a zine to make u look @ retarded << here we have a hacker saying we will get zine'd!
742<MerKii> by matteo
743<MerKii> Since he's intellectually superior to all of @ u
744<MerKii> even though he can't hack
745
746<koa> sure
747<koa> we're so scared
748<koa> are u like, the spokesperson for the skid community or something
749<koa> btw, the more u respond, the more i log for next zine
750<koa> so please keep talking
751<koa> you will get featured on FD, and other skids will laugh at you once more
752<koa> did u google my email yet u little harmless fairy?
753
754<MerKii> well now everyone knows that ur not AB so
755<MerKii> i'll tell MLT then
756
757<koa> how?
758<koa> you're all retarded teenage skids lol
759<koa> do u think i care that harmless skids like yourself
760
761<MerKii> prove it s1r
762
763<koa> tell people
764<koa> that im not ab
765<koa> lol
766
767<koa> i did <--- in reference to "<MerKii> prove it s1r"
768
769<MerKii> u haven't proved anything s1r
770
771<koa> google keliikoakirland@gmail.com
772<koa> you autistic moron
773<koa> seclists_dot_org/fulldisclosure/2018/Mar/63
774<koa> now guess what
775<koa> since i just proved everything
776<koa> you're all gonna get zine'd ; 0x05 skidz galore
777
778<MerKii> that makes me happy;
779
780<koa> good
781<koa> ;)
782
783<MerKii> (:
784<MerKii> make sure to link it (:
785
786<koa> i will
787<koa> u idiot
788<koa> lol
789<koa> tell matteo to suck a dick
790<koa> you faggot
791<koa> ;)
792
793<MerKii> Matteo, brett && z started the group
794
795<koa> no, i came up with the name UndergroundAgency with gasipp
796<koa> they were in the same discord, moron
797<koa> and that's getting logged; what u said
798<koa> for my own personal schadenfreude, once more
799
800<MerKii> good :))
801
802<koa> keep shooting yourself in the foot skid boy
803<koa> you harmless joke
804<koa> ;)
805<koa> glad u know how harmless all of u are now
806
807-- -- -- --
808
809\\** TH3 H4LL 0F F4M33 %% #@! )( **//
810-------- -------- -------- --------
811/////////////////\\\\\\\\\\\\\\\\\\\
812
8130x06; gr33tz / outr0
814
815
816 mlt, @insecurity, @ut_infection, GOBBLES, zf0, h0n0, ab, ~CAPZLOCKED, phc, ~el8, 2l8, ap, t3kn10n, vl4d1m1r, NTITTION, GoD, tun3, etc
817
818 irc.supernets.org/6697 #ua #superbowl #scroll
819
820 @x0r1_ua, @pthread_create, @pthread_exit
821
822 "
823
824-- -- -- --
825
826
827
828
829 ___------~~~~~~~~~~~----__ .:. __----~~~~~~~~~~~------___
830 ~~ ~--__ ......====\\~~ .:::. ~~//====...... __--~ ~~
831 ~\ ...::::~~~~~~ //||| .:::::. |||\\ ~~~~~~::::... /~
832 -~~\_ // |||***.(:::::).***||| \\ _/~~-
833 ~\_ // *******.:|\^^^/|:.******* \\ _/~
834 \ / ********.::(>: :<)::.******** \ /
835 \ / ********.::::\\|//::::.******** \ /
836 \ / *******.:::::(o o):::::.******* \ /
837 /. ******.::::'*|V_V|***`::.****** .\
838 ~~--****.:::'***|___|*****`:.****--~~
839 *.::'***//|___|\\*****`.*
840 .:' **/##|___|##\** .
841 . (v(VVV)___(VVV)v)
842
843
844
845EOF
846~ua 2018