Sh3ll.
@securesh3ll.bsky.social
Gray Hat 🎭 Posix 💜
Hyperactive and Hypersensitive ✨
Libertarian/Alterglobalist 🕸
Music 🎵
🤡 I am scary according to some. 🤡
👅 *A guy trying stuff* 👅
https://twitter.com/SecureSh3ll
Hyperactive and Hypersensitive ✨
Libertarian/Alterglobalist 🕸
Music 🎵
🤡 I am scary according to some. 🤡
👅 *A guy trying stuff* 👅
https://twitter.com/SecureSh3ll
#CryptoJacker #China 🇨🇳
Wallet : 4B7vD4PrcGdES1grKPBH5jbsh4SgknSzkFFRHxWMqux7bJrieQoawCiFnd36wKTPtAUXJLeQBZWKRKza7qJaQscx2kCCrZo
Pool: c3pool
Total paid :
20,767746 #XMR == 3274,1 € == 3606,19 $
Wallet : 4B7vD4PrcGdES1grKPBH5jbsh4SgknSzkFFRHxWMqux7bJrieQoawCiFnd36wKTPtAUXJLeQBZWKRKza7qJaQscx2kCCrZo
Pool: c3pool
Total paid :
20,767746 #XMR == 3274,1 € == 3606,19 $
December 22, 2023 at 7:46 PM
#CryptoJacker #China 🇨🇳
Wallet : 4B7vD4PrcGdES1grKPBH5jbsh4SgknSzkFFRHxWMqux7bJrieQoawCiFnd36wKTPtAUXJLeQBZWKRKza7qJaQscx2kCCrZo
Pool: c3pool
Total paid :
20,767746 #XMR == 3274,1 € == 3606,19 $
Wallet : 4B7vD4PrcGdES1grKPBH5jbsh4SgknSzkFFRHxWMqux7bJrieQoawCiFnd36wKTPtAUXJLeQBZWKRKza7qJaQscx2kCCrZo
Pool: c3pool
Total paid :
20,767746 #XMR == 3274,1 € == 3606,19 $
That's good, but there's still a lot of work to do, my boy. 👁️
December 17, 2023 at 10:54 PM
That's good, but there's still a lot of work to do, my boy. 👁️
December 4, 2023 at 11:58 AM
Code name : Sokkyo
Launcher : 91.92.244.25/bins.sh
Last visible deployment date: Nov 26 03:08
But files nots avalaibles.
ip: 91.92.244.25
city: Amsterdam
region: North Holland
country: NL
loc: 52.3740,4.8897
org: AS394711 Limenet
Launcher : 91.92.244.25/bins.sh
Last visible deployment date: Nov 26 03:08
But files nots avalaibles.
ip: 91.92.244.25
city: Amsterdam
region: North Holland
country: NL
loc: 52.3740,4.8897
org: AS394711 Limenet
December 4, 2023 at 11:58 AM
Code name : Sokkyo
Launcher : 91.92.244.25/bins.sh
Last visible deployment date: Nov 26 03:08
But files nots avalaibles.
ip: 91.92.244.25
city: Amsterdam
region: North Holland
country: NL
loc: 52.3740,4.8897
org: AS394711 Limenet
Launcher : 91.92.244.25/bins.sh
Last visible deployment date: Nov 26 03:08
But files nots avalaibles.
ip: 91.92.244.25
city: Amsterdam
region: North Holland
country: NL
loc: 52.3740,4.8897
org: AS394711 Limenet
ip: 2.56.247.223
city: Paris
region: Île-de-France
country: FR
loc: 48.8637,2.2769
org: AS216167 Skoali SAS
postal: 75784 CEDEX 16
Hébergement de serveur de distribution de trojan.gafgyt/mirai
city: Paris
region: Île-de-France
country: FR
loc: 48.8637,2.2769
org: AS216167 Skoali SAS
postal: 75784 CEDEX 16
Hébergement de serveur de distribution de trojan.gafgyt/mirai
November 25, 2023 at 7:22 PM
ip: 2.56.247.223
city: Paris
region: Île-de-France
country: FR
loc: 48.8637,2.2769
org: AS216167 Skoali SAS
postal: 75784 CEDEX 16
Hébergement de serveur de distribution de trojan.gafgyt/mirai
city: Paris
region: Île-de-France
country: FR
loc: 48.8637,2.2769
org: AS216167 Skoali SAS
postal: 75784 CEDEX 16
Hébergement de serveur de distribution de trojan.gafgyt/mirai
Name : SolidCorp PBot v2.0
Malware : trojan.perl/shellbot
ip : 168.181.185.230
hostname : vps-3019526-x.dattaweb.com
city : Rosario / Santa Fe / 🇦🇷
org : AS27823 Dattatec/.com
See also : 168.181.185.230/archivos/
Url : 168.181.185.230/archivos/perl
Malware : trojan.perl/shellbot
ip : 168.181.185.230
hostname : vps-3019526-x.dattaweb.com
city : Rosario / Santa Fe / 🇦🇷
org : AS27823 Dattatec/.com
See also : 168.181.185.230/archivos/
Url : 168.181.185.230/archivos/perl
November 10, 2023 at 12:39 AM
Name : SolidCorp PBot v2.0
Malware : trojan.perl/shellbot
ip : 168.181.185.230
hostname : vps-3019526-x.dattaweb.com
city : Rosario / Santa Fe / 🇦🇷
org : AS27823 Dattatec/.com
See also : 168.181.185.230/archivos/
Url : 168.181.185.230/archivos/perl
Malware : trojan.perl/shellbot
ip : 168.181.185.230
hostname : vps-3019526-x.dattaweb.com
city : Rosario / Santa Fe / 🇦🇷
org : AS27823 Dattatec/.com
See also : 168.181.185.230/archivos/
Url : 168.181.185.230/archivos/perl
- aliases: #Unix.#Trojan.#DarkNexus ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, no section header
- Chrome: #hacktool.#portscan/ulxhm : ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, for GNU/Linux 2.6.24, stripped
- Chrome: #hacktool.#portscan/ulxhm : ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, for GNU/Linux 2.6.24, stripped
November 1, 2023 at 9:21 PM
- aliases: #Unix.#Trojan.#DarkNexus ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, no section header
- Chrome: #hacktool.#portscan/ulxhm : ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, for GNU/Linux 2.6.24, stripped
- Chrome: #hacktool.#portscan/ulxhm : ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, for GNU/Linux 2.6.24, stripped
" Savior by passion " 🤡
Domain : dinpasiune.com
ip: 91.92.247.224
city: Amsterdam
region: North Holland
country: NL
loc: 52.3740,4.8897
org: AS394711 Limenet
Actor : Roumanian 🇷🇴
Urls :
91.92.247.224/.x/Chrome
91.92.247.224/.x/aliases
Domain : dinpasiune.com
ip: 91.92.247.224
city: Amsterdam
region: North Holland
country: NL
loc: 52.3740,4.8897
org: AS394711 Limenet
Actor : Roumanian 🇷🇴
Urls :
91.92.247.224/.x/Chrome
91.92.247.224/.x/aliases
November 1, 2023 at 9:21 PM
" Savior by passion " 🤡
Domain : dinpasiune.com
ip: 91.92.247.224
city: Amsterdam
region: North Holland
country: NL
loc: 52.3740,4.8897
org: AS394711 Limenet
Actor : Roumanian 🇷🇴
Urls :
91.92.247.224/.x/Chrome
91.92.247.224/.x/aliases
Domain : dinpasiune.com
ip: 91.92.247.224
city: Amsterdam
region: North Holland
country: NL
loc: 52.3740,4.8897
org: AS394711 Limenet
Actor : Roumanian 🇷🇴
Urls :
91.92.247.224/.x/Chrome
91.92.247.224/.x/aliases
cat Succefully.txt
frenchflairesourcing.co.uk/wp-content/p...
recentresearchstudies.com/wp-content/p...
equaljusticetour.com/wp-content/p...
jayvarma.com/wp-content/p...
ninicniskogradnja.com/wp-content/p...
frenchflairesourcing.co.uk/wp-content/p...
recentresearchstudies.com/wp-content/p...
equaljusticetour.com/wp-content/p...
jayvarma.com/wp-content/p...
ninicniskogradnja.com/wp-content/p...
October 22, 2023 at 2:59 PM
Script looking for the following string :
"<pre align=center><form method=post>Password<br><input type=password name=pass style='...' required><input type=submit name='watching' value='submit' style='...'></form></pre>"
In : wp-content/plugins/WordPressCore/include.php
"<pre align=center><form method=post>Password<br><input type=password name=pass style='...' required><input type=submit name='watching' value='submit' style='...'></form></pre>"
In : wp-content/plugins/WordPressCore/include.php
October 22, 2023 at 2:58 PM
Script looking for the following string :
"<pre align=center><form method=post>Password<br><input type=password name=pass style='...' required><input type=submit name='watching' value='submit' style='...'></form></pre>"
In : wp-content/plugins/WordPressCore/include.php
"<pre align=center><form method=post>Password<br><input type=password name=pass style='...' required><input type=submit name='watching' value='submit' style='...'></form></pre>"
In : wp-content/plugins/WordPressCore/include.php
Sometimes it's hard not to want to troll. 🫠
October 15, 2023 at 4:21 PM
Sometimes it's hard not to want to troll. 🫠
Welcome on BlueSky @d9security.bsky.social
October 13, 2023 at 3:10 PM
Welcome on BlueSky @d9security.bsky.social
October 12, 2023 at 11:03 PM
dropper[.]sh : Shell script for multi-architecture botnet generation. ⚙️
October 8, 2023 at 10:08 PM
dropper[.]sh : Shell script for multi-architecture botnet generation. ⚙️
October 8, 2023 at 10:06 PM
Good night Nhật Phùng
City: Ho Chi Minh City
Region: Ho Chi Minh
Country: VN
loc: 10.8230,106.6296
Telegram: @\quannotj
Real Name : nhật phùng
Fb : nhatmrx.blue
City: Ho Chi Minh City
Region: Ho Chi Minh
Country: VN
loc: 10.8230,106.6296
Telegram: @\quannotj
Real Name : nhật phùng
Fb : nhatmrx.blue
October 8, 2023 at 10:05 PM
Good night Nhật Phùng
City: Ho Chi Minh City
Region: Ho Chi Minh
Country: VN
loc: 10.8230,106.6296
Telegram: @\quannotj
Real Name : nhật phùng
Fb : nhatmrx.blue
City: Ho Chi Minh City
Region: Ho Chi Minh
Country: VN
loc: 10.8230,106.6296
Telegram: @\quannotj
Real Name : nhật phùng
Fb : nhatmrx.blue