"The Bnet Axe"

AKA: Bunch of lamers who trojan people and call themselves hackers (already verified by disassembly/decrypted their "D2 Hacks").

Original website with "The Bnet Axe": http://www.zeropulse.net/Blaze/TheBnetAxe1.txt

Mirrored at: http://www.userloser.net/funny/DDW.txt

It might be worth the read, but you'll get stupider.

I read like one paragraph and stopped.

[quote]Op [vL] (USEast)
-------
Average age of members: 28
Number of members: Around 6-8
Lamest member of clan: They are all lame.
Clan type: Programming/Enthusiast

Description: These guys, and I'm not joking, are
actually very skilled in what they do. It's just
the fact that they have egos the size of the universe
that makes them lame. They try to become popular (which
they have achieved), and spend their whole lives
learning the "secrets" of Battle.net! They are
all hacker material, to tell you the truth; in fact,
many of them are hackers... just really, really lame
ones. Just imagine them as lame as RLoxely in
#hackphreak on irc.undernet.org. Lamers.

Their in/famous clan quote: [08:51:17 PM] <Spht@Lordaeron> firewall? wtf is
a firewall?[/quote]

.. lol

You all have been had.

That took me about 20 minutes to read...then it hurt so I stopped.

Cool, I'm featured twice.

I'm only listed once as a lamer :(

[quote]11. List of Lame Faggots
==================
Deca@USEast
Spht[vL]@USEast
Skywing[vL]@USEast
Op Exile@USWest
Feanor[xL]@USWest
UserLoser@USWest
LoRd[nK]@USWest
SNiFFeR[nK]@USEast
Denial@USEast
[/quote]

[quote]LoRd[nK]: LoRd[nK] did not invent the first flood bot, I did.
This bitch doesn't know jack shit about programing and hez so lame.
I let him claim to create the flood but becuz I was drunk or somthin
and now he claims to have made it. I hate him and I'll hack him for
fuckin *lieing. Another clan I founded was [nK], but this idiot kicked
me out of [nK] and ran off saying it was his clan with faggot sniffer.
Apparently they've been planning this the whole time, but guess what?
**I've got there IP address so if you want it ask me and i'll give you
it.[/quote]

*Can't even spell.
** Why hasn't he done anything about it then?

[quote] The 5 Lamest Clans
Clan PC (USWest)
Op Exile (USWest)
Op [vL] (USEast)
Op W@R (USEast)
Op Royalcouncil (USEast)
[/quote]

Rofl. These people are idiots.

I skimmed it an laughed a bit.

[quote]Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C\Documents and Settings\Inner>dir

Directory of C:\Documents and Settings\Inner


12/26/2004  01:05 AM    <DIR>          .
12/26/2004  01:05 AM    <DIR>          ..
01/11/2005  01:04 PM    <DIR>          Desktop
11/29/2004  03:40 PM    <DIR>          Favorites
12/29/2004  01:21 PM    <DIR>          My Documents
10/18/2004  01:19 AM    <DIR>          Start Menu
11/07/2004  10:15 AM    <DIR>          WINDOWS
              3 File(s)            985 bytes
              7 Dir(s)  45,233,357,824 bytes free

C:\Documents and Settings\Inner>cd Desktop
C:\Documents and Settings\Inner>echo HACKED BY BIGBOYSAM AND TW0P4CK!! > HACKED.txt[/quote]

Let's play the "How many things are wrong with that?" game
1. He has the "WINDOWS" folder in his home folder
2. They cd to "Desktop", but never arrive there according to the current directory
3. That echo doesn't work on Linux, because "!" are special characters.  Perhaps somebody could let me know if it works on Windows, I have nowhere to test.

And incidentally, the software that they used to "hack" is called "metasploit" -- www.metasploit.com -- it's basically a collection of canned hacks so that anybody can use them.  I played with them at work to test our Intrusion Prevention appliance, and literally they can be used by somebody who knows absolutely nothing about security/hacking.

Yes iago, It does work on windows command prompt.

Well, 1 and 2 are still valid points -- they edited it or invented it or something.

I would say invented it. Why would you edit it like that? If you want to leave something out to save space a normal person would put in a
...
or something.

They are bullshitters / script kiddies plain and simple. They do not even know how dos works.

[quote]
4. NeGa: This fucking faggot just pisses me off becuz he  and I
were internet dating and he broke up with me for some other
fuckin newbie. Ima tell you what don't internet date him cuz
he cheats on you and he is mean. Im going to hack him soon
and hes going to wish he never met me that fuckin faggot.
[/quote]

[quote]
9. KoRe[Vc]: This fat fuck is ugly as hell and claims to be sexy. You
should see his pic its so fuckin ugly i'm about to throw up lookin at
it. He trojanned me with his gay bot but he didn't really make the bot
cuz he hexed it. He can't really program all he can do is hex and trojan
people. I hate this script kiddie and hes fat as hell. We went out for
two years but then he dumped me for some bitch named Terra so I hate him
and i'll hack him too!
[/quote]
You've got to be kidding me.

HAHAHAHAH.

I've never seen such a lame, pathetic h0no rip off.

even if it is a joke. ;)

Internet dating is retarded.

Interesting points:

Real registration info?
http://www.dnsstuff.com/tools/whois.ch?ip=zeropulse.net&server=whois.enom.com&cache=off

Allowing directory browsing is bad:
http://zeropulse.net/

Somebody likes SphtBot
http://zeropulse.net/mute/Downloads/

This guy doesn't know it's 2005.  Check out the dates in News:
http://zeropulse.net/trick/

I find the file sizes in this directory interesting:
http://zeropulse.net/Blaze/D2%20Files/

They're retards if they allowed themselves to get trojanned numerous times...I learned my first time and it never happened again. And I knew when I got trojanned before the idiot could do anything.

[quote author=Thing link=topic=10185.msg95496#msg95496 date=1105973322]
I find the file sizes in this directory interesting:
http://zeropulse.net/Blaze/D2%20Files/
[/quote]

Hah, I didn't even notice that.  Being rar'd was annoying, I had to install Linuxrar, but eh, it was worth it:

[quote]iago@Slayer:~/downloads/viruses/tmp$ ~/clamav/bin/clamscan
/usr/local/home/iago/downloads/viruses/tmp/ALL D2JSP Scripts - Install.exe: Trojan.Prorat.O FOUND
/usr/local/home/iago/downloads/viruses/tmp/AutoHit.exe: Trojan.Prorat.O FOUND
/usr/local/home/iago/downloads/viruses/tmp/Autotele - Wizard Setup.exe: Trojan.Prorat.O FOUND
/usr/local/home/iago/downloads/viruses/tmp/Colour Game Spam - Wizard.exe: Trojan.Prorat.O FOUND
/usr/local/home/iago/downloads/viruses/tmp/Cracked D2JSP - Install.exe: Trojan.Prorat.O FOUND
/usr/local/home/iago/downloads/viruses/tmp/D2Mousepads Maphack v6.1 - Auto-setup.exe: Trojan.Prorat.O FOUND
/usr/local/home/iago/downloads/viruses/tmp/HC Hack.exe: Trojan.Prorat.O FOUND
/usr/local/home/iago/downloads/viruses/tmp/JHJ Anti-Detection No D2Loader - Setup.exe: Trojan.Prorat.O FOUND
/usr/local/home/iago/downloads/viruses/tmp/JHJ English - Install.exe: Trojan.Prorat.O FOUND
/usr/local/home/iago/downloads/viruses/tmp/MM.Bot - Install.exe: Trojan.Prorat.O FOUND
/usr/local/home/iago/downloads/viruses/tmp/PvP Buddy - Install.exe: Trojan.Prorat.O FOUND
/usr/local/home/iago/downloads/viruses/tmp/SpamBot - Wizard install.exe: Trojan.Prorat.O FOUND
/usr/local/home/iago/downloads/viruses/tmp/TPPK - Auto.exe: Trojan.Prorat.O FOUND
/usr/local/home/iago/downloads/viruses/tmp/WPPK - Auto.exe: Trojan.Prorat.O FOUND
/usr/local/home/iago/downloads/viruses/tmp/ZoiD's Pickit - No D2Loader Ver2.exe: Trojan.Prorat.O FOUND

----------- SCAN SUMMARY -----------
Known viruses: 28160
Scanned directories: 1
Scanned files: 15
Infected files: 15
Data scanned: 1.88 MB
I/O buffer size: 131072 bytes
Time: 0.683 sec (0 m 0 s)[/quote]

And for somebody who gave Spht and [vL] awards for being lame, it's funny how they use Spht's bot and other BNLS-based bots :)

they cant even spoke good11!!!

[quote author=Networks link=topic=10185.msg95498#msg95498 date=1105973657]
They're retards if they allowed themselves to get trojanned numerous times...I learned my first time and it never happened again. And I knew when I got trojanned before the idiot could do anything.
[/quote] I have had some of those DDOS clients on my machine in the past, but never a trojan. Even then I have not let it happen since.

I've never had either, woot I rock.

Those bots or whatever on trick's site don't appear to be safe (ReaperFlood & Account Validator). They're compressed using UPX compressor v1.29 or something (i don't remember, find latest one upx.sourceforge.net).  Also compiled to p-code it looks like (VB6)

Ouch, head hurting, too much l33t speak.  :-\

[quote author=UserLoser link=topic=10185.msg95594#msg95594 date=1106028114]
Those bots or whatever on trick's site don't appear to be safe (ReaperFlood & Account Validator). They're compressed using UPX compressor v1.29 or something (i don't remember, find latest one upx.sourceforge.net).  Also compiled to p-code it looks like (VB6)
[/quote]

Also my virus scanner picks them up as viruses.  That's a definate clue.

I tend to just open them in notepad and look for the API calls near the bottom.

[quote]
KERNEL32.DLL ADVAPI32.DLL AVICAP32.DLL COMCTL32.DLL GDI32.DLL OLE32.DLL OLEAUT32.DLL SHELL32.DLL URLMON.DLL USER32.DLL WINMM.DLL WINSPOOL.DRV WSOCK32.DLL  LoadLibraryA  GetProcAddress  ExitProcess  RegCloseKey  capCreateCaptureWindowA  ImageList_Add  BitBlt  IsEqualGUID  SysStringLen  ShellExecuteA  URLDownloadToFileA  GetDC  timeGetTime  ClosePrinter                 
[/quote]

I don't know of too many bots that need the printer and multimedia subsystems, much less BitBlt (system drawing routine), capCreateCaptureWindowA (video capture for webcams, I believe), and URLDownloadToFileA.  Even without a virus scanner, should be fairly obvious it's not to be trusted.

[quote author=TehUser link=topic=10185.msg95621#msg95621 date=1106061275]
I tend to just open them in notepad and look for the API calls near the bottom.

[quote]
KERNEL32.DLL ADVAPI32.DLL AVICAP32.DLL COMCTL32.DLL GDI32.DLL OLE32.DLL OLEAUT32.DLL SHELL32.DLL URLMON.DLL USER32.DLL WINMM.DLL WINSPOOL.DRV WSOCK32.DLL   LoadLibraryA  GetProcAddress  ExitProcess   RegCloseKey   capCreateCaptureWindowA   ImageList_Add   BitBlt  IsEqualGUID   SysStringLen  ShellExecuteA   URLDownloadToFileA  GetDC   timeGetTime   ClosePrinter                 
[/quote]

I don't know of too many bots that need the printer and multimedia subsystems, much less BitBlt (system drawing routine), capCreateCaptureWindowA (video capture for webcams, I believe), and URLDownloadToFileA.  Even without a virus scanner, should be fairly obvious it's not to be trusted.
[/quote]

Uhh, BitBlt makes perfect sense for a bot to have. It's one of those calls "everything" uses. For scrolling a window, drawing icons, etc.

Also, most apps want to use the printer subsystem, to be able to print things since that's one of the standard options on the file menu. Multimedia makes sense both for measuring time (pings etc) and for sounds played when connecting / disconnecting. Downloading an URL could be used for displaying a message of the day, checking for updates to the bot or similar. The only call there that is out of place really is capCreateCaptureWindowA.

Oh come on, after all of that, you couldn't come up with a reason to have video capture?  Maybe it's for posting video of the bot user to a web interface, since lots of bots have that along with the printing capabilities.  Nothing says cool like being able to print pictures of yourself using an awesome bot.

[quote author=iago link=topic=10185.msg95615#msg95615 date=1106051016]
[quote author=UserLoser link=topic=10185.msg95594#msg95594 date=1106028114]
Those bots or whatever on trick's site don't appear to be safe (ReaperFlood & Account Validator). They're compressed using UPX compressor v1.29 or something (i don't remember, find latest one upx.sourceforge.net). Also compiled to p-code it looks like (VB6)
[/quote]

Also my virus scanner picks them up as viruses. That's a definate clue.
[/quote]
What anti virus do you use? Mine doesn't pick up anything.

[quote author=Falcon[anti-yL] link=topic=10185.msg95670#msg95670 date=1106086200]
[quote author=iago link=topic=10185.msg95615#msg95615 date=1106051016]
[quote author=UserLoser link=topic=10185.msg95594#msg95594 date=1106028114]
Those bots or whatever on trick's site don't appear to be safe (ReaperFlood & Account Validator). They're compressed using UPX compressor v1.29 or something (i don't remember, find latest one upx.sourceforge.net). Also compiled to p-code it looks like (VB6)
[/quote]

Also my virus scanner picks them up as viruses. That's a definate clue.
[/quote]
What anti virus do you use? Mine doesn't pick up anything.
[/quote]

i had to unrar it first.  The .exe's are picked up by ClamAV, which is a free/opensource virus scanner. 

www.clamav.net

[quote author=TehUser link=topic=10185.msg95649#msg95649 date=1106071894]
Oh come on, after all of that, you couldn't come up with a reason to have video capture?  Maybe it's for posting video of the bot user to a web interface, since lots of bots have that along with the printing capabilities.  Nothing says cool like being able to print pictures of yourself using an awesome bot.
[/quote]

It's the one function I have never seen a bot that would use. All the other things I have seen in bots. Real, good bots.

I made the list!  Oh yes.  I'm famous.

[quote author=LoRd[nK] link=topic=10185.msg95997#msg95997 date=1106313484]
I made the list!  Oh yes.  I'm famous.
[/quote]

You're both famous and infamous?!

WHAT. I'm not mentioned.

Too bad yoni, I made it and they apparently hacked me..Some bnet kid came to me and went crazy with leet speak talking about how i should give up because bnet axe owns me..

[quote author=Yoni link=topic=10185.msg96100#msg96100 date=1106369337]
WHAT. I'm not mentioned.
[/quote]

I know the feeling :(

But they did mention [vL], so I guess we're mentioned, like, indirectly.

It must be because you are so likeable Yoni and iago.

[quote author=Blaze - S-1-0-0 link=topic=10185.msg96139#msg96139 date=1106413978]
It must be because you are so likeable Yoni and iago.
[/quote]
He has a point... I love you guys (In a brotherly sort of way)  :D

[quote]2. tw0p4ck: This dude is awesome he taught me how to hack and
I've known him since 1998. He is a expert hacker and hes better
than me cuz he hacked more people than me. I'd like to tell you
that this dude should be counted as one of the best hackers cuz
hes helped so much and he taught me how to program. I just have
to say I LOVE YOU tw0p4ck.[/quote]

[quote]Handle: tw0p4ck
Sex: Male
Age: 10
Hobbies: Hacking, fucking bitches, hacking, fucking bitches,
butt fucking, oral sex, pooping, laughing, guitar,
talking, typing, computer, and masturbating.
Birthdate: 12/15/95
Sexual Preference: I dunno.[/quote]
He's a h@x0r since birth!

Shouldn't he be 9?

Yes, yes he should be.

And If your getting thought things by a nine year old, you should be slapped. Especially when your 21.

How can his hobbies be fucking bitches if he has not hit puberty?

Also, why would I want a wanna be hacker teaching me how to program? Because you know some basic vb does not make you a hacker.

oh man that is halarious..

i get a kick out of how he mentions he likes playing with little kids, and he was taught how to hack by a 3 year old that likes butt sex

they both admit they are flaming homosexuals but insult everyone else by calling them ph4gg075

if thats not a joke those are 2 people who need serious mental help

also they left me out too (im actually ok with that)