I used simple reversing to find the certificate. As reported by others, program is packed and self-encrypted (like typical adware/malware). The proper way to reverse engineer this is to run the software in a debugger (or IDApro), setting break point right after it decrypts itself. The goal is to set the right break point before it actually infects your machine -- reversers have been known to infect themselves this way.
The ghetto way is to just to run this on a machine, infecting yourself, and run "procdump" (by @markrussinovich) in order to dump the process's memory. That's what I did, by running the following command:
procdump -ma VisualDiscovery.exe super.dmp
The proper reversing is to actually tear apart the memory structures, such as using VisualStudio:
The ghetto reversing is to run strings. This is an ancient (mid-1980s) program that simply extracts human readable strings out of a binary file, discarding the rest. It's really a stupid simple program.
The ghetto reversing is to run strings. This is an ancient (mid-1980s) program that simply extracts human readable strings out of a binary file, discarding the rest. It's really a stupid simple program.
strings super.dmp > super.txt
At that point, I load the file super.txt into a text editor and searched for the string "PRIVATE KEY". Sure enough, it popped right up. It's actually located several times in the memory dump.
At this point, I copied/pasted the certificate into a file super.pem. I then attempted to look at it using OpenSSL. However, I was presented with a password prompt. This file has been encrypted with a password.
Okay, that's annoying, but that just means we need to crack the password. However, I can't find a password cracker on the Internet that handles SSL PEM files, so I wrote my own certificate password cracker. It's pretty bad, using the OpenSSL decrypt API in a single thread, so it's not pretty. But it's sufficient for my needs.
The encryption is actually pretty good, meaning I can only do a couple hundred guesses per second. This means that there is no chance of brute-forcing any password longer than 5 characters (brute-force means to try all possible combinations), it'd take billions of years. Instead, I want to do a dictionary attack. This is where I load a file of common words and test them one-by-one to see if they work.
I tried the small dictionary john.dict that comes with John-the-Ripper, and it didn't find anything. But of course, I don't need a real dictionary. The password is probably also in the clear in the memory dump. I could just use the file super.txt as my dictionary! I tried this, but it was taking a long time, with 150k unique lines of text. It'd take many hours to complete. To speed things up, I filtered the list for just lower-case words
grep "^[a-z]*$" super.txt | sort | uniq > super.dict
This leaves a dictionary of only 2203 words. I ran my cracking tool, and found the password in 10 seconds, "komodia".
Armed with this password, I continued where I left off with the openssl command-line tool and successfully decoded the certificate. I can now use this to Man-in-the-Middle people with Lenovo desktops (in theory, I haven't tried it yet).
Note that the password "komodia" is suggestive -- that's a company that makes an SSL "redirector" for doing exactly the sort of interception that SuperFish is doing. They market it as security software so you can spy on your kids, and stuff. A description of this component, their "SSL Digester", is here. They market it for "ad injection" here. That site teaches us a lot about what SuperFish can do.
(BTW, thanks to @chigley101 for linking a download of the software. Also note that @supersat and @paul_pearce found the password before I did, though as far as I know they haven't published it. Note that it's Chris Palmer (@fugueish) that first noticed the implications of these certificates).
(BTW, thanks to @chigley101 for linking a download of the software. Also note that @supersat and @paul_pearce found the password before I did, though as far as I know they haven't published it. Note that it's Chris Palmer (@fugueish) that first noticed the implications of these certificates).
I strongly suspect Komodia's Redirector shares the exact same certificate.
ReplyDeleteYes, I have very little faith left in mankind, why ask ?
That regexp looks like a good way to make your dictionnary very small. Very very small.
ReplyDeleteOops, Nicolas, I forget the splat :) Fixing now...
ReplyDeleteNice job, dude!
ReplyDeleteNice hack. Perhaps don't say 'ghetto' so much.
ReplyDelete"The password is probably also in the clear in the memory dump."
ReplyDeleteWhy/how would the password be in the memory dump?
@Matthew Aho - to some extent it depends on how lazy the authors were. even just base64 encoding of the password would have hidden it from strings!
ReplyDeleteThe userify enterprise binary has an easter egg visible only from strings :)
Nice work! Congrats! -:)'
ReplyDeleteThis comment has been removed by the author.
ReplyDeleteThe password needs to be available to the software in order for it to sign certificates with the private key. It could be somewhat obfuscated, but there's really nothing the authors could do to prevent someone with moderate reverse engineering skills from learning it fairly quickly.
DeleteThe password needs to be available to the software in order for it to sign certificates with the private key. It could be somewhat obfuscated, but there's really nothing the authors could do to prevent someone with moderate reverse engineering skills from learning it fairly quickly.
Delete> [strings] is really a stupid simple program.
ReplyDeletehttp://lcamtuf.blogspot.fi/2014/10/psa-dont-run-strings-on-untrusted-files.html
Sooo.... the passphrase was all lower-case, the name of the company that made it.
ReplyDeleteIt wasn't some random long string of characters. It wasn't the name of the CEO's first pet dog. It wasn't even "Komodia123".
Let that sink in a moment. The creators of this system were so amazingly incompetent, I'm honestly surprised it works at all.
Liked your post - particularly that you shared your approach / thought processes. Thank you.
ReplyDeleteHow come the password was in the file though ?
ReplyDeleteIt's a bad practice that lead you to find it, am I right ?
Is this detectable on the server end by looking at the signature of the client certificate? It would be great for websites to block or warn people running this software.
ReplyDeleteGood job! I do not understand why the password was stored in cleartext in memory. I mean if they went through the trouble of hiding a malware deep within the hardware, why did they store the password in plaintext in memory?
ReplyDeleteBecause everybody works under time pressure with teams that have knowledge gaps.
DeleteBecause everybody works under time pressure with teams that have knowledge gaps.
DeleteThis comment has been removed by the author.
ReplyDeleteI have to ask, but couldn't they generate the SSL certificate upon install. Such that each install of the program has a unique certificate.
ReplyDeleteThen the cert would be useless for man in the middle attacks.
That's what Avast does when it does man-in-the-middle attacks on SSL. I don't like that happening either, but at least its not as awful as this crapware!
ReplyDeleteAnyone up for decoding the cert used by GoGo Inflight WiFi Service? https://www.techdirt.com/articles/20150105/09344429597/gogo-inflight-wifi-service-goes-man-in-the-middle-issues-fake-google-ssl-certificates.shtml
ReplyDelete"The consequence is that I can intercept the encrypted communications of SuperFish's victims (people with Lenovo laptops) while hanging out near them at a cafe wifi hotspot."
ReplyDeleteHow? By just passively reading and decrypting or by providing a MITM proxy that uses that certificate yourself?
The first case would mean that the connections between the infected laptops and "the internet" already use that key, i.e. the superfish https MITM proxy is somewhere in the internet. Why would they even need the private key in the software then?
If their MITM proxy runs on the infected machines then the connections to the actual websites should use the real certificates - and you'd have to run your own MITM proxy, so just passive snooping wouldn't be enough.
(Not that running such a proxy is very hard...)
Just wondering, I haven't read much about the technical details of superfish yet :-)
The problem is manyfold:
Delete- The SuperFish Proxy *doesn't* do SSL validation for the endpoint certs (the ones from the site). Someone infected with SuperFish can be tricked into entering a site using a selfsigned cert and the user wouldn't even know about this.
- If you removed/disabled the SuperFish proxy, you still have the SuperFish CA in your trusted certstore. Someone can pose as Google, Bank of America, whatever.
Any of these things can easily happen if you are using public wifi hotspots, as it is common for some to set up "free hotspots" that actually do MITM attacks if they can.
I've posted a PowerShell script to detect and remove this certificate over on Reddit.
ReplyDeleteIf they "hide" the password on the binary in plain text, they should at least use something like "m cannot be run in D" as password, as half-jokingly suggested at http://stackoverflow.com/a/5316925/371250. At least the reverser will have some good laughs.
ReplyDeleteWhat about searching for prime factors traversing the memory dump? Probably there's binary unencrypted RSA private key somewhere into RAM
ReplyDeleteIf you are a web site owner, this can impact you as well. A few of our customers were having problems but we found a simple fix:
ReplyDeletehttp://glipdev.github.io/disable-superfish-on-your-site.html
not that it matters, but there is already a shitty pkcs8 wordlister out there: https://raw.githubusercontent.com/xenocons/pkcs8-wordlist/master/main.c i used this with your wordlist and it wordlisted the password in <4 seconds on debian 1GB ram VM.
ReplyDelete@Peter Pezaris:
ReplyDeleteSorry, but just working around the problem with a tag was (and is) irresponsible.
It basically makes it harder for someone to notice that his PC is infected.
Glip should have made the problem public back then.
Ideally they would have tried to detect if the superfish JS was injected and warn affected users that they seem to be "infected" with "superfish" and should get rid of it.
I don't know 100% if that's possible from the JS-side, though (I'm not a web developer), but https://filippo.io/Badfish/ has found a way to test it by trying to load an image from a https server that uses a certificate signed by the SuperFish certificate.
So now that a way to detect superfish is known, one *really* shouldn't try to work around it (so your costumers think they have a working machine), but either try to detect superfish and display a warning, or at least do nothing so that the user hopefully notices that something is wrong and that he may have a malware problem.
By the way, this tag will *not* make superfish go away or anything, the traffic still is intercepted by them, the only difference is that their javascript (to show their ads) is not executed anymore.
Is it not that Komodia is a MIM tool which executes in memory of a workstation, between the network interface and the browser? So the traffic between the workstations NIC and the web server is still encrypted with the domain SSL certificate. Then Komodia acts like a browser, using the public key to decrypt the content for instpection. To fool the browser, it re-encrypts the content again with it's own certificate so the browser won't show a warning to the user.
ReplyDeleteI believe that it will not be possible to snoop https traffic in an internet cafe just because you have the komodia certificate. You'd have to be breaking into the computer and hook in between komodia and the browser.
Doesn't this violate the DMCA terms of attempting to thwart someone's encryption scheme? I'm not talking about the Extracting the key, I'm talking about the MITM attack.
ReplyDeleteSeems like the company that sells such SW should be in violation and subject to prosecution.
Lenovo would at least be on the hook as an accessory in that case.
Lenovo just bought MOTOROLA company, They are in a plan to spy whole users including mobile phone users.Lenovo Chinese Company want to spy Every American.Sad but Truth :(
ReplyDelete@Matt: Even if that were true, it would still be a very bad thing. Lenovo / Superfish / Komodia would be installing software with the capability to read every bit of encrypted web traffic from a customer's computer (credentials, banking information, etc.) They have no business doing that, for ANY reason. Any vendor who feels they can or should do this, can fuck off.
ReplyDeleteHowever, this situation is worse. Not only were they malicious, they were incompetent. By installing the same root certificate and key pair (easily stolen) on every computer, now anyone who wants to put in about 60 seconds of effort can forge a trusted SSL certificate for any website on the planet. They can execute MITM attacks against these vulnerable computers and steal all of the same information, without needing to run any malicious code on the vulnerable PC itself. (Lenovo, Superfish and Komodia have taken care of installing the malicious code already; thanks!) These MITM attacks would be tricky to detect; there could be nothing alarming about the site at first glance, unless you went out of your way to examine the SSL certificate and saw that it was issued by Superfish, Inc instead of some trusted, established CA.
This comment has been removed by the author.
ReplyDelete> I have to ask, but couldn't they generate the SSL certificate upon install.
ReplyDeleteThey cant. Windows does not allow software to add certificates to the Windows certificate store without prompting the user. The operation occurs in isolated code, isolated in the same way that passwords prompts are isolated.
The only way they can get the extra certificate into the certificate store without prompting a user is to pre-install it on the factory image.
I missed something ? If the private key was used to sign the traffic in MitM software, why it has to be bruteforced ?
ReplyDeleteActually it is the great and helpful post on blogging. Thanks for sharing.
ReplyDeletewww.update29.com
Good article. One that provides technical details instead of lot of Superfish articles out there with scary messages.
ReplyDeleteIf I understand correctly, Lenovo is installing a https proxy to intercept traffic (vs common proxies you find in enterprises that use http CONNECT verb to proxy https traffic). The proxy is creating self signed certs for every https site the browser is visiting, but signed by the root CA inside the proxy. The browser’s root cert store is updated with proxy’s root CA chain. But the proxy still communicates to destination over https doing usual https validations (like checking for self-signed certs vs Verisign signed ones etc).
I don’t think someone out there in the wild can decrypt data even if they have root CA private key as the proxy to destination site is https session which is protected by destination site’s private/public key pair. I saw articles claiming that they could decrypt https traffic if they are at a Cafe by having the root CA. But how?
The https traffic that gets affected by this proxy is the one from browser to localhost:proxy port. It beats me how someone outside the box can sniff that traffic.
Am I missing something here?
But someone out there can create a site that looks like say bankofamerica.com site with self signed cert signed by above root CA and start a phishing attack. If a customer with the Superfish software press that link and go to that site, the browser won’t warn that it is a phishing site.
This is far fetched and the impact is lot less than what most of the Superfish articles are portraying. Neverthless it is a bad business decision by Lenovo to install something like this at factory. I bet they will have a challenge selling into enterprises with the -ve press that this caused.
A super article.
ReplyDeleteTwo references in the article, labeled, [i]here[/i] are not available now possibly due to a DDOS attack happening as I write.
No prob!. The Products tab at this archived Komodia page [i]https://web.archive.org/web/20141221102728/http://www.komodia.com/[/i] takes you to the first reference, for [b]SSL Digestor[b/] (note this is the "correct" spelling in that it matches the web site, although it is only correctly [English usage].
The description of the [b]Ad Injector[/b] is also reachable from this tab. The Ad Injector product is interesting to me as it gives the mechanism for Javascript injection that can co-exist with global proxy injection.
For example, There is a call to the .exe with install flags, and it can intercept a browser, then inspect it using the DLL or COM framework and decide to inject Javascript or a HTML component.
I'm here to let the whole world know how i got my husband back through the help of a spell caster called Dr. Ekpen Temple, it all started one morning when my husband and I have an argument and he angrily left and said to me that he is no longer coming back to me, at first i thought it was a normal joke, two weeks passed i did hear from him until it became 1 year i still did not hear from him it was then i started looking for how i can get him back (because i love him so much that i don't want to loss him for someone else) is was then i heard about Dr. Ekpen Temple the spell caster on the internet on how he has help so many people in there are relationship so i contacted him, to cut the long story short my husband came back to me and we celebrated the last Christmas and New year together. you can contact Dr. Ekpen Temple on: (((EKPENTEMPLE@gmail. com))) or you can call him on +2347050270218 for help today.
ReplyDeleteToday we are introducing Independent Test And Tag, a new simplified interface and additional support for Test And Tag templates.
ReplyDeleteIf you are already using Google Tag Manager you can try the new features by upgrading your account.
Test and Tag
Hi everyone act there.. my name is MULLAR SHARRON i am from germany. i will never forget the help DR.TRUST render to me in my marital life. i have been married for 5 years now and my husband and i love each other very dearly and deeply. after 3 years of our marriage my husband suddenly change he was having an affair with a lady outside,i praying for divine intervention the thing became more serious.my husband just came home one day he pick up his things and left me and the kids to his mistress outside. i was confuse and i did not no what to do at first. i was searching for help in the internet, i saw so many people sharing testimony on how dr.trust help them with their relationship problem. i email him and tell him how my husband left me. And he assure me that my husband will be back home within the next 48 hours .To my greatest surprise my husband came home on his knees that i should find a place in my heart to forgive him,i was truly astonished and shocked when my husband knelt down begging for forgiveness and for me to accept him back.. I am really short of expressions, and i don't know how much to convey my appreciation to you dr. trust you are a God sent to restore broken relationship. And now i am a joyful woman.Email: (ULTIMATESPELLCAST@GMAIL.COM OR ULTIMATESPELLCAST@YAHOO.COM) tel +2348156885231
ReplyDeleteHi everyone act there.. my name is MULLAR SHARRON i am from germany. i will never forget the help DR.TRUST render to me in my marital life. i have been married for 5 years now and my husband and i love each other very dearly and deeply. after 3 years of our marriage my husband suddenly change he was having an affair with a lady outside,i praying for divine intervention the thing became more serious.my husband just came home one day he pick up his things and left me and the kids to his mistress outside. i was confuse and i did not no what to do at first. i was searching for help in the internet, i saw so many people sharing testimony on how dr.trust help them with their relationship problem. i email him and tell him how my husband left me. And he assure me that my husband will be back home within the next 48 hours .To my greatest surprise my husband came home on his knees that i should find a place in my heart to forgive him,i was truly astonished and shocked when my husband knelt down begging for forgiveness and for me to accept him back.. I am really short of expressions, and i don't know how much to convey my appreciation to you dr. trust you are a God sent to restore broken relationship. And now i am a joyful woman.Email: (ULTIMATESPELLCAST@GMAIL.COM OR ULTIMATESPELLCAST@YAHOO.COM) tel +2348156885231
ReplyDeleteMy God!!! this is abxolutely unbelievable,i am just short of words that i dont even know how start,is this really frank?that was the first thought that came into my head after seeing my beloved husband that enjoys cheating on me and telling me his hookers tastes better that me...before steph(a close friend) introduced me to dr bada,my life was in shambles,i really dont know where to start from,My name is eliana and me and my husband have been happily married for 5 years and we are blessed with a lovely daughter lisa,after seeing him abandone us for almost 4 months including moving out of the house,i could no longer cope so i decided to tell steph about my marital issues and so the good testimonies started,she told me to calm down and that i will soon be smiling although i didnt really believe her but i kept the faith and so she introduced me to dr bada who truly brought smile back on my face,,after seeing dr bada himself,he told me to provide some informations about me and my husband and after that he asked me to go home and wait,,it seem so simple and straight that i hardly believed but i still kept the faith,he told me that after two days and my husband does not come crawling at my feet that i should call the cops and all this happened on a tuesday and so i kept the faith,wednesday came and went,and by thursday morning i did as usual and went to my place of work still having the faith and a little believe and when i got to work,it was business as usual and suddenly i saw my husband come inside my office with tears flowing down his cheek,i was so surprised and ashamed in front of my co workers that i didnt know what to do,low and behold,my beloved frank moved back into the house and apologised to me and lisa and since then weve been one big happy family,i really dont know what i would have done without my friend steph who introduced me to dr bada and the great doctor himself who brought laughter and happiness back into my home,,i am so grateful and happy that i decided to share this great testimony.Just try him and you will never regret,dr bada lives and works in the united states and he can surely bring back broken relationships.this are his contacts THEGREATBADA@GMAIL.COM OR YOU CAN CALL HIM ON (470)3776791
ReplyDelete
ReplyDeleteFor the past 3 months now I have been looking for good and geniue spell to bring back my ex lover back and also help me to win lottery. and it has been a hard time for me finding the right place until I get in contact with Dr Trust who gave me powerful prayer and assured me that it will take two days before the spell will be effective, truly 2 days later, my Ex Lover rang me, i answered the call, he started apologizing, we are together Now. Thank you for making her to know that we are meet to be together and also making my dreams come true. And he did a spell that make me to win lottery. Please if any body needs LOVE SPELL,LOTTERY,PRENANCY SPELL, DIVORCE SPELL, GET YOUR PARTNER. BACK AND MANY MORE YOU MAKE NEED. Email him now for your own help. Ultimatespellcast@yahoo.com or Ultimatespellcast@gmail.com call him +2348156885231 All thanks goes to DR.Trust for the excessive work that he has done for me.
ReplyDeleteFor the past 3 months now I have been looking for good and geniue spell to bring back my ex lover back and also help me to win lottery. and it has been a hard time for me finding the right place until I get in contact with Dr Trust who gave me powerful prayer and assured me that it will take two days before the spell will be effective, truly 2 days later, my Ex Lover rang me, i answered the call, he started apologizing, we are together Now. Thank you for making her to know that we are meet to be together and also making my dreams come true. And he did a spell that make me to win lottery. Please if any body needs LOVE SPELL,LOTTERY,PRENANCY SPELL, DIVORCE SPELL, GET YOUR PARTNER. BACK AND MANY MORE YOU MAKE NEED. Email him now for your own help. Ultimatespellcast@yahoo.com or Ultimatespellcast@gmail.com call him +2348156885231 All thanks goes to DR.Trust for the excessive work that he has done for me.
They could have used a RSA whitebox to sign those fake certificates. It would have been way harder to reverse it.
ReplyDeleteI am KATHY by name. Greetings to every one that is reading this testimony. I have been rejected by my husband after three(3) years of marriage just because another woman had a spell on him and he left me and the kid to suffer. one day when i was reading through the web, i saw a post on how this spell caster on this address Reunitingexspell@gmail.com , have help a woman to get back her husband and i gave him a reply to his address and he told me that a woman had a spell on my husband and he told me that he will help me and after 2 days that i will have my husband back. i believed him and today i am glad to let you all know that this spell caster have the power to bring lovers back. because i am now happy with my husband. Thanks for Dr.MAGBU. His email: Reunitingexspell@gmail.com
ReplyDeleteMy name is Lizzy Desler, i am from US I live in Indiana, US, I have been married for over 8years and no issue(baby) to show for it, i and my husband have gone to different places for help for me to get pregnant, but all our efforts
ReplyDeletewhere fruitless. My husband became tired of me and started accusing me of the cause of our problem. I tried to make him believe that I don't know why I cannot get pregnant. But as a
man he pays deaf ears to my words. It came to a time when he gave me an ultimatum to leave his house. I became more crazy and restless. I search for help including where there is no help. My husband finally sent me packing after 8years of our marriage. when I was in my parents house I was still searching for a solution until I met an old school friend whom gave me the contact of this Great Spell Caster pristbabalalokpe, she said he saved her marriage too. I contacted him for help. He told me that it is never too late that I will need two spell in one. Which means an ex back spell and a fertility spell. He actually cast a spell for me after 48hours of his spell; my husband came to my parents? house looking for me. We got back together again. That made me so happy. Still with his fertility spell, I became pregnant after 2months of his spell. What a powerful man. I am the happiest person on earth. If you need any help, I recommend this great man to you, I am so sure he will help you the way he helped me. E-mail: pristbabalalokpe@gmail.com or +2348079125378
Hello everyone my mouth is full of testimony i will not had believe a spell caster in my life until i was help by Dr OJEFOR I have been married for 5years and on the fifth year of my marriage, another woman had a spell to take my lover away from me and my husband left me and the kids and we have suffered for 1years until i meet a post where this man Dr OJEFOR have helped someone and i decided to give him a try to help me bring my lover Husband home and believe me i just send my picture to him and that of my husband and after 48hours as he have told me, i saw a car drove into the house and behold it was my husband and he have come to me and the kids and that is why i am happy to make every one of you in similar to met with this man and have your lover back to your self. His email: DROJEFORSPELLCASTER@GMAIL.COM
ReplyDeleteEmail: DROJEFORSPELLCASTER@GMAIL.COM is the only answer. He can be of great help and I will not stop publishing him because he is a wonderful man.....
he can solve the following......
(1) If you want your ex back.
(2) if you always have bad dreams.
(3) You want to be promoted in your office.
(4) You want women/men to run after you.
(5) If you want a child.
(6) You want to be rich.
(7) You want to tie your husband/wife to be
yours forever.
(8) If you need financial assistance.
(9) Herbal care
(10) If you can be able to satisfy your wife
sex desire due
to low erraction.
Hello everyone my mouth is full of testimony i will not had believe a spell caster in my life until i was help by Dr OJEFOR I have been married for 5years and on the fifth year of my marriage, another woman had a spell to take my lover away from me and my husband left me and the kids and we have suffered for 1years until i meet a post where this man Dr OJEFOR have helped someone and i decided to give him a try to help me bring my lover Husband home and believe me i just send my picture to him and that of my husband and after 48hours as he have told me, i saw a car drove into the house and behold it was my husband and he have come to me and the kids and that is why i am happy to make every one of you in similar to met with this man and have your lover back to your self. His email: DROJEFORSPELLCASTER@GMAIL.COM
ReplyDeleteEmail: DROJEFORSPELLCASTER@GMAIL.COM is the only answer. He can be of great help and I will not stop publishing him because he is a wonderful man.....
he can solve the following......
(1) If you want your ex back.
(2) if you always have bad dreams.
(3) You want to be promoted in your office.
(4) You want women/men to run after you.
(5) If you want a child.
(6) You want to be rich.
(7) You want to tie your husband/wife to be
yours forever.
(8) If you need financial assistance.
(9) Herbal care
(10) If you can be able to satisfy your wife
sex desire due
to low erraction.
Hello Everyone My name is flavie zackary am from UK , I have been married for over 7years and no issue(baby) to show for it, I and my husband have gone to different places for help for me to get pregnant, but all our efforts where fruitless. My husband became tired of me and started accusing me of the cause of our problem. I tried to make him believe that I don’t know why I cannot get pregnant. But as a man he pays deaf ears to my words. It came to a time when he gave me an ultimatum to leave his house. I became more crazy and restless. I search for help including where there is no help. My husband finally sent me packing after 7years of our marriage. when I was in my parents’ house I was still searching for a solution until I met an old school friend whom gave me the contact of this spell caster Dr Ogba, she said he saved her marriage too. I contacted him for help. He told me that it is never too late that I will need two spell in one. Which means an ex back spell and a fertility spell. He actually cast a spell for me after 48hours of his spell; my husband came to my parents’ house looking for me pleading for forgiveness and i forgive him . We got back together again. That made me so happy. Still with his fertility spell, I became pregnant after 2months of his spell. What a powerful great man. I am the happiest person on earth. If you need any help I recommend this great man to you, I am so sure he will help you the way he helped me. contact him on his mail ogbapaullovespellcaster1@gmail.com or +2348116144331......
ReplyDeletei want to say a very big thank you to this great spell caster call alexanda for putting a big smile on my face by bringing my ex back to me and for making me pregrant which made my ex to leave me once again thank you alexanda incase you are out there you are having an issue with your ex or you want to get your ex back or you are having miscarriage or you want to get pregrant you can contact this great man for help through his email @ alexandathegreat@yahoo.com
ReplyDeleteAnderson is my name, there is indeed no GLORY without a story. Beloved, i am so overwhelmed that i scaled
ReplyDeletethrough the huddles of life. this won't have been
possible without a wonderful person i met in my life,
whom was introduced to me. in person of High Priest Otigbolor. With all sincerity and a glad heart, i want to say thank you for making my failed marriage work again, my husband is now back and we are living happily like never before. my entire life has been a testimony since i came in contact with you, i am not good in typing i would have typed all that happened and how High Priest Otigbolor stepped in. He stepped in and he calmed the storm in my life. High Priest Otigbolor can calm your storm too. he is one in town and so good to be true. contact him for any difficulty or problems
whatsoever on highpriestotigbolor66@gmail.com he is more that willing to attend to your need and make sure you get a solution and testimony. He has been tested and trusted.
I honestly thought that my marriage was healthy. i loved my husband with all my heart. we was married 8 years and have a 3 yr old son. we bought a house 2 months ago. i told him i was pregnant…then he starting acting strange. he didn't want me to keep the baby. one day i decided to tell him i could not go through with not having the baby (about 2 months pregnant), then he tells me he doesn't love me anymore. 2 days later he tells me he cheated on me and wants a divorce. he has since (2 weeks) been really cruel, cussed at me, told me he was going to file kidnapping on me, and has generally acted like i am a doormat. the other woman even contacted me and told me she is going to be my children's stepmother. i know that the affair was not very long because he met her 3 months ago. i don't know what has happened to my husband. i cannot eat or sleep and only have a sister with minimal finances. i completely alone and scared. i needed help because i don't know what to do. he filed for a divorce with a lawyer. so 3 days later a friend told me about a spell caster prophet.chasus@yahoo.com, i contacted him and told him my problem and what i wanted and after 3 days he brought my husband back and made my husband a changed man, he is now a good man.
ReplyDeleteGREAT OKPA!!! You have done it again, you have showed me your powers which i have been hearing from different people, but now am talking out of experience, Dr okpa you are the greatest spell caster that i believed that is existing cause you brought back my lover who left me since 2011 within 24 hours, Sir you are the greatest, thanks for your great work in my life, and i will live to remember you cause you put a smile on my face by making my dream to come to past, thank you once again sir. My friends out there who needs help, i will advice you contact dr okpa for help cause he is a great man that everliving, here is dr okpa's email: okpatempleofsolution@gmail.com or cell number +2348056563186.
ReplyDeleteJack smith from USA..
ReplyDeleteTHANKS TO DR BENEDICT FOR SOLVING MY PROBLEMS
An amazing testimony on a spell caster who brought my wife back to me.. My name is Andy Sowers,i live in Australia,and I'm happily married to a lovely and caring wife,with two kids.A very big problem occurred in my family seven months ago,between me and my wife.so terrible that she took the case to court for a divorce.she said that she never wanted to stay with me again,and that she didn't love me anymore.So she packed out of my house and made me and my children passed through severe pain. I tried all my possible means to get her back,after much begging,but all to no avail.and she confirmed it that she has made her decision,and she never wanted to see me again. So on one evening,as i was coming back from work,i met an old friend of mine who asked of my wife.So i explained every thing to her,so she told me that the only way i can get my wife back,is to visit a spell caster,because it has really worked for her too.So i never believed in spell,but i had no other choice,than to follow her advice. Then she gave me the email address of the spell caster whom she visited.{benedictsolutioncentre@gmail.com}. So the next morning,i sent a mail to the address she gave to me,and the spell caster assured me that i will get my wife back the next day.What an amazing statement!! I never believed,so he spoke with me,and told me everything that i need to do. Then the next morning, So surprisingly, my wife who didn't call me for the past seven {7}months,gave me a call to inform me that she was coming back.So Amazing!! So that was how she came back that same day,with lots of love and joy,and she apologized for her mistake,and for the pain she caused me and my children. Then from that day,our relationship was now stronger than how it were before,by the help of a spell caster DR benedict. So.
So,if you are in a similar problem or any kind of problems you can also contact him via his email(benedictsolutioncentre@gmail.com}he is the solution to all your problems and predicaments in life.his email again is{benedictsolutioncentre@gmail.com}.
HE ALSO SPECIALIZE IN THE THE FOLLOWING PROBLEMS;
(1) If you want your ex back.
(2) If you want to be promoted in your office.
(3) If you want a child.
(4) If you want to be rich.
(5) if you have any sickness like ( H I V/AIDS ),(CANCER) or any sickness.
once again make sure you contact him if you have any problem he will help you. his email address is(benedictsolutioncentre@gmail.com}
ReplyDeleteTHANKS TO DR BENEDICT FOR SOLVING MY PROBLEMS
An amazing testimony on a spell caster who brought my wife back to me.. My name is Andy Sowers,i live in Australia,and I'm happily married to a lovely and caring wife,with two kids.A very big problem occurred in my family seven months ago,between me and my wife.so terrible that she took the case to court for a divorce.she said that she never wanted to stay with me again,and that she didn't love me anymore.So she packed out of my house and made me and my children passed through severe pain. I tried all my possible means to get her back,after much begging,but all to no avail.and she confirmed it that she has made her decision,and she never wanted to see me again. So on one evening,as i was coming back from work,i met an old friend of mine who asked of my wife.So i explained every thing to her,so she told me that the only way i can get my wife back,is to visit a spell caster,because it has really worked for her too.So i never believed in spell,but i had no other choice,than to follow her advice. Then she gave me the email address of the spell caster whom she visited.{benedictsolutioncentre@gmail.com}. So the next morning,i sent a mail to the address she gave to me,and the spell caster assured me that i will get my wife back the next day.What an amazing statement!! I never believed,so he spoke with me,and told me everything that i need to do. Then the next morning, So surprisingly, my wife who didn't call me for the past seven {7}months,gave me a call to inform me that she was coming back.So Amazing!! So that was how she came back that same day,with lots of love and joy,and she apologized for her mistake,and for the pain she caused me and my children. Then from that day,our relationship was now stronger than how it were before,by the help of a spell caster DR benedict. So.
So,if you are in a similar problem or any kind of problems you can also contact him via his email(benedictsolutioncentre@gmail.com}he is the solution to all your problems and predicaments in life.his email again is{benedictsolutioncentre@gmail.com}.
HE ALSO SPECIALIZE IN THE THE FOLLOWING PROBLEMS;
(1) If you want your ex back.
(2) If you want to be promoted in your office.
(3) If you want a child.
(4) If you want to be rich.
(5) if you have any sickness like ( H I V/AIDS ),(CANCER) or any sickness.
once again make sure you contact him if you have any problem he will help you. his email address is(benedictsolutioncentre@gmail.com}
Hello to everyone here, I'm here to share the unexpected miracles that happened to me three days ago how i was help by dr clement, My Name is sanjeeta I live in United State, and I `m happily married to a lovely and caring husband, two children, a very big problem has occurred in the family seven months ago, between me and my husband so terrible that they took the case to court for divorce, he said that he never again to stay with me, and urging me not as he made the house and grabbed me and my children are passed through a lot of pain. I have tried all my possible means to get him back, after much begging, but all to no avail, and he confirmed that he made ??his decision, and he never wanted me to see her again. So one evening when I returned from work, I met an old friend of mine who asked my husband So I explained everything to her, so she told me that the only way I can get my husband back it is, visit a spell caster, because it really worked for them too so I never believed in spell, but I had no choice but to follow their advice. Then they gave me the email address of the caster, they visited. (drakugbespellhome@gmail.com}, so the next morning I sent an email to the address they gave me, and the spell caster assured me that I get my husband back the next day, what an astonishing statement, I have never believed, so that he spoke to me and told me everything I need to do. then the next morning, so suddenly, that my husband, who has not called me for the past {7} seven months, gave me a call to tell me that he come back So Amazing! So that was how he came back on the same day, with lots of love and joy, and they apologized for their mistake, and for the pain she has me and my children. then from that day, our relationship was stronger than now, as it were before, with the help of a spell caster. So, I'm going to visit to advise there please the same site drakugbespellhome@gmailcom if you are in a state like this, or you have problems that bring on "your ex back. So many thanks to Dr. clement return for my husband and brought back
ReplyDeletegreat joy, my family.(drakugbespellhome@gmail.com} Thank you .. you can contact him fore you own help
What a beautiful and wonderful testimony. Sometime things you don't believe can just happen. My name is Adams BERCHAR . Am 25 years old i got married at the age of 24 i have only one child and i was living happily. After one year of my marriage my husband behavior became so strange and i don't really understand what was going on, he packed out of the house to another woman i love him so much that i never dream's of losing him, i try my possible best to make sure that my husband get back to me but all to no avail i cry and i cry seeking for help. i discussed it with my best friend and she promise to help me he told me of a man called Dr. PAUL , he is a very great man and a real man that can be trusted and there is nothing concerning love issues he cannot do that is why they call him Dr. PAUL . I contacted his email address.And i told him everything that happen all he told me that i should not worry that all my problems will be solved immediately. He told me what to do to get my husband back and i did, he said after One hour my husband will come back to me and start begging, it really happen i was very surprise and very, very happy our relationship was now very tight and we both live happily again. So my advice for you now is to contact this same email address is salvationlovespell@gmail.com or visit his web site http://salvationlovespellforallnation.webs.com/
ReplyDeletemy name is Monica After being in relationship with kelly for 3 years,he broke up
ReplyDeletewith me, I did everything possible to bring him back but all was in
vain, I wanted him back so much because of the love I have for him, I
begged him with everything, I made promises but he refused. I
explained my problem to someone online and she suggested that I should
rather contact a spell caster that could help me cast a spell to bring
him back but I am the type that never believed in spell, I had no
choice than to try it, I mailed the spell caster, and he told me there
was no problem that everything will be okay before three days, that my
ex will return to me before three days, he cast the spell and
surprisingly in the second day, it was around 4pm. My ex called me, I
was so surprised, I answered the call and all he said was that he was
so sorry for everything that happened, that he wanted me to return to
him, that he loves me so much. I was so happy and went to him, that
was how we started living together happily again. Since then, I have
made promise that anybody I know that have a relationship problem, I
would be of help to such person by referring him or her to the only
real and powerful spell caster who helped me with my own problem and
who is different from all the other ones out there. Anybody could need
the help of the spell caster, his email is dr.areghanspellhome@gmail.com
you can email him if you need his assistance in your relationship or
any other problem
I am MISS TRACY FROM UNITED STATE, and email
ReplyDeleteis tracydesmond144@gmail.com.I just want to share my experience and
testimony here.. i was married for 6 years to
my husband and all of a sudden, another woman
came into the picture.. he started halting me
and he was abusive. but i still loved him with all
my heart and wanted him at all cost…then he
filed for divorce. my whole life was turning
apart and i didn’t know what to do .he moved
out of the house and abandoned the kids.. so
someone told me about trying spiritual means to
get my husband back and introduced me to a
spell caster…so i decided to try it reluctantly.
although i didn’t believe in all those things…
then when he did the love and return spell,
after 2days, my husband came back and was
pleading. he had realized his mistakes. I just
couldn’t believe it..anyways we are back
together now and we are happy. in case anyone
needs this man, his email address is drogbefunspelltemple@gmail.com
I am MISS TRACY FROM UNITED STATE, and email
ReplyDeleteis tracydesmond144@gmail.com.I just want to share my experience and
testimony here.. i was married for 6 years to
my husband and all of a sudden, another woman
came into the picture.. he started halting me
and he was abusive. but i still loved him with all
my heart and wanted him at all cost…then he
filed for divorce. my whole life was turning
apart and i didn’t know what to do .he moved
out of the house and abandoned the kids.. so
someone told me about trying spiritual means to
get my husband back and introduced me to a
spell caster…so i decided to try it reluctantly.
although i didn’t believe in all those things…
then when he did the love and return spell,
after 2days, my husband came back and was
pleading. he had realized his mistakes. I just
couldn’t believe it..anyways we are back
together now and we are happy. in case anyone
needs this man, his email address is drogbefunspelltemple@gmail.com
THE GREAT Dr OBEHI INEGBEDION WHO BROUGHT MY HUSBAND BACK TO ME . My name is Mandy Buyukolme. My husband and I have been living a very happy and lovely life. So as time went on, I began to notice this strange attitude that he was possessing. He was now having another girl friend called Jane, to the extent that he was no longer picking up my calls, and he was not even sleeping in my house anymore because of this new girl friend. I became confused and didn’t know what to do . So i became worried and stranded, , because I have never experienced a thing like this before in my life. So I decided to visit a spell caster online, to see if he can help me out. So immediately I went to the internet, where I saw an amazing testimony of a spell caster who brought someone’s ex lover back Dr.OBEHI INEGBEDION so I email him with his email: drobehiinegbedionspellhome102@gmail.com immediately and I explained to him all my problems and immediately he reply to me that it will be very easy for him to solve, i have been helping people with situation like the one i have. And he also gave me some proof to be really sure of his work, and he assured me that my husband will come back to me immediately he is through with the spell casting. And also he told me to put all my trust in him, and I really believe him. So it was 9:00 am on the next morning, when I was about going to work, when i received my husband’s call, and he told me that he was coming back home , and he apologized to me, and told me that he is very sorry for the pain that he has cost me. And after some minutes later, he really came back home, and that was how we continued our marriage with lots of love and happiness again, and our love was now stronger than how it were before. And he also told me that once my heart desire has been granted unto me that i should go and testify of his work right here on the internet. Right now I am the happiest woman on earth today as I am writing this testimony, and I want to really thank ” Dr OBEHI INEGBEDION” for bringing back my husband, and for bringing joy and love to my life. My advice for you out there who your husband or your wife is acting strange or behaving the same way like this, or you have any problem with your relationship or anything related to do with spell casting, is for you to go and visit this VIA email: drobehiinegbedionspellhome102@gmail.com , and i assure you that he will be of help to you, and I am 90% sure that he will solve it out. Email him: drobehiinegbedionspellhome102@gmail.com
ReplyDeleteWhat a beautiful and wonderful testimony. Sometime things you don't believe can just happen. My name is tanya willians . Am 25 years old i got married at the age of 24 i have only one child and i was living happily. After one year of my marriage my husband behavior became so strange and i don't really understand what was going on, he packed out of the house to another woman i love him so much that i never dream's of losing him, i try my possible best to make sure that my husband get back to me but all to no avail i cry and i cry seeking for help. i discussed it with my best friend and she promise to help me he told me of a man called Dr. PAUL , he is a very great man and a real man that can be trusted and there is nothing concerning love issues he cannot do that is why they call him Dr. PAUL . I contacted his email address.And i told him everything that happen all he told me that i should not worry that all my problems will be solved immediately. He told me what to do to get my husband back and i did, he said after One hour my husband will come back to me and start begging, it really happen i was very surprise and very, very happy our relationship was now very tight and we both live happily again. So my advice for you now is to contact this same email address is salvationlovespell@gmail.com or visit his web site http://salvationlovespellforallnation.webs.com/
ReplyDeleteMy name is williams martinez.I do not know how to thank Dr. Trust for bringing happiness back to my family. i do really wanna tell the whole world that there is a spell caster called Dr.Trust that is so real and genuine. I never believed in any of these things but when i lose my wife for 4 years, i required help until i found a great spell caster, and he cast a love spell for me, and he assured me that I will get my wife back in just 48hours but i was in doubt, and after the spell has been cast, 48hours later, just as the spell caster said, my phone rang, and surprisingly it was my wife who has not called me for the past 4 years, and she made an apology for the pain she has caused me and she told me that she is ready to come back home for me. Dr.Trust really made her to know how much i loved and needed her. And he also opened her eyes to picture how much love we have to share together. With this testimony right now i am the happiest man on earth and our love is now stronger than how it was even before. I will keep sharing this testimony all over the world. All thanks goes to Dr.Trust for the good work that he has done for me and people he has helped. Believe him and do all he ask you to do and never doubt him in any way.via Ultimatespellcast@yahoo.com or Ultimatespellcast@hotmail.com tel: +2348156885231
ReplyDeleteMy name is williams martinez.I do not know how to thank Dr. Trust for bringing happiness back to my family. i do really wanna tell the whole world that there is a spell caster called Dr.Trust that is so real and genuine. I never believed in any of these things but when i lose my wife for 4 years, i required help until i found a great spell caster, and he cast a love spell for me, and he assured me that I will get my wife back in just 48hours but i was in doubt, and after the spell has been cast, 48hours later, just as the spell caster said, my phone rang, and surprisingly it was my wife who has not called me for the past 4 years, and she made an apology for the pain she has caused me and she told me that she is ready to come back home for me. Dr.Trust really made her to know how much i loved and needed her. And he also opened her eyes to picture how much love we have to share together. With this testimony right now i am the happiest man on earth and our love is now stronger than how it was even before. I will keep sharing this testimony all over the world. All thanks goes to Dr.Trust for the good work that he has done for me and people he has helped. Believe him and do all he ask you to do and never doubt him in any way.via Ultimatespellcast@yahoo.com or Ultimatespellcast@hotmail.com tel: +2348156885231
ReplyDeleteThis comment has been removed by a blog administrator.
ReplyDeleteThis comment has been removed by a blog administrator.
ReplyDeleteThis comment has been removed by a blog administrator.
ReplyDelete