manuelver/infosec
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Restructuring folders

Browse Source
This commit is contained in:
manuelver
2024-02-17 22:52:38 +01:00
parent 3c9aff823f
commit 32d537cefb
8 changed files with 914 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Introduccion-hacking-hack4u/tema_6_owasp/README.md
+3 -2
View File
@@ -6,7 +6,7 @@ Al ser este tema muy extenso, se ha divido en 9 READMEs. A continuación, se ref
- [TEMA 6 - OWASP TOP 10 y vulnerabilidades web](#tema-6---owasp-top-10-y-vulnerabilidades-web) - [TEMA 6 - OWASP TOP 10 y vulnerabilidades web](#tema-6---owasp-top-10-y-vulnerabilidades-web)
- [README1.md](./README1.md) - [README1.md](./README1.md)
- [6.1 SQL Injection (SQLi)](./README1.md#61-sql-injection-sqli) - [6.1 SQL Injection (SQLi)](./README1.md#61-sql-injection-sqli)
- [Ejercicios](./README1.md#ejercicios) - [6.1.1 Ejercicio](./README1.md#611-ejercicio)
- [6.2 CrossSite Scripting (XSS)](./README1.md#62-crosssite-scripting-xss) - [6.2 CrossSite Scripting (XSS)](./README1.md#62-crosssite-scripting-xss)
- [6.3 XML External Entity Injection (XXE)](./README1.md#63-xml-external-entity-injection-xxe) - [6.3 XML External Entity Injection (XXE)](./README1.md#63-xml-external-entity-injection-xxe)
- [6.4 Local File Inclusion (LFI)](./README1.md#64-local-file-inclusion-lfi) - [6.4 Local File Inclusion (LFI)](./README1.md#64-local-file-inclusion-lfi)
@@ -23,11 +23,12 @@ Al ser este tema muy extenso, se ha divido en 9 READMEs. A continuación, se ref
- [README4.md](./README4.md) - [README4.md](./README4.md)
- [6.13 Inyecciones NoSQL](./README4.md#613-inyecciones-nosql) - [6.13 Inyecciones NoSQL](./README4.md#613-inyecciones-nosql)
- [6.14 Inyecciones LDAP](./README4.md#614-inyecciones-ldap) - [6.14 Inyecciones LDAP](./README4.md#614-inyecciones-ldap)
- [Ejercicio](./README4.md#ejercicio) - [6.14.1 Ejercicio](./README4.md#6141-ejercicio)
- [6.15 Ataques de Deserialización](./README4.md#615-ataques-de-deserialización) - [6.15 Ataques de Deserialización](./README4.md#615-ataques-de-deserialización)
- [6.16 Inyecciones LaTex](./README4.md#616-inyecciones-latex) - [6.16 Inyecciones LaTex](./README4.md#616-inyecciones-latex)
- [README5.md](./README5.md) - [README5.md](./README5.md)
- [6.17 Abuso de APIs](./README5.md#617-abuso-de-apis) - [6.17 Abuso de APIs](./README5.md#617-abuso-de-apis)
- [6.17.1 Ejercicio](./README5.md#6171-ejercicio)
- [6.18 Abuso de subidas de archivos](./README5.md#618-abuso-de-subidas-de-archivos) - [6.18 Abuso de subidas de archivos](./README5.md#618-abuso-de-subidas-de-archivos)
- [6.19 Prototype Pollution](./README5.md#619-prototype-pollution) - [6.19 Prototype Pollution](./README5.md#619-prototype-pollution)
- [6.20 Ataques de transferencia de zona (AXFR - Full Zone Transfer)](./README5.md#620-ataques-de-transferencia-de-zona-axfr---full-zone-transfer) - [6.20 Ataques de transferencia de zona (AXFR - Full Zone Transfer)](./README5.md#620-ataques-de-transferencia-de-zona-axfr---full-zone-transfer)
Introduccion-hacking-hack4u/tema_6_owasp/README.pdf
+853
View File
@@ -0,0 +1,853 @@
%PDF-1.4
%Óëéá
1 0 obj
<</Creator (Chromium)
/Producer (Skia/PDF m80)
/CreationDate (D:20240217195203+00'00')
/ModDate (D:20240217195203+00'00')>>
endobj
3 0 obj
<</ca 1
/BM /Normal>>
endobj
6 0 obj
<</CA 1
/ca 1
/LC 0
/LJ 0
/LW 1
/ML 4
/SA true
/BM /Normal>>
endobj
7 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [102.999992 638.66998 169 650.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README1.md)>>>>
endobj
8 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 622.16998 244 634.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README1.md#61-sql-injection-sqli)>>>>
endobj
9 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [163 605.66998 228.25 617.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README1.md#611-ejercicio)>>>>
endobj
10 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 589.16998 265.74997 601.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README1.md#62-crosssite-scripting-xss)>>>>
endobj
11 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 572.66998 316.74997 584.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README1.md#63-xml-external-entity-injection-xxe)>>>>
endobj
12 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 556.16998 261.99997 568.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README1.md#64-local-file-inclusion-lfi)>>>>
endobj
13 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [102.999992 539.66998 169 551.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README2.md)>>>>
endobj
14 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 523.16998 276.24997 535.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README2.md#65-remote-file-inclusion-rfi)>>>>
endobj
15 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 506.66998 275.49997 518.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README2.md#66-log-poisoning-lfi----rce)>>>>
endobj
16 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 490.16998 312.24997 502.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README2.md#67-cross-site-request-forgery-csrf)>>>>
endobj
17 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 473.66998 317.49997 485.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README2.md#68-server-side-request-forgery-ssrf)>>>>
endobj
18 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [102.999992 457.16998 169 469.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README3.md)>>>>
endobj
19 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 440.66998 323.49997 452.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README3.md#69-server-side-template-injection-ssti)>>>>
endobj
20 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 424.16998 327.99997 436.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README3.md#610-client-side-template-injection-csti)>>>>
endobj
21 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 407.66998 452.49997 419.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README3.md#611-ataque-de-or%C3%A1culo-de-relleno-de-datos-padding-oracle-attack)>>>>
endobj
22 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 391.16998 259.74997 403.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README3.md#612-ataque-type-juggling)>>>>
endobj
23 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [102.999992 374.66998 169 386.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README4.md)>>>>
endobj
24 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 358.16998 246.24998 370.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README4.md#613-inyecciones-nosql)>>>>
endobj
25 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 341.66998 239.5 353.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README4.md#614-inyecciones-ldap)>>>>
endobj
26 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [163 325.16998 234.25 337.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README4.md#6141-ejercicio)>>>>
endobj
27 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 308.66998 283.74997 320.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README4.md#615-ataques-de-deserializaci%C3%B3n)>>>>
endobj
28 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 292.16998 241 304.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README4.md#616-inyecciones-latex)>>>>
endobj
29 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [102.999992 275.66998 169 287.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README5.md)>>>>
endobj
30 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 259.16998 223.75 271.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README5.md#617-abuso-de-apis)>>>>
endobj
31 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [163 242.66998 234.25 254.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README5.md#6171-ejercicio)>>>>
endobj
32 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 226.16998 294.24997 238.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README5.md#618-abuso-de-subidas-de-archivos)>>>>
endobj
33 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 209.66998 249.99998 221.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README5.md#619-prototype-pollution)>>>>
endobj
34 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 193.16998 443.49997 205.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README5.md#620-ataques-de-transferencia-de-zona-axfr---full-zone-transfer)>>>>
endobj
35 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [102.999992 176.66998 169 188.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README6.md)>>>>
endobj
36 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 160.169983 516.25 172.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README6.md#621-ataques-de-asignaci%C3%B3n-masiva-mass-assignment-attackparameter-binding)>>>>
endobj
37 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 143.669983 224.5 155.669983]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README6.md#622-open-redirect)>>>>
endobj
38 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 127.169983 342.99997 139.169983]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README6.md#623-enumeraci%C3%B3n-y-explotaci%C3%B3n-de-webdav)>>>>
endobj
39 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 110.669983 369.99997 122.669983]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README6.md#624-enumeraci%C3%B3n-y-explotaci%C3%B3n-de-squid-proxies)>>>>
endobj
40 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [102.999992 94.169983 169 106.169983]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README7.md)>>>>
endobj
41 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 77.669983 244 89.669983]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README7.md#625-ataque-shellshock)>>>>
endobj
42 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 61.169983 241.75 73.169983]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README7.md#626-inyecciones-xpath)>>>>
endobj
43 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 44.669983 352.74997 56.669983]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README7.md#627-insecure-direct-object-reference-idors)>>>>
endobj
44 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [72.999992 655.16998 301.74997 667.16998]
/Dest /tema-6---owasp-top-10-y-vulnerabilidades-web>>
endobj
45 0 obj
<</Filter /FlateDecode
/Length 5178>> stream
xœí]ÛŽ$·␍}Ÿ¯èç)ë~‚»kÇÏIÈ$qŒ`çÿ��’J¢TÍéRUÍÅÎìp7«%Q$ERG—Z”ŽéßMÀßïò5¹Dc¸ýý§§ŸŸð¹2AÜ´ñöË?Ÿþö»Û€néà§>×Ѓ‚ò†ùþ–?üò¯§o¾×·ý7Õ磾I©V÷C¢üiþ?ýüõé›?™[¼}ý*JÊ›ö‹RÙ›Ò·¯?=ýAmÿxûúï'Ï¿þãF‚ >|%h‘�¯CÊDЕ`s‘X &WúÝ×ûŒ[¡%ƒ'œË‘s©GÂæ~$ˆ�¯ulŠŒò‘ŸžíŠ
þ@¥æùƒ–Û�…ÛV¡ü‚«N EÛ¶ë�ÿ ??Ié‡ÿÌM¢¤•‹UÒ.Š4«Õ ZÖ˜?␍Å®7©‚å ;øF‹Ì?I=vB/0n5â¬Wà4(!`�–ObÂù¦¥b´Ê,:)š5{—a±Î¯FÙºÅsZ5s—qmÄGÍÛEÊ�Y4ˆCÇð¸„ΪVrÑÚ ßÚÐÙÜ”]¬€Ž¨MGâvB:¨]¦›%D'¬—íIn\ú
¿‡«*yÂ�Ýá×#B˜lÄ„ÆV#E¾V·.–ázçIW™$z·_r␍äèüŽ"qôP8ÑX¶Å¼Ü†"lkÞü)ûÈÅ# ñ{’ª©ÑTKuŒ(¶îÛ<L¥X‚Á˜&ccVÆôņ֎±k;MÒ’2_
gÔbè†e¾€gÛàùêÊh™þÇHÄ_ìU-Æ°&öÊkìS5>ë¤0;Z1Õ#ÍèoâêoÊÈŠ‹
2:¿Q»?ÑÃ(Ä0␍I‚¶cßÜ¢ŒŽž ¬Â¨‡šlô´DæÓ.ü†'Žmƒ¯ŠkÜúµ�à#µw¶*¾ƒÓU•ÔÔ␍:Z+G³ò‹PWØ#^¶®2rÃPt¤Ä—"“h}ô~YgÄû¹<�¶×Ô™H†[Vƒª€Š"5’Õ@␍ت+ ”Ô* öUM뵸èž�ÆeóáÅYéÅ€ª�ÌâÃ1è@qã·%º6‚‹÷e *¼Ç®4äu²
äA§WwT%Wo"Z‚»/+O\nÉðD(I~°¥Á‹™&öνYÙz^2ÿÉT_B×q&A·zÛHVºõŒaÑë\!™¨Û#“Žß îºÄA!kã¬Á“�n=é«©:˜TÅSd«
̃n€m¶ý€yeÇ.Ûø—ïf;عŒ]ú`UËŽ¾*í"è\U&Ζ˜oƒ•U§êx/évÞ5tɇŒQS®XE±mìs&Ñlàƒíàìœ ÌigB-nÞ™ð†Õâ|wf!óVý\æ(e(©£ÕLäbó:.”ó5q¸æ½Û“§ˆð\z1�b {ü°;“\ðœO’ØÆç«b$Å*�Kõæ“C.»6–³Ùט&è áøå:8á® –|šÀŠ�� lLdí“␍d\UŸ¿p%¸Ð'¿}ìi­)žöÓ:ÎÉ·÷À¨‰7Üí§'–´:àðû¢œU7$™¨òO«„–H Æ{k␍X¹ü {ã”S@…)Œ.�æ„r¢)å +@3Ò()␍?æÂøæ²HÄ2ˆµ€Æ‘†uCaŸÚ³!ÑXÚ'ÎTLTäWã/UÂO2-âB‡Áª¶µÁyècÑÕ:’À~�–µµÄ+µàdå Z³ LÄ!­ üÛÅëƒí:j˜Ô*+©D,ضFÇA$gaJ®”‘UÆ6—§âS?ª6,ÑVúœ~lꤿÑR6uÒtõÛÜË\åÄ`/m¼QŽMê¥êºfòÇ\º
Á¤B©�*,“*ïÅj2Y'«üMâ×Þ¨šLÖžÉꮪErS~-HÌ„´@ ªòB ¯òL,”ôŽØr•±ù*/2:ˆdÉ8ª: íê*␍þXÈ;õºø�¿¬+gßâÀ·DÑ/8€-ãÀ×dêL3Tbú¤ÖšævX0‘�JrÅ2žÅº¹uPW€Xw€†¾—bF[e½zâ!ðjwgnqràHW6¨ºv±æ°VBßUÜÁ×*y«{i5†C”Ѫ3�Hø¬7LH~Od‘*6çàò<.ÎMCËlFÅ&|Èd˜Ýñ GÇÜñóùùéã§jmV&忳$9ÁvÍó›ï.�†)L€d!ï¥ð{rÈòŠ—Ë´ä–‘†þЄD[³…�='xSðã%æ…P"'’rh Ù'J‰ !{lÈ¡�˜ „ìÙ]H´œ*„ 9@7J°ÈÔœ)„N
-%#”X ‡ é鬢•ä˜¦|ßœÍAÁP¾J”´”ÿOiGsà5žÊ£hIÅ–C¹ö½€KÐ×TæŽÊlÒ' }‰F´_¢mΧNçÖ*_®BÊ¿+“vÔ¥�>—®"q©Púe�K•ËNÈ.q¡²Šª:\æ÷FÕæ’6…ËꯪFr3†Z°Y␍i�˜Wå…˜aå¹Z+é[3ê*bûUXd”4©’áTÅî¨)þøô×g’†²Áá~î …“Wý–›£€<␍z;ù.Ýà2>èQ@>ìš�{ÞÕ¥ÝGÐ,¤hmÈL"&␍S¯³<6â¸f»É§löb¸”C­ké0"¢ßцZÃßîÉê·\¼d�3n²Ú­``n}9üÇv[|.y©
2Fù2g{!¾<c¥À=n:n¥¬ÔºË­ô:³fÁ¼i]ˆ,Æ¢ygƒ3ÑSÎƇÃj´ÓZqeÁ¬ &+걌§á\ö;èxÙ_·Q„oœõ[¬Õ±ì²K&ó.�óËŸVzĈ|wÙŽñ��Å@fúóš'h\Ûã¹Ϻ:#Ñœ#ZˆÃcÄÍŽ^0|Ö3�×\LJUdkÙ…»zØ!=»Œ6½(Æ:v§ÑüáJÌC"ÿïÙã`’ ¦ðx`°ê~ä´t'ƒR‡ƒg
ðv²Žr*tòqŒä³�ëFÚÚm+Á~è†×iˆl:¦Î�VÆÈm£d·␍¾Ý¨áb«!V|Ï�šåi0
åÁ÷¼’Ô $YŒi“¨ÉÓF&œÄ6$I=’‡ø Cå!K(å!␍kV␍”AÒº ×Ф滆ï$üóþh£:(�<¬Ø©¤¢L]s�"|UÜŠð_®®§ #©˜\×:WŽ(Ãluf“>)”v—:m”‡4ì´¤­␍:mc‡åiR§Áò��†áBz
4üh;,©#–‡4¨ÜE*e m±<¤æÅ<¢7��YüÅò2¹ZC+X͆¶Ðì«ñÒì°ñ¼Ú+í[5ë&„fýMXmœP±¶Õî(*-žó´1ïÌã&ž×ƒyÚ��I0EpÇa’Àà眾l4bCÖu³â�ìá½dü@¿4}H#*œD¬t8ŽXMï-˜Oº§!’º‚¯@Ä–
×k'³fX[C`èÂDvzÃû@ÉîØYÜ—Ñp=<�5â$¾e¤8<¢>M�¨7Ä€Yý¾-8<µOíÜ�;%9"C�£¹~î„Æ®-ûœ7y 6ºØëoŽ«ŽIJÜ綆4•{–P§£êá®N"VFG¬>3¬zÌë1=˜pØý5Á|Ö·dã…>àÂã >à]ú€ý+÷¯ãþfl�¿Á÷CÒˆ¿!m‹¿›a¤Ðð7$!´*ž�üÐo¥C*–°CÚ°•I[ü␍©#þ–h+þfl�¿‘‡ï!•Td¨k®bH„¯Š5þ+*Õõ´âWD"ç"‚«ˆX'âŠ�e˜­ÎlÒ'Åߌ‰›­tHñ7¤mñ7c¶øÒFü␍i[ü␍©q‚¿!␍1/G¥l:&c‡¿!VZR§éñ·L®ÖÐ
V³¡-4ûj¼4;l<¯öjîàoDÍúÍëÄÚF”ÙâoDQ±hñ$þfì{Ç߸Eíëñ7ãOâoÆÇßvÝFð‘ðKxÖõO t˜}ì;¡Jnç ²‡(/7ÿÏ—õ/H�ØsHG±GOb�&ǯ;vÃB(óçO¦ïäY-K@ñ¶ûð2^æ␍¼Ì Íå^ÆÊ“x,äÃ×{™ù-Ô\*Éë�5øË°Š×¸Zb«èÎúwû©Ø¡3{Ú‘»ñì5ÄÁB4³·˜L¯Þ²Qè␍Å1d³¹{œ¬IF«�yLÙäWviÔ2Ä‹ñ÷i°œ¿—Ž½JŠ¢{;.ÿèÏ?;r£—Çüµb{Ìs×]%ìµPì}jüEkóÝøŽ”°jÿâ‚Õ'¬9¾¸ÀÆ­ùC&¿ª¸UÓB³Ôp¨5Ÿ‡Îg�ß®màeÑ>î‹Ê³f§$<€Å­ëaqø>ÂâHB$–Â}HÛÂâÖm`q$!âضù!e»-©#,Ž4¬94|IÈBè`q¤"³�Àâ›ôéOä
½’‚¤íš¨p.á¥Â¾„ç
w½«P2‘B…œ‰°*8݉µÂØDf«'›tH¡pk·[Q‘6BáHC̶?VnmFw Ž$�»ŽÚ{H8RG$i#Ž4Ä©]‡„#uDÂ�–ôh{$<“«Ø␍ÞµÐLÊn‘pÂój¢öN„Ð ¾Êª� *Ô6†ì'jŠE‡'�p¼qý}áÜ!Žë�pNá6¼ÀyÝéÓm�ð
|…†ÞBÏÅÁyÀ⮂œ^c繦¼Ï‚árL?VÎZÞýrÊêݺÜêæ�N}XÝN«cw_®^ÓK "anÀí®¬ÒϘ0ïÔ” ¼¡ÓâõLëãf‚Ù› ðXñ9×a_`69}¤â]Î&çÇõ…›@ͳ{À²w]5¾çL+oØë¤Øâ¥kFlç.ªßzx~P¹“w 9ýÝBNU|Äã“ñ˜µÅ+žŸ÷+8é¢À
|�$�Ò@ÉÊuÀŠ‹:Í`eV�ؼ +ÍZ‘‚ÐC¿ß©PÂÑó¾Hƒš%Ùoˆ$`Á¹XA*0+V␍þá␍n7¼‘’Â+äa�Õ“Jêü¿k®"„¯Š(þ+öÐõ´¢D"Ì ‚«°G'â
�e˜­ÎlÒ'Y\”�iÐik»ÖdÂ:ŒÅE1b,H1¤m1¤Ž ÒFŒi[Œ©#Æ´¬LÑa,™ÜlAŒK×±.±ÁXÏÕZÅc!B ¶/FŒ…Ê”Œ¦*üpGI±hð$Äâêk¿Þ+ÄÂel×C,^žœìzù“ÝùVìûÛØ‹ògOª¾åúë£ çö&d>ÛpÏOQa¨�›¢zóSTÎ >¦¨³SToONQ½{�)êô1«ßø€¿î=,^Ãý¦3pž«ùÑƾ¶ðÁ»7ÓœÒå¡?9¥õᦴó[ÿ¹è3¬y×v¡{vßEwá‚ùÛ &7‡±¾êêݧ¬…qré-ˆãKoìU7ó»Æ?�Lîõ½›�3ý®ˆéwØvorܵ«r~æüU6ÓèꫨidµÔ0nO\k2Ý þ–’u09pÒF‘÷ÏÓ[*y�9{Þ—�x³/½íÎZxs·Æĵqé°çLÕíÐœtÓüÖÍoKÓ~84ÿ6Úù�˜␍ÕÚ kèÓÛFù۲︻îe­û΄ãNSŠÑÂwľ¤! -Ò$ð’@ì Z`␍0E®dDR¿÷␍)Û½oH!Z¤␍-’¶-RGˆ6ÑVˆ6(×A´äaI%>ìš«@#á«’„ÿ
]v=­ '‘HÅB‹à:ˆv•pÑ6U˜;³I�¢␍Jo Z¤�ûà�¶Ý”1Z$AŸ3òZ;ªð£‹F‹TÄ;õ�ŠN%\´“±ºs!#RGˆ6]”˜
tm&7[P#D[Z ÚÆ
1ÂÊq5VÒ³fÓUÄôÕˆÐv"%cIovÁ%Å¢Á“mPá�C´³Iíqˆê¹TÜŠëSñßÆѪw
iLß–ÈnEŸ¿xþêuýý¯|ð#(gû2¾ eÞŸÌwd�…2qŒƒÆ¹—Ãïzañ.sc^5Ð¥‹¼fÙ´�­‹;5ôë<™´µ©JãÚãö‡æZç�µÈøhŠžìönO 6ågUh‹
1†Yr`ùÀ1¼ËOôñ‘Û�\k þøZ ¹§—ñ/b�ÇT§ƒÂü%q<Ú÷Áý¼I„“È?^3q¹IÌi˜~Û ‡hïó7'_jû†9Íô=|�ö¬ÝyOÑì%Ó‹*ïQ²WÞ˜R_€�7RéU±Ë­�Π༴'Ÿ÷Qž\‰AHèr�1åÃc|xŒßŽÇ˜?v¦Cñ ¸zbIjËíÔêà*î¾å~@þw­ÇÓ„»êU€¾=YÒéL'îÚOòà]ìpü¨{¾op|¤␍8>’¶{­AUã^k$õ{­‘²Ýk�ÔÈGÚä#i ä#uòmò£î�|ò°BǤ’
2wÍU4šðUQkÂÅ·»žV$œH¤æDpZïD\Aø¦ sGe6é“ù§°Óù&ÙZGÂ’MìZKvmLäG�àé|оòŸalÝõô’�ÔÉGÚ€ä#i»Ù©#’µÊÚì‘üLnÆ°Aò×: ¿qBŒpò»Ž5›® ¦Ÿ$eL7Hôv¯5~¸£¤X4xÈG•½o vkéq ?Ú“@~tâúLî·q:ðÀõ´ì.À«®øšozþ­–ß=09�W{½É}œ�{¹Ø7)Ó”ßîÚÞÅçgÏ%£‹'1./rÍ*™½gtþÌïôe‰óPå�3ͯ‡“N¼fƒG¡ù½ï¯pïë•Àõ»Ü9mWüþÁé™."+]þɺ�ìÏð÷?iDÆ­
endstream
endobj
47 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 785.66992 393.99997 797.66992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README7.md#628-intercambio-de-recursos-de-origen-cruzado-cors)>>>>
endobj
48 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [102.999992 769.16992 169 781.16992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README8.md)>>>>
endobj
49 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 752.66992 388.74997 764.66992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README8.md#629-ataque-de-truncado-sql-sql-truncation-attack)>>>>
endobj
50 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 736.16992 466.74997 748.16992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README8.md#630-session-puzzling--session-fixation--session-variable-overloading)>>>>
endobj
51 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 719.66992 413.49997 731.66992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README8.md#631-enumeraci%C3%B3n-y-explotaci%C3%B3n-de-json-web-tokens-jwt)>>>>
endobj
52 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 703.16992 348.24997 715.16992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README8.md#632-condiciones-de-carrera-race-conditions)>>>>
endobj
53 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [102.999992 686.66992 169 698.66992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README9.md)>>>>
endobj
54 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 670.16992 260.49997 682.16992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README9.md#633-inyecciones-css-cssi)>>>>
endobj
55 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 653.66992 401.49997 665.66992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README9.md#634-python---ataque-de-deserializaci%C3%B3n-yaml-des-yaml)>>>>
endobj
56 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 637.16992 411.24997 649.16992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README9.md#635-python---ataque-de-deserializaci%C3%B3n-pickle-des-pickle)>>>>
endobj
57 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 620.66992 358.74997 632.66992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README9.md#636-graphql-introspection-mutations-e-idors)>>>>
endobj
58 0 obj
<</Filter /FlateDecode
/Length 2126>> stream
xœí[ÍŽÜ6 ¾ÏSø\ Ž(ŠúŠ›m6ç¶ ôÒ&E�Húþ@)Û²(ÛÌØ3³›Éîe†²Ä_‘”>Oo1␍�áÿ½øô RŠÝÛ§�§<n]4’Iݧ?O¿ÿÐýÃt׃çGøBû�'B—ÿ}Ó�>½?½|ƒÝû‡õBÂÀڼܻ�bò£ã~ôÕãéåƒëR÷øŽ$„C"Xê,v�N?ƒôS÷ø÷Éóøãl\Ü’B˜ hBÔ×8hœ’f‚}ý¸-8ì-Ä $‡¥ä€KÂꉰ$˜…\;ÖXMYÚî>«Š�¡‹ì‚F õaör}Øà’·]¦'´åÐØMÞ¿ðÿÇ€ï}þsêMö}g-qÜZ ÞóÄ»Øç8Ê뎟ÄähœáÇ]<ÅÖt`#iQ<¬l0uŽÿçgú„ˆå¹ñK‰x~Ü5*ƒcÆÍ:§1xû˜(yZ‡hï¦HËؘðJ(^â„ÀëRö~žR[wÃÈ;ö¼y©Jã•zCò¦n0 oK)De-°/æ~ŒÒž3P
©òvnZ
␍óˆ°Ü¢`{C˜ˆêˆ£I\ë˜;ÔDàŠ‚ä8ùY¡ -3Xq!•jª)l°Ð4W—ÒM¢-¥ÚŠ¢â'�••,U°ñ¬AÔ Ïb)M(Õ‚š¿Ý]1WAïv¥m]oé¤äg$a�Æ{.‰�ŸËR‰g8ØÞÝy£7&ä]»¥‡3&
ÇŽi„‹?°â^Q?-•Û
/˜ãÈ g¶n¨S°lÌhx-¸è'EœãM„yïK XçÞ—o|NÓ1qþôØ}8ÅØ␍Ž½õĹ6]²n"’eÁ31º¸ DÎwL|›Žë‚Ïd×s-åôÎDÏ•Gšµ9•2ÍÁ¸¤ËŸ Ž³yÔ“É<i|’—AG"/ÏV ™%ÒHcIüÀ=déÐNd–ò“ÌКBã–-21£<Å÷Y‘Ô û>[‘¬\ÇgÇz,©O¹<¸F:êC@jô ž"…H �‰Ý­ �uˆÃ BcFê�¬Å°09×q2Áaã·åHýÌsä°,�‡ÅB6[À¥–©Í& ‘g• t�"�␍©UògŸÆùÕ@�ç™Ð5¦„Ì€¡1;dY`ôZud±Ù�+aò1ŒaQC`ˆˆ%ódP•� ½Y"¤³ì5œ…–"îgƒÈ␍R,'÷Rµ±Üv³;â–ãRñë_§ß>Ó>M]™ÒE™ÜEùО։Ɩk1'þšJ§SDêmÌ9KÌÓ@Ší œûà´L"ÃÛRD¸ 4ERmÉ´æî3=NÐãØ”F¼¶)eÏܼ)½?Ü”jŽ™›OÞ^)�¨¼jÇè´ª¨ôMÇ[”v;ŠŽë«gSµ›ÓÚ?¥w9Þsïë+ö4ÐjÅG'»²"¦)œYïó<æÖÅFäÖž•ù3»Ov˜j[Øl™dŽŒd¿Ø%›Uµ‘l62WÚóRéâª}¯ѯŠ²õ^çs␍æxmÀ…÷º<ÊçQ¯MÀ£yT�yýÈ£µ�Ãçëç*ÄiWáGuóȳSˆéü€{˜xGËJÀå´ý©2Uí¦ë2nECN2ߌWmÙ\Ê]ÚÁºtR@‹#¿ZüÕváÉÕkÜêauºÎ•ûÜJ·½GAñ·xŽœ�©ôálöÔ¶›d>VoGô»µ¨×€Ú׌«ë§^uPšÌù ŒÝfÅZºæŠ¸�ŸÔöm׵оÜ&]îfA«›|è½²n"Þ¾n:e@ÏMÚaN½×*‘~–;~[®6èj¤yøþõ�²ÝO¬9ˤ6wÏâ°¤ê­ewB-€÷ì¯ôœ»�_в7<TÚÒõäkŸö´7kÝîJü{¶*ZÈ´«&p=—C0oB¿­…¬iÓÁ€␍Âzû¤HÕäi-%ª•öüÝ:ñRQ ÕMň¼V€ä,,Ug±G´8^�?á¸káK ËáK5SkWHzl@Âyv>¹mçïáãeòxr8,Óá~þ9Òɨ­zûq=^Ïß-7¢z‘|A�¸ÜºhÛ-ýôý7Ez¾Üúel¢ý˜°ý2qúeâèa␍úeÚôˤ␍Ð/“y’�ôËÄ%è—i, a úeòôh3èaú‰áŠ)Õu*úÔ°¬H•�®bZB�Š5:W¬LX§‚jÂŒkL^±:á·åHýÜ€~6@¿LÌ€–©MТ~Ö¨_¦­P¿LÜ@ý23Ô5¶0¶Ê«vßBý2u…ú1qròõD˜¬Q?ÉFÆÞ,‘ŒÒYöÏ[¨Ÿ0ˆÜ!kÔ¯1²Üx³Câ–ëRñìµ°„¯öÓ@¯'€ýX¨k›¹t9ì§6sÚÀÅï¢åEÙ4â�3õüyü=ªÿU;7·½¨¼Ûö@lêÛ6gû#õ% ë™«?{€±p-Dcí@4áhÌÏà—¾ä­¸ÜÕB[¿Æ(7(«[«›]j›‘[æ´òýf‘|µ–φvÝ›7'˜Ã˜
¥}…—iXŠ1‡[Ðo Û æz5V,Õ0HP/|´iš
Ú“GËzÇ3‰Sã³h~6Wãµ°o‰Ûçê¨ |ÏÕßsõ÷\ýÅrµö¶Ç±Ú @·ƒŸ1¹ç�쳶_¹©ÎVºz°þ  m%=kÜMvÙdÊÛ û^SQN­JÜð�Å˶¬ú5ÿÑé9þó¨§èa;Ôô §Þ&©¯/ÀO®ö”†®ê¯�j±©ßÔ5/ç hÅÔ{ÂI‘é§ÿ;BÉ°
endstream
endobj
2 0 obj
<</Type /Page
/Resources <</ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/ExtGState <</G3 3 0 R
/G6 6 0 R>>
/Font <</F4 4 0 R
/F5 5 0 R>>>>
/MediaBox [0 0 594.95996 841.91998]
/Annots [7 0 R 8 0 R 9 0 R 10 0 R 11 0 R 12 0 R 13 0 R 14 0 R 15 0 R 16 0 R 17 0 R 18 0 R 19 0 R 20 0 R 21 0 R 22 0 R 23 0 R 24 0 R 25 0 R 26 0 R 27 0 R 28 0 R 29 0 R 30 0 R 31 0 R 32 0 R 33 0 R 34 0 R 35 0 R 36 0 R 37 0 R 38 0 R 39 0 R 40 0 R 41 0 R 42 0 R 43 0 R 44 0 R]
/Contents 45 0 R
/StructParents 0
/Parent 59 0 R>>
endobj
46 0 obj
<</Type /Page
/Resources <</ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/ExtGState <</G3 3 0 R
/G6 6 0 R>>
/Font <</F4 4 0 R
/F5 5 0 R>>>>
/MediaBox [0 0 594.95996 841.91998]
/Annots [47 0 R 48 0 R 49 0 R 50 0 R 51 0 R 52 0 R 53 0 R 54 0 R 55 0 R 56 0 R 57 0 R]
/Contents 58 0 R
/StructParents 1
/Parent 59 0 R>>
endobj
59 0 obj
<</Type /Pages
/Count 2
/Kids [2 0 R 46 0 R]>>
endobj
60 0 obj
<</tema-6---owasp-top-10-y-vulnerabilidades-web [2 0 R /XYZ 42.999996 786.41998 0]>>
endobj
61 0 obj
<</Type /Catalog
/Pages 59 0 R
/Dests 60 0 R>>
endobj
62 0 obj
<</Length1 7884
/Filter /FlateDecode
/Length 5028>> stream
xœÕX{|TŽÿÍüÎìÙwö$›�7Â�WÜ ˜Ò%ò c" Ù„�„Âû]ä¡DYS¤Hc‹-„‡ˆ±4æÞ^!¶^©�«µÑÚ^Š’Éý�“%µµ÷¯û¹gvÎùÎü^óûÍoæœY`࢛0zt΄'ß?=€Ù©7~ˆœ1Ïû†® voÓðû¦ ô=üÛ-j)Ñs‹æV€FSû4µûU/ð@YBµ[HF–TÌš;Põl µá…Y…U RëNjÛgÍYR2¹ªÜ`[M<9¥Å…�ÄH¹›Úcˆ>¸”:Ϫ§Üç©Ý³tî‚Å“¿´8©}�ô�œS^T8sW �ôí'úþ¹…‹+”S¦ùQ™ÔöÌ+œ[üÄ[øµàW*Ê«t|SbFêôŠÊ⊻ԿŒ Ý'=p¡×Ãk�gþ3ºž:Å
€O!2í þ^§pâS
H¶ŒKÇ·^7Û¬4„ï‡ï½ùÇ«¿ŸO÷CçÕŸ]ø·õO½¥]ùẇÜØJ8³K´·Ò*†A*ÍëZx6Ã�a;aì…}pŽÃx>„ÏàãÌÉbY
ó±álËe3Y ›Íæ±J¶’mfA¶�bÇÙö.û�}Æ®qÎ�<–§pÎÇñ\>“—ðÙ|¯ä+ùfäûø!~œŸáÙ4®
ªÛ¨ÖQý␍Rvb,Չƹ}—:>z¬5ÛÀ» � á=„Ç[³ÑOøˆúFô½ÖëFÿQÂB¸žðÄ>Fø¾>N8;„OžÂ' OáW O áS„s:±c<Ù½¿s Ž{ ç†ð„ðDÂyÖlþ+j|Hõ*ùcíôG+W�η¾là
ÂSCx>ái!\Iöì´§Už ? ÏájÂ!¼ˆpa/&<3„—.
᥄!¼Œpq/'\Â+Ï
á•„KCxá²^Mxv¯1ÿ"úaûH¯%<Ç>Š§Rƒö ®¯ÉÊÐ|Ɖ ®IÖ'žÂÝÅç®)Ö— <�úõßI8/„§Î áé„ïá$›kÈR ¿ÔsÛ²Àñ
ô&´˜ãeB` †2õ]<G»xŽ|ƒçDÏñ.žcÏü.žSO ñ¼jð¬$ž“·ñÇëùïxÃàÙI<§␍´ù¶¾× ¹u!9úŽÔÛ¬ã:ÅÚ³Hã[ß¡±á;4¾y»Fë×75ºU#:öËIúŒ!½‰Ðs†ôœ›ÒøÎ(pò¾Ówþ�‚.¢Ü9Ð¥C~{tŠàt÷èB7)Y:E¡>Bt't“¢[ìÍsé>_§úgNû»␍ô7ßp*üT‚P¬_SlTû.û0Û�ØO�Í1Þ1ÜŽ'AˆÖʵµOì4¶,˜oK²ÇÙìÝííwÚ§Ù§Ûõ9cŠ“mA#OOS3±ó‰¿…N#°™Í
ç
|ãÊ.]&·t³]ê\v©XÇG]9Aj¨ºéÎŒ§ÑF¿N�Ž£…¥C=4Ryja;@­#�PÃÃzXH=o²F¶‰÷§¾ð%œ#Î␍Јµ
°q�F½ïS쯲x…td07ËPM
(•W”ÉJ½ò‰ÒC”*¥I)PªXî¹âÕ |‹ü< Ý¡ž}UpÿˆixR©8á#lÂZ¸BVtïa+ì‡e47+‡U|ŸL=o‹&z í‚r¢7±½ì�î8[Í°>ö²fò«®Á:Ìá«($i¼„Æÿ6éj"ù]P¥Ð{šYAò¾ÔG£'[3�{öÍFùV‘åØoª7¹Õd²¢Gì{“µ˜ž€8‡â|ü€­W’•ƒÊØÚ,€­¤{—.c*aKÈw½,ÓµóEJ«…?*êLÒý–îÙ|…O&�Jà$ÕE&ùt[�›h¤:5šÔqÊ@’'␍ê
ò Óa6¡eô> ý1[I“á¯iˆ¸F’{”‹äóV¶…_ƒ& } Dù‚bM)Aïp8ªš„‚œA?�«Ž{Çêü“ò<¿ÊOêßïM�KõÔAv�c‰§¾£#;O‰ùu"¾½æ:Å›|ñ/öï7>;ÏS×>jdH먂‘Ô7%� Þ¢nê5Ò éFë„—~c ê<E¥žÍ®ÍÉÃ6»Š‡õïÌk3pÊ\=·{|O
÷R¿ Ÿ±2*gôÂmßQ6åm~íö‚U]¥ýû‹2ö[¥ÖXyü¡ú�ý—a™ƒîÆ}Û7äWïµÝëÌ·\}“å]«·D•±ŸüT!ÖoWn€é3‹U´ l8ßr'¸Î·œoI�Ð’4o’–T¢@[Ƶ]‘AÕyý¯•¦>d;À>â«ø:Ò¡�=\a ¸.¼cˆ¦F$E&x\û¾n¿¾·@·C uÞ£°Ž³ˆV\mdg`Kê�´ÈäÎ�“R÷§#‹¦/[„þ~7ÄÒ÷�EÀ,þ,¬QhûÅ�␍dâjK*M°êŸë5¿KcÉÜ\Û~½V4=W÷pCÇ%e+­-tƒd„©&jì�‡?m‰KÄøȸh²U÷ôòÕש¬×\ái¾pÍÅ{ù@sArýÎÝóÌ3ô{æ™Ì"¿ºqC~Å,"[6Éw¨6‘á46ˆ¥ÕÈ*ùˆÜ «Ø¶„-e[t¯/Ò›a*yc¿?2 k^#Ö¨Pc1w7Å#tg6×ùñua9yLjÙ?4¿¥¡3$¾«zðÉArì•0 Søô!IšH÷¦iWÉÆɧYñ¯Ù¸¶ýµJÕ˜ú1­Íz.ÐjSÆ‘Çñ°×ß+&6£ã5¡€&„’åú‰ö¤£Æý¸B».¸¬œY㻹Дàj_™3¾.*gÚø:wÎ4 vœšO9pú´žÍ-៳ºx—Ö-ƒÆæ÷ݯäŠ\u©²TTÇmˆQiOŽQbiqÆ/€jÓÂت¸ñôI³6vmÜÚøƒp0N›Ó½äDú`2œ¥JIîaRÓ‡³4Ÿé6©& Áëm÷RÓ
'<ÿÈŒs‹—žÏû”¹GM‹‘Wkkk±Ç‡Í}jì¢`ÖÝïÜéûô�Z‘ ÿDóM§)e?ÅšƒÖø˜€èÈ´©5‚á ³[!ÞdVìN×…ñu6òÚa8l×>ŸÙÐâÓt/ŸÏlñ…gt:¬œ%§Ïê®Þaƒ;` äC,¢#ŠÅúB
닃ÙDvŸý>G.�D²¥¸ž9ÈE KÂ4�[KÖ’ÒÑ$9“é²¹ùlûCÂÛv ›ÚÒÊVð&ÍÛAy)�ÜEþh¡qä¨)4g¢Ö @F ˤºÚÞiÐôÔø­Ô×g/ïUZÈ~RFG]rG24ߞǙ cE†#faÔ™T­L–Ì’âéö�Ï1Ùž&šs[׈¾úšqé'R#†VxÃ?4ZÒBáz1ÍJ�SL­*¥•Iï´hh5늲ºC�±°˜éͬï÷a¥ìnè¦9óòù–›5R¨ëaþü¦#:ÎïqØcglº?+Œ…ñ05ÌyP␍ðXTfæ&´(Q,†ç²<žmŸÅJùbVÍ—c¥²H]lÞÀ6òÕö�üi *Ý:'Aß0 “ùIù÷ÊeWxÆ»ÛgllÎö<ÔÚ—­’kÈß³äyyn␍ø#a‡e␍Ûá2s—DŒÃñ%ÜØ/hŒYЗÄá‚,ÓÒ<úF‘äM2ž}{â*KgÝåEÙ(³Ø³ì0 ÊR™- ÅÀ‹X4Àú±näSrµ\)ƒ4id]y”¬ÛtÛ¦
ßkÌ;”_X³¨Š�lûÎ74è†[ŒíêpwÙÖ·Y-TÏb]{,»=ƒ_o.škåèÚöKµ�ÚMÝI»^óBM5«\cܬ?�[¬šZ«%˪r4#¼h¶ÑÒ
«)^n%ã2ÞÖ¢uΤ¾Jºý}*� 4‡2ñp…SŸ¼\Ô'έ‘Ü­FXSxŠêQS¬ë 5ÝZÆ—óeêëj¾V]kÝÆ£fÇɬö2÷¶ b™˜kη›g[ªÍKh¶àÝFîÒ”ÒŠ¢֒ϲþl[Åú¿%W5ÊU␍¢¹ÍŒ×[ûŠîmô1Úz14«9äyí‰/ùÓ)7ÑjÒPA¡)
fÑ'd$*‘;,îŽ56E˜P³@|”SXcbí‡nk¼]IÐ#ßÖ »¯uÎ|¦¾9‡gèåÖ…h숇ý‰Fú.�`”°ª ‘ÌÍ£°›â/óòìeJQSÌ)Oâ`6˜�f£y©X¨,‹"6š6ª;M;Õîä-KdÝ"’qëËô]ÄE$%›o°¾kâ–ˆ7½ÿÚ¸G_ø5ûƒ¶uí›äö;¶ó“QÛVÊR¶*8³}“h~ïw[ŽóûÚ¿Ø°nÝzãBïÅ©&7­õxê�‰=N÷1a~ÌYÏž¢!‚™ß£…ÛF%ÙîóéwùjC‹«á‹Ô#‰«kÑÈy-9ÝÉ’õ—&¤ù¢˜;*4°&ÜW_?ì¥å�ÐѸü¥ö·Ÿß¾ýàÁíÛŸÇ#ü¡¯[
ÙHf¦2²PF6~òI#UÊR:Ó© ôõÚ¦úSLá–è00%¨‘ö␍ ¬�;ãRA 3›MÙš9,;>Ú;:Ù˜š6JMã=•™yùª‘žá”ŸþˆÔžÙ=+znëYC嵞õìèi¡që/š¨H
§1ÒÛ@Z¤ATúŒ:½öÅSÇ*n=p¬rÑ–ÇŽý°nÉÒpÓòê¿}Üþ ßû“=§ö·oà{÷í~í¹ö␍JÁ¡Y3—çWu®LpʯÞk�äÌ�ûþ~MRšŒ³Oç'Ø£ß<s}ÿÅ/A€ä> sˆn°�êEªÆÿô Üä#|ð_Ñ'–è;~çE_tg…S_1ÿø2}òmºØúÏeþÕK¸aþ÷ñ¨�”%zT'aô…RÚÑôwÖÓúßJ$�¢§~–sÒYåfìw²gC˜��=ÙuWè\úÇá–~å,ÀÎ~Â&°²¥úIW±�¢T ¢`Pë'‡~!Œ·ô+·`Agdw›ôŒ„b:_B.�ƒ§Ðs�œr©¯’žetîšG§{  Sð:å—Syø6O—ÔÝD«€%$Y³(6 Œÿ,Šè<¦kH¥’Fh&qèÿ”½Šj%é*„¹4rŒ%=EdË#`LîÒUe´Šé©�­šîâ´þ VwYÍ!KÕdk¶á×,c…$ó¿³x»÷EÄ[hh+6$
␍�<¤E�\ñÌ$½eÄç!ùr²^hЬ#‹gæ.œR8¯*·¸²ª¬|žÇ7 mHVyùÃ��Nº»¼bIeÙ¬ÒžÞE}<¾ÔÔ4ÏÌ%ž¬²U *‹ çöóŒ�W4À3bÎÏd�«Ê3¹¸ª¸²º80Àú-ÑÁºhNaõÜÙåófy²
Kÿ�`È|Qiá¼YÅUžÂÊbOÙ<OÅ™sÊŠ<�ò¹…eó¬�yk\¿3þWÿÖUÏWû;nHluã×^¼îï‚x͉“xUâ{ñ¯NüK¿ôâŸ7�–øE?bK+þ©?“øÇaøi~"ñ¿|xåòq%ˆ—‰ñò¼ôñ@q©?ˆ%þAâG>üÐ�¿â‰„ã®À÷Oàï$¾Gìï­Àæó÷ˆæxþ<÷nœ8'ñÝ8ü‰¿‘øïÿMbSßiLïHlLÄ_ûð¬Ä3ë5q&ߊ‰oJ|CâëOK|Mâ)‰¯J<)ñ„Äã{Ä+ŽI¬?zBÔK<zdº8z�®VŽüÒ+ŽL÷wà¿òK/¾"ñå –ø’Ä:‰/J<À_8ñç/xÅÏøBm¸xÁ‹µáø3ôÏZñ Äç%�øÓpÜ/ñ¹}Nñœ÷9ñ'¬!–š >+qï3v±Wâ3vܳ;Fì àî].±;w¹ði+î”øTÐ!ž’tàÚÄ'ŸpŠ'{ãNÜÞŠ�o;!—¸mët±ín[­lý±Wl�Ž[ýÊ�½¸Eâc��I|tn&77�ÀMmb“7Úpulà#©G¼¸^ÃI\·Vë$®Õp�ÄÕWIôw¬\±B¬”¸b.ಜH±Ì‹K%.‘¸Ø‰‹ìXmÅ…´bU+V¶âüV¬�X.qžÄ9Iø°ÄÙZ–˜=Ë$–®ÀYÔ(‘X,1 ±HâL‰…ð ²ãt‰Ó$N•˜Ÿgù­˜gÅ¢bÄ>Ì•x?Y¾? s"q
s‰)Ñ8Ù�“ÆEˆI³mxŸÄ‰\b¢Ä .¼Wâx¢Œ—8n¬KŒ‹À± 1Ö…cx�ÄÑAÄ‘ïæýÅÝ­˜uGŒG¿ÄJþƒp1Ü�?È ?ÇÌ»"Ó߆w9p˜Ä ‰C‡¸ÅÐV2Ø%†¸qpºM vaº␍%bš}wÚ„Oâ�6Lh©hÃý-b€ û[°ŸûÞá}xGŸpq‡û„cï^^Ñ{öòbŠ×&RÂÐkÞ“%öÃ$ò3)=ìÞŠ‰äBbOŒ—׊±YC�‰ÑìF‘ê&1Š„¢b0R¢[b„Äpb—¨‘¯ZºV`X�ö(á�h'n{Ú$Z]h‘h&6³DÕ�¦*DT("‘zQÒ½KðþÈ\Y= ¬ßÂúþ¸àÿzÿôJø(çx
endstream
endobj
63 0 obj
<</Type /FontDescriptor
/FontName /DejaVuSans
/Flags 4
/Ascent 928.22266
/Descent -235.83984
/StemV 45.898438
/CapHeight 358.39844
/ItalicAngle 0
/FontBBox [-1020.50781 -462.89063 1793.457 1232.42188]
/FontFile2 62 0 R>>
endobj
64 0 obj
<</Type /Font
/FontDescriptor 63 0 R
/BaseFont /DejaVuSans
/Subtype /CIDFontType2
/CIDToGIDMap /Identity
/CIDSystemInfo <</Registry (Adobe)
/Ordering (Identity)
/Supplement 0>>
/W [0 [600.09766 0 0 317.87109] 16 [360.83984 317.87109 336.91406] 19 26 636.23047 36 [684.08203 0 0 770.01953 631.83594] 48 [862.79297] 53 [694.82422] 71 [634.76563] 80 [974.12109]]
/DW 0>>
endobj
65 0 obj
<</Filter /FlateDecode
/Length 289>> stream
xœ]‘Ënƒ0E÷þŠY¦‹0ä±@HQ¢J,úPi?ì!±TŒeÌ‚¿¯™IS©–@:š{¯Ç3ɹ¾ÔÖHÞý¨ Ы=NãìB‡WcE&AîD5´N$ÑÜ,SÀ¡¶ý(Ê ùˆÕ)ø6'=vø$’7¯Ñ{…Í×¹‰ÜÌÎ}ã€6@*ª
4ö1é¥u¯í€��m[ëX7aÙFÏŸâsq’8ãnÔ¨qr­BßÚ+Š2�§‚ò9žJ ÕÿêGvu½ºµžÔyT§©L«•²Q^0�˜D² *2¢<eº0íˆv’¨à”=§ìX¹¿P?÷›åo�¶3–eœ$9Wr’<òeÅ=‚MëëÖ-<F§fïãÔhU4®uPÆâc›nt«ký~'“š
endstream
endobj
4 0 obj
<</Type /Font
/Subtype /Type0
/BaseFont /DejaVuSans
/Encoding /Identity-H
/DescendantFonts [64 0 R]
/ToUnicode 65 0 R>>
endobj
66 0 obj
<</Length1 36236
/Filter /FlateDecode
/Length 18368>> stream
xœí} xÕ•î¹UÝUÕ]Ý]U½/êM-µ–Öæn-^¥ÖjɶlɶlÙ¦mÉ–7À«Œ±Á Ç,ÆØ„$€�’°M2f±BÀ!™Bf&“Io†dF dÂ’d¬~çÞî–åØν™yùÞ÷Q¢þºu÷:çÜsϹ÷¶*‚`Ñ’Êøú¿~ãabÂؾe-�½¿ùÉǯâûÕηÖméß&hp·`zٺݻBå¾oàì¶oܲû…–W¼7‘�ýƒÛÁ€Ð1ÚÊÆ«÷nøà‘ï`8‚õ7æ�-{>qt À|÷¿¶i}ÿ€xÕß|�ÿ#Ì_» #Ô§Ìën¢ï›¶ìÚsÿ ÊI|ÿ;\}õ¶uý�Ïývë?�íçméß³]xJú!ÀHæmíß²þ‡ß3ÌÀ÷˜^º}Ûà®ô,8¸‡¦oß¹~{cÛËÿ‚ï÷búÀs+É� ÇðóÜAÌq(ó$?Ç2ÀXY¯ãŽç�V^-����LãÅKé¹0�^<¸ ËIÜÓ´5à�`ÝzB/½ =ϳ0­ @÷␍ÃtóËÖðmé5�@NŸCºQ4‚ Q3¢‰¡,ˆPPUÐ5°"ZÚÀžþ°ƒÑND'C¸Ó7CxÒ/Cøóú!1~Ä CJÿÂFÌg�|Ä(@,„BÄ(Ã"ˆ¦?�b(B,�ÄR(M 1†eC,‡2Ä
(G¬„
Ä*¨DœUˆq˜–þ «!ŽX ÄZ¨NuP‹8êgÀtÄ™0qÌLÿfÃ,Ä90±žaÔ#&¡‘rèwÐMéGá£Ø͈­Ð‚Ø­éßÂ\†í0±ƒá<hGœé`ÌCì„ùˆ ßG¹èDìbØ␍‹Câ†K¡±§Ë` ârèAì…eˆ+®„别 7ýk¸V ¦`%âjX…¸®H�A¬Fìg¸Ö ®ƒ>ÄèOÿ¬g¸Ö"n„uˆ›`âf†WÂÆô¿ÂU° ñjØŒ¸®Lÿ
¶ÂUˆÛn‡«wÀÄ�°5ýK„mˆ»`;â5°q7ìD¼÷À.Ľp␍âupmú=¸ö ˆ7 þ Ü×!ÁõˆûaâgàÄ o‚o†ýéwᆷÂÄa¸ qnF¼�áA¸ñv¸ñ §ÿî€Û#þ#�ƒˆwÂ툟exÜ�ø98Œøy8‚ø¸ñnø,â=pâ½ð9Ä£ðyÄûà ˆ÷Ã݈À=é€/½ˆ_bø Mÿ/xîGü2<�~¾Âð«ðEćáKˆ_ƒ�‡…¯ ƒ¯"gxF| ¾–þ|A|EüC|Ž§£pñ$<†ø$|ñ<Žø|ñixñE|N"ž†'ÏÀSˆßdø<�þ<Ï ¾Àð[ð,â‹pñ%8“þ{ø6|ñexñ;ð|ú§ð
¼€ø*¼ˆx–áwá%Ä×àeÄŒ&’ÒãŸj¢O5ѧšèSMôÖDŸÚDŸj¢O5ѧšè/¯‰èh7°±mdcXfãÖÄƧ™�I �
i*WEV6flllØÙxp0‰w2)w1iv3Ùõ0Iõ2éô1)Ìc2çg`òdrb²f2‘Ï$ Âø]À¸[Èxeœ+b*fü(aÔ/e´Ž1Ê–1:–3JU0êT2ZT±/Ÿ¯¦ÿ5Ñ÷Ò?AMôzúoQý±~œ~ 5Ñߥ„šèçˆÓá¥ÿ5Ñ»ˆ3áWé¢&ú5âlø ý&j¢ëá“ôP�K¿IÂ!6=b1¤ÿ
š‰±…héïC+q"¶oú»0—øÛI8}:H!â<R‚8ŸT¤_�db'©M’™éoÃ"2±‹4"v“¶ôK°˜ÌK –�NÄ¥dqúè!Ë—‘éça9I¥Ÿƒ^ÒŸþ&¬ ëW’+Ó§aÙ’~® ;Sd7âj²7ý¬!7 ö‘ˆýäĵä¶ô)XG§O¹ q=ùBz6�£éoÀFòEÄMäËéÇa3yñJr"ý\EG¼š<™>[È3ˆ[É™ôqØF¾•~¶“—w�³ˆ;É÷Ò_ƒAòâ.òÃôÃp␍ù[ÄÝä§é¯ÀµämÄ=äÓ_†½äŸ¯#¿L?ד_§¿ûÈoo "ÞHþ�¾†È8â~Ž ~†Ò÷ÁΘ¾nâ,ˆ7sÖô=p çD¼•ó"s�ô`„ËOnãŠr¥é»àv®"ýY8ÄÅïàjs3ÓGàW�x'׈øYnnú0ÜÅu¤ï€Ïq Ó‡àóÜâôíðnâÝÜÊôÜíF¼—[‹x”Û�†û¸«Ò·ÀýÜVĸAÄ/r»Ó7׸ëänL€‡¸›¿ÌÝšþ |…;˜‚¯r‡æîBüwOúFx„»?½åD<Æ}%}=çA<ÁO_�qO¤÷À×¹Sˆ�sÏ ~ƒûfz7<Á}+}␍Œr/#žä¾‹ø$÷ýôN8Ž�ø÷׈Oso¥wÀ3ÜOŸåÞNoƒÓÜ?¤·Âî]Äor¿J_␍Ïq¿A|žû-â ÜGé«à[ÜÓ›áE.�øÏ¥7Á·yñeÞ˜Þßá-é␍ð
oK¯‡WyâYÞ›^ßåéµðŸ�ø©Mô©Mô©Mô©Mô—·‰èÅáÍãmg«Üô©CíAãi
¤ÓìfKÝ8ŽZÿtýüÿåEWãÓs¹@�øAzœŸËIô=½�ûž€ˆšóÃôxzœ;NsâøUÓsy…­à¯…H;ù�[ˆùÿï�à©¢mæZ¸MÜÛ¼Dfq/€„Ú¬e¤ÇÚBäÙ"bBí³uÉV³¯ 6éC␍1ŠTxc»pÌÍÁ݇ºlê†kp¼Ç1­ó>�z£å¾ KÞŠ€QîDÝñ
ÆnÅr¥¨#fã{␍ÊÛ»ØZ|‡ÜŒeëÿ’þ3×Züª>úÕHu¤4£8$z{–.YÜݵhaç‚ùó:Ú綵¶475&êçÌž5sÆôºÚšÊŠò²âhaA$?è¶kªb–�Iô:ž#PÖië �FûFuÑH{{9}�ôcDÿ¤ˆ¾ÑFµ]˜g4ÔDz….̙Ĝþ$g2“39‘“¨¡Ù0»¼,Ô �¾Þ �&+»{1|GKdEhtŒ…;YXe/f| ‡±D¨Õ½©%4JúB­£m»7líkÁúNÊÆæHózc9ZâFƒ2†F‹#ÛO’âzÂ\qëÌ“HfÚì(_ØÚ?0ÚÕÝÛÚâ ‡W°8hfu�
Í£"«+´™ön�,{éà¡Ó*¬í‹™"ýWôŽòýXè ßzðàð¨-‰´Œ–\÷Onüäõ£e‘–ÖÑX+›¿x¢2ª/T#¡ƒv>2öoÆôgc„BõC Aú‰dÂô\°oØCü¾p˜öåöÓIX‹/£û»{3ï!Xë{’•±£\My)—âè¡)ûs)Åû"aʪ־ì»7¹G÷¯␍•—!õÙ…ø¦‡FùhßÚu›è³ýÁHKK†nK{G“-Hög¿µõdU%æïïÃ�ØLÉÐÝ;ZÙ>j�4e2`Dˆò`ó’^V$[lÔÞ<
}ë²¥F+[[h¿B­ûZ2¤uEº{Ï ½òÎÉê�ïT-˜´£ÎfdJ´õ`ïÀ†Ñ`ŸoåsC¨×M®@ò­ˆô®_A¹QGKÞÁæ¬EV
¿íOrç2Ó/ ¥P/çãWPnaD¨␍!Ò4Td{¥mšê%>ÈeÃV²9hè‚zð…/ln§I<-ÚÜî ¯g®?Ó%_¶OúÂQiR]*FLô)ÓÎe»–ÉM;Tj]ß2©ƒTªÏv0[Û¥ûÉQZdÆeg{.‰/Ä‘‹qVâ(Ý¡Qè
õFÖGVDP†’]½ôÛ(­ç/‰Ìï^Ù˸�•’¥¼eÒ§O¤eC£\3
`[Ì—ã){ŸËÞ'^Ûÿ$¹#—:(Eæ/9HkŽd+„ÐÁŽQ@‘Mâàœn­ÎŽß6To‘¶þHH␍µì?�Þ¿öàÉdòàöÖ¾M3i=‘Ž�ƒ‘%½³}¬{‹{oð]G›³¢�=iSy*Ÿ¦“2Ò}2IF–¬ì=£„F–öžäHÓ
*ýîMø�¨ìZC”8ûVl:Ø·‚Š68‘�ø%‘ztª"õ' '˜F�‘õM£r¤‰Æ7Ðø†L¼@ãEd q’r:wðèïpè·´$¨­¾äß´wè߯ˆ™T“ò;®†{�¿‡ÿ@w£Þ¬Ÿ)oÿ”ùKØßËR¯Ao¸ÖpÌð¦qÿî2¾o|_6Ë¿5­6ûÌ;-IËKÊ”WT§ú€ökžõ3Ö¿šüg»Ùööƒ‡ã;NÁù¢+èZê:æ^ìñ¬òœö–xï÷•ùÖäÕç}.ïþ5Áƒýòþ/l›ò_ÉòoÎeþº'ý­ÿ þíÏØ™?ºþ¶�␍÷­Qfþ=ó½ƒÏôÒç¿£O¤W¤›Í÷ò/ã«!c£µVãäeî×(_"x“Fg‰$ò•¯W¾NÔ·_Çÿ¦U%´°V„wœÜÿ÷ësÖ8wðÜn, ÓsÉ^Aï»?Ù¤óK�œÁHŽiü½‘¿ÝHŒ"2y_&OÉä!™–‰_Þ"ß óŠLäåXÁU‘-²q€×­…†DC‚¨o¥Î¥Î¦Øµ#®¾Š¸#>­ÊfwºÄ
RS][ç²�Çæµ7-\³faSû<ÛÿÓTùš�þxMy꧴_bz.|”ë—Ñ¡+Ôq‚ŽÜ­{W÷‘Ž¿YGt¢¬ð$Í“çxòOöóÄʯåwò<ð„ï¥ýRÄ öK‘�kyÝÀŸïWu´¨.@vA,ª'Gÿl¿¢é~ôbvb¿*΀�~'é�ävøfÑh´(␍æEfÎ,
P™¨LÍ:£ò�ÄX<›VUç´g¨Áæž$…¡v�JÈNI‘®ŸîJl®0»eÚ‚—ÑÈräiyÒzUÏIú$·tO ÛóŒN†
ÚádñX,…,öþÜûÆ´ªÕ)[Âñ~ü1Y¾œÖ2mþo¡/+Cþ©¾ŸN¿”4™í ˜Bbà×AÃë;¨€Äv`ßìB$?Š|IÄ�ß* è]ë+.öá�µ¥ßC)¹¹ÁCQÒÁáㄳŽèx~€ kÑPnÀ‹Tªo␍džoxeZ•+Bs×�%©3ükLRÓp÷*ö'?Ú¯*Ðé9�~ÿ>møL0 ÐXãi$ªRAG�Ã(šÑŸ}zh–RZ’¦*L‡„¤Ÿt"@§ jVX ¨& bØyˆ~û)LÌ<�>ߊf¡�gh.ù0ø´:}G ´76 –k*>´#<} L5ÄÆbôFªÅðSßb�iU@Ÿ$–½lŒŒFÒÂê
.’oáö—ˆ×sñë·l¹žÞd«9X�V͹'Yõ�çŸÿ½glXP^¾`ÃŒì“r3…°½:t%kxÝíb#!(p’ XÌwˆ_¹5â6qHäE8¬šB¦*S—©Ï´Ý$˜L¼¾‡_†üAaL�%R±\�z#•›�Â_OêZD³ðbjÆÕåM)S¤¤ÜÁE�­ÕçæsÕ²Ûi©<a~…ü+ƒNVò¢ÍÅ»l·‹¼]äm¢Kt©ÞC&HªHܤd@‚V^e¼ÞÈ©å”ÏVè, ìÓØóµ¤ó%|␍ªŠ
‚GÄr}�ëtú=Æx9+ºL…Xð)ã0ðÉSè,,ͱï�ªJYŠÌ"P˜$Œé56õ@ÃXeJ"³Î˜AÙ‹Å)·Ô·Çvœ�S¾2†)••ðía}L¥xƒŠòKìTj¼#ìG«kªë¹ºz¾&ËMÄ<²˜ü�¿jv@+/ö‘†ñ+H0^ð”G¶PÌí¯ŠzÅ
CA¼¾`ËNWÐÜØÐ*âÚ"Á¤¯ìnOÜ••ñ¼@ižYu¸„&£ßk]�T®K@~‰TžßI␍“»Ãd8L,ÒAïF¨¥#¤ZÊŒ‰÷“k1°Bݬrê¡#‘#ODxv‘ØõQ’Šn‰rƨ1Zs%O:ø<ÇŽ‘`ŒXbDŠÍt{jkfD£ÆÃ’¨…#5´Þš*‰¹j¹ÛqÄ�Ì80TêQ�!ÄÆâ(6c3æT·úvœÒn5ªÑ±TŠ‘/•RDß2£¦ÕÅk)Éb¤†Ê~†zB†xŽ*Ãï@2Gò+8ªÿaEg¨ºµÀöÔ”åÙÃ1wU³«ÀTXQã¯ëªöÖ—ùâ…®`ãÚfo]U�dÕµ´Í¢g�Ñ[žŸWì•ó”¹’M•}Óš‹j;íR bvayçô�d2éº%/ê TeœG‘pU²¡˜#’F,Ž˜žë§ë9ƒž(z½ùvÑhp)v2k�}›}ÈÎÛo°8Á~Øl z¹G9¬ÓéqD%Ô1:¨Æ•cq¢¾WÇv®N©oý<>Çñ•¢S ¬N‘Š1TÏŽH␍r“Ŷ¦%kªV,^¼rüû¤60gfÂþ³÷ˮٷ§j¼}ÁÉ“äîТe+ctä7¢Dü+ö¹Iªªê7;•�Y°Pöå_é$ÎC
ä9‰/�Häö�ÏòùBsq$ÿpû˜bôI8^|T§ù¨␍˜é› Á'…–Y´#fZµYb² -‡ ëéwÆ2Z�~ëÛñ·f Çp  , Œ¥^™à»�N¤ç™:Áy¤Aرðß½çŽ`C_“·¶‚2±szùœ¨æmÚºTGž#:�Žœöl¬X8Á;{~¹':«Ø1mÙâîòEJ¢®¹Ù€3
áNƒÊáÞ§Ëé (ÈÎ(^Ôô‰ºü“ä T=<<Ëy¢¯ˆ"A€Ø×C¢íZg« Ü*ß-srøÐ\XŽWÈ–#ŸO¥ä•©RŠq/Žè©ÒA²éÙTÐ0†¥2Á¨‘‹§p< ¨ŽM%�)’� Ps¸�åõ$#ô”2Ñ:’›Ðh˜¾ñsWˆ³úT›½�‘Y‹«]ÞšÅÓw^ûNdv€S°º8\07çúû¯¬# ‰»zÉ“Z0«³4ÚÕTúÀ›f³ì’ËΊä•%Ü-í(7³Qx>d²^˜´ZP„Eýí’**–ƒþ°ˆÂ‹<E™UߣŒ&"åOMØ�]ýªPÞ´(:þ9îš›ºN>z¤¼»3zËמKQ¯†ê¨s¨£Â�€Vb9ƒSû{”Øq¦y‘>TÍYVðT1SßJ#05IgZªÅù(wÂL$¡¹1Ô8­R©¤E+•ÆPe¨ñv¥Ò®T6*THë0ºK!!*škB§ü�±ìÐn
~êÜúCšD«ÑòUnc›¢„BúGœt‚§ó‘³·(Ûleã'ÈVä£J“ôTÄ33»u†Í6ªÞbc?¢ó;*´Œr‹¥bßÖÅT‚ˆR±aË+*Þ˜÷GY Ãï¬è³#J1ÇvÑ©Ÿà7␍ ±M²␍\õ„œóÏX6½qyµÓ,q­␍Ô-¬šÞ•piþBûîñûÌ¡x4?RÝå␍ÅåÓþ`Î+ …Êqòȯ‹–ÆŸ*�[ã/œÞð×TZ¦o‰¶Vók’¢,ß<}ÈZvڃŎPU�Çà™Gª”‚ Ã,´:Ë¢ƒ§E>‘Giy•�¥7’rÁ„ŠÉ™^\–{Y8»’,{ �-ìùI²§æ€!ÌfŽð!ÐÝÏ?Æs×òdšä¼¶‰r+œ•±lé-¥añr§UÐ3Q[ÕmD£ÎÄG%L�qöêŽð4È/??öb™ÁG§tõ,ê[�Ž½*åX5oÎ#ÔèFª×YHŽ1”%b¼¶®¶ºf‚NòáëßçÖ/H˜¼M#pÆòY�w"õþICð¡7þ†,t×,�cR"8þ
qü/ØrŽ@‡[„#0†#p.úüÌç$.
ŽE‘áP“2ͤ‡."YÅbÕ@µ|␍, iÎ $óy�^àý:Þ®ãõ¨Aàx‚YÜ@Ð ÒÑ‘¦¢ÞÖŠ¤KØOsx*S¯Ç^�4-*ÕÉâÊžî‰W´ùêô}Qa�—ŒŽwyÉ:òBç³]ÏvÞ…’ áyõ†nøÙP�AÕ؆ªXÌ&Í$J£,È:·ËéÀ*B&+Y c`P�킬Ç[mvί´‹Í&ÒiÂð f²k&ÐAó¢“ôn÷>ä}Ó«S¼$kÄzxÝ^÷Ç6Ç�ƒ·:¬“Ödj”…&æWd!c7etj‡zVñʬ57õ7HŒŽÆWô¯¼‚x©höœx y W�¢°H§¥D€wñøf!"W¨Ôñ³␍ë‹Ûš›
V45·¿jÈ�4Ë——ŸÜúܱ£óç=öÜVB–uþü¯R/mYú\÷<Ò«í¶á§—;HÕn[v®°©,€Ê‰’f!jÁn'Éd�3#ý¨�IŒwVá¸rÎœI¥?Ï@:=ÓõÇfL¯Ù'ÛJ÷–”€ ·zƒûôÐ␍h`4$˜5Æfã�ÆⱬOò#jÞ¢BJééü«M2µ¨{KNפ)¹h²YF4Ç´iUv{Õ´*ÇìÍ�eµåsÚ�Ž§eÅqÅ:gF¼ÓZJoØP�¬ôåMk*,,ÕN'蹇ô8m[cm‰Vë¹›6“ŽßÑ_‰Èy¨°*óL �ÞÒP ÄcâPva&ÎÙKPÏÁ»ÉHIÒdmßÄ“€„3ô°ïÇÑGgrUQò#%^ª'Œ™ù<©"�¼»õ4‹žÄù UãÇ‹‘¶ï%ífœ©U‡D'lÊ)â>…Î>tjPhÍ¡©Óa¤ÊÄØšï¦QùAš�–£�¤�–␍î‹°´PÅ,>ÛèdÏx␍Ì­`A¢Žg| õl<^™`B*FR1ý$•ã+øóÎ ]áÉþŽ=Ë*kVîi‰µ&BBž!?–ðÖõÖ‡ý3—ÏlîuzÄ‚Úv¥êŠáåˇ¯¨2©ª®K°X Ñö�Éú␍Åyr—^±©M¥ðJ¡
~8�ôÛUú9v‰gÇY®Ó®¢pÙwCÒÀüàO¨?Æƨ�æ*p<蔎¼. K¹öQ=Ìljõi”.fŒÖöIzJ:}s bñ RT?Šeh‹eÜ'4tP™ÝC¨'¥b¦wdú†Ã=¥ëKJÖ—öÞ0}|øàÈÈÁ’rƒ¡œ¬ZyËò˜hä2Š±å·ŒßwÇÐÐ9÷kªù`~¨u“ 5I¿È+Æ ‘“Œf�4ÇLú½¢H {å&~/i¤n3l�1cqõíÕ©³o°e0Gîoytü›$üm²†{zÉÝï/�L älÁÅItmeVµ1SõDÅçë}kr¥Ú2ò•ñ‰ü±Â.ÿ6“÷ßr«™¼ÿðifšP�L–QÓ”Z¤.gÑ IJ¤ÓÈ‘c%%I$pIRF–”*‘t‚␍2��î6Ñ&:(‡’&Ê"ZÞt¼ØÅra„ËKóz÷i„ˆN*û*ÌN�òNk-*ÈÖJ␍æg1cÁ>NDŽ&¨0Sƒ?‘N£(×9¦¦P¶?B;Ïš;$¡YøÈ…òM&Ë79×o*ŸÕV�ñ½­•Õa!èï‹×,Ÿ“|Vé,3é^g4ŠUWÜ:!âÝ6ONÀ␍º,WàYä
g@�êQC€žè�‘Aþ˜Žkä Z³�{7…²gKh‘eýýÜÓçæÓÒÚ«_ÅÒ6Ø{x¤�…}£J´A␍Š�ØŽ9ÌæÀWÙH#�t@(F"íÖFÙBÉì§~Ö>#[U2ê©RÐScU/IÙÑ@µlŽ¢J�Òk,ã
^àÕÖh òUGÍŠæüùƨ£9ÞÞÔÿ‹ø²ÆBY³:•pÇ
òzN?ƾëÁ—4ƒ¨äŽ |£~/i¢‚ÈFÝÙiU…(| �|<¾¦éRüì±d3šê…X²„Ì;…¨Fµ¬{„Ï0ý«ÃÓ¾!üH˜û8Dõ“␍~â¡+.˜¼ÜCÜTŽf`Øà #–O,Üf ùØ@$É-q¿—ÈO¤÷$î¨t\âF$²Y"èY‰wk�hÜ°†dUѬ{éi¤bìx�­°¡‘ P
Íí�ü£>â|$�Ü’÷…<nQÉ+Ù½»|›zT=®ò*ÍÅŒ*‹™HòñRgÒhwî+)É 6å5úµÆ|º0„ÖI¾ˆežuxÈ‚Q‘ˆl©³>Œá}j£‘ÚcÔ„G•ÍŒ‰Jº†÷º­±ÇR?J�û[LjÿÙ÷nLK¥Pij‹Ä°${ u_¡/¸ £�>¬¶H­y½Hî0†£±hØ([ôktF³bèñÕ×Ït»gÖ×ûzòµ5z‹œÍÑçž·lUwRÛ=>vhå³'�Í/ÛsÓMµµ7Ý´§lüäø}‡ˆm·–ì^µlž;+Ü&¿w'CÃâɵ2áeaP•íª¬Z™=aÍŠq3’^ç¸ÙÁIâ á˜ÝÖt»x¿È]'’«D²R$"¹Yý¼Ê­Uwª—T»TήV«œ¨Jš\ÆF© 2fµ»R©5R¤˜¸¡d£J8ÇyɺړJ…‘*ZD£A1ä¦9g4ÍmkÊ[ÓYyÕæThMáë6¬Y:‡j1~Ë#5¨ÎçÓ‹Úo¢n´AŸ¶†T¦ÏÞ¡«yõùüàh¬F§|Mb«bšOÌÎabÖÓç³ïô™t`D€jºU‚�Ý™!�ÍAŸI….4Ó1n<^ò~ ±gÕ![Pñ33%Õ1´= íU°p¼Ø“ÍÉžÆÌvÒ‹yö)mÚf„Ξj¬Döé[q˜¢Ü0˜¤K'BÙµã‰õcÛ$‡‘ꋺI.#U­3kVími¾veMÍÊk›[ö®ªÙšÕSS³tV(4kiMMϬYµbdUEŪ‘¹gÃÆö¢¢ö�␍Ù'µ�üsÐV°@,¦õýSÔ™ ®œ9ãê=�O÷nFL5ø€A”�ù­{QÝ›4eŸ Z3vhf6üˆÎ†TÛÑ/¡«ß.FP(ê‰+_ÔrŸ@,w}1Ö½«£³¿d}¼>Üïª kÚ¸ç·m�ÝSãOs�Å~ü}s°¶´¸:hÊÈÉ\&'ˆù ˜3 ¾LD´œˆìÉ#æÿ£XP␍®ìöz¡„Î�%T6JvŽ‹ÅÃt^<ªƒYÏ7˜“�àed#Á&Sj;ìS¨Åú,–ò¶Ù÷9r‹ÕºðmÃÌŽ
•æ«Ø—±¥ZÙÖB%J³¦Î Šú.␍Äé\Ë,ÓdÄ…-.M–ÇZ—Eüe%¦xîšZR4{^¡«zMgµ¡aûâª?#< ¯[QgtEܪn�èŠÎ*Ó%Vè¹´$­CIòB1Ü‚ŸFir¯DnÃ)�#rÁnpgáÎ-¹©Çê¦jªÌ(÷^ܨÖq:�¾´¯”(þAíX‰ß·ÏØ+ƒÅ¢Z­j“žé#êñ$c9—'…¶ve*» ƒ’ÈtvŒ %"H !?+™½~²W§U'¬WÚ+«*mfŸe9Jcé]G;~Zn¥H´’|{ã¢eÅÑ…së]dü*–[·´®%åüø�y‰Ò¢ê€‰êæ0ÚtݤŠ“3ôEèÒÉLŒQrO>ÑÑ°°’£V2b%ÖBS²„’>¬—a{ ,z·»�ÊGv{㥧d ¼ŸìGùÛ^H
ã¾Ý&•ê=7ÎÇ&jDš¨v1U”'%K{ù´{õd¯žÌÑwê9YO¤]Ò ú€> Ì­ ±—ûØâho9)/n»Öv��[†6�sŸ•¶¢aÊ­Ö»­ÜµV² û© 0&(!‘À) ÅpbÌ­ðS×;E�àñ·²`tRÓf̸`¹§âV_I±yhÀ–½*øÌ.ãd[ÑE·„œyôñ½¾ŠYáhKÜ¿oKÃFwб¤.¯ªÀá,® •Ï¯ ܲ·¤µ¶Hö»V·n
•‡Ý&s¸¼¾lÕŸºÈì1¹ =yQ¿Ûd-ˆ·N[µVV4¡Ë¢œRQR©=$ÂÌd�aˆšÚ€n*?8¤;¢ã@GtÙ•‰o"Â^jQž{ §¼·V§ÞJ¥Îá�†qDP¦"5\áOûÊ=½ô܃\ÿRZ{7ÎeèG€ V$+œŠ¸ƒO�£ *Ö ýÛcž=DDÏÞ­5
�ò>挙²›’rÎÃcæìXŠY)ÙQÏ\Iœ`íN&È4dáHoË@2ØżÂ9eîþ`ã:¥´c`&95Þ»iµ«j~596Þ9s £ûHÝÄ[±�Vøn²tD#{T²ÑBêÌsÍÃfþZ9m$òÇ@¦“vÂýXùg…;«&$UÔS¬ŠÉ:z;€ÞÄ,3Å$ Š`”»Œ÷è?²ùÈ=5mÎvý @Õt�û�@EÊœ$Û¬�™Å}Ærg[Ç”Ò?NÅÎÅb?N�V'¶âHlØ­Æ$BaB&¤rÝJ¡c=á´ºj­uÜ­ÑÖ¦ÆüUù�Ím…WÕnª«ÛTÃ=}~ÍæKã?Û?D
¿„ÝÌCëø¤Eˆ¬NL‘÷B$Hu×ô Ùã&uVò/Vr­� sd˜�û�ø)Œ8þvùÉSÌR~?ÙCIà÷Ø=ƒ^¿Ýë(Ÿä{í(ÀrÀàj5r›Fì hvmv„ìäM;±Ãõ:òœŽÕ‰Q'™¥AQgEÝÝ<a«D}Ýé#÷©¤DíPW¨¼]%¼jV�§–·›É;fb~H$숃$†Mþ&o£Ý !,yÈ €Üc&}fÒb^jæÀ¬S5O£Ô(6êšø¬u÷ÖKµï˜m«%r<Hy~œÚáþqÆ£&p,EÀVÓðÍ­¾šÚ‘KDóØ£þØ}65œMßcþNÆtÆ’;ˆ…ˆÔ@fæ2A«™0«™Ñ„ü°tY¬¿¦;²Á…´â•EK‹®(VCÁ€e]AwuÙRòÖ­ÿtõQ²ôµ…|îÖ›ÿxë­Ü<ýÖÏ}qákã_?zõ?!']l¢#ïO=ä¡œÁ™Å¤¶´ž.ôÜŠ\°]ªf•]ªÅ*ƒb°õ6#(Yï"·BÄÝ΢¬²uÐfÄb6…-“´Ó6嫬¨.Ò`GC2éêrõ¹ö»ré]ž;=DñTz8%+ênW“­ÑÚ¨6*�r“q°Îûl
g±Ôp–¼±XfKá­áÜ»‚Š¢dœHtCÂ(íTè‘”|ÂG<Ò“|¤”Æk=žÚi1åªòk›ßÞþØñm?mÙSèX´(Y´¨#ÐûL™;>N¸ñúO¯@ª Hµ.¤š
·Ÿ¿o1ý(I–ôò I±›Eµn3=hzÂÄ›Pìôì›%=Ê,Ñêˆ]GÈ6xž@iTtA'é4BŤ²U[}£®qâKé¤]™ýØøð¤aíVQ«žÕÃÙÁM—R*H”í�­×ÕŽO[]tuíu-ÄyÕ›‹�/\x|ñÀ®�ÍÀø%nüt&KMÈe+Q¤ÑŽÚ^‘‚'I.›ì´‚m¯½Q¥½ìܹø«␍ç^Mõí³t}(Cóì¶] F—.ì×Ôëé¶gqÍiio­÷�[Ç␍Ž�m­�¾ñÈßs›¼+Ö­(_ÒXÜ7°aõâà´ŠbéÉKœíëøIRS� Œ
#õWéjE—D—!1–/¡rU2dg^œ�­
Sd:Ýž²Ÿ¨ Ö‘x‚ʵÅh‚ Ó� ˤöº5k˜zéAŠ.¶pI­Ñ`mIÁˆNLZI's‡�h°ŠI*æìÕŠYDQáaÄáíŽWŽ$”.ºø§wv£—-¶¿•Ùò}%ϸ,çb/Mœv)Œ×ÖÕä&q§�¢ºt~ÇŸ £š±<ä¨,ò&+§wVÚM±Ú†`Ù¼Ú@dvW™%à³ëŒÞò‚ŠVM¶.mæu÷ëEÁöÅ‹È_ûk:ÊÆŸãDAo-J–Çê£V%Ñë*�8Ìb'š6t¥Çyy ç¶0Œ<í elÌw’1 x¨�í9@÷³;%–TÙ ¤Ç"˜{H=‘o]hsŽ¨æœ"0g�™»ÃXų4*Z�‰�ÊlDuewÆÙ20ÛLE›4ÎÈ4–ñëlìùiuZfñ'K•ÇµÖòéËg [úf7„R–DtþJµ`Fq4©‘dwqûÀì†õmQ«�û¥z®C'®[UÜ–ð{-(õ‰ôïÈ (aaxö ¸2þU`ô)fŸ<›³˜‚6£ÙO¯šœíþHCdQ„‹$g;6æ±Ð3¡¢{ÜÉuJØ9ýcù�Ú/=! �˜3ëæ]yÌÿ5güßg0É3âŸX#ïFÊij+‰ôA²DA¿÷­ØÙìÎÜù…ñ¬-(L^�7¬i E’©‘¶�ÃQ\¸ÄV’¬(œ­™¥@4f*n_7{ö@G‰É¼ÈhZ»º´-î³H õQÏö2GΡ,X�:�OPõüO²ÏOž’qé)C�cA!`ß®²OVOD$Jº¬*ð°O΃c¿™ÊËëy,r2ü•—¤!#0]™Ñ…NÑìÝêBÔ‡lÁœ Í„�GŸç^Ê…L 'J”—É[–NyHKF‹g¨+çG–Th qv_Kapöòéå­¹Ïâõ'ÚŠW­uÜ£ê9Ñ`�¶­o˜=Ð^ì–³Tù=JŒ"ðogÐqy?ǾSÙÁBŸ–,•ÄÜ)*·šñª_b{øBnuźƶÍÆÙ|¤Ç
n+ä"˜BMäÀù5éÀˆÙ%6�ZLGÄ+°*¬lOqF†e*¡›ȲÞÆvÇè9<gwv-óFô]lIE‹*ª1u,'_HË1º²2öJ*>qeÂMv:òÚI$#`Œ¬…µQv˜+QÜ´¬|óv2þ€°xù´fͬõÔ¶¬KÉzÒ8#4-ßƾucKþM·
6©{©&-4ØKÚ×mmèöWûèÔ…p;Jœ␍Z’a��H¢•˜x‡Ñ‚ÚÅ®Ì3Ë8z%J@q„gõ5,Ê “xv!7®¾u–Îó«SdbHøI‚yÕµÄW2ˤ™ÊB�Õ¯½–ZËK&}— Ï�]¾p¼�«ØÂ8ÜB~ËÙ åð«3PœáhQ–Ñ,g™–PÙó=:ɧ'ÆÇûI Pþ'ã¡Òí*Ìò�:¦Ô[)dLFw¥ð€ÄòJ¹"ÑÍ;týDjÇ&¤Ç*ܾ[\ ³m©ÅÁ|T¸]å!Z¢¼tXžH<T®NeôjæÜÙXŽ¿lké¦aϽr~ƒ¿ðÂA¢±s—¹uvþÍBî6µVT.©/Èo\=«±?¼ïÆiËCZ^wÙ’b©,žßí*Jø
ë­Õ’'аºqÆšÖ"›4^µçjUî–µ¦vr¯N\Û]ž,µãfùþ;件ž=j�óUbÈy‘ØfU¾C2£’Ì(*Ÿð␍ù~ããù^ôqœ{Nx=óLóܶ:¾è™G¡‹£ê‚ž»ÊÈFjýìŒ'ˆ–`uCvr¡Ò‘=•¨u¥¼³üõ‹§ÙSæ@¼P ù]zîuü#£iè­ÿQ«ZJm:½À�wÑ•µ&ø&÷5â ‘TAS5NÒN˜ù!‘œPut8Ê&k»î6ã®æQƒŽ­NÅÏÅß]�žX"¢%Šrç†Ñ…<•ªôD"¼9iu8//Lol)ý|º•µ¤€�Kú½§¨­BÕMÒNWÏüªŸ“ü'<¦!o<‘ÇöÐÝlWos.¡£ÇÍâÌzc¦ ¯$²}ˆÅÄóì¦>±`›Ô#½)j6½rUIjUY¶kÏ ú¼nÖ ’çúùðù~f8úÈQ/¤“‡ä ûtÈ?ArãH¡ª�)u·‰¾ÉÔ|C0¨njXäÉx0;Ý–°»É@ÓKpPýê#�¶åjw�ªÓ „qrº©CAc™•áêà„!ÕaW :U¬Â©§H'-jóQ;™oVÛõyªiÈrÂçìPU:«©ªàèPšQž„yúyçmðÛ{‰™tg3VxÎÉ`ëg“×¢idn␍õʺl8+›Í�3í[u³ëóR)÷ÌéqëWíÌY$àjYÔ‰t4O·ý�J\Ô=sv�Ã3{Îö ƒ�à÷HSæ$m$D'UBw‚„�z ÌLë«’©]Þ¯âO˜ô åjB0­xÎû6µ€vÉUAj°/tÁèß–µ§$kÀiäÚæqÛÕsG\«�Ïð�Çy ÊI8©E¨èeg¡Ìä–ÑQ–ì6>ß<•=«–3ýØâ²™*ËL³×MÌ7T)¯‘øj´K*]±²Ë›”/¬}¶}¶j]ö½’N¡TÐ@²Ucå +êÙ<zê�¨BhÈ·(@”‘±¡òeó‚ó´y±hÔGü|îx^ ýÄî2�mé’3Vh¢2¡¢ÆŒWf¼ø�Æ~¶:µ#~nÆÏR±±w/Øe˜t1óÔéÊÉévRd²R‰t…6·Æ[\b ¬68{ALI<±üÊ9²$¥ŒžXØò»u)ò{Éêóê­š9’ì­¦ª¦¢©Ìá1zëós/¯#ãz¹ä¢zS V~”…š™fÊ'!;EM"î{É =×7”õæNx^ôÇ�ë„Û9Ï0Ï¡Ž@æ˜aÎ,ÏéÍ ÖÏP†l—Pšø}W¶^¨4Ù×LV™Ù®Ó9öß9ZQ6ÂgÎ@03§ú¨óQsª˜®üQ°Ó-ûx,<&ÞœQí=`dó€‘ÍÆÇB.êù¹¨*p�(]þì„?{ðÂ?¢ïÎX;cÙí£Œ…“c(™tØ��icG,2æ#ç+h¤ÛD�¹gÿ¢––Eô&ºúº€?P?g=}®ŸÓ»qc/ÞÀ<©¹œyC­çë’½fju™(W87=›SE-•š/nª¿�!6*Á˜¤Ð¯P˜R‹®!ω|�ñú»ÜóE6¿‹Æ ¸ìøY™9¾!‘]ÍŸ´%Æ>mâ´]ì¬ËºPŽHî<É™•óK+-Y{¸?k§Âë˜ILøUkÝøij·Ïb&ð›ÜIɆ10.Î%ç²ßxæ h Èœý™‚9k 3ÿÉE¹ê‘†\Œo.Æ7׉äŒ\8 °%ëŒ3‹ÖN)Á²*�åKì“%æXE±6ýˆ—ÅxýÝîù¥¥‰’ÎļRÚI]™ƒh6°: cñÊ ‰lY«Fc6Ž˜³"5ƒèóYWÒRY:e?s2×…SYŸ“ðÅ­Ô•$í:aí*êeÚ¤s‹ÞdNgn„îA
iôô° ·Ñ9ÆŠ“Š`Qô˜ÚÇ©8ž=€€¶™8þ�<£L"ª)ðªœ(ö&¤Tx-gãõz®['ËÜø|ò[“[)FŸäMåd&=£ð“SfYföÈLU†ì¹•<zd4© °EÝt¤�’,?;^ò³?,¡ïì‡DaÉÎN90~†³‡È¨rgžŸ™ýÂÈHµ9Uäô¤)slšlt¦·R Ö[æ�hIH�ð�^²ë¥°> ÷òCÚˆ­à±Ê†Jâ’K+ÔXÐ�KµÀÂŽ¸:²G\íØ�Œ”uÛ]#6 3–œ¢Â;ûÛ¢¾ýUY¯¤.ÚR¹¤ÏÌÝìGÑÜÆÊ&o¬0ûè{3êjëuÅî␍½Î²¨_Ò”dyÑL³¯8¯pf‰óªu­ -šÚÖç{LžüªHk·^”ø.I †5¯Ãj´ø
…íó\B—ÀÎ%ÌKHösÇé¿–T‚žJOƒ‡·…(ç83›ÓÍîv³g‘‡ð®!Ç ·‰Æ÷PÑ7Œ˜U‰îþ©t#KívqÃÐ�Šîu¶”Ëmï½;›@Qg?l;¿8�±öµºG_}Õä.p—&ŒVK[yMk©–⤅ï%ü&›®StøjU“7Õ\OÍIà€®dXpc—šˆmHqœä8ázÑEŒCÒ §½ÃÐa³0A£G˜-8­°ß&ñݹÃnÎ*ô`O®?¹}™:-A~�3æìÅqgjö\%”‡ó‰‚ÓIry␍)ÍbŽç9òlvOŠ¼ËÑU«çžQ˜Ìəà ÔÕ¦‹†¥=ZͶ•ï4JØS³›ÚÙ3ZÞÎDyžÍÙn¶š%ëÝÞ,‰:³NÊl*Øé2-Ø(µº'èn—ªãtÙÍ›µCê;tóøy” “7cRç𞼓ۉ¡Â¸“¢ebHósKü|y·hó´¥Ó6␍˜Â…QM‹†Mœt×ø﮼’˜îš¶mˆââ␍[¶MÃï·¢2þ¿¿€ÿ~Ò�Œ?]¨r²ÙŸ™ÊlpS’œreŽ{fMß÷“6¸úbz�ÚbwöׄI=àÎýÄ@Øó)›ÐÑO¹JI#Ò5Y@ª H£di{S
¡Âö�$YÐUÐWÀ³(Åæj/ùBCá{¸ ¦Ù-„*•—èzGØì<É,oÌ3S{Þˆ ÒF�¡zÐ`~n¨8Ö~È¿ù; ϹÈí@n²7�Æýü=ðNÕJ’ÅX¹ÓmÎF)X¹3ätÁ'ú4î“Sö Õ’Ô+Nª,³…1¢ (ns6êVìI­“èœä#'ù''¹Çù¬“Ûí$N²ØIÚœä÷NòŒ“€ÓçâÁÎCƒo‘�cΪ�%ìˆHÏȉìãDj∴nŒ„ÎE"™%1‰´CHÇD²H¤¿IäÅÒPD‡iÈ(Ú�FQÈRŒ)]Ö'¸sN“ÃÉlê÷Ÿ²ÚYàºè@ó?ƒÍ,ÛN´ÅÚßÈÍÙ-�a@àX´␍[qPÒ9T¬Ü!™3îÖ)#{¾“|q¸�!$œC¥ MJG»_ë ²ƒüÞAžr¼âàîv��²ÌA汸¿rü½ã_üªcˆì¼ÐÀ/â×ð/ò?àÑm9Âÿ†çù¤ú¦Êõ©ï«œš4’ìñÔ‚yáŽP‡³Ã§¨d@Ý¥r1ž<À“;xr=Ï©<ºlr‡±CD—␍λl32›hlg.3"wd¶æÎï¿¥v°kçÎI³�ˆå"&vî0.–ËváÞ%ªÀ+¾.�úc,zvøO뛼ÖF›gNÒOÒ¹ê òû¼¯·>¯»¢·hÀ˜ÌW´pÀgì4xaM ‡òŒ}E½ígδo$ÒÑÊ­[7D+7_µ±¼|ãU›+£¶n­<:þÉÆœöCíá‚ãÉ‚6;ÝæS]šUV]b±Ê
dvúÈìô]¸Á7”ÛàS&¶¸Ïïí␍eöö\žóyólÖµCé�çÏó)·‘§ž�ØÅû“M<¶‡Gv(ÊŽiU“öº„H÷ï†åP´Øf+. É}‘þª¯oÞwúcUë#ÎÚÓ=ž3j-w$?~æ™?ÛŠßÍ¥[È/ð»Cðáðd\$vtEYç&To&Gè¨TˆHªH×- "ÑS B§ÃnsÙT«ËfÕ»ôH¾çÛØî�-‰ylúè6º|g3™£"‰‚AEqœ†ŠJÛ£b2vƒ WCÐÀI†ð›Ê;Êû
¯zÞ
üHÈ·˜ÒʈÓi†Jt[É5c£”çÕø°û<¥2ûmÄóc&™gÏoªÙ­8JKjbÒÈô(fÌ•YÅ�´©,Ð_ê²ó#69¢ÕÕ{ ÈÁh™;:ÝÓWЛ°ÇªK�…6]¿Þ0­n1,ß´ukbó[>7þÁîòÆR;¯8*U'‘º4& õƒeˆžxÐg~l-ØÀF$Å`µ€2¬vô°ˆ‚pîÛt+ñÛt+quJ};•û␍<=ŸÀöÙOëÈqGë"tòãƒî¶Îßxš\K^v-Ý°=±°¾ìÊÍ©ÐBlˆk!³x x˜ž´Žglá±IžN=™³l/QuÈïçT¾îýy,æ¥ÿÔƒçÕ˜ûçžW±Y±¨ŽÌº£r?÷úm¥÷¥ÓÐB?Œ˜‹Bû%Ò‘ô«ðû%’WÐé" Ïü ó²½Kžþj‰–àH+Ðœ\lzmÀÖÅ)u4'æ›␍ŸÐ|ôÿ½Bó½¹Ñ} œ>›�y̬¾Å™|ë3õyòQëvq–0k™yð8G¿;˜Ô²ÿêÁ ~ˆœÐe—Ùñîܪãã©ýwÐè9¢Ê!ó¯¹ÑK§Ã°ž× MÁ ¢(J‚€␍ $ƒh½„(
™‚‚ ,Æóo åtz½ G)×Où_␍»èÿ·’»øKÄ ¥ —ÈõŸ¿x0ÉÓC/N\4EÄÿ$$B–²é! ¢$ʘ!Û/š‹QzÈ,,"¥ÇÔ»wY
þçè!N¹Á Û0Ëâ‚(( àEeƒQ2Jøf8O$Ž$é%‰çE�ŒA‰Òc’üLáš=Ä‹Ò¥)7xaŠY:ßoʽ4qé2MŒFÙ€Nê"É,› &”£ÁŒTÊ”(Áƒ�ç%�Ù€—€Ó„ˆ¾ÇÔÙuY
^ŠÒEé†)7xa*¥GnÌæèa˜¸t™&d£ŒÃDÎÑÃh2â›�~y¶_ÐÃxžSgבÆ)7xašb8OA`ô�—.Ó„,›�2è␍`PLf£©c’£œmI€¶¾ÑÈó�BËá2Rzý7ÒãRi²4ü÷ÐÃf3^H=êEyâ¢��Ì&“E6šA0¢½iQLŠÉˆ4±™Lr¦ ‘
ÓéŒz•–C"£-e˜ºø^v„]ŠP“¿>óò”œ|éÀNé‘#}–ÒÅô0#=ä =¬ŠjRͲÑb¶™'è�CH–L&A0
V^8€Lÿwô¸¬DýŸè‘I7M¹Á ÛpØäóô ê�ÒÃ4qé3M˜-fÅ$[p²éaFz˜=²ÍË&PŒ²8‰²qêâ;%zÈ¥ÿWéár™.¤‡ óÄE1(ŠE5›L`²jV‹Õb2©—b1g
¢ôXÌXLL¢Ýl±XèìcÔLÆ©‹ïe%êRô0]”n™rƒ¶á¦ôÈ5%IzX&.!Ó„¢(šÅ¬2zØ5«bSÌ&MEzd›73z`vÁ,:i9Ž'“Í$ÿÓÃ|Qú•—ù"z/¢‡¦ªV‹YÁ f§Õ¦ØTFu‚¨b-Æ=�zFF�‰ñ4…ë¿HeÊ␍^؆Ïg9ßUhU•‰KÌ4aÕ4›¢XA°€Åmw¨Íb±©>MÍ6�£IUŒª"Ñ­â…êU59,&óåZ¾ìuY�s)zX.JW§Üà…mä]‚²:q‰™&lVÍ®*6Ñ÷Ø�šÓª(6›Ïªe›§*VÅb¢¨HU£Ç#dÕì°X¦N�ËŽ°KMÄÊEéÚ”¼°␍¿O9ßÔåéa³:4Õ†ÆÒÃᲺ�vJ�lóŠfÖTYÓ=4¼dOŠÕð”»tYz\j ý÷Ó#0™tzDz˜´‰KÌ4a·Ù�vJÕçDzØTÍaóÙrô@íbÕL”*ÒÃjµšþßÐcòèÈ|„uÊ␍N¾DÕ é�¾«É:qI™&»Ëª9Á ‚æwyl»fs:‚v[¶yÔ.6«Éf34£ßj³ÙÐ:±jU�ºz»¬¾=´‹ÒmSnðÂ6ÂAí¼␍D§G¤‡Ù6qI™&œ»ÛfEzhH·×îuXm.GÐaË6ÏèaÎÒƒ–3+f›æÓ¬SWoazD‚Ö éAýVûÄE±ZmN�Ý惬A�ÏásÚnWÉ”)hÅ)ÇnÁì«1hw8Õb·ù­ÿô¸¬¾=¬¥;¦Üà…mFl盢æÒÃ☸ ™&<n—×a÷€Á¶ Ïïò»ì�+ârd›·á”ãÀbƒÍv8�N‹¦8l()SWo—Õ8—¢‡í¢t甼°�è%è¡\‚nŸÓî£␍ìùyWÀmwzÝ·3Û¼Ýiu:§Óh´Ë!$‡Sѧ=h³O]½]–—2Lì¥ÿ×èa„âBûyz˜ÍÌUU\mÄàózü.‡�upäûƒî ÇáÎó¢Ød
:Ü6·‹�9ßåv»«êríö©çËjàK)–É£#C÷”œ|¡´ÈqžôÔüFz¨î‰Ë˜i"Ïç␍¸]y`r€3 {Ã^§Ûï-ò¹³Í£vñ¸°˜Ñè” Ü�Gµin'ŽûåZ¾ìuY�s)zL–†ÌGx¦ÜàäË1×ù9_AæÈfÙê�¸hŠ ð‡½ž ˜\à.äà$
Äü^o¦ U¬×êóšLns±×çóYV¯»À횺ø^Vã\Šî‹Ò}SnðÂ6â•žóM©*uÝM¶¼‰‹¦ä„CÁ¿/Ìð–ŠP©æG*C~¦ UlžÍï7›½–˜?à÷Ûœv¿¯È뙺ø^v„]jâñ^”˜rƒ¶Q›ð�§‡ÕJ]U³#0q™3MDÂEA(>È«,*␍—¢),L䃙‚y!O(àÍæ<Ke0
9ÜΠ¯$Ï7uñ½ì»”bÉ»à[èšrƒ“/3̬õŸ'=5¯,V‹3<qQmˆ”„ƒE ú!/-�”ó‹‹k óÙ‚�|_~È™V”€šççç;½®°¿<àŸºø^v„]J±L–† ½ò§ÜàäK�æúüó¤§Ó§êP½Ñ‰‹v"
P+­Š”ƒ-"³¦U—T—U”×—E3#EÁ¢BoQÔj�ØfG‹‹Š¼_4¿:?<uv]V¢.5�"“™©½xÊ␍N¾¬tsø‡ÓÍ�g~6½"�2ß›ý?oM\ÄL~Gÿ_Ùë_þ|�¤â}Þ9ÿ¢$†ý#˜Nö§ßãª!Žw
ïéx×á]Œw#Þ␍xÏÎÆ%hþÉõb\ÍDø�¸›`w5Ì侇ÏYx{ð~ffz Ë°ÏÌêæDXÆo„fî'ø4bþ¾ìóÌo‡0W*7
ÝÜ�`ä¿ yܵàâ–�ÀÍ�ð徑3BŒë„.òCHà3ÁUB‚€.® ó  ÎAœK?�ùºˆ ù¦Õý]ÍßEËÐüä[PLî‚y˜6�|*o+IƒJ>Žü-=␍ñÿÿEöÀÐÿxfz^â¿ï¢ü�R�sìDÆÅõ ¿ÿ[:ôÿÛuÇašƒCâa4Û8Tï•°@~z¦c,ð� ]ÓAÙ0�”gÈ$š␍ó�OtÙ°nR=ÎöŸdËç�è¨qlȆ æY™␍Ó-Ȇy”)ÖMÊ£gº#X|T >J`þ~¸vÁ6Ø
�î‡�XÛ.@Í‚X ×`Ê.Ä,†õ˜z␍æï‡�øž«ãÂøÉeš±Þí°c7cŽMBÍ[Óð/„©ý˜�¶¼Ö±~„²mWÐÿ›*†iüzLDÀZï†ië»°¾õõ±�Õ·ë‚ÒëX¾iXkÕ²õ;7oÛªª˜žhé¿z׶­�ýýì˜êY{ÍÖ]ׄ¯ßxÍÕý;YŽl8“Ò¼mûÞ�›7nÚŠWM›jîߺmëæuýW‡°tE(´`óºõ[ׄ®Ù:°~ghצõ¹Û¶mÝ•I^·>4­¢
&¶ÞÓ·À¢K‰ÛÂîÉ� ÚH.„w¡ÿŸ”.Ä>¼¹ôK˜^;£í4>8[ð !ž|$ú&R [°ÑE$¸“ˆÐC|ð©Ç§éUIèÿƒãE ÿï4Þ|ú¥Sioq=iïM«î¶_œúÍ©ô)þ‰'_|’KŽÞ9úÐ(ÿÄ7M~òqÉÔ¦~ý¡¯sÉǺë{Œï;A:A}X
>‚÷×væÄàW9>ø•/ Á/I>„Ï üÑ¿HtÁŽ¾¼ÿ¨#xß½7�bÞ{¹¹Á{¸xðîÏzƒ_øì␍ÁÏî‘àç ÞE¼ÁÏOðÎÃíÁ#‡‚‹“m‡‡sO&ÉÃÓgµæ¸à·;ƒ‡n¿!x;~òÁ[ꃷ␍çG†‘tááªa¾k¸o˜£Ýþþ0’kiu+vì‰[^¼å·ð·p$xó~Oð¦Ï|/x`è‘àgÈkÁý„††ÈVwãÞDð†ëë‚ûö¯çʃ×askönÛËíå¬Á=»<Ák¯¹1¸{p x␍¹!¸ ¿­opû §†_䱂�7nëÙqãöžM«Võl\µ¦gêTÏÀª•=ëV]ѳvÕŠžÞæe=Ë›{z–ÜÙÙ³øÎù=ÝwÎë麳£gÑ� {*’;~Ñ‘îàç®jîi[ÕÔÓºª±g[#Yºä4�SN¢'§É�óOóÿ²xþ¨Ôµj”ŒŒ.¡˜ì^9*ŒŒBÏÊU½' 9¼â–;î€&ÿüQÿ’Þчü+æ�¶c Iû1þ“NhZ‹Á`,¼èg!»®aˆíÊEdßiV–HØkl�¾d�îÂä•dßwíÄh¬Z°*¨Sö¿|ÿ)
endstream
endobj
67 0 obj
<</Type /FontDescriptor
/FontName /Ubuntu
/Flags 4
/Ascent 932
/Descent -189
/StemV 109
/CapHeight 693
/ItalicAngle 0
/FontBBox [-167 -189 3480 962]
/FontFile2 66 0 R>>
endobj
68 0 obj
<</Type /Font
/FontDescriptor 67 0 R
/BaseFont /Ubuntu
/Subtype /CIDFontType2
/CIDToGIDMap /Identity
/CIDSystemInfo <</Registry (Adobe)
/Ordering (Identity)
/Supplement 0>>
/W [0 [500 0 0 231] 11 12 324 15 [246 299 246 384] 19 28 564 29 [246 0 0 0 564 0 0 663 643 620 713 571 537 672 0 269 500 0 519 871 728 778 608 778 629 532 565 688 656 929 631 598 573] 68 [522 589 465 589 559 386 578 571 253 253 522 273 861 574 590 589 589 386 446 402 574 502 777 511 497 471] 168 [269] 188 [522] 200 [253] 206 [590]]
/DW 0>>
endobj
69 0 obj
<</Filter /FlateDecode
/Length 310>> stream
xœ]’ÛjÃ0 †ïý¾ì.JœÃJ!к)äb–íR[é ‹c÷"o?G
-Ì�„OúIÈIdsj¬ <ùð£j!ðÞXíao^¿ÀÕX–f\V·:Ç’hnç)ÀÐØ~deÉyò³Sð3ßôx�'–¼{␍ÞØ+ß|Ë6r{sî°� VU\C+½vî­€'hÛ6:æM˜·ÑóP|Íx†œÒ4jÔ0¹N�ïìX)â©xyŽ§b`õ¿üŽ\—^ýtÕyT ‘‰j¡,EÊk¤ÃIž�Ž©N‘$åjÊÉéœcϵú½×c´#ÊUÊöèg¤ôDAIƒDüÔ3[}¤,^(Hö|␍’½ û3wé:␍²le¹½ûÊÕÍû¸m¼b\ó²`cáþ¸Ñ-®åùs:ŸÂ
endstream
endobj
5 0 obj
<</Type /Font
/Subtype /Type0
/BaseFont /Ubuntu
/Encoding /Identity-H
/DescendantFonts [68 0 R]
/ToUnicode 69 0 R>>
endobj
xref
0 70
0000000000 65535 f
0000000015 00000 n
0000021546 00000 n
0000000154 00000 n
0000028713 00000 n
0000048401 00000 n
0000000191 00000 n
0000000267 00000 n
0000000522 00000 n
0000000792 00000 n
0000001057 00000 n
0000001339 00000 n
0000001631 00000 n
0000001914 00000 n
0000002170 00000 n
0000002454 00000 n
0000002737 00000 n
0000003027 00000 n
0000003318 00000 n
0000003574 00000 n
0000003868 00000 n
0000004163 00000 n
0000004487 00000 n
0000004767 00000 n
0000005023 00000 n
0000005300 00000 n
0000005572 00000 n
0000005839 00000 n
0000006130 00000 n
0000006401 00000 n
0000006657 00000 n
0000006927 00000 n
0000007194 00000 n
0000007482 00000 n
0000007761 00000 n
0000008079 00000 n
0000008335 00000 n
0000008666 00000 n
0000008937 00000 n
0000009244 00000 n
0000009558 00000 n
0000009815 00000 n
0000010086 00000 n
0000010360 00000 n
0000010658 00000 n
0000010827 00000 n
0000022061 00000 n
0000016077 00000 n
0000016383 00000 n
0000016639 00000 n
0000016943 00000 n
0000017267 00000 n
0000017585 00000 n
0000017883 00000 n
0000018139 00000 n
0000018419 00000 n
0000018732 00000 n
0000019049 00000 n
0000019348 00000 n
0000022391 00000 n
0000022454 00000 n
0000022555 00000 n
0000022618 00000 n
0000027732 00000 n
0000027969 00000 n
0000028353 00000 n
0000028848 00000 n
0000047304 00000 n
0000047489 00000 n
0000048020 00000 n
trailer
<</Size 70
/Root 61 0 R
/Info 1 0 R>>
startxref
48532
%%EOF
Introduccion-hacking-hack4u/tema_6_owasp/README1.md
+2 -2
View File
@@ -3,7 +3,7 @@
Índice de subtermas: Índice de subtermas:
- [README1.md](#readme1md) - [README1.md](#readme1md)
- [6.1 SQL Injection (SQLi)](#61-sql-injection-sqli) - [6.1 SQL Injection (SQLi)](#61-sql-injection-sqli)
- [Ejercicios](#ejercicios) - [6.1.1 Ejercicio](#611-ejercicio)
- [6.2 CrossSite Scripting (XSS)](#62-crosssite-scripting-xss) - [6.2 CrossSite Scripting (XSS)](#62-crosssite-scripting-xss)
- [6.3 XML External Entity Injection (XXE)](#63-xml-external-entity-injection-xxe) - [6.3 XML External Entity Injection (XXE)](#63-xml-external-entity-injection-xxe)
- [6.4 Local File Inclusion (LFI)](#64-local-file-inclusion-lfi) - [6.4 Local File Inclusion (LFI)](#64-local-file-inclusion-lfi)
@@ -38,7 +38,7 @@ A continuación, se proporciona el enlace a la utilidad online de ‘ExtendsClas
- ExtendsClass MySQL Online: https://extendsclass.com/mysql-online.html - ExtendsClass MySQL Online: https://extendsclass.com/mysql-online.html
### Ejercicios ### 6.1.1 Ejercicio
- Levantar apache y mysql - Levantar apache y mysql
- Crear una base de datos con una tabla - Crear una base de datos con una tabla
Introduccion-hacking-hack4u/tema_6_owasp/README1.pdf
BIN
View File
Binary file not shown.
Introduccion-hacking-hack4u/tema_6_owasp/README4.md
+2 -2
View File
@@ -4,7 +4,7 @@
- [README4.md](#README4.md) - [README4.md](#README4.md)
- [6.13 Inyecciones NoSQL](#613-inyecciones-nosql) - [6.13 Inyecciones NoSQL](#613-inyecciones-nosql)
- [6.14 Inyecciones LDAP](#614-inyecciones-ldap) - [6.14 Inyecciones LDAP](#614-inyecciones-ldap)
- [Ejercicio](#ejercicio) - [6.14.1 Ejercicio](#6141-ejercicio)
- [6.15 Ataques de Deserialización](#615-ataques-de-deserialización) - [6.15 Ataques de Deserialización](#615-ataques-de-deserialización)
- [6.16 Inyecciones LaTex](#616-inyecciones-latex) - [6.16 Inyecciones LaTex](#616-inyecciones-latex)
@@ -46,7 +46,7 @@ A continuación, se proporciona el enlace directo al proyecto de Github que nos
- LDAP: Qué es y para qué se utiliza este protocolo https://www.profesionalreview.com/2019/01/05/ldap/ - LDAP: Qué es y para qué se utiliza este protocolo https://www.profesionalreview.com/2019/01/05/ldap/
### Ejercicio ### 6.14.1 Ejercicio
Instalamos openldap con docker: Instalamos openldap con docker:
``` ```
Introduccion-hacking-hack4u/tema_6_owasp/README4.pdf
BIN
View File
Binary file not shown.
Introduccion-hacking-hack4u/tema_6_owasp/README5.md
+54 -10
View File
@@ -3,6 +3,7 @@
Índice de subtermas: Índice de subtermas:
- [README5.md](#README5.md) - [README5.md](#README5.md)
- [6.17 Abuso de APIs](#617-abuso-de-apis) - [6.17 Abuso de APIs](#617-abuso-de-apis)
- [6.17.1 Ejercicio](#6171-ejercicio)
- [6.18 Abuso de subidas de archivos](#618-abuso-de-subidas-de-archivos) - [6.18 Abuso de subidas de archivos](#618-abuso-de-subidas-de-archivos)
- [6.19 Prototype Pollution](#619-prototype-pollution) - [6.19 Prototype Pollution](#619-prototype-pollution)
- [6.20 Ataques de transferencia de zona (AXFR - Full Zone Transfer)](#620-ataques-de-transferencia-de-zona-axfr---full-zone-transfer) - [6.20 Ataques de transferencia de zona (AXFR - Full Zone Transfer)](#620-ataques-de-transferencia-de-zona-axfr---full-zone-transfer)
@@ -10,16 +11,6 @@
## 6.17 Abuso de APIs ## 6.17 Abuso de APIs
Si a la hora de desplegar el laboratorio con Docker, os encontráis con problemas y alguno de los contenedores que se despliegan véis que causan error, probad a desplegar como alternativa el laboratorio de desarrollo.
Primeramente instalad la última versión de ‘docker-compose‘ y una vez hecho, ejecutad los siguientes comandos:
```
curl -o docker-compose.yml https://raw.githubusercontent.com/OWASP/crAPI/develop/deploy/docker/docker-compose.yml
VERSION=develop docker-compose pull
VERSION=develop docker-compose -f docker-compose.yml –compatibility up -d
```
En caso de que veáis que tras desplegar el laboratorio, siguen habiendo errores en el despliegue de ciertos contenedores, probad a hacer un ‘docker rm $(docker ps -a -q) –force‘ y aplicad el último comando de los 3 mencionados anteriormente para volver a desplegar los contenedores. Llegará un momento en el que todos serán desplegados sin ningún problema. En caso de que veáis que tras desplegar el laboratorio, siguen habiendo errores en el despliegue de ciertos contenedores, probad a hacer un ‘docker rm $(docker ps -a -q) –force‘ y aplicad el último comando de los 3 mencionados anteriormente para volver a desplegar los contenedores. Llegará un momento en el que todos serán desplegados sin ningún problema.
Por otro lado, si de pronto véis que el comando ‘docker rm $(docker ps -a -q) –force‘ os da algún problema, esperad unos segundos y volved a probar el comando hasta que veáis que todos los contenedores han sido eliminados. Por otro lado, si de pronto véis que el comando ‘docker rm $(docker ps -a -q) –force‘ os da algún problema, esperad unos segundos y volved a probar el comando hasta que veáis que todos los contenedores han sido eliminados.
@@ -48,6 +39,59 @@ A continuación, se proporciona el enlace al proyecto de Github que utilizamos p
- crAPI: https://github.com/OWASP/crAPI - crAPI: https://github.com/OWASP/crAPI
## 6.17.1 Ejercicio
__DISCLAIMER:__
Si a la hora de desplegar el laboratorio con Docker, os encontráis con problemas y alguno de los contenedores que se despliegan véis que causan error, probad a desplegar como alternativa el laboratorio de desarrollo. Primero instalad la última versión de ‘docker-compose‘ y una vez hecho, ejecutad los siguientes comandos:
```
curl -o docker-compose.yml https://raw.githubusercontent.com/OWASP/crAPI/develop/deploy/docker/docker-compose.yml
VERSION=develop docker-compose pull
VERSION=develop docker-compose -f docker-compose.yml –compatibility up -d
```
Empecemos:
Descargamos el repo y nos vamos a la carpeta con el docker compose. Allí descargamos las imágenes Docker.
```
git clone https://github.com/OWASP/crAPI.git
cd crAPI/deploy/docker
docker-compose pull
```
Ahora desplegamos el laboratorio.
```
docker compose -f docker-compose.yml --compatibility up -d
```
A veces no funciona a la primera. El laboratoria es inestable, por lo que si no funciona a la primera, probad a ejecutar el comando varias veces empezando desde cero, borrando contenedores e imágenes. Merece la pena. La comunidad ha documentado algunos errores en su repositorio: https://github.com/OWASP/crAPI/blob/main/docs/troubleshooting.md
Entonces, vamos a `http://localhost:8080` y vemos que hay una página para iniciar sesión. Vamos a Sing Up y creamos un usuario.
Ahora abrimos el inspector de elementos y vamos a la pestaña de Network. Vamos a la pestaña de XHR y nos logueamos. Tenemos que ver una petición a `http://localhost:8888/identity/api/auth/login`, que si la inspeccionamos veremos:
- **Headers**
- **Payload**
- view source
```
{email: "man@invent.com", password: "Man1234$"}
```
- **Preview**
- **Response**
```
{
"token": "eyJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJtYW5AaW52ZW50LmNvbSIsInJvbGUiOiJ1c2VyIiwiaWF0IjoxNzA4MjAwMjk2LCJleHAiOjE3MDg4MDUwOTZ9.EKGBU4uxfpWxlZiRmtRG6m6JUrZsVsEf7xzSppIE9FlbpxTackor_KYdBLZOJYK5D3KRkbO9KCfa4GbnccjdmsSFipNJDZkATa-hC51wYvesaA15f0yTm26sb6W-W5icuv269kkWVaCw_3SCSOzoU3L50YoY0pZH7wPbf4-k6vU4nYI7gVAWIPZloJfKwpjqjWMFA2oZHBFg6NP5YjKLyhQAYdak0fK89vVFadLdLUy_mmEy3nVgfpV2_2wNPLQc2rDX9XA4WemF5o1rI484JjXaq7Qa6EMBFTc2l0xDZQJT0ok9rPs5jPvyj8Mamt01CX13tV_jd4gybsJhm2O4kA",
"type": "Bearer",
"message": null
}
```
- **Initiator**
- **Timing**
He detallado la request y el response porque es en lo que tendremos que fijarnos. Vemos que el token es un [JWT](https://es.wikipedia.org/wiki/JSON_Web_Token).
![jwt](https://miro.medium.com/v2/resize:fit:1400/1*aAH0mMomx1dLidhoNCVmNw.png)
## 6.18 Abuso de subidas de archivos ## 6.18 Abuso de subidas de archivos
Introduccion-hacking-hack4u/tema_6_owasp/README5.pdf
BIN
View File
Binary file not shown.