Restructuring folders

This commit is contained in:
Manuel Vergara 2024-02-17 22:52:38 +01:00
parent 3c9aff823f
commit 32d537cefb
8 changed files with 914 additions and 16 deletions

View File

@ -6,7 +6,7 @@ Al ser este tema muy extenso, se ha divido en 9 READMEs. A continuación, se ref
- [TEMA 6 - OWASP TOP 10 y vulnerabilidades web](#tema-6---owasp-top-10-y-vulnerabilidades-web) - [TEMA 6 - OWASP TOP 10 y vulnerabilidades web](#tema-6---owasp-top-10-y-vulnerabilidades-web)
- [README1.md](./README1.md) - [README1.md](./README1.md)
- [6.1 SQL Injection (SQLi)](./README1.md#61-sql-injection-sqli) - [6.1 SQL Injection (SQLi)](./README1.md#61-sql-injection-sqli)
- [Ejercicios](./README1.md#ejercicios) - [6.1.1 Ejercicio](./README1.md#611-ejercicio)
- [6.2 CrossSite Scripting (XSS)](./README1.md#62-crosssite-scripting-xss) - [6.2 CrossSite Scripting (XSS)](./README1.md#62-crosssite-scripting-xss)
- [6.3 XML External Entity Injection (XXE)](./README1.md#63-xml-external-entity-injection-xxe) - [6.3 XML External Entity Injection (XXE)](./README1.md#63-xml-external-entity-injection-xxe)
- [6.4 Local File Inclusion (LFI)](./README1.md#64-local-file-inclusion-lfi) - [6.4 Local File Inclusion (LFI)](./README1.md#64-local-file-inclusion-lfi)
@ -23,11 +23,12 @@ Al ser este tema muy extenso, se ha divido en 9 READMEs. A continuación, se ref
- [README4.md](./README4.md) - [README4.md](./README4.md)
- [6.13 Inyecciones NoSQL](./README4.md#613-inyecciones-nosql) - [6.13 Inyecciones NoSQL](./README4.md#613-inyecciones-nosql)
- [6.14 Inyecciones LDAP](./README4.md#614-inyecciones-ldap) - [6.14 Inyecciones LDAP](./README4.md#614-inyecciones-ldap)
- [Ejercicio](./README4.md#ejercicio) - [6.14.1 Ejercicio](./README4.md#6141-ejercicio)
- [6.15 Ataques de Deserialización](./README4.md#615-ataques-de-deserialización) - [6.15 Ataques de Deserialización](./README4.md#615-ataques-de-deserialización)
- [6.16 Inyecciones LaTex](./README4.md#616-inyecciones-latex) - [6.16 Inyecciones LaTex](./README4.md#616-inyecciones-latex)
- [README5.md](./README5.md) - [README5.md](./README5.md)
- [6.17 Abuso de APIs](./README5.md#617-abuso-de-apis) - [6.17 Abuso de APIs](./README5.md#617-abuso-de-apis)
- [6.17.1 Ejercicio](./README5.md#6171-ejercicio)
- [6.18 Abuso de subidas de archivos](./README5.md#618-abuso-de-subidas-de-archivos) - [6.18 Abuso de subidas de archivos](./README5.md#618-abuso-de-subidas-de-archivos)
- [6.19 Prototype Pollution](./README5.md#619-prototype-pollution) - [6.19 Prototype Pollution](./README5.md#619-prototype-pollution)
- [6.20 Ataques de transferencia de zona (AXFR - Full Zone Transfer)](./README5.md#620-ataques-de-transferencia-de-zona-axfr---full-zone-transfer) - [6.20 Ataques de transferencia de zona (AXFR - Full Zone Transfer)](./README5.md#620-ataques-de-transferencia-de-zona-axfr---full-zone-transfer)

View File

@ -0,0 +1,853 @@
%PDF-1.4
%Óëéá
1 0 obj
<</Creator (Chromium)
/Producer (Skia/PDF m80)
/CreationDate (D:20240217195203+00'00')
/ModDate (D:20240217195203+00'00')>>
endobj
3 0 obj
<</ca 1
/BM /Normal>>
endobj
6 0 obj
<</CA 1
/ca 1
/LC 0
/LJ 0
/LW 1
/ML 4
/SA true
/BM /Normal>>
endobj
7 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [102.999992 638.66998 169 650.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README1.md)>>>>
endobj
8 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 622.16998 244 634.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README1.md#61-sql-injection-sqli)>>>>
endobj
9 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [163 605.66998 228.25 617.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README1.md#611-ejercicio)>>>>
endobj
10 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 589.16998 265.74997 601.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README1.md#62-crosssite-scripting-xss)>>>>
endobj
11 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 572.66998 316.74997 584.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README1.md#63-xml-external-entity-injection-xxe)>>>>
endobj
12 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 556.16998 261.99997 568.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README1.md#64-local-file-inclusion-lfi)>>>>
endobj
13 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [102.999992 539.66998 169 551.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README2.md)>>>>
endobj
14 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 523.16998 276.24997 535.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README2.md#65-remote-file-inclusion-rfi)>>>>
endobj
15 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 506.66998 275.49997 518.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README2.md#66-log-poisoning-lfi----rce)>>>>
endobj
16 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 490.16998 312.24997 502.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README2.md#67-cross-site-request-forgery-csrf)>>>>
endobj
17 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 473.66998 317.49997 485.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README2.md#68-server-side-request-forgery-ssrf)>>>>
endobj
18 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [102.999992 457.16998 169 469.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README3.md)>>>>
endobj
19 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 440.66998 323.49997 452.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README3.md#69-server-side-template-injection-ssti)>>>>
endobj
20 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 424.16998 327.99997 436.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README3.md#610-client-side-template-injection-csti)>>>>
endobj
21 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 407.66998 452.49997 419.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README3.md#611-ataque-de-or%C3%A1culo-de-relleno-de-datos-padding-oracle-attack)>>>>
endobj
22 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 391.16998 259.74997 403.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README3.md#612-ataque-type-juggling)>>>>
endobj
23 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [102.999992 374.66998 169 386.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README4.md)>>>>
endobj
24 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 358.16998 246.24998 370.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README4.md#613-inyecciones-nosql)>>>>
endobj
25 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 341.66998 239.5 353.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README4.md#614-inyecciones-ldap)>>>>
endobj
26 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [163 325.16998 234.25 337.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README4.md#6141-ejercicio)>>>>
endobj
27 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 308.66998 283.74997 320.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README4.md#615-ataques-de-deserializaci%C3%B3n)>>>>
endobj
28 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 292.16998 241 304.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README4.md#616-inyecciones-latex)>>>>
endobj
29 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [102.999992 275.66998 169 287.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README5.md)>>>>
endobj
30 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 259.16998 223.75 271.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README5.md#617-abuso-de-apis)>>>>
endobj
31 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [163 242.66998 234.25 254.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README5.md#6171-ejercicio)>>>>
endobj
32 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 226.16998 294.24997 238.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README5.md#618-abuso-de-subidas-de-archivos)>>>>
endobj
33 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 209.66998 249.99998 221.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README5.md#619-prototype-pollution)>>>>
endobj
34 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 193.16998 443.49997 205.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README5.md#620-ataques-de-transferencia-de-zona-axfr---full-zone-transfer)>>>>
endobj
35 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [102.999992 176.66998 169 188.66998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README6.md)>>>>
endobj
36 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 160.169983 516.25 172.16998]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README6.md#621-ataques-de-asignaci%C3%B3n-masiva-mass-assignment-attackparameter-binding)>>>>
endobj
37 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 143.669983 224.5 155.669983]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README6.md#622-open-redirect)>>>>
endobj
38 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 127.169983 342.99997 139.169983]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README6.md#623-enumeraci%C3%B3n-y-explotaci%C3%B3n-de-webdav)>>>>
endobj
39 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 110.669983 369.99997 122.669983]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README6.md#624-enumeraci%C3%B3n-y-explotaci%C3%B3n-de-squid-proxies)>>>>
endobj
40 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [102.999992 94.169983 169 106.169983]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README7.md)>>>>
endobj
41 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 77.669983 244 89.669983]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README7.md#625-ataque-shellshock)>>>>
endobj
42 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 61.169983 241.75 73.169983]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README7.md#626-inyecciones-xpath)>>>>
endobj
43 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 44.669983 352.74997 56.669983]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README7.md#627-insecure-direct-object-reference-idors)>>>>
endobj
44 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [72.999992 655.16998 301.74997 667.16998]
/Dest /tema-6---owasp-top-10-y-vulnerabilidades-web>>
endobj
45 0 obj
<</Filter /FlateDecode
/Length 5178>> stream
xœí]ÛŽ$· }Ÿ¯èç)ë~»kÇÏIÈ$qŒ`çÿ<C3A7><C3BF>J¢TÍéRUÍÅÎìp7«%Q$ERG—Z”ŽéßMÀßïò5¹Dc¸ýý§§ŸŸð¹2AÜ´ñöË?Ÿþö»Û€néà§>×Ѓ‚ò†ùþ–?üò¯§o¾×·ý7Õ磾I©V÷C¢üiþ?ýüõé›?™[¼}ý*JÊ›ö‹Ò·¯?=ýAmÿxûúï'Ï¿þãF >|%h<08>¯CÊDЕ`sX &WúÝ×ûŒ[¡%ƒ'œËs©GÂæ~$ˆ<>¯ulŠŒòŸžíŠ
þ@¥æùƒÛ<E28093>ÛV¡ü«N EÛ¶ë<C2B6>ÿ ??Ié‡ÿÌM¢¤•UÒ.Š4«Õ ZÖ˜? Å®å FÌ?I=vB/0n5â¬Wà4(!`<10>ObÂù¦¥b´Ê,:)š5{—a±Î¯FÙºÅsZ5s—qmÄGÍÛ<45>Y4ˆCÇð¸„ΪVrÑÚ ßÚÐÙÜ”]¬€Ž¨MGâvB:¨]¦›%D'¬—íIn\ú
¿‡«*yÂ<02>Ýá×#B˜lÄ„ÆV#E¾V·.ázçIW™$z·_r äèüŽ"qôP8ÑX¶Å¼Ü†"lkÞü)ûÈÅ# ñ{ª©ÑTKuŒ(¶îÛ<L¥XÁ˜&ccVÆôņ֎±k;2_
gÔbè†e¾€gÛàùêÊh™þÇHÄ_ìU-Æ°&öÊkìS5>ë¤0;Z1Õ#ÍèoâêoÊÈŠ
2:¿Q»?ÑÃ(Ä0 I¶cßÜ¢ŒŽž ¬Â¨‡šlô´DæÓ.ü†'Žmƒ¯ŠkÜúµ<C3BA>à#µw¶*¾ƒÓU•ÔÔ :Z+G³òPWØ#^¶®2rÃPt¤Ä—"“h}ô~YgÄû¹<<3C>×Ô™H†[Vƒª€Š"5Õ@ ت+ Ô* öUM뵸èž<C3A8>ÆeóáÅYéÅ€ª<E282AC>ÌâÃ1è@·%º6÷e *¼Ç®4äu²
äA§WwT%Wo"Z»/+O\nÉðD(I~°¥Á‹™&öνYÙz^2ÿÉT_B×q&A·zÛHVºõŒaÑë\!™¨Û#“Žß îºÄA!kã¬Á“<12>n=é«©:˜TÅSd«
̃n€m¶ý€yeÇ.Ûø—ïf;عŒ]ú`UËŽ¾*í"è\U&Θoƒ•U§êx/évÞ5tɇŒQS®XE±mìs&Ñlàƒíàìœ ÌigB-nÞ™ð†Õâ|wf!óVý\æ(e(©£ÕLäbó:.”ó5q¸æ½Û“§ˆð\z1<7A>b {ü°;“\ðœOØÆç«b$Å*<2A>Kõæ“C.»6³Ùט&è áøå:8á® |šÀŠ<C380><C5A0> lLdí“ d\UŸ¿p%¸Ð'¿}ìi­)žöÓ:ÎÉ·÷À¨‰7Üí§'´:àðû¢œU7$™¨òO«„H Æ{k X¹ü {ã”S@…)Œ.<2E>æ„r¢)å +@3Ò() ?æÂøæ²HÄ2ˆµ€Æ†uCaŸÚ³!ÑXÚ'ÎTLTäWã/UÂO2-âB‡Áª¶µÁcÑÕ:’À~<7E>µµÄ+µà LÄ!­ üÛÅëƒí:j˜Ô*+©D,ضFÇA$gaJ®”UÆ6—§âS?ª6,ÑVúœ~lꤿÑR6uÒtõÛÜË\åÄ`/m¼QŽMê¥êºfòÇ\º
Á¤B©<EFBFBD>*,“*ïÅj2Y'«üMâ×Þ¨šLÖžÉꮪErS~-HÌ„´@ ªòB ¯òL,”ôŽØr•±ù*/2:ˆdÉ8ª: íê* þXÈ;õºø<C2BA>¿¬+gßâÀ·DÑ/8€-ãÀ×dêL3Tbú¤ÖšævX0<30>JrÅ2žÅº¹uPW€Xw€†¾—bF[e½zâ!ðjwgnqràHWºv±æ°VBßUÜÁ×*y«{i5†C”Ѫ3<C2AA>¸¬7LH~Od*6çàò<.ÎMCËlFÅ&|Èd˜Ýñ GÇÜñóùùéã§jmV&忳$9ÁvÍóï.<2E>)L€d!ï¥ð{rÈòŠ—Ë´ä†þЄD[³…<C2B3>='xSðã%æ…P"'rh Ù'J‰ !{lÈ¡<C388>˜ „ìÙ]H´œ*„ 9@7J°ÈÔœ)„N
-%#”X ‡ é鬢•ä˜¦|ßœÍAÁP¾J”´”ÿOiGsà5žÊ£hIÅC¹ö½€KÐ×TæŽÊlÒ' }‰F´mΧNçÖ*_®BÊ¿+“vÔ¥<C394>>—®"q©Púe<15>K•ËNÈ.q¡²Šª:\æ÷FÕæ6…ËꯪFr3†Z°Y i<>˜Wå…˜aå¹Z+é[3ê*bûUXd”4©áTÅî¨)þøô×g†²Áá~î …“Wý£€< z;ù.Ýà2>èQ@>ìš<C3AC>{ÞÕ¥ÝGÐ,¤hmÈL"& S¯³<6â¸f»É§löb¸”C­ké0"¢ßцZÃßîÉê·\¼d<C2BC>3n²Ú­``n}9üÇv[|.y©
2Fù2g{!¾<c¥À=n:n¥¬ÔºË­ô:³fÁ¼i]ˆ,Æ¢ygƒ3ÑSÎƇÃj´ÓZqeÁ¬ &+걌§á\ö;èxÙ_·Q„oœõ[¬Õ±ì²K&ó.<2E>óËŸVzĈ|wÙŽñ<C5BD><C3B1>Å@fúóš'h\Ûã¹Ϻ:#Ñœ#ZˆÃcÄÍŽ^0|Ö3<1D>×\LJUdkÙ…»zØ!=»Œ6½(Æ:v§ÑüáJÌC"ÿïÙã` ¦ðx`°ê~ä´t'ƒR‡ƒg
ðv²Žr*tòqŒä³<C3A4>ëFÚÚm+Á~è†×iˆl:¦Î<C2A6>VÆÈm£d· ¾Ý¨áb«!V|Ï<>šåi0
åÁ÷¼’Ô $YŒi“¨ÉÓF&œÄ6$I=’‡ø Cå!K(å! kV ”AÒº ×Ф滆ï$üóþh£:(<28><¬Ø©¤¢L]s<15>"|UÜŠð_®®§ #©˜\×:WŽ(Ãluf“>)”v—:m”‡4ì´¤­ :mc‡åiÁò<C381><06>†áBz
4üh;,©#‡4¨ÜE*e m±<¤æÅ<¢7<C2A2><37>Åò2¹ZC+X͆¶Ðì«ñÒì°ñ¼Ú+í[5ë&„fýMXmœP±¶Õî(*ó´Ìã&ž×ƒyÚ<79><C39A>I0EpÇaÀà眾l4bCÖu³â<C2B3>ìá½dü@¿4}H#*œD¬t8ŽXMï-˜Oº§!’º‚¯@Ä–
×k'³fX[C`èÂDvzÃû@ÉîØYÜ—Ñp=<<3C>5â$¾e¤8<¢>M<>¨7Ä€Yý¾-8<µOíÜ<C3AD>;%9"C<>£¹~î„Æ®-ûœ7y 6ºØëoŽ«ŽIJÜ綆4•{P§£êá®N"VFG¬>3¬zÌë1=˜pØý5Á|Ö·dã…>àÂã >à]ú€ý+÷¯ãþfl<66>¿Á÷ˆ¿!m¿a¤Ðð7$!´<>üÐo¥C*–°CÚ°•I[ü ©#þh+þfl<66>¿ï!•Td¨k®bH„¯Š5þ+*Õõ´âWD"ç"«ˆX'âŠ<C3A2>e˜­ÎlÒ'Åߌ‰­tHñ7¤mñ7c¶øÒFü i[ü ©q‚¿! 1/G¥l:&c‡¿!VZR§éñ·L®ÖÐ
V³¡-4ûj¼4;l<¯öjîàoDÍúÍëÄÚF”ÙâoDQ±hñ$þfì{Ç߸Eíëñ7ãOâoÆÇßvÝFððKxÖõO t˜}ì;¡Jnç ²‡(/7ÿÏ—õ/H<>ØsHG±GOb<4F>&ǯ;vÃB(óçO¦ïäY-K@ñ¶ûð2^æ ¼Ì Íå^ÆÊ“x,äÃ×{™ù-Ô\*Éë<C389>5øË°Š×¸Zb«èÎúwû©Ø¡3{Ú»ñì5ÄÁB4³·˜L¯Þ²Qè Å1d³¹{œ¬IF«<46>yLÙäWviÔ2Äñ÷i°œ¿—Ž½JŠ¢{;.ÿèÏ?;r£—Çüµb{Ìs×]%ìµPì}jüEkóÝøŽ”°jÿâÕ'¬9¾¸ÀÆ­ùC&¿ª¸B³Ôp¨5Ÿ‡Îg<C38E>ß®màeÑ>î‹Ê³f§$<€Å­ëaqø>ÂâHB$–Â}HÛÂâÖm`q$!âضù!e»-©#,Ž4¬94|IÈBè`q¤"³<>Àâ›ôé
½’‚¤íš¨p.á¥Â¾„ç
w½«P2B…œ‰°*8݉µÂØDf«'tH¡pk·[Q6BáHC̶?VnmFw Ž$<04>»ŽÚ{H8RG$i#Ž4Ä©]‡„#uDÂ<44>ôh{$<“«Ø ÞµÐLÊnpÂój¢öN„Ð ¾Êª<C38A> *Ô6†ì'jŠE‡'<27>p¼qý}áÜ!Žë<C5BD>pNá6¼ÀyÝéÓm<C393>ð
|…†ÞBÏÅÁyÀ⮂œ^c繦¼Ï‚árL?VÎZÞýrÊêݺÜêæ<C3AA>N}XÝN«cw_®^ÓK "anÀí®¬ÒϘ0ïÔ ¼¡ÓâõLëãfÙ ðXñ9×a_`69}¤â]Î&çÇõ…@ͳ{À²w]5¾çL+oØë¤Øâ¥kFlç.ªßzx~P¹“w 9ýÝBNU|Äã“ñ˜µÅ+žŸ÷+8é¢À
|<1F>$<24>À
Ò@ÉÊuÀŠ:Í`eV<>ؼ +ÍZÐC¿ß©PÂÑó¾Hƒš%Ùoˆ$`Á¹XA*0+V þá n7¼Â+äa<C3A4>Õ“Jêü¿k®"„¯Š(þ+öÐõ´¢D"Ì «°G'â
<EFBFBD>e˜­ÎlÒ'Y\”<1B>iÐik»ÖdÂ:ŒÅE1b,H1¤m1¤Ž ÒFŒi[Œ©#Æ´¬LÑa,™ÜlAŒK×±.±ÁXÏÕZÅc!B ¶/FŒ…Ê”Œ¦*üpGI±hð$Äâêk¿Þ+ÄÂel×C,^žœìzù“ÝùVìûÛØògOª¾åúë£ çö&d>ÛpÏOQa¨<61>¢zóSTÎ >¦¨³SToONQ½{<7B>)êô1«ßø€¿î=,^Ãý¦3pž«ùÑƾ¶ðÁ»7ÓœÒå¡?9¥õᦴó[ÿ¹è3¬y×v¡{vßEwá‚ùÛ &7‡±¾êêݧ¬…qré-ˆãKoìU7ó»Æ?<3F>Lîõ½<C2BD>3ý®ˆéwØvorܵ«r~æüU6ÓèꫨidµÔ0nO\k2Ý þu09pÒF÷ÏÓ[*y<>9{Þ—<C39E>x³/½íÎZxs·Æĵqé°çLÕíÐœtÓüÖÍoKÓ~84ÿ6Úù<C39A>˜ ÕÚ kèÓÛFù۲︻îe­û΄ãNSŠÑÂwľ¤! -Ò@ì Z` 0E®dDR¿÷ )Û½oH!Z¤ -’¶-RGˆ6ÑVˆ6(×A´äaI%>ìš«@#á«’„ÿ
]v=­ 'HÅBà:ˆv•pÑ6U˜;³I<C2B3>¢ Jo Z¤<5A>ûà<C3BB>¶Ý1Z$AŸ3òZ;ªð£‹FTÄ;õ<>ŠN%\´“±ºs!#RGˆ6]”˜
tm&7[P#D[Z ÚÆ
1ÂÊq5VÒ³fÓUÄôÕˆÐv"%cIovÁ%Å¢Á“mPá<50>C´³Iíqˆê¹TÜŠëSñßÆѪw
iLßÈnEŸ¿xþêuýý¯|ð#(gû2¾ eÞŸÌwd<77>…2qŒƒÆ¹—Ãïzañ.sc^5Ð¥¼fÙ´<C399>­;5ôë<™´µ©JãÚãö‡æZç<5A>µÈøhŠžìönO 6ågUh
1†Yr`ùÀ1¼ËOôñÛ<E28098>\k þøZ ¹§—ñ/b<>ÇT§ƒÂü%q<Ú÷Áý¼I„“È?^3q¹IÌi˜ ‡hïó7'_jû†9Íô=|<7C>ö¬ÝyOÑì%Ó‹*ïQ²WÞ˜R_€<5F>7RéU±Ë­<C38B>Π༴'Ÿ÷Qž\‰AHèr<C3A8>1åÃc|xŒßŽÇ˜?v¦Cñ ¸zbIjËíÔêà*î¾å~@þw­ÇÓ„»êU€¾=YÒéL'îÚOòà]ìpü¨{¾op|¤ 8>’¶{­AUã^k$õ{­²Ýk<C39D>ÔÈGÚä#i ä#uòmò£î<C2A3>|ò°BǤ
2wÍU4šðUQkÂÅ·»žV$œH¤æDpZïD\Aø¦ sGe6é“ù§°Óù&ÙZGÂMìZKvmLäG<C3A4>àé|оòŸalÝõô<>ÔÉGÚ€ä#i»Ù©#µÊÚìüLnÆ°Aò×: ¿qBŒpò»Ž5® ¦Ÿ$eL7Hôv¯5~¸£¤X4xÈG•½o vkéq ?Ú“@~tâúLî·q:ðÀõ´ì.À«®øšozþ­ß=09<12>W{½É}œ<>Ø7)Ó”ßîÚÞÅçgÏ%£‹'1./*™½gtþÌïôe‰óPå<50>3ͯ‡“N¼fƒG¡ù½ï¯pïë•Àõ»Ü9mWüþÁé™."+]þɺ<C389>ìÏð÷?iDÆ­
endstream
endobj
47 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 785.66992 393.99997 797.66992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README7.md#628-intercambio-de-recursos-de-origen-cruzado-cors)>>>>
endobj
48 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [102.999992 769.16992 169 781.16992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README8.md)>>>>
endobj
49 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 752.66992 388.74997 764.66992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README8.md#629-ataque-de-truncado-sql-sql-truncation-attack)>>>>
endobj
50 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 736.16992 466.74997 748.16992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README8.md#630-session-puzzling--session-fixation--session-variable-overloading)>>>>
endobj
51 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 719.66992 413.49997 731.66992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README8.md#631-enumeraci%C3%B3n-y-explotaci%C3%B3n-de-json-web-tokens-jwt)>>>>
endobj
52 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 703.16992 348.24997 715.16992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README8.md#632-condiciones-de-carrera-race-conditions)>>>>
endobj
53 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [102.999992 686.66992 169 698.66992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README9.md)>>>>
endobj
54 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 670.16992 260.49997 682.16992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README9.md#633-inyecciones-css-cssi)>>>>
endobj
55 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 653.66992 401.49997 665.66992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README9.md#634-python---ataque-de-deserializaci%C3%B3n-yaml-des-yaml)>>>>
endobj
56 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 637.16992 411.24997 649.16992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README9.md#635-python---ataque-de-deserializaci%C3%B3n-pickle-des-pickle)>>>>
endobj
57 0 obj
<</Type /Annot
/Subtype /Link
/F 4
/Border [0 0 0]
/Rect [133 620.66992 358.74997 632.66992]
/A <</Type /Action
/S /URI
/URI (file:///home/v/Documents/projectes/git/personal/infosec/Introduccion-hacking-hack4u/tema_6_owasp/README9.md#636-graphql-introspection-mutations-e-idors)>>>>
endobj
58 0 obj
<</Filter /FlateDecode
/Length 2126>> stream
xœí[ÍŽÜ6 ¾ÏSø\ Ž(ŠúŠm6ç¶ ôÒ&E<>Húþ@)Û²(ÛÌØ3³Éîe†²Ä_”>Oo1 <>áÿ½øô RŠÝÛ§<>§<n]4Iݧ?O¿ÿÐýÃt׃çGø<42>'B—ÿ<>>½?½|ƒÝû‡õBÂÀڼܻ<C39C>bò£ã~ôÕãéåƒëR÷øŽ$„C"Xê,v<>N?ƒôS÷ø÷Éóøãl\Ü’B˜ h×8f}ý¸-8ì-Ä $‡¥ä€KÂꉰ$˜…\;ÖXMYÚî>«Š<C2AB>¡ìF õaör}Øà’·]¦'´åÐØMÞ¿ðÿÇ€ï}þsêMö}g-qÜZ ÞóÄ»Øç8Ê뎟ÄähœáÇ]<ÅÖt`#iQ<¬l0uŽÿçgú„ˆå¹ñK‰x~Ü5*ƒcÆÍ:§1xû˜(yZ‡hï¦HËؘðJ(^â„ÀëRö~žR[wÃÈ;ö¼y©Jã•zCò¦n0 oK)De-°/æ~ŒÒž3P
©òvnZ
óˆ°Ü¢`{C˜ˆêˆ£I\ë˜;ÔDàŠä8ùY¡ -3Xq!•jª)l°Ð4W—ÒM¢-¥ÚŠ¢â'<27>••,U°ñ¬AÔ Ïb)M(Õ‚š¿Ý]1WAïv¥m]oé¤äg$a<>Æ{.‰<>ŸËR‰g8ØÞÝy£7&ä]»¥‡3&
ÇŽi„?°â^Q?-•Û
/˜ãÈ g¶n¨S°lÌhx-¸è'EœãM„yïK XçÞ—o|NÓ1qþôØ}8ÅØ Ž½õĹ6]²n"eÁ31º¸ DÎwL|ŽëÏd×s-åôÎDÏ•Gšµ9•2ÍÁ¸¤ËŸ Ž³yÔ“É<i|—AG"/ÏV ™%ÒHcIüÀ=déÐNdò“ÌКBã-21£<Å÷YÔ û>[‘¬\ÇgÇz,©O¹<¸F:êC@ ž"…H <0B>‰Ý­ <0B>uˆÃ BcFê<46>¬Å°09×q2Áaã·åHýÌsä°,<2C>‡ÅB6[À¥–©Í& g• t<>"<22> ©UògŸÆùÕ@<40>ç™Ð5¦„Ì€¡1;dY`ôZud±Ù<19>+aò1ŒaQC`ˆˆ%ódP•<50> ½Y"¤³ì5œ…"îgƒÈ R,'÷Rµ±Üv³;âãRñë_§ß>Ó>M]™ÒE™ÜEùО։Ɩk1'þšJ§SDêmÌ9KÌÓ@Ší œûà´L"ÃÛRD¸ 4ERmÉ´æî3=NÐãØ”F¼¶)eÏܼ)½?Ü”jŽ™OÞ^)<29>¨¼jÇè´ª¨ôMÇ[”v;ŠŽë«gSµÓÚ?¥w9Þsïë+ö4ÐjÅG'»²"¦)œYïó<æÖÅFäÖž•ù3»Ov˜j[Øl™dŽŒd¿Ø%l62WÚóRéâª}¯ѯŠ²õ^çs æxmÀ…÷º<ÊçQ¯MÀ£yT<79>yýÈ£µ<>Ãçëç*ÄiWáGuóȳSˆéü€{˜xGËJÀå´ý©2Uí¦ë2nECN2ߌWmÙ\Ê]ÚÁºtR@#¿ZüÕváÉÕkÜêauºÎ•ûÜJ·½GAñ·xŽœ<C5BD>©ôálöÔ¶d>VoGô»µ¨×€Ú׌«ë§^uPšÌù ŒÝfÅZºæŠ¸<C5A0>ŸÔöm׵оÜ&]îf|è½²n"Þ¾n:e@ÏMÚaN½×*~;~[®6èj¤yøþõ<C3BE>²ÝO¬9ˤ6wÏâ°¤ê­ewB-€÷ì¯ôœ»<0E>_в7<TÚÒõäkŸö´7kÝîJü{¶*ZÈ´«&p=—C0oB¿­…¬iÓÁ€ Âzû¤HÕäi-%ª•öüÝ:ñRQ ÕMň¼V€ä,,Ug±G´8^<5E>¸káK ËáK5SkWHzl@Âyv>¹mçïáãeòxr8,Óá~þ9Òɨ­zûq=^Ïß-7¢z|A<>¸ÜºhÛ-ýôý7Ez¾Üúel¢ý˜°ý2qúeâèa úeÚôˤ Ð/“y<79>ôËÄ%è—i, a úeòôh3èaú‰áŠ)Õu*úÔ°¬H•<48>®bZB<5A>Š5:W¬LX§jÂŒkL^±:á·åHýÜ€~6@¿LÌ€–©MТ~Ö¨_¦­P¿LÜ@ý23Ô5¶Ê«vßBý2u…ú1qròõD˜¬Q?ÉFÆÞ,ŒÒYöÏ[¨Ÿ0ˆÜ!kÔ¯1²Üx³CâëRñìµ°„¯öÓ@¯'€ýX¨k¹t9ì§6sÚÀÅï¢åEÙ4â<34>3õüyü=ªÿU;7·½¨¼Ûö@lêÛ6gû#õ% ë™«?{€±p-Dcí@4áhÌÏà—¾ä­¸ÜÕB[¿Æ(7(«[«›]j[æ´òýf|µ–φvÝ7'˜Ã˜
¥}…—iXŠ1‡[Ðo Û æz5V,Õ0HP/|´
Ú“GË3‰Sã³h~6Wãµ°o‰Ûçê¨ |ÏÕßsõ÷\ýÅrµö¶Ç±Ú ƒŸ1¹ç<C2B9>쳶_¹©ÎVºz°þ  m%=kÜMvÙdÊÛ û^SQN­JÜð<C39C>Å˶¬ú5ÿÑé9þó¨§èa;Ôô §Þ&©¯/ÀO®ö”†®ê¯<C3AA>j±©ßÔ5/ç hÅÔ{ÂIé§ÿ;BÉ°
endstream
endobj
2 0 obj
<</Type /Page
/Resources <</ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/ExtGState <</G3 3 0 R
/G6 6 0 R>>
/Font <</F4 4 0 R
/F5 5 0 R>>>>
/MediaBox [0 0 594.95996 841.91998]
/Annots [7 0 R 8 0 R 9 0 R 10 0 R 11 0 R 12 0 R 13 0 R 14 0 R 15 0 R 16 0 R 17 0 R 18 0 R 19 0 R 20 0 R 21 0 R 22 0 R 23 0 R 24 0 R 25 0 R 26 0 R 27 0 R 28 0 R 29 0 R 30 0 R 31 0 R 32 0 R 33 0 R 34 0 R 35 0 R 36 0 R 37 0 R 38 0 R 39 0 R 40 0 R 41 0 R 42 0 R 43 0 R 44 0 R]
/Contents 45 0 R
/StructParents 0
/Parent 59 0 R>>
endobj
46 0 obj
<</Type /Page
/Resources <</ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
/ExtGState <</G3 3 0 R
/G6 6 0 R>>
/Font <</F4 4 0 R
/F5 5 0 R>>>>
/MediaBox [0 0 594.95996 841.91998]
/Annots [47 0 R 48 0 R 49 0 R 50 0 R 51 0 R 52 0 R 53 0 R 54 0 R 55 0 R 56 0 R 57 0 R]
/Contents 58 0 R
/StructParents 1
/Parent 59 0 R>>
endobj
59 0 obj
<</Type /Pages
/Count 2
/Kids [2 0 R 46 0 R]>>
endobj
60 0 obj
<</tema-6---owasp-top-10-y-vulnerabilidades-web [2 0 R /XYZ 42.999996 786.41998 0]>>
endobj
61 0 obj
<</Type /Catalog
/Pages 59 0 R
/Dests 60 0 R>>
endobj
62 0 obj
<</Length1 7884
/Filter /FlateDecode
/Length 5028>> stream
xœÕX{|TŽÿÍüÎìÙwö$<>7Â<06> ˜Ò%ò c" Ù„<04>Âû]ä¡DYS¤Hc-„‡ˆ±4æÞ^!¶^©<16>«µÑÚ^ŠÉý<C389>“%µµ÷¯û¹gvÎùÎü^óûÍoæœY`࢛0zt΄'ß?=€Ù©7~ˆœ1Ïû†® voÓðû¦ ô=üÛ-j)ÑsæV€FSû4µûU/ð@YBµ[HFTÌš;Põl µá…Y…U RëNjÛgÍYR2¹ªÜ`[M<9¥Å…<C385>ÄH¹Úcˆ>¸”:Ϫ§Üç©Ý³tîÅ“¿´8©}<7D>ô<EFBFBD>œS^T8sW <57>ôí'úþ¹…‹+”S¦ùQ™ÔöÌ+œ[üÄ[øµàW*Ê«t|SbFêôŠÊ⊻ԿŒ Ý'=×Ãk<C383>3ºž:Å
€O! þ^§pâS
ŒKÇ·^7Û¬4„ï‡ï½ùÇ«¿ŸO÷CçÕŸ]ø·õO½¥]ùẇÜØJ8³K´·Ò*†A*ÍëZx<36>a;aì…}pŽÃx>„ÏàãÌÉbY
ó±álËe3Y Íæ±J¶mfA¶<41>bÇÙö.û<>}Æ®qÎ<71><§pÎÇñ\>“—ðÙ|¯ä+ùfäûø!~œŸáÙ4®
ªÛ¨ÖQý Rvb,Չƹ}—:>z¬5ÛÀ» <09> á=„Ç[³ÑOøˆúFô½ÖëFÿQÂB¸žðÄ>Fø¾>N8;„OžÂ' OáW O áS„s:±c<Ù½¿s Ž{ ç†ð„ðDÂyÖlþ+j|Hõ*ùcíôG+W<1F>η¾là
ÂSCx>ái!\Iöì´§UžÂ ? Ïájˆpa/&<3„—.
᥄!¼Œpq/'\Â+Ï
á•„KCxá²^Mxv¯1ÿ"úaûH¯%<Ç>Š§Rƒö ®¯ÉÊÐ|Ɖ ®IÖ'žÂÝÅç®)Ö— <<3C>úõßI8/„§Î áé„ïá$kÈR ¿ÔsÛ²Àñ
ô&´˜ãeB` †2õ]<G»xŽ|ƒçDÏñ.žcÏü.žSO ñ¼jð¬$ž“·ñÇëùïxÃàÙI<§ ´ù¶¾× ¹u!9úŽÔÛ¬ãÚ³Hã[ß¡±á;4¾y»Fë×75ºU#:öËIúŒ!½‰Ðs†ôœÒøÎ(pò¾Ówþ<77>.¢Ü9Ð¥C~{tŠàt÷èB7)Y:E¡>Bt't“¢[ìÍsé>_§úgNû» ô7ßp*üTP¬_SlTû.û<30>ØO<C398>Í1Þ1ÜŽ'AˆÖʵµOì4¶,˜oK²ÇÙìÝííwÚ§Ù§Ûõ9cŠ“mA#OOS3±ó‰¿…N#°™Í
ç
|ãÊ.]&·t³]ê\v©XÇG]9Aj¨ºéÎŒ§ÑF¿N<C2BF>Ž£…¥C=4Ryja;@­#<02>ÃzXH=o²F¶‰÷§¾ð%œ#ΠЈµ
°q<EFBFBD>ïS쯲x…td07ËPM
(•W”ÉJ½ò‰ÒC”*¥I)PªXî¹âÕ |‹ü< Ý¡ž}UpÿˆixR©8á#lÂZ¸BVtïa+ì‡e47+‡U|ŸL=o&z ír¢7±½ì<1C>î8[Í°>ö²fò«®Á:Ìá«($i¼„Æÿ6éj"ù]P¥Ð{šYAò¾ÔG£'[3<>{öÍFùVåØoª7¹Õd²¢Gì{“µ˜ž€8‡â|ü€­W•ƒÊØÚ,€­¤{—.c*aKÈw½,ÓµóEJ«…?*êLÒýîÙ|…O&<26>Jà$ÕE&ùt[<5B>h¤:5šÔqÊ@' ê
ò Óa6¡eô> ý1[I“á¯iˆ¸F{”äóV¶…_ƒ& } bM)Aïp8ªš„œA?<3F>«Ž{Çêü“ò<¿ÊOêßïM<>KõÔAv<41>c‰§¾£#;O‰ùu"¾½æ:Å›|ñ/öï7>;ÏS×>jdHë¨Ô7%<25> Þ¢nê éFë„—~c ê<E¥žÍ®ÍÉÃ6»Š‡õïÌk3pÊ\=·{|O
÷R¿ Ÿ±2*gôÂmßQ6åm~íöU]¥ýû2ö[¥ÖXyü¡ú<>ý—a™ƒîÆ}Û7äWïµÝëÌ·\}“å]«·D±ŸüT!ÖoWn€é3U´ l8ßr'¸Î·œoI<6F>Ð4oT¢@[Ƶ]AÕyý¯•¦>d;À>â«ø:Ò¡<1D>=\a ¸.¼cˆ¦F$E&x\û¾n¿¾·@·C uÞ£°Ž³ˆV\mdg`Kê<4B>´ÈäÎ<>“R÷§#¦/[„þ~7ÄÒ÷<1E>EÀ,þ,¬QhûÅ<C3BB> dâjK*M°êŸë5¿KcÉÜ\Û~½V4=W÷pCÇ%e+­-tƒd„©&<6A>‡?m‰KÄøȸU÷ôòÕש¬×\ái¾pÍÅ{ù@sArýÎÝóÌ3ô{æ™Ì"¿ºqC~Å,"[6Éw¨6á46ˆ¥ÕÈ*ùˆÜ «Ø¶„-e[t¯/Òa*yc¿?2 k^#Ö¨Pc1w7Å#tg6×ùñua9yLjÙ?4¿¥¡3$¾«zðÉArì•0 Søô!IšH÷¦iWÉÆɧYñ¯Ù¸¶ýµJÕ˜ú1­Íz.ÐjSÆÇñ°×ß+&6£ã5¡€&„åú‰ö¤£Æý¸B».¸¬œY㻹Дàj_™3¾.*gÚø:wÎ4šO9pú´žÍ-៳ºx—Ö-ƒÆæ÷ݯäŠ\u©²TTÇmˆQiOŽQbiqÆ/€jÓÂت¸ñôI³6vmÜÚøƒp0NÓ½äDú`2œ¥JIîaRÓ‡³4Ÿé6©& Áëm÷RÓ
'<ÿÈŒs—žÏû”¹GMWkkk±Ç‡Í}jì¢`ÖÝïÜéûô<C3BB>Z ÿDóM§)e?ÅšƒÖø˜€èÈ´©5á ³[!ÞdVìN×…ñu6òÚa8l×>ŸÙÐâÓt/ŸÏlñ…gt:¬œ%§Ïê®Þaƒ;` äC,¢#ŠÅúB
ëƒÙDvŸý>G.<2E>D²¥¸ž9ÈE KÂ4<C382>[KÖÒÑ$9“é²¹ùlûCÂÛv ›ÚÒÊVð&ÍÛAy)<29>ÜEþh¡qä¨)4g¢Ö @F ˤºÚÞiÐôÔø­Ô×g/ïUZÈ~RFG]rG24ߞǙ cE†#faÔ™T­LÌâéö<C3A9>Ï1Ùž&šs[׈¾úšqé'R#†VxÃ?4ZÒBáz1ÍJ<07>SL­*¥•Iï´hh5늲ºC<C2BA>±°˜éͬï÷a¥ìnè¦9óòù5R¨ëaþü¦#:ÎïqØcglº?+Œ…ñ05ÌyP ðXTfæ&´(Q,†ç²<žmŸÅJùbVÍ—c¥²H]lÞÀ6òÕö<C395>üi *Ý:'Aß0 “ùIù÷ÊeWxÆ»ÛgllÎö<ÔÚ—­kÈß³äyyn ø#a‡e Ûá2s—DŒÃñ%ÜØ/hŒYЗÄá,ÓÒ<úFäM2ž}{â*KgÝåEÙ(³Ø³ì0 ÊR™- ÅÀX4Àú±näSrµ\)ƒ4id]y”¬ÛtÛ¦
ßkÌ;”_X³¨Š<>lûÎ74è†[ŒíêpwÙÖ·Y-TÏb]{,»=ƒ_o.škåèÚöKµ<4B>ÚMÝI»BM5«\cܬ?<3F>šZ«%˪r4#¼h¶ÑÒ
«)^n%ã2ÞÖ¢uΤ¾Jºý}*<2A> 4‡2ñp…SŸ¼\Ô'έܭFXSxŠêQS¬ë 5ÝZÆ—óeêëj¾V]kÝÆ£‡É¬ö2÷¶ b™˜kηg[ªÍKh¶àÝFîÒ”ÒŠ¢Öϲþl[Åú¿%W5ÊU ¢¹ÍŒ×[ûŠîmô1Úz14«9äyí‰/ùÓ)7ÑjÒPA¡)
fÑ'd$*;,îŽ56E˜P³@|”SXcbí‡nk¼]IÐ#ßÖ »¯uÎ|¦¾9‡gèåÖ…h숇ý‰Fú.<2E>`”°ª ‘ÌÍ£°›â/óòìeJQSÌ)Oâ`6˜<36>f£y©X¨,"6š6ª;M;Õîä-KdÝ"qëËô]ÄE$%o°¾kâˆ7½ÿÚ¸G_ø5ûƒ¶uíäö;¶ó“QÛVÊR¶*8³}“h~ïw[ŽóûÚ¿Ø°nÝzãBïÅ©&7­õxê<>‰=N÷1a~ÌYÏž¢!™ß£…ÛF%ÙîóéwùjC«áÔ#‰«kÑÈy-9ÝÉõ—&¤ù¢˜;*4°&ÜW_?ì¥å<C2A5>ÐѸü¥ö·Ÿß¾ýàÁíÛŸÇ#ü¡¯[
ÙHf¦2²PF6~òI#UÊR:Ó© ôõÚ¦úSLáè00%¨‘ö ¬<>;ãRA 3MÙš9,;>Ú;:Ù˜š6JMã=•™yùªžá”ŸþˆÔžÙ=+znëYC嵞õìèi¡që/š¨H
§1ÒÛ@Z¤ATúŒ:½öÅSÇ*n=p¬rÑÇŽý°nÉÒpÓòê¿}Üþ ßû“=§ö·oà{÷í~í¹ö JÁ¡Y3—çWu®LpʯÞk<C39E>äÌ<0F>ûþ~MRšŒ³Oç'Ø£ß<s}ÿÅ/A€ä> sˆ<6E>êEªÆÿô Üä#|ð_Ñ'–è;~çE_tg…S_1ÿø2}òmºØúÏeþÕK¸aþ÷ñ¨<C3B1>”%zT'aô…RÚÑôwÖÓúßJ$<24>¢§~sÒYåfìw²gC˜<43><CB9C>=ÙuWè\úÇá–~å,ÀÎ~Â&°²¥úIW±<57>¢T ¢`Pë'‡~!Œ·ô+·`Agdw›ôŒ„b:_B.<2E>ƒ§Ðs<1E>œr©¯žetîšG§{  :å—Syø6O—ÔÝD«€%$Y³(6 Œÿ,Šè<¦kH¥Fh&qèÿ½Šj%é*„¹4rŒ%=EdË#`LîÒUe´Šé©<C3A9>­šîâ´þ VwYÍ!KÕdk¶á×,c…$ó¿³x»÷EÄ[hh+6$
<0A><¤E<C2A4>\ñÌ$½eÄç!ùr²^hЬ#gæ.œR8¯*·¸²ª¬|žÇ7 mHVyùÃ<C3B9><14>Nº»¼bIeÙ¬ÒžÞE}<¾ÔÔ4ÏÌ%ž¬²U * çöóŒ<C3B3>W4À3bÎÏd<C38F>«Ê3¹¸ª¸²º80Àú-ÑÁºhNaõÜÙåófy²
Kÿ<EFBFBD>`È|Qiá¼YÅUžÂÊbOÙ<OÅ™sÊŠ<<3C>ò¹…eó¬<C3B3>yk\¿3þWÿÖUÏWû;nHluã×^¼îïx͉“xUâ{ñ¯NüK¿ôâŸ7<C5B8>øE?bK+þ©?“øÇaøi~"ñ¿|xåòq%ˆ—‰ñò¼ôñ@q©?ˆ%þAâG>üÐ<C3BC>¿â„ã®À÷Oàï$¾Gìï­Àæó÷ˆæ<÷nœ8'ñÝ8ü‰¿‘øïÿMbSßiLïHlLÄ_ûð¬Ä3ë5q&ߊ‰oJ|CâëOK|Mâ)‰¯J<)ñ„Äã{Ä+ŽI¬?zBÔK<zdº8z<02>®VŽüÒ+ŽL÷wà¿òK/¾"ñå –ø’Ä:‰/J<À_8ñç/xÅÏøBm¸µáø3ôÏZñ Äç%<1E>øÓpÜ/ñ¹}Nñœ÷9ñ'¬!–š >+qï3v±Wâ3vܳ;Fì àî].±;w¹ði+î”øTÐ!ž’ÚÄ'ŸpŠ'{ãNÜÞŠ<C39E>o;!¸mët±ín[­lý±Wl<57>Ž[ýÊ<C3BD>½¸Eâc<C3A2><10>I|tn&77<37>ÀMmb“7Úpulà#©G¼¸I\·Vë$®Õp<C395>ÄÕWIôw¬\±B¬”¸b.ಜH±ÌK%.¸Ø‰ìXmÅ…´bU+V¶âüV¬<56>X.qžÄ9Iø°ÄÙZ˜=Ë$®ÀYÔ(X,1 ±HâL‰…ð ²ãt‰Ó$N•˜Ÿgù­˜¢bÄ>Ì•x?Y¾? s"q
s‰)Ñ8Ù<38>“ÆEˆI³mxŸÄ‰\b¢Ä .¼Wâx¢Œ—8n¬KŒÀ± 1Ö…cx<>ÄÑAÄ‘ïæýÅÝ­˜uGŒG¿ÄJþƒp1Ü<31> ?ÇÌ»"Ó߆w9p˜Ä ‰C‡¸ÅÐV2Ø%†¸qpºM vaº %bš}wÚ„Oâ<4F>6Lh©ý-b€ û[°ŸûÞá}xGŸpq‡û„cï^^Ñ{öòbŠ×&RÂÐkÞ“%öÃ$ò3)=ìÞŠ‰äBbOŒ—׊±YC<>‰ÑìFê&1Š„¢b0R¢[b„Äpb—¨¯ZºV`X<00>ö(á<>h'n{Ú$Z]hh&6³DÕ<44>¦*DT("zQÒ½KðþÈ\Y= ¬ßÂúþ¸àÿzÿôJø(çx
endstream
endobj
63 0 obj
<</Type /FontDescriptor
/FontName /DejaVuSans
/Flags 4
/Ascent 928.22266
/Descent -235.83984
/StemV 45.898438
/CapHeight 358.39844
/ItalicAngle 0
/FontBBox [-1020.50781 -462.89063 1793.457 1232.42188]
/FontFile2 62 0 R>>
endobj
64 0 obj
<</Type /Font
/FontDescriptor 63 0 R
/BaseFont /DejaVuSans
/Subtype /CIDFontType2
/CIDToGIDMap /Identity
/CIDSystemInfo <</Registry (Adobe)
/Ordering (Identity)
/Supplement 0>>
/W [0 [600.09766 0 0 317.87109] 16 [360.83984 317.87109 336.91406] 19 26 636.23047 36 [684.08203 0 0 770.01953 631.83594] 48 [862.79297] 53 [694.82422] 71 [634.76563] 80 [974.12109]]
/DW 0>>
endobj
65 0 obj
<</Filter /FlateDecode
/Length 289>> stream
xœ]Ënƒ0E÷þŠY¦0ä±@HQ¢J,úPi?ì!±TŒeÌ¿¯™IS©@:š{¯Ç3ɹ¾ÔÖHÞý¨ Ы=NãìB‡WcE&AîD5´N$ÑÜ,SÀ¡¶ý(Ê ùˆÕ)ø6'=vø$7¯Ñ{…Í×¹‰ÜÌÎ}ã€6@*ª
4ö1é¥u¯í€<EFBFBD><EFBFBD>m[ëX7aÙFÏŸâsq8ãnÔ¨qr­BßÚ+Š2<C5A0>§ò9žJ ÕÿêGvu½ºµžÔyT§©L«•²Q^0<>˜D² *2¢<eº0íˆv¨à”=§ìX¹¿P?÷åo<1F>¶3eœ$9Wr<òeÅ=MëëÖ-<F§fïãÔhU4®uPÆâcnt«ký~'“š
endstream
endobj
4 0 obj
<</Type /Font
/Subtype /Type0
/BaseFont /DejaVuSans
/Encoding /Identity-H
/DescendantFonts [64 0 R]
/ToUnicode 65 0 R>>
endobj
66 0 obj
<</Length1 36236
/Filter /FlateDecode
/Length 18368>> stream
xœí} xÕ•î¹UÝUÕ]Ý]U½/êM-µÖæn-^¥ÖjɶlɶlÙ¦mÉ7À«Œ±Á Ç,ÆØ„$€<>°M2f±BÀ!™Bf&“Io†dF dÂd¬~çÞî–åØν™yùÞ÷Q¢þºu÷:çÜsϹ÷¶*`Ñ’Êøú¿~ãabÂؾe-<2D>½¿ùÉǯâûÕηÖméß&hp·`zٺݻBå¾oàì¶oܲû…W¼7<>ýƒÛÁ€Ð1ÚÊÆ«÷nøàï`8õ7æ<C383>-{>qt À|÷¿¶i}ÿ€xÕß|<00>ÿ#Ì_» #Ô§Ìën¢ï¶ìÚsÿ ÊI|ÿ;\}õ¶uý<75>Ïývë?<3F>íçméß³]xJú!ÀHæmíß²þ‡ß3ÌÀ÷˜^º}Ûà®ô,8¸‡¦oß¹~{cÛËÿï÷búÀs+É<> ÇðóÜAÌq(ó$?Ç2ÀXY¯ãŽç<C5BD>V^-<2D><><EFBFBD><EFBFBD>LãÅKé¹0<C2B9>^<¸ ËIÜÓ´<35>`ÝzB/½ =ϳ0­ @÷ ÃtóËÖðmé5<C3A9>@NŸCºQ4 Q3¢‰¡,ˆPP5°"ZÚÀžþ°ƒÑND'C¸Ó7C/Cøóú!1CJÿÂFÌg<18>(@,„BÄ(Ã"ˆ¦?<3F>b(B,<2C>ÄR(M 1†eC,‡2Ä
(G¬„
Ä*¨DœUˆq˜þ «!ŽX ÄZ¨NuP8êgÀtÄ™0qÌLÿfÃ,Ä90±žaÔ#&¡rèwÐGá£Ø͈­Ð‚Ø­éßÂ\†í0±ƒá<hGœé`ÌCì„ùˆ ßG¹èDìbØ Câ†K¡±§Ë` ârèAì…eˆ+®„别 7ýk¸V ¦`%âjX…¸®H<C2AE>A¬Fìg¸Ö ®ƒ>ÄèOÿ¬g¸Ö"n„uˆ`âf†WÂÆô¿ÂU° ñjØŒ¸®Lÿ
¶ÂUˆÛn‡«Ä<>°5ýK„mˆ»`;â5°q7ìD¼÷À.Ľp âupmú=¸ö ˆ7 þ Ü×!ÁõˆûaâgàÄ oo†ýéwᆷÂÄa¸ qnF¼<46>áA¸ñv¸ñ §ÿî€Û#þ#<1C>ƒˆwÂ툟exÜ<>ø98Œøy8ø¸ñnø,â=pâ½ð9Ä£ðyÄûà ˆ÷Ã݈À=é€/½ˆ_bø Mÿ/xîGü2<<3C>~¾Âð«ðEćáKˆ<1F>…¯ ƒ¯"gxF| ¾–þ|A|C|Ž§£pñ$<†ø$|ñ<Žø|ñixñE|N"ž†'ÏÀSˆßdø<<3C>þ<Ï ¾Àð[ð,âpñ%8“þ{ø6|ñexñ;ð|ú§ð
¼€ø*¼ˆxáwá%Ä×àeÄŒ&ÒãŸj¢O5ѧšèSMôÖDŸÚDŸj¢O5ѧšè/¯‰èh7°±mdcXfãÖÄƧ™<C2A7>I <1B>
i*WEV6flllØÙxp0‰w2)w1iv3Ùõ0Iõ2éô1)Ìc2çgdrf2Ï$ Âø]À¸[Èxeœ+b*fü(aÔ/e´Ž1Ê1:3JU0êT2ZT±/Ÿ¯¦ÿ5Ñ÷Ò?AMôzúoQý±~œ~ 5Ñߥ„šèçˆÓá¥ÿ5Ñ»ˆ3áWé¢&ú5âlø ý&j¢ëá“ôP<13>K¿IÂ!6=b1¤ÿ
š‰±…héïC+q"¶oú»0—øÛI8}:H!â<R8ŸT¤_<C2A4>db'©M™éoÃ"2±4"v“¶ôK°˜ÌK <>NÄ¥dqúè!Ë—‘éça9I¥Ÿƒ^ÒŸþ&¬ ëW+Ó§aÙ’~® ;Sd7âj²7ý¬!7 ö‘ˆýäĵä¶ô)XG§O¹ q=ùBz6<>£éoÀFòEÄMäËéÇa3yñJr"ý\EG¼š<™>[È3ˆ[É™ôqØF¾•~¶“—w<>³ˆ;É÷Ò_ƒAòâ.òÃôÃp ù[ÄÝä§é¯ÀµämÄ=äÓ_†½äŸ¯#¿L?ד_§¿ûÈoo "ÞHþ<48>¾†È8â~Ž ~†Ò÷ÁΘ¾nâ,ˆ7sÖô=p çD¼•ó"s<>ô`„ËOnãŠr¥é»àv®"ýY8ÄÅïàjs3ÓGàW<>x'׈øYnnú0ÜÅu¤ï€Ïq Ó‡àóÜâôíðnâÝÜÊôÜíF¼—[x”Û<E2809D>†û¸«Ò·ÀýÜVĸAÄ/r»Ó7׸ëänL€‡¸›¿ÌÝšþ |…;˜¯r‡æîBüwOúFx„»?½åD<Æ}%}=çA<ÁO_<07>qO¤÷À×¹Sˆ<53>sÏ ~ƒûfz7<Á}+} Œr/#žä¾‹ø$÷ýôN8Ž<C385>ø÷׈Oso¥wÀ3ÜOŸåÞNoƒÓÜ?¤·Âî]Äor¿J_ Ïq¿A|žû-â ÜGé«à[ÜÓáE.<2E>øÏ¥7Á·yñeÞ˜Þßá-é ð
oK¯‡WyâYÞ^ßåéµðŸ<>ø©Mô©Mô©Mô©Mô—·‰èÅáÍãmg«Üô©CíAãi
¤ÓìfKÝ8ŽZÿtýüÿåEWãÓs¹@<40>øAzœŸËIô=½<>ûž€ˆšóÃôxzœ;NsâøUÓsy…­à¯…H;ù<>[ˆùÿï<>à©¢mæZ¸MÜÛ¼Dfq/€„Ú¬ÇÚBäÙ"bBí³uÉV³¯ 6éC 1ŠTxc»pÌÍÁ݇ºlê†kp¼Ç1­ó><3E>å¾ KÞŠ€QîDÝñ
ÆnÅr¥¨#fã{ ÊÛ»ØZ|‡ÜŒeëÿþ3×Züª>úÕHu¤4£8$z{.YÜݵhaçùó:Ú綵¶475&êçÌž5sÆôºÚšÊŠò²âhaA$?è¶kªb<62>Iô:ž#PÖ <0B>FûFuÑH{{9}<7D>ôcDÿ¤ˆ¾ÑFµ]˜g4ÔDz….̙Ĝþ$g2“39“¨¡Ù0»¼,Ô <09>¾Þ <09>&+»{1|GKdEhtŒ…;YXe/f| ‡±D¨Õ½©%4JúB­£m»7líkÁúNÊÆæHózc9ZâFƒ2†F#ÛOâzÂ\qëÌ“HfÚì(_ØÚ?0ÚÕÝÛÚâ ‡W°8hfu<66>
Í£"«+´™ön<0F>,{éà¡Ó*¬í‹™"ýWôŽòýXè ßzðàð¨-‰´Œ–\÷Onüäõ£eÖÑX+¿x¢2ª/T#¡ƒv>2öoÆôgc„BõC Aú‰dÂô\°oØCü¾p˜öåöÓIX/£û»{3ï!Xë{’•±£\My)—âè¡)ûs)Åû"aʪ־ì»7¹G÷¯ •—!õÙ…ø¦‡FùhßÚuè³ýÁHKK†nK{G“-Hög¿µõdU%æïïÃ<C3AF>ØLÉÐÝ;ZÙ>j<>4e2`Dˆò`ó’^V$[lÔÞ<
}ë²¥F+[[h¿B­ûZ2¤uEº{Ï ½òÎÉê<C389>ïT-˜´£ÎfdJ´õ`ïÀ†Ñ`ŸoåsC¨×M®@ò­ˆô®_A¹QGKÞÁæ¬EV
¿íOrç2Ó/ ¥P/çãWPnaD¨ !Ò4Tdê%>ÈeÃV²9hèzð…/ln§I<-ÚÜî ¯g®?Ó%_¶OúÂQiR]*FLô)ÓÎe»ÉM;Tj]ß2©ƒTªÏv0[Û¥ûÉQZdÆeg{.‰/ÄqVâ(Ý¡Qè
õFÖGVDP†]½ôÛ(­ç/‰Ìï^Ù˸<C38B>¥¼eÒ§O¤eC£\3
`[Ì—ã){ŸËÞ'^Ûÿ$¹#—:(Eæ/9HkŽd+„ÐÁŽQ@Mâàœn­ÎŽß6To¶þHH µì?<3F>Þ¿öàÉdòàöÖ¾M3i=Ž<E28098>ƒ%½³}¬{{oð]G³¢<C2B3>=iSy*Ÿ¦“2Ò}2IF¬ì=£„FöžäHÓ
*ýîMø<4D>¨ìZC”8ûVl:Ø·Š68<38>ø%ztª"õ' '˜F<CB9C>õM£r¤‰Æ7Ðø†L¼@ãEd qr:wðèïpè·´$¨­¾äß´wè߯ˆ™T“ò;®†{<7B>¿‡ÿ@w£Þ¬Ÿ)oÿ”ùKØßËR¯Ao¸ÖpÌð¦qÿî2¾o|_6Ë¿5­6ûÌ;-IËKÊ”WT§ú€ökžõ3Ö¿šüg»Ùööƒ‡ã;NÁù¢+èZê:æ^ìñ¬òœöxï÷•ùÖäÕç}.ïþ5Áƒýòþ/lò_ÉòoÎeþº'ý­ÿ þíÏØ™?ºþ¶<C3BE> ÷­Qfþ=ó½ƒÏôÒç¿£O¤W¤Í÷ò/ã«!c£µVãäeî×(_"x“Fg‰$ò•¯W¾NÔ·_Çÿ¦U%´°V„wœÜÿ÷ësÖ8wðÜn, ÓsÉ^Aï»?Ù¤óK<>œÁHŽiü½¿ÝHŒ"2y_&OÉä!™‰_Þ"ß óŠLäåXÁU-²q€×­…†DC¨o¥Î¥Î¦Øµ#®¾Š¸#>­ÊfwºÄ
RS][ç²<C3A7>Çæµ7-\³faSû<ÛÿÓTùš<C3B9>þxMy꧴_bz.|”ë—Ñ¡+ÔqŽÜ­{W÷Ž¿YGt¢¬ð$Í“çxòOöóÄʯåwò<ð„ï¥ýRÄ öK<4B>kyÝÀŸïWu´¨.@vA,ª'Gÿl¿¢é~ôbvb¿*΀<C38E>~'é<>ävøfÑh´( æEfÎ,
P™¨LÍ:£ò<C2A3>ÄX<VUç´g¨Áæž$…¡v<C2A1>JÈNI®ŸîJl®0»eÚÑÈräiyÒzUÏIú$·tO ÛóŒN†
ÚádñX,…,öþÜûÆ´ªÕ)[Âñ~ü1Y¾œÖ2mþo¡/+Cþ©¾ŸN¿”4™í ˜B×AÃë;¨€Äv`ßìB$?Š|IÄ<49>ß* è]ë+.öá<C3B6>µ¥ßC)¹¹ÁCQÒÁáㄳŽèx~€ kÑPnÀTªo džoxeZ•+Bs×<73>%©3ükLRÓp÷*ö'?Ú¯*Ðé9<C3A9>~ÿ>møL0 ÐXãi$ªRAG<41>Ã(šÑŸ}zhRZ¦*L‡„¤Ÿt"@§ jVX ¨& bØyˆ~û)LÌ<<3C>Šf¡<66>gh.ù0ø´:}G ´76 k*>´#<} L5ÄÆbôFªÅðSßb<C39F>iU@Ÿ$½lŒŒFÒÂê
.öˆ×sñë·l¹žÞd«9X<1D>V͹'Yõ<59>çŸÿ½glXP^¾`ÃŒì“r3…°½:t%kxÝíb#!(p XÌwˆ_¹5â6qHäE8¬šB¦*S—©Ï´Ý$˜L¼¾‡_†üAaL<61>%R±\<5C>z#•<>Â_OêZD³ðbjÆÕåM)S¤¤ÜÁE<C381>­ÕçæsÕ²Ûi©<a~…ü+ƒNVò¢ÍÅ»l·¼]äm¢Kt©ÞC&HªHܤd@V^e¼ÞÈ©å”ÏVè, ìÓØóµ¤ó%| ªŠ
r}<7D>ëtú=Æx9+ºL…Xð)ã0ðÉSè,,ͱï<>ªJYŠÌ"P˜$Œé56õ@ÃXeJ"³Î˜‹Å)·Ô·Çvœ<76>S¾2†)••ðía}L¥xƒŠòKìTj¼#ìG«kªë¹ºz¾&ËMÄ<²˜ü<CB9C>¿jv@+/ö‘†ñ+H0^ð”G¶PÌí¯ŠzÅ
CA¼¾`ËNWÐÜØÐ*âÚ"Á¤¯ìnOÜ••ñ¼@ižYu¸„&£ßk]<5D>T®K@~‰TžßI “»Ãd8L,ÒAïF¨¥#¤ZÊŒ‰÷“k1°Bݬrê¡##ODxvØõQŠn‰rƨ1Zs%O:øŽ‘`ŒXbDŠÍt{jkfD£Æè…#5´Þš*‰¹j¹ÛqÄ<13>Ì80TêQ<C3AA>!ÄÆâ(6c3æT·úvœÒn5ªÑ±TŠ/•RDß2£¦ÕÅk)Éb¤†Ê~†zB†xŽ*Ãï@2Gò+8ªÿaEg¨ºµÀöÔ”åÙÃ1wU³«ÀTXQã¯ëªöÖ—ùâ…®`ãÚfo]U<>µ´Í¢g<>Ñ[žŸWì•ó”¹M•}Óšj;íR bvayçô<C3A7>d2éº%/ê TeœGpU²¡˜#F,Ž˜žë§ë9ƒž(z½ùvÑhp)v2k<32>}}ÈÎÛo°8Á~Øl z¹G9¬ÓéqD%Ô1:¨Æ•cq¢¾WÇv®N©oý<>Çñ•¢S ¬NŠ1TÏŽH r“Ŷ¦%kªV,^¼rüû¤60gfÂþ³÷ˮٷ§j¼}ÁÉ“äîТe+ctä7¢Dü+ö¹ªê7;•<>Y°Pöå_é$ÎC
ä9‰/<2F>Häö<C3A4>ÏòùBsq$ÿpû˜bôI8^|T§ù¨ ˜é› Á'…Y´#fZµYb² -‡ ëéwÆ2Z<32>~ëÛñ·f Çp  , Œ¥^™à»<C3A0>N¤ç™:Áy¤Aرðß½çŽ`C_“·¶2±szùœ¨æmÚºTGž#:<3A>Žœöl¬X8Á;{~¹':«Ø1mÙâîòEJ¢®¹Ù€3
áNƒÊáÞ§Ëé (ÈÎ(^Ôô‰ºü“ä T=<<Ëy¢¯ˆ"A€Ø×C¢íZ Ü*ß-srøÐ\XŽ#ŸO¥ä•©RŠq/Žè©ÒA²éÙTÐ0†¥2Á¨§p< ¨ŽM%<25>)<> Ps¸<73>åõ$#ô”2Ñ:Ðh˜¾ñsWˆ³úT½<E280BA>Y«]ÞšÅÓw^ûNdv€S°º8\07çúû¯¬# ‰»zÉ“Z0«³4ÚÕTúÀf³ìËΊä•%Ü-í(7³Qx>d²^˜´ZP„Eýí**ƒþ°ˆÂ‹<E™UߣŒ&"åOMØ<4D>]ýªPÞ´(:þ9îš›ºN>z¤¼»3zËמKQ¯†ê¨s¨£Â<C2A3>€Vb9ƒSû{”Øq¦y>TÍYVðT1SßJ#05IgZªÅù(wÂL$¡¹1Ô8­R©¤E+•ÆPe¨ñv¥Ò®T6*THë0ºK!!*škB§ü<C2A7>±ìÐn
~êÜúCšD«ÑòUnc¢„BúGœt§ó³·(Ûleã'ÈVä£J“ôTÄ33»u†Í6ªÞbc?¢ó;*´Œr¥bßÖÅTˆR±aË+*Þ˜÷GY Ãï¬è³#J1ÇvÑ©Ÿà7 ±M² \õ„œóÏX6½qyµÓ,q­ Ô-¬šÞ•piþBûîñûÌ¡x4?RÝå ÅåÓþ`Î+ …ÊqòȯƟ*<2A>[ã/œÞð×TZ¦o‰¶Vók¢,ß<}ÈZvڃŎPU<50>Çà™Gª” Ã,´:Ë¢ƒ§E>Giy•<79>¥7rÁ„ŠÉ™^\{Y8»,{ <09>-ìùI²§æ€!ÌfŽð!ÐÝÏ?Æs×òdšä¼¶‰r+œ•±lé-¥añr§UÐ3Q[ÕmD£ÎÄG%L<>qöêŽð4È/??öb™ÁG§tõ,ê[<5B>Ž½*åX5oÎ#ÔèFª×YHŽ1”%b¼¶®¶ºfNòáëßçÖ/H˜¼M#pÆòY<C3B2>w"õþICð¡7þ†,t×,<2C>cR"8þ
/ØrŽ@‡[„#0†#p.úüÌç$.
ŽEáP“2ͤ‡."YÅbÕ@µ| , iÎ $óy<C3B3>ý:Þ®ãõ¨xYÜ@Ð ÒÑ‘¦¢ÞÖŠ¤KØOsx*S¯Ç^<5E>4-*ÕÉâÊžî‰W´ùêô}Qa<51>—ŒŽwyÉ:òBç³]ÏvÞ… áyõ†nøÙP<>AÕ؆ªXÌ&Í$J£,È:·ËéÀ*B&+Y c`P<>í¬Ç[mvί´‹Í&ÒiÂð f²k&ÐAó¢“ôn÷>ä}Ó«S¼$kÄzxÝ^÷Ç6Ç<36>ƒ·:¬“Ödj”…&æWd!c7etj‡zVñʬ57õ7HŒŽÆWô¯¼x©höœx y W<>¢°H§¥D€wñøf!"W¨Ôñ³ ë‹Ûš›
V45·¿<6A>4Ë——ŸÜúܱ£óç=öÜVBuþü¯R/mYú\÷<Ò«í¶á§—;HÕn[v®°©,€Ê‰f!jÁn'Éd<C389>3#ý¨<1B>IŒwVá¸rÎœI¥?Ï@:=ÓõÇfL¯Ù'ÛJ÷”€ ·zƒûôÐ h`4$˜5Æfã<66>ÆⱬOò#jÞ¢BJééü«M2µ¨{KNפ)¹h²YF4Ç´iUv{Õ´*ÇìÍ<C3AC>eµåsÚ<73>Ž§eÅqÅ:gF¼ÓZJoØP<C398>¬ôåMk*,,ÕN'蹇ô8m[cm‰Vë¹6“ŽßÑ_‰Èy¨°*óL <0B>ÞÒP ÄcâPva&ÎÙKPÏÁ»ÉHIÒdmßÄ“€„3ô°ïÇÑGgrUQò#%^ª'Œ™ù<©"<22>¼»õ4žÄù UãǶï%ífœ©U‡D'lÊ)â>…Î>tjPhÍ¡©Óa¤ÊÄØšï¦QùAš<41>£<E28093>¤<EFBFBD> î‹°´,>ÛèdÏx Ì­`A¢Žg| õl<^™`B*FR1ý$•ã+øóÎ ]áÉþŽ=Ë*kVîi‰µ&BBž!?ðÖõÖ‡ý3—ÏlîuzÄÚv¥êŠáåˇ¯¨2©ª®K°X Ñö<C391>Éú Åyr—^±©M¥ð
~8<>ôÛUú9v‰gÇY®Ó®¢pÙwCÒÀüàO¨?Æƨ<C386>æ*p<蔎¼. K¹öQ=Ìljõi”.fŒÖöIzJ:}s RT?ŠeheÜ'4tP™ÝC¨'¥b¦wdú†Ã=¥ëKJÖ—öÞ0}|øàÈÈÁrƒ¡œ¬ZyËò˜2Š±å·ŒßwÇÐÐ9÷kªù`u“ 5I¿È+Æ “Œf<C592>4ÇLú½¢H {å&~/i¤n3l<33>1cqõíÕ©³o°e0Gîoytü$üm²†{zÉÝï/<2F>L äÅItmeVµ1SõDÅçë}kr¥Ú2ò•ñ‰ü±Â.ÿ6“÷ßr«™¼ÿðifšP<C5A1>LQÓ”Z¤.gÑ IJ¤ÓÈÂc%%I$pIRF*t 2<><32>î6Ñ&:(‡’&Ê"ZÞt¼ØÅra„ËKóz÷i„ˆN*û*ÌN<C38C>òNk-*ÈÖJ æg1cÁ>NDŽ&¨0Sƒ?N£(×9¦¦P¶?B;Ïš;$¡YøÈ…òM&Ë79×o*ŸÕV<C395>ñ½­•Õa!èï‹×,Ÿ“|Vé,3é^g4ŠUWÜ:!âÝ6ONÀ º,WàYä
g@<40>êQC€žè<C5BE>˜Žkä <1F>{7…²gKheýýÜÓçæÓÒÚ«_ÅÒ6Ø{<78>…}£J´A Š<>ØŽ9ÌæÀWÙH#<23>t@(F"íÖFÙBÉì§~Ö>#[U2ê©RÐScU/IÙÑ@µlŽ¢J<C2A2>Òk,ã
ÕÖh òUGÍŠæüùƨ£9ÞÞÔÿø²ÆBY³:•pÇ
òzN?ƾëÁ—4ƒ¨äŽ |£~/i¢ÈFÝÙiU…(| <09>|<¾¦éRüì±d3šê…X²„Ì;…¨Fµ¬{„Ï0ý«ÃÓ¾!üH˜û8Dõ“ ~â¡+.˜¼ÜCÜTŽf`Øà #O,Üf ùØ@$É-q¿—ÈO¤÷$î¨t\âF$²Y"èY‰wk<77>hÜ°†dUѬ{éi¤bìx<C3AC>­°¡ P
Íí<C38D>ü£>â|$<24>Ü÷…<nQÉ+Ù½»|zT=®ò*ÍÅŒ*™HòñRgÒhwî+)É 6å5úµÆ|º0„ÖI¾ˆežuxÈQˆ³>Œá}j£ÚcÔ„G•ÍŒ‰Jº†÷º­±ÇR?J<>û[LjÿÙ÷nLK¥PijÄ°${ u_¡/¸ £<>>¬¶H­y½Hî0†£±hØ([ôktF³bèñÕ×Ït»gÖ×ûzòµ5zœÍÑçž·lUwRÛ=>vhå³'<27>Í/ÛsÓMµµ7Ý´§lüäø}‡ˆì^µlž;+Ü&¿w'CÃâɵ2áeaP•íª¬Z™=aÍŠq3¸ÙÁIâ á˜ÝÖt»x¿È]'«D²R$"¹Yý¼Ê­Uwª—T»TήV«œ¨Jš\ÆF© 2fµ»R©5˜¸¡d£J8ǺړJ…*ZD£A1ä¦9g4ÍmkÊ[ÓYyÕæThMáë6¬Y:‡j1~Ë#5¨ÎçÓ‹Úo¢n´AŸ¶†T¦ÏÞ¡«yõùüàh¬F§|Mb«bšOÌÎabÖÓç³ïô™t`D€jºU<55>Ý™!<21>ÍAŸI….4Ó1n<^ò~ ±gÕ![Pñ33%Õ1´= íU°p¼Ø“ÍÉžÆÌyö)mÚf„Ξj¬Döé[q˜¢Ü0˜¤K'BÙµã‰õcÛ$‡êºI.#U­3kVími¾veMÍÊk[ö®ªÙšÕSS³tV(4kiMMϬYµbdUEŪ¹gÃÆö¢¢ö<C2A2> Ù'µ<15>üsÐV°@õýSÔ™ ®œ9ãê=<3D>O÷nFL5ø€A<>ù­{QÝ4eŸ Z3vhf6üˆÎ†TÛÑ/¡«ß.FP(ê‰+_ÔrŸ@,w}1Ö½«£³¿d}¼>Üïª ¸ç·m<C2B7>ÝSãOs<4F>Å~ü}s°¶´¸:hÊÈÉ\&'ˆù ˜3 ¾LD´œˆìÉ#æÿ£XP ®ìöz¡„Î<E2809E>%T6JvŽÅÃt^<ªƒYÏ7˜<CB9C>àed#Á&Sj;ìS¨Åú,ò¶Ù÷9rÕºðmÃÌŽ
•æ«Ø—±¥ZÙÖB%J³¦Î Šú. Äé\Ë,ÓdÄ…-.MÇZ—Eüe%¦xîšZR4{^¡«zMgµ¡aûâª?#< ¯[QgtEܪn<C2AA>èŠÎ*Ó%Vè¹´$­CIòB1ÜŸFir¯DnÃ)<29>#rÁnpgáÎ-¹©Çê¦jªÌ(÷^ܨÖq:<3A>¾´¯”(þAíX‰ß·ÏØ+ƒÅ¢Z­j“žé#êñ$c9—'…¶ve*» ƒÈtvŒ %"H !?+™½W§U'¬WÚ+«*mfŸe9Jcé]G;~ZH´|{ã¢eÅÑ…së]dü*[·´®%åüø<1F>y‰Ò¢ê€‰êæ0ÚtݤŠ“3ôEèÒÉLŒQrO>ÑÑ°°£V2b%ÖBS²„>¬—a{ ,z·»<C2B7>ÊGv{㥧d ¼ŸìGùÛ^H
ã¾Ý&•ê=7ÎÇ&jDš¨v1U”'%K{ù´{õd¯žÌÑwê9YO¤]Ò ú€> Ì­ ±—ûØâho9)/n»Öv<C396><76>[†6<E280A0>sŸ•¶¢aÊ­Ö»­ÜµV² û© 0&(!‘À) ÅpbÌ­ðS×;E<>àñ·²`tRÓf̸§âV_I±yhÀ–½*øÌ.ãd[ÑE·„œyôñ½¾ŠYáhKÜ¿oKÃFwб¤.¯ªÀá,® •Ï¯ ܲ·¤µ¶Hö»V·n
•‡Ý&s¸¼¾lÕŸºÈì1¹ =yQ¿Ûd-ˆ·N[µVV4¡Ë¢œRQR©=$ÂÌd<C38C>aˆšÚ€n*?8¤;¢ã@GtÙ•‰o"Â^jQž{ §¼·V§ÞJ¥Îá<C38E>qDP¦"5\áOûÊ=½ô܃\ÿRZ{7ÎeèG€ V$+œŠ¸ƒO<>£ *Ö ýÛcž=DDÏÞ­5
<EFBFBD>ò>挙²rÎÃcæìXŠY)ÙQÏ\Iœ`íN&È4dáHoË@2ØżÂ9eîþ`ã:¥´c`&95Þ»iµ«j~596Þ9s £ûHÝÄ[±<>Vøn²tD#{T²ÑBêÌsÍÃfþZ9m$òÇ@¦“vÂýXùg…;«&$UÔS¬ŠÉ:z;€ÞÄ,3Å$ Š`»Œ÷è?²ùÈ=5mÎvý @Õt<1E>û<EFBFBD>@EÊœ$Û¬<C39B>™Å}Ærg[Ç”Ò?NÅÎÅb?N<>V'¶âHlØ­Æ$BaB&¤rÝJ¡c=á´ºj­­ÑÖ¦ÆüUù<55>Ím…WÕnª«ÛTÃ=}~ÍæKã?Û?D
¿„ÝÌCëø¤Eˆ¬NL÷B$Hu×ô Ùã&uVò/Vr­<72> sd˜<64>û<EFBFBD>ø)Œ8þvùÉSÌR~?ÙCIà÷Ø=ƒ^¿Ýë(Ÿä{í(ÀrÀàj5r hvmv„ìäM;±Ãõ:òœŽÕQ'™¥AQgEÝÝ<a«D}Ýé#÷©¤DíPW¨¼]%¼jV<07>§–·›É;fb~H$숃$†Mþ&o£Ý !,yÈ €Üc&}fÒb^jæÀ¬S5O£Ô(6êšø¬u÷ÖKµï˜m«%r<Hy~œÚáþqÆ£&p,EÀVÓðÍ­¾šÚKDóØ£þØ}65œMßcþNÆtÆ;ˆ…ˆÔ@fæ2A«™0«™Ñ„ü°tY¬¿¦;²Á´â•EK®(VCÁ€e]AwuÙRòÖ­ÿtõQ²ôµ…|îÖÿxë­Ü<ýÖÏ}qákã_?zõ?!']l¢#ïO=ä¡œÁ™Å¤¶´ž.ôÜŠ\°]ªf•]ªÅ*ƒb°õ6#(Yï"·BÄÝ΢¬²uÐfÄb6…-“´Ó6嫬¨.Ò`GC2éêrõ¹ö»ré]ž;=DñTz8%+ênW“­ÑÚ¨6*<2A>r“q°Îûl
g±Ôp¼±XfKá­áÜ»Š¢dœHtCÂ(íTè”|ÂG<Ò“|¤”Æk=žÚi1åªòkßÞþØñm?mÙSèX´(Y´¨#ÐûL™;>N¸ñúO¯@ª Hµ.¤š
·Ÿ¿o1ý(Iôò Eµn3=hzÂÄPìôì%=Ê,Ñêˆ]GÈ6xž@iTtA'é4BŤ²U[}£®qâKé¤]™ýØøð¤aíVQ«žÕÃÙÁM—R*Hí<>­×ÕŽO[]tuíu-ÄyÕ<>/\x|ñÀ®<>ÍÀø%nüt&KMÈe+ÑŽÚ^'I.ì´m¯½Q¥½ìܹø« ç^Mõí³t}(Cóì¶] F—.ì×Ôëé¶gqÍiio­÷<C2AD>[Ç Ž<19>m­<6D>¾ñÈßs¼+Ö­(_ÒXÜ7°aõâà´ŠbéÉKœíëøIRS<> Œ
#õWéjE—D—!1/¡rU2dg^œ<>­
Sd:Ýž²Ÿ¨ ÖxʵÅh Ó<> ˤöº5k˜zéAŠ.¶pI­Ñ`mIÁˆNLZI's‡<73>h°ŠI*æìÕŠYDQáaÄáíŽWŽ$”.ºø§wv£—-¶¿•Ùò}%ϸ,çb/Mœv)Œ×ÖÕä&q§<71>¢ºt~ÇŸ £š±<ä¨,ò&+§wVÚM±Ú†`Ù¼Ú@dvW™%à³ëŒÞòŠVM¶.mæu÷ëEÁöÅÈ_ûk:ÊÆŸãDAo-JÇê£V%Ñë*<2A>8Ìb'š6Çyy ç¶0Œ<í elÌw1 <78>í9@÷³;% ¤Ç"˜{H=o]hsŽ¨æœ"0g<30>™»ÃXų4*Z<><EFBFBD>ÊlDuewÆÙ20ÛLE4ÎÈ4ñëlìùiuZfñ'K•ÇµÖòéËg [úf7„RDtþJµ`Fq4©dwqûÀì†õmQ«<51>û¥z®C'®[UÜð{-(õ‰ôïÈ (aaxö ¸U`ô)fŸ<›³˜6£ÙO¯šœíþHCdQ„$g;6æ±Ð3¡¢{ÜÉuJØ9ýcù<16>Ú/=! <>˜3ëæ]yÌÿ5güßg0É3âŸX#ïFÊij+‰ôA²DA¿÷­ØÙìÎÜù…ñ¬-(L^<16>7¬i E©<E28098>ÃQ\¸ÄV¬(œ­™¥@4f*n_7{ö@G‰É¼ÈhZ»º´-î³H õQÏö2GΡ,X<>:<3A>OPõüO²ÏOžqé)C<>cA!`ß®²OVOD$Jº¬*ð°O΃c¿™ÊËëy,r2ü•—¤!#0]™Ñ…NÑìÝêBÔ‡lÁœ Í„<C38D>GŸç^Ê…L 'J”—É[NyHKFg¨+çGTh qv_Kapöòéå­¹Ïâõ'ÚŠW­uÜ£ê9Ñ`<60>­o˜=Ð^ì³Tù=JŒ"ðogÐqy?ǾSÙÁBŸ,•ÄÜ)*·šñª_b{øBnuźƶÍÆÙ|¤Ç
n+ä"˜BMäÀù5éÀˆÙ%6<>ZL+°*¬lOqF†e*¡ȲÞÆvÇè9<gwv-óFô]lIE*ª1u,'_HË1º²2öJ*>qeÂMv:òÚI$#`Œ¬…µQv˜+QÜ´¬|óv2þ€°xù´fͬõÔ¶¬KÉzÒ8#4-ßƾucKþM·
6©{©&-4ØKÚ×mmèöWûèÔ…p;Jœ Za<E28099><61>H¢•˜x‡ÑÚÅ®Ì3Ë8z%J@q„gõ5,Ê “xv!7®¾uÎó«SdbHøIyÕµÄW2ˤ™ÊB<C38A>Õ¯½ZËK&}— Ï<>]¾p¼<70>«ØÂ8ÜB~ËÙ åð«3PœáhQÃ,g™PÙó=:ɧ'ÆÇûI Pþ'ã¡Òí*Ìò<C38C>:¦Ô[)dLFw¥ð€ÄòJ¹"ÑÍ;týDjÇ&¤Ç*ܾ[\ ³m©ÅÁ|T¸]å!Z¢¼tXžH<T®NeôjæÜÙXŽ¿lké¦aϽr~ƒ¿ðÂA¢±s—¹uvþÍBî6µVT.©/Èo\=«±?¼ïÆiËCZ^wÙb©,žßí*Jø
ë­Õ’'аºqÆšÖ"4^µçjUvr¯N\Û]ž,µãfùþ;件ž=j<02>óUbÈyØfU¾C2£Ì(*Ÿð ù~ããù^ôqœ{Nx=óLóܶ:¾è™G¡£êž»ÊÈFjýìŒ'ˆ`uCvr¡Ò=•¨u¥¼³üõ§ÙSæ@¼P ù]zîuü#£­ÿQ«ZJm:½À<C2BD>wÑ•µ&ø&÷TAS5NÒN˜ù!œPut8Ê&k»î6ã®æQƒŽ­NÅÏÅß]<5D>žX"¢%Šrç†Ñ…<•ªôD"¼9iu8//Lol)ý|º•µ¤€<16>Kú½§¨­BÕMÒNWÏüªŸ“ü'<¦!o<‘ÇöÐÝlWos.¡£ÇÍâÌzc¦ ¯$²}ˆÅÄóì¦>±`›Ô#½)j6½rUIjUY¶kÏ ú¼nÖ çúùðù~f8úÈQ/¤“‡ä ûtÈ?ArãH¡ª<C2A1>)u·‰¾ÉÔ|C0¨njXäÉx0;Ý–°»É@ÓKpPýê#<23>¶åjw<6A>ªÓ „qrº©CAc™•áêà„!ÕaW :U¬Â©§H'-jóQ;™oVÛõyªiÈrÂçìPU:«©ªàèPšQž„yúyçmðÛ{‰™tg3VxÎÉ`ëg“×¢idn õʺl8+Í<>3í[u³ëóR)÷ÌéqëWíÌY$àjYÔ‰t4O·ý<C2B7>J\Ô=sv<73>Ã3{Îö ƒ<>à÷HSæ$m$D'UBw<E2809A>z ÌLë«©]Þ¯âO˜ô åjB0­xÎû6µ€vÉUAj°/tÁèßµ§$kÀiäÚæqÛÕsG\«<>Ïð<C38F>Çy ÊI8©E¨èeg¡ÌäÑQì6>ß<•=«3ýØâ²™*ËL³×MÌ7T)¯‘øj´K*]±²Ë›”/¬}¶j]ö½N¡TÐ@²Ucå +êÙ<zê<7A>¨BhÈ·(@”±¡òó´y±hÔGü|îx^ ýÄî2<>3Vh¢2¡¢ÆŒWf¼ø<C2BC>Æ~¶:µ#~nÆÏR±±w/Øe˜t1óÔéÊÉévRd²R‰t…6·Æ[\b ¬68{ALI<±üÊ9²$¥ŒžXØò»u)ò{Éêóê­š9ì­¦ª¦¢©Ìá1zëós/¯#ãz¹ä¢zS V~”…š™fÊ'!;EM"î{É =×7”õæNx^ôÇ<>ë„Û9Ï0Ï¡Ž@æ˜aÎ,ÏéÍ ÖÏP†l—Pšø}W¶^¨4Ù×LV™Ù®Ó9öß9ZQ6ÂgÎ@03§ú¨óQsª˜®üQ°Ó-ûx,<&ÞœQí=`dó€ÍÆÇB.êù¹¨*p<>(]þì„?{ðÂ?¢ïÎX;cÙí£Œ…“c(™tØ<74><C398>icG,2æ#ç+h¤ÛD<C39B>¹gÿ¢Eô&ºúº€?P?g=}®ŸÓ»qc/ÞÀ<©¹œyC­çë½fju™(W87=SE-•š/nª¿<C2AA>!6*Á˜¤Ð¯P˜R®!ω|<7C>ñú»ÜóE6¿Æ ¸ìøY™9¾!]ÍŸ´%Æ>mâ´]ì¬ËºPŽHî<É™•óK+-Y{¸?k§Âë˜ILøUkÝøij·Ïb&ðÜIɆ10.Î%ç²ßxæ h Èœý™9k 3ÿÉE¹ê†\Œo.Æ7×äŒ\8 °%ëŒ3ÖN)Á²*<2A>åKì“%æXE±6ýˆ—ÅxýÝîù¥¥‰ÎļRÚI]™ƒh: cñÊ ‰lY«Fc6Ž˜³"5ƒèóYWÒRY:e?s2×…SYŸ“ðÅ­Ô•$í:aí*êeÚ¤sÞdNgn„îA
iôô° ·Ñ9ÆŠ“Š`˜ÚÇ©8ž=€€¶™8þ<38><£L"ª)ðªœ(ö&¤Tx-gãõz®['ËÜø|ò[“[)FŸäMåd&=£ð“SfYföÈLU†ì¹•<zd4© °EÝt¤<>,?;^ò³?,¡ïì‡DaÉÎN90~†³‡È¨rgžŸ™ýÂÈHµ9Uäô¤)slšlt¦·R Ö[æ<>hIH<>ð<EFBFBD>^²ë¥°> ÷òCÚˆ­à±Ê†JâK+ÔXÐ<>ÀÂŽ¸:²G\íØ<C3AD>Œ”uÛ]#6 3œ¢Â;ûÛ¢¾ýUY¯¤.ÚR¹¤ÏÌÝìGÑÜÆÊ&o¬0ûè{3êjëuÅî ½Î²¨_Ò”dyÑL³¯8¯pf‰óªu­ -šÚÖç{LžüªHk·^”ø.I †5¯Ãj´ø
…íó\B—ÀÎ%ÌKHösÇé¿TžJOƒ‡·…(ç83ÓÍîv³g‡ð®!Ç ·‰Æ÷PÑ7Œ˜U‰îþ©t#KívqÃÐ<C383>Šîu¶”Ëmï½;@Qg?l;¿8<C2BF>±öµºG_}Õä.p—&ŒVK[yMk©â¤…ï%ü&®StøjU“7Õ\OÍIà€®dXpc—šˆmHqœä8ázÑEŒCÒ §½ÃÐa³0A£G˜-8­°ß&ñݹÃnÎ*ô`O®?¹}™:-A~<7E>3æìÅqgjö\%”‡ó‰ÓIry )ÍbŽç9òlvOŠ¼ËÑU«çžQ˜Ìəà ÔÕ¦‹†¥=ZͶ•ï4JØS³ÚÙ3ZÞÎDyžÍÙn¶š%ëÝÞ,‰:³NÊl*Øé2-Ø(µº'èn—ªãtÙ͵Cê;tóøy” “7cRç𞼓ۉ¡Â¸“¢ebHósKü|y·hó´¥Ó6 ˜Â…QM†Mœt×ø﮼˜îš¶mˆââ [¶MÃï·¢2þ¿¿€ÿ~Ò<>Œ?]¨r²ÙŸ™ÊlpSœreŽ{fMß÷“6¸úbz<0E>ÚbׄI=àÎýÄ@Øó)ÐÑO¹JI#Ò5Y@ª H£di{S
¡Âö<EFBFBD>$YÐUÐWÀ³(Åæj/ùBCá{¸ ¦Ù-„*•—èzGØì<É,oÌ3S{Þˆ ÒF<C392>¡zÐ`~n¨8Ö~È¿ù; ϹÈí@n²7<>Æýü=ðNÕJÅX¹ÓmÎF)X¹3ätÁ4î“Sö Õ’Ô+Nª,³…1¢ (ns6êVìI­“èœä#'ù''¹Çù¬“Ûí$N²ØIÚœä÷NòŒ“€ÓçâÁÎCƒo<6F>cΪ<C38E>ˆHÏȉìãDj∴nŒ„ÎE"™%1‰´CHÇD²H¤¿IäÅÒPD‡iÈ(Ú<>FQÈRŒ)]Ö'¸sN“ÃÉlê÷Ÿ²ÚYàºè@ó?ƒÍ,ÛN´ÅÚßÈÍÙ-<2D>a@àX´ [qPÒ9T¬Ü!™3îÖ)#{¾“|q¸<71>!$œC¥ MJG»_ë ²ƒüÞAžr¼âàîv<C3AE><76>²ÌA汸¿rü½ã_üªcˆì¼ÐÀ/â×ð/ò?àÑm9Âÿ†çù¤ú¦Êõ©ï«œš4ìñÔÂyáŽP‡³Ã§¨d@Ý¥r1ž<À“;xr=Ï©<ºlr‡±CD— λl32hlg.3"wd¶æÎï¿¥v°kçÎI³<02>ˆå"&vî0.ËváÞ%ªÀ+¾.<2E>úc,zvøOë¼ÖFgNÒOÒ¹ê òû¼¯·>¯»¢·hÀ˜ÌW´pÀgì4xaM ‡òŒ}E½ígδo$ÒÑÊ­[7D+7_µ±¼|ãU¶n­<:þÉÆœöCíáãÉ6;ÝæS]šUV]b±Ê
dvúÈìô]¸Á7”ÛàS&¶¸Ïïí eöö\žóyólÖµCé<43>çÏó)·§ž<C2A7>ØÅû“M<¶‡Gv(ÊŽiU“öº„H÷ï†åP´Øf+. É}þª¯oÞwúcUë#ÎÚÓ=ž3j-w$?~æ™?ÛŠßÍ¥[È/ð»Cðáðd\$vtEYç&To&Gè¨TˆHªH×- "ÑS B§ÃnsÙT«ËfÕ»ôH¾çÛØî<C398>-‰ylúè6º|g3™£"‰AEqœ†ŠJÛ£b2 WCÐÀI†ðÊ;Êû
¯
üHÈ·˜ÒʈÓi†Jt[É5c£”çÕø°û<¥2ûmÄóc&™gÏoªÙ­8JKjbÒÈô(fÌ•YÅ<59>´©,Ð_ê²ó#69¢ÕÕ{ ÈÁh™;:ÝÓWаǪK<>…6]¿Þ0­n1´ukbó[>7þÁîòÆR;¯8*U'‘º4& õƒeˆžxÐg~l-ØÀF$Å`µ€2¬vô°ˆpîÛt+ñÛt+quJ};•û <=ŸÀöÙOëÈqGë"tòãƒî¶Îßxš\K^v-Ý°=±°¾ìÊÍ©ÐBlˆk!³x x˜ž´Žglá±IžN=™³l/QuÈïçT¾îýy,æ¥ÿÔƒçÕ˜ûçžW±Y±¨ŽÌº£r?÷úm¥÷¥ÓÐB?Œ˜Bû%Ò‘ô«ðû%é" Ïü ó²½Kžþj‰àH+Ðœ\lzmÀÖÅ)u4'æ› ŸÐ|ôÿ½Bó½¹Ñ} œ><>y̬¾Å™|ë3õyòQëvq0k™yð8G¿;˜Ô²ÿêÁ ~ˆœÐe—Ùñîܪãã©ýwÐè9¢Ê!ó¯¹ÑK§Ã°ž×  ¢(J $ƒh½„(
™‚‚ ,Æóo åtz½ G)×Où_ »èÿ·»øKÄ ¥ —ÈõŸ¿x0ÉÓC/N\4EÄÿ$$B²é! ¢$ʘ!Û/šQzÈ,,"¥ÇÔ»wY
þçè!N¹Á Û0Ëâ(( àEeƒQ2Jøf8O$Ž$é%‰çE<C3A7>ŒA‰ÒcüLáš=Ä‹Ò¥)7xaŠY:ßoʽ4qé2MŒFÙ€Nê"É, &”£ÁŒTÊ”(Áƒ<>ç%<25>Ù€—€Ó„ˆ¾ÇÔÙuY
ÒEé†)7xa*¥GnÌæèa˜¸t™&d£ŒÃDÎÑÃh2â<C3A2>~y¶_ÐÃxžSg×Æ)7xašb8OA`ô<10>—.Ó„,<>2è `PLf£©c£œmI€¶¾ÑÈó<06>BËá2Rzý7ÒãRi²4ü÷ÐÃf3^H=êEyâ¢<C3A2><C2A2>Ì&“E6šA0¢½iQLŠÉˆ4±™Lr¦ 
ÓéŒz•C"£-e˜ºø^v„]ŠP“¿>óò”œ|éÀNé#}ÒÅô0#=ä =¬ŠjRͲÑb¶™'è<>CHL&A0
V^8€Lÿwô¸¬DýŸèI7M¹Á ÛpØäóô ê<C2A0>ÒÃ4qé3M˜-fÅ$[p²éaFz˜=²ÍË&²8‰²qêâ;%zÈ¥ÿWéár™.¤‡ óÄE1(ŠE5L`²jVÕb2©—b1g
¢ôXÌXLL¢Ýl±XèìcÔLÆ©ïe%êRô0]”n™rƒ¶á¦ôÈ5%IzX&.!Ó„¢(šÅ¬2zØ5«bSÌ&MEzd73z`vÁ,:i9Ž'“Í$ÿÓÃ|Qú—ù"z/¢‡¦ªVYÁ f§Õ¦ØTFu¨b-Æ=<3D>zFF<46>‰ñ4…ë¿HeÊ ^؆Ïg9ßUhU•‰KÌ4aÕ4¢XA°€Åmw¨Íb±©>MÍ6<C38D>£IUŒª"Ñ­â…êU59,&óåZ¾ìuY<75>s)zX.JW§Üà…mä]²:q‰™&lVÍ®*6Ñ÷Ø<C3B7>šÓª(6Ϫe§*VÅb¢¨HU£Ç#dÕì°X¦N<C2A6>ËŽ°KMÄÊEéÚ”¼° ¿O9ßÔåéa³:4Õ†ÆÒÃᲺ<C2B2>vJ<76>lóŠfÖTYÓ=4¼dÕð”»tYz\j ý÷Ó#0™tzDz˜´‰KÌ4a·Ù<C2B7>vJÕçDzØTÍaóÙrô@íbÕL”*ÒÃjµšþßÐcòèÈ|„uÊ N¾DÕ é<>¾«É:qI™&»Ëª9Á æwyl»fs:v[¶yÔ.6«Éf34£ßj³ÙÐ:±jU<>ºz»¬¾=´ÒmSnðÂ6ÂAí¼ D§G¤‡Ù6qI™&œ»ÛfEzhH·×îuXm.GÐaË6ÏèaÎÒƒ3+fæÓ¬SWoazDÖ éAýVûÄE±ZmN<6D>Ý惬A<C2AC>ÏásÚnWÉ”)hÅ)ÇnÁì«1hw8Õb·ù­ÿô¸¬¾¥;¦Üà…mFlç¢æÒÃ☸ ™&<n—×a÷€Á¶ Ïïò»ì<0E>+ârd·á”ãÀbƒÍv8<76>N¦8l()SWo—Õ8—¢‡í¢t甼°<C2BC>è%è¡\nŸÓî£ ìùyWÀmwzÝ·3Û¼Ýiu:§Óh´Ë!$‡Sѧ=h³O]½]—2Lì¥ÿ×èa„âBûyz˜ÍÌUU\àózü.‡<0F>upäûƒî ÇáÎó¢Ød
:Ü6·<19>9ßåv»«êríö©çËjàK)–É£#C÷”œ|¡´ÈqžôÔüFz¨î‰Ë˜i"Ïç ¸]y`r€3 {Ã^§Ûï-ò¹³Í£vñ¸°˜Ñè” Ü<1E>Gµin'ŽûåZ¾ìuY<75>s)zL†ÌGx¦ÜàäË1×ù9_AæÈfÙê<C399>¸ ð‡½ž ˜\à.äà$
Äü^o¦ ×êóšLns±×çóYV¯»À횺ø^Vã\Šî‹Ò}SnðÂ6â•žóM©*uÝM¶¼‰¦ä„CÁ¿/Ìð–ŠP©æG*C~¦ UlžÍï7½˜?à÷Ûœv¿¯È뙺ø^v„]jâñ^”˜¶Qð<E280BA>§‡ÕJ]U³#0q™3MDÂEA(>È«,* —¢),L䃙y!O(àÍæ<Ke0
9ÜΠ¯$Ï7uñ½ì»”bÉ»à[èšrƒ“/3̬õŸ'=5¯,V3<qQmˆ”„ƒE ú!/-<2D>ók óÙ<E284A2>|_~È™V”€šççç;½®°¿<àŸºø^v„]J±L ½ò§ÜàäK<C3A4>æúüó¤§Ó§êP½Ñ‰v"
P+­Š”ƒ-"³¦U—T—U”×E3#EÁ¢BoQÔj<C394>ØfGŠ¼_4¿:?<uv]V¢.5<EFBFBD>"“™©½xÊ N¾¬tsø‡ÓÍ<C393>g~6½"<22>ý?oM\ÄL~Gÿ_Ùë_þ|<7C>¤â}Þ9ÿ¢$†ý#˜Nö§ßãª!Žw
ïéx×á]Œw#Þ xÏÎÆ%hþÉõb\ÍDø<1E>¸`w5Ì侇ÏYx{ð~ffz Ë°ÏÌêæDXÆo„fî'ø4bþ¾ìóÌo‡0W*7
ÝÜ<EFBFBD>`ä¿ yܵàâ<C3A2>ÀÍ<C380>ðå¾3BŒë„.òCHà3ÁUB€.® ó  ÎAœK?<3F>ùºˆ ù¦Õý]ÍßEËÐüä[PLîy˜6<CB9C>|*o+IƒJ>Žü-= ñÿÿEöÀÐÿxfz^â¿ï¢ü<C2A2>R<EFBFBD>sìDÆÅõ ¿ÿ[:ôÿÛuÇašƒCâa4Û8Tï•°@~z¦c,ð<> ]ÓAÙ0<01>”gÈ$š ó<>OtÙ°nR=ÎöŸdÃç<E280B9>è¨qlȆ æY™ Ó-Ȇy”)ÖMÊ£gº#X|T >J`þ~¸vÁ6Ø
<EFBFBD>î‡<C3AE>XÛ.X ×`Ê.Ä,†õ˜z æï‡<C3AF>øž«ãÂøÉeš±Þí°c7cŽMBÍ[Óð/„©ý˜<C3BD>¶¼Ö±~„²mWÐÿ*†iüzLDÀ†ië»°¾õõ±<C3B5>Õ·ëÒëX¾iXkÕ²õ;7oÛªª˜žhé¿z×­<C2B6>ýýì˜êY{ÍÖ]ׄ¯ßxÍÕý;YŽl8“Ò¼mûÞ<C3BB>7nÚŠWMjîߺmëæuýW‡°tE(´`óºõ[ׄ®Ù:°~ghצõ¹Û¶mÝ•I^·>4­¢
&¶ÞÓ·À¢K‰ÛÂîÉ<C3AE> ÚH.„w¡ÿŸ”.Ä>¼¹ôK˜^;£í4>8[ð !ž|$ú&R [°ÑE$¸ˆÐC|ð©Ç§éUIèÿƒãE ÿï4Þ|ú¥Sioq=iïM«î¶_œúÍ©ô)þ‰'_|KŽÞ9úÐ(ÿÄ7M~òqÉÔ¦~ý¡¯sÉǺë{Œï;A:A}X
>‚÷×væÄàW9>ø•/ Á/I>„Ï üÑ¿HtÁŽ¾¼ÿ¨#xß½7<04>bÞ{¹¹Á{¸xðîÏzƒ_øì ÁÏî‘àç ÞE¼ÁÏOðÎÃíÁ#‡“m‡‡sO&ÉÃÓgµæ¸à·;ƒ‡n¿!x;~òÁ[ꃷ çG†tááªa¾k¸o˜£Ýþþ0kiu+vì‰[^¼å·ð·p$xó~Oð¦Ï|/x`èàgÈkÁý„††ÈVwãÞDð†ëëûö¯çʃ×askönÛËíå¬Á=»<Ák¯¹1¸{p x ¹!¸ ¿­opû §_ä±<C2B1>7nëÙqãöžM«Võl\µ¦gêTÏÀª•=ëV]ѳvÕŠžÞæe=Ë›{zÜÙÙ³øÎù=ÝwÎë麳£gÑ<67> {*;~Ñîàç®jîi[ÕÔÓºª±g[#Yºä4<C3A4>SN¢'§É<C2A7>óOóÿ²xþ¨Ôµj”ŒŒ.¡˜ì^9*ŒŒBÏÊU½' 9¼â;î€&ÿüQÿÞчü+æ<>¶c Iû1þ“NhZ‹Á`,¼èg!»®aˆíÊEdßiVHØkl<6B>¾d<C2BE>îÂä•dßÄh¬Z°*¨Sö¿|ÿ)
endstream
endobj
67 0 obj
<</Type /FontDescriptor
/FontName /Ubuntu
/Flags 4
/Ascent 932
/Descent -189
/StemV 109
/CapHeight 693
/ItalicAngle 0
/FontBBox [-167 -189 3480 962]
/FontFile2 66 0 R>>
endobj
68 0 obj
<</Type /Font
/FontDescriptor 67 0 R
/BaseFont /Ubuntu
/Subtype /CIDFontType2
/CIDToGIDMap /Identity
/CIDSystemInfo <</Registry (Adobe)
/Ordering (Identity)
/Supplement 0>>
/W [0 [500 0 0 231] 11 12 324 15 [246 299 246 384] 19 28 564 29 [246 0 0 0 564 0 0 663 643 620 713 571 537 672 0 269 500 0 519 871 728 778 608 778 629 532 565 688 656 929 631 598 573] 68 [522 589 465 589 559 386 578 571 253 253 522 273 861 574 590 589 589 386 446 402 574 502 777 511 497 471] 168 [269] 188 [522] 200 [253] 206 [590]]
/DW 0>>
endobj
69 0 obj
<</Filter /FlateDecode
/Length 310>> stream
xœ]ÛjÃ0 †ïý¾ì.JœÃJ!к)äb–íR[é c÷"o?G
<>„OúIÈIdsj¬ <ùð£j!ðÞXíao^¿ÀÕXf\V·hnç)ÀÐØ~deÉyò³Sð3ßôx<C3B4>'–¼{ ÞØ+ß|Ë6r{sî°<> VU\C+½vî­€'hÛ6:æM˜·ÑóP|Íx†œÒ4jÔ0¹N<C2B9>ïìX)â©xyŽ§b`õ¿üŽ\—^ýtÕyT ‰j¡,EÊk¤Ã<49>Ž©N$åjÊÉéœcϵú½×c´UÊöèg¤ôDAIƒDüÔ3[}¤,^(Hö| ’½ û3wé: ²le¹½ûÊÕÍû¸m¼b\ó²`cáþ¸Ñ-®åùs:ŸÂ
endstream
endobj
5 0 obj
<</Type /Font
/Subtype /Type0
/BaseFont /Ubuntu
/Encoding /Identity-H
/DescendantFonts [68 0 R]
/ToUnicode 69 0 R>>
endobj
xref
0 70
0000000000 65535 f
0000000015 00000 n
0000021546 00000 n
0000000154 00000 n
0000028713 00000 n
0000048401 00000 n
0000000191 00000 n
0000000267 00000 n
0000000522 00000 n
0000000792 00000 n
0000001057 00000 n
0000001339 00000 n
0000001631 00000 n
0000001914 00000 n
0000002170 00000 n
0000002454 00000 n
0000002737 00000 n
0000003027 00000 n
0000003318 00000 n
0000003574 00000 n
0000003868 00000 n
0000004163 00000 n
0000004487 00000 n
0000004767 00000 n
0000005023 00000 n
0000005300 00000 n
0000005572 00000 n
0000005839 00000 n
0000006130 00000 n
0000006401 00000 n
0000006657 00000 n
0000006927 00000 n
0000007194 00000 n
0000007482 00000 n
0000007761 00000 n
0000008079 00000 n
0000008335 00000 n
0000008666 00000 n
0000008937 00000 n
0000009244 00000 n
0000009558 00000 n
0000009815 00000 n
0000010086 00000 n
0000010360 00000 n
0000010658 00000 n
0000010827 00000 n
0000022061 00000 n
0000016077 00000 n
0000016383 00000 n
0000016639 00000 n
0000016943 00000 n
0000017267 00000 n
0000017585 00000 n
0000017883 00000 n
0000018139 00000 n
0000018419 00000 n
0000018732 00000 n
0000019049 00000 n
0000019348 00000 n
0000022391 00000 n
0000022454 00000 n
0000022555 00000 n
0000022618 00000 n
0000027732 00000 n
0000027969 00000 n
0000028353 00000 n
0000028848 00000 n
0000047304 00000 n
0000047489 00000 n
0000048020 00000 n
trailer
<</Size 70
/Root 61 0 R
/Info 1 0 R>>
startxref
48532
%%EOF

View File

@ -3,7 +3,7 @@
Índice de subtermas: Índice de subtermas:
- [README1.md](#readme1md) - [README1.md](#readme1md)
- [6.1 SQL Injection (SQLi)](#61-sql-injection-sqli) - [6.1 SQL Injection (SQLi)](#61-sql-injection-sqli)
- [Ejercicios](#ejercicios) - [6.1.1 Ejercicio](#611-ejercicio)
- [6.2 CrossSite Scripting (XSS)](#62-crosssite-scripting-xss) - [6.2 CrossSite Scripting (XSS)](#62-crosssite-scripting-xss)
- [6.3 XML External Entity Injection (XXE)](#63-xml-external-entity-injection-xxe) - [6.3 XML External Entity Injection (XXE)](#63-xml-external-entity-injection-xxe)
- [6.4 Local File Inclusion (LFI)](#64-local-file-inclusion-lfi) - [6.4 Local File Inclusion (LFI)](#64-local-file-inclusion-lfi)
@ -38,7 +38,7 @@ A continuación, se proporciona el enlace a la utilidad online de ExtendsClas
- ExtendsClass MySQL Online: https://extendsclass.com/mysql-online.html - ExtendsClass MySQL Online: https://extendsclass.com/mysql-online.html
### Ejercicios ### 6.1.1 Ejercicio
- Levantar apache y mysql - Levantar apache y mysql
- Crear una base de datos con una tabla - Crear una base de datos con una tabla

Binary file not shown.

View File

@ -4,7 +4,7 @@
- [README4.md](#README4.md) - [README4.md](#README4.md)
- [6.13 Inyecciones NoSQL](#613-inyecciones-nosql) - [6.13 Inyecciones NoSQL](#613-inyecciones-nosql)
- [6.14 Inyecciones LDAP](#614-inyecciones-ldap) - [6.14 Inyecciones LDAP](#614-inyecciones-ldap)
- [Ejercicio](#ejercicio) - [6.14.1 Ejercicio](#6141-ejercicio)
- [6.15 Ataques de Deserialización](#615-ataques-de-deserialización) - [6.15 Ataques de Deserialización](#615-ataques-de-deserialización)
- [6.16 Inyecciones LaTex](#616-inyecciones-latex) - [6.16 Inyecciones LaTex](#616-inyecciones-latex)
@ -46,7 +46,7 @@ A continuación, se proporciona el enlace directo al proyecto de Github que nos
- LDAP: Qué es y para qué se utiliza este protocolo https://www.profesionalreview.com/2019/01/05/ldap/ - LDAP: Qué es y para qué se utiliza este protocolo https://www.profesionalreview.com/2019/01/05/ldap/
### Ejercicio ### 6.14.1 Ejercicio
Instalamos openldap con docker: Instalamos openldap con docker:
``` ```

Binary file not shown.

View File

@ -3,6 +3,7 @@
Índice de subtermas: Índice de subtermas:
- [README5.md](#README5.md) - [README5.md](#README5.md)
- [6.17 Abuso de APIs](#617-abuso-de-apis) - [6.17 Abuso de APIs](#617-abuso-de-apis)
- [6.17.1 Ejercicio](#6171-ejercicio)
- [6.18 Abuso de subidas de archivos](#618-abuso-de-subidas-de-archivos) - [6.18 Abuso de subidas de archivos](#618-abuso-de-subidas-de-archivos)
- [6.19 Prototype Pollution](#619-prototype-pollution) - [6.19 Prototype Pollution](#619-prototype-pollution)
- [6.20 Ataques de transferencia de zona (AXFR - Full Zone Transfer)](#620-ataques-de-transferencia-de-zona-axfr---full-zone-transfer) - [6.20 Ataques de transferencia de zona (AXFR - Full Zone Transfer)](#620-ataques-de-transferencia-de-zona-axfr---full-zone-transfer)
@ -10,16 +11,6 @@
## 6.17 Abuso de APIs ## 6.17 Abuso de APIs
Si a la hora de desplegar el laboratorio con Docker, os encontráis con problemas y alguno de los contenedores que se despliegan véis que causan error, probad a desplegar como alternativa el laboratorio de desarrollo.
Primeramente instalad la última versión de docker-compose y una vez hecho, ejecutad los siguientes comandos:
```
curl -o docker-compose.yml https://raw.githubusercontent.com/OWASP/crAPI/develop/deploy/docker/docker-compose.yml
VERSION=develop docker-compose pull
VERSION=develop docker-compose -f docker-compose.yml compatibility up -d
```
En caso de que veáis que tras desplegar el laboratorio, siguen habiendo errores en el despliegue de ciertos contenedores, probad a hacer un docker rm $(docker ps -a -q) force y aplicad el último comando de los 3 mencionados anteriormente para volver a desplegar los contenedores. Llegará un momento en el que todos serán desplegados sin ningún problema. En caso de que veáis que tras desplegar el laboratorio, siguen habiendo errores en el despliegue de ciertos contenedores, probad a hacer un docker rm $(docker ps -a -q) force y aplicad el último comando de los 3 mencionados anteriormente para volver a desplegar los contenedores. Llegará un momento en el que todos serán desplegados sin ningún problema.
Por otro lado, si de pronto véis que el comando docker rm $(docker ps -a -q) force os da algún problema, esperad unos segundos y volved a probar el comando hasta que veáis que todos los contenedores han sido eliminados. Por otro lado, si de pronto véis que el comando docker rm $(docker ps -a -q) force os da algún problema, esperad unos segundos y volved a probar el comando hasta que veáis que todos los contenedores han sido eliminados.
@ -48,6 +39,59 @@ A continuación, se proporciona el enlace al proyecto de Github que utilizamos p
- crAPI: https://github.com/OWASP/crAPI - crAPI: https://github.com/OWASP/crAPI
## 6.17.1 Ejercicio
__DISCLAIMER:__
Si a la hora de desplegar el laboratorio con Docker, os encontráis con problemas y alguno de los contenedores que se despliegan véis que causan error, probad a desplegar como alternativa el laboratorio de desarrollo. Primero instalad la última versión de docker-compose y una vez hecho, ejecutad los siguientes comandos:
```
curl -o docker-compose.yml https://raw.githubusercontent.com/OWASP/crAPI/develop/deploy/docker/docker-compose.yml
VERSION=develop docker-compose pull
VERSION=develop docker-compose -f docker-compose.yml compatibility up -d
```
Empecemos:
Descargamos el repo y nos vamos a la carpeta con el docker compose. Allí descargamos las imágenes Docker.
```
git clone https://github.com/OWASP/crAPI.git
cd crAPI/deploy/docker
docker-compose pull
```
Ahora desplegamos el laboratorio.
```
docker compose -f docker-compose.yml --compatibility up -d
```
A veces no funciona a la primera. El laboratoria es inestable, por lo que si no funciona a la primera, probad a ejecutar el comando varias veces empezando desde cero, borrando contenedores e imágenes. Merece la pena. La comunidad ha documentado algunos errores en su repositorio: https://github.com/OWASP/crAPI/blob/main/docs/troubleshooting.md
Entonces, vamos a `http://localhost:8080` y vemos que hay una página para iniciar sesión. Vamos a Sing Up y creamos un usuario.
Ahora abrimos el inspector de elementos y vamos a la pestaña de Network. Vamos a la pestaña de XHR y nos logueamos. Tenemos que ver una petición a `http://localhost:8888/identity/api/auth/login`, que si la inspeccionamos veremos:
- **Headers**
- **Payload**
- view source
```
{email: "man@invent.com", password: "Man1234$"}
```
- **Preview**
- **Response**
```
{
"token": "eyJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJtYW5AaW52ZW50LmNvbSIsInJvbGUiOiJ1c2VyIiwiaWF0IjoxNzA4MjAwMjk2LCJleHAiOjE3MDg4MDUwOTZ9.EKGBU4uxfpWxlZiRmtRG6m6JUrZsVsEf7xzSppIE9FlbpxTackor_KYdBLZOJYK5D3KRkbO9KCfa4GbnccjdmsSFipNJDZkATa-hC51wYvesaA15f0yTm26sb6W-W5icuv269kkWVaCw_3SCSOzoU3L50YoY0pZH7wPbf4-k6vU4nYI7gVAWIPZloJfKwpjqjWMFA2oZHBFg6NP5YjKLyhQAYdak0fK89vVFadLdLUy_mmEy3nVgfpV2_2wNPLQc2rDX9XA4WemF5o1rI484JjXaq7Qa6EMBFTc2l0xDZQJT0ok9rPs5jPvyj8Mamt01CX13tV_jd4gybsJhm2O4kA",
"type": "Bearer",
"message": null
}
```
- **Initiator**
- **Timing**
He detallado la request y el response porque es en lo que tendremos que fijarnos. Vemos que el token es un [JWT](https://es.wikipedia.org/wiki/JSON_Web_Token).
![jwt](https://miro.medium.com/v2/resize:fit:1400/1*aAH0mMomx1dLidhoNCVmNw.png)
## 6.18 Abuso de subidas de archivos ## 6.18 Abuso de subidas de archivos

Binary file not shown.