# Installation
[Release Binaries](https://github.com/x90skysn3k/brutespray/releases)
To Build:
```go build -o brutespray main.go```
# Usage
If using Nmap, scan with `-oA nmap_out`.
If using Nexpose, export the template `XML Export`.
If using Nessus, export your `.nessus` file.
Command: ```brutespray -h```
Command: ```brutespray -f nmap.gnmap -u userlist -p passlist```
Command: ```brutespray -f nmap.xml -u userlist -p passlist```
Command: ```brutespray -H ssh://127.0.0.1:22 -u userlist -p passlist```
Command: ```brutespray -H ssh://127.0.0.1 -C root:root```
# Examples
#### Using Custom Wordlists:
```brutespray -f nmap.gnmap -u /usr/share/wordlist/user.txt -p /usr/share/wordlist/pass.txt -t 5 ```
#### Brute-Forcing Specific Services:
```brutespray -f nmap.gnmap -u admin -p password -s ftp,ssh,telnet -t 5 ```
#### Specific Credentials:
```brutespray -f nmap.gnmap -u admin -p password -t 5 ```
#### Use Nmap XML Output
```brutespray -f nmap.xml -u admin -p password -t 5 ```
#### Use JSON Output
```brutespray -f out.json -u admin -p password -t 5 ```
#### Bruteforce a CIDR range
```brutespray -H ssh://10.1.1.0/24:22 -t 1000```
#### Print Found Services
```brutespray -f nessus.nessus -P -q```
# Supported Services
* ssh
* ftp
* telnet
* mssql
* postgresql
* imap
* pop3
* smbnt
* smtp
* snmp
* mysql
* vmauthd
* vnc
* mongodb
* nntp
* asterisk
* teamspeak
* oracle
* xmpp
# Services in Beta
* asterisk
* nntp
* oracle
* xmpp
Feel free to open an issue if these work, or if you have any issues
# Services in Progress
* rdp - the issue is no one has written a good library for NLA
# Data Specs
```json
{"host":"127.0.0.1","port":"3306","service":"mysql"}
{"host":"127.0.0.10","port":"3306","service":"mysql"}
```
If using Nexpose, export the template `XML Export`.
If using Nessus, export your `.nessus` file.
List example
```
ssh:127.0.0.1:22
ftp:127.0.0.1:21
...
```
Combo wordlist example
```
user:pass
user1:pass1
user2:pass2
user3:pass
user4:pass1
...
```
# Planned Features
* Ability to set proxy
* Ability to select interface
* More modules
* Better connection handling
# Star History
[](https://star-history.com/#x90skysn3k/brutespray&Date)
brutespray-2.2.2/banner/ 0000775 0000000 0000000 00000000000 14571166753 0015201 5 ustar 00root root 0000000 0000000 brutespray-2.2.2/banner/banner.go 0000664 0000000 0000000 00000007363 14571166753 0017006 0 ustar 00root root 0000000 0000000 package banner
import (
"math/rand"
"strings"
"time"
"github.com/pterm/pterm"
)
func color_banner(text string) string {
source := rand.NewSource(time.Now().UnixNano())
random := rand.New(source)
startColor := pterm.NewRGB(uint8(random.Intn(256)), uint8(random.Intn(256)), uint8(random.Intn(256)))
firstPoint := pterm.NewRGB(uint8(random.Intn(256)), uint8(random.Intn(256)), uint8(random.Intn(256)))
//startColor := pterm.NewRGB(0, 255, 255)
//firstPoint := pterm.NewRGB(255, 0, 255)
str := text
strs := strings.Split(str, "")
var fadeInfo string
for i := 0; i < len(str); i++ {
if i < len(strs) {
fadeInfo += startColor.Fade(0, float32(len(str)), float32(i%(len(str)/2)), firstPoint).Sprint(strs[i])
}
}
return fadeInfo
}
func Banner(version string, banner_flag bool) {
banner := `
#@ @/
@@@ @@@
%@@@ @@@.
@@@@@ @@@@%
@@@@@ @@@@@
@@@@@@@ @ @@@@@@@
@(@@@@@@@% @@@@@@@ &@@@@@@@@@
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@@*@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@
@@@( @@@@@#@@@@@@@@@*@@@,@@@@@@@@@@@@@@@ @@@
@@@@@@ .@@@/@@@@@@@@@@@@@/@@@@ @@@@@@
@@@ @@@@@@@@@@@ @@@
@@@@* ,@@@@@@@@@( ,@@@@
@@@@@@@@@@@@@@@@@@@@@@@@@
@@@.@@@@@@@@@@@@@@@ @@@
@@@@@@ @@@@@ @@@@@@
@@@@@@@@@@@@@
@@ @@@ @@
@@ @@@@@@@ @@
@@% @ @@
`
banner2 := `
██████╗ ██████╗ ██╗ ██╗ ████████╗ ███████╗ ███████╗ ██████╗ ██████╗ █████╗ ██╗ ██╗
██╔══██╗ ██╔══██╗ ██║ ██║ ╚══██╔══╝ ██╔════╝ ██╔════╝ ██╔══██╗ ██╔══██╗ ██╔══██╗ ╚██╗ ██╔╝
██████╔╝ ██████╔╝ ██║ ██║ ██║ █████╗ ███████╗ ██████╔╝ ██████╔╝ ███████║ ╚████╔╝
██╔══██╗ ██╔══██╗ ██║ ██║ ██║ ██╔══╝ ╚════██║ ██╔═══╝ ██╔══██╗ ██╔══██║ ╚██╔╝
██████╔╝ ██║ ██║ ╚██████╔╝ ██║ ███████╗ ███████║ ██║ ██║ ██║ ██║ ██║ ██║
╚═════╝ ╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚══════╝ ╚══════╝ ╚═╝ ╚═╝ ╚═╝ ╚═╝ ╚═╝ ╚═╝ ` + "\n"
quiet_banner :=
`Brutespray ` + version + `
Created by: Shane Young/@t1d3nio && Jacob Robles/@shellfail
Inspired by: Leon Johnson/@sho-luv`
//ascii art by: Cara Pearson
if !banner_flag {
horns := color_banner(banner)
pterm.Println(horns)
brutespray := color_banner(banner2)
pterm.Println(brutespray)
}
pterm.FgRed.Println(quiet_banner)
}
brutespray-2.2.2/brute/ 0000775 0000000 0000000 00000000000 14571166753 0015055 5 ustar 00root root 0000000 0000000 brutespray-2.2.2/brute/asterisk.go 0000664 0000000 0000000 00000001441 14571166753 0017231 0 ustar 00root root 0000000 0000000 package brute
import (
"fmt"
"net"
"strings"
"time"
"github.com/wenerme/astgo/ami"
)
// this is very alpha and I have no idea if it even works
func BruteAsterisk(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
target := fmt.Sprintf("%s:%d", host, port)
conn, err := net.DialTimeout("tcp", target, timeout)
if err != nil {
return false, false
}
defer conn.Close()
boot := make(chan *ami.Message, 1)
amiConn, err := ami.Connect(
target,
ami.WithAuth(user, password),
ami.WithSubscribe(ami.SubscribeFullyBootedChanOnce(boot)),
)
if err != nil {
return false, true
}
defer amiConn.Close()
<-boot
if strings.Contains(amiConn.Close().Error(), "Message: Authentication accepted") {
return true, true
} else {
return false, true
}
}
brutespray-2.2.2/brute/ftp.go 0000664 0000000 0000000 00000001016 14571166753 0016173 0 ustar 00root root 0000000 0000000 package brute
import (
"strconv"
"time"
"github.com/jlaffaye/ftp"
)
func BruteFTP(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
conn, err := ftp.Dial(host+":"+strconv.Itoa(port), ftp.DialWithTimeout(timeout))
if err != nil {
return false, false
}
defer func() {
if err := conn.Quit(); err != nil {
_ = err
//fmt.Printf("Failed to send QUIT command: %v\n", err)
}
}()
err = conn.Login(user, password)
if err != nil {
return false, true
}
return true, true
}
brutespray-2.2.2/brute/imap.go 0000664 0000000 0000000 00000001440 14571166753 0016331 0 ustar 00root root 0000000 0000000 package brute
import (
"crypto/tls"
"fmt"
"net"
"time"
"github.com/emersion/go-imap/client"
)
func BruteIMAP(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
var (
conn net.Conn
err error
)
conn, err = net.DialTimeout("tcp", fmt.Sprintf("%s:%d", host, port), timeout)
if err != nil {
tlsDialer := &tls.Dialer{
NetDialer: &net.Dialer{
Timeout: timeout,
},
Config: &tls.Config{
InsecureSkipVerify: true,
},
}
_, err = tlsDialer.Dial("tcp", fmt.Sprintf("%s:%d", host, port))
if err != nil {
return false, false
} else {
return false, true
}
}
c, err := client.New(conn)
if err != nil {
return false, true
}
err = c.Login(user, password)
if err != nil {
return false, true
}
return true, true
}
brutespray-2.2.2/brute/mongodb.go 0000664 0000000 0000000 00000001372 14571166753 0017034 0 ustar 00root root 0000000 0000000 package brute
import (
"context"
"fmt"
"time"
"go.mongodb.org/mongo-driver/mongo"
"go.mongodb.org/mongo-driver/mongo/options"
"go.mongodb.org/mongo-driver/mongo/readpref"
)
func BruteMongoDB(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
ctx, cancel := context.WithTimeout(context.Background(), timeout)
defer cancel()
clientOptions := options.Client().ApplyURI(fmt.Sprintf("mongodb://%s:%s@%s:%d", user, password, host, port))
client, err := mongo.Connect(ctx, clientOptions)
if err != nil {
return false, false
}
defer func() {
if err := client.Disconnect(ctx); err != nil {
_ = err
}
}()
err = client.Ping(ctx, readpref.Primary())
if err != nil {
return false, true
}
return true, true
}
brutespray-2.2.2/brute/mssql.go 0000664 0000000 0000000 00000001277 14571166753 0016552 0 ustar 00root root 0000000 0000000 package brute
import (
"context"
"database/sql"
"fmt"
"net"
"time"
)
func BruteMSSQL(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
connString := fmt.Sprintf("server=%s:%d;user id=%s;password=%s;database=master", host, port, user, password)
ctx, cancel := context.WithTimeout(context.Background(), timeout)
defer cancel()
conn, err := net.DialTimeout("tcp", fmt.Sprintf("%s:%d", host, port), timeout)
if err != nil {
return false, false
}
_ = conn.Close()
db, err := sql.Open("mssql", connString)
if err != nil {
return false, true
}
defer db.Close()
err = db.PingContext(ctx)
if err != nil {
return false, true
}
return true, true
}
brutespray-2.2.2/brute/mysql.go 0000664 0000000 0000000 00000001320 14571166753 0016545 0 ustar 00root root 0000000 0000000 package brute
import (
"context"
"database/sql"
"fmt"
"net"
"time"
_ "github.com/go-sql-driver/mysql"
)
func BruteMYSQL(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
conn, err := net.DialTimeout("tcp", fmt.Sprintf("%s:%d", host, port), timeout)
if err != nil {
return false, false
}
defer conn.Close()
connString := fmt.Sprintf("%s:%s@tcp(%s:%d)/?timeout=5s", user, password, host, port)
ctx, cancel := context.WithTimeout(context.Background(), timeout)
defer cancel()
db, err := sql.Open("mysql", connString)
if err != nil {
return false, false
}
defer db.Close()
err = db.PingContext(ctx)
if err != nil {
return false, true
}
return true, true
}
brutespray-2.2.2/brute/nntp.go 0000664 0000000 0000000 00000001713 14571166753 0016365 0 ustar 00root root 0000000 0000000 package brute
import (
"fmt"
"net/textproto"
"time"
)
func BruteNNTP(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
timer := time.NewTimer(timeout)
defer timer.Stop()
type result struct {
client *textproto.Conn
err error
}
done := make(chan result)
go func() {
conn, err := textproto.Dial("tcp", fmt.Sprintf("%s:%d", host, port))
if err == nil {
defer conn.Close()
_, _, err = conn.ReadResponse(200)
if err == nil {
err = conn.PrintfLine("AUTHINFO USER %s", user)
if err == nil {
_, _, err = conn.ReadResponse(381)
}
if err == nil {
err = conn.PrintfLine("AUTHINFO PASS %s", password)
if err == nil {
_, _, err = conn.ReadResponse(281)
}
}
}
}
done <- result{conn, err}
}()
select {
case <-timer.C:
return false, false
case result := <-done:
if result.err != nil {
return false, true
}
result.client.Close()
return true, true
}
}
brutespray-2.2.2/brute/oracle.go 0000664 0000000 0000000 00000001643 14571166753 0016655 0 ustar 00root root 0000000 0000000 package brute
import (
"database/sql"
"fmt"
"net"
"time"
_ "github.com/sijms/go-ora/v2"
)
func BruteOracle(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
service := "ORCL"
connectionString := fmt.Sprintf("oracle://%s:%s@%s:%d/%s", user, password, host, port, service)
conn, err := net.DialTimeout("tcp", fmt.Sprintf("%s:%d", host, port), timeout)
if err != nil {
return false, false
}
defer conn.Close()
timer := time.NewTimer(timeout)
defer timer.Stop()
type result struct {
db *sql.DB
err error
}
done := make(chan result)
go func() {
db, err := sql.Open("oracle", connectionString)
if err != nil {
done <- result{nil, err}
return
}
err = db.Ping()
done <- result{db, err}
}()
select {
case <-timer.C:
return false, false
case res := <-done:
if res.err != nil {
return false, true
}
defer res.db.Close()
return true, true
}
}
brutespray-2.2.2/brute/pop3.go 0000664 0000000 0000000 00000002620 14571166753 0016265 0 ustar 00root root 0000000 0000000 package brute
import (
"crypto/tls"
"fmt"
"net"
"time"
"github.com/knadh/go-pop3"
)
func BrutePOP3(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
options := []pop3.Opt{
{Host: host, Port: port, DialTimeout: timeout},
{Host: host, Port: port, TLSEnabled: true, DialTimeout: timeout},
}
_, err := net.DialTimeout("tcp", fmt.Sprintf("%s:%d", host, port), timeout)
if err != nil {
return false, false
}
for _, opt := range options {
var conn net.Conn
var err error
if opt.TLSEnabled {
tlsDialer := &tls.Dialer{
NetDialer: &net.Dialer{
Timeout: timeout,
},
Config: &tls.Config{
InsecureSkipVerify: true,
},
}
conn, err = tlsDialer.Dial("tcp", fmt.Sprintf("%s:%d", opt.Host, opt.Port))
if err != nil {
return false, true
}
} else {
conn, err = net.DialTimeout("tcp", fmt.Sprintf("%s:%d", opt.Host, opt.Port), timeout)
if err != nil {
return false, true
}
}
defer conn.Close()
p := pop3.New(opt)
c, err := p.NewConn()
if err != nil {
continue
}
defer func() {
if err := c.Quit(); err != nil {
_ = err
}
}()
authDone := make(chan bool)
go func() {
err := c.Auth(user, password)
authDone <- (err == nil)
}()
select {
case authSuccess := <-authDone:
if authSuccess {
return true, true
}
case <-time.After(timeout):
}
}
return false, false
}
brutespray-2.2.2/brute/postgres.go 0000664 0000000 0000000 00000001277 14571166753 0017261 0 ustar 00root root 0000000 0000000 package brute
import (
"database/sql"
"fmt"
"net"
"time"
_ "github.com/lib/pq"
)
func BrutePostgres(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
conn, err := net.DialTimeout("tcp", fmt.Sprintf("%s:%d", host, port), timeout)
if err != nil {
return false, false
}
defer conn.Close()
connStr := fmt.Sprintf("host=%s port=%d user=%s password=%s dbname=postgres sslmode=disable", host, port, user, password)
db, _ := sql.Open("postgres", connStr)
err = db.Ping()
if err != nil {
if err.Error() == "pq: password authentication failed for user" {
return false, true
} else {
return false, true
}
}
defer db.Close()
return true, true
}
brutespray-2.2.2/brute/rdp.go 0000664 0000000 0000000 00000005304 14571166753 0016173 0 ustar 00root root 0000000 0000000 package brute
import (
"fmt"
"time"
)
func BruteRDP(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
fmt.Println("not needed")
return false, false
}
/*
package brute
import (
"context"
"fmt"
"log"
"net"
"os"
"time"
"github.com/tomatome/grdp/core"
"github.com/tomatome/grdp/glog"
"github.com/tomatome/grdp/protocol/nla"
"github.com/tomatome/grdp/protocol/pdu"
"github.com/tomatome/grdp/protocol/sec"
"github.com/tomatome/grdp/protocol/t125"
"github.com/tomatome/grdp/protocol/tpkt"
"github.com/tomatome/grdp/protocol/x224"
)
func BruteRDP(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
domain := ".\\"
width := 600
height := 600
target := fmt.Sprintf("%s:%d", host, port)
glog.SetLevel(glog.INFO)
logger := log.New(os.Stdout, "", 0)
glog.SetLogger(logger)
client := NewRdpClient(target, width, height, glog.INFO, user, password, domain)
ctx, cancel := context.WithTimeout(context.Background(), timeout)
defer cancel()
type result struct {
success bool
err error
}
done := make(chan result)
go func() {
err := client.Login()
success := err == nil
done <- result{success, err}
client.Close()
}()
select {
case <-ctx.Done():
return false, false
case res := <-done:
if res.err != nil {
return false, true
}
return true, true
}
}
type RdpClient struct {
Host string // ip:port
Width int
Height int
user string
password string
domain string
tpkt *tpkt.TPKT
x224 *x224.X224
mcs *t125.MCSClient
sec *sec.Client
pdu *pdu.Client
}
func NewRdpClient(host string, width, height int, logLevel glog.LEVEL, user, password, domain string) *RdpClient {
return &RdpClient{
Host: host,
Width: width,
Height: height,
user: user,
password: password,
domain: domain,
}
}
func (g *RdpClient) Login() error {
conn, err := net.DialTimeout("tcp", g.Host, 3*time.Second)
if err != nil {
return fmt.Errorf("[dial err] %v", err)
}
defer conn.Close()
g.tpkt = tpkt.New(core.NewSocketLayer(conn), nla.NewNTLMv2(g.domain, g.user, g.password))
g.x224 = x224.New(g.tpkt)
g.mcs = t125.NewMCSClient(g.x224)
g.sec = sec.NewClient(g.mcs)
g.pdu = pdu.NewClient(g.sec)
//g.mcs.SetClientDesktop(uint16(g.Width), uint16(g.Height))
g.sec.SetUser(g.user)
g.sec.SetPwd(g.password)
g.sec.SetDomain(g.domain)
g.tpkt.SetFastPathListener(g.sec)
g.sec.SetFastPathListener(g.pdu)
g.sec.SetChannelSender(g.mcs)
g.x224.SetRequestedProtocol(x224.PROTOCOL_SSL)
err = g.x224.Connect()
if err != nil {
return fmt.Errorf("[x224 connect err] %v", err)
}
return nil
}
func (g *RdpClient) Close() {
if g != nil && g.tpkt != nil {
g.tpkt.Close()
}
}
*/
brutespray-2.2.2/brute/run.go 0000664 0000000 0000000 00000005003 14571166753 0016206 0 ustar 00root root 0000000 0000000 package brute
import (
"math"
"time"
"github.com/x90skysn3k/brutespray/modules"
)
func RunBrute(h modules.Host, u string, p string, progressCh chan<- int, timeout time.Duration, retry int, output string) bool {
service := h.Service
var result bool
var con_result bool
var retrying bool = false
var delayTime time.Duration = 1 * time.Second
for i := 0; i < retry; i++ {
switch service {
case "ssh":
result, con_result = BruteSSH(h.Host, h.Port, u, p, timeout)
case "ftp":
result, con_result = BruteFTP(h.Host, h.Port, u, p, timeout)
case "mssql":
result, con_result = BruteMSSQL(h.Host, h.Port, u, p, timeout)
case "telnet":
result, con_result = BruteTelnet(h.Host, h.Port, u, p, timeout)
case "smbnt":
result, con_result = BruteSMB(h.Host, h.Port, u, p, timeout)
case "postgres":
result, con_result = BrutePostgres(h.Host, h.Port, u, p, timeout)
case "smtp":
result, con_result = BruteSMTP(h.Host, h.Port, u, p, timeout)
case "imap":
result, con_result = BruteIMAP(h.Host, h.Port, u, p, timeout)
case "pop3":
result, con_result = BrutePOP3(h.Host, h.Port, u, p, timeout)
case "snmp":
result, con_result = BrutePOP3(h.Host, h.Port, u, p, timeout)
case "mysql":
result, con_result = BruteMYSQL(h.Host, h.Port, u, p, timeout)
case "vmauthd":
result, con_result = BruteVMAuthd(h.Host, h.Port, u, p, timeout)
case "asterisk":
result, con_result = BruteAsterisk(h.Host, h.Port, u, p, timeout)
case "vnc":
result, con_result = BruteVNC(h.Host, h.Port, u, p, timeout)
case "mongodb":
result, con_result = BruteMongoDB(h.Host, h.Port, u, p, timeout)
case "nntp":
result, con_result = BruteNNTP(h.Host, h.Port, u, p, timeout)
case "oracle":
result, con_result = BruteOracle(h.Host, h.Port, u, p, timeout)
case "teamspeak":
result, con_result = BruteTeamSpeak(h.Host, h.Port, u, p, timeout)
case "xmpp":
result, con_result = BruteXMPP(h.Host, h.Port, u, p, timeout)
//case "rdp":
// result, con_result = BruteRDP(h.Host, h.Port, u, p, timeout)
default:
//fmt.Printf("Unsupported service: %s\n", h.Service)
return con_result
}
if con_result {
break
} else {
delayTime = time.Duration(int64(time.Second) * int64(math.Min(10, float64(i+2))))
retrying := true
modules.PrintResult(service, h.Host, h.Port, u, p, result, con_result, progressCh, retrying, output, delayTime)
time.Sleep(delayTime)
}
}
modules.PrintResult(service, h.Host, h.Port, u, p, result, con_result, progressCh, retrying, output, delayTime)
return con_result
}
brutespray-2.2.2/brute/smbnt.go 0000664 0000000 0000000 00000001457 14571166753 0016536 0 ustar 00root root 0000000 0000000 package brute
import (
"fmt"
"net"
"time"
"github.com/hirochachacha/go-smb2"
)
func BruteSMB(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
conn, err := net.DialTimeout("tcp", fmt.Sprintf("%s:%d", host, port), timeout)
if err != nil {
return false, false
}
defer conn.Close()
if err := conn.SetDeadline(time.Now().Add(timeout)); err != nil {
fmt.Println("Error setting deadline:", err)
}
d := &smb2.Dialer{
Initiator: &smb2.NTLMInitiator{
User: user,
Password: password,
},
}
s, err := d.Dial(conn)
if err != nil {
return false, true
}
defer func() {
if err := s.Logoff(); err != nil {
fmt.Printf("Failed to logoff: %v\n", err)
}
}()
_, err = s.ListSharenames()
if err != nil {
return false, true
}
return true, true
}
brutespray-2.2.2/brute/smtp.go 0000664 0000000 0000000 00000002357 14571166753 0016376 0 ustar 00root root 0000000 0000000 package brute
import (
"crypto/tls"
"fmt"
"net"
"net/smtp"
"time"
)
func BruteSMTP(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
auth := smtp.PlainAuth("", user, password, host)
conn, err := net.DialTimeout("tcp", fmt.Sprintf("%s:%d", host, port), timeout)
if err != nil {
return false, false
}
defer conn.Close()
smtpClient, err := smtp.NewClient(conn, host)
if err != nil {
return false, true
}
defer func() {
if err := smtpClient.Quit(); err != nil {
_ = err
//fmt.Printf("Failed to send QUIT command: %v\n", err)
}
}()
tlsDialer := &tls.Dialer{
NetDialer: &net.Dialer{
Timeout: timeout,
},
Config: &tls.Config{
ServerName: host,
InsecureSkipVerify: true,
},
}
tlsConn, err := tlsDialer.Dial("tcp", fmt.Sprintf("%s:%d", host, port))
if err == nil {
smtpClient, err = smtp.NewClient(tlsConn, host)
if err != nil {
return false, true
}
defer func() {
if err := smtpClient.Quit(); err != nil {
_ = err
//fmt.Printf("Failed to send QUIT command: %v\n", err)
}
}()
if err := smtpClient.Auth(auth); err == nil {
return true, true
}
}
if err := smtpClient.Auth(auth); err == nil {
return true, false
}
return false, true
}
brutespray-2.2.2/brute/snmp.go 0000664 0000000 0000000 00000002312 14571166753 0016357 0 ustar 00root root 0000000 0000000 package brute
import (
"crypto/md5"
"encoding/hex"
"fmt"
"time"
"github.com/gosnmp/gosnmp"
)
func BruteSNMP(host string, port int, user, password string, timeout time.Duration) bool {
timer := time.NewTimer(timeout)
defer timer.Stop()
hasher := md5.New()
hasher.Write([]byte(password))
md5Password := hex.EncodeToString(hasher.Sum(nil))
communityStrings := []string{user, md5Password}
type result struct {
success bool
err error
}
done := make(chan result)
portInt64 := int64(gosnmp.NewHandler().Port())
for _, communityString := range communityStrings {
go func(communityString string) {
gosnmp.Default.Target = host
gosnmp.Default.Port = uint16(portInt64)
gosnmp.Default.Community = communityString
gosnmp.Default.Version = gosnmp.Version3
gosnmp.Default.Timeout = timeout
err := gosnmp.Default.Connect()
if err != nil {
done <- result{false, err}
return
}
defer gosnmp.Default.Conn.Close()
done <- result{true, nil}
}(communityString)
}
select {
case <-timer.C:
return false
case result := <-done:
if result.err != nil {
fmt.Println("Error:", result.err)
return false
}
if result.success {
return true
}
}
return false
}
brutespray-2.2.2/brute/ssh.go 0000664 0000000 0000000 00000001371 14571166753 0016203 0 ustar 00root root 0000000 0000000 package brute
import (
"fmt"
"time"
"golang.org/x/crypto/ssh"
)
func BruteSSH(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
config := &ssh.ClientConfig{
User: user,
Auth: []ssh.AuthMethod{
ssh.Password(password),
},
HostKeyCallback: ssh.InsecureIgnoreHostKey(),
}
timer := time.NewTimer(timeout)
defer timer.Stop()
type result struct {
client *ssh.Client
err error
}
done := make(chan result)
go func() {
client, err := ssh.Dial("tcp", fmt.Sprintf("%s:%d", host, port), config)
done <- result{client, err}
}()
select {
case <-timer.C:
return false, false
case result := <-done:
if result.err != nil {
return false, true
}
result.client.Close()
return true, true
}
}
brutespray-2.2.2/brute/teamspeak.go 0000664 0000000 0000000 00000001011 14571166753 0017347 0 ustar 00root root 0000000 0000000 package brute
import (
"strconv"
"time"
"github.com/multiplay/go-ts3"
)
func BruteTeamSpeak(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
portstr := strconv.Itoa(port)
hoststr := host + ":" + portstr
c, err := ts3.NewClient(hoststr, ts3.Timeout(timeout))
if err != nil {
return false, false
}
defer c.Close()
err = c.Login(user, password)
if err != nil {
return false, true
}
if _, err := c.Version(); err != nil {
return false, true
}
return true, true
}
brutespray-2.2.2/brute/telnet.go 0000664 0000000 0000000 00000001674 14571166753 0016707 0 ustar 00root root 0000000 0000000 package brute
import (
"bufio"
"fmt"
"net"
"strings"
"time"
)
func BruteTelnet(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
connection, err := net.DialTimeout("tcp", fmt.Sprintf("%s:%d", host, port), timeout)
if err != nil {
return false, false
}
defer connection.Close()
err = connection.SetDeadline(time.Now().Add(timeout))
if err != nil {
return false, false
}
reader := bufio.NewReader(connection)
var serverMessage string
//serverMessage, err := reader.ReadString('\n')
if err != nil {
return false, true
}
fmt.Fprintf(connection, "%s\n", user)
//serverMessage, err = reader.ReadString('\n')
if err != nil {
return false, true
}
fmt.Fprintf(connection, "%s\n", password)
serverMessage, err = reader.ReadString('\n')
if err != nil {
return false, true
}
if strings.Contains(serverMessage, "Login successful") {
return true, true
} else {
return false, true
}
}
brutespray-2.2.2/brute/vmauthd.go 0000664 0000000 0000000 00000003074 14571166753 0017060 0 ustar 00root root 0000000 0000000 package brute
import (
"crypto/tls"
"fmt"
"net"
"strings"
"time"
)
func BruteVMAuthd(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
address := fmt.Sprintf("%s:%d", host, port)
conn, err := net.DialTimeout("tcp", address, timeout)
if err != nil {
return false, false
}
defer conn.Close()
err = conn.SetReadDeadline(time.Now().Add(timeout))
if err != nil {
return false, false
}
buf := make([]byte, 1024)
n, err := conn.Read(buf)
if err != nil {
return false, false
}
response := string(buf[:n])
if strings.Contains(response, "SSL Required") {
tlsConn := tls.Client(conn, &tls.Config{InsecureSkipVerify: true})
defer tlsConn.Close()
conn = tlsConn
} else {
err = conn.SetReadDeadline(time.Now().Add(timeout))
if err != nil {
return false, false
}
}
cmd := fmt.Sprintf("USER %s\r\n", user)
_, err = conn.Write([]byte(cmd))
if err != nil {
return false, true
}
buf = make([]byte, 1024)
n, err = conn.Read(buf)
if err != nil {
return false, true
}
response = string(buf[:n])
if !strings.HasPrefix(response, "331 ") {
return false, true
}
cmd = fmt.Sprintf("PASS %s\r\n", password)
_, err = conn.Write([]byte(cmd))
if err != nil {
return false, true
}
buf = make([]byte, 1024)
n, err = conn.Read(buf)
if err != nil {
return false, true
}
response = string(buf[:n])
if strings.HasPrefix(response, "230 ") {
return true, true
} else if strings.HasPrefix(response, "530 ") {
return false, true
} else {
//log.Printf("Unexpected response: %s", response)
return false, true
}
}
brutespray-2.2.2/brute/vnc.go 0000664 0000000 0000000 00000001112 14571166753 0016165 0 ustar 00root root 0000000 0000000 package brute
import (
"fmt"
"net"
"time"
"github.com/mitchellh/go-vnc"
)
func BruteVNC(host string, port int, user string, password string, timeout time.Duration) (bool, bool) {
config := &vnc.ClientConfig{
Auth: []vnc.ClientAuth{
&vnc.PasswordAuth{
Password: password,
},
},
}
addr := fmt.Sprintf("%s:%d", host, port)
conn, err := net.DialTimeout("tcp", addr, timeout)
if err != nil {
return false, false
}
defer conn.Close()
client, err := vnc.Client(conn, config)
if err != nil {
return false, true
}
defer client.Close()
return true, true
}
brutespray-2.2.2/brute/xmpp.go 0000664 0000000 0000000 00000002506 14571166753 0016373 0 ustar 00root root 0000000 0000000 package brute
import (
"fmt"
"strconv"
"time"
"gosrc.io/xmpp"
"gosrc.io/xmpp/stanza"
)
func BruteXMPP(host string, port int, user, password string, timeout time.Duration) (bool, bool) {
portstr := strconv.Itoa(port)
hoststr := host + ":" + portstr
timer := time.NewTimer(timeout)
defer timer.Stop()
type result struct {
session *xmpp.Client
err error
}
done := make(chan result)
go func() {
router := xmpp.NewRouter()
config := &xmpp.Config{
TransportConfiguration: xmpp.TransportConfiguration{
Address: hoststr,
},
Jid: user,
Credential: xmpp.Password(password),
Insecure: false,
ConnectTimeout: int(timeout.Seconds()),
StreamLogger: nil,
}
client, err := xmpp.NewClient(config, router, func(err error) {})
router.HandleFunc("message", func(s xmpp.Sender, p stanza.Packet) {})
done <- result{client, err}
}()
select {
case <-timer.C:
return false, false
case res := <-done:
if res.err != nil {
_ = res.err
//log.Printf("Error while connecting: %v", res.err)
return false, true
}
presence := stanza.NewPresence(stanza.Attrs{})
if err := res.session.Send(presence); err != nil {
_ = res.session.Disconnect()
return false, true
}
err := res.session.Disconnect()
if err != nil {
fmt.Println(err)
}
return true, true
}
}
brutespray-2.2.2/brutespray.gif 0000664 0000000 0000000 00004455740 14571166753 0016646 0 ustar 00root root 0000000 0000000 GIF89a
! "! !"# ! "" " # !#!% ! "' ' + !$ #= ! !& &+!!" *"%'"%,"*Q# #""$&$ +$$.% %#0%$#%&(&&$.&+?'!'"1'&&')-(# )(6).2* *)(+ +&"+*6-!-'5-($-,,//0 0#0*&1 31' 1//14T2+=2-(2473 5&5*!50*6!6#78%8-%83I85393,:'=:( :/?;2E;9<<- ="
='=/%=6/>8S>HO@2'@?BA*A:3B%B-CB4(BC_C. CfxC\WASx.7C\x&Pi5P+p /cXp?@Q8& !7wdf ̧v@$n+@6I`Ij8+$hfTVl-Hu`A%CRh_DQT9(C{Xhsw=a>h0gP&nxac0Ќj
Z zVgmȎ8Xx؏ 9YyH k !5pwh'9-9i !IH(+'= :L
/ Y!-BPɒ` 9A e. Va HД qayvi q 3F
M9&`QY`
` U34_ LϿ (h& 6F(Vhf B$F%hM \(GgՂ98cDV?0ڷ 0ҸގH&"E
HXXv`Jxŏ fcafzA0)Gs'|ُg㤁J@p&'"91 (j !a*)У!"yJ꫰ tQ?9Ī+ eA뱊pZw
$$xcqiN^mW(Ag\1mʞ ^qOyN( r?^Q BA4) k WG9EO $Y'v,3VD9(&hl@ 0H DP@S4CbQ D PK`8 ( *=ąD0m= xmuJH& "pAyA2k { I PnS,϶TBe0s˭ٍl2=SG/ؽ`5I@X/QJ}[HnP"q{zӞ!eحQucxA DI. 8ʙ.
`G(ŚB@
@Br)TW@< `/X!_*C '; J9( Dr/iƶ
u=bGl0ـz
@^Bq!`|r 4`X/ B4 g<^iq 9N`
)9D\(0!H!D|C";I t@2"; .~DBJ|C4iQ i i Gl+NL0w?P&AwAu3<t5kV& J+ܱH""q!vÒG(j`!" D3M5MР/Є7 L!@5a2≃j! QG <`"Sr 8!F M MWe5W]'D 1
g-U^hÏM=tב:b RquZk%k[o7\q%\sE7]ue]w߅7^y祷^{7_}_8`&`F8afa 8b'b/8c7c?9dG&dOF9eWfe_9fgfo9gwg:h&hF:ifi:jj:kk;l&lF;mfm߆;n离n;oo y嗗IF)S_> ! , ! , H*\ȰÇ
=@Hŋ3jȱǏ C EB!$^4 2H8`͆($ɳϟ@
Jt(DX?^GKTr p `Kn*ZٳhӪ]˶4#)HJT` 8L `YaU#KL2rP`wr(Ga(<
xAfm.6[[ N"08seB A/7;c
b}ӫY~˟OϿ (h&`HWE
'
fO?WXh
`^K!v((c>Qq F 7@@ @1?
40dPFiORf }wr"hv/u8@:+c@"ppe !@<' r )I`B Іv `R
lTh0 ' Qb2
4
KT@ 8LXB$=,IVA !HLr 褄YI `!Hz+8<:9*09)܀%`;HE.-\Zb (D, ` (!!L
O %hd##dN$#Z8ZA
a|*pJ## L6!4ĉ2B, |-m`` ! bX t`(d !t_>ƾ
-D3Gڂ`2"n7n" 8ľh
*\ yΔN2$x#B#z1 gbcb< 0` <5X5f%@V)-ґr
9b6vjF1d Ƞ l-1#
#H "#L/~ F4%'`pa `G&A (o詬L##h ¸| ~mD##PfK
1"L !_0# #XP#h<Pq h )mva
2 AU
8!Uhό .(7?u@C
!T + JaJ#}pNp#n`M4B-$ c8>$u` E-E6a Q#f);ZL `&(@31b/ 7b2# 2`2T# )
l&CABAITb@)GmInT3:D{=,8 ע0` *B $5, rL f X>O#:### Bs2.
#~` e*#3#_ZB#0#XX`N hMt 4ؠ p@Z
L! MCVucV4 DDra
# #B7bv`Al҇ X 8 H#, U
Cj"/3
;brA
LYt# FA A@6!# !zALd b >4vO%W
Ơ a j-i3p @ ^unaVma_HP
b e,'T nYԥMi8An2#ڄ%e( TBS W@3 F b8@,(@,,``D{0Fs+@E*fv{Cjqg- hƽPR%~ 1`p
`o ` d #0`}L0?0])#` 0` y `ð QD-^ĘQF =~ ."c
(pi xR (" tC,9QF 0|ʅ
Z6Mx(P+<@; ? Y~U\uśWއT^̢6*0UE.3`&S
$pF&\x? <{ki800 noK̬}3 ^C x &8dB$hpbÇ><aQzҖ* Mş_~CƲD!XQFzjVǔbYH*Qp䀅X
Ƹk9 CKŏfxA cFHcC1ÒR6I.#@rYc\a^ k`饗
DHX@XzAc8^H#DCK 1# ] 2 > $~? b{>m~{~er>KW ,:A7:էzKUOGx> , [z
@qU]@O#iw{ ߷ ތ=wcDѩ JAA J̨^RA ߿ t uP \`bPah`aI4P`B. XU)(> T=}TPE ETRMv9-QD`@%
Iy_hӿ(a|6蟙&f :"Qk`TPD(Qb8F ed&B,1&RR6 OmƝ[nP4WHBhׅ?.L 6ppAtUqإni+@N!cڎ .h#p" H
Z" jDOD1EWLQ @E
@@)E
G `P@ v<( J+<
/ j1j8RJ!Aĥp ÎȂti
KFȃ '&*!-c,$& *pT8A@ HD,OE5UUucƢVEi 0p Hh( !$8 2|m }bNp_ Z6H}r,@h ! O*@ ~T XW2F@QзAvP(tϖP%~=\O@)Ӗg9$"o?6 M9@', p0TъWĢG"s0FUR4b
3Bm^ ?\+'eN!˂ v羁h*fHF"2a#J!f_hedT`>0:4ia<aKR%l!>RAʡ &-cmʁ H̄XJ@JԼ0Z4;3) `b
t9Atb BrX-7ef K8 k&D E> 8cP?!aD@ڈ>@TKȁេI8M*ŔX`!\ Qa>h[](vW61)-8 v dfv# &dJh vg /p\8NaZxaX℃* "~H aɆܣ
r?A8&;tt&NXl)__ Gg
`j@Hb* QЉ Ct|=]9(l $c+BaSB0TA^J4R
$B6 . 6`Ё fD a< &`"M080=4(G4dr v?n'f'7 @ 0HA;lD@E/!
c8"|H RTF _2 1\d`C Q\Y?t## Fm$Md9! 1IA#ıe !ذ_b < | b F.Jb-Hn?gU@8-*#
iB0p" XAf.a IBBsBis&g \`DQ@Lva axgp0Oq!K
.
@ tmSN&C!|`o+ LD?+ zuT1Q"*L:SN(NhHj:
(X' &!uĥd5!\U`Ip6A
8p5z: rF&RI ?<1*qFvXx1"1Z0l0JJt
G&2A XE%цg:q;M$
QnBࢴ KBHpMNM3xDEKJ,"E@e#$F
fG(`0ERrl `H ?2Nw(7AU^Ddօv?Q"Bp@ !F섃8
8ADI6 Pv02P!
K I\g&V|\|I;E[-b$;(ބp# B>@U Џ7]$L m6[EqA īY>(v: PnX :
,031&G A Г ,B6-tthB[ #D5h
*
q5Zm1`
/$c1B0%ra("f("7J!,nL Kr҇!1ZEHg
(x@hB 5p"dh(mX )pFLr5[ ud!я, d CT YJ+Z'b20FgQS_W5
~"Hl D ܄m"B Q> 0z
k~Ց9 $#q@o\m')?,` ҂F cHȇ
`p ` (蠈! ^!"k(h *`@/J *pP LJ @
"
R$x*
!Z {
hDr!?
LVb~m \ H.@z !xP
aj Fha
b!p !*a xV pA a
'9QD!!c#0n⋢J' a^!
>b<$! A9AJXĿ~ahsa 8h*
aH@!,! Z 2z t&b.&%$\-,g"rE',@B4l"`Wg$ =I+('&¯` g*`E`&<݀
j$6 .g3CRhP/z V sh@Lɢ2 P
Iha V̀,
A 'S
8>Pp p_A
FJ\p fn nRGCԇ" < (`R8Z o!js v1o8QwA q!rQ n1F*a Q
>` &AFP ? ؼ NH
@FZ$/7bi@
a B
\ ! Vr BF` R) @@ ` $ڀ Ĭ
a
` @\_eZ
҂T
V `
̸g7N@tV|"& 2yE2)'
QReBZ
3_VhS41KN,5{ z~0q. j@i,&h' g2 b8:[2hVEF $ <``7~@
0<`' q @a? :BizJ ^dža1BB9}o$zVbi7%Q1 BPDvd/=q60v>q . > =r0ڂ/zJ!'(ڢeDbB 8'(.u.61}8_.s79:Ka o$h$&9}zSG'1Лi97+g7Dǹx1Ւ 8I a: A'p:
:bi ]|ʥ 0&7g'&SbF+ DS)z&F&p+O%j * -_? 6r0l#yC6sٚ(:uSbKϊ"pR]6m#6`.nc*Ӣ :.G6bF NfNp)a*gPpl(ll))do(h(z#%z r%P B4U 0QP )9S`"QIJ " ɫ& `&J7 &`ڵje<" 2h `8CP?ڢ-?|~S8z[8~!S1/?HZٓ=>7W#sLp;!Ih> +@C{ve @v}[ۢW`%0@eP{H嶺1hpHa'9s &"$JI S'F{HA0 0,y,0bk' oXt"Y&E7`'
}3$@#@=s7 /C8ПTY`>/W}6 @0Wv`)(*, ij&@C-:N!@[{h ɶC & &bP# & {+%p?_ Ӹ$f@Y"p? | "p˒|ǵ @Ȳ/ɖlüɴ!G6 VInHfҩ:mRÖy{h
{kɦK8b(q̐b;OGa#gʼ}+ I)Q $ >,K/|ǏB
!ZaigP 7PiWP֧D'mϢ|7ٰWM !3/ !3L+
0kxKH(A-`قKXO G0gÅ #a%&#Rx(S,Ჴ2T˃OHB 31>?X6hɃBt4 #6h0->R0O!bLɑԑI{ȴ^ eIPOX9iOO<6 M5 ;5.,Z3X8CPI50`
@ kö>HM!bE pœsR(w_xO7
{fX 28X3 !bG$k @@8 <
YVX;x_ D
R)&#YJ%,#CP R.rI ' Fq' 0G ThŊ[. p:9ڹ
p ., ҁ $h?+:,: ,[0 &3 p,pP_I 0I@ *( (қ.P% '>
x? P 0 [
pbr389
)Z.͏Ӧ)A;?H@@
H ILj ғY9 +C pO r O&h jۉ4F< HH HAOu $ԛ.hԡK)0,qC ?7\JV$l
p7
X6r
1
WOł#" XPE# p
,pA !JTJXJ:`50khO5dVK0_X0q^\^ > 0i;z8 GJ"ӢJ -
3RP8h2@E`!H(W؆W !EdЂV^ z2&
}<Ȅ2iAp e?HK7QHJ@K @ l>O ZɌIA6h {yZA|O9 R5ER [p5
5\&SpJUJ:14c6pC-<"HGaKXd :RpO\WaX7$K!Ub!C0< u[gaم_Ƞ KZ(hXSմYDM< 0Y
Jtx"@ F2w ́/A/*48F%&1h( 8B2 C K
4B{% 0N'TB@#@TLB]_)#ATU-+#hA&, X%ɒ0#G DwUOٕ']/8<+#́RdU2 &. H-Ц |
}0$ '5-BL%(F*qs`ps!F A$ 2hjx4݁t``$ qA(~$@ pA"lX*@
\`a+e@,uDH tiar IT@HJH !"0 B">*)B
@ H% A "AJp@_J~,pX/:
&[ P Y
"N8M8Y (3͕ME 5㔍lB~#y70 c:*mMxY< L,Y h
ƭp@\ 0\+D TE. @l?@H@!n$ߐl z n ?$̎
<0%iQvPE@Û._K* W#_(E!8%PӨOX-vonÕ't *P(R$ <&'Q&x y*`/TB!pz*0KXM$L)M@.O$@ d!ϑé Xd5%g ''h' eB)@g#H'$0"|4"xS 腺yܩB A*zWB pBȂ%ԁH<AH -B
1.hA a-) Ci.p{ lV
T>@')XBUpja*.֒6)3<)$z3,5\lhxZi0i )ԚH( hB%D'KL"1dE}13&8؋ C@b*V@ @ sn4 ܁$ A0D,TB,h-Ai"@%L^+ nA@!3ƪ āl!s"
L8
l`0( yMJojA tq37"̖
ݎa ˎ, Y
.M- W#YvQ*N:68X-&ӠmNFE8MMn0SWm` L վfcE>s 2?~d( nt\p@@Ӣ1@4 @]M@ͨP^װ
^OX6Hbִddav6\@DFX6'܇yBxV
c-'// DV"d) M ׁp 'A %@ԱA&w OnNB
lp@|-RVA B sB! #dB& LB!<$A)20O
?7m:<Ip#YF *6 #'xQH;'#0C.s:h$l#!
mm1H#4㕄T 6 S&"*F\)' H"'$Z܂LZ$TG"URa cԡ_* 51R x`'<K}6Tц6!y qJ (D&PORENѢ
0cJZ@9 R! m<5X$#UE 1k<To `B)䢧@p!..e5la n $~Vt
@6lm
u D|>
pŐ ( #(hP"IƠ#^>^9O 'HL!X..!Ы^mm3h@ Pʐ en6i~G( Cp\ bHM (],W f\ދkFpD<%@27"H
jO"CL*NhI UN]-
\":]HV\OI5LDw/S|)RRyTd, @Yu5)gM$)ZӆHlŷVLMb iD p %IP G^y qO/ ^,$ MxBHp]Y GpBUB
86 *L +*"v
a3Z y? |^T8Ul
9L$#@Vʄ! Byd [sIp!ދ[ׂ2Sה<^Uo>4 Woֻ..0گ NI,iJ,$$ [0 Ws5'FLm K ZW)q+'i'L%5
Aqf3 V31% LD+D
\bnB@7@<h3@#Fy'q6R`ktmK}*H%|8sI
aex? `@ q
B|gbg
BpƕXEBM4E@jeJ!Gn3XJJl!*NwS )ȅU >0$~P27
TsO$I? Y.Txb= *VL3,hy#D &9d,lN8z*ҬI`n$ L{iPq-;+maZ^"`f/ZHR}Ol(G k5z8qB `܈ ` "
?P7 =7
$
0P5h>0/ P`^l(} bD5f
LX G76 QHgX58t 2@G:e?&RhD>7rR X'&;BZbɗ㴑ibIŲUsJU*T
LHy![IA~>Ɉ7n\Xp<@ hV؊toȀ`@U@ 8H/\ [ş+R8qE
<b/Уg[M\ P @68w B<4w"7EK 4/ ? µ&8ޙD 5:%XJ8$Iʣh"K*Dk Gtg}s[4r5%ptFBZ\H#50>+B m\c
ԑL$-Iu&ER
=9Z jl 82ZU}ЅM%YScAEsLKs )<%Kpa4-uTއMG < _y@e ^NUd% lly6*])nMFc Bkյ:*VkOMV rp 8 *$41ApY 9+t yOΩ rEU4V HDXF3Ѐ< W FQ&.hXQ. S$GR?x0
2?X3Emʑ5P ,lc3G^H:۠0-2LJo2ĐH,l #Hp*P 0K,l 1gA"'2 E?j7)LhUIQTS/ɑ^-{#0.F.
!Ť^ZPP&
ȲT E
*G!T
/*$ V` F B ITM<-i(RP<$Y:ak
8P*`2}&8
6Bh`U:uumwIJQ@ "]#6:@h@@ eԵ @H(k#ޏAY䚊g > D `X@X`SB%ZR!*@@"$Bº !7PD$~ ܘa!,.@"7Z(b3& x /|d?B_)$p _@%Af9Ɉ#!$ZF$iA(ILC@J$1 Zջe~M$2j T#^)b~fI5 ?a$i5\ُt**GB\)x#\ d"?цcD'
A0Cg&Hjc܁$PI wIFe-
J cp6DAC)O<-$ }Mt_#*':[3_+$"h5nV*
T ,bg :EX
3^)qY $`44N $PA4@XK' U@icP%1IHN6?< $l )6PJ:@)@DUNΒNHtp5 ܲ$)6e ``Mh $aX]bE}`Ȅ"@`&Bz4
ɲtgr7DH`祒$IRk%ǜaG@R!SX GB #$I(q#5!d<0)dhAE2`A
OE$BW zTbE$i@IYGC$I$i@-Ib
nOn
a f#zQS}bF Z8D/NՐT h` I4PQ@:pF""2q]q -G,dHEt`$ } @ rVTZ ;lO ]6_Yk89$E 0$ y%D@ĸkQIH_&B083 eG5 l> #úqhỲH
P| 05یP_ x5ĸ%FU%Q#TU80gIȎ&jd]bD% 0"
|H),A8LQ;pn@D3v\
')9HҤ$iG}.P$ ɐaZ%d#yy@y H#H ?ZE!`8DA
w%^W H l036 B !E-Lg?5[iX .kcJHA%KbƑ K¬- K`v;
@PbqwQ
4YXvl1!M_aI&O*%E)* ^ #@Prt75b`a6
`wIv`R$09.S[ۙi1 4L XB@,A" T6w;y $;AJ ¨VIADPO0#CR tv -#
Bk0i`C R%0Dvw!I J1iU@-@JGB(H \a")Yd/` CXJ)Ԑ:x?JaPHrop/$@IJ+P$Re"}!BbFcJfۀS 0$t``XGB l+U4+k.BH f" N%}0
$+%
@NI` NI
8T
5h I`#$ 0$!"܋_a>"
˾8f^@)@"*
W0-Mj09H NBDN c<` \ $\`` !
ŋ8/NV3"ʍ*3P i@` `1e I ".ΉȀldڀ ڠ
$ @
&` Na ~`Z@6@0 $ B|
e<ǣh(#%`[G41uuBQaP@ LHd-]U1W23&X d`S*e2_/@+Go(1\ `@&*p'`<0 SE@#ny=iX2Ry Gq1 -w
)-Vkwb QGaY
4N/)4?c0 G1að R~ ~
0`PcȠ9Icc)-ghY 61tX xQT1s # d8L~6a| H8 ´B` ( 00@
@ ~ ypH@[@ si r P @AFރ6:$G@=Br,(QQr
a[)ғouF =n
*ukA/T!Pvp)I^7(8 w-,@z#~r> Vp CaZ!B5T5`TV }_Sa`
r; ]Pp:PV*:A C , p0 +0
' q R#
̰ JhS:A nK 6s w ev R)td \u1 Z8H0C1
!~1+ 6 |[ $sPaZdʕ(2PSl`̰ @H l F0^Fz|qnf*. =g/$;"j"AZ#0D \ PD,`
0p b={=1:R^i=@! C p-PE(54Ok ْTu}L rTlC Nx+ 6 Z L@yԎmk]DPhCBā8*D#H8`F(LGL
^CxA4 Q?A'C20 (c AD IQ = aҽC̉d9P5D CPXDlq$.?L!C E5H CWC5Ch vE}yDd,JC
Z\Σ܊Uc_$/dRBQ2?@*P3 \Hs2f`>aNHa@u p![ ]L0A 8 h @ 0V)Ш 0??҈ h(m@(d
Hp
,"B
D) ,#Z*f#T~Y иl1V hJN4Bdx@]4LВr0LB`iF9~) X%9
K%p@ yd$h42B $3T ( VnV&|A[ɖ*Ɲé R
`т
Gx 0 ,!H@\A! H&GFU&=1P0P@ #ش'l KQ w #P, jUXRpE&HD|Pm)` wrMh$u$k @-DeI,HAKh\SG$!TJ 9HDUd Fq%p!%T +
L2dN:]OAY(-(q)Zp/#rt ASRP2dĶҍ~#k1L_4EH[U\@2uЁ
@, U5X@6H6n&HaD 1HxA 9"F'3@ ,Q '4`@UT~8l8( 0CM{Bh^&`>>od,c @Q41eD%V 9 F2J 8ͨFj#IVMZYI+8 6}Vc@d$xvTr4&&!` Hemf-o78JkQ\$1D?,`-lj-
U$ȁ @BZZ&XHWr# ; U`il*G
$h9m: U?ntaJ .˄*tc?S.XEHm w'jb
k EH 0@ aj0?J<@l~A;@!lD. L0 @܁~0F,B °B0D8x \08BahB
v}[H̘K1ѨbS Db\AB
X,$y(A6Xو5 )c "fd&5@vA X\#t3P107* [8 HEn,Іe
n$h#AН6(T\ [)E)n˒Bcmr"Э[V)+HQd_)Cp F>p2aШD ڰ: vAB~-b[_
9h \@\$x Dh
` a Sa}T &aP PArbU* m`!6Qc @Xt06Pyd 0fXf÷ uP
:$`'3C< C F %~SHyI6(8"FGRR'ۂ&gj!!6Hv2&Fr-ÒHH)F4tJf "hi<-mi&jtX u z gUhHfF !ԖNuaNO 'U G ma'hX pJnqtqp{rlRHp˧mRTrVU6^
`Q8q@` aPP6f!`Xh<p_o1mq
q~ P m8 @ fP )[] d $'p!~m}`wt kSpA iK}H qt kkP u Hj` ^x>()S2~Rb$xvGpv 2&hiA#8in.$i EB mgRB%0"@oh "0M?r$%hTf ?_pjo tlQfUkf!!j` F
nP]G \\` ap){d} [n@혛IX<0'o1X|0]0_l'7mi
na9
@ >` ` Q .
[|@ "E~*p!K0C Џmr,|7^btQwQ_5N:cn ~ 2yp @
|IP:pcrc p k
`|m,1Fʨ pm|H
l1x#IyrI0$ F^RP)$ ڨo Df@'-Bl qb BP$!! G,)Қʭ3p|3ByͰ(+tDlQw0 vt ` r ~ 1"QAJ8 a p Э kKwAy@|
!Spkm 40
npu ..0Uy
H \C@ m Q 6 C i.*lA0I oe r
ymmQp 7rq~mac d' n | mI :J20 GB8
B4Qp ` 0jkuqrq rQo/Ǚyy֏vkpqt$ Ɗnp * r' +gz:#2
ūoa)! KB Rk A q_[>9Hu /bKI Y
dP,.<
j Ffmx
O
۠p!Lŀ7Xsa@oќk9 \ɱ!&9pp
r*k{ Z,\P T@p sx[p Lt@ ̀Uɀ %1
=0 >4Of;{ 1pLnBa<lua Pcj`
yP
À0 PZCe7 ,`foнlѼ2&QPo1sT Jl#Fe
SPwۏm"rQuzzj"7K p M"9 G mivq~whl!n0OPl;nX'l76_HX$ 8p(Qp?dUT- HÍGn6:
>I @ G ! MH3)ܣ
7eˤ<#-nQ Lb{p N '\ y0 ְ ɝ*|o kPw ikw ˻ = ; v`%f zal1}P pʀQb s
w 2~p Ȩ.]lnaxЏ& pn"6\Jk j-K - ~Ee?B4 M@ pm1R+S$ K P"%F&ex!R}G? :3^V\zM (?@*YP Xp.@m-H f0mQk!l Zkѩlq!Th Zma `
˰װnq ߰`}H`
ō
@"-0
u0H\ Qx?p qR'p! ~ onϔ!ZarÄ{d; ~ $ i
IL0p9.p1'Q*~.e|Lka 0+!00Pr
j侘#O Bryq"`!*"P` 'Pm
amQ@] J]AS~K74 4@0 Rk Z02RKC Z bt9 ~am 6m-N OxN鬍ƴ00 p ɞ6W0xf> PY`nmp._nqekao1`P 3!j0
Ok!)Qc ݪJP 3<b"Z~>ł !-WI)UdK1eΤYM9udYX8AJGU6PI
*5D
0Nۊ
0cE Dp0kI)nA LAM$r`" 4$ iҒ%O\e̙5ogСE&]3O .)A\ DȦ %ӢM6me4S.I fufn$Rٵow_Hi",㞄SWi B
^@8xCAD`)+i+i'! CC1@e@ dPIT,leDZÏ2\ GB TrI& HFNr ʒܲD@ X8>8 ƒ`\O%[i2<L;K9O@U$
@2 4iÒ=@%NpE1] P@; " MQJCUuUV@ ! , H*\ȰÇ#*@@"@ @`pa A*4hҁKcʜI͛8sɳ$z
ZƂ
Atˌ* I
8 CԤ >-&dF$@&|۷pʝK_ɚ q"
˚*f3J`K fP8}ز]* XVӨS^[GL!+6?
2Av%Cҿ@Jy ABH>HzZ I G*9Uh4iË O^0*@+ h= _0#XАz L? lЀKTPdރjVއ ( 1 @} lk gA
?
)PG ѐFKH!QA( F9*@e8aH"Tp `{0=Ix']a 0 3tABfܡH <`*uB p
n
A
X
?TSXE88B$TD*AQG@`"SI$@A0 N%4B$
@(L-\2Z`ABRD1X&PT/NC?O$ P ,RI,u<DG pG$<- q}xb .\'K%<5\㉊dR,V&F,@%B.bU(T28r.d ". #/;H
T+ )aB ~@.h Hno?+"$],A!%#q/y2B@A $F.`!$n ?B+R
9Ar //X'H}AɌ| ($I,e0`J/%63X j(C$B\.P xG0&i&0!
j B
$G\ӦqS.JB .* y *q @&p#R <
a8\B L 'HCtAQAs2:1 p$HT9 $#8b#HAt-
GR"CG
X` -j"XD1؋"H@\ēh,g )PIh p(.ġ
;ZI&<ɘZB\`ʶ#c4@f
}kwC}/VA%Q6@%0?Jђ{ T8F9GK#pR(EW` 3XH qX][j/g ! 9tuӐJh%(H<.8Zz P 9X (X E pQq1#UA!(0@zS.6XC.KDl:7ǃшR hi`zLEKÉ$=PSH *CHO ,ܲ s $ 9XGy0 ب3l /?hǚpHAH L K@K ȉY R `L0C0