pax_global_header00006660000000000000000000000064146171610170014516gustar00rootroot0000000000000052 comment=10f56057677681f41e4d13a4929820c071d7215f naabu-2.3.1/000077500000000000000000000000001461716101700126075ustar00rootroot00000000000000naabu-2.3.1/.github/000077500000000000000000000000001461716101700141475ustar00rootroot00000000000000naabu-2.3.1/.github/ISSUE_TEMPLATE/000077500000000000000000000000001461716101700163325ustar00rootroot00000000000000naabu-2.3.1/.github/ISSUE_TEMPLATE/config.yml000066400000000000000000000010621461716101700203210ustar00rootroot00000000000000blank_issues_enabled: false contact_links: - name: Ask an question / advise on using naabu url: https://github.com/projectdiscovery/naabu/discussions/categories/q-a about: Ask a question or request support for using naabu - name: Share idea / feature to discuss for naabu url: https://github.com/projectdiscovery/naabu/discussions/categories/ideas about: Share idea / feature to discuss for naabu - name: Connect with PD Team (Discord) url: https://discord.gg/projectdiscovery about: Connect with PD Team for direct communicationnaabu-2.3.1/.github/ISSUE_TEMPLATE/feature_request.md000066400000000000000000000015701461716101700220620ustar00rootroot00000000000000--- name: Feature request about: Request feature to implement in this project labels: 'Type: Enhancement' --- ### Please describe your feature request: ### Describe the use case of this feature: naabu-2.3.1/.github/ISSUE_TEMPLATE/issue-report.md000066400000000000000000000023511461716101700213160ustar00rootroot00000000000000--- name: Issue report about: Create a report to help us to improve the project labels: 'Type: Bug' --- ### Naabu version: ### Current Behavior: ### Expected Behavior: ### Steps To Reproduce: ### Anything else: naabu-2.3.1/.github/dependabot.yml000066400000000000000000000022651461716101700170040ustar00rootroot00000000000000# To get started with Dependabot version updates, you'll need to specify which # package ecosystems to update and where the package manifests are located. # Please see the documentation for all configuration options: # https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates version: 2 updates: # Maintain dependencies for go modules - package-ecosystem: "gomod" directory: "v2/" schedule: interval: "weekly" target-branch: "dev" commit-message: prefix: "chore" include: "scope" labels: - "Type: Maintenance" allow: - dependency-name: "github.com/projectdiscovery/*" # Maintain dependencies for docker - package-ecosystem: "docker" directory: "/" schedule: interval: "weekly" target-branch: "dev" commit-message: prefix: "chore" include: "scope" labels: - "Type: Maintenance" # Maintain dependencies for GitHub Actions - package-ecosystem: "github-actions" directory: "/" schedule: interval: "weekly" target-branch: "dev" commit-message: prefix: "chore" include: "scope" labels: - "Type: Maintenance"naabu-2.3.1/.github/release.yml000066400000000000000000000005221461716101700163110ustar00rootroot00000000000000changelog: exclude: authors: - dependabot categories: - title: 🎉 New Features labels: - "Type: Enhancement" - title: 🐞 Bugs Fixes labels: - "Type: Bug" - title: 🔨 Maintenance labels: - "Type: Maintenance" - title: Other Changes labels: - "*"naabu-2.3.1/.github/stale.yml000066400000000000000000000014601461716101700160030ustar00rootroot00000000000000# Number of days of inactivity before an issue becomes stale daysUntilStale: 7 # Number of days of inactivity before a stale issue is closed daysUntilClose: 7 # Issues with these labels will never be considered stale # exemptLabels: # - pinned # - security # Only issues or pull requests with all of these labels are check if stale. onlyLabels: - "Status: Abandoned" - "Type: Question" # Label to use when marking as stale staleLabel: stale # Comment to post when marking an issue as stale. Set to `false` to disable markComment: > This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. # Comment to post when closing a stale issue. Set to `false` to disable closeComment: falsenaabu-2.3.1/.github/workflows/000077500000000000000000000000001461716101700162045ustar00rootroot00000000000000naabu-2.3.1/.github/workflows/build-test.yml000066400000000000000000000052011461716101700210010ustar00rootroot00000000000000name: 🔨 Build Test on: pull_request: paths: - '**.go' - '**.mod' workflow_dispatch: jobs: build-linux: runs-on: ubuntu-latest steps: - name: Check out code uses: actions/checkout@v3 - name: Set up Go uses: actions/setup-go@v4 with: go-version: 1.21.x - name: Install libpcap-dev run: sudo apt install libpcap-dev - name: Install nmap run: sudo apt install nmap - name: Build run: go build . working-directory: v2/cmd/naabu/ - name: Test run: go test -race ./... working-directory: v2/ - name: Integration Tests env: GH_ACTION: true run: bash run.sh working-directory: integration_tests/ - name: Race Condition Tests - Standard User run: | go run -race . -host scanme.sh working-directory: v2/cmd/naabu/ - name: Race Condition Tests - Root User run: | sudo go run -race . -host scanme.sh -Pn working-directory: v2/cmd/naabu/ build-mac: runs-on: macos-latest steps: - name: Set up Go uses: actions/setup-go@v4 with: go-version: 1.21.x - name: Check out code uses: actions/checkout@v3 - name: Install libpcap-dev run: brew install libpcap - name: Install nmap run: brew install nmap - name: Build run: go build . working-directory: v2/cmd/naabu/ - name: Test run: go test -race ./... working-directory: v2/ - name: Integration Tests env: GH_ACTION: true run: bash run.sh working-directory: integration_tests/ - name: Race Condition Tests - Standard User run: | go run -race . -host scanme.sh working-directory: v2/cmd/naabu/ - name: Race Condition Tests - Root User run: | sudo go run -race . -host scanme.sh -Pn working-directory: v2/cmd/naabu/ build-windows: runs-on: windows-latest steps: - name: Set up Go uses: actions/setup-go@v4 with: go-version: 1.21.x - name: Check out code uses: actions/checkout@v3 - name: Build run: go build . working-directory: v2/cmd/naabu/ - name: Test run: go test -race ./... working-directory: v2/ - name: Race Condition Tests # Known issue: https://github.com/golang/go/issues/46099 run: | # go run -race . -host scanme.sh # sudo go run -race . -host scanme.sh working-directory: v2/cmd/naabu/ naabu-2.3.1/.github/workflows/codeql-analysis.yml000066400000000000000000000016101461716101700220150ustar00rootroot00000000000000name: 🚨 CodeQL Analysis on: workflow_dispatch: pull_request: paths: - '**.go' - '**.mod' jobs: analyze: name: Analyze runs-on: ubuntu-latest permissions: actions: read contents: read security-events: write strategy: fail-fast: false matrix: language: [ 'go' ] # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ] steps: - name: Install libpcap-dev run: sudo apt install libpcap-dev - name: Checkout repository uses: actions/checkout@v3 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL uses: github/codeql-action/init@v2 with: languages: ${{ matrix.language }} - name: Autobuild uses: github/codeql-action/autobuild@v2 - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v2naabu-2.3.1/.github/workflows/dep-auto-merge.yml000066400000000000000000000010071461716101700215400ustar00rootroot00000000000000name: 🤖 dep auto merge on: pull_request: branches: - dev workflow_dispatch: permissions: pull-requests: write issues: write repository-projects: write jobs: automerge: runs-on: ubuntu-latest if: github.actor == 'dependabot[bot]' steps: - uses: actions/checkout@v3 with: token: ${{ secrets.DEPENDABOT_PAT }} - uses: ahmadnassri/action-dependabot-auto-merge@v2 with: github-token: ${{ secrets.DEPENDABOT_PAT }} target: allnaabu-2.3.1/.github/workflows/dockerhub-push.yml000066400000000000000000000021001461716101700216430ustar00rootroot00000000000000name: 🌥 Docker Push on: workflow_run: workflows: ["🎉 Release Binary"] types: - completed workflow_dispatch: jobs: docker: runs-on: ubuntu-latest-16-cores steps: - name: Checkout uses: actions/checkout@v3 - name: Get Github tag id: meta run: | curl --silent "https://api.github.com/repos/projectdiscovery/naabu/releases/latest" | jq -r .tag_name | xargs -I {} echo TAG={} >> $GITHUB_OUTPUT - name: Set up QEMU uses: docker/setup-qemu-action@v2 - name: Set up Docker Buildx uses: docker/setup-buildx-action@v2 - name: Login to DockerHub uses: docker/login-action@v2 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_TOKEN }} - name: Build and push uses: docker/build-push-action@v4 with: context: . platforms: linux/amd64,linux/arm64,linux/arm push: true tags: projectdiscovery/naabu:latest,projectdiscovery/naabu:${{ steps.meta.outputs.TAG }} naabu-2.3.1/.github/workflows/functional-test.yml000066400000000000000000000020241461716101700220440ustar00rootroot00000000000000name: 🧪 Functional Test on: pull_request: paths: - '**.go' - '**.mod' workflow_dispatch: jobs: functional: name: Functional Test runs-on: ${{ matrix.os }} strategy: matrix: os: [ubuntu-latest] # Todo: windows-latest, macOS-latest steps: - name: Set up Go uses: actions/setup-go@v4 with: go-version: 1.21.x - name: Check out code uses: actions/checkout@v3 - name: Install required packages (libpcap-dev, nmap, simplehttpserver) run: | sudo apt install libpcap-dev sudo apt install nmap go install -race github.com/projectdiscovery/simplehttpserver/cmd/simplehttpserver@latest - name: Run the simplehttpserver on 127.0.0.1:8000 run: | export PATH=$PATH:$(go env GOPATH)/bin simplehttpserver -listen 127.0.0.1:8000 & - name: Functional Tests run: | chmod +x run.sh bash run.sh working-directory: v2/cmd/functional-test naabu-2.3.1/.github/workflows/lint-test.yml000066400000000000000000000011421461716101700206500ustar00rootroot00000000000000name: 🙏🏻 Lint Test on: pull_request: paths: - '**.go' - '**.mod' workflow_dispatch: jobs: lint: name: Lint Test runs-on: ubuntu-latest steps: - name: Checkout code uses: actions/checkout@v3 - name: Set up Go uses: actions/setup-go@v4 with: go-version: 1.21.x - name: Install Dependences run: sudo apt install libpcap-dev - name: Run golangci-lint uses: golangci/golangci-lint-action@v3.6.0 with: version: latest args: --timeout 5m working-directory: v2/naabu-2.3.1/.github/workflows/release-binary.yml000066400000000000000000000037251461716101700216400ustar00rootroot00000000000000name: 🎉 Release Binary on: push: tags: - v* workflow_dispatch: jobs: build-mac: runs-on: macos-latest steps: - name: Code checkout uses: actions/checkout@v3 with: fetch-depth: 0 - name: Set up Go uses: actions/setup-go@v4 with: go-version: 1.21.x - name: Install Dependences run: brew install libpcap - name: Run GoReleaser uses: goreleaser/goreleaser-action@v4 with: version: latest args: release -f .goreleaser/mac.yml --rm-dist workdir: v2 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} build-linux: runs-on: ubuntu-latest-16-cores steps: - name: Code checkout uses: actions/checkout@v3 with: fetch-depth: 0 - name: Set up Go uses: actions/setup-go@v4 with: go-version: 1.21.x - name: Install Dependences run: sudo apt install libpcap-dev - name: Run GoReleaser uses: goreleaser/goreleaser-action@v4 with: version: latest args: release -f .goreleaser/linux.yml --rm-dist workdir: v2 env: GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" SLACK_WEBHOOK: "${{ secrets.RELEASE_SLACK_WEBHOOK }}" DISCORD_WEBHOOK_ID: "${{ secrets.DISCORD_WEBHOOK_ID }}" DISCORD_WEBHOOK_TOKEN: "${{ secrets.DISCORD_WEBHOOK_TOKEN }}" build-windows: runs-on: windows-latest-8-cores steps: - name: Code checkout uses: actions/checkout@v3 with: fetch-depth: 0 - name: Set up Go uses: actions/setup-go@v4 with: go-version: 1.21.x - name: Run GoReleaser uses: goreleaser/goreleaser-action@v4 with: version: latest args: release -f .goreleaser/windows.yml --rm-dist workdir: v2 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} naabu-2.3.1/.github/workflows/release-test.yml000066400000000000000000000032731461716101700213310ustar00rootroot00000000000000name: 🔨 Release Test on: pull_request: paths: - '**.go' - '**.mod' - '**.yml' workflow_dispatch: jobs: release-test-mac: runs-on: macos-latest steps: - name: "Check out code" uses: actions/checkout@v3 with: fetch-depth: 0 - name: Set up Go uses: actions/setup-go@v4 with: go-version: 1.21.x - name: Install Dependences run: brew install libpcap - name: release test uses: goreleaser/goreleaser-action@v4 with: args: "release --clean --snapshot -f .goreleaser/mac.yml" version: latest workdir: v2 release-test-linux: runs-on: ubuntu-latest-16-cores steps: - name: "Check out code" uses: actions/checkout@v3 with: fetch-depth: 0 - name: Set up Go uses: actions/setup-go@v4 with: go-version: 1.21.x - name: Install Dependences run: sudo apt install libpcap-dev - name: release test uses: goreleaser/goreleaser-action@v4 with: args: "release --clean --snapshot -f .goreleaser/linux.yml" version: latest workdir: v2 release-test-windows: runs-on: windows-latest-8-cores steps: - name: "Check out code" uses: actions/checkout@v3 with: fetch-depth: 0 - name: Set up Go uses: actions/setup-go@v4 with: go-version: 1.21.x - name: release test uses: goreleaser/goreleaser-action@v4 with: args: "release --clean --snapshot -f .goreleaser/windows.yml" version: latest workdir: v2naabu-2.3.1/.gitignore000066400000000000000000000003651461716101700146030ustar00rootroot00000000000000cmd/naabu/naabu* v2/cmd/naabu/naabu* vendor integration_tests/naabu integration_tests/integration-test v2/cmd/functional-test/naabu_dev v2/cmd/functional-test/functional-test v2/cmd/functional-test/naabu v2/cmd/functional-test/*.cfg .vscode distnaabu-2.3.1/Dockerfile000066400000000000000000000005201461716101700145760ustar00rootroot00000000000000# Build FROM golang:1.21.0-alpine AS builder RUN apk add build-base libpcap-dev WORKDIR /app COPY . /app WORKDIR /app/v2 RUN go mod download RUN go build ./cmd/naabu # Release FROM alpine:3.18.3 RUN apk add nmap libpcap-dev bind-tools ca-certificates nmap-scripts COPY --from=builder /app/v2/naabu /usr/local/bin/ ENTRYPOINT ["naabu"] naabu-2.3.1/LICENSE.md000066400000000000000000000020671461716101700142200ustar00rootroot00000000000000MIT License Copyright (c) 2021 ProjectDiscovery, Inc. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. naabu-2.3.1/README.md000066400000000000000000000371241461716101700140750ustar00rootroot00000000000000

naabu

Features • Installation • Usage • Running naabu • Config • NMAP integration • CDN/WAF Exclusion • Discord

Naabu is a port scanning tool written in Go that allows you to enumerate valid ports for hosts in a fast and reliable manner. It is a really simple tool that does fast SYN/CONNECT/UDP scans on the host/list of hosts and lists all ports that return a reply. # Features

naabu

- Fast And Simple **SYN/CONNECT/UDP** probe based scanning - Optimized for ease of use and **lightweight** on resources - **DNS** Port scan - **Automatic IP Deduplication** for DNS port scan - **IPv4/IPv6** Port scan (**experimental**) - **Passive** Port enumeration using Shodan [Internetdb](https://internetdb.shodan.io) - **Host Discovery** scan (**experimental**) - **NMAP** integration for service discovery - Multiple input support - **STDIN/HOST/IP/CIDR/ASN** - Multiple output format support - **JSON/TXT/STDOUT** # Usage ```sh naabu -h ``` This will display help for the tool. Here are all the switches it supports. ```yaml Usage: ./naabu [flags] INPUT: -host string[] hosts to scan ports for (comma-separated) -list, -l string list of hosts to scan ports (file) -exclude-hosts, -eh string hosts to exclude from the scan (comma-separated) -exclude-file, -ef string list of hosts to exclude from scan (file) PORT: -port, -p string ports to scan (80,443, 100-200) -top-ports, -tp string top ports to scan (default 100) [full,100,1000] -exclude-ports, -ep string ports to exclude from scan (comma-separated) -ports-file, -pf string list of ports to scan (file) -port-threshold, -pts int port threshold to skip port scan for the host -exclude-cdn, -ec skip full port scans for CDN/WAF (only scan for port 80,443) -display-cdn, -cdn display cdn in use RATE-LIMIT: -c int general internal worker threads (default 25) -rate int packets to send per second (default 1000) UPDATE: -up, -update update naabu to latest version -duc, -disable-update-check disable automatic naabu update check OUTPUT: -o, -output string file to write output to (optional) -j, -json write output in JSON lines format -csv write output in csv format CONFIGURATION: -config string path to the naabu configuration file (default $HOME/.config/naabu/config.yaml) -scan-all-ips, -sa scan all the IP's associated with DNS record -ip-version, -iv string[] ip version to scan of hostname (4,6) - (default 4) (default ["4"]) -scan-type, -s string type of port scan (SYN/CONNECT) (default "s") -source-ip string source ip and port (x.x.x.x:yyy) -interface-list, -il list available interfaces and public ip -interface, -i string network Interface to use for port scan -nmap invoke nmap scan on targets (nmap must be installed) - Deprecated -nmap-cli string nmap command to run on found results (example: -nmap-cli 'nmap -sV') -r string list of custom resolver dns resolution (comma separated or from file) -proxy string socks5 proxy (ip[:port] / fqdn[:port] -proxy-auth string socks5 proxy authentication (username:password) -resume resume scan using resume.cfg -stream stream mode (disables resume, nmap, verify, retries, shuffling, etc) -passive display passive open ports using shodan internetdb api -irt, -input-read-timeout value timeout on input read (default 3m0s) -no-stdin Disable Stdin processing HOST-DISCOVERY: -sn, -host-discovery Perform Only Host Discovery -Pn, -skip-host-discovery Skip Host discovery -ps, -probe-tcp-syn string[] TCP SYN Ping (host discovery needs to be enabled) -pa, -probe-tcp-ack string[] TCP ACK Ping (host discovery needs to be enabled) -pe, -probe-icmp-echo ICMP echo request Ping (host discovery needs to be enabled) -pp, -probe-icmp-timestamp ICMP timestamp request Ping (host discovery needs to be enabled) -pm, -probe-icmp-address-mask ICMP address mask request Ping (host discovery needs to be enabled) -arp, -arp-ping ARP ping (host discovery needs to be enabled) -nd, -nd-ping IPv6 Neighbor Discovery (host discovery needs to be enabled) -rev-ptr Reverse PTR lookup for input ips OPTIMIZATION: -retries int number of retries for the port scan (default 3) -timeout int millisecond to wait before timing out (default 1000) -warm-up-time int time in seconds between scan phases (default 2) -ping ping probes for verification of host -verify validate the ports again with TCP verification DEBUG: -health-check, -hc run diagnostic check up -debug display debugging information -verbose, -v display verbose output -no-color, -nc disable colors in CLI output -silent display only results in output -version display version of naabu -stats display stats of the running scan (deprecated) -si, -stats-interval int number of seconds to wait between showing a statistics update (deprecated) (default 5) -mp, -metrics-port int port to expose naabu metrics on (default 63636) ``` # Installation Instructions Download the ready to run [binary](https://github.com/projectdiscovery/naabu/releases/) / [docker](https://hub.docker.com/r/projectdiscovery/naabu) or install with GO ## Prerequisite > **Note**: before installing naabu, make sure to install `libpcap` library for packet capturing. To install libcap on **Linux**: `sudo apt install -y libpcap-dev`, on **Mac**: `brew install libpcap` ## Installing Naabu ```sh go install -v github.com/projectdiscovery/naabu/v2/cmd/naabu@latest ``` # Running Naabu To run the tool on a target, just use the following command. ```sh naabu -host hackerone.com ``` This will run the tool against hackerone.com. There are a number of configuration options that you can pass along with this command. The verbose switch `-v` can be used to display verbose information. ```console naabu -host hackerone.com __ ___ ___ ___ _/ / __ __ / _ \/ _ \/ _ \/ _ \/ // / /_//_/\_,_/\_,_/_.__/\_,_/ v2.0.3 projectdiscovery.io [WRN] Use with caution. You are responsible for your actions [WRN] Developers assume no liability and are not responsible for any misuse or damage. [INF] Running SYN scan with root privileges [INF] Found 4 ports on host hackerone.com (104.16.100.52) hackerone.com:80 hackerone.com:443 hackerone.com:8443 hackerone.com:8080 ``` The ports to scan for on the host can be specified via `-p` parameter (udp ports must be expressed as `u:port`). It takes nmap format ports and runs enumeration on them. ```sh naabu -p 80,443,21-23,u:53 -host hackerone.com ``` By default, the Naabu checks for nmap's `Top 100` ports. It supports the following in-built port lists - | Flag | Description | |-------------------|--------------------------------------| | `-top-ports 100` | Scan for nmap top **100** port | | `-top-ports 1000` | Scan for nmap top **1000** port | | `-p - ` | Scan for full ports from **1-65535** | You can also specify specific ports which you would like to exclude from the scan. ```sh naabu -p - -exclude-ports 80,443 ``` To run the naabu on a list of hosts, `-list` option can be used. ```sh naabu -list hosts.txt ``` To run the naabu on a ASN, AS input can be used. It takes the IP address available for given ASN and runs the enumeration on them. ```console echo AS14421 | naabu -p 80,443 216.101.17.249:80 216.101.17.249:443 216.101.17.248:443 216.101.17.252:443 216.101.17.251:80 216.101.17.251:443 216.101.17.250:443 216.101.17.250:80 ``` You can also get output in json format using `-json` switch. This switch saves the output in the JSON lines format. ```console naabu -host 104.16.99.52 -json {"ip":"104.16.99.52","port":443} {"ip":"104.16.99.52","port":80} ``` The ports discovered can be piped to other tools too. For example, you can pipe the ports discovered by naabu to [httpx](https://github.com/projectdiscovery/httpx) which will then find running http servers on the host. ```console echo hackerone.com | naabu -silent | httpx -silent http://hackerone.com:8443 http://hackerone.com:443 http://hackerone.com:8080 http://hackerone.com:80 ``` The speed can be controlled by changing the value of `rate` flag that represent the number of packets per second. Increasing it while processing hosts may lead to increased false-positive rates. So it is recommended to keep it to a reasonable amount. # IPv4 and IPv6 Naabu supports both IPv4 and IPv6. Both ranges can be piped together as input. If IPv6 is used, connectivity must be correctly configured, and the network interface must have an IPv6 address assigned (`inet6`) and a default gateway. ```console echo hackerone.com | dnsx -resp-only -a -aaaa -silent | naabu -p 80 -silent 104.16.99.52:80 104.16.100.52:80 2606:4700::6810:6434:80 2606:4700::6810:6334:80 ``` The option `-ip-version 6` makes the tool use IPv6 addresses while resolving domain names. ```console echo hackerone.com | ./naabu -p 80 -ip-version 6 __ ___ ___ ___ _/ / __ __ / _ \/ _ \/ _ \/ _ \/ // / /_//_/\_,_/\_,_/_.__/\_,_/ v2.0.8 projectdiscovery.io Use with caution. You are responsible for your actions Developers assume no liability and are not responsible for any misuse or damage. [INF] Running CONNECT scan with non root privileges [INF] Found 1 ports on host hackerone.com (2606:4700::6810:6334) hackerone.com:80 ``` To scan all the IPs of both version, `ip-version 4,6` can be used along with `-scan-all-ips` flag. ```console echo hackerone.com | ./naabu -iv 4,6 -sa -p 80 -silent [INF] Found 1 ports on host hackerone.com (104.16.100.52) hackerone.com:80 [INF] Found 1 ports on host hackerone.com (104.16.99.52) hackerone.com:80 [INF] Found 1 ports on host hackerone.com (2606:4700::6810:6334) hackerone.com:80 [INF] Found 1 ports on host hackerone.com (2606:4700::6810:6434) hackerone.com:80 ``` # Host Discovery Naabu optionally supports multiple options to perform host discovery, as outlined below. Host discovery is completed automatically before beginning a connect/syn scan if the process has enough privileges. `-sn` flag instructs the toll to perform host discovery only. `-Pn` flag skips the host discovery phase. Host discovery is completed using multiple internal methods; one can specify the desired approach to perform host discovery by setting available options. Available options to perform host discovery: - **ARP** ping (`-arp`) - TCP **SYN** ping (`-ps 80`) - TCP **ACK** ping (`-pa 443`) - ICMP **echo** ping (`-pe`) - ICMP **timestamp** ping (`-pp`) - ICMP **address mask** ping (`-pm`) - IPv6 **neighbor discovery** (`-nd`) # Configuration file Naabu supports config file as default located at `$HOME/.config/naabu/config.yaml`, It allows you to define any flag in the config file and set default values to include for all scans. # Nmap integration We have integrated nmap support for service discovery or any additional scans supported by nmap on the found results by Naabu, make sure you have `nmap` installed to use this feature. To use,`nmap-cli` flag can be used followed by nmap command, for example:- ```console echo hackerone.com | naabu -nmap-cli 'nmap -sV -oX nmap-output' __ ___ ___ ___ _/ / __ __ / _ \/ _ \/ _ \/ _ \/ // / /_//_/\_,_/\_,_/_.__/\_,_/ v2.0.0 projectdiscovery.io [WRN] Use with caution. You are responsible for your actions [WRN] Developers assume no liability and are not responsible for any misuse or damage. [INF] Running TCP/ICMP/SYN scan with root privileges [INF] Found 4 ports on host hackerone.com (104.16.99.52) hackerone.com:443 hackerone.com:80 hackerone.com:8443 hackerone.com:8080 [INF] Running nmap command: nmap -sV -p 80,8443,8080,443 104.16.99.52 Starting Nmap 7.01 ( https://nmap.org ) at 2020-09-23 05:02 UTC Nmap scan report for 104.16.99.52 Host is up (0.0021s latency). PORT STATE SERVICE VERSION 80/tcp open http cloudflare 443/tcp open ssl/https cloudflare 8080/tcp open http-proxy cloudflare 8443/tcp open ssl/https-alt cloudflare ``` # CDN/WAF Exclusion Naabu also supports excluding CDN/WAF IPs being port scanned. If used, only `80` and `443` ports get scanned for those IPs. This feature can be enabled by using `exclude-cdn` flag. Currently `cloudflare`, `akamai`, `incapsula` and `sucuri` IPs are supported for exclusions. # Scan Status Naabu exposes json scan info on a local port bound to localhost at `http://localhost:63636/metrics` (the port can be changed via the `-metrics-port` flag) # Using naabu as library The following sample program scan the port `80` of `scanme.sh`. The results are returned via the `OnResult` callback: ```go package main import ( "log" "github.com/projectdiscovery/goflags" "github.com/projectdiscovery/naabu/v2/pkg/result" "github.com/projectdiscovery/naabu/v2/pkg/runner" ) func main() { options := runner.Options{ Host: goflags.StringSlice{"scanme.sh"}, ScanType: "s", OnResult: func(hr *result.HostResult) { log.Println(hr.Host, hr.Ports) }, Ports: "80", } naabuRunner, err := runner.NewRunner(&options) if err != nil { log.Fatal(err) } defer naabuRunner.Close() naabuRunner.RunEnumeration() } ``` # Notes - Naabu allows arbitrary binary execution as a feature to support [nmap integration](https://github.com/projectdiscovery/naabu#nmap-integration). - Naabu is designed to scan ports on multiple hosts / mass port scanning. - As default naabu is configured with a assumption that you are running it from VPS. - We suggest tuning the flags / rate if running naabu from local system. - For best results, run naabu as **root** user. ----- Naabu is made with 🖤 by the [projectdiscovery](https://projectdiscovery.io) team. Community contributions have made the project what it is. See the **[Thanks.md](https://github.com/projectdiscovery/naabu/blob/master/THANKS.md)** file for more details. naabu-2.3.1/THANKS.md000066400000000000000000000005631461716101700141250ustar00rootroot00000000000000# Thanks 1. [Furious](https://github.com/liamg/furious) @liamg - Actual project from where the idea was taken. 2. [Nmap](https://nmap.org/) - For top port lists and being an amazing tool to infosec community. 3. [Masscan](https://github.com/robertdavidgraham/masscan) - Awesome and fast scanning tool 4. [Zmap](https://zmap.io/) - Highly optimized single port scan tool naabu-2.3.1/integration_tests/000077500000000000000000000000001461716101700163545ustar00rootroot00000000000000naabu-2.3.1/integration_tests/run.sh000077500000000000000000000006621461716101700175230ustar00rootroot00000000000000#!/bin/bash echo "::group::Build naabu" rm integration-test naabu 2>/dev/null cd ../v2/cmd/naabu go build mv naabu ../../../integration_tests/naabu echo "::endgroup::" echo "::group::Build naabu integration-test" cd ../integration-test go build mv integration-test ../../../integration_tests/integration-test cd ../../../integration_tests echo "::endgroup::" sudo ./integration-test if [ $? -eq 0 ] then exit 0 else exit 1 fi naabu-2.3.1/static/000077500000000000000000000000001461716101700140765ustar00rootroot00000000000000naabu-2.3.1/static/naabu-logo.png000066400000000000000000000077411461716101700166410ustar00rootroot00000000000000PNG  IHDR|ZgPLTEҚtRNS  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~gKbKGD IDATxy|ߓD" )RKIrIoA-&\Eo^P[ܨ%Q[RTB U*-K{$̧'9{}ߙsM>>w~efy=}#rj%pUpե mԲ r դlCh=9T|kITApU1gQ xbVsU,_MAI#JXR%A% 5 JDNOɗ05u}(f4T˙}`u*99Ҫ)oQj8@BUn=|7aN=X|cn libA;oTrn0Kg57,,ۄ'^W*GkfEBγrjq7J[ۏ~ Ӊ,{czSL յnv;n/<(T6w= S,;xJC|cϢyiwRôwʨ&ټ;b%ұӸĔ z3V'(@RA] E#oJ_?ރ!tQlC8*w+.4״";5Bfx5p11̛e Nic,kc\ڇ,'R3iVYFI}Z^2 7[Wlr:2{yOZBQ?a Қ4ڏCPk -b[-\mWJm`2'"*}3>GQg
  • s,0 V=o0>Y IwbP`4|].n⯼n\Q.컜A /8?-4<Dxl%>Wп!:'?nyUH$P!*hubY'oDzؑt{Ko !I AiD~ BId&\g5gw_JB nˏ|Mjγ6P>h7 NQi>TS˘`Owgzǝ$+ :^rgXxxcf8<֝./e\4Ȩqavieh@ob/_V n t4O~~ösfU= kJ aS r[@K+'v IU# ly%M ,h5B֫fh$(=M !eAւe ? ~a;KE_"Bl6>joXo%U?zU{1wt hCEPM熿H.t dpXP$$z Y1vw46[jS#˃֓$-d%J-Ub? hf%T\MBǭτ#:ٝP؄L(̑~:<;!vKOO>/rcI>02ߓݐ_;gcyI!}(, <[o/R(gK"3S5toQ g K21&[BdO!"V_X3 _a\j:/O.۔=#]w(? Uū7VS&&zlwʂ{𝳭 e$<3T_ug1b_QǢU$/wDuI nKF/*oo9u}-u1-MQfLT$q`j5#U?*}T}(<.~<#A*_`)|.oc/jQ׵(# `G:hd(Ÿ~#/J,h!.lVCPxo;-[Dza_!lA'q%$;\Ty3Q7rѦSKEHǰGPxaD] / 뎿I^gN$xB$ܨm(1w-")lqO,#͍ 4S+VRd#h뛉h >"_" *XŸ ;%h84K §=uV1CDvuuaNڣj)7)e_|e%z.:meǖ8.W0+ՔܰYi||NzF?#ð%)~!:}g`:`X`<|X c|/c z*߽A$ډ@h:9153=}c|d' ־RqGv"wp7E_pJkH:' r*+X, 9q{$24D'HGoE_8sniEg/~X|B᱀Yo󔺐a)XͷrF~`Dv"z.PNͻQzNҠژά\{? ?g@28s]I_kBd[fzܿ/!ܛta[2!/!pѫ|,dqЅA!| >٢^|ϗRVw5]g)\b#Ec9lـAA)f%۶?ನ-KdI $1%Iڠ.)=%u$mPg[[4&'i:AgRYOWNuҽs ߍAlot+>ڢ@[[4ʃOylIENDB`naabu-2.3.1/static/naabu-run.png000066400000000000000000013520371461716101700165070ustar00rootroot00000000000000PNG  IHDR,l.I=gAMA a@IDATxwvEy;{ 4Al`5h{c{hlhb%{;Eiz}^ܳf=/9yffsOY3kZO)03<03<03<03<03<03<03<03<03<03<03<03<03<03<03<03<03<03<03<03<03<03\#jiiic'~lnKewGrgfy`恙fy`恙f%Juuч|yqY4aE=cGkrt^kbMsB,;3<03<03 ؾj/npU;x^{-~G^\i2uO?x~ /_ؼ7.ںzU֮ۖ߼}Tgy`恙fy`恙fyX۾vaaq-Vm_u֍o[y׭>}qEK׿>e-/ƱKyZ!VEKe{{,bY>ϋt,."Cع2?rR­ 븛'NԨlg# pQ y:3:TW!f^b-\eNzC3'SZ-4 {xyqaS~gP)v7F<^pF,r:q굥,. l^j' ?j `sYMwR]DԋIѨia-l.JLtWpQٚK Hu2'g(*(m1}Wukޖz\Ȼ{UVd,F6by:;F 1(d<܌VC?PTl]]3h[0ЮyU#y:Kɕ$7c`6wFwJ|' ig`+_s)p,)ªK8fLnaL> gJB:ֱ!gr/YIC>!\I n=u;dM6驼әԳݶ\b*pB+:.# ;`X%\FDٝOI L@=mhL!$Ɛ̘ F\1bp2z )|нrJZr%:3F 6ŸǘXcmS)?1u.Q*?1^!eZH#d&:wc9^TE0: h$RФN3/ʭ :5xJpCT%FfNQ&С[d tˀu8#4EǜϱЈ${n~Uڮo=t~na͗ϭxŖ]ozG.tXP^H&U;/]z29U#'))/nBKI #vlfUp&.u6[W:WLQB;_u'.(L @H'ᢴ΄K>XڠddbneřӴL(s~%z1Jۮ@(5.hVrh#L1$shhқoD(x$XābBlu٠K@g^ҀN :rB.&>hU۬$tq2q(r(rDfG%؜۰0ѡ|BXp|R~Tef a]<iTwN~`BXUk]UNr|{h4aDLΔ[F<㋺SV\ך0{dGfPTiyv?|աeO&R%@#2$!ez*(WU,Hp)NVT&}UizQQH֐Id~EZNJ!C:i]eAմ Ccz+䤤|9;Qc!A`x:N>bH V ("0 0]$#q.$>(k,Fւ׫,<6Fg|K {!P]ê._G|EY-Q2 o*; ªlYXbҶ+oy׶͝}n|u_rCb T╫rPݮ s!NP ᠬpwp,9X}4(Z^zfRwiƠFr\?|F߁(, zkV`йD(!|P.N6iF_|bDP F%25اc6"1-Oq蔙$:"C,*,¤ DQ>*Igi7̴*m:``SsBgu P,@M\:eɦ iI-U#&CsθCG"O4kbp\˲7 C+ZBEt8B8ɼ:K S ]12TbT ZA:@Q&PF ni<. r0:eW(F'~v hLYe5Wm\5W6.l-Wns\|klIKѷ.;k`{YYaײzzWRFRiC^|d0"ۡQ!0F{ք.RI)gd4B+Y5,jx,t%lt\ܢ#*ׅeFta*1aa KMla¶FSQO4K҄RBXΕ>nݦdKa]Z N(o(oe܈wY& 336iP4e㊈jYg^~ez<4\Q7}Ay_ցדkPM{Mm )&5-k&f(g2JFL&9),MGM',eze`# 1}:? 02i\NL> M/Lg<;\c}:U ePkND.sJ7dqؔp`cAy4 ~S94(q"¨B:5uyOuEÀn6,bFDv2Va Hـ?}}*P)GLhW9lp`n.p S<^[4mn mh;+l/YXiWj }6iwQ[M^$QjQtDC+jH-hI0語v@U6`R ye݉l E^g]9-Txi!yHwJmsb _+r:=,*!<6>@SIk;pY6kOw qJSYWAÀ.`]2# "T/`).<?B].R9 m"QM7Y&i󈍬Zș*d֦qMi=Wz"~^`Nf)랎 T.73~r죚qmkŒnpx;m浰#  Wr̠T(]a&m ߯IiҒ bWIҞ+vh*o"L}ʓlNtIk3#D]s''^zFy46đ},iwz V^Plf2O1dy&^)7Lgq)`<埥Y M7M6)ޢIvҸ喷8Lb5߼lޤ2"2_/cYi ȵY!0HS6 O~۲91ҩn62gA~\ 4]hY5tIJk:׾VMV~̔#!p|J.ΚA=+ӎqfl>{%d˶etQi{GzN;,fS˔ߊU@ $-Ժ|[pbƃ>1r[RfdQҮ0v S]lM'8*BW:LUAX4@;\B01(F<:$0Ҵ8eT]kfOhd N1)NH'W2M}=9gcVK4ہḅtFNWMˀ 7B;4ɓ>7ew8e%Rp+ҼWIUw<†+WopenVm\jl[}L,Yŵ`eD^CɼNVprڪhn4pɉ*@_^͖1k˽.9=<*{y-ߕ߬o{v# U'Q8+|8V4i"kF>\`ӮR{wީ[<,E/߶ΟyKktfjFEV{߯_W<\pڨ,ŹIN fw:[l.=卯yiE*NBtha;7 K'MZ&fHN;+ yTXkBfȿWl=Ѿ1+] cnTta[UX?.o{l,?Ѻ?i3bgH./JjM` 榳a#U I^kܙpܤl SV #4rouhsڞA8HsD?ȶE1Ws6P[^ruU0N)8GJS&)wlo~)ۘY8!. 껟]^ȄAlk^? Gl-3da&5j7Qeȥ ^p{nk""+[jb+5d5Iֳ:)= =~jZ@qx"-QWHͨS)'Ңkc 9`<:(Ye0y7躺5Zq)ql6043$?pݘ(H%ge$OjKIK0dE?Sk䃉?rMnX*@ϭeO%.|Pu]ӟrnӂf9 S͛5;֬Y]W}ңUg=s^],yTJzreV3td &6]gl^<]VY%aڢОYp |E>iyEn%&=9$]۶!3/[y´6*E҃lӖO5%/(<:UMqذf-TW.|үS#Ne)6=ir=ؔ-viY>w}[m@m6`cDH\طJwlmPlȈyl&՗lM$7^$Cvy<ʟp S^RnR!&/lFO}7m}0*+p;%&}h[-[Y ʁ}i{#cF_MM2Qq*d46]L^D?dJe\ C@maiCd'&yLud> ~3 'LON$_ƲilC3z[G9|`s[)k>&mڤ)Z:z&=_`{WrM<>MC^+m0Q5j&ܦE<_?2)hlmJasriV] yI6SdB^9F?卪 3z< `) Jj9Ccg7J:h 9 AτN!g+$ $9'[25⩔+YZ[c8(MzqҰ+z$y'Qñ<$[*2ԩ g(-y\/3N:`G7A6|79@?7-j'NW hraAOXVinnK. w^ZڼօuZ]\M btJ]Zrŗ_rC.rP9ߔ_V)9>w9̳I'JkD6Z|>s~WN˂.Iށ&7>y[}L[خ'[`KXy{[y+_GC0ڰar;Fr~V6nwy?*wm]˓N؏|_,k׮)kX`? }1qZjAm]|2ėκSe}r~u+Jϗ=v߭\xE_4l%Ξ4o{Dre۶U׍oxpQR8sjQ/s;SYgF &}m]w-GY{RH:B_%Jkʡ7Q9sU`.]E<1W;>֯_']?. Q&<폔ϮUNSO/>&vpA9_y [VG\ʳWK%,˸-},wi}QkZE˥_XV:nXM~s~[VYll)xʼn,^xu%Ѕ#E袋22?:B^ɖ딃ry/}^9Nթn戲:zeZOvǗw㭥o窫6z!M b-{YN)b5i H0> npPUWѷO*\;p6zYvQ<3ʯUF޺m]]᠃(?"#+a l𜲪eV-=ؒijǨW&+SVn_҈8j|"ϑ-H 㒵uMWo))& Iӷ)}YbodAG(M97y{ &O{gByGO[ Fmn3 VX=7i-k4+"P^XZeAOQeݮЄy’c^Vo[ܼjqn>՟Q&$}P^+/|CUuW/G>F=moy+{.G?7[*4T/y??{&H~w)Ur޳|Ǖ4W]_v-hxeyݛY>ykh[^ޣ@ y=LS~yj9#~729NГ뗷 CW>ʫ_{bP `G=<UWo}燞q:ݲmK[4^㡀+d~k'?lЖW9ۿ쩉—O%5Dgy)v ˩= ,]z׿Z Η]w٥\KϞW~&7*=dQnӟ}Wے^Q}!7AWYr tG~K9-yw+{У]O<_~_jadD W߸i(Xp|oM4^ OwݲXy_P|ۗ?e_w˻.^ZP_E]wzROQ٨-WЖ;jkWZdm-8cf38U<o-o|݋>-;gO~~!ڪH;] 6OyKv׬YAOy-:Q?OV?-|?*dyCw{y}ȓ[ʞ9N,?]O~#~We7=7_wK~L<QsV-oyX\<_[Ηַkv0YujQG߯ϔn̈́=-iwo&\7}.w+tT-`nvʯnD\UC~o?yƸUL jD:/&0)v6\FV_M=(+RuP&ߕ #ؒ& b:)Tt%.W+Yˀw/4>y#Ștt^&/#Yv;:Ki:g9Ωdj6ej_K+PLo2BkAX㘼 D mмj-O`=^'+ ;UL&IabkNM ;M'7 ж,]mH4Wcs8'M+!m4$$xGJc+>rldR`r;(i e H ST+q/mVz- 8)ZoStZ+x:APNDNi&q.o)HQ9Yd-V9&zXe|q r2 *tݹ.2)Ik $u OscS#A[7-mظJ5V-mٶzaq˜v-MʹVKs>aiNVtg|J y#c5Q{M;#,7|G[=^ w'7|$d'Lq;g?oU.mk/\n' ,xjrG>͗Vktx9@w=wl/~cGxN/}V^g>xLwx)~VGܬu[׿=OyڲzOZ;_1wY<]pp /xMy )ʳ_ZUjࢴyRu-nZ^󆷗W]|;m{ZIg[g;[iQ/~Ãg]c/(zM/,TzqT'|F~M.L缍IGOxa=u5i;(䜧RL/JsJk:Y3O gd=D( ${Nx=! +ʷc{N:xrU=nYdzu~_dw'(ANYZhWPE맚muo|qֹw < >ؤr,wsO|3,m9^zl2 ש|_S\;6lP.a7;\OɃY|?OOز׼.g]]=׾iڞmUTUW]UՄ$m?xezAQp7hq ē~Yz[RӢA+#ֵݯ&-wxp?]5ۛo{C$_-W5.h8ZP+;ZhxBd@©Ѫ)[ ?ozgG%c]ui|'i~w媍Z-*ilS,Tg߯菵p#z;nwo:630g3eۘmu؎D +^g(:-ԘTjakk z Ļ{h~ ٹѶ`'f<S?/+O-y{ݥH} /*7WZ$]:}S}eW׽]ZZޣVu=G_jw>_S-NZ.^-n|{ǹ|QjĖϽ*{2\l,rnxOOb cן?>(oko~D߼sFe'l49a)l&(AQXTVP \DN[p' {r1_b< 0A32q)?qn#1)V c<"8+]3fp8%m#;5/߲0󖹲2MI.=ӶuV޳_P4kaې3NK#+jk/:z0hyYBϿE\Jܒ#&Nk$kK p՝kiϻT$01z#BwX.6*_;s~?MmyγVlgM,|K`V[=I^.8?(~]Z׺|7?&ںov_K6Yca;^0(G׻ ~39TOsb"3q4T[^,I >׹Nַ?*kpdSʄYg'X\CI k :UǂkasI B]ebbv^`g=1OVGw5e~~K󦃍m{1t+D)[(m|=jK-nvӲ]Ow g+8xEIf(zrsι-? .V-^V?1B_Է}ZtjQ{YzwLO@`z1flyPR\((2D #x!N`2NU-4}TiL+s:$[z;AYs\ Jc3FWZ Ɖ4ti4`bG'$.rq|O!f~J#Y/9)wQu9A'`;J nY]ޢLsc|[1ZUe(TqÇ r&cCVI5ZLRO!!?>W,cAeK`UMӛ4xk"B߸Q)9\7 =e@YX4b!TNۆTBz|qeQ/oߦ_T:-`Py?m~iNڐ:0g~Tc]GXɋ/ǵ|<%4?/n!sY|λLB5Fl֝X>䉂AB h!0oweVNf/i8E~ޡEZ,]UrqwzVKy|[&1 ]* jTL\/r̳_zԻ+}^e+X{|hkӋקht|Y K^| C' '_§h'=l}@yfG!e^s^kY/ͪAUC_BՀvGΉ*F=8-O{<@FO0zgV=ix5U# 0i;Ow1ߩO+O;[Wy>*\/*!]hOxI[hK,߭^aM"tѾE3QEl#B_?@IDAT U|+[ʘ!dvwԾ]/|D0ye{L3Eo?ϡl}w;x-R,sű%XЏ+Z>2Rlp)OJZ}ԀZaf/~]O!W'w񑉬[yTuW-86Wo R۽Bz-Q"L>ݡT~~hOmq?9A7ɰ3qm}駔,A?@>i!Ӎ1(4zY,@#Ow|.H |Фʛٕ sl,<~N7VZx+ӌc\IƎp+1MhMaD| Yr+Ғj  i>=@NŒSt1 gH= Ie/yh5Lpꁱ>4QSqW1Fp=F$k(A\ "iE\gL7΅n;t*7pzDSqD+tZ Xvؖ Op2M=)7yWqr1Qw}v_\U[~U; ޏN'>t򙏿WOlq*TS^<.w=K^FO~qȍ p~~/Y9ןE޷KH]v&{O[iڛWm~a$/Wxo}ۿ*/Ӌ_K]Tw*7M=j%rcٕ<`r8gj+K\}]ghiґIخ؋V2|{>T^8ǞT l-R>)"}{V-H/-jR;A1)װ |׾s6*Rl0*qvǓc|rڙzZs9Ogw|1zzE oxrٿT2бPi{y_YNUڊfaӂT Qſɧi;w?ӏyr~kgg} -ļlM^7z+˓h}je|}:뗧?Q:GReZ|A_;c'Nȓy^(~(/~3 [/?w6w?>K?]nusrg:7WRv#+_R`Vߨwh?Eukw,fO>-H^'~.X=oW]{K_y?^7 йH}9, i6Zq VHWve D~gɿXyx3; UJ\&5 a,LƶPr>a\$xgaf]\t !`"֡E%0 & o"4aRW2C #٣LЬIl֣I!}A nHa@uF`fOV-ʁn/' .㕧5iCnhNyּ&ﳤl^F" K˸1DMiK XAEHXN r~7l$:ю2}]d>+A&`jWW@S@2ݐ3&kG9ОҪ!-喇N1/}K_S+WLF>]ʫYP쩧j/49Cn~{wjN WˮyG>;G8͖^Z\P^B?ÿAbx#ݵ?SOnzHDQo`k!yX~Ls!;&t룎oܭ#X%MtPhs6,g+ʎy]v-&߉On.N{<ha|*b!'(j>=o zp;F\-NS [L} 51]gK~:'q.=A~=}Rߤ^m@]`'ӧ/+?G(r "^&l{}ꁉ:_o;HﲜvljE#7InP~>BL|]Xh`DT~(`qpG釖/_Km}bSZO$nEɝFјM'u`(w rnW& g 0HiHO i7lF;L.5$Q4^!ʕpP+T@HA@:;(JuC׾2`ylyDDUǤkv\8Mas-aڦq八]nn6^v+/.V0X uCSd, Mѐ4iLVi"K|җ}l^ܖBcaR틼*.MaAĆ|v~zvui;Ȗ#tc-zOfݺՎ]곻|yLjw샏'?9ݲ#십f; Bl~zX hUږMZwt,la;rg(bz^8ed8m5b7$ɼ V/HD._B*!B `fRKЙ ~^~ -}(dhҪEʅ]?_<0̋_-ĞȢ2K]ړ!@#z/?[Џ_]* [B~Ls$Y42E=49vﱄ@AfC@`2;%n?CK9{J ?Ie>̂VI4'mwTy2C?e;ZM[cY|S ٗGbĠw.)W{W MыL hAςkjQH?aO 6G9CНIm.ouT{E~ŽdFb?wэ BYi:غV@gn0 2-S-Jy Y!8|`Kةqp lSg )יO*; bk|"t ?)z0vT9釖6MBz$0 égR7>kM* uuiTmjȤN 6O:SCUmu Wj궄WDdĹī*:wY:u~_e(K/Wr!/+}D51-({ fn<5r_krF.a_R !MiOY yn5-}GJcdzjCk l"yn7~2#껪 isU psj \7TUBmߝ3qd8yp@.WŌ,^K_qyx(Ʉ dN8Pu/ 8"$U;jYa'XN!>&|| FsXotn&<@5J[N{ Ee%} \HOl#<hC&ԾL(!iI0 $;*20چhX4Sb,(R ѵxjʪȿ$.bqE݃àL["h8^L♍ž:BUi6}[XXgDdIؔ I]C_ Tƙ幙ї-Oԏ: 61fA2a񢾨'nš <w[c"P3+&EH1pwW_NNIfɍ }>IXAQ$6AcnD}5)hbg 'w@SC֐bG{a gжMU1({CUXN-t3^ Ȫ^btHP`b .c-ސjܢ4 L^c+<:Pw*}n '*N5@D?kvXowGM\K鴱QG"x6ń=\\Tt$g`ا<] C\| #IO sO6Y'bHh ^Z};HDi)E4 Rɓ&X-"4-A]sHI@gXE;D1ɸp6QvHg.eŠȴ'M&ո,E)*2#۞.N:9u.zT**ūu[oK3%ݕs y00-Vqȍ-#.ኵ3a8ה#L=8M[M7u+&G H& l.RW `^QV24JfO*-c{Aa!6Y |Αhr)EK=# Ó%:i>M_8\x,B NU{b, nDTTjd>݌ :Bvt]2ht@E^ܡZOA)IGGp9}+YOe悫cG x'sZ @ˬDN6y;F5T>%/Z)pQ i!&uf D㛲Ї9w=3 S:dKݵLd MnŢ=^,1ys=P5; [ڑz G>Rrl]..= ".#`W4x2駤SGmĮ #oL6%I}4t1O$9:r+a`:Sz}K~9#C'/jґ:dLIrͱuX2devը q Y <ڀ[kaKHAAf!1I6-ϔl+}O*lgʻ0I‘/,8/+zރo y7.aB!]G&BC%7&)Еe$JU( ز nK{8q6'Í5_l ^6dq7H\J͓MD?°P̵N"U7.yjcud%Zw+}9ŲT] M'< Y(7kLaphx|,ti+ojɞoAˆsI/S)jeWIe[AI}1zc`%ڣ8܎oŅ1^004B?̞ llCŒn(5ud"‚qїKLkRFӎ:5lS^e@d{+rz<2 :80U(7~!t hZ&G=W -_9]!c m !mR?͒BFO:O#lHGY{$kc2ouQvj)_S8ՕhMIM=Wy&Է?^D1eM>u@[;x 5 D Wee`tr^5 <`pVAl8Sa&]'ɂ&ݗ.l)b&j{;i}IDiAb-H5$OI Npp+auL71*棧$m#RB0b&ۈ,Z^5MgeztiNd"8NBjp.:HNkL+#4(c>U4غCBAuSG&Qĵ<j$D [8<)l}6_Pٓ\c4,klDqmDJخ t"70lz,A&#p(0q6*'bc $XIN U;&>'t5Y*-cSN,<Pin;3* z W^< V0"7hrɶSqjmt _CFܧHT"{Tȸ\ ZE1QQ7xNEj4 Ck r"Tth2ei9[Veʁ\@KǗ;JgG&((YRk;1۟7w;sF1SC~]!=@ud\˜S_JVlrYd7m#q9m;p:@CUN5(10e_4dIs.W[G6m \H&ʢhEPJi DO^{#7bK^i+M/!Q+VqJ滓P8[ACt'IȤٙh \ JR(Ff >Q^-*kۅ" tay,.+/akvZ,t9#4A8Y1IDjL"h1(q:G|8Mh˅G+le D`Ҏxr[6\ |d͈0Lqsj \PI'"^[@%# FV.T&dwׁj b#+tC'O5*^"M)dKPa5|wv'DXUʵ^hyaMhjB|&r$8A6z*׬S^;6E'?AX>\Vx0=U_\,w OBG*?o)NOf`W U<.(B_糓s7S4R1 h>qY#!dSX3}j^O&eL2B'ӢTUiq 4⣦F2( F^iЕHA!4p"k %HqOU;1ܢ IN,&TnC[:mt5q_PY6lWh&CXL7#mN- ^o@*0{lzaM$ Y5eӐA+`ӆ47mO:vV#/I1F(Y4GH[#q&m1'd? ]|$jR9L?/Y)N:헲98?']G3u%U.2Y8!5dv@<=I3>Rw;c ' Dp.]x ,̃ ٍW yzg_ւ|dwz9ܓ,Ղ6'սpgǴl@%P'5uh;"Ti7ppRpkzKY=ME edK/&('d;q1LrXuNMO:KmrEt4>IˆQ)PGq3S QP @:&Kr*ΰ(ZWk#JIA?`ףFIڥ(t"d5#}قS*/}lNl%oqk~֎l.frq#?iA ڧ'$/8𰶤4}d!zZߙg9tgӍ9Gl+nRR J?Gp-jW4h81YF `TТJvA@ZJy7c"fsLwE C(xYo/ ߴie۪z|ȱ{d `}r$jhu[6Kb_vA9T1FT^ K}9:g`dJHpR%}&žMǷ&\Tw|o'C~/y\Mٱc< qb;Z~B#NZxNIC▍ʂȆϼV;f c1<}e⏗,zdzQYż'f"GJ.eYcx6 \hN%mu'rAC-_@uMzqLjFR|\}q;a5ךœ*_gzoqC43Lk_F&栫;'6"6ߟh5@%J8fm? .脒Kml|t/0H#뭪wjp`}[zjʥ_RlRgcr{E@O rWV4 ɩ 8~s̻mu ֹpiݶoSf&Rr0}gf36%-{}JYgO$- Gy>FNXI,+!E9=㾘N' mq[?#JOYgB99y' xs _NnqH q?ʽ!D=+|s`Am ~kG Wge^9c vfy=V{dp﫱Jjg<2gݗ֠s\qޏubRoc9yי?ak/DtٞjtJ5n8r7n-qg^~SFg$FWYFN3fd^JlM(wy( ? qKhjhxCІ=V{B#\G g)+>u)uP/~:y:Bm37*Tĭ=E*Nz?V~#;vH2 Q75A~ΐϮ&ɦ@M;G󋄿&PL ˯^X|?55>Sŧ=z˜Q! s\i;,m%G^V&L+`c(E"Z+ /rShu'NVڈq-C/*rz-FvI-%[w= ۅq.Yw"jc=-uf}cAzlf1+Jl-%cfF%Յl*iڎ!]lɽ1M3w)Pyh;ծ?ɭ5osr#+b8b\7*ULSUnD i֑]0Y5?QRdui:E;a#<\ ki,GUR/R:*[h}+fKlN"Ć`3<;@7M0 6FJrtCSjXG˖lXsZ>bwl~~w?zA+mr %Enddb=,ȃđsiK'8DAtAܸ z^ a|NEVbLK_58!G+jKWⰅq=THOU]>vx4/ Z謦8hSx~#yIpͩ'+ϾrX+ &ƴFv.(ڞq9C uv16 X[R.ւ;?ZKNߔ ç,g%P\l~lŞVx^{]z4@9B"od8W%)sOyy͚qq7_/:Ol=րM=8y SijBF>ˁA?l/An-fSZ'I1%r9N9ꋟptbU xN/HEMk@˺2BM\O7Ǔ7cxӎ'˺oX6vZW'yA+ Bܓk[q%vؓ,lf@7߹U ., ^T⑭&l;Cc>0xW"%s%OwŒ ePf- -Q( X &G:Q#@g5xOw㙮s>o>=]*_@|ڧc / O7+S Ş2..3%"Gع꘡ `- |@9 Լ'C~8\M[~x@ӷҺ{XCr^ |熪)|*GR48O_b E){pb-2g _ǽ%u2ml}۔35]Y|Kξ^#8Cy@w/f^d%^#1wLJcF0̖rgId=У( q5{r;[*'/O'h͛b:~@l~e |XXu)!}ѧXQ5P)5 B@ Mۻ dv#3+  Vc]]L%P66h=G$)г)3 pq}֫]cC^jc*%bț?P߿!004tPPZ'|#hKoME A_1 /+QE͡*;È>%tfRG68ڲ&T`)C _xɻaGan_zT.5<3v`]DIRuR>!2=%fon8cp /dqe/07} %˯nM,5Cȯ y"LÈ\U3AK70 Xr"Bx?g4qixyb莛rhN)>JʚH|Y?v;xwH0@q! )=lF#kqB9X7xNDT-;:U9ǒzGe+uYw@cc+.Iثt=x.e_ՐIuMvqHxȍW2Tĵ aY4l~k$c~>&^TS.~X"U;oC<(l 1baC_1pɻC4zmw8Yr*2 }U˯@F rp` 1R]Fܼ]$FZ)\eq\XbGj#SouÜ9Ũ~ |A3UHNO6N!#wg~I}WZr]+Wۛ1IM_߽a;=(K")i3 Oe4y=  O5 5sAK PӾIe{*jXqǂ E;R"d[녜E}YIĺWa J9ڋKL,Nc~/"Mtuyمw[80p>a0tt>YPG 1Ǧ z˨wȕRcc{Eb坡㸙Ҹ4^h8w(Bjam& `Ac~禑5R<5E}DJ0*+7C9vj+{s㿁7Əo"yr5x;+r@IDAT%!m˰*'+iaXsl-cqv9sqEŃMXUeЃԑɟd=1Y؂-~H159R[=loK&ASRvbDޙa[q$verei8j8\t'dﵥZu>r1 =c!`lUɴ}5dI!aY2RdRGՆ (_iSڞqE8Ks`yv'91oc{2|AVEӅca&P /V1f.Wd7evQY;zHެ~SE#GwJ8!OvXHvE:o`OtY`^dr[9ػ g,5dtƪ{ o.0䪦!'EZGsj* aTCoˑ+X_䟸\|e_ַN3ා:NӼWr4Cj Eby+?6v"r^U%WMuf̫om1v ;ADiv%]M$=dI_9{ɿqʙXci7SbUz1;j7lcH7;Q~?!EqA'kt%DhۊE*r"Ϥ#Xx(+[8sj-SGY_u^l4F_槵 h; ֋f)-A`t=͵puku5vZ$g{!4Fg7,{-c#_ivs:8 ќN>:(9)na#ՆӊW̎lC.SDZed ǵLjal>_^%\r9 yj )Q:eKΐjn>|$&H'R4{cuK|¯ 龹=Fi-87 bK&@>k+q,vb$tgśHq, _l ŪGV؟Do59`8/"w: si&s;m~H;`Pr2 bQ:c !ZjЧNJ404lkLG5)_jq^58eڧ]+ 诟/D5b;՟A{`*+E{ˋ_uV_"G2>]!ԅ0gEzGm`6Yr~L;s ׋6Ņ|Ll<CG1Ƹpq ɶjX6xWHxqC{)9|8<>f,mf{DS]lA;c{#M0&"@PF}zGk*@rNU%'->MeI5~Onȃ~NSx^4!|7" ǎ眶0&| 9ܻgW.1u} c 01t)OW[k/x}ͰMVҧu>ay,l)9˧BrTկwƆhUdƏcs%$1VӀKzI _Y7joLl%(|8S>giy,j _*%tlA)Mhnv+¹?+3Fۏ #,{sӸxK{5ͪ?@ ,8 stpѥ}7}p&.4w$KԫM^>w`Γ+9nz,圙/+>KԉQڼ`0'^ǻ]џ#Wa^gF%a  Pp_aH{ZF]v1x4:Ewa~Jyy0ODsE:S_ <z5'\(`g MRFs3v-6BH ?R# x氮xh94<Pe@eš*nSW6i}5ąN۟q'N~w{q_c<~ a)jcB 'B=oǃo^F`N8Hx)pmw\gs@N?1|">~u{n.83&;cAzI7n#ymds谚!yCb΁QXnez1\tgA1j*RFn+°̘0믔318ܿ=$qEx%mrhR!?*4xYDž&.P'||h/(8vOF7hC!Nj2-Fj{4Bz Vm*khwL&R|ctM; "{uk];SM(q< |:yQףo'jLl0kB#HnKe->5=#nۓ)glQ!z(?+'8"S bl^;.8)KzyNcq…Q< iYJ8{QA\\ӂi!2^T}") 떼tޭf#GP̅Swjq`!Md[X9h.,/ފ/Dkŕ k%~c öNQڗxk?, ?X|l>Y᧋ 6܌uB/)bA@RMN` & H oZçy[XML>Q0m B/{6^ &a-mF}MrmSb 昱e2>>KsUN0v.}dsڀLbd2QhSO~o5wtu┭ (ɞk{$kOOnDjjJ931!qqZX ڡ*WSW-|-$:Eh^x&si w>E 3/W;t|]$qFbS#GR$^bWv%@]5ޠd]KM;K5rB'/Iu 8߮e48"$e#dI[ԔĖyf'+#>!g(&q&k/<3w}zf~7Ӻ3y˛RA #i>^޵W& .'k( +݉EڦQ?`dz0y6ߍHDH@1d@*Xف"[4.:C?妦ུdh+ tr%zG;+V7֍z]ɚP(=Ww[ (ttxc(G؈9xo.`bVH5 p61ЦVM}P~F얫]JGSus.!7=]t5#:pǼiX++=c*G &uj dLs!>\>~iwpvgǧ#;0 A-NBq6,rf>bxq;^;l~TwJ'\ lj3@VX> q]1fi/q/&3Ay!ki%!?l3فNNbrxT~eN7 yMUsZB;ozi5\;;*Y0js7-be}ǩ>R1 >@J 6F"IK>Dm7 \ᓲ,GRpѽ0}} '9\n'2j~R%Z7W7cAm5͞kaa-Fcqxf2t]DDKt'Cc''zf< 3FU10>YэKޥ.LO]rSCGv|sHxѽpCS k@;&XN-l֓.(&a|tÏC+.|;u{f "7sAK<-ݜK [aNZ?s O3:w _udl(3J@fxYZP –X|N(>f ǀ>O隵'kɆ`v4T7f#qn#}AqG4կj[ _YP\GșכGX;w2IoF $><Ps UH[1,S>{]t1߾W7U^xO߰JVIπ=2D͕ (#-O4u~p1u]ZQ8zr 2b]B/DTX_:}/,ۜk;rjWmCV)ر2\QG-Ü!sS1:M8+SME-nc5x{)nG71sQg݉Ī#UqaX )$E^>T7= + lޥ1m5[!hX .ɲO0;ΠE~sYx鸇?:k k W"9} s"D:4@)ڤ6 (WZ9khBQ\YD~=r!^Uù ew{rxr6-k3ٰl 3O2*Vuɋ\mϻl}>,9s£ctL'T&^9XoI9K}0ģ2֩FM]NmOtX LԾcڇG+9Di4)o6' `W3Gt%v$BYdFS1 p@%f:RWD8ff]u΄ =E3o B{|}BɻB1GuKзQ_8S΋ьgl36"@yrQB3Q?k+VjP,2ٳB؞$ ?6 &|ln8,8A׈*>p49&#J؎Y;+'nXbpJv(QU%; |]G꒚WNm;}W Ov\8VC'P>+'vkӆ c/|Mn|Z$ܼӁ\/qΜl6;eߥ>e%OUkr8ls2%ŵ6V/K{QE@)Dr0ڈtN;8}J"|2(A;yK6cSņ/rF~@e6V7$|xpМ/l%;>?QNx "6z3Z)T;)\ZYMq52WY[Kcss5B D7=K)<8JzWOb N't 9 _6`'R\/F<_;̦T2|$fi;/\i[+MEl"t8euwMAԾ`BG[lA4g䁦*K"/. U"q '_!,R E+|5Eel՞S p.; ii>->Y:0X"< QiJqNO|Nǣc 9_{'/O&F8idz8 䦿asXUtkEFM 8O4E{+V>-F5~5/Y&~a(|_O`bʍ&q ǟuF72]6a vO}G[Q0x7h[ʟl8w6B䢧fʸ5qu!K L ]Vqg.ťo՚@f{ ^pXQ741F`J+FzMReM4`<8ZrS "(2-M6'5^QV8t.ܬ^I~tpqpHoU >}QhrٸEzuTI~l#\ d ;< dJ9)ַs:llU_lW6մg8qh\ykbmx=R/?uэ<2ElQPewY?*M]%ʇM>)K! o"0EU{UgN8q8E~ nt,M !>}A&f+a|Er2UH m:obP=x4l3+DԬw6W(.,o'N`~bpk଎v~2iY/* _:6 eor^MH>Ȏ`UIL/>znm N1J/=E_k'+p)ñhbᲾGȹ;\Iv%~lr ׉e؁|aYhCj9;Q_7+?&'2w䇨M)YV :S;:8:&DU2_N-bIdn[qxQ'󾭵<ʐi|UB{7.ȋsr~#e|eD>]E7%.]ү؛a { xo-0 NgqOV>d`EE1H&eCr!rH$2i  ɪau?˶/f=6׷}*6j1!7%!aa:|'p=t;Z12|S%ZY9,.xeIR0|- t c;J9˪)OHK~z4YE]Es>I/||@+/E[IhTZPP]8..>Ww \/.9|9.RsF[6әgr0m#mBf "\!P$W?4eBcl䑶̋E|JMvՍX͓<+߲ӮNj#ʳP4#F eԕϖpn87p3z} h:>g}U[xnEpƷR45/$ok}`I)n];60#<L(ɬh|-oqdp8xm b2Nj/%z}/Rn.?$q̓E{Hbc_ʰ"iq( wIoGnNKTbHʽ\](\!kjrt+=|ji PmD~C=ʉ,$bfB;O'7!$Φʦw1Hm&q"Bp_5@\~}< ,Ь]$)yuJ3oeE7:a>uu'?n Ufw6N0H$fVq-yP,O;uw\:獕4?+qæ!#^CAx${7n%YlTU["8Wv)s]K]hc{3{} Y)NL.GY~N\Z jdU犵N'/䕻\r\c8mSۢ޽H nTN`Rm*oN,+gP<鰃ؿz%ϊm K]a,`됎qR2x0]5u^n8q i(vˌ7fl6̉n{,уiJuoEHCUM߽9ˏ_ aͭA;N rJTqQմ>~G Zj4ڹ `2ܫs5ln k+X2qQٺ-e 5<1rfc0b _C?}T5~hɚ,?;}7*?H YA L;4%N؀ HGveizi3F+.wYWGcc=phAu{w'YbyFxOCʁ j\jEb~Aƃ-A[CRm7>&kO? !K釤R9EmD.Xx5Vmk]cOuGELښhoqku=W|rՍcNd7O ~nNn{jWytp<_ppGJ`s@ nZ۝sû\zOtiao$O\L񧓈mܹ7g1t A(nƕv30pTZSl,@~{mlyl7Q|:xA 5{l\meEoAұmIlPՁH3DJN:CnA )_"=*d?M"~ޘ¦ydGKcI?Vv協{lAfs=9xI}M3G?PNf&m|zf?izVifIKtn$-'}@7zT7. Zc lȟrBTS( = 刔&ǟf;}'#KjwDp4| ok6-kc\Dj ؽI$D)'zy d>[ʓE\?R֜ue+ OV諱cHž/י]֎aK8}L @/+&ˇۭT%9ysqca+jO_yY"5$Ϧ/7 tS*eu& hC.۴OZ/V`j{+mp&F~u~f\ۜ́@ wjGIigPrp:s Y k& 5+Pc:r<\ľ8@>Սks-D1ˏ/%ꟍ77.ixz5],)?]NtOAьD(:Qqs!οbe.<\1S%z1P<k `K> X.ije@@}sZ67Y}RA1M-hkLzȳ46FxzY@k3OFpFd]v\p:w)*E&8'.⼩~OTZ:NW78$s1Uo=}[ʝBQs_" [:3^aaЌM>d)JŸ:KHo!ȧT8h? ro;4.3)f|@/c>e3>Y1|GY47Q#EZ}2Q?Lj)F*"}fv0֩'.Wsg 4v0!|byU繡Ysh]yrv4tlkf|[ 5|b%tH/rgjea cLl-UL='Ŵa*v}.舃w{w)B[.gef6ڭ($8y<xg.ʒh[l~p8E>~[r{p}C&Ӫ5.~_c; zKSj»l"\(뤷[Vu _^ԹPbh:$hɇ ^TBꈈ5&{BƪҏȾ d֖s$2$gb&n6I݌Kf bmkk#ᩣaj<34g V>s8!슛Fͱ iMN>+2ϓɻ%BD3*Sur'G`5y5C);NhY\І U߰\س@<)F!g,l;;=r-vd&7Í ݳ@Ѿ1ڠz 0;] ?e)ո󟺣[ ;Pcxi&~u$q?TƆºfݵI1P-b?Џ\1 zw dW|܃$(8o"~ Lq>Ds `zx`>lv<=0y=ULN|YM)ࡃ$="EG렏rkZrS{cM1jMnϿcx5zs-|LIJϰYus`b]/+w,9Vqƃ/X^ȱ,Kb;߹5@IDAT|7%^zdL#gC?I/g?7b/2ͅ+,\ q ` >r\H#2=4R@D9ܲOaڼ}Qh{h3t׹v |DG:ϹǍw_6YkᐢO`W~ۯ^ sX*v1V߼OǞ͹ [gK+- 9uhFf>/,?cpc^ ^I237K7 6֑%8'Xm"9a`dUgǾzZ'v|9w}/.^jSXl$6F੾C)S2L3MQ, SFܽt@wyYd؁UzhW +NmM阇b$ղLvwCYE6iޮWMg;I[A)U4F?2Xyt>ݝц<76e'Sqk Gj_jb*v8= 0ka+'*\b}PsAu_d5-: oۓÕ,؛qRڟ䦺qœ/nIAC[υ4pi6ȸΘ.Ho̢8Bws`[g39M.9&o !sݏ6L0j|xHoj B+a9 w^]kD](>vP2F2C,C$DҦ_,sUCp/K#a%Q&0$5.>2|[aY "N>!nAts f;jpy;PZnDLSh(pF'B:o&^xDS~H+b|~#my9 798b!#H7H4ߞs. +D„:7ֿ>y70zl[o`P` ٽc]D~Dc/}5kع_Mc/B5*Cp-6nATxů]¶a~FQGZݸ@vg'g[I{z> M_JjVܯroVP뀓uOD5 16̡SD`j0Ruƛ/tR}u" K`>;:c⫮ahyNb񎬤 vpLQ*G"np5G^QRLz+.wݪJ@,˼8)˧_~J)y?O}~B#cEBa|$\{oC.ܵ/9E rziCm~bxsڞ; ;t]i pFL@ *Yuc+¢N|pg&1Q869aL/L)pPp!TqjQ:+Vܗj?*ƹpRx,mlaUW\vҖ<8ٱCaoxR0+ct&##"DO70Ɣ!5Rڼʌ,ERHlqA4xPzb+cs88|.S j|R`N Ɨv:mn?]F@'+z7>& F=Z'4 lGt,Hnd}$d}wasⵗ*Y{rNZHQrVF5Ɨe}%Q ci4{%hK |)z YTF 8:q\QmHXv>h%od c ~:t~>Oa4Ԭ|Q@ 2rs7DYGX LF-8TZJU9% O[}'H#t^$?}|i"NMl@OP"k|/ЋP*[ -bKTGc\l?u ctmgGӿW/#۫坁zrE;p 34I_>wsdc4,ܺsq,#( y],Arɘ[CX|t *H~X:Nd'eAl}_8t~ՒOr@}q ;Y Q/|^l@9Ζᦐ4Q @mک]y4^8!i]*nV35X[d"VĮg GkA)s,XGx g1 QԷ<?:ncOp1*^ӢdxސڧIb?h"O)1I2ZQN>GFy7g~V%ߋw[&O1EA.(?39o⡶8%{tw-:'.?~$|Hy>acT)EPY@hb[wZ86B/$<2%tlqu('%+ⱊ.3n!=6pNn$Of8Č KLGFB=&}O3Df>k9zq ft7uǷdv$qy8%T1u}NE%"3~x˟9O5s1?/أw'r@[xhũx O"$9K^1qw+r&(-Gh>C^i% 텯+Ȗ)#ݟ.pnX?Gwy]YO;ݰs^oC͉'y%ͽsIlkYZ $&NB|(0q}*.K}ug<`A.1_VgoRUrT &qJRjlcc: Iը"QPhJTQՆkBI0lAmR(II g滝{3Ԯs^k=gڗ} &u:&K +.K6Thr퐆nGq4j'Зs-a& k9խm^"y "8 .Hpc|Fn1$ E}Xʶ2ONLI7@]X蓦F/.ظ WkВGa;V3:-9sm?6Dؼ)1o9dJrРBVPGؕd b"#Y|CCidqK˭b~^"EZ!y̜7u_iϽ'A]ğj?+()nthˆȊEk"ἂWZk8qC)MԪZ"Д9v퉑r_)c." QTOGinm>d jG}FE G{t%>/z\8ɷcꋊygdԐsV1m65{4x9\+/)"tǁ䑟T1F|ztcu,@cxXwhFxlh*Vad-]$'-sMckCu=0\$w@-=Ǘ$Ơ^ƌ=tDQx j:=yWPj/F:Ֆ=3"٣HMbbwKUo+E+5p\k UnvrNH(hsVe 5G@98%B:[lc`4VJ׻|? jEٕn!ڕ\74qcs@ v>N o@8 %HՉ60\ԮƎ`ȑUwN*L,r q㣍 eY>^va~|<1(aǘQH{ORܢHbLBpؚBe?hmatq S&&\ք]q-E>IU[ZF)ٍ $MEWU0^; NW,(%7XKk'F%W&*;eQİ.!NNY E "?BR^Cb[5m^k]~™>CF,Sv[Dkh^N!nyh$]^{ ccE yr@Zֱ5_]OtɘiU#D8A b_ߦm0x9~f$UTHxM,ݷ\xh9AZ*$93v8w xǯLvgmdsSER}PݓNaDC:NUk8G~v?i@- {^CCj6Bu}b륣6Fg T) '}v!o&IE mYr©Dr;ٺMh 1qY`U:YiubG8!q*$e&k&Nm\ŧxlgI׽hQ]@ &xz@e @|KޡX &~a)U-ɚ^9]e"H+ǍۆƗW?VmL,6 }Dy7V,9?zAEtnK;u'\=\cHJ[N5"x gh?{fć"@M\)f >sʏH͸̌m!e NEvid:o QYǧǔmȤ6%gw. ]nJ㖡{7Y,?csK7.^tsrv/+ ][qsd>BoB)j! \$[ /sqJ[g`zXQͫ4YxN5O".4FLJ= eRtb¾!B eS;Uǰ|GZ d |ť k@:QEnk-C 6}5-R89 ǧQⳄ*˘m}怿m':X7\w5zHϰ0ywڳHc5/EL%"=V(:n[s,q˨0M8%@n[0Rhjt&4c+5Y+h`=d_Vvhh0Ʌl%G$hN/YnFlgk\H7Ec/z/`C2N Fh܃2~W+Mc({ YlƋX,ҟ&%~Aړ2%dr*.q[X/<ۧ<"X2BH{heB7!h,Pı{ʼ\̘iV|FH)<ELX, A>P&Ł7fPjq`w[Z$(;g%R0+Nart>7@(I_!'ga&*1;iO v&Ҙ0_5(gʤKm4JMTS3Q#+h.qI3&THAI{=i@BO`^ZwR`AVN,sұύ# mFN8*nPPZ9 1fԞ=J,(XE㌅jx9Wq䔝υ EqM̢TJ/2\䲐 ǥΝc'c Ŕ zBh3ұϲCK$;D щrx(ʬfahJrX @$몝AKm+(22x)peC:_۝:6H>Nʈ`l& rfei'e;.u^l,1FȦW+ [c|qR քV*&N\3:I{_q>Uc܋aZ*[8]k!aZu-ؚxALohUjz~a؏9a5,)3:_]|İ,'S=;Y.>Fa3?]_h7 gP6Aa!Aʨy>;qA7Fa w`A%8T[u_c" (`ٴ dWƾ=Po@0Bͫ"sx\mJn-Դoҧ=fr&}ݻ]reSO`.4S1O=pvE}',t>9{CW۱X2Unt`q&rmKqhS8v!5Cd%g(e%.฽DU12LJ'@봷2/2\Sx~ϒU君@la|G*O9̭Z<8q7Hh)6S&r;(. |S.<K1ˆRO0>~\u4oEq{HHY/ҡBQhT@M,= ی"zcP  Ttr kу$$J>SV{ ;8B~ |$mq9BmmjQx]!X/>W+]o|-NHE`7,#VzUh|.ܫ9X+})=h>J°y/{hE2<*e!>u1~J)vQ_ k;>1HJtddBqMWnpÐvp1IOK2XIJUV'\\˳Z J)c|V[xD]e.@D1&.YsXuqD8CC+G?1NLY.E#?#|/nFVfpr|(Bٻ}Ixў`!2]AΙ4D(I77bÊ~c8A?ZjQ% QD`[yvWZ^k VyɳK=wm[l~M'C1 8:dnnw|7 CNWZ2*㲓}yMPvm U[& 9ș(Y"mZƢH,ή7Kc ZaJ"ҫxۡC=Anh@ %";MC!)yOe5~pQ , 'shSZKITGĂH^,t"p +'Ik{N޶YDD.Y7BBM9?2="fia|da#54 uooyh6_:š V_Rt˗+Z'*ʨJpf*&e1hHfW"ӸVtɥypۮ>!D]"!26U]s1…vAfNcSzrm7V@hhzEj?UMewe5jn;8[0hZAYikzYPsΞ(^ƷcW ! 0|_31-Ī.,%O8%_WC2Hmc~c  -3k\x\TBsn+&/'Y~7U}u+8{;#Jv\-ؚ;bʕ7a`#w :ڛ\l{/ftTXUYm 1iZ]Ut-uj+x c_}7m}gd@_u+Nul{˛q{O~0ݶ]Q_tim|u|f,l.'). (\T9M!jE)FBzr"Hq Xl-aSyWW)N(3/ +'&݁S^I_۾Ţ #xJ%TfxM[~blˊ"Vn-d\%*ZHץ^"&Iu1vN"=bK\".sBPZ+<4]6v[@F;D4&; Jㆺi:j ) 6G=emʠƛn'ڣkJ-jڌ?am%Fiǟ)kM;gl7i~s-mkTGdv:=py2aYå@qZB_ U Ɠ@vEۮoٖ[r %@FPе>x\]@'5C=o⸪}rzم֧.xXu (-i~<’Re.;$\A{8ɣ4#iu=hiSM:#m.X~vzUu*-nnoy7n}?AVGގpVA1SK:/xϓ%1n NOB%S-B{ꄮ3-b:O0?EU:19sѱ>ys鰂_8,0wPJ!ĢDqZyLb1xbB&eqfhfn+h0mA,$ލQ"jbׇp!|wixnEZP‡)';kJ[罧%m+v|jKiR>x,wT*ǡ(Sşi|Qtnz.d΋)# \ ³CQ9P=!_MI.5Y>ȭ|ȐZsk֘c͹L_}ִqs'e^ټZF4O\f-^QF_|{H MC bgV$[c03J :>_)jodHWC9cXl1$(5Njٷ%bӲk9 #FFU(jWH|Xcԗ<9NpONNY8ƐaYJF(®fs) bB+b93 3JU9;ַmJ۾ ث5APʥs,ylX<q=*#-.GdYa`IsklKOb .nvUI_78hnq- `xlt=eE,1;a3R\M)p^ `:ʻ\ ^:U?Є<Tc'JSQc*Ց񁀩 6Nn0ҕz>L@,}7xtp)$ Df R墻`M̞ >IOW۳^&g rpt:K_"]noo]C_'Mba?)mDŽ<ɺ/ }(w,|҇ W\ *l^HسBsrb2i?<ovhL_hE R! *~hc\EV@F ߅?k+|KWЍϳqyyK7N2 JeWŶEF\3O]_ (}C̥MVQE@zo0I,{A ՠ\(X &;d[i?{oӟv:aX `"_CE_6˛'>=+w_nZiScK&ByF 4#(sf\>8|cYpN1P-4:o@*K4M"s 0Ŋ8j7aA }rKױ mJ?k|&he;TtWd|s^ 78%ĨVzDBn}_&Q^Xw|X>(;6I"(>Mf]B'/pP,ʆReR"mֹ\Ԡ m3j>s/| [,`c̲QI74 rCi՜gctwx!eJscod kkGY~g, oJvɉ;_A+V9vwD3 nM=ALWdT@ <2'*i` pBa͠ v.V)GJhJ{)9XD&@c #'^J1*XR$2zbX_)̹Ј/w >(om@<}ڸ6wG"?0J]bLJ|0D #B[uˊn>.{D-S^*2zgj;z#_}^ɜxd,>W # " +K ^RuG(-TX N˦̷ >8'nGt\;HN|5qkNFaۘwÄT%caoQs1fS ?y3CcO|&̴NvK8^|nRh+_xabvi?$ OU C:5lGdhq&88{neM1! luz_,z"r]\&u7dnX99Wy3 ͬ#M9o7DLĆX'E]nvƃ΅ s:iYf{z8N*c71*kaV2;XZ:&,z{mxϧ:b}8&4zD@97PN$L֎x}pޘ`KhrȀ @T~Ho&#N5MXL?o{g~z,>-UvyB#m=>y#GZeR/7wYeGT:fLy5]18D8r0-k3XAa,cR1[Ȝp&Y4}R,$W: Q qo^d7;/TBtѡ֢#?4NK3Yw $R9TYFg;H˱njE4O,ZAb}zaRh@#}X0]3r+Y٪ #ZɌ'/_ILX%sa$܄N#=w Tu J>{-Ʋ6`EB`ֹʄhxG-iZjк"}4 ![P! 1r~nk&zJ [M50ɬ/`4f*e#j:K*MI_uGIxwR$)̈́A k:>"6Ϝ<2`ʦ$}3|{j'|vE<ƍ"6'}g_zB|(Apw ,Ƨm-xf4<Z29} *@IDATh;fڍ@t[ױL-;).;{NC&a3 X"7I&tZmf2Yzm.@U,%ZEߏ{V5~FljǕ GWc"&àױP@N|襝@dňz^xf~ȼ+Q*qe1C4X'`ދ;RLbFd4]@t.95U!>E"oj}a|AwiS37B6-&Ԑ=&nhJl]{2&ܒ]b׆k6݇ zyR b9,Y'o8T#2s\Ʉo ="8~\ AɃl=3ǀڋPm] -K *^k}dc [FMkLzOh %"a/5}!+ Fb'Sj<[/)EGwƮ{`UsY3b".PlU-OF4? ӒZ)o 9pWڰ3f g3@fԾF"ʌF0{6roS,v}[>Dqaen-:$h#OT|it]<.3/';tDxW+|2?F/J~9`TՏt<)4)Yw:ZUT6U^',#'d<(,)ePZ*y VРW<-m"ʝߺHl92K[箣RaAb\$J$=$q?S;MUjg,-'X 5\! LBB{W2JJCDDŽ󚰛Pw킦.l~Md\-K0^4onKxrH;qYJvr&vʶlv>\X`hxzVNuN #C<vkÄo JfW\=Lr%ˋ1Ah.SW .5OL+Vx Y:u.%>^kzFc #Armƞ&j/x-B"/iyD]b 18/F2w&+Jk1}u ?: BmVYDxK,@}^w{O64Phz A>Ӂ&um)08<6f,FD ZxC\caϹllr)|Ws8Giy1ѐMI ~[-4L5AJ1$ ~ڤ99h>\ע@bך f!W4}j޺ 8+ C;9LyШOr $^uĺ#:?I4 lX\zH3vl貥q'a.coإͺN:P))}KVvU=zF:ԅMؙNZ=_ON tl*:>rW='ǀv׍$WŸ/>F*;Z2ѱ/ @^\GDZXbc;K`>@T, !PjܾV c}+QP09>'_?^^!4xISzr?>۟FmI'{/8)msn$m__ =}䗷?_+O??WzN,! w#xd:&܎Zhn/|#۟~Wgad|b?}WF?O>/{n>)c?^wxʋCW }`+w_?{WҐT ITpӘcQFKVen0'a}W틿]w2e"O~ 1.םtR+/}c.&wӤG.L.|76/$EX0Y@=|mb04&Tb=钚Z\aaFԃ2 d"Dfq@%%$!9D.EH-uaۚl7z4ΰݝb#ζeK[D/iJ7Ak[.~WKx׈i)M9 Pdh\J +4RϢQV[QzF/DmmN m˸d'9ߚ,1$w/F㖷Ymv<0~ma|ICKinzTْ%yj 5<뺱miv %9N 8LQ'ZTqS^ዼӫ ]xb̭C-b9)xZsYنǦ>4\ĀU9)L"8ò>E\697tFF;Wy ز`[6yh{*5Eg`[1 Dr?f=$SBiנ([_l2-9IeA!TYc~bOo㻼6}D@s $ȅߩO^$:5k`l1mStM^׆kEI>I}ܞ$f|ڌTxY3LZ\Ě#fzQEADŽ6uP6@q>]NO;0$h너U 8.j(owBgX\@]6 gҡ ewgDd.ǟhj/.tTVnwdaQ>noU<=%e\w~tsrCWxk0h& c3r["E4>/]x-{+l*DeHC"lCJW S MAv&aӂQ:؈ &joxsUNnݩO{/rY}˃a;= @z%jj[K>AY9z׮s/P*2:wi KԎEr:ٻ$BMofCg\0Jn}]x~5g"cq{Ҏ_J&Mk-sБ  [ bcBPcFq֧:!XBum4-$`rMd*m?ǯ__h:TaՊMzzhim1(H=}"!9⑅slGb;n"j Em3O| +=v+zeb"\e!>e0F L/~ ꊅn+vW3y:1n@.o0KS‡!4]r$i] 2Bʼn>*d}^7 j G-JTi#'4>58yEȤڞfLeŋ4& F v~#J]Ǧ˚ʠK_std{)m}\1"%^!.;isa6L`sx,K,diЉ1 >L# M/z_Rϱ,f(ǎP7|PPt^%C} JÉ1չC9O0y9/zx! |y1I78킰OK47%D{?:i7"Zh]!RxW*,!]үr̕h>NO7>%CgyF6;mqJb*uy.mO=wrKOȋ'q ETrW9f Lz'E/ DJ'O}(p  h[u<ɷ\v2i'~ҩ$ò[ڨhnPU\qBT|N"^#+cQ]3¼gi$?H?zdhpP*.Wa@7h e (eepLU aʅ/[^ S>TinJ J[Kh{nf]F4HH`GLy!`Nj3!&JI1VPx[r489&2-)b"yɂeE#,\nRa`wP/[#I&60Q'-C־Pnd)YN])#>ʢܸiR@i2"4C|=`al4ðAj[Cua]J)/^^uvŞ(oec X چ:SNk.;f.7sgl?gQ^932'ǟB+Hg|,Y;3}%%Լ362`SZi%_g0c]>PDsW섯7,eÇvݿ@'q#1vrAeG]U$Q e$L]s $ (C[{3'_˪ o6 !ZtB^oͿS19hI;Kɣc{qABNv_O6NoIC-OUʶp20%{MId8VdEOXztSDPrfFڠb\b|qn_X@' K99J \NKs}\)O~2bF?7w`5ґ84w6h*ZT2Ctr2P Z?|JssvoC61@4 szV݋VbTez۞GJG$F{(G"" 9;ZYO(HZO~ԫ }\dɑ6gl,8Q8 BBމ2kM%R*x:'Y& _ 3iIwuY dx~ pә;'iwdt1>PnRmzP=hǢSC OTvů~& iʬXHAˢ IiFl'ڀ\&o=2_֒|k%r1>1i>u#XPr)B;gp#?ga[*'bPGB{uDO#9"IЍY$%;uIwUǢ^b.JK:j#n0Qo6Mz -JI;_ϐ؇bQR\k3Bƨ ( "D}-d2sdw NDAUq#P)J+2@zOx6FvZ>̩t+]V^I100կL?)gKȐʁTuX"&cK]@`B%."OBC`-,w\`?3]w_ctmu]K /OV0;M@V&$C L$0 F,Lh86x816|Dnaq ]cEI;ۚTr|advUNxj_ :Ȳ ᳉VY{]G=2gg]b{51mФY<*)=>x>j!OJ:QlhXy~.^_Y]6DQlS_lWoH-Wbt/-s3GS<}IO{an{Ӌe*>&Yޥ[~!uEn5|)7v h{HYM^S*&w w;^79@Udf Z"#Z9cET:dx,.+&Ve,4S9$gŗ (xb!I򂟋o"n}Q[Wܮ g?30" ;Pz n*BQ[Bnrƾm~.sluGKb1iQe_Ms֝%zNcG; ĉOsX% 1: +^zz.fe/yɋYMFW%gߧEڵ<2:=4?`~|at_VQ G߸wgн%/Lya̭cP}m/|#<*_ɦA񲗽No9Z6^oXKkҵʪW2 /i61o_dڎº_mGC}alE/ĩnw m#qLcԧ;>9W6AU=)+[Rj6djp U~e`0Y(1Ē<ن:jN +ӆF<^`wi+fBO 2ݡ *HwIR0Hk Cy[ 4NYt; НO%xWcw,gDTHC*Nl·bٵ-l2d٠E/Ite̼ڴ*]cIXÂ䇞 G=0ANBA[WtT>F5Ǻ3}_|X'/d) c<W,&Z2OiN7 h5v/֎vG~C4̅sv LjJSe)Bu ) LiaWS6)Mcc,*\ Cwv0$Y)!FmyETh^Gcn>,:|.ϛ k(Ǧ ս.O"mθ E ]<^<*}p6%~F3wd?b 9}><@d-Tb'щ5*C9tR`߻...IFLkUt#T k7}wwzcug Zie<>?~^>?]$=+~{1]G_P>YB*&o{__Օt

    h*| v@ f :H5H )Kͮh0i-啼(fh|A:xCwZN/_}TwxyD7hƌbc;.nxׂM?)?;,؅č1_ǂ+:PAWO:xI2x]>W:ցʌ8]o,o*&7?oT=ܩȾBV$0l){1̫v@ kFO9c?5|@ ?N-P۷n/,l^6ٜ!/1,),_rx!gҢGMLo|L]'5(ύ_/ГuۏONyΕ Y|~K73ؑ|7~cy\kF{XqQ~~ ?)4N=9)fְw~۶WOwz+g8fY8o~no~T-LGY!m=OFGeGhT>.riMrRbp OĤ͂ڝULvPpOȴ:awxJc1m|Ov %~$I#~[93#el[::6-۪ =%J "Ҥ" įpw`̈́zLN qV'(oMS|һihRjĉ_4{W!R8C,ǀR]!ՕxS:Ȗu?}QX Vtq,X``;Q:w{̃q2%WJ~er ŋ mDE&aP2] %TzF$-rQ6>ԈbX{]QÆ5/6N:6z4!tz~`|ە{ZNu) h/QL.\1{1.k>*O>V7׵0)Q7bfH7RO#>Ea :_4$\ Vz7 1_>ϲ_%\d;]N^G~1}mRR!A(T>zѲ*N]/SW)Ao~ӫPձqAjwh?,̱MO7@c M۽=5|%wB?~Dl=\P[oяbZdXB=;Y7ê]tۗWl_eN3>2w@Mogxᶱ]l Oq^_~*S^5=]#똍o[}h5m7м߼}ׄYN![f>V)4=iWUY"AWOi{*i_P[^js+\3UaSp7|'5Că=aouڄo q*CtNV{DN4N`c bZN晭J~RpO /lІ.tG_귬,NGEæ͛l!G;2_03簦+QvJk^c?s6e˟4WBm)Ie@T =&?E ySNZt3dr ptޔ!.Mo8Pb-N1%r)*q$V$MH܄S7bʉhy!LfAW4՗5yF/ˁkjydk8/ hev·piǿ 7ڠ[.-dǹ ^$r@.)(T ҆dH7mV47x3FZʽk𫐞E߮j;1vy@[2]X5]ꪭŘIRJ9:S?Gwhr謁k".qp=1݇_zr #K{hk9q4hJi`RLhuAfsW۴RJf0k$F-2Vċ!ųPΖyC2qڎo帊z>G?hy^\xވV  *މ˶dumL 课7oMY%r&ĎrՕg?eEο767SZqxoW_Ǝ~^TsQt9rQKil )ZwH(n>~7C(W՟=3bRQ;/Q6÷Ξ g?.ZZaKU[ЮIauԝ;E|ƮrQ\wN 71Y}_d|A bhL eF[*_^#ۭshL4$H2D|GޓloҝԊ4 ;Yڤ bԠ^]l{Bͤt)"EN&&d >HٴN Ό8ǑAVL>vӢ+]vο/ʪ$E%﬊p <;3@MX-i"峘tʑDnzЦ̤ՖԷUu>=WR]Xc涟Rp@ _Ɋ'-~C/bۦt W`?Ka ;Ma6j$C( OyAÜfՆRqRa يd!+~&(iư"OMw^[Fʎ%f[oIs^ ~5mQHѨ-Bs5?CMO0HMw^ %D7sX/]/ʖ>#-?y[^1%K> ϑkh}WǗ%5#XZ!7XQ;b5?Mfr &3Ĭɫ^ ;͉Ρ2Qtn^wqauo%b%R~o[1\v=GNcEäm4?'&a9tD!J?OAD^|QXuSvgQ(긎 #Wmbkj;B;aFQTyj`҅O'C|& 12@Z1>Jw8ﱑ@{~) ~jM'Oūr X 0 GР %Sz^5$1]$%;UgGHE06L`C-Ushs FC&2'#n+@>\݆U~kaBYɳ< m¢E2EdȦ#]3ؙre=JlZ`U[XNO>d%=_s!acṦgPh3&Iwu%fR=dQg6"AGUOe(V:\-*{׹T8J.hj˙ժ˹Yg_S㶳4eɌn+0="ZGV2r[+ݢ/vҡ};oȿ%fV4$lSpEю _.C6eN2ajژ _~k^Otּ9ꉏ{t |6@IDATrAVA$ w0b|o*UM>k,OxCu+|K$ƹJqyy"t׾ֵiu/xrGWX{ک.7ۍDkܢ$izN9p׾?@hl9rh'/ư[,^uڼFSwyړ>Fv0$^_o;{nW{s^=tө I?B9|B2.(>[˟kE @Ϯ#ahu[f:8OC0g䔜s$u,hcҵ y_i$"Ύl;TWAV!AzVHJbܶ6 1PIѰőu(ɕ(Y,1I+4}`2n '!cFfN`1 ]Iy~LS |89bZFJd-g1+ bxg;ŜP9vw ^6WZs&!'X6P\ֈ%X2ΛHևZ>)AtX1 hB(_ˍ^vK_iYgJ 6ݩy<5׽j;U䓞!49 V`Bv^}e&3Z6Hޒb JWuEr%lױR[[݀ڪiDTqCu:4jN@}%C@d9Tm~-Jr9!~5A 'h(Pxk(r,Θm9{/Ucۓ&M@*°{k;q$^IY !gi5o<c1A(]85cRs [@WI9jՋzg.oN)T'Q[hiHР?)%Zea7rY ]+/[^4={]fWV,@QV{zuu{sMZamPHNۙ~\=SV1n%hVF]o.^mtoMJ~6~˦@exLǃD-o.Z{˗[MʭgiB/;M.ny˛lnuXByAi!$g-RoϢ3 tBWR篱=0]'R3Kw~_~̼bfꔯUiw⁛OhCuDܐ.3dW9'Itrr0*k1)H =n=6mxJ$!M $Ҷg^?s jʷvS̷MX}>WsZʹ:I='(v{"uJpd(lT)dC&|N2#4j,/r<\mԐu VSTiCToޛQe0S$_GZ>XeaW~~q++-4ٯoeРMi0LJxy6m3d31Еe^KOb49s}Fe~\0̴:}#[K =09'/׳7/gUlqz[6ƉJwHZPW9fWjz3%x :f'd<@׮{n*iu.uX%#v˷hqZ!Sb.A} |s0*0Jsзq1J9b6IʀI 0v|LdO)S`~ƒ80n,CG(rh;95Js\F"4>Y}Z Rn4!ަAO_s[gs?|y&5ߏ,Ie|~y>!~k)jgwm<d%z^7d{G*jΟO)O|DxlVWFo ށo]z~yy^ p옞UV~-b6i -'Zy_'YcN`86c $QBFR@7O*IAFj lGjGN2D/A'Exab)5$(_ֲh[(~H2lL2`HeuԸ0( L8  꺌09yV\^/30h%*3G UNJI`:4Xv1P}a]hme`|s3?M;3Љ  oV1F4|MK$V'Op8R$UMدI Z +3.F#u*oUh9MrUX˝o\k.zs*@8< cxn9ڏVXje7roYKrwg-fφlu 76AFdy[Y~#ϮwUf+n(;>R;թb&{Ÿ^|zKezeZxZm`w24faN@54rsr}~f_: NwD^Uj{ǵZsdn'{OV”]nN+;dFnImi=SP?]gñN@ѵZ{{TpdD74=sR5e[dv Ǹ8©*e?@O^ɘvf>;~?'gL13Yșrh[<@ѻ`?JyX["XIF_M>Ke#P.sh< S \sr_pqVU;XI+[X4C -u{Ts;üQL1epn;=vT ;I# -< _w0D 6cvL-P*۾493&M}(3e mL}ۀ*_ 9n!ӏ%ߞl WCWB6G[Cxi*|~SHpt訮4';6siB?-ozg>]=^\vƬ9̶f?$V~LYjU *^?H=q]^dzTO~w45[in~#muO.Vx*g牏{&\￝)@ZS!^r]8넌ѷQ>ᏹ:>ٟo_7mX.f7!vГZ9պ\m~Oe?L'al.iu7=\-9[ViIA@TDiC^iSN^f'2毭r|s!gϺJ`yPqˆlMI~c:Nǚ:7xYyO.Dn$nB:MAkѿag93QUJ &@!6 HR &ND{hn &y 9X &)\c-uD ˆ=loڒ(k>{[$,K"ɧ1믲V6$) |'xb e Έб Gh{ OO-dL`L3LZFVQ,?qRNes $B RSx]U?W7Xzݛ+0.K7[6 = Azltx? l ^dZ4ˉ -!Ȭ<)~YC~#%M_j{bb0AHm~n$lJI+Oկ啬V̓Ub ~64xf/Q#nӔ8Ⱦmip*N~sZ?RMm%CC6!ZBdBi3A[-]n 2Q},k#Z'vAO5@;c?o G,2l&3z_3c>\W7-ʾ'uG_Waxم:iië%ù$r3x;,2j!2t^)X͎I#MNp下tT^uŽmOʟZz#˱B~)$hѣEG-GdGtgcM4oTl 6E8Z eQaW_ZysCŒ7t<>%Zn9j߈U\cOIU?'G=huiyWݱ kv3YV.z%z8ʏO&!a`|*YgkuJozK~c7zujWZQ=(А-P8WDu'\>OO|V|O>i:_qMiGCVi&OгIoiuB Zڸsm:F#u\c Ѵ8nŦo`ڧȤNLQ\ŵa}vgrꈼo mh꠭7ol'A#J[m޷nW A*V5ʼnقVMP5b'H60!E@P\1YBtyàɵi-bx/M4[i MqVy6-_(`RӘ26v\Wk%fu%9wuh$#=$m=\?`ohr_49qc<ћXYmKep`vSeXoڶz'K1ԹVBeG+66G9z*lm6"д>-rb~K BY`ƱGu:2.;&-I<Š ٶMn EA6V]xLNɳg$Ze"FxE+1ܮD?nu+䰽u-eG!]zD#̊-/|٫vWbA$H q;k஥TfrUPtMo~*[6yc=6k,>WWο p+{!]}sπ6sʃo@x$(.%_UnI3U[/kx߷|"8V~ßL6uL"yo᳣z s7TgDuÖ^w>G04)`L\>Iם%̨kYroS5(dK*=[~ɨtڰb=|G)(QN~2ھm'A>iP!FWs(5K&hҊ{^1ZG2H("t5IHH(6RІϘ_UPPW9C[I>>`Us:ÎppXV[=#yEn8yTD䃶﷏ep^ *6Ćeo/ߡ io I\Nٹ%mP%Ix"$$:"v &%>+:Æ JJjD4anU]Sc&}H" ~vC_%g}K'Z}3LZR ^ 4s0d[ҳL P-?:0R=l39RG\vvQRJˆ2;'CiO]0ۋ`)rSk&9Mnbj.a>T4GK1PLsPꍤT"^ usZ2t,NY[1B E '>V(䷡NKz2 {hupV+~ 16F #ygx'MGSt8+0 P$Ҕ%U q80|LuRgUUWm‚/spI86 ENI˵|~u ŏHH:[oo{MB7?U8Cڿ Unnk@9}o:t`ykՕlN2m}%/zy]hN[&ȗw!>o7fl:ρG+@v>jU_s?S^_{0;4 ׾zS0!xիU~zbҌO{qW~Mn[ 5YOnoy;WLv)ixP=:?bg^h7iRO;e/,9/qMB0 m}MBKV^c ۳NRt$a}ftʊ݉7:6a?{XrW!~`zLFYe%YyD_4UIc Z4fg:>v۷.Q_D\yDf ZH $ߥ~$AX>IMr^=Se}LUV<];tcq]ۼPG is4bS7t9C^yMN\$Yy< m4Q 蒭'+ÿ48+F8Ӑs7EqlԮqog{!zZM9^k<̏=B}I~-1r٧F~RI%\)l y/`2eO!8xiMn(Mzaӯ:Ҟ|>w8#x;jUmWXFt31D'>!Яf| v.$lxmll?zCv3v?c)#M[!7ۄ^,aS9˴ƨƮr'p|Jơ{ȡ*_I(X|N|AzuJw}A^WXd5bjte\ J}!Is]R2(fI=ǭ'؁nYvfCTj+QHD6:v/X7>*hoˮk<9+;PmhLfeVyוگW$FƷb|lJĶVPN&bBltʢלM(H ] d.1WviVn۱Z8MC̢Lx)ECkNɘć.Pk4\ 2zU(3aV1J4<$:}gqKIX0hMz<"Gt&"k+/srP&_xt#5քLZq'R[y}FQ7. ͔H_]xs ~u.|i)h;T|.*w/\ W؇)GÓwl ښwڥiWz. ^o9sD =[ѝ^?#(Ϻn9WqK⦋w2U|w6# tP=EYhY9=cLv~FOXmBx@ܦ  ,7vT ^R IW;-1i 6F4>TJ! 8^gD`WNXB5fNb"WǐN,plH:Zgo䫰ӮT6v\Emه.4ٴ0݆X ӚksKI6 ı:u뇘nv NH}G:Bj:k= ?6L/-T,@Ǚ(gu>DS˫W- #)g(lE"BωߘƏK7iRÂ.˔(>e`KNKDl*w8WnΙ@# к$x?rm9 V% fcYYU9.=_{=UZ9?vrַzj>-e/LEHEp>ۖz+LlXH^yT:?Fs: /e Ig$yD]iNuf)2X$-ob[ewC 'Ә#9īWtuz`` =GV{g/7 f9Mw N JɬKku׿ ۿ6+HxF8;!&+׸ƹwd;fQqt|⷟綠DF4Qa]:Cb2vdÝ#6obx7+U3L:k/#wۜ-~Vm #e2\.DmHJnwaeѶ?u>Lwg(tȚ>yn W+.cS搌P'H zYRk t=2=By*YD?|Ry-C_⢁g؃T?rX.2őDKAqP<EF3y]VeGoĚ/Y=Dz٤UГ.X`K mt7͖}%p 6I=3kE%4e-yL&n{=o#\MQwOopD _Uqh'i 8у7k2O˟G5>qdƛQd ]KH VNU)Q3ZxvYQ\߱K?zjֹ) vYmSuS&(ȕ?^~u юDv9)c["Ov))LuKWbN\ͰiW;*vdYqQbk-{}۬Gc |೴h>nz-|3ð؀ww Y}148Q-=X/zr_t}KƎk~VU7q%c*Wt~ ~uA&gU5lævs>3x)O|ݿp} MОe^a;Fa/]>z_W.?v[i?+NyD&@¬6JfmrK}]]ľ=1˿gx0V2$\Ctj* 8!3 Zu2mop҉gNJVomSqXܲ\#^өqi{ڃo~b8?v1YfiJ.#aR9`AklOLL^,KĥӤ'8qX!4EY 51,0^ht51!(\B{csUWaql&ѷI/חF*]B>/_ҫ{On˿ravBu؈{ +z7m˷]'=JKui7o5asXuҙC2#5r}q7u#w@Q5y23U;<>D/#]p{G`!HϪo f~&w4p3hwwk_`}tyCX3i3T>s-^e2@Uidmw-ם׾m&7Ph?Ld"R}lwB=zd}?]nyc̃ǵnF)vNrC~$<>nT-,hu| hYm V@+@ӯmO8 aMSoG+Y 81^bJ ArI5t}Nƨ+f*l5ȴ7!ɣ9ViPVODX )np_cw/vD( :pG@M7'qkJ$m("JY|71"IMnOlk 6%nm˷Zյoy n[ecNʳX%q!bFCVI̒&(f%_H٭aIPCC+~1q.uȋS|`X6R1m>%9=8Fٜ"/t Į%#+?ɓ~k#Mm$C?ȗ:[)]P(\~S> Y|ؒbrJB'4JrDfO{jً- ESmO6FOr=W_ՖF_]l|4Oj36dPSƬOFslo!V}#^1$e-KA(3xrZan$vU0eEiد5uE[NfȐ35,;f7Yns?ڳ^o~Vgd{u _}鯞Qu<GoUtapwTxWuY7Y~g~RʂF c@IDAT ٙ+a_;}/ӆ:م6\Yq#Ώz'Q|~/Rꃞg.}˗.?\#4n\&dֈ|M&qHWO|J#*?+ s5lHR>rM|8N.ӊ9}jk~^zV HRs;yhFx'*.%xc,nǪ K[g@̢heb>V2.^vip0A5:t *xz %,k;(+JrXrgg_\R_v`rڲ+Y\ 9(ŒwXIF)FG5aܲ:*jWvxmX-X'iYHq6P#Q ,0Msܟ]gő(: Fg(6c$Jףֺ 7d80,c1FPOm^Z !VFRq}n| ~l)2mȬAg8I3˶]Ε“&/>oJm)"SRE]ru>c0fPr2n8Zy t!@\vN-oMxh,j^hXm)xɖ'1hC~00~9VnWa~_bӉƙaԬY}q~ K]D8W:lK+].;tBcY\KC|˝3#ah` AvW[x:FV<'yqT];v`%Ԟy]syVWW,E*Xv"׉;e+Oz#G}5 #Oa>^84f?LG>_Km/o=Qz֡V1V5vl;(N}˭<׻GjuYyr-k2lfPw\+ٶH8FghgW=)n@9 iiCguU{zB\|>4Pcu*$m >2>sR6L.pP-{;/x+~d:/(&49Q'Ǖ]V~N?UӠ{.[/ՏhyrGM ]|ꓟ1w8m:KdN(#KP ,tvҥ?S_o)"Jr]5 z1<`Sr!ɼSzl;\ث$Lk]%XCq|Γd3 GWR2d>4KrV h;^*v}$U%s ?jlf6n)W 6kɵ^ J+Ѻ& ȧ}@3]48͵ .OmxG >nYc.ΓE&x#Yb_8i8#s }>R)u0ҕ[hHf/; } =Kb9r!hc佫LF7=$dه8p居YuH4-ʡ1+L3s_#Nۇf-\ɉhe*g^˟#r 9+XɢSs,>& Ws芔 NfP'a}uTܣGs膲-;gE]M`7NwY|^ Ƣ Ծ&՟ @Z`!X|hw#" v^4ɰk‹7]nܨ2ff7~R1Ž;IfpG[;{n׿RԌ WtXl`gHE'M=/~{?Ѭ>vj{;񏼿wS#T?omnsk-\?Xk"&3N9'))mx~=D$dI9'[R W$fɔ}2a%k#Acic{ίl*hߜD0Leqa$.jxxj11!'HbD툈(.lۄ9RPIO؍l<;FHTLa @gtT |}] \@|_ Ŗ,Aoy=]D11j*g.O:!'iS7jQ )$7"c"!<xJD&s|ᓘc ;2\j3m;zo[/5}\JF ϯc^1s$< ?+?s.~0G>x4Zk |0;}L/~鯗׾-Ӟ蜐k8 Fd֠O`u_AⵯuG=py#n3/7;pA4#{7qN3H7 ڕVtQx@.:G g qQhU6n"Ko7|V+F"$AvAW@N1ըK.Y^[+r.׼9(3*׹!u|ǎSE̷_@sIQAwp{E|vL* v -L2^eo^+m8 @C@+㪥ttJژj:m,R] ĊbrU  ,b#^M~V LGм" gd$+p˒c: Jp'_jmxfLC;Y2Khr'H-[elm\e.Rq"X 1.'DJo³͍&DTRaF1Z=`uj[x%Ce _%;=١ŷVIhUhAk\K eP(2EȇfBpc6c³[$FdSe&)Fl-kNHm4$:G09ǣ&':לCȿgsOq̓ۗW֝I4 n}D>=A^~7 h^߶z/knʡɓ/v*A,W:#ESt&{=.|t. Ԅ?w* sK7r}a:ҝn?|IlVnLMl`DLFNB I}mPɴiH. ״ej,j@WW2x{r`ύZNbWYm8˂Qu0s'mG.)]\0LJufPyvୂTs,_dD[]f S`f@.2 Ytـ=RE O& dcJC*Eg8 c%'kcrN֌lL"vBⳐpԴ=~l4x?c Id(*8wdesrWxD!jg4OjEWw&~PwڻǾ[b#8r-e'.ʌf6ϭe5t)ӃGlI>6,}4gN1}^6ԅzeWFH8ѶtÆҲabk&]Q@>52N(=iYT9*03J(:ZtpMwAaE;ޛi*0a]gu=yK_|ofRS6)q~/~cpր]ep >#d#NxmAN!۫?/zo](Rh])b| _\ޤU>QJu>B6\8 F Z~S< =/פ贈, ~_O}ңġ`C02W Cgayr9_?}ԃ5r˿}+okGY5Fy]|]:^<'ය3zڇJ|1dXvtQ|Bu'-8 ˯#_2l͕ez+4|D&F!EiAj3U__-O-3L˝~᧗X*)w]YZοi(GJHn Dr'&LJQ^(#el7G# W.ۣq9`Nz~$K ^HD:vhW`Hr(2aOG8;#Ѿ^.+M[+ 9<!fw #[P;QyP¨K|) i Kگ;.PiC.dQډ5wҗ0痲t@߿ DEfB1H7VRb/s=O`(5(*8- }*_[RuE$=o}Lr`L$ҴxfG VeڏYa1$ 10+&a_Eۖ+A(;|qBjyt]Oj; ]л  yx5H7hL?sxzjr:o[ꙘM0y%8ԋ.|O1uKUo=KϮuGAj`t.Ļ34;|Xypr_BӢآ2],FYDUAڠ%wSM@ _I *u,gk1hpEa)xó+{k}տ~N!jO>%?͉9Egg^tޜvsL nw~oL xދ^oϲ44NS&7 ֺZ%wb+/Z*n~ ^y6?q?rʽNեt8vMFѫ?yÛޞ$mguQbl|Ǥ&zi}6iRXvlbT4dT|\xL=?Jxs_F?ٌg}>w9g9*(ghP cǗ S*g)O7Ħx}ۖ-\G/Vݢ.$7סtF63oO!hC +SPZm Jv@c ӑۡ!L;Дc/ۃ:ox&b/qcI4VJ+R 2e -FS%mdu$?4aS-KIE+>!A0Q# "o }'5 "Rq##,4ˆ$oRiP~l9G [BVKm' |‘=~ g[.<+/b+N$2:K1rvrkKKlo=Q0h~3yhĤ<6ݴ>10.oXzJ;MHQw׊ m`6@kB,F27kY"mYΜ6 !kx vE-X|0ZagmDjN]He+R!RQ ە5I*T6Vbx[Y.`խf'4.@.d&3tgΙ<{9k}YZ}G_j1y8?ʈCm΄mePvg:eoӳlCm8媷#f x.%Ep1IBE*mv{% q<@'>rykW/A%<<yp{?=Vˣs(? \^/Y=*}3_XY_2z:ܢ/ǧ,|.^'+|sֳ?_^W-V<<.O-Pz>jqƝ=1R; } >?v&K~۪oJOdlD7]A'if! S?K?[Utzz碋.&D_=7m|ԇO^ P u]o'y-5$pK"" jA)݅gOMPK7qbƤ86'GldTRy1 HOhm^iN:Xu?zfacН(Cض+>[ #ϽCyvjPd%yP:6jz To+m%Vg>hr<6sSB)F<גP/Wc#4Y[-/xy7Af BJ6[)@ҾP{λHD?-ak] ,ڲ\v/yv4|`%Cl )ud {\AG6PqQe'Xi/aPUocoM{ɶqqߛNpT뜈hGx'<;F UU=36񏚧4<~nwuX`nfF5J"lƄc*sBӘկտ󓗷;+C rO/k鉋]P'~އpttMN Q<$WcO/^W(qFraܧc ߈UVׯ'o\P58OO|~kW$~| >_N@^å?XO޹|g:_3OF׮ C|/E# 0XykW3>xo|ޯӏ/_^mV$d]~?-tt#`(xٿ4;Ԏt gZ㺶'ԯk'W3|kk n^|3٩ğ?wG៿=eG.PԦ.L~s%?[ #t rB>9WzSoy|qFI :<>t^>>4O{\?? ) w_毾|K>{0ʢbEBӁBGq^#y=<.sX8R5c7$,c6 E1"egMs;"b4֘( 5FXq/qDYR_FhB.FB %ZO:6!~Nb@,^ l EnBBLņحten!m$ %tqaaM1I~hfr&W yP#.{H'̵-y03LN7Di:[x%ln8VRt&&Ԡ5:ïZInF+`r;S֐0vwqnvG?(qQcD 1sC|@C3]2 y"X̮n]8ݦy(iS=(_TnsϫgJd9.c*5nv\0uD891.z>\_o7 o[?|G?/~[{o 1okM#K\`\"h%c+vh$tS=tAF %~fK?CQ$_ }~ + ?~7\~b"᭷46-U$|3ԗO~oZ7/_kqo˿7'5|䄌1Aʏ=GTs~#~O%wX|C_q޶QKWo/1~Q<4_>cAʯ.zd'-?<NvXN+6핹`w~/2.JTj;O=`uaP3> Q= >? $ ]w./E o7Ew@,-LZP^H PG'*i a=%'Ym߾b|GFӆ]TK\Ps-YeQɂ/@ B$\< P\H9(%{̎]k1Bik| Umc+~ے$!ڼ(tMtr[l}%AM>aDM027>2V V a֦rT/`D.q'~$c*I7! SCT|hq}Q9wK9GdC.q|P7^<^WDn~j8Q'UI1MVcx~24qvBȱv֝a1U.VzkQ8 27;%HQNеfr偾|ڢY{?S[QI=iy% 1 Dž7,-Y#ffLq Y9A4~QfsH{]dsޢМJ{_}\v&/o|r}~_۲|W\~~'kCgY'4EP [/[ߠh^cЈ_/}>Фo@Ioÿ<[%?p?.?~_syEO@r7Rc<%._y?9.>/*œL~uŗo;]l}R=}'~}?F?|r>y?s^񃄿Vb">C?t=K?ދ >Ls?WPiQ?}.HG/q_,gqƉgG}3;qogW WO M~'j|yNfۮ>|} 紾Ro,>=]>yN_ bVMp2fOs:1"H8x&6@qf8 ZTNW9^Wc+F 75# s]C!Zl"DB+s}&' д 4p09Q##ӋҾpОVc9~C\'ǂr)B mo@HD^j*}7K΋&|Tm~$XwyR-h_̅;ʣkzOɉ~{:I:?̀2)ץÿk f<|ڧ~g>ߑ{ع"]ߣ otL;#

    Fs!I93Q"%~Fg,>kؖ=z╓`еǃH7.2 KR*#\O '3Q;(KWJsU1=aٺt* ql`Qbm,̼ :q0\Aԋ܅?-҂)5rAȼQL [+fQϜ+y )c6f܈=]:zgqJ lD0k p>rGE$'L"W~TsFE<'3'ô&z+g qmfc?ż1igte=:KJ}77,7>Ž"u9YnxM_Yu{dcYMl {;C& ȹO߱cnֱ{ È0^N|}! Cwĉy1.W'H-o高S"h;7b7?4` 9#}\ ?6e -1mU~0FԓB\0y'C/£^@cu!/b; F}M1GeXY3^ȚE| p+ !gq#?b1pȜJ ("3u=/ h DyJ}Ap=Џ1Y[AHDeXg"0wcrMT|_V:?y!~ \ht_&\]c!%hezR  EtxOsX$o8z2dgŋOQ؋z| 3dejL`5 6+kYwEdh? zK: 6_m9۩q .AX};,27<7A,̑V%?XhdRli%Ů{ҫ?X-ɨۃl`!*-u.K0yj ށ/pmn!RuA_{6 t :6 J>`X}_AN(Ss@Vy )t%9 :8a s |kl^-@1wxDmx> 7{ [JߟўO9XhKQ[|]:kF d,죤)VϨ/kX>y pEr`H%H96;BŜ|puM m.?E~~K>~AG~>GdGd#Rέ>"Rvqe3팉<&8H96ɃPQ kבgwDN5w~굯o~O`9 S{ a@j-Y%h|kS,FU>g2/w;64Yyv lKjzLbJunqml87QMhCiS#N2̹5gLߑ{%}1x>ӭs(1ˈvZ;9wI4~;tkq"y1qռ}#`ᅍ'jiI@t-|sQ>hzG < `2NbZ ڂIn)7aKqAmK;0 ֜4 cGh.QSlaɍ-YȐ&+r-@&l'Q O2A[Mv ë`Gc0"XpqTN\~@4Q-66ZYĝTe KbN (鍌{K,Fmh72ϾZytYw ظ`%ę| MCf1Qw @_xck7'fco$XU'}'ȦtlsT$1㎹sP GP^HE.4H@P2y!}1n7z*udHKf bED6Y,Njk1e_}bbXL얻ـ,xG^:6 Z{İuCӒX#ct=hz `l񏒭h hs〙nB'Yƞ\تFLoftxƛ}Ѡ9rAfJ/laf.!gK ;h ~b0p$tCwp/d61?߬-uWb}t+[ ~21/T$h`[{,Gō%7|KNjR >._̝6]dM=mLQwQAէ\g;;cw}Kd" &͓ɥBf 6dsd ;[Ğ4iV\mƫ |?wLܜ]"-)wDN!0_6DTB{

    )|q%`KhYq;?ʹ'zHu,gdG> cPeLd|TΎRu-Na/a0 nDfWN}̧;%+ tm&＀q\TO.p* W,j_yn"*[2fo0Clz_}!Ƈǹ };#KfsB*b(v{ .pBz8˯~H^EΫz2l/p#s?Yٞ tc<)_{ﾩY<J?? Z&qh;؛79y:~~kF +Nin>2=ƊCZ_y*0)~6| Xacv0sx<뚹kk V婯r|dUJ;Y8ޙ dYh?f‹2*1,HB㓌f#/.:,MI^|3- uгlOi",f)=Q{`s?r]' X ٟ.r>9h;@-xF A=DC\Nru(DSJe+c?EKo<;"wUڇmA2ӱB gzej,d @IDAT6::B.`d;:CJkw؎abS"VgM"6{,CI@$Ƿg$^8SHL+9c6T×,7!69`t/08ZI}z#7zT.IQH$R cyYcHn#$OBͭyI-W>V+x Gt1lz5]м`AFtRD\Y#"J?u<q]Rz8'#(ugjaImdvu\?avo\ionGkZw]۰jà [)~Oo[y9ɬqٝ] P ϑn7k;JUuy]"8G2b[.Q}!PEA䜀{a!8Y9nրz;@+nć]xg"w X{MR靷;V=6>.nߝ0".En5ad[-?=ѝu mIW|,>q˼5'3-N%ՍaP:KGjIluCNtʮv9ViO3FiW#+V Aj{S-x+[ȂC+u\C6Eo1u'6h.}8jK-. YП)$c+>rL[z᷀I7)sb'*ybJ'(\VrM] :n馦"q*>7З()G͹/pxm>/S[R_ [bm= Qe49oƿfk !=jU#^t*=G)\8^DG1ӗPʪ6.NMd*Fڹ%N!0{ 4%$5w[ j< g}'hߢûZKyDwvY{_]VgcjOYic(=ֆxsY |?Nt+S/8N-t e4LaP>-^Enޗ;Ij]/V;alPÑsQI@r?韆kZ/K sMtӴ}09!`2pX حX(Eb!]/m89ޒ^|DR۶pAd^PO<| G|Úߕѝ9=7P!ydHSXV䘉}liC'zjL⏟W$܍@nHl!eS Q~ Nj8/+'d$_8xj,A<ڹ}]{xhs>-,tNss|N2nJ>szOar,\C^<"Z ,klA(}" >2.Z`eYxP]-F␴Yͧj=aj_e}c$}Xy_ol>~N*_/up>mdF6+9&4 y!4}RD +#>2&FG5X 4izX6;'C7e(/3񺰕<Ѓ |2#'KtCߣ +(g#,x'уne+H<ˇѬ̊_#ZJ`0d\炋>+u6lTc|ɌfJ"~D]M h&ڢEifV#yS-du2)K/9=G5J"6Q- GNpisbJA Ի63!'@\nחi<*Dp\ɦ twbD3%RͲޟSmS}0Ԝn<2h1&eK5휛zOj.VX΋\s LW|amIB|&t| wLt}zA{:a;oi9|r4M`Is59!mԌ|s}nNDlDŌ]g$Zu]_CfU{xO|ӷuU'= y\X[=n6 Wʯ]?v]mj^ {n,rE:I)I՚];527tEpE”wݗ+]WePtRu6'8Ъ=^T$:0YϏ!N!,@\ci.rÒhbqU/NK-yXc7dx˹KǦO'yrbIh4ch&X.b9Ik jȦw B)O rP~?#h|O~*)휄Zk (.2.@dhEU۞J>n񚹵`&1Vw~C"f.(zG4a<(Ԗ\hU-y1OFZg萮ǘ ]pM[!m-.a/!=ke ,Z >.>+\/|^9VUsԨG>*:hGptts#?6p >EU| ctDŽ OfJi7IycY#Y9ԉI+}dA|i'0'K IBM`uᢰq쏎E7AM}Nw\'+:J1e`}?M]W[~d«azIy7;95`qG қ-dG-k ~-r#KX !fsl_SfMpFE'm=A<ܖ=A/U5CdoOk.O,ckٚE !H)U_wL0ƱZ[IƵlџD&}ry5wr7Y9wxq~nAfBO/C PK9eJ6 U9 aD^_ع.Y:QS{~kp+ q<^_IחCg ]5zA>+ؐ?yS<[37n۲:A>4zYf,?h>n"b >K4$|'eD[zyxCaJ3hj7橋X/9:OˮLs+TYTmXQm W/)D>/[ϾIN hDT-@X%QҞTדg9+eRtNJ-S^˵/6weZ5Kh'Knxor[d#mއsMW>#s-wAN}딞`GpTi2A ;v#΍꼥JOz\M%<4-(-}_)콙@hh$1uUH&'~_{o]0xbZ(H+,[r✉'PȂ'1>i V}!cܡg >vWj=6 ȸج/lEx14ԋ_ NŦ A9nHj=+b'&W;2upxKEmck$u0c3y6|˰s[k_ͱc|Tq=QE4?j%^S*Gh>xUW k2f{w[,Yq)CfR }AnsAb 0W?8eP ǀbbw\t 6u'DzX9iS MRDn5*}q07 ԩPaF}<,yEj3&HF,}: :sX Q<*?u䂅[6}MaTj[vdʵF?w-_~%]W^{ݶpA,6尉/M|S..[$A@/%Xj-2r>YGYgr!kgwq'qZjK&qqo7ׯH Z6Nc;ٜ\vual+GI=[1Po(ü![d*{ >Q;ּ5o]74ZTYr.0^qwPJ3c`uc6z@ߓE[Bzc bN fӧߧ`vmǹPl5,B.]pq#g9 ;  yR}ˇ 3#՘{.9P`"OWZq v4H2NJ'du*Zyn`ĕ{YT_ukxZ OtdD{r|&08]6_pq |waVdOuž㽍#%C#F9G؈]*|ض5:БzOo4{%kg쁃_'_X%=s&w 흿$Rbkg[zP!vFfl_ZP}h]S-W6>SޡʼQ[{oxmm7EJl]ꝶ@/oooήnYzq# WtZ]֞O_|81(=~L<#hG 9@  dCfl Ky\=P¶,B4dAׇZ)L܃?av4M =%MC1SҘnH&7#l39Uw= I ;+ %˜ o>2͉mNGQذR n7R$mKJR'&X}}z&uG7d*s|~b_~SUsIĠ?>'\e pODY2[=>b@o~O5QƸ%"Zpb=Ie at٬oE J-e.Z孷^F~69 q7ו;|~cu gbEbռs%tE#u:#$ѮF#'#w?ui\: >?, [|`yz{bօ$@ۭYW]'h0턻7f0a`sK+ucLהŊlѰ,^R[›5cGJԓ9<<}\p".(#]ip'%k8-*m=e[]5fX(zｅ1ۅl1su}T;NMCւTB> m5cFsbT ǹ'}i-^E2*k,Ϝɯ_b"X'VpϠ ָT}Bv!U{tebҍ|SGgn PV\$H`Z3}_q g$9"-<Fvph%A= С5l`8q9;VgM ަgWzd$鳻uOud0jECP;Z5;{҄!M߁0l^i32f =WZcNP{h>p KU殲ׯaWȭh+pօ?DlP /43 å !6&)?w+ W! g䛰8Öm[iq?UE,(B/UJ+?OCndeH$BF!4w$d̄ 䯡Fs.'W{lСj;,_ev>si&c&3$>Dv&TE%prt]smPNڛ ͈9Žswpѯmh<ň ^UiϿ}5iag;"gbÔvim:r٩|"B6 _B՗ҦСy Lv- e z? FeXfn0 T[| |~\Am z;ʕ( Xѹ dr#IPA?Bp7LE\^ͪW۽LsI\Q_{t]Çr,RǬd^҆r?xW.hp"uSMzvHRR0BP0蹥fjhCP=?3@s$f?bY;;#23k45vHx7C FߛW8i?KK?Q-EG[,T@hb eSGn{n[fsfOkH!]ͽepoK^JN9`'yrM(i2^gMGNYaf9%]B=f_:#͍3n sS/ZYsd>mem?;܊G*kA@J}ʋ/\^}<|[z.\yWo+÷\#cDܤ^^g}=6.+51m{ZD/! hu3U'8ye*r2<~:jN;${ ]hǀW:b^ky2V> qe?6clSǖ('w%-++N.K}hR-fÉ~=#c3TW/Ρ6~ИMi{ p:/ b;#KDŸ9Oy@|kޔz =^ Q1m1")bz|@oI׀(iڌ:t>jŭ,ϱK[J% /b0'gx<0<8o3)N]=mLyqW}GɈ+"h'@/rvci\0n)6HrR1[ۍEi>_ PlE,%:}?pQ:7$Yܣވ/i#̜e%_!ϣ}<}X57*/Zˍo[Љ]7FCm;DcT` ̈/n!xR|вFWl#xخ}MtFq;M^+zB'FhkP3G'Le[on%߭;Nc/d솞HWJ@Y\K#-;׉#A2B&hV,`cy„s*,yׂBӱkMMyl3-/g|o3Y55?wjz#qҋW/o"cC!֧Ǧ= uaodhɱkw\GEVjZ=2V:|'E4mAErHu)v-Q_= `eDA׉`N4<ʍ*C뉧pYș$}Eq(*lsS<@wr7, 7p-ct-‡"9 rW=`15lGx]s̮e<$] r7碗 I+! yD?prōcbvU1>̇]XFFkY;RVcpÔM:e^CIc,mj)W ܑA%;$%YB(F<ƊaZd)FcB<%-,uo;g?1p NbsïfH4/T (g d06auQNJv+I}(zhw |a:xH~]Sڪn'å* n^Hwd͙=>Ùh >X1n7#N`\ O(^؟m˧Ҭ1X)n6eigyW.uw|$9n/eJ&70u'֚FE6U?#rkMͶX]8{- EhC9lv4D*H?E}ؙ[ r%"Hln9|HE,Bk}}]u|6Mr-sݶ [rzEpy-{_d}܈{lvP[x:8ϧ[Mg{z7s-q nF8R K؈n>1 .\^y+xy:9 W9p]`}F4j v8ɁY'I 3ɷv UY=mzJN;4qMü%c<Т"(z :o Զ),7*9ԷjH'P%P`N*C/VoX^皝bc)i8/zW}\v Y{\pGBEe}{aKáKcxEB :uv`\)fhV6PޮW WdVjx5'_х(qH`?bZW &Ha~TuAyȣk}-'^ EވN]Mܵ @]-$w.So}?>Y 0%յ/&}!oNʢ:P}T$ đ֋nOQA Ɓ OYɢ-~oE?A9)X%]ĿPjM?Z0[}6G"}og~MH}=4C\:$m(M-MVߝtb]S5 ˜]N ӮlVwsaHu2g861t<|˃"&XݓP1Rqd=~+cޑ+:{K,Jc\mmV^o9ƏF_?H_xPK [ġ뿨H{KcZ4D ֹ(קpoug'x8_ȡ`af*MO"v 4PIt6UֻAKVC5#)FIc| ^Wm'v 1j$YlX]58JguGrztVq>xYN s7م? bYGBZ%3e/TKQ3FP0urn8 PҴyJ5APw(cszx{OZ<6H>9B{u;GSg$}-O%ZXꟅ |ڹhAq&,6SipL``DCZ!a)Xa OU^cb%My&Tp1wUĠWun҅dyݶ`9M.)3oTI@(oO^ǐql%\jibx R&'Θ8r^6RΜ'*(Ŕ,jKU?uХӴN3ުtK11n#?ƒ[zѪ"kcYwZ-j{w.<<6<!1  pJc tUb8nuDԯ!1wגG?@ ]ՉǮؚ6Q-ioG.36Zf};f*4BPtsc6_pB}BV)IޣG)o"EWDniy[\Ss?7s87s.ob<rZ}~_vi`5zf\%Ǝ!Zălc$+yyiذ>2_ NutaxC184S,d8K-n-Yn,v]v촶CzO|"#MUht^@cFTIL: 6MAC`mS51.T<5G6V'7#bYjr†>#?MxdKmn/E|cQRe_%xB1f`{MBmQ<;qM-|Ƿo')`5oX0l2"YDPr}BDLrrn2ņ)\.XW铈2U?[|,fvDzK{/r5.1dqOs{N0yy&dg{%(ɠC Ś8s`O@K?ɻF7de޺؇h_l(HppuNO>hd@s^=yQKt#p g̃Ec,&"™ #~1M=i}f2. Bo’\ #Di>E[ETfJRu~|n;N).6.Bp#q9u>o+gft :R*Nr};{Y?kٴuܚ En|T_~pJJ49_cb墷[d wr5u:}%os7 #0zӛ>96b7lXDTiy n]F)+&\o{׈. ='O&">1ً~ <v:qoe[yYe` U9 K'ygꠎN 4+#@Y%M+=ItUCi#!G96h5z /_pA1c޸Eq:>'|G;OWA}2z5^%]t殎-(l/DI;`†i #! ѿz3sb?%έPq<~Ϲ+']0E͔3JFCu7t<10:3D"l A$dp[i0SA>z +9[4(ZV0_4%H(ΆpL1&pB q6emI@}4\iS+dUC[:"9cYGox}MGE]ύ9ޜ#:.<~ߑzǘWZĘ3|-K"8I*m\<.ޤ|P4yW?޿$1s-M%xCĒ]zOڢ#5v򶻠Ğ% ݢuIoV,D l#w'Qf== DYMO-`9Y;2 ^7'v~::Wv~ fcg f(+ W{Mw>0 ʫ13ʽ-[(,y;҆GDx|G ئdQE/Z;Ogr~0e],~0nc33վsAP),{[va0je+#Adb((;oC:ZGi0β4s{0w&cZ;6zeoKm4e蔟ve7$:V{I.|e!6K?|cnr^u1j1}!)}?}h/[m:yu\ ?k잁8u@ 4TӋ>X`ۗР6J=89xcs1mrDksZ,^OcS"yX3N2q>?Cg;;-m<85&36 6=b Mxi:}_gcщړY+Xn(`LzPvƠ)8 B_3:4F/vZ8>0z*tʍ̪*,;7LD+8}twE*;kt|![^ 0ҧ| nTINc[o),.J | P{%ԏ8>`|ۊٷh,)wCr3*b5зM&gʇjɢƇⷑ)/,˴l&/!~<7hrk%'JH 4eT_+;3䌓q<"%v$L@:ŜG@80Dδ՜biCcU9@IDATX& @M`9vP]Fk|ng$R}5~| !;iCè?7Ș ƸKY,|ϮrɜL~7%DkKNdNl813N1fܢoic 8Z K(Pb%4 3cTQvkiġ,m^M^ !jDa,촬Wk+_Ӱykl }ucm2u k"ȠkS_zy['W>" 1+"r,@l_Qx%>Ģ MO,瘃Bk_7Az9ȿ5Ζ`eEw ~5}?d[D{#VLB4$)cE`‰x4I'><#O6-HSlol,~PZltIt\H C*ziogXWSKAm /kad'%> nOcEo@4[ha1Ó%ohѹBtBv]! IPJC-1i'fZ +kWwj_?e_tYz.\ߓ9uxS lpij#Q-<3p>)w|Gl[V!+4:(zSW8rޟCr?ȕiQrѣGUmqNr[gb8'@{P=Zio~HAKuUś-Y9wwk} ֔1NEʉղlmkȮ?칋f񳒭d9w#-i+غO'p4$T)&.ܨ9Q>TdӞ심ဨ?qs"̅>z٧[]ݻ5*{,ꇜtr}']^~eI)8뜠}=?uѤP_'~9mfUС 'O*0t?k?#M%e;ٵ;FK Tŵc>'Oc)Z_x 󣜽eѳ//pz!}H}xIe.Xfbϓ^,*SdyχH\kĖ.I~8t[1BfQ{;IUYsb) J8*W&< vܯX1#]~;B(" P TQAOVzZZ-h[i?Xj-V@AABp\NNNI5{}ߓoYgY3{}{Ѷ;iC0kREс8Dbyb[xP{@dISloĴm .SnK贅j5=I{H# {e񡳷EޟpUC6(;u\2@zg#\$c[1:[>i {*q꠭4]~蹊"?|߉Cwu:yڼ:W13_Ǝ3V 3Bi;iwZ"8yĠy4xf_\o,<9(5yP1 qmMQ6e?FJu.1:o Vv"hehISwg7&(4r[Kw+.;KqN[W\2N_},#p]^|#̉勾v}swkyk߰<＼5_^S׍G~[f˛_4s @]'Ԝ7^Ky-@߭o9ej>xW~G>0 W}yʿzwO!>p dy߿}WÞqi#aov^ww׽I>,Yg<]nvW9v%%wrmo7}'WA}?0PϽL=9Aw6byʫW'rT_~UO0A2oRhc*a 5 /Jh]w XH{OOp `5zDɋ>IC jl)Kq%[ U{<P~6xe>`+1U}@d+C=H^if 6VcJZH JwoOHmdWH SWԚѬxmRrBlq/xB:D*e&uawf_EV`b);^={FF$$1缽BcER5XT1B1&6+٥"6xp4̫ܿ2Pt 'vCp+8M-ҕM^m\R6Li~[Ix|b:4:MzxW%" r>3QٔrbCĮ( >N@"f:vEB7_!t{#x(1 E ODwIM5/sUDäd7OP[ZgFoݧKO;z┳?A7Z,QdGO5N6-ƞ"ײ˨vf'K˰88@( w6lVoC+Lv&?o0,>?R㩞 1n%dGO/w8/rkfeatz~|^[~o޸~r;~yw7^r{c?/{O>qٟ|綷^5'Nog-w%lyʓ|_'^λKU駝>oZ>?O.z}u.7xiOyrϻrqy7=xy_ݪ[ν鍅ӗ3‹>  1(0~fˣ/B|~{B b/F8>OYx۩=,O}7-79+MOXrk}ꅋ4I˝ {Es 8)~[5_5xt*kdYz-7ڏbT(ңs"BYoK@wmYtAuO7 !4cl5y9'AQ1m+e@9X+AҰ2rs9A X~?)gE:Vi|mceShp BWdbɥ-G<̆X>j؄Rٓu/^Nfy 1VNF4*H[ZN10ϖ&X\>- +WȢ|ӮRs3-EJQO?~jR}B;h奡xK{_ 4? Cl|// Je&b3*mߪN\.kS|&&<58EN(vWϴ, ]gimAǂ|X]h$K1bE$oJ5\h-*9H Λҵ=#rSpSNġDH \_qwXfs &@`mFJaxf hS&v>)GJ\k 2$t: ljiO Ɖ; ]Vyc ɰh^ӦA+ǚ}>xxOWn (-Ovs>sW?˗}]W_x{/ɫuE/ezc? _mO~^-.r=y‚U~OOLg{'DxrW'~L|GQ˳QKA+m'oXm>nw// }e/-47~^|G?cz]~^<<~ˏw" E9Mx<-O|wALONң˧{/^_U5քp9ƁA&hƭdq(|oZ_L^wH~Eh;H>Ax]`![î=|.3bk;+_NǧǦ;;6-47Sv~-#P[1{^[2A{+{Ol4ש*aD,)F.RE,| v|v#`_6 I9>'ƍ^ Xn01p(:XGd۟Dh?vσO )qvLTAvg 5mMܫ~S)߉vk~/w3s`ڞMG'9XUn~ !2tubD6 A eRq.y$x>xiU#QzGz'feeCO"pqw1vVѦf;fk줪ćr;-ήػsɕN@] %տȶ3a@ξ!O:~@'\j2yu>G `r@oOv0Ӿ2tfK;qM%%J}5:߭ұ0ٔ+#cZꜴ] F;}r/dr #KSk;o1~:?Sq*9qWr?6^R=~x胾fyNB6ns>czoZ1oX,ۿyz/яnSw?ڏ3LXW.*,npayB孺5jv[\;Y|C|xXqs w_x򖷽{X߯Ԃw/cm1Ӵy3%kq[⦺rҽ Ms}}#z/<054d?)CݿPذf>\န;iPt#&2U]MEwՙKm%yց D”s:?RreQo״Zּ慚“&}ڶ/[VemE9P̛CRne42{$N| Z*z [<7X {Tև+n9)JlxGdO\?-\"-E\]G -ѕ\":H]#GMi9ǂǸn\ nIGPq5־:K:*f]V[j<HS|h^Zָ+.3.*:FU%֦jM i:%c!|]4Leged0K.x>vp8呩wr;1E= J׋}㗟g,/y٫wB|9Sw!ϦcQgs[>1Qu˹z<qxӾ[cx,:v|yv]=?wy3};C-a_%Ww^\ZtQX}dhMoz}O HhXRǴedϹY9?}:lr2@8,2vHH|"+<ժVl|@ok|e8H%8@3bVis?K*i2 K9!C?Ol<:@@o$'&,kLCς`IGИZӮ!;MrzjZHHݜp"V\\)6Xџ1$N"&cXeTRpJ>V6IG? hN>t_K;}e93k`OfV"2S7~N*at[):?|}r{M'_J焓rϏqǻ!~ܪ)P|= ^b11N_]/^/Qo~#M;Gx2^(ֹBw/^ /?}R#8zJrW/Ox4ufR/6vC!~SxY| =9;N]>]o#%?{.7׾oݜWn;N|y]_3Z}MM(g֣vU"NkAW^W.|2'>zXU&aJ*CDW'GNFsϲ@5njz{pALbQNRpj!'H(F%oeVOm~"~R&?cI;i?㾭aBNrE l1)ٶ.ws /$:&31DGadk#S>+BAj,cwUR6j{}ӵaikH2du򒁊ÜnoLnA.>w3vCfcPQ˯F6 '`:A,+RGb#]U˧3,P"b *OL!+ZAzg:r}:YOzy]@|yOxo?=>Idƿ.w\~eDwn3?Zs}g}>I 翶sF|t^PNߢ; WO-ty^Nyr>s{)/>7CO #p8|7}_oZ}/zt:~aEyO*?O_~k+Z_6ާ>iĻ.?אּ{qy3v7?7j|Cы?v>Y_z<}U~Ysv~>xOz?K^},^/_ >_}T s~[?,_zG=p컗g-W?3ŚN.dy߾my.Xgz*b"RrWqăDzV=˿0YOӴP9~my[Wxg/ӣq7wc!?1HP#" ;ICez !~w#T[yѺ ‡I+biC%a}dK.}`%G= e\۸մaKX' rO)&ǀ\a-Ni0+xRYv`7$0yh.j5.*rGeJ~ ET閈QPReA"y3(s,NYAA yg+(E1wtfw"7ZWkN#]܃-88p4l&c=nnɍhא$mǖ w$bbvӞ6lv32UNcr U $m>uN P^]'`zU/7QOZ@,2]D}iŕ:!|u}o^}mz_zWx|42 c_(cԂ>a%첰>{`!uso6\ ^UNO ;cb!G.\wYN[k!)}X'_!}\R8"Imo{+8O 33?|9O^ݍZ'Ǘ>)ropósB ~ e^||SG=wxiX usI:cwV|>cĥvV9O]?)L7~ VϞ̮&HMKN$8j?$}b]"T/~kKT6Պ+N0ybE;o9۠DUA.qc#ߏ;01V{u瓬݆/%F<;6LNqHm/ԃ{*L˥I\]fq?O}$dw[戚Oo'wMs~e</xx}%,Vaaxb'AłP;W&JtfR#Vgã2[CCQ-[N?3t_.׳.+Guɂ=FQ~LOa#`YкOgI$琏]/A)\=H6碖cp*#> Y'>~)'>~c;\grʧ>KZ 9Gi<َ0HJnxv)92 ̮nbsѡ;6µ?A0>iAuZWBIe5 GvHHSWI 2#2l+4؅;-ʆ<E)q> '" 1d҅<>5w>?U-edtpW0;Uԧ.]^7{\rĤ ;-̏hިG.~´(|KtŬ $~!}2.;k⽟&&Y\N{_?V7vH+swHvww@ƄvK^m>E9' s]O\ ﲺݖWjy싐3y G+ cx9kt"pWlpH XA\  *WЇ-O'-o7-|ӓŪw VYM0{ck-mIɏHNт܏k #:|૭Ws㮚NTgb;zhNb lj89 >|8; "c=cCNvuROwj~IVV˳/|IM5 vŅQ,h |ӏ [<~$$,hH1"Xl }!XNQRV:^$U(,mxQd`IaqĶ?FBBڐP氐J 6Nd2H "V4M1Bje mpv]b IԪ@j C>d.NMv&D&QS+pܒ}E'yf?}x ]."mqN\3}k8* gVZ*c%4m.Nxx w9M<ه J/Pg*c Ծ }qG"[s8#1ȕfJr4U-Hs X^? (7cMSL2hFUhZij#w:'KtFj/HaMb.$Τ5ho־4b^?3õP6t'pwTO+Xb"[b?t,D}U- JKlINƊ; V|bXvDŽ6ѓ~NeۤR>ԗ,3|aA»gQ״#g;ُUM_wlղF ;TZB]5+4jU,:\{^!: >Qh3MH4|rn'@^ 8` ]Q9q5:fy5Ap8ad[FbGbL1)+*&ċa,jZj^0L5v $Ty|Hllfđķl֧6ŧ8VJrG'~ƎXv"M6x9uG;7wo|dJ&Щ_)6gt2T(r.e quuj\e=>9hS.gVέ= mĤNanˏ\~A.I/ rwT}g$I>RY<((Xb9aR-B唱at$?@Lt[q>߈Gڟ2Sg1>I(1wR!]\E>>2TL}*"e5&.E4A~qJhEI]iďnO汷% |r]h}*KLeWa^Mo àyG[Մ#n;sf467 'g8/&"EUn! C`|IүC,=]| WeN8+|~L1mw,Mys7y;qN+^"zcU⅐ǷdjO >s/q5\'wOezGXvC}3p"oܘD7%zo L{D/18vfU&BS(i7m^B)uLv'_hx+AWas:{e+~}'k~3~2h F uIs,P`Rp=/HS8cdWz%ӱGt=)ՇjInjfHUL vqeU{.e4D(w1 P׸]/ޞq'!̛?YZ#W>Ї4m6 '^aNr&c[`܊f:ɅqpKz,7Dxl+eCsD6| iYN&#_i[*QΗ\* 򵂎>I|y1|O]eLxЂmϺؑvOnU޹|7"Ai`[FWs|R95 Ǚ/ 8&qq>>lL)!QA;p+pءn62J4=zHGZqh:EDЯL䓒nGD zuЈ>0T9\ǡ[͈nkN:OR_ ƕW\=f M! 'Y4ZCB_iF&ze R*:Q|ukBtJf8`q#t-9pj{UjC Ͳ2ݔMI@u! oMKfJv,V}2nnV.ŒH9i-5|ibcˈF i׏ O}"*v/=JT1:o*+Gs!Sۋ,N喭Jطz7yK O3qU8H0&^I:.5b\6V,rsƕqE;hQ}ѣQKmtˇq;aC$fʩ4x] d6=bxnMĶM4V D)5u60+i qn$'3j`8H,5"E% *3@w; f:G~Aest2 XdHϭEuF5<(W- sB:]KEa)2jw1&[UMB6k1Cm;ZGW}cl&i{BQ?V2AH(&LG[}OIi;y&G ^@e86x jG[.^ʮMޜBn quRxOO fg/`Cq(2V$8 *uxim8/Pg5JOzZg'e~ruV.>.FB6ǕQ74Eߜ5G|.@wm8n26?P#aS@on\+p >'Xx|rݗ3-ܑصK(hk+&ٔHU$\+{A/5\y\V;W^q^T;.M+\穒o#ݧCo/ 3lcw.=cC3ix?۾4j+e}8&eA/n\'Z0LIm# n]'--^zm;x!2"S9 5媄n&8%!p{E,\a7TTzwd[# B}JeOVT [JG~':ݲ^_e bcV717G+aqYꈍ4U˅`WL1m 򕉔6K i=m'n#8@+EȻ7XEкSRCEw i|~Hwe2bÂItmmaE@Nj&{&62nIFXHÁAq!: _w`>eLj,F$p蒨/M]%W(3NS|w?ت ЯVu,yG(vYSùq~(9I"N"ӝ B#apJȶo'a6A@54$tWhKJL%dmDwLAAk^a/w j8|cȢ- B_ OjvQlYy / ~EDN4Ǜu 5 ĮSũYsZkfQVhB@"~s6W6"L'n 3{n '!-M4aFz 'XkəIEV\+ U9 akʵɴ|Qcp7Bņ+h=);8y yYig4]"uѥ1첹 c{`WFɩ,2ѦbۚP& U0T10cؖAϔ:Y6s=(nA R17-OV0!c? 1DQQיKJ KAIcłgGmvmզo368NxС3t7}O$N@vS&Z?ҍxDֽ"W}8Z]*_WrvpK_Z,$b;S'.-lg V cdLK9qTX2Dr[nͯX&;F6uU3U5kq?̇:)YdK& D W1&KJ?TEUf8?fY3"z ,HmD0 hVLP&d#.3cӖ]Zt_ײz5<d!4 v3XL!4`d>ox ԙsP@)EM iV['"[47_$I7' ꣡+`J~C2i"Eq 1&EmLfT1ıΖ;$yR"aB0 EYg˙AM_?ŎcX xϔ|q]6ܩ(v\ا;S5>q䪣;w,\3lÑ-"nmP-i9%񷈜ڍ-Kګ#kxגK4A~qv- tHγʮTfXA絜(& :+K,ܓm ;Gvh;A譋~q%?`pvw>cl mR/ƥOEGUz;6ȋ7' g  IžP6J5& %YܗsF0&ƚѭllj e 4[;q7|T?3VWf5'ڜSזAn_)FDc->MMCg%M ;1 Y~卖@Fs͗OVm%2#Etֲ=9PcQ}@ռ` >G(ɸPk M,eK*L؂TZyM$O{+r#zJ4\W҈3BAem)UYǪ H2koS!a`ζu(  '0Eu* }W-IEj qrLVw4xb۳ЌCAZVdnQ1dPY^lJXpmb1$Oj@66Lggj7<&5^& Rj9 {ɣ8P8xD92lW OqiՁҵX>gVˆG2:9 bDmkqIapZCPq '\o5ccxçO4|kbF\b@>1<ʩ؏hGK{v;-f+uҜ0Ta6^j_*4N嗪nj>qe%GNa*h_P_"X7p )G1:c49< bj:z(^ BƴV~Hq/wÕ`B1~\--YMVMq,auRcPaĉvI;WU70f#e\RRa812̆U.:e윀e[\+hYlz% aeAs kˆon4lBG MspćZC1%=zѢ/{@.6,ʦ͍P*<{g)&>wˈCY}b։A)GEibڟ%S*WPri>l^Zk).ċJv@uܬuƔBѬX̀+[o | T[QbL9=P'!^d&8q-}<ؐe n`Pߥ5|71jbz3Hd?{QRbX-DoW͕j@D,k{pT22].5g;VZإ5ylu\M pb" _\3ťa+neݺCv`Adz!} #m738%3m )'@I͐X7@ ,@JG -B ó2WPrKu[p(RP+Mݿ͚/ SY/]T|&d~[YZn% <υ0Z;8.Tr{0-r{ŋۛإO\56`v|} he_,'L/VdpmD'9HIX m꜒'HKHBE Whf9kػ'|-N% 3sQ_,cYRc3u ||8vUG.ט_ˡ ^[NJ gM3qЪP4ckQi;6D6@UۅvtvXXwkDq,x; ÷~4ߞYzE8]x`dk -ݞg8948G,;3a]iEl`c,VUف Am3%$$V渀- P Sr`T[šv9,CZݯݗS˸*TfD*2CFFN(++) i$Id'I^׽|<_~?~:u^gzwkRVώzj:._m Od&#d p)VY4J4}ryag~Z"6K}y@4i._GִʔxZk#&jG mD<^#]l= 4:vsNqrdwo+lj@9Q5.()cra_x)W诀@&y xfqj&TT'>;kwa-bN,C)yS% pZHUW@Tڐ8L1x2gj)i|ňؐ\p`uX+ ؞L&L򃾉2$2.AA@5[~ WJ]qq={*f~NY5ʣ5L6BœY^~(ЌW0qܥUNe(GW43Cҟuik\óuٜgsfMLW|j;$p[>Sgl^*D oyR$vt|KlZ^tv w\@a'xYv6VEl Jt~k?>}…16IYOb]Nr\ ) ˈg8=CZ&xybvǶ0 㞲 9D%.rзo$'[莲 rd0RaY I iKykl6ܢ(\m먊_yR"ie~/6 _R+H=%@E5Ӽ}l;EHlɫu54; 1-&" <["`hpOd0 A>!oYJknhkhSィHeLNC^EZi"r"l^<.yr^CCE L)% nAV.5+.XmTYrҦW5GʅGHBhQ ;1рC@ރ3.MFs2*T-8Tj9ÿdu/D>Dlۖtu!m 03У'6зF$`ei*`.T1E@}1X`>8X5FA..o0' ,"Iȑ1 Unc)g6t+@*|G C}ےEh= t(\oglvca. ltbjC9R?E@{tFE2}uQpmqdfN&]QI5%?'Mq*Nj3>d3ߞxv)-d5$} \2¢HdFAR ~W5x6r:Gm=RΕ2CtiYI869i߬[ ͵RWPFćsh@FWރ,aƣY> 44PxiaI`>FP/ ǬL*SD2uCVR)pKVۧʂNc[&mg\-V*NLy#U"M0ȁUIro-6&-ݗ| ;TŒ+W /& 8uߨeys>{&/ݩ34" v˚5 qp C+ݍhm40kA"B _U6zB<0V|.O$0\ v"5?+#Mn1aB@ɰ]7"F'Cah-8Sˬ"rG׾{es0. 'Яs;eN|4;>P7KաE[5.vਝ@Cl t 2>f]G{kk6CVt\]İĪ˫2N\r< ]}W}[ (#CDD:~@*Ǿ]?rW=K*ߎUF)4 `G@mkD)\r;J+Ωy`wqU7Db%[`4'1Yd4VUÑZmTDam2Q+^.Scw&Hyu4O|\g"E`}%lܴ sݼ"5~tL[-Fh-^@X:W 㽣Ɨ2ll<[ۓ*ӕ#-,#n:[ ԉ4ʉڃƐ$ Jz⁰\;`qȰ1[=`eI>LKa_ ƿŊ?0k+I~N &Qr'(jz W|&)׉ )9ml262 ]6(=8mb(g211ĴMS+-ILT?~1)/Hx@E&Pyx*'adN` !0\t1-'VXҚɯ# Іz(Ԣؼ?N'6D>ti#*K:on?pة6CS67m?ZQ UόvXQVj `YcPPۙ̀U"{olK&UI}sKNR<2]BSeIo,tF0qQS|.EV x ϵ\5ёT$~ͬГBr=atF' lJ;Smon3/\u&UtY3KJkhT_Ps'AWX%p8VnWe**FdNJ1V?TbM5b5L .Sߪ5 2͸AnIqo +&񨚵$۴/h[=oPHvHaC t9Tߦ9 qƃ UBӧL*fLo͌"5G t梨nlm=_Mdw1&jִq̜(.`])X94te'YlyʿJA%@/N5l+@=;g^Bϒ ǝB,"u겪Qp_炏):xIP4~B|SKz&8h :548ukY0/ZZď%_6;7g vI$,+܊%t87H]lU)(~tgI>QY*> wx5qRy>1hbAdi}K_e(mXv7⒵;7[P bG\o:1؄Sƅ̥bʲ[ež r" krAMOB~c$p8FiB ޳ʐjcrm 0e ~x( GkF҅f&ɕnM~xIf;PխiH+hA{2"1etw;ގp_!M"_DgmP=eκ%gqv`ȸG]cJYI6vd["-3^9Gm*.YǯXX҅$Mm xFZQ3$Ttjt0)W޺oW]I,HݙN"CFj2XRt`UX^eQ(8>n"Jsm5`6m6cRc."LFdc]0x@pL]B.>2xTf4}$0}23NG ̊d٬ic er7=.UМ' %]U}]ٯ%C(]SdY_!%{o$( 8kJ[9Dw]i84`]NRE/ f U"tc+ l,,:P8,| Km@'>TX.gt+pUޔ̳Lh)k  !VpXG5H.<PsMVk#1Q{^piϴΡ3HiSryvŧN8ZdQ4 #*z-IXe")JauVzmRcGlԸW%e0qMmߤZVud4 M۪ȝPQoc]q@۫KK\phD&hcGtU gXE_\X+Qk.;:p/N{= G[<7dtRQEV'G~çe'`,:o'Q#PqתKCB' "+BtUd V6>uƊ>"S!F%h{7Dd`GIzՠLP#2mKTШv&hn&BN%lkhȌK`}Ξ_M\' ,7y<ܤ7l2-s &R( ~fPV:؟NݺqNk^`~>ƑNp{"/A?D[t,v:]]ϧ-bVj;E^Y9NK(y!Ab*4 ڧ#1-m\2Yy6Uc1L\蛬 ({pJl,?C2eN Rjc*3HTœY <썍2 K9:f[ 7ڴ.ZeofR#)BQВ;*$ 5"*u\z5p?vw V08/:QtIE҃"x{t*f=YT%aLjQAS/x#!QZr?U&pF@$:wǁmCO\eHȦ0t#Ya5:fۑ$UWSn![q G$]YU385. T6Q" ?qN+TE<,*2M:mEpSH_&gc3 }bUxmMp&0LVx(sj(m+\Ϧ7f^~"^yb 6HhbZ!vlDnrXT[B}a8d>-foӳoyF)S:vC4p{W̜:YYFj ۼ~ieVe|nc?$ bQ-{AT}L,@O@v zӁ^-V-%sAG<c S2 wgN3tMe 6]ZSL<ٲԭ=7"R\B*x]Fmnq_ nn@Xe /5R -@ aV/pjC5{ȸjr6*U]?:BQL;|Invyvt\ vPh⺐ ѥ =bk!M}P3q@.8y~ՊAG_cH]F_xSKs g81+Ű>d$d܃ɷNּLߏ8l.]@ FXMKfKDŽVhkt:ڄAdˁf+2Dв: 8=Rf`1( ;DGGe^gW„BQ++wª\ѺªnS2VWYP2%L/#G8)GoͬN7`pE睓.A@vkTQY4C(+grx#RM . ӭp3|  j#2#e;>Hp(.cI;0a8\R&T~ V!t#gbt'Ө i=L ->AUan"~"ZrDyeDp.|p<;ǀX\C] BW/Ǚ%gN}*}}",t&܅.ӧ#r0܍ -N 3aS$g'֓ lI$ it훖>3huac^#g@c!y*˴تd(3X؏Yz"3mt0F~N.B& 5q򄲁hepWZj (9.~lZ]ZqN!cP=Jam: 1,%Хް\3|cZrIA/}9O}v2K- v&I l@]2݈\e*`9I:kbޤ h'pu>TƲv)`նE"A 8P:o<4UE810jTH148ɚ{HrvN֓= ]¿`Q5tA~{};_I?c` t(fى]nD4C3EfHGtV*Me?# d]\85jtyWLt _Me.֕id.1 ǘ`"DВ5f-~t ~z3XzEWNϚ-EE0%:)CIyIHF)D>U)gN~ \z%;m sxk|ߡWg[J 02b@pن5-Q[It8mHx5$66#>IKE|!ϙ\Զ a nNjg(C5 0f2b PN:2k{ullpaeOl(y,MF'}.d!PƝQ4k]],LnRdV瀠iF:Ѓ+k2fU]Do#떃?Y+_4 Щ15)V)9$]CHC4һ+5 =66gߔ)S +݀T}Эf_4.DWJ1ozYgsLՌ g`=%%G4Ja [Qa7:̓UN;Au0BE@WfEW.$0xfjbA+y{WNo(%#JQλ.+CFp#Y^R2n(fN߸L,åט1̵e=$za cqyqp).p'NQt5o-?~ i vegm֛6Dz ʷ,:}XfYfˍ]n2fԠrI/M?0]c+;l++ܸk@MSLmy!9Slke@t*:돼M{)iP t=uS)S4J(NtTN{ 嗼qZ#Z*)r<>[!ѷOˡE:rJ'[TJ x8~O ^ Q~ghH)]PzzB޿2E@ Ϋ*@]hń0e 6*hDi-/״i ~\TMƠ ?3ϼ$8%EG_$-Qөfk3;oQӋV;k_c2mCc)Bz0geuN@K;JYk,el]R9$ ƃw+؎ x"'ʗtOO1IyEx`BRQ_GVH%pЇ:ۇΉ,[erOjAʤ VIy?M':}ݺzG=!ᕽ펼>m>iE爇vPL?z>XbuZ;dNJMJAiϽE ΝA$@;GMg^|)ɘeV4A..^U j~b3)R48F1?Op0\>xkmBz{⛗/a]H "~_6\UB4"Ϳ4"5hiuNxD5B_P}~6l<X5ʋskQĊ,tU@Ķ|(Lk8W9) WpT]Ӗ|^Ծr_'啨*+̊:QO,#$n "p:g8buĀNZ'^ ˕T)Vs(3H7@3۪)(noW'QU1 VFדC+Z3AN*xpTyR;Scg_R~u2iʬ+F?6rm yU/51Wiy 4ձ?Jmr:+.{璋j%ko)?qyY5zTqo/J/.:CɆ~:~6矷\yJG~z5j /uz_/;fNG)\sm'Uq~MZmpʞ~lCH_~ʐHr_vwݲ̧ͅ+voU)W<>ApR˝wݫw_ܼe6,]~|]nL/W[K?\y^3cǖ]߼\uM套^e5W\`\gˋ/R劫B /XvZ&r7ǟ(e^ήdyǢvAWV)ZsmgQ|6*]U| bgx3ʋI*}/wWj&-+g{َ~Ӷ-" /PWNxYxqnc+[lA˄'Y=%.3[?lF^}*ꫮ\6=wqCe߽++lMe{m[]fr_(V(C}>X/Ҷ.mv;e.W_}kO|) 6y?6w?{޽t6yB-pluyDmި6ab.-/'*Xy{E-Xr Vi:S(l1/<3Zc Ϟ7|G{Zes/#mP4y D/y1Ywzk+N,ŗ^V D 8ZޯdexGڏcUBʆT~y{O&;DmOhO$beu̘Q՝S> U<`+V)7?eګ?yV*]YF[.r_[<8گ"~#wSן53ϽXν]MTG[n\;@xvdz|ڽ%_|t5/ѓ/~jCV*7vڽgʾoqהl}ai(/%\TRe^Lߵ# d6?iO5W}OyW1P>[n.7r WXle+oL׀=Z|SwˍUOw<СTJ#=?T&1EJ|5W*[*ID;˫b/ &YTHݜly㴶3D4łSL鳠IZ F!{R.y$-͗#t|Ƞ`8B4r ]ʑ :a8R;Lm+cb.W.ʏ(@1Hko`'ٍqAAߨp #{T)MP [+OV;ut Nh& 5VLynu35} s*`4O [LAL,0i)6a.-pBv|oswC5X Ϝ9#Mo $G}S_}Gچ7]y|_%@ +8p71::E]\ʰnZ)VMO7kz+L\G:R<3˲(;fǑ S ^COӀdذ0 /jE&Nx aeHxr6Ws/e^Rߎ|O[,,/UA$0:dؐ3+qkud^(j3m8Acxm=YmՕч.Y<)'s`YDk@;Nƕ/oYs= #>u1'njUƈvH;EWX̡ΙV~ӳB -:#~6jB^~~r7Nt犗Wnl,|p\3ηN*컛_t&7C,͘9;X6cTHQs#SGˉAŧP_h?FY{+V=prW<7XR44IuQj9rl F {UyYrc{w`pgաD'8-+V8tSh ?倽wm) N8תS. :[{ݑgN-ﲍfI ꫽_yNe-Yucʆ[ǝT9hCx!P*H;x7N=D[>Z6duWd%mM\rv('55WO/Nw ,?*S;ysm6.~w)K,fOk˕ } {V6C;眨Hvzk}iXtm hox /ir!{E"Pվ0\B;,? hu?Pۉ~Gm{K&2Ə{b:*Z;TsG58Y ccs'+}9__T/rE疣o/VՃ1Vy~a刃>U,ԟ@m{ VYE`o9V(cV>uF3,h.6FyzW^ ~ղxQtA;|bQ`#00GX]U@/+{Y4u.+ю'TӀ{3IeOnz V`?2)jr`?鲓Jiu֪:5oGr3ۮNyxvʤT.JcO@ax;ѠYم̌e%m MC-$C0WB"qɯ>QqAH0Z մ DLPv /cDy:bR椂dCh1F˾g2,m 95ԧiE)Nt:@iEK Ved8 5u|넧uDD[R<%UQ|Pfb2ܔu%CsC fjʼnA j2Stš9J35㺣ӻvhM\H\?I5[qgG~pӟuH1 W Ѝ [q )l39Ӿrs0O.7Yxn=³W_{kӊU[to!@ CLJzl8DHǕΤգ:eYwgߜNy梫V;VŁk5].hp"R8ZAYg2ImȑjbQ=K:.Ca+\nV(| fxT%<1ф_RӀ_րm?OD}@}/c?`&2xgĖ0'l#͒ l[Q-%)A}A`69PލD^VzY1mR"U9Ln]mGwصQNwv # .L F0T6 {{X Aa(b;@DEzff*tǜU4`d$y !v9L~ s i4;7cM>;1svٍ +(Rx35eSj>7f{ti+ܑ6 ) F?z߀t]"^)R2`-kfUfwj!_];,8n G-ru_7ʮ-XPu$HQeiҬbUu6o*!T_ =rѯ_N>^Pb‹/RV}Jem7 W{{/f1m<և\+k`tx4'a1 zQ[C4B\ 7ɐ#6f#)@0c_Ni[ .=o_Fc\3s73E/cC7p|t6;Z[:r1Sd >A ,9$(BCԟQ .Qhxo x_]?z=KZu)Iae uTzC* 0P4H+M)_9rw/k *kI[踃r#\]/m:D[>6em_juT Vly+MScYZk:bheUm4.͈I/f4:03*::`9߻y-ⵎ<+v>L3t'}+/ݤ-2Ͽ³ʱGUI7QmzYj УOi%mfF ͈曷ܫmBOcO38Fg hꆛ}Wex݂hTGhE,mOFi:F~j;QǔǟzVۡ^!o&X9e5Zl+/.^`zBiRyJm<2=f9Q'Tn Sv7(}\$bw?m~B VhCkť/Vp`kvbm[ ?rjkڸBD,16de:R]eԄ+bE-?Lަsaױ\b8;$m|VYPO?b_u 92!ƻ'Aa#?.Ă呟 {GEO`b$L,xʘb\"ɋHm00C R_MmoxnqF+[c+[~==q%FXR.*O¸VETz8P1MRan[@H8~s&q:z=qptH|0 'l. Y}*Rumu㻩 8r\PhW1^`9^ߐW[ei;b~x]׋:ͩ3ʪkd(CYFt>tv6Ǎ/_2ߨ'L3UC /nȇLT4HRs1`'IKOKe,?ѯƕ)X7V{+{޻<#>QB=L!ũЩs/xf٥V庛(lK)ȂZ/><\O'V$IfJTh@zv ~<G'oΓ ^tv_ -j_`,vfܘzQ%*B`HNE=b[})?1K"x\@O~b~1WF\ @cie]W^w2#Ef!+ÖAh ̚e#ǐ'1HXuUdP~-gtbV2jҚV~EʖQ-B{UMߙ?|\hA%b%t2EYfE{_A=wB+oj˦1|~|GK/QG^m5Qp11F[u/XƐ|DǒYL\ǡ++ b߭n-lo)6)ǿyg^:HG}f؟=m@t G(^r O/Bg_Emlj &o9C-6aHn a['L=bQLXQaLttB7;w<~߽+u°rBjQvoc9h |h]ox^I:V Baa6"4>)=W*{[2jveVi^/ॄE)׏._{byQg"vq=7">/fwI*f Z&g?FX{w2JK Cki`QTS+,#IǁuY@IDATߏ}dmw&VuұޅCt&<ᯫl/|aGT#t:ɭ6V5劭:x=%][; ʼnJfta]lw4n)+Bm&EGδ1Ms 5+ l7$Y>_/-Vxt^ Ӆ=ʏWmR>0x|r첬0=%ۼգ?3hGs@AJe>=2'^v#A>c2>f@F}p[jgt}.Rn!| fU?|V|^9Um*eIm,3ϾlXqE><83 7v=4t:I9VX yVїF̫D x@7/}*lX3psr,[oIahHwix._6g_}0^Gް7yn7-pqktJﮐY/d/h4b;f|x>mAd"C:lQ CNJY~x-wB0F'd}kbHe(Ta(kVe6u:j?l cVi8;lm]%V"Ϯe@6d|du^rNޟyYߤ4PLFkݳ/W^35M6dRDED5[# 4k֖=~t} 񶿥 4/|sڜuG(52J+8Ս`s[ssgZ絴7kecv'>fpLA(1H@ANg6pU\~k-etZӶOf`7U~h18a^xWM>6o>Kn%j仧鄽:Y| jb06րcj3^.H4gcVr ضVie|GF"m mp pяF7bQ:1DvWk6+/.նnґz¡ N4]i3Vb>m-bn)ʱ:0^P9*}?à2x;}A5C}i}߱ZƊ([Iu1BEjUu^H,0Z#f4l8^2D^Ј! b U۵A -XEtXz2iu]\jѿ) L~OrmKS䃰jU=o'zـӭ|>TPcWfXݮ:@ߨ/ã[lsF_c2[G{ n8GKz7ߡs )g*bgzlw 6Cҙ ZHOrx+ *$:E3&(>JI<Ԑ2ovcwVe,?^ _$#= )^2o9b {.4yC?8I>͙Ɣ{E7pQα66[&Dt~sew.o1}fDrҀ>Bsȑ;J_ ǜ^N:vwGOΚ70cN 3ۆFK=f)]t;5OSU˵WJ$u\1/t\3>#fo);is?+ ?xm'ϗx`S[4?}eU!H?}A:ꔯ[.˯S}i:h#A'CgHЗ1^qJ6 >ѸyV*VR̰"juĖIPapSewfu7}~}zs_Wie' l=:+*_;hmIЕޢu7ҏW[ZvG9v4\oor>Yt=g|픃u4Ǩ}>ܾ;] ( vJ# o1OݝVvԉMԧyt/|RƷ Fuu:7دriTN w@ LJAw_wV<򒶗\ǫlsR|YS_A%/^.$H=' #=N[ ww-gk脵td~N'ow<. j@>~<_pgJ֙q&#^Ъ۞/_򪾍4]qͭ>~whiWs%3| ^qG:?tKdʅ?~Sʁ}5>nU{'ʪNK;x`e.lOtX9PN } uB귪>wȩ?=vեuJ9G Ve^(;:<3*a*NE9uSɖFVI;M(mmV?n;g!V}@̝~rw.(<2I^X :# XZ^TMZ$ʚq ;Fsֺfqx_ҙ^|hs']@ ϟ˶=kףW:# AJgwO{?Ml-^8`hhl[ Ya x\Hj]H7lL¦ɥ}wVrv '9m[:_F@+ͺ0iBl::n>NUL+.~Ξ6_*iN8+d;.SX h#e"fЮ #C4[!s2 m2p7sGcjFyGjG9Jz66t&xV2Qafj{L Lj~Q`XI‡^jVVCJDFPu^;tt,&V`e?!$)x2MS^%{ָgRo<3rbqN8F e}\|y(7_N|HXc3 AvţY,}]'f}L$̤?,} 2 ?"~?2rsg:kfv;k@Wu @t I`㵅9}W>gl-,fթR?N8_r-Ƕ4뺸f U8a*h3u,*5Frc*Иc&0m6"7p28V&->mc(_|Lxy@ cef?Ⱂt͑"<=CQ~j.厊+mfq%J6iԭI` >NLqKX^fyQ(>c؎3[y џ\l~ HتD / ̾/[Yxa}2#|ѱhuާs7Dx̢s.2z˕KGy mTVEy ͬ<ű /PyRW1I4{VX8'3,hKCjG ss'YPrc̠s`5SM{N{!fYd;N`K ȫBUYE=J,+UQ3HfxAϗt˯[xBVͨ"=tI/K-Pc ? ʫ_`_V>8`Y:JG=~I#Gip5Y؟|1VXbGRkqvvJ۞zK[CqwwCݝz;.9{I2L&>>I\Nl5GN1D:<匒N2CtuZۏO 0qi1\3CT#y48wq rؽz{)Ġߵ@g|Qi$?yc>D JGާS:Z!lpd'jYW_h 30C^f% _t`,$c;FEZfT]&mEHNO;C|3 l0:t_Q}*]$Ճx)4s SLV\$!^TYN#!ND;s9P|%n D_2I!7]st!ýLdxV!V٠IB^8䝩R$;FX~a(xquxiMdVy,2(ؚʹ4 5mhG'8˳2CGbYO+QM~ #XG&v- y4 xc>Fg9bze~WdtqdԒf 0u5B# J;O~Zl67ZFB7S^mO@%W6LJ%#_2,YҧQҨvwK 1WqL0Zy'J ڬ~S.i[+̠(`8 WNX'=:h /GB ]K8|+i`~{Ap7tq{I2?vcF nΣ9QUQmhv0z0(AIAr qm:,"U1V#=ɷ7CJpU7+/FJ02stG1˚ACLBH '?މCKĚk*0B ?ǹ_ HZ\%f vB]+G{(N d9z/tZࡳF"0M\hѨ6a%O ##ףɦIb uw ({ƈf*+r@]7|+2Avb3S\CrStG4LXo#CE$V;w#μi h8Aaq#* E=cBd(JwTq'ِɴ!“C~ y Y@Wy!ˬʍK DYa UJс .H 2&>IyGUY D ihXTX ҇i4Jj);CcvT/:ojQAήi2 oU:Syʟotb0#Edṅc%~TM< vDA>O⑼Uth` o:5eP~;Nؘt zh֎6=)ħ.c񫺎@.7]@WS?+vUFF82`s:D(Y:d l-㯉eF/{u#i$p>l2{˝^N6S-\(?lXҦ#aC ~P|2b4uلvZ>bmPʓmW`nϩa] ČZR0sy45% xyJ((HcRӝxKlM\QK$qMF Ks}qG# pO:VBr2s|kïg\BP#u?k4\cXVgK욆P)LaF-PpS #J%ePX@pQ,(tlim ,ؐ bbⵟ^ *U}>b'|W&\>o9*Y JW >;Yai51PJ  IWu`S^x)$CdގVύfl:"SJv+őЬմEpd%O4plȌWFcb@Zam/3Z2lpX~(aV EҿHCgx`S nPw:WҷI/{SP>HnIe#1?(O]z`S |o\kY?iB2%ĒǘWoN81Vt ώG&693.mo 4 ~OPX5Jux- ɿ+3%:㮜)xWKV h ML-q3i\KZfXs<`SÊTN o ^ .*v{kVsO2N* H/M$f (~6md*O+&m^}b,_M_XkҐ ksX7աo|kԌ嵕Nr"`8L3' S `BFt8wE*g-Z|kWPDȏDy!nxFBε3ﭮ'BM=K˙Ӎ</|e>R;U'5%7&tKJ؂CxIdXckd]8.$o CFiIƫ!ȴ>ly!@ZãP.Y|ʭ -)r]diM?W~N6t`\Ϝ&%{eCMܚY\}j3lψw085 N7'r]#x3cķ8NKBa. ոƛStfO4R|1V"H1t9:?Ild"KPŋ0WdiH3‚JBC_w Q:X:6 ˳" {zZ(\tQ7*g T{K@ZI{I<Dɉ Rp /RXSӇ_&"*tZdzr7ߡoIMV|E*RKYS(zÒ>2fU:BG/+NPc)e*%R&tPdL!d'Ci6H2JxX(b77\QXXK_xћ%A4 < _ FLl^*BHiIa %SS[W6G۰%-17b0JUώ5~a$N@D+!$>MɗDGailZ!vvZꢣvmVP%a(+_1 Wm,aUGH8p#-u-]*jxs+JZp906ᤲ('ɘN%{8>)|PEM 8xce>#A\ FZjB%P o@ɐVp[Ef !}ޝV`|Iւю #ѵqA_a؇rTfW}}|}`M׉xDz5/ʂFq2lpUyA,$_38`2<>oBm\ˬo8wW*:V@ }E'To[s^bHowKv /A-2G"nӨZkec4(3%;O D>%P!Eor|YѨ,r6ISlWU.í0%H(T:T*Tby%Lز=5V]2kh./* GZs^;GDqGBU$pb :XX)W|'uƅA D>^D`/vE>~M?8.BwcEݣB˲y,̷YʕyoAdº8]ȐL]8`8᫩Cy;m -8Gl6%5.~kD,Мd)YTҮUk#L~ùO1ߔhb%pɬpǶ׿ Qy׋ˆ@fY%"v2}ii>U J/IlpG+ɢNb /unY&US3zI^xGt1U;L64V Ӓgz/,eGrTss1}\}=B"A5w fE.B0ZLx7J:@\yE$g,&a`kDβl?$|83xbembfEN:-^|UP4d*;n!H50`Ͼ| Q|H|K۷ #" ԈNOs_mCavq#=qFlXz?z{_HBzC⓯-QcO}9f%c6 f߈saMbe\jadtrO'ăKnOxSX:T 뙆8g%q4(Xelo@mqZd3gon:#;wE"@P@y/HJ na@嵑p bm\ +r&6Mēt2F[@KL< }x8`Fk(* ĉ' 룀ZpEލ] >FϿ+g Tx PVA+-p5Lqíꃮ| bn||h'uT\9+tp X묠24\_a1jfٜ?luTgy/5"8+\̒Q[BY4-NX2o&m%^'4ؓ\Ii<]'g|dY].M_݅V < x֒n(jmd\Okݼ)Hj B˱ǶQ]`4ߵS0TG_UQ1]ǿ=ۄc6 3SAES~JXJ( dM&Gz\y  fP<7⫁~FV*hР?1j#s VUC飓_Fy,~gʳCg|~[+,TtӇbb 22Q H5AΦ|-#.9k,g KxYJ !VSx 7\M/B);:3>m\w*gT\0*bY42:!+6߅%Y&LrN$Va. ┩-x񉗢IßXfc-DAn#-? V>.)M D@֠ ny3="h/?:,-XE#ҹsg}Z3'~OO;鈘v!qmbs MV=ο{qX{zIF2s? !qˑ?N=Yâ2/:P::kHto|T_i`SؖA|R] t8Kc)'!6h|}_"7KFU 63#ԩ|RH5!Wɍa1bt6t=2qRewytR12Fd@IDAT="Æ#nft1+U /?י{`Gt*> QR.>7Ls!Nj`I@ޯVLCe(0x*ahpW5@ TB0З܇h|fԼ/AH;~:wC4UX%hv@ՙ@Uܣ%:ґ[qs*m3Dr-yvч:RAձ޵t |4I'#;[0b!&B;yYY%CwH KwU4b`><3O٤EoI5ҟ?󆯵q,7fYFmw?5 KnA 9g"nX36e }D@B/D%u!GX"F, X}/t@K*Q$"r/ 'FىK9EOBʏ9r!QVuXH!:UFeKtii, HuFq#-@r5Hwãْ͠GU,r$;ҙ_MIt,'~qn?nX~A3n+~p1d)4 W:e%.3^X[3qv\{}PS9@:)x'a a'Զke_ċxv#;҇A g,b46[§|Ftɑ,;^pȍ[m,?7DoFi\o4ݬ)*bd@ـG'-p!Xc$ iǶa7lH'YY}|gj#4ǽ=C6NފzHqq6 3'wM0xP==RCIB H~wF%я,p23]rz'uR=ͪj D{/f]:Ƅ4B]v]p._ Nw G%}0n[к0"?5R` m"d!:9 riy (8 uI=FҌɻ-E&o S.E&LOl*LJusŔOwU9y>q]@vy}%nǝ%/.xOhln:^zTXIώ,O122Z`N5J?zkK\u;f'6^K/wJt@ ȓOTD97(~(NCpZJ;şju#+ 6* '_VʞFXՖ5uS/D\G`?c~&~/8*ޡ1g'^tHcj?$g+ظ^!,Y`9bõO.r4ZOǗh_~֌fʕ=;^bxWt14SĭA8&^;yT ESgɷ B_z%?ܰZ{vwI_х~N?5O$;4|vzwY{ﶩxh߫Z59 >,22WvMK++/ҹ\l}<?3M_]ˢ@гUVXTiXJ3(ޫr64~;-K&03(z~?1mbZWx㫱QGЀ s6C ~x VZLKf2}eƕVQ6alXR ]~)/ŴSM:x+?H3+AqķzoX}ťO!mt _Oz -m@s,5SSoN=$q͍GR=K4 9i_Ϣ@;ǟCn7V ;[?Ef->^{M3/p l2KtR|g,gw3L7w%zNeE"T:|Ggeyg]y^v?LזaT<21(lMՑ=ԌX,W Fj+/Y6y#H'tgiX}u4c7 ?^e /RCTE*HzyaVߕ DqYk+>/;[phG3Q4ugt2/} qΩ9E3iv&ݸwMs~+9FNg{ scNY#.qtڊ'Vs< \BШvکՐ2N>XoUcEY\!Cb{7]TSMｓGPĆ##{ifodil%Y&n$R:tq DŽ+YL=^dcwzZ:7?is[`!e^$vnS!'y~7gJY"&x¸bZCv`\pa2zsWӏߍA$:Ѹ睙/1:W\x-;՗"9_(vq8M ')<3,ciW3~K{7r<&UcY{Q:P qΫۭ߫R ƅgU;%GV{)3ąێ4J~_SbV]IqЎ^Z^V(fXD(J&}/FP5w~Ie,1ұ#Ա_1ie`.v0:yu0tl ffzuɹ<\]v 8h{WUWv2 ChSct>)=G[ wAPgeʸ8CζGL^Q1ӣW˥原PQ,ȼӶg.<:pxi tƮ丘tֱ[XZqE⪋VZFzdAٻ픖*uZ!.9H\cyC|Yg<ݵeSVpnJ}3N׺Ƞ+/)Xl,\f}s$3=٤Ƒ%k1jϯԱtw[3EϞ ݝ,S# YpJ(s޼ތ:DCwۯ?#|M/<ʋРZ7:Ÿ 6twz83y?3NW]);:Ɍ)&Dymuenw$,oqyZk.2p/uNhi~ɑQQ1G,/~h:&ya œ/{7TƲK-_~LLz}Eb3h8ԓI ʬ܆O)j[zdlineXA~t.ՙ#TN/N֛n,e,}Zl3?,Sɴ) ۈ4h^IeDZrJx'YG{#;pfL$flĎϦϾ-uUC4lمjLFV<-zd\^o:Ո?:6^wtrf &}+=>s'\.>:zF]tZ,IuQh9r;ͪ2A.{Te"z|Oij{) NP3RSx6MQs+x6 )$!p`ɧJ<\/*I@j$Ijj b uDͼU9 O*iuз|C7ũwR!outWûx.{!18Q/q)!ݺ{дwXv!lc3ƓB+6Y|*TM:VԿpTȌ]C#rcu4B8߼sˬ?~mw5Ȉ.7i4[8Q4y$ - @5/xrUٽ#D)3Z.2fV,:m,{/ed nA\FI 8#&xw<5g%ko f_+~(^O=z >N\tq=׈ob5ņn 9ӏ?PǮls{ + qxc ?=6ٰo\x s6GigiVHKEQ |sih=ύ>}vAcMJq5{yܹ234Kyy:-G6:n7ߴko{͕Y((YO~eqgCY<ԋq7f]~УT[l& xɸKz͓ϼ䑤l4u!G M~2dliwq1g!O o~1lz#;wqFyi07P: v}K|ԉ*K~na:z*/~7qq8Ns 煗skj+.}]eA ֈj orGl~ywf)|UvH+,^ײShqMȀA砓թ+OtoZK|ǕdW!h6ei㬳 ^)nTA= &l¸mw929`Ӵfvil~f n둸sJ'GyHrz̽:5yOV?vw*{jVI[pmϽ7okD %7[r8GuƲ67\ywR(;}/cOD;ʳ=P!qOW[|K->_Ï=?i@lt*oQm'ɌY.?!ιrrF9τ'Y@*֜&^i ϖ8bf(k|n (~xsbi&55l%5+۾/UyVS7]y|\tH0{njbP'wgG/?P=I_T:@X| .}>.;[WRdZyȾ[ƣO;y;HYҳG=L]~qŷK=(ӢWZ:ޝ[|$fؓ/[@}Й:wn枩F=R⚱xvϲ '|QTtzΌV~Uf8Sռ"ovqf?l$k׍4ڛ8.㷏l<3?ۏIV}g?펃><8KeXle`g!FQ=荞|-74[rA'jf'=+VYaV-jFhOzAca,9R3F/_umaR|*5z7{7BZ=#7\ {[]^cdg&hɂ>eə_e9a% a_ݿWNC_rti(F&gM',k{zOg|U㹷Yvw<56f6)ŏ_ 8P[3M[}1( Wug5zF@y$aoXa%b,eV)^6w|&eMgϿ;nPKAo%ˆQ'P4SX _XU~|tU?y+#LÐa~Cg]ڋ|Oc2x`/dYj3l_P:ZX5]6JHgl8KL!< :ҋxf# 2rOgNɗZH3O}'yI٦ D"\*'%q`waD$2:wW`H'x{MczF_4{?䏑l{"D}ĢỀSYNаG|^Z~7-AbF;K;, #^V$)gS8 '2]ycI>/0fN %68KܹNނg 3 78a˛h?㏿X=َ "譥]FgsNF!yg}lˈg"8'5oO8s\Y.:Zr@_$Zfh;}j-8K䳯o*"=)))ԚH ۙf&N=jr<ӴlŧcSvS'9^a^Q˹낸GS_tvP~!Gxy)!) zO#ſiNpg958r33eȇ=jq|4N-41V3 mtSkMZA\u*^6N7iRxV'Cwٞ:U6at~VZ<G!ck7Zo_nQ֑c7'Sgә =c@z~3:lR蒏w{J즥K㲘cm[N̑,;#G;Fyv2QfOQ#͏ewu"LNQO.Sz@D tc|HGe _:Qta GϨi'G(]q_b#v5K,:i{84)ϾFL;f !ʚ /rC e &hP[-/MgL>Զ||Xc}b \&vy8X4wJ_XwzAh umtٞ>m.Od93H/UKd2J|+y0B1K@<}zy\ :@Dk.sO>4Rpӽ]i%I5!rr]zh91ݤS*]eEDȈ =kwݜF˼qYy 3۹aJq?ȳ^Kg X2h(iG 4H:UwgzWa$X,e8U^ 1r$/: őSG!ZuNT 9}:LMIx bH-]\Hv9VZɦY'e~%%̒?/:,$* g%y;p+P.*4thوY}ϫ攡(⻻E;? <8Voɷ]ï!WCcsC9Z}W4 Ҿ/bӭT0+i^Khs Vq8C]a@}\U!uCMI?cm_#UfUn:if6FjLeK ޿TCf)XoLl:{> rp^8a}7BkTt-vH f ƘOCX"I !G7j)%Ww]q']"ģLPزȈ.;l7voulI彸6[IKKbcm?# Gόk ]x AW#4}woJ!t0Ni$6pXOf6z?Hߦѷ[F]pJ'ȳЁ(Zs9KGY"*EO!_qylY]CTZ18qF~Ã##Ұvk`^*.>V#<64?TGAv&,GM7cYҥpFQRu>E%6zH8uw1h5mղ$ 1j ڕC9jsn۬yUv;Z^*zqE%P6ߴfFٸ bwk״q-q'_SE!~rUʋ'Md&f%<` g:_]>A巛9kϙ 䛷Ԧ$+0xM v1͆Yk'1; P~t#NkCB5i_ |FW^*i4a!/iGG?,bYι6N9JO>>Yb81=[L3c_K^m'fh0ꅡTsZI7?h񫯿71\w>cL5w^(o‡ ge Szo< emwFaY /#h8: QhA4b 4BdI@) ^qNYԷ,!܉ʼMF7f[XU S7+XR蠰B$c¿o$d <%jmUp }t|MXx?]::xK-9F+ ^+V^ppli]O9~st,6m XrL{%c4T k" W^zPv2VSz]WN3ulɺt69F ^|57-f䚥d≜OЮiT;oQilcpTW )aJ/z89Gè nd;1Fih"}Mw ,%d?Ɗ9fQ­$EwO>!aIuאZ8;m; 6WzjFdZmPntEo2$;@Mb&Ep:qq#muR6l:}7>*ZAibi aIIl,礹O?ڝ fj5uco&qo 4RWBj⠕S3[m;eSe]$,1@&H^mfGЩyut+.4YrT4֗roG^fRF^ǟ~EeEjA҉}L?U"jy 6C7ލu2܄\:t3 q3qb9s D^ZNKVXz]'MB6'9fVuGP^4 ;(Kny'{ 9l&[{N^s6OܢlC` n\SƽwrJ/"TjzB׀̏1J<³UP8fQ"J&$־ uMT,wP oX5G[vL2FF,ă$9nZR̨t

    )AANZGZS .ߺ2I$hf1 TY|^CNQg}[,`BWuYn8֞kߢ tN k财^+>uT!ZlCP#-cp_.~PZCo^x9}Bnq{Ӳ+gUkQPİxġ[?<`ㄗVcK4Ԧ-vCQ_Ն Qmg]pfw^kTp]ׇ>zJ#{W'q=!>So~>O+oGgӖn8JqOj_#J*9bS{(iud|jY^Ux-C!GtWSϺ4N?pUJONh]: sg|4tG{otluhxةqƽ۵/N?l{J-i% Lacws]8@e#mHrzA:2 sNC{ Ύd]Zt$q ٠Qy΋C<;f`:$lt>|jj|v/lӾߑ{VJVxԉ ]2D%3L!ag{r:-˫16ÿͧ?wMDT#Kz*ZA:^i-P8˃›usWW]x7M G\B%7f6r?e{7yw|pMKO0X 3I^wZ:Jm"myMgdAo\9vb VcutrrYYd%>„ y@ch\я1H郵 [9Xﰳ5h6lZl{Vx!|)2rn{K_}e|0rih2vrBt`Nz&y]u˗:yuV\Tq9`wV>@ݮC VsD츖nfe \ܶXN/A /r.j6cUQ7Vx|c~h=jRӎˎ>r9E `?5{|XIF'2$l`R49 A&q ?Nޡ 1#C8*1}@IDAT n%EI iݵ,Vp]uD3X-ӶB!N#V{j,VZPH 3wS8nŗ s\ G4I[8::95ʇkX'N::tеsy)kz̜3G˝~= nttu>ƼIxR(fgst]# CّÈ<f&Ћ`f5ٵmc͙FF!{fgҌ]h&77bp[#.;+OV?8ʄcoժnIK3et[7\sdQjY8FT8T*f!w⸶1RЀ$Mܤa(򋴥ʗNNb 0{@g>Q iyϦY5 5lW _nSSï8t:~Y:1^t3Az :?ta0;wS pS 3tt4B{ROc7fW0YF=9ɷ1`Cmyf$8LIct\ǖ4f/9tfsfu!{j|  ¥JǼk;V1+aWǸB/#8t4 [?~~=i%whf&{Ǒ/˜ LuX8El%mѢx] 8 az3 r+Qn5•t}?0SGʑp^Y B#-eluhxґfuqA++5b^F|IYU7EZ]fžwn28 F8\@oP[oNO~d-_H=F˻V˶_o(q #YbQ 2y70Jr{nw[y0Lݩc$*-B|X?!I?Bg:J= A#R Kq"4M>|tUvf3A򍁨Ou D=HP xpUĆ a&;f+ +m?$u@:'Um37iXsԴEiV=9QAViC|z&D=ot\MϿ{0G:6tol+m^&3XY d&FA<[ކI -r-vdPy<#S<0_`^Ud X$g_b򧞹|E6I1tl^Nل]Z ?LDێkpnlu}abC7I;0T'-l:,u%+uIQLtB? su^x]p?<;% n,9 |RlE5dd]E$תD; QxF=#5%Jd6齅l%jEpl G\&lGwdL4>5hc47WSUvJ[&ta_@0f*;[l&?qm4^#Wʅ8[ (I;ssod& 7K&4i2briÕjU~O6NQY1&&Ls냃; xР۽5** B3ŕ]KC iIXqAx+(P(0n@\Ljt57yU3 7hЙ K !b|9+`>"dV ]ǬOOUp(>6Ic{ ] ?x/fю)}؁4caZk^QR嘪+/Ÿ x~W2q(0T ѡ)G2oQsH "'r!<ȋZҙ-qRP _p(=y7wo!:N62}׍'$aNqpsrȑF f EFUf#/xyA3=Q (L*V|xo}SU`,(MiHIVװ)'Oq$-~s~"Ѩa@ځȐp?I,^6S0~IcG>He*L%ˁI`9LT3T~Q@]0ޣ*0&߽+y;H V `o1R5€ 2pL8(Ld2$XER7Bb3jbдr$>wJWy |ȶTxfy)@|a$;D'j B9Ϣ^-#,ǜEA2E)z_SϙA_i>?+;nɫ]"U ?:b4egIoe rtV_.s7T%8Sm<[vʲqHJ٣CBVvG;Ȑoބ1T!J=B鬴Ft"~M^gLSQN<UD.*sLD;:E+G-u1'50^He"h‰n ىyA(.RuyJ>7} qVż@]!?dlJ#"9`)WN:esd\dÔ{џo0NM8SUі*{tWRArp$ǚ1fo'K'h.tL 1?F'9 cULV-34%(\/\Ӑ 5Td4DS 77 X7HV^IU٦3ԍ~JdX: :h/3tÂW sNK@^yϘ+|`+o(2m7U|(" p:Ǩow̝_U9z  ~߲"~EV3VO#/50NHy@##IR #G:eHȆ~2'^iӘx .) 6s^qP6%UNc؍?_I7y(a V_UMQ.3CHwi]PqLtqE}m4l& h]!%\l g:0ٚ3I3QwHy%.Gk~ĠB(D$2dd2ø)_ x+I2',^K#A3rY92P*LTdyc" X C~Z`e^E 9/z}@ꐕ6|X؂(NV`psԳ3F$A$JX 2<&obQk# #Y<E5p1 *<o]1sOMr"p Wnˌ ^LIB0d *;V̚>=롂x !u2g@dcCN$i6 iȧd ]ЋJqzSlռ;Sl) W:@\q\/y7dY+@Td[ Gx2b08kL&l5|sc24tHï4NTp1 P6xoV)N==x4Eޥ/y"=\ qA,}Ku23( X6Y6WH*~]AI3sNOXCJ~瀱j[Su34Ѫy[eQ;?PZVL{TS~=IKmNv*cZ{BjvmѮ\۪9)gLC ȋ rB1b׿#{!hTD++Tk^yxS g1hiQU sHI[8_qEzJVsAϕW3)ϴ@x˄بfpPM s`y:!6`WѴCKpT/fȠ)} W[x6`2@#6 n# _x.<B.t@jZ] B tFP 4_Q~Sd9PD_ o}~58X1;~#,@˼A#8X4h'Ԇ k}\͑z!d 9Rvn&MlFV̰Ĺq  :9)28:H[U W\<'2ՃZ|fԓ(t{.N%Zt>HGY!_+Yk'p,&3b-U,:rg?'i:pPb|şZT_/o좭/i AqB&¡}9 =Cڑ4YdiLt-?I?px&YS#;L<#U,ʠcqOwVUZpr4ae.#t9JD;b4ix2ozsLs͓6iP+Wdo_c] RXkVr_BKCJ}D>d<(@q$WނO򣲚GeTn 48Qs`Pȯ43'J .{x W 9AIUS1Έ ; q0JÈ3 bkN,Ÿ沀AԒ"!%a(J\Agx(CWZ9|pNt< }y x`(X•',j]GE_0Ο yhAC"9+ªd;'HyV0aA}=WIsTAYeJJ2ʜ5o 8ħ%BLR"Yu=hҩ=3=E% UQ2E (D|zwA#CD c7{p2p[QQá.iq>vZ%B'l 5fW$T?)Qg{ ޘ'7([Xfu?R%#]ۙP9cg\a8=>i]_EV5BJ71|ۇ8kr{ Pr@ɕm%)BөWΒg H )X-b*Pf%Ҡ @viVal6?gRKU'7r N>e|׳3b͇Q+uOqZZ.vu8I(xEo"!O7#"ԅ24xuVXTB+@efzo@o"xX؉Ypj(G߂׳^K1PpO5\{ p:e%pi8]oK:. HF0A=F5bٷŲi~]o7⃿2%fڢ>~˅`=|CL $/mF452YM۪\*%QI$]kZJ_h7)0Uyvz)}u5@զ}[!=rH[&gi6՘mPTD/0WdFl+ﶝV4Og[t@?WTĂl{'b%VBS^_[};ͷޓ}#--bJD)|E(KIs ;n'iMUjBa0 {ID_ɓIF~+WzwpbJ!Qk S|* I^\F3PzJPJ%JϚh<3Ry.GҐ ?˳\5l;?y/h{9ʌ+\2R4}9$3a0"wMfv pΙf&J8ŠqK^5|)i QtUvA9s ԠXXsŊx'&0prQı5M%wCRǷUEpD=S4e+T |=Sx22S7J VXv'p>__mp!J#d RPU|U$t:9*nBb*Œ'Cs0RtN\wɪ'_a4˱yGf^2| CLO6\23䊣^8Ώ%I I[t# \]͵8aTy9Vcr@x W26ʐsMo2IJ|P¬ [k VZs@+rV?Cqt| L1.Wkh d䶊@…v}\J.*БG~HNʠP ㆮLe X.4O?pU VJm<O8%e:S !Xq~14Q{M MA|1ԃokxҖhB m,,i d LExה] 8*Y4R"*R)my@E=pq^c p>Z,~Ț.)L|S2G}₿'q(L4YESerIߜBV| :5q又Yh,sCSQW^3-|_Bϡz)Md88+WSS0U0ٗeTW E6F\K/v Vm["f4r1[0d ǁQK5m+0p(gBFRsQ.*#~,t JN:W.5q0/^/oo TnvLJ*@uM1I)uYJ\!dyv>/@z?GU=vDM|2=‬ o姎7Ͽ]avY x ?^'r?l5+|WeB+I %&9-;'54yiR뤖Ls~~UZuYPeEnbys/G}:u_jrݳEpMwyh\ګt}HN룎7K˯;Y|BNU RhWScr4r@n۷G{.ʫz%ΆovJk6fAz(uB%~A>uaoCM-c/^CyN4;rGW_~=\5tFi#pM\ AB5>L \` ]#;uVMç7ŒT4]'bB-(cp2ucsӍ$G&\~ȻW.|kѯ"ʩ+\WAB(kz7~w PI'7 (VU0'VTtvsbK/kOqmI oEyYo-QAԖvitUwWPKΊxk|w:'Kn*d+>&qܦi }:ӏ3dOjf=ққ׈v{.C{n 'kunyQ3|7 *!0jlOs]:oyEW#R|ouWN{﹍wLoV}Wo3\cAblon.IR׮ՉNHp>oEŇ(%i„*r*Sݪ&?:s["xz 0`ͯJŻprQZģ<u `!ya&Q4`:M ?>xC0<;LÊSx\ cgZ.)xAOf"2_&ɔ 6N'ՃcrbE Hjp%@j!=v겾DjfI̲"\BH9e!ok-]xim6x^fN lDi:Db&wFDr.+IaLD(ٖ U5^o#ivt X ^[{dˏ2 1O6- ;ei?JZ_3r(n4rx'pdL_+Sܜ{ѿ5Yrro1s{q84[Qo;|,TQpW?3zlŻR Du: xvz 4Lve1 /#NkeMvCŃZQq'h"Pi%,S/ǞxN_m-sEa hzLp;@b0jx9x˼ L3ҫno + Dɀƈcb^xEl}`*dP̦eaЇ=%rƏ1'D&HU3fÈA9@|UwVFQWĽh0 ˖NN^5-8/z,*+"`!~N÷(G:P2nZY .C񎼬 1:Bۮ?'oW/IGÉMԌd}rSk?  pO<-?c^$7kWtVÎPe>wӇecƒ3:8~SyEjZ@џkGQI8-}ݕ%:*}%ےE/?' ΗN]~5 >`}}: i9 (.xtko~=NufDfv_bt)xo7]/:Ι49r w$pːb g/?Y+r@'dpڔۥ^?+RCԑ%Ru:wKu/qSxaCs@ t}J,'W鸢i ]j˖5 ùڜ0cK.ԟ)ґQIU]4c*iX/ZVa/~]+@ Bd[ʷPOƌM뭽‴=ݮtyPﲫRLWۛ񋞱2`۶7A2mG"ʛPN#ʯHȕhx7{Ƹ5W{穝.RybF>!G@Co7*Rŗ 4an<G 8qZIy[I^Ez VwDޑ -Ay\kaKp"D/ʉW^E0 \G<>LpKD] =bt(vKViB'm4@@ӧhXͣ=W @9DlxB,Ц =p_>_GikSF#?`!eca+L)lRWHY55YsT&þ(*LM_3U Xabjj)C 2j9](`$P/:±H -mГjifvIK/pzOM QbuH{U-iߩ}4Ν^=wֹӘ1aR} / }zo^}=ՊKvBth6g״ @ݙF8lwI{dWΝO,E r'ܬ̸I¿cK3fA#G:+pLN뮳z ?WK^{z_Df;lIbzetuk^3<շ?jܪ;U6jCva3K7rzOl<!ϰ/E ]Tat̓ӻ~F$gEmj?),nyM?XQ/_~;K(ީS6;ѱbd}Zhe'_+7Yϼ𦶗[[ȣǞ5'c4l˯~MmWĠ[jV0>4a͒zEZpQ'l`( "dNQݶH 4䑗KΛ3U;O8Gr&oV[etM%_8W\sGl`h:VZ~4Q,+/?g7}1[L ǽaMѷ\Yw.b:7"ma[RY jUԙ/Kg$mX;]p٭^dv~MK,`:ͳhMs8:":0X]YnEϿNn >1${>mAiL[1 9): _n4RW|b}{|ιzɬ6jEZai]6Wy:e94gtn㴢{ӯj*iԷy^*&k ?2:5::r)K9f96ka*n έA݃iW5@3!i{Iqӯ~Am ![>X>|ӾZ)ܥS߃}_tVoNrMxVm!{oV^qI,~ӛZidݴtI[<>v|,]vϨ|e_2mڮ_s>V)W߱6`﮻aSykg;t~Oyp#ɪ1C"Ҿ ah 9#\uVoPCg)#!9V`V+9Dp8W +~a 􁓷J4xTY fXvCJ5aj$cLXnA1@kt TI`:CxX4g% 1G$dɷ!.Aөs>[D[ePރatƮ`rm\t=#.L =U`YQӦkk.=ݳtv,@Ҭj~4eÙnԽb;nIꢓ<;Ί[K" [gfCfN9_޹jZ3ab`{¿+/=43R ?OK2{Ҭf Rd[+PSΧ)~m{QyγuJ;Fzmq4Kst.8k4+{۠ꫬ/st|}oz;o1=y^i++y}tUg%l_}ӷ U*h!4]p6(qL~82j˿O7_{~{9'~5 <87҇ *nI\rym5'YlW_|G|vaCϖZ%J\4jqMUn횺vͳ+OJ]> k:C=@/>X}ɾ&qEtwXft5'ILVujKx6?`δot)iUā&&k֙ǜg:fzYVrJr{h݆2>K#GIK-E|'Ǯ[_{Owھ9aLcȴjD ?u…21И0NLzڮSYm˴~e`/'1x<<6F/^}4Q뎛(z0 |ǿaם6р]v]x~и,agqZQ\P:2mU V XgX nFLT''}^R?H<@N[NO?}ܟz_ӕ/|kk ~TqOg.W~ϑ뷫W8j/:k>|چrY3`}ӦJsŴxEk [3i늩OUN*wU4&^[S{]JK}{o.?ȴ E׃o;Է}jۥj $u ǓU(YD;@IDAT?lI$z, e@sܑ{jpAbxT'XVÆ Og/XmǍߞ'f:FU-TE!0 ~*CD(ԁgAUt"~ aSx2Ƒ@T䢄e&yk1+h $$9_XgGjciuE+^-!v @T~qZhf(x>s%Ef'AC`cC92&|։)ճN>EY*9nh TEv.N j,l=x#Mr&ecMAETpg:S5^#7S)(ƤWFg>n_EOWR|$x4iSoVB+t*WkPDo)̞"H? ‚TකU_mYo '(r]bѴ{ᚉwI3}k%5 ڨ=w>JM̬1[p@ctϦ^WӬⓚJQfָ'[|(4f״ؘdMNo:yF6\3c#O4^gx䃷x5 ;E?쿧_SzؐAtQ4f=iVI#G6:~%qVCN?28ă̳̔>Гd hܾ{n.rRL,^m`v[m)@9Ui#܏QCж]+sM֊H"|iW9y`n菚|#=~5lͦ~ô{7JWh5^=M[OD<6>}vOyFuVh顕Ymg=bTsd#Wޒ1~t2H_rOvթ~77:M2ƤՍ'y)=z߿ Z%zZg/JÆOݯ>unݯ]VyU{LOiZ~EZ)#lW>2!mZ m2?Iڵvi̟4Zَ߆Lp{zVDyi%2zpeiC I_ժzlI(?w#[5fs.ٳleA}wI?567+,o8xdYj&CXYR˃z܊79R?z4tE뮤\%qO'ma`δ >Ɇ.< o.3?0ϦLz [`P:#tր]6ONeRxYh]7x̿!ttΧlMՓB[_WX{uR秋/O]5P>Vl&8:zF.R6cT3)pyG2(1t1l]GX~WޯؿntwmxAWzA:sW\x\G7j|셴 3O=T2" xPtPX+JoYl̓JQOz &GmouZGW_:]~>J)ә'3pSXUQ7?θ:shOMn-?J,?ߜanX]31=4@'"/h`}Ӊ^tU'?F~=kZUyN$.ZKo,D:AnZjk9Yyo}m -6^#u#z%rWj_sSI_~+&/L +IXjH$R7X}D%wDmkҬTZ%0u` a&p/ 1k5z_N䦨/"[(䒚j{Vh˷2ba|_es=6 "YEPP 0 W!(S|Z(p>Z]$fR< WGIK{K+μAg>.jթhM& ŝ`ܓ~CR%$CR![? <2zRZQȔCt;D_QpfzͺNӪKwI7MoYi"SgO99Ƚ'/ԉ1 zo1&hK:؃bI2o!wtVyo/zS[kW?A032}TOqӣ?&Oh1 V讽ˀСjW\~tOLoVS`ϿgW[etmd}-F D3KG]z4Ǵ{zW5616jvezXng^^vmj}|嵷yuٗ_xN g}EY*w',2t^!bҋ*M=:uULS?Qim%ךVIBeNwZ9:Zu %%Zs56ǒC˴*Ͼm1zo?{w]4}elCk`W薲?_m3J.x^':}f,. .+CgITz7c@ >z%o??d`WiF92TWZaq'ct ۪OyЈq6>P>CԥdHO1R?ٌ?Ʒlem}9clϾncUGl2ؾ7?|& ;eu Nl"G7ZkE(ƽ+|!?&c|$A4[xCG}C"wv%<cǎOj}Of9ֶ{]@+w5@}Gmd9.ʂY1ʫ L;mawߓq~+vSެB;ӨÅ CG+c3oazS[~Q <鍷?+tM ^Y-a; ۹lE׹<%g}e f`OlѾFJG?_ ]{m]Ds/A雥:.4}~ (~%{}n9bd]P >[0LₓvGoyF[Mnm)~ŷ|ϸ̤/Dy#4rF'B/VTK=YKj%U-n(mVsoQ4 ae4J[R[kKJ+,6YZd=}rv?ycK$hNk͹:t65/[jv WuBs Ǐ?}n{¡c?9FNY.O.~,EUf[9*Dz*@ra8=\Vc@M>#?%'x 00 SP_˲oyvK*(Bu!qhhB5| lKjg(-..t?R UER9BLA! \zCu,=Wʩx_зZ 73 %kVGA`3Aj` mKFW F7#26"n&0R*JlCWb ȌjPSy],; Ԉ 7\-eΠ\c3!+PYGR0lpU.i@1Zevq=JovP[t2'Cϳk)(iQvn2ˆ $M8$B k ;v = mڟ|zNzfLCm-|Of eFeFy#C%=+ˁZiV |;"Dxwr{1z@ouZ:"<۵1eT%9'h`3&6p%:Vt `i :ss|&yty&=|+;hԑ" 0-4&}38gϩmz/:z_- w% Ķ 48C RǶ蔆k Xt|[(CwLϬAެfk.ȸ|81EveT xak٘YAWf?#R;+HQs[UGɷq?T(6M>Aեfl{R8+5&BsKZ%URbK*rpf,bɎLz`c:WZxpG?Y +/N&5{ VX v Y»ϖBֻdcSM_Gp|('a4x`:s|-3]4@A4~N8PV[9NgʄiU^Ds'{+˖;LzWO8YlŔf4OH?,(]< 2\~dG_5hw/z;Fu-G 0Ygke⵻}6!- @#_<zKs"5Eׇn9g㬔esdq# 2#ztݓlt h$1z2%Q2l|ƿu 3K[ni> #} Zz{xLukwxs*:1<:¬pn<):EEhF? Y{#=#Ágć[ 9$>BEX!޻!i+P7kj5+[4 Ȅ0WYs5"`QA>O#c2{Yg]fCJ@/u.am)NV!- {I.tqrc"h>hƷdVaN+eOۡΌ:^ VY8|DJCjb`7ôԳ,4 rޮQo.]& :xm-ol"de)nl :Β>ʀGa(DDuwE(ƟNUg]!oi~ۊ4-L-"Vzb'bdJŵ9Xޱ̯ ʵ[kMZV]S͞3`3ҍV:-"4\]<f9VTUIV4l˄v]x~Ӷy++]#x&t6=pƬZ2=ǹ1u:<4*9ԫz~eꣃg{MJ[w h'bfEڒY}NbgEL*j('2SuDεpAije[!rJW99iK\ª.[R)Znw)y ctҿ^z/zֵ;kJSJ(eDz~B*ӑ^sqϺ'_ iWi5N+BMyA_΄(x@IG9ٵk٣Ot߃:C 7t \7'TX݌:#H 26V ]gs[F:iIozfd52Y2:g*brK1]z^0'2b~2Á1>@?3\F} ?g>aƃ_d6o6KgmԱki^h:oiM\/_KM&F1J ONN->,&vxf0h?vl, vl麚F<28RqeGt@z9ݔgs٠!K(3lK{TGQV(fK!}~yueԯ>XR޻Hj'>&!>6dڪ+\~fنY(ScJnN=iUcgI+N4x߾{Ͽ;6kT93l⩋dz* F\Z[Yњ]E)-Az17ݎ*XlN f]Dnu}+Ă H[Xwp2R1< ~|Cyaݷ~-}ԻVC}ve rh[DdN3wCdDزqjy;!Az,e/"|t%x,K)o tV2άܮnNZkLPV[Mֹ-ef)IǁJ9sl 1j{%MЌtݖ4d }{絝PL\v2Gz+)rgw]C i%W\:p, XI j0%qpJ3=+zOM~ZicNo4 쿫.%n;GC+Z1Aܪ;'q˔[#=aCJ8er&E˲>?{tS[۸ bEA [ 9CYE/M3OT;9tgU㫭tq̓RH?}h3~рc9'G2:dOmU7e8/a /ޙǕ-T7Vg%%˦^s$0USWDGrӺ믬1\gU8_9SZTg*0Pims 4h'HX{u3ٶ>G3.8B% j9[҄T%'|6]wUCE!M~KZP A`%L(UXT0isZpX]`l#r'|0e}CX2ddHDd%q`Kj[T@Ŋ/cOjYPX7R0W'=+v@*pTuEVc /o(XRO+*b-hA] =e⇁vRPZ>``"ٖ`;ڤIں eW%<8~5[5Dd/^ ,N@8'68ꊄ 2r:\X̞:Xf/L'hHw>M q;!f_ﱤ G;~\jivGQB͕cL2{;^b؊@ = Bx( ma`&_ցGA]:oDti2g\yl-\\{ OW_,,VS~}(4|CSSxOL1pN&<'< ;Y̿Q#e@<.w]miY< {ud K >OI[U3κT3A1^umcX%+/pntbGqA}cP}^+F@{L׷Lz#tu?EaZzOW*?ku/2+9{;! p_~#<^AG1;|[yKӖǥ`"}^t fʵeOIfir^ɕ`C>zȁ>KEjYQΨ̥" 0(08@L[mW[A2~yfYrc!l9a}2v&Jנ:SE'vn닷QiN[]yp'>gϥqDZ#<RZXK?&Vȷ޿tۚ&]N{n 75W[>A85>ut?NzdB זBNqAp SšŽHqIH l93 {e؜3zUu6A1>˜'y9oz|_w=Z^.KD}&΢*3|x2..6{Ia*+~;u]ؓ/&f%yau)MӢnGg~ɹQ*|!g5kF{IJknOC7.HCTO= 7,N` hQN몥Ĥ_xTY=H~ A!3S4b0%;SvI [aQOtU31DHSř'/pE'oW˽iv5yEY UҀ;[nw=˘PbqO8d7l޺5 ](ZԏR =LޭnkAf`{*SZSp~(jhz^3qzg®2ؼGX’9Wd6EGbYt/4- Psp^>#f?48}I@I'LOQCEafƆy2⠸YgF ɀgI˶h̩6Doj:ENKl|rSfq6jN߭l素42G+~ΒF2 )G\R8XW!n:fm FȐ쩥Q%oM9! '6u_AE@#q7.9nQ&0,̦ ,UWT%ETcqh(3KHY*6*$~6t]KB[aQ jCȨ1;E>"ȊH89ͨD3Z5FSVQX3 obf0UcDs"C&:',UTMG L$J~QtFĒn8Hig.]S #ÐJHGtNw-afhxꉺF^_&4H1'CCf'F}(%E<S˂AF#OTr\Di(;4 1+I/C? `e'e̚#?1OHpatbI;$#ONCGK;2US?RD%`Caګ:,M8M < Jy7$g57Z[ ZZ"]O@ЉP}?4c"XA(^'kVP?$ Bfc8BYL:r4?){8H'^`ݺA^.,0rBzg;'rc <%NMR~&Nȝ`t3x ]@/!E8d|S9HÒh6~ _YM[⠺;Lu7I8j`eͳ,uҋ䚢rф5a3tڕ>D)M#@KLMgéC?ZPgK:5:ix$?E'm?L܅T8yD=%m FL -gaڬK8moV29Gҡmѯ%ȍ#Odd=IШH"M!p|:eġ-i(!S !gʐwXB@*yzϙm;/!o2#UnVPH˳J`lqo/k wPA(;S7V}ՉGttxT9c L!Ԃsn_]pOo2k"$ "5NbCv*9U4=Y_2o# 6l[]6ѡ7.Y.EBCA6w U(`!*4}BzֳdER* t O7(Ӫd0CJ2Ǩ|[9yA$!~"rh@V /fiC;ѹkjş 8TbEniE؉ͺ B*OQDw:AQ|<)h t`C~T64":եCčċ !*Jҋd )8;!iထ,HF2JsUP4xU>P`Ļ1PjP|ʑF0,|/dBR> Tr ūe2C>Aq+iϫ 9? !ʡH?˖r1GJ&e}##Z6&nH/{\WR ,:? e)B}\PL<#؈x0/H+q'v(#P.d$ܠ*\B&cX0 S1 i]ΟeGGG 9R\ћiR!NiEiD]ӏtNRo&.pP5ЉʧnuqL8b#<[ Yt qG:vvdN*NChv5hZkq|>Y)C~k{M҂?t2I3tʍC(Y{oo6>)PLH 9=e)-chvUK4߈K?2j;h6xLQGw!6F3MfLnX$5nyqWfĘ"[bUwvą@KP F2 3_(69`/0:G;)FuRoJzcQۅB#;aύEy (9X06:-wEWT=1E"Wɯ8!VF.Dqx(ͰGZd2UtA _a&~ձ2 {WʨpQIY8~8L>4K#!Excw֓ 5Bٺo<Ӱx.tAGzwMup_*0`3ҷ8ne6؈Y81layyA.;9)HPC#dB i@sG:#3?38N#|hPQبl[.il,U Ǩ':ϝ/ml7W|~Q9%ݑۺ_:# etV1rᖹ(/Eנ+*ٳ8`I[r}*8l\ n;..8' [W o`ч: M*°B~/JWq2rG1#B QV;?2xxEϡs'N$'g}PBub\UZ]0;s.^\`P ȺE 1""(GU>@y2{ ~K=TC9<+]Pq.e `uA4*U29i:Cqw WЖ. _kW]G/+Vb˴ZO)sNK=mr:j(P ) f[<[D B!P?y<9i@VL%r%ALI3|#uAZD+ݯǨP9=sNE\i\X^BPW)Rg6dȠwup^dn|ʩ~e* b P?R jG]\x<ڻW|R)o{ Ng6(əX Qo5.(4gHMn(W<L-5 XQxFǦ :ڋe8^Gڅո8..ze #ԩU{Z=mI2b?0l,V G`u+*Q"-Û9֮i A~eТ`fNG-{yF5w#ݰm0lʋwÙ/po!!(?UHU*>9(J3?g4~H'ob+e;C ?A;,t6SDnK[rY>*pz Lh8>mPǘH`һ;ZAST"'xTR Ys~)G5 uڌ7iHtkH[PwSʵx3]|ۇDgZ z~)*1jiYܤfEMz$|{  oxTMBQfJs#sX&HŠ2%V͐:§#*' #eZZOKůqbYnjb$+f7mGgqT-KX|P$NTl+2t@ԥ5M*tHc[ÿ9gLl3(ߧh3zm@ڧcǙ,lTC"A4DGnS;3d04b6Qt/6*CB~zĖrhM H†-SQ׭rD6`) s22@ *%3PmLdOgm9,SEvθ# $i衞&ЁIG*7\QhGmfQW7hB ĕ Zz{⑓M @\&_[ NElkԌ,WT$NAqV`Qyi' GH) c2 E4R.D;MDRo0 ݅ܥ,[ ;_+ }-uUĠ K/M /K$2F+_HY&^P4E[ϡNVDU.;d8" xNCBs/\=($&(Fy>A.}KYPPF!\f%@rV=aLT9N%{e' υSLagN7GBn\eEmTLg*YrxA=,l?3T!U4g&quQAW?4CܩezU'MQ> S"GCtfqs,g͐cLG*h&ՑC ׶.Obp#=%KCMDa (":2 hOvR<2:,-V2p֫P_ 6fj?A " `Zp{: _2QY+ӄZM#WP^~Fى\! gie^xNԏKaQM3ePxR%n/ah,^C,S0lod)Z ~a!Ձa#y1@IDAT?;xYH1ʽdK@#qkAg_^B֠Qˣ+xpNGt"9 շY&{Z{pp"u|R4IAjٲd2sXR (~GZ'fq0A(U5rjw1B78 rH:ŚT|#yrM쫈:6JDx$yCʲD,˟^3Ɂt"\gTjoƺQ3:''D 吏<JEL СYb"琲z/ o֤h:'gةA-9/L⪯"JmJ jJhHGd1Fr0{/lj!7F2h*p@w?UEd "oB(80{eo`D-৩. 㮖U6cJRU=7#lx*<0]+\ dYgzEK*]D;WqtgdӣP8OC;uB#V=Vb<&QAfM. lDB7C6 획i؞HD XFJt0C+!B@ d\Uec*<۳#_gCO{y<<Oh60?_I ,LnSٯNjq5<_FG|~3ڠ'H+3/$C,4J5mM)&sŐS5Hxe< 7"gC1tຊx-B\yc NN#Dp r"aΑ笂 O!AMA2kEC&GhCYc֥IC e \/+] *Pat}BA̾{ `Ty@mf%h7.\G@EgBO>)@:2= ZY ?5D);OD̳r*2Z~B pno:ï3l/"ļ )!~`R(X:Y'{-=>B)|w4ŠnΝH ХHSa5:*^R`{p,A*# *p-CoА,:"! r0FR/!eD(=9謰K0^6T{)D L_=8~:0TuĊ./dJ)U>ҏh>J##è8Ê@itP¹W|z5,Z((CFV#[|H >s—c{9~gzMN dv@C(Cﰨ`k2_V֚4833h[Ƅr- Nj90~ +ĥ88ô/~ȼSd@Ґ %Cx DfvUR` "f#]sA}Hhxƒ{lC"G~-E*'(^8R1:X8|)U'rklWtXJ;cő!cdaA~ԝɂEa.rVuDZ\ COR'dzwp}/Y%hOJ^-kԥ$:cK.pr5Y~ABRhYXTKcFGkĥ>㭐厏 +uOmÿ J|I$Lr Zm]8o4fS'?itIOqz$\,h@! X$4zokm:i{3!oe/A 0Ȏ'sGŶg7 'LXί*@p 3rɟ6eDOēv5 N[*B,BP q3F*"78a012e-W=u C9U# |SD!p&}!eFyl .9|[@ Sy|ďعP=o@M:1,kxTMI8% 6:'(G?ip p/`_~& fD=V񕮣JQ7¨rLy:G1v(nRHp 3HPqeClE/}:!5r{Ѡgq:0TqZ'|!O p۾~ŗ"/Fp=i߽v2~m6x) kH86~괨6J|{#ErYWG q|<ޣ ~2\ţ44!C?2']‡88F,aL"_~~YubSqx.Fpӄ¬'<Wyi ,,SgWh֐Ÿ@9drS=2lW*2=' *~-Ck/{aAxMȝ ^uz :QULIcqX1ηv@ 3UTk"24F^cEȤ;pY>dZiS=:#,h7pMŔe/R!-ˁH@o:,(e@nQЖiJGE ǵ=9 ]nemh8l=/gt';zpsjU0àͷh>\gtlB@Qd0-D}WkQāohg;zQH-x:d-6a|PLϷx.^3!c^aR.)<鬏/N jQw4.V‚z1U(Y?|qB^]QY6:6T^9DK0utuk$^FU_#Q*1<ڼLuyqy w4T"UЉnUaUϺ5D͑Dv:rX4rjHtEFfMX}ۍ:ħA I+*p%^^0ڢ 4љCd 3Sxt*"2Lڒ6gV| C]kDdMMEux0A+<{H$sZ']t@u'hd0LMyPEo h'07Vcl7ӆSzt9Z/sK/8:Ska }mX']x-W `z ~{o[ .%07h Տ /.D%OcNM$_J2{ 3/&7Ϝ?wN*o^-d=zV[ۅ9R ]qXHiSxצ4s&kS(~7;NNvi wE"C(^ˤCP 5my7ӥWWmo,8ͦyuh$\qzWՖtV>a)ʝDx!.fr/= *Wp[aSc{nט먣 -[=D^>4_+,!Y/ލ^hcD@Eԁ8ZM\A|ƀ+{UYtO]%5<( n? \`Fn("(i UBKO; Ө3V&_0ÒȪ;9;.`zMI/PWW:Ð|H4}G֘ bBTd S`3غmi'G [ rFx$1lsSi&j;Lk8` u9^tt83>WiyŅwY@+{D,/"S2(9Kdi "C/؞>DPH;dP.cf#? :, F4/;(77Pš_Nܜ&ϹH}goPjW*~sIa0|IT|TsNZk[(7q5Mod#r uZhݷMy?4-Ӗ^~?VlM+G/Y.l_C PĢ/>!5ZB7F_.K_yi]ԗ.2`:vOFgWC;r{x}QtҸIp'R oF0TT|oGB$雸c +=`Z6D*lkցx` tTmAygNHgҎsꣂ(4hʿE젼cƦs͞zi vIK]4Ṟ1F$rJ#6f Vt 9G2:D>ddkwbf[N7;$3} Yyro-)-˗i]4.Vrapn܄,$F'_k?t;4# Fka9S\c5@#MO) `g=#;*B`W1Bq@ȂgY![&]d'-`tEY {t('e^4]q^sH=T=|u AD:(c _DžX"YoM7-мݝ3xe<5ckNOt)僔} h#-B_4sߝg?ntNg_t}zݏcOft˸(i6HK/6g^x-9Q7XdV${HMZvߦ6v#i7ѬRW}K[mF>NSd̜?h'-W=Dz_3-t0V\~43O5v^ݧ_~#D.۴잆~7,h@ʝ6em/va )}W顇z 8wvΚKcuz8"n%(M[O3sc6X+Md`}5nZw-W^[[+ ˋ2Du7W{m͜^~t[ҏGXUw.aDFӥo/ƿejLK!(3R,im6~W7 {tM|ӞlL2 N|Pѱa2{pgP싁=؏\mZaRґF0:[iҹ M>+>X^in{tݍw9}(.oQZBx>ĿJ?*V&lV 釱~/gfUqR\p٥vȯ<9f)i~-W|zi:Օ_wU}s/#UB{FTlZ#{u'ǕWZcҶ[ny#tTmksfMFX* bhO7t2Dz?}6='ߍG=v,4co}>̧ܹ[aM=,K-wwӁC,*\4ݕ{ﶕ}iҞ⋣|/sN<=pŊaP PEy@'g H^rsJt*~RiNz!< y#_j)uc `%I}U:KCw]ڀQ8mܝ=3N/N &AICV%G_ou'@<Ï_B/r4z|{DK}%9.lJT،Pt?C _2Ad -,FE0 C3t2ܹ<#[cb)Z4fdꑓ9 X~z*@HHM͝Ko|6`2FS2&{rˈ?!ÿWCear$l^xmtt~Rc#z묚,<+zDG!Q@_O3fGo/|ReH_a> ulK7]{Ym4ҍz.ڣGf;6*cGI~L"ۮvCw%TO'ǟ|Pcek[Mgt聻\eeKbלfU'}R։V෦95ri_~흴ݖ+.F WY^6HqC2;KCGS2cEg49,:f3NiM%`gfSg.,/F'wb#ƨ;3PIr W}e]R{ȶZ9=C`Yf:hÇL};wㄧ$њFxtIGv I'/8N/`Ag5fԱ׃ D3+J/s?ұ\QoյN-2֗sG_7~Acgϸ:RkLOmҸkZB{{^|MNTn uQԒ[d~hW "rT=5t'.ē_ku~aGlvRY=fRir"ZUPHu@-\L2lYW L&[@l˅~ͲV *]GW3.\N[tR.AHcc4p`a]tzyn+ov2OzF"t1+Ǐuk:Ǖc7HLwTI~WmtZ঺ÚGfTEXd q^.d@WJ5+2 ~7xfNLA%K!㘧҆;fǿ̄G |ޣrldb9}ǘQL]p=@z)DuF 09ڙ<%uAiÿC+DNK\J qLR^gDEu*RMpbĬpk] _a ӫ +n:>{eڀKfrգCGGR5TJhq Y iDiLM7F3piߥ4 rzDe/>dz長[FR.9*ϿF/J4ؐ;]hC7rwzUxQF!!<^qE_)W*7]Dzk]q'ǎKzܓ$|ٗiםJ/F:K3%W, de.RELeL~?N]Kݵ,L)q5V}d}3ϽY)cG|ii2Fe88G0FO gеt4@ 4nv?knSwd\1Q]_'X:3ltqoIUQXe2qV 2=QQ:jtwcǧ7YF:x-GA^ðAcWgT{t1gNyϓlf̳ iW{Ï>K|QN4${)䏷Ȁ ~^DvN!yOuzaG(t>nÕ{]ZrQ͂O[tО:\O{tHkmgmXJM3rt0~=e+S7̠oν.m}>t`N;n|mLC˄a>L3*puQ0saG密e3=}7dg,}Şb&lNxcI\)6tYWyS3j.CF^Gq .9Nч|tʙW P6)B8azr-jY!DBd2-GO\1Ϗ|;@֢kG7J+gHǝUA0B x@~%<>;Ƨ0bRO#x<$v1#744AU F9զ|Q2%.:\ j!f-OfcH<+2z?L )gӀ{զUm֘/>k-y{_ȄA l ,"r)Z}2>8]q~9#˖Jm@ȟɲj5ijf>+u$hmCOTG|?2M/~#\T]afˇ)tFn1؇̒} ށIVKL(O<'E|o<hzCEtHꠐtT8>Ohs# Eiiíh5M~l#Aíkhi*V `.M56l?8 /@GaMo lYN{(~=VWS{#ʸ{$_t؟@SgSEԱ{ E>B{Fj`Qu_jK?Xj y+XѲ%H%Q|E3.Cw&Wʠȶ+ygLYr-'t6xIn];IO_xcR%H!C/Sl,Rڐƌq“Tw6 =Dѽ(/|Cm4sfy5իg7fi1-Bhx_#^pˋwxuFx;/ѠkX"^,9~7o.IbA#!e`t,4_!bUHnuzR om44A{sO=$>68/G{3s},E) 5~ 2V!NB ^%*H?U.yZ=GvbEZ"U0rϼDY~{/&şȺ4)f7!t`|іbGcp ?ӫa@d JQ`p:Q~J*A.2=!x;.@>"h/פ(|樏-&o^pĢ8 D\~j;Z̿ O9ݰ'"UgdBu[PfIVuc:қ3I=@F8+H!bc٭O |ZPEi+Q82<|:~R֩Y'*pt]S˭GNj\l]utf锑dX(j|:zߐp@1ךz.37X.,t6b~mO6X?8T8Cd|HSW!5E.ϣ#" q!;zÈ ͟iՉ'O^Oƣj.>aV;9R/Y-գ)^Fǒ5HC!d Oۧ~W8O?2r_~. 1$,&q^D/:3Qf(ʁRP#}HS6&~fmP**Flj_V F2tfԲ_N:gH?8AH[qy$7>yP9̕1μ9PD\aP`ݥt|,.:h5y6F\)O 't8,R1FB+s-묹RZkr: -lP;{pl M Ά1ѕyRY*T2EMU s͖5l2\''k3UōM( НbΕg-|._DHN`& "3*I+3-e 8jA7FeH3FXmy/r9ff]wtґ쿣i}/ɣ?/΅PF< >%.oSNJ} i갲֛<⧻p҃C3KsHhNTcdQU8{xN/yҟH-E/}.-{YwP!`lJwsWT.ttkQ~!'ܭƸTp~P÷ULUΓ9>[Af$AN B$u~oWe"c<󦄊;u3ׯUZgR䴆1VLGdu ;|g|Gba"QGWhBðc~ҙyWG݀rpX#pxf5c1x\WC!^${Ez /oAKzOQwp1"H^2n݂5-J+ ûB‰2_6 r ]nu{|3+f(14FFfDtܸϵuFRwXT"iIV:I-RxmњJ Q"w"SWJE*KcWF Jh_3Zn2 _w4Kqdᄔrr2Ӓ/i-7Ԟ^>s'n :Sעe vmB?ĕr}n>mvntݬwNiZQ HO\WO|P{pG'Kv7A8ikO~yiR;0t:͓5џϨC?>hOUVɺ%O|8_HiiDҨ)N1%~=lt0IhlK %ϝ7e|}Bv/=?~Z>~G*?f`p<ǷK֒tę^٩ӚrAK ?ޜgAnH۽62l33iO8M'Hlz8}ԲN8}E6\u H컽N(4}`YFo)͔ͮ}fϾzó}<͊٧unLfLHP:qpv-cYr  Q;t[ T.*pqXZՕACqO:#($(s:/` Pk;'~ңzFhS@^Yt,tS2 G=`LУc% ڥCzTP uoR84f;fA ]]0x] MCټWtVA@ 횗(Fgǻ"XGo B8s'$Bz0HG86i|*_8g-1 ~:nj+Z6,9VYg4BbeǠr\<-yi#H?*lM[iiF} aڢ :!a2;^vE@htrj1QLMaErhfp DJ-h6Ǯ, J v{ߧJ:c/8:-uyRl JKr6(Uy'EVhWʷ扸iDaVo젥7d l@Vx;hodsګ5RH1z? k_ &:j^|@lzr22KC͈f:xKG u6\o?[L99 e/j,FS1\ cuD㶊q v ]v57gCeqgd8\0"V,jp?ri{yw9}$- Yz4|%[Rm&ök)So2*葀(qa~'ImeLGe_|m 5CY)^x@}UA |Gj| ^ҷNz[Wmja`E} ;lqgҩR.AoVa!jDA!&W(E('%~1j-MsSJit}CJ>F?rf}8ÞMl"'~&?_9b/NJ3ÆƝ^wK)o1N[LM:e w{3"d.#wfGV񑸜"ŗ} 3 ^\ DG3uZ[9Uʧ7\uzW蔿<>3H^ |XIǴj6sal69@IDAThuCBE"'eڳd7=$Q -p57ޓvyw0ށH 2]vcx92йtJ-=#YIs]N^H[K[)!)p묹/f[wa<^Vp;D4b_=D H G{3qǀx(os ^ Sg -8w:]߸Lb^My.zT =7{쪼#.χ_' ~03)kKsr! fcR~?Ls1 PGxQlhϥ^/Ə 9>>G> .TMCMCE8lOupd:}G~=-wp~[&5e M *2vܩ-{E fRhw+b56:AΆ(ar x6OuJ":оj浐1qp'>d0`Uɇ'OMM>(δ([0 -M7:a7B-c%0ZUT2bn/2X9A|2s݋ PО cאqp݉.E xRB i߁ S ptl*:9}IqUF,bO6MwO4O#WXC35sU'deX;C!UѸt5,K/m{Cs:24n.7꣊8c Z^#`At:E^e-qŊXJugfA{+p*,h KA`ᄥu<(P=+l(sOڪ+x)7ߦθ<]| ۯ&i FC^+?iS®t xo J8m ?\EÎ>/} ȽL+aTa4Fi;^|}G؉0XAa#ǝV[mefLcwC2-d}[;MGktm``HQNL}ژ劉wb;t'w]F}> E}(-=,A`4,qFT3j<#>.[e;u01P߈"#CA-L!(gF5΋KKchg6{N|)ufO~1Y{)^ ]w2c]` ˞}AYK:H~c ͱ'_6ױ֓dpW7E%VQ K_+~ 㧑hf/0~ayljm^#q`Z9b}Iu\Z5^ч}iW~ p>*NHC:~1S52wH6=|Sf6fvoҞCAGXfv Kn6cTr;!ä2'>!?} c+.:'mF"OMҁhH{ڻG~̌bK_LICI~>8A7t:t`"~- 8X HFt .%ҭ3[tdN;j Ό6 y: &G1c_qF:xMMw<;v!,y2Y2ZKEso,bSRJij?С#fy)N?f0;zftAl:+b8D߫:#O7WNWtjf:3LW!~/8Iu=P Qm}w-\_|-`r@:+|KOrzI95]W8-T; 90HP::3s"E3uFjr!`ldK*0 rjYNÉ@v! !^8cB'A94 1B{W:y/^p 2M^nx&DFqȧ{]cփ)!KH2'fsPmd)ƊG,@d.̬Sq8"iip2S21a`t2ABQTљh3NNCh< UeDF&WY=.9xw qz~.o7yCC&: eFa&аIuN ,g)ff6@X(&^t`3?$/6)ߣJ`g[K$vL!r @K9$jO|'cq>!vKI7"xOU8Z1nәb =1H 5~oehNjfuVN# qC,ࡂ\D\KF؏fTzq,3{?I,7_֜O7]4\ D0Èܘ8Fc^1,*{ C :H e6NTtT>EI驥`>ĈNOR xHQI飅?!ǀE<Ƭ2bs&3`^l:YO VtRk3,h6l;q*Rbs7H\7C3Mt ot_Oʁt:C̞ٗ{p1{*01lWQXnE.Ѭ@K8er߈; .R;ZtgE؍bwQ[ADQ1PE <݁] JI}y^|3yYS3ϬG~ ]*h'?ȦhQ9tX@+uJ&%2F]p#5Bۡ 4T|mƦZh_s ҏ g;ȯ,W])$_n|NUxWd$eя{VYbGZT](?o= Y?n#ćg!SF2+9zDvM2CK_9F7!Cmf_$LS hq(@`y8G,:GwT]3m _":q@BV<ʎ7|4RǩIi$3/86lv h )e[ej"챘HI'5U]F=YyPQg$<]|aPأlT6,8E#zNZ0:tm3wֲgtU|g/4QC LTжCCoPq T 8.$%ri{POt"£#IYĤÑ{n i'J iy2:G2 [HwsPKB'8fAq!~#P 9|G.26֣6r%< &/ޫ8wtâ)i nl '-`.tlLYoIr8B]<ꯌCyFWdoH[X˲x>~ Xfll,: _*8 -2ANa7i)FPD`ʼn>0$1룛kΩwo|w!qc:EMaJWƆɶC(kiV%GCd_'~ز( C6h~8 GoOQ(c``cUz/dfD> 7ՠM@t 1|Cn!{EY1:3n)e) ]뭦`_cꬨ|Q _)A4eV#3ij]2w#.D~%ؑGrċAF}%Zd񔿨3x3_xA/03C N=Nمwx#pͺax q2dzˁّ a:h`" \*87whDK8 h2>{ WvfYGp/ u&KO#TΧJmR3>&d :D(Ig1M#Y^=)ޝ$Tյ&rp w4roA2hLA=I fS.%~=pYs:@lT94V]ӾԑC ma'b_8K=E[T--: 5|`lR؅x| KܼWzC_g[LФ~.k{㩍ӤM8M ⊞x|,֙q**"p'p,ms/" a+ TBR |06r1lw_0ʨ ;s\2ppC_*Ee*)?.,dV=bV X9@dNOe r8A*Q00 ͱ'N`=q2ߘ9XKj[`4A8^Uwwh Za<$CUp(WR0 hؠ9I/AaTn,P6=_r< ~{b;N/F91|9Sfp?X&=@  E:TlĭpB=T+'ƀ` cr_}A#@zD?\a H2tik f);aTk /PJ3r7_"r:!(diQPɒw!:`)9 &[O[_ !0B863hs:y509(r/ˠpNP#h'N>Ik@aA\tg m) ztTD7ao@ef%j+Dz0~)>eFx!H* ,=a.z1l2!=Љ8.ZB:'W>R>u!S38`JQ,;R079]r<5X2 Wņ>.10'ZDH; TEBe"4HGmA 03͂9-WSHBV#n'<8-t&]Wbx+8 3=:i>@3re~sXUj o! œltl4bL͸X`R. p:E{)( 5GQA\G4ݍ[A@Voz$Em2'=gYP?H3Pw)Fwb!N\a>ԧ1O4ٷ0A6W8%|rpA*ͨ?E7q)Qfw|Y[[ =hp#[f=|CLW&xfA:1ESS%3A!4T# Zb]BWF)"+؈G"7gN"2,q3 ^q%By'rTZn5A`|>zwi |{ )cFxJ`"-zwOԀZ c+*3WS.8/~ (Q]‹P!P)nSgEU" l$Ed aOi%/踜<%f W MM&Qg]o"F⎿h,b2d\b8~!G!(؊puY?-f$W/ ]FЈweRВ/>F3yhcTqZAHxs>Yܼ:+ nBpTp!rBñIH E?a3 -ʖ/=9l{6pG&Ms:.5dܺ4'O'@.@`-XExx(rd"k .A+l~T1@cX``xeVb$Y/`k)fS$OסIQ?㭱*?Y Wa;K۵2F)ۢ`k W&Ridd!!Q[`~ ByDݓ^aL^ 毖^N]}1Qb0x+xr˸t))~zgɳ^G7glkg ng_V$TW!Rn[ jh 3N)B(gJS. Q1㏛/($r9y (6}×03DH[/X[ |ָ=㇦Udf26@g_'+< )t$w^֨!)ypT7ru8*\鱮 TP⡦Jg4p$Q Ջ߳ ^oNlODA#0ғa3Q̀{xp@<+ԉq&0G$cJ@#XF̨gv0k~*1UDZM'.1j761pWR_ ƞ@45ZWp02 7A3ưR@UzU M~VÄt4ZrBV Q(ğc XSԻa!>ˊph|VEx/*cD7ڒx_]D#%3mER]Fg'g0c06JG`}*^_hk-iI`̬7"ep-|Yss;45JCz' b;R!'; xdBj$q@NބyARG ⵒ?ɪ(1N#5p4B?哟H~clAa*F ק'tLU e纺=(nyV?|W-AXwVJy%@xD3s9`?hR/0p_9h}^hϞ\վ9=e/E(ed ~TEQ ǝĨPo( ft 0+'Fy%PI@d "ٴ4YW%E0`., >H#hX :Zd@`CRy/xG؁[`*n'tTQ+ #N}@ #03z  j7X~(Aq%^-%n~,g02g8 n#A` W!H瀬u 4n_a<䛊=7 7eK@|_w |Q-fͳ+,U>z%~ \>r+k%~}P ot ]V7,*@/\.·l?38 h*/eQeD*mBG܆׬oð:BΩ@fI 9~/WT/Y޾Nz'hFjQ# ?K4M "7.St) iW(tm }wN8ZBg=2vI˔E  :t)ְq;#z-?!4n5n =)`hXJ7Ay AV(^U ̡ACܶ!nDbofuTaaO}pntXK4pmx)a-0ŭ T>x;wbN;:qt/yMxfjAM ;GG&zz5~EjF XŬCNd^z#+CD`(R(hl޵f5_;3!s#0BΔ 3A1 ʣAH@C/C9/T LQUNQ; ]b8`A( |<-[tl$)ʹ̕騳I;< :KȲ Ra^m% Wc@5޲G.x4vi'_p›ϼ őZ $!sوEWaKX\j^+WT`xMu#_?(̀+<3&qOwSR K8>Nsv [X{W'W[.s5*Rq.K@ޡkL |4~Ʒ)L[,gp$UYj@ը wZįIP&K%݉0~(\rAD0:HE8 g=AO@w^܌ gDWxNʷa']~ }CC 9 e?8`$ ]%c0_tHI:&ylD8c4l9"^Bqt+?~ Gki#uEW@U.>)9_VZg:<px]#g 0>2@VO_܉l܄ԥҍUZ,4`6?sO%N=#zE<nXķTQά? ,[FqeiG,`Y>EݤQis*g˹Os<7nmJ4ҋ^ƋO\Eh\(J%PKr̳rCS*ρ)BK#SfBeμo'`JfD7f0 yf:@2ᑽCUx/GQ %nqeU/~ Q b8wd_p;rBq~ /wwͰPL H,_B-.5AϊIQ*s04pq 0>Ԇ`Gҷ,,o>RQv9ÝI*YAuxVΕ/z  Q̥=t?дJD fL/7HONNp^n;b|Jhwwx3BB5(d[Yy{o#*<ڍRSaa8Viۭ6 X:]70PE@Uf`[0saܳHw@ZL,61,yø(\]s1^+i`3gUqp,m/U"i9HBd@#󄛨3IɐsIl(WwdHBo(]W\hTSUc4;4Ǩʼnv|# @@?婭D)1>aF3H9S9F'(*'i偀 "%S:UTԮkiN[U(Y+Wn. *?]aȳ|$6 yLLHU~v0O8:Le $c9.0w5{Pk2 +?*=xߵp@w3f*|R53{p_jZyV$󰼯jRG :߽4o>aHk}.wG(i('9ѥw-V ܞBwa8CiZ2xJGFee)m+}P鰃HϼNAJ!lZoUR7Oەggm}OGIٚZt ? b*˩߲126Y{K4H9*'n@G:,t}HBgX@<?HF_5PmMCk7Z'xn ĝwG0˨.lA۝ifw `tx㣅뮵|z N`2%FM7Y/J2M)\i WyZ*V鰬 ScXAe^rRFB25f 9h!H}ƺw. ꆴ,J4רWE^BFm-7?7F/ܘe& ԅ>hPU!B04͡  __2nHyR+)N:f+/ޚ~%Cgo]w3|+dwډUV7e_~KǞOmԶ鄣N-}nx܁ls4[tǝC]~әSeot~?QX~tݭ&-RW]nuN!gsᆬ~ɾo%` aڔ) -NiEGa2Y8K0f 0sS~ø{b(vQ˖-Ȩ,|k1rS(l HϽl5h$56*Tś:l;(LK`,)ҤdJp2?Ii`D Z:WgC_E_gK<6$hs!(" [6j? FXZB l`v.5*5F9Tޓ&I6Tzn!N$4< T0,*|urFSSWWt Fh 5:CEQ@^ߣ10pv@|k|#ś)7 UefP|/pieWwfCa%SK[(-n4<2IYsS>'2_ψtiߓS/ubԬK%/ /} !(qBd:WCY.NN3v9{i؛鉧5 GnjUE8)/oQT>%UFhUfNs\{p)XBY#刺nuӂ,qoKstE^eːtlɻVYK.FG~]uΓNm* 2`'?Nʧ p.ltGlJ Zj>C_n ay_X&6z3SƏ7P)U{6M:0Cta{'鍴+9Z%=CH+oiitǦF^~m_W+]wN_bϼ+Ez5]viz8*iwi@M!u+{QZOwmS{|=(]p}K|q]]~]iζm =ċi5>ژ_F/>]fvi9ۤ.VyFN_FǙg˕aӧR^l6qJD+N"ꏺi\R2Q9u-XAM.Gt+NuCmEȍ" $DɪG F6&_JIBٷ8W~3 3:?F]~)5:cS5OTku`OG7d83C.nɛ+^R/yߌCjp442gl0Cb15ho}n}H˯Դ *+/nu mfOg3sY9-|Wid\mc#ܰzUM9]|\teNZxf6hʹ_ЪR + ]#?'}Pr=;jFYAkvC[?64үLe0e4iCOV<?P!]:uYK*N< UcomXbڊiΝd̕COo&J69ɣ ZƤ۷KSyҫcΉ*%:sh _Qj\?4շT`щ ‰[P5dZ+k{Z7@>CZ"Jy@IDAT~а {t_LTU]kD{v͑Чd|}$jQNk:ni=7m[9V\xA`{{M*8sǴrK'_H~\ kղUF뭒~Ǟ8`)[xy51=쫒ΣEuvjx?z#iFpnỲ>kJ,d㮡^LrKJOvOh& {Fi\_0I i]qGs wk(?j]hԭ`ͷ tG:h$+n2uwϴ_~==J=F+PN~7=:a+hTKn5WL7 \my%o6#Ycͩ])]s}2>ǧV`@X|%? #JUf^Uޙňl.F-<wH˯n0AY[m;,aXE`A6h ?PC?@iӋ1̑鶵iڞUnihΌ5XA&9G+Վ=qQW} uF<gu%ac|冺=yXb*~J;>;`Ny{wU57|i)fth^%W4m`tqJƧk#GjS2NW1RG?^W{j4q;Uy`G>PnGkܥq4ayfuyNQw~hF#d _Sy|^g)JM+;DteH3"ݖx'F ]{匓L76hq\W3L~{mk: GjHyeMԁZ;=>oAr"J6p}v K?oGԺEtQTnTwFmF[Tt:G|'ut'ʽ8@ge;K<aSeP̯e#6[.a_u~-FK`& 'UeE>QTZNT5=YJFo~{^~Y]Ҽ<,y*2BސwTuGY d$.n摌2&Im|:uUTe%\D7Y'v."O#[z$s2 {|wa᯾8XD=뭥D;\,i:W"܉_fnAaBt0W\}`ToӴ%{d>nDUec_t۴tFM63([kw$ {ᙇeZTՎ=sGzYf/b8`t~;CxBWAuffh.uW3ᓜØuvb:>$2:&NH7P:S5w?J.8+пϯ{&M:,XUNQ'mh{^KuWNs/U=$' cmUxuO!eg@6?*˔Ҭ>ؓGaV30-BUFljoN9AGf8Ka;znBkc}ףTߪU m>X'{ϼeסZY&?cUva>̢󫬴\Z_Vѹ뮜.s˦W~Um-6J{s}Bt{s5FZysc͚x"1wl2IֲYRI AgmUGq0YOu,>DB:c_Sf "v(9Í0kL[^=1A/,ѦeD#OȌ/Re3 F/#BFT" AGP3zRVO&{yLa>ELɝL *] i3Z7fX^&3"hׇz%\Ux͆?\x;)+nR+HMxT?+NOlTd[oG(Y҂!qO/.GG7];S;ңO^|rG~oeHɸ?~O}!3͖EޛŇt-Fۑ=\ZϺlȚIa0.[ /ˋ.sfƁZ Ka;xp_~I';}CH08mنwP4AO^z~^G/>&'PF!O`MW!]ALOc !ӈ}sPT'i2jdn&4׌S,C*XH}B>OSvV ӿ: C4!ٗzz]O}0*S$rȚmjA1䊋NOO<3uL8q, 0sץ[=;=1J-I39 lNw?7^yڞ%%ꂮvϺ<4W}w?&XOc> ac(TWyLZ}崬4X3\,EjyU}\>rAm?Χ*9W4A]=aZvMwVZܬjˆG7ORϢD545*~%_CzLFni0P`4 5V]Ak&9;u.F$FoN.J^zayُ9YKfSCHیl@/ktJn@gcD yz=N^f-tF 4xkтK=Oz6AFpK..szď]v<%K}? r}<@ 3]md\a0v06cW%L4@F_ǎ#u;<]YEFC\nY6SF熉HN:-ReNL2#LOsZQG>{B !B on9꟧d,xCT}9zƑ3e Ќ^Mj 0tܔI-FLazRi曮:}48~g2i'HKKՙ!Jf&(hc\:}uY`FAS2-rY*d; y'V7/j)%|y2('ঌmwt?u9ji$hyVK}.u\U1(aۈii5K$YCϻ;6{ۦg%yCcɽx o.;L˱O2-si۩#شLPsvQ$_{c߹ȼ/<3(-:zY뭳dX:~1NtA[GvNnYCʬ@~33X3i~W/8 wi@Ǟs1 }\Ͷ=:4Nf*R*}.W_o饧n޳L}m3Պl8}.ԽaHISs(DW5x@z%rFKcGUI;KPj(C=(8;s:ӴѰtK5- 7%4U PtzJڡCxK/lM`MacOc4xoҊCQϷ%00_-yy ⁊a `p?ȇ¯Bdpx8ج.%*]gOÐ/l_iAˈ{\>tQz΂!GKH2S#MTe|#2}ewZɘo6gQp+ #}Y NEZghSlo:I#p:φY,yb*0@ޢs;х b߯قvZ6+++$C%xϔg]aȉnM.)[vvI@60=7lyڕ0t˂#{*zr:Glr{E,s`:²6^6rAͅ{ȋ ˢmf!;j͐!8>4rBWTp n׍ T? =.ɧ5g'2 /dȓzu~'S3s='hWyHݎ:ߛxz7Ҡzm`uN=~ə'ͧ:tRipL6vG>_~S6Ν%JJ9͏Y3zw2BCŬZrvϤ N8SkD;6n#'NRoƴkܾJStO8㑾Sg_KtDj[n{5>Wn,'yqq3 Ω|A#BhL Uw;4~i睶M\6ޭsEV|` >-=/'OSXK/P99p3@o/!.H hnQ6\-BȇL5եgk=21 > _YrP[ @ssd}vI_50]q =#{8gϾ𵔯4/eKFmɷ0»w mH;u>ct1=nPGgy]l&]wU֠RJ-".[gy6%71GGⳑ_[Vzfj!èq,A`-/2O?;$ej=։=ﴬbvW: K0+5c?{ڋrGN_}G7WePHY 9q0KFhHXa 'nx˂SH#0bC^,b/: %?C }Jf&ӲGN:߲y+C W]S5TnXDG:anl>12=RX2fvvsYk꣜ 7:͏+ʾm>6b`6_x1၇vOɸc&7QpA-ˣ.߻9MT~xdOc~R@F?;g(RBCyQ?+e}f>k[O࣑>,XGӥpY$AIׅѥ:iNQ\Xf$+=X|9-Gez ߡN1TCn}%K[}a>n˓4/52,8dqȘ:%pt:kYaw|MV~6*)Z:f}RRkS@;so#ŁA!?N[ɧ_?|7]HOH=t?YTXg?OVQ:]38jΤx810.o%NB"(;"CmIr-5M`kp g2aXjCT\fD-e5U*X+J R,,|ѳj3 G8q"8>@%bQI *R+V"+i.xi ,.bޢ%X:;QG 2a W57N[DMXY$!%\Xɲ_YB6 q1>ԙg̯Fh5d!X")bk딠e^LӯyFD6*dvpc.ֈVonQ7R|,g%P,!4J?~3N뭙{{5KQ 6G.2h_qyчhM42H3Oq.ۻ#s{FX]d1փLhkf^~FN0ZF):@{NuK[FK|Vf-̫="ajNb?;l|:s3x?XHOmY&r!H|rHgFරJ[l6o}'sf~:#_Ok$%db,7& OZ,ێ7sQuw#Jӏj-+d`yuWOjG0T>3Z} L<9u?/%PKcC'hlOJ%{ioT8@`}jW^NZ<hUbZcw{mۨK?a6oSd8M8ϴ<"tȡQĒpMvq}+ˮW2:olnAn̛cĖ#XoQg-qK ?r?7ڜ47H/|2$~\!`Wut)Ha^^wX1wTiL \$e!`\Ҹ|D ÌvMذC8.Ymg7oL=SκDG^0Yמ iKe/n-$eigkT6a?{G6W^=̌ϭNwzi!"Qa`ᝥP ift.x#7OZ 2s ]w8YR:&4T l ٥i՝]&n$gI쟆(MtĨ?/$WR .zRt#DU'NJw1Cm !h"E*#Ӟ V2i5`PmvP0T. #Yԩa=V|mO8s'(;.?κg=5y0ȋb@s&.ː-KniQ-cVu&\#ͭ ^&toV9[xcN?BGۆæ,}LRHfR>tO:XCuvAڼdI Yp驒BJ-mjQaNxK/?:8riew+{_BU\>N#fy!:I=z_=gפSz\} w9B-Hfuɧ S388d^=ײ3R+>\7Q4kk<:bۨN*x|c5KO`5:uo?~OZ!Z֯P '}(y26ojyiGM^6QGZ X`JDq6SoFn (`v \]B|$qtv< GV+!vGZs\~55`W?ZZޚ̱JpEK}W@FpAެPq3q>ƙ~錓W^riڗ3JWcX94`Һ6|gEO9xSOmN3}9^!^}&-I>P 3pf"P(ֶWk)r !GY eYRy̐y>њnR Y6++/D=5o`<4Y3Qzx1=<eQkwuU;Dz 2 ǒθP떶nsm?d1V2(|9e}EEWX,fx0Aca;Ү;mm#e_J7?ԧS;3R 1BaD.LhvO=uI*t:?;:g]aӯJǟ{-2&UyHү?Ա=`_Ot<)g~\5{ $d+7G `B4'#E߻iɈK*;,Б}uP;Vwf(= 䄎q ^0#g ct{hd#qrzaՕVӆXՙevIj\EӋ:fx>6u씳.Ugd̟0c^.#"tOQtf< ]wUvIӼwp4v蠈 'qo"y24Mgs7< MǒC$<LCGKv|={Y'qΕsY*VKOdr ҷv> ~1AyQUΗ{4fcH-t<:Lv/ŊS:۹NHf-?.FGW}\Or狏JѲCxƞh' 3fqKMױݐNVgnk9w{`3I6)]?egi/ˎR~4f^>qf*߉#NȺUY>=NĻ.#ٗD%$8 ̢]ϫC8QS~fO~XrEg R?uqDLPww> 9p|7~GQ-fiqN[좕V뽎IoEôOfȯBFYw\/=s:L&܃z:V{ۼyFWj'K?M|rrd h,KFY1BzO5>0] _ϼ~IMV^fg@6>4+R|&@YgK/Sh XL>|"{Vq3N%u5wU%AwЂN D.IYlg9?ѷq_! h0ҩ 3xwbE x 39j"鳛=ԇi跴ΨLx"Sb6ѯ}P1 )틇,g?i4=tv&>myo:t6;Jm Q{uӇ|_šV.}ˤ[BB͓v%΄#ї8f7!gkt$NA疡?FW@}xNRW&TW4~:>/>@i?1$>C^8#O|8! ɶ+]Ă[NS}._&fGע})=>qՐvobH/}=%Q?,pX4?)ٔÃ49lwAgtgp0Ņ@+J*dpg^CIsC4Ȁ>֋o qP#N]s Wq gqE̤F5̥?1,6X> -^P@xpv5ݪy,̈!| ,x=2m1{>&Kq+N|gC9_zՁ"\ATN%V~ NgY>K\zVxb'-G!p0${יƆ/e}C?/r>'d%Z:rC ^-/EB+2{}:y}+G.s52uµjΠ*'1w`[l$CU r0& (v<XmOON|:\6udo*P^'x 9T}j .Mb)o|Rt˲R P @-8-TB{"g ۘDl $I<4maDx ԆXXO5Í< eh@OB?ۀ^*lf|@m[:*TL< mw{pޘ~I|RB-뾍unͺj$,ӯ+Ly'O{n_9rB,ڵϬ>ṊD RqLjC|Rh+A^qYC".A%8cN03r{-W uMK=[wByKͷcR5 NJ q{dwq 6[tYWNvRMpW 8lT}è\vi!4#T+!7W{[n9&E4p8yIȌ1]xoۥ;*C3i>6 >䨖үvD ~NL?le<!) *W10olDH[$d:T ZfMk- de O})zcM:N0kHϝ402*͘ENni!P^$*oJlm@IDAT?ZشiBUr LF [f~~ͳ{Q0䠅0-&nYpHS~%B2oݒ%>sÍMs%Erh "nlK}֞CyGVcjd/9HTL{(([GEP3`B)M2xJܷ+~$O3i/qdvd^м4~^^TRVIl?I0 N%/jbCp$ͼB`D"+w&RR_,tFS0yUjٴS;!Q ƕt#9훜i`TfeK2Y|f_zЅByx.MF*i""o=TvAvضk!UDXS XD0S穃2! d A 3@3g$~lM4[}vHǪnLjo-LJlh]I{b x*Xk>k~IDW -| &b~[L@0bI[EѴ@e7twD߾_}Սj7'6ϱ$],-KQaH/c,AWH5ӿdŝΙhX86H8.qC|*T7tΊGb.YvZy,^M 9V}AeЎ,۶"ezK(2FJhgWKQ eW"w8o$X6|#!zԮUo;H`l YҶ[bt6BFxn 5YXeZ:I;->H6J4ń'BձzW+Y*g´/F/f宑?tSuPNfc&oJS5.$:%[4lR6971`A#i{*rX{4j#ÈA*lik eWSX䔑1s٥AʘG\K;,goKN?OF`d < wNGDۓmp5aʓEff _b0CxܸU"6t!m R:BqR[|lEGW "64f]tl"+~^YdH[kXd5NqF4*uPn:gt]62 Cwɲ{GQqDR⥚׀ g_AʂgBo6%aL-EPF^@XT\WLЭ ([Z(Qr0PɄwlvFYٲ;,"?lmQE܎oΚZл4k$FkuqRh8 ,)?[ "lgk: @2>!,j1vm֫  +%dcP;I@}(:9IqhkO@SMۢjIWa1H{Afjj[!t8"ܥ~*yY b/>'K?yb U(eW#(bJ$C-]ALk؎?@N$d""RVuėf(=d!uM='tQEYCSC1fU ,ٓGZf0P>`PD ?x,VW{^*@5́SVC.K- #j-z2+*S ?4 ҳ:٥|9mH ]P$_UӚWmLPa|)z=Ҽijl[N.& F)nلyhŶ4$""/o?p<%Z/v'"+̑XLe)l[l̡Ftŗ2%Q!UѴUg4m[I7aqɨ-mn0=6۠]K{D9Jؠ&.>*wTĤ2dT@.imETAS[κDuJ,ħ ҖB8Tr̀G~~80 i)C2[Xd I\edLfkZ41%UC{"in&>,k Zֳِ nw\kF bܩ ЂRd[1&Fgð؊'CŒzGɲD)%nYu7.mX30"W1& @?]M)|!IYqXL=!CQCY2r%%ehR(aX8ŚY8iA:fĐ_Y'ŪM|`9KY[ԵgLЈQǎ'b('eN%Cx)ͪ^)I%-%Hۜ>`_brNEP#~А|D{Ѣα*%͏@89k h#,KxY%R`?s)OzѸ &6@-`1h8uۋ2 GY-pgQw;1! 8VmW>6i_>"B% '2- |ܪ,.27X&aĥͅyUlۭGPDFhe gQjtT[J*|#m^klZ7׼Q'YiH{q_x/epo_Smh"׋}G >}Gץ1&NpgWFnl_(ZiP`YDkz!5~_yؠ\,;L5P {Н2OO{\+fE V{|F]%̀ rA'8-"-)y_JwpqFGvQ!=NHSEyBԎ0ZadCV{[BȋqN=(h=_c.䳮t6s[J\ZGQҕkz 5".a;XwqzY~匲M?5I y}ι Kj–udu"[F#6{ѵ&_mzP&`tx Y+ZuXu"[4%X-uӬCS&EBXͶ@^-LI;U ٵdEH @\ `) I*f&Ν)3t/o{CَS,0/Mw@~jf6[]4!_!<2 ĒD, ۤK`bޕ)@LVyAHmMXtoCm 1uv),Rўxl`Rr^ҷ6Lba ހm7YSn+PSZ@&w,'bY kcE+<`/O<(m̉ULgZqaM!KuI}T >@3{-m6x/N x[O[_h*] U,TQX.rA 0GPsN!-nbaa,Ŏ/R'9[ q?[je7"*\#*lmjK550+xl9'2)Y 0"$ld&]W!m$tmA|M+q|͢Zz_]h'cwKZsNy|?v5HBE .mᆜ G.G x'opɄDؠ8EƨGUڸ e`qɥ[䬃 JKID;;Tlí<\<:(JĎ2B1`= 1NUg/a(+6'Ҭ"aJ]ebϪIZ1tcHq Bb`9xhC9~&:׻g;mA1:ōO6SAta;kEk^ 7r6oNcW#B[MzP\q.Y(t0gh-R3v%~]L.75/ZIixcyF/"Ћ smRDVPD0q&<>G+p!jkNHIJp;ZnK_Ivӆ.t+egvi5WoZAEH&)] b(\ı$)u 4$nSAyQ/p~b/^6ʼ-u"O4:gpG/tvƮ"`4-ngJ'OUږ'$N챮mشV+U9NwrMfi`GlNWplp"֢:0ͱLvQ|yTa`=M=Je[PeضRLB_QKQjc»%6*ܦmT nih u7IK 1 @i6Fmp-]{{X!NTP!.F]?-H _mV- IY>4j2I3rx : VyUK9дJvm+f2Qyhn$IM%gCV;Xx<jO.~YX6}N n[XS*-ݎ{Jc>Gn?gzCn$NO:_ '[bLש;ޙnk#{{'C~8Glgq`hrഩDd-l1N7&T}ˠ]qBSTvi8I4򈁀QlO0QfK*9g}hxzXλDA?v^H}f$ $i.\$&!e"3 IKs dmcF8g3[w;Wc}HZqd"Ig;3~,@2cUXUYFə1\ӤƱ1vXۄWȈÊW5[]6XN){kWnp+Lz0na"_ׅVo1oۭ^[6mXw> -癤2?;E D:_4%ێ0mk8tZ.&d7z>(Yqul–vifc OLD$IrAjh#W&d1v4D1sM%aX [ I]4,K9ɭ`LzC[V,3gfơz6܆Dg?Ymѥ kzЕ64Kt,ה[O)of8~abSzʲ1&rr6ĦQ1J}+XmKͧuei˞:sp0 ^('d,rK#,n7 Pɮ)O9шA9sWV󹧢To1~g! y2j٠#d3J@k)ڸ7-c8IЏo{le uN~˶PHnfsn)Kk3N1` [>Cw-B>9cV!ޭd4"bWL|"A;ֿLL7K"n[+#|¸YZ`I+ܺ4ZP>QO֯ c*@JD9*,D$m}6#PUmi(Z]%dX :by-ϴ~7j)+tR"&Rfpt86j }OY 2+%wW#.V*Ѐ3_ɾX_#r"{HAl\q(9P,ʠo8򀡎JY5e>O;A=ŗ?j(qalck|ǻu[N]L\I^*/O| $DIn$Da:>v FgȗĿ_S:W|%D•DrQ0ROMw :'wx 纺Mn8^ַZ3'ǎ麇hˊ֍ՀTl{ڈdufl5(P!ac%؂%v@3Ϝ D|:׉+嶐 wul#9g(22dgZ:r.gkr䴹؁O}eBɢ-*#D|skLпXW; I“WV ,EHg[\)t Y6m1\D}x,Q& '2/16hC|&mO)8mf%&|crش.ʖ ֽ%6"" 'dlRwiC*'vTH7W6*6Rcĩa DB:1.EsĖ1}ǣqVV4| 'T,VMau%FR:}_%8[Ҳ[m(c6TY\BLi]]..J[ _lv(vk zc,ݞ?ǁv[`xVXb cas& $vTئH &;A©J]n%`kN>LGXNJ#n|^yb#:~ 2 e|EleFF0 Ֆ;0m@&Άm/^6ia^cc]ۉ|nb uAqJ~{:MY9+_< 5/c\,P\NHBXTNZ6طӕⰒrZ)ho5#75ox[?4qt)w;]%/yJNihyo|w}׾M˗E49ǏG>]ozq~m~|/|+/+>owSx|h?~g4N?yt_C0ntGƋ>GUkn7G?q;yƛm~~-N[{V7Ϗ3^E}~O}Aй0 Y{|}w}7jq7}?wӛ\o׻׌߇Ƌ_&7׷]]K_qk<5~_BbMo$> W{Ncx+j9qK^1uڃg~|>==?7 ̝Txn{#I;$ [Pbf:Cwb䥹3}4]]@#%-> 7E.&1xT_MR7dgl!"sg\hTJvEO 7{,c>WӤůJia-~qlicI|\׋}66aˀV?Öv+hĩݶ/Tl F_A{L.UQOUxn%Es'*aj1E .T1''Wd1v%mo;F9 ImNTZn@Ӓove <']SA,Z#hgn  ڇ^lAMe@HLު5ڀa @y2+j@aVl+& 7qq4ɷC 0m0BHwpٰl`boSa~ͩ.4t l_K g5^e?W唩D_*"i;@]j 'xH'-'bBWOҋjiўEľ78a?6_9tO wqGO8v&3X?$.>w}KT7gsnq;1;@g洞_on|?qsϻP}]ng5>wkIŧ??{%*pq2np[|<ُx .p6npՕ}q2nsyǭnyqqNprե*Xɿ=hMW1X|`1•\|r[w㢋2~)h(O{Ϗ7_*,G⿿Eb[g?أoۏ /g~#Nw"%Q.+5yHc, 6)n"Zί7n,@( tۼVOH@g_.boa/?hcua`H ~Whtw9e b隉<lʴ*D8RƾZNP夅'; )%ޮaSYa fl>L$1~~+ޕ-*Yh+ecVq@?q4v>BhOJ] |a_ٲl F+)ȏ6ʴv *l~_ea\$Ѿ 5YѮX0 YVyrkeCS̾F79jHrZ'qU'qX-' HK4Ybڑ1X5\- /V G."R1]FJӥ. $9@mkؒGl@Eo7/ֱBŝqF+b,_Dßiٕ>"„ВAjEחg!O&9AӎV$bn'UȬG", G+O x?ƍtKљ4EMl㓟է?NWE3{?xxEϪpƟ骃L˻88~)8ݒ#?s>u3] 7w\|xx?Vs_>;U~xq`c^]x#۽.񕓷Ow7?~ O[q{u=p\|_7onҙU@5 _x?o}l $ltζo-oǗo=Ƨ?q~oh:2~/wԋ~YO[_p>0[>t=J<^W~q -G|Z'|q'woJJNX"+uga2yٯvnݒܧ܈qѴgFϩL^;jѢK30I0n"TףjRA m'*Kadn; Owy̞_ʪ ˦l[D2})⪤mW,GQZζӮE؈\1]`$bK~qFQ]@00uLiIL8~cggޱ!=YѣڕZrR(F@Q(Oo)Vہ$Jlw>L-u^| u6DZ< ֊lR&:PqL"aWp̀<7j!sg,M#m3Y`Jd%1F/lXڀdrl7#"}l_{~ِIl -cw5n%0'v sҦA$ \q-ҶZt/fo}Ψ$]'ě XN d7W:BCArHMKqk$;]&V[bfg[hDhO+$Vyeh&clɘ h+ҭ_>61Czu| 9 F0`L2TNtn=Hڗi u +%kÚ,>(Ktbj0p'z<3C19LCy5+]p_AVy%-QVcWdҁD1zZ D e}}Z@7=Xz}GqՃ]z_?g|ezq&<r;~8厷U l>u+9~e쵲g8묳ǹ睫EQZqMEێKG=vEqe敯ya %3AJv #|[x sNw}ecqq|t^ {◾RD6[n[鶷;'>7O)Oxxh`s__⽛ycM(i qp5$t;fإ<yڇ!+!TVbY0g5)e۶7wCIJ13LEiCa-J[u<4_Xծ+9ƣGmvɰ(xWBZ;hS1qH'vƩDկ,ުu/س"G$$>vi3)I&_{;qxqmě:|ச 0X͈ؒ {ִ~Ў#/D E!w!^a",6}AGTCBݖ Wqݡv`!%8S-hW1* 1 =G%.gAY-EZϴ+۲m#k5$hkjE=z5qX+TrKD򉉪g8cQWMֱb_[[ xli@Aٟ > .Ri y~6`m=>+d(h1ڡY5=~ K/⎕ܪ є Ea$iV.ݖ[Yc~ŗ}s, 1V;t/j.km˴gW@]A 3gɃ~>{ofNӷosV{r.CzV㶷s)n:vp zFzwx3ޡ[rc>0т/IN/__鈲(d?*5s:EUcQqKr[붴[6_^-2>W=;~ lh9(/-ޗ%"_?kܵ0DiX=ңdb4`q[~?=/ҕ?bG:. qu^$\]WǾ/IGXLp}f?O@68c k fⵏHYq{L@ֱe"#@vJ>Zs }'Ux-]$kؼRghĘˌDAdtJFhޤ6vhBO08:c?%%c2/}-YkZ׏P% MNmʛ-YO}2&U,@iZE]Hĭ%M%cCCDt,xbP/9al/|E h$$9A&?u9.骪$xr&QϱLyggHPL0_@&׆gl@R[Tfr{sٝZPG4`Ma۩E~'N3M@Tp:nRô1Ҳ(*E϶4h}LK$""~IzHtٴ/ 4ۖ xDbG\#E ]G^~ct%%5}3frN^(+uSop >cu$egdgAnƫp@e.k1-pNaiƄU6'lPW Ά >6W7ĥrG" 16DEfS ]n]h!#)}K#*&,*IZm 6$% Sy[orPgDSjH>ɿv|͵Nҕ?أ$\y@x?{7n?B+ $dt}݉*byYޚu{ t+tkW(⥱$}gک>;g{dU-j!Uo]Oo9; Z,k]WX}ӟ7} ]??_GtbhhWӢF78S|&Z׺'?#wt%_QA!ߴ{>]-p>U;ie(TE_ ' DԸE`|p_*)O*j٢-&K3POIevAI.3ElZڎ["Ppa(7coOh\,CsG}EbB?Y'p ql15hv&SS )ODl26M=2<IG}I8{Ȅkb f3Q+.*v%*1^dlI{~P~Q}h KB/{ilL+VLT5/)8RMzː]9 ,(j#mkbJ l"5|\$f&L"a|(^0-ٟ3lH'(}S cn+c&Tإ %.ٻ*8 JE>Ա8J&WSH/H?J=r-jg3w<0hJ&?uB[?tJ5W1:$!FfR9L2]+.x#%UdػM|Y%T<|F╾b+7d-mg}1*v &T+Wx0R?ʕI;,`V:Ɔ+V=WtfMylR\I^q9w݂H_Z0*z)ën3 Hx*;z|u$lŋd`*U?xӿu<ثK. zOyύ;|nM;E k=~nw3^7o8Ob,z]/X:6S)Ej=8ݐ0UICnkPUvepTv`#҄R cYEIuRm T`];t7m#AšAv?`& ^x4= +àEGx@wvccjy.8/dAeu,e p4Dc,+$r]lzH):$p~\3p%e#&>S-=I "aLle@foYo]_I US W`$,2ZF8MJtԧIk̋pEYhL}2˶QAW?+И+4QA1N_4]cųuOƦʵ oLd7gJWv[+A6b9z̏}]tSyƳx޲3~sW+_3?|?}L O>o>I/:|@habP;_x=d<ۙ>5zړƯ=q~΂UZd&ߠyQeuW0෾/>S].x3g?7ʿsWAT}: !]ݸHuY||x |rHe~ނ+3zUdr?yg>v ͋ hquco}xg<?GUbiPի}CXp<{p{bM;B*v~b9fVhz #jP*.)=~Pu=%OKap$B?$ɾ_kFbh*gϼ|ҫʮ)Fq"훫FL[ I#J|?LO h:<T](ꁍz7"%55%Y~5 xc1}ehoO銍Nk1B\pv.{]!18<0ӝ6c$˜,ÅX1qDp<-ȰFeAeK+LcH7T/-g'y r>} W:{q;>C<+q*f ^n8Sg(.A8dB`^h>}j"PPwGkԃMp:\@N d@W~|xf6gv9ں>@L@I uz\ҍEA6dŸPVTmLA>GJPls5U_gp_|d> i >X"]H,M2.(V0z3,1'ʡTXAݒ>1. co^SslyF$Uy|O+,ͅwi_LfMk=I7mu,mH&30b3z$]XMڝvR}n;7Lq%H𤦳bB/z}$a1ق{ڛx_6 ybLO~w+O]2+':m]1a!7{k=ֽ{#Mk W rՌ=c?#α:W4:N3iD 1C1,@!Ή4t֝$JdZe,rt-/+~̱:AOg9޳{ޑuni׸;ۿ"9[ZY,YS˞JdNvƯ&/|)bDr5‹.:FPM9k.^kx>% xP?e }z-,r`8x8dYp_hL) v:VZ*~{OC۱G&ɒ"/2#[!#> i:N,|]8[+v.y&)g[> %jܚmC[B-K/jdohmo^ '9ȳ74Ȁ39ǥM` yAď]Tc. P x81a<;JāTd A-Ȯ+ۥў`LZaR)[i4͎~ѦhԹ#|c['Cblkk같kOY?Xh"v0uxK@ PKb67f&ōS'UCnEʕMh%]4.~X{Zn< ې2\1n2~9MU k+-V9vnK7$KVS]o6&6eb6RpZxb%ltϚzB'/v A|E'Be0'ͱkK}@`Y]͸ ? w 6-)SZuقnFH&-UxΙ7A:'}#-rOOMgmY ?"N-Q/%r(6O >[DW~W\1a6uɲUe3kYX88 ,E#Z_IUAC#_W4~hߍ۫[ɖpM ChW| r4y =64tr,O2n} ;L%gd ۩.ivEV4 2U2wf^45XDo F]QJ΍HG4~a)_n; EٲAN%o1\棳h'@V :hkIB65i B,3B풙0Up m9R3%m5`˿ds&HJK2 ifI]"eAS&-jlX3 J&8a(Lz@p {gh( o6"& p].tCBPJO]Mpyne"NH CP/[Pk09!nSIFC*0f[:"+`oCr`Ф #gU8[ b諭BgY}E-{6[B^ 5h`^YD88sQ"6w7G̈F’_]côŋ TсoMH[,u,tKn kPڦN[@KL^4}".*5YmAvZ̮WwB9j76M+6ي<ڋ$+K)r7q!=g"Jlò\-tn1rDžPdl:ќSthB֧rMdC:e-B/DA,BP5LEyNAaoƻģŀoeJw%%{|ca]m䈟5:v>.,f-ljuM2дUK_LTTIm/v "НJZJˍCffة7?hѰk&} t<j< eI8Pgx } ՞/?OotXO z1u +we{2u<OR:-i +:/ڪ1ޅڀE&JJ)EY+4sLLMZGg["Fp'hg6mo B2֛mOޙ2#4mx/J=zK-xep MHQ.RsV-9bufE#_DQU,3_\&4ma}RM hԒCeMpgDF*Wo{LA| B}.>K/2$Ömʒ$9V2`ڰpk3pyFh+P!Ke2 P#<.Ӈ<].DO]#Ec^KU?W$ڑ2Q6+ƨs&AO^پlv|tBJvm #)[)KppZFڎG mXڑ|d!]H=\ )r/12㜚R&H&;BY*MmbWt$u|} DVD}6ruJ^brٗ#>$vɴPy= V]B!-;fC64X+ib渱 td@cs+6!퓦)ܧVD^Gz9V)S5dn&GJĠ͑q?|xU CV WlRM'gca(;meV`Fx,vS"XY\5cZ, QyAv"%\ދX܄с șt p_pDPN»2KZ) _ 2' [nJSxսJE ,Rl7Rem3R[0ݯWf贃?&%^&0ePO̍(X27I5 uBk8 C[(4!&0r;ltJ{TL ]cj妶1F*&щjaf_& X8+0N=iICl^PDH-|[JFNvEUyz# =ĺ*1^YaboT,;11:Amr_[LgB5-t(1~Zf~s@@ľ󔹿[Ux0d tEpnE ؗDfn[k=YK|lE ]:LozQ me5÷-Xl`7 <rP?"Vv~79֖nbhM ^v7mxB;qlE@I>u lF[2CoLyq!dؕ"Enhzv7+@D|ܚ5"! (Ya;;p)s.o7=W7 X`[3X=M!3 -b5ƞƲCs#+!أv~EӘk %wLwiMB{`C٤ WہdOҼeFv pK#b~Aspvҷu2WOtDLTdBd#0Ot6"cA3/>5E娪-yX>omRҖ X*Y׌X%B >X @$ja [p" RS9iQMv|(RH^[>CX @@Co,'f6h17-`; tۦdC%$U} !vl(s jZdLDV9 c*V 7`Z@adWShၪLdma8@k*&V0 $)o8`s[i^dM4;)'T\j(ʘNcP>dq0C ؏_1>R$6'0TpB % Ja~/< Ĥi_HޑG/DEMMDm"H e\.1GÛYe' X蓃HU{VTgs\4EAA5ƆKTaIK0K_[P[LH4`bDڽ۾f>{/={Ϭ5kʞ]>|eEgr^2Ga(BߗIP͡P\.K{;/~ȣm8x[ʤnAWrR%x 8JQM@Z&A*vR\GƲcr'- ('s-}船ǁap<|+_ArR "E"(Y۠y@~fto) wa ^}U Ct'S@PN~iMj/S敢L/UMG+)cDq\p1.S 锐}P1[r>l.Ų00%4'IXJk[Zۡ)a3A J z}y\8PFVs_P)tjf.)/wC,V\(+^`Ae62X,|"PltC j2@ѐ> /=\J 'mʃ嘢?W|XɋYJ  jrZh )C;2*:JXYʼ̃Ux1pӞ)K 8K8_p,9)VUdH1A.qq\ث~y!wRo/ɣW5VMLudx/eN4,hfW@Ʌ\H8>> c8Q2M8ŠZNXn/ͤHDP+eD"4 zBFog!a7נMGo쏈am  (h?9$s$qӐAKP'}hE֔\sw0nF|HbwHbI͸-F:@iW S̤OúPF=Tc XcRE4FWyz~y+,D>xFu3?0i!@2XMC,8`Hf]T_Fg;%x5SRWĖ>_ 4CŸɞsQ)|mB1g2n-47cbfѼ`_ch.C^y#J$RMh&(9Ҹ1&2z3Qe+>OD >aO I!@_ g9D,FeY'$c#ںf]mXj?%7/4f`y#ZSUX.(%}ԘFӶ%`oU8ļ޲"TZĩS1יֳ!VcRiFP2ҚSOCҜY&  |e 8P4Ki:z:&d9byʻ> ~V9=ǙGd@~C;= ~]\͈ewtJu ?TQi^{w[^g7LP`I;=NluQ6+fTc `LGPD/wNb{epӆFA.YP|:ٯak:S 3@*ߎe4&xMg?%ƂHzM~%ݣnAI~;&V‹Xeգh5WUY{PA X 9yt-_b'ARqR5(\6'n{PaH+g, 4th;2Qm|P? ٚXդ.A~ ?r!,j$C-Wݐl#M8O}|u"`8PCہ6u<W8V|oqh+e#LNklP6mx^HNKr'*G2fQ\vUƧM',1q‰*:aQɆ#[ m'8:^01by\H~0+x䩃OLG! c;JNϨӸq}.^"EWizDc嵁2T.\,څP7 xY %rDXE.Z~$܂7Cuэp>VUV|u²rNr7$}D|wzcq)Lf,j9H\s7+ hL:(]?bԬu \~k^cx/o--Eh -sRT(eg)812B|+0 jfý0aϏxbmoa"y">X Z' xe!Q(S\gtDT<D,0J J#f^ٱBhEZy/a/uxߦ-r[ݢWzk{a~ݴ c^LTneS5J0wy21![a.|⪘"dO\r:و߲1!*{<@19es̭U=\paǚw!K- BHaB Um[~稧3).Ga]wZhۊwԶdd=ҡ:9r;$F8`io#Տ+MQAp6ă8m ŴsҎ9SthsEBcxbK@P4l]b GR$`/;uEOim9} cl ^lz#Oc(6zS.>ID)f2t~`=ѧ܀IF9+ qw`:/v?!$J0iR7? S]ݾW=5C=8eU`L}LB02NwbR>s_kؙۡƏhJ5ģ0l-9e3[sj lD)4{M kuN~REE"> 0#lfX#"g4}@Xޮ\Q2Rge=3tv.԰DsJߖ)]Ȗ{JE zF: pZaU/{;:]vLא1r`7JuUz|kT AW+' &c oذA?my~}NTxH $?Yxpq\g?P)X'Yj:FkWɐ*:8)Hگ/ĉ4 Rmউ؋F33EmDFsc,n9>PH{v9~`:RljxH2KufRžr[Ru |;x%XJ<8 !(9y_G曡%t jl&>45)s)8N0>ם YߠĶbm1-P؄;>Y5ڜI''(GqU9, Ɗc ~M}.l(Ƕ6^;v܄5O?uaHg' UcoLdЩzC mUo"QzvYvFXaDzՒ1pmNhVyIc]N@빎}v7 CN_@O;Ѷ<Mv7jg;^jݦ>\]u£ame{؟޷~}g+n+^{<\gڿ}x_⊫TQ,VyvcN뿷+`1 mng{SOh_Oޫ=InGnϷ7_*[ۑ>owk}1=}vӛ؞ oxN{[~_m79v܎uڣvSg>6^w_?9W~F/./}PY惉xW OxqwNnWG?~VL1ڨ7ٍۓvw¿&c^+/k8`o}Ofa7;7K\9:T;g|,dQGwiӖvCo{G?Dy\fu{iWmjZuW^?儶;䆎KD2#ؖa0z%Q{HC^Şdk#e4LÉb7OXVO)< ėZ@,Ny|.DBZNBE0 4vX1K?xҧkdDUI&j0%0`:"rɾZ I'.l^OI[*`t(+ȕ&GMqeB=GC@&OrD\5>u1'N LDV׈BRYsnJ%> :l1: Fm:1 /ci)2(JF~=]Mmwmx߷c>sη.^9vk=.M߶Gکvbzv%ORB[qh;h}79:WG=Pno:7wmPw7~{O9v#ډ(zNl'>A}}K};;M`vڛN¶갧x_>Z~~ڋNzߊ:诟>Xi_cX{ﳗ}7g.qxh{Hr gQ(ʳܽ`^^X(|tfI/lX=:I$1kH038SE9J.\W#"a[c.q'17kGv  Ryj BnQ7v+޾&Njk` yicRj^|cTɹh .h[M듇l}*Gy 7W* OUk0wZthkN6>8W1Hcnf n8M_,<(Ԣ ՖuLGK{'Mv@4mieæLVPQCNf-mCbL:Fi{+ۏ~|a;ގ߱^}{?l?ůI/~N鮾'?m{\]۝~=O WZmvC ]wUߏk]^򈧶K{mj ^߷|}n<|I;kO}۷n<=Ƿ]wEk}*=bgP=CwhK/M_8Ov߾}"߾Oچ+׷|3~_]nЙmGE bQvQ_σҾjuG-}]v߶~gLmhsڗ?N@U}K;ڽuS֎:>!u]o/ܝ?u<{rl>:9y^Q?v?۟<_^o>ϴϪb5Ζ>j>;E/}m[Z = g}DmD|ȭP{0Q}K"D)x7b%' r .>R>pτŢqʦ zѯU[{ 孟t سxҞ~\XڮmFxآ.+cӤxY'Tz+-UMIe4"y D2@j xg>q\FnH;h+z[A6l&H@m80*(<ˣ(Lp$lvźe2]١~|s4p7R~.E.$+!+r҉>0* M/䋮,iq! VF/:e;$Qp9ݗYH -땛 ƜPL*PiV1oԗ6@p/3Nʲ8>XTt.&ĩZ J4NMD*59nԍ-ndE^=Z3|" φ2aB&V=V /AB;pPVV j.Y9~[-O/SONotNp/6)l؝-}` . 5aҩpVs-0Ns.s~:T1056ko*W9ܴAhcld\1٥2x*/EOUe'_Lή_5N)1i[PDOԨ3}aN\wಸh0[ 0@/VMmP8yHwEtxqfVZk" >/ouqkyBz9Gvcvv݉.#E#@c?ferkUMoyZNׇ'Gx%u;I_vE9 +RW;~qmڝ|b,4@5Lu[۹߹@BIbHr#mwvE'?o?;JA/kjVOځGՔ}nUe!߃_Le?Yvy':aO~ ?Q;cwOlWTbI蹱;<1lv~.)&fl!YrY9s@ڑނV% Lѭ<2r4GBD  :I0 Z3C:$-"=xfY>{#F1Ɩl܁YC+j1M`%%b$aʏ 1< lNF̷e~`"u'2Fm3a$&}XXHslJ!t|xM* C{Rޘ}+."*GDѿi&: "A=u9 UQ򋩬MsOPƛ'WI=vQY:ob_6h');_F؏6Uz$Ibד >1Tst l|N%v j5kqhU*iÇI`'N\6Q/]3tI<S]qěY`_8ݔ3?'!KRkutmwElh*Mt Z<AejC''szq=΃}gF:yqLwn>}cKYW}n "qu|1q0FbU,c` ÇzNko~Ģ˂r 8Hn/D`V׀B}UJ*7~Okǫ|mDЃѕ&qs%L]$%@!.CGCr7H6˙7D'nINH0GJfZvaKGVqEJ栘| "]%M1/< ,$`|R4>܀`r,>qUCx ҷdw)+=4.\Ov|C0"kHn|K1#/֙#^:c(>!c5iJ_ $e*Iw -WI4#Es/ПO,\i ɝy0[~lIUWSU]4:I^կzNG纪oWlYSABaH9D4)8 ӕ'T/'ᨿeNj\8Zh8?mLClOnhL}Sdt}UXza2OK R@i [v \AغP.RJzvР%[Nd{kvq^}XGd27eYɞ˨-TL dT88ĜQP`} ,MFgx8KfkMUBoħW%`9OƓPjkx?ɑ9O0:ircPnpdjWhrjzl_?u ZKG`Hp-{-:{iLU ?Sa:`Q*w'xjZ<ﾬwEbh2I)l8R1 Y2`@3Bl"ӝ2庉ޅ21mDH8 ]ht$I''dʦ=PYJ<|Gt."29’["i &rk"'"n0haj|J:֍v*Yw4>}rC܁R ρNPO=f>MWHQ@_y_AUvo%~W9l) xpØJIvj @̰mi-^ࡏ:3an&B F Ǜ9;YPuۻ,H+w/lV\ɭOG%(ǧQ2{Ji;y'ٳI: ocqJџxiN `TNYP9ÐcUBM<4.q F:s!㾀1S p Q?"ؼIyml3]]4&aE|֕K{$:8CRq :&A* KB׃_+?3kqm6.`T1t` ֦%_a"b_*V-FiZaRPR<pC\b2$'ZR"Ԛ0x[=,' /v߻Mmnn۶Vo578s}rE5=qg% ȫM4gyOkg~|w,\@w^wo/>/{]KG>O}N;Qvr^kU},ԿA{7nۋWX6ա+іr m&, N]R)y[__o"~=kH#Ě^ENPe"ttAx#NzZ=)*esF=sw%k BYv-(Ke$u !?#D4mA_ND/QGCpnHL7s P㴛1{,|4PyFџݟ\%䦭>B#'1t'~U W\al=p#<ɥQFtl-ChNO^L\ 2&' c(Π_מ}1 a7ڿ~p e wZP&=;0}t/.Vܗ(ϔ1RF DA{f}?3sBx Qb:n"ڔXEvYƤ5)E&:x@9ՙ!ɡ<4m3h YH*O1c8oܗ܀lV:Eυ4FŠL!i7 9R!ENiT-KjYp2>xI$(.gB Sȳ vgNI8yVr zK]U,+OPcPC=Mpw1"-l]hþ\Mt=ǝ֞ S$O T E(/_weڣzvE .9'REKfs(geqaO,_tZ{hC\/_iW[۩|W\~FߍX8p˙ڞG=Nm9/Zw_~DǬk ?'N~Hw1S缸=jw<=A_铁_vѡ%E}2'}vo~y=SeQ' :)p)2C_Hn9D-2Vz k_\ }+紿<1<;;zM^~K] z|]|ȺLѬ B9{Ÿd6㤇|}9I}!ylG/֝;o~)U^'?׾cJ wRQ`q>HpkGe 7W]3N,j]LL2 GCDvX|CvB\i2:).j[m=NGbdbbI8JJ fg~ݺsVtf9q[<ssϗW9㦺jL.NN~{,*jkN8ccL$-87RJ}y#4'2:ʉ!q(.=ȲЛk?%1MV|"Ts̥K,Z [U=]VM{~JZ#zZ]A=`Ad;ː{+wuuԟrUV5@JgI^zu =|nv$YсJtU\Rpě67a63(dp{!D &旚QGgJ" cR|zl\y>8&lRBc6.8,+ugF{|'cRʄ"vxzŎlgvs }ܡ8_1NVjjR&}.?*9+>1)ͼ}M6k= N.?cʔEedU໏q::oSptռZK-YnHVk]aŊK7zD.k_g-|kP.;˫\,hm}p d@@#W[ݷW8h5E)Fb/V]yrHcE(W?8ǘZNcC/pi&'G^&~zh^6R#CJs{crAtRojN( N?XpCKԣ}Md}hxlFH.=J$6v_p\A(Zx8f]gʃlcL'6E]'c+2S_E&"݄iB.%K n}w&gI.6mޠ٧ÎY3E E,)/Jrv,-:Ka3#.0S^A}(5'< CsƑe,oܞ 1Ζ 9gz]N\ E>Y}+-I%-&DͿSX&e50F"Ih5EuՒzⳈnCLp]HR͠E~ )+7+ȀYrQP3ORj 3bC+XZG.B>h$lzq^%\8JÆICԕ){}Ϝ<#c,E2' Q? W3`>{.8 >Ɗhu 1%",UbHQPf[mJ]m٬윋|V[ƺlT)+(- X|`qTVr 9epЬ"*q)LGݩ~S)0N ?]٤2ˇc6MKLtM|ؚ%gHY@qg j88AK"k7YaJecm>{8.>%21DJ #68TKj m,HK% t>ZL֌49[ا~=ϛ<` \c"jǴ!% ÜNN`{3ϼ6͙wb k7tgu.ܕPLyN5zƄ&UEc ENw̐&$ q3$"*r??GcYq%:@ve蠣c r6_9()r0!“2|/Td3k$ IbЧĭ S9? BiDׁ g|Ogҡ;N8Eٓsݑφ>Zte)t~bY(f_eC.9Fes6u*!_;g R ݳ@SW6h^%P2#^L6eD J$L sw{Oo_XJJSk >^xA d1n9pq6P`^,z0( K'uw qlIjhs[ ,Jt!w"Ag(J89gȅzI-G3lL}rؾN32bUh `:تTeO4\hd7s N!z5)% ȬG3bC~tIStg&)b[K34b!I{fE1J{]L6'8]@ުB-sON<.a=d LS6s z11ՠ[Z/SQ\UBBn;4+*LmI/J1U.@&'DMaD' `FrDQo( b%l&!1C."C6ݮGL]栔vS:,_]J.Gݣ/v"!8|VM^HCtso#dbX~JWa53jagچ#GNf<6¼Xά;0N&yt/>^+1F.dqeug6swX\&u(44<2;{uE0Rf=x ؋(PhWקNrLsrgNAGSZ-hm\|ߡTsxlcomS^HwcSN8\HʕXbc ,ѱOQ:l0$"pQŶ`ZpPTsI!MgnNDH|}{קKX-1n GxpE;zל#| Bc`:=rC#"CI00J *ʥ\) fJLNUE0*P1YYʞ;$ʠF4EcU}*5bB)t2.בz4q̉ Wczg&|w"/;?e+Bc5n(!v#5cYrT\놞R-Uҹn`fwe!_4WGM{m.$hs fG+L 5Դ 9g$KN>eQ;ƠA$nDUDCVz̥| <񄤍2E^Ű}'D*A>D3gZP&$G|' OtSpXpo`i<͏r5i&Nd8$ nIHF8)$ԫڍ}͆%}.Z7Pz1BcGˏ,!}(a/3 )8BBd ?O*:w[.7ǨRho7ǹ"W$]^Đ:r*E[6|XCm8ƑrNaP$]qR>3[[d֦sdO/LsO+,/ɿB}&XExa1鴢:_^a7H0< pͺ^Ӓ87b}O5od*L7~aX0aMD)hO}8Qa/=SeмD46YeA89(7C҈mO "5 Oq4D] lOړ5WB kR8D#LPr-)ESHb2@l3` U uF=vujwQM"6L'QdH\Ϣ} !//NP\P.'8 "akurP.\[O3}6%E=j'cߡ~hթ ,@ J:2X ]p]v O fe&Diʤoؠ>>HdoFRFNWEib@21ƀȳnnlaw=zg8S{#qD8=c221Vum#3ɸj/ Ȳ+qīZ|ܠ? *$THzLRxW#r nDE-XɰIΔK)cGGqFL?RA W A\{H'7p@ p-u'{h V< )T˦|8D!m iIv;* Ou6g }5`S6]f&rQC׋c]r3@C'LhTOkyfdf/piȡIr.!oi{XRtѝ$ݲ-[pw gĒE4"Rab|ZVϴ+?C?ZwZVL0$c}\m)Ka>Gi١3C^FI=Q򑖧/-llG>^'u|Kح1dekv©,woe^ !# ק=/A(veB϶#e s[ܶvdLx ʍ A.!!!A&)h@гuG:8d^v7B9*( c] ;{Y@dpX'c B%O1T uݥ]rl̩g]6fψ⏊v0jWĥ4̫L= :RĉxDx6']cuo[xS^>P'+UŎ>LcPH+]rJQeW/ms0Z~"qaG Qˈ*%$}J8q]j}6~.uб~%aФ8zDcP0"-'] 9SCPt3oh!!miѲ#y 9NbػARm;)6TUDk{82`\t$eS'!pwdƴQ>4jmNe5YyZYi3f zEWq7'ؖa^tX.X Ct.&(CB@V)q `.s cU~A.h3X BY+_uDtL؁_v1;]Ns0!v e-MH(c܉J',wՔ%}x_}?I`@؋zHdqEd*"@egb>eH W8ɚ!Ap:6^0|Or?XGp.FXӄсG}#& KOvp:5w'*#r#\v%oЉJ|g+ou_N;1X ȌdHwy\:5*:v4}pEZvx`䇔 Ιk7{5!+9d 4L2nd60JqQlN8wu`%phnUY^*}%ߐuμzz}"/'ё+MQǘ:zmʦ  VАAW)Pf{ǝʞLF8,MbefL#GvĶP'˚38QItHDDJrBZv![4HS~!f>qO#Dϣ IԦ~Z{.DRNlxT00=|Ivl"\4%LwY,lRlRQdqcY6nla[3]-["Q"vc:0 D#j -&؃Y11ģRNDͶ?id{/2uہ+:}1TQ{njȃe7`ҐC֓J\=5cV蔦.dghw)=3ZL '?ZEG/^p$ 3quͷIvƤ#ltBe? wsIU4J $Ѝd7LT<ϤVE$V\ |e1Edi)-FB)4hɓWQP/Pǚ7'+y\/̇FyaKO= <1FLpEb ]<<[K HF§v&~}ie9{W\WƧ*=Z&AvMn,[^`*6\bIVbaV#@JH` *2(!&@JK':) 4 &?Dfg6vM} L S?6ĄWnԷ/P',Cwbw`6 );~4F1lE` 9 HWX[;/Tŗm'@Ya{-3mSHuq$c`'MFd@5r.t'QCE l`RE]J^r)lsSkb=.Eӭ|hJh-4WA(5COYS1{/t_&e_M(Gyr&HWyLfW^Dc2$EY=:QEգ|C:HKmd -[-Z9$u,>!C@STOt,ݘKʾ:cy.vʞ>ʨsT8jd9A y ;Q4GG&oFD'&CnNp"cFKIJ@^mXޞp $ qE~'Z+W"8 }At~qݺ ωLnׯǿ1 k3!ӯC nl3c  ir_<5.4ݠ_zd6l[R?f8Q֚m_}itD { uP7ى!mu qy^{AUF~ *<\?s|]Yoя{N?S:Q\/&>}Sm' ҿɍoX7nO~pLcbD"iDо d$Q<խ E$|9Rx6$&O4WVc_41hMȒd@dn#w {*9fLCi۲یU? jb/n˕AOU,9Ɛ)uC PHB{]ƹ8^Ru Ma-{t4/ωz.="*mFlE9t,~]e!v?ÐccܘEDka|Y vG\9u q\91YD3BsArw6' J;^7 X&|c00wdTQ0':+0 . .S1EBۀIR7;"  ,%R"ż7=' 'r!c)B?] ;K$- !1tE*yYC.XL |wQa(0#Ե/ jf[Ez1 o`9i'Rʝ$#!e$:!zV$fpI: b:u'F>#.͑q F5T->y_$f}m-Ƃ/x >;ƌ9/XT "]hτRcJn*sxIkwX(aQ;=!mO{{>>yvcڎ>p?w.R5h8}㉏>>y߇/}+k(ز߾/~}3gˇ-=)'[~H;;׿G"[@IDAT?м:=GsЎc|[7;=Ƿ^w /ow];Q{>ɳ修m˧ߧ=)Ƿoq?߾n?/նTw4v/۟xƒڱwOׯ<vyMo}_酿j|@]-u޵:8YgzGOw;C׾ޏlq2GO|mN;~#vo{^;l^e<}Y_oվ'?qfa{g?W[|=hWuo8]19vԭk_n;츃 t16M̊EeaRVÅ؋;Z-y R5a).NIw(@Z%pccJfLmbvyHIyD8Lm> TQr4$ː ngpqc>* C?B{:bJQ qwy65}@aE'N\yrDbrCdT#Q< Cfi|@O:Q4RF@ _%ZԻ „HQ`sQČ[vt:ȱWgrͽB 񤟗*8V o|"Iɲ@:AɱH64GJDu[YJCD [@=4!:Ԥҿk aP@Y]E]#9u#k](`#挂D(9=O~\TN>BWuzsfnl/6SAH%4͟XTc<9F:bm#lu!Fh/5,"$JYyn$|M:g.wF/(KݱUD](isz1&hHKg29nR9lGhMQ֍eN/f;m~F*u c lrv;-SaWwn>@n}`x‹l*I^#@"8}:< B7v=Dx*BMub)rwc'sr//,13 @3yo邯Nܬm*I>kZMڣ>}ngqV{^n.Z|mK5l^p'T^Sp-r>o;鶍+#5RN߷^u{;_nۏN Vzwo}Eqwml;5m[- C#ڍ$gD}~7~;ݯU~C;dv{^VL׼Ї?} _og7hNV[.oz+uw}mֺV[%v8 g\.|aяؿ}_o'|{Z$ݦt[;]Gջ7nǼȶbұe;]wݥWgZ-޶oOz=E^|}HY4;O;[ 8-VVeWtQ,-8n&7ٵ}ف:[4g쥅iٮOv{ܓޚ%klS D󀤣JSs}$. 0-R]! kPc0"g00S *vTIbY6lfRQrT9 ,+qMn ia3}si|)99!L4)r[P;xw66ɻ3ҒYD+lQ{rezyuȝTvаᮥqcSകWﺫ>B]{ڻ00BeyDn+d^'Q`ԿYwmi/McPXCΧxΈF'mH &0͏mG%.KwN 'Y/rtdK{ mMc!kEäS0p'y=&6$!8N]eog@ygO+Si31ymUЄj/͋/=oh?Y{؃w;G' :y^}X.vܮ=j?9W܏ѝ 6zQI_{z.Rݳ]_wu;+l֝~>ܵ{gNhycO9=mOݐ+C>Pizq}?k?'w)8w񂗼%kgA~}wǴZ[o#] tJ hAG~vCǩ~T}-[]#ޯ]y_־}qv9l띒7mXܻE]b ݥ'mwk>mo|W M_m,s̢9mK-{ÏxC{]g[}m|G}K;W_=aOl=Om+ݙ߾wW_nprHLpWj:`褳 Ds@t\=%ޫMX0aE„ 4:l!ϧձst9vIUAkP"EP"ƨGB7Ųe>h=Fێʹ"gʐa [k ގdžEM2ELdXව'"S!Q͔4$EFo@1rنE3Ed!x`H0p9['ߏк Hw4y/"EVHUFv2A~QwnhEVi~Nr:j`0@+rq s$kݽ$Edyl%ہɁTG?mGZp=.<#TX"=vnP";d3e%6Ufm0+02%HWL,m ̖\ir!&KDZ@,[L'^f!roGNӝ-tL3{+8+-&ߣڪUW2/Xn<UYr݉ͼ,-[ڮbU{{>.YG>("c=oN>t-ֶ- .o;8^|HW庫 ۓ-1͗o 3'Q{йWgrk=|^o/z W~,aK?M3GçX\\%8.Zģv];؏둸O*:a{ʝzrtz |o}raI 7]?9x p ,YtK;9[|uK4JmS a`9- A蕡p0a}+@eKdv=['"->yLؚɜC 6tg5ɻuz5/_ɇCBf7]eܿSC0؛є K!R`쫺U hPDzBȄ<"ex l+W(KGY1\BNH E 7^zRHzbf8^ 4"ζ(PEjgȡ&dV^>RB8БA5"h3AqZ$Q-DB&m nwxވL v?a:  T=OTd#}:h$uhwX S!~1*`?ާJ{zu56_G$;Ҏ=yҭ(lp%dbqv[Gb4g>áis$AuZp#L|`2Ʃ`rJM'M; H!zq\ٲ W9(>m< G#F ,9.wt~ދ AQib4wN0.'T:D,wZ|7#:dAJ.FMЙS8vFRZH"SiIV]–$DI\Tf>:%'4$eAhu4|.s@hncD`~$3sR ~QҷAf:.pzjg7̆=u$PA^tQK_W(qߦ d`~Dv:m&ĔiyL$s7dkٗ8@_e󘜦d ܄Eɮ ] abWJLI4Cc<2ȵo=^ܸ}vRQ>i+qE"b~T j !"$2cɮ ;|Aљ4/6`xb[נ"_+%ȏ}Xv;x5Dqpۏ}= 5G"u|DZD#+Q7Έ@_*)dr 0e)ջUT4oޮ'N Bz^/ Հ[C/80L&k,L%Yʱ=tno3?H_ڬ 2|p2O`b{>E!SYTevVOlWT+"]RU.B]Kj=/  |9J#NUt?Csr;6SxHR/x B}?;owEw/|j_w%L.]ܖ17}}ohשhh7>ʊ׼_^gk_fە{ڢ׿vWhnyiO{ZܤX\|/{!WOSJF׾𶷾Hv}^1Hz˞'<{zyxkoG)Y️|A_庹"vo^?OckR: ]䩓T&gv5|&G>/.C۽y7-hvmOy¡ vK5.y^`|3%_y^ O 9w'GG>ŶHw 4Xllb?GTn[ :1 P)tA<\%a~& >qDYA5N2%c?C}(seƀ49dmzʄ?N$h \wRbPiEQ/ր4 := +7b8FolĈL#eoZ '}vMS.7Ju Jbb!~pv1%^ba peD nw<`{A^ovѲӴ zwiR?,] }[M f͞-n8h1 `CH2Zm rSUpW#M ڌ+jmjsnC,e.0gEGlʂ#uĀGf lVvO";Q|:r"@WGj%E<g\ &N1 VƗ"2Jɻ-G7F"DPogv>̧oaB>cANȪ+WkQg;aGw']zmPhǿp=wtP _ v۵h蹝ޑyS.`{}kI??gG}b=Qnۭ\ٞזz_*T/enuUl~w˼zh=pv7-Δav۴lU;CW U~E~/#̟7=,o|ovv]vo|ۏ lZ@rWh'<2ǧ?/7]=?mF=Ѓ}mܨy}Ww.b?uC gn~/ւLz1 d,_'(GLInҖ L]3DwxXG݀)K X .ś3ӈdzl`>7Cf*rQ[y ; ! >e;!`Hy)zy =f(^`aP,yA>5kXcd,XxbdhRxlOFr\vDV޼zJu-Q|J vZR/B}Yؑ:Wŀ>|w$5h ;V*~tn\D=zڗ iO0<dj{OPG!;Aٷ^G9a3}.c b{dTH +* jc$Q:=^6u ; @N֍~> ;Kfj YuWo7%<]]-բ_%U]9ȚŻ\el\'"L lLȹ A[yF X{|k/]?N抣b$_DzQﰭ[{79L:Nt&e2|sޅ.dYòn=?JbN-9ˮR_@EB68튅)cz"ִO@ւ*؂^-XBAg!kخqQc1O:M2IB.1A6ƙiRy!~h1}';ױ-Wk@MZ})+ Ф҅Y Izr"0s=Qf519r,;{d 6v]qgEmh5[ef֎!;ҠA]cW}v9Y\o.s{s{Mh/OAJȊ<&O6px>ԜnE=~ bvOyRR-tg i[l1Dxڢhv<7|NvDvoN=2O|L99XS/t$쾋W5'3iClTVCI4 sbL=vm$"BfjytuRDJܸ^z"qK.`!/?+лW(?H36,s#\T9q!O?w%㦬k2V(bh>ȓFE g40VoXwیZy]e:_OJ(yڰaw$y"r Jlʌh]k-Nϡ.a)wAm"^|G .ٸeڕW.l]`%nPQ|!it: [6ŋ-UaY@]>GA$/'Deeˠ!WyhVI](5g %|/V1a#^ꤗx2-z9̢V< )ЏMY@ѕŇB 4EU:Q_qY'KCC"`23y\(k! k%&[^\rV qbOZBPm! w9 M4!w;N2.b$zR0tK:^ ȣ! k-fPrdq(` &q EDTSi{Yc/[/&UaCg)cP^|wv7ղsz^7ɳ Jx;Y\)C6Rrr,i]N"_L!1oiBl%~%Ǿ8JxJIlP;C"޽] }#\ZX e[I o X6vS PJEH?IP󉀶΂ (_B"x:q" { çmXl clV̭Nc(C-%kX8LlS Jy7N]²1Z|RSN}A57tAbiV*#HÉGUCK-s`u6x])sU5rFegfV0SfYK٣Ϡ%0C+*9I;IeCq'c˄WP@ˆ}F9 BQ]:;ɲzqȕ@j|z?9BYOuIDa;701syPxef帄FLeN[C3A~*hz= GGh9%}"B`t(BPF%WDopcKS%?Ŝv z&8\-g|E#FRxF)G7n8 L!9ޑ f>(W A>]?ˠ+:ňCn\aQwP~_AXΥae@q4ɖXqKE_?J^ Si羡 5v{Azܛx#2w2!ňHa. bH|ZȔZt X1%o.sbWAE˘SBw!a!…3豔d:zKq#\ */yn_/f}6З'R$.6j)[7>wg@7d)Jm F)3sp#՜GXg,[*dsKF[>Mm0ieIr׫]#7 َJ_xRAX$?XJޕ1zՖfS}H+:Mt d1;7%tnRh| :㏪ȥ4º\:,'As;ZY,THl_hᛩӢ䥭Rzmw]FwK&)2:vYJHNUs"y`z4W !0:'(+Y#JHA%bE,b|6܀w;qb,mY=5nK6pBO2)v=E^ѿҝ? ΫPΗS142Hǐ6|G W(%bA&Ne\&],Jrt9ɯ}@aj}r!N\gEg[JOU`>2FPS\vD0?u2<[8wt|H.9ߔ^DP{%b y!2!x$Re G-VuXT N]$9FiƵ0I_v_ Qi_-l9Go]qE`X,@F)we NUyDxJ:x׼\ pG)@43'qE>S:An:C 94w؆D?Nz-|63|>"7uоC@T>od hF3}|ՠhA Fu ) 0U)A":EMIT1ԥB bDΆp:J5C3!"'[,}Vx *aP'_o7cҀj l:&&ͱO皓ޒiYUtNaKBu8RHsuG?bX>I .HBчH(CmQ7D^ݣ]%#63j2%{A=P8\#\p1;cPn h%Q<qvuUwR6JwWx+uԳ H!j+Y 3%.0w4? ?杳?/l33q٠wx/݋K=ށM"k"/hGE9T;>sulg$ByJ ly̐EZSƅ5wpY&%WHԇ/&6A癔, Uac6@T39]8<'Ry$ JĽ N3aIaY!)6d/.& |.ӇV.PΣKY,QZ|t 7;1XSX`"VY͇DY;xDWݨjOy!!g zH NҮaMNʴGeN8{(hD~$QҋsY&S}ay.%m$<6=|fa=wyMȌz$zTXShF"iDָ^uh(WIfT]29`HD/(ƭh7VR(z;J}.h[fПmȻTaR9+RYʠWO SvuʅO4\"Q٧ v򐸌Ϲqo<`,"Gg]P+J0$@51(.UA;r=HHbYʾr)Id\yCEN P`3I Uz"!l_걇kI)|B#8%M='q9R@,1=xN?):g*DPՁE71Npƀ3_tU5-B6Y^Jc_V$r ܱXXUvn6 љ3vbʀ6NM]3SCUq&w7x@+>qц- !>d'z/%"PEu( }+C'9~Ty٩|bPM\'ڞYO % ZJBUE!d)6' OC(z4TF_2ohHx&dsJ,ݡL F믆iHߓ #,QmvYuzk񦄬C je6P$,mJ#vpBHlITR(Kd.fUn|?$/ţG tLFmH84& nGvԣȥ)Y?jK&ٕS0P:'Q&_j#!E C4ZbbゟPYeRZT#m)u\ -.Siq~Ǜr $N|+eTh%C7&xR |bhB!n;m @S5c쪢D#zn]GbG1S:^-K[A64 y" G^m Iё|'=\eK?gc86hc#Z"Y*nXq7 aP-d01+fʱ0cB^v .ʼn/QB p1r'<=vJIc|3aZ"&NV=',a>㨻#WysȦǽZ$Kd5nrtn%wG<L2u@S;qv^pG6猸VV]uǮT[ )r@R+a$я'*c{kQGor6cST;F?uLl|-_D1~J{,]ՠQ&ΗH?CWWy%?^-x&^蘧ҮccND *dD+eJ IpZgK㛝ΙCL iڤT.;NhcΓSFR>Bi]ѓ4`1t=]\(K jV:gk-3iTP~MEȔuLx@sS@[g3Xe]E\/`T>Pf~mu+ֵeWtemRRI1 '@{Ӗ}L汽*KF3ȩ}~ոÖhD`M1%UAֲ @SB6 X_G I .,¬c(LWX[և<<" ¢fcXPY:ުz xܱmUc24>Y< ߸aq׶ӏgebwH^Ve@9 t3Q\KEIMy?v!,^]ϴ3 $mx$ MR6{  ͫab!TBL?eQkz:pK^8C@"a/%)3eu?LHu'ȾŶu1 BO駈'^[>x'5e nv9 3887=A΄\CҐdSvfx=.0ȰnG #C)[!GdA2\*-/M9aSe֭aBuLڶڙ)ǑO1xXfh$᱊Ic\ dL$U=0NeQsAV|"; G ]_ӺhL=6#iJ#b-$#h29иH 0iB}yT)nSr+ʤ/ 5|:$@D'>vڛpDG}nK]|7E~PAo^!SzpcWcηmJԌQ mg9Pg` ;acf@ºN4Nj⌺ !u t6ݦ,6/!>-%A*i KqGѣi\灦'I W9bXD˥?9sF22W\jR/P6 6; 3I9]V&MY ZOh&u|7`ub1h2 +[X-^``4;j#)-va))zd c0&! ~Gb ej էƁgeɢG&$#l;]ECdvJ^ .e [M:'eeImAmٿA;&ûFnq3)N%1/ d$ASO6LhH&>0:JFdžJ0vX.`U{qvҋ;TS*P67C9 vl:lJUx~t f-2([쨌o!:&7;&/ YXUH|l-JK?L#q6p|Nlvߠ7ꢦ]z瀵.Uu!R  -\% @r˜ƾ§4̖i~y`%2Rm QBr%U<@Ǿ, L-cb$*Ef8ni|eE2rJqMMS$6y/3rft@JLL]'fWo zQ3&maf2dm8F_@W&SbeIbnA"_2[n,"88@C2pg"38*?2|kp8/$_>绞G "Ju%A'EشXw"-QUG$a:HYkbk}zhﺵ ( ߸ Eo|n+HK@$CwADohǵ>3j|o}UgCobg臶w~\r~ؒGIsz~su_n~o}_Z|ei{=/jK%ҁǎV2 \:ߎ ^yH3UvdX[;4&F [&IBp2z1'8HjH74AU..%׺( }N#IBI&cW( Zਕ⡒O⽭ EocV֙3|s6Kt$~"H'saB9 V2VwuIU6L:%,ĘJ&p'tEpxXU#,yp%/zFJ,f)Z#T7%e\5s1o{,:>}#`+` g\Km;rN/'o_d~8*xAG4w Au_DPyA*S2 Y4& :E^vF 5D R<:)g@(̀v0nSi2ݜ='OگHx)Z6k s>4! 1 Dj 2G Bw~l5f:`4.>Rvyv *6j `)C|y<.?$ᬁ1S#J0 ^RrB&ҧH ^7',$vOh0Ӗ~lIi)]!lϠ5zyl٪^W6p|F|7SA]ȧ la9Iej'( ʖ۴dWvg=5$ G+| ` 72!&wۡ߿p>O~'1~mnu zw_4L}u-|ֶv>R҃#ekkWOA—evusv˛No[дoG{?t)~ϳ^39Ev=YO{\ N9֣o_,?zMwm:wч߮6DgnbN7lyڿniM{}sK R5:wv Rey;o|G;]_gAr[ޞCێۮԳێpݟvmܭ]u՚>wo8׻N}|;}呬[qԿXU^E;?~ĶdO^gvڱyzobCfvX 7x,pmC Oxӏj|܋%O(?;3-zwC7Ĝ. &8K6:"|#OWBt.d u%J`gf+ER,rI9ބ72>^Q;&A%]>ikÕ|\ܕO" ˀ!׆,O2p%ƙ'TpyJt#Gqm41ODR,^&#| Y}Ecm소)QD zkKuAe-+W/ikң6DꉪS\AXlӔM]m89˱V3Z6ؐ&h:5ݵALx+^x J=VT,QK  .,ΩD-2YࠟD|A?u@Ǹ$7rďve(ڨK *7ecAj0*ٴGgvyTJBȺsHd+W}&ɺ@5h琙 `G٠urE,jteķTyH#13 %xb8J6ԾaĂ]ts ^Mk+R1BH1 =$*~}v3Hc 4ePE8!6Pet=O,Vy@a&OL|4%y&耐^2X4bG^j@>sĸNVy˃(uȖn\hQ$aXVXd~(k!M ~? V4nȞ:0PHOE(tF1VP lTICkjDF&Իp_U8wvmݯ}S_n?/zn}]}^tI;}i}s`G{˟:8GЎۇ>v[kyD!4Lve^?>YmV[wm[׽齾r{ޗ֌:o헿>=Bl&!ۭ&k.ZlWkuy{i;htlJOo./{V{im??ͯ{QF7+EXז饴m[΋+QqqTVcq^ U/{[ϷvC XYn {~D;~ݡsV[,׶E{]봓~mxvƙEj[Xa;+/}'>vp?8xםC-nOgNt2o<~~3{R1T_ :S~!jK+~,J$?rn޽}+Ң*ĝ˓jTퟂUpqrɳϖᔢ:'0eTIU%J⡳J ʀ߹) *#o7.d,4h%,a&`'tZpDo P])؃=2"dM$ L2'L'̃dmtNgT.1;Wņ qui]Z׵mWhl؛뎥ىuܦ {ԏDZ/m]1O]BO,+:v!SIk0>sX>w.v]q}H8/TloEd`렘K$yG'd 7 @ULOg7|ۄuGNPkzlur2|) CˇrӻGG :H#  ,@0P> tfģMzL\*كP{ *Q6@H}R:,IL4.2Ќv:HW34l(5(tVgM;$9NA 4PL{lm"Xe堇Ysm5?sﻴcdm_ c-_G{QWy~m۳j=VH4?}K{{?* v^{ov,vԝO=tmK-+yko~s]/ypm鍎};k~vG=/|ڏO:]߿3yz; t7ڹ=X-*ly;zuuSbaw~vyvgN%mxۯ][vBoy~J/Ў:B;Ox1Ks^J-ֵ^}OF5G>W}ϴzݗj8MR$`]]fS.0+9XBuP";? ˠΝvAAȪA'PJ+{&{hM;*'4]ۗ%W4jGeaіAWJ r(Ldtn+DKunqcu1QElaL9i Y2S9vSqfd:&׈KDcvk([ui,/T_8HB)Bf׬Yﻚy_3|m3AX!=Wd7z f,촾Xwf"V4W?$>x4KthS?QW!u\q8Bp7< Sw|UgL, M  }Hf^41>B.X MqpRxLR{ޟ1tvcr2q$SKR3g/ yP}\G$Ƒ<k`X֡8gZ٭hbq E6c 6V=']ekFg؆*'~pvinT0c/u291+ᙱYeh4@ə2ٰK{Zv%< {R6L6 9C%j.oW^J]=~$W4D!OJzԈgyG}sڊ&71P=E%-=\wMV{1~_eFuˌ3HG - nM|2ﲥK_}G~b= ;˖[S; [n]tesnxk,V-ke; VbAJ;swJFmo<Z`,14ÎORwU.}ùm[~}i E,خւCvq;ߔ?%tY#‹ _/-wr>k?)Z >g5Gr!+U;,'z^fP@>|gR|eA[VMð[ W[ q Czs&՞+El\$.^e~x/xHcDqQ7 > C\Y#'hP#z _ѩurstv-v,1uғL>XQXr)ﭭկ6ӣbK5~lLKֻH&bsUBlps YiaC8u/,dZ4Uˢ.xCO6n~2c eomi I#*r0M4֣:R<s#l.i`^pGv12vI}XNBEIQE qZ,yv"|=+$Du9&La 8 JD [Ά(dVc %(̚ 3%$_I1]ԝ2!,qt*1hӌ/#砥O ~T<+adJe/[8_X\/rTo= }N&fycFHx93*ENT۱2DܠJUcM,Ka|AgvVڤB7cRH:MĶWzu+Vlٮ k9iDkrLpjK=Y8Y8(GQ `‡>/˳;z?8pbvKG^xD8=D10rg7e7}hO9ӑ~JqGl* ^ :qȄEG+:Nt2#'2\Ց Y%r5zlTN'@Z. ;4 خjbK( {*E E-rh|t3h%y 8$`zNMbg~S)lJOAvי^VNc;.ҎR+cijm[u٪vم.Wq4ltQ^mrF_]E /;]P=Jʶ$Ō ݦ_̝w5P|h%. M5u CP h; 'NsL~7VD%1yJtG&L/2AI*I'cha${"@򘺨*vTh͛(J:]ZR^װk-/+Vza A[FQxڣ: Mw7~!uwjuS|p'tSvmBV YySq+һX@$v=iE*{ p'CF+)@: AKnDvr /8  ,ë|5EIi_f4Tc+fN]z ΰ\J}7Z3nikң&0G<T8u;A_^nyR᥯yʁZ.s5,pYɻ&-֥|To.?}"d:[P6/G/5N1P7i[vJ,/~sb>]$euy2^a?QYz)P1dx8K?`fH} wi]w݃:<#}2aa6ݠYi]^HuC{{\vT.=d@;.aP$Tf5dҔ qV(!)\.zIOr/9%gE[tK /26TIYun߅pЋ΁"uqDsy EQ'<1:ew9rDJ].Jʥ} $,-,;.)&g#xkS.GljI)+=MW|Fm]I&|+2Ι+,g%ɲ |׈Hg)oH$F^QdS. hD0C:&|^w$ v=rF& B+9/pVIl\_0 ]0 ԓCZ/#Ku.o6fu3Y3p-4$7^tv9R_wgsfY69F.\-RmPҽpr_,A*pkv> ')uEѸge8hF$U[0/q;~zCG_Ie}4l AH 9;;YnX`_zzZÖ_++ʋV:FiW(;+j+sVk& )8OȬ<UKy |YQd }z_'tw=ՇiW/24K|ilגO~Y RyCCY餚<7~w|ӇgWō? W\~5ſ{{~O _2g 7sϧn_3?{p3;Mm7^tsI@z-ڌ?My?Rnf1_׿J9A/w>9ee?aocow^^7]|zNZc%+=߽SĮ? [Az~.*a=M_}_Y&"o7/`'XXf 6_7/yÍl LWD};妛I]r2>37gp2{8::!:땰b <0κI@f AT +QyBָK@/qW @㱜" ŭ*wj'D\ Y[\tI) Hc*z%D`[ H[a $[P>z~?P5. /Q nv889ɑ8%M"Z>˟Z\4WQ\E r}^h+R89m(:xq9QY U>.qUIpPRLPU|*\F(;Mhg}y͌Amu2+eP$xY˦`_m.aVzRuza[~uOf .2'f o ڽ"XKqs-$.pA~,K|;r[׽Z^jגS~o½^Cʖ5Y%c1bsbU· re@8{C(oթU.|P=?UHW}RW]Q(ti<1*.K0bG_F_vqԂBIƯ}xSKR#>OB:y^ ٯV-ղa_e]K/)ʅz9* _;n/M_rx%׼dv}æVD׫!o[ފF v ؤNz"}K |.;rzˡn'~#'y=MOaO]9>YwMu6>g8>ox7A{~3r?y?䔭;'1pG Fl}m.:ϰ3l|5?ۜuލnTf_4y,?̚| 8Kb/?cW0@zO}.tĹ7o+~5mߴaKxoz<|8nl7I'>vx??g)?o=[ɳ4K&˶,T4+Qw*3pܭs:§:V,;j?Һ bYP1dEt!MU]J6lٜUb'5)ӔSm} &_تM|% b_.}j6M$KG;M>pA"y tph/ V<ʶ=( q@ٯʇt"naT-8}(#)!c/y^~=R,2O;C=r6rHβvo>G%#yC&4MƥJ^k612Jκ=Z0a Eо٪OS_y70 /Jw[r;,Kz /A] A*-B9K ͔}O@3E[JBHWvP~F~Iw!é^ =7>o!6Zv(yrc.ۆtնYnn K_qGPnp%[!p')Vﲕ+dY,SMFe"%?gbpmmDzJN؞)Cfxm1=UBpbxɩ{` y! #L@F#B‚ǥc]ܼz5B!ŞliꈙzFDLzvb'SGƔ9x/AE6,Ÿ'iwf9ֲ.G/# 9^6 H"Y5ⓎW2&$=p՞!'NxII*Bur'CE1u(~S_tb+5/Tԃ{]7|'dfy Stgi]dlNk߿u>sUOcȟ "6?zIJaE? Ǽ}s|TK,:uJ>`C}lkи!G˷¤MIc_ vȃ]|xH% }-~D+4n೴=|-" djֈt:Pdr+y}%{Xy,꙳BG)KC6ثLqt|rqg7z;CB3~ = 79G%qcc:v77w]hwQ}P디^K>92OڇH+]-qDV寏(a(N|;*3pF%o0Z٨ @Ă,mXɫGJ0^bN667}0f6eJ\dwe/ 9=R&&e{EoZ-#̔Keʁp;hTjRNLR7/dM?^/U:u(PJSΟȽi}޶ZY۴"*~bO dN v{`QˊNEB@"BCw c,ǴMOz嶯ֿzQ1+V֚s>:K;m)}aR&Ғ֒UZY}Ia.RBFCul9o:!yTu|YgSgZ8˕u<9¥|#_W#=:gurYp%cѲT)6{2D}L[o(y} s"–Q(&Յ$=#UG0"4a5?rd8m wӕA%hG\>m/%c Q 3BR[b݌.r<˧(IW9MO,|W[3sCE8|-7l&uCƗ~V8#49>xYh<trx<&!g4H?Fő}[A *ǵh[z=mgl4z) [ Aw )~IJiY]# /OR&h"2g mvI&PGRb"z>'1X$)}.5-l=sJ'OW؜Z~hoar;N;v{ NX|l2Iu)Ą;4B@nYFf6u v' Ҍ< *1nCbig=t2࿕4spi(ƚl8{#c޽IDAT9hчK=o6#i fdR ҡa`%^_gܐ> upe4~60EMo9_+1skIL'8`P{O%@Iw{oPVĶ-&7Ӫ g:EϜTcg.`AD%VClfhoJBCE_/|JX\XOvf=漃F*5MY_M8 g2 LxUXM$4 BZX7c0ơJyf Bqz)e[O~OeH(*\ 8S>5hw¢g qbr+Cr'-ly XJ틕n\"[u8KZ9kWMP 挰t`$I FԽ`*M;w$Svp1rˀ矙K,m$*%#L# Y|O/JMGanhUqZ/rq"3 {V*uکE&Ϲȅ20hJP̄%ق7.[GlqI3T@^Wq=!S] vҺO{32!fr޵ ݼY6HLMX}KkG.wKD! o}ٔ!<ǡ9LH\~.W޶X[C;d`aY.h%Qˁm uUPbJr+qV@~ȁUbΗa(3Fq^!#s 3@|O_68 URKԍBε[(f`,W=e8VgI+&KRŷz)9~S:G3hu\9CmZY2BؑjDt!Cԫ0thVJ&0VmX"J l_9p\jG4fS0 E.P=sVȜOokTF3Ւg{n+}he7Obԛ UXy ++=#D6O-,<Ƚ ˿8&$H32w($%T)гhDB ! ęatK~Ԉ̄7aUtH.]1pLrNɸX^Ԭ>*1^ђCQ2ZQ򢠅_ LS)s_$5-zvŹUS%{1䭽vgRWdF=KUZ$Ԕfy1umD}Pכm'9?)#TɽY+L؎dNqEGv39β3>ؕsYXv}rp0r4д#"yQv&~ 8oǴDx`پO:&.AB!@%J})%ZW~)~Z ¿"@=QMQ!=Zě. e.X ()Gώ (]Mzi/SW1 V؊7 f[>}@IPYl6ֆrH:UvJ*y V\qJg1uq+8yTtK]RmJ/SH_!ȼdU 6WUң NWY]+Y#[K2j;gq hvb K,MY28X۶lΠzRg! nw j+]v4gyGHb63g4E܂ucw э-0Z`1rh[`kX<p̊|C''c8 8?qa8urշ/Íl~aq4hs7a?Svedq f|_Frc!6+aqÇn_89`= ZGX85\Q`ts|q#px{Y&C" !adÀ63,|FbA%hF -0Z`hvNL-LL5Xe{@v9ko:_pלf[ Z v'pw<739㹳Y&S;SN c9LF -0Z`hF xXe_N,̅YX20gVaqCw2L_,s?X|O_qhhO(5 D$}: \ 3.|)'BG7Z`hF -0Z`9<8=+YJ"0;žaY7Goq`X޹3ߞ?ޙkhz<=`>{ta_Ns &d F֣qr9_bka<㒰uF -0Z`h& p0uyB2u˜fZc06`~ۗ.wg{C ;ؘQf6W>˸5i {0;8[Ll F7Z`hF -0Z`wQGc siagZl6?s ȇg{W}b g-;39e360 !|zhgLa){\ ͘yJXɣF -0Z`hF j0º,fYj"IENDB`naabu-2.3.1/v2/000077500000000000000000000000001461716101700131365ustar00rootroot00000000000000naabu-2.3.1/v2/.goreleaser/000077500000000000000000000000001461716101700153445ustar00rootroot00000000000000naabu-2.3.1/v2/.goreleaser/linux.yml000066400000000000000000000015201461716101700172240ustar00rootroot00000000000000env: - GO111MODULE=on before: hooks: - go mod tidy project_name: naabu builds: - id: naabu-linux ldflags: - -s -w binary: naabu env: - CGO_ENABLED=1 main: ./cmd/naabu/main.go goos: - linux goarch: - amd64 # - arm64 archives: - format: zip name_template: '{{ .ProjectName }}_{{ .Version }}_{{ if eq .Os "darwin" }}macOS{{ else }}{{ .Os }}{{ end }}_{{ .Arch }}' checksum: name_template: "{{ .ProjectName }}-linux-checksums.txt" announce: slack: enabled: true channel: '#release' username: GoReleaser message_template: 'New Release: {{ .ProjectName }} {{.Tag}} is published! Check it out at {{ .ReleaseURL }}' discord: enabled: true message_template: '**New Release: {{ .ProjectName }} {{.Tag}}** is published! Check it out at {{ .ReleaseURL }}'naabu-2.3.1/v2/.goreleaser/mac.yml000066400000000000000000000007561461716101700166370ustar00rootroot00000000000000env: - GO111MODULE=on before: hooks: - go mod tidy project_name: naabu builds: - id: naabu-darwin ldflags: - -s -w binary: naabu env: - CGO_ENABLED=1 main: ./cmd/naabu/main.go goos: - darwin goarch: - amd64 - arm64 archives: - format: zip name_template: '{{ .ProjectName }}_{{ .Version }}_{{ if eq .Os "darwin" }}macOS{{ else }}{{ .Os }}{{ end }}_{{ .Arch }}' checksum: name_template: "{{ .ProjectName }}-mac-checksums.txt" naabu-2.3.1/v2/.goreleaser/windows.yml000066400000000000000000000010371461716101700175620ustar00rootroot00000000000000env: - GO111MODULE=on before: hooks: - go mod tidy project_name: naabu builds: - id: naabu-windows ldflags: - -s -w binary: naabu # env: # - CGO_ENABLED=1 # necessary only with winpcap main: ./cmd/naabu/main.go goos: - windows goarch: - amd64 - arm64 - 386 archives: - format: zip name_template: '{{ .ProjectName }}_{{ .Version }}_{{ if eq .Os "darwin" }}macOS{{ else }}{{ .Os }}{{ end }}_{{ .Arch }}' checksum: name_template: "{{ .ProjectName }}-windows-checksums.txt" naabu-2.3.1/v2/Makefile000066400000000000000000000005341461716101700146000ustar00rootroot00000000000000# Go parameters GOCMD=go GOBUILD=$(GOCMD) build GOMOD=$(GOCMD) mod GOTEST=$(GOCMD) test GOFLAGS := -v LDFLAGS := -s -w ifneq ($(shell go env GOOS),darwin) LDFLAGS := -extldflags "-static" endif all: build build: $(GOBUILD) $(GOFLAGS) -ldflags '$(LDFLAGS)' -o "naabu" cmd/naabu/main.go test: $(GOTEST) $(GOFLAGS) ./... tidy: $(GOMOD) tidynaabu-2.3.1/v2/cmd/000077500000000000000000000000001461716101700137015ustar00rootroot00000000000000naabu-2.3.1/v2/cmd/functional-test/000077500000000000000000000000001461716101700170205ustar00rootroot00000000000000naabu-2.3.1/v2/cmd/functional-test/main.go000066400000000000000000000036661461716101700203060ustar00rootroot00000000000000package main import ( "bufio" "flag" "fmt" "log" "os" "strings" "github.com/logrusorgru/aurora" "github.com/pkg/errors" "github.com/projectdiscovery/naabu/v2/internal/testutils" ) var ( debug = os.Getenv("DEBUG") == "true" success = aurora.Green("[✓]").String() failed = aurora.Red("[✘]").String() errored = false mainNaabuBinary = flag.String("main", "", "Main Branch Naabu Binary") devNaabuBinary = flag.String("dev", "", "Dev Branch Naabu Binary") testcases = flag.String("testcases", "", "Test cases file for Naabu functional tests") ) func main() { flag.Parse() if err := runFunctionalTests(); err != nil { log.Fatalf("Could not run functional tests: %s\n", err) } if errored { os.Exit(1) } } func runFunctionalTests() error { file, err := os.Open(*testcases) if err != nil { return errors.Wrap(err, "could not open test cases") } defer file.Close() scanner := bufio.NewScanner(file) for scanner.Scan() { text := strings.TrimSpace(scanner.Text()) if text == "" { continue } if err := runIndividualTestCase(text); err != nil { errored = true fmt.Fprintf(os.Stderr, "%s Test \"%s\" failed: %s\n", failed, text, err) } else { fmt.Printf("%s Test \"%s\" passed!\n", success, text) } } return nil } func runIndividualTestCase(testcase string) error { parts := strings.Fields(testcase) var finalArgs []string var target string if len(parts) > 1 { finalArgs = parts[2:] target = parts[0] } mainOutput, err := testutils.RunNaabuBinaryAndGetResults(target, *mainNaabuBinary, debug, finalArgs) if err != nil { return errors.Wrap(err, "could not run naabu main test") } devOutput, err := testutils.RunNaabuBinaryAndGetResults(target, *devNaabuBinary, debug, finalArgs) if err != nil { return errors.Wrap(err, "could not run naabu dev test") } if len(mainOutput) == len(devOutput) { return nil } return fmt.Errorf("%s main is not equal to %s dev", mainOutput, devOutput) } naabu-2.3.1/v2/cmd/functional-test/run.sh000077500000000000000000000005641461716101700201700ustar00rootroot00000000000000#!/bin/bash echo 'Building functional-test binary' go build echo 'Building NAABU binary from current branch' go build -o naabu_dev ../naabu echo 'Installing latest release of NAABU' GO111MODULE=on go build -v github.com/projectdiscovery/naabu/v2/cmd/naabu echo 'Starting NAABU functional test' ./functional-test -main ./naabu -dev ./naabu_dev -testcases testcases.txt naabu-2.3.1/v2/cmd/functional-test/test-data/000077500000000000000000000000001461716101700207065ustar00rootroot00000000000000naabu-2.3.1/v2/cmd/functional-test/test-data/request.txt000066400000000000000000000000131461716101700231310ustar00rootroot00000000000000127.0.0.1 naabu-2.3.1/v2/cmd/functional-test/testcases.txt000066400000000000000000000005471461716101700215650ustar00rootroot00000000000000127.0.0.1 {{binary}} -p 8000 127.0.0.1 {{binary}} -p 8000,443 127.0.0.1 {{binary}} -tp 100 127.0.0.1 {{binary}} -ep 80 -p 8000 127.0.0.1 {{binary}} -c 25 -p 8000 127.0.0.1 {{binary}} -nmap-cli '-Pn -sT' -p 8000 127.0.0.1 {{binary}} -json 127.0.0.1 {{binary}} -nmap-cli '-sT' scanme.sh {{binary}} -stream -passive scanme.sh {{binary}} -stream -passive -verify naabu-2.3.1/v2/cmd/integration-test/000077500000000000000000000000001461716101700172015ustar00rootroot00000000000000naabu-2.3.1/v2/cmd/integration-test/cli.go000066400000000000000000000007471461716101700203070ustar00rootroot00000000000000package main import ( "github.com/projectdiscovery/naabu/v2/internal/testutils" ) var cliTestcases = map[string]testutils.TestCase{ "cli with passive flag": &cliWithPassiveFlag{}, } type cliWithPassiveFlag struct { } func (h *cliWithPassiveFlag) Execute() error { results, err := testutils.RunNaabuAndGetResults("projectdiscovery.io", false, "-ec", "-passive") if err != nil { return err } if len(results) <= 0 { return errIncorrectResultsCount(results) } return nil } naabu-2.3.1/v2/cmd/integration-test/integration-test.go000066400000000000000000000025561461716101700230400ustar00rootroot00000000000000package main import ( "fmt" "os" "strings" "github.com/logrusorgru/aurora" "github.com/projectdiscovery/naabu/v2/internal/testutils" ) var ( // debug = os.Getenv("DEBUG") == "true" // currently not used customTest = os.Getenv("TEST") protocol = os.Getenv("PROTO") errored = false ) func main() { success := aurora.Green("[✓]").String() failed := aurora.Red("[✘]").String() tests := map[string]map[string]testutils.TestCase{ "library": libraryTestcases, "cli": cliTestcases, } for proto, tests := range tests { if protocol == "" || protocol == proto { fmt.Printf("Running test cases for \"%s\"\n", aurora.Blue(proto)) for name, test := range tests { if customTest != "" && !strings.Contains(name, customTest) { continue // only run tests user asked } err := test.Execute() if err != nil { fmt.Fprintf(os.Stderr, "%s Test \"%s\" failed: %s\n", failed, name, err) errored = true } else { fmt.Printf("%s Test \"%s\" passed!\n", success, name) } } } } if errored { os.Exit(1) } } func errIncorrectResultsCount(results []string) error { return fmt.Errorf("incorrect number of results %s", strings.Join(results, "\n\t")) } // Currently not used // func errIncorrectResult(expected, got string) error { // return fmt.Errorf("incorrect result: expected \"%s\" got \"%s\"", expected, got) // } naabu-2.3.1/v2/cmd/integration-test/library.go000066400000000000000000000060751461716101700212040ustar00rootroot00000000000000package main import ( "context" "errors" "os" "os/user" "github.com/projectdiscovery/naabu/v2/internal/testutils" "github.com/projectdiscovery/naabu/v2/pkg/privileges" "github.com/projectdiscovery/naabu/v2/pkg/result" "github.com/projectdiscovery/naabu/v2/pkg/runner" ) var libraryTestcases = map[string]testutils.TestCase{ "sdk - one passive execution": &naabuPassiveSingleLibrary{}, "sdk - one execution - connect": &naabuSingleLibrary{scanType: "c"}, "sdk - multiple executions - connect": &naabuMultipleExecLibrary{scanType: "c"}, "sdk - one execution - syn": &naabuSingleLibrary{scanType: "s"}, "sdk - multiple executions - syn": &naabuMultipleExecLibrary{scanType: "s"}, } type naabuPassiveSingleLibrary struct { } func (h *naabuPassiveSingleLibrary) Execute() error { testFile := "test.txt" err := os.WriteFile(testFile, []byte("scanme.sh"), 0644) if err != nil { return err } defer os.RemoveAll(testFile) options := runner.Options{ HostsFile: testFile, Ports: "80", Passive: true, SkipHostDiscovery: true, OnResult: func(hr *result.HostResult) {}, } naabuRunner, err := runner.NewRunner(&options) if err != nil { return err } defer naabuRunner.Close() return naabuRunner.RunEnumeration(context.TODO()) } type naabuSingleLibrary struct { scanType string } func (h *naabuSingleLibrary) Execute() error { if h.scanType == "s" && !privileges.IsPrivileged { usr, _ := user.Current() return errors.New("invalid user" + usr.Name) } testFile := "test.txt" err := os.WriteFile(testFile, []byte("scanme.sh"), 0644) if err != nil { return err } defer os.RemoveAll(testFile) var got bool options := runner.Options{ HostsFile: testFile, Ports: "80", SkipHostDiscovery: true, ScanType: h.scanType, OnResult: func(hr *result.HostResult) { got = true }, WarmUpTime: 2, } naabuRunner, err := runner.NewRunner(&options) if err != nil { return err } defer naabuRunner.Close() if err = naabuRunner.RunEnumeration(context.TODO()); err != nil { return err } if !got { return errors.New("no results found") } return nil } type naabuMultipleExecLibrary struct { scanType string } func (h *naabuMultipleExecLibrary) Execute() error { if h.scanType == "s" && !privileges.IsPrivileged { usr, _ := user.Current() return errors.New("invalid user" + usr.Name) } testFile := "test.txt" err := os.WriteFile(testFile, []byte("scanme.sh"), 0644) if err != nil { return err } defer os.RemoveAll(testFile) var got bool options := runner.Options{ HostsFile: testFile, Ports: "80", ScanType: h.scanType, SkipHostDiscovery: true, OnResult: func(hr *result.HostResult) { got = true }, WarmUpTime: 2, } for i := 0; i < 3; i++ { naabuRunner, err := runner.NewRunner(&options) if err != nil { return err } if err = naabuRunner.RunEnumeration(context.TODO()); err != nil { return err } if !got { return errors.New("no results found") } naabuRunner.Close() } return nil } naabu-2.3.1/v2/cmd/naabu/000077500000000000000000000000001461716101700147675ustar00rootroot00000000000000naabu-2.3.1/v2/cmd/naabu/main.go000066400000000000000000000022721461716101700162450ustar00rootroot00000000000000package main import ( "context" "os" "os/signal" _ "github.com/projectdiscovery/fdmax/autofdmax" "github.com/projectdiscovery/gologger" "github.com/projectdiscovery/naabu/v2/pkg/runner" ) func main() { // Parse the command line flags and read config files options := runner.ParseOptions() naabuRunner, err := runner.NewRunner(options) if err != nil { gologger.Fatal().Msgf("Could not create runner: %s\n", err) } // Setup graceful exits c := make(chan os.Signal, 1) signal.Notify(c, os.Interrupt) go func() { for range c { naabuRunner.ShowScanResultOnExit() gologger.Info().Msgf("CTRL+C pressed: Exiting\n") if options.ResumeCfg.ShouldSaveResume() { gologger.Info().Msgf("Creating resume file: %s\n", runner.DefaultResumeFilePath()) err := options.ResumeCfg.SaveResumeConfig() if err != nil { gologger.Error().Msgf("Couldn't create resume file: %s\n", err) } } naabuRunner.Close() os.Exit(1) } }() err = naabuRunner.RunEnumeration(context.TODO()) if err != nil { gologger.Fatal().Msgf("Could not run enumeration: %s\n", err) } // on successful execution remove the resume file in case it exists options.ResumeCfg.CleanupResumeConfig() } naabu-2.3.1/v2/go.mod000066400000000000000000000135041461716101700142470ustar00rootroot00000000000000module github.com/projectdiscovery/naabu/v2 go 1.21 require ( github.com/Mzack9999/gcache v0.0.0-20230410081825-519e28eab057 github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 github.com/google/gopacket v1.1.19 github.com/logrusorgru/aurora v2.0.3+incompatible github.com/miekg/dns v1.1.58 github.com/pkg/errors v0.9.1 github.com/projectdiscovery/blackrock v0.0.1 github.com/projectdiscovery/cdncheck v1.0.9 github.com/projectdiscovery/clistats v0.0.20 github.com/projectdiscovery/dnsx v1.2.1 github.com/projectdiscovery/fdmax v0.0.4 github.com/projectdiscovery/freeport v0.0.5 github.com/projectdiscovery/goflags v0.1.51 github.com/projectdiscovery/gologger v1.1.12 github.com/projectdiscovery/ipranger v0.0.44 github.com/projectdiscovery/mapcidr v1.1.34 github.com/projectdiscovery/networkpolicy v0.0.8 github.com/projectdiscovery/ratelimit v0.0.40 github.com/projectdiscovery/retryablehttp-go v1.0.58 github.com/projectdiscovery/uncover v1.0.7 github.com/projectdiscovery/utils v0.0.92 github.com/remeh/sizedwaitgroup v1.0.0 github.com/stretchr/testify v1.9.0 go.uber.org/multierr v1.11.0 golang.org/x/exp v0.0.0-20231006140011-7918f672742d golang.org/x/net v0.23.0 golang.org/x/sys v0.18.0 ) require ( aead.dev/minisign v0.2.0 // indirect github.com/Masterminds/semver/v3 v3.2.1 // indirect github.com/Mzack9999/go-http-digest-auth-client v0.6.1-0.20220414142836-eb8883508809 // indirect github.com/VividCortex/ewma v1.2.0 // indirect github.com/akrylysov/pogreb v0.10.1 // indirect github.com/alecthomas/chroma v0.10.0 // indirect github.com/andybalholm/brotli v1.0.6 // indirect github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect github.com/aymerick/douceur v0.2.0 // indirect github.com/charmbracelet/glamour v0.6.0 // indirect github.com/cheggaaa/pb/v3 v3.1.4 // indirect github.com/cloudflare/circl v1.3.7 // indirect github.com/cnf/structhash v0.0.0-20201127153200-e1b16c1ebc08 // indirect github.com/davecgh/go-spew v1.1.1 // indirect github.com/dimchansky/utfbom v1.1.1 // indirect github.com/dlclark/regexp2 v1.8.1 // indirect github.com/docker/go-units v0.5.0 // indirect github.com/dsnet/compress v0.0.2-0.20210315054119-f66993602bf5 // indirect github.com/fatih/color v1.15.0 // indirect github.com/gaukas/godicttls v0.0.4 // indirect github.com/go-ole/go-ole v1.2.6 // indirect github.com/golang/protobuf v1.5.3 // indirect github.com/golang/snappy v0.0.4 // indirect github.com/google/go-github/v30 v30.1.0 // indirect github.com/google/go-querystring v1.1.0 // indirect github.com/google/uuid v1.3.1 // indirect github.com/gorilla/css v1.0.0 // indirect github.com/json-iterator/go v1.1.12 // indirect github.com/klauspost/compress v1.16.7 // indirect github.com/klauspost/pgzip v1.2.5 // indirect github.com/lucasb-eyer/go-colorful v1.2.0 // indirect github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0 // indirect github.com/mattn/go-colorable v0.1.13 // indirect github.com/mattn/go-isatty v0.0.19 // indirect github.com/mattn/go-runewidth v0.0.14 // indirect github.com/mholt/archiver/v3 v3.5.1 // indirect github.com/microcosm-cc/bluemonday v1.0.25 // indirect github.com/minio/selfupdate v0.6.1-0.20230907112617-f11e74f84ca7 // indirect github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect github.com/modern-go/reflect2 v1.0.2 // indirect github.com/muesli/reflow v0.3.0 // indirect github.com/muesli/termenv v0.15.1 // indirect github.com/nwaples/rardecode v1.1.3 // indirect github.com/olekukonko/tablewriter v0.0.5 // indirect github.com/pierrec/lz4/v4 v4.1.2 // indirect github.com/pmezard/go-difflib v1.0.0 // indirect github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c // indirect github.com/projectdiscovery/asnmap v1.1.0 // indirect github.com/projectdiscovery/fastdialer v0.0.70 // indirect github.com/projectdiscovery/hmap v0.0.41 // indirect github.com/projectdiscovery/machineid v0.0.0-20240226150047-2e2c51e35983 // indirect github.com/projectdiscovery/retryabledns v1.0.59 // indirect github.com/quic-go/quic-go v0.42.0 // indirect github.com/refraction-networking/utls v1.5.4 // indirect github.com/rivo/uniseg v0.4.4 // indirect github.com/saintfish/chardet v0.0.0-20230101081208-5e3ef4b5456d // indirect github.com/shirou/gopsutil/v3 v3.23.7 // indirect github.com/shoenig/go-m1cpu v0.1.6 // indirect github.com/syndtr/goleveldb v1.0.0 // indirect github.com/tidwall/btree v1.6.0 // indirect github.com/tidwall/buntdb v1.3.0 // indirect github.com/tidwall/gjson v1.16.0 // indirect github.com/tidwall/grect v0.1.4 // indirect github.com/tidwall/match v1.1.1 // indirect github.com/tidwall/pretty v1.2.1 // indirect github.com/tidwall/rtred v0.1.2 // indirect github.com/tidwall/tinyqueue v0.1.1 // indirect github.com/tklauser/go-sysconf v0.3.12 // indirect github.com/tklauser/numcpus v0.6.1 // indirect github.com/ulikunitz/xz v0.5.11 // indirect github.com/weppos/publicsuffix-go v0.30.2-0.20230730094716-a20f9abcc222 // indirect github.com/xi2/xz v0.0.0-20171230120015-48954b6210f8 // indirect github.com/yl2chen/cidranger v1.0.2 // indirect github.com/yuin/goldmark v1.5.4 // indirect github.com/yuin/goldmark-emoji v1.0.1 // indirect github.com/yusufpapurcu/wmi v1.2.4 // indirect github.com/zcalusic/sysinfo v1.0.2 // indirect github.com/zmap/rc2 v0.0.0-20190804163417-abaa70531248 // indirect github.com/zmap/zcrypto v0.0.0-20230814193918-dbe676986518 // indirect go.etcd.io/bbolt v1.3.7 // indirect golang.org/x/crypto v0.21.0 // indirect golang.org/x/mod v0.14.0 // indirect golang.org/x/oauth2 v0.11.0 // indirect golang.org/x/term v0.18.0 // indirect golang.org/x/text v0.14.0 // indirect golang.org/x/tools v0.17.0 // indirect google.golang.org/appengine v1.6.7 // indirect google.golang.org/protobuf v1.33.0 // indirect gopkg.in/djherbis/times.v1 v1.3.0 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect ) naabu-2.3.1/v2/go.sum000066400000000000000000001223061461716101700142750ustar00rootroot00000000000000aead.dev/minisign v0.2.0 h1:kAWrq/hBRu4AARY6AlciO83xhNnW9UaC8YipS2uhLPk= aead.dev/minisign v0.2.0/go.mod h1:zdq6LdSd9TbuSxchxwhpA9zEb9YXcVGoE8JakuiGaIQ= cloud.google.com/go/compute/metadata v0.2.0/go.mod h1:zFmK7XCadkQkj6TtorcaGlCW1hT1fIilQDwofLpJ20k= github.com/Masterminds/semver/v3 v3.2.1 h1:RN9w6+7QoMeJVGyfmbcgs28Br8cvmnucEXnY0rYXWg0= github.com/Masterminds/semver/v3 v3.2.1/go.mod h1:qvl/7zhW3nngYb5+80sSMF+FG2BjYrf8m9wsX0PNOMQ= github.com/Mzack9999/gcache v0.0.0-20230410081825-519e28eab057 h1:KFac3SiGbId8ub47e7kd2PLZeACxc1LkiiNoDOFRClE= github.com/Mzack9999/gcache v0.0.0-20230410081825-519e28eab057/go.mod h1:iLB2pivrPICvLOuROKmlqURtFIEsoJZaMidQfCG1+D4= github.com/Mzack9999/go-http-digest-auth-client v0.6.1-0.20220414142836-eb8883508809 h1:ZbFL+BDfBqegi+/Ssh7im5+aQfBRx6it+kHnC7jaDU8= github.com/Mzack9999/go-http-digest-auth-client v0.6.1-0.20220414142836-eb8883508809/go.mod h1:upgc3Zs45jBDnBT4tVRgRcgm26ABpaP7MoTSdgysca4= github.com/ProtonMail/go-crypto v0.0.0-20230217124315-7d5c6f04bbb8/go.mod h1:I0gYDMZ6Z5GRU7l58bNFSkPTFN6Yl12dsUlAZ8xy98g= github.com/VividCortex/ewma v1.2.0 h1:f58SaIzcDXrSy3kWaHNvuJgJ3Nmz59Zji6XoJR/q1ow= github.com/VividCortex/ewma v1.2.0/go.mod h1:nz4BbCtbLyFDeC9SUHbtcT5644juEuWfUAUnGx7j5l4= github.com/akrylysov/pogreb v0.10.1 h1:FqlR8VR7uCbJdfUob916tPM+idpKgeESDXOA1K0DK4w= github.com/akrylysov/pogreb v0.10.1/go.mod h1:pNs6QmpQ1UlTJKDezuRWmaqkgUE2TuU0YTWyqJZ7+lI= github.com/alecthomas/chroma v0.10.0 h1:7XDcGkCQopCNKjZHfYrNLraA+M7e0fMiJ/Mfikbfjek= github.com/alecthomas/chroma v0.10.0/go.mod h1:jtJATyUxlIORhUOFNA9NZDWGAQ8wpxQQqNSB4rjA/1s= github.com/andybalholm/brotli v1.0.1/go.mod h1:loMXtMfwqflxFJPmdbJO0a3KNoPuLBgiu3qAvBg8x/Y= github.com/andybalholm/brotli v1.0.6 h1:Yf9fFpf49Zrxb9NlQaluyE92/+X7UVHlhMNJN2sxfOI= github.com/andybalholm/brotli v1.0.6/go.mod h1:fO7iG3H7G2nSZ7m0zPUDn85XEX2GTukHGRSepvi9Eig= github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so= github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2/go.mod h1:WaHUgvxTVq04UNunO+XhnAqY/wQc+bxr74GqbsZ/Jqw= github.com/aymanbagabas/go-osc52 v1.0.3/go.mod h1:zT8H+Rk4VSabYN90pWyugflM3ZhpTZNC7cASDfUCdT4= github.com/aymanbagabas/go-osc52/v2 v2.0.1 h1:HwpRHbFMcZLEVr42D4p7XBqjyuxQH5SMiErDT4WkJ2k= github.com/aymanbagabas/go-osc52/v2 v2.0.1/go.mod h1:uYgXzlJ7ZpABp8OJ+exZzJJhRNQ2ASbcXHWsFqH8hp8= github.com/aymerick/douceur v0.2.0 h1:Mv+mAeH1Q+n9Fr+oyamOlAkUNPWPlA8PPGR0QAaYuPk= github.com/aymerick/douceur v0.2.0/go.mod h1:wlT5vV2O3h55X9m7iVYN0TBM0NH/MmbLnd30/FjWUq4= github.com/bits-and-blooms/bitset v1.8.0 h1:FD+XqgOZDUxxZ8hzoBFuV9+cGWY9CslN6d5MS5JVb4c= github.com/bits-and-blooms/bitset v1.8.0/go.mod h1:7hO7Gc7Pp1vODcmWvKMRA9BNmbv6a/7QIWpPxHddWR8= github.com/bits-and-blooms/bloom/v3 v3.5.0 h1:AKDvi1V3xJCmSR6QhcBfHbCN4Vf8FfxeWkMNQfmAGhY= github.com/bits-and-blooms/bloom/v3 v3.5.0/go.mod h1:Y8vrn7nk1tPIlmLtW2ZPV+W7StdVMor6bC1xgpjMZFs= github.com/bwesterb/go-ristretto v1.2.0/go.mod h1:fUIoIZaG73pV5biE2Blr2xEzDoMj7NFEuV9ekS419A0= github.com/charmbracelet/glamour v0.6.0 h1:wi8fse3Y7nfcabbbDuwolqTqMQPMnVPeZhDM273bISc= github.com/charmbracelet/glamour v0.6.0/go.mod h1:taqWV4swIMMbWALc0m7AfE9JkPSU8om2538k9ITBxOc= github.com/cheggaaa/pb/v3 v3.1.4 h1:DN8j4TVVdKu3WxVwcRKu0sG00IIU6FewoABZzXbRQeo= github.com/cheggaaa/pb/v3 v3.1.4/go.mod h1:6wVjILNBaXMs8c21qRiaUM8BR82erfgau1DQ4iUXmSA= github.com/cloudflare/circl v1.1.0/go.mod h1:prBCrKB9DV4poKZY1l9zBXg2QJY7mvgRvtMxxK7fi4I= github.com/cloudflare/circl v1.3.7 h1:qlCDlTPz2n9fu58M0Nh1J/JzcFpfgkFHHX3O35r5vcU= github.com/cloudflare/circl v1.3.7/go.mod h1:sRTcRWXGLrKw6yIGJ+l7amYJFfAXbZG0kBSc8r4zxgA= github.com/cnf/structhash v0.0.0-20201127153200-e1b16c1ebc08 h1:ox2F0PSMlrAAiAdknSRMDrAr8mfxPCfSZolH+/qQnyQ= github.com/cnf/structhash v0.0.0-20201127153200-e1b16c1ebc08/go.mod h1:pCxVEbcm3AMg7ejXyorUXi6HQCzOIBf7zEDVPtw0/U4= github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c= github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/dimchansky/utfbom v1.1.1 h1:vV6w1AhK4VMnhBno/TPVCoK9U/LP0PkLCS9tbxHdi/U= github.com/dimchansky/utfbom v1.1.1/go.mod h1:SxdoEBH5qIqFocHMyGOXVAybYJdr71b1Q/j0mACtrfE= github.com/dlclark/regexp2 v1.4.0/go.mod h1:2pZnwuY/m+8K6iRw6wQdMtk+rH5tNGR1i55kozfMjCc= github.com/dlclark/regexp2 v1.8.1 h1:6Lcdwya6GjPUNsBct8Lg/yRPwMhABj269AAzdGSiR+0= github.com/dlclark/regexp2 v1.8.1/go.mod h1:DHkYz0B9wPfa6wondMfaivmHpzrQ3v9q8cnmRbL6yW8= github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4= github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk= github.com/dsnet/compress v0.0.2-0.20210315054119-f66993602bf5 h1:iFaUwBSo5Svw6L7HYpRu/0lE3e0BaElwnNO1qkNQxBY= github.com/dsnet/compress v0.0.2-0.20210315054119-f66993602bf5/go.mod h1:qssHWj60/X5sZFNxpG4HBPDHVqxNm4DfnCKgrbZOT+s= github.com/dsnet/golib v0.0.0-20171103203638-1ea166775780/go.mod h1:Lj+Z9rebOhdfkVLjJ8T6VcRQv3SXugXy999NBtR9aFY= github.com/fatih/color v1.15.0 h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs= github.com/fatih/color v1.15.0/go.mod h1:0h5ZqXfHYED7Bhv2ZJamyIOUej9KtShiJESRwBDUSsw= github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo= github.com/fsnotify/fsnotify v1.6.0 h1:n+5WquG0fcWoWp6xPWfHdbskMCQaFnG6PfBrh1Ky4HY= github.com/fsnotify/fsnotify v1.6.0/go.mod h1:sl3t1tCWJFWoRz9R8WJCbQihKKwmorjAbSClcnxKAGw= github.com/gaukas/godicttls v0.0.4 h1:NlRaXb3J6hAnTmWdsEKb9bcSBD6BvcIjdGdeb0zfXbk= github.com/gaukas/godicttls v0.0.4/go.mod h1:l6EenT4TLWgTdwslVb4sEMOCf7Bv0JAK67deKr9/NCI= github.com/go-logr/logr v1.2.4 h1:g01GSCwiDw2xSZfjJ2/T9M+S6pFdcNtFYsp+Y43HYDQ= github.com/go-logr/logr v1.2.4/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A= github.com/go-ole/go-ole v1.2.6 h1:/Fpf6oFPoeFik9ty7siob0G6Ke8QvQEuVcuChpwXzpY= github.com/go-ole/go-ole v1.2.6/go.mod h1:pprOEPIfldk/42T2oK7lQ4v4JSDwmV0As9GaiUsvbm0= github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572 h1:tfuBGBXKqDEevZMzYi5KSi8KkcZtzBcTgAUUtapy0OI= github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572/go.mod h1:9Pwr4B2jHnOSGXyyzV8ROjYa2ojvAY6HCGYYfMoC3Ls= github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U= github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U= github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U= github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk= github.com/golang/protobuf v1.5.2/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY= github.com/golang/protobuf v1.5.3 h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg= github.com/golang/protobuf v1.5.3/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY= github.com/golang/snappy v0.0.0-20180518054509-2e65f85255db/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q= github.com/golang/snappy v0.0.2/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q= github.com/golang/snappy v0.0.4 h1:yAGX7huGHXlcLOEtBnF4w7FQwA26wojNCwOYAEhLjQM= github.com/golang/snappy v0.0.4/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q= github.com/google/go-cmp v0.5.2/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= github.com/google/go-cmp v0.5.6/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= github.com/google/go-cmp v0.5.8/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= github.com/google/go-cmp v0.5.9 h1:O2Tfq5qg4qc4AmwVlvv0oLiVAGB7enBSJ2x2DqQFi38= github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= github.com/google/go-github/v30 v30.1.0 h1:VLDx+UolQICEOKu2m4uAoMti1SxuEBAl7RSEG16L+Oo= github.com/google/go-github/v30 v30.1.0/go.mod h1:n8jBpHl45a/rlBUtRJMOG4GhNADUQFEufcolZ95JfU8= github.com/google/go-github/v50 v50.2.0/go.mod h1:VBY8FB6yPIjrtKhozXv4FQupxKLS6H4m6xFZlT43q8Q= github.com/google/go-querystring v1.0.0/go.mod h1:odCYkC5MyYFN7vkCjXpyrEuKhc/BUO6wN/zVPAxq5ck= github.com/google/go-querystring v1.1.0 h1:AnCroh3fv4ZBgVIf1Iwtovgjaw/GiKJo8M8yD/fhyJ8= github.com/google/go-querystring v1.1.0/go.mod h1:Kcdr2DB4koayq7X8pmAG4sNG59So17icRSOU623lUBU= github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= github.com/google/gopacket v1.1.19 h1:ves8RnFZPGiFnTS0uPQStjwru6uO6h+nlr9j6fL7kF8= github.com/google/gopacket v1.1.19/go.mod h1:iJ8V8n6KS+z2U1A8pUwu8bW5SyEMkXJB8Yo/Vo+TKTo= github.com/google/pprof v0.0.0-20210407192527-94a9f03dee38 h1:yAJXTCF9TqKcTiHJAE8dj7HMvPfh66eeA2JYW7eFpSE= github.com/google/pprof v0.0.0-20210407192527-94a9f03dee38/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE= github.com/google/uuid v1.3.1 h1:KjJaJ9iWZ3jOFZIf1Lqf4laDRCasjl0BCmnEGxkdLb4= github.com/google/uuid v1.3.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= github.com/gorilla/css v1.0.0 h1:BQqNyPTi50JCFMTw/b67hByjMVXZRwGha6wxVGkeihY= github.com/gorilla/css v1.0.0/go.mod h1:Dn721qIggHpt4+EFCcTLTU/vk5ySda2ReITrtgBl60c= github.com/hashicorp/golang-lru v0.5.4 h1:YDjusn29QI/Das2iO9M0BHnIbxPeyuCHsjMW+lJfyTc= github.com/hashicorp/golang-lru/v2 v2.0.6 h1:3xi/Cafd1NaoEnS/yDssIiuVeDVywU0QdFGl3aQaQHM= github.com/hashicorp/golang-lru/v2 v2.0.6/go.mod h1:QeFd9opnmA6QUJc5vARoKUSoFhyfM2/ZepoAG6RGpeM= github.com/hpcloud/tail v1.0.0/go.mod h1:ab1qPbhIpdTxEkNHXyeSf5vhxWSCs/tWer42PpOxQnU= github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM= github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo= github.com/julienschmidt/httprouter v1.3.0 h1:U0609e9tgbseu3rBINet9P48AI/D3oJs4dN7jwJOQ1U= github.com/julienschmidt/httprouter v1.3.0/go.mod h1:JR6WtHb+2LUe8TCKY3cZOxFyyO8IZAc4RVcycCCAKdM= github.com/klauspost/compress v1.4.1/go.mod h1:RyIbtBH6LamlWaDj8nUwkbUhJ87Yi3uG0guNDohfE1A= github.com/klauspost/compress v1.11.4/go.mod h1:aoV0uJVorq1K+umq18yTdKaF57EivdYsUV+/s2qKfXs= github.com/klauspost/compress v1.16.7 h1:2mk3MPGNzKyxErAw8YaohYh69+pa4sIQSC0fPGCFR9I= github.com/klauspost/compress v1.16.7/go.mod h1:ntbaceVETuRiXiv4DpjP66DpAtAGkEQskQzEyD//IeE= github.com/klauspost/cpuid v1.2.0/go.mod h1:Pj4uuM528wm8OyEC2QMXAi2YiTZ96dNQPGgoMS4s3ek= github.com/klauspost/pgzip v1.2.5 h1:qnWYvvKqedOF2ulHpMG72XQol4ILEJ8k2wwRl/Km8oE= github.com/klauspost/pgzip v1.2.5/go.mod h1:Ch1tH69qFZu15pkjo5kYi6mth2Zzwzt50oCQKQE9RUs= github.com/konsorten/go-windows-terminal-sequences v1.0.1/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ= github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo= github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE= github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk= github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ= github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI= github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY= github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE= github.com/logrusorgru/aurora v2.0.3+incompatible h1:tOpm7WcpBTn4fjmVfgpQq0EfczGlG91VSDkswnjF5A8= github.com/logrusorgru/aurora v2.0.3+incompatible/go.mod h1:7rIyQOR62GCctdiQpZ/zOJlFyk6y+94wXzv6RNZgaR4= github.com/lucasb-eyer/go-colorful v1.2.0 h1:1nnpGOrhyZZuNyfu1QjKiUICQ74+3FNCN69Aj6K7nkY= github.com/lucasb-eyer/go-colorful v1.2.0/go.mod h1:R4dSotOR9KMtayYi1e77YzuveK+i7ruzyGqttikkLy0= github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0 h1:6E+4a0GO5zZEnZ81pIr0yLvtUWk2if982qA3F3QD6H4= github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0/go.mod h1:zJYVVT2jmtg6P3p1VtQj7WsuWi/y4VnjVBn7F8KPB3I= github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA= github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg= github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM= github.com/mattn/go-isatty v0.0.19 h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA= github.com/mattn/go-isatty v0.0.19/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y= github.com/mattn/go-runewidth v0.0.9/go.mod h1:H031xJmbD/WCDINGzjvQ9THkh0rPKHF+m2gUSrubnMI= github.com/mattn/go-runewidth v0.0.12/go.mod h1:RAqKPSqVFrSLVXbA8x7dzmKdmGzieGRCM46jaSJTDAk= github.com/mattn/go-runewidth v0.0.14 h1:+xnbZSEeDbOIg5/mE6JF0w6n9duR1l3/WmbinWVwUuU= github.com/mattn/go-runewidth v0.0.14/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w= github.com/mholt/archiver/v3 v3.5.1 h1:rDjOBX9JSF5BvoJGvjqK479aL70qh9DIpZCl+k7Clwo= github.com/mholt/archiver/v3 v3.5.1/go.mod h1:e3dqJ7H78uzsRSEACH1joayhuSyhnonssnDhppzS1L4= github.com/microcosm-cc/bluemonday v1.0.21/go.mod h1:ytNkv4RrDrLJ2pqlsSI46O6IVXmZOBBD4SaJyDwwTkM= github.com/microcosm-cc/bluemonday v1.0.25 h1:4NEwSfiJ+Wva0VxN5B8OwMicaJvD8r9tlJWm9rtloEg= github.com/microcosm-cc/bluemonday v1.0.25/go.mod h1:ZIOjCQp1OrzBBPIJmfX4qDYFuhU02nx4bn030ixfHLE= github.com/miekg/dns v1.1.58 h1:ca2Hdkz+cDg/7eNF6V56jjzuZ4aCAE+DbVkILdQWG/4= github.com/miekg/dns v1.1.58/go.mod h1:Ypv+3b/KadlvW9vJfXOTf300O4UqaHFzFCuHz+rPkBY= github.com/minio/selfupdate v0.6.1-0.20230907112617-f11e74f84ca7 h1:yRZGarbxsRytL6EGgbqK2mCY+Lk5MWKQYKJT2gEglhc= github.com/minio/selfupdate v0.6.1-0.20230907112617-f11e74f84ca7/go.mod h1:bO02GTIPCMQFTEvE5h4DjYB58bCoZ35XLeBf0buTDdM= github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q= github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg= github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q= github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M= github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk= github.com/mreiferson/go-httpclient v0.0.0-20160630210159-31f0106b4474/go.mod h1:OQA4XLvDbMgS8P0CevmM4m9Q3Jq4phKUzcocxuGJ5m8= github.com/mreiferson/go-httpclient v0.0.0-20201222173833-5e475fde3a4d/go.mod h1:OQA4XLvDbMgS8P0CevmM4m9Q3Jq4phKUzcocxuGJ5m8= github.com/muesli/reflow v0.3.0 h1:IFsN6K9NfGtjeggFP+68I4chLZV2yIKsXJFNZ+eWh6s= github.com/muesli/reflow v0.3.0/go.mod h1:pbwTDkVPibjO2kyvBQRBxTWEEGDGq0FlB1BIKtnHY/8= github.com/muesli/termenv v0.13.0/go.mod h1:sP1+uffeLaEYpyOTb8pLCUctGcGLnoFjSn4YJK5e2bc= github.com/muesli/termenv v0.15.1 h1:UzuTb/+hhlBugQz28rpzey4ZuKcZ03MeKsoG7IJZIxs= github.com/muesli/termenv v0.15.1/go.mod h1:HeAQPTzpfs016yGtA4g00CsdYnVLJvxsS4ANqrZs2sQ= github.com/nwaples/rardecode v1.1.0/go.mod h1:5DzqNKiOdpKKBH87u8VlvAnPZMXcGRhxWkRpHbbfGS0= github.com/nwaples/rardecode v1.1.3 h1:cWCaZwfM5H7nAD6PyEdcVnczzV8i/JtotnyW/dD9lEc= github.com/nwaples/rardecode v1.1.3/go.mod h1:5DzqNKiOdpKKBH87u8VlvAnPZMXcGRhxWkRpHbbfGS0= github.com/nxadm/tail v1.4.11 h1:8feyoE3OzPrcshW5/MJ4sGESc5cqmGkGCWlco4l0bqY= github.com/nxadm/tail v1.4.11/go.mod h1:OTaG3NK980DZzxbRq6lEuzgU+mug70nY11sMd4JXXHc= github.com/olekukonko/tablewriter v0.0.5 h1:P2Ga83D34wi1o9J6Wh1mRuqd4mF/x/lgBS7N7AbDhec= github.com/olekukonko/tablewriter v0.0.5/go.mod h1:hPp6KlRPjbx+hW8ykQs1w3UBbZlj6HuIJcUGPhkA7kY= github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE= github.com/onsi/ginkgo v1.7.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE= github.com/onsi/ginkgo v1.16.4 h1:29JGrr5oVBm5ulCWet69zQkzWipVXIol6ygQUe/EzNc= github.com/onsi/ginkgo v1.16.4/go.mod h1:dX+/inL/fNMqNlz0e9LfyB9TswhZpCVdJM/Z6Vvnwo0= github.com/onsi/ginkgo/v2 v2.9.5 h1:+6Hr4uxzP4XIUyAkg61dWBw8lb/gc4/X5luuxN/EC+Q= github.com/onsi/ginkgo/v2 v2.9.5/go.mod h1:tvAoo1QUJwNEU2ITftXTpR7R1RbCzoZUOs3RonqW57k= github.com/onsi/gomega v1.4.3/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY= github.com/onsi/gomega v1.27.6 h1:ENqfyGeS5AX/rlXDd/ETokDz93u0YufY1Pgxuy/PvWE= github.com/onsi/gomega v1.27.6/go.mod h1:PIQNjfQwkP3aQAH7lf7j87O/5FiNr+ZR8+ipb+qQlhg= github.com/op/go-logging v0.0.0-20160315200505-970db520ece7/go.mod h1:HzydrMdWErDVzsI23lYNej1Htcns9BCg93Dk0bBINWk= github.com/pierrec/lz4/v4 v4.1.2 h1:qvY3YFXRQE/XB8MlLzJH7mSzBs74eA2gg52YTk6jUPM= github.com/pierrec/lz4/v4 v4.1.2/go.mod h1:gZWDp/Ze/IJXGXf23ltt2EXimqmTUXEy0GFuRQyBid4= github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4= github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0= github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM= github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c h1:ncq/mPwQF4JjgDlrVEn3C11VoGHZN7m8qihwgMEtzYw= github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c/go.mod h1:OmDBASR4679mdNQnz2pUhc2G8CO2JrUAVFDRBDP/hJE= github.com/projectdiscovery/asnmap v1.1.0 h1:ynvbLB5cNpyQ2+k9IP0Rpla+0JmCJpd3mw6KLAW13m0= github.com/projectdiscovery/asnmap v1.1.0/go.mod h1:QNjBnGLxUBEZAgaYk/Av5cjKKWFY3i/FOfoIWCUApoY= github.com/projectdiscovery/blackrock v0.0.1 h1:lHQqhaaEFjgf5WkuItbpeCZv2DUIE45k0VbGJyft6LQ= github.com/projectdiscovery/blackrock v0.0.1/go.mod h1:ANUtjDfaVrqB453bzToU+YB4cUbvBRpLvEwoWIwlTss= github.com/projectdiscovery/cdncheck v1.0.9 h1:BS15gzj9gb5AVSKqTDzPamfSgStu7nJQOocUvrssFlg= github.com/projectdiscovery/cdncheck v1.0.9/go.mod h1:18SSl1w7rMj53CGeRIZTbDoa286a6xZIxGbaiEo4Fxs= github.com/projectdiscovery/clistats v0.0.20 h1:5jO5SLiRJ7f0nDV0ndBNmBeesbROouPooH+DGMgoWq4= github.com/projectdiscovery/clistats v0.0.20/go.mod h1:GJ2av0KnOvK0AISQnP8hyDclYIji1LVkx2l0pwnzAu4= github.com/projectdiscovery/dnsx v1.2.1 h1:TxslYvp1Z/YZ4CP/J0gx5RYpvXREnVmyoacmTcGu5yg= github.com/projectdiscovery/dnsx v1.2.1/go.mod h1:6dAsMCEDu7FArZy2qjyTeUQrqpZ4ITLU11fcmUvFqt0= github.com/projectdiscovery/fastdialer v0.0.70 h1:1rnUKc8NRj6dzG8aTmqW+RF8m0dFbfTs9CiOo6Aig8U= github.com/projectdiscovery/fastdialer v0.0.70/go.mod h1:HQ0ZpvOPOTZFSQxGyYJgNdek93hi4eIC1avZgiQ7+a4= github.com/projectdiscovery/fdmax v0.0.4 h1:K9tIl5MUZrEMzjvwn/G4drsHms2aufTn1xUdeVcmhmc= github.com/projectdiscovery/fdmax v0.0.4/go.mod h1:oZLqbhMuJ5FmcoaalOm31B1P4Vka/CqP50nWjgtSz+I= github.com/projectdiscovery/freeport v0.0.5 h1:jnd3Oqsl4S8n0KuFkE5Hm8WGDP24ITBvmyw5pFTHS8Q= github.com/projectdiscovery/freeport v0.0.5/go.mod h1:PY0bxSJ34HVy67LHIeF3uIutiCSDwOqKD8ruBkdiCwE= github.com/projectdiscovery/goflags v0.1.51 h1:PhMekTX727L1YqBfP0of0clSygrq20RnWWp0+khAxqo= github.com/projectdiscovery/goflags v0.1.51/go.mod h1:muJxbcOFi4kzg0G30S526X6dY/OyuDInchYIkoZOudU= github.com/projectdiscovery/gologger v1.1.12 h1:uX/QkQdip4PubJjjG0+uk5DtyAi1ANPJUvpmimXqv4A= github.com/projectdiscovery/gologger v1.1.12/go.mod h1:DI8nywPLERS5mo8QEA9E7gd5HZ3Je14SjJBH3F5/kLw= github.com/projectdiscovery/hmap v0.0.41 h1:8IgTyDce3/2JzcfPVA4H+XpBRFfETULx8td3BMdSYVE= github.com/projectdiscovery/hmap v0.0.41/go.mod h1:bCrai6x5Eijqm2U+jtcH0wZX5ZcaZhcvzoMGTZgLAf0= github.com/projectdiscovery/ipranger v0.0.44 h1:nTJxDcV7pB85QW2BJGhweS5QD+U1XHJdpOEKhTr7EWY= github.com/projectdiscovery/ipranger v0.0.44/go.mod h1:n5jMCwy3WT0ksQW4NFwYDt90KeKFUK0iX58jzTbqFkY= github.com/projectdiscovery/machineid v0.0.0-20240226150047-2e2c51e35983 h1:ZScLodGSezQVwsQDtBSMFp72WDq0nNN+KE/5DHKY5QE= github.com/projectdiscovery/machineid v0.0.0-20240226150047-2e2c51e35983/go.mod h1:3G3BRKui7nMuDFAZKR/M2hiOLtaOmyukT20g88qRQjI= github.com/projectdiscovery/mapcidr v1.1.34 h1:udr83vQ7oz3kEOwlsU6NC6o08leJzSDQtls1wmXN/kM= github.com/projectdiscovery/mapcidr v1.1.34/go.mod h1:1+1R6OkKSAKtWDXE9RvxXtXPoajXTYX0eiEdkqlhQqQ= github.com/projectdiscovery/networkpolicy v0.0.8 h1:XvfBaBwSDNTesSfNQP9VLk3HX9I7x7gHm028TJ5XwI8= github.com/projectdiscovery/networkpolicy v0.0.8/go.mod h1:xnjNqhemxUPxU+UD5Jgsc3+K8IVmcqT1SJeo6UzMtkI= github.com/projectdiscovery/ratelimit v0.0.40 h1:SURkc7+ezUeGNt9PEQZOtd7nh2o2jKzmqcehrrf6DMU= github.com/projectdiscovery/ratelimit v0.0.40/go.mod h1:3Z1rK0bs4BSjdYNvIlbmZR1H8Z5MsXRz+QRCXGIB0HE= github.com/projectdiscovery/retryabledns v1.0.59 h1:8pMN+VibEBp29RIUior9LXUbx0RsBTjPC0008t2hfGU= github.com/projectdiscovery/retryabledns v1.0.59/go.mod h1:CwyQLDt9oqNIO/2ArALhAnUHJjZYdvJRSfGERRNPtoQ= github.com/projectdiscovery/retryablehttp-go v1.0.58 h1:i5BlSJGgNnoTULyqLSe3d39o/XShxK4oEvx0e/gb9N4= github.com/projectdiscovery/retryablehttp-go v1.0.58/go.mod h1:bbok7sSEplSwZOY91UlLdVilhavYos1RaCJLJx761V0= github.com/projectdiscovery/uncover v1.0.7 h1:ut+2lTuvmftmveqF5RTjMWAgyLj8ltPQC7siFy9sj0A= github.com/projectdiscovery/uncover v1.0.7/go.mod h1:HFXgm1sRPuoN0D4oATljPIdmbo/EEh1wVuxQqo/dwFE= github.com/projectdiscovery/utils v0.0.92 h1:lGCmjUJhzoNX4FQZWpp80058pRlD0/dYxLJOSs07EqY= github.com/projectdiscovery/utils v0.0.92/go.mod h1:d5uvD5qcRiK3qxZbBy9eatCqrCSuj9SObL04w/WgXSg= github.com/quic-go/quic-go v0.42.0 h1:uSfdap0eveIl8KXnipv9K7nlwZ5IqLlYOpJ58u5utpM= github.com/quic-go/quic-go v0.42.0/go.mod h1:132kz4kL3F9vxhW3CtQJLDVwcFe5wdWeJXXijhsO57M= github.com/refraction-networking/utls v1.5.4 h1:9k6EO2b8TaOGsQ7Pl7p9w6PUhx18/ZCeT0WNTZ7Uw4o= github.com/refraction-networking/utls v1.5.4/go.mod h1:SPuDbBmgLGp8s+HLNc83FuavwZCFoMmExj+ltUHiHUw= github.com/remeh/sizedwaitgroup v1.0.0 h1:VNGGFwNo/R5+MJBf6yrsr110p0m4/OX4S3DCy7Kyl5E= github.com/remeh/sizedwaitgroup v1.0.0/go.mod h1:3j2R4OIe/SeS6YDhICBy22RWjJC5eNCJ1V+9+NVNYlo= github.com/rivo/uniseg v0.1.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc= github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc= github.com/rivo/uniseg v0.4.4 h1:8TfxU8dW6PdqD27gjM8MVNuicgxIjxpm4K7x4jp8sis= github.com/rivo/uniseg v0.4.4/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88= github.com/rogpeppe/go-internal v1.10.0 h1:TMyTOH3F/DB16zRVcYyreMH6GnZZrwQVAoYjRBZyWFQ= github.com/rogpeppe/go-internal v1.10.0/go.mod h1:UQnix2H7Ngw/k4C5ijL5+65zddjncjaFoBhdsK/akog= github.com/saintfish/chardet v0.0.0-20230101081208-5e3ef4b5456d h1:hrujxIzL1woJ7AwssoOcM/tq5JjjG2yYOc8odClEiXA= github.com/saintfish/chardet v0.0.0-20230101081208-5e3ef4b5456d/go.mod h1:uugorj2VCxiV1x+LzaIdVa9b4S4qGAcH6cbhh4qVxOU= github.com/shirou/gopsutil/v3 v3.23.7 h1:C+fHO8hfIppoJ1WdsVm1RoI0RwXoNdfTK7yWXV0wVj4= github.com/shirou/gopsutil/v3 v3.23.7/go.mod h1:c4gnmoRC0hQuaLqvxnx1//VXQ0Ms/X9UnJF8pddY5z4= github.com/shoenig/go-m1cpu v0.1.6 h1:nxdKQNcEB6vzgA2E2bvzKIYRuNj7XNJ4S/aRSwKzFtM= github.com/shoenig/go-m1cpu v0.1.6/go.mod h1:1JJMcUBvfNwpq05QDQVAnx3gUHr9IYF7GNg9SUEw2VQ= github.com/shoenig/test v0.6.4 h1:kVTaSd7WLz5WZ2IaoM0RSzRsUD+m8wRR+5qvntpn4LU= github.com/shoenig/test v0.6.4/go.mod h1:byHiCGXqrVaflBLAMq/srcZIHynQPQgeyvkvXnjqq0k= github.com/sirupsen/logrus v1.3.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo= github.com/sirupsen/logrus v1.7.0/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0= github.com/sirupsen/logrus v1.9.0/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ= github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= github.com/stretchr/objx v0.1.1/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw= github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo= github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs= github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI= github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4= github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU= github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo= github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg= github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= github.com/syndtr/goleveldb v1.0.0 h1:fBdIW9lB4Iz0n9khmH8w27SJ3QEJ7+IgjPEwGSZiFdE= github.com/syndtr/goleveldb v1.0.0/go.mod h1:ZVVdQEZoIme9iO1Ch2Jdy24qqXrMMOU6lpPAyBWyWuQ= github.com/tidwall/assert v0.1.0 h1:aWcKyRBUAdLoVebxo95N7+YZVTFF/ASTr7BN4sLP6XI= github.com/tidwall/assert v0.1.0/go.mod h1:QLYtGyeqse53vuELQheYl9dngGCJQ+mTtlxcktb+Kj8= github.com/tidwall/btree v1.6.0 h1:LDZfKfQIBHGHWSwckhXI0RPSXzlo+KYdjK7FWSqOzzg= github.com/tidwall/btree v1.6.0/go.mod h1:twD9XRA5jj9VUQGELzDO4HPQTNJsoWWfYEL+EUQ2cKY= github.com/tidwall/buntdb v1.3.0 h1:gdhWO+/YwoB2qZMeAU9JcWWsHSYU3OvcieYgFRS0zwA= github.com/tidwall/buntdb v1.3.0/go.mod h1:lZZrZUWzlyDJKlLQ6DKAy53LnG7m5kHyrEHvvcDmBpU= github.com/tidwall/gjson v1.12.1/go.mod h1:/wbyibRr2FHMks5tjHJ5F8dMZh3AcwJEMf5vlfC0lxk= github.com/tidwall/gjson v1.16.0 h1:SyXa+dsSPpUlcwEDuKuEBJEz5vzTvOea+9rjyYodQFg= github.com/tidwall/gjson v1.16.0/go.mod h1:/wbyibRr2FHMks5tjHJ5F8dMZh3AcwJEMf5vlfC0lxk= github.com/tidwall/grect v0.1.4 h1:dA3oIgNgWdSspFzn1kS4S/RDpZFLrIxAZOdJKjYapOg= github.com/tidwall/grect v0.1.4/go.mod h1:9FBsaYRaR0Tcy4UwefBX/UDcDcDy9V5jUcxHzv2jd5Q= github.com/tidwall/lotsa v1.0.2 h1:dNVBH5MErdaQ/xd9s769R31/n2dXavsQ0Yf4TMEHHw8= github.com/tidwall/lotsa v1.0.2/go.mod h1:X6NiU+4yHA3fE3Puvpnn1XMDrFZrE9JO2/w+UMuqgR8= github.com/tidwall/match v1.1.1 h1:+Ho715JplO36QYgwN9PGYNhgZvoUSc9X2c80KVTi+GA= github.com/tidwall/match v1.1.1/go.mod h1:eRSPERbgtNPcGhD8UCthc6PmLEQXEWd3PRB5JTxsfmM= github.com/tidwall/pretty v1.2.0/go.mod h1:ITEVvHYasfjBbM0u2Pg8T2nJnzm8xPwvNhhsoaGGjNU= github.com/tidwall/pretty v1.2.1 h1:qjsOFOWWQl+N3RsoF5/ssm1pHmJJwhjlSbZ51I6wMl4= github.com/tidwall/pretty v1.2.1/go.mod h1:ITEVvHYasfjBbM0u2Pg8T2nJnzm8xPwvNhhsoaGGjNU= github.com/tidwall/rtred v0.1.2 h1:exmoQtOLvDoO8ud++6LwVsAMTu0KPzLTUrMln8u1yu8= github.com/tidwall/rtred v0.1.2/go.mod h1:hd69WNXQ5RP9vHd7dqekAz+RIdtfBogmglkZSRxCHFQ= github.com/tidwall/tinyqueue v0.1.1 h1:SpNEvEggbpyN5DIReaJ2/1ndroY8iyEGxPYxoSaymYE= github.com/tidwall/tinyqueue v0.1.1/go.mod h1:O/QNHwrnjqr6IHItYrzoHAKYhBkLI67Q096fQP5zMYw= github.com/tklauser/go-sysconf v0.3.11/go.mod h1:GqXfhXY3kiPa0nAXPDIQIWzJbMCB7AmcWpGR8lSZfqI= github.com/tklauser/go-sysconf v0.3.12 h1:0QaGUFOdQaIVdPgfITYzaTegZvdCjmYO52cSFAEVmqU= github.com/tklauser/go-sysconf v0.3.12/go.mod h1:Ho14jnntGE1fpdOqQEEaiKRpvIavV0hSfmBq8nJbHYI= github.com/tklauser/numcpus v0.6.0/go.mod h1:FEZLMke0lhOUG6w2JadTzp0a+Nl8PF/GFkQ5UVIcaL4= github.com/tklauser/numcpus v0.6.1 h1:ng9scYS7az0Bk4OZLvrNXNSAO2Pxr1XXRAPyjhIx+Fk= github.com/tklauser/numcpus v0.6.1/go.mod h1:1XfjsgE2zo8GVw7POkMbHENHzVg3GzmoZ9fESEdAacY= github.com/ulikunitz/xz v0.5.8/go.mod h1:nbz6k7qbPmH4IRqmfOplQw/tblSgqTqBwxkY0oWt/14= github.com/ulikunitz/xz v0.5.9/go.mod h1:nbz6k7qbPmH4IRqmfOplQw/tblSgqTqBwxkY0oWt/14= github.com/ulikunitz/xz v0.5.11 h1:kpFauv27b6ynzBNT/Xy+1k+fK4WswhN/6PN5WhFAGw8= github.com/ulikunitz/xz v0.5.11/go.mod h1:nbz6k7qbPmH4IRqmfOplQw/tblSgqTqBwxkY0oWt/14= github.com/weppos/publicsuffix-go v0.13.0/go.mod h1:z3LCPQ38eedDQSwmsSRW4Y7t2L8Ln16JPQ02lHAdn5k= github.com/weppos/publicsuffix-go v0.30.2-0.20230730094716-a20f9abcc222 h1:h2JizvZl9aIj6za9S5AyrkU+OzIS4CetQthH/ejO+lg= github.com/weppos/publicsuffix-go v0.30.2-0.20230730094716-a20f9abcc222/go.mod h1:s41lQh6dIsDWIC1OWh7ChWJXLH0zkJ9KHZVqA7vHyuQ= github.com/xi2/xz v0.0.0-20171230120015-48954b6210f8 h1:nIPpBwaJSVYIxUFsDv3M8ofmx9yWTog9BfvIu0q41lo= github.com/xi2/xz v0.0.0-20171230120015-48954b6210f8/go.mod h1:HUYIGzjTL3rfEspMxjDjgmT5uz5wzYJKVo23qUhYTos= github.com/yl2chen/cidranger v1.0.2 h1:lbOWZVCG1tCRX4u24kuM1Tb4nHqWkDxwLdoS+SevawU= github.com/yl2chen/cidranger v1.0.2/go.mod h1:9U1yz7WPYDwf0vpNWFaeRh0bjwz5RVgRy/9UEQfHl0g= github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY= github.com/yuin/goldmark v1.5.2/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY= github.com/yuin/goldmark v1.5.4 h1:2uY/xC0roWy8IBEGLgB1ywIoEJFGmRrX21YQcvGZzjU= github.com/yuin/goldmark v1.5.4/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY= github.com/yuin/goldmark-emoji v1.0.1 h1:ctuWEyzGBwiucEqxzwe0SOYDXPAucOrE9NQC18Wa1os= github.com/yuin/goldmark-emoji v1.0.1/go.mod h1:2w1E6FEWLcDQkoTE+7HU6QF1F6SLlNGjRIBbIZQFqkQ= github.com/yusufpapurcu/wmi v1.2.3/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0= github.com/yusufpapurcu/wmi v1.2.4 h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0= github.com/yusufpapurcu/wmi v1.2.4/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0= github.com/zcalusic/sysinfo v1.0.2 h1:nwTTo2a+WQ0NXwo0BGRojOJvJ/5XKvQih+2RrtWqfxc= github.com/zcalusic/sysinfo v1.0.2/go.mod h1:kluzTYflRWo6/tXVMJPdEjShsbPpsFRyy+p1mBQPC30= github.com/zmap/rc2 v0.0.0-20131011165748-24b9757f5521/go.mod h1:3YZ9o3WnatTIZhuOtot4IcUfzoKVjUHqu6WALIyI0nE= github.com/zmap/rc2 v0.0.0-20190804163417-abaa70531248 h1:Nzukz5fNOBIHOsnP+6I79kPx3QhLv8nBy2mfFhBRq30= github.com/zmap/rc2 v0.0.0-20190804163417-abaa70531248/go.mod h1:3YZ9o3WnatTIZhuOtot4IcUfzoKVjUHqu6WALIyI0nE= github.com/zmap/zcertificate v0.0.0-20180516150559-0e3d58b1bac4/go.mod h1:5iU54tB79AMBcySS0R2XIyZBAVmeHranShAFELYx7is= github.com/zmap/zcertificate v0.0.1/go.mod h1:q0dlN54Jm4NVSSuzisusQY0hqDWvu92C+TWveAxiVWk= github.com/zmap/zcrypto v0.0.0-20201128221613-3719af1573cf/go.mod h1:aPM7r+JOkfL+9qSB4KbYjtoEzJqUK50EXkkJabeNJDQ= github.com/zmap/zcrypto v0.0.0-20201211161100-e54a5822fb7e/go.mod h1:aPM7r+JOkfL+9qSB4KbYjtoEzJqUK50EXkkJabeNJDQ= github.com/zmap/zcrypto v0.0.0-20230814193918-dbe676986518 h1:O8GHQBxrphDuNhJQdKBHwP3JQUtZUyi3b+jjPYmF7oA= github.com/zmap/zcrypto v0.0.0-20230814193918-dbe676986518/go.mod h1:Z2SNNuFhO+AAsezbGEHTWeW30hHv5niUYT3fwJ61Nl0= github.com/zmap/zlint/v3 v3.0.0/go.mod h1:paGwFySdHIBEMJ61YjoqT4h7Ge+fdYG4sUQhnTb1lJ8= go.etcd.io/bbolt v1.3.7 h1:j+zJOnnEjF/kyHlDDgGnVL/AIqIJPq8UoB2GSNfkUfQ= go.etcd.io/bbolt v1.3.7/go.mod h1:N9Mkw9X8x5fupy0IKsmuqVtoGDyxsaDlbk4Rd05IAQw= go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0= go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y= golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4= golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= golang.org/x/crypto v0.0.0-20201124201722-c8d3bf9c5392/go.mod h1:jdWPYTVW3xRLrWPugEBEK3UY2ZEsg3UU495nc5E+M+I= golang.org/x/crypto v0.0.0-20201208171446-5f87f3452ae9/go.mod h1:jdWPYTVW3xRLrWPugEBEK3UY2ZEsg3UU495nc5E+M+I= golang.org/x/crypto v0.0.0-20210220033148-5ea612d1eb83/go.mod h1:jdWPYTVW3xRLrWPugEBEK3UY2ZEsg3UU495nc5E+M+I= golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= golang.org/x/crypto v0.0.0-20211209193657-4570a0811e8b/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4= golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU= golang.org/x/crypto v0.11.0/go.mod h1:xgJhtzW8F9jGdVFWZESrid1U1bjeNy4zgy5cRr/CIio= golang.org/x/crypto v0.21.0 h1:X31++rzVUdKhX5sWmSOFZxx8UW/ldWx55cbf08iNAMA= golang.org/x/crypto v0.21.0/go.mod h1:0BP7YvVV9gBbVKyeTG0Gyn+gZm94bibOW5BjDEYAOMs= golang.org/x/exp v0.0.0-20231006140011-7918f672742d h1:jtJma62tbqLibJ5sFQz8bKtEM8rJBtfilJ2qTU199MI= golang.org/x/exp v0.0.0-20231006140011-7918f672742d/go.mod h1:ldy0pHrwJyGW56pPQzzkH36rKxoZW1tw7ZJpeKx+hdo= golang.org/x/lint v0.0.0-20200302205851-738671d3881b/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY= golang.org/x/mod v0.1.1-0.20191105210325-c90efee705ee/go.mod h1:QqPTAvyqsEbceGzBzNggFXnrqF1CaUcvgkdR5Ot7KZg= golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4= golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs= golang.org/x/mod v0.14.0 h1:dGoOF9QVLYng8IHTm7BAyWqCqSheQ5pYWGhzW00YJr0= golang.org/x/mod v0.14.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c= golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= golang.org/x/net v0.0.0-20190603091049-60506f45cf65/go.mod h1:HSz+uSET+XFnRR8LxR5pz3Of3rY3CfYBVs4xY44aLks= golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= golang.org/x/net v0.0.0-20201110031124-69a78807bb2b/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU= golang.org/x/net v0.0.0-20201209123823-ac852fbbde11/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg= golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg= golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y= golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c= golang.org/x/net v0.0.0-20221002022538-bcab6841153b/go.mod h1:YDH+HFinaLZZlnHAfSS6ZXJJ9M9t4Dl22yv3iI2vPwk= golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs= golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc= golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg= golang.org/x/net v0.12.0/go.mod h1:zEVYFnQC7m/vmpQFELhcD1EWkZlX69l4oqgmer6hfKA= golang.org/x/net v0.23.0 h1:7EYJ93RZ9vYSZAIb2x3lnuvqO5zneoD6IvWjuhfxjTs= golang.org/x/net v0.23.0/go.mod h1:JKghWKKOSdJwpW2GEx0Ja7fmaKnMsbu+MWVZTokSYmg= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.6.0/go.mod h1:ycmewcwgD4Rpr3eZJLSB4Kyyljb3qDh40vJ8STE5HKw= golang.org/x/oauth2 v0.11.0 h1:vPL4xzxBM4niKCW6g9whtaWVXTJf1U5e4aZxxFx/gbU= golang.org/x/oauth2 v0.11.0/go.mod h1:LdF7O/8bLR/qWK9DrpXmbHLTouvRHK0SgJl0GmDBchk= golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.6.0 h1:5BMeUDZ7vkXGfEr1x9B4bRcTH4lpkTkpdh0T/J+qjbQ= golang.org/x/sync v0.6.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20190916202348-b4ddaad3f8a3/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20201126233918-771906719818/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20201204225414-ed752295db88/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20210228012217-479acdf4ea46/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20211007075335-d3039528d8ac/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.2.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.10.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.11.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.18.0 h1:DBdB3niSjOA/O0blCZBqDefyWNYveAYMNF1Wum0DYQ4= golang.org/x/sys v0.18.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXRh80K7BxOlk5/8JxuGnuhpl+muw= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k= golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U= golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo= golang.org/x/term v0.10.0/go.mod h1:lpqdcUyK/oCiQxvxVrppt5ggO2KCZ5QblwqPnfZ6d5o= golang.org/x/term v0.18.0 h1:FcHjZXDMxI8mM3nwhX9HlKop4C0YQvCVCdwYl2wOtE8= golang.org/x/term v0.18.0/go.mod h1:ILwASektA3OnRv7amZ1xhE/KTR+u50pbXfZ03+6Nx58= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk= golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.4/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8= golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8= golang.org/x/text v0.11.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE= golang.org/x/text v0.14.0 h1:ScX5w1eTa3QqT8oi6+ziP7dTV1S2+ALU0bI+0zXKWiQ= golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU= golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= golang.org/x/tools v0.0.0-20200130002326-2f3ba24bd6e7/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc= golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU= golang.org/x/tools v0.17.0 h1:FvmRgNOcs3kOa+T20R1uhfP9F6HgG2mfxDv1vrx1Htc= golang.org/x/tools v0.17.0/go.mod h1:xsh6VxdV005rRVaS6SSAf9oiAqljS7UZUacMZ8Bnsps= golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM= google.golang.org/appengine v1.6.7 h1:FZR1q0exgwxzPzp/aF+VccGrSfxfPpkBqjIIEq3ru6c= google.golang.org/appengine v1.6.7/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc= google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw= google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc= google.golang.org/protobuf v1.28.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I= google.golang.org/protobuf v1.28.1/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I= google.golang.org/protobuf v1.33.0 h1:uNO2rsAINq/JlFpSdYEKIZ0uKD/R9cpdv0T+yoGwGmI= google.golang.org/protobuf v1.33.0/go.mod h1:c6P6GXX6sHbq/GpV6MGZEdwhWPcYBgnhAHhKbcUYpos= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk= gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q= gopkg.in/djherbis/times.v1 v1.3.0 h1:uxMS4iMtH6Pwsxog094W0FYldiNnfY/xba00vq6C2+o= gopkg.in/djherbis/times.v1 v1.3.0/go.mod h1:AQlg6unIsrsCEdQYhTzERy542dz6SFdQFZFv6mUY0P8= gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMys= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw= gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA= gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= naabu-2.3.1/v2/internal/000077500000000000000000000000001461716101700147525ustar00rootroot00000000000000naabu-2.3.1/v2/internal/testutils/000077500000000000000000000000001461716101700170125ustar00rootroot00000000000000naabu-2.3.1/v2/internal/testutils/integration.go000066400000000000000000000026741461716101700216750ustar00rootroot00000000000000package testutils import ( "fmt" "os" "os/exec" "strings" ) // RunNaabuAndGetResults returns a list of results func RunNaabuAndGetResults(question string, debug bool, extra ...string) ([]string, error) { cmd := exec.Command("bash", "-c") cmdLine := `echo "` + question + `" | ./naabu ` cmdLine += strings.Join(extra, " ") if debug { cmdLine += " -debug" cmd.Stderr = os.Stderr } else { cmdLine += " -silent" } cmd.Args = append(cmd.Args, cmdLine) data, err := cmd.Output() if err != nil { return nil, err } parts := []string{} items := strings.Split(string(data), "\n") for _, i := range items { if i != "" { parts = append(parts, i) } } return parts, nil } func RunNaabuBinaryAndGetResults(target string, naabuBinary string, debug bool, args []string) ([]string, error) { cmd := exec.Command("bash", "-c") cmdLine := fmt.Sprintf(`echo %s | %s `, target, naabuBinary) cmdLine += strings.Join(args, " ") if debug { cmdLine += " -debug" cmd.Stderr = os.Stderr } else { cmdLine += " -silent" } cmd.Args = append(cmd.Args, cmdLine) data, err := cmd.Output() if err != nil { return nil, err } parts := []string{} items := strings.Split(string(data), "\n") for _, i := range items { if i != "" { parts = append(parts, i) } } return parts, nil } // TestCase is a single integration test case type TestCase interface { // Execute executes a test case and returns any errors if occurred Execute() error } naabu-2.3.1/v2/pkg/000077500000000000000000000000001461716101700137175ustar00rootroot00000000000000naabu-2.3.1/v2/pkg/israce/000077500000000000000000000000001461716101700151655ustar00rootroot00000000000000naabu-2.3.1/v2/pkg/israce/norace.go000066400000000000000000000002521461716101700167620ustar00rootroot00000000000000//go:build !race // Package israce reports if the Go race detector is enabled. package israce // Enabled reports if the race detector is enabled. const Enabled = false naabu-2.3.1/v2/pkg/israce/race.go000066400000000000000000000002501461716101700164230ustar00rootroot00000000000000//go:build race // Package israce reports if the Go race detector is enabled. package israce // Enabled reports if the race detector is enabled. const Enabled = true naabu-2.3.1/v2/pkg/port/000077500000000000000000000000001461716101700147035ustar00rootroot00000000000000naabu-2.3.1/v2/pkg/port/port.go000066400000000000000000000005141461716101700162160ustar00rootroot00000000000000package port import ( "fmt" "github.com/projectdiscovery/naabu/v2/pkg/protocol" ) type Port struct { Port int `json:"port"` Protocol protocol.Protocol `json:"protocol"` TLS bool `json:"tls"` } func (p *Port) String() string { return fmt.Sprintf("%d-%d-%v", p.Port, p.Protocol, p.TLS) } naabu-2.3.1/v2/pkg/privileges/000077500000000000000000000000001461716101700160705ustar00rootroot00000000000000naabu-2.3.1/v2/pkg/privileges/privileges.go000066400000000000000000000001321461716101700205640ustar00rootroot00000000000000package privileges var IsPrivileged bool func init() { IsPrivileged = isPrivileged() } naabu-2.3.1/v2/pkg/privileges/privileges_darwin.go000066400000000000000000000003101461716101700221260ustar00rootroot00000000000000//go:build darwin package privileges import ( "os" ) // isPrivileged checks if the current process has the CAP_NET_RAW capability or is root func isPrivileged() bool { return os.Geteuid() == 0 } naabu-2.3.1/v2/pkg/privileges/privileges_freebsd.go000066400000000000000000000002471461716101700222650ustar00rootroot00000000000000//go:build freebsd package privileges import ( "os" ) // isPrivileged checks if the current process is root func isPrivileged() bool { return os.Geteuid() == 0 } naabu-2.3.1/v2/pkg/privileges/privileges_linux.go000066400000000000000000000013661461716101700220150ustar00rootroot00000000000000//go:build linux || unix package privileges import ( "os" "runtime" "github.com/projectdiscovery/naabu/v2/pkg/israce" "golang.org/x/sys/unix" ) // isPrivileged checks if the current process has the CAP_NET_RAW capability or is root func isPrivileged() bool { // runtime.LockOSThread interferes with race detection if !israce.Enabled { header := unix.CapUserHeader{ Version: unix.LINUX_CAPABILITY_VERSION_3, Pid: int32(os.Getpid()), } data := unix.CapUserData{} runtime.LockOSThread() defer runtime.UnlockOSThread() if err := unix.Capget(&header, &data); err == nil { data.Inheritable = (1 << unix.CAP_NET_RAW) if err := unix.Capset(&header, &data); err == nil { return true } } } return os.Geteuid() == 0 } naabu-2.3.1/v2/pkg/privileges/privileges_openbsd.go000066400000000000000000000002471461716101700223050ustar00rootroot00000000000000//go:build openbsd package privileges import ( "os" ) // isPrivileged checks if the current process is root func isPrivileged() bool { return os.Geteuid() == 0 } naabu-2.3.1/v2/pkg/privileges/privileges_win.go000066400000000000000000000002321461716101700214420ustar00rootroot00000000000000//go:build windows package privileges // IsPrivileged on windows doesn't matter as we are using connect scan func isPrivileged() bool { return false } naabu-2.3.1/v2/pkg/protocol/000077500000000000000000000000001461716101700155605ustar00rootroot00000000000000naabu-2.3.1/v2/pkg/protocol/protocol.go000066400000000000000000000005241461716101700177510ustar00rootroot00000000000000package protocol type Protocol int const ( TCP Protocol = iota UDP ARP ) func (p Protocol) String() string { switch p { case TCP: return "tcp" case UDP: return "udp" case ARP: return "arp" default: panic("uknown type") } } func (p Protocol) MarshalJSON() ([]byte, error) { return []byte(`"` + p.String() + `"`), nil } naabu-2.3.1/v2/pkg/result/000077500000000000000000000000001461716101700152355ustar00rootroot00000000000000naabu-2.3.1/v2/pkg/result/results.go000066400000000000000000000060111461716101700172630ustar00rootroot00000000000000package result import ( "sync" "github.com/projectdiscovery/naabu/v2/pkg/port" "golang.org/x/exp/maps" ) type ResultFn func(*HostResult) type HostResult struct { Host string IP string Ports []*port.Port } // Result of the scan type Result struct { sync.RWMutex ipPorts map[string]map[string]*port.Port ips map[string]struct{} skipped map[string]struct{} } // NewResult structure func NewResult() *Result { ipPorts := make(map[string]map[string]*port.Port) ips := make(map[string]struct{}) skipped := make(map[string]struct{}) return &Result{ipPorts: ipPorts, ips: ips, skipped: skipped} } // AddPort to a specific ip func (r *Result) GetIPs() chan string { r.Lock() out := make(chan string) go func() { defer close(out) defer r.Unlock() for ip := range r.ips { out <- ip } }() return out } func (r *Result) HasIPS() bool { r.RLock() defer r.RUnlock() return len(r.ips) > 0 } // GetIpsPorts returns the ips and ports func (r *Result) GetIPsPorts() chan *HostResult { r.RLock() out := make(chan *HostResult) go func() { defer close(out) defer r.RUnlock() for ip, ports := range r.ipPorts { if r.HasSkipped(ip) { continue } out <- &HostResult{IP: ip, Ports: maps.Values(ports)} } }() return out } func (r *Result) HasIPsPorts() bool { r.RLock() defer r.RUnlock() return len(r.ipPorts) > 0 } // AddPort to a specific ip func (r *Result) AddPort(ip string, p *port.Port) { r.Lock() defer r.Unlock() if _, ok := r.ipPorts[ip]; !ok { r.ipPorts[ip] = make(map[string]*port.Port) } r.ipPorts[ip][p.String()] = p r.ips[ip] = struct{}{} } // SetPorts for a specific ip func (r *Result) SetPorts(ip string, ports []*port.Port) { r.Lock() defer r.Unlock() if _, ok := r.ipPorts[ip]; !ok { r.ipPorts[ip] = make(map[string]*port.Port) } for _, p := range ports { r.ipPorts[ip][p.String()] = p } r.ips[ip] = struct{}{} } // IPHasPort checks if an ip has a specific port func (r *Result) IPHasPort(ip string, p *port.Port) bool { r.RLock() defer r.RUnlock() ipPorts, hasports := r.ipPorts[ip] if !hasports { return false } _, hasport := ipPorts[p.String()] return hasport } // AddIp adds an ip to the results func (r *Result) AddIp(ip string) { r.Lock() defer r.Unlock() r.ips[ip] = struct{}{} } // HasIP checks if an ip has been seen func (r *Result) HasIP(ip string) bool { r.RLock() defer r.RUnlock() _, ok := r.ips[ip] return ok } func (r *Result) IsEmpty() bool { return r.Len() == 0 } func (r *Result) Len() int { r.RLock() defer r.RUnlock() return len(r.ips) } // GetPortCount returns the number of ports discovered for an ip func (r *Result) GetPortCount(host string) int { r.RLock() defer r.RUnlock() return len(r.ipPorts[host]) } // AddSkipped adds an ip to the skipped list func (r *Result) AddSkipped(ip string) { r.Lock() defer r.Unlock() r.skipped[ip] = struct{}{} } // HasSkipped checks if an ip has been skipped func (r *Result) HasSkipped(ip string) bool { r.RLock() defer r.RUnlock() _, ok := r.skipped[ip] return ok } naabu-2.3.1/v2/pkg/result/results_test.go000066400000000000000000000036271461716101700203340ustar00rootroot00000000000000package result import ( "testing" "github.com/projectdiscovery/naabu/v2/pkg/port" "github.com/projectdiscovery/naabu/v2/pkg/protocol" "github.com/stretchr/testify/assert" ) func TestAddPort(t *testing.T) { targetIP := "127.0.0.1" targetPort := &port.Port{Port: 8080, Protocol: protocol.TCP} targetPorts := map[string]*port.Port{targetPort.String(): targetPort} res := NewResult() res.AddPort(targetIP, targetPort) expectedIPS := map[string]struct{}{targetIP: {}} assert.Equal(t, expectedIPS, res.ips) expectedIPSPorts := map[string]map[string]*port.Port{targetIP: targetPorts} assert.Equal(t, res.ipPorts, expectedIPSPorts) } func TestSetPorts(t *testing.T) { targetIP := "127.0.0.1" port80 := &port.Port{Port: 80, Protocol: protocol.TCP} port443 := &port.Port{Port: 443, Protocol: protocol.TCP} targetPorts := map[string]*port.Port{ port80.String(): port80, port443.String(): port443, } res := NewResult() res.SetPorts(targetIP, []*port.Port{port80, port443}) expectedIPS := map[string]struct{}{targetIP: {}} assert.Equal(t, res.ips, expectedIPS) expectedIPSPorts := map[string]map[string]*port.Port{targetIP: targetPorts} assert.Equal(t, res.ipPorts, expectedIPSPorts) } func TestIPHasPort(t *testing.T) { targetIP := "127.0.0.1" expectedPort := &port.Port{Port: 8080, Protocol: protocol.TCP} unexpectedPort := &port.Port{Port: 8081, Protocol: protocol.TCP} res := NewResult() res.AddPort(targetIP, expectedPort) assert.True(t, res.IPHasPort(targetIP, expectedPort)) assert.False(t, res.IPHasPort(targetIP, unexpectedPort)) } func TestAddIP(t *testing.T) { targetIP := "127.0.0.1" res := NewResult() res.AddIp(targetIP) expectedIPS := map[string]struct{}{targetIP: {}} assert.Equal(t, res.ips, expectedIPS) } func TestHasIP(t *testing.T) { targetIP := "127.0.0.1" res := NewResult() res.AddIp(targetIP) assert.True(t, res.HasIP(targetIP)) assert.False(t, res.HasIP("1.2.3.4")) } naabu-2.3.1/v2/pkg/routing/000077500000000000000000000000001461716101700154065ustar00rootroot00000000000000naabu-2.3.1/v2/pkg/routing/gateway_ip.go000066400000000000000000000013051461716101700200650ustar00rootroot00000000000000package routing import ( "context" "errors" "net" "os/exec" "strings" "time" ) var ( GatewayMac = make(map[string]net.HardwareAddr) ) func GetGatewayMac(gateway string) (net.HardwareAddr, error) { if IP, ok := GatewayMac[gateway]; ok { return IP, nil } ctx, cancel := context.WithTimeout(context.Background(), 3*time.Second) defer cancel() cmd := exec.CommandContext(ctx, "arp", "-n", gateway) output, err := cmd.CombinedOutput() if err != nil { return nil, err } for _, part := range strings.Fields(string(output)) { mc, err := net.ParseMAC(part) if err != nil { continue } GatewayMac[gateway] = mc return mc, nil } return nil, errors.New("gateway mac not found") } naabu-2.3.1/v2/pkg/routing/router.go000066400000000000000000000122121461716101700172530ustar00rootroot00000000000000package routing import ( "bytes" "fmt" "net" "strings" "github.com/pkg/errors" iputil "github.com/projectdiscovery/utils/ip" ) type RouteType string const ( IPv4 RouteType = "IPv4" IPv6 RouteType = "IPv6" ) func (routeType RouteType) String() string { return strings.ToLower(string(routeType)) } type Route struct { Type RouteType Default bool NetworkInterface *net.Interface Destination string Gateway string Flags string Expire string DefaultSourceIP net.IP } // Router shares the same interface described in https://github.com/google/gopacket type Router interface { // Route returns where to route a packet based on the packet's source // and destination IP address. // // Callers may pass in nil for src, in which case the src is treated as // either 0.0.0.0 or ::, depending on whether dst is a v4 or v6 address. // // It returns the interface on which to send the packet, the gateway IP // to send the packet to (if necessary), the preferred src IP to use (if // available). If the preferred src address is not given in the routing // table, the first IP address of the interface is provided. // // If an error is encountered, iface, geteway, and // preferredSrc will be nil, and err will be set. Route(dst net.IP) (iface *net.Interface, gateway, preferredSrc net.IP, err error) // RouteWithSrc routes based on source information as well as destination // information. Either or both of input/src can be nil. If both are, this // should behave exactly like Route(dst) RouteWithSrc(input net.HardwareAddr, src, dst net.IP) (iface *net.Interface, gateway, preferredSrc net.IP, err error) } func FindRouteForIp(ip net.IP, routes []*Route) (*Route, error) { var defaultRoute4, defaultRoute6 *Route // first we need to find the interface associated to the destination for _, route := range routes { if defaultRoute4 == nil && route.Default && route.Type == IPv4 { defaultRoute4 = route } if defaultRoute6 == nil && route.Default && route.Type == IPv6 { defaultRoute6 = route } // the destination can be an ip or cidr if itfDestIP := net.ParseIP(route.Destination); itfDestIP != nil { // if it's an ip compare it with our dest if itfDestIP.Equal(ip) { return route, nil } } // if it's a cidr, verify that the destination ip is contained if _, itfDrstCidr, err := net.ParseCIDR(route.Destination); err == nil { if itfDrstCidr.Contains(ip) { return route, nil } } } switch { case iputil.IsIPv4(ip) && defaultRoute4 != nil: return defaultRoute4, nil case iputil.IsIPv6(ip) && defaultRoute6 != nil: return defaultRoute6, nil } return nil, fmt.Errorf("route not found for %s", ip) } func FindSourceIpForIp(route *Route, ip net.IP) (net.IP, error) { addresses, err := route.NetworkInterface.Addrs() if err != nil { return nil, err } for _, address := range addresses { ipNet, ok := address.(*net.IPNet) if !ok || ipNet == nil { continue } ipAddress := ipNet.IP switch { case iputil.IsIPv4(ip, ipAddress): return ipAddress, nil case iputil.IsIPv6(ip, ipAddress) && !ipAddress.IsLinkLocalUnicast(): // link local unicast are not routeable return ipAddress, nil } } return nil, fmt.Errorf("could not find source ip for target \"%s\" with interface %s", ip, route.NetworkInterface.Name) } func GetOutboundIPs() (net.IP, net.IP, error) { // collect default outbound ipv4 and ipv6 srcIPv4, err := iputil.GetSourceIP("128.199.158.128") // scanme.sh if err != nil { return nil, nil, errors.Wrap(err, "couldn't determine ipv4 routing interface") } // ignores errors on ipv6 routing srcIPv6, err := iputil.GetSourceIP("2400:6180:0:d0::91:1001") // scanme.sh if err != nil { return srcIPv4, nil, errors.Wrap(err, "couldn't determine ipv6 routing interface") } return srcIPv4, srcIPv6, nil } func FindRouteWithHwAndIp(hardwareAddr net.HardwareAddr, src net.IP, routes []*Route) (*Route, error) { for _, route := range routes { if bytes.EqualFold(route.NetworkInterface.HardwareAddr, hardwareAddr) { if src != nil { addresses, err := route.NetworkInterface.Addrs() if err != nil { return nil, err } for _, address := range addresses { if addressIP, ok := address.(*net.IPNet); ok { if addressIP.IP.Equal(src) { return route, nil } } } } else { return route, nil } } } return nil, errors.New("route not found") } func FindInterfaceByIp(ip net.IP) (*net.Interface, error) { interfaces, err := net.Interfaces() if err != nil { return nil, err } for _, itf := range interfaces { addresses, err := itf.Addrs() if err != nil { return nil, err } for _, address := range addresses { ipNet, ok := address.(*net.IPNet) if !ok || ipNet == nil { continue } ipAddress := ipNet.IP // check if they are equal areEqual := ipAddress.Equal(ip) if !areEqual { continue } // double check if they belongs to the same family as go standard library is faulty switch { case iputil.IsIPv4(ip, ipAddress): return &itf, nil case iputil.IsIPv6(ip, ipAddress): return &itf, nil } } } return nil, errors.New("interface not found") } naabu-2.3.1/v2/pkg/routing/router_darwin.go000066400000000000000000000077311461716101700206310ustar00rootroot00000000000000//go:build darwin package routing import ( "bufio" "bytes" "fmt" "net" "os/exec" "strings" "github.com/pkg/errors" "github.com/projectdiscovery/gologger" sliceutil "github.com/projectdiscovery/utils/slice" stringsutil "github.com/projectdiscovery/utils/strings" "go.uber.org/multierr" ) // New creates a routing engine for Darwin func New() (Router, error) { var routes []*Route netstatCmd := exec.Command("netstat", "-nr") netstatOutput, err := netstatCmd.Output() if err != nil { var route4, route6 *Route // create default routes with outgoing ips ip4, ip6, errOutboundIps := GetOutboundIPs() if ip4 != nil { interface4, err := FindInterfaceByIp(ip4) if err != nil { return nil, err } route4 = &Route{ Type: IPv4, Default: true, DefaultSourceIP: ip4, NetworkInterface: interface4, } routes = append(routes, route4) } // try to find outbound route for ipv6 if ip6 != nil { interface6, _ := FindInterfaceByIp(ip6) route6 = &Route{ Type: IPv6, Default: true, DefaultSourceIP: ip6, NetworkInterface: interface6, } routes = append(routes, route6) } else { // if we fail, use the same network interface for ipv4 route6 = &Route{ Type: IPv6, Default: true, NetworkInterface: route4.NetworkInterface, } routes = append(routes, route6) } if len(routes) > 0 { return &RouterDarwin{Routes: routes}, nil } return nil, multierr.Combine(err, errOutboundIps) } var lastType RouteType scanner := bufio.NewScanner(bytes.NewReader(netstatOutput)) for scanner.Scan() { outputLine := strings.TrimSpace(scanner.Text()) if outputLine == "" { continue } parts := stringsutil.SplitAny(outputLine, " \t") if len(parts) >= 4 && !sliceutil.Contains(parts, "Destination") { expire := "-1" if len(parts) > 4 { expire = parts[4] } route := &Route{ Default: stringsutil.EqualFoldAny(parts[0], "default"), Destination: parts[0], Gateway: parts[1], Flags: parts[2], Expire: expire, } if networkInterface, err := net.InterfaceByName(parts[3]); err == nil { route.NetworkInterface = networkInterface } hasDots := stringsutil.ContainsAny(route.Destination, ".") || stringsutil.ContainsAny(route.Gateway, ".") hasSemicolon := stringsutil.ContainsAny(route.Destination, ":") || stringsutil.ContainsAny(route.Gateway, ":") switch { case hasDots: route.Type = IPv4 case hasSemicolon: route.Type = IPv6 default: // use last route type and print a warning if lastType != "" { gologger.Debug().Msgf("using '%s' for unknown route type: '%s'\n", lastType, outputLine) route.Type = lastType } else { // we can't determine the route type return nil, fmt.Errorf("could not determine route type for: '%s'", outputLine) } } lastType = route.Type routes = append(routes, route) } } return &RouterDarwin{Routes: routes}, err } type RouterDarwin struct { Routes []*Route } func (r *RouterDarwin) Route(dst net.IP) (iface *net.Interface, gateway, preferredSrc net.IP, err error) { route, err := FindRouteForIp(dst, r.Routes) if err != nil { return nil, nil, nil, errors.Wrap(err, "could not find route") } if route.DefaultSourceIP != nil { return nil, nil, route.DefaultSourceIP, nil } if route.NetworkInterface == nil { return nil, nil, nil, errors.Wrap(err, "could not find network interface") } ip, err := FindSourceIpForIp(route, dst) if err != nil { return nil, nil, nil, errors.Wrap(err, "could not find source ip") } return route.NetworkInterface, net.ParseIP(route.Gateway), ip, nil } func (r *RouterDarwin) RouteWithSrc(input net.HardwareAddr, src, dst net.IP) (iface *net.Interface, gateway, preferredSrc net.IP, err error) { route, err := FindRouteWithHwAndIp(input, src, r.Routes) if err != nil { return nil, nil, nil, err } return route.NetworkInterface, net.ParseIP(route.Gateway), src, nil } naabu-2.3.1/v2/pkg/routing/router_linux.go000066400000000000000000000145721461716101700205050ustar00rootroot00000000000000//go:build linux // Copyright 2012 Google, Inc. All rights reserved. // // Use of this source code is governed by a BSD-style license // that can be found in the LICENSE file in the root of the source // tree. // Package routing provides a very basic but mostly functional implementation of // a routing table for IPv4/IPv6 addresses. It uses a routing table pulled from // the kernel via netlink to find the correct interface, gateway, and preferred // source IP address for packets destined to a particular location. // // The routing package is meant to be used with applications that are sending // raw packet data, which don't have the benefit of having the kernel route // packets for them. package routing import ( "bytes" "errors" "fmt" "net" "sort" "strings" "syscall" "unsafe" ) // Pulled from http://man7.org/linux/man-pages/man7/rtnetlink.7.html // See the section on RTM_NEWROUTE, specifically 'struct rtmsg'. type routeInfoInMemory struct { Family byte DstLen byte SrcLen byte TOS byte Table byte Protocol byte Scope byte Type byte Flags uint32 } // rtInfo contains information on a single route. type rtInfo struct { Src, Dst *net.IPNet Gateway, PrefSrc net.IP // We currently ignore the InputIface. InputIface, OutputIface uint32 Priority uint32 } // routeSlice implements sort.Interface to sort routes by Priority. type routeSlice []*rtInfo func (r routeSlice) Len() int { return len(r) } func (r routeSlice) Less(i, j int) bool { return r[i].Priority < r[j].Priority } func (r routeSlice) Swap(i, j int) { r[i], r[j] = r[j], r[i] } type router struct { ifaces map[int]*net.Interface addrs map[int]ipAddrs v4, v6 routeSlice } func (r *router) String() string { strs := []string{"ROUTER", "--- V4 ---"} for _, route := range r.v4 { strs = append(strs, fmt.Sprintf("%+v", *route)) } strs = append(strs, "--- V6 ---") for _, route := range r.v6 { strs = append(strs, fmt.Sprintf("%+v", *route)) } return strings.Join(strs, "\n") } type ipAddrs struct { v4, v6 net.IP } func (r *router) Route(dst net.IP) (iface *net.Interface, gateway, preferredSrc net.IP, err error) { return r.RouteWithSrc(nil, nil, dst) } func (r *router) RouteWithSrc(input net.HardwareAddr, src, dst net.IP) (iface *net.Interface, gateway, preferredSrc net.IP, err error) { var ifaceIndex int switch { case dst.To4() != nil: ifaceIndex, gateway, preferredSrc, err = r.route(r.v4, input, src, dst) case dst.To16() != nil: ifaceIndex, gateway, preferredSrc, err = r.route(r.v6, input, src, dst) default: err = errors.New("IP is not valid as IPv4 or IPv6") } if err != nil { return } iface = r.ifaces[ifaceIndex] if preferredSrc == nil { switch { case dst.To4() != nil: preferredSrc = r.addrs[ifaceIndex].v4 case dst.To16() != nil: preferredSrc = r.addrs[ifaceIndex].v6 } } return } func (r *router) route(routes routeSlice, input net.HardwareAddr, src, dst net.IP) (iface int, gateway, preferredSrc net.IP, err error) { var inputIndex uint32 if input != nil { for i, iface := range r.ifaces { if bytes.Equal(input, iface.HardwareAddr) { inputIndex = uint32(i) break } } } var defaultGateway *rtInfo = nil for _, rt := range routes { if rt.InputIface != 0 && rt.InputIface != inputIndex { continue } if rt.Src == nil && rt.Dst == nil { defaultGateway = rt continue } if rt.Src != nil && !rt.Src.Contains(src) { continue } if rt.Dst != nil && !rt.Dst.Contains(dst) { continue } return int(rt.OutputIface), rt.Gateway, rt.PrefSrc, nil } if defaultGateway != nil { return int(defaultGateway.OutputIface), defaultGateway.Gateway, defaultGateway.PrefSrc, nil } err = fmt.Errorf("no route found for %v", dst) return } // New creates a new router object. The router returned by New currently does // not update its routes after construction... care should be taken for // long-running programs to call New() regularly to take into account any // changes to the routing table which have occurred since the last New() call. func New() (Router, error) { rtr := &router{ ifaces: make(map[int]*net.Interface), addrs: make(map[int]ipAddrs), } tab, err := syscall.NetlinkRIB(syscall.RTM_GETROUTE, syscall.AF_UNSPEC) if err != nil { return nil, err } msgs, err := syscall.ParseNetlinkMessage(tab) if err != nil { return nil, err } loop: for _, m := range msgs { switch m.Header.Type { case syscall.NLMSG_DONE: break loop case syscall.RTM_NEWROUTE: rt := (*routeInfoInMemory)(unsafe.Pointer(&m.Data[0])) routeInfo := rtInfo{} attrs, err := syscall.ParseNetlinkRouteAttr(&m) if err != nil { return nil, err } switch rt.Family { case syscall.AF_INET: rtr.v4 = append(rtr.v4, &routeInfo) case syscall.AF_INET6: rtr.v6 = append(rtr.v6, &routeInfo) default: continue loop } for _, attr := range attrs { switch attr.Attr.Type { case syscall.RTA_DST: routeInfo.Dst = &net.IPNet{ IP: net.IP(attr.Value), Mask: net.CIDRMask(int(rt.DstLen), len(attr.Value)*8), } case syscall.RTA_SRC: routeInfo.Src = &net.IPNet{ IP: net.IP(attr.Value), Mask: net.CIDRMask(int(rt.SrcLen), len(attr.Value)*8), } case syscall.RTA_GATEWAY: routeInfo.Gateway = net.IP(attr.Value) case syscall.RTA_PREFSRC: routeInfo.PrefSrc = net.IP(attr.Value) case syscall.RTA_IIF: routeInfo.InputIface = *(*uint32)(unsafe.Pointer(&attr.Value[0])) case syscall.RTA_OIF: routeInfo.OutputIface = *(*uint32)(unsafe.Pointer(&attr.Value[0])) case syscall.RTA_PRIORITY: routeInfo.Priority = *(*uint32)(unsafe.Pointer(&attr.Value[0])) } } } } sort.Sort(rtr.v4) sort.Sort(rtr.v6) ifaces, err := net.Interfaces() if err != nil { return nil, err } for _, tmp := range ifaces { iface := tmp rtr.ifaces[iface.Index] = &iface var addrs ipAddrs ifaceAddrs, err := iface.Addrs() if err != nil { return nil, err } for _, addr := range ifaceAddrs { if inet, ok := addr.(*net.IPNet); ok { // Go has a nasty habit of giving you IPv4s as ::ffff:1.2.3.4 instead of 1.2.3.4. // We want to use mapped v4 addresses as v4 preferred addresses, never as v6 // preferred addresses. if v4 := inet.IP.To4(); v4 != nil { if addrs.v4 == nil { addrs.v4 = v4 } } else if addrs.v6 == nil { addrs.v6 = inet.IP } } } rtr.addrs[iface.Index] = addrs } return rtr, nil } naabu-2.3.1/v2/pkg/routing/router_windows.go000066400000000000000000000046241461716101700210350ustar00rootroot00000000000000//go:build windows package routing import ( "bufio" "bytes" "net" "os/exec" "strconv" "strings" "github.com/asaskevich/govalidator" "github.com/pkg/errors" stringsutil "github.com/projectdiscovery/utils/strings" ) // New creates a routing engine for windows func New() (Router, error) { var routes []*Route for _, iptype := range []RouteType{IPv4, IPv6} { netshCmd := exec.Command("netsh", "interface", iptype.String(), "show", "route") netshOutput, err := netshCmd.Output() if err != nil { return nil, err } scanner := bufio.NewScanner(bytes.NewReader(netshOutput)) for scanner.Scan() { outputLine := strings.TrimSpace(scanner.Text()) if outputLine == "" { continue } parts := stringsutil.SplitAny(outputLine, " \t") if len(parts) >= 6 && govalidator.IsNumeric(parts[4]) { prefix := parts[3] _, _, err := net.ParseCIDR(prefix) if err != nil { return nil, err } gateway := parts[5] interfaceIndex, err := strconv.Atoi(parts[4]) if err != nil { return nil, err } networkInterface, err := net.InterfaceByIndex(interfaceIndex) if err != nil { return nil, err } isDefault := stringsutil.EqualFoldAny(prefix, "0.0.0.0/0", "::/0") route := &Route{ Type: iptype, Default: isDefault, Destination: prefix, Gateway: gateway, NetworkInterface: networkInterface, } routes = append(routes, route) } } } return &RouterWindows{Routes: routes}, nil } type RouterWindows struct { Routes []*Route } func (r *RouterWindows) Route(dst net.IP) (iface *net.Interface, gateway, preferredSrc net.IP, err error) { route, err := FindRouteForIp(dst, r.Routes) if err != nil { return nil, nil, nil, errors.Wrap(err, "could not find route") } if route.NetworkInterface == nil { return nil, nil, nil, errors.Wrap(err, "could not find network interface") } ip, err := FindSourceIpForIp(route, dst) if err != nil { return nil, nil, nil, errors.Wrap(err, "could not find source ip") } return route.NetworkInterface, net.IP(route.Gateway), ip, nil } func (r *RouterWindows) RouteWithSrc(input net.HardwareAddr, src, dst net.IP) (iface *net.Interface, gateway, preferredSrc net.IP, err error) { route, err := FindRouteWithHwAndIp(input, src, r.Routes) if err != nil { return nil, nil, nil, err } return route.NetworkInterface, net.IP(route.Gateway), src, nil } naabu-2.3.1/v2/pkg/runner/000077500000000000000000000000001461716101700152305ustar00rootroot00000000000000naabu-2.3.1/v2/pkg/runner/banners.go000066400000000000000000000050201461716101700172040ustar00rootroot00000000000000package runner import ( "net" "strings" "github.com/projectdiscovery/gologger" "github.com/projectdiscovery/naabu/v2/pkg/privileges" "github.com/projectdiscovery/naabu/v2/pkg/scan" osutil "github.com/projectdiscovery/utils/os" updateutils "github.com/projectdiscovery/utils/update" ) const banner = ` __ ___ ___ ___ _/ / __ __ / _ \/ _ \/ _ \/ _ \/ // / /_//_/\_,_/\_,_/_.__/\_,_/ ` // Version is the current version of naabu const version = `2.3.1` // showBanner is used to show the banner to the user func showBanner() { gologger.Print().Msgf("%s\n", banner) gologger.Print().Msgf("\t\tprojectdiscovery.io\n\n") } // showNetworkCapabilities shows the network capabilities/scan types possible with the running user func showNetworkCapabilities(options *Options) { var accessLevel, scanType string switch { case privileges.IsPrivileged && options.ScanType == SynScan: accessLevel = "root" if osutil.IsLinux() { accessLevel = "CAP_NET_RAW" } scanType = "SYN" case options.Passive: accessLevel = "non root" scanType = "PASSIVE" default: accessLevel = "non root" scanType = "CONNECT" } switch { case options.OnlyHostDiscovery: scanType = "Host Discovery" gologger.Info().Msgf("Running %s\n", scanType) case options.Passive: scanType = "PASSIVE" gologger.Info().Msgf("Running %s scan\n", scanType) default: gologger.Info().Msgf("Running %s scan with %s privileges\n", scanType, accessLevel) } } func showHostDiscoveryInfo() { gologger.Info().Msgf("Running host discovery scan\n") } func showNetworkInterfaces() error { // Interfaces List interfaces, err := net.Interfaces() if err != nil { return err } for _, itf := range interfaces { addresses, addErr := itf.Addrs() if addErr != nil { gologger.Warning().Msgf("Could not retrieve addresses for %s: %s\n", itf.Name, addErr) continue } var addrstr []string for _, address := range addresses { addrstr = append(addrstr, address.String()) } gologger.Info().Msgf("Interface %s:\nMAC: %s\nAddresses: %s\nMTU: %d\nFlags: %s\n", itf.Name, itf.HardwareAddr, strings.Join(addrstr, " "), itf.MTU, itf.Flags.String()) } // External ip externalIP, err := scan.WhatsMyIP() if err != nil { gologger.Warning().Msgf("Could not obtain public ip: %s\n", err) } gologger.Info().Msgf("External Ip: %s\n", externalIP) return nil } // GetUpdateCallback returns a callback function that updates naabu func GetUpdateCallback() func() { return func() { showBanner() updateutils.GetUpdateToolCallback("naabu", version)() } }naabu-2.3.1/v2/pkg/runner/banners_test.go000066400000000000000000000003341461716101700202460ustar00rootroot00000000000000package runner import ( "testing" "github.com/stretchr/testify/assert" ) func TestShowNetworkInterfaces(t *testing.T) { // non root users should be able to list interfaces assert.Nil(t, showNetworkInterfaces()) } naabu-2.3.1/v2/pkg/runner/default.go000066400000000000000000000004641461716101700172070ustar00rootroot00000000000000package runner const ( DefaultPortTimeoutSynScan = 1000 DefaultPortTimeoutConnectScan = 5000 DefaultRateSynScan = 1000 DefaultRateConnectScan = 1500 DefaultRetriesSynScan = 3 DefaultRetriesConnectScan = 3 SynScan = "s" ConnectScan = "c" DefautStatsInterval = 5 ) naabu-2.3.1/v2/pkg/runner/healthcheck.go000066400000000000000000000047141461716101700200300ustar00rootroot00000000000000package runner import ( "fmt" "net" "runtime" "strings" "github.com/projectdiscovery/goflags" "github.com/projectdiscovery/naabu/v2/pkg/privileges" fileutil "github.com/projectdiscovery/utils/file" ) func DoHealthCheck(options *Options, flagSet *goflags.FlagSet) string { // RW permissions on config file cfgFilePath, _ := flagSet.GetConfigFilePath() var test strings.Builder test.WriteString(fmt.Sprintf("Version: %s\n", version)) test.WriteString(fmt.Sprintf("Operative System: %s\n", runtime.GOOS)) test.WriteString(fmt.Sprintf("Architecture: %s\n", runtime.GOARCH)) test.WriteString(fmt.Sprintf("Go Version: %s\n", runtime.Version())) test.WriteString(fmt.Sprintf("Compiler: %s\n", runtime.Compiler)) var testResult string if privileges.IsPrivileged { testResult = "Ok" } else { testResult = "Ko" } test.WriteString(fmt.Sprintf("Privileged/NET_RAW: %s\n", testResult)) ok, err := fileutil.IsReadable(cfgFilePath) if ok { testResult = "Ok" } else { testResult = "Ko" } if err != nil { testResult += fmt.Sprintf(" (%s)", err) } test.WriteString(fmt.Sprintf("Config file \"%s\" Read => %s\n", cfgFilePath, testResult)) ok, err = fileutil.IsWriteable(cfgFilePath) if ok { testResult = "Ok" } else { testResult = "Ko" } if err != nil { testResult += fmt.Sprintf(" (%s)", err) } test.WriteString(fmt.Sprintf("Config file \"%s\" Write => %s\n", cfgFilePath, testResult)) c4, err := net.Dial("tcp4", "scanme.sh:80") if err == nil && c4 != nil { c4.Close() } testResult = "Ok" if err != nil { testResult = fmt.Sprintf("Ko (%s)", err) } test.WriteString(fmt.Sprintf("TCP IPv4 connectivity to scanme.sh:80 => %s\n", testResult)) c6, err := net.Dial("tcp6", "scanme.sh:80") if err == nil && c6 != nil { c6.Close() } testResult = "Ok" if err != nil { testResult = fmt.Sprintf("Ko (%s)", err) } test.WriteString(fmt.Sprintf("TCP IPv6 connectivity to scanme.sh:80 => %s\n", testResult)) u4, err := net.Dial("udp4", "scanme.sh:53") if err == nil && c4 != nil { u4.Close() } testResult = "Ok" if err != nil { testResult = fmt.Sprintf("Ko (%s)", err) } test.WriteString(fmt.Sprintf("UDP IPv4 connectivity to scanme.sh:80 => %s\n", testResult)) u6, err := net.Dial("udp6", "scanme.sh:80") if err == nil && c6 != nil { u6.Close() } testResult = "Ok" if err != nil { testResult = fmt.Sprintf("Ko (%s)", err) } test.WriteString(fmt.Sprintf("UDP IPv6 connectivity to scanme.sh:80 => %s\n", testResult)) return test.String() } naabu-2.3.1/v2/pkg/runner/ips.go000066400000000000000000000021161461716101700163520ustar00rootroot00000000000000package runner import ( "strings" fileutil "github.com/projectdiscovery/utils/file" iputil "github.com/projectdiscovery/utils/ip" ) func (r *Runner) parseExcludedIps(options *Options) ([]string, error) { var excludedIps []string if options.ExcludeIps != "" { for _, host := range strings.Split(options.ExcludeIps, ",") { ips, err := r.getExcludeItems(host) if err != nil { return nil, err } excludedIps = append(excludedIps, ips...) } } if options.ExcludeIpsFile != "" { cdata, err := fileutil.ReadFile(options.ExcludeIpsFile) if err != nil { return excludedIps, err } for host := range cdata { ips, err := r.getExcludeItems(host) if err != nil { return nil, err } excludedIps = append(excludedIps, ips...) } } return excludedIps, nil } func (r *Runner) getExcludeItems(s string) ([]string, error) { if isIpOrCidr(s) { return []string{s}, nil } ips4, ips6, err := r.host2ips(s) if err != nil { return nil, err } return append(ips4, ips6...), nil } func isIpOrCidr(s string) bool { return iputil.IsIP(s) || iputil.IsCIDR(s) } naabu-2.3.1/v2/pkg/runner/ips_test.go000066400000000000000000000021651461716101700174150ustar00rootroot00000000000000package runner import ( "os" "strings" "testing" fileutil "github.com/projectdiscovery/utils/file" "github.com/stretchr/testify/require" ) func TestParseExcludedIps(t *testing.T) { tmpFileName, err := fileutil.GetTempFileName() require.Nil(t, err) expectedIpsFromCLI := []string{"8.8.8.0/24", "7.7.7.7"} expectedIpsFromFile := []string{"10.10.10.0/24", "192.168.1.0/24"} require.Nil(t, os.WriteFile(tmpFileName, []byte(strings.Join(expectedIpsFromFile, "\n")), 0755)) expected := append(expectedIpsFromCLI, expectedIpsFromFile...) r, err := NewRunner(&Options{}) require.Nil(t, err) actual, err := r.parseExcludedIps(&Options{ ExcludeIps: strings.Join(expectedIpsFromCLI, ","), ExcludeIpsFile: tmpFileName, }) require.Nil(t, err) require.Equal(t, expected, actual) defer os.RemoveAll(tmpFileName) } func TestIsIpOrCidr(t *testing.T) { valid := []string{"1.1.1.1", "2.2.2.2", "1.1.1.0/24"} invalid := []string{"1.1.1.1.1", "a.a.a.a", "77"} for _, validItem := range valid { require.True(t, isIpOrCidr(validItem)) } for _, invalidItem := range invalid { require.False(t, isIpOrCidr(invalidItem)) } } naabu-2.3.1/v2/pkg/runner/nmap.go000066400000000000000000000066321461716101700165210ustar00rootroot00000000000000package runner import ( "fmt" "os" "os/exec" "sort" "strings" "github.com/pkg/errors" "github.com/projectdiscovery/gologger" "github.com/projectdiscovery/naabu/v2/pkg/result" osutil "github.com/projectdiscovery/utils/os" ) func (r *Runner) handleNmap() error { // command from CLI command := r.options.NmapCLI hasCLI := r.options.NmapCLI != "" if hasCLI { var ipsPorts []*result.HostResult // build a list of all targets for hostResult := range r.scanner.ScanResults.GetIPsPorts() { ipsPorts = append(ipsPorts, hostResult) } // sort by number of ports sort.Slice(ipsPorts, func(i, j int) bool { return len(ipsPorts[i].Ports) < len(ipsPorts[j].Ports) }) // suggests commands grouping ips in pseudo-exp ranges // 0 - 100 ports // 100 - 1000 ports // 1000 - 10000 ports // 10000 - 60000 ports ranges := make(map[int][]*result.HostResult) // for better readability // collect the indexes corresponding to ranges changes for _, ipPorts := range ipsPorts { length := len(ipPorts.Ports) var index int switch { case length > 100 && length < 1000: index = 1 case length >= 1000 && length < 10000: index = 2 case length >= 10000: index = 3 default: index = 0 } ranges[index] = append(ranges[index], ipPorts) } for _, rang := range ranges { args := strings.Split(command, " ") var ( ips []string ports []string ) allports := make(map[int]struct{}) for _, ipPorts := range rang { ips = append(ips, ipPorts.IP) for _, pp := range ipPorts.Ports { allports[pp.Port] = struct{}{} } } for p := range allports { ports = append(ports, fmt.Sprint(p)) } // if we have no open ports we avoid running nmap if len(ports) == 0 { continue } portsStr := strings.Join(ports, ",") ipsStr := strings.Join(ips, " ") args = append(args, "-p", portsStr) args = append(args, ips...) // if the command is not executable, we just suggest it commandCanBeExecuted := isCommandExecutable(args) // if requested via config file or via cli if (r.options.Nmap || hasCLI) && commandCanBeExecuted { gologger.Info().Msgf("Running nmap command: %s -p %s %s", command, portsStr, ipsStr) // check when user type '-nmap-cli "nmap -sV"' // automatically remove nmap posArgs := 0 // nmapCommand helps to check if user is on a Windows machine nmapCommand := "nmap" if args[0] == "nmap" || args[0] == "nmap.exe" { posArgs = 1 } // if it's windows search for the executable if osutil.IsWindows() { nmapCommand = "nmap.exe" } cmd := exec.Command(nmapCommand, args[posArgs:]...) cmd.Stdout = os.Stdout err := cmd.Run() if err != nil { errMsg := errors.Wrap(err, "Could not run nmap command") gologger.Error().Msgf(errMsg.Error()) return errMsg } } else { gologger.Info().Msgf("Suggested nmap command: %s -p %s %s", command, portsStr, ipsStr) } } } return nil } func isCommandExecutable(args []string) bool { commandLength := calculateCmdLength(args) if osutil.IsWindows() { // windows has a hard limit of // - 2048 characters in XP // - 32768 characters in Win7 return commandLength < 2048 } // linux and darwin return true } func calculateCmdLength(args []string) int { var commandLength int for _, arg := range args { commandLength += len(arg) commandLength += 1 // space character } return commandLength } naabu-2.3.1/v2/pkg/runner/nmap_test.go000066400000000000000000000014331461716101700175520ustar00rootroot00000000000000package runner import ( "testing" "github.com/projectdiscovery/naabu/v2/pkg/port" "github.com/projectdiscovery/naabu/v2/pkg/protocol" "github.com/projectdiscovery/naabu/v2/pkg/result" "github.com/projectdiscovery/naabu/v2/pkg/scan" "github.com/stretchr/testify/assert" ) func TestHandleNmap(t *testing.T) { // just attempt to start nmap var r Runner r.options = &Options{} // nmap with empty cli shouldn't trigger any error res := result.NewResult() r.scanner = &scan.Scanner{} r.scanner.ScanResults = res assert.Nil(t, r.handleNmap()) // nmap syntax error (this test might fail if nmap is not installed on the box) assert.Nil(t, r.handleNmap()) r.scanner.ScanResults.SetPorts("127.0.0.1", []*port.Port{{Port: 8080, Protocol: protocol.TCP}}) assert.Nil(t, r.handleNmap()) } naabu-2.3.1/v2/pkg/runner/options.go000066400000000000000000000372441461716101700172640ustar00rootroot00000000000000package runner import ( "os" "time" "github.com/projectdiscovery/naabu/v2/pkg/privileges" "github.com/projectdiscovery/naabu/v2/pkg/result" "github.com/projectdiscovery/naabu/v2/pkg/scan" fileutil "github.com/projectdiscovery/utils/file" "github.com/projectdiscovery/goflags" "github.com/projectdiscovery/gologger" updateutils "github.com/projectdiscovery/utils/update" ) // Options contains the configuration options for tuning // the port enumeration process. // nolint:maligned // just an option structure type Options struct { Verbose bool // Verbose flag indicates whether to show verbose output or not NoColor bool // No-Color disables the colored output JSON bool // JSON specifies whether to use json for output format or text file Silent bool // Silent suppresses any extra text and only writes found host:port to screen Stdin bool // Stdin specifies whether stdin input was given to the process Verify bool // Verify is used to check if the ports found were valid using CONNECT method Version bool // Version specifies if we should just show version and exit Ping bool // Ping uses ping probes to discover fastest active host and discover dead hosts Debug bool // Prints out debug information ExcludeCDN bool // Excludes ip of knows CDN ranges for full port scan Nmap bool // Invoke nmap detailed scan on results InterfacesList bool // InterfacesList show interfaces list Retries int // Retries is the number of retries for the port Rate int // Rate is the rate of port scan requests Timeout int // Timeout is the seconds to wait for ports to respond WarmUpTime int // WarmUpTime between scan phases Host goflags.StringSlice // Host is the single host or comma-separated list of hosts to find ports for HostsFile string // HostsFile is the file containing list of hosts to find port for Output string // Output is the file to write found ports to. Ports string // Ports is the ports to use for enumeration PortsFile string // PortsFile is the file containing ports to use for enumeration ExcludePorts string // ExcludePorts is the list of ports to exclude from enumeration ExcludeIps string // Ips or cidr to be excluded from the scan ExcludeIpsFile string // File containing Ips or cidr to exclude from the scan TopPorts string // Tops ports to scan PortThreshold int // PortThreshold is the number of ports to find before skipping the host SourceIP string // SourceIP to use in TCP packets SourcePort string // Source Port to use in packets Interface string // Interface to use for TCP packets ConfigFile string // Config file contains a scan configuration NmapCLI string // Nmap command (has priority over config file) Threads int // Internal worker threads // Deprecated: stats are automatically available through local endpoint EnableProgressBar bool // Enable progress bar // Deprecated: stats are automatically available through local endpoint (maybe used on cloud?) StatsInterval int // StatsInterval is the number of seconds to display stats after ScanAllIPS bool // Scan all the ips IPVersion goflags.StringSlice // IP Version to use while resolving hostnames ScanType string // Scan Type Proxy string // Socks5 proxy ProxyAuth string // Socks5 proxy authentication (username:password) Resolvers string // Resolvers (comma separated or file) baseResolvers []string OnResult result.ResultFn // callback on final host result OnReceive result.ResultFn // callback on response receive CSV bool Resume bool ResumeCfg *ResumeCfg Stream bool Passive bool OutputCDN bool // display cdn in use HealthCheck bool OnlyHostDiscovery bool // Perform only host discovery SkipHostDiscovery bool // Skip host discovery TcpSynPingProbes goflags.StringSlice TcpAckPingProbes goflags.StringSlice // UdpPingProbes goflags.StringSlice - planned // STcpInitPingProbes goflags.StringSlice - planned IcmpEchoRequestProbe bool IcmpTimestampRequestProbe bool IcmpAddressMaskRequestProbe bool // IpProtocolPingProbes goflags.StringSlice - planned ArpPing bool IPv6NeighborDiscoveryPing bool // HostDiscoveryIgnoreRST bool - planned InputReadTimeout time.Duration DisableStdin bool // ServiceDiscovery enables service discovery on found open ports (matches port number with service) ServiceDiscovery bool // ServiceVersion attempts to discover service running on open ports with active/passive probes ServiceVersion bool // ReversePTR lookup for ips ReversePTR bool //DisableUpdateCheck disables automatic update check DisableUpdateCheck bool // MetricsPort with statistics MetricsPort int } // ParseOptions parses the command line flags provided by a user func ParseOptions() *Options { options := &Options{} var cfgFile string flagSet := goflags.NewFlagSet() flagSet.SetDescription(`Naabu is a port scanning tool written in Go that allows you to enumerate open ports for hosts in a fast and reliable manner.`) flagSet.CreateGroup("input", "Input", flagSet.StringSliceVarP(&options.Host, "host", "", nil, "hosts to scan ports for (comma-separated)", goflags.NormalizedStringSliceOptions), flagSet.StringVarP(&options.HostsFile, "l", "list", "", "list of hosts to scan ports (file)"), flagSet.StringVarP(&options.ExcludeIps, "eh", "exclude-hosts", "", "hosts to exclude from the scan (comma-separated)"), flagSet.StringVarP(&options.ExcludeIpsFile, "ef", "exclude-file", "", "list of hosts to exclude from scan (file)"), ) flagSet.CreateGroup("port", "Port", flagSet.StringVarP(&options.Ports, "p", "port", "", "ports to scan (80,443, 100-200)"), flagSet.StringVarP(&options.TopPorts, "tp", "top-ports", "", "top ports to scan (default 100) [full,100,1000]"), flagSet.StringVarP(&options.ExcludePorts, "ep", "exclude-ports", "", "ports to exclude from scan (comma-separated)"), flagSet.StringVarP(&options.PortsFile, "pf", "ports-file", "", "list of ports to scan (file)"), flagSet.IntVarP(&options.PortThreshold, "pts", "port-threshold", 0, "port threshold to skip port scan for the host"), flagSet.BoolVarP(&options.ExcludeCDN, "ec", "exclude-cdn", false, "skip full port scans for CDN/WAF (only scan for port 80,443)"), flagSet.BoolVarP(&options.OutputCDN, "cdn", "display-cdn", false, "display cdn in use"), ) flagSet.CreateGroup("rate-limit", "Rate-limit", flagSet.IntVar(&options.Threads, "c", 25, "general internal worker threads"), flagSet.IntVar(&options.Rate, "rate", DefaultRateSynScan, "packets to send per second"), ) flagSet.CreateGroup("update", "Update", flagSet.CallbackVarP(GetUpdateCallback(), "update", "up", "update naabu to latest version"), flagSet.BoolVarP(&options.DisableUpdateCheck, "disable-update-check", "duc", false, "disable automatic naabu update check"), ) flagSet.CreateGroup("output", "Output", flagSet.StringVarP(&options.Output, "output", "o", "", "file to write output to (optional)"), flagSet.BoolVarP(&options.JSON, "json", "j", false, "write output in JSON lines format"), flagSet.BoolVar(&options.CSV, "csv", false, "write output in csv format"), ) flagSet.CreateGroup("config", "Configuration", flagSet.StringVar(&cfgFile, "config", "", "path to the naabu configuration file (default $HOME/.config/naabu/config.yaml)"), flagSet.BoolVarP(&options.ScanAllIPS, "sa", "scan-all-ips", false, "scan all the IP's associated with DNS record"), flagSet.StringSliceVarP(&options.IPVersion, "iv", "ip-version", []string{scan.IPv4}, "ip version to scan of hostname (4,6) - (default 4)", goflags.NormalizedStringSliceOptions), flagSet.StringVarP(&options.ScanType, "s", "scan-type", SynScan, "type of port scan (SYN/CONNECT)"), flagSet.StringVar(&options.SourceIP, "source-ip", "", "source ip and port (x.x.x.x:yyy - might not work on OSX) "), flagSet.BoolVarP(&options.InterfacesList, "il", "interface-list", false, "list available interfaces and public ip"), flagSet.StringVarP(&options.Interface, "i", "interface", "", "network Interface to use for port scan"), flagSet.BoolVar(&options.Nmap, "nmap", false, "invoke nmap scan on targets (nmap must be installed) - Deprecated"), flagSet.StringVar(&options.NmapCLI, "nmap-cli", "", "nmap command to run on found results (example: -nmap-cli 'nmap -sV')"), flagSet.StringVar(&options.Resolvers, "r", "", "list of custom resolver dns resolution (comma separated or from file)"), flagSet.StringVar(&options.Proxy, "proxy", "", "socks5 proxy (ip[:port] / fqdn[:port]"), flagSet.StringVar(&options.ProxyAuth, "proxy-auth", "", "socks5 proxy authentication (username:password)"), flagSet.BoolVar(&options.Resume, "resume", false, "resume scan using resume.cfg"), flagSet.BoolVar(&options.Stream, "stream", false, "stream mode (disables resume, nmap, verify, retries, shuffling, etc)"), flagSet.BoolVar(&options.Passive, "passive", false, "display passive open ports using shodan internetdb api"), flagSet.DurationVarP(&options.InputReadTimeout, "input-read-timeout", "irt", time.Duration(3*time.Minute), "timeout on input read"), flagSet.BoolVar(&options.DisableStdin, "no-stdin", false, "Disable Stdin processing"), ) flagSet.CreateGroup("host-discovery", "Host-Discovery", flagSet.BoolVarP(&options.OnlyHostDiscovery, "host-discovery", "sn", false, "Perform Only Host Discovery"), flagSet.BoolVarP(&options.SkipHostDiscovery, "skip-host-discovery", "Pn", false, "Skip Host discovery"), flagSet.StringSliceVarP(&options.TcpSynPingProbes, "probe-tcp-syn", "ps", nil, "TCP SYN Ping (host discovery needs to be enabled)", goflags.StringSliceOptions), flagSet.StringSliceVarP(&options.TcpAckPingProbes, "probe-tcp-ack", "pa", nil, "TCP ACK Ping (host discovery needs to be enabled)", goflags.StringSliceOptions), flagSet.BoolVarP(&options.IcmpEchoRequestProbe, "probe-icmp-echo", "pe", false, "ICMP echo request Ping (host discovery needs to be enabled)"), flagSet.BoolVarP(&options.IcmpTimestampRequestProbe, "probe-icmp-timestamp", "pp", false, "ICMP timestamp request Ping (host discovery needs to be enabled)"), flagSet.BoolVarP(&options.IcmpAddressMaskRequestProbe, "probe-icmp-address-mask", "pm", false, "ICMP address mask request Ping (host discovery needs to be enabled)"), flagSet.BoolVarP(&options.ArpPing, "arp-ping", "arp", false, "ARP ping (host discovery needs to be enabled)"), flagSet.BoolVarP(&options.IPv6NeighborDiscoveryPing, "nd-ping", "nd", false, "IPv6 Neighbor Discovery (host discovery needs to be enabled)"), flagSet.BoolVar(&options.ReversePTR, "rev-ptr", false, "Reverse PTR lookup for input ips"), // The following flags are left as placeholder // flagSet.StringSliceVarP(&options.IpProtocolPingProbes, "probe-ip-protocol", "po", []string{}, "IP Protocol Ping"), // flagSet.StringSliceVarP(&options.UdpPingProbes, "probe-udp", "pu", []string{}, "UDP Ping"), // flagSet.StringSliceVarP(&options.STcpInitPingProbes, "probe-stcp-init", "py", []string{}, "SCTP INIT Ping"), // flagSet.BoolVarP(&options.HostDiscoveryIgnoreRST, "discovery-ignore-rst", "irst", false, "Ignore RST packets during host discovery"), ) flagSet.CreateGroup("services-discovery", "Services-Discovery", flagSet.BoolVarP(&options.ServiceDiscovery, "service-discovery", "sD", false, "Service Discovery"), flagSet.BoolVarP(&options.ServiceVersion, "service-version", "sV", false, "Service Version"), ) flagSet.CreateGroup("optimization", "Optimization", flagSet.IntVar(&options.Retries, "retries", DefaultRetriesSynScan, "number of retries for the port scan"), flagSet.IntVar(&options.Timeout, "timeout", DefaultPortTimeoutSynScan, "millisecond to wait before timing out"), flagSet.IntVar(&options.WarmUpTime, "warm-up-time", 2, "time in seconds between scan phases"), flagSet.BoolVar(&options.Ping, "ping", false, "ping probes for verification of host"), flagSet.BoolVar(&options.Verify, "verify", false, "validate the ports again with TCP verification"), ) flagSet.CreateGroup("debug", "Debug", flagSet.BoolVarP(&options.HealthCheck, "hc", "health-check", false, "run diagnostic check up"), flagSet.BoolVar(&options.Debug, "debug", false, "display debugging information"), flagSet.BoolVarP(&options.Verbose, "v", "verbose", false, "display verbose output"), flagSet.BoolVarP(&options.NoColor, "nc", "no-color", false, "disable colors in CLI output"), flagSet.BoolVar(&options.Silent, "silent", false, "display only results in output"), flagSet.BoolVar(&options.Version, "version", false, "display version of naabu"), flagSet.BoolVar(&options.EnableProgressBar, "stats", false, "display stats of the running scan (deprecated)"), flagSet.IntVarP(&options.StatsInterval, "stats-interval", "si", DefautStatsInterval, "number of seconds to wait between showing a statistics update (deprecated)"), flagSet.IntVarP(&options.MetricsPort, "metrics-port", "mp", 63636, "port to expose naabu metrics on"), ) _ = flagSet.Parse() if cfgFile != "" { if !fileutil.FileExists(cfgFile) { gologger.Fatal().Msgf("given config file '%s' does not exist", cfgFile) } // merge config file with flags if err := flagSet.MergeConfigFile(cfgFile); err != nil { gologger.Fatal().Msgf("Could not read config: %s\n", err) } } if options.HealthCheck { gologger.Print().Msgf("%s\n", DoHealthCheck(options, flagSet)) os.Exit(0) } // Check if stdin pipe was given options.Stdin = !options.DisableStdin && fileutil.HasStdin() options.ResumeCfg = NewResumeCfg() if options.ShouldLoadResume() { if err := options.ResumeCfg.ConfigureResume(); err != nil { gologger.Fatal().Msgf("%s\n", err) } } options.configureOutput() // Show the user the banner showBanner() if options.Version { gologger.Info().Msgf("Current Version: %s\n", version) os.Exit(0) } if !options.DisableUpdateCheck { latestVersion, err := updateutils.GetToolVersionCallback("naabu", version)() if err != nil { gologger.Verbose().Msgf("naabu version check failed: %v", err.Error()) } else { gologger.Info().Msgf("Current naabu version %v %v", version, updateutils.GetVersionDescription(version, latestVersion)) } } // Show network configuration and exit if the user requested it if options.InterfacesList { err := showNetworkInterfaces() if err != nil { gologger.Error().Msgf("Could not get network interfaces: %s\n", err) } os.Exit(0) } // Validate the options passed by the user and if any // invalid options have been used, exit. err := options.ValidateOptions() if err != nil { gologger.Fatal().Msgf("Program exiting: %s\n", err) } return options } // ShouldLoadResume resume file func (options *Options) ShouldLoadResume() bool { return options.Resume && fileutil.FileExists(DefaultResumeFilePath()) } func (options *Options) shouldDiscoverHosts() bool { return (options.OnlyHostDiscovery || !options.SkipHostDiscovery) && !options.Passive && scan.PkgRouter != nil } func (options *Options) hasProbes() bool { return options.ArpPing || options.IPv6NeighborDiscoveryPing || options.IcmpAddressMaskRequestProbe || options.IcmpEchoRequestProbe || options.IcmpTimestampRequestProbe || len(options.TcpAckPingProbes) > 0 || len(options.TcpAckPingProbes) > 0 } func (options *Options) shouldUseRawPackets() bool { return isOSSupported() && privileges.IsPrivileged && options.ScanType == SynScan && scan.PkgRouter != nil } naabu-2.3.1/v2/pkg/runner/output.go000066400000000000000000000107641461716101700171270ustar00rootroot00000000000000package runner import ( "bufio" "encoding/csv" "encoding/json" "fmt" "io" "reflect" "strconv" "strings" "time" "golang.org/x/exp/slices" "github.com/pkg/errors" "github.com/projectdiscovery/gologger" "github.com/projectdiscovery/naabu/v2/pkg/port" "github.com/projectdiscovery/naabu/v2/pkg/protocol" ) // Result contains the result for a host type Result struct { Host string `json:"host,omitempty" csv:"host"` IP string `json:"ip,omitempty" csv:"ip"` Port int `json:"port,omitempty" csv:"port"` Protocol string `json:"protocol,omitempty" csv:"protocol"` TLS bool `json:"tls,omitempty" csv:"tls"` IsCDNIP bool `json:"cdn,omitempty" csv:"cdn"` CDNName string `json:"cdn-name,omitempty" csv:"cdn-name"` TimeStamp time.Time `json:"timestamp,omitempty" csv:"timestamp"` } type jsonResult struct { Result PortNumber int `json:"port"` Protocol string `json:"protocol"` TLS bool `json:"tls"` } func (r *Result) JSON() ([]byte, error) { data := jsonResult{} data.TimeStamp = r.TimeStamp if r.Host != r.IP { data.Host = r.Host } data.IP = r.IP data.IsCDNIP = r.IsCDNIP data.CDNName = r.CDNName data.PortNumber = r.Port data.Protocol = r.Protocol data.TLS = r.TLS return json.Marshal(data) } var ( NumberOfCsvFieldsErr = errors.New("exported fields don't match csv tags") headers = []string{} ) func (r *Result) CSVHeaders() ([]string, error) { ty := reflect.TypeOf(*r) for i := 0; i < ty.NumField(); i++ { field := ty.Field(i) csvTag := field.Tag.Get("csv") if !slices.Contains(headers, csvTag) { headers = append(headers, csvTag) } } return headers, nil } func (r *Result) CSVFields() ([]string, error) { var fields []string vl := reflect.ValueOf(*r) ty := reflect.TypeOf(*r) for i := 0; i < vl.NumField(); i++ { field := vl.Field(i) csvTag := ty.Field(i).Tag.Get("csv") fieldValue := field.Interface() if slices.Contains(headers, csvTag) { fields = append(fields, fmt.Sprint(fieldValue)) } } return fields, nil } // WriteHostOutput writes the output list of host ports to an io.Writer func WriteHostOutput(host string, ports []*port.Port, outputCDN bool, cdnName string, writer io.Writer) error { bufwriter := bufio.NewWriter(writer) sb := &strings.Builder{} for _, p := range ports { sb.WriteString(host) sb.WriteString(":") sb.WriteString(strconv.Itoa(p.Port)) if outputCDN && cdnName != "" { sb.WriteString(" [" + cdnName + "]") } sb.WriteString("\n") _, err := bufwriter.WriteString(sb.String()) if err != nil { bufwriter.Flush() return err } sb.Reset() } return bufwriter.Flush() } // WriteJSONOutput writes the output list of subdomain in JSON to an io.Writer func WriteJSONOutput(host, ip string, ports []*port.Port, outputCDN bool, isCdn bool, cdnName string, writer io.Writer) error { encoder := json.NewEncoder(writer) data := jsonResult{} data.TimeStamp = time.Now().UTC() if host != ip { data.Host = host } data.IP = ip if outputCDN { data.IsCDNIP = isCdn data.CDNName = cdnName } for _, p := range ports { data.PortNumber = p.Port data.Protocol = p.Protocol.String() data.TLS = p.TLS if err := encoder.Encode(&data); err != nil { return err } } return nil } // WriteCsvOutput writes the output list of subdomain in csv format to an io.Writer func WriteCsvOutput(host, ip string, ports []*port.Port, outputCDN bool, isCdn bool, cdnName string, header bool, writer io.Writer) error { encoder := csv.NewWriter(writer) data := &Result{IP: ip, TimeStamp: time.Now().UTC(), Port: 0, Protocol: protocol.TCP.String(), TLS: false} if host != ip { data.Host = host } if outputCDN { data.IsCDNIP = isCdn data.CDNName = cdnName } if header { writeCSVHeaders(data, encoder) } for _, p := range ports { data.Port = p.Port data.Protocol = p.Protocol.String() data.TLS = p.TLS writeCSVRow(data, encoder) } encoder.Flush() return nil } func writeCSVHeaders(data *Result, writer *csv.Writer) { headers, err := data.CSVHeaders() if err != nil { gologger.Error().Msgf(err.Error()) return } if err := writer.Write(headers); err != nil { errMsg := errors.Wrap(err, "Could not write headers") gologger.Error().Msgf(errMsg.Error()) } } func writeCSVRow(data *Result, writer *csv.Writer) { rowData, err := data.CSVFields() if err != nil { gologger.Error().Msgf(err.Error()) return } if err := writer.Write(rowData); err != nil { errMsg := errors.Wrap(err, "Could not write row") gologger.Error().Msgf(errMsg.Error()) } } naabu-2.3.1/v2/pkg/runner/output_test.go000066400000000000000000000016621461716101700201630ustar00rootroot00000000000000package runner import ( "bytes" "strings" "testing" "github.com/projectdiscovery/naabu/v2/pkg/port" "github.com/projectdiscovery/naabu/v2/pkg/protocol" "github.com/stretchr/testify/assert" ) func TestWriteHostOutput(t *testing.T) { host := "127.0.0.1" ports := []*port.Port{ {Port: 80, Protocol: protocol.TCP}, {Port: 8080, Protocol: protocol.TCP}, } var s string buf := bytes.NewBufferString(s) assert.Nil(t, WriteHostOutput(host, ports, false, "", buf)) assert.Contains(t, buf.String(), "127.0.0.1:80") assert.Contains(t, buf.String(), "127.0.0.1:8080") } func TestWriteJSONOutput(t *testing.T) { host := "localhost" ip := "127.0.0.1" ports := []*port.Port{ {Port: 80, Protocol: protocol.TCP}, {Port: 8080, Protocol: protocol.TCP}, } var s string buf := bytes.NewBufferString(s) assert.Nil(t, WriteJSONOutput(host, ip, ports, true, false, "", buf)) assert.Equal(t, 3, len(strings.Split(buf.String(), "\n"))) } naabu-2.3.1/v2/pkg/runner/ports.go000066400000000000000000000231621461716101700167320ustar00rootroot00000000000000package runner import ( "fmt" "os" "strconv" "strings" "github.com/pkg/errors" "github.com/projectdiscovery/naabu/v2/pkg/port" "github.com/projectdiscovery/naabu/v2/pkg/protocol" ) const portListStrParts = 2 // List of default ports const ( Full = "1-65535" NmapTop100 = "7,9,13,21-23,25-26,37,53,79-81,88,106,110-111,113,119,135,139,143-144,179,199,389,427,443-445,465,513-515,543-544,548,554,587,631,646,873,990,993,995,1025-1029,1110,1433,1720,1723,1755,1900,2000-2001,2049,2121,2717,3000,3128,3306,3389,3986,4899,5000,5009,5051,5060,5101,5190,5357,5432,5631,5666,5800,5900,6000-6001,6646,7070,8000,8008-8009,8080-8081,8443,8888,9100,9999-10000,32768,49152-49157" NmapTop1000 = "1,3-4,6-7,9,13,17,19-26,30,32-33,37,42-43,49,53,70,79-85,88-90,99-100,106,109-111,113,119,125,135,139,143-144,146,161,163,179,199,211-212,222,254-256,259,264,280,301,306,311,340,366,389,406-407,416-417,425,427,443-445,458,464-465,481,497,500,512-515,524,541,543-545,548,554-555,563,587,593,616-617,625,631,636,646,648,666-668,683,687,691,700,705,711,714,720,722,726,749,765,777,783,787,800-801,808,843,873,880,888,898,900-903,911-912,981,987,990,992-993,995,999-1002,1007,1009-1011,1021-1100,1102,1104-1108,1110-1114,1117,1119,1121-1124,1126,1130-1132,1137-1138,1141,1145,1147-1149,1151-1152,1154,1163-1166,1169,1174-1175,1183,1185-1187,1192,1198-1199,1201,1213,1216-1218,1233-1234,1236,1244,1247-1248,1259,1271-1272,1277,1287,1296,1300-1301,1309-1311,1322,1328,1334,1352,1417,1433-1434,1443,1455,1461,1494,1500-1501,1503,1521,1524,1533,1556,1580,1583,1594,1600,1641,1658,1666,1687-1688,1700,1717-1721,1723,1755,1761,1782-1783,1801,1805,1812,1839-1840,1862-1864,1875,1900,1914,1935,1947,1971-1972,1974,1984,1998-2010,2013,2020-2022,2030,2033-2035,2038,2040-2043,2045-2049,2065,2068,2099-2100,2103,2105-2107,2111,2119,2121,2126,2135,2144,2160-2161,2170,2179,2190-2191,2196,2200,2222,2251,2260,2288,2301,2323,2366,2381-2383,2393-2394,2399,2401,2492,2500,2522,2525,2557,2601-2602,2604-2605,2607-2608,2638,2701-2702,2710,2717-2718,2725,2800,2809,2811,2869,2875,2909-2910,2920,2967-2968,2998,3000-3001,3003,3005-3007,3011,3013,3017,3030-3031,3052,3071,3077,3128,3168,3211,3221,3260-3261,3268-3269,3283,3300-3301,3306,3322-3325,3333,3351,3367,3369-3372,3389-3390,3404,3476,3493,3517,3527,3546,3551,3580,3659,3689-3690,3703,3737,3766,3784,3800-3801,3809,3814,3826-3828,3851,3869,3871,3878,3880,3889,3905,3914,3918,3920,3945,3971,3986,3995,3998,4000-4006,4045,4111,4125-4126,4129,4224,4242,4279,4321,4343,4443-4446,4449,4550,4567,4662,4848,4899-4900,4998,5000-5004,5009,5030,5033,5050-5051,5054,5060-5061,5080,5087,5100-5102,5120,5190,5200,5214,5221-5222,5225-5226,5269,5280,5298,5357,5405,5414,5431-5432,5440,5500,5510,5544,5550,5555,5560,5566,5631,5633,5666,5678-5679,5718,5730,5800-5802,5810-5811,5815,5822,5825,5850,5859,5862,5877,5900-5904,5906-5907,5910-5911,5915,5922,5925,5950,5952,5959-5963,5987-5989,5998-6007,6009,6025,6059,6100-6101,6106,6112,6123,6129,6156,6346,6389,6502,6510,6543,6547,6565-6567,6580,6646,6666-6669,6689,6692,6699,6779,6788-6789,6792,6839,6881,6901,6969,7000-7002,7004,7007,7019,7025,7070,7100,7103,7106,7200-7201,7402,7435,7443,7496,7512,7625,7627,7676,7741,7777-7778,7800,7911,7920-7921,7937-7938,7999-8002,8007-8011,8021-8022,8031,8042,8045,8080-8090,8093,8099-8100,8180-8181,8192-8194,8200,8222,8254,8290-8292,8300,8333,8383,8400,8402,8443,8500,8600,8649,8651-8652,8654,8701,8800,8873,8888,8899,8994,9000-9003,9009-9011,9040,9050,9071,9080-9081,9090-9091,9099-9103,9110-9111,9200,9207,9220,9290,9415,9418,9485,9500,9502-9503,9535,9575,9593-9595,9618,9666,9876-9878,9898,9900,9917,9929,9943-9944,9968,9998-10004,10009-10010,10012,10024-10025,10082,10180,10215,10243,10566,10616-10617,10621,10626,10628-10629,10778,11110-11111,11967,12000,12174,12265,12345,13456,13722,13782-13783,14000,14238,14441-14442,15000,15002-15004,15660,15742,16000-16001,16012,16016,16018,16080,16113,16992-16993,17877,17988,18040,18101,18988,19101,19283,19315,19350,19780,19801,19842,20000,20005,20031,20221-20222,20828,21571,22939,23502,24444,24800,25734-25735,26214,27000,27352-27353,27355-27356,27715,28201,30000,30718,30951,31038,31337,32768-32785,33354,33899,34571-34573,35500,38292,40193,40911,41511,42510,44176,44442-44443,44501,45100,48080,49152-49161,49163,49165,49167,49175-49176,49400,49999-50003,50006,50300,50389,50500,50636,50800,51103,51493,52673,52822,52848,52869,54045,54328,55055-55056,55555,55600,56737-56738,57294,57797,58080,60020,60443,61532,61900,62078,63331,64623,64680,65000,65129,65389" ) // ParsePorts parses the list of ports and creates a port map func ParsePorts(options *Options) ([]*port.Port, error) { var portsFileMap, portsCLIMap, topPortsCLIMap, portsConfigList []*port.Port // If the user has specfied a ports file, use it if options.PortsFile != "" { data, err := os.ReadFile(options.PortsFile) if err != nil { return nil, fmt.Errorf("could not read ports: %s", err) } ports, err := parsePortsList(string(data)) if err != nil { return nil, fmt.Errorf("could not read ports: %s", err) } portsFileMap, err = excludePorts(options, ports) if err != nil { return nil, fmt.Errorf("could not read ports: %s", err) } } // If the user has specfied top ports, use them as well if options.TopPorts != "" { switch strings.ToLower(options.TopPorts) { case "full": // If the user has specfied full ports, use them var err error ports, err := parsePortsList(Full) if err != nil { return nil, fmt.Errorf("could not read ports: %s", err) } topPortsCLIMap, err = excludePorts(options, ports) if err != nil { return nil, fmt.Errorf("could not read ports: %s", err) } case "100": // If the user has specfied 100, use them ports, err := parsePortsList(NmapTop100) if err != nil { return nil, fmt.Errorf("could not read ports: %s", err) } topPortsCLIMap, err = excludePorts(options, ports) if err != nil { return nil, fmt.Errorf("could not read ports: %s", err) } case "1000": // If the user has specfied 1000, use them ports, err := parsePortsList(NmapTop1000) if err != nil { return nil, fmt.Errorf("could not read ports: %s", err) } topPortsCLIMap, err = excludePorts(options, ports) if err != nil { return nil, fmt.Errorf("could not read ports: %s", err) } default: return nil, errors.New("invalid top ports option") } } // If the user has specfied ports option, use them too if options.Ports != "" { // "-" equals to all ports if options.Ports == "-" { // Parse the custom ports list provided by the user options.Ports = "1-65535" } ports, err := parsePortsList(options.Ports) if err != nil { return nil, fmt.Errorf("could not read ports: %s", err) } portsCLIMap, err = excludePorts(options, ports) if err != nil { return nil, fmt.Errorf("could not read ports: %s", err) } } // merge all the specified ports (meaningless if "all" is used) ports := merge(portsFileMap, portsCLIMap, topPortsCLIMap, portsConfigList) // By default scan top 100 ports only if len(ports) == 0 { portsList, err := parsePortsList(NmapTop100) if err != nil { return nil, fmt.Errorf("could not read ports: %s", err) } m, err := excludePorts(options, portsList) if err != nil { return nil, err } return m, nil } return ports, nil } // excludePorts excludes the list of ports from the exclusion list func excludePorts(options *Options, ports []*port.Port) ([]*port.Port, error) { if options.ExcludePorts == "" { return ports, nil } var filteredPorts []*port.Port // Exclude the ports specified by the user in exclusion list excludedPortsCLI, err := parsePortsList(options.ExcludePorts) if err != nil { return nil, fmt.Errorf("could not read exclusion ports: %s", err) } for _, port := range ports { found := false for _, excludedPort := range excludedPortsCLI { if excludedPort.Port == port.Port && excludedPort.Protocol == port.Protocol { found = true break } } if !found { filteredPorts = append(filteredPorts, port) } } return filteredPorts, nil } func parsePortsSlice(ranges []string) ([]*port.Port, error) { var ports []*port.Port for _, r := range ranges { r = strings.TrimSpace(r) portProtocol := protocol.TCP if strings.HasPrefix(r, "u:") { portProtocol = protocol.UDP r = strings.TrimPrefix(r, "u:") } if strings.Contains(r, "-") { parts := strings.Split(r, "-") if len(parts) != portListStrParts { return nil, fmt.Errorf("invalid port selection segment: '%s'", r) } p1, err := strconv.Atoi(parts[0]) if err != nil { return nil, fmt.Errorf("invalid port number: '%s'", parts[0]) } p2, err := strconv.Atoi(parts[1]) if err != nil { return nil, fmt.Errorf("invalid port number: '%s'", parts[1]) } if p1 > p2 || p2 > 65535 { return nil, fmt.Errorf("invalid port range: %d-%d", p1, p2) } for i := p1; i <= p2; i++ { port := &port.Port{Port: i, Protocol: portProtocol} ports = append(ports, port) } } else { portNumber, err := strconv.Atoi(r) if err != nil || portNumber > 65535 { return nil, fmt.Errorf("invalid port number: '%s'", r) } port := &port.Port{Port: portNumber, Protocol: portProtocol} ports = append(ports, port) } } // dedupe ports seen := make(map[string]struct{}) var dedupedPorts []*port.Port for _, port := range ports { if _, ok := seen[port.String()]; ok { continue } seen[port.String()] = struct{}{} dedupedPorts = append(dedupedPorts, port) } return dedupedPorts, nil } func parsePortsList(data string) ([]*port.Port, error) { return parsePortsSlice(strings.Split(data, ",")) } func merge(slices ...[]*port.Port) []*port.Port { var result []*port.Port for _, slice := range slices { result = append(result, slice...) } return result } naabu-2.3.1/v2/pkg/runner/ports_test.go000066400000000000000000000054371461716101700177760ustar00rootroot00000000000000package runner import ( "reflect" "testing" "github.com/projectdiscovery/naabu/v2/pkg/port" "github.com/projectdiscovery/naabu/v2/pkg/protocol" "github.com/stretchr/testify/assert" ) func TestParsePortsList(t *testing.T) { tests := []struct { args string want []*port.Port wantErr bool }{ {"1,2,3,4", []*port.Port{{Port: 1, Protocol: protocol.TCP}, {Port: 2, Protocol: protocol.TCP}, {Port: 3, Protocol: protocol.TCP}, {Port: 4, Protocol: protocol.TCP}}, false}, {"1-3,10", []*port.Port{{Port: 1, Protocol: protocol.TCP}, {Port: 2, Protocol: protocol.TCP}, {Port: 3, Protocol: protocol.TCP}, {Port: 10, Protocol: protocol.TCP}}, false}, {"17,17,17,18", []*port.Port{{Port: 17, Protocol: protocol.TCP}, {Port: 18, Protocol: protocol.TCP}}, false}, {"a", nil, true}, } for _, tt := range tests { t.Run("", func(t *testing.T) { got, err := parsePortsList(tt.args) if (err != nil) != tt.wantErr { t.Errorf("parsePortsList() error = %v, wantErr %v", err, tt.wantErr) return } if !reflect.DeepEqual(got, tt.want) { t.Errorf("parsePortsList() = %v, want %v", got, tt.want) } }) } } func TestExcludePorts(t *testing.T) { var options Options ports := []*port.Port{ {Port: 1, Protocol: protocol.TCP}, {Port: 10, Protocol: protocol.TCP}, } // no filtering filteredPorts, err := excludePorts(&options, ports) assert.Nil(t, err) assert.EqualValues(t, filteredPorts, ports) // invalid filter options.ExcludePorts = "a" _, err = excludePorts(&options, ports) assert.NotNil(t, err) // valid filter options.ExcludePorts = "1" filteredPorts, err = excludePorts(&options, ports) assert.Nil(t, err) expectedPorts := []*port.Port{ {Port: 10, Protocol: protocol.TCP}, } assert.EqualValues(t, expectedPorts, filteredPorts) } func TestParsePorts(t *testing.T) { // top ports tests := []struct { args string want int wantErr bool }{ {"full", 65535, false}, {"100", 100, false}, {"1000", 1000, false}, {"a", 0, true}, } for _, tt := range tests { t.Run(tt.args, func(t *testing.T) { var options Options options.TopPorts = tt.args got, err := ParsePorts(&options) if tt.wantErr { assert.NotNil(t, err) } else { assert.Nil(t, err) } assert.Equal(t, tt.want, len(got)) }) } // ports tests = []struct { args string want int wantErr bool }{ {"-", 65535, false}, {"a", 0, true}, {"1,2,4-10", 9, false}, } for _, tt := range tests { t.Run(tt.args, func(t *testing.T) { var options Options options.Ports = tt.args got, err := ParsePorts(&options) if tt.wantErr { assert.NotNil(t, err) } else { assert.Nil(t, err) } assert.Equal(t, tt.want, len(got)) }) } // default to 100 ports got, err := ParsePorts(&Options{}) assert.Nil(t, err) assert.Equal(t, 100, len(got)) } naabu-2.3.1/v2/pkg/runner/resume.go000066400000000000000000000041251461716101700170610ustar00rootroot00000000000000package runner import ( "encoding/json" "os" "path/filepath" "sync" "github.com/projectdiscovery/gologger" fileutil "github.com/projectdiscovery/utils/file" permissionutil "github.com/projectdiscovery/utils/permission" ) // Default resume file const defaultResumeFileName = "resume.cfg" // DefaultResumeFolderPath returns the default resume folder path func DefaultResumeFolderPath() string { home, err := os.UserHomeDir() if err != nil { return defaultResumeFileName } return filepath.Join(home, ".config", "naabu") } // DefaultResumeFilePath returns the default resume file full path func DefaultResumeFilePath() string { return filepath.Join(DefaultResumeFolderPath(), defaultResumeFileName) } // ResumeCfg contains the scan progression type ResumeCfg struct { sync.RWMutex Retry int `json:"retry"` Seed int64 `json:"seed"` Index int64 `json:"index"` } // NewResumeCfg creates a new scan progression structure func NewResumeCfg() *ResumeCfg { return &ResumeCfg{} } // SaveResumeConfig to file func (resumeCfg *ResumeCfg) SaveResumeConfig() error { resumeCfg.RLock() defer resumeCfg.RUnlock() data, err := json.MarshalIndent(resumeCfg, "", "\t") if err != nil { return err } resumeFolderPath := DefaultResumeFolderPath() if !fileutil.FolderExists(resumeFolderPath) { _ = fileutil.CreateFolder(DefaultResumeFolderPath()) } return os.WriteFile(DefaultResumeFilePath(), data, permissionutil.ConfigFilePermission) } // ConfigureResume read the resume config file func (resumeCfg *ResumeCfg) ConfigureResume() error { resumeCfg.RLock() defer resumeCfg.RUnlock() gologger.Info().Msg("Resuming from save checkpoint") file, err := os.ReadFile(DefaultResumeFilePath()) if err != nil { return err } err = json.Unmarshal([]byte(file), &resumeCfg) if err != nil { return err } return nil } // ShouldSaveResume file func (resumeCfg *ResumeCfg) ShouldSaveResume() bool { return true } // CleanupResumeConfig cleaning up the config file func (resumeCfg *ResumeCfg) CleanupResumeConfig() { if fileutil.FileExists(DefaultResumeFilePath()) { os.Remove(DefaultResumeFilePath()) } } naabu-2.3.1/v2/pkg/runner/runner.go000066400000000000000000000706531461716101700171030ustar00rootroot00000000000000package runner import ( "bytes" "context" "encoding/csv" "encoding/json" "fmt" "math/big" "net" "net/http" "net/url" "os" "path/filepath" "strconv" "sync" "time" "github.com/Mzack9999/gcache" "github.com/miekg/dns" "github.com/pkg/errors" "github.com/projectdiscovery/blackrock" "github.com/projectdiscovery/clistats" "github.com/projectdiscovery/dnsx/libs/dnsx" "github.com/projectdiscovery/gologger" "github.com/projectdiscovery/mapcidr" "github.com/projectdiscovery/naabu/v2/pkg/port" "github.com/projectdiscovery/naabu/v2/pkg/privileges" "github.com/projectdiscovery/naabu/v2/pkg/protocol" "github.com/projectdiscovery/naabu/v2/pkg/result" "github.com/projectdiscovery/naabu/v2/pkg/scan" "github.com/projectdiscovery/ratelimit" "github.com/projectdiscovery/retryablehttp-go" "github.com/projectdiscovery/uncover/sources/agent/shodanidb" fileutil "github.com/projectdiscovery/utils/file" iputil "github.com/projectdiscovery/utils/ip" sliceutil "github.com/projectdiscovery/utils/slice" "github.com/remeh/sizedwaitgroup" ) // Runner is an instance of the port enumeration // client used to orchestrate the whole process. type Runner struct { options *Options targetsFile string scanner *scan.Scanner limiter *ratelimit.Limiter wgscan sizedwaitgroup.SizedWaitGroup dnsclient *dnsx.DNSX stats *clistats.Statistics streamChannel chan Target unique gcache.Cache[string, struct{}] } type Target struct { Ip string Cidr string Fqdn string Port string } // NewRunner creates a new runner struct instance by parsing // the configuration options, configuring sources, reading lists, etc func NewRunner(options *Options) (*Runner, error) { options.configureOutput() // automatically disable host discovery when less than two ports for scan are provided ports, err := ParsePorts(options) if err != nil { return nil, fmt.Errorf("could not parse ports: %s", err) } options.configureHostDiscovery(ports) // default to ipv4 if no ipversion was specified if len(options.IPVersion) == 0 { options.IPVersion = []string{scan.IPv4} } if options.Retries == 0 { options.Retries = DefaultRetriesSynScan } if options.ResumeCfg == nil { options.ResumeCfg = NewResumeCfg() } runner := &Runner{ options: options, } dnsOptions := dnsx.DefaultOptions dnsOptions.MaxRetries = runner.options.Retries dnsOptions.Hostsfile = true if sliceutil.Contains(options.IPVersion, "6") { dnsOptions.QuestionTypes = append(dnsOptions.QuestionTypes, dns.TypeAAAA) } if len(runner.options.baseResolvers) > 0 { dnsOptions.BaseResolvers = runner.options.baseResolvers } dnsclient, err := dnsx.New(dnsOptions) if err != nil { return nil, err } runner.dnsclient = dnsclient excludedIps, err := runner.parseExcludedIps(options) if err != nil { return nil, err } runner.streamChannel = make(chan Target) uniqueCache := gcache.New[string, struct{}](1500).Build() runner.unique = uniqueCache scanOpts := &scan.Options{ Timeout: time.Duration(options.Timeout) * time.Millisecond, Retries: options.Retries, Rate: options.Rate, PortThreshold: options.PortThreshold, ExcludeCdn: options.ExcludeCDN, OutputCdn: options.OutputCDN, ExcludedIps: excludedIps, Proxy: options.Proxy, ProxyAuth: options.ProxyAuth, Stream: options.Stream, OnReceive: options.OnReceive, ScanType: options.ScanType, } if scanOpts.OnReceive == nil { scanOpts.OnReceive = runner.onReceive } scanner, err := scan.NewScanner(scanOpts) if err != nil { return nil, err } runner.scanner = scanner runner.scanner.Ports = ports if options.EnableProgressBar { defaultOptions := &clistats.DefaultOptions defaultOptions.ListenPort = options.MetricsPort stats, err := clistats.NewWithOptions(context.Background(), defaultOptions) if err != nil { gologger.Warning().Msgf("Couldn't create progress engine: %s\n", err) } else { runner.stats = stats } } return runner, nil } func (r *Runner) onReceive(hostResult *result.HostResult) { if !ipMatchesIpVersions(hostResult.IP, r.options.IPVersion...) { return } dt, err := r.scanner.IPRanger.GetHostsByIP(hostResult.IP) if err != nil { return } // receive event has only one port for _, p := range hostResult.Ports { ipPort := net.JoinHostPort(hostResult.IP, fmt.Sprint(p.Port)) if r.unique.Has(ipPort) { return } } // recover hostnames from ip:port combination for _, p := range hostResult.Ports { ipPort := net.JoinHostPort(hostResult.IP, fmt.Sprint(p.Port)) if dtOthers, ok := r.scanner.IPRanger.Hosts.Get(ipPort); ok { if otherName, _, err := net.SplitHostPort(string(dtOthers)); err == nil { // replace bare ip:port with host for idx, ipCandidate := range dt { if iputil.IsIP(ipCandidate) { dt[idx] = otherName } } } } _ = r.unique.Set(ipPort, struct{}{}) } csvHeaderEnabled := true buffer := bytes.Buffer{} writer := csv.NewWriter(&buffer) for _, host := range dt { buffer.Reset() if host == "ip" { host = hostResult.IP } isCDNIP, cdnName, _ := r.scanner.CdnCheck(hostResult.IP) // console output if r.options.JSON || r.options.CSV { data := &Result{IP: hostResult.IP, TimeStamp: time.Now().UTC()} if r.options.OutputCDN { data.IsCDNIP = isCDNIP data.CDNName = cdnName } if host != hostResult.IP { data.Host = host } for _, p := range hostResult.Ports { data.Port = p.Port data.Protocol = p.Protocol.String() data.TLS = p.TLS if r.options.JSON { b, err := data.JSON() if err != nil { continue } buffer.Write([]byte(fmt.Sprintf("%s\n", b))) } else if r.options.CSV { if csvHeaderEnabled { writeCSVHeaders(data, writer) csvHeaderEnabled = false } writeCSVRow(data, writer) } } } if r.options.JSON { gologger.Silent().Msgf("%s", buffer.String()) } else if r.options.CSV { writer.Flush() gologger.Silent().Msgf("%s", buffer.String()) } else { for _, p := range hostResult.Ports { if r.options.OutputCDN && isCDNIP { gologger.Silent().Msgf("%s:%d [%s]\n", host, p.Port, cdnName) } else { gologger.Silent().Msgf("%s:%d\n", host, p.Port) } } } } } // RunEnumeration runs the ports enumeration flow on the targets specified func (r *Runner) RunEnumeration(pctx context.Context) error { ctx, cancel := context.WithCancel(pctx) defer cancel() if privileges.IsPrivileged && r.options.ScanType == SynScan { // Set values if those were specified via cli, errors are fatal if r.options.SourceIP != "" { err := r.SetSourceIP(r.options.SourceIP) if err != nil { return err } } if r.options.Interface != "" { err := r.SetInterface(r.options.Interface) if err != nil { return err } } if r.options.SourcePort != "" { err := r.SetSourcePort(r.options.SourcePort) if err != nil { return err } } r.BackgroundWorkers(ctx) } if r.options.Stream { go r.Load() //nolint } else { err := r.Load() if err != nil { return err } } // Scan workers r.wgscan = sizedwaitgroup.New(r.options.Rate) r.limiter = ratelimit.New(context.Background(), uint(r.options.Rate), time.Second) shouldDiscoverHosts := r.options.shouldDiscoverHosts() shouldUseRawPackets := r.options.shouldUseRawPackets() if shouldDiscoverHosts && shouldUseRawPackets { // perform host discovery showHostDiscoveryInfo() r.scanner.ListenHandler.Phase.Set(scan.HostDiscovery) // shrinks the ips to the minimum amount of cidr _, targetsV4, targetsv6, _, err := r.GetTargetIps(r.getPreprocessedIps) if err != nil { return err } // get excluded ips excludedIPs, err := r.parseExcludedIps(r.options) if err != nil { return err } // store exclued ips to a map excludedIPsMap := make(map[string]struct{}) for _, ipString := range excludedIPs { excludedIPsMap[ipString] = struct{}{} } discoverCidr := func(cidr *net.IPNet) { ipStream, _ := mapcidr.IPAddressesAsStream(cidr.String()) for ip := range ipStream { // only run host discovery if the ip is not present in the excludedIPsMap if _, exists := excludedIPsMap[ip]; !exists { r.handleHostDiscovery(ip) } } } for _, target4 := range targetsV4 { discoverCidr(target4) } for _, target6 := range targetsv6 { discoverCidr(target6) } if r.options.WarmUpTime > 0 { time.Sleep(time.Duration(r.options.WarmUpTime) * time.Second) } // check if we should stop here or continue with full scan if r.options.OnlyHostDiscovery { r.handleOutput(r.scanner.HostDiscoveryResults) return nil } } switch { case r.options.Stream && !r.options.Passive: // stream active showNetworkCapabilities(r.options) r.scanner.ListenHandler.Phase.Set(scan.Scan) handleStreamIp := func(target string, port *port.Port) bool { if r.scanner.ScanResults.HasSkipped(target) { return false } if r.options.PortThreshold > 0 && r.scanner.ScanResults.GetPortCount(target) >= r.options.PortThreshold { hosts, _ := r.scanner.IPRanger.GetHostsByIP(target) gologger.Info().Msgf("Skipping %s %v, Threshold reached \n", target, hosts) r.scanner.ScanResults.AddSkipped(target) return false } if shouldUseRawPackets { r.RawSocketEnumeration(ctx, target, port) } else { r.wgscan.Add() go r.handleHostPort(ctx, target, port) } return true } for target := range r.streamChannel { if err := r.scanner.IPRanger.Add(target.Cidr); err != nil { gologger.Warning().Msgf("Couldn't track %s in scan results: %s\n", target, err) } if ipStream, err := mapcidr.IPAddressesAsStream(target.Cidr); err == nil { for ip := range ipStream { for _, port := range r.scanner.Ports { if !handleStreamIp(ip, port) { break } } } } else if target.Ip != "" && target.Port != "" { pp, _ := strconv.Atoi(target.Port) handleStreamIp(target.Ip, &port.Port{Port: pp, Protocol: protocol.TCP}) } } r.wgscan.Wait() r.handleOutput(r.scanner.ScanResults) return nil case r.options.Stream && r.options.Passive: // stream passive showNetworkCapabilities(r.options) // create retryablehttp instance httpClient := retryablehttp.NewClient(retryablehttp.DefaultOptionsSingle) r.scanner.ListenHandler.Phase.Set(scan.Scan) for target := range r.streamChannel { if err := r.scanner.IPRanger.Add(target.Cidr); err != nil { gologger.Warning().Msgf("Couldn't track %s in scan results: %s\n", target, err) } ipStream, _ := mapcidr.IPAddressesAsStream(target.Cidr) for ip := range ipStream { r.wgscan.Add() go func(ip string) { defer r.wgscan.Done() // obtain ports from shodan idb shodanURL := fmt.Sprintf(shodanidb.URL, url.QueryEscape(ip)) request, err := retryablehttp.NewRequest(http.MethodGet, shodanURL, nil) if err != nil { gologger.Warning().Msgf("Couldn't create http request for %s: %s\n", ip, err) return } r.limiter.Take() response, err := httpClient.Do(request) if err != nil { gologger.Warning().Msgf("Couldn't retrieve http response for %s: %s\n", ip, err) return } if response.StatusCode != http.StatusOK { gologger.Warning().Msgf("Couldn't retrieve data for %s, server replied with status code: %d\n", ip, response.StatusCode) return } // unmarshal the response data := &shodanidb.ShodanResponse{} if err := json.NewDecoder(response.Body).Decode(data); err != nil { gologger.Warning().Msgf("Couldn't unmarshal json data for %s: %s\n", ip, err) return } var passivePorts []*port.Port for _, p := range data.Ports { pp := &port.Port{Port: p, Protocol: protocol.TCP} passivePorts = append(passivePorts, pp) } filteredPorts, err := excludePorts(r.options, passivePorts) if err != nil { gologger.Warning().Msgf("Couldn't exclude ports for %s: %s\n", ip, err) return } for _, p := range filteredPorts { if r.scanner.OnReceive != nil { r.scanner.OnReceive(&result.HostResult{IP: ip, Ports: []*port.Port{p}}) } r.scanner.ScanResults.AddPort(ip, p) } }(ip) } } r.wgscan.Wait() // Validate the hosts if the user has asked for second step validation if r.options.Verify { r.ConnectVerification() } r.handleOutput(r.scanner.ScanResults) // handle nmap return r.handleNmap() default: showNetworkCapabilities(r.options) ipsCallback := r.getPreprocessedIps if shouldDiscoverHosts && shouldUseRawPackets { ipsCallback = r.getHostDiscoveryIps } // shrinks the ips to the minimum amount of cidr targets, targetsV4, targetsv6, targetsWithPort, err := r.GetTargetIps(ipsCallback) if err != nil { return err } var targetsCount, portsCount, targetsWithPortCount uint64 for _, target := range append(targetsV4, targetsv6...) { if target == nil { continue } targetsCount += mapcidr.AddressCountIpnet(target) } portsCount = uint64(len(r.scanner.Ports)) targetsWithPortCount = uint64(len(targetsWithPort)) r.scanner.ListenHandler.Phase.Set(scan.Scan) Range := targetsCount * portsCount if r.options.EnableProgressBar { r.stats.AddStatic("ports", portsCount) r.stats.AddStatic("hosts", targetsCount) r.stats.AddStatic("retries", r.options.Retries) r.stats.AddStatic("startedAt", time.Now()) r.stats.AddCounter("packets", uint64(0)) r.stats.AddCounter("errors", uint64(0)) r.stats.AddCounter("total", Range*uint64(r.options.Retries)+targetsWithPortCount) r.stats.AddStatic("hosts_with_port", targetsWithPortCount) if err := r.stats.Start(); err != nil { gologger.Warning().Msgf("Couldn't start statistics: %s\n", err) } } // Retries are performed regardless of the previous scan results due to network unreliability for currentRetry := 0; currentRetry < r.options.Retries; currentRetry++ { if currentRetry < r.options.ResumeCfg.Retry { gologger.Debug().Msgf("Skipping Retry: %d\n", currentRetry) continue } // Use current time as seed currentSeed := time.Now().UnixNano() r.options.ResumeCfg.RLock() if r.options.ResumeCfg.Seed > 0 { currentSeed = r.options.ResumeCfg.Seed } r.options.ResumeCfg.RUnlock() // keep track of current retry and seed for resume r.options.ResumeCfg.Lock() r.options.ResumeCfg.Retry = currentRetry r.options.ResumeCfg.Seed = currentSeed r.options.ResumeCfg.Unlock() b := blackrock.New(int64(Range), currentSeed) for index := int64(0); index < int64(Range); index++ { xxx := b.Shuffle(index) ipIndex := xxx / int64(portsCount) portIndex := int(xxx % int64(portsCount)) ip := r.PickIP(targets, ipIndex) port := r.PickPort(portIndex) r.options.ResumeCfg.RLock() resumeCfgIndex := r.options.ResumeCfg.Index r.options.ResumeCfg.RUnlock() if index < resumeCfgIndex { gologger.Debug().Msgf("Skipping \"%s:%d\": Resume - Port scan already completed\n", ip, port.Port) continue } r.limiter.Take() //resume cfg logic r.options.ResumeCfg.Lock() r.options.ResumeCfg.Index = index r.options.ResumeCfg.Unlock() if r.scanner.ScanResults.HasSkipped(ip) { continue } if r.options.PortThreshold > 0 && r.scanner.ScanResults.GetPortCount(ip) >= r.options.PortThreshold { hosts, _ := r.scanner.IPRanger.GetHostsByIP(ip) gologger.Info().Msgf("Skipping %s %v, Threshold reached \n", ip, hosts) r.scanner.ScanResults.AddSkipped(ip) continue } // connect scan if shouldUseRawPackets { r.RawSocketEnumeration(ctx, ip, port) } else { r.wgscan.Add() go r.handleHostPort(ctx, ip, port) } if r.options.EnableProgressBar { r.stats.IncrementCounter("packets", 1) } } // handle the ip:port combination for _, targetWithPort := range targetsWithPort { ip, p, err := net.SplitHostPort(targetWithPort) if err != nil { gologger.Debug().Msgf("Skipping %s: %v\n", targetWithPort, err) continue } // naive port find pp, err := strconv.Atoi(p) if err != nil { gologger.Debug().Msgf("Skipping %s, could not cast port %s: %v\n", targetWithPort, p, err) continue } var portWithMetadata = port.Port{ Port: pp, Protocol: protocol.TCP, } // connect scan if shouldUseRawPackets { r.RawSocketEnumeration(ctx, ip, &portWithMetadata) } else { r.wgscan.Add() go r.handleHostPort(ctx, ip, &portWithMetadata) } if r.options.EnableProgressBar { r.stats.IncrementCounter("packets", 1) } } r.wgscan.Wait() r.options.ResumeCfg.Lock() if r.options.ResumeCfg.Seed > 0 { r.options.ResumeCfg.Seed = 0 } if r.options.ResumeCfg.Index > 0 { // zero also the current index as we are restarting the scan r.options.ResumeCfg.Index = 0 } r.options.ResumeCfg.Unlock() } if r.options.WarmUpTime > 0 { time.Sleep(time.Duration(r.options.WarmUpTime) * time.Second) } r.scanner.ListenHandler.Phase.Set(scan.Done) // Validate the hosts if the user has asked for second step validation if r.options.Verify { r.ConnectVerification() } r.handleOutput(r.scanner.ScanResults) // handle nmap return r.handleNmap() } } func (r *Runner) getHostDiscoveryIps() (ips []*net.IPNet, ipsWithPort []string) { for ip := range r.scanner.HostDiscoveryResults.GetIPs() { ips = append(ips, iputil.ToCidr(string(ip))) } r.scanner.IPRanger.Hosts.Scan(func(ip, _ []byte) error { // ips with port are ignored during host discovery phase if cidr := iputil.ToCidr(string(ip)); cidr == nil { ipsWithPort = append(ipsWithPort, string(ip)) } return nil }) return } func (r *Runner) getPreprocessedIps() (cidrs []*net.IPNet, ipsWithPort []string) { r.scanner.IPRanger.Hosts.Scan(func(ip, _ []byte) error { if cidr := iputil.ToCidr(string(ip)); cidr != nil { cidrs = append(cidrs, cidr) } else { ipsWithPort = append(ipsWithPort, string(ip)) } return nil }) return } func (r *Runner) GetTargetIps(ipsCallback func() ([]*net.IPNet, []string)) (targets, targetsV4, targetsv6 []*net.IPNet, targetsWithPort []string, err error) { targets, targetsWithPort = ipsCallback() // shrinks the ips to the minimum amount of cidr targetsV4, targetsv6 = mapcidr.CoalesceCIDRs(targets) if len(targetsV4) == 0 && len(targetsv6) == 0 && len(targetsWithPort) == 0 { return nil, nil, nil, nil, errors.New("no valid ipv4 or ipv6 targets were found") } return targets, targetsV4, targetsv6, targetsWithPort, nil } func (r *Runner) ShowScanResultOnExit() { r.handleOutput(r.scanner.ScanResults) err := r.handleNmap() if err != nil { gologger.Fatal().Msgf("Could not run enumeration: %s\n", err) } } // Close runner instance func (r *Runner) Close() { _ = os.RemoveAll(r.targetsFile) _ = r.scanner.IPRanger.Hosts.Close() if r.options.EnableProgressBar { _ = r.stats.Stop() } if r.scanner != nil { r.scanner.Close() } if r.limiter != nil { r.limiter.Stop() } } // PickIP randomly func (r *Runner) PickIP(targets []*net.IPNet, index int64) string { for _, target := range targets { subnetIpsCount := int64(mapcidr.AddressCountIpnet(target)) if index < subnetIpsCount { return r.PickSubnetIP(target, index) } index -= subnetIpsCount } return "" } func (r *Runner) PickSubnetIP(network *net.IPNet, index int64) string { ipInt, bits, err := mapcidr.IPToInteger(network.IP) if err != nil { gologger.Warning().Msgf("%s\n", err) return "" } subnetIpInt := big.NewInt(0).Add(ipInt, big.NewInt(index)) ip := mapcidr.IntegerToIP(subnetIpInt, bits) return ip.String() } func (r *Runner) PickPort(index int) *port.Port { return r.scanner.Ports[index] } func (r *Runner) ConnectVerification() { r.scanner.ListenHandler.Phase.Set(scan.Scan) var swg sync.WaitGroup limiter := ratelimit.New(context.Background(), uint(r.options.Rate), time.Second) verifiedResult := result.NewResult() for hostResult := range r.scanner.ScanResults.GetIPsPorts() { limiter.Take() swg.Add(1) go func(hostResult *result.HostResult) { defer swg.Done() results := r.scanner.ConnectVerify(hostResult.IP, hostResult.Ports) verifiedResult.SetPorts(hostResult.IP, results) }(hostResult) } r.scanner.ScanResults = verifiedResult swg.Wait() } func (r *Runner) BackgroundWorkers(ctx context.Context) { r.scanner.StartWorkers(ctx) } func (r *Runner) RawSocketHostDiscovery(ip string) { r.handleHostDiscovery(ip) } func (r *Runner) RawSocketEnumeration(ctx context.Context, ip string, p *port.Port) { select { case <-ctx.Done(): return default: // performs cdn/waf scan exclusions checks if !r.canIScanIfCDN(ip, p) { gologger.Debug().Msgf("Skipping cdn target: %s:%d\n", ip, p.Port) return } if r.scanner.ScanResults.IPHasPort(ip, p) { return } r.limiter.Take() switch p.Protocol { case protocol.TCP: r.scanner.EnqueueTCP(ip, scan.Syn, p) case protocol.UDP: r.scanner.EnqueueUDP(ip, p) } } } // check if an ip can be scanned in case CDN/WAF exclusions are enabled func (r *Runner) canIScanIfCDN(host string, port *port.Port) bool { // if CDN ips are not excluded all scans are allowed if !r.options.ExcludeCDN { return true } // if exclusion is enabled, but the ip is not part of the CDN/WAF ips range we can scan if ok, _, err := r.scanner.CdnCheck(host); err == nil && !ok { return true } // If the cdn is part of the CDN ips range - only ports 80 and 443 are allowed return port.Port == 80 || port.Port == 443 } func (r *Runner) handleHostPort(ctx context.Context, host string, p *port.Port) { defer r.wgscan.Done() select { case <-ctx.Done(): return default: // performs cdn scan exclusions checks if !r.canIScanIfCDN(host, p) { gologger.Debug().Msgf("Skipping cdn target: %s:%d\n", host, p.Port) return } if r.scanner.ScanResults.IPHasPort(host, p) { return } r.limiter.Take() open, err := r.scanner.ConnectPort(host, p, time.Duration(r.options.Timeout)*time.Millisecond) if open && err == nil { r.scanner.ScanResults.AddPort(host, p) if r.scanner.OnReceive != nil { r.scanner.OnReceive(&result.HostResult{IP: host, Ports: []*port.Port{p}}) } } } } func (r *Runner) handleHostDiscovery(host string) { r.limiter.Take() // Pings // - Icmp Echo Request if r.options.IcmpEchoRequestProbe { r.scanner.EnqueueICMP(host, scan.IcmpEchoRequest) } // - Icmp Timestamp Request if r.options.IcmpTimestampRequestProbe { r.scanner.EnqueueICMP(host, scan.IcmpTimestampRequest) } // - Icmp Netmask Request if r.options.IcmpAddressMaskRequestProbe { r.scanner.EnqueueICMP(host, scan.IcmpAddressMaskRequest) } // ARP scan if r.options.ArpPing { r.scanner.EnqueueEthernet(host, scan.Arp) } // Syn Probes if len(r.options.TcpSynPingProbes) > 0 { ports, _ := parsePortsSlice(r.options.TcpSynPingProbes) r.scanner.EnqueueTCP(host, scan.Syn, ports...) } // Ack Probes if len(r.options.TcpAckPingProbes) > 0 { ports, _ := parsePortsSlice(r.options.TcpAckPingProbes) r.scanner.EnqueueTCP(host, scan.Ack, ports...) } // IPv6-ND (for now we broadcast ICMPv6 to ff02::1) if r.options.IPv6NeighborDiscoveryPing { r.scanner.EnqueueICMP("ff02::1", scan.Ndp) } } func (r *Runner) SetSourceIP(sourceIP string) error { ip := net.ParseIP(sourceIP) if ip == nil { return errors.New("invalid source ip") } switch { case iputil.IsIPv4(sourceIP): r.scanner.ListenHandler.SourceIp4 = ip case iputil.IsIPv6(sourceIP): r.scanner.ListenHandler.SourceIP6 = ip default: return errors.New("invalid ip type") } return nil } func (r *Runner) SetSourcePort(sourcePort string) error { isValidPort := iputil.IsPort(sourcePort) if !isValidPort { return errors.New("invalid source port") } port, err := strconv.Atoi(sourcePort) if err != nil { return err } r.scanner.ListenHandler.Port = port return nil } func (r *Runner) SetInterface(interfaceName string) error { networkInterface, err := net.InterfaceByName(r.options.Interface) if err != nil { return err } r.scanner.NetworkInterface = networkInterface r.scanner.ListenHandler.SourceHW = networkInterface.HardwareAddr return nil } func (r *Runner) handleOutput(scanResults *result.Result) { var ( file *os.File err error output string ) // In case the user has given an output file, write all the found // ports to the output file. if r.options.Output != "" { output = r.options.Output // create path if not existing outputFolder := filepath.Dir(output) if fileutil.FolderExists(outputFolder) { mkdirErr := os.MkdirAll(outputFolder, 0700) if mkdirErr != nil { gologger.Error().Msgf("Could not create output folder %s: %s\n", outputFolder, mkdirErr) return } } file, err = os.Create(output) if err != nil { gologger.Error().Msgf("Could not create file %s: %s\n", output, err) return } defer file.Close() } csvFileHeaderEnabled := true switch { case scanResults.HasIPsPorts(): for hostResult := range scanResults.GetIPsPorts() { dt, err := r.scanner.IPRanger.GetHostsByIP(hostResult.IP) if err != nil { continue } if !ipMatchesIpVersions(hostResult.IP, r.options.IPVersion...) { continue } // recover hostnames from ip:port combination for _, p := range hostResult.Ports { ipPort := net.JoinHostPort(hostResult.IP, fmt.Sprint(p.Port)) if dtOthers, ok := r.scanner.IPRanger.Hosts.Get(ipPort); ok { if otherName, _, err := net.SplitHostPort(string(dtOthers)); err == nil { // replace bare ip:port with host for idx, ipCandidate := range dt { if iputil.IsIP(ipCandidate) { dt[idx] = otherName } } } } } buffer := bytes.Buffer{} for _, host := range dt { buffer.Reset() if host == "ip" { host = hostResult.IP } isCDNIP, cdnName, _ := r.scanner.CdnCheck(hostResult.IP) gologger.Info().Msgf("Found %d ports on host %s (%s)\n", len(hostResult.Ports), host, hostResult.IP) // file output if file != nil { if r.options.JSON { err = WriteJSONOutput(host, hostResult.IP, hostResult.Ports, r.options.OutputCDN, isCDNIP, cdnName, file) } else if r.options.CSV { err = WriteCsvOutput(host, hostResult.IP, hostResult.Ports, r.options.OutputCDN, isCDNIP, cdnName, csvFileHeaderEnabled, file) } else { err = WriteHostOutput(host, hostResult.Ports, r.options.OutputCDN, cdnName, file) } if err != nil { gologger.Error().Msgf("Could not write results to file %s for %s: %s\n", output, host, err) } } if r.options.OnResult != nil { r.options.OnResult(&result.HostResult{Host: host, IP: hostResult.IP, Ports: hostResult.Ports}) } } csvFileHeaderEnabled = false } case scanResults.HasIPS(): for hostIP := range scanResults.GetIPs() { dt, err := r.scanner.IPRanger.GetHostsByIP(hostIP) if err != nil { continue } if !ipMatchesIpVersions(hostIP, r.options.IPVersion...) { continue } buffer := bytes.Buffer{} writer := csv.NewWriter(&buffer) for _, host := range dt { buffer.Reset() if host == "ip" { host = hostIP } isCDNIP, cdnName, _ := r.scanner.CdnCheck(hostIP) gologger.Info().Msgf("Found alive host %s (%s)\n", host, hostIP) // console output if r.options.JSON || r.options.CSV { data := &Result{IP: hostIP, TimeStamp: time.Now().UTC()} if r.options.OutputCDN { data.IsCDNIP = isCDNIP data.CDNName = cdnName } if host != hostIP { data.Host = host } } if r.options.JSON { gologger.Silent().Msgf("%s", buffer.String()) } else if r.options.CSV { writer.Flush() gologger.Silent().Msgf("%s", buffer.String()) } else { if r.options.OutputCDN && isCDNIP { gologger.Silent().Msgf("%s [%s]\n", host, cdnName) } else { gologger.Silent().Msgf("%s\n", host) } } // file output if file != nil { if r.options.JSON { err = WriteJSONOutput(host, hostIP, nil, r.options.OutputCDN, isCDNIP, cdnName, file) } else if r.options.CSV { err = WriteCsvOutput(host, hostIP, nil, r.options.OutputCDN, isCDNIP, cdnName, csvFileHeaderEnabled, file) } else { err = WriteHostOutput(host, nil, r.options.OutputCDN, cdnName, file) } if err != nil { gologger.Error().Msgf("Could not write results to file %s for %s: %s\n", output, host, err) } } if r.options.OnResult != nil { r.options.OnResult(&result.HostResult{Host: host, IP: hostIP}) } } csvFileHeaderEnabled = false } } } func ipMatchesIpVersions(ip string, ipVersions ...string) bool { for _, ipVersion := range ipVersions { if ipVersion == scan.IPv4 && iputil.IsIPv4(ip) { return true } if ipVersion == scan.IPv6 && iputil.IsIPv6(ip) { return true } } return false } naabu-2.3.1/v2/pkg/runner/targets.go000066400000000000000000000166541461716101700172440ustar00rootroot00000000000000package runner import ( "bufio" "flag" "fmt" "io" "net" "os" "strings" "github.com/projectdiscovery/gologger" "github.com/projectdiscovery/mapcidr/asn" "github.com/projectdiscovery/naabu/v2/pkg/privileges" "github.com/projectdiscovery/naabu/v2/pkg/scan" iputil "github.com/projectdiscovery/utils/ip" readerutil "github.com/projectdiscovery/utils/reader" "github.com/remeh/sizedwaitgroup" ) func (r *Runner) Load() error { r.scanner.ListenHandler.Phase.Set(scan.Init) // merge all target sources into a file targetfile, err := r.mergeToFile() if err != nil { return err } r.targetsFile = targetfile // pre-process all targets (resolves all non fqdn targets to ip address) err = r.PreProcessTargets() if err != nil { gologger.Warning().Msgf("%s\n", err) } return nil } func (r *Runner) mergeToFile() (string, error) { // merge all targets in a unique file tempInput, err := os.CreateTemp("", "stdin-input-*") if err != nil { return "", err } defer tempInput.Close() // target defined via CLI argument if len(r.options.Host) > 0 { for _, v := range r.options.Host { fmt.Fprintf(tempInput, "%s\n", v) } } // Targets from file if r.options.HostsFile != "" { f, err := os.Open(r.options.HostsFile) if err != nil { return "", err } defer f.Close() if _, err := io.Copy(tempInput, f); err != nil { return "", err } } // targets from STDIN if r.options.Stdin { timeoutReader := readerutil.TimeoutReader{Reader: os.Stdin, Timeout: r.options.InputReadTimeout} if _, err := io.Copy(tempInput, timeoutReader); err != nil { return "", err } } // all additional non-named cli arguments are interpreted as targets for _, target := range flag.Args() { fmt.Fprintf(tempInput, "%s\n", target) } filename := tempInput.Name() return filename, nil } func (r *Runner) PreProcessTargets() error { if r.options.Stream { defer close(r.streamChannel) } wg := sizedwaitgroup.New(r.options.Threads) f, err := os.Open(r.targetsFile) if err != nil { return err } defer f.Close() s := bufio.NewScanner(f) for s.Scan() { wg.Add() func(target string) { defer wg.Done() if err := r.AddTarget(target); err != nil { gologger.Warning().Msgf("%s\n", err) } }(s.Text()) } wg.Wait() return nil } func (r *Runner) AddTarget(target string) error { target = strings.TrimSpace(target) if target == "" { return nil } if asn.IsASN(target) { // Get CIDRs for ASN cidrs, err := asn.GetCIDRsForASNNum(target) if err != nil { return err } for _, cidr := range cidrs { if r.options.Stream { r.streamChannel <- Target{Cidr: cidr.String()} } else if err := r.scanner.IPRanger.AddHostWithMetadata(cidr.String(), "cidr"); err != nil { // Add cidr directly to ranger, as single ips would allocate more resources later gologger.Warning().Msgf("%s\n", err) } } return nil } if iputil.IsCIDR(target) { if r.options.Stream { r.streamChannel <- Target{Cidr: target} } else if err := r.scanner.IPRanger.AddHostWithMetadata(target, "cidr"); err != nil { // Add cidr directly to ranger, as single ips would allocate more resources later gologger.Warning().Msgf("%s\n", err) } return nil } if iputil.IsIP(target) && !r.scanner.IPRanger.Contains(target) { ip := net.ParseIP(target) // convert ip4 expressed as ip6 back to ip4 if ip.To4() != nil { target = ip.To4().String() } if r.options.Stream { r.streamChannel <- Target{Cidr: iputil.ToCidr(target).String()} } else { metadata := "ip" if r.options.ReversePTR { names, err := iputil.ToFQDN(target) if err != nil { gologger.Debug().Msgf("reverse ptr failed for %s: %s\n", target, err) } else { metadata = strings.Trim(names[0], ".") } } err := r.scanner.IPRanger.AddHostWithMetadata(target, metadata) if err != nil { gologger.Warning().Msgf("%s\n", err) } } return nil } host, port, hasPort := getPort(target) targetToResolve := target if hasPort { targetToResolve = host } ips, err := r.resolveFQDN(targetToResolve) if err != nil { return err } for _, ip := range ips { if r.options.Stream { if hasPort { r.streamChannel <- Target{Ip: ip, Port: port} if len(r.options.Ports) > 0 { r.streamChannel <- Target{Cidr: iputil.ToCidr(ip).String()} if err := r.scanner.IPRanger.AddHostWithMetadata(joinHostPort(ip, ""), target); err != nil { gologger.Warning().Msgf("%s\n", err) } } } else { r.streamChannel <- Target{Cidr: iputil.ToCidr(ip).String()} if err := r.scanner.IPRanger.AddHostWithMetadata(joinHostPort(ip, port), target); err != nil { gologger.Warning().Msgf("%s\n", err) } } } else if hasPort { if len(r.options.Ports) > 0 { if err := r.scanner.IPRanger.AddHostWithMetadata(joinHostPort(ip, ""), target); err != nil { gologger.Warning().Msgf("%s\n", err) } } else { if err := r.scanner.IPRanger.AddHostWithMetadata(joinHostPort(ip, port), target); err != nil { gologger.Warning().Msgf("%s\n", err) } } } else if err := r.scanner.IPRanger.AddHostWithMetadata(ip, target); err != nil { gologger.Warning().Msgf("%s\n", err) } } return nil } func joinHostPort(host, port string) string { if port == "" { return host } return net.JoinHostPort(host, port) } func (r *Runner) resolveFQDN(target string) ([]string, error) { ipsV4, ipsV6, err := r.host2ips(target) if err != nil { return nil, err } var ( initialHosts []string initialHostsV6 []string hostIPS []string ) for _, ip := range ipsV4 { if !r.scanner.IPRanger.Np.ValidateAddress(ip) { gologger.Warning().Msgf("Skipping host %s as ip %s was excluded\n", target, ip) continue } initialHosts = append(initialHosts, ip) } for _, ip := range ipsV6 { if !r.scanner.IPRanger.Np.ValidateAddress(ip) { gologger.Warning().Msgf("Skipping host %s as ip %s was excluded\n", target, ip) continue } initialHostsV6 = append(initialHostsV6, ip) } if len(initialHosts) == 0 && len(initialHostsV6) == 0 { return []string{}, nil } // If the user has specified ping probes, perform ping on addresses if privileges.IsPrivileged && r.options.Ping && len(initialHosts) > 1 { // Scan the hosts found for ping probes pingResults, err := scan.PingHosts(initialHosts) if err != nil { gologger.Warning().Msgf("Could not perform ping scan on %s: %s\n", target, err) return []string{}, err } for _, result := range pingResults.Hosts { if result.Type == scan.HostActive { gologger.Debug().Msgf("Ping probe succeed for %s: latency=%s\n", result.Host, result.Latency) } else { gologger.Debug().Msgf("Ping probe failed for %s: error=%s\n", result.Host, result.Error) } } // Get the fastest host in the list of hosts fastestHost, err := pingResults.GetFastestHost() if err != nil { gologger.Warning().Msgf("No active host found for %s: %s\n", target, err) return []string{}, err } gologger.Info().Msgf("Fastest host found for target: %s (%s)\n", fastestHost.Host, fastestHost.Latency) hostIPS = append(hostIPS, fastestHost.Host) } else if r.options.ScanAllIPS { hostIPS = append(initialHosts, initialHostsV6...) } else { if len(initialHosts) > 0 { hostIPS = append(hostIPS, initialHosts[0]) } if len(initialHostsV6) > 0 { hostIPS = append(hostIPS, initialHostsV6[0]) } } for _, hostIP := range hostIPS { if r.scanner.IPRanger.Contains(hostIP) { gologger.Debug().Msgf("Using ip %s for host %s enumeration\n", hostIP, target) } } return hostIPS, nil } naabu-2.3.1/v2/pkg/runner/targets_test.go000066400000000000000000000022071461716101700202700ustar00rootroot00000000000000package runner import ( "testing" "github.com/projectdiscovery/ipranger" "github.com/projectdiscovery/naabu/v2/pkg/scan" "github.com/stretchr/testify/require" ) func Test_AddTarget(t *testing.T) { ipranger, _ := ipranger.New() defer ipranger.Close() r := &Runner{ options: &Options{}, scanner: &scan.Scanner{IPRanger: ipranger}, } // IPV6 Compressed should generate a warning err := r.AddTarget("::ffff:c0a8:101") require.Nil(t, err, "compressed ipv6 incorrectly parsed") // IPV6 Expanded (Shortened) err = r.AddTarget("0:0:0:0:0:ffff:c0a8:0101") require.Nil(t, err, "expanded shortened ipv6 incorrectly parsed") // IPV6 Expanded err = r.AddTarget("0000:0000:0000:0000:0000:ffff:c0a8:0101") require.Nil(t, err, "fully expanded ipv6 incorrectly parsed") // IPV4 err = r.AddTarget("127.0.0.1") require.Nil(t, err, "ipv4 incorrectly parsed") // IPV4 cidr err = r.AddTarget("127.0.0.1/24") require.Nil(t, err, "ipv4 cidr incorrectly parsed") // todo: excluding due to api instability (https://github.com/projectdiscovery/asnmap/issues/198) // err = r.AddTarget("AS14421") // require.Nil(t, err, "ASN incorrectly parsed") } naabu-2.3.1/v2/pkg/runner/util.go000066400000000000000000000031521461716101700165350ustar00rootroot00000000000000package runner import ( "fmt" "net" "github.com/projectdiscovery/gologger" "github.com/projectdiscovery/naabu/v2/pkg/scan" iputil "github.com/projectdiscovery/utils/ip" osutil "github.com/projectdiscovery/utils/os" sliceutil "github.com/projectdiscovery/utils/slice" ) func (r *Runner) host2ips(target string) (targetIPsV4 []string, targetIPsV6 []string, err error) { // If the host is a Domain, then perform resolution and discover all IP // addresses for a given host. Else use that host for port scanning if !iputil.IsIP(target) { dnsData, err := r.dnsclient.QueryMultiple(target) if err != nil || dnsData == nil { gologger.Warning().Msgf("Could not get IP for host: %s\n", target) return nil, nil, err } if len(r.options.IPVersion) > 0 { if sliceutil.Contains(r.options.IPVersion, scan.IPv4) { targetIPsV4 = append(targetIPsV4, dnsData.A...) } if sliceutil.Contains(r.options.IPVersion, scan.IPv6) { targetIPsV6 = append(targetIPsV6, dnsData.AAAA...) } } else { targetIPsV4 = append(targetIPsV4, dnsData.A...) } if len(targetIPsV4) == 0 && len(targetIPsV6) == 0 { return targetIPsV4, targetIPsV6, fmt.Errorf("no IP addresses found for host: %s", target) } } else { targetIPsV4 = append(targetIPsV6, target) gologger.Debug().Msgf("Found %d addresses for %s\n", len(targetIPsV4), target) } return } func isOSSupported() bool { return osutil.IsLinux() || osutil.IsOSX() } func getPort(target string) (string, string, bool) { host, port, err := net.SplitHostPort(target) if err == nil && iputil.IsPort(port) { return host, port, true } return target, "", false } naabu-2.3.1/v2/pkg/runner/util_test.go000066400000000000000000000023451461716101700175770ustar00rootroot00000000000000package runner import ( "testing" "github.com/projectdiscovery/dnsx/libs/dnsx" "github.com/projectdiscovery/naabu/v2/pkg/scan" "github.com/stretchr/testify/assert" ) func Test_host2ips(t *testing.T) { tests := []struct { args string want []string wantV6 []string wantErr bool }{ {"10.10.10.10", []string{"10.10.10.10"}, nil, false}, {"localhost", []string{"127.0.0.1"}, []string{"::1"}, false}, // some linux distribution don't have ::1 in /etc/hosts {"aaaa", nil, nil, true}, {"10.10.10.0/24", nil, nil, true}, } r, err := NewRunner(&Options{IPVersion: []string{scan.IPv4, scan.IPv6}, Retries: 1}) assert.Nil(t, err) if dnsclient, err := dnsx.New(dnsx.DefaultOptions); err != nil { assert.Error(t, err) } else { r.dnsclient = dnsclient } for _, tt := range tests { t.Run(tt.args, func(t *testing.T) { var options Options options.TopPorts = tt.args got, gotV6, err := r.host2ips(tt.args) if tt.wantErr { assert.NotNil(t, err) } else { assert.Nil(t, err) } assert.Equal(t, tt.want, got) // As some distributions don't handle correctly ipv6 we compare results only if necessary if len(gotV6) > 0 && len(tt.wantV6) > 0 { assert.Equal(t, tt.wantV6, gotV6) } }) } } naabu-2.3.1/v2/pkg/runner/validate.go000066400000000000000000000136671461716101700173650ustar00rootroot00000000000000package runner import ( "flag" "fmt" "net" "strings" "github.com/pkg/errors" "github.com/projectdiscovery/naabu/v2/pkg/port" "github.com/projectdiscovery/naabu/v2/pkg/privileges" "github.com/projectdiscovery/naabu/v2/pkg/scan" fileutil "github.com/projectdiscovery/utils/file" iputil "github.com/projectdiscovery/utils/ip" osutil "github.com/projectdiscovery/utils/os" sliceutil "github.com/projectdiscovery/utils/slice" "github.com/projectdiscovery/gologger" "github.com/projectdiscovery/gologger/formatter" "github.com/projectdiscovery/gologger/levels" ) var ( errNoInputList = errors.New("no input list provided") errOutputMode = errors.New("both verbose and silent mode specified") errZeroValue = errors.New("cannot be zero") errTwoOutputMode = errors.New("both json and csv mode specified") ) // ValidateOptions validates the configuration options passed func (options *Options) ValidateOptions() error { // Check if Host, list of domains, or stdin info was provided. // If none was provided, then return. if options.Host == nil && options.HostsFile == "" && !options.Stdin && len(flag.Args()) == 0 { return errNoInputList } // Both verbose and silent flags were used if options.Verbose && options.Silent { return errOutputMode } if options.JSON && options.CSV { return errTwoOutputMode } if options.Timeout == 0 { return errors.Wrap(errZeroValue, "timeout") } else if !privileges.IsPrivileged && options.Timeout == DefaultPortTimeoutSynScan { options.Timeout = DefaultPortTimeoutConnectScan } if options.Rate == 0 { return errors.Wrap(errZeroValue, "rate") } else if !privileges.IsPrivileged && options.Rate == DefaultRateSynScan { options.Rate = DefaultRateConnectScan } if !privileges.IsPrivileged && options.Retries == DefaultRetriesSynScan { options.Retries = DefaultRetriesConnectScan } if options.Interface != "" { if _, err := net.InterfaceByName(options.Interface); err != nil { return fmt.Errorf("interface %s not found", options.Interface) } } if fileutil.FileExists(options.Resolvers) { chanResolvers, err := fileutil.ReadFile(options.Resolvers) if err != nil { return err } for resolver := range chanResolvers { options.baseResolvers = append(options.baseResolvers, resolver) } } else if options.Resolvers != "" { for _, resolver := range strings.Split(options.Resolvers, ",") { options.baseResolvers = append(options.baseResolvers, strings.TrimSpace(resolver)) } } // passive mode enables automatically stream if options.Passive { options.Stream = true } // stream if options.Stream { if options.Resume { return errors.New("resume not supported in stream active mode") } if options.EnableProgressBar { return errors.New("stats not supported in stream active mode") } if options.Nmap { return errors.New("nmap not supported in stream active mode") } } // stream passive if options.Verify && options.Stream && !options.Passive { return errors.New("verify not supported in stream active mode") } // Parse and validate source ip and source port // checks if source ip is ip only isOnlyIP := iputil.IsIP(options.SourceIP) if options.SourceIP != "" && !isOnlyIP { ip, port, err := net.SplitHostPort(options.SourceIP) if err != nil { return err } options.SourceIP = ip options.SourcePort = port } if len(options.IPVersion) > 0 && !sliceutil.ContainsItems([]string{scan.IPv4, scan.IPv6}, options.IPVersion) { return errors.New("IP Version must be 4 and/or 6") } // Return error if any host discovery releated option is provided but host discovery is disabled if options.SkipHostDiscovery && options.hasProbes() { return errors.New("discovery probes were provided but host discovery is disabled") } // Host Discovery mode needs provileged access if options.OnlyHostDiscovery && !privileges.IsPrivileged { if osutil.IsWindows() { return errors.New("host discovery not (yet) supported on windows") } return errors.New("sudo access required to perform host discovery") } if options.PortThreshold < 0 || options.PortThreshold > 65535 { return errors.New("port threshold must be between 0 and 65535") } if options.Proxy != "" && options.ScanType == SynScan { gologger.Warning().Msgf("Syn Scan can't be used with socks proxy: falling back to connect scan") options.ScanType = ConnectScan } if options.ScanType == SynScan && scan.PkgRouter == nil { gologger.Warning().Msgf("Routing could not be determined (are you using a VPN?).falling back to connect scan") options.ScanType = ConnectScan } return nil } // configureOutput configures the output on the screen func (options *Options) configureOutput() { if options.Verbose { gologger.DefaultLogger.SetMaxLevel(levels.LevelVerbose) } if options.Debug { gologger.DefaultLogger.SetMaxLevel(levels.LevelDebug) } if options.NoColor { gologger.DefaultLogger.SetFormatter(formatter.NewCLI(true)) } if options.Silent { gologger.DefaultLogger.SetMaxLevel(levels.LevelSilent) } } // ConfigureHostDiscovery enables default probes if none is specified // but host discovery option was requested func (options *Options) configureHostDiscovery(ports []*port.Port) { // if less than two ports are specified as input, reduce time and scan directly if len(ports) <= 2 { gologger.Info().Msgf("Host discovery disabled: less than two ports were specified") options.SkipHostDiscovery = true } if options.shouldDiscoverHosts() && !options.hasProbes() { // if no options were defined enable // - ICMP Echo Request // - ICMP timestamp // - TCP SYN on port 80 // - TCP SYN on port 443 // - TCP ACK on port 80 // - TCP ACK on port 443 options.IcmpEchoRequestProbe = true options.IcmpTimestampRequestProbe = true options.TcpSynPingProbes = append(options.TcpSynPingProbes, "80") options.TcpSynPingProbes = append(options.TcpSynPingProbes, "443") options.TcpAckPingProbes = append(options.TcpAckPingProbes, "80") options.TcpAckPingProbes = append(options.TcpAckPingProbes, "443") } } naabu-2.3.1/v2/pkg/runner/validate_test.go000066400000000000000000000010561461716101700204110ustar00rootroot00000000000000package runner import ( "testing" "github.com/pkg/errors" "github.com/stretchr/testify/assert" ) func TestOptions(t *testing.T) { options := Options{} assert.ErrorIs(t, errNoInputList, options.ValidateOptions()) options.Host = []string{"target1", "target2"} assert.EqualError(t, options.ValidateOptions(), errors.Wrap(errZeroValue, "timeout").Error()) options.Timeout = 2 assert.EqualError(t, options.ValidateOptions(), errors.Wrap(errZeroValue, "rate").Error()) options.Resolvers = "aaabbbccc" assert.NotNil(t, options.ValidateOptions()) } naabu-2.3.1/v2/pkg/scan/000077500000000000000000000000001461716101700146435ustar00rootroot00000000000000naabu-2.3.1/v2/pkg/scan/arp_unix.go000066400000000000000000000032551461716101700170240ustar00rootroot00000000000000//go:build linux || darwin package scan import ( "errors" "net" "github.com/google/gopacket" "github.com/google/gopacket/layers" "github.com/projectdiscovery/gologger" ) func init() { ArpRequestAsync = arpRequestAsync } // ArpRequestAsync asynchronous to the target ip address func arpRequestAsync(ip string) { networkInterface, _, sourceIP, err := PkgRouter.Route(net.ParseIP(ip)) if networkInterface == nil { err = errors.New("Could not send ARP Request packet to " + ip + ": no interface with outbound source found") } if err != nil { gologger.Debug().Msgf("%s\n", err) return } // network layers eth := layers.Ethernet{ SrcMAC: networkInterface.HardwareAddr, DstMAC: net.HardwareAddr{0xff, 0xff, 0xff, 0xff, 0xff, 0xff}, EthernetType: layers.EthernetTypeARP, } arp := layers.ARP{ AddrType: layers.LinkTypeEthernet, Protocol: layers.EthernetTypeIPv4, HwAddressSize: 6, ProtAddressSize: 4, Operation: layers.ARPRequest, SourceHwAddress: []byte(networkInterface.HardwareAddr), SourceProtAddress: sourceIP.To4(), DstHwAddress: []byte{0, 0, 0, 0, 0, 0}, DstProtAddress: net.ParseIP(ip).To4(), } // Set up buffer and options for serialization. buf := gopacket.NewSerializeBuffer() opts := gopacket.SerializeOptions{ FixLengths: true, ComputeChecksums: true, } err = gopacket.SerializeLayers(buf, opts, ð, &arp) if err != nil { gologger.Warning().Msgf("%s\n", err) return } // send the packet out on every interface for _, handler := range handlers.EthernetActive { err := handler.WritePacketData(buf.Bytes()) if err != nil { gologger.Warning().Msgf("%s\n", err) } } } naabu-2.3.1/v2/pkg/scan/arp_win.go000066400000000000000000000001301461716101700166230ustar00rootroot00000000000000//go:build windows package scan func init() { ArpRequestAsync = func(ip string) {} } naabu-2.3.1/v2/pkg/scan/cdn.go000066400000000000000000000013451461716101700157410ustar00rootroot00000000000000package scan import ( "net" "github.com/pkg/errors" iputil "github.com/projectdiscovery/utils/ip" ) // CdnCheck verifies if the given ip is part of Cdn/WAF ranges func (s *Scanner) CdnCheck(ip string) (bool, string, error) { if s.cdn == nil { return false, "", errors.New("cdn client not initialized") } if !iputil.IsIP(ip) { return false, "", errors.Errorf("%s is not a valid ip", ip) } // the goal is to check if ip is part of cdn/waf to decide if target should be scanned or not // since 'cloud' itemtype does not fit logic here , we consider target is not part of cdn/waf matched, value, itemType, err := s.cdn.Check(net.ParseIP((ip))) if itemType == "cloud" { return false, "", err } return matched, value, err } naabu-2.3.1/v2/pkg/scan/cdn_test.go000066400000000000000000000011071461716101700167740ustar00rootroot00000000000000package scan import ( "testing" "github.com/stretchr/testify/assert" ) func TestCdnCheck(t *testing.T) { s, err := NewScanner(&Options{ExcludeCdn: true}) assert.Nil(t, err) tests := []struct { args string want bool wantErr bool }{ {"192.168.1.1", false, false}, {"10.10.10.10", false, false}, {"aaaaa", false, true}, } for _, tt := range tests { t.Run(tt.args, func(t *testing.T) { isCdn, _, err := s.CdnCheck(tt.args) if tt.wantErr { assert.NotNil(t, err) } else { assert.Nil(t, err) } assert.Equal(t, tt.want, isCdn) }) } } naabu-2.3.1/v2/pkg/scan/connect.go000066400000000000000000000012021461716101700166160ustar00rootroot00000000000000package scan import ( "fmt" "net" "github.com/projectdiscovery/gologger" "github.com/projectdiscovery/naabu/v2/pkg/port" ) // ConnectVerify is used to verify if ports are accurate using a connect request func (s *Scanner) ConnectVerify(host string, ports []*port.Port) []*port.Port { var verifiedPorts []*port.Port for _, p := range ports { conn, err := net.DialTimeout(p.Protocol.String(), fmt.Sprintf("%s:%d", host, p.Port), s.timeout) if err != nil { continue } gologger.Debug().Msgf("Validated active port %d on %s\n", p.Port, host) conn.Close() verifiedPorts = append(verifiedPorts, p) } return verifiedPorts } naabu-2.3.1/v2/pkg/scan/connect_test.go000066400000000000000000000014261461716101700176650ustar00rootroot00000000000000package scan import ( "net" "testing" "github.com/projectdiscovery/naabu/v2/pkg/port" "github.com/projectdiscovery/naabu/v2/pkg/protocol" "github.com/stretchr/testify/assert" ) func TestConnectVerify(t *testing.T) { go func() { // start tcp server l, err := net.Listen("tcp", ":17895") if err != nil { assert.Nil(t, err) } defer l.Close() for { conn, err := l.Accept() if err != nil { return } defer conn.Close() } }() s, err := NewScanner(&Options{}) assert.Nil(t, err) wanted := []*port.Port{ {Port: 17895, Protocol: protocol.TCP}, } targetPorts := []*port.Port{ {Port: 17895, Protocol: protocol.TCP}, {Port: 17896, Protocol: protocol.TCP}, } got := s.ConnectVerify("localhost", targetPorts) assert.EqualValues(t, wanted, got) } naabu-2.3.1/v2/pkg/scan/externalip.go000066400000000000000000000010051461716101700173410ustar00rootroot00000000000000package scan import ( "context" "io" "net/http" ) // WhatsMyIP attempts to obtain the external ip through public api func WhatsMyIP() (string, error) { req, err := http.NewRequestWithContext(context.Background(), http.MethodGet, "https://api.ipify.org?format=text", nil) if err != nil { return "", nil } resp, err := http.DefaultClient.Do(req) if err != nil { return "", err } defer resp.Body.Close() ip, err := io.ReadAll(resp.Body) if err != nil { return "", err } return string(ip), nil } naabu-2.3.1/v2/pkg/scan/externalip_test.go000066400000000000000000000003461461716101700204070ustar00rootroot00000000000000package scan // todo: temporary disabling the test as the third-party service is not working // func TestWhatsMyIP(t *testing.T) { // externalIp, err := WhatsMyIP() // assert.Nil(t, err) // assert.NotEmpty(t, externalIp) // } naabu-2.3.1/v2/pkg/scan/icmp.go000066400000000000000000000162101461716101700161220ustar00rootroot00000000000000//go:build linux || darwin package scan import ( "encoding/binary" "fmt" "net" "os" "time" "github.com/projectdiscovery/gologger" iputil "github.com/projectdiscovery/utils/ip" "golang.org/x/net/icmp" "golang.org/x/net/ipv4" "golang.org/x/net/ipv6" ) const ( originTimestamp = 4 receiveTimestamp = 8 transmitTimestamp = 12 ) func init() { pingIcmpEchoRequestCallback = PingIcmpEchoRequest pingIcmpTimestampRequestCallback = PingIcmpTimestampRequest } // PingIcmpEchoRequest synchronous to the target ip address func PingIcmpEchoRequest(ip string, timeout time.Duration) bool { destAddr := &net.IPAddr{IP: net.ParseIP(ip)} c, err := icmp.ListenPacket("ip4:icmp", "0.0.0.0") if err != nil { return false } defer c.Close() m := icmp.Message{ Type: ipv4.ICMPTypeEcho, Code: 0, Body: &icmp.Echo{ ID: os.Getpid() & 0xffff, Data: []byte(""), }, } data, err := m.Marshal(nil) if err != nil { return false } _, err = c.WriteTo(data, destAddr) if err != nil { return false } reply := make([]byte, 1500) err = c.SetReadDeadline(time.Now().Add(timeout)) if err != nil { return false } n, SourceIP, err := c.ReadFrom(reply) // timeout if err != nil { return false } // if anything is read from the connection it means that the host is alive if destAddr.String() == SourceIP.String() && n > 0 { return true } return false } // PingIcmpEchoRequestAsync asynchronous to the target ip address func PingIcmpEchoRequestAsync(ip string) { destinationIP := net.ParseIP(ip) var destAddr net.Addr m := icmp.Message{ Code: 0, Body: &icmp.Echo{ ID: os.Getpid() & 0xffff, Seq: 1, Data: []byte(""), }, } var packetListener net.PacketConn switch { case iputil.IsIPv4(ip): m.Type = ipv4.ICMPTypeEcho packetListener = icmpConn4 destAddr = &net.IPAddr{IP: destinationIP} case iputil.IsIPv6(ip): m.Type = ipv6.ICMPTypeEchoRequest packetListener = icmpConn6 networkInterface, _, _, err := PkgRouter.Route(destinationIP) if networkInterface == nil { err = fmt.Errorf("could not send ICMP Echo Request packet to %s: no interface with outbout source ipv6 found", destinationIP) } if err != nil { gologger.Debug().Msgf("%s\n", err) return } destAddr = &net.UDPAddr{IP: destinationIP, Zone: networkInterface.Name} } data, err := m.Marshal(nil) if err != nil { return } retries := 0 send: if retries >= maxRetries { return } _, err = packetListener.WriteTo(data, destAddr) if err != nil { retries++ // introduce a small delay to allow the network interface to flush the queue time.Sleep(time.Duration(DeadlineSec) * time.Millisecond) goto send } } // PingIcmpTimestampRequest synchronous to the target ip address func PingIcmpTimestampRequest(ip string, timeout time.Duration) bool { destAddr := &net.IPAddr{IP: net.ParseIP(ip)} c, err := icmp.ListenPacket("ip4:icmp", "0.0.0.0") if err != nil { return false } defer c.Close() m := icmp.Message{ Type: ipv4.ICMPTypeTimestamp, Code: 0, Body: &Timestamp{ ID: os.Getpid() & 0xffff, Seq: 0, OriginTimestamp: 0, }, } data, err := m.Marshal(nil) if err != nil { return false } _, err = c.WriteTo(data, destAddr) if err != nil { return false } reply := make([]byte, 1500) err = c.SetReadDeadline(time.Now().Add(timeout)) if err != nil { return false } n, SourceIP, err := c.ReadFrom(reply) // timeout if err != nil { return false } // if anything is read from the connection it means that the host is alive if destAddr.String() == SourceIP.String() && n > 0 { return true } return false } // PingIcmpTimestampRequestAsync synchronous to the target ip address - ipv4 only func PingIcmpTimestampRequestAsync(ip string) { if !iputil.IsIPv4(ip) { return } destAddr := &net.IPAddr{IP: net.ParseIP(ip)} m := icmp.Message{ Type: ipv4.ICMPTypeTimestamp, Code: 0, Body: &Timestamp{ ID: os.Getpid() & 0xffff, Seq: 0, OriginTimestamp: 0, }, } data, err := m.Marshal(nil) if err != nil { return } _, err = icmpConn4.WriteTo(data, destAddr) if err != nil { return } } // Timestamp ICMP structure type Timestamp struct { ID int Seq int OriginTimestamp uint32 ReceiveTimestamp uint32 TransmitTimestamp uint32 } const marshalledTimestampLen = 16 // Len returns default timestamp length func (t *Timestamp) Len(_ int) int { if t == nil { return 0 } return marshalledTimestampLen } // Marshal the timestamp structure func (t *Timestamp) Marshal(_ int) ([]byte, error) { bSize := marshalledTimestampLen / 2 b := make([]byte, marshalledTimestampLen) b[0], b[1] = byte(t.ID>>bSize), byte(t.ID) b[2], b[3] = byte(t.Seq>>bSize), byte(t.Seq) unparseInt := func(i uint32) (byte, byte, byte, byte) { bs := make([]byte, 4) binary.LittleEndian.PutUint32(bs, i) return bs[3], bs[2], bs[1], bs[0] } b[4], b[5], b[6], b[7] = unparseInt(t.OriginTimestamp) b[8], b[9], b[10], b[11] = unparseInt(t.ReceiveTimestamp) b[12], b[13], b[14], b[15] = unparseInt(t.TransmitTimestamp) return b, nil } // ParseTimestamp to MessageBody structure func ParseTimestamp(_ int, b []byte) (icmp.MessageBody, error) { bodyLen := len(b) if bodyLen != marshalledTimestampLen { return nil, fmt.Errorf("timestamp body length %d not equal to 16", bodyLen) } p := &Timestamp{ID: int(b[0])<<8 | int(b[1]), Seq: int(b[2])<<8 | int(b[3])} parseInt := func(start int) uint32 { return uint32(b[start])<<24 | uint32(b[start+1])<<16 | uint32(b[start+2])<<8 | uint32(b[start+3]) } p.OriginTimestamp = parseInt(originTimestamp) p.ReceiveTimestamp = parseInt(receiveTimestamp) p.TransmitTimestamp = parseInt(transmitTimestamp) return p, nil } // PingIcmpAddressMaskRequestAsync asynchronous to the target ip address - ipv4 only func PingIcmpAddressMaskRequestAsync(ip string) { if !iputil.IsIPv4(ip) { return } destAddr := &net.IPAddr{IP: net.ParseIP(ip)} m := icmp.Message{ Type: ipv4.ICMPType(17), Code: 0, Body: &AddressMask{ ID: os.Getpid() & 0xffff, Seq: 0, AddressMask: 0, }, } data, err := m.Marshal(nil) if err != nil { return } retries := 0 send: if retries >= maxRetries { return } _, err = icmpConn4.WriteTo(data, destAddr) if err != nil { retries++ // introduce a small delay to allow the network interface to flush the queue time.Sleep(time.Duration(DeadlineSec) * time.Millisecond) goto send } } // AddressMask ICMP structure type AddressMask struct { ID int Seq int AddressMask uint32 } const marshalledAddressMaskLen = 8 // Len returns default timestamp length func (a *AddressMask) Len(_ int) int { if a == nil { return 0 } return marshalledAddressMaskLen } // Marshal the address mask structure func (a *AddressMask) Marshal(_ int) ([]byte, error) { bSize := marshalledAddressMaskLen / 2 b := make([]byte, marshalledAddressMaskLen) b[0], b[1] = byte(a.ID>>bSize), byte(a.ID) b[2], b[3] = byte(a.Seq>>bSize), byte(a.Seq) unparseInt := func(i uint32) (byte, byte, byte, byte) { bs := make([]byte, 4) binary.LittleEndian.PutUint32(bs, i) return bs[3], bs[2], bs[1], bs[0] } b[4], b[5], b[6], b[7] = unparseInt(a.AddressMask) return b, nil } naabu-2.3.1/v2/pkg/scan/ndp.go000066400000000000000000000021571461716101700157600ustar00rootroot00000000000000//go:build linux || darwin package scan import ( "errors" "net" "os" "time" "github.com/projectdiscovery/gologger" "golang.org/x/net/icmp" "golang.org/x/net/ipv6" ) // PingNdpRequestAsync asynchronous to the target ip address func PingNdpRequestAsync(ip string) { networkInterface, _, _, err := PkgRouter.Route(net.ParseIP(ip)) if networkInterface == nil { err = errors.New("Could not send PingNdp Request packet to " + ip + ": no interface with outbound source found") } if err != nil { gologger.Debug().Msgf("%s\n", err) return } destAddr := &net.UDPAddr{IP: net.ParseIP(ip), Zone: networkInterface.Name} m := icmp.Message{ Type: ipv6.ICMPTypeEchoRequest, Code: 0, Body: &icmp.Echo{ ID: os.Getpid() & 0xffff, Seq: 1, Data: []byte(""), }, } data, err := m.Marshal(nil) if err != nil { return } retries := 0 send: if retries >= maxRetries { return } _, err = icmpConn6.WriteTo(data, destAddr) if err != nil { retries++ // introduce a small delay to allow the network interface to flush the queue time.Sleep(time.Duration(DeadlineSec) * time.Millisecond) goto send } } naabu-2.3.1/v2/pkg/scan/option.go000066400000000000000000000006201461716101700165000ustar00rootroot00000000000000package scan import ( "time" "github.com/projectdiscovery/naabu/v2/pkg/result" ) // Options of the scan type Options struct { Timeout time.Duration Retries int Rate int PortThreshold int ExcludeCdn bool OutputCdn bool ExcludedIps []string Proxy string ProxyAuth string Stream bool OnReceive result.ResultFn ScanType string } naabu-2.3.1/v2/pkg/scan/ping.go000066400000000000000000000065211461716101700161330ustar00rootroot00000000000000package scan import ( "errors" "net" "os" "time" "golang.org/x/net/icmp" "golang.org/x/net/ipv4" ) // Some constants const ( DeadlineSec = 10 ProtocolICMP = 1 ProtocolIPv6ICMP = 58 ) // PingResult contains the results for the Ping request type PingResult struct { Hosts []Ping } // Ping contains the results for ping on a single host type Ping struct { Type PingResultType Latency time.Duration Error error Host string } // PingResultType contains the type of result for ping request on an address type PingResultType int // Type of ping responses const ( HostInactive PingResultType = iota HostActive ) // PingHosts pings the addresses given and returns the latencies of each host // If the address returns an error, that address is marked as unusable. func PingHosts(addresses []string) (*PingResult, error) { // Start listening for icmp replies c, err := icmp.ListenPacket("ip4:icmp", "0.0.0.0") if err != nil { return nil, err } defer c.Close() results := &PingResult{Hosts: []Ping{}} var sequence int for _, addr := range addresses { // Resolve any DNS (if used) and get the real IP of the target dst, err := net.ResolveIPAddr("ip4", addr) if err != nil { results.Hosts = append(results.Hosts, Ping{Type: HostInactive, Error: err, Host: addr}) continue } sequence++ // Make a new ICMP message m := icmp.Message{ Type: ipv4.ICMPTypeEcho, Code: 0, Body: &icmp.Echo{ ID: os.Getpid() & 0xffff, Seq: sequence, Data: []byte(""), }, } data, err := m.Marshal(nil) if err != nil { results.Hosts = append(results.Hosts, Ping{Type: HostInactive, Error: err, Host: addr}) continue } // Send the packet start := time.Now() _, err = c.WriteTo(data, dst) if err != nil { results.Hosts = append(results.Hosts, Ping{Type: HostInactive, Error: err, Host: addr}) continue } reply := make([]byte, 1500) err = c.SetReadDeadline(time.Now().Add(DeadlineSec * time.Second)) if err != nil { results.Hosts = append(results.Hosts, Ping{Type: HostInactive, Error: err, Host: addr}) continue } n, _, err := c.ReadFrom(reply) if err != nil { results.Hosts = append(results.Hosts, Ping{Type: HostInactive, Error: err, Host: addr}) continue } duration := time.Since(start) rm, err := icmp.ParseMessage(ProtocolICMP, reply[:n]) if err != nil { results.Hosts = append(results.Hosts, Ping{Type: HostInactive, Error: err, Host: addr}) continue } switch rm.Type { case ipv4.ICMPTypeEchoReply: results.Hosts = append(results.Hosts, Ping{Type: HostActive, Latency: duration, Host: addr}) default: results.Hosts = append(results.Hosts, Ping{Type: HostInactive, Error: errors.New("no reply found for ping probe"), Host: addr}) continue } } return results, nil } // GetFastestHost gets the fastest host from the ping responses func (p *PingResult) GetFastestHost() (Ping, error) { var ping Ping // If the latency of the current host is less than the // host selected and host is active, use the host that has least latency. for _, host := range p.Hosts { if (host.Latency < ping.Latency || ping.Latency == 0) && host.Type == HostActive { ping.Type = HostActive ping.Latency = host.Latency ping.Host = host.Host } } if ping.Type != HostActive { return ping, errors.New("no active host found for target") } return ping, nil } naabu-2.3.1/v2/pkg/scan/ping_test.go000066400000000000000000000014371461716101700171730ustar00rootroot00000000000000package scan import ( "os" "testing" "github.com/stretchr/testify/assert" ) func TestPingHosts(t *testing.T) { if os.Getuid() == 0 { tests := []struct { args string want bool wantErr bool }{ {"127.0.0.1", true, false}, {"localhost", true, false}, {"aaaaa", false, true}, } for _, tt := range tests { t.Run(tt.args, func(t *testing.T) { pingResults, err := PingHosts([]string{tt.args}) if tt.wantErr { assert.NotNil(t, err) } else { assert.Nil(t, err) } if tt.want { assert.NotEmpty(t, pingResults) fastest, err := pingResults.GetFastestHost() assert.Nil(t, err) assert.NotEmpty(t, pingResults.Hosts) assert.NotEmpty(t, fastest.Host) } else { assert.Empty(t, pingResults) } }) } } } naabu-2.3.1/v2/pkg/scan/scan.go000066400000000000000000000244461461716101700161300ustar00rootroot00000000000000package scan import ( "context" "errors" "fmt" "io" "net" "os" "strings" "sync" "time" "github.com/projectdiscovery/cdncheck" "github.com/projectdiscovery/gologger" "github.com/projectdiscovery/ipranger" "github.com/projectdiscovery/naabu/v2/pkg/port" "github.com/projectdiscovery/naabu/v2/pkg/protocol" "github.com/projectdiscovery/naabu/v2/pkg/result" "github.com/projectdiscovery/networkpolicy" "golang.org/x/net/proxy" ) // State determines the internal scan state type State int const ( maxRetries = 10 sendDelayMsec = 10 chanSize = 1000 //nolint packetSendSize = 2500 //nolint snaplen = 65536 //nolint readtimeout = 1500 //nolint ) const ( Init State = iota HostDiscovery Scan Done Guard ) type Phase struct { sync.RWMutex State } func (phase *Phase) Is(state State) bool { phase.RLock() defer phase.RUnlock() return phase.State == state } func (phase *Phase) Set(state State) { phase.Lock() defer phase.Unlock() phase.State = state } // PkgFlag represent the TCP packet flag type PkgFlag int const ( Syn PkgFlag = iota Ack IcmpEchoRequest IcmpTimestampRequest IcmpAddressMaskRequest Arp Ndp ) type Scanner struct { retries int rate int portThreshold int timeout time.Duration proxyDialer proxy.Dialer Ports []*port.Port IPRanger *ipranger.IPRanger HostDiscoveryResults *result.Result ScanResults *result.Result NetworkInterface *net.Interface cdn *cdncheck.Client tcpsequencer *TCPSequencer stream bool ListenHandler *ListenHandler OnReceive result.ResultFn } // PkgSend is a TCP package type PkgSend struct { ListenHandler *ListenHandler ip string port *port.Port flag PkgFlag SourceIP string } // PkgResult contains the results of sending TCP packages type PkgResult struct { ipv4 string ipv6 string port *port.Port } var ( pingIcmpEchoRequestCallback func(ip string, timeout time.Duration) bool //nolint pingIcmpTimestampRequestCallback func(ip string, timeout time.Duration) bool //nolint ) // NewScanner creates a new full port scanner that scans all ports using SYN packets. func NewScanner(options *Options) (*Scanner, error) { iprang, err := ipranger.New() if err != nil { return nil, err } var nPolicyOptions networkpolicy.Options nPolicyOptions.DenyList = append(nPolicyOptions.DenyList, options.ExcludedIps...) nPolicy, err := networkpolicy.New(nPolicyOptions) if err != nil { return nil, err } iprang.Np = nPolicy scanner := &Scanner{ timeout: options.Timeout, retries: options.Retries, rate: options.Rate, portThreshold: options.PortThreshold, tcpsequencer: NewTCPSequencer(), IPRanger: iprang, OnReceive: options.OnReceive, } scanner.HostDiscoveryResults = result.NewResult() scanner.ScanResults = result.NewResult() if options.ExcludeCdn || options.OutputCdn { scanner.cdn = cdncheck.New() } var auth *proxy.Auth = nil if options.ProxyAuth != "" && strings.Contains(options.ProxyAuth, ":") { credentials := strings.SplitN(options.ProxyAuth, ":", 2) var user, password string user = credentials[0] if len(credentials) == 2 { password = credentials[1] } auth = &proxy.Auth{User: user, Password: password} } if options.Proxy != "" { proxyDialer, err := proxy.SOCKS5("tcp", options.Proxy, auth, &net.Dialer{Timeout: options.Timeout}) if err != nil { return nil, err } scanner.proxyDialer = proxyDialer } scanner.stream = options.Stream acquire: if handler, err := Acquire(options); err != nil { // automatically fallback to connect scan if err != nil && options.ScanType == "s" { gologger.Info().Msgf("syn scan is not possible, falling back to connect scan") options.ScanType = "c" goto acquire } return scanner, err } else { scanner.ListenHandler = handler } return scanner, err } // Close the scanner and terminate all workers func (s *Scanner) Close() { s.ListenHandler.Busy = false s.ListenHandler = nil } // StartWorkers of the scanner func (s *Scanner) StartWorkers(ctx context.Context) { go s.ICMPResultWorker(ctx) go s.TCPResultWorker(ctx) go s.UDPResultWorker(ctx) } // EnqueueICMP outgoing ICMP packets func (s *Scanner) EnqueueICMP(ip string, pkgtype PkgFlag) { icmpPacketSend <- &PkgSend{ ListenHandler: s.ListenHandler, ip: ip, flag: pkgtype, } } // EnqueueEthernet outgoing Ethernet packets func (s *Scanner) EnqueueEthernet(ip string, pkgtype PkgFlag) { ethernetPacketSend <- &PkgSend{ ListenHandler: s.ListenHandler, ip: ip, flag: pkgtype, } } // EnqueueTCP outgoing TCP packets func (s *Scanner) EnqueueTCP(ip string, pkgtype PkgFlag, ports ...*port.Port) { for _, port := range ports { transportPacketSend <- &PkgSend{ ListenHandler: s.ListenHandler, ip: ip, port: port, flag: pkgtype, } } } // EnqueueTCP outgoing TCP packets func (s *Scanner) EnqueueUDP(ip string, ports ...*port.Port) { for _, port := range ports { transportPacketSend <- &PkgSend{ ListenHandler: s.ListenHandler, ip: ip, port: port, } } } // ICMPResultWorker handles ICMP responses (used only during probes) func (s *Scanner) ICMPResultWorker(ctx context.Context) { for { select { case <-ctx.Done(): return case ip := <-s.ListenHandler.HostDiscoveryChan: if s.ListenHandler.Phase.Is(HostDiscovery) { gologger.Debug().Msgf("Received ICMP response from %s\n", ip.ipv4) if ip.ipv4 != "" { s.HostDiscoveryResults.AddIp(ip.ipv4) } if ip.ipv6 != "" { s.HostDiscoveryResults.AddIp(ip.ipv6) } } } } } // TCPResultWorker handles probes and scan results func (s *Scanner) TCPResultWorker(ctx context.Context) { for { select { case <-ctx.Done(): return case ip := <-s.ListenHandler.TcpChan: srcIP4WithPort := net.JoinHostPort(ip.ipv4, ip.port.String()) srcIP6WithPort := net.JoinHostPort(ip.ipv6, ip.port.String()) isIPInRange := s.IPRanger.ContainsAny(srcIP4WithPort, srcIP6WithPort, ip.ipv4, ip.ipv6) if !isIPInRange { gologger.Debug().Msgf("Discarding Transport packet from non target ips: ip4=%s ip6=%s\n", ip.ipv4, ip.ipv6) } if s.OnReceive != nil { singlePort := []*port.Port{ip.port} if ip.ipv4 != "" { s.OnReceive(&result.HostResult{IP: ip.ipv4, Ports: singlePort}) } if ip.ipv6 != "" { s.OnReceive(&result.HostResult{IP: ip.ipv6, Ports: singlePort}) } } if s.ListenHandler.Phase.Is(HostDiscovery) { gologger.Debug().Msgf("Received Transport (TCP|UDP) probe response from ipv4:%s ipv6:%s port:%d\n", ip.ipv4, ip.ipv6, ip.port.Port) if ip.ipv4 != "" { s.HostDiscoveryResults.AddIp(ip.ipv4) } if ip.ipv6 != "" { s.HostDiscoveryResults.AddIp(ip.ipv6) } } else if s.ListenHandler.Phase.Is(Scan) || s.stream { gologger.Debug().Msgf("Received Transport (TCP) scan response from ipv4:%s ipv6:%s port:%d\n", ip.ipv4, ip.ipv6, ip.port.Port) if ip.ipv4 != "" { s.ScanResults.AddPort(ip.ipv4, ip.port) } if ip.ipv6 != "" { s.ScanResults.AddPort(ip.ipv6, ip.port) } } } } } // UDPResultWorker handles probes and scan results func (s *Scanner) UDPResultWorker(ctx context.Context) { for { select { case <-ctx.Done(): return case ip := <-s.ListenHandler.UdpChan: if s.ListenHandler.Phase.Is(HostDiscovery) { gologger.Debug().Msgf("Received UDP probe response from ipv4:%s ipv6:%s port:%d\n", ip.ipv4, ip.ipv6, ip.port.Port) if ip.ipv4 != "" { s.HostDiscoveryResults.AddIp(ip.ipv4) } if ip.ipv6 != "" { s.HostDiscoveryResults.AddIp(ip.ipv6) } } else if s.ListenHandler.Phase.Is(Scan) || s.stream { gologger.Debug().Msgf("Received Transport (UDP) scan response from from ipv4:%s ipv6:%s port:%d\n", ip.ipv4, ip.ipv6, ip.port.Port) if ip.ipv4 != "" { s.ScanResults.AddPort(ip.ipv4, ip.port) } if ip.ipv6 != "" { s.ScanResults.AddPort(ip.ipv6, ip.port) } } } } } // ScanSyn a target ip func (s *Scanner) ScanSyn(ip string) { for _, port := range s.Ports { s.EnqueueTCP(ip, Syn, port) } } // GetInterfaceFromIP gets the name of the network interface from local ip address func GetInterfaceFromIP(ip net.IP) (*net.Interface, error) { address := ip.String() interfaces, err := net.Interfaces() if err != nil { return nil, err } for _, i := range interfaces { byNameInterface, err := net.InterfaceByName(i.Name) if err != nil { return nil, err } addresses, err := byNameInterface.Addrs() if err != nil { return nil, err } for _, v := range addresses { // Check if the IP for the current interface is our // source IP. If yes, return the interface if strings.HasPrefix(v.String(), address+"/") { return byNameInterface, nil } } } return nil, fmt.Errorf("no interface found for ip %s", address) } // ConnectPort a single host and port func (s *Scanner) ConnectPort(host string, p *port.Port, timeout time.Duration) (bool, error) { hostport := net.JoinHostPort(host, fmt.Sprint(p.Port)) var ( err error conn net.Conn ) if s.proxyDialer != nil { ctx, cancel := context.WithTimeout(context.Background(), timeout) defer cancel() proxyDialer, ok := s.proxyDialer.(proxy.ContextDialer) if !ok { return false, errors.New("invalid proxy dialer") } conn, err = proxyDialer.DialContext(ctx, p.Protocol.String(), hostport) if err != nil { return false, err } } else { netDialer := net.Dialer{ Timeout: timeout, } if s.ListenHandler.SourceIp4 != nil { netDialer.LocalAddr = &net.TCPAddr{IP: s.ListenHandler.SourceIp4} } else if s.ListenHandler.SourceIP6 != nil { netDialer.LocalAddr = &net.TCPAddr{IP: s.ListenHandler.SourceIP6} } conn, err = netDialer.Dial(p.Protocol.String(), hostport) } if err != nil { return false, err } defer conn.Close() // udp needs data probe switch p.Protocol { case protocol.UDP: if err := conn.SetWriteDeadline(time.Now().Add(timeout)); err != nil { return false, err } if _, err := conn.Write(nil); err != nil { return false, err } if err := conn.SetReadDeadline(time.Now().Add(timeout)); err != nil { return false, err } n, err := io.Copy(io.Discard, conn) // ignore timeout errors if err != nil && !os.IsTimeout(err) { return false, err } return n > 0, nil } return true, err } naabu-2.3.1/v2/pkg/scan/scan_common.go000066400000000000000000000040021461716101700174620ustar00rootroot00000000000000package scan import ( "errors" "net" "github.com/projectdiscovery/gologger" "github.com/projectdiscovery/naabu/v2/pkg/privileges" "github.com/projectdiscovery/naabu/v2/pkg/routing" "golang.org/x/net/icmp" ) const ( IPv4 = "4" IPv6 = "6" ) var ( ListenHandlers []*ListenHandler NetworkInterface string networkInterface *net.Interface transportPacketSend, icmpPacketSend, ethernetPacketSend chan *PkgSend icmpConn4, icmpConn6 *icmp.PacketConn PkgRouter routing.Router ArpRequestAsync func(ip string) InitScanner func(s *Scanner) error NumberOfHandlers = 1 tcpsequencer = NewTCPSequencer() ) type ListenHandler struct { Busy bool Phase *Phase SourceHW net.HardwareAddr SourceIp4 net.IP SourceIP6 net.IP Port int TcpConn4, UdpConn4, TcpConn6, UdpConn6 *net.IPConn TcpChan, UdpChan, HostDiscoveryChan chan *PkgResult } func NewListenHandler() *ListenHandler { return &ListenHandler{Phase: &Phase{}} } func Acquire(options *Options) (*ListenHandler, error) { // always grant to unprivileged scans or connect scan if PkgRouter == nil || !privileges.IsPrivileged || options.ScanType == "c" { return NewListenHandler(), nil } for _, listenHandler := range ListenHandlers { if !listenHandler.Busy { listenHandler.Phase = &Phase{} listenHandler.Busy = true return listenHandler, nil } } return nil, errors.New("no free handlers") } func (l *ListenHandler) Release() { l.Busy = false l.Phase = nil } func init() { if r, err := routing.New(); err != nil { gologger.Error().Msgf("could not initialize router: %s\n", err) } else { PkgRouter = r } } func ToString(ip net.IP) string { if len(ip) == 0 { return "" } return ip.String() } naabu-2.3.1/v2/pkg/scan/scan_unix.go000066400000000000000000000604731461716101700171730ustar00rootroot00000000000000//go:build linux || darwin package scan import ( "bytes" "errors" "fmt" "io" "net" "strings" "sync" "time" "github.com/google/gopacket" "github.com/google/gopacket/layers" "github.com/google/gopacket/pcap" "github.com/projectdiscovery/freeport" "github.com/projectdiscovery/gologger" "github.com/projectdiscovery/naabu/v2/pkg/port" "github.com/projectdiscovery/naabu/v2/pkg/privileges" "github.com/projectdiscovery/naabu/v2/pkg/protocol" "github.com/projectdiscovery/naabu/v2/pkg/routing" iputil "github.com/projectdiscovery/utils/ip" "golang.org/x/net/icmp" "golang.org/x/net/ipv4" "golang.org/x/net/ipv6" ) var ( handlers *Handlers ) // Handlers contains the list of pcap handlers type Handlers struct { InterfaceHandle map[string]*pcap.Handle TransportActive []*pcap.Handle LoopbackHandlers []*pcap.Handle TransportInactive []*pcap.InactiveHandle EthernetActive []*pcap.Handle EthernetInactive []*pcap.InactiveHandle } func init() { if PkgRouter == nil || !privileges.IsPrivileged { return } transportPacketSend = make(chan *PkgSend, packetSendSize) var err error icmpConn4, err = icmp.ListenPacket("ip4:icmp", "0.0.0.0") if err != nil { panic(err) } icmpConn6, err = icmp.ListenPacket("ip6:icmp", "::") if err != nil { gologger.Error().Msgf("could not setup ip6:icmp: %s", err) } icmpPacketSend = make(chan *PkgSend, packetSendSize) ethernetPacketSend = make(chan *PkgSend, packetSendSize) // pre-reserve up to 10 ports for i := 0; i < NumberOfHandlers; i++ { listenHandler := NewListenHandler() if port, err := freeport.GetFreeTCPPort(""); err != nil { gologger.Error().Msgf("could not setup get free port: %s", err) return } else { listenHandler.Port = port.Port } listenHandler.TcpChan = make(chan *PkgResult, chanSize) listenHandler.UdpChan = make(chan *PkgResult, chanSize) listenHandler.HostDiscoveryChan = make(chan *PkgResult, chanSize) var err error listenHandler.TcpConn4, err = net.ListenIP("ip4:tcp", &net.IPAddr{IP: net.ParseIP(fmt.Sprintf("0.0.0.0:%d", listenHandler.Port))}) if err != nil { gologger.Error().Msgf("could not setup ip4:tcp: %s", err) return } listenHandler.UdpConn4, err = net.ListenIP("ip4:udp", &net.IPAddr{IP: net.ParseIP(fmt.Sprintf("0.0.0.0:%d", listenHandler.Port))}) if err != nil { gologger.Error().Msgf("could not setup ip4:udp: %s", err) return } listenHandler.TcpConn6, err = net.ListenIP("ip6:tcp", &net.IPAddr{IP: net.ParseIP(fmt.Sprintf(":::%d", listenHandler.Port))}) if err != nil { gologger.Error().Msgf("could not setup ip6:tcp: %s\n", err) } listenHandler.UdpConn6, err = net.ListenIP("ip6:udp", &net.IPAddr{IP: net.ParseIP(fmt.Sprintf(":::%d", listenHandler.Port))}) if err != nil { gologger.Error().Msgf("could not setup ip6:udp: %s\n", err) } go listenHandler.ICMPReadWorker4() go listenHandler.ICMPReadWorker6() go listenHandler.TcpReadWorker4() go listenHandler.TcpReadWorker6() go listenHandler.UdpReadWorker4() go listenHandler.UdpReadWorker6() ListenHandlers = append(ListenHandlers, listenHandler) } handlers = &Handlers{ InterfaceHandle: make(map[string]*pcap.Handle), } if err := SetupHandlers(); err != nil { gologger.Error().Msgf("could not setup handlers: %s\n", err) return } go TransportReadWorker() go TransportWriteWorker() go ICMPWriteWorker() } // ICMPWriteWorker writes packet to the network layer func ICMPWriteWorker() { for pkg := range icmpPacketSend { switch { case pkg.flag == IcmpEchoRequest: PingIcmpEchoRequestAsync(pkg.ip) case pkg.flag == IcmpTimestampRequest: PingIcmpTimestampRequestAsync(pkg.ip) case pkg.flag == IcmpAddressMaskRequest: PingIcmpAddressMaskRequestAsync(pkg.ip) case pkg.flag == Ndp: PingNdpRequestAsync(pkg.ip) } } } // EthernetWriteWorker writes packet to the network layer func EthernetWriteWorker() { for pkg := range ethernetPacketSend { switch { case pkg.flag == Arp: ArpRequestAsync(pkg.ip) } } } // TCPWriteWorker that sends out TCP|UDP packets func TransportWriteWorker() { for pkg := range transportPacketSend { SendAsyncPkg(pkg.ListenHandler, pkg.ip, pkg.port, pkg.flag) } } // SendAsyncPkg sends a single packet to a port func SendAsyncPkg(listenHandler *ListenHandler, ip string, p *port.Port, pkgFlag PkgFlag) { isIP4 := iputil.IsIPv4(ip) isIP6 := iputil.IsIPv6(ip) isTCP := p.Protocol == protocol.TCP isUDP := p.Protocol == protocol.UDP switch { case isIP4 && isTCP: sendAsyncTCP4(listenHandler, ip, p, pkgFlag) case isIP4 && isUDP: sendAsyncUDP4(listenHandler, ip, p, pkgFlag) case isIP6 && isTCP: sendAsyncTCP6(listenHandler, ip, p, pkgFlag) case isIP6 && isUDP: sendAsyncUDP6(listenHandler, ip, p, pkgFlag) } } func sendAsyncTCP4(listenHandler *ListenHandler, ip string, p *port.Port, pkgFlag PkgFlag) { // Construct all the network layers we need. var eth layers.Ethernet ip4 := layers.IPv4{ DstIP: net.ParseIP(ip), Version: 4, TTL: 255, Protocol: layers.IPProtocolTCP, } hasSourceIp := listenHandler.SourceIp4 != nil var iface *net.Interface if hasSourceIp { itf, gateway, _, err := PkgRouter.RouteWithSrc(listenHandler.SourceHW, listenHandler.SourceIp4, ip4.DstIP) if err != nil { gologger.Debug().Msgf("could not find route to host %s:%d: %s\n", ip, p.Port, err) return } gatewayMac, err := routing.GetGatewayMac(gateway.String()) if err != nil { gologger.Debug().Msgf("could not find gateway MAC %s:%d: %s\n", ip, p.Port, err) return } eth = layers.Ethernet{ EthernetType: layers.EthernetTypeIPv4, SrcMAC: listenHandler.SourceHW, DstMAC: gatewayMac, } ip4.SrcIP = listenHandler.SourceIp4 iface = itf } else { _, _, sourceIP, err := PkgRouter.Route(ip4.DstIP) if err != nil { gologger.Debug().Msgf("could not find route to host %s:%d: %s\n", ip, p.Port, err) return } else if sourceIP == nil { gologger.Debug().Msgf("could not find correct source ipv4 for %s:%d\n", ip, p.Port) return } ip4.SrcIP = sourceIP } tcpOption := layers.TCPOption{ OptionType: layers.TCPOptionKindMSS, OptionLength: 4, OptionData: []byte{0x05, 0xB4}, } tcp := layers.TCP{ SrcPort: layers.TCPPort(listenHandler.Port), DstPort: layers.TCPPort(p.Port), Window: 1024, Seq: tcpsequencer.Next(), Options: []layers.TCPOption{tcpOption}, } if pkgFlag == Syn { tcp.SYN = true } else if pkgFlag == Ack { tcp.ACK = true } err := tcp.SetNetworkLayerForChecksum(&ip4) if err != nil { gologger.Debug().Msgf("Can not set network layer for %s:%d port: %s\n", ip, p.Port, err) } if hasSourceIp { err = sendWithHandler(ip, iface, ð, &ip4, &tcp) } else { err = sendWithConn(ip, listenHandler.TcpConn4, &tcp) } if err != nil { gologger.Debug().Msgf("Can not send packet to %s:%d port: %s\n", ip, p.Port, err) } } func sendAsyncUDP4(listenHandler *ListenHandler, ip string, p *port.Port, pkgFlag PkgFlag) { // Construct all the network layers we need. ip4 := layers.IPv4{ DstIP: net.ParseIP(ip), Version: 4, TTL: 255, Protocol: layers.IPProtocolUDP, } _, _, sourceIP, err := PkgRouter.Route(ip4.DstIP) if err != nil { gologger.Debug().Msgf("could not find route to host %s:%d: %s\n", ip, p.Port, err) return } else if sourceIP == nil { gologger.Debug().Msgf("could not find correct source ipv4 for %s:%d\n", ip, p.Port) return } if listenHandler.SourceIp4 != nil { ip4.SrcIP = listenHandler.SourceIp4 } else { ip4.SrcIP = sourceIP } udp := layers.UDP{ SrcPort: layers.UDPPort(listenHandler.Port), DstPort: layers.UDPPort(p.Port), } err = udp.SetNetworkLayerForChecksum(&ip4) if err != nil { gologger.Debug().Msgf("Can not set network layer for %s:%d port: %s\n", ip, p.Port, err) } else { err = sendWithConn(ip, listenHandler.UdpConn4, &udp) if err != nil { gologger.Debug().Msgf("Can not send packet to %s:%d port: %s\n", ip, p.Port, err) } } } func sendAsyncTCP6(listenHandler *ListenHandler, ip string, p *port.Port, pkgFlag PkgFlag) { // Construct all the network layers we need. ip6 := layers.IPv6{ DstIP: net.ParseIP(ip), Version: 6, HopLimit: 255, NextHeader: layers.IPProtocolTCP, } _, _, sourceIP, err := PkgRouter.Route(ip6.DstIP) if err != nil { gologger.Debug().Msgf("could not find route to host %s:%d: %s\n", ip, p.Port, err) return } else if sourceIP == nil { gologger.Debug().Msgf("could not find correct source ipv6 for %s:%d\n", ip, p.Port) return } tcpOption := layers.TCPOption{ OptionType: layers.TCPOptionKindMSS, OptionLength: 4, OptionData: []byte{0x05, 0xB4}, } tcp := layers.TCP{ SrcPort: layers.TCPPort(listenHandler.Port), DstPort: layers.TCPPort(p.Port), Window: 1024, Seq: tcpsequencer.Next(), Options: []layers.TCPOption{tcpOption}, } if pkgFlag == Syn { tcp.SYN = true } else if pkgFlag == Ack { tcp.ACK = true } err = tcp.SetNetworkLayerForChecksum(&ip6) if err != nil { gologger.Debug().Msgf("Can not set network layer for %s:%d port: %s\n", ip, p.Port, err) } else { err = sendWithConn(ip, listenHandler.TcpConn6, &tcp) if err != nil { gologger.Debug().Msgf("Can not send packet to %s:%d port: %s\n", ip, p.Port, err) } } } func sendAsyncUDP6(listenHandler *ListenHandler, ip string, p *port.Port, pkgFlag PkgFlag) { // Construct all the network layers we need. ip6 := layers.IPv6{ DstIP: net.ParseIP(ip), Version: 6, HopLimit: 255, NextHeader: layers.IPProtocolUDP, } _, _, sourceIP, err := PkgRouter.Route(ip6.DstIP) if err != nil { gologger.Debug().Msgf("could not find route to host %s:%d: %s\n", ip, p.Port, err) return } else if sourceIP == nil { gologger.Debug().Msgf("could not find correct source ipv6 for %s:%d\n", ip, p.Port) return } if listenHandler.SourceIP6 != nil { ip6.SrcIP = listenHandler.SourceIP6 } else { ip6.SrcIP = sourceIP } udp := layers.UDP{ SrcPort: layers.UDPPort(listenHandler.Port), DstPort: layers.UDPPort(p.Port), } err = udp.SetNetworkLayerForChecksum(&ip6) if err != nil { gologger.Debug().Msgf("Can not set network layer for %s:%d port: %s\n", ip, p.Port, err) } else { err = sendWithConn(ip, listenHandler.UdpConn6, &udp) if err != nil { gologger.Debug().Msgf("Can not send packet to %s:%d port: %s\n", ip, p.Port, err) } } } // ICMPReadWorker4 reads packets from the network layer func (l *ListenHandler) ICMPReadWorker4() { data := make([]byte, 1500) for { n, addr, err := icmpConn4.ReadFrom(data) if err != nil { continue } rm, err := icmp.ParseMessage(ProtocolICMP, data[:n]) if err != nil { continue } switch rm.Type { case ipv4.ICMPTypeEchoReply, ipv4.ICMPTypeTimestampReply: l.HostDiscoveryChan <- &PkgResult{ipv4: addr.String()} } } } // ICMPReadWorker6 reads packets from the network layer func (l *ListenHandler) ICMPReadWorker6() { if icmpConn6 == nil { return } data := make([]byte, 1500) for { n, addr, err := icmpConn6.ReadFrom(data) if err != nil { continue } rm, err := icmp.ParseMessage(ProtocolIPv6ICMP, data[:n]) if err != nil { continue } switch rm.Type { case ipv6.ICMPTypeEchoReply: ip := addr.String() // check if it has [host]:port if ipSplit, _, err := net.SplitHostPort(ip); err == nil { ip = ipSplit } // drop zone if idx := strings.Index(ip, "%"); idx > 0 { ip = ip[:idx] } l.HostDiscoveryChan <- &PkgResult{ipv6: ip} } } } var defaultSerializeOptions = gopacket.SerializeOptions{ FixLengths: true, ComputeChecksums: true, } // send sends the given layers as a single packet on the network. func sendWithConn(destIP string, conn net.PacketConn, l ...gopacket.SerializableLayer) error { buf := gopacket.NewSerializeBuffer() if err := gopacket.SerializeLayers(buf, defaultSerializeOptions, l...); err != nil { return err } var ( retries int err error ) send: if retries >= maxRetries { return err } _, err = conn.WriteTo(buf.Bytes(), &net.IPAddr{IP: net.ParseIP(destIP)}) if err != nil { retries++ // introduce a small delay to allow the network interface to flush the queue time.Sleep(time.Duration(sendDelayMsec) * time.Millisecond) goto send } return err } func sendWithHandler(destIP string, iface *net.Interface, l ...gopacket.SerializableLayer) error { buf := gopacket.NewSerializeBuffer() if err := gopacket.SerializeLayers(buf, defaultSerializeOptions, l...); err != nil { return err } var ( retries int err error ) // find the correct handler handler, ok := handlers.InterfaceHandle[iface.Name] if !ok { return errors.New("could not find correct pcap handler") } send: if retries >= maxRetries { return err } err = handler.WritePacketData(buf.Bytes()) if err != nil { retries++ // introduce a small delay to allow the network interface to flush the queue time.Sleep(time.Duration(sendDelayMsec) * time.Millisecond) goto send } return err } func (l *ListenHandler) TcpReadWorker4() { data := make([]byte, 4096) for { _, _, _ = l.TcpConn4.ReadFrom(data) } } func (l *ListenHandler) TcpReadWorker6() { if l.TcpConn6 == nil { return } data := make([]byte, 4096) for { _, _, _ = l.TcpConn6.ReadFrom(data) } } func (l *ListenHandler) UdpReadWorker4() { data := make([]byte, 4096) for { _, _, _ = l.UdpConn4.ReadFrom(data) } } func (l *ListenHandler) UdpReadWorker6() { if l.UdpConn6 == nil { return } data := make([]byte, 4096) for { _, _, _ = l.UdpConn6.ReadFrom(data) } } // SetupHandlerUnix on unix OS func SetupHandlerUnix(interfaceName, bpfFilter string, protocols ...protocol.Protocol) error { for _, proto := range protocols { inactive, err := pcap.NewInactiveHandle(interfaceName) if err != nil { return err } err = inactive.SetSnapLen(snaplen) if err != nil { return err } readTimeout := time.Duration(readtimeout) * time.Millisecond if err = inactive.SetTimeout(readTimeout); err != nil { CleanupHandlersUnix() return err } err = inactive.SetImmediateMode(true) if err != nil { return err } switch proto { case protocol.TCP, protocol.UDP: handlers.TransportInactive = append(handlers.TransportInactive, inactive) case protocol.ARP: handlers.EthernetInactive = append(handlers.EthernetInactive, inactive) default: panic("protocol not supported") } handle, err := inactive.Activate() if err != nil { CleanupHandlersUnix() return err } // Strict BPF filter // + Destination port equals to sender socket source port err = handle.SetBPFFilter(bpfFilter) if err != nil { return err } iface, err := net.InterfaceByName(interfaceName) if err != nil { return err } switch proto { case protocol.TCP, protocol.UDP: if iface.Flags&net.FlagLoopback == net.FlagLoopback { handlers.LoopbackHandlers = append(handlers.LoopbackHandlers, handle) } else { handlers.TransportActive = append(handlers.TransportActive, handle) } handlers.InterfaceHandle[iface.Name] = handle case protocol.ARP: handlers.EthernetActive = append(handlers.EthernetActive, handle) default: panic("protocol not supported") } } return nil } func TransportReadWorker() { var wgread sync.WaitGroup transportReaderCallback := func(tcp layers.TCP, udp layers.UDP, srcIP4, srcIP6 string) { for _, listenHandler := range ListenHandlers { // We consider only incoming packets tcpPortMatches := tcp.DstPort == layers.TCPPort(listenHandler.Port) udpPortMatches := udp.DstPort == layers.UDPPort(listenHandler.Port) sourcePortMatches := tcpPortMatches || udpPortMatches switch { case !sourcePortMatches: gologger.Debug().Msgf("Discarding Transport packet from non target ips: ip4=%s ip6=%s tcp_dport=%d udp_dport=%d\n", srcIP4, srcIP6, tcp.DstPort, udp.DstPort) case listenHandler.Phase.Is(HostDiscovery): proto := protocol.TCP if udpPortMatches { proto = protocol.UDP } listenHandler.HostDiscoveryChan <- &PkgResult{ipv4: srcIP4, ipv6: srcIP6, port: &port.Port{Port: int(tcp.SrcPort), Protocol: proto}} case tcpPortMatches && tcp.SYN && tcp.ACK: listenHandler.TcpChan <- &PkgResult{ipv4: srcIP4, ipv6: srcIP6, port: &port.Port{Port: int(tcp.SrcPort), Protocol: protocol.TCP}} case udpPortMatches && udp.Length > 0: // needs a better matching of udp payloads listenHandler.UdpChan <- &PkgResult{ipv4: srcIP4, ipv6: srcIP6, port: &port.Port{Port: int(udp.SrcPort), Protocol: protocol.UDP}} } } } // In case of OSX, when we decode the data from 'loO' interface // always get [Ethernet] layer only. // with the help of data received from packetSource.Packets() we can // extract the high level layers like [IPv4, IPv6, TCP, UDP] loopBackScanCaseCallback := func(handler *pcap.Handle, wg *sync.WaitGroup) { defer wg.Done() packetSource := gopacket.NewPacketSource(handler, handler.LinkType()) for packet := range packetSource.Packets() { tcp := &layers.TCP{} udp := &layers.UDP{} for _, layerType := range packet.Layers() { ipLayer := packet.Layer(layers.LayerTypeIPv4) if ipLayer == nil { ipLayer = packet.Layer(layers.LayerTypeIPv6) if ipLayer == nil { continue } } var srcIP4, srcIP6 string if ipv4, ok := ipLayer.(*layers.IPv4); ok { srcIP4 = ToString(ipv4.SrcIP) } else if ipv6, ok := ipLayer.(*layers.IPv6); ok { srcIP6 = ToString(ipv6.SrcIP) } var ok bool tcpLayer := packet.Layer(layers.LayerTypeTCP) if tcpLayer != nil { tcp, ok = tcpLayer.(*layers.TCP) if !ok { continue } } udpLayer := packet.Layer(layers.LayerTypeUDP) if udpLayer != nil { udp, ok = udpLayer.(*layers.UDP) if !ok { continue } } if layerType.LayerType() == layers.LayerTypeTCP || layerType.LayerType() == layers.LayerTypeUDP { transportReaderCallback(*tcp, *udp, srcIP4, srcIP6) } } } } // Loopback Readers for _, handler := range handlers.LoopbackHandlers { wgread.Add(1) go loopBackScanCaseCallback(handler, &wgread) } // Transport Readers (TCP|UDP) for _, handler := range handlers.TransportActive { wgread.Add(1) go func(handler *pcap.Handle) { defer wgread.Done() var ( eth layers.Ethernet ip4 layers.IPv4 ip6 layers.IPv6 tcp layers.TCP udp layers.UDP ) // Interfaces with MAC (Physical + Virtualized) parser4Mac := gopacket.NewDecodingLayerParser(layers.LayerTypeEthernet, ð, &ip4, &tcp, &udp) parser6Mac := gopacket.NewDecodingLayerParser(layers.LayerTypeEthernet, ð, &ip6, &tcp, &udp) // Interfaces without MAC (TUN/TAP) parser4NoMac := gopacket.NewDecodingLayerParser(layers.LayerTypeIPv4, &ip4, &tcp, &udp) parser6NoMac := gopacket.NewDecodingLayerParser(layers.LayerTypeIPv6, &ip6, &tcp, &udp) var parsers []*gopacket.DecodingLayerParser parsers = append(parsers, parser4Mac, parser6Mac, parser4NoMac, parser6NoMac, ) decoded := []gopacket.LayerType{} for { data, _, err := handler.ReadPacketData() if err == io.EOF { break } else if err != nil { continue } for _, parser := range parsers { err := parser.DecodeLayers(data, &decoded) if err != nil { continue } for _, layerType := range decoded { if layerType == layers.LayerTypeTCP || layerType == layers.LayerTypeUDP { srcIP4 := ToString(ip4.SrcIP) srcIP6 := ToString(ip6.SrcIP) transportReaderCallback(tcp, udp, srcIP4, srcIP6) } } } } }(handler) } // Ethernet Readers for _, handler := range handlers.EthernetActive { wgread.Add(1) go func(handler *pcap.Handle) { defer wgread.Done() var ( eth layers.Ethernet arp layers.ARP ) parser4 := gopacket.NewDecodingLayerParser(layers.LayerTypeEthernet, ð, &arp) parser4.IgnoreUnsupported = true var parsers []*gopacket.DecodingLayerParser parsers = append(parsers, parser4) decoded := []gopacket.LayerType{} for { data, _, err := handler.ReadPacketData() if err == io.EOF { break } else if err != nil { continue } for _, parser := range parsers { err := parser.DecodeLayers(data, &decoded) if err != nil { continue } for _, layerType := range decoded { if layerType == layers.LayerTypeARP { // check if the packet was sent out isReply := arp.Operation == layers.ARPReply var sourceMacIsInterfaceMac bool if networkInterface != nil { sourceMacIsInterfaceMac = bytes.Equal([]byte(networkInterface.HardwareAddr), arp.SourceHwAddress) } isOutgoingPacket := !isReply || sourceMacIsInterfaceMac if isOutgoingPacket { continue } srcIP4 := net.IP(arp.SourceProtAddress) for _, listenHandler := range ListenHandlers { listenHandler.HostDiscoveryChan <- &PkgResult{ipv4: ToString(srcIP4)} } } } } } }(handler) } wgread.Wait() } // CleanupHandlers for all interfaces func CleanupHandlersUnix() { allActive := append(handlers.TransportActive, handlers.EthernetActive...) allActive = append(allActive, handlers.LoopbackHandlers...) for _, handler := range allActive { handler.Close() } allInactive := append(handlers.TransportInactive, handlers.EthernetInactive...) for _, inactiveHandler := range allInactive { inactiveHandler.CleanUp() } } func SetupHandlers() error { if NetworkInterface != "" { return SetupHandler(NetworkInterface) } // listen on all interfaces manually // unfortunately s.SetupHandler("any") causes ip4 to be ignored itfs, err := net.Interfaces() if err != nil { return err } for _, itf := range itfs { isInterfaceDown := itf.Flags&net.FlagUp == 0 if isInterfaceDown { continue } if err := SetupHandler(itf.Name); err != nil { gologger.Warning().Msgf("Error on interface %s: %s", itf.Name, err) } } return nil } func SetupHandler(interfaceName string) error { var portFilters []string for _, listenHandler := range ListenHandlers { portFilters = append(portFilters, fmt.Sprintf("dst port %d", listenHandler.Port)) } bpfFilter := fmt.Sprintf("(%s) and (tcp or udp)", strings.Join(portFilters, " or ")) err := SetupHandlerUnix(interfaceName, bpfFilter, protocol.TCP) if err != nil { return err } // arp filter should be improved with source mac // https://stackoverflow.com/questions/40196549/bpf-expression-to-capture-only-arp-reply-packets // (arp[6:2] = 2) and dst host host and ether dst mac bpfFilter = "arp" err = SetupHandlerUnix(interfaceName, bpfFilter, protocol.ARP) if err != nil { return err } return nil } // ACKPort sends an ACK packet to a port func ACKPort(listenHandler *ListenHandler, dstIP string, port int, timeout time.Duration) (bool, error) { conn, err := net.ListenPacket("ip4:tcp", "0.0.0.0") if err != nil { return false, err } defer conn.Close() rawPort, err := freeport.GetFreeTCPPort("") if err != nil { return false, err } // Construct all the network layers we need. ip4 := layers.IPv4{ DstIP: net.ParseIP(dstIP), Version: 4, TTL: 255, Protocol: layers.IPProtocolTCP, } _, _, sourceIP, err := PkgRouter.Route(ip4.DstIP) if err != nil { return false, err } if listenHandler.SourceIp4 != nil { ip4.SrcIP = listenHandler.SourceIp4 } else { ip4.SrcIP = sourceIP } tcpOption := layers.TCPOption{ OptionType: layers.TCPOptionKindMSS, OptionLength: 4, OptionData: []byte{0x12, 0x34}, } tcp := layers.TCP{ SrcPort: layers.TCPPort(rawPort.Port), DstPort: layers.TCPPort(port), ACK: true, Window: 1024, Seq: tcpsequencer.Next(), Options: []layers.TCPOption{tcpOption}, } err = tcp.SetNetworkLayerForChecksum(&ip4) if err != nil { return false, err } err = sendWithConn(dstIP, conn, &tcp) if err != nil { return false, err } data := make([]byte, 4096) for { n, addr, err := conn.ReadFrom(data) if err != nil { break } // not matching ip if addr.String() != dstIP { gologger.Debug().Msgf("Discarding TCP packet from non target ip %s for %s\n", dstIP, addr.String()) continue } packet := gopacket.NewPacket(data[:n], layers.LayerTypeTCP, gopacket.Default) if tcpLayer := packet.Layer(layers.LayerTypeTCP); tcpLayer != nil { tcp, ok := tcpLayer.(*layers.TCP) if !ok { continue } // We consider only incoming packets if tcp.DstPort != layers.TCPPort(rawPort.Port) { gologger.Debug().Msgf("Discarding TCP packet from %s:%d not matching %s:%d port\n", addr.String(), tcp.DstPort, dstIP, rawPort.Port) continue } else if tcp.RST { gologger.Debug().Msgf("Accepting RST packet from %s:%d\n", addr.String(), tcp.DstPort) return true, nil } } } return false, nil } naabu-2.3.1/v2/pkg/scan/scan_win.go000066400000000000000000000000411461716101700167660ustar00rootroot00000000000000//go:build windowz package scan naabu-2.3.1/v2/pkg/scan/tcpsequencer.go000066400000000000000000000014701461716101700176750ustar00rootroot00000000000000package scan import ( "math" "sync/atomic" ) // TCPSequencer generates linear TCP sequence numbers that wrap // around after reaching their maximum value. // // According to specs, this is the correct way to approach TCP sequence // number since linearity will be guaranteed by the wrapping around to initial 0. type TCPSequencer struct { current uint32 } // NewTCPSequencer creates a new linear tcp sequenc enumber generator func NewTCPSequencer() *TCPSequencer { // Start the sequence with math.MaxUint32, which will then wrap around // when incremented starting the sequence with 0 as desired. return &TCPSequencer{current: math.MaxUint32} } // Next returns the next number in the sequence of tcp sequence numbers func (t *TCPSequencer) Next() uint32 { value := atomic.AddUint32(&t.current, 1) return value } naabu-2.3.1/v2/pkg/scan/tcpsequencer_test.go000066400000000000000000000004541461716101700207350ustar00rootroot00000000000000package scan import ( "testing" "github.com/stretchr/testify/assert" ) func TestTCPSequencer(t *testing.T) { tcpSequencer := NewTCPSequencer() // tcp sequencer should be uint32 incremental for i := 0; i < 50000; i++ { actual := tcpSequencer.Next() assert.Equal(t, uint32(i), actual) } }